Edit tour

Windows Analysis Report
https://us-west-2.protection.sophos.com/?d=venmo.com&u=aHR0cHM6Ly92ZW5tby5jb20vc2lnbnVwL3N0YXJ0P2VtYWlsPW5vcmVwbHkxMSU0MHdxZXJkZmQub25taWNyb3NvZnQuY29tJmludml0ZV9pZD02NjJhNzViZTNjYWMxN2E3MGE5OTA0ZmEmbnI9MSZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9zb3VyY2U9cG51&p=m&i=NjI3Mjc4OTk0MGU3YTAxM2U2ZWIxMDY3&t=RTdyMWVwN0l

Overview

General Information

Sample URL:	https://us-west-2.protection.sophos.com/?d=venmo.com&u=aHR0cHM6Ly92ZW5tby5jb20vc2lnbnVwL3N0YXJ0P2VtYWlsPW5vcmVwbHkxMSU0MHdxZXJkZmQub25taWNyb3NvZnQuY29tJmludml0ZV9pZD02NjJhNzViZTNjYWMxN2E3MGE5OTA0ZmEmb
Analysis ID:	1432117
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Found iframes

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden URLs or javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5984 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2108 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 --field-trial-handle=2244,i,16407618657791368267,11392074485942432583,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6596 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://us-west-2.protection.sophos.com/?d=venmo.com&u=aHR0cHM6Ly92ZW5tby5jb20vc2lnbnVwL3N0YXJ0P2VtYWlsPW5vcmVwbHkxMSU0MHdxZXJkZmQub25taWNyb3NvZnQuY29tJmludml0ZV9pZD02NjJhNzViZTNjYWMxN2E3MGE5OTA0ZmEmbnI9MSZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9zb3VyY2U9cG51&p=m&i=NjI3Mjc4OTk0MGU3YTAxM2U2ZWIxMDY3&t=RTdyMWVwN0ltVWFjZ3cvWmVHNTRWVkd1STQwUzVVNzEveWYyR0FYYXVhMD0=&h=4ce9b067fcbf486e8f27561ce3d3058e&s=AVNPUEhUT0NFTkNSWVBUSVaS8c9jSpZcrH9uvMBTWALM8OUVCaCMDIwUwmubUWsN9g" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /v1/identify HTTP/1.1Host: identity.mparticle.comConnection: keep-aliveContent-Length: 320sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-mp-key: 40433222e815b743853a4bb6b7a86058Content-Type: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://account.venmo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://account.venmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 0Server: KestrelX-Origin-Name: 4PrgpUXX9K0sNAH1JImfyI--F_us1_originAccept-Ranges: bytesAge: 0Date: Fri, 26 Apr 2024 12:22:53 GMTVia: 1.1 varnishX-Served-By: cache-pdk-kfty2130093-PDKX-Cache: MISSX-Cache-Hits: 0X-Timer: S1714134174.789819,VS0,VE16X-Fastly-Trace-Id: 3169008308Strict-Transport-Security: max-age=900
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 26 Apr 2024 12:23:48 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeCF-Ray: 87a68bcd6cda7482-MIACF-Cache-Status: MISSVary: Accept-Encodingreferrer-policy: strict-origin-when-cross-originx-content-type-options: nosniffx-download-options: noopenx-frame-options: SAMEORIGINx-permitted-cross-domain-policies: noneX-Request-ID: 87a68bcd97237482-MIAx-runtime: 0.001020x-xss-protection: 1; mode=blockX-Zendesk-Zorg: yesReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XOdSnuPZXitBGwMmhaE6unQk1TT9gnQzJ2ZICGP9zq9p%2F7lEpcONmANtTPPimt6gYj1%2B7whHv2xq4uxMpgFIFRgpNzMVRxpvdgsTlbpoY0rPGJRIz6b3qk5vC2C4Av1u"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 1108Content-Type: text/htmlPaypal-Debug-Id: 1477dc7988500Traceparent: 00-00000000000000000001477dc7988500-c86a720e699b966c-01DC: ccg11-origin-www-1.paypal.comVia: 1.1 varnish, 1.1 varnishAccept-Ranges: bytesDate: Fri, 26 Apr 2024 12:23:49 GMTX-Served-By: cache-dfw-kdfw8210173-DFW, cache-gnv1820029-GNVX-Cache: MISS, MISSX-Cache-Hits: 0, 0X-Timer: S1714134229.332099,VS0,VE201Vary: Accept-Encoding, Accept-EncodingX-Content-Type-Options: nosniffCache-Control: no-cache, no-store, must-revalidate, proxy-revalidate, private, max-age=0, s-maxage=0ACCESS-CONTROL-ALLOW-ORIGIN: *ACCESS-CONTROL-ALLOW-METHODS: GETStrict-Transport-Security: max-age=31557600
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 1108Content-Type: text/htmlPaypal-Debug-Id: 1477dc7988500Traceparent: 00-00000000000000000001477dc7988500-c86a720e699b966c-01DC: ccg11-origin-www-1.paypal.comVia: 1.1 varnish, 1.1 varnishAccept-Ranges: bytesDate: Fri, 26 Apr 2024 12:23:52 GMTX-Served-By: cache-dfw-kdfw8210173-DFW, cache-pdk-kfty2130029-PDKX-Cache: HIT, MISSX-Cache-Hits: 1, 0X-Timer: S1714134233.658950,VS0,VE19Vary: Accept-Encoding, Accept-EncodingX-Content-Type-Options: nosniffCache-Control: no-cache, no-store, must-revalidate, proxy-revalidate, private, max-age=0, s-maxage=0ACCESS-CONTROL-ALLOW-ORIGIN: *ACCESS-CONTROL-ALLOW-METHODS: GETStrict-Transport-Security: max-age=31557600

Source: chromecache_264.2.dr	String found in binary or memory: http://bit.ly/2Lm3OLi
Source: chromecache_264.2.dr	String found in binary or memory: http://bit.ly/2N2ovOZ
Source: chromecache_264.2.dr	String found in binary or memory: http://bit.ly/2NJNt3N
Source: chromecache_264.2.dr	String found in binary or memory: http://davidwalsh.name/vendor-prefix
Source: chromecache_192.2.dr	String found in binary or memory: http://dbushell.com/
Source: chromecache_264.2.dr	String found in binary or memory: http://dev.apollodata.com/core/fragments.html#unique-names
Source: chromecache_264.2.dr	String found in binary or memory: http://docs.python.org/library/uuid.html
Source: chromecache_264.2.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-ecmascript-function-objects-call-thisargument-argume
Source: chromecache_264.2.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-object.keys)
Source: chromecache_264.2.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-object.prototype.tostring)
Source: chromecache_264.2.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-patterns).
Source: chromecache_264.2.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-properties-of-the-map-prototype-object)
Source: chromecache_264.2.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-samevaluezero)
Source: chromecache_264.2.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-template-literal-lexical-components).
Source: chromecache_264.2.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-tolength).
Source: chromecache_264.2.dr	String found in binary or memory: http://eev.ee/blog/2015/09/12/dark-corners-of-unicode/).
Source: chromecache_264.2.dr	String found in binary or memory: http://ejohn.org/blog/javascript-micro-templating/)
Source: chromecache_188.2.dr	String found in binary or memory: http://emailregex.com/
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: http://es5.github.io/#x15.9.1.1
Source: chromecache_264.2.dr	String found in binary or memory: http://fb.me/prop-types-in-prod
Source: chromecache_264.2.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_264.2.dr	String found in binary or memory: http://github.com/garycourt/murmurhash-js
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: http://help.venmo.com/contact
Source: chromecache_180.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_264.2.dr	String found in binary or memory: http://jsperf.com/array-join-vs-for
Source: chromecache_264.2.dr	String found in binary or memory: http://jsperf.com/element-style-object-access-vs-plain-object
Source: chromecache_258.2.dr	String found in binary or memory: http://omsetype.co/eula/
Source: chromecache_258.2.dr	String found in binary or memory: http://omsetype.co/eula/http://omsetype.co/eula/http://omsetype.co/eula/http://omsetype.co/eula/Athl
Source: chromecache_264.2.dr	String found in binary or memory: http://peter.michaux.ca/articles/lazy-function-definition-pattern)
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: http://reactcommunity.org/react-transition-group/transition#Transition-prop-appear)
Source: chromecache_264.2.dr	String found in binary or memory: http://requirejs.org/docs/errors.html#mismatch
Source: chromecache_264.2.dr	String found in binary or memory: http://ricostacruz.com/nprogress
Source: chromecache_264.2.dr	String found in binary or memory: http://sites.google.com/site/murmurhash/
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: http://stackoverflow.com/a/22747272/680742
Source: chromecache_264.2.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: chromecache_264.2.dr	String found in binary or memory: http://w3.org/TR/2012/WD-url-20120524/#collect-url-parameters
Source: chromecache_264.2.dr	String found in binary or memory: http://wiki.ecmascript.org/doku.php?id=harmony:egal).
Source: chromecache_264.2.dr	String found in binary or memory: http://wiki.whatwg.org/wiki/Crypto
Source: chromecache_264.2.dr	String found in binary or memory: http://wonko.com/post/html-escaping)
Source: chromecache_264.2.dr, chromecache_201.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_264.2.dr	String found in binary or memory: http://www.ecma-international.org/ecma-262/5.1/#sec-15.9.1.15
Source: chromecache_264.2.dr	String found in binary or memory: http://www.ecma-international.org/ecma-262/7.0/#sec-ecmascript-language-types)
Source: chromecache_264.2.dr	String found in binary or memory: http://www.ecma-international.org/ecma-262/7.0/#sec-function.prototype.apply).
Source: chromecache_264.2.dr	String found in binary or memory: http://www.ecma-international.org/ecma-262/7.0/#sec-regexp.prototype.tostring
Source: chromecache_264.2.dr	String found in binary or memory: http://www.ecma-international.org/ecma-262/7.0/#sec-tointeger).
Source: chromecache_264.2.dr	String found in binary or memory: http://www.html5rocks.com/en/tutorials/developertools/sourcemaps/#toc-sourceurl)
Source: chromecache_203.2.dr	String found in binary or memory: http://www.schick-toikka.com
Source: chromecache_203.2.dr	String found in binary or memory: http://www.schick-toikka.com/legal/
Source: chromecache_203.2.dr	String found in binary or memory: http://www.schick-toikka.comhttp://www.schick-toikka.comhttp://www.schick-toikka.comhttp://www.schic
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: http://www.unicode.org/reports/tr35/tr35-31/tr35-dates.html#Date_Format_Patterns
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: http://www.unicode.org/reports/tr35/tr35-31/tr35-dates.html#Date_Format_tokens
Source: chromecache_264.2.dr	String found in binary or memory: https://account.venmo.com
Source: chromecache_190.2.dr, chromecache_170.2.dr, chromecache_244.2.dr, chromecache_263.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_190.2.dr, chromecache_170.2.dr, chromecache_244.2.dr, chromecache_263.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jqueryui/1.13.2/jquery-ui.min.js
Source: chromecache_242.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_264.2.dr	String found in binary or memory: https://api.venmo.com/graphql
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://assets.zendesk.com/hc/assets/default_avatar.png
Source: chromecache_264.2.dr	String found in binary or memory: https://babeljs.io/docs/babel-plugin-transform-remove-console/
Source: chromecache_264.2.dr	String found in binary or memory: https://babeljs.io/docs/en/babel-plugin-transform-template-literals#loose
Source: chromecache_188.2.dr	String found in binary or memory: https://basarat.gitbooks.io/typescript/docs/types/discriminated-unions.html
Source: chromecache_264.2.dr	String found in binary or memory: https://blog.twitter.com/engineering/en_us/topics/infrastructure/2019/capping-image-fidelity-on-ultr
Source: chromecache_264.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=1185815
Source: chromecache_264.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=820541
Source: chromecache_264.2.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=2070)
Source: chromecache_264.2.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=3175#c4
Source: chromecache_264.2.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=90
Source: chromecache_264.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=156034
Source: chromecache_264.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=184604
Source: chromecache_264.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1429926
Source: chromecache_264.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1559377
Source: chromecache_264.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1736865#c2
Source: chromecache_264.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=559561.
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=695438).
Source: chromecache_264.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=878297
Source: chromecache_264.2.dr	String found in binary or memory: https://caniuse.com/#search=appearance
Source: chromecache_264.2.dr	String found in binary or memory: https://caniuse.com/#search=client%20hint
Source: chromecache_264.2.dr	String found in binary or memory: https://caniuse.com/#search=color-adjust
Source: chromecache_264.2.dr	String found in binary or memory: https://caniuse.com/#search=composedPath.
Source: chromecache_264.2.dr	String found in binary or memory: https://caniuse.com/#search=keyframes
Source: chromecache_264.2.dr	String found in binary or memory: https://caniuse.com/#search=mask
Source: chromecache_264.2.dr	String found in binary or memory: https://caniuse.com/#search=multicolumn
Source: chromecache_264.2.dr	String found in binary or memory: https://caniuse.com/#search=overscroll-behavior
Source: chromecache_264.2.dr	String found in binary or memory: https://caniuse.com/#search=scroll-snap
Source: chromecache_264.2.dr	String found in binary or memory: https://caniuse.com/#search=text-orientation
Source: chromecache_264.2.dr	String found in binary or memory: https://caniuse.com/#search=transform
Source: chromecache_264.2.dr	String found in binary or memory: https://caniuse.com/#search=transition
Source: chromecache_264.2.dr	String found in binary or memory: https://caniuse.com/#search=user-select
Source: chromecache_264.2.dr	String found in binary or memory: https://caniuse.com/#search=writing-mode
Source: chromecache_190.2.dr, chromecache_170.2.dr, chromecache_240.2.dr, chromecache_244.2.dr, chromecache_263.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_264.2.dr	String found in binary or memory: https://cdn.optimizely.com/datafiles/%s.json
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery.inputmask/5.0.7/jquery.inputmask.min.js
Source: chromecache_188.2.dr	String found in binary or memory: https://client-api.arkoselabs.com/v2/
Source: chromecache_248.2.dr, chromecache_286.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_248.2.dr, chromecache_286.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_264.2.dr	String found in binary or memory: https://codesandbox.io/s/button-keyup-preventdefault-dn7f0
Source: chromecache_264.2.dr	String found in binary or memory: https://config.optimizely.com/datafiles/auth/%s.json
Source: chromecache_234.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/sdk.js
Source: chromecache_264.2.dr	String found in binary or memory: https://css-tricks.com/debouncing-throttling-explained-examples/)
Source: chromecache_264.2.dr	String found in binary or memory: https://css-tricks.com/snippets/css/a-guide-to-flexbox/
Source: chromecache_264.2.dr	String found in binary or memory: https://css-tricks.com/snippets/css/force-vertical-scrollbar/
Source: chromecache_264.2.dr	String found in binary or memory: https://d20xtzwzcl0ceb.cloudfront.net
Source: chromecache_264.2.dr	String found in binary or memory: https://d3uc069fcn7uxw.cloudfront.net
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: https://date-fns.org/docs/Interval
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: https://date-fns.org/docs/Locale
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: https://date-fns.org/docs/getISOWeekYear
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: https://date-fns.org/docs/getWeekYear
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: https://date-fns.org/docs/setISOWeekYear
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: https://date-fns.org/docs/setWeekYear
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: https://date-fns.org/docs/toDate
Source: chromecache_264.2.dr	String found in binary or memory: https://developer.chrome.com/blog/page-lifecycle-api)
Source: chromecache_264.2.dr	String found in binary or memory: https://developer.chrome.com/extensions/sandboxingEval).
Source: chromecache_163.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API/Using_Fetch
Source: chromecache_264.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/HTMLHyperlinkElementUtils/origin
Source: chromecache_163.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/History/replaceState
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/InputEvent/inputType
Source: chromecache_195.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/IntersectionObserverEntry)
Source: chromecache_195.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/IntersectionObserverEntry).
Source: chromecache_264.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/KeyboardEvent/repeat
Source: chromecache_264.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/Request/Request#errors
Source: chromecache_264.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/HTTP/Basics_of_HTTP/Data_URIs
Source: chromecache_264.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/require-trusted-ty
Source: chromecache_264.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Array/observe
Source: chromecache_264.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Error#Error_types
Source: chromecache_264.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Object/is
Source: chromecache_264.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Object/observe
Source: chromecache_264.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/globalThis#browser_
Source: chromecache_264.2.dr	String found in binary or memory: https://developers.google.com/analytics/devguides/collection/gtagjs/events
Source: chromecache_264.2.dr	String found in binary or memory: https://developers.google.com/analytics/devguides/collection/gtagjs/pages
Source: chromecache_248.2.dr, chromecache_286.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_248.2.dr, chromecache_286.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_248.2.dr, chromecache_286.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_264.2.dr	String found in binary or memory: https://developers.google.com/web/updates/2018/03/cssom
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: https://docs.angularjs.org/api/ngAnimate)
Source: chromecache_264.2.dr	String found in binary or memory: https://docs.datadoghq.com/getting_started/tagging/#defining-tags
Source: chromecache_264.2.dr	String found in binary or memory: https://docs.datadoghq.com/integrations/content_security_policy_logs/#use-csp-with-real-user-monitor
Source: chromecache_264.2.dr	String found in binary or memory: https://docs.datadoghq.com/logs/log_configuration/attributes_naming_convention/#user-related-attribu
Source: chromecache_264.2.dr	String found in binary or memory: https://docs.datadoghq.com/real_user_monitoring/browser/troubleshooting/#customer-data-exceeds-the-r
Source: chromecache_264.2.dr	String found in binary or memory: https://docs.datadoghq.com/real_user_monitoring/feature_flag_tracking/).
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: https://docs.google.com/spreadsheets/d/e/2PACX-1vQOPU3xUhplll6dyoMmVUXHKl_8CRDs6_ueLmex3SoqwhuolkuN3
Source: chromecache_188.2.dr, chromecache_161.2.dr, chromecache_195.2.dr	String found in binary or memory: https://docs.mparticle.com/developers/sdk/web/idsync/#login-and-logout
Source: chromecache_264.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom-view/#dom-document-scrollingelement
Source: chromecache_264.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom-view/#dom-window-scroll
Source: chromecache_264.2.dr	String found in binary or memory: https://es5.github.io/#x13.2.2
Source: chromecache_264.2.dr	String found in binary or memory: https://es5.github.io/#x15.1.2.2)
Source: chromecache_264.2.dr	String found in binary or memory: https://expressjs.com/en/advanced/best-practice-performance.html#set-node_env-to-production
Source: chromecache_264.2.dr	String found in binary or memory: https://facebook.github.io/react/docs/forms.html#controlled-components
Source: chromecache_188.2.dr, chromecache_162.2.dr, chromecache_195.2.dr	String found in binary or memory: https://feross.org
Source: chromecache_188.2.dr, chromecache_162.2.dr, chromecache_195.2.dr	String found in binary or memory: https://feross.org/opensource
Source: chromecache_163.2.dr	String found in binary or memory: https://fonts.googleapis.com/css
Source: chromecache_174.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_264.2.dr	String found in binary or memory: https://getbootstrap.com/docs/4.3/layout/grid/
Source: chromecache_264.2.dr	String found in binary or memory: https://gist.github.com/jed/982883
Source: chromecache_264.2.dr	String found in binary or memory: https://gist.github.com/nestharus/13b4d74f2ef4a2f4357dbd3fc23c1e54
Source: chromecache_195.2.dr	String found in binary or memory: https://github.braintreeps.com/venmo/webmo/pull/1237
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/Compass/compass/blob/master/core/stylesheets/compass/typography/_units.scss
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/DataDog/browser-sdk/issues/1084
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/DefinitelyTyped/DefinitelyTyped/issues/18051
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/DieterHolvoet/event-propagation-path/blob/master/propagationPath.js
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/FezVrasta/popper.js/issues/373).
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/FezVrasta/popper.js/pull/715
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/GoogleChrome/web-vitals/blob/3806160ffbc93c3c4abf210a167b81228172b31c/src/onINP.t
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/GoogleChrome/web-vitals/blob/main/src/lib/polyfills/interactionCountPolyfill.ts
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/GoogleChrome/web-vitals/blob/main/src/onINP.ts
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/GoogleChrome/web-vitals/blob/master/src/getCLS.ts
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/GoogleChrome/web-vitals/blob/master/src/getFID.ts
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/GoogleChrome/web-vitals/blob/master/src/lib/polyfills/firstInputPolyfill.ts
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/GoogleChrome/web-vitals/blob/master/src/onLCP.ts
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/GoogleChrome/web-vitals/issues/137
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/GoogleChrome/web-vitals/issues/162
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/GoogleChrome/web-vitals/pull/213
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/GoogleChromeLabs/first-input-delay/issues/4
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/GoogleChromeLabs/first-input-delay/issues/6
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/GoogleChromeLabs/first-input-delay/issues/7
Source: chromecache_163.2.dr	String found in binary or memory: https://github.com/GoogleChromeLabs/quicklink/blob/453a661fa1fa940e2d2e044452398e38c67a98fb/src/inde
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/KyleAMathews/convert-css-length
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/LiosK/UUID.js
Source: chromecache_209.2.dr	String found in binary or memory: https://github.com/RobinHerbots/Inputmask
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/STORIS/react-scrollbar-size.
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/WICG/focus-visible/blob/v4.1.5/src/focus-visible.js
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/alitaheri/normalize-scroll-left
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/andykog/mobx-devtools/
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/angular/angular/blob/6375fa79875c0fe7b815efc45940a6e6f5c9c9eb/packages/zone.js/li
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/angular/angular/issues/26948
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/angular/angular/issues/31712
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/angular/angular/tree/main/packages/zone.js
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/angular/zone.js/blob/v0.8.5/lib/common/utils.ts#L412
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/apollographql/invariant-packages)
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: https://github.com/beatgammit/base64-js/issues/42
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/caridy/intl-datetimeformat-pattern/blob/master/index.js
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/chrusart
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/csnover/TraceKit/blob/04530298073c3823de72deb0b97e7b38ca7bcb59/tracekit.js
Source: chromecache_264.2.dr, chromecache_256.2.dr	String found in binary or memory: https://github.com/cssinjs/jss
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/cssinjs/jss/blob/4e6a05dd3f7b6572fdd3ab216861d9e446c20331/src/utils/createGenerat
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/cssinjs/jss/issues/1045
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/cssinjs/jss/issues/242
Source: chromecache_195.2.dr	String found in binary or memory: https://github.com/date-fns/date-fns/blob/master/docs/unicodeTokens.md
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: https://github.com/date-fns/date-fns/blob/master/docs/upgradeGuide.md#string-arguments
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: https://github.com/date-fns/date-fns/issues/376
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/datejs/Datejs/blob/97f5c7c58c5bc5accdab8aa7602b6ac56462d778/src/core-debug.js#L14
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: https://github.com/dmtrKovalenko/material-ui-pickers/pull/267
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/facebook/fbjs/blob/master/LICENSE
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/facebook/hermes/issues/274
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/facebook/react/blob/15a8f031838a553e41c0b66eb1bcf1da8448104d/packages/react/src/R
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/facebook/react/blob/b5ac963fb791d1298e7f396236383bc955f916c1/src/isomorphic/class
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/facebook/react/issues/11401#issuecomment-340543801.
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/facebook/react/issues/14099#issuecomment-440013892
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/facebook/react/issues/14476#issuecomment-471199055
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/facebook/react/issues/20074
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/facebook/react/issues/7769
Source: chromecache_188.2.dr	String found in binary or memory: https://github.com/facebook/regenerator/blob/main/LICENSE
Source: chromecache_163.2.dr	String found in binary or memory: https://github.com/facebook/regenerator/issues/274
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: https://github.com/feross/buffer/issues/154
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: https://github.com/feross/buffer/issues/166
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: https://github.com/feross/buffer/issues/219
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: https://github.com/feross/buffer/pull/148
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/formatjs/formatjs/issues/2822
Source: chromecache_163.2.dr	String found in binary or memory: https://github.com/github/fetch#caveats
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/google/j2objc/commit/16820fdbc8f76ca0c33472810ce0cb03d20efe25
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/graphql/graphql-js/issues/2317
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/isaachinman/next-i18next#unserialisable-configs
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/isaachinman/next-i18next/pull/851#discussion_r503113620
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/jashkenas/underscore/blob/5c237a7c682fb68fd5378203f0bf22dce1624854/underscore.js#
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/jashkenas/underscore/pull/1247
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/a684e6ba836f7c553968d7d026ed7941e1a612d8/src/selector/escapeSe
Source: chromecache_188.2.dr	String found in binary or memory: https://github.com/kevva/url-regex/blob/master/index.js
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: https://github.com/kossnocorp
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/kristoferjoseph/flexboxgrid/blob/master/src/css/flexboxgrid.css
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/laverdet/node-fibers/blob/ddebed9b8ae3883e57f822e2108e6943e5c8d2a8/fibers.js#L97-
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: https://github.com/leshakoss
Source: chromecache_163.2.dr	String found in binary or memory: https://github.com/lodash/lodash/blob/2da024c3b4f9947a48517639de7560457cd4ec6c/escapeRegExp.js#L23
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/material-components/material-components-web/blob/ac46b8863c4dab9fc22c4c662dc6bd1b
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/material-components/material-components-web/blob/be8747f94574669cb5e7add1a7c54fa4
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/microsoft/TypeScript-DOM-lib-generator/issues/1483
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/microsoft/TypeScript/issues/28884
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/microsoft/TypeScript/issues/28938#issuecomment-450636046
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/microsoft/TypeScript/issues/30134
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/mobxjs/mobx/blob/main/packages/mobx/src/errors.ts
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/mobxjs/mobx/issues/1556
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/mobxjs/mobx/issues/859
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/mobxjs/mobx/pull/2641#issuecomment-737292058
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/mridgway/hoist-non-react-statics/blob/master/src/index.js
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: https://github.com/mui-org/material-ui/issues/15903#issuecomment-496313450
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/mui-org/material-ui/pull/17315#issuecomment-528286677
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/nodejs/node/blob/d5e363b77ebaf1caf67cd7528224b651c86815c1/lib/_http_incoming.js#L
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/olado/doT).
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/oliviertassinari/react-swipeable-views/blob/7666de1dba253b896911adf2790ce51467670
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/openzipkin/b3-propagation
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/othree/jquery.rtl-scroll-type
Source: chromecache_279.2.dr, chromecache_221.2.dr	String found in binary or memory: https://github.com/philipwalton/flexbugs#1-minimum-content-sizing-of-flex-items-not-honored)
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/postcss/autoprefixer/issues/177
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/postcss/autoprefixer/issues/324.
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/postcss/autoprefixer/issues/491
Source: chromecache_188.2.dr	String found in binary or memory: https://github.com/react-component/field-form/issues/313
Source: chromecache_188.2.dr	String found in binary or memory: https://github.com/react-component/field-form/issues/316
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/reactjs/react-transition-group)
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: https://github.com/reactjs/react-transition-group/blob/5007303e729a74be66a21c3e2205e4916821524b/src/
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/roylee0704/react-flexbox-grid
Source: chromecache_163.2.dr	String found in binary or memory: https://github.com/sindresorhus/escape-string-regexp
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/terser/terser#compress-options
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/thinkloop/multi-key-cache
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/tj/co/blob/master/index.js
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/tomball
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/1d6e3710dd447de1a200f29e8fa521f8a0908f70/scss/_functions.scss
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/3ffe3a5d82f6f561b82ff78d82b32a7d14aed558/js/src/modal.js#L512
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/8fccaa2439e97ec72a4b7dc42ccc1f649790adb0/scss/mixins/_grid.sc
Source: chromecache_174.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/unicode-org/icu/blob/af7ed1f6d2298013dc303628438ec4abe1f16479/icu4c/source/common
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/unicode-org/icu/blob/master/docs/userguide/format_parse/numbers/skeletons.md#skel
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/unicode-org/icu/blob/master/icu4c/source/i18n/unicode/unumberformatter.h
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/uuidjs/uuid
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/uuidjs/uuid#getrandomvalues-not-supported
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/uuidjs/uuid/pull/434
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/vercel/next.js/blob/canary/examples/with-apollo/lib/apolloClient.js
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/vercel/next.js/issues/19759
Source: chromecache_185.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_185.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.25.0/LICENSE
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/86#issuecomment-115759028
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://help.venmo.com/
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://help.venmo.com/contact
Source: chromecache_251.2.dr, chromecache_195.2.dr	String found in binary or memory: https://help.venmo.com/hc/en-us
Source: chromecache_223.2.dr	String found in binary or memory: https://help.venmo.com/hc/en-us/articles/
Source: chromecache_223.2.dr	String found in binary or memory: https://help.venmo.com/hc/en-us/articles/1500008519742
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://help.venmo.com/hc/en-us/articles/15572939028115
Source: chromecache_223.2.dr	String found in binary or memory: https://help.venmo.com/hc/en-us/articles/209690058
Source: chromecache_223.2.dr	String found in binary or memory: https://help.venmo.com/hc/en-us/articles/210413677
Source: chromecache_223.2.dr	String found in binary or memory: https://help.venmo.com/hc/en-us/articles/217532387
Source: chromecache_223.2.dr	String found in binary or memory: https://help.venmo.com/hc/en-us/articles/235170748#change-funding
Source: chromecache_223.2.dr	String found in binary or memory: https://help.venmo.com/hc/en-us/articles/235171088
Source: chromecache_188.2.dr	String found in binary or memory: https://help.venmo.com/hc/en-us/articles/235225428-Signing-Up-FAQ
Source: chromecache_223.2.dr	String found in binary or memory: https://help.venmo.com/hc/en-us/articles/235493307
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://help.venmo.com/hc/en-us/articles/28291538975635
Source: chromecache_223.2.dr	String found in binary or memory: https://help.venmo.com/hc/en-us/articles/360043159554
Source: chromecache_223.2.dr	String found in binary or memory: https://help.venmo.com/hc/en-us/articles/360043677373
Source: chromecache_223.2.dr	String found in binary or memory: https://help.venmo.com/hc/en-us/articles/360046392254
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://help.venmo.com/hc/en-us/articles/360059826214
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://help.venmo.com/hc/en-us/articles/360061172554
Source: chromecache_223.2.dr	String found in binary or memory: https://help.venmo.com/hc/en-us/articles/4404097162899
Source: chromecache_195.2.dr	String found in binary or memory: https://help.venmo.com/hc/en-us/articles/4407389460499
Source: chromecache_223.2.dr	String found in binary or memory: https://help.venmo.com/hc/en-us/articles/6678084998291
Source: chromecache_223.2.dr	String found in binary or memory: https://help.venmo.com/hc/en-us/articles/8787027434003
Source: chromecache_251.2.dr, chromecache_195.2.dr	String found in binary or memory: https://help.venmo.com/hc/en-us/requests/new
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://help.venmo.com/hc/en-us/requests/new?ticket_form_id=360001521814
Source: chromecache_251.2.dr	String found in binary or memory: https://help.venmo.com/hc/en-us/requests/new?ticket_form_id=624807
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://help.venmo.com/hc/en-us/requests/new?ticket_form_id=624807&tf_21125278682899=formNavArticle
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://help.venmo.com/hc/en-us/requests/new?ticket_form_id=624807&tf_21125278682899=formNavFooter
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://help.venmo.com/hc/en-us/requests/new?ticket_form_id=624807&tf_21125278682899=formNavHOOP
Source: chromecache_223.2.dr	String found in binary or memory: https://help.venmo.com/hc/en-us/sections/11664194375443
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://help.venmo.com/hc/en-us?return_to=/hc/requests
Source: chromecache_264.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/custom-elements.html#valid-custom-element-name
Source: chromecache_264.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/interaction.html#focus-fixup-rule.
Source: chromecache_264.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/semantics.html#attr-link-imagesrcset
Source: chromecache_264.2.dr	String found in binary or memory: https://id.venmo.com/resolutioncenter
Source: chromecache_195.2.dr	String found in binary or memory: https://instagram.com/
Source: chromecache_195.2.dr	String found in binary or memory: https://itunes.apple.com/us/app/venmo/id351727428?mt=8
Source: chromecache_188.2.dr	String found in binary or memory: https://js.hcaptcha.com
Source: chromecache_264.2.dr	String found in binary or memory: https://link.qa.venmo.com/send-request-money
Source: chromecache_264.2.dr	String found in binary or memory: https://link.venmo.com
Source: chromecache_264.2.dr	String found in binary or memory: https://link.venmo.com/business-profiles-download
Source: chromecache_264.2.dr	String found in binary or memory: https://lodash.com/
Source: chromecache_264.2.dr	String found in binary or memory: https://lodash.com/)
Source: chromecache_264.2.dr	String found in binary or memory: https://lodash.com/custom-builds).
Source: chromecache_264.2.dr	String found in binary or memory: https://lodash.com/license
Source: chromecache_264.2.dr	String found in binary or memory: https://logx.optimizely.com/v1/events
Source: chromecache_195.2.dr	String found in binary or memory: https://m.me/
Source: chromecache_264.2.dr	String found in binary or memory: https://material.angularjs.org/latest/layout/introduction
Source: chromecache_264.2.dr	String found in binary or memory: https://material.google.com/motion/duration-easing.html#duration-easing-natural-easing-curves
Source: chromecache_264.2.dr	String found in binary or memory: https://material.io/design/layout/understanding-layout.html#usage
Source: chromecache_264.2.dr	String found in binary or memory: https://material.io/design/typography/the-type-system.html
Source: chromecache_264.2.dr	String found in binary or memory: https://material.io/design/typography/understanding-typography.html
Source: chromecache_264.2.dr	String found in binary or memory: https://material.io/guidelines/motion/duration-easing.html#duration-easing-common-durations
Source: chromecache_264.2.dr	String found in binary or memory: https://mathiasbynens.be/notes/ambiguous-ampersands)
Source: chromecache_264.2.dr	String found in binary or memory: https://mathiasbynens.be/notes/globalthis
Source: chromecache_264.2.dr	String found in binary or memory: https://mathiasbynens.be/notes/javascript-unicode).
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css
Source: chromecache_264.2.dr	String found in binary or memory: https://mdn.io/Array/reverse).
Source: chromecache_264.2.dr	String found in binary or memory: https://mdn.io/Array/slice)
Source: chromecache_264.2.dr	String found in binary or memory: https://mdn.io/Number/isFinite).
Source: chromecache_264.2.dr	String found in binary or memory: https://mdn.io/Number/isInteger).
Source: chromecache_264.2.dr	String found in binary or memory: https://mdn.io/Number/isNaN)
Source: chromecache_264.2.dr	String found in binary or memory: https://mdn.io/Number/isSafeInteger).
Source: chromecache_264.2.dr	String found in binary or memory: https://mdn.io/Object/assign).
Source: chromecache_264.2.dr	String found in binary or memory: https://mdn.io/String/replace).
Source: chromecache_264.2.dr	String found in binary or memory: https://mdn.io/String/split).
Source: chromecache_264.2.dr	String found in binary or memory: https://mdn.io/Structured_clone_algorithm)
Source: chromecache_264.2.dr	String found in binary or memory: https://mdn.io/clearTimeout).
Source: chromecache_264.2.dr	String found in binary or memory: https://mdn.io/isNaN)
Source: chromecache_264.2.dr	String found in binary or memory: https://mdn.io/iteration_protocols#iterator).
Source: chromecache_264.2.dr	String found in binary or memory: https://mdn.io/rest_parameters).
Source: chromecache_264.2.dr	String found in binary or memory: https://mdn.io/round#Examples)
Source: chromecache_264.2.dr	String found in binary or memory: https://mdn.io/setTimeout).
Source: chromecache_264.2.dr	String found in binary or memory: https://mdn.io/spread_operator).
Source: chromecache_264.2.dr	String found in binary or memory: https://mdn.io/toLowerCase).
Source: chromecache_264.2.dr	String found in binary or memory: https://mdn.io/toUpperCase).
Source: chromecache_188.2.dr, chromecache_264.2.dr, chromecache_163.2.dr	String found in binary or memory: https://medium.com/
Source: chromecache_264.2.dr	String found in binary or memory: https://meyerweb.com/eric/thoughts/2006/02/08/unitless-line-heights/
Source: chromecache_264.2.dr	String found in binary or memory: https://mths.be/he).
Source: chromecache_264.2.dr	String found in binary or memory: https://mui.com/production-error/?code=
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://newsroom.paypal-corp.com/
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://newsroom.paypal-corp.com/news-venmo
Source: chromecache_163.2.dr	String found in binary or memory: https://nextjs.org/docs/messages/
Source: chromecache_163.2.dr	String found in binary or memory: https://nextjs.org/docs/messages/client-side-exception-occurred
Source: chromecache_163.2.dr	String found in binary or memory: https://nextjs.org/docs/messages/get-initial-props-as-an-instance-method
Source: chromecache_264.2.dr	String found in binary or memory: https://nextjs.org/docs/messages/invalid-dynamic-suspense
Source: chromecache_163.2.dr	String found in binary or memory: https://nextjs.org/docs/messages/invalid-multi-match
Source: chromecache_163.2.dr	String found in binary or memory: https://nextjs.org/docs/messages/invalid-relative-url-external-as
Source: chromecache_264.2.dr	String found in binary or memory: https://nextjs.org/docs/messages/next-image-missing-loader
Source: chromecache_264.2.dr	String found in binary or memory: https://npms.io/search?q=ponyfill.
Source: chromecache_264.2.dr	String found in binary or memory: https://openjsf.org/
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://p19.zdassets.com/hc/theming_assets/802785/498597/style.css
Source: chromecache_263.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_190.2.dr, chromecache_170.2.dr, chromecache_240.2.dr, chromecache_244.2.dr, chromecache_263.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_234.2.dr	String found in binary or memory: https://paxos.com/stablecoin-terms-conditions/
Source: chromecache_163.2.dr	String found in binary or memory: https://people.mozilla.org/~jorendorff/es6-draft.html#sec-generatorresume
Source: chromecache_286.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_188.2.dr, chromecache_264.2.dr, chromecache_213.2.dr, chromecache_251.2.dr, chromecache_195.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.venmo
Source: chromecache_264.2.dr	String found in binary or memory: https://popper.js.org/docs/v1/)
Source: chromecache_264.2.dr	String found in binary or memory: https://react-bootstrap.github.io/react-overlays/#modals).
Source: chromecache_264.2.dr	String found in binary or memory: https://reactcommunity.org/react-transition-group/css-transition)
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: https://reactcommunity.org/react-transition-group/transition)
Source: chromecache_188.2.dr	String found in binary or memory: https://reactjs.org/docs/context.html#contextprovider
Source: chromecache_163.2.dr	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: chromecache_264.2.dr	String found in binary or memory: https://reactjs.org/docs/forwarding-refs.html#forwarding-refs-in-higher-order-components
Source: chromecache_264.2.dr	String found in binary or memory: https://reactjs.org/docs/higher-order-components.html#static-methods-must-be-copied-over
Source: chromecache_264.2.dr	String found in binary or memory: https://reactjs.org/docs/hooks-faq.html#how-do-i-implement-getderivedstatefromprops
Source: chromecache_264.2.dr	String found in binary or memory: https://reactjs.org/docs/hooks-reference.html#usestate)
Source: chromecache_163.2.dr	String found in binary or memory: https://reactjs.org/link/react-polyfills
Source: chromecache_286.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_264.2.dr	String found in binary or memory: https://res.cloudinary.com/demo/image/upload/w_300
Source: chromecache_264.2.dr, chromecache_195.2.dr	String found in binary or memory: https://s3.amazonaws.com/venmo/no-image.gif
Source: chromecache_264.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_264.2.dr	String found in binary or memory: https://schema.org/
Source: chromecache_264.2.dr	String found in binary or memory: https://schema.org/WatchAction
Source: chromecache_264.2.dr	String found in binary or memory: https://stackoverflow.com/a/24394376
Source: chromecache_264.2.dr	String found in binary or memory: https://stackoverflow.com/a/37865170
Source: chromecache_264.2.dr	String found in binary or memory: https://stackoverflow.com/q/39777833/266535
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: https://stackoverflow.com/questions/990904/remove-accents-diacritics-in-a-string-in-javascript
Source: chromecache_264.2.dr	String found in binary or memory: https://static.imgix.net/daisy.png?auto=format&fit=max&w=300
Source: chromecache_190.2.dr, chromecache_170.2.dr, chromecache_244.2.dr, chromecache_263.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_190.2.dr, chromecache_170.2.dr, chromecache_244.2.dr, chromecache_263.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_242.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_286.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_248.2.dr, chromecache_286.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_248.2.dr, chromecache_286.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_248.2.dr, chromecache_286.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://t.paypal.com/ts?nojs=1&bchn=venmohelp&comp=zendeskguide&ccpg=us&rsta=English
Source: chromecache_242.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_190.2.dr, chromecache_170.2.dr, chromecache_240.2.dr, chromecache_244.2.dr, chromecache_263.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_264.2.dr	String found in binary or memory: https://tools.ietf.org/html/rfc2616#section-4.2
Source: chromecache_264.2.dr	String found in binary or memory: https://tools.ietf.org/html/rfc2822#page-14
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://twitter.com/venmo?lang=en
Source: chromecache_264.2.dr	String found in binary or memory: https://unicode-org.github.io/icu/userguide/format_parse/numbers/skeletons.html#fraction-precision
Source: chromecache_264.2.dr	String found in binary or memory: https://unicode-org.github.io/icu/userguide/format_parse/numbers/skeletons.html#integer-width
Source: chromecache_264.2.dr	String found in binary or memory: https://unicode-org.github.io/icu/userguide/format_parse/numbers/skeletons.html#significant-digits-p
Source: chromecache_264.2.dr	String found in binary or memory: https://unicode-org.github.io/icu/userguide/format_parse/numbers/skeletons.html#trailing-zero-displa
Source: chromecache_264.2.dr	String found in binary or memory: https://unicode.org/reports/tr35/tr35-dates.html#Date_Field_Symbol_Table
Source: chromecache_163.2.dr	String found in binary or memory: https://use.typekit.net/
Source: chromecache_188.2.dr	String found in binary or memory: https://v4.mui.com/components/selects/#multiple-select
Source: chromecache_188.2.dr, chromecache_264.2.dr	String found in binary or memory: https://venmo.com
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://venmo.com/
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://venmo.com/about/creditcard/
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://venmo.com/about/crypto/
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://venmo.com/about/debitcard/
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://venmo.com/about/jobs/
Source: chromecache_188.2.dr	String found in binary or memory: https://venmo.com/about/teendebitcard/
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://venmo.com/about/us/
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://venmo.com/about/us/moneytalks/
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://venmo.com/about/us/trust-and-safety/
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://venmo.com/accessibility/
Source: chromecache_223.2.dr	String found in binary or memory: https://venmo.com/account/settings/tax-document
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://venmo.com/account/sign-in
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://venmo.com/business/accept-venmo/
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://venmo.com/business/profiles/
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://venmo.com/business/start/
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://venmo.com/developers
Source: chromecache_188.2.dr	String found in binary or memory: https://venmo.com/legal/us-consent/
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://venmo.com/legal/us-licenses/
Source: chromecache_188.2.dr, chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://venmo.com/legal/us-privacy-policy/
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: https://venmo.com/legal/us-privacy-policy/#teen-users
Source: chromecache_188.2.dr, chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://venmo.com/legal/us-user-agreement/
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://venmo.com/pay/businesses/
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://venmo.com/pay/in-apps-and-online/
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://venmo.com/pay/in-stores/
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://venmo.com/pay/start/
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://venmo.com/resources/our-fees/
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://venmo.com/resources/why-venmo/
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://venmo.com/send-receive/direct-deposit/
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://venmo.com/send-receive/manage-balance/
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://venmo.com/send-receive/start/
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://venmo.com/send-receive/tips-tricks/
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://venmo.zendesk.com/auth/v2/host/without_iframe.js
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: https://venmoinc.atlassian.net/browse/NOM-2570
Source: chromecache_195.2.dr	String found in binary or memory: https://venmoinc.atlassian.net/browse/NOM-2571
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: https://venmoinc.atlassian.net/browse/NOM-2572
Source: chromecache_264.2.dr	String found in binary or memory: https://venmoinc.atlassian.net/browse/NOM-2573
Source: chromecache_264.2.dr	String found in binary or memory: https://web.archive.org/web/20210602165716/http://perfectionkills.com/the-poor-misunderstood-innerTe
Source: chromecache_264.2.dr	String found in binary or memory: https://web.dev/cls/
Source: chromecache_264.2.dr	String found in binary or memory: https://web.dev/evolving-cls/
Source: chromecache_264.2.dr	String found in binary or memory: https://web.dev/fid/
Source: chromecache_264.2.dr	String found in binary or memory: https://web.dev/inp/
Source: chromecache_163.2.dr	String found in binary or memory: https://web.dev/interactive
Source: chromecache_264.2.dr	String found in binary or memory: https://web.dev/lcp/
Source: chromecache_264.2.dr	String found in binary or memory: https://web.dev/same-site-same-origin/#site
Source: chromecache_264.2.dr	String found in binary or memory: https://webpack.js.org/guides/production/
Source: chromecache_248.2.dr, chromecache_286.2.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_264.2.dr	String found in binary or memory: https://www.apollographql.com/docs/react/api/react/hoc/#optionsfetchpolicy
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://www.cloudflare.com/cdn-cgi/trace
Source: chromecache_264.2.dr	String found in binary or memory: https://www.datad0g-browser-agent.com
Source: chromecache_264.2.dr	String found in binary or memory: https://www.datadoghq-browser-agent.com
Source: chromecache_163.2.dr	String found in binary or memory: https://www.gatsbyjs.com/blog/2019-07-11-user-testing-accessible-client-routing/
Source: chromecache_234.2.dr	String found in binary or memory: https://www.google-analytics.com
Source: chromecache_213.2.dr, chromecache_240.2.dr, chromecache_251.2.dr, chromecache_234.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_242.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_242.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_242.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_263.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_242.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_270.2.dr	String found in binary or memory: https://www.google.com/intl/en/policies/privacy/
Source: chromecache_270.2.dr	String found in binary or memory: https://www.google.com/intl/en/policies/terms/
Source: chromecache_248.2.dr, chromecache_286.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_190.2.dr, chromecache_170.2.dr, chromecache_240.2.dr, chromecache_244.2.dr, chromecache_263.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_190.2.dr, chromecache_170.2.dr, chromecache_240.2.dr, chromecache_244.2.dr, chromecache_263.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_234.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?G-NM9TNT36E1
Source: chromecache_264.2.dr, chromecache_242.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-F6577EVSHQ
Source: chromecache_248.2.dr, chromecache_286.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.
Source: chromecache_270.2.dr, chromecache_164.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Source: chromecache_270.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://www.instagram.com/venmo/?hl=en
Source: chromecache_251.2.dr	String found in binary or memory: https://www.irs.gov/pub/irs-pdf/fw9.pdf
Source: chromecache_190.2.dr, chromecache_170.2.dr, chromecache_244.2.dr, chromecache_263.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_264.2.dr	String found in binary or memory: https://www.npmjs.com/package/babel-polyfill)
Source: chromecache_264.2.dr	String found in binary or memory: https://www.npmjs.com/package/es6-object-assign
Source: chromecache_281.2.dr, chromecache_172.2.dr	String found in binary or memory: https://www.paypal.com
Source: chromecache_195.2.dr	String found in binary or memory: https://www.paypal.com/merchantapps/appcenter/acceptpayments/venmocharityprofile
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: https://www.paypal.com/myaccount/privacy/cookiePrefs?locale=en_US
Source: chromecache_281.2.dr	String found in binary or memory: https://www.paypal.com/smartchat/messaging-chat-loading/venmo
Source: chromecache_281.2.dr	String found in binary or memory: https://www.paypal.com/smartchat/open/messaging/venmo/chat-meta
Source: chromecache_281.2.dr	String found in binary or memory: https://www.paypal.com/smartchat/open/messaging/venmo/window?entryPoint=$
Source: chromecache_281.2.dr	String found in binary or memory: https://www.paypal.com/smartchat/venmo/addTracking?event_name=venmo_chat_prompt_supressed
Source: chromecache_251.2.dr	String found in binary or memory: https://www.paypal.com/us/legalhub/ceagreement-full?locale.x=en_US#enhanced-legal-2
Source: chromecache_234.2.dr	String found in binary or memory: https://www.paypal.com/us/legalhub/cryptocurrencies-tnc
Source: chromecache_234.2.dr	String found in binary or memory: https://www.paypal.com/us/webapps/mpp/paypal-fees
Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://www.paypalobjects.com/messaging/venmo/v12/messaging-venmo-loader.js
Source: chromecache_172.2.dr	String found in binary or memory: https://www.paypalobjects.com/ncs/$
Source: chromecache_264.2.dr, chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: https://www.paypalobjects.com/ncs/ncs.js
Source: chromecache_264.2.dr, chromecache_213.2.dr, chromecache_251.2.dr, chromecache_234.2.dr	String found in binary or memory: https://www.paypalobjects.com/pa/js/pa_venmo.js
Source: chromecache_197.2.dr	String found in binary or memory: https://www.paypalobjects.com/paypal-ui/fonts/PayPalOpen-Bold.woff)
Source: chromecache_197.2.dr	String found in binary or memory: https://www.paypalobjects.com/paypal-ui/fonts/PayPalOpen-Bold.woff2)
Source: chromecache_197.2.dr	String found in binary or memory: https://www.paypalobjects.com/paypal-ui/fonts/PayPalOpen-Regular.woff)
Source: chromecache_197.2.dr	String found in binary or memory: https://www.paypalobjects.com/paypal-ui/fonts/PayPalOpen-Regular.woff2)
Source: chromecache_254.2.dr	String found in binary or memory: https://www.paypalobjects.com/paypal-ui/icons/font_icon/0-0-29/PPUI-Icons.eot?#iefix)
Source: chromecache_254.2.dr	String found in binary or memory: https://www.paypalobjects.com/paypal-ui/icons/font_icon/0-0-29/PPUI-Icons.svg)
Source: chromecache_254.2.dr	String found in binary or memory: https://www.paypalobjects.com/paypal-ui/icons/font_icon/0-0-29/PPUI-Icons.woff)
Source: chromecache_254.2.dr	String found in binary or memory: https://www.paypalobjects.com/paypal-ui/icons/font_icon/0-0-29/PPUI-Icons.woff2)
Source: chromecache_164.2.dr	String found in binary or memory: https://www.recaptcha.net/recaptcha/enterprise/
Source: chromecache_264.2.dr	String found in binary or memory: https://www.unicode.org/Public/UCD/latest/ucd/PropList.txt
Source: chromecache_188.2.dr, chromecache_195.2.dr	String found in binary or memory: https://www.unicode.org/reports/tr35/tr35-dates.html#Date_Field_Symbol_Table
Source: chromecache_264.2.dr	String found in binary or memory: https://www.wolframalpha.com/input/?i=(4
Source: chromecache_244.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_264.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=cPF4iBedoF0&feature=youtu.be&t=1307
Source: chromecache_176.2.dr	String found in binary or memory: https://www.zendesk.com/answer-bot/
Source: chromecache_176.2.dr	String found in binary or memory: https://www.zendesk.com/embeddables/
Source: chromecache_176.2.dr	String found in binary or memory: https://www.zendesk.com/guide/#gallery
Source: chromecache_176.2.dr	String found in binary or memory: https://www.zendesk.com/guide/features/knowledge-capture-app/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 23.193.120.112:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.193.120.112:443 -> 192.168.2.4:49746 version: TLS 1.2

Source: chromecache_195.2.dr	Binary or memory string: var ref6 = desktopLayout_slicedToArray((0,react_sdk/* useDecision /.rm)(constants/ OPTIMIZELY_FLAG.VBP_KILL_SWITCH */.d7.VBP_KILL_SWITCH), 1), vbpKillSwitchDecision = ref6[0];
Source: chromecache_188.2.dr	Binary or memory string: var ref2 = profileSelection_slicedToArray((0,react_sdk/* useDecision /.rm)(constants/ OPTIMIZELY_FLAG.VBP_KILL_SWITCH */.d7.VBP_KILL_SWITCH), 1), vbpKillSwitchDecision = ref2[0];

Source: classification engine

Classification label: clean2.win@21/239@105/30

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 --field-trial-handle=2244,i,16407618657791368267,11392074485942432583,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://us-west-2.protection.sophos.com/?d=venmo.com&u=aHR0cHM6Ly92ZW5tby5jb20vc2lnbnVwL3N0YXJ0P2VtYWlsPW5vcmVwbHkxMSU0MHdxZXJkZmQub25taWNyb3NvZnQuY29tJmludml0ZV9pZD02NjJhNzViZTNjYWMxN2E3MGE5OTA0ZmEmbnI9MSZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9zb3VyY2U9cG51&p=m&i=NjI3Mjc4OTk0MGU3YTAxM2U2ZWIxMDY3&t=RTdyMWVwN0ltVWFjZ3cvWmVHNTRWVkd1STQwUzVVNzEveWYyR0FYYXVhMD0=&h=4ce9b067fcbf486e8f27561ce3d3058e&s=AVNPUEhUT0NFTkNSWVBUSVaS8c9jSpZcrH9uvMBTWALM8OUVCaCMDIwUwmubUWsN9g"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 --field-trial-handle=2244,i,16407618657791368267,11392074485942432583,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://us-west-2.protection.sophos.com/?d=venmo.com&u=aHR0cHM6Ly92ZW5tby5jb20vc2lnbnVwL3N0YXJ0P2VtYWlsPW5vcmVwbHkxMSU0MHdxZXJkZmQub25taWNyb3NvZnQuY29tJmludml0ZV9pZD02NjJhNzViZTNjYWMxN2E3MGE5OTA0ZmEmbnI9MSZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9zb3VyY2U9cG51&p=m&i=NjI3Mjc4OTk0MGU3YTAxM2U2ZWIxMDY3&t=RTdyMWVwN0ltVWFjZ3cvWmVHNTRWVkd1STQwUzVVNzEveWYyR0FYYXVhMD0=&h=4ce9b067fcbf486e8f27561ce3d3058e&s=AVNPUEhUT0NFTkNSWVBUSVaS8c9jSpZcrH9uvMBTWALM8OUVCaCMDIwUwmubUWsN9g	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://openjsf.org/	0%	URL Reputation	safe
about:blank	0%	Avira URL Cloud	safe
https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.	0%	Avira URL Cloud	safe
http://wonko.com/post/html-escaping)	0%	Avira URL Cloud	safe
https://facebook.github.io/react/docs/forms.html#controlled-components	0%	Avira URL Cloud	safe
https://unicode-org.github.io/icu/userguide/format_parse/numbers/skeletons.html#integer-width	0%	Avira URL Cloud	safe
https://mdn.io/clearTimeout).	0%	Avira URL Cloud	safe
https://webpack.js.org/guides/production/	0%	Avira URL Cloud	safe
https://unicode-org.github.io/icu/userguide/format_parse/numbers/skeletons.html#integer-width	0%	Virustotal		Browse
https://popper.js.org/docs/v1/)	0%	Avira URL Cloud	safe
http://wonko.com/post/html-escaping)	0%	Virustotal		Browse
https://web.dev/interactive	0%	Avira URL Cloud	safe
http://reactcommunity.org/react-transition-group/transition#Transition-prop-appear)	0%	Avira URL Cloud	safe
http://peter.michaux.ca/articles/lazy-function-definition-pattern)	0%	Avira URL Cloud	safe
https://webpack.js.org/guides/production/	0%	Virustotal		Browse
https://facebook.github.io/react/docs/forms.html#controlled-components	0%	Virustotal		Browse
https://mdn.io/clearTimeout).	0%	Virustotal		Browse
https://web.dev/interactive	0%	Virustotal		Browse
http://peter.michaux.ca/articles/lazy-function-definition-pattern)	0%	Virustotal		Browse
https://popper.js.org/docs/v1/)	0%	Virustotal		Browse
http://reactcommunity.org/react-transition-group/transition#Transition-prop-appear)	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
mparticle.map.fastly.net	151.101.130.133	true	false	unknown
d3orhvfyxudxxq.cloudfront.net	108.156.83.58	true	false	high
paypal.map.fastly.net	151.101.66.133	true	false	unknown
dualstack.paypal-dynamic-2.map.fastly.net	151.101.193.35	true	false	unknown
account.venmo.com	52.84.150.50	true	false	high
paypal-dynamic.map.fastly.net	151.101.193.21	true	false	unknown
www.recaptcha.net	142.250.217.227	true	false	unknown
venmo.zendesk.com	104.18.249.37	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
theme.zdassets.com	104.18.72.113	true	false	high
jssdks.mparticle.com	151.101.194.133	true	false	high
static.zdassets.com	104.18.70.113	true	false	high
venmo.com	52.84.150.50	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
www.google.com	172.217.3.68	true	false	high
jssdkcdns.mparticle.com	151.101.2.133	true	false	high
stats.glb.paypal.com	35.235.122.5	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
paypal-dynamic-2.map.fastly.net	151.101.1.35	true	false	unknown
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	high
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
p19.zdassets.com	104.18.70.113	true	false	high
d2t07dpvw9bt1v.cloudfront.net	99.84.252.16	true	false	high
www.cloudflare.com	104.16.124.96	true	false	high
lvs.stats.paypal.com	35.235.122.5	true	false	high
us-west-2.protection.sophos.com	unknown	unknown	false	high
www.paypal.com	unknown	unknown	false	high
help.venmo.com	unknown	unknown	false	high
identity.mparticle.com	unknown	unknown	false	high
t.paypal.com	unknown	unknown	false	high
c.paypal.com	unknown	unknown	false	high
c6.paypal.com	unknown	unknown	false	high
b.stats.paypal.com	unknown	unknown	false	high
id.venmo.com	unknown	unknown	false	high
images.ctfassets.net	unknown	unknown	false	high
cdn.optimizely.com	unknown	unknown	false	high
www.paypalobjects.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://id.venmo.com/auth/recaptcha/grcenterprise_v3.html	false		high
https://www.paypalobjects.com/messaging/venmo-assets/Scto-Grotesk-A-Regular.woff	false		high
https://id.venmo.com/idapps/logger	false		high
https://id.venmo.com/signin?country.x=US&locale.x=en&ctxId=AAGTMbXAr-_9hFOdMjFJeDIT2AVC4srohHO4prKJg35LG3f53du_Ei1CXj8jIlvNxkWTpu7ay42oUJl42vchI78=	false		high
https://www.paypalobjects.com/staging/pa/js/pa_venmo.js	false		high
https://www.paypalobjects.com/ice/vendor7.1044927e5ff102e2510c.js	false		high
https://id.venmo.com/auth/createchallenge/4c37721843a6c126/recaptchav3.js?_sessionID=r1IVgdqL-yPwDL7QwOzbe1TQMyLGYUSv	false		high
about:blank	false	Avira URL Cloud: safe	low
https://www.paypalobjects.com/ice/vendor6.0d835df92abd25f3083d.js	false		high
https://www.paypalobjects.com/paypal-ui/fonts/PayPalSansBig-Regular.woff2	false		high
https://www.paypalobjects.com/paypal-ui/fonts/PayPalOpen-Regular.woff2	false		high
https://c6.paypal.com/v1/r/d/b/p3?f=27eeff60847a45c7be538d1141f33e9b&s=ICE_VENMO_LOGIN_PUBLIC_PAGE	false		high
https://www.paypalobjects.com/messaging/venmo-assets/Scto-Grotesk-A-Italic.woff	false		high
https://www.paypalobjects.com/ice/vendorVenmo43.bbd5f60f16ee575715aa.js	false		high
https://id.venmo.com/signin?country.x=US&locale.x=en&ctxId=AAEyUY5fMgDhlsJRKlXdAzm7lRcXJsP_ni9kVophbJKfoQNlSSc-Jb6KzozS7wgjV1oU7YYu_pb7yiBuGuCdm3A=	false		high
https://account.venmo.com/	false		high
https://account.venmo.com/_next/static/chunks/9744.04c9c3ae7494be82.js	false		high
https://help.venmo.com/hc/en-us/requests/new?ticket_form_id=624807	false		high
https://www.paypalobjects.com/ice/vendorVenmo38.18ef90e268efd5088cd9.js	false		high
https://jssdkcdns.mparticle.com/js/v2/40433222e815b743853a4bb6b7a86058/mparticle.js?env=0	false		high
https://t.paypal.com/ts?v=1.8.16&t=1714134220066&g=-120&tenant_name=venmo&bchn=venmohelp&comp=zendeskguide&ccpg=US&page_template=new_request_page&pgrp=main%3Aprivacy%3Apolicy&rsta=English%20(US)&lgin=out&page=main%3Aprivacy%3Apolicy%3Accpa&displaypage=venmo%3Ahelp%3Anew_request_page&ppage=privacy_banner&bannertype=cookiebanner&flag=ccpa&bannerversion=v4&bannersource=ConsentNodeServ&xe=108814&xt=142081&eligibility_reason=true&cookie_disabled=false&tenant_code=venmo&event_name=venmo_cookie_banner_shown&e=ac	false		high
https://p19.zdassets.com/hc/theming_assets/802785/498597/style.css?digest=28556028217875	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/jquery/jquery/blob/a684e6ba836f7c553968d7d026ed7941e1a612d8/src/selector/escapeSe	chromecache_264.2.dr	false		high
https://venmo.com/business/profiles/	chromecache_213.2.dr, chromecache_251.2.dr	false		high
https://docs.datadoghq.com/getting_started/tagging/#defining-tags	chromecache_264.2.dr	false		high
http://wonko.com/post/html-escaping)	chromecache_264.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.com/unicode-org/icu/blob/af7ed1f6d2298013dc303628438ec4abe1f16479/icu4c/source/common	chromecache_264.2.dr	false		high
https://github.com/DataDog/browser-sdk/issues/1084	chromecache_264.2.dr	false		high
https://github.com/graphql/graphql-js/issues/2317	chromecache_264.2.dr	false		high
https://help.venmo.com/hc/en-us/articles/235171088	chromecache_223.2.dr	false		high
http://www.unicode.org/reports/tr35/tr35-31/tr35-dates.html#Date_Format_tokens	chromecache_188.2.dr, chromecache_195.2.dr	false		high
https://help.venmo.com/hc/en-us/requests/new?ticket_form_id=624807&tf_21125278682899=formNavArticle	chromecache_213.2.dr, chromecache_251.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_242.2.dr	false		high
https://facebook.github.io/react/docs/forms.html#controlled-components	chromecache_264.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://developers.google.com/web/updates/2018/03/cssom	chromecache_264.2.dr	false		high
https://id.venmo.com/resolutioncenter	chromecache_264.2.dr	false		high
https://venmoinc.atlassian.net/browse/NOM-2571	chromecache_195.2.dr	false		high
https://venmoinc.atlassian.net/browse/NOM-2570	chromecache_188.2.dr, chromecache_195.2.dr	false		high
https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Error#Error_types	chromecache_264.2.dr	false		high
http://www.ecma-international.org/ecma-262/7.0/#sec-function.prototype.apply).	chromecache_264.2.dr	false		high
https://github.com/alitaheri/normalize-scroll-left	chromecache_264.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_248.2.dr, chromecache_286.2.dr	false		high
https://github.com/GoogleChrome/web-vitals/issues/137	chromecache_264.2.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.	chromecache_248.2.dr, chromecache_286.2.dr	false	Avira URL Cloud: safe	low
https://unicode-org.github.io/icu/userguide/format_parse/numbers/skeletons.html#integer-width	chromecache_264.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://venmo.com/legal/us-privacy-policy/	chromecache_188.2.dr, chromecache_213.2.dr, chromecache_251.2.dr	false		high
https://mdn.io/clearTimeout).	chromecache_264.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://openjsf.org/	chromecache_264.2.dr	false	URL Reputation: safe	unknown
https://webpack.js.org/guides/production/	chromecache_264.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha	chromecache_286.2.dr	false		high
https://venmoinc.atlassian.net/browse/NOM-2573	chromecache_264.2.dr	false		high
https://help.venmo.com/contact	chromecache_213.2.dr, chromecache_251.2.dr	false		high
https://venmoinc.atlassian.net/browse/NOM-2572	chromecache_188.2.dr, chromecache_195.2.dr	false		high
https://bugs.chromium.org/p/v8/issues/detail?id=90	chromecache_264.2.dr	false		high
https://github.com/angular/angular/tree/main/packages/zone.js	chromecache_264.2.dr	false		high
https://help.venmo.com/hc/en-us/articles/217532387	chromecache_223.2.dr	false		high
https://github.com/date-fns/date-fns/blob/master/docs/upgradeGuide.md#string-arguments	chromecache_188.2.dr, chromecache_195.2.dr	false		high
https://github.com/cssinjs/jss	chromecache_264.2.dr, chromecache_256.2.dr	false		high
http://ecma-international.org/ecma-262/7.0/#sec-properties-of-the-map-prototype-object)	chromecache_264.2.dr	false		high
https://venmo.com/pay/in-apps-and-online/	chromecache_213.2.dr, chromecache_251.2.dr	false		high
https://github.com/facebook/fbjs/blob/master/LICENSE	chromecache_264.2.dr	false		high
https://stackoverflow.com/questions/990904/remove-accents-diacritics-in-a-string-in-javascript	chromecache_188.2.dr, chromecache_195.2.dr	false		high
https://github.com/unicode-org/icu/blob/master/docs/userguide/format_parse/numbers/skeletons.md#skel	chromecache_264.2.dr	false		high
http://underscorejs.org/LICENSE	chromecache_264.2.dr	false		high
http://ecma-international.org/ecma-262/7.0/#sec-ecmascript-function-objects-call-thisargument-argume	chromecache_264.2.dr	false		high
https://popper.js.org/docs/v1/)	chromecache_264.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://web.dev/interactive	chromecache_163.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://reactcommunity.org/react-transition-group/transition#Transition-prop-appear)	chromecache_188.2.dr, chromecache_195.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.com/mridgway/hoist-non-react-statics/blob/master/src/index.js	chromecache_264.2.dr	false		high
http://dev.apollodata.com/core/fragments.html#unique-names	chromecache_264.2.dr	false		high
https://html.spec.whatwg.org/multipage/interaction.html#focus-fixup-rule.	chromecache_264.2.dr	false		high
https://venmo.com/about/teendebitcard/	chromecache_188.2.dr	false		high
https://github.com/DefinitelyTyped/DefinitelyTyped/issues/18051	chromecache_264.2.dr	false		high
https://t.paypal.com/ts?nojs=1&bchn=venmohelp&comp=zendeskguide&ccpg=us&rsta=English	chromecache_213.2.dr, chromecache_251.2.dr	false		high
https://api.venmo.com/graphql	chromecache_264.2.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=1559377	chromecache_264.2.dr	false		high
https://drafts.csswg.org/cssom-view/#dom-window-scroll	chromecache_264.2.dr	false		high
https://github.com/GoogleChrome/web-vitals/blob/master/src/getCLS.ts	chromecache_264.2.dr	false		high
https://medium.com/	chromecache_188.2.dr, chromecache_264.2.dr, chromecache_163.2.dr	false		high
https://github.com/angular/angular/issues/31712	chromecache_264.2.dr	false		high
https://github.com/caridy/intl-datetimeformat-pattern/blob/master/index.js	chromecache_264.2.dr	false		high
https://babeljs.io/docs/babel-plugin-transform-remove-console/	chromecache_264.2.dr	false		high
https://npms.io/search?q=ponyfill.	chromecache_264.2.dr	false		high
https://www.zendesk.com/guide/features/knowledge-capture-app/	chromecache_176.2.dr	false		high
https://github.com/GoogleChrome/web-vitals/pull/213	chromecache_264.2.dr	false		high
https://github.com/facebook/react/issues/20074	chromecache_264.2.dr	false		high
https://github.com/FezVrasta/popper.js/pull/715	chromecache_264.2.dr	false		high
https://html.spec.whatwg.org/multipage/custom-elements.html#valid-custom-element-name	chromecache_264.2.dr	false		high
http://peter.michaux.ca/articles/lazy-function-definition-pattern)	chromecache_264.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=820541	chromecache_264.2.dr	false		high
https://github.com/kevva/url-regex/blob/master/index.js	chromecache_188.2.dr	false		high
https://venmo.com/resources/why-venmo/	chromecache_213.2.dr, chromecache_251.2.dr	false		high
https://cloud.google.com/contact	chromecache_248.2.dr, chromecache_286.2.dr	false		high
https://www.apollographql.com/docs/react/api/react/hoc/#optionsfetchpolicy	chromecache_264.2.dr	false		high
https://caniuse.com/#search=transition	chromecache_264.2.dr	false		high
https://material.angularjs.org/latest/layout/introduction	chromecache_264.2.dr	false		high
https://reactjs.org/link/react-polyfills	chromecache_163.2.dr	false		high
https://caniuse.com/#search=transform	chromecache_264.2.dr	false		high
http://ecma-international.org/ecma-262/7.0/#sec-tolength).	chromecache_264.2.dr	false		high
https://help.venmo.com/hc/en-us/articles/360043159554	chromecache_223.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
151.101.193.35	dualstack.paypal-dynamic-2.map.fastly.net	United States	54113	FASTLYUS	false
151.101.130.133	mparticle.map.fastly.net	United States	54113	FASTLYUS	false
104.18.10.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
104.18.248.37	unknown	United States	13335	CLOUDFLARENETUS	false
52.84.150.50	account.venmo.com	United States	16509	AMAZON-02US	false
151.101.1.35	paypal-dynamic-2.map.fastly.net	United States	54113	FASTLYUS	false
35.235.122.5	stats.glb.paypal.com	United States	15169	GOOGLEUS	false
151.101.129.35	unknown	United States	54113	FASTLYUS	false
172.217.3.68	www.google.com	United States	15169	GOOGLEUS	false
104.18.72.113	theme.zdassets.com	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
99.84.252.16	d2t07dpvw9bt1v.cloudfront.net	United States	16509	AMAZON-02US	false
151.101.66.133	paypal.map.fastly.net	United States	54113	FASTLYUS	false
151.101.194.133	jssdks.mparticle.com	United States	54113	FASTLYUS	false
151.101.193.21	paypal-dynamic.map.fastly.net	United States	54113	FASTLYUS	false
104.16.124.96	www.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.249.37	venmo.zendesk.com	United States	13335	CLOUDFLARENETUS	false
142.250.217.227	www.recaptcha.net	United States	15169	GOOGLEUS	false
151.101.1.21	unknown	United States	54113	FASTLYUS	false
108.156.83.76	unknown	United States	16509	AMAZON-02US	false
151.101.129.21	unknown	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
151.101.2.133	jssdkcdns.mparticle.com	United States	54113	FASTLYUS	false
104.18.70.113	static.zdassets.com	United States	13335	CLOUDFLARENETUS	false
108.156.83.58	d3orhvfyxudxxq.cloudfront.net	United States	16509	AMAZON-02US	false
151.101.65.21	unknown	United States	54113	FASTLYUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
52.84.150.38	unknown	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.17
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1432117
Start date and time:	2024-04-26 14:21:39 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 10s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://us-west-2.protection.sophos.com/?d=venmo.com&u=aHR0cHM6Ly92ZW5tby5jb20vc2lnbnVwL3N0YXJ0P2VtYWlsPW5vcmVwbHkxMSU0MHdxZXJkZmQub25taWNyb3NvZnQuY29tJmludml0ZV9pZD02NjJhNzViZTNjYWMxN2E3MGE5OTA0ZmEmbnI9MSZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9zb3VyY2U9cG51&p=m&i=NjI3Mjc4OTk0MGU3YTAxM2U2ZWIxMDY3&t=RTdyMWVwN0ltVWFjZ3cvWmVHNTRWVkd1STQwUzVVNzEveWYyR0FYYXVhMD0=&h=4ce9b067fcbf486e8f27561ce3d3058e&s=AVNPUEhUT0NFTkNSWVBUSVaS8c9jSpZcrH9uvMBTWALM8OUVCaCMDIwUwmubUWsN9g
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@21/239@105/30
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://account.venmo.com/ Browse: https://help.venmo.com/hc/en-us/requests/new

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.64.195, 192.178.50.78, 173.194.215.84, 34.104.35.123, 40.68.123.157, 184.84.136.157, 142.250.64.232, 199.232.210.172, 13.95.31.18, 192.229.211.108, 142.250.189.142, 142.250.217.206, 13.85.23.206, 142.250.189.131, 142.250.64.234, 192.178.50.74, 192.178.50.42, 142.250.64.138, 142.250.64.202, 142.251.35.234, 142.250.217.202, 172.217.165.202, 142.250.189.138, 142.250.217.234, 142.250.217.170, 142.250.64.170, 142.250.64.227, 192.178.50.67
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ajax.googleapis.com, clientservices.googleapis.com, ctldl.windowsupdate.com, e5048.dsca.akamaiedge.net, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, www.gstatic.com, cdn.o6.edgekey.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	3.122714743434665
Encrypted:	false
SSDEEP:	3:CUXPQE/xlIle:1QEn
MD5:	ACCBA0B69F352B4C9440F05891B015C5
SHA1:	9D01CC5DC8E042C0D4AD6CFB8B3AC38E84A5EF9F
SHA-256:	47043E4823A6C21A8881DE789B4185355330B5804629D23F6B43DD93F5265292
SHA-512:	D3C4A5427BF645CC226106B0E8C28A76B0B91F50FA6D77E962A3B59B85BE2A0CFDB94EC0F40742F10C18025573D8FBFADECDDF60F4652BAE671F6031C02A7CB5
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,........@..D.;

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (318)
Category:	downloaded
Size (bytes):	9894
Entropy (8bit):	4.981124226726379
Encrypted:	false
SSDEEP:	192:S1/K/pk/2J0o01HjIA28jtQlThQPIiHCIWXsDmRInYzCsR+fb6CRB6NgdRKb6:G/K/pk/20oK0A28jIiHMhz/gb6A1RKu
MD5:	3AD1FA5B0F1C4A72D44414C819B16620
SHA1:	A15A051F27E9F6DEA5666D845227E6FAC541CCE1
SHA-256:	EB76C0E09E9360F7A76D746D302F5FFE738AB07C19E52733C96568A704B3F5DD
SHA-512:	807EBEE97234389E055E64AD4995F166AF28370773BEBAD3D959E75A95ABA51209E460AC51D4D56E55D988863C8948518F3CBF6DB457C1017A493DE6CEAE1F15
Malicious:	false
Reputation:	low
URL:	https://account.venmo.com/_next/static/chunks/9744.04c9c3ae7494be82.js
Preview:	"use strict";.(self["webpackChunk_N_E"] = self["webpackChunk_N_E"] \|\| []).push([[9744],{../*/ 59744:.// (function(__unused_webpack_module, __webpack_exports__, __webpack_require__) {..__webpack_require__.r(__webpack_exports__);./ harmony import / var react__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(67294);./ harmony import / var _hooks_useMParticle__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(58470);...var MParticle = function(param) {. var profile = param.profile;. var ref = (0,_hooks_useMParticle__WEBPACK_IMPORTED_MODULE_1__/ .useMParticle / .R)(), login = ref.login, getCurrentUser = ref.getCurrentUser;. /. Every time the APIs are invoked, the SDK will immediately upload an HTTP request.. * Because of this, these APIs must only be invoked when the user actually logs in, logs out, or otherwise changes state.. * A common mistake is to call an API such as identify or login on every page load - this is not necessary and will result in high netw

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29584)
Category:	downloaded
Size (bytes):	62803
Entropy (8bit):	5.346538898025892
Encrypted:	false
SSDEEP:	1536:/JnsHxrEcmWDTT74iGJTH30ouheLJqa0FtEYo:/Jn4wWH34dD0ocaT
MD5:	7D5D8BA7C444D65DE632009EC3D111F5
SHA1:	6B8D044917AEE31BB9C0E8236615E22CF3F24E34
SHA-256:	341F44A2485EA5F0ADBBB0706FF327E7179AB8D21AE65D6EA8B75449F2A744D1
SHA-512:	8E06837FA5781F37402A4DA37903747A6E0A6C889814AA177A3695DCE0A2B39FC0376163B012B1F2E3DB6A807A6AEFD929A10B8C85F70114CF79A3089D7D4E17
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ice/vendor3.58593f5f5e8f1c345472.js
Preview:	(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[3],{59591:(t,e,r)=>{var n=r(50008).default;function o(){"use strict";./! regenerator-runtime -- Copyright (c) 2014-present, Facebook, Inc. -- license (MIT): https://github.com/facebook/regenerator/blob/main/LICENSE /t.exports=o=function(){return e},t.exports.__esModule=!0,t.exports.default=t.exports;var e={},r=Object.prototype,i=r.hasOwnProperty,u="function"==typeof Symbol?Symbol:{},f=u.iterator\|\|"@@iterator",a=u.asyncIterator\|\|"@@asyncIterator",s=u.toStringTag\|\|"@@toStringTag";function c(t,e,r){return Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}),t[e]}try{c({},"")}catch(t){c=function(t,e,r){return t[e]=r}}function h(t,e,r,n){var o=e&&e.prototype instanceof d?e:d,i=Object.create(o.prototype),u=new _(n\|\|[]);return i._invoke=function(t,e,r){var n="suspendedStart";return function(o,i){if("executing"===n)throw new Error("Generator is already running");if("comp

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (844)
Category:	downloaded
Size (bytes):	487736
Entropy (8bit):	4.941429396572523
Encrypted:	false
SSDEEP:	3072:H16oCSLBnzpMGuRXITXdSo+X3NiRWF35jxkhdqKKwG3aIB7da3+tY2cA9K54MAkm:VVLFpM9X5zcChXtmA4el
MD5:	FC23723EC305F9E4751AFC58788A4D65
SHA1:	1260BE3CEC21DD05C92FAFFD93B426E473871D49
SHA-256:	3F695DBDA1C4CD16F1EAAD764AF783B68AA0D0341E95FD2F9FA8044548E56690
SHA-512:	1F14BC29CC575A43808C889517659EDFAB21FE02E6F0F6CE14EAD13657DF03211677F90312D65B6B13B175EAD0B19493CE0EE03A83A09BC1C1F9E572DC513FAF
Malicious:	false
Reputation:	low
URL:	https://account.venmo.com/_next/static/chunks/main-6922df91ee43af36.js
Preview:	/****/ (function() { // webpackBootstrap./**/ .var __webpack_modules__ = ({..// 96086:.// (function(module) {.."use strict";..var assign = Object.assign.bind(Object);.module.exports = assign;.module.exports["default"] = module.exports;..//# sourceMappingURL=object-assign.js.map..// }),..// 40037:.// (function() {.."trimStart"in String.prototype\|\|(String.prototype.trimStart=String.prototype.trimLeft),"trimEnd"in String.prototype\|\|(String.prototype.trimEnd=String.prototype.trimRight),"description"in Symbol.prototype\|\|Object.defineProperty(Symbol.prototype,"description",{configurable:!0,get:function(){var t=/$(.)$/.exec(this.toString());return t?t[1]:void 0}}),Array.prototype.flat\|\|(Array.prototype.flat=function(t,r){return r=this.concat.apply([],this),t>1&&r.some(Array.isArray)?r.flat(t-1):r},Array.prototype.flatMap=function(t,r){return this.map(t,r).flat()}),Promise.prototype.finally\|\|(Promise.prototype.finally=function(t){if("function"!=typeof t)return this.then

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1719), with no line terminators
Category:	downloaded
Size (bytes):	1719
Entropy (8bit):	5.88128059420581
Encrypted:	false
SSDEEP:	48:iEAhbKonjfcvtTARXx/g7b1Muh6LrwUnG:pAcqMSNMMugsuG
MD5:	273365E531157209CEC95A80C2747CCB
SHA1:	75FBA4A2D9B711E630D8DA19409C191DEC38A10F
SHA-256:	99BD47186634A4D2FF8E1260FB0ED973CFF95D8E0555F2BD2AC3102CA2FD7E59
SHA-512:	02532DBA3E9C76DF3E214059469DE42FB73D2FF11FB9C230B9815497F1F0346CD0117813150CB698B96BDE58760F6863036B0E331CBC8FDFBCA4023E48EBF8C8
Malicious:	false
Reputation:	low
URL:	https://www.recaptcha.net/recaptcha/enterprise.js?render=6LdCCOUUAAAAAHTE-Snr6hi4HJGtJk_d1_ce-gWB&hl=en
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.recaptcha.net/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['enterprise2fa']=cfg['enterprise2fa']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('6LdCCOUUAAAAAHTE-Snr6hi4HJGtJk_d1_ce-gWB');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A89JPrWYXvEpNQ/xE+PjjlGJiBu/L2GfQcplC/QkDJOS1fBoX5Q4/HLfT1dXpD1td7C2peXE3bSCJiYdwoFcNgQAAACSeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.pre

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18277)
Category:	downloaded
Size (bytes):	18378
Entropy (8bit):	5.3337389951519105
Encrypted:	false
SSDEEP:	384:VnT5OB4YjnHQEsxCsDWE9I8Im0bnx+Rezl+GDEP9XUB7cmwJgDsHrvZAOfZ1IUxz:C7jnHJsxCpE9I8ImOnx+RTDlUBYmwmuv
MD5:	2AC7D13DB73C56258C169965A4157D12
SHA1:	4849CA86BD889ACCFE45CF15B1F3C54AC6DB36D0
SHA-256:	FA02C4405A89241780F48BB59916B2F627FC043C1D81A60282354E2E120C21F2
SHA-512:	0D89E198B54EB7ADBD4AD95522D95FF021337073EBAAEB0B9979634F99F631F18E30144837D26802842BC72612F4B7C319C407A00A4D46632196BCD3793CEB08
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/hc/assets/Datepicker-773be0690e250f0aee14c3624440e63d.js
Preview:	/! For license information please see Datepicker-773be0690e250f0aee14c3624440e63d.js.LICENSE.txt /.(self.webpackChunkhelp_center=self.webpackChunkhelp_center\|\|[]).push([[77178],{18729:function(e,t,n){"use strict";n.r(t),n.d(t,{default:function(){return g}});var a=n(68420),i=n(27344),s=n(19755),o=n.n(s),r=n(38016),l=n.n(r),h=n(30381),d=n.n(h),u=n(84319),c=n.n(u),f=n(8216),p=l()("date.datepicker.date_format").replace("dd","_01_").replace("d","_02_").replace("oo","_03_").replace("o","_04_").replace("DD","_05_").replace("D","_06_").replace("mm","_07_").replace("m","_08_").replace("MM","_09_").replace("M","_10_").replace("yy","_11_").replace("y","_12_").replace("_01_","DD").replace("_02_","D").replace("_03_","DDDD").replace("_04_","DDD").replace("_05_","dddd").replace("_06_","ddd").replace("_07_","MM").replace("_08_","M").replace("_09_","MMMM").replace("_10_","MMM").replace("_11_","YYYY").replace("_12_","YY"),g=function(){function e(t,n){(0,a.Z)(this,e),this.$input=o()(t),this.$datepicker

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23093), with no line terminators
Category:	downloaded
Size (bytes):	23093
Entropy (8bit):	5.245149224886793
Encrypted:	false
SSDEEP:	384:v0Ap5n5P9Nxf4hfWGwR+EkE+14QnZ/X2NWKW4BCCMHxDkZbaXpweyGobcUWfgMcC:J5n51f4hfWGwR+Tn14QnZ/b3J7yGQMUE
MD5:	7BD369E3384E9D3AD0173877F8BCF402
SHA1:	5CE0D9D3CF502B29FA7C28A926A459AF181A9A08
SHA-256:	0EC34B2C64CF8AC9E34F0AB429C9B2909B504C4C4FFC9A550A4A39771D410EC8
SHA-512:	1C9B5C7B7238107043E35008204667C3829AE1BB018A36EF1BEA6A2B42B899B6EBF571697377E9C7ACA51234D91AAEA64EF0C24C8F7AC560444647D699384BD6
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/webcaptcha/ngrlCaptcha.min.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};return e[r].call(a.exports,a,a.exports,n),a.l=!0,a.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var a in e)n.d(r,a,function(t){return e[t]}.bind(null,a));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=6)}([function(e,t,n){var r=n(1);e.exports.find=function(e,t){if(Array.isArray(e)\|\|void 0!==e.

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16759), with no line terminators
Category:	downloaded
Size (bytes):	16759
Entropy (8bit):	5.285851883590624
Encrypted:	false
SSDEEP:	384:A3Bk76QCb7/cms2WeaHh1RoCBXGDs0AarqTkoRRn9SrwYz3HCcC1LFTFNAAUo+fs:A3Bk76QCb7/cmsheaHh12CBWDs0bqTk2
MD5:	4D52B7A8968C41C3B7B71287D56A73C9
SHA1:	5A3DCEE4E10973966A71FDE19BD936B55A9E4C44
SHA-256:	DB3DB800F6D644D0F4598A98BFB67E1BD351AFA721956620B8C0975D95EC0803
SHA-512:	1086CB398E06C67DDA33B3D4960987DDC2991918265317F27A8786A50B91283ABC3F16BEFBECE450575DDF700271390998A520BF02EF10E39855A67946487F1E
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ice/vendorVenmo35.8a7a4e709b77ea3ea16a.js
Preview:	"use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[35],{15921:(e,t,r)=>{r.d(t,{Z:()=>p});var n=r(87462),o=r(15671),a=r(43144),s=r(35776),i=r(54013),c=r(26975),u=r(5034),p=function(){function e(){var t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};(0,o.Z)(this,e),this.options=t}return(0,a.Z)(e,[{key:"collect",value:function(e){var t=new Map;this.sheetsRegistry=new i.xE;var r=(0,u.Z)();return s.default.createElement(c.ZP,(0,n.Z)({sheetsManager:t,serverGenerateClassName:r,sheetsRegistry:this.sheetsRegistry},this.options),e)}},{key:"toString",value:function(){return this.sheetsRegistry?this.sheetsRegistry.toString():""}},{key:"getStyleElement",value:function(e){return s.default.createElement("style",(0,n.Z)({id:"jss-server-side",key:"jss-server-side",dangerouslySetInnerHTML:{__html:this.toString()}},e))}}]),e}()},26975:(e,t,r)=>{r.d(t,{NU:()=>f,ZP:()=>d});var n,o=r(87462),a=r(45987),s=r(35776),i=r(5034),c=r(54013),u=r(5

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1843), with no line terminators
Category:	downloaded
Size (bytes):	1843
Entropy (8bit):	5.107383351581259
Encrypted:	false
SSDEEP:	48:iQ4QzzVZlhBhlUGS4Aeia2yxUx9Z7PMyv2kmNwnlpdcbpiFKM:9JrtS4aEuJ1ld
MD5:	B8CCCAE3CB418A4A6DD6EBFBF57BB693
SHA1:	137CFF29369F000C84A7BBAE022AE5AB3286DD69
SHA-256:	0CC6051C05D33B67AF457B073AB13E2B6C7B5B52FC3546801DA12EBD4D8434AE
SHA-512:	2E417B23BE8902307D0AF147C5FBE5A5A80C98F45D74067F597F8B1CC53F18BE35609A2C1EC323D7B735C895A4499C4701777B484B4B46CF90056B527ADA753E
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/hc/assets/92085-55ddff94373af8bb6493031a7691529c.js
Preview:	"use strict";(self.webpackChunkhelp_center=self.webpackChunkhelp_center\|\|[]).push([[92085],{92085:function(e,t,r){r.r(t),r.d(t,{default:function(){return o}});var n=function(){this.nonDigitsRegex=/[^\d]/g,this.ccNumbersRegex=/[0-9]{13,19}/,this.redactedCCNumberRegex=/^[X]{9,15}/,this.minLength=13,this.maxLength=19};n.prototype={redact:function(e){if(this.alreadyRedactedCCNumber(e))return e;var t=this.removeNonDigits(e);if(this.validLength(t))return this.redactCCNumber(t.toString());var r=this.removeSpacesAndDashes(e),n=this.ccNumbersRegex.exec(r.toString());return null!==n?this.redactCCNumber(n.toString()):this.charRepeater("X",t.length)},validLength:function(e){return e.length>=this.minLength&&e.length<=this.maxLength},removeNonDigits:function(e){return e.replace(this.nonDigitsRegex,"")},removeSpacesAndDashes:function(e){return e.replace(/-\|\s/g,"")},redactCCNumber:function(e){var t=e.length,r=t-4,n=e.toString().substring(r,t);return this.charRepeater("X",r)+n},alreadyRedactedCCNumber

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	244562
Entropy (8bit):	6.002228072830874
Encrypted:	false
SSDEEP:	6144:T3LfE/9YZni3kvCaYST+AlacioOWJ/iFkUbjUtV0yPWzS:0VYAOVYrAlDiOExjUFWzS
MD5:	49AC4D4F24C8B48697A427251A708BF4
SHA1:	DF51700FB378DD2CE15E5AFDCF7879B470B9C3AE
SHA-256:	36AEE5EE6BFEED64716166F65A78D595E8ECE8F85C49EA0A4AD19435516638B7
SHA-512:	0880290F3618B9B87E4D2AC7BDA358508678546FB3A5CD0AEC1F49EF68C8CCC278AA6790D3A3FF18ED80415B43D894794305F68E69FAFAEEB21991ED1FE67F31
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ice/vendorVenmo30.8afd5eb5bf057a663262.js
Preview:	"use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[30],{70922:A=>{A.exports="data:font/woff;base64,d09GRk9UVE8AAL+YAAsAAAABbVgAAQAAAAC9vAAAAXQAAAMPAAC/MAAAAGhDRkYgAAAJPAAAZP8AAIJlJs1+/EdQT1MAAHW0AABIBwAAy+pyccBcR1NVQgAAcjQAAAN+AAAHsmCpS1JPUy8yAAABbAAAAFcAAABgkgFj9GNtYXAAAAQwAAAE9QAABuaeAc5EaGVhZAAAAQgAAAA2AAAANhBLJ2loaGVhAAABQAAAACEAAAAkCBEFhGhtdHgAAG48AAAD9wAACMYizmHRbWF4cAAAAWQAAAAGAAAABgIzUABuYW1lAAABxAAAAmsAAAX/lB12N3Bvc3QAAAkoAAAAEwAAACD/ZwAnAAEAAAABAABilsRqXw889QADA+gAAAAA1lb13AAAAADW4u3x/zj/AwTCA7kAAAADAAIAAAAAAAB42mNgZGBgVvhvwfCF5fF/i/8WLIcYgCLIgMkAAJ99Bp4AAAAAAFAAAjMAAHjaY2BmimTaw8DKwMLUxRTBwMDgDaEZ4xjUGTUZGJi4OViZGUFgAQODvgODSjUDFAQ7h/gDKYXfTMwK/y0YvjAfYxRTYGCYDJJj/MC0jUEBCJkAUFAN3wB42rWSTWsTQRjH/5vd9IW2ocGbBBkU9JTdpFAoLR6SgD1WbNqTKEN2kwz7MmF22pCjR7+J/QIe/BYe9Dt48qZXn5kM6bZgA4IZduc3z/P8n5edAHjiFfCw/H2iZ8keGnRacg0BPjv20cIXxwEe4bvjOvbww/EGmvjleBOht+l4C3veoePtCu+g5fUd71a4gWfeO8f7lX6ath8fXrBNjb72Pjj28Lz21XENjdpvxz6O/LrjAE

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15682)
Category:	downloaded
Size (bytes):	285089
Entropy (8bit):	5.603179365394315
Encrypted:	false
SSDEEP:	3072:U5S/XQaf5qZ3fhO+zJBcT8PG1LceF2/ea8LR9Wk9ARFaQjSTnXDL9btIMZZdQ5cd:r/QX5NzJlYLceF+hYTnXP9RIMZc5Y0a1
MD5:	E6C9C0F7892A247DD7BFF89E3CE577DB
SHA1:	3C7B9504AD352F97AEAD9DE24039EFE856C820CC
SHA-256:	E8338DB2175A7751FB9AA3B176639C6E3DE1B41EE80C91A2195D691024563AAF
SHA-512:	07C47AEE5EB10E6926F56979CCED11E68879978F0523EA60A707130676D1E6F30A07B856BDBBF0F0BD4F7374AF46E5D9FD3BD86583A3EC1CCF39323159B2376D
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-ZCV327BG16&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"vtp_signal":2,"function":"__c","vtp_value":2},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"function":"__c","vtp_value":false},{"vtp_signal":2,"function":"__c","vtp_value":2},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":21,"vtp_value":true,"tag_id":18},{"function":"__ogt_ip_mark","priority":21,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",4],"vtp_enableIpRegex":true,"tag_id":20},{"function":"__ogt_referral_exclusion","priority":21,"vtp_includeConditions":["list","venmo\\.com"],"tag_id":21},{"function":"__ogt_session_timeout","priority":21,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":22},{"function":"__ogt_dma","priority":21,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":23},{"function":"__ogt_1

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	77066
Entropy (8bit):	5.334883871350616
Encrypted:	false
SSDEEP:	1536:nzdee/Y/pLzEY7pYJPiG03fk1DxvtiM3tYVAChEcryOQyNsojwdbIQZUIPMqwg0G:z8+1DxvtiM3cEZIJGful4
MD5:	F504E97BEE1D065133E3092038ECD0A6
SHA1:	15DA8DB802566968AF1FD517981B12C3A9B6D374
SHA-256:	152D119A21E8FEEA3C1B7C3CAED9EC51DCE3325610B23DB18A35BEFC275F1DB5
SHA-512:	5CE00241ABE68F68F4F4F7777F1D5AA2F8A3BC5912FF2B4E40A78F1A61F21076FC074B2ADBAEA5C3111543C0E8D8589F1C15D7686D12588CD2DF434015EEDEEB
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ice/vendorVenmo34.1ac1cc6ce8985ed3f498.js
Preview:	"use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[34],{36939:(e,t,a)=>{a.d(t,{Z:()=>h});var o=a(87462),r=a(84506),n=a(29439),i=a(45987),l=a(35776),s=(a(59864),a(86010)),c=a(66037),d=a(79895),p=a(52543),u=a(88078),m=a(22775),f=l.forwardRef((function(e,t){var a=e.children,p=e.classes,f=e.className,h=e.defaultExpanded,g=void 0!==h&&h,b=e.disabled,v=void 0!==b&&b,y=e.expanded,x=e.onChange,Z=e.square,k=void 0!==Z&&Z,C=e.TransitionComponent,E=void 0===C?c.Z:C,R=e.TransitionProps,S=(0,i.Z)(e,["children","classes","className","defaultExpanded","disabled","expanded","onChange","square","TransitionComponent","TransitionProps"]),w=(0,m.Z)({controlled:y,default:g,name:"Accordion",state:"expanded"}),N=(0,n.Z)(w,2),T=N[0],z=N[1],P=l.useCallback((function(e){z(!T),x&&x(e,!T)}),[T,x,z]),$=l.Children.toArray(a),I=(0,r.Z)($),B=I[0],M=I.slice(1),D=l.useMemo((function(){return{expanded:T,disabled:v,toggle:P}}),[T,v,P]);return l.createElement(d.Z,

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	14920
Entropy (8bit):	4.878065921497952
Encrypted:	false
SSDEEP:	192:RQQhp3vbzySmiK/4pLEmiHw9kM11vy1crQDe/fjPMOs+t5e98iqSe9aQWyaiZ4iP:nhbzZKAP7FsN3ecucnBDczUk
MD5:	13BCEEEAF84DF39CC5FBBDDF19B3D3FB
SHA1:	499E4B12C5B8F8DBFA0A73B46E996817545F4AD4
SHA-256:	4673C229C2C1D356B98C232C599AFDB44C85E7279C63C3EF962B4BA677378BA9
SHA-512:	C366932331DD195CD9A856F71751107774CA214A0A53FB72B6E49B4A0705D10A43A7B6E9B8F187DDA37D9F894B03C84A430106408C490B2B05125B3865606ED6
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ncs/ncs.js
Preview:	(function ncs(window) {. const getCookiePref = (cookiePrefsString) => {. let cookiePrefsValueString;. let match = document.cookie.match(new RegExp('(^\| )' + (cookiePrefsString \|\| 'cookie_prefs') + '=([^;]+)'));. if (match) { cookiePrefsValueString = match[2]; }. return cookiePrefsValueString. }.. const getCookiePrefValue = (cookiePrefsString) => {. const cookiePrefsValueString = getCookiePref(cookiePrefsString). cookiePrefsValue = cookiePrefsValueString &&. decodeURIComponent(cookiePrefsValueString) &&. decodeURIComponent(cookiePrefsValueString).split(',').reduce((acc, val) => {. const [k, v] = val.split('=');. if (k && v) { acc[k] = v; }. return acc;. }, {});. return cookiePrefsValue;. }.. const serverSideCookieFiltering = (cookieList, filterAPI) => {. const xhr = window.XMLHttpRequest ? new XMLHttpRequest() : new ActiveXObject('Microsoft.XMLHTTP');. xhr.open('POST', filterAPI, true);. const data = {. cookieLi

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5215
Entropy (8bit):	4.168315244132884
Encrypted:	false
SSDEEP:	96:+oftwovGsCt95ccczPSjnAZpZKLFMzftNOcJcsOT:+ACtXclPS7vWz7xCsOT
MD5:	446E18CA3767A3B9C9BF347D004F003C
SHA1:	41A09CD28607A60280D9A9E00FD1C8842C4108F7
SHA-256:	CBFB2A7D4AD8F71FAA905CC2DD71F7BC2913CC5FD50D10C0E20E53DE828FCF82
SHA-512:	85F4F263AF1DC78E7655CEF3173D2834274B494DF1F4E680ABFBDC76E59B556F83017847BE48B28920BC2604BA22B233A743B4C56C3870AF651A92007641C91A
Malicious:	false
Reputation:	low
Preview:	<svg width="159" height="45" viewBox="0 0 159 45" fill="none" xmlns="http://www.w3.org/2000/svg">.<rect x="0.75" y="1.70923" width="157.5" height="42.4911" rx="21.2456" fill="white" stroke="black" stroke-width="1.5"/>.<path d="M64.614 16.9463C61.674 16.9043 59.616 19.2143 59.658 22.0703C59.616 24.9683 61.688 27.2083 64.46 27.1663C65.902 27.1663 66.994 26.5923 67.666 25.6403V26.9563H69.038V22.5743H64.824V23.9883H67.484C67.022 25.0383 65.958 25.6823 64.726 25.6823C62.626 25.6823 61.198 24.1563 61.198 21.9723C61.198 20.0123 62.556 18.4303 64.6 18.4303C66.098 18.4303 67.134 19.3123 67.372 20.6703L68.856 20.1943C68.492 18.2623 66.84 16.9463 64.614 16.9463ZM73.4828 19.9703C71.4248 19.9703 69.9548 21.5523 69.9548 23.5823C69.9548 25.6123 71.4108 27.1663 73.4828 27.1663C75.5688 27.1663 76.9968 25.6123 76.9968 23.5823C76.9968 21.5523 75.5548 19.9703 73.4828 19.9703ZM73.4828 25.6823C72.9088 25.6823 72.4328 25.4863 72.0548 25.0943C71.6768 24.6883 71.4948 24.1843 71.4948 23.5823C71.4948 22.9663 71.

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65369)
Category:	downloaded
Size (bytes):	121457
Entropy (8bit):	5.096596153838351
Encrypted:	false
SSDEEP:	768:rf7Gxw/Tc/hOWlJ+UtVIuiHlqAmQI4X8OAdXFxbv8KIf2BdU+JdOMx1iVvH1FS:sw/YGGIuiHlqAmO8l1bNXdOqT
MD5:	7F89537EAF606BFF49F5CC1A7C24DBCA
SHA1:	B0972FDCCE82FD583D4C2CCC3F2E3DF7404A19D0
SHA-256:	6D92DFC1700FD38CD130AD818E23BC8AEF697F815B2EA5FACE2B5DFAD22F2E11
SHA-512:	0E8A7FBD6DE23AD6B27AB95802A0A0915AF6693AF612BC304D83AF445529CE5D95842309CA3405D10F538D45C8A3A261B8CFF78B4BD512DD9EFFB4109A71D0AB
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css
Preview:	/!. Bootstrap v3.4.1 (https://getbootstrap.com/). * Copyright 2011-2019 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:none;text-decoration:underline;-webkit-text-decoration:underline dotted;-moz-text-decoration:underline dotted;text-decoration:underline dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1499
Entropy (8bit):	4.170708520866106
Encrypted:	false
SSDEEP:	24:ta1yuXMMlV4qQDzWpaUnWjzvsLx+Ga4H89hWPsn7AEMwkQXY8R2kZBg83SxjSXGR:afVqDqpa6GGbc9hWPsn0EpXY8R2krgjn
MD5:	5166C0D79BAE42FF989C186869DC25C0
SHA1:	038ED0C8CC25A0633747BBEF0785E533E2B9EC19
SHA-256:	C09BF62C2D46708A1FD605812B522232111EA99D68A17FD835BCAF8FF816486C
SHA-512:	4ADB1D11785DD7424EE2ED3E45DCCCA86D5F93D8E40BD6C1E4C348FA349B1AC015C0C28A5997D0480D9F5532357297DFEB021B713FDDE231D3A33EA4B95944AA
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/gkyt4bl1j2fs/1Xnb0FQsxsETwn52uJjqmH/547b5cde0b90489e9de1adf379f69168/64e29ead-c913-4ac2-b39d-c0a03b61cb6a_twitter-icon.svg
Preview:	<svg width="22" height="18" viewBox="0 0 22 18" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M10.5909 5.02407L10.6355 5.75935L9.89213 5.66931C7.18643 5.32418 4.82266 4.15375 2.81569 2.18802L1.8345 1.21265L1.58177 1.93292C1.04658 3.53852 1.38851 5.23415 2.50349 6.37458C3.09815 7.00481 2.96435 7.09485 1.93857 6.71971C1.58177 6.59966 1.26958 6.50963 1.23984 6.55464C1.13578 6.65968 1.49257 8.02519 1.77504 8.56539C2.16157 9.31567 2.94949 10.0509 3.81174 10.4861L4.5402 10.8312L3.67795 10.8462C2.84542 10.8462 2.81569 10.8612 2.90489 11.1764C3.20222 12.1517 4.37667 13.1871 5.68492 13.6373L6.60664 13.9524L5.80385 14.4326C4.61453 15.1228 3.21708 15.513 1.81964 15.543C1.15065 15.558 0.600586 15.618 0.600586 15.663C0.600586 15.8131 2.4143 16.6534 3.46981 16.9835C6.63637 17.9589 10.3976 17.5387 13.2222 15.8731C15.2292 14.6877 17.2362 12.3318 18.1728 10.0509C18.6782 8.83549 19.1837 6.61467 19.1837 5.54927C19.1837 4.85901 19.2283 4.76898 20.0608 3.9

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65528), with no line terminators
Category:	downloaded
Size (bytes):	217399
Entropy (8bit):	4.773635873435981
Encrypted:	false
SSDEEP:	6144:fSBUfE13F8MqHPwSzeDtRjQ2YWKF2GxEBSDF:lyD+
MD5:	05A4D042DE4A0BD7E0E4CB23B83ADCF1
SHA1:	15F6F2B6AA1457678F40A155C9BCAA559095C43E
SHA-256:	E873D10F5F0F3A84766221F56B36A47BDF76A5D974704653744914862C0DAEF9
SHA-512:	54AC1331762036F4D4E7D0002DB8D55F7777306D82FB75EFF3FFBC41E930AD0C9CBE1B4E635ADBC5250E5E265EE7655E410B3432B47FD7C63025377D0BE0D4B0
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/hc/assets/en-us.05a4d042de4a0bd7e0e4.js
Preview:	!function(){window.I18N=window.I18N\|\|{};var e,t={locale:"en-us",direction:"ltr",translations:{"activemodel.attributes.request.anonymous_requester_email":"Anonymous requester email:","activemodel.attributes.request.recaptcha":"Recaptcha:","activemodel.errors.models.topic_form.attributes.base.topic_limit":"You have reached the maximum number of topics for your account: %{topic_limit}","activerecord.attributes.comment.body":"Comment:","activerecord.attributes.community_comment.body":"Comment:","activerecord.errors.format":"%{attribute} %{message}","activerecord.errors.full_messages.format":"%{attribute} %{message}","activerecord.errors.messages.could_not_save":"Could not save file","activerecord.errors.messages.not_an_integer":"must be an integer","activerecord.errors.models.access_policy.attributes.manageable_by.inclusion":"Must be `staff` or `managers`","activerecord.errors.models.access_policy.attributes.viewable_by.inclusion":"Must be `everybody`, `signed_in_users`, or `staff`","activ

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5534), with no line terminators
Category:	downloaded
Size (bytes):	5534
Entropy (8bit):	5.370999499940656
Encrypted:	false
SSDEEP:	96:0vR40a4f92xB6ZAnXZ20hwtg8B2RWNnQ+0uw/XY/fo91Bsu8:kR40D9qp2Ewt7AL/ry
MD5:	761DDDD6122707AC9E98C4DDD253208F
SHA1:	3D9F90F8B438F8916CD38174A27A8F5E4C4956E7
SHA-256:	8B202D5BD55968CE4BFC21C063166EAEBE62104275CE7EC362D78B64B2581C95
SHA-512:	3D83CD74241715BDCFE7C33244B5B585573E04124E066578F04D3F3840060F9D316D9FF05CEFBEA0D2EBFAAD3FB1C7355355AC4E4EAE387F1CEB69BDAB244316
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ice/assets/fn-sync-telemetry-min.js
Preview:	var PAYPAL=window.PAYPAL\|\|{};!function(){"use strict";function i(e){for(var t=0,n=0;n<e.length;n++)t+=e.charCodeAt(n);return t&=t}function s(e,t,n){"undefined"!=typeof e.removeEventListener?e.removeEventListener(t,n,!1):"undefined"!=typeof e.detachEvent&&e.detachEvent("on"+t,n)}function o(e,t,n){"undefined"!=typeof e.addEventListener?e.addEventListener(t,n,!1):"undefined"!=typeof e.attachEvent&&e.attachEvent("on"+t,n)}var e,t,n={},r=(e={idForHiddenField:null,isExceptionThrown:!1,startTime:(new Date).getTime()},t={SC_VERSION:"2.0.1",syncStatus:"data"},{initSync:function(i){try{i=i\|\|{},e.startTime=i.tStamp\|\|e.startTime,e.idForHiddenField=i.fname,t.f=i.fnSessionId,t.s=i.sourceId,t.chk={},t.chk.ts=e.startTime,t.chk.eteid=n.chk.init(t.f,e.startTime.toString()),t.chk.tts=(new Date).getTime()-t.chk.ts,t.dc=JSON.stringify(function(){var t,n=["colorDepth","pixelDepth","height","width","availHeight","availWidth"],r={screen:{}};for(r.ua=window.navigator.userAgent,t=0;t<n.length;t+=1)r.screen[n[t]

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 18320, version 1.6553
Category:	downloaded
Size (bytes):	18320
Entropy (8bit):	7.987553757416452
Encrypted:	false
SSDEEP:	384:qhk+F3g08NMo7p7du1DEyHuYFC8BWpOiV+uYoT+3EZa7nqfKpxTXWbejFT9:AM7B4xEyHuYNQOicuYo4EZaZptXWbej3
MD5:	8A41B4550D23B462AF63FC46FABB46A4
SHA1:	50359B7126ED92C33EFCBF673C286F105D9AE5E7
SHA-256:	AF93D1D952B2DC42C029871CBBB92988835B31C86D4F0CB6A9674B1D1714A20F
SHA-512:	35B08DAFF0A4F929F16113E2FD68C8282DF5F661DD8383DF1545113E1112465DAA9ED11B81C5202BD20CAE9E9F1B7197FB33E6184B097498F82F30C4E3ED9FE8
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/paypal-ui/fonts/PayPalSansSmall-Regular.woff2
Preview:	wOF2OTTO..G.......}...GB..........................n.R.......`..4.6.$..r....#. ..}5xC..7'...V.F.n.T.eGG!.q..x......!.......Rd....E.I^H..M....d..Q.P......:xG.FD.d.=M..".+..Q......z.I..4~.k-.7..,893......5;.`A$$D.`..$.30.h..wB...........C}.<5y...y~n..{oQo.,`lcDm0.C@f ...lm..D..0.?edc...._V\|)....z.}.Hjc............g..P.{I.\..F......./?U..{..&..GPB....yH.0....I...}R..N.M..TQ.....q....2B.S1..[^.1................{...nO....`.RiaDa....l#......^...i.a..[.....8(.e..9.K`...}x~....^...y..~...D..Q.1.0...H....'.hp0.t@$....{F..9.9...-AA...K.@.d.w.B.......~..y.8."n.3%a..`...z....Y.'...1.T,......+......2(,($.c..+...j.....,.E.R.{:..}.#].X&.&.M.}....H.]b.xWS...F.,.4^..d..%z..........Z\|..z.sO..UO.....84...&3.(...8?..0. /....<]...%..Uv.=+.)C..X...(.._..q..l...#M...V.]..T..&O.....Kaw..%...EHHD...0.H.......:'C.._...:...K.-'..MP......hO........k.0N....IN`MQ.\..'.....d-...Z....].Y.g.....$..g0H.p...m.<%......l.S....nO..._......>...(.......VQu.[.......X....

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10652), with no line terminators
Category:	downloaded
Size (bytes):	10652
Entropy (8bit):	5.492387766307282
Encrypted:	false
SSDEEP:	192:GYLqHCGQkc4iez4MqLZy8H9eU+p3wAutJkRKKIVXDw:GY+iGliRUU+p3NcJkRjWXU
MD5:	DC7833D541C2C0130D74005845CF3D6F
SHA1:	65A71D83098B095FB393CE81DF20529BD8AA3BF3
SHA-256:	80773F4F67DC3CB5F590A8AC2F8377DF4B7AD0410D098A6B44D67CEDC91A113B
SHA-512:	BDF0C25005D9CC64A96FD27D36BBF374CF1ED2C5DEB02BA99B5BF61816DDCE936EC9006587A32E4697E24C5D7D89FE27F1678D608FE0037B67A17AAF02D8AA9C
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ice/runtime.db57914c5d92b0ff4de7.js
Preview:	(()=>{"use strict";var e,a,d,c={},o={};function t(e){var a=o[e];if(void 0!==a)return a.exports;var d=o[e]={id:e,exports:{}};return c[e].call(d.exports,d,d.exports,t),d.exports}t.m=c,e=[],t.O=(a,d,c,o)=>{if(!d){var r=1/0;for(l=0;l<e.length;l++){for(var[d,c,o]=e[l],f=!0,n=0;n<d.length;n++)(!1&o\|\|r>=o)&&Object.keys(t.O).every((e=>t.O[e](d[n])))?d.splice(n--,1):(f=!1,o<r&&(r=o));if(f){e.splice(l--,1);var b=c();void 0!==b&&(a=b)}}return a}o=o\|\|0;for(var l=e.length;l>0&&e[l-1][2]>o;l--)e[l]=e[l-1];e[l]=[d,c,o]},t.n=e=>{var a=e&&e.__esModule?()=>e.default:()=>e;return t.d(a,{a}),a},t.d=(e,a)=>{for(var d in a)t.o(a,d)&&!t.o(e,d)&&Object.defineProperty(e,d,{enumerable:!0,get:a[d]})},t.f={},t.e=e=>Promise.all(Object.keys(t.f).reduce(((a,d)=>(t.f[d](e,a),a)),[])),t.u=e=>(({10:"vendorPaypal-046cf405",11:"vendorPaypal-14b2ef91",12:"vendorPaypal-2ad50bf0",13:"vendorPaypal-30b2836a",14:"vendorPaypal-3e128fe0",15:"vendorPaypal-6cb9285f",16:"vendorPaypal-6d3a2882",17:"vendorPaypal-6fac6b1a",18:"vendorP

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64399)
Category:	downloaded
Size (bytes):	255084
Entropy (8bit):	5.159519117191277
Encrypted:	false
SSDEEP:	3072:eDPNddBFak8JUaVDpYujVHUc92smVppuzUPFI9fB8NpjJSyACAV:uNdIVWjNS9cdzAV
MD5:	1E2047978946A1D271356D0B557A84A3
SHA1:	5F29A324C8AFFB1FDB26AD4564B1E044372BEED2
SHA-256:	9528CA634FECAD433D044DDD3E6F9CE1F068D5D932DAFDBB19D8E6DAEA1968BD
SHA-512:	E7BA19FEF5BC00D32347F290E817BDBFFFBF87A6EAF7F9777F439CEEF9FAA8CAB286F3DDD5CBCA051596A73BB44289DE226AABD929263B8312A94F91A47A26DD
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jqueryui/1.13.2/jquery-ui.min.js
Preview:	/! jQuery UI - v1.13.2 - 2022-07-14. http://jqueryui.com.* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/draggable.js, widgets/droppable.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/resizable.js, widgets/selectable.js, widgets/selectmenu.js, widgets/slider.js, widgets/sorta

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 41894, version 1.0
Category:	downloaded
Size (bytes):	41894
Entropy (8bit):	7.990845032653063
Encrypted:	true
SSDEEP:	768:ManQlv756KbkZmyCXtmfvIbGp7ff09PWGJO81mHIhZfhdjIB:MaQh756KgU2vHJfsWiO81hhVjIB
MD5:	93CDAD39D3EA2F9B37B403665A006419
SHA1:	0E986C6F2443007EE37DA358A8D3A06BC67DF3C3
SHA-256:	58F03520078F42B5339BF2DC379A7426BD432BC8902FD47F577E5A0DEF8331D9
SHA-512:	32EB9E04B976D2D81ED7B1FD480CE7550E39A8AEAF56E1F441CCB64FACFE95200A18DD987F3534FA7DA6A63D03633D164D81346EE3BF08BD527892288E80A6A7
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/messaging/venmo-assets/Scto-Grotesk-A-Regular.woff
Preview:	wOFFOTTO..........C@...........u.......8...nCFF ...@..]...yR.Z.bGPOS..n...35....f.L.GSUB..k....~....`.KROS/2...l...Y...`..a.cmap...4..........Dhead.......6...6.G'.hhea...@...!...$...whmtx..g(..........r=maxp...d.........3P.name.......i.....P..post...,....... .g.'.........@.{_.<..........V...........8.#................x.c`d``V.o.........,...".I...\|.......P..3..x.c`frb.........................YY..A`......J5...;..380(.fbV.o..........d...k.m..@...>......x..Mn.1....I?..Q.".P... 3IWU#!E.tGQ.v...8...8.8.....5W..`.M..p.xv.tR..B"....~o..O..../....F.W....C<.7..<.w...O.kx.....{.7...=WK.........,x.y....'DP.R.o.O...X..y....9........W.8..y.._.......Z.M.V.=o....W.w._..y...Q...aW..<dg....d....9{..(...ID>F.c..(R.f.`....1.:e..3.y.'f..,D.zTQ...4..D.e...r...$.K..6..21.Y.\.T.&....h..:...{s...7......[...#...1.8.N.Q..u3..=5....!ct.0......a.pE...4qHt...%.)I].D)8"...h.R\|.$A......y.<....I...O.r0..q..!+......y(.....9..d.......>.$.........2r......8.l!I?Y.<..c........1....lYj

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11919), with no line terminators
Category:	downloaded
Size (bytes):	11919
Entropy (8bit):	5.188437282903873
Encrypted:	false
SSDEEP:	192:PcKsCBHuRRo5tnhu0q7u9oVjRoAND+5izavJny5VdSM:ACBHup0YuO+5izavJnyZv
MD5:	90C1775D172DF374F22631D6D2BD2007
SHA1:	D55723CEFCB5B036DE75950AC2E80F32A1D35DB2
SHA-256:	E0283C673C9B01A89B0A82CC859F23493D63731A8A165CDB4B771BD198FA280D
SHA-512:	3D6E52D3C25AADDF821C147C72E4D8B6556F537841EE435AE1B983017920036C387E0DC92FEBE2C5912C2B0F8FE8585DBD02EAA8CD64ED3FF5198AAB4F988294
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/hc/assets/Multiselect-a2d65a7b7e9a562b8613b7199407bbdf.js
Preview:	(self.webpackChunkhelp_center=self.webpackChunkhelp_center\|\|[]).push([[20419],{30703:function(e,t,n){"use strict";n.r(t),n.d(t,{default:function(){return z}});var i=n(86302),s=n(68420),a=n(27344),o=n(76986),r=n.n(o),c=n(11882),l=n.n(c),u=n(39022),p=n.n(u),d=n(14418),h=n.n(d),v=n(83728),f=n(97606),b=n.n(f),k=n(24282),g=n.n(k),y=(n(35627),13),m=27,O=32,x=38,E=40,S=39,I=37,w=function e(t,n){var i=[];return n&&i.push({parent:n}),t.forEach((function(t){i.push(t.options?r()({},t,{options:e(t.options,i)}):t)})),i},L=function e(t,n){return g()(t).call(t,(function(t,i){return i.options&&(t=p()(t).call(t,e(i.options,n))),l()(n).call(n,i.value)>-1&&t.push(i),t}),[])},M=function(e,t){var n=Element.prototype.matches\|\|Element.prototype.matchesSelector\|\|Element.prototype.mozMatchesSelector\|\|Element.prototype.msMatchesSelector\|\|Element.prototype.oMatchesSelector\|\|Element.prototype.webkitMatchesSelector;return!!n&&n.call(e,t)},A=n(38016),C=n.n(A),T=n(73560),H=function(){function e(t){(0,s.Z)(this,e),th

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	310
Entropy (8bit):	5.3738250188962216
Encrypted:	false
SSDEEP:	6:yEh3jAgCBNUp7L+LRB2DOexWb2RhQJFtXXC3ArJSLhhIl/1cK2fvFive:zj3aRB2DOexWb2RKJFtHfch41cJvce
MD5:	AD34D9E8BE1E0BADCD5539800A6781C1
SHA1:	35B1657F4C74C5E8D45924140966708B013E2284
SHA-256:	C73EB79EED92E8D934B9F23C7544FA910D687CF448B3B792EFFF1146C28EA6CF
SHA-512:	F5FDA86DA71D97D8562C1887DA884C5A6CE1672389E7C174C1F7736A3B833CFD29F4D3FB3FF834A926A4866A6F691E666168BE0EAE46B90246A1D0BCC73DEB4B
Malicious:	false
Reputation:	low
Preview:	fl=368f206.h=www.cloudflare.com.ip=102.129.152.220.ts=1714134220.6.visit_scheme=https.uag=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36.colo=MIA.sliver=none.http=http/1.1.loc=US.tls=TLSv1.3.sni=plaintext.warp=off.gateway=off.rbi=off.kex=X25519.

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (353), with no line terminators
Category:	downloaded
Size (bytes):	353
Entropy (8bit):	5.273066239437083
Encrypted:	false
SSDEEP:	6:FtDjdYRQLee245/EwIEgIkKwHS4VKKP1PEesNm5w5Ee7bSlntDjd6EpXDtDjd6h:FtCRQLB2wEoDwHuHNm+9GlnttXDti
MD5:	93BE6D757F28230900FD2FFB4091E349
SHA1:	98FE6DA7DBB0EAC7B1D05D12C7257F99758543AB
SHA-256:	D0675FEF3CE35AD654F94CC2B675DE2729BD86874EC0A912FEC89575700513C5
SHA-512:	876E28AA82F5A156EA605E1F1996C26DD3C181B49CA23190FF4C92F4DBC4FCD0450D4F86086FB4B52EAD7E781865CC1464B8A6B3364186EDFB972A5569065CC6
Malicious:	false
Reputation:	low
URL:	https://account.venmo.com/_next/static/KayRtQ_1ym5_-NM6DR61r/_middlewareManifest.js
Preview:	self.__MIDDLEWARE_MANIFEST=(function(a){return [["\u002F",a],["\u002Faccount",a],["\u002Fcharity\u002Fdonate",a],["\u002Fcreditcard",a],["\u002Fdownload-app",a],["\u002Fpayment-link",a],["\u002Fsettings\u002Fpayment-methods",a],["\u002Fstory",a],["\u002Fu",a],["\u002Fwebviews",a]]}(false));self.__MIDDLEWARE_MANIFEST_CB&&self.__MIDDLEWARE_MANIFEST_CB()

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65435)
Category:	downloaded
Size (bytes):	616722
Entropy (8bit):	5.5918614687545425
Encrypted:	false
SSDEEP:	6144:6rEVX+S8ni+vSji+vSQiRnEmSJKas5GZS1z/USuU0ZMeAYS:6rEV8n4lihUKJGZS2SrWMhx
MD5:	8D8BE71CB03AF1F2C20524F69272EFE8
SHA1:	774908FA27A86AECFBD2C85167473F8DAFE011D6
SHA-256:	16D70C996DC5B0E466A7DAADBEA194A0E9E1444CEE7ED288B7B0046107006D80
SHA-512:	BC89FCB53D15346A2D905A5BC9E5C6755C6BB038B5EEE4DBF2EC03FEBDB01E044DFAF7E3DDD1B0226EAFC7B0520C5779C7A43BBB10C3495033C10BAEC189910C
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/hc/assets/hc_enduser-fb88a13df887cd7e3577fa4983341c63.js
Preview:	/! For license information please see hc_enduser-fb88a13df887cd7e3577fa4983341c63.js.LICENSE.txt /.!function(){var e,t,n,r,a={38016:function(e,t,n){e.exports=n(66341)},78701:function(e,t,n){const r=n(73216),a=n(37566);function o(){if(!(this instanceof o))return new o}function i(e,t){!function(e){const t=a.get().files.intl;t&&!window.Intl?r(t,(function(t){t\|\|Intl.Collator\|\|(Intl.Collator=o),e(t)})):e()}((function(){const n=a.get().files,o=e.split("-")[0],i=n["relative."+("no"===o?"nn":o)]\|\|n["relative.en"];i?r(i,t):t()}))}o.prototype.compare=function(e,t){return e<t?-1:e>t?1:0},e.exports=function(e,t){e=(e\|\|"en-us").toLowerCase(),function(e,t){let n=e.length,r=!1;e.forEach((function(e){e((function(e,a){r\|\|(e?(r=!0,t(e)):0==--n&&t())}))}))}([function(t){i(e,t)},function(t){!function(e,t){const n=a.get().files,o=n[e]\|\|n[e.split("-")[0]]\|\|n["en-us"];r(o,t)}(e,t)}],t)}},73216:function(e,t,n){e.exports=function(e,t){const r=document.head\|\|document.getElementsByTagName("head")[0],a=document

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	70998
Entropy (8bit):	5.296856014963618
Encrypted:	false
SSDEEP:	768:JcIrBJY0xE9KT4J8BnQsoCBMY0EVAlu3mWCdPchp+mx8wHPBKSSK9:FNE9K8KisbNkgrX
MD5:	776E6ADE025A7EB5917DA74DF07EF9EF
SHA1:	666A972444A5DC4AD5C73E66FB942290ECCBBED5
SHA-256:	A1602962888CFA57AFB6B37A761C37FBC59AB03913CF46812350CB0DBA8EC2D1
SHA-512:	87254C65FD4D0989FD5705550AE092D34AA3E70B43FA7D1EE61149371E77937D029496BD6FAB9BC8374BE2FD4D4129162A0ED1BFCC512B6DD6EBECDDB9785B1C
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ice/vendor8.3458659a4a33819095f2.js
Preview:	"use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[8],{80132:(t,e,n)=>{function r(t){if(null===t\|\|!0===t\|\|!1===t)return NaN;var e=Number(t);return isNaN(e)?e:e<0?Math.ceil(e):Math.floor(e)}function a(t){return a="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},a(t)}function o(t,e){if(e.length<t)throw new TypeError(t+" argument"+(t>1?"s":"")+" required, but only "+e.length+" present")}function i(t){o(1,arguments);var e=Object.prototype.toString.call(t);return t instanceof Date\|\|"object"===a(t)&&"[object Date]"===e?new Date(t.getTime()):"number"==typeof t\|\|"[object Number]"===e?new Date(t):("string"!=typeof t&&"[object String]"!==e\|\|"undefined"==typeof console\|\|(console.warn("Starting with v2.0.0-beta.1 date-fns doesn't accept strings as date arguments. Please use `parseISO` to p

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24178), with no line terminators
Category:	downloaded
Size (bytes):	24178
Entropy (8bit):	5.356542304325167
Encrypted:	false
SSDEEP:	192:nrxlScLuL8DmXU8pH3gqIHYRqtTpThUBb1K4FHKqIe3mX+DpeuEmWpOUnPyQ+fft:9lScRCXU8d3gnHiYTphmvDVeuE4iXKJv
MD5:	CC4BC884E0397A571B44CB6B74A0F448
SHA1:	1F2FBA9075FD0B6707A53F286432F0BA7B207148
SHA-256:	1B1C8F6075A2C19861F5F2E4CD34F68A8B544376CDE708C448DFBB2E095E739D
SHA-512:	C7231B1720C482F352E19A6AB4134D68FC52B8B303561E7B795AFCF87F4177AF8F319FB4A508CFB986ACF7D32ED93BE16068291AB55D9A4C5DE430CE913BD9D7
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ice/Venmo_Form_Page_Template.d93cb7f386b09f5aebb5.js
Preview:	(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[125],{1380:(t,n,e)=>{"use strict";e.r(n),e.d(n,{default:()=>q});var o=e(29439),a=e(35776),i=e(71641),l=e(75259),r=e(4942),d=e(24070),s=e(93379),c=e.n(s),u=e(7795),p=e.n(u),m=e(90569),g=e.n(m),f=e(3565),C=e.n(f),h=e(19216),b=e.n(h),w=e(44589),S=e.n(w),k=e(57339),x={};x.styleTagTransform=S(),x.setAttributes=C(),x.insert=g().bind(null,"head"),x.domAPI=p(),x.insertStyleElement=b();c()(k.Z,x);k.Z&&k.Z.locals&&k.Z.locals;var v=e(64979),E=e(2969),y=e.n(E),P=e(16301),H=e.n(P),N="sign_up",A="next",B="login",O="getCode",R="submitOtp",L="loginWithPassordInstead",I=e(27227),_=e(16695);const T=function(t){var n,e,o=t.showTransition,s=t.children,c=t.cancelAndReturnUrl,u=t.onSubmitFormHandler,p=t.onClickSignUpButtonHandler,m=t.onClickCancelLinkHandler,g=t.onClickChangePublicCredentialHandler,f=t.otpPageState,C=t.pubCredState,h=t.buttonClickedState,b=t.pageNotificationState,w=t.setButtonClickedState,S=t.se

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (949)
Category:	downloaded
Size (bytes):	1559773
Entropy (8bit):	5.21780030809332
Encrypted:	false
SSDEEP:	6144:gbkhJhKIp5wFqQ6FbScyHOepq7u7u8ew8mo8Bl3t3RJkbewL73nvLMCiAe08U5xJ:Tph6h8PJvi4OPUfUsh9BvsAdPY09
MD5:	B8F6588A6C12A45D1EBCA50D8946867F
SHA1:	307BE0069AD62C4A4D9FF259E0BD248AC388E7CE
SHA-256:	BEFC6E3B96F5E0B03333722A81D84F4C266C40A5BBF25B49E4DBF94EECEC29D2
SHA-512:	79D7D28259DA1AE13A7A9D3C27432AF6C93C9FD94A1F1CD02BBA41CE7C9C4F3C5B537644021EFDE8BE77E558B33824FC55420A9ECF2B96AAD03FA72A9AB862CF
Malicious:	false
Reputation:	low
URL:	https://account.venmo.com/_next/static/chunks/pages/signup-f17224eaac4caa06.js
Preview:	(self["webpackChunk_N_E"] = self["webpackChunk_N_E"] \|\| []).push([[7616],{../*/ 23983:.// (function(__unused_webpack_module, __webpack_exports__, __webpack_require__) {.."use strict";.// ESM COMPAT FLAG.__webpack_require__.r(__webpack_exports__);..// EXPORTS.__webpack_require__.d(__webpack_exports__, {. "default": function() { return / binding */ index_esm; }.});..;// CONCATENATED MODULE: ./node_modules/date-fns/esm/_lib/toInteger/index.js.function toInteger(dirtyNumber) {. if (dirtyNumber === null \|\| dirtyNumber === true \|\| dirtyNumber === false) {. return NaN;. }. var number = Number(dirtyNumber);. if (isNaN(number)) {. return number;. }. return number < 0 ? Math.ceil(number) : Math.floor(number);.}.// EXTERNAL MODULE: ./node_modules/@babel/runtime/helpers/esm/typeof.js.var esm_typeof = __webpack_require__(71002);.;// CONCATENATED MODULE: ./node_modules/date-fns/esm/_lib/requiredArgs/index.js.function requiredArgs(required, args) {. if (args.length < required) {.

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8581), with no line terminators
Category:	downloaded
Size (bytes):	8581
Entropy (8bit):	5.3824607143919625
Encrypted:	false
SSDEEP:	96:CA8NTMj+5ApT0RcBnF+jbRhG1nXHxrtn5a91xXBUjE7CoUd+dCk0OesnzAY:CA8aampR0GJrn5a91YYGow+n0Oesn5
MD5:	8B60916E701B2FBBBC4445C1284F8F43
SHA1:	F54C8BBF3B7101A7FEF91D0F67D4DE9D3832704C
SHA-256:	35B3DFFD21B027E0455AB8429BFED6C243C18161EFB372781C851CDC0985DB26
SHA-512:	56A56A6975E2FBD9FAD46822DE4EC603AD83BD5AD9C3A10E0A9FE6A82617FCD82F576169E787DFDD04C83DD06F3A8691FCFF0D1F2AC8CB83B94BB07FEC58EDD7
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ice/vendor2.de67a7244c5b0a8f94eb.js
Preview:	(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[2],{93379:e=>{"use strict";var t=[];function r(e){for(var r=-1,n=0;n<t.length;n++)if(t[n].identifier===e){r=n;break}return r}function n(e,n){for(var c={},a=[],s=0;s<e.length;s++){var i=e[s],o=n.base?i[0]+n.base:i[0],f=c[o]\|\|0,l="".concat(o," ").concat(f);c[o]=f+1;var p=r(l),d={css:i[1],media:i[2],sourceMap:i[3],supports:i[4],layer:i[5]};if(-1!==p)t[p].references++,t[p].updater(d);else{var v=u(d,n);n.byIndex=s,t.splice(s,0,{identifier:l,updater:v,references:1})}a.push(l)}return a}function u(e,t){var r=t.domAPI(t);r.update(e);return function(t){if(t){if(t.css===e.css&&t.media===e.media&&t.sourceMap===e.sourceMap&&t.supports===e.supports&&t.layer===e.layer)return;r.update(e=t)}else r.remove()}}e.exports=function(e,u){var c=n(e=e\|\|[],u=u\|\|{});return function(e){e=e\|\|[];for(var a=0;a<c.length;a++){var s=r(c[a]);t[s].references--}for(var i=n(e,u),o=0;o<c.length;o++){var f=r(c[o]);0===t[f].referen

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	254537
Entropy (8bit):	5.575055745353976
Encrypted:	false
SSDEEP:	6144:XwQX5NzJrYLceF+hYTnXP9RIMGN165YDS0:g+xJ6kNs0
MD5:	7FEC5034482BF46C628A80BC4DE1D480
SHA1:	19A95AAF692230304CDD642AC211EFA95C9259FC
SHA-256:	077B115CC9B774A14C84CB72ADA3E1F3A213FC6F38B7269AC19780CFC27102D1
SHA-512:	AB5A3478F1AD9993EB85CB3E31BEA8F007BDF6F47A81C1ACFA1D5BEA8533D43C4871F95611A62B61D1E809EBED6771828D21DF8C505CF9BD8450E39F91582AA1
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-F6577EVSHQ&cx=c&_slc=1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":8,"vtp_value":true,"tag_id":14},{"function":"__ogt_1p_data_v2","priority":8,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":16},{"function":"__ccd_ga_first","priority":7,"vtp_instanceDestinationId":"G-F6577EVSHQ","tag_id":24},{"function":"__set_product_settings","priority":6,"vtp_instanceDestinationId":"G-F6577EVSHQ","vtp_foreignTldMacroResult":["macro",5],"vt

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23093), with no line terminators
Category:	downloaded
Size (bytes):	23093
Entropy (8bit):	5.245149224886793
Encrypted:	false
SSDEEP:	384:v0Ap5n5P9Nxf4hfWGwR+EkE+14QnZ/X2NWKW4BCCMHxDkZbaXpweyGobcUWfgMcC:J5n51f4hfWGwR+Tn14QnZ/b3J7yGQMUE
MD5:	7BD369E3384E9D3AD0173877F8BCF402
SHA1:	5CE0D9D3CF502B29FA7C28A926A459AF181A9A08
SHA-256:	0EC34B2C64CF8AC9E34F0AB429C9B2909B504C4C4FFC9A550A4A39771D410EC8
SHA-512:	1C9B5C7B7238107043E35008204667C3829AE1BB018A36EF1BEA6A2B42B899B6EBF571697377E9C7ACA51234D91AAEA64EF0C24C8F7AC560444647D699384BD6
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/webcaptcha/ngrlCaptcha.min.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};return e[r].call(a.exports,a,a.exports,n),a.l=!0,a.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var a in e)n.d(r,a,function(t){return e[t]}.bind(null,a));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=6)}([function(e,t,n){var r=n(1);e.exports.find=function(e,t){if(Array.isArray(e)\|\|void 0!==e.

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (47302)
Category:	downloaded
Size (bytes):	50929
Entropy (8bit):	5.044305862208472
Encrypted:	false
SSDEEP:	384:6Up1RByuZAUZhCeqxCNChCX5CjCvmCw6Tm7qUBlFXKJDvmR/kuG8vpcyJcLzeHl3:6dWNZj1kqUBlFXovmSuG8RcpeF3
MD5:	04F3A41483E9DFE36D52404867DC1527
SHA1:	5F7CF28460543AE2F0833DCD67BFDE162C793F6D
SHA-256:	048E8F1532AED4DC14D89CB074D10B7CE86ABC83BA91700223D11424AC65E912
SHA-512:	01E8031B433FCCB00D31DD2F06DA7FEC4449ACC4039E06FE89CA264683BD67F068A1CEAE4B432EC6D6792CA59D1CD5710A3FD66FE15B246A207B39B242A78819
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/hc/assets/application-dabd91632e59b822715fbd3d678bb2b8.css
Preview:	figure.wysiwyg-table{display:table;margin:.9em auto}figure.wysiwyg-table table{border-collapse:collapse;border-spacing:0;height:100%;width:100%}[dir=ltr] figure.wysiwyg-table table th{text-align:left}[dir=rtl] figure.wysiwyg-table table th{text-align:right}figure.wysiwyg-table figcaption{caption-side:top;display:table-caption;padding:4px;text-align:center;word-break:break-word}table.wysiwyg-table-resized{table-layout:fixed}figure.wysiwyg-media{margin:0}figure.wysiwyg-image{background:none;border:none;clear:both;display:table;margin:.9em auto;text-align:center}figure.wysiwyg-image img{margin:0}figure.wysiwyg-image-resized img{width:100%}.wysiwyg-image-block-start,.wysiwyg-image-block-end{max-width:calc(100% - 1.5em)}.wysiwyg-image-align-start,.wysiwyg-image-align-end{clear:none}[dir="ltr"] .wysiwyg-image-block-side{float:right}[dir="rtl"] .wysiwyg-image-block-side{float:left}[dir="ltr"] .wysiwyg-image-block-side{margin-left:1.5em}[dir="rtl"] .wysiwyg-image-block-side{margin-right:1.5em}

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3594), with no line terminators
Category:	downloaded
Size (bytes):	3594
Entropy (8bit):	5.194843444325048
Encrypted:	false
SSDEEP:	96:wrtnIBIwWpou6Tcf6695+Wpk6jfALbAwrH:w5nIBIqcy0M6jmcwrH
MD5:	35166401913BC433E702156B229ABB6D
SHA1:	45A86719273893BDAE5649D711C1D0BE844C539A
SHA-256:	7F919BB8DB7A2FE7126380D85836C540C3FC883CC4DFF3F44AE1ECC697027A6C
SHA-512:	4474D15E615B579B01AF6EB736381777360A1AC74C1A98F49ECAC4AA39BFEE53F64B5BCD657C5945865213EF6E5EAF4145BD0603818022DDD5C830E3E2EE3B71
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/auth/111e8e6e01b3952840fd6ff2ae791fb522c67b19/v2/host-without-iframe.js
Preview:	(()=>{var t={78:(t,e,r)=>{var n=r(427);t.exports=function(t,e){if(!t)throw new Error("Missing elm");var r={};return(e\|\|[]).forEach((function(e){var o="data-"+n(e),i=t.getAttribute(o);/^(true\|false)$/.test(i)&&(i="true"===i),/^\d+$/.test(i)&&(i=parseInt(i,10)),null!==i&&(r[e]=i)})),r}},427:t=>{t.exports=function(t){return(t\|\|"").replace(/([A-Z])/g,(function(t){return"-".concat(t.toLowerCase())}))}},462:t=>{t.exports=function(t){return(t\|\|"").replace(/([A-Z])/g,(function(t){return"_".concat(t.toLowerCase())}))}},54:(t,e,r)=>{function n(t,e){var r=Object.keys(t);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(t);e&&(n=n.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),r.push.apply(r,n)}return r}function o(t){for(var e=1;e<arguments.length;e++){var r=null!=arguments[e]?arguments[e]:{};e%2?n(Object(r),!0).forEach((function(e){i(t,e,r[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(r)):n(Obje

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56412), with no line terminators
Category:	downloaded
Size (bytes):	56412
Entropy (8bit):	5.907540404138125
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyBblxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0BbchXwW49z2
MD5:	2C00B9F417B688224937053CD0C284A5
SHA1:	17B4C18EBC129055DD25F214C3F11E03E9DF2D82
SHA-256:	1E754B107428162C65A26D399B66DB3DAAEA09616BF8620D9DE4BC689CE48EED
SHA-512:	8DC644D4C8E6DA600C751975AC4A9E620E26179167A4021DDB1DA81B452ECF420E459DD1C23D1F2E177685B4E1006DBC5C8736024C447D0FF65F75838A785F57
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (949)
Category:	downloaded
Size (bytes):	1321651
Entropy (8bit):	5.245235748662314
Encrypted:	false
SSDEEP:	12288:H9h6h8PJvi4OPUfgWYh92JJxLN3OaMOCTvsAdPJ+TP4:H76h8PJvisfgWFJJxLN3OaMOCZ+U
MD5:	BB949FBFF809E012431A4D973F485663
SHA1:	4A65C8B167A60C1DFA239D12B83F2113F7DD5CE0
SHA-256:	E8AC132CC09DF55E9FBAC5921CC5817BF204D150653B381802DD31A89FC86A99
SHA-512:	A379B4927CDDC9514AEE3C3B5776361EBAFF01CE793BF6DB98865254D0755C25C16BE0A47C9293315BAE9A400252579552762129A3D0C4D695D6A2BA068EE9AD
Malicious:	false
Reputation:	low
URL:	https://account.venmo.com/_next/static/chunks/pages/index-33aaf4f439c82a26.js
Preview:	(self["webpackChunk_N_E"] = self["webpackChunk_N_E"] \|\| []).push([[5405],{../*/ 23983:.// (function(__unused_webpack_module, __webpack_exports__, __webpack_require__) {.."use strict";.// ESM COMPAT FLAG.__webpack_require__.r(__webpack_exports__);..// EXPORTS.__webpack_require__.d(__webpack_exports__, {. "default": function() { return / binding */ index_esm; }.});..;// CONCATENATED MODULE: ./node_modules/date-fns/esm/_lib/toInteger/index.js.function toInteger(dirtyNumber) {. if (dirtyNumber === null \|\| dirtyNumber === true \|\| dirtyNumber === false) {. return NaN;. }. var number = Number(dirtyNumber);. if (isNaN(number)) {. return number;. }. return number < 0 ? Math.ceil(number) : Math.floor(number);.}.// EXTERNAL MODULE: ./node_modules/@babel/runtime/helpers/esm/typeof.js.var esm_typeof = __webpack_require__(71002);.;// CONCATENATED MODULE: ./node_modules/date-fns/esm/_lib/requiredArgs/index.js.function requiredArgs(required, args) {. if (args.length < required) {.

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65518), with no line terminators
Category:	downloaded
Size (bytes):	107053
Entropy (8bit):	5.337592264259358
Encrypted:	false
SSDEEP:	1536:/xMZpSAzrbw6YbWb7lkyytZUUFjQ4iOvv:/xMZpbzXxb7lkyytZrjQ47vv
MD5:	5CA5548040AEF5477DA16D682D3A08E1
SHA1:	E9ED3289D11A3DF4BBC4C1AF0D374CCCE69B9A75
SHA-256:	82C8116340DC4703C43E0F746EFB6D0D0BE995EE0E206B0134BA61FE504D927F
SHA-512:	A2517F4DC65EBF9F1C625E13D5D42C3C47A8CE57CD219A96CEFC80FE54235625799EE28E0848EDD8BB17D6F35547D445D49D39E48F6263109FBF4832BB4F1443
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ice/vendorVenmo31.5a9959c341dbc4604a67.js
Preview:	"use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[31],{4912:(e,t,a)=>{function r(e){return e&&"object"==typeof e&&"default"in e?e.default:e}var n=r(a(35776)),o=a(54288),i=a(84395),l=r(a(86010)),s=a(39427),c=a(91042),u=a(37722),d=r(a(10390)),p=r(a(45947)),m=r(a(1152)),g=o.makeStyles((function(e){return{accordionRootNoPadding:{padding:"0"},accordion:{boxShadow:"none","&:before":{display:"none"},"&.Mui-expanded":{margin:0},"&:after":{padding:0}},accordionSummaryIcon:{color:e.palette.grey[400]},chevron:{color:e.palette.grey[400],transform:"rotate(-90deg)"},accordionSummary:{"&:focus":{background:"none"},"&.Mui-focusVisible":{outline:"1px auto "+e.palette.primary.main}},accordionSummaryContentClass:{margin:e.spacing(2,0),"&.MuiAccordionSummary-content.Mui-expanded":{margin:e.spacing(2,0)}},accordionDetailsWithLeftPadding:{paddingLeft:e.spacing(3.5),paddingBottom:e.spacing(1.8)},accordionDetailsWithSmallLeftPadding:{paddingLeft:e.sp

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2483), with no line terminators
Category:	downloaded
Size (bytes):	2483
Entropy (8bit):	5.0183567131501885
Encrypted:	false
SSDEEP:	48:sOu4JFx7jGDMQJ8eHZtpx0XeH3D+NGeQE3RezrnNm8:Xu4Tx7bQX0XeHeQWezw8
MD5:	2D69C274EA163D08CE15DE9BC7FF09E3
SHA1:	2C47C7F6609C40942416CDB8134E8507F39860E5
SHA-256:	6AA4FBBA3C03D71461376E31733D1BB5B8C5A8042D8DCB58ED5A3548819506B8
SHA-512:	AB9AA65F9DCA48E97933CAF0503E690B2C55EB179AD3C9A88B7A2E4E8971D0483FB28A84F52262786B2A9FCBC26327082B80A080B8BEA5B7B36F678D535D2593
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/paypal-ui/web/fonts-and-normalize/2-0-0/fonts-and-normalize.min.css
Preview:	@font-face{font-display:swap;font-family:PayPalOpen-Regular;font-style:normal;src:url(https://www.paypalobjects.com/paypal-ui/fonts/PayPalOpen-Regular.woff2) format("woff2"),url(https://www.paypalobjects.com/paypal-ui/fonts/PayPalOpen-Regular.woff) format("woff")}@font-face{font-display:swap;font-family:PayPalOpen-Bold;font-style:normal;src:url(https://www.paypalobjects.com/paypal-ui/fonts/PayPalOpen-Bold.woff2) format("woff2"),url(https://www.paypalobjects.com/paypal-ui/fonts/PayPalOpen-Bold.woff) format("woff")}html{box-sizing:border-box}*,:after,:before{box-sizing:inherit}body,html{font-family:PayPalOpen-Regular,Helvetica Neue,Arial,sans-serif;height:100%}html{-webkit-text-size-adjust:100%;line-height:1.15}body{-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;margin:0}main{display:block}h1{font-size:2em;margin:.67em 0}hr{box-sizing:content-box;height:0;overflow:visible}pre{font-family:monospace;font-size:1em}a{background-color:transparent}abbr[title]{border-botto

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	536
Entropy (8bit):	4.8987338142402
Encrypted:	false
SSDEEP:	12:tcFuPJm7qRAFOB7aFE+qqDHdqbYvVG6QRzqZelcAtS4n:tcFuB1RA1DqbgG6QRzqZFAtJ
MD5:	BCC633011A257BF4B4C3893529027331
SHA1:	6509ECBA575E2D12BD2BF91C5008DD67FDD2DE08
SHA-256:	F54ED96AB522EBEB2F90A83A0E640F6133D78A3FF0F62BAFA77751C42E880AC3
SHA-512:	867AD33E6AFE2593109BC1A61F143FF1C66CCB53CA6A77D1C267FA7C6B5B05F6DD099C3B14264B4F54E37E17F1B4713383F34135BE0CA18EB2A9BB8FCACA5489
Malicious:	false
Reputation:	low
Preview:	<svg viewBox="0 0 40 40" fill="none" xmlns="http://www.w3.org/2000/svg">. <style>. path {. fill: #0074DE;. }. @media (prefers-color-scheme: dark) {. path {. fill: #fff;. }. }. </style>. <path d="M34.5771 0.822021C35.9974 3.16733 36.6377 5.58301 36.6377 8.63451C36.6377 18.3672 28.3277 31.0107 21.5832 39.8888H6.17825L0 2.95296L13.4887 1.67258L16.7552 27.9548C19.8074 22.9834 23.5738 15.171 23.5738 9.84453C23.5738 6.92902 23.0743 4.94318 22.2935 3.30806L34.5771 0.822021Z" fill="#008CFF"/>.</svg>.

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	3.122714743434665
Encrypted:	false
SSDEEP:	3:CUXPQE/xlIle:1QEn
MD5:	ACCBA0B69F352B4C9440F05891B015C5
SHA1:	9D01CC5DC8E042C0D4AD6CFB8B3AC38E84A5EF9F
SHA-256:	47043E4823A6C21A8881DE789B4185355330B5804629D23F6B43DD93F5265292
SHA-512:	D3C4A5427BF645CC226106B0E8C28A76B0B91F50FA6D77E962A3B59B85BE2A0CFDB94EC0F40742F10C18025573D8FBFADECDDF60F4652BAE671F6031C02A7CB5
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,........@..D.;

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (29464), with no line terminators
Category:	downloaded
Size (bytes):	29464
Entropy (8bit):	4.623396272181911
Encrypted:	false
SSDEEP:	384:1FP8xvcQoDg/l604PNxvQOpJhtazIkqdlYGXH8Kl:3kxvQDg96fFxvQchtaMkqdpH86
MD5:	3DFA5814B4BE91C0047934998A54F03D
SHA1:	0DF1CD7FC4C4BD1C1B83403A4CB186950F78410F
SHA-256:	288470A05F4B8A3759884A275302AD49677FFB0BD0AA6FE15364A930FD3D2FA8
SHA-512:	BB2E4ACF8C429CAD99D0A2BD738A22A2DAA030D25D3F6EAD786266BBF5B84041DBA638DFB7D31308AB2F9C474989C79CAC58ABB857F748E903BF53CD100B880E
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ice/vendorVenmo33.c787738d7252865aa635.js
Preview:	"use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[33],{27584:a=>{a.exports='<svg id="livetype" xmlns="http://www.w3.org/2000/svg" width="119.66407" height="40" viewBox="0 0 119.66407 40">\n <title>Download_on_the_App_Store_Badge_US-UK_RGB_blk_4SVG_092917</title>\n <g>\n <g>\n <g>\n <path d="M110.13477,0H9.53468c-.3667,0-.729,0-1.09473.002-.30615.002-.60986.00781-.91895.0127A13.21476,13.21476,0,0,0,5.5171.19141a6.66509,6.66509,0,0,0-1.90088.627A6.43779,6.43779,0,0,0,1.99757,1.99707,6.25844,6.25844,0,0,0,.81935,3.61816a6.60119,6.60119,0,0,0-.625,1.90332,12.993,12.993,0,0,0-.1792,2.002C.00587,7.83008.00489,8.1377,0,8.44434V31.5586c.00489.3105.00587.6113.01515.9219a12.99232,12.99232,0,0,0,.1792,2.0019,6.58756,6.58756,0,0,0,.625,1.9043A6.20778,6.20778,0,0,0,1.99757,38.001a6.27445,6.27445,0,0,0,1.61865,1.1787,6.70082,6.70082,0,0,0,1.90088.6308,13.45514,13.45514,0,0,0,2.0039.1768c.30909.0068.6128.0107.91895.0107C8.80

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (63869)
Category:	downloaded
Size (bytes):	180956
Entropy (8bit):	5.2051203103374695
Encrypted:	false
SSDEEP:	3072:exMI4oSQVaY4JewzNx99XOyOhAkvJmppoWURLm7VN:exWWhVPG
MD5:	8C15583A4A43453584F560A54AD69AC5
SHA1:	EE1F186FBBA965DFBAD41B3D25DAB20C7C29008B
SHA-256:	E69E6074B3E838A4BBEB4A20F2A96E77BE67703EA606415AEDEE2FA073B634C4
SHA-512:	FA6C9706346A3BCA0946CFE2F30FE4A8CD590F76B825676C9C2705E47E049538E643B53355A86F0243F57464B7BFBAEFB1B13ED6469AA4AFED9BE1FBDB81543F
Malicious:	false
Reputation:	low
URL:	https://jssdkcdns.mparticle.com/js/v2/40433222e815b743853a4bb6b7a86058/mparticle.js?env=0
Preview:	//.// Copyright 2019 mParticle, Inc..//.// Licensed under the Apache License, Version 2.0 (the "License");.// you may not use this file except in compliance with the License..// You may obtain a copy of the License at.//.// http://www.apache.org/licenses/LICENSE-2.0.//.// Unless required by applicable law or agreed to in writing, software.// distributed under the License is distributed on an "AS IS" BASIS,.// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied..// See the License for the specific language governing permissions and.// limitations under the License..//.// Uses portions of code from jQuery.// jQuery v1.10.2 \| (c) 2005, 2013 jQuery Foundation, Inc. \| jquery.org/license..window.mParticle = window.mParticle \|\| {};;.window.mParticle.config = window.mParticle.config \|\| {};;.window.mParticle.config.serviceUrl = 'jssdk.mparticle.com/v2/JS/';;.window.mParticle.config.secureServiceUrl = 'jssdks.mparticle.com/v2/JS/';;.window.mParticle.config.app

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32058)
Category:	downloaded
Size (bytes):	86659
Entropy (8bit):	5.36781915816204
Encrypted:	false
SSDEEP:	1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9
MD5:	C9F5AEECA3AD37BF2AA006139B935F0A
SHA1:	1055018C28AB41087EF9CCEFE411606893DABEA2
SHA-256:	87083882CC6015984EB0411A99D3981817F5DC5C90BA24F0940420C5548D82DE
SHA-512:	DCFF2B5C2B8625D3593A7531FF4DDCD633939CC9F7ACFEB79C18A9E6038FDAA99487960075502F159D44F902D965B0B5AED32B41BFA66A1DC07D85B5D5152B58
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js
Preview:	/! jQuery v3.2.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 15 tables, 1st "FFTM", 30 names, Macintosh
Category:	downloaded
Size (bytes):	86188
Entropy (8bit):	6.237436478028344
Encrypted:	false
SSDEEP:	1536:+5JJM9ABa87MB932dmj5ySUv1FR9HcWA7DQA3ApGhDavFNTkz:+rm9eQ+mjTUvfRWWA7rlavFNc
MD5:	C11532D8AF656ED3D4D0D6D1A366D676
SHA1:	F408530A5BC2FCA90F5F8F7BEFC0C3B563556D2D
SHA-256:	828E97526157986D3D01257A8C38B1F7B8F70CA0367A68225CEB21B25A086E5C
SHA-512:	33B02FE5874A4AE8F3D983E6ED72B98C454AC186F0FC0E8F9825942A0125D5C422D5F17E5199390C54D5AB7C34BEC3417DFC886ECEA2D086F2D16B6A8FFE06EE
Malicious:	false
Reputation:	low
URL:	https://theme.zdassets.com/theme_assets/802785/f408530a5bc2fca90f5f8f7befc0c3b563556d2d.ttf
Preview:	...........pFFTM.,....P.....GDEF.......\...*GPOSS..'.....z.GSUB...z.......OS/2..a....x...`cmap............gasp.......T....glyf.......0....head.O'........6hhea.......4...$hmtx.~sP........loca.2.........lmaxp.~.[...X... name............post...B.......R..........-._.<..........V...........8.#..................... .8.....8.8...................5.....5.X.................@.........^.........X...K...X...^.'.&.............../@.${........SCTO.@. ... .8...... .............. ...v.7.....M.........U...<...7.`.8.a.-...0...<./.<./.....2...\...;...<...P.....l.>...2.6.<.K.9.w.2.<.4.].>...2.`.A.].>...U...@...Z...\...........<.......]...4...\...].M.]...4...]...].R.(...].I.]...\...]...4...]...4...]...2.y.....M.............\|...o.(.E.Z.....E.....#...(.....#.5.Q.S.%.1.Q.2...1.d. .H.2.<.S...K.......S...S.b.S.<.S.:.1.Q.S.Q.2.q.S...4.m...4.M...................,.q.(.#.n.q....._.......U.G.<.~.U. .7.....#.n.+.9...7.;.7...=...2...Q...<.7.7.x.7...7...H.Q.).^.$...X.H.Z...2...P.>.J...%...1...<..... ...M.$............

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	536
Entropy (8bit):	4.8987338142402
Encrypted:	false
SSDEEP:	12:tcFuPJm7qRAFOB7aFE+qqDHdqbYvVG6QRzqZelcAtS4n:tcFuB1RA1DqbgG6QRzqZFAtJ
MD5:	BCC633011A257BF4B4C3893529027331
SHA1:	6509ECBA575E2D12BD2BF91C5008DD67FDD2DE08
SHA-256:	F54ED96AB522EBEB2F90A83A0E640F6133D78A3FF0F62BAFA77751C42E880AC3
SHA-512:	867AD33E6AFE2593109BC1A61F143FF1C66CCB53CA6A77D1C267FA7C6B5B05F6DD099C3B14264B4F54E37E17F1B4713383F34135BE0CA18EB2A9BB8FCACA5489
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/paypal-ui/web/favicon/venmo.svg
Preview:	<svg viewBox="0 0 40 40" fill="none" xmlns="http://www.w3.org/2000/svg">. <style>. path {. fill: #0074DE;. }. @media (prefers-color-scheme: dark) {. path {. fill: #fff;. }. }. </style>. <path d="M34.5771 0.822021C35.9974 3.16733 36.6377 5.58301 36.6377 8.63451C36.6377 18.3672 28.3277 31.0107 21.5832 39.8888H6.17825L0 2.95296L13.4887 1.67258L16.7552 27.9548C19.8074 22.9834 23.5738 15.171 23.5738 9.84453C23.5738 6.92902 23.0743 4.94318 22.2935 3.30806L34.5771 0.822021Z" fill="#008CFF"/>.</svg>.

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5856)
Category:	downloaded
Size (bytes):	10756
Entropy (8bit):	5.561127511226338
Encrypted:	false
SSDEEP:	192:4qZ01sYeD8ToYZMeBA5h1lqI5N5we9Jkjt3K+NMyog7kLRaWtsa22MrME+a9W3GN:5+DeKhx2+G9Jk1uDXuYpaCGv1
MD5:	71F01186A59DB552AB4BB5B273082EC7
SHA1:	0A5909E2AE3BF149D17D08A758B1B07E44AC22A9
SHA-256:	600D62EE9CE08AE19531DAE5C0CCE8A63427AD0BE308803605645AA8C9F55990
SHA-512:	F8321866638BDA4EF1A5D468C1E19A77B8BF4981991729B7DACE0C75BAD5AC2DC675E47BD70EDE6C19657234E1C51DE444BA83532BF614F37E030D6CA3D9402D
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ice/vendorVenmo39.b4f63a3af68bb0c60ccb.js
Preview:	"use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[39],{74905:(e,r,t)=>{Object.defineProperty(r,"__esModule",{value:!0});var n=t(24113),o=t(56775),a=t(39149),i=t(49396),c=t(96656),u=t(88954),l=t(73240),f=t(5499),s=t(36249),v=t(8895),p=t(22537),y=t(48877),d=t(96869),h=t(19235),_=t(84237),b=t(88362),w=t(23468),m=t(19034),P=t(57175),g=t(48528),S=t(20621),O=t(39427),x=t(77879),k=t(82532),j=t(51508),C=t(65459),M=t(41915),D=t(2706),E=t(59037),I=t(90807),T=t(30532),B=t(96730),R=t(9510),F=t(78351),G=t(75567),H=t(1802),L=t(18442),A=t(1004),V=t(70705),z=t(8545),U=t(84031),W=t(25572),N=t(62315),Q=t(75260),J=t(48258),Z=t(60649),q=t(52442),K=t(5071),X=t(61470),Y=t(74394),$=t(19321),ee=t(52477),re=t(85475),te=t(24926),ne=t(62277),oe=t(84944),ae=t(79225),ie=t(83958),ce=t(65278),ue=t(64037),le=t(91042),fe=t(4541),se=t(7548),ve=t(13942),pe=t(99804),ye=t(67849),de=t(38200),he=t(99488),_e=t(70431),be=t(1186),we=t(20436),me=t(61756),Pe=t(3810),ge=

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58556), with no line terminators
Category:	downloaded
Size (bytes):	58556
Entropy (8bit):	5.3214033197332915
Encrypted:	false
SSDEEP:	1536:AATMZMp0x0CC/lbfmzl5iQCfBQ+CnTysbkRbLiqjx4DXntwCNMKHGuFrLB4+:n0ofGiQCfBQaRbmAo3eAMyLBt
MD5:	15D472F7461198E2C9A5C56ED18FA65D
SHA1:	BEE0F4766C9B35D3E8672555267E912E9D26C9EF
SHA-256:	07DD261281DF778A63C2400E038CE34D00424C49F09BE4975F3B8C552C8BCACE
SHA-512:	148565737B22CEC82E53DD67F32128D746DDCAEA96854FF6A1AE8D3CEA3A3B64C8FBEA23F8D0CB9E04B515E8390CFA732F66D53C94FA5251F9A7B497CD704C58
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ice/vendorVenmo37.ac605bb7b8c8fbbc0b96.js
Preview:	"use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[37],{79895:(e,t,n)=>{n.d(t,{Z:()=>s});var r=n(45987),a=n(87462),o=n(35776),i=n(86010),l=n(52543),c=o.forwardRef((function(e,t){var n=e.classes,l=e.className,c=e.component,s=void 0===c?"div":c,u=e.square,d=void 0!==u&&u,p=e.elevation,f=void 0===p?1:p,m=e.variant,v=void 0===m?"elevation":m,h=(0,r.Z)(e,["classes","className","component","square","elevation","variant"]);return o.createElement(s,(0,a.Z)({className:(0,i.default)(n.root,l,"outlined"===v?n.outlined:n["elevation".concat(f)],!d&&n.rounded),ref:t},h))}));const s=(0,l.Z)((function(e){var t={};return e.shadows.forEach((function(e,n){t["elevation".concat(n)]={boxShadow:e}})),(0,a.Z)({root:{backgroundColor:e.palette.background.paper,color:e.palette.text.primary,transition:e.transitions.create("box-shadow")},rounded:{borderRadius:e.shape.borderRadius},outlined:{border:"1px solid ".concat(e.palette.divider)}},t)}),{name:"MuiPap

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23204), with no line terminators
Category:	downloaded
Size (bytes):	23204
Entropy (8bit):	5.311666444124577
Encrypted:	false
SSDEEP:	384:qMpPSFTTPOoymz4238x9z+rIoASY0DYT0TlISsVn9beq0VSjMtUKWoA1wcyB489N:qMS/SqISsV9bh21tUKWoA+cyui0LsPHr
MD5:	2527B8DD7558265B787200FE2F07C8A6
SHA1:	5B96611966E522981FF617C36398EB7A344136B3
SHA-256:	55F989C9D5AB1ADFDA0208546EEAFED403CCF2E9F131AD93112AB20D4E02037D
SHA-512:	71F6DD8287F6CE5D922F574E068C36E3314D4EBE2D61D1F04880A8F6DBA02B98610C4233DD2C149B1C4A9909876F8568AE47098D77BBD97ECD03782AE25D73F1
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ice/app.58a7141f7004e7633af8.js
Preview:	(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[151],{4458:(e,n,t)=>{"use strict";var r=t(4942),o=t(35776),c=t(64979),i=t(53768),a=t(53221),l=t(73688),u=t(9669),s=t.n(u),d=function(e){var n=e.contentUrlBase,t=e.country,r=e.language;return s()({method:"GET",url:"".concat(n,"/").concat(t,"/").concat(r,".json"),headers:{Accept:"application/json","Content-Type":"application/json"}})},p=t(93581),f=t(48216),m=t(41719),g=t(28330),y=t(44649);function h(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);n&&(r=r.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,r)}return t}var b=function(e){var n,t=e.getContext();if(null!=t&&null!==(n=t.response)&&void 0!==n&&n.headers)return t.response.headers.get("Paypal-Debug-Id")},v=new p.i((function(e,n){return new f.y((function(t){var r=n(e).subscribe(function(e){var n=e.operation,t=e.observer;return{next:function(e){va

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 27457, version 1.0
Category:	downloaded
Size (bytes):	27457
Entropy (8bit):	7.992298379605203
Encrypted:	true
SSDEEP:	768:rs41ijgVewvJ0P+BvnbXzmX07uu/pmawwzQ8Mv:rsaijVwP1bXzmX077zQzv
MD5:	49D49974386DC725656BC1A2BF32ED44
SHA1:	26139D3425422F233DFCCB09FCA2EDB36F01E390
SHA-256:	9AE7B95F034D76B21AAF8FCC0CDD39F4BA7BA59DD9751348A32C7E5CFDFDB6DF
SHA-512:	440A101DC681E69275AB9C2BFA2E436B9D3500DEBFCF5C84F47B9796F6879E1021B4A6E797EA3C4B45052F68CB066C1BCC75B4A6AC204A40848CB4EB6731F94A
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/paypal-ui/fonts/PayPalOpen-Regular.woff2
Preview:	wOF2......kA.......,..i.......i....e.................d.`........p....6.$..@..".. ..{..x...&.....G8O f.V>..q{.....G`..F............J:.....U.z....6}7...f.tM...r....P-.u...* .-...........%......<.J=.{R...hmL\...kn......h.t.>....../......U.a......!M.\.hF..~P.cM...R..2.....2.Da..`rCxx~\\|..7....nb....6.mB...+y...N.c='...!.&.mk.L.c.......w...6QJ.:e.S.&2qb....p..r.....bC.?x7{.iR.4-R`4B#$...$..S$_.o...6ZI.y.]qo...6m.4mR...+.J)^...H..0....m..8.....3f.$C D..?..9.3#.4)>R.)\|N..~=!...!.@(..7\|..<..%f....BP....../+....rf...2.....\|..O.M^o1..+!TW\...E.pe.1...I..xZ.&.}...VM...z.......!L.4.=..I.....1..GB...].....~...j...X....I1y...d.]........&....G......8........X.......O....S.&S...m.3.dn..%p.Z......M../bk.SY5=....'.O........8.0I.2......O....T-.(.w.)v..].\...E.n8....`.. (..@n.B.H........>8%9..u(C,._....J....../M....G.t..9.r.J.d...m.R...._;z...>;.#'},w....].{gA.....+.....PbD..p.#.....J...?`>,....1E.].J.....GI..A...1N.0.N...k.i~...X.\|..e.?........d,..X....L

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65359)
Category:	downloaded
Size (bytes):	99426
Entropy (8bit):	5.346151378458053
Encrypted:	false
SSDEEP:	768:ACBIjX3CVaTd5bxf1hy5tRCsDBAG8AcxIzo56VNs01LdY6fjr82NzV5cUrZGM/6p:vsJ/bxfWdcx8o5ICy1r8c3GCimZ6
MD5:	48B42B4B7DB4D176952811D4289F8950
SHA1:	866EA776F5845A5B7621989BFB09A971D2B7CC94
SHA-256:	AE82F0ADDC0458112CF2428B7338DB058B8C3A65D074B5D7F6B0213DCB7635F4
SHA-512:	8D3801AB8F9D31887BDDDAAEB2499414480C6399A9B5C6EA4B0DAB9A139965226365B0F6C0CB741F99E1A96B657959320448E6CE27799F21113D234169F1B819
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery.inputmask/5.0.7/jquery.inputmask.min.js
Preview:	/!. dist/jquery.inputmask.min. * https://github.com/RobinHerbots/Inputmask. * Copyright (c) 2010 - 2021 Robin Herbots. * Licensed under the MIT license. * Version: 5.0.7. */.!function(e,t){if("object"==typeof exports&&"object"==typeof module)module.exports=t(require("jquery"));else if("function"==typeof define&&define.amd)define(["jquery"],t);else{var i="object"==typeof exports?t(require("jquery")):t(e.jQuery);for(var a in i)("object"==typeof exports?exports:e)[a]=i[a]}}(self,(function(e){return function(){"use strict";var t={3046:function(e,t,i){var a;Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0,i(3851),i(219),i(207),i(5296);var n=((a=i(2394))&&a.__esModule?a:{default:a}).default;t.default=n},8741:function(e,t){Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var i=!("undefined"==typeof window\|\|!window.document\|\|!window.document.createElement);t.default=i},3976:function(e,t,i){Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;va

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9205)
Category:	downloaded
Size (bytes):	13819
Entropy (8bit):	5.250518720063889
Encrypted:	false
SSDEEP:	192:w2k6PnEpzNzUy9JkjD7yzhgNFCpg2vU/oOBoO2yOMyMmJ4ZS3ux/sb+zw:qyEpzNIy9Jk37GIC3vlOrFxmGovbd
MD5:	ED986C614E112597FB14A2E2603ECD03
SHA1:	A5DD4C44019B7A5BB9198EEF0EC27269E61A08B7
SHA-256:	88B89C0871529ED5D3F58A2203231B375B5DED89AE4DD2BF33656B03FB6BB4FB
SHA-512:	0820C5E1A11B2E87470E8A762BE399418484BF08F36ABE1CBFB585C5C4CCC77120E10C3ADE83B562DE1F1DCE3988B0336594DD81DE21F6733F8C7EBD95055DB8
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ice/vendor4.be50f34cce539da04c25.js
Preview:	"use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[4],{38751:(t,e,r)=>{r.d(e,{g7:()=>a});var n=null,o={},i=1,c="@wry/context:Slot",u=Array,a=u[c]\|\|function(){var t=function(){function t(){this.id=["slot",i++,Date.now(),Math.random().toString(36).slice(2)].join(":")}return t.prototype.hasValue=function(){for(var t=n;t;t=t.parent)if(this.id in t.slots){var e=t.slots[this.id];if(e===o)break;return t!==n&&(n.slots[this.id]=e),!0}return n&&(n.slots[this.id]=o),!1},t.prototype.getValue=function(){if(this.hasValue())return n.slots[this.id]},t.prototype.withValue=function(t,e,r,o){var i,c=((i={__proto__:null})[this.id]=t,i),u=n;n={parent:u,slots:c};try{return e.apply(o,r)}finally{n=u}},t.bind=function(t){var e=n;return function(){var r=n;try{return n=e,t.apply(this,arguments)}finally{n=r}}},t.noContext=function(t,e,r){if(!n)return t.apply(r,e);var o=n;try{return n=null,t.apply(r,e)}finally{n=o}},t}();try{Object.defineProperty(u,c,{valu

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7867), with no line terminators
Category:	downloaded
Size (bytes):	7867
Entropy (8bit):	5.771212204613271
Encrypted:	false
SSDEEP:	192:V9OUpJY7yi7hsQG49+EYy3zZNHgNmmyQxC:V9OUcB7hsQG49jY2vgNmmi
MD5:	C2B3924397EA8E11CCFE3D3BD721451D
SHA1:	3D26EFE2F11A73564184810AA0A75FA9F0850981
SHA-256:	968B823F30F00D3469CD93F7E9BDF8E087266E93AFF21B153193128868407B65
SHA-512:	1CFCC851025FF05369C2A472714163C3FAC878181E3E761E07EE72E89E00F76799796361F1A7BF1E334FF2D12FE673CA71350192AA25027DEC33C9BD17B67339
Malicious:	false
Reputation:	low
URL:	https://help.venmo.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/471dc2adc340/main.js
Preview:	window._cf_chl_opt={cFPWv:'b'};~function(V,g,h,m,n,x,y,A){V=b,function(c,e,U,f,C){for(U=b,f=c();!![];)try{if(C=parseInt(U(571))/1+-parseInt(U(491))/2(-parseInt(U(537))/3)+parseInt(U(541))/4+-parseInt(U(507))/5(-parseInt(U(588))/6)+parseInt(U(487))/7(parseInt(U(513))/8)+parseInt(U(535))/9+-parseInt(U(508))/10(parseInt(U(578))/11),C===e)break;else f.push(f.shift())}catch(D){f.push(f.shift())}}(a,898415),g=this\|\|self,h=g[V(509)],m={},m[V(575)]='o',m[V(586)]='s',m[V(548)]='u',m[V(555)]='z',m[V(568)]='n',m[V(506)]='I',n=m,g[V(561)]=function(C,D,E,F,a4,H,I,J,K,L,M){if(a4=V,D===null\|\|void 0===D)return F;for(H=v(D),C[a4(543)][a4(515)]&&(H=H[a4(587)](C[a4(543)][a4(515)](D))),H=C[a4(503)][a4(493)]&&C[a4(490)]?C[a4(503)][a4(493)](new C[(a4(490))](H)):function(N,a5,O){for(a5=a4,N[a5(581)](),O=0;O<N[a5(560)];N[O]===N[O+1]?N[a5(544)](O+1,1):O+=1);return N}(H),I='nAsAaAb'.split('A'),I=I[a4(520)][a4(574)](I),J=0;J<H[a4(560)];K=H[J],L=s(C,D,K),I(L)?(M=L==='s'&&!C[a4(533)](D[K]),a4(551)===E+K?G(E+K,

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38457)
Category:	downloaded
Size (bytes):	38486
Entropy (8bit):	5.345618194155939
Encrypted:	false
SSDEEP:	768:92qQHhuvmwdHXDCerEmDjiHuKuwu5WPdNTgH5NiUcvVCKv1h5muOtHOmVvxIy5g/:9DQMvmwd3iC/p5WPT4iUcvVCkhQuOtHU
MD5:	3867690CF65CF9B04E72472455F34CF9
SHA1:	6972D67129AB146E710023E97F8343DFF85AFC83
SHA-256:	A70DAA1ECB6FDD37C71466675790D54B8BB70227CD2E397DB7EBCDE9D1432FB9
SHA-512:	2A5C2744617662E27C602FCF9295D4CB19F85B27F7DB09FBB136B0E7F7F456D6A22B3A2A74E8F07306A767DB8FAA3FB30C4E1F39246FF56A4C18A8068DA85812
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/pa/js/pa_venmo.js
Preview:	/@ 2024 PayPal (v1.8.16) /.!function(){"use strict";var R="venmo";function o(){return(new Date).getTime()}function m(t){return Math.round(parseFloat(t))\|\|0}function a(t){if(!t\|\|t.constructor!==Object&&t.constructor!==Array)return t;var e,n=t.constructor();for(e in t)n[e]=a(t[e]);return n}function c(t,e,n){for(var r in void 0===n&&(n=!0),t=t\|\|{},e=e\|\|{})"undefined"!=typeof e[r]&&(n\|\|!n&&"undefined"==typeof t[r])&&(t[r]=e[r]);return t}function q(t,e){e=e\|\|{};var n,r=a(t=t\|\|{});for(n in e)try{e[n].constructor===Object&&r[n]&&r[n].constructor===Object?r[n]=q(r[n],e[n]):r[n]=e[n]}catch(i){r[n]=e[n]}return r}function u(){var i,a=window.crypto\|\|window.msCrypto;return(i=function i(){var t,e=2147483647;try{var n=new Uint32Array(1);a.getRandomValues(n),t=n[0]&e}catch(r){t=Math.round(e*Math.random())}return t.toString(16)})()+i()}window.PAYPAL=window.PAYPAL\|\|{},window.fpti=window.fpti\|\|{},window.fptiserverurl=window.fptiserverurl\|\|"https://t.paypal.com/ts";var F,e=function e(){},U=function U(){

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (5522)
Category:	downloaded
Size (bytes):	63331
Entropy (8bit):	5.424123966470064
Encrypted:	false
SSDEEP:	1536:9BIgWh/Y/ia6PCO5QNWTHGSyrwwzPka4Oc1:sgWhQ/TNO+WTHbypG
MD5:	14418F3620882D61D65F0927DF74D234
SHA1:	339DD1B7C5C3DB747242EAE164B294FFE5B7B331
SHA-256:	2B5DADFBE3D44FD5B84F9E82166E9381F06F4221753DD7BC7F3CED4FC51BADC2
SHA-512:	17E28F53FE3E355C462744F4B8E292EDFF6EBB1A872DA63EE9C82E2E2C0301DC08A2C8C0D053B39863CE7B56AA5EE1A34E64E7FEE77E7E0B4CC2920ECD47E333
Malicious:	false
Reputation:	low
URL:	https://help.venmo.com/hc/en-us/requests/new
Preview:	<!DOCTYPE html>.<html dir="ltr" lang="en-US">.<head>. <meta charset="utf-8" />. v24448 -->... <title>Submit a request – Venmo</title>.. .. <link href="https://help.venmo.com/hc/en-us/requests/new" rel="canonical">.. <link rel="stylesheet" href="//static.zdassets.com/hc/assets/application-dabd91632e59b822715fbd3d678bb2b8.css" media="all" id="stylesheet" />. <link rel="stylesheet" type="text/css" href="//p19.zdassets.com/hc/theming_assets/802785/498597/style.css?digest=28556028217875">.. <link rel="icon" type="image/x-icon" href="//theme.zdassets.com/theme_assets/802785/fa035520f344a1ebff45491abf0a9a9f9965e585.png" />.. <script>.window.ga=window.ga\|\|function(){(ga.q=ga.q\|\|[]).push(arguments)};ga.l=+new Date;.ga('create', 'UA-15492939-3', 'auto');.ga('send', 'pageview');.</script>.<script async src='https://www.google-analytics.com/analytics.js'></script>.. <script async src="https://www.googletagmanager.com/gtag/js?id=G-F6577EVSHQ"></script>.<script>. window.dat

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 41894, version 1.0
Category:	downloaded
Size (bytes):	41894
Entropy (8bit):	7.990845032653063
Encrypted:	true
SSDEEP:	768:ManQlv756KbkZmyCXtmfvIbGp7ff09PWGJO81mHIhZfhdjIB:MaQh756KgU2vHJfsWiO81hhVjIB
MD5:	93CDAD39D3EA2F9B37B403665A006419
SHA1:	0E986C6F2443007EE37DA358A8D3A06BC67DF3C3
SHA-256:	58F03520078F42B5339BF2DC379A7426BD432BC8902FD47F577E5A0DEF8331D9
SHA-512:	32EB9E04B976D2D81ED7B1FD480CE7550E39A8AEAF56E1F441CCB64FACFE95200A18DD987F3534FA7DA6A63D03633D164D81346EE3BF08BD527892288E80A6A7
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ice/assets/venmo/fonts/Scto-Grotesk-A-Regular.woff
Preview:	wOFFOTTO..........C@...........u.......8...nCFF ...@..]...yR.Z.bGPOS..n...35....f.L.GSUB..k....~....`.KROS/2...l...Y...`..a.cmap...4..........Dhead.......6...6.G'.hhea...@...!...$...whmtx..g(..........r=maxp...d.........3P.name.......i.....P..post...,....... .g.'.........@.{_.<..........V...........8.#................x.c`d``V.o.........,...".I...\|.......P..3..x.c`frb.........................YY..A`......J5...;..380(.fbV.o..........d...k.m..@...>......x..Mn.1....I?..Q.".P... 3IWU#!E.tGQ.v...8...8.8.....5W..`.M..p.xv.tR..B"....~o..O..../....F.W....C<.7..<.w...O.kx.....{.7...=WK.........,x.y....'DP.R.o.O...X..y....9........W.8..y.._.......Z.M.V.=o....W.w._..y...Q...aW..<dg....d....9{..(...ID>F.c..(R.f.`....1.:e..3.y.'f..,D.zTQ...4..D.e...r...$.K..6..21.Y.\.T.&....h..:...{s...7......[...#...1.8.N.Q..u3..=5....!ct.0......a.pE...4qHt...%.)I].D)8"...h.R\|.$A......y.<....I...O.r0..q..!+......y(.....9..d.......>.$.........2r......8.l!I?Y.<..c........1....lYj

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58188), with no line terminators
Category:	downloaded
Size (bytes):	58188
Entropy (8bit):	5.40080022067763
Encrypted:	false
SSDEEP:	1536:9wHEqrqZTKraCqCt2PG4VA9TaB1ITxbLRIuzJJTpn:9wHEqrVqCtuG4+n
MD5:	383F03BA52E9DF852BE533BB6CF4212A
SHA1:	0A3476D0C768A955738AC7A63F092229BA39A14C
SHA-256:	F76FDDDD39C7DC1D5DD0D2A981F725A76127F65B6C8F6BE54D76A6579F228899
SHA-512:	F74FDF8EDF5FB2F8AD14055E986E51742FCAAC54E704C170C3414E251755BFD0F81AE5602958405CCA703A00E1A2B965066A1B5622DA2C40A0CCC57F6CFE1499
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ice/vendor7.1044927e5ff102e2510c.js
Preview:	(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[7],{12489:(e,t,n)=>{"use strict";n.d(t,{Ps:()=>B});var i=function(){return i=Object.assign\|\|function(e){for(var t,n=1,i=arguments.length;n<i;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e},i.apply(this,arguments)};Object.create;Object.create;var r=n(25821),a=n(37826),o=n(45695);function s(e){var t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:e.prototype.toString;e.prototype.toJSON=t,e.prototype.inspect=t,o.Z&&(e.prototype[o.Z]=t)}function c(e){return c="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},c(e)}function u(e,t){for(var n,i=/\r\n\|[\n\r]/g,r=1,a=t+1;(n=i.exec(e.body))&&n.index<t;)r+=1,a=t+1-(n.index+n[0].length);return{line:r,column:a}}function l(e){return p(e.source,u(e.sou

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7612), with no line terminators
Category:	downloaded
Size (bytes):	7612
Entropy (8bit):	5.200136756620311
Encrypted:	false
SSDEEP:	96:LwN2dIOtlET0hGmoq7c6XzkFGbWH7+1j4iGZKV9WHliSYTGL3YeWP35qwI1TW+xQ:t4TAGQ7cVS6aKZO9lNPnq8OM5
MD5:	5BCFBCF0B69D2E73652BA4F543EC0044
SHA1:	7B8D9B598CAD0C6317C2D8E8D704F4DED4443AF9
SHA-256:	B0C67CB0BC1549CDB18ACD566146152B5721273E698C3C3C8B44500A79D0A309
SHA-512:	B07513CDDEF640C63CDDEACB7D3ACD6B612A9FC52C5514ADC22D8AEC4172DBD428FE3C60D20B65CEEE70FF65E6F69B9FECC6462EC74B31FD11C4D9F246349D5B
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/hc/assets/Upload-2dd75a9c3f6aa1598fd38a8ab92dd726.js
Preview:	"use strict";(self.webpackChunkhelp_center=self.webpackChunkhelp_center\|\|[]).push([[64806],{39434:function(e,t,r){r.r(t),r.d(t,{default:function(){return D}});var i=r(28222),n=r.n(i),a=r(80222),o=r.n(a),s=r(8446),l=r.n(s),u=r(66870),d=r.n(u),h=r(29747),c=r.n(h),p=r(96718),f=r.n(p),m=r(86302),v=r(33938),b=r(44845),x=r(30222),g=r.n(x),y=r(81607),$=r.n(y),_=r(11882),k=r.n(_),w=r(51679),T=r.n(w),E=r(35627),U=r.n(E),z=r(14418),P=r.n(z),R=r(80040),Z=r.n(R),q=r(19755),S=r.n(q),j=r(73560),O=r(38016),C=r.n(O),F=r(24476);r(31355);function L(e,t){var r=n()(e);if(o()){var i=o()(e);t&&(i=P()(i).call(i,(function(t){return l()(e,t).enumerable}))),r.push.apply(r,i)}return r}function N(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?L(Object(r),!0).forEach((function(t){(0,b.Z)(e,t,r[t])})):d()?c()(e,d()(r)):L(Object(r)).forEach((function(t){f()(e,t,l()(r,t))}))}return e}function D(e){var t,r;this.$uploader=S()(e),this.$dropzone=S()("#".concat(this.$uploader.data("dro

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	168596
Entropy (8bit):	6.001337100724995
Encrypted:	false
SSDEEP:	3072:aNCtSUFc7NsH7AYq+3GFzGoooeFKRDhtyBXdmE2hFv6huUqLR9Tql:aNCIUFoNsASG4ooWDhtyBXdmEYFCh9g2
MD5:	BC32D8C18E004FED6E90510E65260912
SHA1:	1A0998D6A6C2D0AA63DB89286BA6D01AE774F54B
SHA-256:	5D55EDC3BDB93EA6CD5DFA8FF5C0A80CE46B6FBEFFEC60AB2DE521DD554FEA50
SHA-512:	CDDE8E6200F34082658072CBF4FCCFC3D72EC00E9C01AED0ED9B8457B5419245E4EF7ADA770B62B3B57C25BF5CD27997105D8EA8377996CCB4BAE1F19DC87068
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ice/vendorVenmo43.bbd5f60f16ee575715aa.js
Preview:	"use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[43],{86073:A=>{A.exports="data:font/woff;base64,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

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (456), with no line terminators
Category:	downloaded
Size (bytes):	456
Entropy (8bit):	4.982546321833573
Encrypted:	false
SSDEEP:	6:rBNGSkyLWjYZX9pejDnoSdCwllSSiXUnnSIi67S+yoiTsCDnmrhsD9SMKiC8qSu2:rjNH1Sxsfq2oC7mrRMKiCNmNUEWoj3dp
MD5:	541027A9A7280B186ABE82420A1B7B78
SHA1:	555A2CC6521F55C81B36F729F2EDF2E454FDCB5C
SHA-256:	E1720A715E56CF9C60C1F279EDE738F7E9212A3335FABDA1784AE1720F189B1B
SHA-512:	BD95E8A75020381387FF8C8042CD0A63CB6BE6BEEF8AB99893157FEC0767B895EDA7BB0FF7AF6F7819E41D4BB0D424B7DA6429A4F9BA37020DD06944D4F04C97
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISjAIJKXKTsMvSzRQSBQ0NsDKkEgUNQ25ksRIFDRtZr5gSBQ1ABzLsEgUNlLi8DxIFDXDHEJ0SBQ0QdDiBEgUNWxKdVRIFDbDDOmISBQ1NkgEmEgUNi_CADBIFDdlnEo8SBQ3Yht3oEgUNIVk9oBIFDYu-GBUSBQ177ZZTEgUNgwWQ6xIFDT6ssKsSBQ1fpZEAEgUNKcklmxIFDRqeChESBQ2-Q4aHEgUNi7L_ExIFDUjKnb0SBQ297MmbEgUNGw5aCxIFDW995wESBQ3KXARREgUNBtsPmRIFDbSV79oSBQ2mMuLREgUNwe3oCRIFDfyWzyASBQ2nx3jxEgUNo4_ukBIFDTJHaJcSBQ3PmE73?alt=proto
Preview:	CtICCgcNDbAypBoACgcNQ25ksRoACgcNG1mvmBoACgwNQAcy7BoFCJoBGAIKBw2UuLwPGgAKBw1wxxCdGgAKBw0QdDiBGgAKBw1bEp1VGgAKBw2wwzpiGgAKBw1NkgEmGgAKBw2L8IAMGgAKBw3ZZxKPGgAKBw3Yht3oGgAKBw0hWT2gGgAKBw2LvhgVGgAKBw177ZZTGgAKBw2DBZDrGgAKBw0+rLCrGgAKBw1fpZEAGgAKBw0pySWbGgAKBw0angoRGgAKBw2+Q4aHGgAKBw2Lsv8TGgAKBw1Iyp29GgAKBw297MmbGgAKBw0bDloLGgAKBw1vfecBGgAKBw3KXARRGgAKBw0G2w+ZGgAKBw20le/aGgAKBw2mMuLRGgAKBw3B7egJGgAKBw38ls8gGgAKBw2nx3jxGgAKBw2jj+6QGgAKBw0yR2iXGgAKBw3PmE73GgA=

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	70282
Entropy (8bit):	5.610888531809971
Encrypted:	false
SSDEEP:	768:uTx6KAKjGJNjuENt4UUoINnl1gSukD/UvB+hNP33XfkBaemLpTnxXOODKXvInCrq:RNtdU84UQ4kp+WrNNecCbMkJY
MD5:	6C1C07469419241DA6911CD84B1A1A0D
SHA1:	558B0B84DDFFA299A7A7BBE08583F5E08EC9D485
SHA-256:	86502A17BCA8813CAF18EA999F51E1A0C19C73480F794F3FFDD60B8B16342785
SHA-512:	A3862FCA1594C4ACFEFB70B7E2C958F69504C337ACC011A7FCF9CBB76847813F2E8453B9F110E1991AFD45478D153317E5D70D7393892E615D423634CE3370E9
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ice/Login.dfe4e44db7dc076499b3.js
Preview:	(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[88],{94108:(e,n,t)=>{"use strict";t.d(n,{_1:()=>r,EZ:()=>i,O1:()=>a,Yb:()=>o,C4:()=>c,eB:()=>l,r8:()=>_});var r={TRY_ANOTHER_WAY:"/authflow",AUTHFLOW:"/authflow",VERIFICATION_FAILED:"/authflow/verification-failed",MAX_ATTEMPTS:"/authflow/max-attempts",ERROR:"/authflow/error",VERIFY:"/authflow/verify",DONE:"/authflow/done",PWR_CHANGE:"/password-recovery/change",LOGIN:"/lgn",PAYPAL:{CONTACT_US:"/smarthelp/contact-us"},VENMO:{CONTACT_US:"/contact-us/ "},XOOM:{CONTACT_US:"https://help.xoom.com/s/contactsupport"}},i={SMS:"SMS",EMAIL:"EMAIL",IVR:"IVR"},a={NAP_FAILURE:"NAP_FAILURE",VERIFY_OTP_FAILURE:"VALIDATION_ERROR",CHALLENGE_FAILED:"FAILED",AUTHFLOW_FAILED:"CHALLENGES_FAILED",UNKNOWN:"UNKNOWN"},o={ACTIVE:"ACTIVE"},c={CREATE:"CREATE",SELECT:"SELECT",ANSWER:"ANSWER",RESEND:"RESEND",VERIFY:"VERIFY"},l="logo",_="NoChallengesAvailableError"},27227:(e,n,t)=>{"use strict";t.d(n,{x3:()=>$,mV:()=>j,HE:

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	646
Entropy (8bit):	4.768262924160781
Encrypted:	false
SSDEEP:	12:2QHwJfl/msE0jr8oHQRp/SQhuQsboGwv0Wwvhz5nZng6ygn:2Q6t/msE0jrhiu7ozcWOyg
MD5:	F95326881ACA6EE557D3D5D8A669A8B5
SHA1:	BFBB8C936C2556086BBAF75F76B6B4AC5248F2A9
SHA-256:	A5FBBC45491760741144B2D841B6CFC6A44719B155039C439AD74338B2F4346E
SHA-512:	02A75BC89367BA6D3DC6A46434E8D50A1751A7CFBFCE9FE7E3C936A3B7992BA53007483F425FB65564E1165EF888AD9F506A1B93B626949AB798FE48B2710F15
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ncs/venmo/mapping.js
Preview:	(function(){. if(window){. window.cookiemapping = {. "venmo":{. "isClientCookies": true,. "filterAPI": "",. "essential":["cookie_prefs","tsrce","ts","ts_c","x-pp-s","l7_az","LANG","enforce_policy","tenant_ts","v_id","KHcl0EuY7AKSMgfvHl7J5E7hPtK","TLTSID","_csrf","api_access_token","w_fc"],. "functional":["amp_8f6a82","_dd_s","login_email"],. "performance":["sc_f"],. "marketing":["_gat_contentPageTracker","_gid","_ga","_gat","_ga_9EEMPVZPSW","_gat_gtag_UA_15492939_15","_gat_gtag_UA_15492939_14"]. }. }. }.})();

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2358)
Category:	downloaded
Size (bytes):	90989
Entropy (8bit):	5.07036604119384
Encrypted:	false
SSDEEP:	1536:a69WZWJJ/YwKI97QZ1lo9c2AV+EKeAUBEIpoavG8yxcXAd8wAUYlyAJ8S9F7wPcQ:a9WH/jtTeA+EkzZrJ1c6nWZTtktZwt8+
MD5:	18E11E8278610B2B824C233896F28DFD
SHA1:	A70399819040312A8B5F3DACA4D2A41DB88F8CE5
SHA-256:	082EA8638A54284038FEE9D450FCB75193AA15824B288B8F227D635DB76CF1EE
SHA-512:	188A58448EBB5A0DB80E03DC5F1C5FBE7FFC145D4593691797351BA6741ABE26461F9DF9124E12A7F7C518AF4DEB01D849803936E69D8AA74B17BC01F1F746DC
Malicious:	false
Reputation:	low
URL:	https://p19.zdassets.com/hc/theming_assets/802785/498597/style.css?digest=28556028217875
Preview:	@charset "UTF-8";../* COLORS /.:root {. --error: var(--zd-color-red-600);.}../** Normalize.css **/./! normalize.css v8.0.1 \| MIT License \| github.com/necolas/normalize.css */.html {. line-height: 1.15;. -webkit-text-size-adjust: auto;.}..body {. margin: 0;.}..main {. display: block;.}..h1 {. font-size: 2em;. margin: 0.67em 0;.}...container h1 {. margin: 0.67em 0;.}..hr {. box-sizing: content-box;. height: 0;. overflow: visible;.}..pre {. font-family: monospace, monospace;. font-size: 1em;.}..a {. background-color: transparent;.}..abbr[title] {. border-bottom: none;. text-decoration: underline;. text-decoration: underline dotted;.}..b,.strong {. font-weight: bolder;.}..code,.kbd,.samp {. font-family: monospace, monospace;. font-size: 1em;.}..small {. font-size: 80%;.}..sub,.sup {. font-size: 75%;. line-height: 0;. position: relative;. vertical-align: baseline;.}..sub {. bottom: -0.25em;.}..sup {. top: -0.5em;.}..img {. border-style: none;.}..button,.i

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	704343
Entropy (8bit):	5.0532185398015566
Encrypted:	false
SSDEEP:	3072:jzRcTcIytlXrvmPKbsbW0stElRGYwfGZtqPiUmQDA+Q:jz7z9bsbW0stw2GTq6Umn
MD5:	76538B7BF4E06AC0EDBAE9D664B5AFD1
SHA1:	0FE395FA5D13A1FD867EB1E6BE152B8EE3431DDF
SHA-256:	04DA9656E4EF637A466F9A1F4C9B3465F0A742190E062B356E3ED2339BA5DDDD
SHA-512:	C3E66BCB7C3A339FC83D251E91DD1BF560E03DFEA19899E050C937D4531E4EEB6FD68B7A3EE00286040352AEAF519CB0FB286CE983DCA5BA6179C51628DA6698
Malicious:	false
Reputation:	low
Preview:	{"accountId":"17574920715","projectId":"17574920715","revision":"12494","attributes":[{"id":"18157315162","key":"device_name"},{"id":"18164490425","key":"device_os"},{"id":"18175701833","key":"os_version"},{"id":"18222852632","key":"identity_has_submitted"},{"id":"18236841636","key":"is_blocked"},{"id":"18238852342","key":"cip_status"},{"id":"18242491672","key":"needs_verification"},{"id":"18244572215","key":"is_group"},{"id":"18244801617","key":"is_active"},{"id":"18244872354","key":"available_instant_transfer_capabilities"},{"id":"18249981645","key":"is_limited_account"},{"id":"18250251116","key":"is_web_authorized"},{"id":"18252761666","key":"identity_type"},{"id":"18254440426","key":"is_balance_upgrade_user"},{"id":"18259381627","key":"is_suspended_for_disputes"},{"id":"18259672092","key":"is_venmo_team"},{"id":"18262190830","key":"is_goods_services_limited"},{"id":"18265142697","key":"is_indebted"},{"id":"18269021962","key":"friends_count"},{"id":"18269181752","key":"automatic_tra

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (904)
Category:	downloaded
Size (bytes):	43874
Entropy (8bit):	5.062585346604447
Encrypted:	false
SSDEEP:	768:mPV3x+ZxQOVWC0Le6VTeweaOerjeweadenMExeunBNxKugs67kdqKd5x6o29/:wIBNx0kdqKd5x6o29/
MD5:	63E3D6F8FBEB1607E77CC70AE2352C24
SHA1:	A6555E1ABEC872FE3D0C73AA2B5FA6165BECD200
SHA-256:	7B6398A068227220C7FEEBDC795894B9A6FD7F32BE282E691065476178CAA06A
SHA-512:	813D7D7682CC1C7A7967642F5BC2FDDC148C1FF728406FBF44E64BECE0A99CAB63BFA7DB6FE4C587DBE5C64BB35FD1010A42CED929E42DC099EE8C2E35B26AFF
Malicious:	false
Reputation:	low
URL:	https://p19.zdassets.com/hc/theming_assets/802785/498597/script.js?digest=28556028217875
Preview:	document.addEventListener('DOMContentLoaded', function() {. // Key map. var ENTER = 13;. var ESCAPE = 27;. var SPACE = 32;. var UP = 38;. var DOWN = 40;. var TAB = 9;.. function closest (element, selector) {. if (Element.prototype.closest) {. return element.closest(selector);. }. do {. if (Element.prototype.matches && element.matches(selector). \|\| Element.prototype.msMatchesSelector && element.msMatchesSelector(selector). \|\| Element.prototype.webkitMatchesSelector && element.webkitMatchesSelector(selector)) {. return element;. }. element = element.parentElement \|\| element.parentNode;. } while (element !== null && element.nodeType === 1);. return null;. }.. // social share popups. Array.prototype.forEach.call(document.querySelectorAll('.share a'), function(anchor) {. anchor.addEventListener('click', function(e) {. e.preventDefault();. window.open(this.href, '', 'height = 500, width = 500');. });. });..

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21249), with no line terminators
Category:	downloaded
Size (bytes):	21249
Entropy (8bit):	5.314737275899317
Encrypted:	false
SSDEEP:	384:jrexS36aqK5NLeeItgnUhmITwX9+WOUTpef7Z5N6/mp7vFkRzYACWMkjYFZXU08:+x3aBXeHQGhTke6pek/mrqM2Qf8
MD5:	3F10BC4B346BCB2957B005B171BAB326
SHA1:	8EBC09D5E333A560FC598C703C6953A4983D1CAF
SHA-256:	2DCA66097C5549D9D0A36DBECB46BB73364786CF80EAE2960986491BA4CE9BF3
SHA-512:	327CEEFE97BC2AC298592DA1D8D7B80A94C020944574ABA1120A49094DCBD5AD48E14DBF8C1605DB181F029DD7ACC50E437C2281AD687976313D56516D344B8A
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ice/vendor5.9d5ed3531243aee5e049.js
Preview:	(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[5],{23541:(e,t,r)=>{"use strict";r.d(t,{Ry:()=>f});var n=function(e){return"undefined"==typeof document?null:(Array.isArray(e)?e[0]:e).ownerDocument.body},o=new WeakMap,i=new WeakMap,s={},a=0,u=function(e){return e&&(e.host\|\|u(e.parentNode))},c=function(e,t,r,n){var c=function(e,t){return t.map((function(t){if(e.contains(t))return t;var r=u(t);return r&&e.contains(r)?r:(console.error("aria-hidden",t,"in not contained inside",e,". Doing nothing"),null)})).filter((function(e){return Boolean(e)}))}(t,Array.isArray(e)?e:[e]);s[r]\|\|(s[r]=new WeakMap);var f=s[r],l=[],p=new Set,d=new Set(c),h=function(e){e&&!p.has(e)&&(p.add(e),h(e.parentNode))};c.forEach(h);var m=function(e){e&&!d.has(e)&&Array.prototype.forEach.call(e.children,(function(e){if(p.has(e))m(e);else{var t=e.getAttribute(n),s=null!==t&&"false"!==t,a=(o.get(e)\|\|0)+1,u=(f.get(e)\|\|0)+1;o.set(e,a),f.set(e,u),l.push(e),1===a&&s&&i.set(e,!0

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29034)
Category:	downloaded
Size (bytes):	29130
Entropy (8bit):	5.211610041388293
Encrypted:	false
SSDEEP:	384:Teldc3uIWy9AI38yL85tzcF3ejMidyPtlXW+fP/FUFea:TEW3KWsWkK3bhW0Y5
MD5:	F728CE6548206DED4269A9173894A01B
SHA1:	BC10ADADEE1CC441F74A890B31AF34261C5FEAEC
SHA-256:	2310474236341C3E65D4856E05ECB286AC1B6F4E9963112B27AFD5C04534376D
SHA-512:	C10F2166ED6B187CC978E1E47BA75800B5E6718636BB39C64D6B41C93F937D750C1A313E1A4348F3C445881B901DDFC12B79E98AE5FFDF9DB91D934C0815A11C
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/hc/assets/58177-c7d87290b4661a50fc92c3b423498d5b.js
Preview:	/! For license information please see 58177-c7d87290b4661a50fc92c3b423498d5b.js.LICENSE.txt /.(self.webpackChunkhelp_center=self.webpackChunkhelp_center\|\|[]).push([[58177],{31355:function(e,t,i){var n,r,s;!function(o){"use strict";r=[i(19755),i(12203)],n=function(e){function t(t){var i="dragover"===t;return function(n){n.dataTransfer=n.originalEvent&&n.originalEvent.dataTransfer;var r=n.dataTransfer;r&&-1!==e.inArray("Files",r.types)&&!1!==this._trigger(t,e.Event(t,{delegatedEvent:n}))&&(n.preventDefault(),i&&(r.dropEffect="copy"))}}e.support.fileInput=!(new RegExp("(Android (1\\.[0156]\|2\\.[01]))\|(Windows Phone (OS 7\|8\\.0))\|(XBLWP)\|(ZuneWP)\|(WPDesktop)\|(w(eb)?OSBrowser)\|(webOS)\|(Kindle/(1\\.0\|2\\.[05]\|3\\.0))").test(window.navigator.userAgent)\|\|e('<input type="file"/>').prop("disabled")),e.support.xhrFileUpload=!(!window.ProgressEvent\|\|!window.FileReader),e.support.xhrFormDataFileUpload=!!window.FormData,e.support.blobSlice=window.Blob&&(Blob.prototype.slice\|\|Blob.prototype.webkitS

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	312
Entropy (8bit):	5.378721462835432
Encrypted:	false
SSDEEP:	6:ytBhAgCBNUsH7L+LRB2DOexWb2RhQJFtXXC3ArJSLhhIl/1cK2fvFive:9H3aRB2DOexWb2RKJFtHfch41cJvce
MD5:	6DEAC5CA9925BB1F0D3DF4C843C0F123
SHA1:	344163419235EB87075170EA9699E46BD467908E
SHA-256:	6D8F6916CD8929317FCD14295DD9BAE3F99DB13039FD9B56ACB68E108B8EF382
SHA-512:	BFB7CC26C32502C6876090428E9AEF2343FC92C6415E4A6A603BBAFBF6F9B8F4BC8EF486DC857CA2BA9CB2A35EF849D2A337D2CE2ED92F67A35653F1C90E57E2
Malicious:	false
Reputation:	low
URL:	https://www.cloudflare.com/cdn-cgi/trace
Preview:	fl=363f152.h=www.cloudflare.com.ip=102.129.152.220.ts=1714134219.784.visit_scheme=https.uag=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36.colo=MIA.sliver=none.http=http/1.1.loc=US.tls=TLSv1.3.sni=plaintext.warp=off.gateway=off.rbi=off.kex=X25519.

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	127013
Entropy (8bit):	5.024667878330557
Encrypted:	false
SSDEEP:	1536:hlxVaKjRjKqrya/zHxPZcWtQoVYiMW0DIXneYMABGYRgA:hlKWT5Zc2iid
MD5:	226640CAE8DD928FA4EA8D1AEC3C3229
SHA1:	4D3E8C45DACCFEFD83A36599DAB1B80CCE53E3C8
SHA-256:	5D2F3227A9F5CA5F23488E20141DEB181FDABD8032EAD4E79E194D0C7D0A2BCF
SHA-512:	C5ECE01E8E09B70C89BE6835269E13A6888B56C5AB4174BE2853A24347652B90E0416D23DD4758E63B7C1AF2D88EB10D35183F8E315B1D95F1461121D10CF9C3
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ice/vendorVenmo38.18ef90e268efd5088cd9.js
Preview:	"use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[38],{19531:(e,t,n)=>{function l(e){return e&&"object"==typeof e&&"default"in e?e.default:e}var r=l(n(35776)),a=n(84395),i=l(n(62015));e.exports=function(e){return r.createElement(i,a.__assign({titleAccess:"Amex"},e),r.createElement("path",{fillRule:"evenodd",clipRule:"evenodd",d:"M18 0C19.1046 0 20 0.89543 20 2V18C20 19.1046 19.1046 20 18 20H2C0.89543 20 0 19.1046 0 18V2C0 0.89543 0.89543 0 2 0H18ZM14.1966 10.3636L7.90259 10.3635V15.577H14.1452L15.6508 13.9081L17.172 15.577H19.0022V15.5031L16.6082 12.9673L19.0022 10.4046V10.3636H17.1903L15.6913 12.016L14.1966 10.3636ZM12.323 10.384L14.7494 12.9673L12.323 15.556L12.3232 14.3616H9.33391V13.5608H12.252V12.3798H9.33391V11.5645H12.3232L12.323 10.384ZM13.7251 9.63204V6.0539L15.056 9.63204H16.3167L17.6205 6.06613V9.64427L19.0016 9.63204V4.42296H16.8552L15.7002 7.63305L14.5526 4.43063L12.3224 4.42296L12.322 9.587L10.0387 4.42379H8.2057

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	704343
Entropy (8bit):	5.0532185398015566
Encrypted:	false
SSDEEP:	3072:jzRcTcIytlXrvmPKbsbW0stElRGYwfGZtqPiUmQDA+Q:jz7z9bsbW0stw2GTq6Umn
MD5:	76538B7BF4E06AC0EDBAE9D664B5AFD1
SHA1:	0FE395FA5D13A1FD867EB1E6BE152B8EE3431DDF
SHA-256:	04DA9656E4EF637A466F9A1F4C9B3465F0A742190E062B356E3ED2339BA5DDDD
SHA-512:	C3E66BCB7C3A339FC83D251E91DD1BF560E03DFEA19899E050C937D4531E4EEB6FD68B7A3EE00286040352AEAF519CB0FB286CE983DCA5BA6179C51628DA6698
Malicious:	false
Reputation:	low
URL:	https://cdn.optimizely.com/datafiles/XEQMPVUNK7sdt5H4mJXAQ.json
Preview:	{"accountId":"17574920715","projectId":"17574920715","revision":"12494","attributes":[{"id":"18157315162","key":"device_name"},{"id":"18164490425","key":"device_os"},{"id":"18175701833","key":"os_version"},{"id":"18222852632","key":"identity_has_submitted"},{"id":"18236841636","key":"is_blocked"},{"id":"18238852342","key":"cip_status"},{"id":"18242491672","key":"needs_verification"},{"id":"18244572215","key":"is_group"},{"id":"18244801617","key":"is_active"},{"id":"18244872354","key":"available_instant_transfer_capabilities"},{"id":"18249981645","key":"is_limited_account"},{"id":"18250251116","key":"is_web_authorized"},{"id":"18252761666","key":"identity_type"},{"id":"18254440426","key":"is_balance_upgrade_user"},{"id":"18259381627","key":"is_suspended_for_disputes"},{"id":"18259672092","key":"is_venmo_team"},{"id":"18262190830","key":"is_goods_services_limited"},{"id":"18265142697","key":"is_indebted"},{"id":"18269021962","key":"friends_count"},{"id":"18269181752","key":"automatic_tra

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29698)
Category:	downloaded
Size (bytes):	75682
Entropy (8bit):	5.4739280453671375
Encrypted:	false
SSDEEP:	1536:cyp4xUZY18NrPuNIbWWlTFVsU2ycwnKJ6DkbAdmychOIuO4hjCC/WIMcZT6Co3Gc:cyp4xgY18NrPuNIbWWlTFVsU2yf1yuOp
MD5:	7FC4DA63A9F61404758B98541CB68C13
SHA1:	D2D204FFA5CEDB7DCE315BA840AD7E138C445620
SHA-256:	562F9615C7771FD153577743C42474A2A4B8C7C1906D7FE57D7DF779CBBACD8C
SHA-512:	8100DDFB7361B4799172B320C39B13F71D24D182E28D6110D6F4698E46EEECB1F614730DE1FBE97982E85BCAC6B65D428864A2674BEF89F2DAADFB87A1390DEC
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ice/vendorVenmo40.6b9396492b9ecd85d966.js
Preview:	"use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[40],{98660:(e,t,n)=>{n.r(t),n.d(t,{Accordion:()=>x.Z,AccordionActions:()=>w.Z,AccordionDetails:()=>O.Z,AccordionSummary:()=>E.Z,AppBar:()=>C.Z,Avatar:()=>S.Z,Backdrop:()=>T.Z,Badge:()=>k.Z,BottomNavigation:()=>L.Z,BottomNavigationAction:()=>M.Z,Box:()=>I.Z,Breadcrumbs:()=>A.Z,Button:()=>F.Z,ButtonBase:()=>D.Z,ButtonGroup:()=>R.Z,Card:()=>N.Z,CardActionArea:()=>B.Z,CardActions:()=>z.Z,CardContent:()=>H.Z,CardHeader:()=>W.Z,CardMedia:()=>V.Z,Checkbox:()=>$.Z,Chip:()=>j.Z,CircularProgress:()=>U.Z,ClickAwayListener:()=>q.Z,Collapse:()=>G.Z,Container:()=>Y.Z,CssBaseline:()=>_.ZP,Dialog:()=>K.Z,DialogActions:()=>X.Z,DialogContent:()=>J.Z,DialogContentText:()=>Q.Z,DialogTitle:()=>ee.Z,Divider:()=>te.Z,Drawer:()=>ne.ZP,ExpansionPanel:()=>re.Z,ExpansionPanelActions:()=>oe.Z,ExpansionPanelDetails:()=>ie.Z,ExpansionPanelSummary:()=>ae.Z,Fab:()=>le.Z,Fade:()=>ue.Z,FilledInput:()=>se.Z,Form

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	413
Entropy (8bit):	4.97467663759712
Encrypted:	false
SSDEEP:	12:tr3oq+YuXM65Czt74jgrBwThC64teF+tBVhx:tLoq+YuXMMc4ErsCteF+tBV/
MD5:	518021E3DD69AF49A601E3900511518C
SHA1:	BC3CE067748AE4102ED0CC8D41083C895C6FE772
SHA-256:	99FA45E18DFEEEA65E5E02F72BCE972F99E7D03898A1512DB322650BA3B7FC3C
SHA-512:	00DE548968A1757FCD3AEB49D78D24565877C95B730E4B6E88333F10A849A1C1DCDC7053E706D8A8C875C8A4B04727FED5379D1BCD0CFA1539B6BD8E92D6B2DA
Malicious:	false
Reputation:	low
Preview:	<svg width="10" height="21" viewBox="0 0 10 21" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M6.67675 20.3834V10.5924H9.38004L9.73828 7.21837H6.67675L6.68135 5.52964C6.68135 4.64964 6.76498 4.17812 8.02916 4.17812H9.71914V0.803711H7.01548C3.76794 0.803711 2.62489 2.44048 2.62489 5.193V7.21875H0.600586V10.5928H2.62489V20.3834H6.67675Z" fill="#2F3033"/>.</svg>.

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5190
Entropy (8bit):	3.945811655305623
Encrypted:	false
SSDEEP:	96:+Xwu51gConPPmGVdljKf1y9CED4155cnQTSIYfQJKdd:+Xwu5CmGXlWf80Ec55cnESIYfzdd
MD5:	CFCC87C27175BBC1DF90EAD8169E3A2E
SHA1:	35ADB4D8DECB69EE5FF6C439F0C3D600034E9618
SHA-256:	C6C2B97D2C79C372DC75854ACE40979E531EDDEA89B8D137C1B513E4FBE85398
SHA-512:	F0204439EE2733613B70FFB352C78689EB2A4695A3A70BB9D4C488DE504D0DCF2001336E39CBEFB4E8C3AACF7A82B5A87E0A00E317167F53B6B3943FD988E002
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/gkyt4bl1j2fs/5yRidqdbuOKk7K0V29FCdJ/888b7572a363f3186dfaff7e08dc17c0/91a44210-06d0-4304-b0da-411cc5e66917_app-store-icon.svg
Preview:	<svg width="159" height="45" viewBox="0 0 159 45" fill="none" xmlns="http://www.w3.org/2000/svg">.<rect x="0.75" y="1.72314" width="157.5" height="42.4911" rx="21.2456" fill="white" stroke="black" stroke-width="1.5"/>.<path d="M49.6437 26.6396C49.3385 27.3421 48.9772 27.9887 48.5586 28.5831C47.9881 29.3935 47.5209 29.9545 47.1609 30.266C46.6027 30.7773 46.0048 31.0392 45.3644 31.0541C44.9047 31.0541 44.3504 30.9238 43.705 30.6594C43.0576 30.3963 42.4626 30.266 41.9186 30.266C41.348 30.266 40.7361 30.3963 40.0815 30.6594C39.426 30.9238 38.8979 31.0615 38.4942 31.0752C37.8801 31.1012 37.2681 30.8319 36.6571 30.266C36.2672 29.9272 35.7795 29.3464 35.1952 28.5236C34.5683 27.6449 34.0529 26.626 33.6492 25.4644C33.2168 24.2097 33 22.9947 33 21.8184C33 20.471 33.2923 19.3088 33.8777 18.335C34.3377 17.5528 34.9498 16.9357 35.7158 16.4827C36.4818 16.0297 37.3095 15.7989 38.2009 15.7841C38.6886 15.7841 39.3282 15.9344 40.123 16.2298C40.9156 16.5262 41.4245 16.6764 41.6476 16.6764C41.8144 16.6764

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.462814895472355
Encrypted:	false
SSDEEP:	3:XNJq8VaSKgUF1:XNJq8Va5go
MD5:	6E315155A0646B455D3DAF58844E8FDA
SHA1:	6C5DBB9057BC2E762C8867E6C29C9E690149B1B1
SHA-256:	E2405FED5764E80BFD34342402CC15736FC404D2CAB624CBB6D22CEED91EC59D
SHA-512:	6C401DB77C2D3533C384DEBEC5CB21F5A13E7B4BAFD09B3F8CAB7F18EA2CBCAB02E96684C0220187E4989E4EC45093BA5C2A837508B8D5BBDEF995A2A3BAFA8D
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwllmVVltdWNqhIFDTWGVBwSBQ2Saqy-?alt=proto
Preview:	ChoKCw01hlQcGgQISxgCCgsNkmqsvhoECFYYAg==

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAl-0UiH02feWxIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (63464)
Category:	dropped
Size (bytes):	680185
Entropy (8bit):	5.486090438268409
Encrypted:	false
SSDEEP:	1536:3ijaLU0i76R+r8oni+z0jJv39LWXaEP6l6gk+sNfS/pyNktWv5T4/GUQxCyIxat7:slmBWx58zQBLi5DzKz/+ydySpYWVykyo
MD5:	075A4AF6EA7E3CE15FAB8E2FD9AE3A3E
SHA1:	A6D3789675C15E3B2B74CAAA38AA14325EECD11C
SHA-256:	02E744A715FE1D9BA8A967A0D577D4144C9C415C4B4460D9ECCBD0BBBC90EF28
SHA-512:	248A88F37F1FCA9DF66D7844A8E87EF74A2751215E1720F3CA4D3EB0FB6C15548AAE6F5A97F90DCBB577DE157F20D9BDA648810083998E91CD6155C7C575E3DE
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html lang="en-US"><head><meta charSet="utf-8"/><meta http-equiv="x-ua-compatible" content="ie=edge"/><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/><link rel="icon" href="/favicon.ico"/><link rel="apple-touch-icon" href="/favicon.ico"/><link rel="apple-touch-icon-precomposed" href="/favicon.ico"/><script>. // Avoids iframing for old browsers: if iFrame is being loaded cross-domain,. // do a soft redirect.. // Regex matches https://.venmo.com or https://.venmo.biz. if (top != self && document && document.referrer && document.referrer.length > 0 && !document.referrer.match(new RegExp('https://([a-z0-9]+.)*venmo.(com\|biz)', 'g'))) {. window.onload = function() { document.body.innerHTML = ""; }. top.location = location;. }. </script><script async="" src="https://www.googletagmanager.com/gtag/js?G-NM9TNT36E1"></script><script>window.dataLayer = wi

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4559)
Category:	dropped
Size (bytes):	42933
Entropy (8bit):	5.231470427715636
Encrypted:	false
SSDEEP:	768:2+O9iEsJiuogCobyjgwv9XPUKCLpL5K3fwvnvCvQp5dYku:299ts4uogCobyjgwv9XPUKFfwvnvCvQu
MD5:	F436A7577063FA3DE7C4DA91B1098377
SHA1:	3F0F986B1218B6BF06E0B0C5D35BE5EBBEA42FFF
SHA-256:	7B3DC2FE8CE9887A750BCEAB72DDB8EAA2DB8EF82B25DF6C72B0628206E15FD1
SHA-512:	DE38F34A96CB4DB9A368F8A01DB2B2576E8B34E6E03FA08F9F302C0E9461EC8FA219D380364432CB444A578B5215A8340966A6A3F09BFD74AD7B19C444A5180D
Malicious:	false
Reputation:	low
Preview:	@font-face{font-family:"Scto Grotesk A";font-style:normal;font-weight:400;src:local("Scto Grotesk A"),url("/static/fonts/Scto-Grotesk-A-Regular.woff") format("woff")}@font-face{font-family:"Scto Grotesk A Italic";font-style:italic;font-weight:400;src:local("Scto Grotesk A Italic"),url("/static/fonts/Scto-Grotesk-A-Regular-Italic.woff") format("woff")}@font-face{font-family:"Scto Grotesk A Medium";font-style:normal;font-weight:500;src:local("Scto Grotesk A Medium"),url("/static/fonts/Scto-Grotesk-A-Medium.woff") format("woff")}@font-face{font-family:"Scto Grotesk A Bold";font-style:normal;font-weight:700;src:local("Scto Grotesk A Bold"),url("/static/fonts/Scto-Grotesk-A-Bold.woff") format("woff")}@font-face{font-family:"Athletics Regular";font-style:normal;font-weight:400;src:local("Athletics"),url("/static/fonts/Athletics-Regular.woff") format("woff")}@font-face{font-family:"Athletics Medium";font-style:normal;font-weight:500;src:local("Athletics"),url("/static/fonts/Athletics-Medium.w

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4450)
Category:	downloaded
Size (bytes):	48144
Entropy (8bit):	5.286851403246729
Encrypted:	false
SSDEEP:	192:N6xGT2rF04OKwaF7/j2ygLS5V2LCgMf75vaIsACf2Lllf40plmu6ENPRxsuG:Nwwah/gSf5iIXHPRxZG
MD5:	F9E2C1C1A5C489B8F9DDE34DE4A11B7A
SHA1:	5FB687488956C6E783C5732389EFDA7D9E60C71D
SHA-256:	5055DBDA3413C24C4343563770493B6AC16B5B4417B298197F51F60D1C5BF091
SHA-512:	84F1408D9AA9DDA8052F7BFA1EF88079593128492DCFE2E6493B78BE01C18D516B5E6557EE112A0A4551C90903D8F9DC6DAD1238991FB679EAA0B902BB8380EF
Malicious:	false
Reputation:	low
URL:	https://account.venmo.com/_next/static/css/7ce57f390c40a916.css
Preview:	@font-face{font-family:"Scto Grotesk A";font-style:normal;font-weight:400;src:local("Scto Grotesk A"),url("/static/fonts/Scto-Grotesk-A-Regular.woff") format("woff")}@font-face{font-family:"Scto Grotesk A Italic";font-style:italic;font-weight:400;src:local("Scto Grotesk A Italic"),url("/static/fonts/Scto-Grotesk-A-Regular-Italic.woff") format("woff")}@font-face{font-family:"Scto Grotesk A Medium";font-style:normal;font-weight:500;src:local("Scto Grotesk A Medium"),url("/static/fonts/Scto-Grotesk-A-Medium.woff") format("woff")}@font-face{font-family:"Scto Grotesk A Bold";font-style:normal;font-weight:700;src:local("Scto Grotesk A Bold"),url("/static/fonts/Scto-Grotesk-A-Bold.woff") format("woff")}@font-face{font-family:"Athletics Regular";font-style:normal;font-weight:400;src:local("Athletics"),url("/static/fonts/Athletics-Regular.woff") format("woff")}@font-face{font-family:"Athletics Medium";font-style:normal;font-weight:500;src:local("Athletics"),url("/static/fonts/Athletics-Medium.w

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 49048, version 1.0
Category:	downloaded
Size (bytes):	49048
Entropy (8bit):	7.992095579092943
Encrypted:	true
SSDEEP:	768:q7lNBti95s6jbHEwFQZkgqozlh/Efn60o7T+zXYQ46RFYcmBbiKoXIk666S9uVdU:qRti9e6EwiVJufn60o7yG68TbEXIk661
MD5:	4E91368B776BB547761AD3F6BB0C21F4
SHA1:	A970C586635548622B078ECAD58BCE4D31448378
SHA-256:	A3AD92D5C9F62DF356AF34CC0DA080F531B4B37287230405045D6724DE3A0E05
SHA-512:	115E58E44B88B136932E62FA19F3972CAAAE6C2553C2E443356A33165CC5DD039E0D321B06095A4BB5DE8AB23B8A4B565640FD463C666704C4285A411A423C47
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/messaging/venmo-assets/Scto-Grotesk-A-Bold.woff
Preview:	wOFFOTTO..........mX...........t.......0...hCFF ...<..d....e&.~.GPOS..u...H.....rq.\GSUB..r4...~....`.KROS/2...l...W...`..c.cmap...0..........Dhead.......6...6.K'ihhea...@...!...$....hmtx..n<........".a.maxp...d.........3P.name.......k......v7post...(....... .g.'........b..j_.<..........V...........8..................x.c`d``V.o.........,...".....}.......P..3..x.c`f.d....................5....9X..A`......J5...;...)..L...-..0.c.S``...c....A....PP...x..Mk.A...............P(-...=Vl.(Cv...2av..G.........;x.W....`...v.7.......x....}.g...tZr..>;.........:........x....x.{.........V..g.;...~....^.M...>8....q...o.>.....O....x.w.Q.o.p.E1..oWx.r.t.[..^./......>..l..d...;.t...h*F).J..<d.,c._2....N.b.d.J.LY...q..........$....S.D..lD.E1aR.\.b,F\.Y../.f.T,.."....%.2..a..99...N...zm..1]&.4e.l.`.Dw.S.g.Q4......z9.H...";X..$fX@A`.)4.n.9@.]...cDvA.NC..D)8B:...b.}iO......m..I.pJvIlbR.....8=...4.r.............Q6...(~9.........ml3r.....j.x.:.7Yl#..ca.O(/.=\3e.,..xc.W.f...:v

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1499
Entropy (8bit):	4.170708520866106
Encrypted:	false
SSDEEP:	24:ta1yuXMMlV4qQDzWpaUnWjzvsLx+Ga4H89hWPsn7AEMwkQXY8R2kZBg83SxjSXGR:afVqDqpa6GGbc9hWPsn0EpXY8R2krgjn
MD5:	5166C0D79BAE42FF989C186869DC25C0
SHA1:	038ED0C8CC25A0633747BBEF0785E533E2B9EC19
SHA-256:	C09BF62C2D46708A1FD605812B522232111EA99D68A17FD835BCAF8FF816486C
SHA-512:	4ADB1D11785DD7424EE2ED3E45DCCCA86D5F93D8E40BD6C1E4C348FA349B1AC015C0C28A5997D0480D9F5532357297DFEB021B713FDDE231D3A33EA4B95944AA
Malicious:	false
Reputation:	low
Preview:	<svg width="22" height="18" viewBox="0 0 22 18" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M10.5909 5.02407L10.6355 5.75935L9.89213 5.66931C7.18643 5.32418 4.82266 4.15375 2.81569 2.18802L1.8345 1.21265L1.58177 1.93292C1.04658 3.53852 1.38851 5.23415 2.50349 6.37458C3.09815 7.00481 2.96435 7.09485 1.93857 6.71971C1.58177 6.59966 1.26958 6.50963 1.23984 6.55464C1.13578 6.65968 1.49257 8.02519 1.77504 8.56539C2.16157 9.31567 2.94949 10.0509 3.81174 10.4861L4.5402 10.8312L3.67795 10.8462C2.84542 10.8462 2.81569 10.8612 2.90489 11.1764C3.20222 12.1517 4.37667 13.1871 5.68492 13.6373L6.60664 13.9524L5.80385 14.4326C4.61453 15.1228 3.21708 15.513 1.81964 15.543C1.15065 15.558 0.600586 15.618 0.600586 15.663C0.600586 15.8131 2.4143 16.6534 3.46981 16.9835C6.63637 17.9589 10.3976 17.5387 13.2222 15.8731C15.2292 14.6877 17.2362 12.3318 18.1728 10.0509C18.6782 8.83549 19.1837 6.61467 19.1837 5.54927C19.1837 4.85901 19.2283 4.76898 20.0608 3.9

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5762)
Category:	downloaded
Size (bytes):	10283
Entropy (8bit):	5.35566149591199
Encrypted:	false
SSDEEP:	96:hsDEUYMsDEUNimwtKvjWaw+FUVxGiN7Q7t8OTSUCgfpUVeahsDEUdT5sl+fGfX:xAiWawx2ip8TnCgfpUVexul+uv
MD5:	37AADB605A5073402B4D4348108821FC
SHA1:	D6A53322D1CE7C096A16907CC42D623507A6DFE7
SHA-256:	C00273097FCC653A04461C4BAF69C033C96DD9098C77AF0A3BE8E4F96EEDCC04
SHA-512:	733E56E9FEC8C0D2526FB8B4F6C43810BD5C1EB7089414BF67DB95051448BFC5A366B2EAA18B1967361DF5CBED80DBC066EA3E8A41B4488970CCCB2FFED72C86
Malicious:	false
Reputation:	low
URL:	https://account.venmo.com/_next/static/css/6c9663029f270459.css
Preview:	@font-face{font-family:"Scto Grotesk A";font-style:normal;font-weight:400;src:local("Scto Grotesk A"),url("/static/fonts/Scto-Grotesk-A-Regular.woff") format("woff")}@font-face{font-family:"Scto Grotesk A Italic";font-style:italic;font-weight:400;src:local("Scto Grotesk A Italic"),url("/static/fonts/Scto-Grotesk-A-Regular-Italic.woff") format("woff")}@font-face{font-family:"Scto Grotesk A Medium";font-style:normal;font-weight:500;src:local("Scto Grotesk A Medium"),url("/static/fonts/Scto-Grotesk-A-Medium.woff") format("woff")}@font-face{font-family:"Scto Grotesk A Bold";font-style:normal;font-weight:700;src:local("Scto Grotesk A Bold"),url("/static/fonts/Scto-Grotesk-A-Bold.woff") format("woff")}@font-face{font-family:"Athletics Regular";font-style:normal;font-weight:400;src:local("Athletics"),url("/static/fonts/Athletics-Regular.woff") format("woff")}@font-face{font-family:"Athletics Medium";font-style:normal;font-weight:500;src:local("Athletics"),url("/static/fonts/Athletics-Medium.w

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	203018
Entropy (8bit):	5.541983155218296
Encrypted:	false
SSDEEP:	3072:3CQaf5qZ3fhO+uWE8hG1LceF2/easOQthTnXDL9btIMMw34T:SQX5N5YLceF+UJTnXP9RIMn8
MD5:	F430D38084D2A444B9F838CF1DC737E8
SHA1:	1E81C2AF876DEC663C088B6EE55942F61D9D90B2
SHA-256:	39358AA5356CEC67825B9952332889C1450265A3CF40E89EFF3A5519DBA65137
SHA-512:	929D1191C07569D6A1D4BA88978C77B79E4F12EF470D7E62567E6D27E2CBF93232273ABDB322A449B34F7EA23EB4999527C82022A96D5BCA7A1C96036A0B0146
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-15492939-15&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"","vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":6},{"function":"__c

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38490)
Category:	downloaded
Size (bytes):	38519
Entropy (8bit):	5.345984592988885
Encrypted:	false
SSDEEP:	768:X2dQXVuvmwdHXDCerImDjiHu8IV+m5WUnNTgHjNiUcvVCUx135muk3vkc/dNIy5e:XqQgvmwd3GCpVn5WUBmiUcvVCg3guk3o
MD5:	6FE90B3EF58D191B9F3E10B43D6F83D4
SHA1:	1D5E4CC3F3F285F3CCC3BE6289E59E30234EEC0A
SHA-256:	FCB917165B4F2D97418021E17A544D0B1EDAB6B91F79C6A2284E64A4738135E4
SHA-512:	F1A4BE2757E3453863EFFDC27145B015B9BADD183EE54B1016DCAAA564B1EB70C054B7F9AD4B3ABD874EE64A826D0AFF2FA183703B27DF1DFCB65FAE9BEE1BD6
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/staging/pa/js/pa_venmo.js
Preview:	/@ 2024 PayPal (v1.8.16) /.!function(){"use strict";var R="venmo";function o(){return(new Date).getTime()}function m(t){return Math.round(parseFloat(t))\|\|0}function a(t){if(!t\|\|t.constructor!==Object&&t.constructor!==Array)return t;var e,n=t.constructor();for(e in t)n[e]=a(t[e]);return n}function c(t,e,n){for(var r in void 0===n&&(n=!0),t=t\|\|{},e=e\|\|{})"undefined"!=typeof e[r]&&(n\|\|!n&&"undefined"==typeof t[r])&&(t[r]=e[r]);return t}function q(t,e){e=e\|\|{};var n,r=a(t=t\|\|{});for(n in e)try{e[n].constructor===Object&&r[n]&&r[n].constructor===Object?r[n]=q(r[n],e[n]):r[n]=e[n]}catch(i){r[n]=e[n]}return r}function s(){var i,a=window.crypto\|\|window.msCrypto;return(i=function i(){var t,e=2147483647;try{var n=new Uint32Array(1);a.getRandomValues(n),t=n[0]&e}catch(r){t=Math.round(e*Math.random())}return t.toString(16)})()+i()}window.PAYPAL=window.PAYPAL\|\|{},window.fpti=window.fpti\|\|{},window.fptiserverurl=window.fptiserverurl\|\|"https://www.msmaster.qa.paypal.com/webapps/tracking/ts";var F,e

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64534)
Category:	downloaded
Size (bytes):	118285
Entropy (8bit):	5.211957238985907
Encrypted:	false
SSDEEP:	1536:T7kdyqOucj7b+s+fsWWwuaZjPLNhvE2341BU4MB0ombM6JgY21EeEddnJO/Q:T7eOuK7qEGZPvNR4xAisyeEddn/
MD5:	3733BAE913AE75BC992C070E4A79D721
SHA1:	3145773BEFA3B0743DE267234E320C3CAFB09B9E
SHA-256:	DCF38E4CB319F4E81B5F5802655CF9FCCF0D11B8E2868F756DC079E0413F0616
SHA-512:	BDB4F11B2D00CC2D552ED41CFDA6E5999A0E79105C547F91BDC490AACE11815841F793BFC87738D551D711628D8AB0FBED056CEEDBB53E76E6CBF6A128974AAD
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ice/vendor6.0d835df92abd25f3083d.js
Preview:	"use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[6],{23564:(e,t,r)=>{r.d(t,{ZT:()=>i,pi:()=>o,_T:()=>a,mG:()=>s,Jh:()=>c,ev:()=>u});./! **************************************************************************.Copyright (c) Microsoft Corporation...Permission to use, copy, modify, and/or distribute this software for any.purpose with or without fee is hereby granted...THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH.REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY.AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,.INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM.LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR.OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR.PERFORMANCE OF THIS SOFTWARE..*************************************************************************** *

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	276379
Entropy (8bit):	5.56488163913302
Encrypted:	false
SSDEEP:	6144:8RQX5NzgyYLceF+qKXjXP9RIMIfI5YDSZ:8R+xgvNNyZ
MD5:	35CE0CEC2FF5E63A4528B7624F5E3418
SHA1:	4B0E2EBDF805F1C5CD979647E4A04A961F076739
SHA-256:	B041344690F8CC893CE557370DBC1117A5B59320D69CDDE82F2D970D9FB48D9C
SHA-512:	C5D414CA6B3983CD6F066F24B913D8CF7424567682F6E948D24D3EBEE4413AC40BD79746DB309C85E530B5D320B115A7717D1DF8189096DF43A8F2165C850072
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-9EEMPVZPSW
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":11,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":105},{"function":"__ogt_1p_data_v2","priority":11,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2924), with no line terminators
Category:	downloaded
Size (bytes):	2924
Entropy (8bit):	5.001024710839378
Encrypted:	false
SSDEEP:	48:iQ4Q5EseY+9wcDD3xHPkXTIkL6ixzsTYTM3cvk3W3DuV1oUltFJIjrHh+H1+HBlM:QsN+acDFHPkXEo64zsTYTgcvYW36V1tD
MD5:	CF598D80939B4C3EDAEC3129A8AD6E2F
SHA1:	F968B19E0C0C9CECB616731550024E9E05ABFD5C
SHA-256:	F73AD0E2DE699A56F2901795669C25649E6C30E674302EBFDE345258DEF1076B
SHA-512:	0FBB5793206E72A571D85A1E239A05DF652780C54CF8DC152560B89021742875E2B13B37A20BE44792427299D0BBBDF8B984E64E875F09645D4F121132FC12B7
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/hc/assets/conditionalFields-94035710ae792963e0b0a4085dfc0d64.js
Preview:	"use strict";(self.webpackChunkhelp_center=self.webpackChunkhelp_center\|\|[]).push([[23314],{59818:function(e,n,i){i.r(n);var r=i(97606),t=i.n(r),c=i(11882),l=i.n(c),d=i(51679),u=i.n(d),o=i(14418),a=i.n(o),f=i(19755),s=i.n(f),h=i(13469),v=i(73560),p=i(38016),_=i.n(p),q=function(e){return(0,h.toArray)(document.querySelectorAll(t()(e).call(e,(function(e){return".".concat(e)})).join(",")))},b=function(e){return(0,h.toArray)(e.querySelectorAll("input, textarea, select"))},F=function(e){return e.querySelector("label")},I=function(e){return e.length&&q(e).forEach((function(e){e.hidden=!0,b(e).forEach((function(e){e.disabled=!0}))}))},g=function(e){return e.length&&q(e).forEach((function(e){e.classList.add("optional"),e.classList.remove("required")}))},m=function(e){1!==v.Z.get("theming_api_version")&&e.length&&q(e).forEach((function(e){var n=F(e).querySelector(".optional");n&&n.remove()}))};function y(e,n){var i;(i=(0,h.difference)(n.visibleFieldIds,e.visibleFieldIds)).length&&q(i).forEach((f

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3342
Entropy (8bit):	4.081461541539629
Encrypted:	false
SSDEEP:	96:Aig5VzW50IRAPQEqZBZL1iB9aLIZQe99YRx/:AiMVq50IRAPQLBZL1iBRuuYH/
MD5:	4223ADB8DAB2D52EDCDD0254D6010866
SHA1:	E07E014422080AA2D58112C716B3BA24AB24EAC9
SHA-256:	A6926E747F18E3E8D82FFADE4E18191B5E5B784EF44CF8C7AA10FD6885DC5718
SHA-512:	165EE9D75C92291182E8C4DFDA944F4DA97836C9174DEB7DCF308576E10C68434F62C61427D90E5ACE46C0CECC1E6F38CFFF691D97E910E349D86C06BE11CB5A
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/gkyt4bl1j2fs/5a1jYA8djo9ilD72T9fVm5/2a6ff67c8a89ae2ec823abd826f566a8/ebb370be-e241-4600-949a-4f6710b1b142_instagram-icon.svg
Preview:	<svg width="20" height="20" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M5.64246 0.8617C6.66647 0.815109 6.99368 0.803711 9.60091 0.803711H9.59791C12.2059 0.803711 12.5319 0.815109 13.5559 0.8617C14.578 0.908491 15.276 1.07026 15.888 1.30762C16.52 1.55257 17.054 1.88051 17.588 2.4144C18.122 2.9479 18.45 3.4834 18.696 4.11468C18.932 4.72497 19.094 5.42243 19.142 6.44424C19.188 7.46804 19.2 7.79518 19.2 10.4019C19.2 13.0086 19.188 13.3349 19.142 14.3587C19.094 15.3801 18.932 16.0778 18.696 16.6883C18.45 17.3194 18.122 17.8549 17.588 18.3884C17.0546 18.9223 16.5198 19.251 15.8886 19.4962C15.2778 19.7335 14.5794 19.8953 13.5574 19.9421C12.5333 19.9887 12.2071 20.0001 9.59971 20.0001C6.99268 20.0001 6.66567 19.9887 5.64166 19.9421C4.61985 19.8953 3.92204 19.7335 3.31124 19.4962C2.68023 19.251 2.14462 18.9223 1.61122 18.3884C1.07741 17.8549 0.749408 17.3194 0.504006 16.6881C0.266803 16.0778 0.105001 15.3803 0.0580006 14

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (20103), with no line terminators
Category:	downloaded
Size (bytes):	20105
Entropy (8bit):	5.323668866957911
Encrypted:	false
SSDEEP:	384:T+e9FULHHVQDrxQdOTJ34O/EJLV7adnSvj4yOwKdPV3WEcTYTbdu3kr67Z2ne:T+e9FULH6rxQdOTJ34O/EV5adnSvjzOM
MD5:	FC04B20BA02FD08D6AAB6D8A43CF5DD5
SHA1:	D338E99E42AE3E31ACF28AAABB4623A53CBACEED
SHA-256:	E2E7E41C547B7FD56955D9720C466F82C0E9A6A67BB6135D0BE10A37ED16E9A1
SHA-512:	9A5187962B315CB76C12FE2A7DB1C325DE464F37C4F15CDF332BBE0DF8CB668FD8381B7288244F366F5E1BD3D927ED0CAF26ABB07007B45C57BF03B0E81EF0C0
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ice/vendorVenmo32.82f13c5642468dd4c86e.js
Preview:	"use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[32],{59446:(e,t,n)=>{n.d(t,{Z:()=>c});var o=n(87462),r=n(45987),i=n(35776),a=n(86010),l=n(41598),s=n(52543),d=i.forwardRef((function(e,t){var n=e.disableUnderline,s=e.classes,d=e.fullWidth,c=void 0!==d&&d,u=e.inputComponent,f=void 0===u?"input":u,p=e.multiline,m=void 0!==p&&p,g=e.type,v=void 0===g?"text":g,h=(0,r.Z)(e,["disableUnderline","classes","fullWidth","inputComponent","multiline","type"]);return i.createElement(l.Z,(0,o.Z)({classes:(0,o.Z)({},s,{root:(0,a.default)(s.root,!n&&s.underline),underline:null}),fullWidth:c,inputComponent:f,multiline:m,ref:t,type:v},h))}));d.muiName="Input";const c=(0,s.Z)((function(e){var t="light"===e.palette.type,n=t?"rgba(0, 0, 0, 0.42)":"rgba(255, 255, 255, 0.7)",o=t?"rgba(0, 0, 0, 0.09)":"rgba(255, 255, 255, 0.09)";return{root:{position:"relative",backgroundColor:o,borderTopLeftRadius:e.shape.borderRadius,borderTopRightRadius:e.shape.bord

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (631)
Category:	downloaded
Size (bytes):	517649
Entropy (8bit):	5.713376874006511
Encrypted:	false
SSDEEP:	6144:m1K1Z7NMxjW6eJoWvAlUjWwuMSYCVvLk8DSWd1Ps8Jz38iZc:m6eWTAujfuPY0JGgkt
MD5:	E2E79D6B927169D9E0E57E3BAECC0993
SHA1:	1299473950B2999BA0B7F39BD5E4A60EAFD1819D
SHA-256:	231336ED913A5EBD4445B85486E053CAF2B81CAB91318241375F3F7A245B6C6B
SHA-512:	D6A2ED7B19E54D1447EE9BBC684AF7101B48086945A938A5F9B6AE74ACE30B9A98CA83D3183814DD3CC40F251AB6433DC7F8B425F313EA9557B83E1C2E035DFF
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	484309
Entropy (8bit):	5.567462291215401
Encrypted:	false
SSDEEP:	3072:WA/vU+SxONOMncL6W0GATcPOYULtFQgkvPZ4llxTAWqQTkIVgrlnqyevQw3ux5aX:VevB4l3ZTDVS9SQ/BE
MD5:	3A05489F6AE866734EC65AEFCD68D171
SHA1:	98068CB97939367A566EEA1CB68A4121937D083F
SHA-256:	49156F3AB5DCC7C06DD6D122D04260E216608468D0D0C58AA051FC3A0482F3A1
SHA-512:	5282A8DC4A182C6C75AD5966D2B27FDAD7482BFB906A6956366CA197B0271338CCE21A168C35D45FE3EEA4399AF502DFF473B7959994B5F9D4C8850ADBD36781
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/messaging/venmo/v10/messaging-multitenant-sdk.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=117)}([function(e,t,n){"use strict";n.d(t,"f",(function(){return s})),n.d(t,"g",(function(){r

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (62481)
Category:	downloaded
Size (bytes):	62614
Entropy (8bit):	5.2597467350599425
Encrypted:	false
SSDEEP:	1536:DpetQ0CtSwt7zxzLNfkkl+K5tmjUqKF4EzA4Tv:sCtJ1qkJ5tmjUTzA4r
MD5:	41D3B3BC1A2E1EE9C93F4C705BEF8DD7
SHA1:	1D4FEB4895221A1BB7CA66E8C04007C3FB809B5B
SHA-256:	A1254B1BE1DC79A2411FB8323846F7B30CD32354CB0697091D58706C1D97E030
SHA-512:	FE2092F18B36E95597956EAB413460E7D51EEB9CCA5A4EF222B3ADE84EF6BD48BEF710B8DAADB9EA99D1CD5A7164C5F5EC66C94478807695C08E23BEF3F22BD9
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ice/vendor0.267c78b402a2d355f293.js
Preview:	(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[0],{56573:(t,e,n)=>{var r=n(34155);./! For license information please see dfp-paypal.js.LICENSE.txt /(()=>{var e={98:function(t,e){var n="undefined"!=typeof self?self:this,r=function(){function t(){this.fetch=!1,this.DOMException=n.DOMException}return t.prototype=n,new t}();!function(t){!function(e){var n="URLSearchParams"in t,r="Symbol"in t&&"iterator"in Symbol,o="FileReader"in t&&"Blob"in t&&function(){try{return new Blob,!0}catch(t){return!1}}(),i="FormData"in t,u="ArrayBuffer"in t;if(u)var a=["[object Int8Array]","[object Uint8Array]","[object Uint8ClampedArray]","[object Int16Array]","[object Uint16Array]","[object Int32Array]","[object Uint32Array]","[object Float32Array]","[object Float64Array]"],s=ArrayBuffer.isView\|\|function(t){return t&&a.indexOf(Object.prototype.toString.call(t))>-1};function c(t){if("string"!=typeof t&&(t=String(t)),/[^a-z0-9\-#$%&'*+.^_`\|~]/i.test(t))throw ne

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (8893)
Category:	downloaded
Size (bytes):	116563
Entropy (8bit):	5.411101662744806
Encrypted:	false
SSDEEP:	1536:9BIgWh/Y/ia6PCOj1XLPYUuQtZ9jyMYv0tpjVaQNWTHGSyrwwzPkY6nOc1:sgWhQ/TNOeQWTHbylG
MD5:	2FE797316994EC48DE82A9885C087DD6
SHA1:	BD888A1DA266492FC8D2EB5D7711005AB5854846
SHA-256:	39DDC740E90BDACF8F9B44DF6B65FD1FED9DD448E92D5072DF13ECA558AF6EE6
SHA-512:	12EECB759F355D365CF86F87084364D123EE1B1353AB53CF607C0633B847A98802921F06A6AE03E332DEF3E940A2F4E30669DFEE9C4CF4402A7F3C71223E82B2
Malicious:	false
Reputation:	low
URL:	https://help.venmo.com/hc/en-us/requests/new?ticket_form_id=624807
Preview:	<!DOCTYPE html>.<html dir="ltr" lang="en-US">.<head>. <meta charset="utf-8" />. v24448 -->... <title>Submit a request – Venmo</title>.. .. <link href="https://help.venmo.com/hc/en-us/requests/new" rel="canonical">.. <link rel="stylesheet" href="//static.zdassets.com/hc/assets/application-dabd91632e59b822715fbd3d678bb2b8.css" media="all" id="stylesheet" />. <link rel="stylesheet" type="text/css" href="//p19.zdassets.com/hc/theming_assets/802785/498597/style.css?digest=28556028217875">.. <link rel="icon" type="image/x-icon" href="//theme.zdassets.com/theme_assets/802785/fa035520f344a1ebff45491abf0a9a9f9965e585.png" />.. <script>.window.ga=window.ga\|\|function(){(ga.q=ga.q\|\|[]).push(arguments)};ga.l=+new Date;.ga('create', 'UA-15492939-3', 'auto');.ga('send', 'pageview');.</script>.<script async src='https://www.google-analytics.com/analytics.js'></script>.. <script async src="https://www.googletagmanager.com/gtag/js?id=G-F6577EVSHQ"></script>.<script>. window.dat

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	68275
Entropy (8bit):	4.987890583723378
Encrypted:	false
SSDEEP:	384:hMzgAXzgvHkPHNVoql7ZroqjvzeLq1VMsITydRsosVmpiD1V+ijyxeWche0C3uEV:BA8Y5j5SOdKLVz1NRxucDYyZ4PzisRT1
MD5:	23C6EE2E2F8D5092136B3D64F53B129B
SHA1:	46AB168628B6C3E017C23F4F39C69347DF9CD502
SHA-256:	EDA54B0C1DA33BD1926916880A1CFB826E307543A2F85EFCD39728E7EC84C6EF
SHA-512:	742E71DD149D9C886EF5F92A6122DF162D07FD66FEFDAAE75DD4BCE4275B9B66BA6B05A62D273AA7105E236C94B2F04DF309AB2A036B90BD10195AA3BC35E436
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ice/content/c20240322103542/US/en.json
Preview:	{"authButton":{"button":{"connect":"Connect with PayPal","logIn":"Log in with PayPal","signUp":"Sign up with PayPal","continue":"Continue with PayPal"}},"authflow":{"paypal":{"challengeList":{"header":"Quick security check","subheader":"We just need some additional info to confirm it's you.","sms":{"use":"We sent a security code to {otpDestination}.","info":"By continuing, you confirm that you are authorized to use this phone number and agree to receive text messages to confirm your identity in this session. Carrier fees may apply.","info2":"By continuing, you confirm that you are authorized to use this phone number and agree to receive text messages to confirm your identity in this session. Carrier fees may apply. We will receive subscriber and device details from your wireless operator to use for risk and fraud purposes."},"email":{"use":"We sent a security code to {otpDestination}. You may need to check your Junk or Spam folder.","description":"We just need to confirm it's you. To c

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38457)
Category:	downloaded
Size (bytes):	38486
Entropy (8bit):	5.345618194155939
Encrypted:	false
SSDEEP:	768:92qQHhuvmwdHXDCerEmDjiHuKuwu5WPdNTgH5NiUcvVCKv1h5muOtHOmVvxIy5g/:9DQMvmwd3iC/p5WPT4iUcvVCkhQuOtHU
MD5:	3867690CF65CF9B04E72472455F34CF9
SHA1:	6972D67129AB146E710023E97F8343DFF85AFC83
SHA-256:	A70DAA1ECB6FDD37C71466675790D54B8BB70227CD2E397DB7EBCDE9D1432FB9
SHA-512:	2A5C2744617662E27C602FCF9295D4CB19F85B27F7DB09FBB136B0E7F7F456D6A22B3A2A74E8F07306A767DB8FAA3FB30C4E1F39246FF56A4C18A8068DA85812
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/pa/js/pa_venmo.js
Preview:	/@ 2024 PayPal (v1.8.16) /.!function(){"use strict";var R="venmo";function o(){return(new Date).getTime()}function m(t){return Math.round(parseFloat(t))\|\|0}function a(t){if(!t\|\|t.constructor!==Object&&t.constructor!==Array)return t;var e,n=t.constructor();for(e in t)n[e]=a(t[e]);return n}function c(t,e,n){for(var r in void 0===n&&(n=!0),t=t\|\|{},e=e\|\|{})"undefined"!=typeof e[r]&&(n\|\|!n&&"undefined"==typeof t[r])&&(t[r]=e[r]);return t}function q(t,e){e=e\|\|{};var n,r=a(t=t\|\|{});for(n in e)try{e[n].constructor===Object&&r[n]&&r[n].constructor===Object?r[n]=q(r[n],e[n]):r[n]=e[n]}catch(i){r[n]=e[n]}return r}function u(){var i,a=window.crypto\|\|window.msCrypto;return(i=function i(){var t,e=2147483647;try{var n=new Uint32Array(1);a.getRandomValues(n),t=n[0]&e}catch(r){t=Math.round(e*Math.random())}return t.toString(16)})()+i()}window.PAYPAL=window.PAYPAL\|\|{},window.fpti=window.fpti\|\|{},window.fptiserverurl=window.fptiserverurl\|\|"https://t.paypal.com/ts";var F,e=function e(){},U=function U(){

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (487), with no line terminators
Category:	downloaded
Size (bytes):	487
Entropy (8bit):	5.011010059657267
Encrypted:	false
SSDEEP:	6:0NR+jYZVvLW6qY4YLr7ZLW6qY4YLLNNLW6qY4YLUNEQ9QVJICJZLW6qY4YLYYOJZ:s+jYZV+QLrYQLLOQLUNsJTEQLYYAZ
MD5:	7F957852C00F1EE8B6A624D47DD1C3D1
SHA1:	0674A57F083EBFC29092A38B9D1AFD10CE746A24
SHA-256:	82740F58436E87CEB41CFBDE0FB1FC04EB09252F72C7E8E96B94F2F842AF2652
SHA-512:	B770BAC02AF588E93780646EDF7DA50DFE469D2ED14A3DA466B6DD0AFEB06F694EA427A1CCC497456BF871BF1BB018B14B6F383C2DD2703AB43BDCF3A9060DFA
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/paypal-ui/web/icon-font/0-0-1/icon-font.min.css
Preview:	@font-face{font-family:PPUI-Icons;src:url(https://www.paypalobjects.com/paypal-ui/icons/font_icon/0-0-29/PPUI-Icons.woff2) format('woff2'),url(https://www.paypalobjects.com/paypal-ui/icons/font_icon/0-0-29/PPUI-Icons.woff) format('woff'),url(https://www.paypalobjects.com/paypal-ui/icons/font_icon/0-0-29/PPUI-Icons.eot?#iefix) format('embedded-opentype'),url(https://www.paypalobjects.com/paypal-ui/icons/font_icon/0-0-29/PPUI-Icons.svg) format('svg');font-style:normal;font-weight:500}

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	413
Entropy (8bit):	4.97467663759712
Encrypted:	false
SSDEEP:	12:tr3oq+YuXM65Czt74jgrBwThC64teF+tBVhx:tLoq+YuXMMc4ErsCteF+tBV/
MD5:	518021E3DD69AF49A601E3900511518C
SHA1:	BC3CE067748AE4102ED0CC8D41083C895C6FE772
SHA-256:	99FA45E18DFEEEA65E5E02F72BCE972F99E7D03898A1512DB322650BA3B7FC3C
SHA-512:	00DE548968A1757FCD3AEB49D78D24565877C95B730E4B6E88333F10A849A1C1DCDC7053E706D8A8C875C8A4B04727FED5379D1BCD0CFA1539B6BD8E92D6B2DA
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/gkyt4bl1j2fs/p9L2SKCwCmCkWSOrv7P3N/c7f77485b0aa297256d3428a97e7492b/757a8c1a-d41a-4a53-8fb3-cac665c2bd89_facebook-icon.svg
Preview:	<svg width="10" height="21" viewBox="0 0 10 21" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M6.67675 20.3834V10.5924H9.38004L9.73828 7.21837H6.67675L6.68135 5.52964C6.68135 4.64964 6.76498 4.17812 8.02916 4.17812H9.71914V0.803711H7.01548C3.76794 0.803711 2.62489 2.44048 2.62489 5.193V7.21875H0.600586V10.5928H2.62489V20.3834H6.67675Z" fill="#2F3033"/>.</svg>.

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28467)
Category:	downloaded
Size (bytes):	28641
Entropy (8bit):	5.125354299012714
Encrypted:	false
SSDEEP:	768:maJtlm3Q9lxvUCtKSSUpEGCaFdhGcROXvK:maHlm3aRUYNSqhJF
MD5:	FBDA8C2C0D1530F65284126E2E067BC7
SHA1:	847807C07238C03EB0BB88132197BE0CACE7760F
SHA-256:	41014892C8DC3B0294E22A5EB65CCD2197FA44F73DF28EFE98AD48013B9A3976
SHA-512:	D9905267C97CB0319300D7F05505733970BB30D61825D8402E73A989AAE1AC5108ACF25E78871337C2A2F09BF4F54CD4AF8905AFE965F83315E5FDB7AF7213C3
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ice/vendor9.2d8760f4fc1a0aa6631b.js
Preview:	"use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[9],{30314:(e,t,r)=>{r.d(t,{Z:()=>s});var n=r(25477);function i(e){var t={};for(var r in e){t[0===r.indexOf("--")?r:(0,n.Z)(r)]=e[r]}return e.fallbacks&&(Array.isArray(e.fallbacks)?t.fallbacks=e.fallbacks.map(i):t.fallbacks=i(e.fallbacks)),t}const s=function(){return{onProcessStyle:function(e){if(Array.isArray(e)){for(var t=0;t<e.length;t++)e[t]=i(e[t]);return e}return i(e)},onChangeValue:function(e,t,r){if(0===t.indexOf("--"))return e;var i=(0,n.Z)(t);return t===i?e:(r.prop(i,e),null)}}}},83961:(e,t,r)=>{r.d(t,{Z:()=>h});var n=r(54013),i=n.HZ&&CSS?CSS.px:"px",s=n.HZ&&CSS?CSS.ms:"ms",o=n.HZ&&CSS?CSS.percent:"%";function a(e){var t=/(-[a-z])/g,r=function(e){return e[1].toUpperCase()},n={};for(var i in e)n[i]=e[i],n[i.replace(t,r)]=e[i];return n}var u=a({"animation-delay":s,"animation-duration":s,"background-position":i,"background-position-x":i,"background-position-y":i,"backgrou

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1487
Entropy (8bit):	7.773590400166933
Encrypted:	false
SSDEEP:	24:0kS4jIkkJozWK+KOaCigBYy8kNec2HLjO5seBOqASTCx2tf1hc7rzWWCTrNNGgBS:wYItcra9NecOO5sRB0f1hcP/CTbGgBds
MD5:	2D6ABB9F59114B0D6410786930B6C5EE
SHA1:	FA035520F344A1EBFF45491ABF0A9A9F9965E585
SHA-256:	6A9D3804B638082ADFFC274B5A11C1E818D73A5CAB7E85EEA0A0D32D90ACD615
SHA-512:	D355C28EC14DCE7DA0A00A2DAF510652A486B9047A3906EA346E3E0A2D054CBD8F769EAE2532322912817EF9CD76E87E6AD3BB1E2AD6BF32CA2FFFC147963435
Malicious:	false
Reputation:	low
URL:	https://theme.zdassets.com/theme_assets/802785/fa035520f344a1ebff45491abf0a9a9f9965e585.png
Preview:	.PNG........IHDR...`...`......w8....IDATx..r.U....f.U"..b"..RX..4.........<..aF...%.y.G..H...A\|TP.PA........Z.s.nr~3.V....\|.W....u..;.a.].!A..w`..b.l1v.g...)N.(.T{....3..;zh._..GN.C'...-.{..3.>..$.\.1)........]..'q.).vY4..<.?..-i..m........DB!.......x...5.HA..va....A~.G.S.......>b..0.....o.,.O.7..L..i6.`. ..a....7..._=...1..0b..6...N.#&@d.q.....=`.]......k...........r?7..mw...............E.....B.5..........o.~-.........3.(....W.q%.}.Z<.S..e.\|...!.J.H..T..2v..9\..{:..wA..B.<u..p.`..t..q....8u...:..b...A.q...@..ua..v..qi.#@8...u@:..q.U.D.d.o\:.n.8S..o.n.H..."...k.q.z$....o.v...B.Z.....y.0..#@C:!.9I...T.`..OC5.t.h.4..2.QP'...eh.......D....#..{"z..........i..u.).........nA.....I........\|.Q4N...e)1;.-..at$.i.U..;..'D.1I.<.N...n.(LITa..D...5Z%@....B....YUU..;.*5 _.".P......P.....H...D1...............VV(...Q.@..Z....s.r.=...@........z...4['...~W..$...u.B.........P..'._.....$.G.F.A.w.f8...$...c.v>m.~.:..k@....@.d..X@...C{?i]...........g)c..

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 15 tables, 1st "FFTM", 32 names, Macintosh
Category:	downloaded
Size (bytes):	94544
Entropy (8bit):	6.170843727648421
Encrypted:	false
SSDEEP:	1536:Qq04ya0idKT5vXQza0DvsK6he7d1KtKBdKMS+SPoHRntCkY:v0OdQ5v8aWvsVheusnKMRSB
MD5:	8C519F30B3EC4D8C2DE3964CA2BB3A58
SHA1:	43065093092A48698AA577EAFB2107A333C91B30
SHA-256:	78C382FBA05D713F8767A7C7F3D901973CD8C9BA122ECEAC45B2AD36CE5740FE
SHA-512:	26493508B07BF882C104083706D875E4BE4DDB66628C0B39FC2B6F63580E6A037C8287F883E8B999113562FE659512E168036970845574C252EC881F3DD935D8
Malicious:	false
Reputation:	low
URL:	https://theme.zdassets.com/theme_assets/802785/43065093092a48698aa577eafb2107a333c91b30.ttf
Preview:	...........pFFTM.;6...q4....GDEF.m.(...@...ZGPOST.fb......n.GSUBa.2 ........OS/2)$+....x...`cmapeMK....@....gasp.......8....glyf.K.....4....head..\|T.......6hhea.6.~...4...$hmtx..D........hloca......p....maxp...Q...X... name.}..........post..<F.......c............_.<..........4.;......j......\|.....................).......W.\|.................S.....a.N.................@.........?.........X...K...X...^.\.!...................{........OT .@..+....).....'............... ...>.0.....M.............<.m.2...!.k.....,...!...2...(.......!.X.2.......6...!...!.s.,.M...?.(.V.#.Q.!.M...U.!.-.!.j.,.U.,...!.....X.2.X.2.X.2.....<.0.....t.C...0...C.T.C.I.C...0...C...C.H.....C.5.C.k.C...C..0.g.C.O.0.n.C.k...T.....<.................u.(...C...!.....X.+............F.<...!.G.!...!.....9."...<...+.......<...<...<...<.5.!.G.<.F.!...<...........;.............!.....%.^.....C.^...X.,.......<.*.(.U.".].........C...!...}.=./._. ...!.X.0...6.2.).....m.!.X.2...(...%.......<.b.....!...........!...!.c.........%........

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1260 x 498, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	61654
Entropy (8bit):	7.902670675114012
Encrypted:	false
SSDEEP:	1536:O44vJobIGNCfSsZ0QVZZJbFUwRwkDR0x8V:ONvnGIqsiSRbFukDmx8V
MD5:	556AC4D291A0C93455CC57FD17BEF380
SHA1:	D0F6F42D1A879A88EA2C1AABE52E3EDC9B18DE3F
SHA-256:	F15B3D7F20446BB2BB441023BFDB026E1E88921A322EB36807F9CCF0196C06A5
SHA-512:	53D71A52EC417B9401BA2742E17BB043632EEAFD4D24ACF3AC06D9D7658E16AC30D560388B034694F55E117A9EE88AFB67D2BD006DBF7218D8FA362BF8EDB62E
Malicious:	false
Reputation:	low
URL:	https://theme.zdassets.com/theme_assets/802785/d0f6f42d1a879a88ea2c1aabe52e3edc9b18de3f.png
Preview:	.PNG........IHDR.............X.Q.....iCCPAdobe RGB (1998)..(.c``RH,(.a.``..+).rwR...R`...... .`....\\.......0..\|...../..b .p...'..?@..\PT.....d+.....=@.HR6......:....b.C.'.j .;`5!A.@.. ./..f....a...P{A@.1%?)U..{.CKK.M.*......_PY...Q.....T..d=..#.Cs..P.CT....'...... ..H00./e``...3.e`X....?.!.f.. ....oNriQ...F&c..B\|.5.Jc........pHYs.........g..R...eiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreateDate="2020-10-21T15:57:05-05:00" xmp:ModifyDate="2020-10-23T19:16:51-05:00" xmp:MetadataDate="2020-10-2

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (576), with no line terminators
Category:	downloaded
Size (bytes):	576
Entropy (8bit):	5.231699996158193
Encrypted:	false
SSDEEP:	12:HSdJUgekM3lDMgfWERHHDuCzQXU3uKNqJ:HS9ezDt+WHjuUQE3x+
MD5:	6E179EDB7BF2C9F69CB82DB91A8A85D5
SHA1:	1AD265B6E993FB96AA8A6DB61584D24A1F81159D
SHA-256:	D8C7A5904B5841D61D48E11F4C157CFEA6169A9E988E9539FC26ECCCD589E6E3
SHA-512:	5F4E17F562A04929DAB08812CC2EF565922865BEC81CDB09CC4856D51BD780EB6AB5602E659A83B790D555104DA605D8D801A8BF2B250E35F544EE866FF372BB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISvQIJKoHDU0X-Tf8SBQ0NsDKkEgUNQ25ksRIFDRtZr5gSBQ1ABzLsEgUNlLi8DxIFDXDHEJ0SBQ0QdDiBEgUNWxKdVRIFDbDDOmISBQ2RYZVOEgUNTZIBJhIFDYvwgAwSBQ3ZZxKPEgUN2Ibd6BIFDSFZPaASBQ2LvhgVEgUNkWGVThIFDXvtllMSBQ2DBZDrEgUNPqywqxIFDZFhlU4SBQ1fpZEAEgUNKcklmxIFDRqeChESBQ2-Q4aHEgUNi7L_ExIFDZFhlU4SBQ1Iyp29EgUNvezJmxIFDRsOWgsSBQ1vfecBEgUNylwEURIFDZFhlU4SBQ0G2w-ZEgUNkWGVThIFDbSV79oSBQ2RYZVOEgUNpjLi0RIFDcHt6AkSBQ38ls8gEgUNp8d48RIFDaOP7pASBQ0yR2iXEgUNz5hO9w==?alt=proto
Preview:	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

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 27188, version 1.0
Category:	downloaded
Size (bytes):	27188
Entropy (8bit):	7.992122481658101
Encrypted:	true
SSDEEP:	768:9jcHK9wP99lB6KcaCbBkg1qprvvr+KBFRaVhX9GlS:9wHJP99lB6KEbB0vzaVhX9GlS
MD5:	ABA800312B8A74251CC733BD2459BA6D
SHA1:	BF4893E0511E5E3719C2BA0FF5436CEB6D1ECD3C
SHA-256:	A67C51D6F05A86D675AFC8DF57659F42E3BAC9D1E28A08077F2C3280165FCAE6
SHA-512:	EC40170449EA4B9E158823B4B74AAE26854D9C35D17E5A6342D53BF1B126B4DE9185A4B49798A3D4D15C678E86F20B4B647D0F1C82DD975746253D652B969030
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/paypal-ui/icons/font_icon/0-0-29/PPUI-Icons.woff2
Preview:	wOF2......j4.......0..i..........................`.d.....0..i.6.$..H..f.. ... ...3.6...#f.ud.V.V...%.CT..n.Hd.P..h.@..d.,.L...k..4..kO.ap..M./O..p..>...<...w..$..0.X.#!L.H6+. ..2........8.X.......jm..Z.l....e....C..._..L.Kv...+3wAeRA..L...;..I.A.d.T... /.4.f.q....\]..?..._.e.....H.Z...b..m.n0.E:.O....G.y.....g...:..J......D.r.a.p.......u...v.c.qk....Vi%C.8w.;@..x.Fu.......}..T...R.n.........v]..`5...0......P.7H'.G.....r%o..TU[..o.0s.....(`.. ...HiA..I...aX;.....i.R6.Q...?M[?......6.j..-.Qn....M.E..~....%hi..e...N....B%..e...)x.2<...}..1..K.^..n.C+%.H.c. J...D....V.K:.t.m..+.J;.W.8..m...6....F..A.A.....!..j..._...k`.....X'3p..............0...F.....>.S......?.q.N.....,KSHd..-W...Z?........Nx.E.rL.{.>........"Yz.:.A\|............"..1.?.0t.1..#w.....s x.....4.... !..[.......=6.b.&.G.r.4.z.......y.....@.8W .....1..).#..e.uE.t.X.@7..-.'..%.\k.)&.s.k.7.o.&8...=#.=.Fa..G...&.....o....:..2. ....G...z4.\|.&5.....L.4...[/.y....h..a.........d.;$.r.JB...Gn

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	3.122714743434665
Encrypted:	false
SSDEEP:	3:CUXPQE/xlIle:1QEn
MD5:	ACCBA0B69F352B4C9440F05891B015C5
SHA1:	9D01CC5DC8E042C0D4AD6CFB8B3AC38E84A5EF9F
SHA-256:	47043E4823A6C21A8881DE789B4185355330B5804629D23F6B43DD93F5265292
SHA-512:	D3C4A5427BF645CC226106B0E8C28A76B0B91F50FA6D77E962A3B59B85BE2A0CFDB94EC0F40742F10C18025573D8FBFADECDDF60F4652BAE671F6031C02A7CB5
Malicious:	false
Reputation:	low
URL:	https://lvs.stats.paypal.com/v1/counter2.cgi?r=cD0yN2VlZmY2MDg0N2E0NWM3YmU1MzhkMTE0MWYzM2U5YiZpPTEwMi4xMjkuMTUyLjIyMCZ0PTE3MTQxMzQxOTAuMzcxJmE9MjEmcz1JQ0VfTE9HSU5fQVBQ8GhQ_E8vIveUuXZlN3mbElNj91k
Preview:	GIF89a.............!.......,........@..D.;

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	250447
Entropy (8bit):	5.572308941511574
Encrypted:	false
SSDEEP:	3072:wkwQaf5qZ3fhO+zJkch8lG1LceF2/ea8LR9Wk9ARFaQjSTnXDL9btIM44Z/Q5cPA:XwQX5NzJQYLceF+hYTnXP9RIMR65YDS7
MD5:	858153EE07CF0CD8827E2B4A8D17FB22
SHA1:	DD702A0342AACEF3B99F760C3BF4BC05F755735B
SHA-256:	EA5F4BFEDA8BC89EAA07A8B4685B0ED05EE80F9370196FDD6D0818724DEEEE1F
SHA-512:	DB77D874C391BB44B601F337BACF2189B0A174084BCBB0595513E9016B2748F1E89653A53CF1D7DC65BE22384826410C3CB8C4A179A089CA9DED5DB85954D389
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-F6577EVSHQ
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":8,"vtp_value":true,"tag_id":14},{"function":"__ogt_1p_data_v2","priority":8,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":16},{"function":"__ccd_ga_first","priority":7,"vtp_instanceDestinationId":"G-F6577EVSHQ","tag_id":24},{"function":"__set_product_settings","priority":6,"vtp_instanceDestinationId":"G-F6577EVSHQ","vtp_foreignTldMacroResult":["macro",5],"vt

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (461)
Category:	downloaded
Size (bytes):	4618992
Entropy (8bit):	5.319670039207031
Encrypted:	false
SSDEEP:	49152:ZKG5J/wdSm7lAC3uBWyd1iH0O26datwFxz1PdnOh/rRtEUS:qHTOh/w
MD5:	CA89A6EBA361A01B47C6FD3283A76A03
SHA1:	6EFD22AB0D4BD4C801A062A60135C5C524B34EF0
SHA-256:	EA6951F25B736EFF00E9D62AB99414EA0956F4350389337EC2DFE8C0284D72EA
SHA-512:	E9B8A3CC4EB05CB05BE149C379C028612849DB7A802B70FF5BD8E77FBFD382065C7BAD4BDF537D19FD4F62C33A31597732E488097FD90CC5764A9F592E564032
Malicious:	false
Reputation:	low
URL:	https://account.venmo.com/_next/static/chunks/pages/_app-0a560d71483f9f85.js
Preview:	(self["webpackChunk_N_E"] = self["webpackChunk_N_E"] \|\| []).push([[2888],{../*/ 83974:.// (function(__unused_webpack_module, __webpack_exports__, __webpack_require__) {.."use strict";./ harmony export / __webpack_require__.d(__webpack_exports__, {./ harmony export / "QS": function() { return / binding / makeVar; },./ harmony export / "_v": function() { return / binding / recallCache; },./ harmony export / "ab": function() { return / binding / cacheSlot; },./ harmony export / "li": function() { return / binding / forgetCache; }./ harmony export / });./ harmony import / var optimism__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(95039);./ harmony import / var _wry_context__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(38751);...var cacheSlot = new _wry_context__WEBPACK_IMPORTED_MODULE_1__/ .Slot */ .g7();.var cacheInfoMap = new WeakMap();.function getCacheInfo(cache) {. var info = cacheInfoMap.get(cache);. if (!info) {. cacheInfo

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36413), with no line terminators
Category:	downloaded
Size (bytes):	36413
Entropy (8bit):	4.990076726898436
Encrypted:	false
SSDEEP:	768:biAMSbDVtf+CUYRlHRAwBiXez6axKBpXQcps8fsxvEZh+elvWoUvOayIROlR72oQ:f0aAlR7cd
MD5:	C49C6FA73F057CE06A4316A972F1C2D8
SHA1:	B6FA8F33CD86D1495ADF8EA73898A94BD09B193A
SHA-256:	8B340B5D80A2189043370D26C3FD88767FE0E237BA13E60CDB3BAC0C22E87474
SHA-512:	8E567CDBDF87306315E0D655CC41DEB76412BBB4B611E6046D5F4F895936AC0A3EF1E7BC44DAF560C0B5F69D8D88E121C26D963D3422B997FFEA836E58F253B1
Malicious:	false
Reputation:	low
URL:	https://account.venmo.com/_next/static/KayRtQ_1ym5_-NM6DR61r/_buildManifest.js
Preview:	self.__BUILD_MANIFEST = (function(a,b,c,d,e,f,g,h,i,j){return {__rewrites:{beforeFiles:[{source:"\u002F:nextInternalLocale(en)\u002Fsignup",destination:"\u002F:nextInternalLocale\u002Fsignup\u002Flogged-in-sign-up",has:[{type:"cookie",key:"api_access_token"}]},{source:e,destination:c}],afterFiles:[{source:"\u002F:nextInternalLocale(en)\u002Fincentives",destination:"\u002F:nextInternalLocale"},{source:"\u002F:nextInternalLocale(en)\u002Faccount\u002Fpassword-reset",destination:"\u002F:nextInternalLocale\u002Fpassword-reset"},{source:"\u002F:nextInternalLocale(en)\u002Faccount\u002Fpassword-new",destination:"\u002F:nextInternalLocale\u002Fpassword-new"},{source:"\u002F:nextInternalLocale(en)\u002Forganization-accounts\u002Fsign-in",destination:d},{source:"\u002F:nextInternalLocale(en)\u002Fgroups\u002Fsign-in",destination:d},{source:"\u002F:nextInternalLocale(en)\u002Fwebviews\u002Fsettings\u002Ftaxdocuments",destination:"\u002F:nextInternalLocale\u002Fsettings\u002Ftax-document"},{sourc

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1487
Entropy (8bit):	7.773590400166933
Encrypted:	false
SSDEEP:	24:0kS4jIkkJozWK+KOaCigBYy8kNec2HLjO5seBOqASTCx2tf1hc7rzWWCTrNNGgBS:wYItcra9NecOO5sRB0f1hcP/CTbGgBds
MD5:	2D6ABB9F59114B0D6410786930B6C5EE
SHA1:	FA035520F344A1EBFF45491ABF0A9A9F9965E585
SHA-256:	6A9D3804B638082ADFFC274B5A11C1E818D73A5CAB7E85EEA0A0D32D90ACD615
SHA-512:	D355C28EC14DCE7DA0A00A2DAF510652A486B9047A3906EA346E3E0A2D054CBD8F769EAE2532322912817EF9CD76E87E6AD3BB1E2AD6BF32CA2FFFC147963435
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......w8....IDATx..r.U....f.U"..b"..RX..4.........<..aF...%.y.G..H...A\|TP.PA........Z.s.nr~3.V....\|.W....u..;.a.].!A..w`..b.l1v.g...)N.(.T{....3..;zh._..GN.C'...-.{..3.>..$.\.1)........]..'q.).vY4..<.?..-i..m........DB!.......x...5.HA..va....A~.G.S.......>b..0.....o.,.O.7..L..i6.`. ..a....7..._=...1..0b..6...N.#&@d.q.....=`.]......k...........r?7..mw...............E.....B.5..........o.~-.........3.(....W.q%.}.Z<.S..e.\|...!.J.H..T..2v..9\..{:..wA..B.<u..p.`..t..q....8u...:..b...A.q...@..ua..v..qi.#@8...u@:..q.U.D.d.o\:.n.8S..o.n.H..."...k.q.z$....o.v...B.Z.....y.0..#@C:!.9I...T.`..OC5.t.h.4..2.QP'...eh.......D....#..{"z..........i..u.).........nA.....I........\|.Q4N...e)1;.-..at$.i.U..;..'D.1I.<.N...n.(LITa..D...5Z%@....B....YUU..;.*5 _.".P......P.....H...D1...............VV(...Q.@..Z....s.r.=...@........z...4['...~W..$...u.B.........P..'._.....$.G.F.A.w.f8...$...c.v>m.~.:..k@....@.d..X@...C{?i]...........g)c..

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1260 x 498, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	61654
Entropy (8bit):	7.902670675114012
Encrypted:	false
SSDEEP:	1536:O44vJobIGNCfSsZ0QVZZJbFUwRwkDR0x8V:ONvnGIqsiSRbFukDmx8V
MD5:	556AC4D291A0C93455CC57FD17BEF380
SHA1:	D0F6F42D1A879A88EA2C1AABE52E3EDC9B18DE3F
SHA-256:	F15B3D7F20446BB2BB441023BFDB026E1E88921A322EB36807F9CCF0196C06A5
SHA-512:	53D71A52EC417B9401BA2742E17BB043632EEAFD4D24ACF3AC06D9D7658E16AC30D560388B034694F55E117A9EE88AFB67D2BD006DBF7218D8FA362BF8EDB62E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............X.Q.....iCCPAdobe RGB (1998)..(.c``RH,(.a.``..+).rwR...R`...... .`....\\.......0..\|...../..b .p...'..?@..\PT.....d+.....=@.HR6......:....b.C.'.j .;`5!A.@.. ./..f....a...P{A@.1%?)U..{.CKK.M.*......_PY...Q.....T..d=..#.Cs..P.CT....'...... ..H00./e``...3.e`X....?.!.f.. ....oNriQ...F&c..B\|.5.Jc........pHYs.........g..R...eiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreateDate="2020-10-21T15:57:05-05:00" xmp:ModifyDate="2020-10-23T19:16:51-05:00" xmp:MetadataDate="2020-10-2

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	68275
Entropy (8bit):	4.987890583723378
Encrypted:	false
SSDEEP:	384:hMzgAXzgvHkPHNVoql7ZroqjvzeLq1VMsITydRsosVmpiD1V+ijyxeWche0C3uEV:BA8Y5j5SOdKLVz1NRxucDYyZ4PzisRT1
MD5:	23C6EE2E2F8D5092136B3D64F53B129B
SHA1:	46AB168628B6C3E017C23F4F39C69347DF9CD502
SHA-256:	EDA54B0C1DA33BD1926916880A1CFB826E307543A2F85EFCD39728E7EC84C6EF
SHA-512:	742E71DD149D9C886EF5F92A6122DF162D07FD66FEFDAAE75DD4BCE4275B9B66BA6B05A62D273AA7105E236C94B2F04DF309AB2A036B90BD10195AA3BC35E436
Malicious:	false
Reputation:	low
Preview:	{"authButton":{"button":{"connect":"Connect with PayPal","logIn":"Log in with PayPal","signUp":"Sign up with PayPal","continue":"Continue with PayPal"}},"authflow":{"paypal":{"challengeList":{"header":"Quick security check","subheader":"We just need some additional info to confirm it's you.","sms":{"use":"We sent a security code to {otpDestination}.","info":"By continuing, you confirm that you are authorized to use this phone number and agree to receive text messages to confirm your identity in this session. Carrier fees may apply.","info2":"By continuing, you confirm that you are authorized to use this phone number and agree to receive text messages to confirm your identity in this session. Carrier fees may apply. We will receive subscriber and device details from your wireless operator to use for risk and fraud purposes."},"email":{"use":"We sent a security code to {otpDestination}. You may need to check your Junk or Spam folder.","description":"We just need to confirm it's you. To c

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5190
Entropy (8bit):	3.945811655305623
Encrypted:	false
SSDEEP:	96:+Xwu51gConPPmGVdljKf1y9CED4155cnQTSIYfQJKdd:+Xwu5CmGXlWf80Ec55cnESIYfzdd
MD5:	CFCC87C27175BBC1DF90EAD8169E3A2E
SHA1:	35ADB4D8DECB69EE5FF6C439F0C3D600034E9618
SHA-256:	C6C2B97D2C79C372DC75854ACE40979E531EDDEA89B8D137C1B513E4FBE85398
SHA-512:	F0204439EE2733613B70FFB352C78689EB2A4695A3A70BB9D4C488DE504D0DCF2001336E39CBEFB4E8C3AACF7A82B5A87E0A00E317167F53B6B3943FD988E002
Malicious:	false
Reputation:	low
Preview:	<svg width="159" height="45" viewBox="0 0 159 45" fill="none" xmlns="http://www.w3.org/2000/svg">.<rect x="0.75" y="1.72314" width="157.5" height="42.4911" rx="21.2456" fill="white" stroke="black" stroke-width="1.5"/>.<path d="M49.6437 26.6396C49.3385 27.3421 48.9772 27.9887 48.5586 28.5831C47.9881 29.3935 47.5209 29.9545 47.1609 30.266C46.6027 30.7773 46.0048 31.0392 45.3644 31.0541C44.9047 31.0541 44.3504 30.9238 43.705 30.6594C43.0576 30.3963 42.4626 30.266 41.9186 30.266C41.348 30.266 40.7361 30.3963 40.0815 30.6594C39.426 30.9238 38.8979 31.0615 38.4942 31.0752C37.8801 31.1012 37.2681 30.8319 36.6571 30.266C36.2672 29.9272 35.7795 29.3464 35.1952 28.5236C34.5683 27.6449 34.0529 26.626 33.6492 25.4644C33.2168 24.2097 33 22.9947 33 21.8184C33 20.471 33.2923 19.3088 33.8777 18.335C34.3377 17.5528 34.9498 16.9357 35.7158 16.4827C36.4818 16.0297 37.3095 15.7989 38.2009 15.7841C38.6886 15.7841 39.3282 15.9344 40.123 16.2298C40.9156 16.5262 41.4245 16.6764 41.6476 16.6764C41.8144 16.6764

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	7277
Entropy (8bit):	5.514051270016685
Encrypted:	false
SSDEEP:	192:rjKfQK9KyK03XK/KsqKIrKW7KSKBKC3sKUKMNKfK3nKrKEKT3AKrKjpKmaH:CftI/y6ySXW+f8QZRRS3KuBjduoma
MD5:	8B7C91FB3D9154C479B08292A622826F
SHA1:	3ABC7BEC4DD69D826D215223E7368958603F9A77
SHA-256:	49F068CD06A55EACA7152C72472CFCDBBDBF11BC3FC2AEB6BBD38C0B44F0C5AB
SHA-512:	7C4A4988591C8592CC2DC18EF998A65F3DEFC3BAE5013D0781F19B302ECEB4ED9A4A481D403BD1167B7775107ACC0F0BE5AF2666072795CD163533DD5A48FBC7
Malicious:	false
Reputation:	low
URL:	https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1&k=6LdCCOUUAAAAAHTE-Snr6hi4HJGtJk_d1_ce-gWB&co=aHR0cHM6Ly9pZC52ZW5tby5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=2kziszurh4cb
Preview:	<!DOCTYPE HTML><html dir="ltr"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.<meta http-equiv="X-UA-Compatible" content="IE=edge">.<style type="text/css">./* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7mxKOzY.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. f

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3342
Entropy (8bit):	4.081461541539629
Encrypted:	false
SSDEEP:	96:Aig5VzW50IRAPQEqZBZL1iB9aLIZQe99YRx/:AiMVq50IRAPQLBZL1iBRuuYH/
MD5:	4223ADB8DAB2D52EDCDD0254D6010866
SHA1:	E07E014422080AA2D58112C716B3BA24AB24EAC9
SHA-256:	A6926E747F18E3E8D82FFADE4E18191B5E5B784EF44CF8C7AA10FD6885DC5718
SHA-512:	165EE9D75C92291182E8C4DFDA944F4DA97836C9174DEB7DCF308576E10C68434F62C61427D90E5ACE46C0CECC1E6F38CFFF691D97E910E349D86C06BE11CB5A
Malicious:	false
Reputation:	low
Preview:	<svg width="20" height="20" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M5.64246 0.8617C6.66647 0.815109 6.99368 0.803711 9.60091 0.803711H9.59791C12.2059 0.803711 12.5319 0.815109 13.5559 0.8617C14.578 0.908491 15.276 1.07026 15.888 1.30762C16.52 1.55257 17.054 1.88051 17.588 2.4144C18.122 2.9479 18.45 3.4834 18.696 4.11468C18.932 4.72497 19.094 5.42243 19.142 6.44424C19.188 7.46804 19.2 7.79518 19.2 10.4019C19.2 13.0086 19.188 13.3349 19.142 14.3587C19.094 15.3801 18.932 16.0778 18.696 16.6883C18.45 17.3194 18.122 17.8549 17.588 18.3884C17.0546 18.9223 16.5198 19.251 15.8886 19.4962C15.2778 19.7335 14.5794 19.8953 13.5574 19.9421C12.5333 19.9887 12.2071 20.0001 9.59971 20.0001C6.99268 20.0001 6.66567 19.9887 5.64166 19.9421C4.61985 19.8953 3.92204 19.7335 3.31124 19.4962C2.68023 19.251 2.14462 18.9223 1.61122 18.3884C1.07741 17.8549 0.749408 17.3194 0.504006 16.6881C0.266803 16.0778 0.105001 15.3803 0.0580006 14

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5215
Entropy (8bit):	4.168315244132884
Encrypted:	false
SSDEEP:	96:+oftwovGsCt95ccczPSjnAZpZKLFMzftNOcJcsOT:+ACtXclPS7vWz7xCsOT
MD5:	446E18CA3767A3B9C9BF347D004F003C
SHA1:	41A09CD28607A60280D9A9E00FD1C8842C4108F7
SHA-256:	CBFB2A7D4AD8F71FAA905CC2DD71F7BC2913CC5FD50D10C0E20E53DE828FCF82
SHA-512:	85F4F263AF1DC78E7655CEF3173D2834274B494DF1F4E680ABFBDC76E59B556F83017847BE48B28920BC2604BA22B233A743B4C56C3870AF651A92007641C91A
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/gkyt4bl1j2fs/4elL6z7sEJbFubKUU7uwv7/ee2688b999e8da3cff3009d5f56f5d73/e01b9c58-a73a-4d18-ae2b-2d81cc537c7a_google-play-icon.svg
Preview:	<svg width="159" height="45" viewBox="0 0 159 45" fill="none" xmlns="http://www.w3.org/2000/svg">.<rect x="0.75" y="1.70923" width="157.5" height="42.4911" rx="21.2456" fill="white" stroke="black" stroke-width="1.5"/>.<path d="M64.614 16.9463C61.674 16.9043 59.616 19.2143 59.658 22.0703C59.616 24.9683 61.688 27.2083 64.46 27.1663C65.902 27.1663 66.994 26.5923 67.666 25.6403V26.9563H69.038V22.5743H64.824V23.9883H67.484C67.022 25.0383 65.958 25.6823 64.726 25.6823C62.626 25.6823 61.198 24.1563 61.198 21.9723C61.198 20.0123 62.556 18.4303 64.6 18.4303C66.098 18.4303 67.134 19.3123 67.372 20.6703L68.856 20.1943C68.492 18.2623 66.84 16.9463 64.614 16.9463ZM73.4828 19.9703C71.4248 19.9703 69.9548 21.5523 69.9548 23.5823C69.9548 25.6123 71.4108 27.1663 73.4828 27.1663C75.5688 27.1663 76.9968 25.6123 76.9968 23.5823C76.9968 21.5523 75.5548 19.9703 73.4828 19.9703ZM73.4828 25.6823C72.9088 25.6823 72.4328 25.4863 72.0548 25.0943C71.6768 24.6883 71.4948 24.1843 71.4948 23.5823C71.4948 22.9663 71.

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4559)
Category:	downloaded
Size (bytes):	42933
Entropy (8bit):	5.231470427715636
Encrypted:	false
SSDEEP:	768:2+O9iEsJiuogCobyjgwv9XPUKCLpL5K3fwvnvCvQp5dYku:299ts4uogCobyjgwv9XPUKFfwvnvCvQu
MD5:	F436A7577063FA3DE7C4DA91B1098377
SHA1:	3F0F986B1218B6BF06E0B0C5D35BE5EBBEA42FFF
SHA-256:	7B3DC2FE8CE9887A750BCEAB72DDB8EAA2DB8EF82B25DF6C72B0628206E15FD1
SHA-512:	DE38F34A96CB4DB9A368F8A01DB2B2576E8B34E6E03FA08F9F302C0E9461EC8FA219D380364432CB444A578B5215A8340966A6A3F09BFD74AD7B19C444A5180D
Malicious:	false
Reputation:	low
URL:	https://account.venmo.com/_next/static/css/ce80a052d4932c39.css
Preview:	@font-face{font-family:"Scto Grotesk A";font-style:normal;font-weight:400;src:local("Scto Grotesk A"),url("/static/fonts/Scto-Grotesk-A-Regular.woff") format("woff")}@font-face{font-family:"Scto Grotesk A Italic";font-style:italic;font-weight:400;src:local("Scto Grotesk A Italic"),url("/static/fonts/Scto-Grotesk-A-Regular-Italic.woff") format("woff")}@font-face{font-family:"Scto Grotesk A Medium";font-style:normal;font-weight:500;src:local("Scto Grotesk A Medium"),url("/static/fonts/Scto-Grotesk-A-Medium.woff") format("woff")}@font-face{font-family:"Scto Grotesk A Bold";font-style:normal;font-weight:700;src:local("Scto Grotesk A Bold"),url("/static/fonts/Scto-Grotesk-A-Bold.woff") format("woff")}@font-face{font-family:"Athletics Regular";font-style:normal;font-weight:400;src:local("Athletics"),url("/static/fonts/Athletics-Regular.woff") format("woff")}@font-face{font-family:"Athletics Medium";font-style:normal;font-weight:500;src:local("Athletics"),url("/static/fonts/Athletics-Medium.w

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47731), with no line terminators
Category:	downloaded
Size (bytes):	47731
Entropy (8bit):	5.348665290899702
Encrypted:	false
SSDEEP:	768:4OIC8TZf8WWq5PKRMYy1yKmdbxh6/PaeHLX7uzCpBQQt4tR/YvcoQ35uAsoK/hiq:4HFhWcCRMp2b8SeHP+CMLtKUoSuALsMq
MD5:	DB2AD5C199391E0404D78E293CFEBB8D
SHA1:	21B7BC44C6A01F8F1FF81F8FA7FB3642362FCE46
SHA-256:	6C381C41ACAAFA8CF502237534E9B5286CEC0EA902B77EC17B8304031A63B7E0
SHA-512:	C072A858977330DDA19C0AD05AD55EC59D7A59B9F6387BB36DA055E932D39B1AA46CFA7E6E3EB1B014A46AB712656315E7E02380E1C247ED78C61FAF757539CE
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ice/vendorVenmo44.443f4f43a85bbfae67ed.js
Preview:	"use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[44],{82598:(e,t,n)=>{n.d(t,{Z:()=>v});var o=n(87462),r=n(45987),a=n(35776),i=n(45697),l=n.n(i),s=n(97148),d=n(8920);function c(e){var t=e.children,n=e.only,o=e.width,r=(0,d.Z)(),a=!0;if(n)if(Array.isArray(n))for(var i=0;i<n.length;i+=1){if(o===n[i]){a=!1;break}}else n&&o===n&&(a=!1);if(a)for(var l=0;l<r.breakpoints.keys.length;l+=1){var c=r.breakpoints.keys[l],u=e["".concat(c,"Up")],p=e["".concat(c,"Down")];if(u&&(0,s.yJ)(c,o)\|\|p&&(0,s.Vf)(c,o)){a=!1;break}}return a?t:null}c.propTypes={children:l().node,className:l().string,implementation:l().oneOf(["js","css"]),initialWidth:l().oneOf(["xs","sm","md","lg","xl"]),lgDown:l().bool,lgUp:l().bool,mdDown:l().bool,mdUp:l().bool,only:l().oneOfType([l().oneOf(["xs","sm","md","lg","xl"]),l().arrayOf(l().oneOf(["xs","sm","md","lg","xl"]))]),smDown:l().bool,smUp:l().bool,width:l().string.isRequired,xlDown:l().bool,xlUp:l().bool,xsDown:l().

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	3.122714743434665
Encrypted:	false
SSDEEP:	3:CUXPQE/xlIle:1QEn
MD5:	ACCBA0B69F352B4C9440F05891B015C5
SHA1:	9D01CC5DC8E042C0D4AD6CFB8B3AC38E84A5EF9F
SHA-256:	47043E4823A6C21A8881DE789B4185355330B5804629D23F6B43DD93F5265292
SHA-512:	D3C4A5427BF645CC226106B0E8C28A76B0B91F50FA6D77E962A3B59B85BE2A0CFDB94EC0F40742F10C18025573D8FBFADECDDF60F4652BAE671F6031C02A7CB5
Malicious:	false
Reputation:	low
URL:	https://lvs.stats.paypal.com/v2/counter2.cgi?p=6a95feed-b818-45c4-8cb7-6b939748957f&s=venmo_web_webmo_login
Preview:	GIF89a.............!.......,........@..D.;

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 18360, version 1.6553
Category:	downloaded
Size (bytes):	18360
Entropy (8bit):	7.9907545598911085
Encrypted:	true
SSDEEP:	384:oFpJmqKXxT5q1My1IkDHLT2dEhIGzktIdWr1nd0zxovSSJt:cmqkw1MYICf4pGzktyWrRAo/
MD5:	687B74C9A69AF269C66B34BA18D6ABD0
SHA1:	2BC090ADC07A731F3C13DA7969CA0A4409CEE081
SHA-256:	0D4D4B0EE4BDBBBFDF2FA8CC4C0BA0332A3798C2629CB806D249712F6A7063E3
SHA-512:	76DBEEBE46152856A68F6FBED9CE59619B07A68B3F2FDD20A9E697F659CA62147566689CCCFEB881B4AF4B234DDAA94EDA2774851550066AE36BE86CDB80B10A
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/paypal-ui/fonts/PayPalSansBig-Light.woff2
Preview:	wOF2OTTO..G.......}...Gf...........................I.R..J..6.`..4.6.$......... ..\|5lS.Y...@sm...vp...cf3.K..&5....$'2.{....".$.D.J....=.9..DN..Z=Qd.(...../4.2.l...l.p.l....].\|..Sl.H8).d,.!lg`..zP.E..'].J..J.O.D..%2....D[.CE.PO\a.}....../..HP.....3..&.......?>\|PP...o/:.Y.........F.H.m..V_.hP00o$...^.#:....?.._.y..'f.YuZ.X.,...=m..~...J'i.......X.A.......9.hq.M.Oa..'.......i.5...'..SJ..#...S..w.a...!..d.nfw.t.]..C!1..qHE..UK...\|....\|..HlR....V...\|.f......>..."".X...t &N.#...D~................\Q.... ..b.iSL....ELkf.7..-..gK.B.L...T. O..JP0.@.._..Z]xYy....".H!.2P...D..../W+.Nz.._.{.i...TC'.J...i\|..(..>.>P.-.]...'.".&Q.,]...^.7 =..k8.a#.....4.....(...WU..........t.E.q...\|....2.E.Ad..P....a.e..-#@..L...BJ.R.6e...SJ.k.W.._a.jm.....f7{....^>ASN9.d.9....`....v....UH[x..-.......;.%....d..L60}..H..T"a..P.-...].].+.T.5{...!....DR.6Z)q........k..dB...zZ;..x.._...[..'....x"v..#p........C^SeS...&..}.?...T.y.Ox..O\|./...p.....CuwPz.t...''....S..@.-

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6668), with no line terminators
Category:	downloaded
Size (bytes):	6668
Entropy (8bit):	5.2494101687484855
Encrypted:	false
SSDEEP:	96:bRlARAbeNla7dAYvmmtVH7loBg0UI9JcH8fuywn4wP5HvUK9ERq:b/aMeNE5PmmtVH7aufI9JcH8faZUO
MD5:	DF802C4C5770B6202C2F3BE6022EA966
SHA1:	2B70D037B54ABE60308410690B4262D30B9EE2BB
SHA-256:	367C1C3E74BA79DE2CD1D54D5FF86F663751F298697FCAABF1BDF7A0EDD9E8A6
SHA-512:	969E95E617DC4462431E3908014067DB2FFC91AD1AE90015819AF8969EF39571B54D715C6A03C1E0E2A4CF3C2F0121E20A305A30A14F0691968DF8547137D15C
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ice/vendorVenmo41.09e9e80f30091690ed55.js
Preview:	"use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[41],{75445:(e,t,n)=>{n.d(t,{W:()=>p,Z:()=>f});var i=n(87462),a=n(45987),o=n(35776),l=n(99386),r=n(52543),d=n(89345),s=n(22601),c=n(25201),u=n(38799),p=function(e){return{root:{},select:{"-moz-appearance":"none","-webkit-appearance":"none",userSelect:"none",borderRadius:0,minWidth:16,cursor:"pointer","&:focus":{backgroundColor:"light"===e.palette.type?"rgba(0, 0, 0, 0.05)":"rgba(255, 255, 255, 0.05)",borderRadius:0},"&::-ms-expand":{display:"none"},"&$disabled":{cursor:"default"},"&[multiple]":{height:"auto"},"&:not([multiple]) option, &:not([multiple]) optgroup":{backgroundColor:e.palette.background.paper},"&&":{paddingRight:24}},filled:{"&&":{paddingRight:32}},outlined:{borderRadius:e.shape.borderRadius,"&&":{paddingRight:32}},selectMenu:{height:"auto",minHeight:"1.1876em",textOverflow:"ellipsis",whiteSpace:"nowrap",overflow:"hidden"},disabled:{},icon:{position:"absolute",righ

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 48780, version 1.0
Category:	downloaded
Size (bytes):	48780
Entropy (8bit):	7.992540336707604
Encrypted:	true
SSDEEP:	768:z7lNL5ZTMp3uibX0WcZTK4aBtWnbLdjgaoYZoiUYZbKm6beFqMJcS73iWOXk2UL:zVZQbbEWcZNaBALhgaeYZelbuqVS7OX4
MD5:	C3F2DE87E4452B45FCF69DAD5203F833
SHA1:	64505442ED5292A298449891891AC011B454D706
SHA-256:	307E1A60C86A657CB61120E74FA9A5DA5B6E926F7BE0045EC0DA9474A192A6F7
SHA-512:	2369576994D02417C634587722984D45E410755921E4AF30DF2C6EA0C3AA28A5C5D8C48099093DCB89A50C8390E3A194E3F16C1FDB1FE55B257908E9CA7B72C6
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/messaging/venmo-assets/Scto-Grotesk-A-Medium.woff
Preview:	wOFFOTTO..........lD...........t....... ...lCFF ...D..dT.......BGPOS..u...G........GSUB..q....~....`.KROS/2...l...W...`.7a.cmap...8..........Dhead.......6...6.I'.hhea...@...!...$....hmtx..m..........yk<maxp...d.........3P.name.......t.....Y..post...0....... .g.'..........^._.<..........V...........8..................x.c`d``V.o.........,...".............P..3..x.c`f.a..........................X..A`......J5...;...)..L...-..0.c.S``...c\|..A....^....x..Mk.A......6...)e@. d7.4z...B...'/Cv.........=z.#x._.._D..'.......M.F.3..o...?/;.p.e.P.>.S....J^..>;.q./..<.7.......x...7.z..oa.{.x..;8.^9.p.O....J?....^.M....;..l..5.\|.......O...u<.s....&....oQ.w.....I.;.n.kx.....0x............a.....G....%....=.3......".).(v...y..L.3.y,R....w.\f\|jFJ.\.O.e6dJ.T.r ..H..2..MR...^$....q.\.+b9M.a..h.:.....z..di..:/.Y.j...#c&.Q4...........\|..0B....!1....7....&N.z.].;....K...!....b.}nO.vA.5.c.Y.1.f8#.".b......qz.y9i.R..P........#.h....(..QR..f..Ni..6..9.$Y.E5N<_...,..\|......i.WL..I.2....

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2358)
Category:	downloaded
Size (bytes):	90989
Entropy (8bit):	5.07036604119384
Encrypted:	false
SSDEEP:	1536:a69WZWJJ/YwKI97QZ1lo9c2AV+EKeAUBEIpoavG8yxcXAd8wAUYlyAJ8S9F7wPcQ:a9WH/jtTeA+EkzZrJ1c6nWZTtktZwt8+
MD5:	18E11E8278610B2B824C233896F28DFD
SHA1:	A70399819040312A8B5F3DACA4D2A41DB88F8CE5
SHA-256:	082EA8638A54284038FEE9D450FCB75193AA15824B288B8F227D635DB76CF1EE
SHA-512:	188A58448EBB5A0DB80E03DC5F1C5FBE7FFC145D4593691797351BA6741ABE26461F9DF9124E12A7F7C518AF4DEB01D849803936E69D8AA74B17BC01F1F746DC
Malicious:	false
Reputation:	low
URL:	https://p19.zdassets.com/hc/theming_assets/802785/498597/style.css
Preview:	@charset "UTF-8";../* COLORS /.:root {. --error: var(--zd-color-red-600);.}../** Normalize.css **/./! normalize.css v8.0.1 \| MIT License \| github.com/necolas/normalize.css */.html {. line-height: 1.15;. -webkit-text-size-adjust: auto;.}..body {. margin: 0;.}..main {. display: block;.}..h1 {. font-size: 2em;. margin: 0.67em 0;.}...container h1 {. margin: 0.67em 0;.}..hr {. box-sizing: content-box;. height: 0;. overflow: visible;.}..pre {. font-family: monospace, monospace;. font-size: 1em;.}..a {. background-color: transparent;.}..abbr[title] {. border-bottom: none;. text-decoration: underline;. text-decoration: underline dotted;.}..b,.strong {. font-weight: bolder;.}..code,.kbd,.samp {. font-family: monospace, monospace;. font-size: 1em;.}..small {. font-size: 80%;.}..sub,.sup {. font-size: 75%;. line-height: 0;. position: relative;. vertical-align: baseline;.}..sub {. bottom: -0.25em;.}..sup {. top: -0.5em;.}..img {. border-style: none;.}..button,.i

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 25368, version 1.6553
Category:	downloaded
Size (bytes):	25368
Entropy (8bit):	7.991291328114976
Encrypted:	true
SSDEEP:	768:C6oeBPhOo72gZ8QfhVeOCysw6OvQ5ipIg/55p5Wk:DoeZcy5FfmOCysw6wE7ghn5b
MD5:	186B9E5BE0671C3C941A2A4966BEB47A
SHA1:	0255BF2F48460EB212C93242740F5BEF01E858C4
SHA-256:	1F70FF447ED799A34F4C3AE37EF1F49ED4AF71123BA2C2AEFE354565354284BE
SHA-512:	800337FFE081FABAC76979140A60C8A8CFCC1B6B0DEA559E444904ACC9CBD34F066168A658AFB7348F3DD7F621AC7444A91773E3B3EC68BFE23AE8F78ADE622B
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/paypal-ui/fonts/PayPalSansBig-Regular.woff2
Preview:	wOF2OTTO..c........L..b..............................R..L....`....6.$......... .r.....`..m...uP.h...'.....AP........%....k......%.G.CL.$.V..)C.Zp...C...O...W.;<..\|..u....0.h.J..]m..50c....R.#....fn4.Eg...11.:HmO..7....Y3.........D.. ...n.."..g.?$)..?.~.[....1I...h.,e..S`.......s.K..$...P....L`bj_..f...x....lA....{j.Q..r....8...76]3...R.YY6.5.vc.].Z............9.I.5rr..Cf...N.Q0.b..Kkh..f......P.....#..h.L.%....6.f..v........4+..(.V..X.h..%..1.{..t.,.i.StD.C.A..s.x...8g...d.8.Y.: ~@.o..W...i.f.~M..t..jj?.7... ...q#b.Q.!............`....9.t1..j.B1.O..;...@K.x...b.X.....r..{....E.+....dE<.1[.9q"h..........~g..0.6...HBi......\|.\|.<Q ...qmK..BE4....5..... ...@a...P.B..l.\|.?..Q.U.~kM....C..;.]....._.~.oA.9.(G8..r...sYj...@aIi,..Y.t......g.8%.u..rS.....o.K:...@9.Qr.T:..;.]JE.....k..E.V....:..{....,_....y-.o..x.(?2J+0....r.t\TX..K...*u.6E..>...f..V..#.a..v~....$.CGh...:.u..r.Z4..eI.A.....y.~x!9`I..Q.....{s....=.!.%...V.AD.J........y.:uI.....VP.m;}Evy

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	14590
Entropy (8bit):	4.598342061755368
Encrypted:	false
SSDEEP:	384:c2HMIfK9SzJP0aHEWlicJcl0BUVMuO3oyvl:c2sIfK9SzuMdvl
MD5:	1B12004F609A3627EDC44FEC4A42EE7B
SHA1:	D4B813E06BDBBAB24325E9433557F8F9F4386616
SHA-256:	635A4FD042610F0F868042E34745829EBA11B53338F1BEB30C405AB2DB3757BF
SHA-512:	1F3E81AFDA97E6CF1E6631709FD48FA80CC5556FF40F6721B3DB0E499BF039E4BAB0F3030A0C552B94A503899C3B1ED79D3BCE14FA5D14A18E9FAC67D8918C76
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/messaging/venmo/v12/messaging-venmo-loader.js
Preview:	/* eslint-disable no-var /./. This is the launcher for logged-out chats it should read chat script and polyfills:. * - do not write es6. * - do not add dependencies. * - keep minimum functionality. * Supported browsers IE11+, Chrome, Safari, Firefox. /.'use strict';..(function () {.. function setConversationId() {. let idDetails = localStorage.getItem('msg-conversation-id');. if(idDetails) {. idDetails = atob(idDetails);. idDetails = JSON.parse(idDetails);. var date = new Date(idDetails.time);. var today = new Date();. var diffTime = (today - date);. var difference = Math.round(diffTime / (1000 60 * 60 * 24));. if(difference <= 0) {. const conversationIdEle = document.getElementById('conv_id');. const conversationIdNode = document.getElementById('request_custom_fields_1500004368201');. if(conversationIdEle) {. conversationIdEle.value = idDetails.id;. }. if(conversationIdNode) {. conve

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52145), with no line terminators
Category:	downloaded
Size (bytes):	52145
Entropy (8bit):	5.26950933663614
Encrypted:	false
SSDEEP:	768:5Tu8UVGGN4nfBTT/ipsv6NGRglpr0MXrJvshNacVZ9UPuY:5Tu8UVGGOdTqeG4qvTf
MD5:	612654743950CA7CC66F03442A21365A
SHA1:	033D583467F9E80DF1D89DCDC0D6F87C1A387103
SHA-256:	8291CCC401C44A82198EB764B095006F2AAB420DAC34000B8FF15138C7EE36C5
SHA-512:	628C3BBB2323652BF0776FCEEB69E1B1955A9DB0E14BD1015F36B44DCC2B67504AB0146C1A32375E3BB14D04A204E6B9B708E6251E3367007385F8874EAE57DC
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ice/vendorVenmo36.7650ba577c53d9e0f615.js
Preview:	"use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[36],{5276:(e,t,n)=>{n.r(t),n.d(t,{Calendar:()=>pe,Clock:()=>ke,ClockView:()=>Se,DatePicker:()=>kt,DateTimePicker:()=>Qt,Day:()=>_,KeyboardDatePicker:()=>Mt,KeyboardDateTimePicker:()=>qt,KeyboardTimePicker:()=>Lt,MuiPickersContext:()=>a,MuiPickersUtilsProvider:()=>o,Picker:()=>_e,TimePicker:()=>jt,TimePickerView:()=>Ie,makePickerWithState:()=>yt,useKeyboardPickerState:()=>bt,usePickerState:()=>ht,useStaticState:()=>Xt,useUtils:()=>i,validate:()=>ct});var r=n(35776),a=(0,r.createContext)(null),o=function(e){var t=e.utils,n=e.children,o=e.locale,i=e.libInstance,l=(0,r.useMemo)((function(){return new t({locale:o,instance:i})}),[t,i,o]);return(0,r.createElement)(a.Provider,{value:l,children:n})};function i(){var e=(0,r.useContext)(a);return function(e){if(!e)throw new Error("Can not find utils in context. You either a) forgot to wrap your component tree in MuiPickersUtilsProvider; o

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (42469), with no line terminators
Category:	downloaded
Size (bytes):	42470
Entropy (8bit):	5.430574714885579
Encrypted:	false
SSDEEP:	768:eRxEArC4CxrNGO29qyOr0xrdUa4kmasI1EQwWAZ62sdiOMbkbWKkw6xTueKmh5O6:e37TeEiTKu8mqCDAxS6otueGZQV5CH9K
MD5:	C11E7097828201E102899BE99E77D2C2
SHA1:	C93A86F91CCDC668A8B80F93C206EC2D4EE4BB55
SHA-256:	5C0EEDA9D48EFC5CF30A6C517FED53D177D454E9DA800680782A0578CFAE89B3
SHA-512:	0F90B85EBA7B013EE7FD34C30E92EF46E8E0952DEA6BB3B22601F09F55D816128455B6FF07AB14FA5462911E66959478A57599A9F9D1AF5B77118385C7C3F85D
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ice/vendorVenmo42.db2dd660920af1943272.js
Preview:	"use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[42],{41423:(e,t,o)=>{o.d(t,{Z:()=>u});var n=o(45987),r=o(4942),a=o(87462),i=o(35776),l=o(86010),c=o(52543),s=o(32467),d=o(93871),f=i.forwardRef((function(e,t){var o=e.classes,r=e.className,c=e.disabled,f=void 0!==c&&c,u=e.disableFocusRipple,p=void 0!==u&&u,m=e.fullWidth,v=e.icon,h=e.indicator,g=e.label,b=e.onChange,y=e.onClick,Z=e.onFocus,x=e.selected,w=e.selectionFollowsFocus,E=e.textColor,C=void 0===E?"inherit":E,A=e.value,R=e.wrapped,T=void 0!==R&&R,P=(0,n.Z)(e,["classes","className","disabled","disableFocusRipple","fullWidth","icon","indicator","label","onChange","onClick","onFocus","selected","selectionFollowsFocus","textColor","value","wrapped"]);return i.createElement(s.Z,(0,a.Z)({focusRipple:!p,className:(0,l.default)(o.root,o["textColor".concat((0,d.Z)(C))],r,f&&o.disabled,x&&o.selected,g&&v&&o.labelIcon,m&&o.fullWidth,T&&o.wrapped),ref:t,role:"tab","aria-selected":x,d

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	135
Entropy (8bit):	5.077581773106507
Encrypted:	false
SSDEEP:	3:k0WYL12AEAFlHJZwHJ5A/KCKIX0QwYW6QfpX/W6Qen:UYR2APlXX/Ke0QwV6EpXO6h
MD5:	E2A244D69BD948F5AA1E6AABCE97E635
SHA1:	15C84419D83DA9B0F33989D85CDCB0138EC469E2
SHA-256:	94F95366B3F5664D687C03C7E150B70AD8DA3222FA4554303224C5B1530BEC1F
SHA-512:	13BC5A629C3BA6695BF99416A81B230BF826A2274FB09A8FCD3E99F27BE619591E2A0D4BDC399F8CA1AC9AA736F69C78BD4C884499211E98F3293F5225C8B65D
Malicious:	false
Reputation:	low
URL:	https://account.venmo.com/_next/static/KayRtQ_1ym5_-NM6DR61r/_ssgManifest.js
Preview:	self.__SSG_MANIFEST=new Set(["\u002Fwebviews","\u002F404","\u002Flogin-return-error"]);self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB()

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (62368)
Category:	downloaded
Size (bytes):	91751
Entropy (8bit):	5.384493941392022
Encrypted:	false
SSDEEP:	1536:uyKGKQ91+xbvnkNyrqrcQ1lTIJpEIi2L6ncWUWvl9GS9z:6fkrcpY9US
MD5:	7290D5D6AD366078FFDF0E80CF188239
SHA1:	9F0BC8B3BA87113732D524B861247AD7B8B41555
SHA-256:	3E685400F0CAC1F57A85EAE22B1BF541C347D1A9D463633C1830C99D06E96012
SHA-512:	2F4D92BE887ED68B90E2161FB9FC47918D0631763CBC674F675623E699A27C71ED1D8C8D0D5A6CFD65E31380F15EF92A58E7514CA6BD9C11D682FDF324FB5953
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/ice/vendor1.2558024aca1e717b5875.js
Preview:	(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[1],{3655:(e,t,n)=>{var r=n(32792);function o(e){this.mode=r.MODE_8BIT_BYTE,this.data=e}o.prototype={getLength:function(e){return this.data.length},write:function(e){for(var t=0;t<this.data.length;t++)e.put(this.data.charCodeAt(t),8)}},e.exports=o},27321:e=>{function t(){this.buffer=new Array,this.length=0}t.prototype={get:function(e){var t=Math.floor(e/8);return 1==(this.buffer[t]>>>7-e%8&1)},put:function(e,t){for(var n=0;n<t;n++)this.putBit(1==(e>>>t-n-1&1))},getLengthInBits:function(){return this.length},putBit:function(e){var t=Math.floor(this.length/8);this.buffer.length<=t&&this.buffer.push(0),e&&(this.buffer[t]\|=128>>>this.length%8),this.length++}},e.exports=t},49381:e=>{e.exports={L:1,M:0,Q:3,H:2}},32832:(e,t,n)=>{var r=n(11518);function o(e,t){if(null==e.length)throw new Error(e.length+"/"+t);for(var n=0;n<e.length&&0==e[n];)n++;this.num=new Array(e.length-n+t);for(var r=0;r<e.lengt

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (631)
Category:	downloaded
Size (bytes):	517649
Entropy (8bit):	5.713376874006511
Encrypted:	false
SSDEEP:	6144:m1K1Z7NMxjW6eJoWvAlUjWwuMSYCVvLk8DSWd1Ps8Jz38iZc:m6eWTAujfuPY0JGgkt
MD5:	E2E79D6B927169D9E0E57E3BAECC0993
SHA1:	1299473950B2999BA0B7F39BD5E4A60EAFD1819D
SHA-256:	231336ED913A5EBD4445B85486E053CAF2B81CAB91318241375F3F7A245B6C6B
SHA-512:	D6A2ED7B19E54D1447EE9BBC684AF7101B48086945A938A5F9B6AE74ACE30B9A98CA83D3183814DD3CC40F251AB6433DC7F8B425F313EA9557B83E1C2E035DFF
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 14:22:26.913476944 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 26, 2024 14:22:36.522793055 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 26, 2024 14:22:39.863867044 CEST	49737	443	192.168.2.4	99.84.252.16
Apr 26, 2024 14:22:39.863950968 CEST	443	49737	99.84.252.16	192.168.2.4
Apr 26, 2024 14:22:39.864027023 CEST	49737	443	192.168.2.4	99.84.252.16
Apr 26, 2024 14:22:39.864357948 CEST	49738	443	192.168.2.4	99.84.252.16
Apr 26, 2024 14:22:39.864394903 CEST	443	49738	99.84.252.16	192.168.2.4
Apr 26, 2024 14:22:39.864461899 CEST	49738	443	192.168.2.4	99.84.252.16
Apr 26, 2024 14:22:39.864717960 CEST	49738	443	192.168.2.4	99.84.252.16
Apr 26, 2024 14:22:39.864736080 CEST	443	49738	99.84.252.16	192.168.2.4
Apr 26, 2024 14:22:39.865226984 CEST	49737	443	192.168.2.4	99.84.252.16
Apr 26, 2024 14:22:39.865329027 CEST	443	49737	99.84.252.16	192.168.2.4
Apr 26, 2024 14:22:40.134149075 CEST	443	49738	99.84.252.16	192.168.2.4
Apr 26, 2024 14:22:40.134458065 CEST	49738	443	192.168.2.4	99.84.252.16
Apr 26, 2024 14:22:40.134494066 CEST	443	49738	99.84.252.16	192.168.2.4
Apr 26, 2024 14:22:40.135529995 CEST	443	49737	99.84.252.16	192.168.2.4
Apr 26, 2024 14:22:40.135550022 CEST	443	49738	99.84.252.16	192.168.2.4
Apr 26, 2024 14:22:40.135634899 CEST	49738	443	192.168.2.4	99.84.252.16
Apr 26, 2024 14:22:40.136003971 CEST	49737	443	192.168.2.4	99.84.252.16
Apr 26, 2024 14:22:40.136063099 CEST	443	49737	99.84.252.16	192.168.2.4
Apr 26, 2024 14:22:40.137408018 CEST	49738	443	192.168.2.4	99.84.252.16
Apr 26, 2024 14:22:40.137484074 CEST	443	49738	99.84.252.16	192.168.2.4
Apr 26, 2024 14:22:40.137777090 CEST	49738	443	192.168.2.4	99.84.252.16
Apr 26, 2024 14:22:40.137792110 CEST	443	49738	99.84.252.16	192.168.2.4
Apr 26, 2024 14:22:40.138030052 CEST	443	49737	99.84.252.16	192.168.2.4
Apr 26, 2024 14:22:40.138106108 CEST	49737	443	192.168.2.4	99.84.252.16
Apr 26, 2024 14:22:40.138674021 CEST	49737	443	192.168.2.4	99.84.252.16
Apr 26, 2024 14:22:40.138989925 CEST	443	49737	99.84.252.16	192.168.2.4
Apr 26, 2024 14:22:40.344136000 CEST	443	49738	99.84.252.16	192.168.2.4
Apr 26, 2024 14:22:40.344208002 CEST	49738	443	192.168.2.4	99.84.252.16
Apr 26, 2024 14:22:40.344209909 CEST	443	49737	99.84.252.16	192.168.2.4
Apr 26, 2024 14:22:40.344430923 CEST	49737	443	192.168.2.4	99.84.252.16
Apr 26, 2024 14:22:40.778819084 CEST	443	49738	99.84.252.16	192.168.2.4
Apr 26, 2024 14:22:40.779114962 CEST	443	49738	99.84.252.16	192.168.2.4
Apr 26, 2024 14:22:40.779210091 CEST	49738	443	192.168.2.4	99.84.252.16
Apr 26, 2024 14:22:40.779887915 CEST	49738	443	192.168.2.4	99.84.252.16
Apr 26, 2024 14:22:40.779918909 CEST	443	49738	99.84.252.16	192.168.2.4
Apr 26, 2024 14:22:40.925367117 CEST	49739	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:40.925415993 CEST	443	49739	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:40.925482035 CEST	49739	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:40.925784111 CEST	49739	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:40.925796986 CEST	443	49739	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:41.163670063 CEST	49740	443	192.168.2.4	172.217.3.68
Apr 26, 2024 14:22:41.163710117 CEST	443	49740	172.217.3.68	192.168.2.4
Apr 26, 2024 14:22:41.163842916 CEST	49740	443	192.168.2.4	172.217.3.68
Apr 26, 2024 14:22:41.164413929 CEST	49740	443	192.168.2.4	172.217.3.68
Apr 26, 2024 14:22:41.164427042 CEST	443	49740	172.217.3.68	192.168.2.4
Apr 26, 2024 14:22:41.215879917 CEST	443	49739	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:41.216412067 CEST	49739	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:41.216435909 CEST	443	49739	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:41.217453003 CEST	443	49739	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:41.217531919 CEST	49739	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:41.219441891 CEST	49739	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:41.219502926 CEST	443	49739	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:41.220000982 CEST	49739	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:41.220009089 CEST	443	49739	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:41.273308039 CEST	49739	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:41.504177094 CEST	443	49740	172.217.3.68	192.168.2.4
Apr 26, 2024 14:22:41.504448891 CEST	49740	443	192.168.2.4	172.217.3.68
Apr 26, 2024 14:22:41.504477978 CEST	443	49740	172.217.3.68	192.168.2.4
Apr 26, 2024 14:22:41.506138086 CEST	443	49740	172.217.3.68	192.168.2.4
Apr 26, 2024 14:22:41.506213903 CEST	49740	443	192.168.2.4	172.217.3.68
Apr 26, 2024 14:22:41.541096926 CEST	443	49739	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:41.541179895 CEST	443	49739	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:41.541237116 CEST	49739	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:41.541558981 CEST	49739	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:41.541577101 CEST	443	49739	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:41.541585922 CEST	49739	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:41.541621923 CEST	49739	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:41.733592987 CEST	49740	443	192.168.2.4	172.217.3.68
Apr 26, 2024 14:22:41.733990908 CEST	443	49740	172.217.3.68	192.168.2.4
Apr 26, 2024 14:22:41.857660055 CEST	49740	443	192.168.2.4	172.217.3.68
Apr 26, 2024 14:22:41.857686996 CEST	443	49740	172.217.3.68	192.168.2.4
Apr 26, 2024 14:22:41.968766928 CEST	49740	443	192.168.2.4	172.217.3.68
Apr 26, 2024 14:22:43.315761089 CEST	49741	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:43.315814018 CEST	443	49741	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:43.315867901 CEST	49741	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:43.317863941 CEST	49741	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:43.317882061 CEST	443	49741	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:43.571947098 CEST	443	49741	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:43.629858971 CEST	49741	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:43.694308996 CEST	49741	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:43.694338083 CEST	443	49741	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:43.695580006 CEST	443	49741	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:43.695614100 CEST	443	49741	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:43.695648909 CEST	49741	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:43.697552919 CEST	49741	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:43.697626114 CEST	443	49741	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:43.697905064 CEST	49741	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:43.697923899 CEST	443	49741	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:43.756745100 CEST	49741	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:43.880855083 CEST	443	49741	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:43.880990028 CEST	443	49741	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:43.881042004 CEST	49741	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:43.899919033 CEST	49741	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:43.899940014 CEST	443	49741	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:44.043335915 CEST	49742	80	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:44.163376093 CEST	49743	80	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:44.167757034 CEST	80	49742	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:44.167927980 CEST	49742	80	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:44.168390036 CEST	49742	80	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:44.299607992 CEST	80	49743	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:44.299671888 CEST	80	49742	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:44.299702883 CEST	49743	80	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:44.299721956 CEST	80	49742	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:44.309777975 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:44.309864044 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:44.309947968 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:44.310853004 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:44.310936928 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:44.365863085 CEST	49742	80	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:44.456610918 CEST	49745	443	192.168.2.4	23.193.120.112
Apr 26, 2024 14:22:44.456696033 CEST	443	49745	23.193.120.112	192.168.2.4
Apr 26, 2024 14:22:44.456785917 CEST	49745	443	192.168.2.4	23.193.120.112
Apr 26, 2024 14:22:44.465183973 CEST	49745	443	192.168.2.4	23.193.120.112
Apr 26, 2024 14:22:44.465259075 CEST	443	49745	23.193.120.112	192.168.2.4
Apr 26, 2024 14:22:44.566370010 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:44.567035913 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:44.567101002 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:44.567496061 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:44.572244883 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:44.572377920 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:44.572751045 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:44.616221905 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:44.759113073 CEST	443	49745	23.193.120.112	192.168.2.4
Apr 26, 2024 14:22:44.759314060 CEST	49745	443	192.168.2.4	23.193.120.112
Apr 26, 2024 14:22:44.762887955 CEST	49745	443	192.168.2.4	23.193.120.112
Apr 26, 2024 14:22:44.762943029 CEST	443	49745	23.193.120.112	192.168.2.4
Apr 26, 2024 14:22:44.763348103 CEST	443	49745	23.193.120.112	192.168.2.4
Apr 26, 2024 14:22:44.803303957 CEST	49745	443	192.168.2.4	23.193.120.112
Apr 26, 2024 14:22:44.844166994 CEST	443	49745	23.193.120.112	192.168.2.4
Apr 26, 2024 14:22:44.932832003 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:44.932862043 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:44.932931900 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:44.932974100 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:44.933010101 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:44.933036089 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:44.933057070 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:44.957798958 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:44.957822084 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:44.957953930 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:44.958014965 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:44.958086014 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:44.978718996 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:44.978904009 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.053293943 CEST	443	49745	23.193.120.112	192.168.2.4
Apr 26, 2024 14:22:45.053350925 CEST	443	49745	23.193.120.112	192.168.2.4
Apr 26, 2024 14:22:45.053599119 CEST	49745	443	192.168.2.4	23.193.120.112
Apr 26, 2024 14:22:45.054760933 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.054871082 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.054930925 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.054991961 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.063755035 CEST	49745	443	192.168.2.4	23.193.120.112
Apr 26, 2024 14:22:45.063755035 CEST	49745	443	192.168.2.4	23.193.120.112
Apr 26, 2024 14:22:45.063819885 CEST	443	49745	23.193.120.112	192.168.2.4
Apr 26, 2024 14:22:45.063916922 CEST	443	49745	23.193.120.112	192.168.2.4
Apr 26, 2024 14:22:45.084186077 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.084204912 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.084373951 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.084405899 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.084481001 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.090707064 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.090866089 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.113054991 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.113075972 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.113151073 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.113210917 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.113265038 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.134272099 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.134290934 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.134366035 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.134428024 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.134490967 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.146080017 CEST	49746	443	192.168.2.4	23.193.120.112
Apr 26, 2024 14:22:45.146112919 CEST	443	49746	23.193.120.112	192.168.2.4
Apr 26, 2024 14:22:45.146301985 CEST	49746	443	192.168.2.4	23.193.120.112
Apr 26, 2024 14:22:45.146620989 CEST	49746	443	192.168.2.4	23.193.120.112
Apr 26, 2024 14:22:45.146635056 CEST	443	49746	23.193.120.112	192.168.2.4
Apr 26, 2024 14:22:45.194142103 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.194161892 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.194292068 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.194324017 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.194396019 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.209743023 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.209903002 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.209963083 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.227176905 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.227194071 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.227343082 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.227404118 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.245506048 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.245521069 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.245661974 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.245726109 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.251060963 CEST	49747	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.251110077 CEST	443	49747	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.251169920 CEST	49747	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.251734972 CEST	49748	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.251773119 CEST	443	49748	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.251861095 CEST	49748	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.252103090 CEST	49747	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.252111912 CEST	443	49747	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.252321959 CEST	49748	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.252335072 CEST	443	49748	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.252973080 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.253127098 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.253186941 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.268639088 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.268657923 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.268712997 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.268733978 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.268752098 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.268769979 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.268790960 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.285723925 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.285742998 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.285856962 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.285887003 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.285934925 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.297983885 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.298182011 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.298243046 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.298321009 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.313714981 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.313735008 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.313836098 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.313896894 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.321809053 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.321826935 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.321875095 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.321940899 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.321978092 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.347095966 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.347251892 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.347315073 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.347384930 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.349442959 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.349745989 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.360421896 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.360439062 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.360596895 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.360598087 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.360661030 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.364428043 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.364447117 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.364571095 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.364571095 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.364634991 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.372437000 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.372456074 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.372570038 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.372570038 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.372603893 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.384583950 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.384604931 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.384759903 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.384759903 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.384792089 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.388653994 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.388672113 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.388820887 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.388853073 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.390476942 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.393179893 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:45.393217087 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:45.393474102 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:45.393529892 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.393599033 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.393618107 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.393632889 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.393647909 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.393985987 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:45.394002914 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:45.403645992 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.403661013 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.403841972 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.403841972 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.403908014 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.404546022 CEST	443	49746	23.193.120.112	192.168.2.4
Apr 26, 2024 14:22:45.404627085 CEST	49746	443	192.168.2.4	23.193.120.112
Apr 26, 2024 14:22:45.406431913 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.406524897 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.406548023 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.406610966 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.414525986 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.414540052 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.414695024 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.414755106 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.414813995 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.420317888 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.420488119 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.420548916 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.420670986 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.425236940 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.425251961 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.425415039 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.425477028 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.428184986 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.432207108 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.432221889 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.432281017 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.432343960 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.432382107 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.433178902 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.433319092 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.433379889 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.433438063 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.435162067 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.435306072 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.443902016 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.443917990 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.444061995 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.444150925 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.449244022 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.449261904 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.449470043 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.449532032 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.454672098 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.454684973 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.454865932 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.454929113 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.460616112 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.460637093 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.460815907 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.460817099 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.460882902 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.461105108 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.461294889 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.461358070 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.464813948 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.466571093 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.466587067 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.466691971 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.466753006 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.471987009 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.472007036 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.472084045 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.472126007 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.472171068 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.474006891 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.474081039 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.474112034 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.474180937 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.478787899 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.478926897 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.479254961 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.482506990 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.482561111 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.482587099 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.482603073 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.486332893 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.487354994 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.487370968 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.487504005 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.487534046 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.487585068 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.493236065 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.493249893 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.493361950 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.493392944 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.493463039 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.496023893 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.496064901 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.496113062 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.496121883 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.496157885 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.498148918 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.499798059 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.499814987 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.499907017 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.499922037 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.499994040 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.502582073 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.502675056 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.503439903 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.503504992 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.507496119 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.507508993 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.507683039 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.507744074 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.512727022 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.512748957 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.512875080 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.512937069 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.514473915 CEST	443	49748	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.515284061 CEST	443	49747	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.516196012 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.516207933 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.516285896 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.516346931 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.520140886 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.520159960 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.520216942 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.520234108 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.520267963 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.524519920 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.524533033 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.524609089 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.524688959 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.528489113 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.528501987 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.528655052 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.528717995 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.528805971 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.532464027 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.532478094 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.532582998 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.532644033 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.536145926 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.536164045 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.536246061 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.536246061 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.536309004 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.540087938 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.540108919 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.540247917 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.540249109 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.540313005 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.543647051 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.543661118 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.543800116 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.543863058 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.543931007 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.547518969 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.547533035 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.547689915 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.547751904 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.550005913 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.550100088 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.550146103 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.550180912 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.550210953 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.553664923 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.553678989 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.553757906 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.553822041 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.556849003 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.556862116 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.557029963 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.557091951 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.558442116 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.558585882 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.558653116 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.558701992 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.562374115 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.562387943 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.562479019 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.562505960 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.562546968 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.565241098 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.565256119 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.565320969 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.565341949 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.565368891 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.565813065 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.565978050 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.566039085 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.566097021 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.569160938 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.569175005 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.569417000 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.569464922 CEST	49748	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.569478989 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.569529057 CEST	49747	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.569531918 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.571991920 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.572005987 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.572098017 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.572138071 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.572192907 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.575278997 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.575293064 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.575362921 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.575372934 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.575417995 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.578290939 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.578329086 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.578358889 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.578367949 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.578385115 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.586220026 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.586255074 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.586370945 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.586370945 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.586404085 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.592900038 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.592917919 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.592972994 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.593005896 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.593024015 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.595835924 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.595848083 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.595966101 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.595966101 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.595998049 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.599364042 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.599376917 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.599503994 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.599535942 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.610920906 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.610954046 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.611102104 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.611131907 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.622543097 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.622556925 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.622694016 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.622725010 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.626456976 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.626471043 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.626518965 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.626552105 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.626568079 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.629765987 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.629779100 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.629872084 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.629890919 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.631479025 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.631510019 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.631570101 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.631580114 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.633663893 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.633677959 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.633743048 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.633752108 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.634438038 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.634450912 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.634501934 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.634511948 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.634526968 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.638350010 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.638365984 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.638453007 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.638484001 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:45.760817051 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:45.814347982 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:45.862179041 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:46.348381042 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:46.348412991 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:46.348596096 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:46.348659992 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:46.348717928 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.069359064 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.069833040 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.069855928 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.070187092 CEST	49747	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.070224047 CEST	443	49747	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.070358992 CEST	49748	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.070396900 CEST	443	49748	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.070867062 CEST	443	49748	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.071043968 CEST	443	49747	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.071176052 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.071232080 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.123291969 CEST	49747	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.123481035 CEST	443	49747	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.123739004 CEST	49748	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.123887062 CEST	443	49748	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.127007008 CEST	49747	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.127125025 CEST	49748	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.131758928 CEST	49744	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.131825924 CEST	443	49744	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.165601969 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.165749073 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.165832996 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.165847063 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.172123909 CEST	443	49748	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.172123909 CEST	443	49747	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.263530970 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.314903975 CEST	443	49747	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.314941883 CEST	443	49747	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.314949036 CEST	443	49747	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.314968109 CEST	443	49747	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.314975977 CEST	443	49747	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.315041065 CEST	443	49747	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.315063953 CEST	49747	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.315109015 CEST	49747	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.319777012 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.319869995 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.319951057 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.319967031 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.319983959 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.320038080 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.320040941 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.320051908 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.320096970 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.324295044 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.329111099 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.329157114 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.329168081 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.333622932 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.333679914 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.333688974 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.335385084 CEST	443	49748	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.335410118 CEST	443	49748	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.335417032 CEST	443	49748	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.335447073 CEST	443	49748	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.335453987 CEST	443	49748	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.335458994 CEST	443	49748	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.335483074 CEST	49748	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.335514069 CEST	443	49748	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.335529089 CEST	49748	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.335566044 CEST	49748	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.339701891 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.339754105 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.339760065 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.357858896 CEST	443	49748	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.357886076 CEST	443	49748	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.357983112 CEST	49748	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.357996941 CEST	443	49748	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.358059883 CEST	49748	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.366903067 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.366911888 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.366935968 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.366951942 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.366959095 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.366967916 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.366975069 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.366997957 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.367003918 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.367029905 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.459793091 CEST	443	49748	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.459884882 CEST	49748	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.459887981 CEST	443	49748	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.459952116 CEST	49748	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.470448971 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.472486973 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.472498894 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.472546101 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.472568989 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.472583055 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.472592115 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.472606897 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.472651005 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.472692966 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.493963957 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.493972063 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.494015932 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.494031906 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.494055986 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.494069099 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.494123936 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.518285036 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.518292904 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.518342972 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.518366098 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.518395901 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.518404961 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.518431902 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.518452883 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.525510073 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.525526047 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.525613070 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.525631905 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.525670052 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.550072908 CEST	49746	443	192.168.2.4	23.193.120.112
Apr 26, 2024 14:22:48.550092936 CEST	443	49746	23.193.120.112	192.168.2.4
Apr 26, 2024 14:22:48.550455093 CEST	443	49746	23.193.120.112	192.168.2.4
Apr 26, 2024 14:22:48.590981007 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.596407890 CEST	49748	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.596427917 CEST	443	49748	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.625761986 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.625787020 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.625860929 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.625890017 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.625936985 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.631860971 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.631875992 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.631937027 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.631958008 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.632016897 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.634958982 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.634974003 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.635027885 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.635046959 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.635076046 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.635104895 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.640346050 CEST	49747	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.640367985 CEST	443	49747	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.641964912 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.641978979 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.642024040 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.642041922 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.642085075 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.642105103 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.651985884 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.652002096 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.652034044 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.652065992 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.652086973 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.652120113 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.652122974 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.652178049 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.657525063 CEST	49746	443	192.168.2.4	23.193.120.112
Apr 26, 2024 14:22:48.708026886 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.708071947 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.708142996 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.715492964 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.715513945 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.715584040 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.760627031 CEST	49752	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.760663986 CEST	443	49752	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.760727882 CEST	49752	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.799496889 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.799525976 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.799732924 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.799768925 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.800374031 CEST	49753	443	192.168.2.4	151.101.66.133
Apr 26, 2024 14:22:48.800420046 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:48.800483942 CEST	49753	443	192.168.2.4	151.101.66.133
Apr 26, 2024 14:22:48.800936937 CEST	49754	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.801017046 CEST	443	49754	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.801100969 CEST	49754	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.801460028 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.801537991 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.801608086 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.801796913 CEST	49756	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.801836014 CEST	443	49756	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.801884890 CEST	49756	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.801920891 CEST	49749	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:48.801935911 CEST	443	49749	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:48.817401886 CEST	49756	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.817425013 CEST	443	49756	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.818068981 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.818063974 CEST	49754	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.818151951 CEST	443	49754	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.818151951 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:48.818526983 CEST	49753	443	192.168.2.4	151.101.66.133
Apr 26, 2024 14:22:48.818550110 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:48.818715096 CEST	49752	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:48.818748951 CEST	443	49752	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.002109051 CEST	49746	443	192.168.2.4	23.193.120.112
Apr 26, 2024 14:22:49.044117928 CEST	443	49746	23.193.120.112	192.168.2.4
Apr 26, 2024 14:22:49.062407970 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.063016891 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.069423914 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.069437981 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.069797039 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.069993019 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.070009947 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.070396900 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.071995974 CEST	49757	443	192.168.2.4	151.101.130.133
Apr 26, 2024 14:22:49.072035074 CEST	443	49757	151.101.130.133	192.168.2.4
Apr 26, 2024 14:22:49.072093010 CEST	49757	443	192.168.2.4	151.101.130.133
Apr 26, 2024 14:22:49.073169947 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.073235035 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.073827028 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.073892117 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.074493885 CEST	49757	443	192.168.2.4	151.101.130.133
Apr 26, 2024 14:22:49.074511051 CEST	443	49757	151.101.130.133	192.168.2.4
Apr 26, 2024 14:22:49.074930906 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.075057030 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.109556913 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.110117912 CEST	443	49756	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.110133886 CEST	443	49752	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.110379934 CEST	443	49754	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.120121956 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.120124102 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.127428055 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.127487898 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.127931118 CEST	49756	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.127940893 CEST	443	49756	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.128282070 CEST	49752	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.128313065 CEST	443	49752	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.128536940 CEST	443	49746	23.193.120.112	192.168.2.4
Apr 26, 2024 14:22:49.128719091 CEST	49754	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.128782988 CEST	443	49754	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.128798962 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.128979921 CEST	443	49756	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.129007101 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.129029036 CEST	49756	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.129427910 CEST	443	49752	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.129482985 CEST	49752	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.129559040 CEST	443	49746	23.193.120.112	192.168.2.4
Apr 26, 2024 14:22:49.129606009 CEST	49746	443	192.168.2.4	23.193.120.112
Apr 26, 2024 14:22:49.130227089 CEST	443	49754	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.130302906 CEST	49754	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.130628109 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.130754948 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.132910967 CEST	49756	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.132989883 CEST	443	49756	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.134155035 CEST	49752	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.134231091 CEST	443	49752	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.135037899 CEST	49754	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.135133982 CEST	443	49754	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.136080027 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.136162996 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.136178970 CEST	49756	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.136189938 CEST	443	49756	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.136257887 CEST	49752	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.136269093 CEST	443	49752	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.136610985 CEST	49754	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.136641979 CEST	443	49754	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.152686119 CEST	49746	443	192.168.2.4	23.193.120.112
Apr 26, 2024 14:22:49.152704954 CEST	443	49746	23.193.120.112	192.168.2.4
Apr 26, 2024 14:22:49.152718067 CEST	49746	443	192.168.2.4	23.193.120.112
Apr 26, 2024 14:22:49.152724028 CEST	443	49746	23.193.120.112	192.168.2.4
Apr 26, 2024 14:22:49.257219076 CEST	49752	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.257345915 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.328134060 CEST	49756	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.328244925 CEST	49754	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.380230904 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.380254984 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.380295992 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.380316019 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.380331993 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.380373955 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.380692005 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.380717993 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.380734921 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.380762100 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.380775928 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.380795002 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.380821943 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.406855106 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.406876087 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.406970024 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.406970024 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.406979084 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.407031059 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.407059908 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.407077074 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.407109976 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.407116890 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.407141924 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.407171011 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.417015076 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.417077065 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.418521881 CEST	443	49754	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.419177055 CEST	443	49754	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.419379950 CEST	49754	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.421269894 CEST	443	49752	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.421612024 CEST	443	49752	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.421663046 CEST	49752	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.422183990 CEST	49754	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.422235012 CEST	443	49754	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.427288055 CEST	49752	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.427309036 CEST	443	49752	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.436449051 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.436475039 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.436481953 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.436520100 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.436543941 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.436553955 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.436566114 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.436583042 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.436598063 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.436608076 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.436619997 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.464926004 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.464934111 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.465152979 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.465233088 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.465281963 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.465323925 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.465348959 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.485616922 CEST	443	49756	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.485637903 CEST	443	49756	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.485645056 CEST	443	49756	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.485686064 CEST	49756	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.485696077 CEST	443	49756	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.485707045 CEST	443	49756	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.485732079 CEST	49756	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.485735893 CEST	443	49756	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.485747099 CEST	49756	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.485750914 CEST	443	49756	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.485769987 CEST	49756	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.485793114 CEST	49756	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.491703987 CEST	443	49757	151.101.130.133	192.168.2.4
Apr 26, 2024 14:22:49.492815971 CEST	49757	443	192.168.2.4	151.101.130.133
Apr 26, 2024 14:22:49.492832899 CEST	443	49757	151.101.130.133	192.168.2.4
Apr 26, 2024 14:22:49.493881941 CEST	443	49757	151.101.130.133	192.168.2.4
Apr 26, 2024 14:22:49.493932962 CEST	49757	443	192.168.2.4	151.101.130.133
Apr 26, 2024 14:22:49.495995998 CEST	49757	443	192.168.2.4	151.101.130.133
Apr 26, 2024 14:22:49.496057034 CEST	443	49757	151.101.130.133	192.168.2.4
Apr 26, 2024 14:22:49.496746063 CEST	49757	443	192.168.2.4	151.101.130.133
Apr 26, 2024 14:22:49.496752024 CEST	443	49757	151.101.130.133	192.168.2.4
Apr 26, 2024 14:22:49.503645897 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.503673077 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.503707886 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.503716946 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.503746986 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.503767014 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.510438919 CEST	443	49756	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.510448933 CEST	443	49756	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.510483980 CEST	49756	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.510495901 CEST	443	49756	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.510526896 CEST	49756	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.510530949 CEST	443	49756	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.510544062 CEST	49756	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.510546923 CEST	443	49756	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.510564089 CEST	49756	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.510566950 CEST	443	49756	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.510579109 CEST	49756	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.510596991 CEST	49756	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.515038967 CEST	443	49756	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.519273996 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.519293070 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.519330025 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.519337893 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.519382000 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.521635056 CEST	443	49756	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.521683931 CEST	49756	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.521688938 CEST	443	49756	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.521697998 CEST	443	49756	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.521728039 CEST	49756	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.524009943 CEST	49756	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.524024963 CEST	443	49756	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.529536963 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.529571056 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.529597998 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.529603958 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.529649019 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.541574955 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.541591883 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.541639090 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.541646004 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.541683912 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.554408073 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.554526091 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.554555893 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.554563046 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.554606915 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.559005976 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.559030056 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.559159040 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.559159040 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.559226990 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.559294939 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.564322948 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.564353943 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.564378023 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.564383030 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.564429998 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.568547964 CEST	49757	443	192.168.2.4	151.101.130.133
Apr 26, 2024 14:22:49.576579094 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.576598883 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.576653004 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.576658964 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.576715946 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.588116884 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.588138103 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.588198900 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.588207006 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.588247061 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.590234041 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.590254068 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.590359926 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.590426922 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.590686083 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.619962931 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.620033026 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.620188951 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.620249033 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.620309114 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.633260965 CEST	443	49757	151.101.130.133	192.168.2.4
Apr 26, 2024 14:22:49.633336067 CEST	443	49757	151.101.130.133	192.168.2.4
Apr 26, 2024 14:22:49.633388042 CEST	49757	443	192.168.2.4	151.101.130.133
Apr 26, 2024 14:22:49.635756016 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.635780096 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.635823965 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.635842085 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.635864019 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.635884047 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.641160011 CEST	49757	443	192.168.2.4	151.101.130.133
Apr 26, 2024 14:22:49.641175985 CEST	443	49757	151.101.130.133	192.168.2.4
Apr 26, 2024 14:22:49.642887115 CEST	49758	443	192.168.2.4	151.101.130.133
Apr 26, 2024 14:22:49.642914057 CEST	443	49758	151.101.130.133	192.168.2.4
Apr 26, 2024 14:22:49.642991066 CEST	49758	443	192.168.2.4	151.101.130.133
Apr 26, 2024 14:22:49.643534899 CEST	49758	443	192.168.2.4	151.101.130.133
Apr 26, 2024 14:22:49.643546104 CEST	443	49758	151.101.130.133	192.168.2.4
Apr 26, 2024 14:22:49.646686077 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.646712065 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.646847963 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.646847963 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.646910906 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.646974087 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.648299932 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.648323059 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.648365974 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.648377895 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.648405075 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.648422956 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.649535894 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.649550915 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.649605036 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.649612904 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.649970055 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.665860891 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.665878057 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.665935993 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.665942907 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.665993929 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.671338081 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.671355009 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.671418905 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.671427011 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.671648026 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.682806015 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.682827950 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.682872057 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.682878971 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.682919979 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.684432983 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.684452057 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.684495926 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.684533119 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.684564114 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.684663057 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.687731028 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.687748909 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.687805891 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.687813044 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.687889099 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.705868006 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.705884933 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.705908060 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.705954075 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.706017017 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.706024885 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.706022978 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.706067085 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.706083059 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.706131935 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.706157923 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.708247900 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.708265066 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.708336115 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.708343983 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.708571911 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.714689016 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.714745045 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.716031075 CEST	49672	443	192.168.2.4	173.222.162.32
Apr 26, 2024 14:22:49.716139078 CEST	443	49672	173.222.162.32	192.168.2.4
Apr 26, 2024 14:22:49.717649937 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.717669964 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.717725039 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.717736006 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.717776060 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.720516920 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.720531940 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.720599890 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.720664024 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.720700026 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.720899105 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.721129894 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.721146107 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.721205950 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.721215963 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.732791901 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.732806921 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.732862949 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.732870102 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.732937098 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.736618042 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.736638069 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.736675978 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.736682892 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.736723900 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.737988949 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.738157034 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.738217115 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.738746881 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.749722004 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.749738932 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.749790907 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.749798059 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.749836922 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.750124931 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.750161886 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.750176907 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.750183105 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.750207901 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.756499052 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.756516933 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.756572008 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.756602049 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.756622076 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.760199070 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.760212898 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.760277033 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.760283947 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.765201092 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.765216112 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.765258074 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.765264034 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.765301943 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.772239923 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.772253990 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.772288084 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.772308111 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.772315025 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.772352934 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.772361040 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.775521040 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.775540113 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.775664091 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.775664091 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.775693893 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.775852919 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.775862932 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.775933027 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.775943041 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.775969982 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.775983095 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.782886028 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.782900095 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.782983065 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.782989979 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.783025026 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.787512064 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.787527084 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.787576914 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.787590027 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.787612915 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.787642002 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.788897038 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.788912058 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.789032936 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.789032936 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.789067030 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.791074991 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.791107893 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.791157961 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.791163921 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.791196108 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.797295094 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.797312975 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.797383070 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.797393084 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.797430038 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.799803019 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.799818039 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.799889088 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.799895048 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.799932003 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.804980040 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.805000067 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.805140972 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.805171013 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.806576014 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.806631088 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.806632042 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.806638956 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.806685925 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.810992956 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.811007023 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.811053991 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.811059952 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.811094999 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.815872908 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.815886974 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.815933943 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.815939903 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.816407919 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.816421032 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.816579103 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.816579103 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.816612959 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.816672087 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.817322969 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.817379951 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.817385912 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.818775892 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.818823099 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.818829060 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.820075989 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.820090055 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.820163965 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.820169926 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.820200920 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.822983027 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.823030949 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.828284979 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.828304052 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.828358889 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.828399897 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.828430891 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.828480005 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.828974962 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.828996897 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.829027891 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.829035044 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.829061985 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.832722902 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.832736969 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.832784891 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.832789898 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.832828045 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.838037968 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.838053942 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.838095903 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.838108063 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.838118076 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.838159084 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.838557959 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.838583946 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.838722944 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.838722944 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.838787079 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.838845015 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.848633051 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.848647118 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.848696947 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.848705053 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.848901033 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.851819038 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.851872921 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.863456964 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.863466978 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.863471985 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.863483906 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.863533020 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.863568068 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.863578081 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.863593102 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.863631964 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.863667011 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.866980076 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.866997004 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.867049932 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.867059946 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.871859074 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.871872902 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.871944904 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.871952057 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.872000933 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.872441053 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.872458935 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.872597933 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.872658014 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.872760057 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.874463081 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.874481916 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.874543905 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.874551058 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.874586105 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.876861095 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.876878023 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.876952887 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.876959085 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.877008915 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.878288031 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.878329039 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.878412962 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.878427029 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.878456116 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.878464937 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.878457069 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.878470898 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.878488064 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.878519058 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.878568888 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.881370068 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.881388903 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.881463051 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.881469965 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.881508112 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.881591082 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.881616116 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.881773949 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.881773949 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.881804943 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.881827116 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.881836891 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.881872892 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.881880045 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.881890059 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.881906033 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.883785009 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.883800030 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.883898020 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.883903980 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.883954048 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.883969069 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.883990049 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.884018898 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.884026051 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.884033918 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.885304928 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.885318995 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.885370016 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.885401964 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.885401011 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.885416985 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.885421991 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.885453939 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.885461092 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.885518074 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.887382030 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.887557983 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.887617111 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.888847113 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.888865948 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.888906002 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.888911963 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.888966084 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.889844894 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.889866114 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.889890909 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.889919043 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.889925003 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.889962912 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.889992952 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.890016079 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.890254021 CEST	49751	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.890268087 CEST	443	49751	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.891184092 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.891268969 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.891329050 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.894855022 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.894939899 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.894989967 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.895024061 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.895067930 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.895757914 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.895771027 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.895824909 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.895833015 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.899310112 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.899415016 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.899420977 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.899466038 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.902734041 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.902756929 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.902875900 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.902875900 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.902906895 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.903176069 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.905409098 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.905431986 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.905474901 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.905479908 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.905522108 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.910892010 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.910907984 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.910976887 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.910981894 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.911016941 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.911792994 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.911811113 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.912022114 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.912051916 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.912117004 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.915905952 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.915921926 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.915975094 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.915981054 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.916012049 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.916032076 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.917371035 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.917504072 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.917534113 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.917777061 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.918441057 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.918497086 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.923321962 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.923338890 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.923396111 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.923402071 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.923434973 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.925354958 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.925371885 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.925482035 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.925510883 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.925575018 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.927505970 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.927571058 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.928622961 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.928651094 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.928666115 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.928719997 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.928725958 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.928747892 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.928774118 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.934061050 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.934076071 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.934118032 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.934124947 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.934159994 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.934813976 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.934844017 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.934992075 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.934992075 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.935087919 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.935161114 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.935750961 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.935890913 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.938572884 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.938627005 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.938628912 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.938647032 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.938678980 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.938699007 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.940860987 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.940895081 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.941003084 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.941003084 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.941063881 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.941508055 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.942867994 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.942883968 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.942950964 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.942955971 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.947190046 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.947205067 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.947360992 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.947421074 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.947612047 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.947630882 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.947686911 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.947693110 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.947753906 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.953660011 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.953677893 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.953777075 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.953785896 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.953798056 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.953814983 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.954004049 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.954063892 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.954411983 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.957180023 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.957200050 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.957232952 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.957238913 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.957269907 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.958116055 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.958132029 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.958215952 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.958275080 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.958334923 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.961857080 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.961878061 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.961909056 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.961916924 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.961949110 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.963711023 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.963728905 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.963896036 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.963956118 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.964010954 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.965687037 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.965708017 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.965742111 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.965749979 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.965781927 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.968367100 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.968537092 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.968596935 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.968693972 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.971288919 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.971312046 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.971354961 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.971368074 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.971379042 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.972659111 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.972728968 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.972733974 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.974627018 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.974652052 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.974720001 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.974778891 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.976712942 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.976728916 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.976793051 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.976800919 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.976830006 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.976864100 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.976954937 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.977015018 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.977085114 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.980432987 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.980447054 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.980489016 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.980494976 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.980520010 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.983903885 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.983920097 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.984148026 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.984148026 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.984211922 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.989311934 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.989456892 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.989516973 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.989567995 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.993721962 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.993736029 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.993798971 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.993804932 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.998357058 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.998363018 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.998372078 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.998374939 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.998502016 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.998502016 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.998508930 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.998542070 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:49.998570919 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:49.998627901 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.001041889 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.001099110 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.001115084 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.001122952 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.002007008 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.002021074 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.002078056 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.002106905 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.002106905 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.002115011 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.006170988 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.006192923 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.006335974 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.006336927 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.006366968 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.006597996 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.008233070 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.008246899 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.008287907 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.008295059 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.008344889 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.009573936 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.009627104 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.010149956 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.010164976 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.010313034 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.010343075 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.010386944 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.011023998 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.011039019 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.011090994 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.011097908 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.011143923 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.014524937 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.014547110 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.014651060 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.014651060 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.014679909 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.014702082 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.014723063 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.014733076 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.014750004 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.014827013 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.014843941 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.014868975 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.014904022 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.014909029 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.014944077 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.021794081 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.021810055 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.021893978 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.021900892 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.021936893 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.021969080 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.021989107 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.022095919 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.022095919 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.022128105 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.024398088 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.024414062 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.024477959 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.024485111 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.024518967 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.026525021 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.026540995 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.026663065 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.026663065 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.026695013 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.027905941 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.027923107 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.027991056 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.027998924 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.028038979 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.028369904 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.028389931 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.028435946 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.028454065 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.028485060 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.028747082 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.028762102 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.028817892 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.028824091 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.028862000 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.031877041 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.031892061 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.032025099 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.032084942 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.033375025 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.033390045 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.033457994 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.033464909 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.033505917 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.034826040 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.034849882 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.034987926 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.035049915 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.035621881 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.035638094 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.035677910 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.035681963 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.035690069 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.035712004 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.035729885 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.035737991 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.035773993 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.039468050 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.039483070 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.039627075 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.039643049 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.039653063 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.039695978 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.039701939 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.039714098 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.039738894 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.041399956 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.041419029 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.041482925 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.041488886 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.041531086 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.041543007 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.041560888 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.041596889 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.041656971 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.041693926 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.042984962 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.043000937 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.043076038 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.043080091 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.043086052 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.043090105 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.043128967 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.043144941 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.043150902 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.043180943 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.043196917 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.045109987 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.045164108 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.045190096 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.045206070 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.045432091 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.046225071 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.046247959 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.046298981 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.046305895 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.046341896 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.048649073 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.048665047 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.048806906 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.048821926 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.048835993 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.048862934 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.048878908 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.048896074 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.048930883 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.048975945 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.051139116 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.051155090 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.051229954 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.051235914 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.051271915 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.051573992 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.051595926 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.051724911 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.051724911 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.051788092 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.051846981 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.053488970 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.053504944 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.053564072 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.053570032 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.053601027 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.053616047 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.054846048 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.054872990 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.055011988 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.055011988 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.055073977 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.055131912 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.056834936 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.056849003 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.056893110 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.056899071 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.056926966 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.056946993 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.057071924 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.057089090 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.057127953 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.057185888 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.057226896 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.057250023 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.059233904 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.059248924 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.059307098 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.059312105 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.059351921 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.060053110 CEST	443	49758	151.101.130.133	192.168.2.4
Apr 26, 2024 14:22:50.060272932 CEST	49758	443	192.168.2.4	151.101.130.133
Apr 26, 2024 14:22:50.060281992 CEST	443	49758	151.101.130.133	192.168.2.4
Apr 26, 2024 14:22:50.060642958 CEST	443	49758	151.101.130.133	192.168.2.4
Apr 26, 2024 14:22:50.060658932 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.060672998 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.060828924 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.060889959 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.060944080 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.061059952 CEST	49758	443	192.168.2.4	151.101.130.133
Apr 26, 2024 14:22:50.061127901 CEST	443	49758	151.101.130.133	192.168.2.4
Apr 26, 2024 14:22:50.061269999 CEST	49758	443	192.168.2.4	151.101.130.133
Apr 26, 2024 14:22:50.061834097 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.061849117 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.061896086 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.061902046 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.061929941 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.061964035 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.062901020 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.062958956 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.063000917 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.063018084 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.063045025 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.063802004 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.063849926 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.063864946 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.064721107 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.064737082 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.064794064 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.064800978 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.064841986 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.066644907 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.066664934 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.066780090 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.066780090 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.066801071 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.067306042 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.067320108 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.067379951 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.067385912 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.067424059 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.069113016 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.069128036 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.069169044 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.069174051 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.069215059 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.069484949 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.069499969 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.069549084 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.069565058 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.069597006 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.071784973 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.071810007 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.071866989 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.071872950 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.071901083 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.071930885 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.072086096 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.072108984 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.072134972 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.072148085 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.072175980 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.074007034 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.074024916 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.074068069 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.074074030 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.074112892 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.074798107 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.074811935 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.074862957 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.074877977 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.074904919 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.077960968 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.077976942 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.078043938 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.078049898 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.078084946 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.078964949 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.078984022 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.079035997 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.079044104 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.079077005 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.080643892 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.080661058 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.080723047 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.080729961 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.080771923 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.082534075 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.082549095 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.082593918 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.082602978 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.082633018 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.085107088 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.085128069 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.085176945 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.085182905 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.085212946 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.085227013 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.087832928 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.087851048 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.087892056 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.087898970 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.087927103 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.087974072 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.087990999 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.088032961 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.088037968 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.088048935 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.088072062 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.088720083 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.088733912 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.088766098 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.088772058 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.088778973 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.088779926 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.088820934 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.088824987 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.088850021 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.088852882 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.088884115 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.089768887 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.089786053 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.089835882 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.089842081 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.089875937 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.090122938 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.090141058 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.090166092 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.090173960 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.090200901 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.090605021 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.090619087 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.090655088 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.090660095 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.090686083 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.090699911 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.091341972 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.091356993 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.091398001 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.091404915 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.091433048 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.092170000 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.092185020 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.092242002 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.092248917 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.092287064 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.093439102 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.093456984 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.093507051 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.093514919 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.093548059 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.094414949 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.094449043 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.094470978 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.094475031 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.094504118 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.094518900 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.095927954 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.095941067 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.095978022 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.095984936 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.096024036 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.096818924 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.096833944 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.096869946 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.096874952 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.096903086 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.096916914 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.098649979 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.098664999 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.098730087 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.098736048 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.098772049 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.098937988 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.098957062 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.098989964 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.098998070 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.099024057 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.101283073 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.101298094 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.101368904 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.101372957 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.101385117 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.101402044 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.101413965 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.101444960 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.101452112 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.102540970 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.102559090 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.102615118 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.102622032 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.102660894 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.103277922 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.103291988 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.103322029 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.103328943 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.103370905 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.104120016 CEST	443	49758	151.101.130.133	192.168.2.4
Apr 26, 2024 14:22:50.104441881 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.104455948 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.104496956 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.104501963 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.104537010 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.104551077 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.106112957 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.106133938 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.106168985 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.106174946 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.106237888 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.107846975 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.107861042 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.107916117 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.107920885 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.107971907 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.108915091 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.108928919 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.108969927 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.108974934 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.109004021 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.109018087 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.109029055 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.109045029 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.109071970 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.109080076 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.109103918 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.110584021 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.110599995 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.110639095 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.110651016 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.110693932 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.110702038 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.110905886 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.110924006 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.110950947 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.110958099 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.110982895 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.112567902 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.112581968 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.112622976 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.112628937 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.112653971 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.112668991 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.113033056 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.113048077 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.113092899 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.113101959 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.113125086 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.115108013 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.115122080 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.115168095 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.115175009 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.115222931 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.115956068 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.115977049 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.116020918 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.116029978 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.116046906 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.116669893 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.116683960 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.116734982 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.116740942 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.116777897 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.119782925 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.119797945 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.119836092 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.119843006 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.119895935 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.121643066 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.121656895 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.121711016 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.121716976 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.121747017 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.125202894 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.125221968 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.125269890 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.125277042 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.125319004 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.125628948 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.125643015 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.125686884 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.125693083 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.125704050 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.125730991 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.126540899 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.126554966 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.126588106 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.126595974 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.126624107 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.128078938 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.128093958 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.128145933 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.128151894 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.128192902 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.129368067 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.129384995 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.129417896 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.129425049 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.129456997 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.129993916 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.130008936 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.130057096 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.130064011 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.130100012 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.131457090 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.131470919 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.131525993 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.131531954 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.131572962 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.133023024 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.133037090 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.133091927 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.133100033 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.133625031 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.133641005 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.133682966 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.133688927 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.133713961 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.133733034 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.134948015 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.134965897 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.134998083 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.135004997 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.135047913 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.135864019 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.135876894 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.135916948 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.135925055 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.135943890 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.135993958 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.137891054 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.137911081 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.137979984 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.137985945 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.138030052 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.138148069 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.138164043 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.138206959 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.138221025 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.138240099 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.139650106 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.139664888 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.139705896 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.139727116 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.139731884 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.139738083 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.139784098 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.139795065 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.139815092 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.141398907 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.141416073 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.141465902 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.141475916 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.141566038 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.141633034 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.141647100 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.141676903 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.141688108 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.141711950 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.142353058 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.142369032 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.142405987 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.142411947 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.142438889 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.142452955 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.144439936 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.144460917 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.144566059 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.144567013 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.144597054 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.145136118 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.145150900 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.145189047 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.145195007 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.145234108 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.145253897 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.146500111 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.146526098 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.146565914 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.146570921 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.146612883 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.146667957 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.146739960 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.146800995 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.146840096 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.146909952 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.146927118 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.148535967 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.148555994 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.148596048 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.148600101 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.148637056 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.149301052 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.149326086 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.149388075 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.149452925 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.149491072 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.149553061 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.151010990 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.151025057 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.151070118 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.151076078 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.151104927 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.151123047 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.151777029 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.151792049 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.151926994 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.151926994 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.151990891 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.153048992 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.153084993 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.153105021 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.153122902 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.153160095 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.153167009 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.153208017 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.153208017 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.153228045 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.153235912 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.153256893 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.153785944 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.153855085 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.153876066 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.153883934 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.153933048 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.153942108 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.154762983 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.154776096 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.154820919 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.154838085 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.154865980 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.155386925 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.155441999 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.155453920 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.155474901 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.155497074 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.155517101 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.156661034 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.156681061 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.156723022 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.156738043 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.156765938 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.156928062 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.156972885 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.156991005 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.156999111 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.157026052 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.157053947 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.158056974 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.158107042 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.158144951 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.158145905 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.158166885 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.158185959 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.158665895 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.158713102 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.158739090 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.158746004 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.158773899 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.158787012 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.160166025 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.160212994 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.160229921 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.160237074 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.160279989 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.160667896 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.162169933 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.162220001 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.162242889 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.162250042 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.162291050 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.162403107 CEST	49755	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.162431955 CEST	443	49755	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.163487911 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.163542986 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.163566113 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.163572073 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.163655996 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.164439917 CEST	49758	443	192.168.2.4	151.101.130.133
Apr 26, 2024 14:22:50.165350914 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.165397882 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.165441990 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.165448904 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.165487051 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.166534901 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.166588068 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.166610003 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.166616917 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.166641951 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.166660070 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.168461084 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.168503046 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.168520927 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.168534040 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.168550968 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.168572903 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.169718981 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.169776917 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.169791937 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.169820070 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.169836044 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.169862032 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.171602011 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.171652079 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.171669006 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.171677113 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.171703100 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.171720982 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.172610998 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.172653913 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.174534082 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.174588919 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.175649881 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.178550959 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.178565979 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.178641081 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.178646088 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.178672075 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.178706884 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.178716898 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.178729057 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.178731918 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.178771019 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.180603027 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.180653095 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.180669069 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.180676937 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.180701017 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.180716991 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.182231903 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.182312965 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.182342052 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.182406902 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.183058977 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.183110952 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.183124065 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.183136940 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.183166981 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.183178902 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.184386015 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.184453011 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.184528112 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.184586048 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.185889959 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.185935020 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.185942888 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.185959101 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.185986996 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.186002970 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.190514088 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.190561056 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.190603971 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.190612078 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.190639973 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.190658092 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.191564083 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.191606998 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.191631079 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.191637039 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.191658974 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.191692114 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.192364931 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.192419052 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.192451000 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.192457914 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.192490101 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.192506075 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.192846060 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.192892075 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.192923069 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.192930937 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.192959070 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.192977905 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.193856955 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.193907976 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.193953991 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.193962097 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.193996906 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.194015980 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.197740078 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.197781086 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.197810888 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.197818995 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.197853088 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.197870970 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.198785067 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.198828936 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.198848009 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.198856115 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.198882103 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.198895931 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.199258089 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.199306965 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.199322939 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.199331999 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.199362993 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.199378967 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.199601889 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.199649096 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.199664116 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.199671984 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.199702024 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.199719906 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.207927942 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.207998991 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.208024025 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.208034992 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.208055973 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.208091974 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.210407972 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.210469007 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.210493088 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.210500002 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.210540056 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.210563898 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.212404966 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.212450981 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.212464094 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.212480068 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.212508917 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.212526083 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.213109970 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.213162899 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.213177919 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.213186026 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.213228941 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.214656115 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.214704990 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.214737892 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.214747906 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.214790106 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.217063904 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.217118979 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.217133999 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.217143059 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.217174053 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.217192888 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.217997074 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.218059063 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.218174934 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.218182087 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.218285084 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.218285084 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.218503952 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.218564034 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.218576908 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.218585968 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.218614101 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.218642950 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.219212055 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.219264984 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.219306946 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.219315052 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.219345093 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.219366074 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.219985962 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.220038891 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.220068932 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.220076084 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.220113993 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.220125914 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.221482992 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.221532106 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.221587896 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.221594095 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.221640110 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.227623940 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.227691889 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.227724075 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.227730989 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.227771044 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.227785110 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.227890968 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.227942944 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.227972031 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.227978945 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.228007078 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.228024960 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.228627920 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.228671074 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.228703022 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.228709936 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.228754044 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.228766918 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.229115009 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.229166985 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.229248047 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.229248047 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.229263067 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.229348898 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.233623028 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.233664989 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.233690977 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.233696938 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.233730078 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.233736992 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.267127991 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:50.363699913 CEST	49753	443	192.168.2.4	151.101.66.133
Apr 26, 2024 14:22:50.365825891 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.365899086 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.365916014 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.365930080 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.365962982 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.365978003 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.366125107 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.366168022 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.366195917 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.366203070 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.366236925 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.366255045 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.366334915 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.366389990 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.366414070 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.366420031 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.366471052 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.366550922 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.366735935 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.366777897 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.366800070 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.366806984 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.366835117 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.366847992 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.367003918 CEST	49753	443	192.168.2.4	151.101.66.133
Apr 26, 2024 14:22:50.367018938 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:50.367937088 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.368172884 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:50.368185997 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:50.368235111 CEST	49753	443	192.168.2.4	151.101.66.133
Apr 26, 2024 14:22:50.368419886 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.368465900 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.368499041 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.368505001 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.368524075 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.368545055 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.368683100 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.368729115 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.368753910 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.368761063 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.368788958 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.368807077 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.368947029 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.368990898 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.369007111 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.369014978 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.369043112 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.369060993 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.369124889 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.369165897 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.369189978 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.369205952 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.369235039 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.369255066 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.369343996 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.369405031 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.369426966 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.369436026 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.369463921 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.369477987 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.369539976 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.369580030 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.369617939 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.369623899 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.369666100 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.369712114 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.369752884 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.369798899 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.369805098 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.369827032 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.369847059 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.369977951 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.370022058 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.370053053 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.370059013 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.370084047 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.370100021 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.370157957 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.370176077 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.370210886 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.370217085 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.370240927 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.370261908 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.370280027 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.370332956 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.370352983 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.370371103 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.370388985 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.370433092 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.370493889 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.370547056 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.370636940 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.370687962 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.370712042 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.370718956 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.370740891 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.370759010 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.370820045 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.370861053 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.370894909 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.370901108 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.370924950 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.370942116 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.371087074 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.371126890 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.371153116 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.371159077 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.371191025 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.371206045 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.371260881 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.371309996 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.371337891 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.371345043 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.371371031 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.371386051 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.371439934 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.371479988 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.371503115 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.371516943 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.371532917 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.371571064 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.371679068 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.371731997 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.371757984 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.371764898 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.371798038 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.371807098 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.371865034 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.371912956 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.371942997 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.371948957 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.371973038 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.371992111 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.372040987 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.372113943 CEST	49753	443	192.168.2.4	151.101.66.133
Apr 26, 2024 14:22:50.372118950 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.372179031 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.372185946 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:50.372246027 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.372312069 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.372322083 CEST	49753	443	192.168.2.4	151.101.66.133
Apr 26, 2024 14:22:50.372328043 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:50.372355938 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.372380972 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.372387886 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.372410059 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.372425079 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.372483969 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.372524023 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.372540951 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.372548103 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.372575998 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.372592926 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.372658014 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.372698069 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.372724056 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.372730970 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.372756004 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.372781992 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.372833967 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.372893095 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.372911930 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.372919083 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.372946024 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.372965097 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.373029947 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.373070002 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.373099089 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.373105049 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.373146057 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.373146057 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.373315096 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.373362064 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.373390913 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.373397112 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.373423100 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.373434067 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.373490095 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.373544931 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.373564959 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.373572111 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.373599052 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.373611927 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.373680115 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.373718023 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.373739958 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.373747110 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.373766899 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.373795033 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.373853922 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.373894930 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.373923063 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.373934031 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.373961926 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.373970985 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.374025106 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.374066114 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.374089003 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.374095917 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.374123096 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.374164104 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.374200106 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.374269962 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.374358892 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.374430895 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.374504089 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.374547005 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.374562979 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.374571085 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.374596119 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.374614954 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.374679089 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.374727964 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.374738932 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.374752045 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.374783039 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.374802113 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.374883890 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.374923944 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.374963045 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.374970913 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.374993086 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.375005960 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.375056028 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.375097036 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.375118971 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.375125885 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.375149965 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.375163078 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.375226974 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.375277996 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.375302076 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.375308990 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.375338078 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.375350952 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.375503063 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.375556946 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.375577927 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.375585079 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.375610113 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.375639915 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.375688076 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.375729084 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.375754118 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.375761032 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.375786066 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.375801086 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.375861883 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.375902891 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.375931978 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.375937939 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.375966072 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.375977039 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.376039982 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.376087904 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.376116037 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.376132011 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.376149893 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.376173019 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.376264095 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.376303911 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.376337051 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.376343012 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.376358986 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.376377106 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.376512051 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.376560926 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.376581907 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.376589060 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.376615047 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.376637936 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.376692057 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.376732111 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.376774073 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.376779079 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.376791954 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.376811981 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.376821041 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.376835108 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.376842022 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.376874924 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.376888990 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.376899004 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.376905918 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.376935959 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.376944065 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.376955986 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.376971960 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.376986027 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.376998901 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.377002001 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.377015114 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.377036095 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.377074003 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.377077103 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.377093077 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.377110004 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.377124071 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.377140999 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.377156019 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.377165079 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.377173901 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.377192020 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.377197981 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.377209902 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.377239943 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.377270937 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.377305031 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.377306938 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.377326012 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.377326965 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.377347946 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.377362967 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.377376080 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.377402067 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.377418041 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.377428055 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.377441883 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.377468109 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.377494097 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.377501965 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.377527952 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.377568960 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.377590895 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.377624035 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.377630949 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.377650976 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.377651930 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.377675056 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.377701998 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.377710104 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.377720118 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.377736092 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.377760887 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.377793074 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.377810001 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.377818108 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.377823114 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.377845049 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.377870083 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.377876043 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.377897978 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.377907991 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.377933025 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.377955914 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.377963066 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.377983093 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.378000021 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.378020048 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.378048897 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.378060102 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.378076077 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.378088951 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.378110886 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.378134966 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.378143072 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.378165960 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.378174067 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.378194094 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.378221989 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.378235102 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.378256083 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.378257036 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.378279924 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.378302097 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.378317118 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.378331900 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.378348112 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.378367901 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.378405094 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.378422022 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.378431082 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.378432989 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.378458977 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.378482103 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.378488064 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.378519058 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.378528118 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.378550053 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.378576994 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.378582954 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.378611088 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.378659964 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.378680944 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.378716946 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.378724098 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.378731966 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.378751993 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.378777981 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.378798962 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.378804922 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.378825903 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.378844023 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.378874063 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.378902912 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.378910065 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.378926992 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.378936052 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.378957033 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.378984928 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.378990889 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.379009008 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.379028082 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.379055023 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.379076004 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.379082918 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.379107952 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.379123926 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.379149914 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.379173040 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.379179001 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.379194975 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.379209042 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.379230976 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.379257917 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.379265070 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.379281998 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.379291058 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.379296064 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.379323006 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.379350901 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.379357100 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.379390001 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.379391909 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.379410028 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.379463911 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.379470110 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.379481077 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.379497051 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.379503012 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.379534960 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.379543066 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.379565001 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.379571915 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.379595041 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.379678965 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.379698038 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.379764080 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.379770994 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.379786015 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.379806995 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.379806995 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.379837990 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.379844904 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.379865885 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.379875898 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.379895926 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.379923105 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.379930019 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.379956007 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.379961967 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.379995108 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.380018950 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.380024910 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.380063057 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.380069017 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.380091906 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.380136013 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.380143881 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.380157948 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.380168915 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.380194902 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.380219936 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.380227089 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.380249977 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.380264044 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.380290985 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.380319118 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.380326033 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.380337954 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.380357027 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.380382061 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.380407095 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.380414009 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.380431890 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.380450010 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.380475044 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.380503893 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.380511045 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.380530119 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.380541086 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.380569935 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.380608082 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.380615950 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.380635023 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.380640984 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.380666018 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.380692005 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.380698919 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.380722046 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.380759954 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.380785942 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.380814075 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.380820036 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.380846024 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.380856991 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.380877972 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.380904913 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.380911112 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.380932093 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.380939960 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.380964994 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.380989075 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.380995989 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381019115 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.381032944 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381058931 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381091118 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.381097078 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381107092 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.381129026 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381130934 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.381144047 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381166935 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381185055 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.381191015 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381217003 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.381227016 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381233931 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.381241083 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381262064 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381273985 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.381309986 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.381315947 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381326914 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381349087 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381381035 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.381387949 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381409883 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.381413937 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381433964 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.381438017 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381452084 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381469011 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.381493092 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.381515026 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381536961 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381563902 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.381572962 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381582975 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.381597996 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381609917 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.381616116 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381638050 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381658077 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.381664991 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381692886 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.381701946 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.381704092 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381724119 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381742001 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381763935 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.381771088 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381797075 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.381809950 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.381835938 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381855965 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381886005 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.381891966 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381913900 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381920099 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.381930113 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.381934881 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381949902 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.381964922 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.382004023 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.382009983 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.382019043 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.382040977 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.382045984 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.382055998 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.382075071 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.382112980 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.382122993 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.382154942 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.382178068 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.382184029 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.382195950 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.382217884 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.382226944 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.382253885 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.382282019 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.382287979 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.382313967 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.382318020 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.382332087 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.382338047 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.382349968 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.382368088 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.382404089 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.382411003 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.382421017 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.382442951 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.382446051 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.382456064 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.382476091 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.382510900 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.382514954 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.382527113 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.382543087 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.382559061 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.382565975 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.382615089 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.382639885 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.382668018 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.382674932 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.382694006 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.382707119 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.382720947 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.382726908 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.382739067 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.382766962 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.382782936 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.382787943 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.382805109 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.382827997 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.382855892 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.382863045 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.382880926 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.382910013 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.382920027 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.382947922 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.382977962 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.382983923 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383003950 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.383013010 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.383013010 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383025885 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383049965 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383070946 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.383076906 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383104086 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.383117914 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.383121967 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383136988 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383153915 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383177996 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.383183956 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383209944 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.383219957 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383224964 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.383234024 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383266926 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383275986 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.383285999 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383325100 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.383346081 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383366108 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383395910 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.383403063 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383420944 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.383428097 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383435011 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.383440971 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383455038 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383483887 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.383490086 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383516073 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.383527040 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383531094 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.383541107 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383562088 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383574009 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.383611917 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.383618116 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383627892 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383658886 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383681059 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.383687973 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383711100 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.383719921 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383737087 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.383739948 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383754969 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383769035 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.383797884 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.383811951 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383832932 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383862019 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.383869886 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383882999 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.383903980 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.383948088 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.383971930 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.384001017 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.384006977 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.384032011 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.384037018 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.384046078 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.384052038 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.384064913 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.384082079 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.384114981 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.384119987 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.384134054 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.384181976 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.384190083 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.384201050 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.384224892 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.384258032 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.384264946 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.384291887 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.384293079 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.384316921 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.384347916 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.384354115 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.384371996 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.384387970 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.384408951 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.384439945 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.384447098 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.384469986 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.384475946 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.384500980 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.384529114 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.384535074 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.384555101 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.384568930 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.384593010 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.384620905 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.384627104 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.384645939 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.384654999 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.384670973 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.384696960 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.384702921 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.384725094 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.384733915 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.384773016 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.384779930 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.384833097 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.386334896 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.388329029 CEST	443	49758	151.101.130.133	192.168.2.4
Apr 26, 2024 14:22:50.388448954 CEST	443	49758	151.101.130.133	192.168.2.4
Apr 26, 2024 14:22:50.388494968 CEST	49758	443	192.168.2.4	151.101.130.133
Apr 26, 2024 14:22:50.407634974 CEST	49758	443	192.168.2.4	151.101.130.133
Apr 26, 2024 14:22:50.407650948 CEST	443	49758	151.101.130.133	192.168.2.4
Apr 26, 2024 14:22:50.427342892 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.429757118 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.467510939 CEST	49753	443	192.168.2.4	151.101.66.133
Apr 26, 2024 14:22:50.472327948 CEST	49750	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:50.472342968 CEST	443	49750	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:50.535300016 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:50.535602093 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:50.535631895 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:50.535681009 CEST	49753	443	192.168.2.4	151.101.66.133
Apr 26, 2024 14:22:50.535695076 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:50.535703897 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:50.535742998 CEST	49753	443	192.168.2.4	151.101.66.133
Apr 26, 2024 14:22:50.536926985 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:50.539551973 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:50.539582968 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:50.539623976 CEST	49753	443	192.168.2.4	151.101.66.133
Apr 26, 2024 14:22:50.539630890 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:50.539671898 CEST	49753	443	192.168.2.4	151.101.66.133
Apr 26, 2024 14:22:50.542351961 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:50.543651104 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:50.543683052 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:50.543716908 CEST	49753	443	192.168.2.4	151.101.66.133
Apr 26, 2024 14:22:50.543723106 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:50.543759108 CEST	49753	443	192.168.2.4	151.101.66.133
Apr 26, 2024 14:22:50.545274019 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:50.545336008 CEST	49753	443	192.168.2.4	151.101.66.133
Apr 26, 2024 14:22:50.545344114 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:50.547488928 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:50.548166990 CEST	49753	443	192.168.2.4	151.101.66.133
Apr 26, 2024 14:22:50.548171997 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:50.549696922 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:50.551979065 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:50.552028894 CEST	49753	443	192.168.2.4	151.101.66.133
Apr 26, 2024 14:22:50.552035093 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:50.552094936 CEST	49753	443	192.168.2.4	151.101.66.133
Apr 26, 2024 14:22:50.554191113 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:50.556396961 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:50.556436062 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:50.556479931 CEST	49753	443	192.168.2.4	151.101.66.133
Apr 26, 2024 14:22:50.556485891 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:50.556520939 CEST	49753	443	192.168.2.4	151.101.66.133
Apr 26, 2024 14:22:50.558873892 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:50.560898066 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:50.560971022 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:50.561032057 CEST	49753	443	192.168.2.4	151.101.66.133
Apr 26, 2024 14:22:51.491255999 CEST	443	49740	172.217.3.68	192.168.2.4
Apr 26, 2024 14:22:51.491419077 CEST	443	49740	172.217.3.68	192.168.2.4
Apr 26, 2024 14:22:51.491482019 CEST	49740	443	192.168.2.4	172.217.3.68
Apr 26, 2024 14:22:52.916472912 CEST	49753	443	192.168.2.4	151.101.66.133
Apr 26, 2024 14:22:52.916507006 CEST	443	49753	151.101.66.133	192.168.2.4
Apr 26, 2024 14:22:53.070130110 CEST	49740	443	192.168.2.4	172.217.3.68
Apr 26, 2024 14:22:53.070162058 CEST	443	49740	172.217.3.68	192.168.2.4
Apr 26, 2024 14:22:53.071693897 CEST	49760	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.071738958 CEST	443	49760	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.071803093 CEST	49760	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.072253942 CEST	49760	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.072273016 CEST	443	49760	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.119543076 CEST	49761	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.119589090 CEST	443	49761	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.119637966 CEST	49761	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.120057106 CEST	49762	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.120089054 CEST	443	49762	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.120137930 CEST	49762	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.120372057 CEST	49762	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.120382071 CEST	443	49762	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.120565891 CEST	49761	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.120584011 CEST	443	49761	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.248241901 CEST	49764	443	192.168.2.4	151.101.193.21
Apr 26, 2024 14:22:53.248279095 CEST	443	49764	151.101.193.21	192.168.2.4
Apr 26, 2024 14:22:53.248343945 CEST	49764	443	192.168.2.4	151.101.193.21
Apr 26, 2024 14:22:53.248708963 CEST	49764	443	192.168.2.4	151.101.193.21
Apr 26, 2024 14:22:53.248729944 CEST	443	49764	151.101.193.21	192.168.2.4
Apr 26, 2024 14:22:53.294276953 CEST	49767	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:53.294357061 CEST	443	49767	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:53.294433117 CEST	49767	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:53.294939995 CEST	49767	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:53.294981956 CEST	443	49767	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:53.332683086 CEST	443	49760	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.332909107 CEST	49760	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.332938910 CEST	443	49760	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.333627939 CEST	443	49760	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.334249020 CEST	49760	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.334343910 CEST	443	49760	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.334464073 CEST	49760	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.376168966 CEST	443	49760	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.382726908 CEST	443	49762	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.383004904 CEST	49762	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.383018017 CEST	443	49762	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.383287907 CEST	443	49761	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.383364916 CEST	443	49762	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.383474112 CEST	49761	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.383503914 CEST	443	49761	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.383826017 CEST	49762	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.383896112 CEST	443	49762	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.383990049 CEST	49762	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.384540081 CEST	443	49761	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.384596109 CEST	49761	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.384895086 CEST	49761	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.384953022 CEST	443	49761	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.384990931 CEST	49761	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.424118042 CEST	443	49762	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.432132959 CEST	443	49761	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.469810009 CEST	49761	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.469820023 CEST	443	49761	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.528136969 CEST	443	49764	151.101.193.21	192.168.2.4
Apr 26, 2024 14:22:53.529114008 CEST	49764	443	192.168.2.4	151.101.193.21
Apr 26, 2024 14:22:53.529150963 CEST	443	49764	151.101.193.21	192.168.2.4
Apr 26, 2024 14:22:53.529551029 CEST	443	49764	151.101.193.21	192.168.2.4
Apr 26, 2024 14:22:53.529614925 CEST	49764	443	192.168.2.4	151.101.193.21
Apr 26, 2024 14:22:53.530267000 CEST	443	49764	151.101.193.21	192.168.2.4
Apr 26, 2024 14:22:53.530313015 CEST	49764	443	192.168.2.4	151.101.193.21
Apr 26, 2024 14:22:53.532224894 CEST	49764	443	192.168.2.4	151.101.193.21
Apr 26, 2024 14:22:53.532304049 CEST	443	49764	151.101.193.21	192.168.2.4
Apr 26, 2024 14:22:53.532439947 CEST	49764	443	192.168.2.4	151.101.193.21
Apr 26, 2024 14:22:53.532452106 CEST	443	49764	151.101.193.21	192.168.2.4
Apr 26, 2024 14:22:53.571491957 CEST	49723	80	192.168.2.4	23.55.103.43
Apr 26, 2024 14:22:53.657710075 CEST	443	49760	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.657896042 CEST	443	49760	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.657962084 CEST	49760	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.658296108 CEST	49760	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.658313036 CEST	443	49760	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.658322096 CEST	49760	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.658484936 CEST	49760	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.660156965 CEST	49761	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.660372019 CEST	49764	443	192.168.2.4	151.101.193.21
Apr 26, 2024 14:22:53.661483049 CEST	49769	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.661510944 CEST	443	49769	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.661889076 CEST	49769	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.662933111 CEST	49769	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.662945032 CEST	443	49769	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.689831018 CEST	443	49761	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.689851046 CEST	443	49761	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.689883947 CEST	49761	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.689896107 CEST	443	49761	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.690296888 CEST	443	49761	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.690337896 CEST	49761	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.690361023 CEST	49761	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.690368891 CEST	443	49761	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.697124004 CEST	443	49762	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.697144985 CEST	443	49762	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.697179079 CEST	443	49762	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.697204113 CEST	49762	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.697206974 CEST	443	49762	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.697247982 CEST	49762	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.698304892 CEST	49762	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.698328018 CEST	443	49762	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.718657017 CEST	443	49767	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:53.719023943 CEST	49767	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:53.719085932 CEST	443	49767	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:53.720143080 CEST	443	49767	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:53.720242023 CEST	49767	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:53.720561028 CEST	49767	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:53.720654011 CEST	443	49767	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:53.720680952 CEST	49767	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:53.764118910 CEST	443	49767	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:53.771342039 CEST	49767	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:53.771399975 CEST	443	49767	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:53.802814007 CEST	443	49764	151.101.193.21	192.168.2.4
Apr 26, 2024 14:22:53.842490911 CEST	80	49723	23.55.103.43	192.168.2.4
Apr 26, 2024 14:22:53.842552900 CEST	49723	80	192.168.2.4	23.55.103.43
Apr 26, 2024 14:22:53.875468969 CEST	443	49767	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:53.875705957 CEST	49767	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:53.876041889 CEST	49767	443	192.168.2.4	151.101.2.133
Apr 26, 2024 14:22:53.876081944 CEST	443	49767	151.101.2.133	192.168.2.4
Apr 26, 2024 14:22:53.958858967 CEST	49764	443	192.168.2.4	151.101.193.21
Apr 26, 2024 14:22:53.958889961 CEST	443	49764	151.101.193.21	192.168.2.4
Apr 26, 2024 14:22:53.964906931 CEST	443	49769	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.965131044 CEST	49769	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.965146065 CEST	443	49769	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.966614008 CEST	443	49769	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.966957092 CEST	49769	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.967094898 CEST	49769	443	192.168.2.4	52.84.150.50
Apr 26, 2024 14:22:53.967099905 CEST	443	49769	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:53.967142105 CEST	443	49769	52.84.150.50	192.168.2.4
Apr 26, 2024 14:22:54.066725969 CEST	49764	443	192.168.2.4	151.101.193.21
Apr 26, 2024 14:22:54.066734076 CEST	49769	443	192.168.2.4	52.84.150.50

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 26, 2024 14:22:39.732095003 CEST	192.168.2.4	1.1.1.1	0xb39d	Standard query (0)	us-west-2.protection.sophos.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:39.732367992 CEST	192.168.2.4	1.1.1.1	0x5481	Standard query (0)	us-west-2.protection.sophos.com	65	IN (0x0001)	false
Apr 26, 2024 14:22:40.783032894 CEST	192.168.2.4	1.1.1.1	0x6b1b	Standard query (0)	venmo.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:40.783261061 CEST	192.168.2.4	1.1.1.1	0x5ed1	Standard query (0)	venmo.com	65	IN (0x0001)	false
Apr 26, 2024 14:22:41.036284924 CEST	192.168.2.4	1.1.1.1	0x5bec	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:41.036503077 CEST	192.168.2.4	1.1.1.1	0x8b2e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 14:22:41.736104965 CEST	192.168.2.4	1.1.1.1	0x686c	Standard query (0)	account.venmo.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:41.736409903 CEST	192.168.2.4	1.1.1.1	0xe24	Standard query (0)	account.venmo.com	65	IN (0x0001)	false
Apr 26, 2024 14:22:43.313091993 CEST	192.168.2.4	1.1.1.1	0xa12f	Standard query (0)	account.venmo.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:43.313345909 CEST	192.168.2.4	1.1.1.1	0x7aeb	Standard query (0)	account.venmo.com	65	IN (0x0001)	false
Apr 26, 2024 14:22:43.902172089 CEST	192.168.2.4	1.1.1.1	0xfea1	Standard query (0)	account.venmo.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:43.902328014 CEST	192.168.2.4	1.1.1.1	0xd2d6	Standard query (0)	account.venmo.com	65	IN (0x0001)	false
Apr 26, 2024 14:22:45.250085115 CEST	192.168.2.4	1.1.1.1	0xde9f	Standard query (0)	jssdkcdns.mparticle.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:45.250691891 CEST	192.168.2.4	1.1.1.1	0x8af2	Standard query (0)	jssdkcdns.mparticle.com	65	IN (0x0001)	false
Apr 26, 2024 14:22:48.580362082 CEST	192.168.2.4	1.1.1.1	0x6eae	Standard query (0)	www.paypalobjects.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:48.581470966 CEST	192.168.2.4	1.1.1.1	0x294b	Standard query (0)	www.paypalobjects.com	65	IN (0x0001)	false
Apr 26, 2024 14:22:48.889780998 CEST	192.168.2.4	1.1.1.1	0x637b	Standard query (0)	identity.mparticle.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:48.894229889 CEST	192.168.2.4	1.1.1.1	0x63e	Standard query (0)	identity.mparticle.com	65	IN (0x0001)	false
Apr 26, 2024 14:22:53.070646048 CEST	192.168.2.4	1.1.1.1	0xf1bc	Standard query (0)	cdn.optimizely.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:53.071064949 CEST	192.168.2.4	1.1.1.1	0xd377	Standard query (0)	cdn.optimizely.com	65	IN (0x0001)	false
Apr 26, 2024 14:22:53.118019104 CEST	192.168.2.4	1.1.1.1	0x8c78	Standard query (0)	c.paypal.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:53.118180990 CEST	192.168.2.4	1.1.1.1	0x690c	Standard query (0)	c.paypal.com	65	IN (0x0001)	false
Apr 26, 2024 14:22:53.165442944 CEST	192.168.2.4	1.1.1.1	0xa5b	Standard query (0)	identity.mparticle.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:53.165617943 CEST	192.168.2.4	1.1.1.1	0x35c1	Standard query (0)	identity.mparticle.com	65	IN (0x0001)	false
Apr 26, 2024 14:22:53.663378000 CEST	192.168.2.4	1.1.1.1	0x6b41	Standard query (0)	account.venmo.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:53.663516045 CEST	192.168.2.4	1.1.1.1	0xd0cd	Standard query (0)	account.venmo.com	65	IN (0x0001)	false
Apr 26, 2024 14:22:54.170847893 CEST	192.168.2.4	1.1.1.1	0x863c	Standard query (0)	c.paypal.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:54.171519995 CEST	192.168.2.4	1.1.1.1	0x1b8e	Standard query (0)	c.paypal.com	65	IN (0x0001)	false
Apr 26, 2024 14:22:54.180982113 CEST	192.168.2.4	1.1.1.1	0xd30	Standard query (0)	c6.paypal.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:54.181207895 CEST	192.168.2.4	1.1.1.1	0xf7cf	Standard query (0)	c6.paypal.com	65	IN (0x0001)	false
Apr 26, 2024 14:22:54.188268900 CEST	192.168.2.4	1.1.1.1	0xf8e1	Standard query (0)	b.stats.paypal.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:54.188631058 CEST	192.168.2.4	1.1.1.1	0xb7c0	Standard query (0)	b.stats.paypal.com	65	IN (0x0001)	false
Apr 26, 2024 14:22:54.533999920 CEST	192.168.2.4	1.1.1.1	0xe522	Standard query (0)	cdn.optimizely.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:54.534138918 CEST	192.168.2.4	1.1.1.1	0xea1e	Standard query (0)	cdn.optimizely.com	65	IN (0x0001)	false
Apr 26, 2024 14:22:54.679913044 CEST	192.168.2.4	1.1.1.1	0xde12	Standard query (0)	www.paypal.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:54.680155039 CEST	192.168.2.4	1.1.1.1	0x9474	Standard query (0)	www.paypal.com	65	IN (0x0001)	false
Apr 26, 2024 14:22:55.030071020 CEST	192.168.2.4	1.1.1.1	0x6357	Standard query (0)	c6.paypal.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:55.030356884 CEST	192.168.2.4	1.1.1.1	0x8d5c	Standard query (0)	c6.paypal.com	65	IN (0x0001)	false
Apr 26, 2024 14:22:56.404881001 CEST	192.168.2.4	1.1.1.1	0xeee4	Standard query (0)	account.venmo.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:56.676120043 CEST	192.168.2.4	1.1.1.1	0x3179	Standard query (0)	lvs.stats.paypal.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:56.676265955 CEST	192.168.2.4	1.1.1.1	0x509b	Standard query (0)	lvs.stats.paypal.com	65	IN (0x0001)	false
Apr 26, 2024 14:22:57.498161077 CEST	192.168.2.4	1.1.1.1	0x369	Standard query (0)	venmo.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:57.498161077 CEST	192.168.2.4	1.1.1.1	0x669d	Standard query (0)	venmo.com	65	IN (0x0001)	false
Apr 26, 2024 14:22:57.519299030 CEST	192.168.2.4	1.1.1.1	0x983a	Standard query (0)	t.paypal.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:57.519536972 CEST	192.168.2.4	1.1.1.1	0x1a1f	Standard query (0)	t.paypal.com	65	IN (0x0001)	false
Apr 26, 2024 14:22:57.654515982 CEST	192.168.2.4	1.1.1.1	0xf303	Standard query (0)	www.paypal.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:57.654773951 CEST	192.168.2.4	1.1.1.1	0x6329	Standard query (0)	www.paypal.com	65	IN (0x0001)	false
Apr 26, 2024 14:22:57.816586018 CEST	192.168.2.4	1.1.1.1	0x4a35	Standard query (0)	c.paypal.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:57.816787004 CEST	192.168.2.4	1.1.1.1	0x6fdf	Standard query (0)	c.paypal.com	65	IN (0x0001)	false
Apr 26, 2024 14:22:58.290410042 CEST	192.168.2.4	1.1.1.1	0xe527	Standard query (0)	t.paypal.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:58.290694952 CEST	192.168.2.4	1.1.1.1	0x430f	Standard query (0)	t.paypal.com	65	IN (0x0001)	false
Apr 26, 2024 14:22:58.722554922 CEST	192.168.2.4	1.1.1.1	0x22c2	Standard query (0)	lvs.stats.paypal.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:58.722893953 CEST	192.168.2.4	1.1.1.1	0xb62a	Standard query (0)	lvs.stats.paypal.com	65	IN (0x0001)	false
Apr 26, 2024 14:23:00.533837080 CEST	192.168.2.4	1.1.1.1	0xe586	Standard query (0)	jssdks.mparticle.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:00.534146070 CEST	192.168.2.4	1.1.1.1	0x8c5b	Standard query (0)	jssdks.mparticle.com	65	IN (0x0001)	false
Apr 26, 2024 14:23:01.247086048 CEST	192.168.2.4	1.1.1.1	0x1e80	Standard query (0)	id.venmo.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:01.247235060 CEST	192.168.2.4	1.1.1.1	0xa388	Standard query (0)	id.venmo.com	65	IN (0x0001)	false
Apr 26, 2024 14:23:09.639645100 CEST	192.168.2.4	1.1.1.1	0x51ed	Standard query (0)	id.venmo.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:09.640144110 CEST	192.168.2.4	1.1.1.1	0x5f86	Standard query (0)	id.venmo.com	65	IN (0x0001)	false
Apr 26, 2024 14:23:16.993200064 CEST	192.168.2.4	1.1.1.1	0x1ef5	Standard query (0)	www.paypalobjects.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:16.993926048 CEST	192.168.2.4	1.1.1.1	0xe8d	Standard query (0)	www.paypalobjects.com	65	IN (0x0001)	false
Apr 26, 2024 14:23:17.474529028 CEST	192.168.2.4	1.1.1.1	0x65af	Standard query (0)	www.recaptcha.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:17.474802017 CEST	192.168.2.4	1.1.1.1	0x6347	Standard query (0)	www.recaptcha.net	65	IN (0x0001)	false
Apr 26, 2024 14:23:22.453315973 CEST	192.168.2.4	1.1.1.1	0xdd7f	Standard query (0)	www.recaptcha.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:22.453511953 CEST	192.168.2.4	1.1.1.1	0xf8e2	Standard query (0)	www.recaptcha.net	65	IN (0x0001)	false
Apr 26, 2024 14:23:30.590300083 CEST	192.168.2.4	1.1.1.1	0x737d	Standard query (0)	help.venmo.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:30.590501070 CEST	192.168.2.4	1.1.1.1	0x571	Standard query (0)	help.venmo.com	65	IN (0x0001)	false
Apr 26, 2024 14:23:31.582658052 CEST	192.168.2.4	1.1.1.1	0x3d67	Standard query (0)	static.zdassets.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:31.582910061 CEST	192.168.2.4	1.1.1.1	0xd7c3	Standard query (0)	static.zdassets.com	65	IN (0x0001)	false
Apr 26, 2024 14:23:31.583503962 CEST	192.168.2.4	1.1.1.1	0x8eee	Standard query (0)	p19.zdassets.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:31.583678007 CEST	192.168.2.4	1.1.1.1	0x3d4	Standard query (0)	p19.zdassets.com	65	IN (0x0001)	false
Apr 26, 2024 14:23:31.585681915 CEST	192.168.2.4	1.1.1.1	0x9db2	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:31.585903883 CEST	192.168.2.4	1.1.1.1	0x7d44	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Apr 26, 2024 14:23:34.209223032 CEST	192.168.2.4	1.1.1.1	0x6db0	Standard query (0)	static.zdassets.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:34.209940910 CEST	192.168.2.4	1.1.1.1	0xe184	Standard query (0)	static.zdassets.com	65	IN (0x0001)	false
Apr 26, 2024 14:23:34.210139990 CEST	192.168.2.4	1.1.1.1	0x2f7f	Standard query (0)	p19.zdassets.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:34.210261106 CEST	192.168.2.4	1.1.1.1	0x7	Standard query (0)	p19.zdassets.com	65	IN (0x0001)	false
Apr 26, 2024 14:23:34.210511923 CEST	192.168.2.4	1.1.1.1	0x848f	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:34.210681915 CEST	192.168.2.4	1.1.1.1	0xe67b	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Apr 26, 2024 14:23:35.148531914 CEST	192.168.2.4	1.1.1.1	0x19df	Standard query (0)	theme.zdassets.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:35.148978949 CEST	192.168.2.4	1.1.1.1	0x65a0	Standard query (0)	theme.zdassets.com	65	IN (0x0001)	false
Apr 26, 2024 14:23:35.150069952 CEST	192.168.2.4	1.1.1.1	0x383f	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:35.150468111 CEST	192.168.2.4	1.1.1.1	0xb312	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Apr 26, 2024 14:23:35.966209888 CEST	192.168.2.4	1.1.1.1	0xb72b	Standard query (0)	theme.zdassets.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:35.966367960 CEST	192.168.2.4	1.1.1.1	0x33ad	Standard query (0)	theme.zdassets.com	65	IN (0x0001)	false
Apr 26, 2024 14:23:35.971560955 CEST	192.168.2.4	1.1.1.1	0x81bd	Standard query (0)	images.ctfassets.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:35.971560955 CEST	192.168.2.4	1.1.1.1	0xdb87	Standard query (0)	images.ctfassets.net	65	IN (0x0001)	false
Apr 26, 2024 14:23:36.631272078 CEST	192.168.2.4	1.1.1.1	0x6a31	Standard query (0)	www.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:36.631637096 CEST	192.168.2.4	1.1.1.1	0xa537	Standard query (0)	www.cloudflare.com	65	IN (0x0001)	false
Apr 26, 2024 14:23:36.794984102 CEST	192.168.2.4	1.1.1.1	0x7240	Standard query (0)	images.ctfassets.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:36.795461893 CEST	192.168.2.4	1.1.1.1	0x4b23	Standard query (0)	images.ctfassets.net	65	IN (0x0001)	false
Apr 26, 2024 14:23:39.989511013 CEST	192.168.2.4	1.1.1.1	0x7b1f	Standard query (0)	www.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:39.989747047 CEST	192.168.2.4	1.1.1.1	0x932b	Standard query (0)	www.cloudflare.com	65	IN (0x0001)	false
Apr 26, 2024 14:23:40.403249025 CEST	192.168.2.4	1.1.1.1	0x217f	Standard query (0)	venmo.zendesk.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:40.403856039 CEST	192.168.2.4	1.1.1.1	0x5cf9	Standard query (0)	venmo.zendesk.com	65	IN (0x0001)	false
Apr 26, 2024 14:23:45.096874952 CEST	192.168.2.4	1.1.1.1	0x8ad7	Standard query (0)	help.venmo.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:45.097419024 CEST	192.168.2.4	1.1.1.1	0x5e77	Standard query (0)	help.venmo.com	65	IN (0x0001)	false
Apr 26, 2024 14:23:46.902168989 CEST	192.168.2.4	1.1.1.1	0xbf93	Standard query (0)	www.paypal.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:46.902426004 CEST	192.168.2.4	1.1.1.1	0xfe80	Standard query (0)	www.paypal.com	65	IN (0x0001)	false
Apr 26, 2024 14:23:48.247391939 CEST	192.168.2.4	1.1.1.1	0xfd06	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:48.248032093 CEST	192.168.2.4	1.1.1.1	0x9a1	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Apr 26, 2024 14:23:48.706507921 CEST	192.168.2.4	1.1.1.1	0xd203	Standard query (0)	www.paypalobjects.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:48.706805944 CEST	192.168.2.4	1.1.1.1	0x828a	Standard query (0)	www.paypalobjects.com	65	IN (0x0001)	false
Apr 26, 2024 14:23:56.793200970 CEST	192.168.2.4	1.1.1.1	0xf1	Standard query (0)	t.paypal.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:56.793380976 CEST	192.168.2.4	1.1.1.1	0xd9a7	Standard query (0)	t.paypal.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 26, 2024 14:22:39.862484932 CEST	1.1.1.1	192.168.2.4	0x5481	No error (0)	us-west-2.protection.sophos.com	d2t07dpvw9bt1v.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:39.862919092 CEST	1.1.1.1	192.168.2.4	0xb39d	No error (0)	us-west-2.protection.sophos.com	d2t07dpvw9bt1v.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:39.862919092 CEST	1.1.1.1	192.168.2.4	0xb39d	No error (0)	d2t07dpvw9bt1v.cloudfront.net		99.84.252.16	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:39.862919092 CEST	1.1.1.1	192.168.2.4	0xb39d	No error (0)	d2t07dpvw9bt1v.cloudfront.net		99.84.252.127	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:39.862919092 CEST	1.1.1.1	192.168.2.4	0xb39d	No error (0)	d2t07dpvw9bt1v.cloudfront.net		99.84.252.10	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:39.862919092 CEST	1.1.1.1	192.168.2.4	0xb39d	No error (0)	d2t07dpvw9bt1v.cloudfront.net		99.84.252.113	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:40.924684048 CEST	1.1.1.1	192.168.2.4	0x6b1b	No error (0)	venmo.com		52.84.150.50	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:40.924684048 CEST	1.1.1.1	192.168.2.4	0x6b1b	No error (0)	venmo.com		52.84.150.34	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:40.924684048 CEST	1.1.1.1	192.168.2.4	0x6b1b	No error (0)	venmo.com		52.84.150.38	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:40.924684048 CEST	1.1.1.1	192.168.2.4	0x6b1b	No error (0)	venmo.com		52.84.150.58	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:41.161061049 CEST	1.1.1.1	192.168.2.4	0x5bec	No error (0)	www.google.com		172.217.3.68	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:41.162259102 CEST	1.1.1.1	192.168.2.4	0x8b2e	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 14:22:41.893608093 CEST	1.1.1.1	192.168.2.4	0x686c	No error (0)	account.venmo.com		52.84.150.50	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:41.893608093 CEST	1.1.1.1	192.168.2.4	0x686c	No error (0)	account.venmo.com		52.84.150.58	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:41.893608093 CEST	1.1.1.1	192.168.2.4	0x686c	No error (0)	account.venmo.com		52.84.150.34	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:41.893608093 CEST	1.1.1.1	192.168.2.4	0x686c	No error (0)	account.venmo.com		52.84.150.38	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:43.457159996 CEST	1.1.1.1	192.168.2.4	0xa12f	No error (0)	account.venmo.com		52.84.150.38	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:43.457159996 CEST	1.1.1.1	192.168.2.4	0xa12f	No error (0)	account.venmo.com		52.84.150.58	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:43.457159996 CEST	1.1.1.1	192.168.2.4	0xa12f	No error (0)	account.venmo.com		52.84.150.50	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:43.457159996 CEST	1.1.1.1	192.168.2.4	0xa12f	No error (0)	account.venmo.com		52.84.150.34	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:44.042196989 CEST	1.1.1.1	192.168.2.4	0xfea1	No error (0)	account.venmo.com		52.84.150.50	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:44.042196989 CEST	1.1.1.1	192.168.2.4	0xfea1	No error (0)	account.venmo.com		52.84.150.38	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:44.042196989 CEST	1.1.1.1	192.168.2.4	0xfea1	No error (0)	account.venmo.com		52.84.150.58	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:44.042196989 CEST	1.1.1.1	192.168.2.4	0xfea1	No error (0)	account.venmo.com		52.84.150.34	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:45.384413958 CEST	1.1.1.1	192.168.2.4	0xde9f	No error (0)	jssdkcdns.mparticle.com		151.101.2.133	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:45.384413958 CEST	1.1.1.1	192.168.2.4	0xde9f	No error (0)	jssdkcdns.mparticle.com		151.101.194.133	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:45.384413958 CEST	1.1.1.1	192.168.2.4	0xde9f	No error (0)	jssdkcdns.mparticle.com		151.101.66.133	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:45.384413958 CEST	1.1.1.1	192.168.2.4	0xde9f	No error (0)	jssdkcdns.mparticle.com		151.101.130.133	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:48.706571102 CEST	1.1.1.1	192.168.2.4	0x6eae	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:48.706571102 CEST	1.1.1.1	192.168.2.4	0x6eae	No error (0)	ppo.glb.paypal.com	paypal.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:48.706571102 CEST	1.1.1.1	192.168.2.4	0x6eae	No error (0)	paypal.map.fastly.net		151.101.66.133	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:48.706571102 CEST	1.1.1.1	192.168.2.4	0x6eae	No error (0)	paypal.map.fastly.net		151.101.130.133	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:48.706571102 CEST	1.1.1.1	192.168.2.4	0x6eae	No error (0)	paypal.map.fastly.net		151.101.2.133	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:48.706571102 CEST	1.1.1.1	192.168.2.4	0x6eae	No error (0)	paypal.map.fastly.net		151.101.194.133	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:48.707016945 CEST	1.1.1.1	192.168.2.4	0x294b	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:48.707016945 CEST	1.1.1.1	192.168.2.4	0x294b	No error (0)	ppo.glb.paypal.com	cs1150.wpc.betacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:49.015244961 CEST	1.1.1.1	192.168.2.4	0x637b	No error (0)	identity.mparticle.com	mparticle.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:49.015244961 CEST	1.1.1.1	192.168.2.4	0x637b	No error (0)	mparticle.map.fastly.net		151.101.130.133	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:49.015244961 CEST	1.1.1.1	192.168.2.4	0x637b	No error (0)	mparticle.map.fastly.net		151.101.66.133	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:49.015244961 CEST	1.1.1.1	192.168.2.4	0x637b	No error (0)	mparticle.map.fastly.net		151.101.2.133	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:49.015244961 CEST	1.1.1.1	192.168.2.4	0x637b	No error (0)	mparticle.map.fastly.net		151.101.194.133	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:49.019768000 CEST	1.1.1.1	192.168.2.4	0x63e	No error (0)	identity.mparticle.com	mparticle.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:53.196641922 CEST	1.1.1.1	192.168.2.4	0xf1bc	No error (0)	cdn.optimizely.com	cdn.o6.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:53.197141886 CEST	1.1.1.1	192.168.2.4	0xd377	No error (0)	cdn.optimizely.com	cdn.o6.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:53.247637033 CEST	1.1.1.1	192.168.2.4	0x8c78	No error (0)	c.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:53.247637033 CEST	1.1.1.1	192.168.2.4	0x8c78	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:53.247637033 CEST	1.1.1.1	192.168.2.4	0x8c78	No error (0)	paypal-dynamic.map.fastly.net		151.101.193.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:53.247637033 CEST	1.1.1.1	192.168.2.4	0x8c78	No error (0)	paypal-dynamic.map.fastly.net		151.101.1.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:53.247637033 CEST	1.1.1.1	192.168.2.4	0x8c78	No error (0)	paypal-dynamic.map.fastly.net		151.101.129.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:53.247637033 CEST	1.1.1.1	192.168.2.4	0x8c78	No error (0)	paypal-dynamic.map.fastly.net		151.101.65.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:53.247656107 CEST	1.1.1.1	192.168.2.4	0x690c	No error (0)	c.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:53.247656107 CEST	1.1.1.1	192.168.2.4	0x690c	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:53.273797989 CEST	1.1.1.1	192.168.2.4	0x580a	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:53.273797989 CEST	1.1.1.1	192.168.2.4	0x580a	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:53.291712046 CEST	1.1.1.1	192.168.2.4	0xa5b	No error (0)	identity.mparticle.com	mparticle.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:53.291712046 CEST	1.1.1.1	192.168.2.4	0xa5b	No error (0)	mparticle.map.fastly.net		151.101.2.133	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:53.291712046 CEST	1.1.1.1	192.168.2.4	0xa5b	No error (0)	mparticle.map.fastly.net		151.101.194.133	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:53.291712046 CEST	1.1.1.1	192.168.2.4	0xa5b	No error (0)	mparticle.map.fastly.net		151.101.130.133	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:53.291712046 CEST	1.1.1.1	192.168.2.4	0xa5b	No error (0)	mparticle.map.fastly.net		151.101.66.133	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:53.291743040 CEST	1.1.1.1	192.168.2.4	0x35c1	No error (0)	identity.mparticle.com	mparticle.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:54.297167063 CEST	1.1.1.1	192.168.2.4	0x863c	No error (0)	c.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:54.297167063 CEST	1.1.1.1	192.168.2.4	0x863c	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:54.297167063 CEST	1.1.1.1	192.168.2.4	0x863c	No error (0)	paypal-dynamic.map.fastly.net		151.101.193.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:54.297167063 CEST	1.1.1.1	192.168.2.4	0x863c	No error (0)	paypal-dynamic.map.fastly.net		151.101.129.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:54.297167063 CEST	1.1.1.1	192.168.2.4	0x863c	No error (0)	paypal-dynamic.map.fastly.net		151.101.1.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:54.297167063 CEST	1.1.1.1	192.168.2.4	0x863c	No error (0)	paypal-dynamic.map.fastly.net		151.101.65.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:54.297852039 CEST	1.1.1.1	192.168.2.4	0x1b8e	No error (0)	c.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:54.297852039 CEST	1.1.1.1	192.168.2.4	0x1b8e	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:54.306478024 CEST	1.1.1.1	192.168.2.4	0xd30	No error (0)	c6.paypal.com	c6.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:54.306478024 CEST	1.1.1.1	192.168.2.4	0xd30	No error (0)	c6.glb.paypal.com	dualstack.paypal-dynamic-2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:54.306478024 CEST	1.1.1.1	192.168.2.4	0xd30	No error (0)	dualstack.paypal-dynamic-2.map.fastly.net		151.101.193.35	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:54.306478024 CEST	1.1.1.1	192.168.2.4	0xd30	No error (0)	dualstack.paypal-dynamic-2.map.fastly.net		151.101.65.35	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:54.306478024 CEST	1.1.1.1	192.168.2.4	0xd30	No error (0)	dualstack.paypal-dynamic-2.map.fastly.net		151.101.129.35	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:54.306478024 CEST	1.1.1.1	192.168.2.4	0xd30	No error (0)	dualstack.paypal-dynamic-2.map.fastly.net		151.101.1.35	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:54.306626081 CEST	1.1.1.1	192.168.2.4	0xf7cf	No error (0)	c6.paypal.com	c6.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:54.306626081 CEST	1.1.1.1	192.168.2.4	0xf7cf	No error (0)	c6.glb.paypal.com	dualstack.paypal-dynamic-2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:54.314583063 CEST	1.1.1.1	192.168.2.4	0xf8e1	No error (0)	b.stats.paypal.com	stats.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:54.314583063 CEST	1.1.1.1	192.168.2.4	0xf8e1	No error (0)	stats.glb.paypal.com		35.235.122.5	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:54.314794064 CEST	1.1.1.1	192.168.2.4	0xb7c0	No error (0)	b.stats.paypal.com	stats.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:54.466573000 CEST	1.1.1.1	192.168.2.4	0x1d8c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:54.466573000 CEST	1.1.1.1	192.168.2.4	0x1d8c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:54.659117937 CEST	1.1.1.1	192.168.2.4	0xea1e	No error (0)	cdn.optimizely.com	cdn.o6.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:54.659219027 CEST	1.1.1.1	192.168.2.4	0xe522	No error (0)	cdn.optimizely.com	cdn.o6.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:54.808605909 CEST	1.1.1.1	192.168.2.4	0xde12	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:54.808605909 CEST	1.1.1.1	192.168.2.4	0xde12	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:54.808605909 CEST	1.1.1.1	192.168.2.4	0xde12	No error (0)	paypal-dynamic.map.fastly.net		151.101.193.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:54.808605909 CEST	1.1.1.1	192.168.2.4	0xde12	No error (0)	paypal-dynamic.map.fastly.net		151.101.129.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:54.808605909 CEST	1.1.1.1	192.168.2.4	0xde12	No error (0)	paypal-dynamic.map.fastly.net		151.101.65.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:54.808605909 CEST	1.1.1.1	192.168.2.4	0xde12	No error (0)	paypal-dynamic.map.fastly.net		151.101.1.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:54.808723927 CEST	1.1.1.1	192.168.2.4	0x9474	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:54.808723927 CEST	1.1.1.1	192.168.2.4	0x9474	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:55.157254934 CEST	1.1.1.1	192.168.2.4	0x6357	No error (0)	c6.paypal.com	c6.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:55.157254934 CEST	1.1.1.1	192.168.2.4	0x6357	No error (0)	c6.glb.paypal.com	dualstack.paypal-dynamic-2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:55.157254934 CEST	1.1.1.1	192.168.2.4	0x6357	No error (0)	dualstack.paypal-dynamic-2.map.fastly.net		151.101.193.35	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:55.157254934 CEST	1.1.1.1	192.168.2.4	0x6357	No error (0)	dualstack.paypal-dynamic-2.map.fastly.net		151.101.129.35	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:55.157254934 CEST	1.1.1.1	192.168.2.4	0x6357	No error (0)	dualstack.paypal-dynamic-2.map.fastly.net		151.101.65.35	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:55.157254934 CEST	1.1.1.1	192.168.2.4	0x6357	No error (0)	dualstack.paypal-dynamic-2.map.fastly.net		151.101.1.35	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:55.158732891 CEST	1.1.1.1	192.168.2.4	0x8d5c	No error (0)	c6.paypal.com	c6.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:55.158732891 CEST	1.1.1.1	192.168.2.4	0x8d5c	No error (0)	c6.glb.paypal.com	dualstack.paypal-dynamic-2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:56.545032978 CEST	1.1.1.1	192.168.2.4	0xeee4	No error (0)	account.venmo.com		52.84.150.50	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:56.545032978 CEST	1.1.1.1	192.168.2.4	0xeee4	No error (0)	account.venmo.com		52.84.150.38	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:56.545032978 CEST	1.1.1.1	192.168.2.4	0xeee4	No error (0)	account.venmo.com		52.84.150.34	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:56.545032978 CEST	1.1.1.1	192.168.2.4	0xeee4	No error (0)	account.venmo.com		52.84.150.58	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:56.801635027 CEST	1.1.1.1	192.168.2.4	0x3179	No error (0)	lvs.stats.paypal.com		35.235.122.5	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:57.623981953 CEST	1.1.1.1	192.168.2.4	0x369	No error (0)	venmo.com		52.84.150.38	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:57.623981953 CEST	1.1.1.1	192.168.2.4	0x369	No error (0)	venmo.com		52.84.150.58	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:57.623981953 CEST	1.1.1.1	192.168.2.4	0x369	No error (0)	venmo.com		52.84.150.50	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:57.623981953 CEST	1.1.1.1	192.168.2.4	0x369	No error (0)	venmo.com		52.84.150.34	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:57.645687103 CEST	1.1.1.1	192.168.2.4	0x983a	No error (0)	t.paypal.com	t.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:57.645687103 CEST	1.1.1.1	192.168.2.4	0x983a	No error (0)	t.glb.paypal.com	paypal-dynamic-2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:57.645687103 CEST	1.1.1.1	192.168.2.4	0x983a	No error (0)	paypal-dynamic-2.map.fastly.net		151.101.1.35	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:57.645687103 CEST	1.1.1.1	192.168.2.4	0x983a	No error (0)	paypal-dynamic-2.map.fastly.net		151.101.65.35	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:57.645687103 CEST	1.1.1.1	192.168.2.4	0x983a	No error (0)	paypal-dynamic-2.map.fastly.net		151.101.129.35	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:57.645687103 CEST	1.1.1.1	192.168.2.4	0x983a	No error (0)	paypal-dynamic-2.map.fastly.net		151.101.193.35	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:57.645719051 CEST	1.1.1.1	192.168.2.4	0x1a1f	No error (0)	t.paypal.com	t.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:57.645719051 CEST	1.1.1.1	192.168.2.4	0x1a1f	No error (0)	t.glb.paypal.com	paypal-dynamic-2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:57.784616947 CEST	1.1.1.1	192.168.2.4	0x6329	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:57.784616947 CEST	1.1.1.1	192.168.2.4	0x6329	No error (0)	www.glb.paypal.com	cs1150.wpc.betacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:57.785832882 CEST	1.1.1.1	192.168.2.4	0xf303	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:57.785832882 CEST	1.1.1.1	192.168.2.4	0xf303	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:57.785832882 CEST	1.1.1.1	192.168.2.4	0xf303	No error (0)	paypal-dynamic.map.fastly.net		151.101.129.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:57.785832882 CEST	1.1.1.1	192.168.2.4	0xf303	No error (0)	paypal-dynamic.map.fastly.net		151.101.65.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:57.785832882 CEST	1.1.1.1	192.168.2.4	0xf303	No error (0)	paypal-dynamic.map.fastly.net		151.101.193.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:57.785832882 CEST	1.1.1.1	192.168.2.4	0xf303	No error (0)	paypal-dynamic.map.fastly.net		151.101.1.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:57.948563099 CEST	1.1.1.1	192.168.2.4	0x4a35	No error (0)	c.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:57.948563099 CEST	1.1.1.1	192.168.2.4	0x4a35	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:57.948563099 CEST	1.1.1.1	192.168.2.4	0x4a35	No error (0)	paypal-dynamic.map.fastly.net		151.101.65.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:57.948563099 CEST	1.1.1.1	192.168.2.4	0x4a35	No error (0)	paypal-dynamic.map.fastly.net		151.101.193.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:57.948563099 CEST	1.1.1.1	192.168.2.4	0x4a35	No error (0)	paypal-dynamic.map.fastly.net		151.101.1.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:57.948563099 CEST	1.1.1.1	192.168.2.4	0x4a35	No error (0)	paypal-dynamic.map.fastly.net		151.101.129.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:57.950838089 CEST	1.1.1.1	192.168.2.4	0x6fdf	No error (0)	c.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:57.950838089 CEST	1.1.1.1	192.168.2.4	0x6fdf	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:58.416094065 CEST	1.1.1.1	192.168.2.4	0xe527	No error (0)	t.paypal.com	t.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:58.416094065 CEST	1.1.1.1	192.168.2.4	0xe527	No error (0)	t.glb.paypal.com	paypal-dynamic-2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:58.416094065 CEST	1.1.1.1	192.168.2.4	0xe527	No error (0)	paypal-dynamic-2.map.fastly.net		151.101.129.35	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:58.416094065 CEST	1.1.1.1	192.168.2.4	0xe527	No error (0)	paypal-dynamic-2.map.fastly.net		151.101.193.35	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:58.416094065 CEST	1.1.1.1	192.168.2.4	0xe527	No error (0)	paypal-dynamic-2.map.fastly.net		151.101.1.35	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:58.416094065 CEST	1.1.1.1	192.168.2.4	0xe527	No error (0)	paypal-dynamic-2.map.fastly.net		151.101.65.35	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:22:58.416739941 CEST	1.1.1.1	192.168.2.4	0x430f	No error (0)	t.paypal.com	t.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:58.416739941 CEST	1.1.1.1	192.168.2.4	0x430f	No error (0)	t.glb.paypal.com	paypal-dynamic-2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:22:58.853090048 CEST	1.1.1.1	192.168.2.4	0x22c2	No error (0)	lvs.stats.paypal.com		35.235.122.5	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:00.666594982 CEST	1.1.1.1	192.168.2.4	0xe586	No error (0)	jssdks.mparticle.com		151.101.194.133	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:00.666594982 CEST	1.1.1.1	192.168.2.4	0xe586	No error (0)	jssdks.mparticle.com		151.101.130.133	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:00.666594982 CEST	1.1.1.1	192.168.2.4	0xe586	No error (0)	jssdks.mparticle.com		151.101.2.133	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:00.666594982 CEST	1.1.1.1	192.168.2.4	0xe586	No error (0)	jssdks.mparticle.com		151.101.66.133	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:01.388900042 CEST	1.1.1.1	192.168.2.4	0x1e80	No error (0)	id.venmo.com	www.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:01.388900042 CEST	1.1.1.1	192.168.2.4	0x1e80	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:01.388900042 CEST	1.1.1.1	192.168.2.4	0x1e80	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:01.388900042 CEST	1.1.1.1	192.168.2.4	0x1e80	No error (0)	paypal-dynamic.map.fastly.net		151.101.193.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:01.388900042 CEST	1.1.1.1	192.168.2.4	0x1e80	No error (0)	paypal-dynamic.map.fastly.net		151.101.65.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:01.388900042 CEST	1.1.1.1	192.168.2.4	0x1e80	No error (0)	paypal-dynamic.map.fastly.net		151.101.1.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:01.388900042 CEST	1.1.1.1	192.168.2.4	0x1e80	No error (0)	paypal-dynamic.map.fastly.net		151.101.129.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:01.396836042 CEST	1.1.1.1	192.168.2.4	0xa388	No error (0)	id.venmo.com	www.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:01.396836042 CEST	1.1.1.1	192.168.2.4	0xa388	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:01.396836042 CEST	1.1.1.1	192.168.2.4	0xa388	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:09.781696081 CEST	1.1.1.1	192.168.2.4	0x51ed	No error (0)	id.venmo.com	www.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:09.781696081 CEST	1.1.1.1	192.168.2.4	0x51ed	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:09.781696081 CEST	1.1.1.1	192.168.2.4	0x51ed	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:09.781696081 CEST	1.1.1.1	192.168.2.4	0x51ed	No error (0)	paypal-dynamic.map.fastly.net		151.101.1.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:09.781696081 CEST	1.1.1.1	192.168.2.4	0x51ed	No error (0)	paypal-dynamic.map.fastly.net		151.101.65.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:09.781696081 CEST	1.1.1.1	192.168.2.4	0x51ed	No error (0)	paypal-dynamic.map.fastly.net		151.101.129.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:09.781696081 CEST	1.1.1.1	192.168.2.4	0x51ed	No error (0)	paypal-dynamic.map.fastly.net		151.101.193.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:09.784863949 CEST	1.1.1.1	192.168.2.4	0x5f86	No error (0)	id.venmo.com	www.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:09.784863949 CEST	1.1.1.1	192.168.2.4	0x5f86	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:09.784863949 CEST	1.1.1.1	192.168.2.4	0x5f86	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:17.118877888 CEST	1.1.1.1	192.168.2.4	0x1ef5	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:17.118877888 CEST	1.1.1.1	192.168.2.4	0x1ef5	No error (0)	ppo.glb.paypal.com	paypal.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:17.118877888 CEST	1.1.1.1	192.168.2.4	0x1ef5	No error (0)	paypal.map.fastly.net		151.101.2.133	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:17.118877888 CEST	1.1.1.1	192.168.2.4	0x1ef5	No error (0)	paypal.map.fastly.net		151.101.130.133	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:17.118877888 CEST	1.1.1.1	192.168.2.4	0x1ef5	No error (0)	paypal.map.fastly.net		151.101.194.133	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:17.118877888 CEST	1.1.1.1	192.168.2.4	0x1ef5	No error (0)	paypal.map.fastly.net		151.101.66.133	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:17.119385958 CEST	1.1.1.1	192.168.2.4	0xe8d	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:17.119385958 CEST	1.1.1.1	192.168.2.4	0xe8d	No error (0)	ppo.glb.paypal.com	cs1150.wpc.betacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:17.604633093 CEST	1.1.1.1	192.168.2.4	0x65af	No error (0)	www.recaptcha.net		142.250.217.227	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:22.318223953 CEST	1.1.1.1	192.168.2.4	0x9baf	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:22.318223953 CEST	1.1.1.1	192.168.2.4	0x9baf	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:22.579837084 CEST	1.1.1.1	192.168.2.4	0xdd7f	No error (0)	www.recaptcha.net		142.250.64.227	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:30.773783922 CEST	1.1.1.1	192.168.2.4	0x737d	No error (0)	help.venmo.com	venmo.ssl.zendesk.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:30.773783922 CEST	1.1.1.1	192.168.2.4	0x737d	No error (0)	venmo.ssl.zendesk.com	venmo.zendesk.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:30.773783922 CEST	1.1.1.1	192.168.2.4	0x737d	No error (0)	venmo.zendesk.com		104.18.249.37	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:30.773783922 CEST	1.1.1.1	192.168.2.4	0x737d	No error (0)	venmo.zendesk.com		104.18.248.37	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:30.781625986 CEST	1.1.1.1	192.168.2.4	0x571	No error (0)	help.venmo.com	venmo.ssl.zendesk.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:30.781625986 CEST	1.1.1.1	192.168.2.4	0x571	No error (0)	venmo.ssl.zendesk.com	venmo.zendesk.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:34.334130049 CEST	1.1.1.1	192.168.2.4	0x6db0	No error (0)	static.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:34.334130049 CEST	1.1.1.1	192.168.2.4	0x6db0	No error (0)	static.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:34.335114956 CEST	1.1.1.1	192.168.2.4	0xe67b	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Apr 26, 2024 14:23:34.335618973 CEST	1.1.1.1	192.168.2.4	0x2f7f	No error (0)	p19.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:34.335618973 CEST	1.1.1.1	192.168.2.4	0x2f7f	No error (0)	p19.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:34.336087942 CEST	1.1.1.1	192.168.2.4	0x848f	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:34.336087942 CEST	1.1.1.1	192.168.2.4	0x848f	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:35.274301052 CEST	1.1.1.1	192.168.2.4	0x19df	No error (0)	theme.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:35.274301052 CEST	1.1.1.1	192.168.2.4	0x19df	No error (0)	theme.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:35.274772882 CEST	1.1.1.1	192.168.2.4	0x383f	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:35.274772882 CEST	1.1.1.1	192.168.2.4	0x383f	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:35.275666952 CEST	1.1.1.1	192.168.2.4	0xb312	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Apr 26, 2024 14:23:36.091922998 CEST	1.1.1.1	192.168.2.4	0xb72b	No error (0)	theme.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:36.091922998 CEST	1.1.1.1	192.168.2.4	0xb72b	No error (0)	theme.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:36.097199917 CEST	1.1.1.1	192.168.2.4	0xdb87	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:36.097901106 CEST	1.1.1.1	192.168.2.4	0x81bd	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:36.097901106 CEST	1.1.1.1	192.168.2.4	0x81bd	No error (0)	d3orhvfyxudxxq.cloudfront.net		108.156.83.58	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:36.097901106 CEST	1.1.1.1	192.168.2.4	0x81bd	No error (0)	d3orhvfyxudxxq.cloudfront.net		108.156.83.77	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:36.097901106 CEST	1.1.1.1	192.168.2.4	0x81bd	No error (0)	d3orhvfyxudxxq.cloudfront.net		108.156.83.71	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:36.097901106 CEST	1.1.1.1	192.168.2.4	0x81bd	No error (0)	d3orhvfyxudxxq.cloudfront.net		108.156.83.76	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:36.756248951 CEST	1.1.1.1	192.168.2.4	0x6a31	No error (0)	www.cloudflare.com		104.16.124.96	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:36.756248951 CEST	1.1.1.1	192.168.2.4	0x6a31	No error (0)	www.cloudflare.com		104.16.123.96	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:36.757092953 CEST	1.1.1.1	192.168.2.4	0xa537	No error (0)	www.cloudflare.com			65	IN (0x0001)	false
Apr 26, 2024 14:23:36.920407057 CEST	1.1.1.1	192.168.2.4	0x7240	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:36.920407057 CEST	1.1.1.1	192.168.2.4	0x7240	No error (0)	d3orhvfyxudxxq.cloudfront.net		108.156.83.76	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:36.920407057 CEST	1.1.1.1	192.168.2.4	0x7240	No error (0)	d3orhvfyxudxxq.cloudfront.net		108.156.83.71	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:36.920407057 CEST	1.1.1.1	192.168.2.4	0x7240	No error (0)	d3orhvfyxudxxq.cloudfront.net		108.156.83.58	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:36.920407057 CEST	1.1.1.1	192.168.2.4	0x7240	No error (0)	d3orhvfyxudxxq.cloudfront.net		108.156.83.77	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:36.920460939 CEST	1.1.1.1	192.168.2.4	0x4b23	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:40.114779949 CEST	1.1.1.1	192.168.2.4	0x7b1f	No error (0)	www.cloudflare.com		104.16.124.96	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:40.114779949 CEST	1.1.1.1	192.168.2.4	0x7b1f	No error (0)	www.cloudflare.com		104.16.123.96	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:40.115005016 CEST	1.1.1.1	192.168.2.4	0x932b	No error (0)	www.cloudflare.com			65	IN (0x0001)	false
Apr 26, 2024 14:23:40.544147015 CEST	1.1.1.1	192.168.2.4	0x217f	No error (0)	venmo.zendesk.com		104.18.248.37	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:40.544147015 CEST	1.1.1.1	192.168.2.4	0x217f	No error (0)	venmo.zendesk.com		104.18.249.37	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:44.377171040 CEST	1.1.1.1	192.168.2.4	0x510b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:44.377171040 CEST	1.1.1.1	192.168.2.4	0x510b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:45.271737099 CEST	1.1.1.1	192.168.2.4	0x8ad7	No error (0)	help.venmo.com	venmo.ssl.zendesk.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:45.271737099 CEST	1.1.1.1	192.168.2.4	0x8ad7	No error (0)	venmo.ssl.zendesk.com	venmo.zendesk.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:45.271737099 CEST	1.1.1.1	192.168.2.4	0x8ad7	No error (0)	venmo.zendesk.com		104.18.249.37	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:45.271737099 CEST	1.1.1.1	192.168.2.4	0x8ad7	No error (0)	venmo.zendesk.com		104.18.248.37	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:45.283687115 CEST	1.1.1.1	192.168.2.4	0x5e77	No error (0)	help.venmo.com	venmo.ssl.zendesk.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:45.283687115 CEST	1.1.1.1	192.168.2.4	0x5e77	No error (0)	venmo.ssl.zendesk.com	venmo.zendesk.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:47.028562069 CEST	1.1.1.1	192.168.2.4	0xfe80	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:47.028562069 CEST	1.1.1.1	192.168.2.4	0xfe80	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:47.028624058 CEST	1.1.1.1	192.168.2.4	0xbf93	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:47.028624058 CEST	1.1.1.1	192.168.2.4	0xbf93	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:47.028624058 CEST	1.1.1.1	192.168.2.4	0xbf93	No error (0)	paypal-dynamic.map.fastly.net		151.101.129.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:47.028624058 CEST	1.1.1.1	192.168.2.4	0xbf93	No error (0)	paypal-dynamic.map.fastly.net		151.101.65.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:47.028624058 CEST	1.1.1.1	192.168.2.4	0xbf93	No error (0)	paypal-dynamic.map.fastly.net		151.101.1.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:47.028624058 CEST	1.1.1.1	192.168.2.4	0xbf93	No error (0)	paypal-dynamic.map.fastly.net		151.101.193.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:48.373281956 CEST	1.1.1.1	192.168.2.4	0xfd06	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:48.832057953 CEST	1.1.1.1	192.168.2.4	0x828a	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:48.832057953 CEST	1.1.1.1	192.168.2.4	0x828a	No error (0)	ppo.glb.paypal.com	cs1150.wpc.betacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:48.832191944 CEST	1.1.1.1	192.168.2.4	0xd203	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:48.832191944 CEST	1.1.1.1	192.168.2.4	0xd203	No error (0)	ppo.glb.paypal.com	paypal.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:48.832191944 CEST	1.1.1.1	192.168.2.4	0xd203	No error (0)	paypal.map.fastly.net		151.101.130.133	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:48.832191944 CEST	1.1.1.1	192.168.2.4	0xd203	No error (0)	paypal.map.fastly.net		151.101.66.133	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:48.832191944 CEST	1.1.1.1	192.168.2.4	0xd203	No error (0)	paypal.map.fastly.net		151.101.2.133	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:48.832191944 CEST	1.1.1.1	192.168.2.4	0xd203	No error (0)	paypal.map.fastly.net		151.101.194.133	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:56.918426991 CEST	1.1.1.1	192.168.2.4	0xd9a7	No error (0)	t.paypal.com	t.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:56.918426991 CEST	1.1.1.1	192.168.2.4	0xd9a7	No error (0)	t.glb.paypal.com	cs1150.wpc.betacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:56.918732882 CEST	1.1.1.1	192.168.2.4	0xf1	No error (0)	t.paypal.com	t.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:56.918732882 CEST	1.1.1.1	192.168.2.4	0xf1	No error (0)	t.glb.paypal.com	paypal-dynamic-2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 14:23:56.918732882 CEST	1.1.1.1	192.168.2.4	0xf1	No error (0)	paypal-dynamic-2.map.fastly.net		151.101.129.35	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:56.918732882 CEST	1.1.1.1	192.168.2.4	0xf1	No error (0)	paypal-dynamic-2.map.fastly.net		151.101.1.35	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:56.918732882 CEST	1.1.1.1	192.168.2.4	0xf1	No error (0)	paypal-dynamic-2.map.fastly.net		151.101.193.35	A (IP address)	IN (0x0001)	false
Apr 26, 2024 14:23:56.918732882 CEST	1.1.1.1	192.168.2.4	0xf1	No error (0)	paypal-dynamic-2.map.fastly.net		151.101.65.35	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49742	52.84.150.50	80	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 14:22:44.168390036 CEST	552	OUT	GET /signup?email=noreply11%40wqerdfd.onmicrosoft.com&invite_id=662a75be3cac17a70a9904fa&nr=1&utm_medium=email&utm_source=pnu HTTP/1.1 Host: account.venmo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 14:22:44.299721956 CEST	686	IN	HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 26 Apr 2024 12:22:44 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Location: https://account.venmo.com/signup?email=noreply11%40wqerdfd.onmicrosoft.com&invite_id=662a75be3cac17a70a9904fa&nr=1&utm_medium=email&utm_source=pnu X-Cache: Redirect from cloudfront Via: 1.1 f0d2db130f25377126d8fc517e82fa4c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: AFNYcTwGquzdcyUnIdNswYehC3lQJNB2QdU3ZXZsVKNqrGHXTtwu-w== Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>CloudFront</center></body></html>
Apr 26, 2024 14:23:29.306124926 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49738	99.84.252.16	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:40 UTC	1087	OUT	GET /?d=venmo.com&u=aHR0cHM6Ly92ZW5tby5jb20vc2lnbnVwL3N0YXJ0P2VtYWlsPW5vcmVwbHkxMSU0MHdxZXJkZmQub25taWNyb3NvZnQuY29tJmludml0ZV9pZD02NjJhNzViZTNjYWMxN2E3MGE5OTA0ZmEmbnI9MSZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9zb3VyY2U9cG51&p=m&i=NjI3Mjc4OTk0MGU3YTAxM2U2ZWIxMDY3&t=RTdyMWVwN0ltVWFjZ3cvWmVHNTRWVkd1STQwUzVVNzEveWYyR0FYYXVhMD0=&h=4ce9b067fcbf486e8f27561ce3d3058e&s=AVNPUEhUT0NFTkNSWVBUSVaS8c9jSpZcrH9uvMBTWALM8OUVCaCMDIwUwmubUWsN9g HTTP/1.1 Host: us-west-2.protection.sophos.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:22:40 UTC	739	IN	HTTP/1.1 302 Found Content-Type: text/html Content-Length: 0 Connection: close Date: Fri, 26 Apr 2024 12:22:40 GMT x-amzn-RequestId: a6e234bf-0cca-4ee8-9fba-7fb8993ded68 Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow x-amz-apigw-id: W1VmoFGyvHcEGLQ= Location: https://venmo.com/signup/start?email=noreply11%40wqerdfd.onmicrosoft.com&invite_id=662a75be3cac17a70a9904fa&nr=1&utm_medium=email&utm_source=pnu X-Amzn-Trace-Id: Root=1-662b9c90-719897875ef6e52a0095451f;Parent=64ff5ac495ec1c98;Sampled=0;lineage=b506645d:0 X-Cache: Miss from cloudfront Via: 1.1 989828a49931b89c50f12dd269853d98.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P6 X-Amz-Cf-Id: WtX53eANJnq4yWPYBEHNXQf9afjiYH9RxSjHWzXFcXra6o41vROIBQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	52.84.150.50	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:41 UTC	778	OUT	GET /signup/start?email=noreply11%40wqerdfd.onmicrosoft.com&invite_id=662a75be3cac17a70a9904fa&nr=1&utm_medium=email&utm_source=pnu HTTP/1.1 Host: venmo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:22:41 UTC	969	IN	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=utf-8 Content-Length: 174 Connection: close Date: Fri, 26 Apr 2024 12:22:41 GMT Server: nginx Set-Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; Max-Age=157680000; Domain=venmo.com; Path=/; Expires=Wed, 25 Apr 2029 12:22:41 GMT; Secure Cache-Control: no-cache x-frame-options: SAMEORIGIN x-powered-by: Express Location: https://account.venmo.com/signup/start?email=noreply11%40wqerdfd.onmicrosoft.com&invite_id=662a75be3cac17a70a9904fa&nr=1&utm_medium=email&utm_source=pnu x-envoy-upstream-service-time: 4 strict-transport-security: max-age=31536000 Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 ee5a1fbfd85d9d25aef83ca16d91afca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: tmlmJST4HL_xrjwIQhfjXSqnOYDbmgSGdff3oG0bTH-KUlX5chue6Q==
2024-04-26 12:22:41 UTC	174	IN	Data Raw: 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 61 63 63 6f 75 6e 74 2e 76 65 6e 6d 6f 2e 63 6f 6d 2f 73 69 67 6e 75 70 2f 73 74 61 72 74 3f 65 6d 61 69 6c 3d 6e 6f 72 65 70 6c 79 31 31 25 34 30 77 71 65 72 64 66 64 2e 6f 6e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 26 69 6e 76 69 74 65 5f 69 64 3d 36 36 32 61 37 35 62 65 33 63 61 63 31 37 61 37 30 61 39 39 30 34 66 61 26 6e 72 3d 31 26 75 74 6d 5f 6d 65 64 69 75 6d 3d 65 6d 61 69 6c 26 75 74 6d 5f 73 6f 75 72 63 65 3d 70 6e 75 Data Ascii: Found. Redirecting to https://account.venmo.com/signup/start?email=noreply11%40wqerdfd.onmicrosoft.com&invite_id=662a75be3cac17a70a9904fa&nr=1&utm_medium=email&utm_source=pnu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	52.84.150.50	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:43 UTC	842	OUT	GET /signup/start?email=noreply11%40wqerdfd.onmicrosoft.com&invite_id=662a75be3cac17a70a9904fa&nr=1&utm_medium=email&utm_source=pnu HTTP/1.1 Host: account.venmo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152
2024-04-26 12:22:43 UTC	1149	IN	HTTP/1.1 307 Temporary Redirect Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Fri, 26 Apr 2024 12:22:43 GMT Server: nginx x-powered-by: Express Set-Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; Max-Age=157680000; Domain=venmo.com; Path=/; Expires=Wed, 25 Apr 2029 12:22:43 GMT; HttpOnly; Secure Set-Cookie: s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; Max-Age=1800; Domain=venmo.com; Path=/; Expires=Fri, 26 Apr 2024 12:52:43 GMT; HttpOnly; Secure Set-Cookie: _csrf=DDftkNPgEA155iagiWokS3RO; Path=/; Secure Cache-Control: no-store, no-cache, private, max-age=0 x-frame-options: deny Location: http://account.venmo.com/signup?email=noreply11%40wqerdfd.onmicrosoft.com&invite_id=662a75be3cac17a70a9904fa&nr=1&utm_medium=email&utm_source=pnu x-envoy-upstream-service-time: 8 strict-transport-security: max-age=31536000 Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 1d70b90303ff56b86662db87683a2a04.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: TH7JyYaIxt3fqfwnxjbV37CT0Mu9WyjjO8BuXBN9nLngY2YVjA1mpg==
2024-04-26 12:22:43 UTC	151	IN	Data Raw: 39 31 0d 0a 68 74 74 70 3a 2f 2f 61 63 63 6f 75 6e 74 2e 76 65 6e 6d 6f 2e 63 6f 6d 2f 73 69 67 6e 75 70 3f 65 6d 61 69 6c 3d 6e 6f 72 65 70 6c 79 31 31 25 34 30 77 71 65 72 64 66 64 2e 6f 6e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 26 69 6e 76 69 74 65 5f 69 64 3d 36 36 32 61 37 35 62 65 33 63 61 63 31 37 61 37 30 61 39 39 30 34 66 61 26 6e 72 3d 31 26 75 74 6d 5f 6d 65 64 69 75 6d 3d 65 6d 61 69 6c 26 75 74 6d 5f 73 6f 75 72 63 65 3d 70 6e 75 0d 0a Data Ascii: 91http://account.venmo.com/signup?email=noreply11%40wqerdfd.onmicrosoft.com&invite_id=662a75be3cac17a70a9904fa&nr=1&utm_medium=email&utm_source=pnu
2024-04-26 12:22:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49744	52.84.150.50	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:44 UTC	911	OUT	GET /signup?email=noreply11%40wqerdfd.onmicrosoft.com&invite_id=662a75be3cac17a70a9904fa&nr=1&utm_medium=email&utm_source=pnu HTTP/1.1 Host: account.venmo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; _csrf=DDftkNPgEA155iagiWokS3RO
2024-04-26 12:22:44 UTC	958	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 1169104 Connection: close Date: Fri, 26 Apr 2024 12:22:44 GMT Server: nginx x-powered-by: Next.js Set-Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; Max-Age=157680000; Domain=venmo.com; Path=/; Expires=Wed, 25 Apr 2029 12:22:44 GMT; HttpOnly; Secure Set-Cookie: s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; Max-Age=1800; Domain=venmo.com; Path=/; Expires=Fri, 26 Apr 2024 12:52:44 GMT; HttpOnly; Secure Cache-Control: no-store, no-cache, private, max-age=0 x-frame-options: deny ETag: "11d6d0-APxjQ6u2aHkSKIyJt6vcB06JD7c" x-envoy-upstream-service-time: 63 strict-transport-security: max-age=31536000 Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 4e590f65bd47eb25bda48114ef9d9004.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C4 X-Amz-Cf-Id: 1sqtINURMvBfAb4fRx9Ow09q9AItNli-o5Iwd5TDz5y6AqNwO3p61Q==
2024-04-26 12:22:44 UTC	8949	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 2f 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 56 65 6e 6d 6f 20 69 73 20 61 20 64 69 67 69 74 61 6c 20 77 61 6c 6c 65 74 20 74 68 61 74 20 6c 65 74 73 20 79 6f 75 20 6d 61 6b 65 20 61 6e 64 20 73 68 61 72 65 20 70 61 79 6d 65 6e 74 73 20 77 69 74 68 20 66 72 69 65 6e 64 73 2e 20 59 6f 75 20 63 61 6e 20 65 61 73 69 6c 79 20 73 70 6c 69 74 20 74 68 65 20 62 69 6c 6c 2c 20 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta name="viewport" content="width=device-width"/><meta charSet="utf-8"/><meta name="description" content="Venmo is a digital wallet that lets you make and share payments with friends. You can easily split the bill,
2024-04-26 12:22:44 UTC	16384	IN	Data Raw: 34 6e 47 4e 67 5a 47 42 67 46 76 79 76 79 63 44 41 73 75 50 66 69 66 39 52 4c 47 30 4d 51 42 46 6b 77 42 51 49 41 49 6c 5a 42 66 63 41 41 41 41 41 41 46 41 41 41 6c 34 41 41 48 69 63 59 32 42 6d 73 6d 57 63 77 4d 44 4b 77 4d 44 55 78 52 54 42 77 4d 44 67 44 61 45 5a 34 78 68 38 47 42 57 41 6f 67 77 77 73 49 43 42 34 54 30 44 77 35 64 71 47 4e 38 2f 52 45 47 42 77 59 47 42 56 31 75 51 57 66 43 2f 4a 73 4e 58 35 6d 32 4d 36 6b 42 68 51 52 59 67 77 66 69 41 61 51 2b 44 41 68 43 79 41 41 42 4c 32 51 30 79 41 48 69 63 72 5a 4f 2f 61 74 74 51 46 4d 59 2f 79 63 6f 66 35 78 39 4a 68 74 49 68 68 55 76 49 6b 45 41 6a 79 53 47 78 54 64 79 68 4a 6a 46 30 53 48 43 49 54 53 43 6c 69 32 78 66 57 38 4a 32 5a 43 54 46 72 6c 2b 67 51 78 2b 68 46 44 70 6e 36 64 49 58 61 4b Data Ascii: 4nGNgZGBgFvyvycDAsuPfif9RLG0MQBFkwBQIAIlZBfcAAAAAAFAAAl4AAHicY2BmsmWcwMDKwMDUxRTBwMDgDaEZ4xh8GBWAogwwsICB4T0Dw5dqGN8/REGBwYGBV1uQWfC/JsNX5m2M6kBhQRYgwfiAaQ+DAhCyAABL2Q0yAHicrZO/attQFMY/ycof5x9JhtIhhUvIkEAjySGxTdyhJjF0SHCITSCli2xfW8J2ZCTFrl+gQx+hFDpn6dIXaK
2024-04-26 12:22:44 UTC	6673	IN	Data Raw: 6f 6f 61 44 67 73 45 58 42 56 76 7a 54 38 55 6f 67 4b 30 73 4b 2b 5a 54 43 77 69 67 35 36 76 4f 54 50 42 64 77 32 31 64 59 42 5a 32 67 36 78 76 67 59 59 41 56 67 72 34 75 6f 48 61 73 59 4f 38 64 6a 63 68 71 37 61 32 65 66 57 48 4f 34 66 42 64 37 4d 79 70 36 6e 33 4c 6a 69 38 2b 75 59 42 74 34 37 4e 76 41 6a 53 2f 70 45 36 66 6e 6a 51 6d 66 73 6a 38 43 39 50 6b 2b 45 79 37 6a 6d 52 6b 32 6c 6a 4c 41 53 52 54 78 4f 6c 33 61 55 45 70 4e 76 70 4e 59 4d 54 6e 30 6e 6f 71 49 2b 76 70 4a 6c 6c 50 5a 62 4f 4e 7a 34 56 49 6a 6b 2b 71 43 55 54 4a 30 70 52 6a 55 64 42 61 6a 6d 37 69 68 63 59 78 56 54 47 70 76 34 46 38 49 62 73 44 4f 50 34 2f 67 48 51 6b 49 4a 49 42 38 46 65 51 59 6f 6b 76 47 59 5a 73 53 49 4c 43 31 33 50 43 56 77 58 68 36 33 6b 50 2f 4b 6c 36 52 44 Data Ascii: ooaDgsEXBVvzT8UogK0sK+ZTCwig56vOTPBdw21dYBZ2g6xvgYYAVgr4uoHasYO8djchq7a2efWHO4fBd7Myp6n3Lji8+uYBt47NvAjS/pE6fnjQmfsj8C9Pk+Ey7jmRk2ljLASRTxOl3aUEpNvpNYMTn0noqI+vpJllPZbONz4VIjk+qCUTJ0pRjUdBajm7ihcYxVTGpv4F8IbsDOP4/gHQkIJIB8FeQYokvGYZsSILC13PCVwXh63kP/Kl6RD
2024-04-26 12:22:45 UTC	8949	IN	Data Raw: 30 42 35 7a 2b 62 62 37 32 47 63 51 71 58 62 66 34 66 37 64 51 4c 4c 78 54 73 53 4e 32 6d 41 58 36 37 38 5a 4f 4b 4f 56 44 4d 4c 45 2f 32 7a 67 57 4d 68 79 49 77 5a 4f 59 46 30 44 35 36 57 63 36 43 2b 75 6b 78 50 39 71 7a 34 44 58 43 73 2f 2f 4e 68 55 66 76 69 78 36 5a 30 2f 6d 70 4c 35 6d 69 74 2b 43 65 71 72 46 2b 69 45 56 42 55 4d 71 5a 77 69 46 48 50 79 4d 2b 6e 54 62 37 4c 49 6f 48 34 71 6e 33 68 61 58 46 64 4c 51 39 66 36 32 50 74 57 64 77 6d 34 2b 70 4e 2b 47 66 61 66 50 75 6e 48 4e 74 56 45 33 6c 57 54 67 58 37 6e 5a 57 49 32 43 6a 47 61 4e 43 63 76 4a 56 6f 6c 48 4c 53 64 52 36 37 6b 58 62 76 61 72 7a 72 55 65 6a 4e 62 50 4a 63 7a 42 6d 77 73 6f 48 45 2b 37 35 45 67 6e 68 4d 65 34 63 6e 35 4d 50 6d 52 68 6f 2f 50 73 64 58 79 48 73 39 47 61 2f 6e Data Ascii: 0B5z+bb72GcQqXbf4f7dQLLxTsSN2mAX678ZOKOVDMLE/2zgWMhyIwZOYF0D56Wc6C+ukxP9qz4DXCs//NhUfvix6Z0/mpL5mit+CeqrF+iEVBUMqZwiFHPyM+nTb7LIoH4qn3haXFdLQ9f62PtWdwm4+pN+GfafPunHNtVE3lWTgX7nZWI2CjGaNCcvJVolHLSdR67kXbvarzrUejNbPJczBmwsoHE+75EgnhMe4cn5MPmRho/PsdXyHs9Ga/n
2024-04-26 12:22:45 UTC	16384	IN	Data Raw: 34 4f 2f 44 4e 38 33 48 47 45 34 79 33 43 70 34 57 62 44 65 4d 4e 43 77 38 75 47 39 59 5a 50 6a 66 53 4e 4f 4b 4d 35 52 69 75 4d 74 68 76 74 4e 30 6f 33 4f 6d 33 55 79 44 41 4d 78 7a 67 77 41 63 78 43 5a 69 32 7a 68 59 6c 6e 7a 6a 4e 56 7a 42 50 6d 44 38 6c 73 79 55 4a 4a 6a 47 53 2f 4a 46 31 53 4c 48 6b 69 6c 55 72 66 6c 2f 61 58 32 6b 6b 6e 53 4b 64 4c 50 35 50 75 6b 2f 34 6b 66 63 6f 61 73 5a 31 5a 46 33 59 6d 47 38 72 75 59 67 2b 78 35 39 67 62 37 47 31 6a 50 65 50 33 6a 54 38 30 6e 6d 36 38 31 76 69 43 73 63 71 6b 75 30 6b 76 45 78 65 54 35 53 62 49 4a 4e 33 6b 70 45 6b 74 4e 35 53 4c 34 57 4b 35 55 39 78 35 72 70 35 37 79 76 31 70 61 6d 55 36 33 6e 53 44 36 52 65 6d 4b 61 61 6e 54 59 74 4d 72 35 6b 71 7a 51 7a 4e 75 70 6f 35 6d 6e 6d 61 2b 5a 6c 39 Data Ascii: 4O/DN83HGE4y3Cp4WbDeMNCw8uG9YZPjfSNOKM5RiuMthvtN0o3Om3UyDAMxzgwAcxCZi2zhYlnzjNVzBPmD8lsyUJJjGS/JF1SLHkilUrfl/aX2kknSKdLP5Puk/4kfcoasZ1ZF3YmG8ruYg+x59gb7G1jPeP3jT80nm681viCscqku0kvExeT5SbIJN3kpEktN5SL4WK5U9x5rp57yv1pamU63nSD6RemKaanTYtMr5kqzQzNupo5mnma+Zl9
2024-04-26 12:22:45 UTC	7435	IN	Data Raw: 50 5a 64 2f 6c 32 6b 39 2f 50 37 6b 58 36 50 66 34 2b 70 66 44 4b 66 44 50 6f 56 76 4a 59 35 65 52 32 76 52 2f 6b 47 68 54 4f 54 55 71 41 55 49 44 56 51 44 4a 42 44 38 54 43 76 41 6d 41 4f 78 53 65 2f 35 67 49 65 6f 58 30 76 4c 51 4b 36 67 50 79 43 41 6f 71 41 4e 70 41 76 6d 69 4c 2f 55 2f 36 36 77 34 6d 52 52 4b 37 34 76 52 54 42 61 34 61 58 46 53 63 2f 4c 77 33 50 4b 77 4f 49 73 37 34 41 4e 30 55 36 42 30 6e 6a 37 61 54 78 50 75 69 37 6a 4d 4f 53 57 6d 34 68 4c 62 65 52 6c 76 76 59 6e 51 41 54 36 58 6f 68 4e 48 30 77 63 71 53 57 47 36 48 6c 4d 6c 5a 72 4b 4d 43 59 6f 2b 74 47 30 76 55 49 36 62 71 66 64 4e 31 44 75 75 34 67 58 58 65 52 72 6e 74 49 31 7a 4d 55 5a 78 32 67 43 4f 73 6f 6d 77 41 49 55 35 78 31 46 74 72 2f 4e 46 71 31 6d 6d 4b 39 6e 71 56 34 Data Ascii: PZd/l2k9/P7kX6Pf4+pfDKfDPoVvJY5eR2vR/kGhTOTUqAUIDVQDJBD8TCvAmAOxSe/5gIeoX0vLQK6gPyCAoqANpAvmiL/U/66w4mRRK74vRTBa4aXFSc/Lw3PKwOIs74AN0U6B0nj7aTxPui7jMOSWm4hLbeRlvvYnQAT6XohNH0wcqSWG6HlMlZrKMCYo+tG0vUI6bqfdN1Duu4gXXeRrntI1zMUZx2gCOsomwAIU5x1Ftr/NFq1mmK9nqV4
2024-04-26 12:22:45 UTC	16384	IN	Data Raw: 74 35 33 4f 71 50 55 48 61 7a 38 76 52 41 6f 61 53 70 49 77 62 79 5a 30 4b 54 53 44 6f 6b 4a 6f 52 4f 33 47 42 47 2b 45 71 4b 42 56 58 70 75 51 49 2f 45 69 51 66 49 6f 5a 53 55 69 77 6b 6b 4a 52 54 6f 2f 50 38 39 7a 33 72 4e 2b 2f 48 4a 34 4c 72 33 34 38 48 33 2f 2f 35 37 33 65 64 37 6e 66 58 2f 52 6b 42 54 6b 74 6f 6a 78 74 78 54 64 4b 31 4c 77 66 30 71 6e 33 79 4d 64 2f 70 7a 30 2b 69 50 53 4b 64 39 4c 77 53 32 54 48 73 69 35 47 66 70 69 32 53 41 6e 70 4d 50 4e 79 71 42 38 4a 35 33 75 45 39 72 32 53 61 38 62 59 73 35 54 30 75 4e 66 68 52 64 70 47 34 4e 74 73 42 35 32 73 39 59 32 36 64 58 78 4f 6c 66 58 57 4b 42 4e 4f 71 4a 6e 2b 4f 36 63 74 50 70 4a 4b 55 57 74 6c 49 39 4c 79 59 39 44 6d 66 6f 53 36 69 65 6b 4a 42 58 71 4a 63 6e 35 64 39 43 4e 74 4c 2b Data Ascii: t53OqPUHaz8vRAoaSpIwbyZ0KTSDokJoRO3GBG+EqKBVXpuQI/EiQfIoZSUiwkkJRTo/P89z3rN+/HJ4Lr348H3//573ed7nfX/RkBTktojxtxTdK1Lwf0qn3yMd/pz0+iPSKd9LwS2THsi5Gfpi2SAnpMPNyqB8J53uE9r2Sa8bYs5T0uNfhRdpG4NtsB52s9Y26dXxOlfXWKBNOqJn+O6ctPpJKUWtlI9LyY9DmfoS6iekJBXqJcn5d9CNtL+
2024-04-26 12:22:45 UTC	16384	IN	Data Raw: 45 58 35 6e 75 33 34 65 6e 72 46 64 50 77 4d 5a 32 2f 57 7a 38 45 38 57 65 6c 72 51 39 38 4b 76 43 63 71 38 50 6f 34 79 2b 30 67 5a 47 64 42 37 2f 61 41 53 4a 31 43 67 6b 78 51 6b 6d 4e 44 59 57 31 6c 53 35 53 4d 45 43 43 4d 65 51 67 77 55 4a 6d 65 5a 4e 46 31 61 57 6c 70 57 57 75 5a 79 65 63 4f 2b 45 6f 64 57 77 56 46 51 66 64 37 53 52 45 4a 54 77 36 46 59 73 6a 4f 56 67 38 6c 6f 65 5a 6b 4b 52 56 71 69 72 38 32 5a 67 30 36 77 77 65 55 66 70 52 31 31 79 58 6f 37 6e 42 34 53 2f 4f 36 42 4c 31 6a 6f 5a 77 56 39 69 65 59 52 55 33 66 53 66 7a 45 35 69 6f 6d 62 44 4f 75 44 4c 71 41 41 6b 34 77 75 4f 61 69 30 36 67 51 48 55 57 57 48 75 6b 6f 41 79 41 6f 4b 51 57 52 5a 57 64 46 41 55 63 71 55 36 5a 4b 53 45 6e 65 4a 32 32 58 38 55 35 4b 6e 56 54 5a 43 30 43 66 Data Ascii: EX5nu34enrFdPwMZ2/Wz8E8WelrQ98KvCcq8Po4y+0gZGdB7/aASJ1CgkxQkmNDYW1lS5SMECCMeQgwUJmeZNF1aWlpWWuZyecO+EodWwVFQfd7SREJTw6FYsjOVg8loeZkKRVqir82Zg06wweUfpR11yXo7nB4S/O6BL1joZwV9ieYRU3fSfzE5iombDOuDLqAAk4wuOai06gQHUWWHukoAyAoKQWRZWdFAUcqU6ZKSEneJ22X8U5KnVTZC0Cf
2024-04-26 12:22:45 UTC	16384	IN	Data Raw: 76 57 6c 54 39 38 4d 50 72 78 79 6e 50 57 52 6a 66 4b 51 56 31 4c 6f 65 76 38 2b 71 55 69 46 79 4c 49 73 47 65 31 7a 44 6d 46 37 44 42 71 6b 4f 62 53 66 79 39 33 69 34 79 32 34 73 2f 36 2f 33 4f 4c 65 59 77 43 4d 35 71 61 2b 76 31 4d 75 30 71 64 48 74 38 37 6d 61 71 37 6f 73 76 33 36 6d 73 45 36 4d 6a 6d 7a 73 47 35 67 53 38 71 4c 63 35 6d 74 72 64 44 6b 61 48 61 56 2f 31 62 4f 39 66 43 67 63 47 78 6d 50 35 63 79 39 33 57 53 41 73 41 6e 64 37 57 49 7a 72 52 2f 30 47 6a 71 73 47 50 42 6f 4c 6f 4d 30 30 4f 73 30 65 73 37 39 56 4b 66 4e 77 54 33 52 35 33 51 78 61 58 32 64 75 47 64 55 42 5a 49 34 4a 45 2f 50 2f 34 58 35 2b 64 48 4a 6b 57 67 4b 65 70 31 4f 73 56 6c 74 62 47 76 6f 48 6e 58 33 65 78 4e 54 51 33 36 48 6b 39 6d 73 32 4a 76 79 30 6d 4c 72 44 51 4f Data Ascii: vWlT98MPrxynPWRjfKQV1Loev8+qUiFyLIsGe1zDmF7DBqkObSfy93i4y24s/6/3OLeYwCM5qa+v1Mu0qdHt87maq7osv36msE6MjmzsG5gS8qLc5mtrdDkaHaV/1bO9fCgcGxmP5cy93WSAsAnd7WIzrR/0GjqsGPBoLoM00Os0es79VKfNwT3R53QxaX2duGdUBZI4JE/P/4X5+dHJkWgKep1OsVltbGvoHnX3exNTQ36Hk9ms2Jvy0mLrDQO
2024-04-26 12:22:45 UTC	8949	IN	Data Raw: 4f 41 41 58 34 32 46 63 68 78 32 6c 35 46 50 2b 61 4e 2f 74 75 35 4d 33 4a 44 2f 6b 37 30 63 2f 6c 4c 77 39 2b 59 73 2f 7a 76 66 37 33 66 38 46 48 48 79 6d 79 77 41 41 41 48 67 42 48 4d 45 44 6f 4b 78 41 41 41 44 41 37 65 49 4c 6d 39 30 70 66 4e 75 32 62 64 75 32 62 64 75 32 62 64 75 32 62 64 76 6d 44 41 43 41 2b 6a 38 62 4b 41 54 4b 67 56 71 67 47 65 67 45 2b 6f 46 54 34 42 70 34 68 43 52 44 4d 69 45 6a 6b 41 76 49 48 65 52 46 61 45 35 6f 52 57 68 4c 36 41 32 61 42 53 32 47 6c 6b 4e 37 6f 63 50 51 53 65 67 38 64 42 57 36 44 54 32 45 6e 6b 4e 76 59 59 6d 77 45 74 67 6d 62 42 39 32 43 72 75 47 50 63 49 68 58 67 36 76 68 58 66 41 2b 2b 41 6a 38 43 6e 34 41 6e 77 4e 76 67 4d 2f 67 6c 38 67 51 67 51 6b 38 68 47 6c 69 47 37 45 49 47 49 65 73 59 72 59 52 68 77 Data Ascii: OAAX42Fchx2l5FP+aN/tu5M3JD/k70c/lLw9+Ys/zvf73f8FHHymywAAAHgBHMEDoKxAAADA7eILm90pfNu2bdu2bdu2bdu2bdvmDACA+j8bKATKgVqgGegE+oFT4Bp4hCRDMiEjkAvIHeRFaE5oRWhL6A2aBS2GlkN7ocPQSeg8dBW6DT2EnkNvYYmwEtgmbB92CruGPcIhXg6vhXfA++Aj8Cn4AnwNvgM/gl8gQgQk8hGliG7EIGIesYrYRhw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49745	23.193.120.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:44 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 12:22:45 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0712) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=67308 Date: Fri, 26 Apr 2024 12:22:44 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49747	52.84.150.50	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:48 UTC	701	OUT	GET /_next/static/css/6c9663029f270459.css HTTP/1.1 Host: account.venmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://account.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; _csrf=DDftkNPgEA155iagiWokS3RO
2024-04-26 12:22:48 UTC	689	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=UTF-8 Content-Length: 10283 Connection: close Date: Fri, 26 Apr 2024 12:22:48 GMT Server: nginx x-powered-by: Express Cache-Control: public, max-age=31536000, immutable x-frame-options: deny Accept-Ranges: bytes Last-Modified: Wed, 17 Apr 2024 16:20:43 GMT ETag: W/"282b-18eecdc4778" x-envoy-upstream-service-time: 5 strict-transport-security: max-age=31536000 Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 a62211aa91c2317f2c505a32aa17cf8a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C4 X-Amz-Cf-Id: vPq68-yC0lbg3B_Wyj1u62lL4nYFN5YfKcZLdkZQlR_0GW-bgJsuUQ==
2024-04-26 12:22:48 UTC	10283	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 63 74 6f 20 47 72 6f 74 65 73 6b 20 41 22 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 53 63 74 6f 20 47 72 6f 74 65 73 6b 20 41 22 29 2c 75 72 6c 28 22 2f 73 74 61 74 69 63 2f 66 6f 6e 74 73 2f 53 63 74 6f 2d 47 72 6f 74 65 73 6b 2d 41 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 63 74 6f 20 47 72 6f 74 65 73 6b 20 41 20 49 74 61 6c 69 63 22 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 6c 6f 63 61 Data Ascii: @font-face{font-family:"Scto Grotesk A";font-style:normal;font-weight:400;src:local("Scto Grotesk A"),url("/static/fonts/Scto-Grotesk-A-Regular.woff") format("woff")}@font-face{font-family:"Scto Grotesk A Italic";font-style:italic;font-weight:400;src:loca

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49748	52.84.150.50	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:48 UTC	701	OUT	GET /_next/static/css/7ce57f390c40a916.css HTTP/1.1 Host: account.venmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://account.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; _csrf=DDftkNPgEA155iagiWokS3RO
2024-04-26 12:22:48 UTC	689	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=UTF-8 Content-Length: 48144 Connection: close Date: Fri, 26 Apr 2024 12:22:48 GMT Server: nginx x-powered-by: Express Cache-Control: public, max-age=31536000, immutable x-frame-options: deny Accept-Ranges: bytes Last-Modified: Wed, 17 Apr 2024 16:20:43 GMT ETag: W/"bc10-18eecdc4778" x-envoy-upstream-service-time: 8 strict-transport-security: max-age=31536000 Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 3b6959d147738fd4bde35db4104f4052.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: 4LyluuqIwU2yyah2vewB-CRHwTYx0T1KQe74duXeEdFewYAyBsovyA==
2024-04-26 12:22:48 UTC	15695	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 63 74 6f 20 47 72 6f 74 65 73 6b 20 41 22 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 53 63 74 6f 20 47 72 6f 74 65 73 6b 20 41 22 29 2c 75 72 6c 28 22 2f 73 74 61 74 69 63 2f 66 6f 6e 74 73 2f 53 63 74 6f 2d 47 72 6f 74 65 73 6b 2d 41 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 63 74 6f 20 47 72 6f 74 65 73 6b 20 41 20 49 74 61 6c 69 63 22 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 6c 6f 63 61 Data Ascii: @font-face{font-family:"Scto Grotesk A";font-style:normal;font-weight:400;src:local("Scto Grotesk A"),url("/static/fonts/Scto-Grotesk-A-Regular.woff") format("woff")}@font-face{font-family:"Scto Grotesk A Italic";font-style:italic;font-weight:400;src:loca
2024-04-26 12:22:48 UTC	295	IN	Data Raw: 6f 75 74 4c 61 79 6f 75 74 5f 62 6f 64 79 5f 5f 55 79 47 45 70 7b 70 61 64 64 69 6e 67 3a 30 20 31 34 34 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 34 70 78 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 7d 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 36 30 70 78 29 7b 2e 6c 6f 67 6f 75 74 4c 61 79 6f 75 74 5f 62 6f 64 79 5f 5f 55 79 47 45 70 7b 70 61 64 64 69 6e 67 3a 30 20 31 36 70 78 7d 7d 40 6d 65 64 69 61 28 6d 61 78 2d 68 65 69 67 68 74 3a 20 35 39 30 70 78 29 7b 2e 6c 6f 67 6f 75 74 4c 61 79 6f 75 74 5f 62 6f 64 79 5f 5f 55 79 47 45 70 2e 6c 6f 67 6f 75 74 4c 61 79 6f 75 74 5f 72 65 73 70 6f 6e 73 69 76 65 42 6f 64 79 5f 5f 4d 48 69 Data Ascii: outLayout_body__UyGEp{padding:0 144px;display:flex;flex-direction:column;margin-bottom:24px;flex-grow:1}@media(max-width: 960px){.logoutLayout_body__UyGEp{padding:0 16px}}@media(max-height: 590px){.logoutLayout_body__UyGEp.logoutLayout_responsiveBody__MHi
2024-04-26 12:22:48 UTC	16384	IN	Data Raw: 5f 5f 78 47 4b 46 46 7b 68 65 69 67 68 74 3a 32 35 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 32 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 32 70 78 7d 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 36 30 70 78 29 7b 2e 6c 6f 67 6f 75 74 4c 61 79 6f 75 74 5f 68 65 61 64 65 72 5f 5f 78 47 4b 46 46 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 34 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 34 70 78 7d 7d 2e 6c 6f 67 6f 75 74 4c 61 79 6f 75 74 5f 68 65 61 64 65 72 5f 5f 78 47 4b 46 46 20 2e 6c 6f 67 6f 75 74 4c 61 79 6f 75 74 5f 6c 6f 67 6f 5f 5f 48 68 54 56 5a 7b 63 6f 6c 6f 72 3a 23 30 30 38 63 66 66 7d 2e 6c 6f 67 6f 75 74 4c 61 79 6f 75 74 5f 68 65 61 64 65 72 5f 5f 78 47 4b 46 46 20 2e 6c 6f 67 6f 75 74 4c 61 79 6f 75 74 5f 67 Data Ascii: __xGKFF{height:25px;margin-top:32px;margin-bottom:32px}@media(max-width: 960px){.logoutLayout_header__xGKFF{margin-top:24px;margin-bottom:24px}}.logoutLayout_header__xGKFF .logoutLayout_logo__HhTVZ{color:#008cff}.logoutLayout_header__xGKFF .logoutLayout_g
2024-04-26 12:22:48 UTC	15770	IN	Data Raw: 74 61 74 69 63 2f 66 6f 6e 74 73 2f 41 74 68 6c 65 74 69 63 73 2d 42 6f 6c 64 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 7d 2e 70 68 6f 6e 65 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 5f 70 68 6f 6e 65 4e 75 6d 62 65 72 46 6f 72 6d 5f 5f 6c 36 6b 78 63 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 38 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 34 34 33 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 30 70 78 7d 2e 70 68 6f 6e 65 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 5f 70 68 6f 6e 65 4e 75 6d 62 65 72 46 6f 72 6d 5f 5f 6c 36 6b 78 63 20 2e 70 68 6f 6e 65 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 5f 70 68 6f 6e 65 49 6e 70 75 74 5f 5f 77 49 49 45 6b 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 37 32 70 78 3b 77 69 64 74 68 3a Data Ascii: tatic/fonts/Athletics-Bold.woff") format("woff")}.phoneConfirmation_phoneNumberForm__l6kxc{margin-top:48px;width:100%;max-width:443px;margin-bottom:100px}.phoneConfirmation_phoneNumberForm__l6kxc .phoneConfirmation_phoneInput__wIIEk{margin-top:72px;width:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49749	151.101.2.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:48 UTC	581	OUT	GET /js/v2/40433222e815b743853a4bb6b7a86058/mparticle.js?env=0 HTTP/1.1 Host: jssdkcdns.mparticle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:22:48 UTC	497	IN	HTTP/1.1 200 OK Connection: close Content-Length: 180956 Content-Type: application/javascript Server: Kestrel Cache-Control: public, max-age=3600 Via: 1.1 varnish, 1.1 varnish X-Origin-Name: fastlyshield--shield_ssl_cache_iad_kiad7000167_IAD Accept-Ranges: bytes Age: 126 Date: Fri, 26 Apr 2024 12:22:48 GMT X-Served-By: cache-iad-kiad7000167-IAD, cache-pdk-kpdk1780120-PDK X-Cache: HIT, MISS X-Cache-Hits: 1, 0 X-Timer: S1714134168.234740,VS0,VE16 Vary: Accept, Accept-Encoding
2024-04-26 12:22:48 UTC	1379	IN	Data Raw: 2f 2f 0a 2f 2f 20 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 39 20 6d 50 61 72 74 69 63 6c 65 2c 20 49 6e 63 2e 0a 2f 2f 0a 2f 2f 20 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 4c 69 63 65 6e 73 65 22 29 3b 0a 2f 2f 20 20 79 6f 75 20 6d 61 79 20 6e 6f 74 20 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 65 78 63 65 70 74 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 0a 2f 2f 20 20 59 6f 75 20 6d 61 79 20 6f 62 74 61 69 6e 20 61 20 63 6f 70 79 20 6f 66 20 74 68 65 20 4c 69 63 65 6e 73 65 20 61 74 0a 2f 2f 0a 2f 2f 20 20 20 20 20 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f Data Ascii: //// Copyright 2019 mParticle, Inc.//// Licensed under the Apache License, Version 2.0 (the "License");// you may not use this file except in compliance with the License.// You may obtain a copy of the License at//// http://www.apache.org/
2024-04-26 12:22:48 UTC	1379	IN	Data Raw: 77 69 6e 64 6f 77 2e 6d 50 61 72 74 69 63 6c 65 2e 63 6f 6e 66 69 67 2e 66 6c 61 67 73 20 3d 20 7b 22 65 76 65 6e 74 73 56 33 22 3a 22 31 30 30 22 2c 22 65 76 65 6e 74 42 61 74 63 68 69 6e 67 49 6e 74 65 72 76 61 6c 4d 69 6c 6c 69 73 22 3a 22 31 30 30 30 30 22 2c 22 6f 66 66 6c 69 6e 65 53 74 6f 72 61 67 65 22 3a 22 31 30 30 22 2c 22 64 69 72 65 63 74 55 52 4c 52 6f 75 74 69 6e 67 22 3a 22 46 61 6c 73 65 22 2c 22 61 75 64 69 65 6e 63 65 41 50 49 22 3a 22 46 61 6c 73 65 22 7d 3b 0a 77 69 6e 64 6f 77 2e 6d 50 61 72 74 69 63 6c 65 2e 63 6f 6e 66 69 67 2e 64 61 74 61 50 6c 61 6e 20 3d 20 77 69 6e 64 6f 77 2e 6d 50 61 72 74 69 63 6c 65 2e 63 6f 6e 66 69 67 2e 64 61 74 61 50 6c 61 6e 20 7c 7c 20 7b 7d 3b 3b 0a 77 69 6e 64 6f 77 2e 6d 50 61 72 74 69 63 6c 65 2e Data Ascii: window.mParticle.config.flags = {"eventsV3":"100","eventBatchingIntervalMillis":"10000","offlineStorage":"100","directURLRouting":"False","audienceAPI":"False"};window.mParticle.config.dataPlan = window.mParticle.config.dataPlan \|\| {};;window.mParticle.
2024-04-26 12:22:48 UTC	1379	IN	Data Raw: 28 69 3d 50 72 6f 6d 69 73 65 29 29 28 66 75 6e 63 74 69 6f 6e 28 69 2c 66 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 74 72 79 7b 65 28 72 2e 6e 65 78 74 28 6e 29 29 7d 63 61 74 63 68 28 74 29 7b 66 28 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 6e 29 7b 74 72 79 7b 65 28 72 5b 22 74 68 72 6f 77 22 5d 28 6e 29 29 7d 63 61 74 63 68 28 74 29 7b 66 28 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 6e 2e 64 6f 6e 65 3f 69 28 6e 2e 76 61 6c 75 65 29 3a 75 28 6e 2e 76 61 6c 75 65 29 2e 74 68 65 6e 28 6f 2c 73 29 7d 65 28 28 72 3d 72 2e 61 70 70 6c 79 28 6e 2c 74 7c 7c 5b 5d 29 29 2e 6e 65 78 74 28 29 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 74 28 6e 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e Data Ascii: (i=Promise))(function(i,f){function o(n){try{e(r.next(n))}catch(t){f(t)}}function s(n){try{e(r["throw"](n))}catch(t){f(t)}}function e(n){n.done?i(n.value):u(n.value).then(o,s)}e((r=r.apply(n,t\|\|[])).next())})}function lt(n,t){function o(n){return function
2024-04-26 12:22:48 UTC	1379	IN	Data Raw: 75 3b 72 3c 66 3b 72 2b 2b 29 21 75 26 26 72 20 69 6e 20 74 7c 7c 28 75 7c 7c 28 75 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 2c 30 2c 72 29 29 2c 75 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 6e 2e 63 6f 6e 63 61 74 28 75 7c 7c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6e 29 7b 76 61 72 20 74 3d 30 2c 72 2c 69 3b 69 66 28 6e 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 7c 7c 6e 3d 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 30 3b 69 66 28 6e 3d 6e 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 64 75 63 65 29 72 65 74 75 72 6e 20 6e 2e 73 70 6c 69 Data Ascii: u;r<f;r++)!u&&r in t\|\|(u\|\|(u=Array.prototype.slice.call(t,0,r)),u[r]=t[r]);return n.concat(u\|\|Array.prototype.slice.call(t))}function d(n){var t=0,r,i;if(n===undefined\|\|n===null)return 0;if(n=n.toString().toLowerCase(),Array.prototype.reduce)return n.spli
2024-04-26 12:22:48 UTC	1379	IN	Data Raw: 3d 73 5b 66 5d 2c 65 26 26 28 75 3d 65 2c 68 3d 79 69 28 65 29 2c 68 26 26 76 2e 70 75 73 68 28 68 29 29 3b 72 65 74 75 72 6e 20 75 3f 28 6f 3d 6e 75 6c 6c 2c 6c 28 75 2e 43 6f 6e 73 65 6e 74 53 74 61 74 65 29 3f 6c 28 61 29 7c 7c 28 6f 3d 61 2e 67 65 74 43 6f 6e 73 65 6e 74 53 74 61 74 65 28 29 29 3a 6f 3d 75 2e 43 6f 6e 73 65 6e 74 53 74 61 74 65 2c 63 3d 7b 73 6f 75 72 63 65 5f 72 65 71 75 65 73 74 5f 69 64 3a 72 2e 5f 48 65 6c 70 65 72 73 2e 67 65 6e 65 72 61 74 65 55 6e 69 71 75 65 49 64 28 29 2c 6d 70 69 64 3a 6e 2c 74 69 6d 65 73 74 61 6d 70 5f 75 6e 69 78 74 69 6d 65 5f 6d 73 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 6e 76 69 72 6f 6e 6d 65 6e 74 3a 75 2e 44 65 62 75 67 3f 69 2e 42 61 74 63 68 45 6e 76 69 72 6f 6e 6d 65 Data Ascii: =s[f],e&&(u=e,h=yi(e),h&&v.push(h));return u?(o=null,l(u.ConsentState)?l(a)\|\|(o=a.getConsentState()):o=u.ConsentState,c={source_request_id:r._Helpers.generateUniqueId(),mpid:n,timestamp_unixtime_ms:(new Date).getTime(),environment:u.Debug?i.BatchEnvironme
2024-04-26 12:22:48 UTC	1379	IN	Data Raw: 6e 2e 43 6f 6e 73 65 6e 74 44 6f 63 75 6d 65 6e 74 2c 74 69 6d 65 73 74 61 6d 70 5f 75 6e 69 78 74 69 6d 65 5f 6d 73 3a 6e 2e 54 69 6d 65 73 74 61 6d 70 2c 6c 6f 63 61 74 69 6f 6e 3a 6e 2e 4c 6f 63 61 74 69 6f 6e 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 66 28 74 29 7b 76 61 72 20 69 2c 75 2c 66 2c 72 3b 69 66 28 21 74 7c 7c 21 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 66 6f 72 28 69 3d 7b 7d 2c 75 3d 30 2c 66 3d 74 3b 75 3c 66 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 7b 72 3d 66 5b 75 5d 3b 73 77 69 74 63 68 28 72 2e 54 79 70 65 29 7b 63 61 73 65 20 6e 2e 49 64 65 6e 74 69 74 79 54 79 70 65 2e 43 75 73 74 6f 6d 65 72 49 64 3a 69 2e 63 75 73 74 6f 6d 65 72 5f 69 64 3d 72 2e 49 64 65 6e 74 69 74 79 3b 62 72 65 61 6b 3b 63 61 73 65 20 6e 2e 49 Data Ascii: n.ConsentDocument,timestamp_unixtime_ms:n.Timestamp,location:n.Location}}}function kf(t){var i,u,f,r;if(!t\|\|!t.length)return null;for(i={},u=0,f=t;u<f.length;u++){r=f[u];switch(r.Type){case n.IdentityType.CustomerId:i.customer_id=r.Identity;break;case n.I
2024-04-26 12:22:48 UTC	1379	IN	Data Raw: 61 54 79 70 65 29 7b 63 61 73 65 20 6e 2e 4d 65 73 73 61 67 65 54 79 70 65 2e 41 70 70 53 74 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 3a 72 65 74 75 72 6e 20 65 65 28 74 29 3b 63 61 73 65 20 6e 2e 4d 65 73 73 61 67 65 54 79 70 65 2e 43 6f 6d 6d 65 72 63 65 3a 72 65 74 75 72 6e 20 75 65 28 74 29 3b 63 61 73 65 20 6e 2e 4d 65 73 73 61 67 65 54 79 70 65 2e 43 72 61 73 68 52 65 70 6f 72 74 3a 72 65 74 75 72 6e 20 66 65 28 74 29 3b 63 61 73 65 20 6e 2e 4d 65 73 73 61 67 65 54 79 70 65 2e 4f 70 74 4f 75 74 3a 72 65 74 75 72 6e 20 63 65 28 74 29 3b 63 61 73 65 20 6e 2e 4d 65 73 73 61 67 65 54 79 70 65 2e 50 61 67 65 45 76 65 6e 74 3a 72 65 74 75 72 6e 20 6c 65 28 74 29 3b 63 61 73 65 20 6e 2e 4d 65 73 73 61 67 65 54 79 70 65 2e 50 61 67 65 56 69 65 77 3a 72 65 74 Data Ascii: aType){case n.MessageType.AppStateTransition:return ee(t);case n.MessageType.Commerce:return ue(t);case n.MessageType.CrashReport:return fe(t);case n.MessageType.OptOut:return ce(t);case n.MessageType.PageEvent:return le(t);case n.MessageType.PageView:ret
2024-04-26 12:22:48 UTC	1379	IN	Data Raw: 63 74 41 63 74 69 6f 6e 2e 43 68 65 63 6b 6f 75 74 53 74 65 70 2c 63 68 65 63 6b 6f 75 74 5f 6f 70 74 69 6f 6e 73 3a 6e 2e 50 72 6f 64 75 63 74 41 63 74 69 6f 6e 2e 43 68 65 63 6b 6f 75 74 4f 70 74 69 6f 6e 73 2c 74 72 61 6e 73 61 63 74 69 6f 6e 5f 69 64 3a 6e 2e 50 72 6f 64 75 63 74 41 63 74 69 6f 6e 2e 54 72 61 6e 73 61 63 74 69 6f 6e 49 64 2c 61 66 66 69 6c 69 61 74 69 6f 6e 3a 6e 2e 50 72 6f 64 75 63 74 41 63 74 69 6f 6e 2e 41 66 66 69 6c 69 61 74 69 6f 6e 2c 74 6f 74 61 6c 5f 61 6d 6f 75 6e 74 3a 6e 2e 50 72 6f 64 75 63 74 41 63 74 69 6f 6e 2e 54 6f 74 61 6c 41 6d 6f 75 6e 74 2c 74 61 78 5f 61 6d 6f 75 6e 74 3a 6e 2e 50 72 6f 64 75 63 74 41 63 74 69 6f 6e 2e 54 61 78 41 6d 6f 75 6e 74 2c 73 68 69 70 70 69 6e 67 5f 61 6d 6f 75 6e 74 3a 6e 2e 50 72 6f Data Ascii: ctAction.CheckoutStep,checkout_options:n.ProductAction.CheckoutOptions,transaction_id:n.ProductAction.TransactionId,affiliation:n.ProductAction.Affiliation,total_amount:n.ProductAction.TotalAmount,tax_amount:n.ProductAction.TaxAmount,shipping_amount:n.Pro
2024-04-26 12:22:48 UTC	1379	IN	Data Raw: 69 28 6e 2e 53 68 6f 70 70 69 6e 67 43 61 72 74 2e 50 72 6f 64 75 63 74 4c 69 73 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 65 28 6e 29 7b 76 61 72 20 72 3d 6e 74 28 6e 29 2c 74 3d 7b 63 75 73 74 6f 6d 5f 66 6c 61 67 73 3a 6e 2e 43 75 73 74 6f 6d 46 6c 61 67 73 2c 70 72 6f 64 75 63 74 5f 61 63 74 69 6f 6e 3a 67 66 28 6e 29 2c 70 72 6f 6d 6f 74 69 6f 6e 5f 61 63 74 69 6f 6e 3a 6e 65 28 6e 29 2c 70 72 6f 64 75 63 74 5f 69 6d 70 72 65 73 73 69 6f 6e 73 3a 69 65 28 6e 29 2c 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 3a 72 65 28 6e 29 2c 63 75 72 72 65 6e 63 79 5f 63 6f 64 65 3a 6e 2e 43 75 72 72 65 6e 63 79 43 6f 64 65 7d 3b 72 65 74 75 72 6e 20 74 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 2c 72 29 2c 7b 65 76 65 6e 74 5f 74 79 70 65 3a 69 2e 45 76 65 6e 74 Data Ascii: i(n.ShoppingCart.ProductList)}}function ue(n){var r=nt(n),t={custom_flags:n.CustomFlags,product_action:gf(n),promotion_action:ne(n),product_impressions:ie(n),shopping_cart:re(n),currency_code:n.CurrencyCode};return t=Object.assign(t,r),{event_type:i.Event
2024-04-26 12:22:48 UTC	1379	IN	Data Raw: 74 75 72 6e 20 74 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 2c 72 29 2c 7b 65 76 65 6e 74 5f 74 79 70 65 3a 69 2e 45 76 65 6e 74 54 79 70 65 45 6e 75 6d 2e 63 75 73 74 6f 6d 45 76 65 6e 74 2c 64 61 74 61 3a 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 65 28 74 29 7b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 20 6e 2e 45 76 65 6e 74 54 79 70 65 2e 4f 74 68 65 72 3a 72 65 74 75 72 6e 20 69 2e 43 75 73 74 6f 6d 45 76 65 6e 74 44 61 74 61 43 75 73 74 6f 6d 45 76 65 6e 74 54 79 70 65 45 6e 75 6d 2e 6f 74 68 65 72 3b 63 61 73 65 20 6e 2e 45 76 65 6e 74 54 79 70 65 2e 4c 6f 63 61 74 69 6f 6e 3a 72 65 74 75 72 6e 20 69 2e 43 75 73 74 6f 6d 45 76 65 6e 74 44 61 74 61 43 75 73 74 6f 6d 45 76 65 6e 74 54 79 70 65 45 6e 75 6d 2e 6c 6f 63 61 74 69 6f 6e 3b 63 61 73 65 Data Ascii: turn t=Object.assign(t,r),{event_type:i.EventTypeEnum.customEvent,data:t}}function ae(t){switch(t){case n.EventType.Other:return i.CustomEventDataCustomEventTypeEnum.other;case n.EventType.Location:return i.CustomEventDataCustomEventTypeEnum.location;case

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49746	23.193.120.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:48 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 12:22:49 UTC	530	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0DZ+oYgAAAABSxwJpMgMuSLkfS640ajfFQVRBRURHRTEyMTkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=67316 Date: Fri, 26 Apr 2024 12:22:49 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-26 12:22:49 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49751	52.84.150.50	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:49 UTC	694	OUT	GET /_next/static/chunks/main-6922df91ee43af36.js HTTP/1.1 Host: account.venmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; _csrf=DDftkNPgEA155iagiWokS3RO
2024-04-26 12:22:49 UTC	705	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 487736 Connection: close Date: Fri, 26 Apr 2024 12:22:49 GMT Server: nginx x-powered-by: Express Cache-Control: public, max-age=31536000, immutable x-frame-options: deny Accept-Ranges: bytes Last-Modified: Wed, 17 Apr 2024 16:20:43 GMT ETag: W/"77138-18eecdc4778" x-envoy-upstream-service-time: 4 strict-transport-security: max-age=31536000 Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 36ea6dd189c44828d601e9c9f53e7486.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C4 X-Amz-Cf-Id: 02avInOGAdm5Un4x6jZ-AsgFxZxrRtY65oUBQ5fYxIPOtNUBaJnFtQ==
2024-04-26 12:22:49 UTC	15679	IN	Data Raw: 2f 2a 2a 2a 2a 2a 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 2f 2f 20 77 65 62 70 61 63 6b 42 6f 6f 74 73 74 72 61 70 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 20 3d 20 28 7b 0a 0a 2f 2a 2a 2a 2f 20 39 36 30 38 36 3a 0a 2f 2a 2a 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 6d 6f 64 75 6c 65 29 20 7b 0a 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 73 73 69 67 6e 20 3d 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 4f 62 6a 65 63 74 29 3b 0a 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 61 73 73 69 67 6e 3b 0a 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 5b 22 64 65 66 61 75 6c 74 22 5d 20 3d 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3b 0a 0a 2f 2f 23 20 73 6f Data Ascii: /****/ (function() { // webpackBootstrap/**/ var __webpack_modules__ = ({// 96086:/**/ (function(module) {"use strict";var assign = Object.assign.bind(Object);module.exports = assign;module.exports["default"] = module.exports;//# so
2024-04-26 12:22:49 UTC	16384	IN	Data Raw: 74 6f 72 28 6f 62 6a 2c 20 6b 65 79 29 20 3a 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 65 73 63 2e 67 65 74 20 7c 7c 20 64 65 73 63 2e 73 65 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 65 77 4f 62 6a 2c 20 6b 65 79 2c 20 64 65 73 63 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 65 77 4f 62 6a 5b 6b 65 79 5d 20 3d 20 6f 62 6a 5b 6b 65 79 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 Data Ascii: tor(obj, key) : {}; if (desc.get \|\| desc.set) { Object.defineProperty(newObj, key, desc); } else { newObj[key] = obj[key]; } }
2024-04-26 12:22:49 UTC	196	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 7d 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 6f 63 61 6c 65 3a 20 69 6e 69 74 69 61 6c 44 61 74 61 2e 6c 6f 63 61 6c 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 6f 63 61 6c 65 73 3a 20 69 6e 69 74 69 61 6c 44 61 74 61 2e 6c 6f 63 61 6c 65 73 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 65 66 61 75 6c 74 4c 6f 63 61 6c 65 3a 20 64 65 66 61 75 6c 74 4c Data Ascii: })); }, locale: initialData.locale, locales: initialData.locales, defaultLocale: defaultL
2024-04-26 12:22:49 UTC	16384	IN	Data Raw: 6f 63 61 6c 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 6d 61 69 6e 4c 6f 63 61 6c 65 73 3a 20 69 6e 69 74 69 61 6c 44 61 74 61 2e 64 6f 6d 61 69 6e 4c 6f 63 61 6c 65 73 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 73 50 72 65 76 69 65 77 3a 20 69 6e 69 74 69 61 6c 44 61 74 61 2e 69 73 50 72 65 76 69 65 77 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 73 52 73 63 3a 20 69 6e 69 74 69 61 6c 44 61 74 61 2e 72 73 63 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 6e 64 65 72 43 74 78 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ocale, domainLocales: initialData.domainLocales, isPreview: initialData.isPreview, isRsc: initialData.rsc }); renderCtx = {
2024-04-26 12:22:49 UTC	15990	IN	Data Raw: 2c 20 5f 29 2e 68 79 64 72 61 74 65 28 29 3b 0a 7d 29 2e 63 61 74 63 68 28 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 29 3b 0a 69 66 20 28 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 2e 64 65 66 61 75 6c 74 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 7c 7c 20 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 2e 64 65 66 61 75 6c 74 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 26 26 20 65 78 70 6f 72 74 73 2e 64 65 66 61 75 6c 74 20 21 3d 3d 20 6e 75 6c 6c 29 20 7b 0a 20 20 20 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 65 78 70 6f 72 74 73 2e 64 65 66 61 75 6c 74 2c 20 65 78 70 6f 72 74 73 29 3b 0a 20 20 20 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 65 78 70 6f 72 74 73 2e 64 65 66 61 75 6c 74 3b 0a 7d 20 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 Data Ascii: , _).hydrate();}).catch(console.error);if (typeof exports.default === "function" \|\| typeof exports.default === "object" && exports.default !== null) { Object.assign(exports.default, exports); module.exports = exports.default;} //# sourceMapping
2024-04-26 12:22:49 UTC	394	IN	Data Raw: 65 6e 74 28 64 6f 63 75 6d 65 6e 74 2e 74 69 74 6c 65 29 3b 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 70 61 67 65 48 65 61 64 65 72 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 68 31 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 65 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 6f 6e 74 65 6e 74 20 3d 20 28 72 65 66 20 3d 20 70 61 67 65 48 65 61 64 65 72 20 3d 3d 3d 20 6e 75 6c 6c 20 7c 7c 20 70 61 67 65 48 65 61 64 65 72 20 3d 3d 3d 20 76 6f 69 64 20 30 20 3f 20 76 6f 69 64 20 30 20 3a 20 70 61 67 65 48 65 61 64 65 72 2e 69 6e 6e 65 72 54 65 78 74 29 20 21 3d 3d 20 6e 75 6c 6c 20 26 26 20 72 65 66 20 21 3d 3d 20 76 6f 69 64 20 30 Data Ascii: ent(document.title); } else { var pageHeader = document.querySelector("h1"); var ref; var content = (ref = pageHeader === null \|\| pageHeader === void 0 ? void 0 : pageHeader.innerText) !== null && ref !== void 0
2024-04-26 12:22:49 UTC	16384	IN	Data Raw: 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 2c 20 5b 0a 20 20 20 20 20 20 20 20 61 73 50 61 74 68 0a 20 20 20 20 5d 29 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 2f 2a 23 5f 5f 50 55 52 45 5f 5f 2a 2f 20 5f 72 65 61 63 74 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 22 2c 20 7b 0a 20 20 20 20 20 20 20 20 22 61 72 69 61 2d 6c 69 76 65 22 3a 20 22 61 73 73 65 72 74 69 76 65 22 20 2f 2f 20 4d 61 6b 65 20 74 68 65 20 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 20 69 6d 6d 65 64 69 61 74 65 6c 79 2e 0a 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 69 64 3a 20 22 5f 5f 6e 65 78 74 2d 72 6f 75 74 65 2d 61 6e 6e 6f 75 6e 63 65 72 5f 5f 22 2c 0a 20 20 20 20 20 20 20 20 72 6f 6c 65 3a 20 22 61 6c 65 72 74 22 2c 0a 20 20 20 20 20 Data Ascii: ); } }, [ asPath ]); return /#__PURE__/ _react.default.createElement("p", { "aria-live": "assertive" // Make the announcement immediately. , id: "__next-route-announcer__", role: "alert",
2024-04-26 12:22:49 UTC	16384	IN	Data Raw: 69 63 52 6f 75 74 65 72 49 6e 73 74 61 6e 63 65 3b 0a 65 78 70 6f 72 74 73 5b 22 64 65 66 61 75 6c 74 22 5d 20 3d 20 76 6f 69 64 20 30 3b 0a 76 61 72 20 5f 72 65 61 63 74 20 3d 20 5f 69 6e 74 65 72 6f 70 52 65 71 75 69 72 65 44 65 66 61 75 6c 74 28 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 36 37 32 39 34 29 29 3b 0a 76 61 72 20 5f 72 6f 75 74 65 72 20 3d 20 5f 69 6e 74 65 72 6f 70 52 65 71 75 69 72 65 44 65 66 61 75 6c 74 28 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 34 31 30 30 33 29 29 3b 0a 76 61 72 20 5f 72 6f 75 74 65 72 43 6f 6e 74 65 78 74 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 37 32 36 39 32 29 3b 0a 76 61 72 20 5f 69 73 45 72 72 6f 72 20 3d 20 5f 69 6e 74 65 72 6f 70 52 65 71 75 69 Data Ascii: icRouterInstance;exports["default"] = void 0;var _react = _interopRequireDefault(__webpack_require__(67294));var _router = _interopRequireDefault(__webpack_require__(41003));var _routerContext = __webpack_require__(72692);var _isError = _interopRequi
2024-04-26 12:22:49 UTC	16384	IN	Data Raw: 43 6f 6e 74 65 78 74 28 5f 68 65 61 64 4d 61 6e 61 67 65 72 43 6f 6e 74 65 78 74 2e 48 65 61 64 4d 61 6e 61 67 65 72 43 6f 6e 74 65 78 74 29 2c 20 75 70 64 61 74 65 53 63 72 69 70 74 73 20 3d 20 72 65 66 2e 75 70 64 61 74 65 53 63 72 69 70 74 73 2c 20 73 63 72 69 70 74 73 20 3d 20 72 65 66 2e 73 63 72 69 70 74 73 2c 20 67 65 74 49 73 53 73 72 20 3d 20 72 65 66 2e 67 65 74 49 73 53 73 72 3b 0a 20 20 20 20 28 30 2c 20 5f 72 65 61 63 74 29 2e 75 73 65 45 66 66 65 63 74 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 73 74 72 61 74 65 67 79 20 3d 3d 3d 20 22 61 66 74 65 72 49 6e 74 65 72 61 63 74 69 76 65 22 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 6f 61 64 53 63 72 69 70 74 28 70 72 6f 70 73 29 3b 0a 20 20 20 20 20 20 Data Ascii: Context(_headManagerContext.HeadManagerContext), updateScripts = ref.updateScripts, scripts = ref.scripts, getIsSsr = ref.getIsSsr; (0, _react).useEffect(function() { if (strategy === "afterInteractive") { loadScript(props);
2024-04-26 12:22:49 UTC	16384	IN	Data Raw: 45 66 66 65 63 74 20 3d 20 5f 69 6e 74 65 72 6f 70 52 65 71 75 69 72 65 44 65 66 61 75 6c 74 28 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 33 31 34 33 36 29 29 3b 0a 76 61 72 20 5f 61 6d 70 43 6f 6e 74 65 78 74 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 34 30 36 31 30 29 3b 0a 76 61 72 20 5f 68 65 61 64 4d 61 6e 61 67 65 72 43 6f 6e 74 65 78 74 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 34 36 36 34 29 3b 0a 76 61 72 20 5f 61 6d 70 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 39 31 36 38 36 29 3b 0a 76 61 72 20 5f 75 74 69 6c 73 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 36 37 30 29 3b 0a 66 75 6e 63 74 69 6f 6e 20 5f 69 6e 74 65 72 6f 70 Data Ascii: Effect = _interopRequireDefault(__webpack_require__(31436));var _ampContext = __webpack_require__(40610);var _headManagerContext = __webpack_require__(4664);var _amp = __webpack_require__(91686);var _utils = __webpack_require__(670);function _interop

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49750	52.84.150.50	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:49 UTC	700	OUT	GET /_next/static/chunks/pages/_app-0a560d71483f9f85.js HTTP/1.1 Host: account.venmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; _csrf=DDftkNPgEA155iagiWokS3RO
2024-04-26 12:22:49 UTC	707	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 4618992 Connection: close Date: Fri, 26 Apr 2024 12:22:49 GMT Server: nginx x-powered-by: Express Cache-Control: public, max-age=31536000, immutable x-frame-options: deny Accept-Ranges: bytes Last-Modified: Wed, 17 Apr 2024 16:20:43 GMT ETag: W/"467af0-18eecdc4778" x-envoy-upstream-service-time: 4 strict-transport-security: max-age=31536000 Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 285957c614f44b19c6899b907506f070.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C4 X-Amz-Cf-Id: EFjqnpIGGr982w2Kl2Lo386AGSuFcyGzpjUDoO2zw-mJJiaNRDuHpA==
2024-04-26 12:22:49 UTC	8949	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 38 38 38 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 38 33 39 37 34 3a 0a 2f 2a 2a 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 5f 5f 75 6e 75 73 65 64 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 0a 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 2f 2a 20 68 61 72 6d 6f 6e 79 20 65 78 70 6f 72 74 20 2a 2f 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 64 28 5f 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 5f 5f 2c 20 7b 0a Data Ascii: (self["webpackChunk_N_E"] = self["webpackChunk_N_E"] \|\| []).push([[2888],{/*/ 83974:// (function(__unused_webpack_module, __webpack_exports__, __webpack_require__) {"use strict";/ harmony export */ __webpack_require__.d(__webpack_exports__, {
2024-04-26 12:22:49 UTC	16384	IN	Data Raw: 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 5f 74 68 69 73 2e 72 65 6a 65 63 74 28 72 65 61 73 6f 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 5f 74 68 69 73 2e 73 6f 75 72 63 65 73 20 3d 20 5b 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 5f 74 68 69 73 2e 68 61 6e 64 6c 65 72 73 2e 63 6f 6d 70 6c 65 74 65 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 5f 74 68 69 73 2e 70 72 6f 6d 69 73 65 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 5f 29 20 7b 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 73 6f 75 72 63 65 73 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 6f 75 72 63 65 73 20 3d 20 5b 6e 65 77 20 28 7a 65 6e 5f 6f 62 73 65 72 76 61 62 6c 65 Data Ascii: n) { _this.reject(reason); _this.sources = []; _this.handlers.complete(); }; _this.promise.catch(function (_) { }); if (typeof sources === "function") { sources = [new (zen_observable
2024-04-26 12:22:49 UTC	6924	IN	Data Raw: 6e 63 74 69 6f 6e 20 28 6f 70 74 69 6f 6e 73 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 5f 74 68 69 73 20 3d 20 74 68 69 73 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 75 62 73 63 72 69 70 74 69 6f 6e 20 3d 20 74 68 69 73 2e 71 75 65 72 79 4d 61 6e 61 67 65 72 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 73 74 61 72 74 47 72 61 70 68 51 4c 53 75 62 73 63 72 69 70 74 69 6f 6e 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 71 75 65 72 79 3a 20 6f 70 74 69 6f 6e 73 2e 64 6f 63 75 6d 65 6e 74 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 69 61 62 6c 65 73 3a 20 6f 70 74 69 6f 6e 73 2e 76 61 72 69 61 62 6c 65 73 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 65 78 74 3a 20 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 65 78 74 2c 0a 20 20 20 20 20 20 20 20 Data Ascii: nction (options) { var _this = this; var subscription = this.queryManager .startGraphQLSubscription({ query: options.document, variables: options.variables, context: options.context,
2024-04-26 12:22:49 UTC	16384	IN	Data Raw: 72 65 71 75 69 72 65 5f 5f 28 37 37 33 30 34 29 3b 0a 2f 2f 20 45 58 54 45 52 4e 41 4c 20 4d 4f 44 55 4c 45 3a 20 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 61 70 6f 6c 6c 6f 2f 63 6c 69 65 6e 74 2f 75 74 69 6c 69 74 69 65 73 2f 63 6f 6d 6d 6f 6e 2f 6d 65 72 67 65 44 65 65 70 2e 6a 73 0a 76 61 72 20 6d 65 72 67 65 44 65 65 70 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 38 37 37 34 32 29 3b 0a 2f 2f 20 45 58 54 45 52 4e 41 4c 20 4d 4f 44 55 4c 45 3a 20 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 61 70 6f 6c 6c 6f 2f 63 6c 69 65 6e 74 2f 75 74 69 6c 69 74 69 65 73 2f 67 72 61 70 68 71 6c 2f 66 72 61 67 6d 65 6e 74 73 2e 6a 73 0a 76 61 72 20 67 72 61 70 68 71 6c 5f 66 72 61 67 6d 65 6e 74 73 20 3d 20 5f 5f 77 65 62 70 61 63 Data Ascii: require__(77304);// EXTERNAL MODULE: ./node_modules/@apollo/client/utilities/common/mergeDeep.jsvar mergeDeep = __webpack_require__(87742);// EXTERNAL MODULE: ./node_modules/@apollo/client/utilities/graphql/fragments.jsvar graphql_fragments = __webpac
2024-04-26 12:22:49 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 76 61 72 69 61 62 6c 65 73 3a 20 71 75 65 72 79 2e 76 61 72 69 61 62 6c 65 73 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6e 65 74 77 6f 72 6b 45 72 72 6f 72 3a 20 6e 75 6c 6c 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 67 72 61 70 68 51 4c 45 72 72 6f 72 73 3a 20 74 68 69 73 2e 67 72 61 70 68 51 4c 45 72 72 6f 72 73 20 7c 7c 20 5b 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6e 65 74 77 6f 72 6b 53 74 61 74 75 73 3a 20 6e 65 74 77 6f 72 6b 53 74 61 74 75 73 2c 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 71 75 65 72 79 2e 6f 62 73 65 72 76 61 62 6c 65 51 75 65 72 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 73 65 74 4f 62 73 65 72 76 61 62 6c 65 51 75 65 72 79 28 71 75 65 72 79 2e Data Ascii: variables: query.variables, networkError: null, graphQLErrors: this.graphQLErrors \|\| [], networkStatus: networkStatus, }); if (query.observableQuery) { this.setObservableQuery(query.
2024-04-26 12:22:49 UTC	16384	IN	Data Raw: 28 72 65 66 65 74 63 68 51 75 65 72 69 65 73 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 66 65 74 63 68 51 75 65 72 69 65 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 72 65 66 65 74 63 68 51 75 65 72 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 72 65 66 65 74 63 68 51 75 65 72 79 20 3d 3d 3d 20 27 73 74 72 69 6e 67 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 Data Ascii: (refetchQueries)) { refetchQueries.forEach(function (refetchQuery) { if (typeof refetchQuery === 'string') { se
2024-04-26 12:22:49 UTC	16384	IN	Data Raw: 6f 6e 5f 31 29 20 26 26 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 79 56 61 72 69 61 62 6c 65 73 5f 31 2e 73 69 7a 65 20 3c 20 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 46 6c 69 67 68 74 4c 69 6e 6b 4f 62 73 65 72 76 61 62 6c 65 73 5f 31 2e 64 65 6c 65 74 65 28 73 65 72 76 65 72 51 75 65 72 79 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: on_1) && byVariables_1.size < 1) { inFlightLinkObservables_1.delete(serverQuery); } }); } } else {
2024-04-26 12:22:49 UTC	16384	IN	Data Raw: 61 67 65 72 2e 63 6c 65 61 72 53 74 6f 72 65 28 29 3b 20 7d 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5f 74 68 69 73 2e 63 6c 65 61 72 53 74 6f 72 65 43 61 6c 6c 62 61 63 6b 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 20 28 66 6e 29 20 7b 20 72 65 74 75 72 6e 20 66 6e 28 29 3b 20 7d 29 29 3b 20 7d 29 3b 0a 20 20 20 20 7d 3b 0a 20 20 20 20 41 70 6f 6c 6c 6f 43 6c 69 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 52 65 73 65 74 53 74 6f 72 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 63 62 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 5f 74 68 69 73 20 3d 20 74 68 69 73 3b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 72 65 73 65 74 53 74 6f 72 65 Data Ascii: ager.clearStore(); }) .then(function () { return Promise.all(_this.clearStoreCallbacks.map(function (fn) { return fn(); })); }); }; ApolloClient.prototype.onResetStore = function (cb) { var _this = this; this.resetStore
2024-04-26 12:22:49 UTC	16384	IN	Data Raw: 74 68 20 3d 3d 3d 20 30 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 41 70 6f 6c 6c 6f 4c 69 6e 6b 2e 65 6d 70 74 79 28 29 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6c 69 6e 6b 73 2e 6d 61 70 28 74 6f 4c 69 6e 6b 29 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 20 28 78 2c 20 79 29 20 7b 20 72 65 74 75 72 6e 20 78 2e 63 6f 6e 63 61 74 28 79 29 3b 20 7d 29 3b 0a 20 20 20 20 7d 3b 0a 20 20 20 20 41 70 6f 6c 6c 6f 4c 69 6e 6b 2e 73 70 6c 69 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 65 73 74 2c 20 6c 65 66 74 2c 20 72 69 67 68 74 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6c 65 66 74 4c 69 6e 6b 20 3d 20 74 6f 4c 69 6e 6b 28 6c 65 66 74 29 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 69 67 68 74 4c 69 6e 6b 20 3d 20 74 6f Data Ascii: th === 0) return ApolloLink.empty(); return links.map(toLink).reduce(function (x, y) { return x.concat(y); }); }; ApolloLink.split = function (test, left, right) { var leftLink = toLink(left); var rightLink = to
2024-04-26 12:22:49 UTC	16384	IN	Data Raw: 61 6d 65 2c 20 6a 6f 69 6e 28 64 69 72 65 63 74 69 76 65 73 2c 20 27 20 27 29 2c 20 62 6c 6f 63 6b 28 66 69 65 6c 64 73 29 5d 2c 20 27 20 27 29 3b 0a 20 20 7d 29 2c 0a 20 20 44 69 72 65 63 74 69 76 65 44 65 66 69 6e 69 74 69 6f 6e 3a 20 61 64 64 44 65 73 63 72 69 70 74 69 6f 6e 28 66 75 6e 63 74 69 6f 6e 20 28 5f 72 65 66 33 31 29 20 7b 0a 20 20 20 20 76 61 72 20 6e 61 6d 65 20 3d 20 5f 72 65 66 33 31 2e 6e 61 6d 65 2c 0a 20 20 20 20 20 20 20 20 61 72 67 73 20 3d 20 5f 72 65 66 33 31 2e 61 72 67 75 6d 65 6e 74 73 2c 0a 20 20 20 20 20 20 20 20 72 65 70 65 61 74 61 62 6c 65 20 3d 20 5f 72 65 66 33 31 2e 72 65 70 65 61 74 61 62 6c 65 2c 0a 20 20 20 20 20 20 20 20 6c 6f 63 61 74 69 6f 6e 73 20 3d 20 5f 72 65 66 33 31 2e 6c 6f 63 61 74 69 6f 6e 73 3b 0a 20 20 Data Ascii: ame, join(directives, ' '), block(fields)], ' '); }), DirectiveDefinition: addDescription(function (_ref31) { var name = _ref31.name, args = _ref31.arguments, repeatable = _ref31.repeatable, locations = _ref31.locations;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49756	52.84.150.50	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:49 UTC	702	OUT	GET /_next/static/KayRtQ_1ym5_-NM6DR61r/_buildManifest.js HTTP/1.1 Host: account.venmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; _csrf=DDftkNPgEA155iagiWokS3RO
2024-04-26 12:22:49 UTC	703	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 36413 Connection: close Date: Fri, 26 Apr 2024 12:22:49 GMT Server: nginx x-powered-by: Express Cache-Control: public, max-age=31536000, immutable x-frame-options: deny Accept-Ranges: bytes Last-Modified: Wed, 17 Apr 2024 16:20:43 GMT ETag: W/"8e3d-18eecdc4778" x-envoy-upstream-service-time: 3 strict-transport-security: max-age=31536000 Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 b8848f7d85efd91eade9002255af21c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: svkY6i8U7m0dvJoEcEekdsLu2hq6361HXaS6muTCb0yk8TXK18g9TQ==
2024-04-26 12:22:49 UTC	15681	IN	Data Raw: 73 65 6c 66 2e 5f 5f 42 55 49 4c 44 5f 4d 41 4e 49 46 45 53 54 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 29 7b 72 65 74 75 72 6e 20 7b 5f 5f 72 65 77 72 69 74 65 73 3a 7b 62 65 66 6f 72 65 46 69 6c 65 73 3a 5b 7b 73 6f 75 72 63 65 3a 22 5c 75 30 30 32 46 3a 6e 65 78 74 49 6e 74 65 72 6e 61 6c 4c 6f 63 61 6c 65 28 65 6e 29 5c 75 30 30 32 46 73 69 67 6e 75 70 22 2c 64 65 73 74 69 6e 61 74 69 6f 6e 3a 22 5c 75 30 30 32 46 3a 6e 65 78 74 49 6e 74 65 72 6e 61 6c 4c 6f 63 61 6c 65 5c 75 30 30 32 46 73 69 67 6e 75 70 5c 75 30 30 32 46 6c 6f 67 67 65 64 2d 69 6e 2d 73 69 67 6e 2d 75 70 22 2c 68 61 73 3a 5b 7b 74 79 70 65 3a 22 63 6f 6f 6b 69 65 22 2c 6b 65 79 3a 22 61 70 69 5f 61 63 63 65 73 73 5f 74 6f 6b 65 Data Ascii: self.__BUILD_MANIFEST = (function(a,b,c,d,e,f,g,h,i,j){return {__rewrites:{beforeFiles:[{source:"\u002F:nextInternalLocale(en)\u002Fsignup",destination:"\u002F:nextInternalLocale\u002Fsignup\u002Flogged-in-sign-up",has:[{type:"cookie",key:"api_access_toke
2024-04-26 12:22:49 UTC	16299	IN	Data Raw: 73 5c 75 30 30 32 46 70 61 67 65 73 5c 75 30 30 32 46 73 65 74 74 69 6e 67 73 5c 75 30 30 32 46 70 72 6f 66 69 6c 65 2d 61 62 36 65 36 66 62 30 38 64 61 63 36 38 61 38 2e 6a 73 22 5d 2c 22 2f 73 65 74 74 69 6e 67 73 2f 70 72 6f 66 69 6c 65 2f 63 61 6e 63 65 6c 22 3a 5b 22 73 74 61 74 69 63 5c 75 30 30 32 46 63 73 73 5c 75 30 30 32 46 65 34 32 62 38 39 31 32 31 36 66 62 37 36 38 38 2e 63 73 73 22 2c 22 73 74 61 74 69 63 5c 75 30 30 32 46 63 68 75 6e 6b 73 5c 75 30 30 32 46 70 61 67 65 73 5c 75 30 30 32 46 73 65 74 74 69 6e 67 73 5c 75 30 30 32 46 70 72 6f 66 69 6c 65 5c 75 30 30 32 46 63 61 6e 63 65 6c 2d 61 30 39 32 35 61 37 65 30 64 64 63 32 34 61 39 2e 6a 73 22 5d 2c 22 2f 73 65 74 74 69 6e 67 73 2f 70 72 6f 66 69 6c 65 2f 63 61 6e 63 65 6c 2f 63 6f 6e Data Ascii: s\u002Fpages\u002Fsettings\u002Fprofile-ab6e6fb08dac68a8.js"],"/settings/profile/cancel":["static\u002Fcss\u002Fe42b891216fb7688.css","static\u002Fchunks\u002Fpages\u002Fsettings\u002Fprofile\u002Fcancel-a0925a7e0ddc24a9.js"],"/settings/profile/cancel/con
2024-04-26 12:22:49 UTC	788	IN	Data Raw: 30 30 32 46 70 65 6f 70 6c 65 22 2c 22 5c 75 30 30 32 46 73 65 74 74 69 6e 67 73 5c 75 30 30 32 46 70 65 6f 70 6c 65 5c 75 30 30 32 46 74 72 61 6e 73 66 65 72 22 2c 22 5c 75 30 30 32 46 73 65 74 74 69 6e 67 73 5c 75 30 30 32 46 70 72 69 76 61 63 79 22 2c 22 5c 75 30 30 32 46 73 65 74 74 69 6e 67 73 5c 75 30 30 32 46 70 72 69 76 61 63 79 5c 75 30 30 32 46 72 65 70 6f 72 74 22 2c 22 5c 75 30 30 32 46 73 65 74 74 69 6e 67 73 5c 75 30 30 32 46 70 72 6f 66 69 6c 65 22 2c 22 5c 75 30 30 32 46 73 65 74 74 69 6e 67 73 5c 75 30 30 32 46 70 72 6f 66 69 6c 65 5c 75 30 30 32 46 63 61 6e 63 65 6c 22 2c 22 5c 75 30 30 32 46 73 65 74 74 69 6e 67 73 5c 75 30 30 32 46 70 72 6f 66 69 6c 65 5c 75 30 30 32 46 63 61 6e 63 65 6c 5c 75 30 30 32 46 63 6f 6e 66 69 72 6d 22 2c 22 Data Ascii: 002Fpeople","\u002Fsettings\u002Fpeople\u002Ftransfer","\u002Fsettings\u002Fprivacy","\u002Fsettings\u002Fprivacy\u002Freport","\u002Fsettings\u002Fprofile","\u002Fsettings\u002Fprofile\u002Fcancel","\u002Fsettings\u002Fprofile\u002Fcancel\u002Fconfirm","
2024-04-26 12:22:49 UTC	3645	IN	Data Raw: 74 65 64 22 2c 22 5c 75 30 30 32 46 73 69 67 6e 75 70 5c 75 30 30 32 46 62 75 73 69 6e 65 73 73 5c 75 30 30 32 46 61 64 64 2d 61 64 64 72 65 73 73 22 2c 22 5c 75 30 30 32 46 73 69 67 6e 75 70 5c 75 30 30 32 46 62 75 73 69 6e 65 73 73 5c 75 30 30 32 46 62 61 73 69 63 2d 69 6e 66 6f 22 2c 22 5c 75 30 30 32 46 73 69 67 6e 75 70 5c 75 30 30 32 46 62 75 73 69 6e 65 73 73 5c 75 30 30 32 46 6e 6f 74 2d 65 6c 69 67 69 62 6c 65 2d 65 72 72 6f 72 22 2c 22 5c 75 30 30 32 46 73 69 67 6e 75 70 5c 75 30 30 32 46 62 75 73 69 6e 65 73 73 5c 75 30 30 32 46 70 72 65 76 69 65 77 22 2c 22 5c 75 30 30 32 46 73 69 67 6e 75 70 5c 75 30 30 32 46 62 75 73 69 6e 65 73 73 5c 75 30 30 32 46 70 75 62 6c 69 63 2d 69 6e 66 6f 22 2c 22 5c 75 30 30 32 46 73 69 67 6e 75 70 5c 75 30 30 32 Data Ascii: ted","\u002Fsignup\u002Fbusiness\u002Fadd-address","\u002Fsignup\u002Fbusiness\u002Fbasic-info","\u002Fsignup\u002Fbusiness\u002Fnot-eligible-error","\u002Fsignup\u002Fbusiness\u002Fpreview","\u002Fsignup\u002Fbusiness\u002Fpublic-info","\u002Fsignup\u002

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49755	52.84.150.50	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:49 UTC	702	OUT	GET /_next/static/chunks/pages/signup-f17224eaac4caa06.js HTTP/1.1 Host: account.venmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; _csrf=DDftkNPgEA155iagiWokS3RO
2024-04-26 12:22:49 UTC	707	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 1559773 Connection: close Date: Fri, 26 Apr 2024 12:22:49 GMT Server: nginx x-powered-by: Express Cache-Control: public, max-age=31536000, immutable x-frame-options: deny Accept-Ranges: bytes Last-Modified: Wed, 17 Apr 2024 16:20:43 GMT ETag: W/"17ccdd-18eecdc4778" x-envoy-upstream-service-time: 4 strict-transport-security: max-age=31536000 Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 c8ae841a6c6a2c20018753bb38ee8774.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C4 X-Amz-Cf-Id: HeWgjFywsCNRDOiaJIjGffDMK_D91SSeGO18RK9RJTJ5hM-cvA00iQ==
2024-04-26 12:22:49 UTC	15432	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 36 31 36 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 32 33 39 38 33 3a 0a 2f 2a 2a 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 5f 5f 75 6e 75 73 65 64 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 0a 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 2f 2f 20 45 53 4d 20 43 4f 4d 50 41 54 20 46 4c 41 47 0a 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 72 28 5f 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 5f 5f 29 3b 0a 0a 2f 2f Data Ascii: (self["webpackChunk_N_E"] = self["webpackChunk_N_E"] \|\| []).push([[7616],{/*/ 23983:/*/ (function(__unused_webpack_module, __webpack_exports__, __webpack_require__) {"use strict";// ESM COMPAT FLAG__webpack_require__.r(__webpack_exports__);//
2024-04-26 12:22:49 UTC	16384	IN	Data Raw: 6c 59 65 61 72 28 29 3b 0a 20 20 64 61 74 65 2e 73 65 74 46 75 6c 6c 59 65 61 72 28 79 65 61 72 20 2b 20 31 2c 20 30 2c 20 30 29 3b 0a 20 20 64 61 74 65 2e 73 65 74 48 6f 75 72 73 28 32 33 2c 20 35 39 2c 20 35 39 2c 20 39 39 39 29 3b 0a 20 20 72 65 74 75 72 6e 20 64 61 74 65 3b 0a 7d 0a 3b 2f 2f 20 43 4f 4e 43 41 54 45 4e 41 54 45 44 20 4d 4f 44 55 4c 45 3a 20 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 64 61 74 65 2d 66 6e 73 2f 65 73 6d 2f 69 73 44 61 74 65 2f 69 6e 64 65 78 2e 6a 73 0a 0a 0a 2f 2a 2a 0a 20 2a 20 40 6e 61 6d 65 20 69 73 44 61 74 65 0a 20 2a 20 40 63 61 74 65 67 6f 72 79 20 43 6f 6d 6d 6f 6e 20 48 65 6c 70 65 72 73 0a 20 2a 20 40 73 75 6d 6d 61 72 79 20 49 73 20 74 68 65 20 67 69 76 65 6e 20 76 61 6c 75 65 20 61 20 64 61 74 65 3f 0a 20 Data Ascii: lYear(); date.setFullYear(year + 1, 0, 0); date.setHours(23, 59, 59, 999); return date;};// CONCATENATED MODULE: ./node_modules/date-fns/esm/isDate/index.js/** * @name isDate * @category Common Helpers * @summary Is the given value a date?
2024-04-26 12:22:49 UTC	16384	IN	Data Raw: 20 72 65 74 75 72 6e 20 61 64 64 4c 65 61 64 69 6e 67 5a 65 72 6f 73 28 66 72 61 63 74 69 6f 6e 61 6c 53 65 63 6f 6e 64 73 2c 20 74 6f 6b 65 6e 2e 6c 65 6e 67 74 68 29 3b 0a 20 20 7d 0a 7d 3b 0a 2f 2a 20 68 61 72 6d 6f 6e 79 20 64 65 66 61 75 6c 74 20 65 78 70 6f 72 74 20 2a 2f 20 76 61 72 20 6c 69 67 68 74 46 6f 72 6d 61 74 74 65 72 73 20 3d 20 28 66 6f 72 6d 61 74 74 65 72 73 29 3b 0a 3b 2f 2f 20 43 4f 4e 43 41 54 45 4e 41 54 45 44 20 4d 4f 44 55 4c 45 3a 20 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 64 61 74 65 2d 66 6e 73 2f 65 73 6d 2f 5f 6c 69 62 2f 66 6f 72 6d 61 74 2f 66 6f 72 6d 61 74 74 65 72 73 2f 69 6e 64 65 78 2e 6a 73 0a 0a 0a 0a 0a 0a 0a 0a 76 61 72 20 64 61 79 50 65 72 69 6f 64 45 6e 75 6d 20 3d 20 7b 0a 20 20 61 6d 3a 20 27 61 6d 27 2c Data Ascii: return addLeadingZeros(fractionalSeconds, token.length); }};/* harmony default export */ var lightFormatters = (formatters);;// CONCATENATED MODULE: ./node_modules/date-fns/esm/_lib/format/formatters/index.jsvar dayPeriodEnum = { am: 'am',
2024-04-26 12:22:49 UTC	441	IN	Data Raw: 6c 75 65 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 27 6e 61 72 72 6f 77 27 2c 0a 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 65 78 74 3a 20 27 66 6f 72 6d 61 74 74 69 6e 67 27 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 63 61 73 65 20 27 62 62 62 62 27 3a 0a 20 20 20 20 20 20 64 65 66 61 75 6c 74 3a 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6c 6f 63 61 6c 69 7a 65 2e 64 61 79 50 65 72 69 6f 64 28 64 61 79 50 65 72 69 6f 64 45 6e 75 6d 56 61 6c 75 65 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 27 77 69 64 65 27 2c 0a 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 65 78 74 3a 20 27 66 6f 72 6d 61 74 74 69 6e 67 27 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 7d 0a 20 20 7d 2c 0a 20 20 2f 2f 20 69 6e Data Ascii: lue, { width: 'narrow', context: 'formatting' }); case 'bbbb': default: return localize.dayPeriod(dayPeriodEnumValue, { width: 'wide', context: 'formatting' }); } }, // in
2024-04-26 12:22:49 UTC	16384	IN	Data Raw: 20 20 20 20 20 64 61 79 50 65 72 69 6f 64 45 6e 75 6d 56 61 6c 75 65 20 3d 20 64 61 79 50 65 72 69 6f 64 45 6e 75 6d 2e 65 76 65 6e 69 6e 67 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 68 6f 75 72 73 20 3e 3d 20 31 32 29 20 7b 0a 20 20 20 20 20 20 64 61 79 50 65 72 69 6f 64 45 6e 75 6d 56 61 6c 75 65 20 3d 20 64 61 79 50 65 72 69 6f 64 45 6e 75 6d 2e 61 66 74 65 72 6e 6f 6f 6e 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 68 6f 75 72 73 20 3e 3d 20 34 29 20 7b 0a 20 20 20 20 20 20 64 61 79 50 65 72 69 6f 64 45 6e 75 6d 56 61 6c 75 65 20 3d 20 64 61 79 50 65 72 69 6f 64 45 6e 75 6d 2e 6d 6f 72 6e 69 6e 67 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 64 61 79 50 65 72 69 6f 64 45 6e 75 6d 56 61 6c 75 65 20 3d 20 64 61 79 50 65 Data Ascii: dayPeriodEnumValue = dayPeriodEnum.evening; } else if (hours >= 12) { dayPeriodEnumValue = dayPeriodEnum.afternoon; } else if (hours >= 4) { dayPeriodEnumValue = dayPeriodEnum.morning; } else { dayPeriodEnumValue = dayPe
2024-04-26 12:22:49 UTC	16384	IN	Data Raw: 5d 3b 0a 20 20 7d 3b 0a 7d 0a 3b 2f 2f 20 43 4f 4e 43 41 54 45 4e 41 54 45 44 20 4d 4f 44 55 4c 45 3a 20 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 64 61 74 65 2d 66 6e 73 2f 65 73 6d 2f 6c 6f 63 61 6c 65 2f 65 6e 2d 55 53 2f 5f 6c 69 62 2f 6c 6f 63 61 6c 69 7a 65 2f 69 6e 64 65 78 2e 6a 73 0a 0a 76 61 72 20 65 72 61 56 61 6c 75 65 73 20 3d 20 7b 0a 20 20 6e 61 72 72 6f 77 3a 20 5b 27 42 27 2c 20 27 41 27 5d 2c 0a 20 20 61 62 62 72 65 76 69 61 74 65 64 3a 20 5b 27 42 43 27 2c 20 27 41 44 27 5d 2c 0a 20 20 77 69 64 65 3a 20 5b 27 42 65 66 6f 72 65 20 43 68 72 69 73 74 27 2c 20 27 41 6e 6e 6f 20 44 6f 6d 69 6e 69 27 5d 0a 7d 3b 0a 76 61 72 20 71 75 61 72 74 65 72 56 61 6c 75 65 73 20 3d 20 7b 0a 20 20 6e 61 72 72 6f 77 3a 20 5b 27 31 27 2c 20 27 32 27 2c Data Ascii: ]; };};// CONCATENATED MODULE: ./node_modules/date-fns/esm/locale/en-US/_lib/localize/index.jsvar eraValues = { narrow: ['B', 'A'], abbreviated: ['BC', 'AD'], wide: ['Before Christ', 'Anno Domini']};var quarterValues = { narrow: ['1', '2',
2024-04-26 12:22:49 UTC	16384	IN	Data Raw: 20 20 20 7c 20 30 31 2c 20 30 32 2c 20 2e 2e 2e 2c 20 31 32 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 20 20 20 20 20 20 20 7c 0a 20 2a 20 7c 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 20 4c 4c 4c 20 20 20 20 20 7c 20 4a 61 6e 2c 20 46 65 62 2c 20 2e 2e 2e 2c 20 44 65 63 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 20 20 20 20 20 20 20 7c 0a 20 2a 20 7c 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 20 4c 4c 4c 4c 20 20 20 20 7c 20 4a 61 6e 75 61 72 79 2c 20 46 65 62 72 75 61 72 79 2c 20 2e 2e 2e 2c 20 44 65 63 65 6d 62 65 72 20 20 7c 20 32 20 20 20 20 20 7c 0a 20 2a 20 7c 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: \| 01, 02, ..., 12 \| \| * \| \| LLL \| Jan, Feb, ..., Dec \| \| * \| \| LLLL \| January, February, ..., December \| 2 \| * \|
2024-04-26 12:22:49 UTC	16384	IN	Data Raw: 6f 6e 73 24 6c 6f 63 61 6c 65 33 2c 20 5f 6f 70 74 69 6f 6e 73 24 6c 6f 63 61 6c 65 33 24 6f 70 74 69 2c 20 5f 64 65 66 61 75 6c 74 4f 70 74 69 6f 6e 73 24 6c 6f 63 61 6c 33 2c 20 5f 64 65 66 61 75 6c 74 4f 70 74 69 6f 6e 73 24 6c 6f 63 61 6c 34 3b 0a 20 20 72 65 71 75 69 72 65 64 41 72 67 73 28 32 2c 20 61 72 67 75 6d 65 6e 74 73 29 3b 0a 20 20 76 61 72 20 66 6f 72 6d 61 74 53 74 72 20 3d 20 53 74 72 69 6e 67 28 64 69 72 74 79 46 6f 72 6d 61 74 53 74 72 29 3b 0a 20 20 76 61 72 20 64 65 66 61 75 6c 74 4f 70 74 69 6f 6e 73 20 3d 20 67 65 74 44 65 66 61 75 6c 74 4f 70 74 69 6f 6e 73 28 29 3b 0a 20 20 76 61 72 20 6c 6f 63 61 6c 65 20 3d 20 28 5f 72 65 66 20 3d 20 28 5f 6f 70 74 69 6f 6e 73 24 6c 6f 63 61 6c 65 20 3d 20 6f 70 74 69 6f 6e 73 20 3d 3d 3d 20 6e Data Ascii: ons$locale3, _options$locale3$opti, _defaultOptions$local3, _defaultOptions$local4; requiredArgs(2, arguments); var formatStr = String(dirtyFormatStr); var defaultOptions = getDefaultOptions(); var locale = (_ref = (_options$locale = options === n
2024-04-26 12:22:49 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 6e 65 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 3a 20 6f 5b 69 2b 2b 5d 0a 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 65 3a 20 66 75 6e 63 74 69 6f 6e 20 65 28 5f 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 5f 65 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 66 3a 20 46 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 7d 0a 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 69 74 65 72 61 74 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c Data Ascii: }; return { done: false, value: o[i++] }; }, e: function e(_e) { throw _e; }, f: F }; } throw new TypeError("Invalid attempt to iterate non-iterabl
2024-04-26 12:22:49 UTC	16384	IN	Data Raw: 61 6c 6c 62 61 63 6b 28 79 65 61 72 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 79 65 61 72 3a 20 79 65 61 72 2c 0a 20 20 20 20 20 20 20 20 20 20 69 73 54 77 6f 44 69 67 69 74 59 65 61 72 3a 20 74 6f 6b 65 6e 20 3d 3d 3d 20 27 79 79 27 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 73 77 69 74 63 68 20 28 74 6f 6b 65 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 63 61 73 65 20 27 79 27 3a 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6d 61 70 56 61 6c 75 65 28 70 61 72 73 65 4e 44 69 67 69 74 73 28 34 2c 20 64 61 74 65 53 74 72 69 6e 67 29 2c 20 76 61 6c 75 65 43 61 6c 6c 62 61 63 6b 29 3b 0a 20 20 20 20 20 20 20 20 63 61 73 65 20 27 79 6f 27 3a 0a 20 20 20 20 20 20 20 20 Data Ascii: allback(year) { return { year: year, isTwoDigitYear: token === 'yy' }; }; switch (token) { case 'y': return mapValue(parseNDigits(4, dateString), valueCallback); case 'yo':

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49752	52.84.150.50	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:49 UTC	700	OUT	GET /_next/static/KayRtQ_1ym5_-NM6DR61r/_ssgManifest.js HTTP/1.1 Host: account.venmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; _csrf=DDftkNPgEA155iagiWokS3RO
2024-04-26 12:22:49 UTC	699	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 135 Connection: close Date: Fri, 26 Apr 2024 12:22:49 GMT Server: nginx x-powered-by: Express Cache-Control: public, max-age=31536000, immutable x-frame-options: deny Accept-Ranges: bytes Last-Modified: Wed, 17 Apr 2024 16:22:06 GMT ETag: W/"87-18eecdd8bb0" x-envoy-upstream-service-time: 3 strict-transport-security: max-age=31536000 Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 ea71b96212c28d5f0611046b8d2932f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C4 X-Amz-Cf-Id: wlcJNoo4aggX5B5-qOsxCWvePTYLSemWdIcnkzQsr-e0paOCkrXt-g==
2024-04-26 12:22:49 UTC	135	IN	Data Raw: 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 3d 6e 65 77 20 53 65 74 28 5b 22 5c 75 30 30 32 46 77 65 62 76 69 65 77 73 22 2c 22 5c 75 30 30 32 46 34 30 34 22 2c 22 5c 75 30 30 32 46 6c 6f 67 69 6e 2d 72 65 74 75 72 6e 2d 65 72 72 6f 72 22 5d 29 3b 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 26 26 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 28 29 Data Ascii: self.__SSG_MANIFEST=new Set(["\u002Fwebviews","\u002F404","\u002Flogin-return-error"]);self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49754	52.84.150.50	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:49 UTC	707	OUT	GET /_next/static/KayRtQ_1ym5_-NM6DR61r/_middlewareManifest.js HTTP/1.1 Host: account.venmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; _csrf=DDftkNPgEA155iagiWokS3RO
2024-04-26 12:22:49 UTC	700	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 353 Connection: close Date: Fri, 26 Apr 2024 12:22:49 GMT Server: nginx x-powered-by: Express Cache-Control: public, max-age=31536000, immutable x-frame-options: deny Accept-Ranges: bytes Last-Modified: Wed, 17 Apr 2024 16:22:06 GMT ETag: W/"161-18eecdd8bb0" x-envoy-upstream-service-time: 4 strict-transport-security: max-age=31536000 Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 b00055aba19ad70a191f40cf775753e8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C4 X-Amz-Cf-Id: 9HznHQzuOeSsIh9s4d2COy9H9u8pIjtzv8Z7cHhSC6dreCJPY6QzKg==
2024-04-26 12:22:49 UTC	353	IN	Data Raw: 73 65 6c 66 2e 5f 5f 4d 49 44 44 4c 45 57 41 52 45 5f 4d 41 4e 49 46 45 53 54 3d 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 5b 5b 22 5c 75 30 30 32 46 22 2c 61 5d 2c 5b 22 5c 75 30 30 32 46 61 63 63 6f 75 6e 74 22 2c 61 5d 2c 5b 22 5c 75 30 30 32 46 63 68 61 72 69 74 79 5c 75 30 30 32 46 64 6f 6e 61 74 65 22 2c 61 5d 2c 5b 22 5c 75 30 30 32 46 63 72 65 64 69 74 63 61 72 64 22 2c 61 5d 2c 5b 22 5c 75 30 30 32 46 64 6f 77 6e 6c 6f 61 64 2d 61 70 70 22 2c 61 5d 2c 5b 22 5c 75 30 30 32 46 70 61 79 6d 65 6e 74 2d 6c 69 6e 6b 22 2c 61 5d 2c 5b 22 5c 75 30 30 32 46 73 65 74 74 69 6e 67 73 5c 75 30 30 32 46 70 61 79 6d 65 6e 74 2d 6d 65 74 68 6f 64 73 22 2c 61 5d 2c 5b 22 5c 75 30 30 32 46 73 74 6f 72 79 22 2c 61 5d 2c 5b 22 5c 75 30 30 32 46 75 Data Ascii: self.__MIDDLEWARE_MANIFEST=(function(a){return [["\u002F",a],["\u002Faccount",a],["\u002Fcharity\u002Fdonate",a],["\u002Fcreditcard",a],["\u002Fdownload-app",a],["\u002Fpayment-link",a],["\u002Fsettings\u002Fpayment-methods",a],["\u002Fstory",a],["\u002Fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49757	151.101.130.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:49 UTC	531	OUT	OPTIONS /v1/identify HTTP/1.1 Host: identity.mparticle.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-mp-key Origin: https://account.venmo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://account.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:22:49 UTC	501	IN	HTTP/1.1 204 No Content Connection: close Server: Kestrel Access-Control-Allow-Headers: content-type,x-mp-key Access-Control-Allow-Methods: POST Access-Control-Allow-Origin: * X-Origin-Name: 4PrgpUXX9K0sNAH1JImfyI--F_us1_origin Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:22:49 GMT Via: 1.1 varnish Age: 1134 X-Served-By: cache-gnv1820025-GNV X-Cache: HIT X-Cache-Hits: 373 X-Timer: S1714134170.562966,VS0,VE0 X-Fastly-Trace-Id: 1208638352 Strict-Transport-Security: max-age=900

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49758	151.101.130.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:50 UTC	663	OUT	POST /v1/identify HTTP/1.1 Host: identity.mparticle.com Connection: keep-alive Content-Length: 320 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-mp-key: 40433222e815b743853a4bb6b7a86058 Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://account.venmo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://account.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:22:50 UTC	320	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 5f 73 64 6b 22 3a 7b 22 70 6c 61 74 66 6f 72 6d 22 3a 22 77 65 62 22 2c 22 73 64 6b 5f 76 65 6e 64 6f 72 22 3a 22 6d 70 61 72 74 69 63 6c 65 22 2c 22 73 64 6b 5f 76 65 72 73 69 6f 6e 22 3a 22 32 2e 32 36 2e 32 22 7d 2c 22 63 6f 6e 74 65 78 74 22 3a 6e 75 6c 6c 2c 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 22 70 72 6f 64 75 63 74 69 6f 6e 22 2c 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 32 64 36 37 34 34 31 38 2d 66 38 65 32 2d 34 34 33 32 2d 61 31 66 30 2d 39 31 35 64 33 36 39 35 37 65 38 61 22 2c 22 72 65 71 75 65 73 74 5f 74 69 6d 65 73 74 61 6d 70 5f 6d 73 22 3a 31 37 31 34 31 33 34 31 36 38 32 39 36 2c 22 70 72 65 76 69 6f 75 73 5f 6d 70 69 64 22 3a 6e 75 6c 6c 2c 22 6b 6e 6f 77 6e 5f 69 64 65 6e 74 69 74 69 65 73 22 3a 7b 22 64 Data Ascii: {"client_sdk":{"platform":"web","sdk_vendor":"mparticle","sdk_version":"2.26.2"},"context":null,"environment":"production","request_id":"2d674418-f8e2-4432-a1f0-915d36957e8a","request_timestamp_ms":1714134168296,"previous_mpid":null,"known_identities":{"d
2024-04-26 12:22:50 UTC	554	IN	HTTP/1.1 200 OK Connection: close Content-Length: 174 Content-Type: application/json; charset=utf-8 Server: Kestrel Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-MP-Max-Age X-MP-Max-Age: 86400 X-Origin-Name: 4PrgpUXX9K0sNAH1JImfyI--F_us1_origin Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:22:50 GMT Via: 1.1 varnish X-Served-By: cache-pdk-kpdk1780044-PDK X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1714134170.285116,VS0,VE32 Vary: Accept-Encoding X-Fastly-Trace-Id: 963691662 Strict-Transport-Security: max-age=900
2024-04-26 12:22:50 UTC	174	IN	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 6e 75 6c 6c 2c 22 6d 61 74 63 68 65 64 5f 69 64 65 6e 74 69 74 69 65 73 22 3a 7b 22 64 65 76 69 63 65 5f 61 70 70 6c 69 63 61 74 69 6f 6e 5f 73 74 61 6d 70 22 3a 22 32 61 35 38 34 35 39 30 2d 64 64 31 63 2d 34 37 36 35 2d 62 62 62 31 2d 39 34 35 37 32 34 36 63 37 31 35 32 22 7d 2c 22 69 73 5f 65 70 68 65 6d 65 72 61 6c 22 3a 74 72 75 65 2c 22 6d 70 69 64 22 3a 22 34 32 30 32 31 32 33 32 39 31 36 35 36 34 31 39 36 37 22 2c 22 69 73 5f 6c 6f 67 67 65 64 5f 69 6e 22 3a 66 61 6c 73 65 7d Data Ascii: {"context":null,"matched_identities":{"device_application_stamp":"2a584590-dd1c-4765-bbb1-9457246c7152"},"is_ephemeral":true,"mpid":"420212329165641967","is_logged_in":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49753	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:50 UTC	539	OUT	GET /pa/js/pa_venmo.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:22:50 UTC	900	IN	HTTP/1.1 200 OK Connection: close Content-Length: 38486 Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Etag: "662adc9c-9656" Last-Modified: Thu, 25 Apr 2024 22:43:40 GMT Paypal-Debug-Id: dcf74ca0e4eae Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000dcf74ca0e4eae-0d4a4f61a91a3c27-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:22:50 GMT X-Served-By: cache-dfw-kdfw8210033-DFW, cache-pdk-kpdk1780071-PDK X-Cache: HIT, MISS X-Cache-Hits: 1, 0 X-Timer: S1714134170.443134,VS0,VE20 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET ACCESS-CONTROL-ALLOW-HEADERS: x-csrf-token Strict-Transport-Security: max-age=31557600
2024-04-26 12:22:50 UTC	1379	IN	Data Raw: 2f 2a 40 20 32 30 32 34 20 50 61 79 50 61 6c 20 28 76 31 2e 38 2e 31 36 29 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 52 3d 22 76 65 6e 6d 6f 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 72 65 74 75 72 6e 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 74 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 6e 64 28 70 61 72 73 65 46 6c 6f 61 74 28 74 29 29 7c 7c 30 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 29 7b 69 66 28 21 74 7c 7c 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 4f 62 6a 65 63 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 41 72 72 61 79 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 65 2c 6e 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 Data Ascii: /@ 2024 PayPal (v1.8.16) /!function(){"use strict";var R="venmo";function o(){return(new Date).getTime()}function m(t){return Math.round(parseFloat(t))\|\|0}function a(t){if(!t\|\|t.constructor!==Object&&t.constructor!==Array)return t;var e,n=t.constructor
2024-04-26 12:22:50 UTC	1379	IN	Data Raw: 74 2e 63 6f 6f 6b 69 65 3d 74 2b 22 3d 22 2b 65 2b 69 2b 6e 2b 22 3b 20 70 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 53 65 63 75 72 65 22 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 2c 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 66 6f 72 28 76 61 72 20 72 3d 65 5b 6e 5d 3b 22 20 22 3d 3d 3d 72 2e 63 68 61 72 41 74 28 30 29 3b 29 72 3d 72 2e 73 75 62 73 74 72 69 6e 67 28 31 2c 72 2e 6c 65 6e 67 74 68 29 3b 69 66 28 30 3d 3d 3d 72 2e 69 6e 64 65 78 4f 66 28 74 2b 22 3d 22 29 29 72 65 74 75 72 6e 20 72 2e 73 75 62 73 74 72 69 6e 67 28 28 74 2b 22 3d 22 29 2e 6c 65 6e 67 74 68 2c 72 2e 6c 65 6e 67 74 68 29 7d 72 Data Ascii: t.cookie=t+"="+e+i+n+"; path=/; SameSite=None; Secure"}function s(t){for(var e=document.cookie.split(";"),n=0;n<e.length;n++){for(var r=e[n];" "===r.charAt(0);)r=r.substring(1,r.length);if(0===r.indexOf(t+"="))return r.substring((t+"=").length,r.length)}r
2024-04-26 12:22:50 UTC	1379	IN	Data Raw: 2c 6f 3d 61 2e 63 72 65 61 74 65 53 74 79 6c 65 53 68 65 65 74 28 29 3b 66 6f 72 28 69 3d 61 2e 61 6c 6c 2c 65 3d 5b 5d 2c 6e 3d 28 74 3d 74 2e 72 65 70 6c 61 63 65 28 2f 5c 5b 66 6f 72 5c 62 2f 67 69 2c 22 5b 68 74 6d 6c 46 6f 72 22 29 2e 73 70 6c 69 74 28 22 2c 22 29 29 2e 6c 65 6e 67 74 68 3b 6e 2d 2d 3b 29 7b 66 6f 72 28 6f 2e 61 64 64 52 75 6c 65 28 74 5b 6e 5d 2c 22 6b 3a 76 22 29 2c 72 3d 69 2e 6c 65 6e 67 74 68 3b 72 2d 2d 3b 29 69 5b 72 5d 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 2e 6b 26 26 65 2e 70 75 73 68 28 69 5b 72 5d 29 3b 6f 2e 72 65 6d 6f 76 65 52 75 6c 65 28 30 29 7d 72 65 74 75 72 6e 20 65 7d 29 3b 76 61 72 20 4a 3d 7b 73 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 2c 6c 3a 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 7d 3b 66 75 6e Data Ascii: ,o=a.createStyleSheet();for(i=a.all,e=[],n=(t=t.replace(/\[for\b/gi,"[htmlFor").split(",")).length;n--;){for(o.addRule(t[n],"k:v"),r=i.length;r--;)i[r].currentStyle.k&&e.push(i[r]);o.removeRule(0)}return e});var J={s:"sessionStorage",l:"localStorage"};fun
2024-04-26 12:22:50 UTC	1379	IN	Data Raw: 29 26 26 2f 57 65 62 4b 69 74 2f 69 2e 74 65 73 74 28 74 29 26 26 2f 43 72 69 4f 53 2f 69 2e 74 65 73 74 28 74 29 3b 69 66 28 65 7c 7c 74 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 31 7d 28 29 29 26 26 28 65 2e 72 65 66 65 72 72 65 72 50 6f 6c 69 63 79 3d 22 6e 6f 2d 72 65 66 65 72 72 65 72 2d 77 68 65 6e 2d 64 6f 77 6e 67 72 61 64 65 22 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 2c 65 2c 6e 29 7b 74 26 26 28 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 2c 6e 2c 21 31 29 3a 74 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 74 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 65 2c 6e 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 74 2c 65 2c 6e 29 7b 65 26 26 28 65 2e 72 65 6d 6f 76 65 45 Data Ascii: )&&/WebKit/i.test(t)&&/CriOS/i.test(t);if(e\|\|t)return;return 1}())&&(e.referrerPolicy="no-referrer-when-downgrade")}function p(t,e,n){t&&(t.addEventListener?t.addEventListener(e,n,!1):t.attachEvent&&t.attachEvent("on"+e,n))}function l(t,e,n){e&&(e.removeE
2024-04-26 12:22:50 UTC	1379	IN	Data Raw: 63 68 28 6f 29 7b 7d 72 65 74 75 72 6e 20 74 7d 7d 28 29 29 26 26 63 28 65 2c 7b 22 33 70 5f 76 69 64 22 3a 69 2e 76 69 64 2c 22 33 70 5f 66 70 74 69 22 3a 69 2e 66 70 74 69 7d 29 2c 5a 28 6e 3d 72 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 72 7c 7c 21 31 3d 3d 3d 72 28 29 29 3f 6e 3a 70 74 28 74 2c 65 29 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 74 29 7b 76 61 72 20 74 3d 64 74 28 74 29 2c 65 3d 6d 74 28 74 2c 74 2e 64 61 74 61 29 3b 72 65 74 75 72 6e 7b 64 61 74 61 3a 74 2e 64 61 74 61 2c 75 72 6c 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 74 2c 65 29 7b 76 61 72 20 6e 2c 72 3d 64 74 28 74 29 2c 69 3d 72 2e 64 61 74 61 2c 74 3d 28 69 5b 72 74 5d 3d 64 6f 63 75 6d 65 6e 74 2e 74 69 74 6c 65 2c 69 5b 69 74 5d 3d 64 6f 63 Data Ascii: ch(o){}return t}}())&&c(e,{"3p_vid":i.vid,"3p_fpti":i.fpti}),Z(n=r&&("function"!=typeof r\|\|!1===r())?n:pt(t,e)),n}function gt(t){var t=dt(t),e=mt(t,t.data);return{data:t.data,url:e}}function vt(t,e){var n,r=dt(t),i=r.data,t=(i[rt]=document.title,i[it]=doc
2024-04-26 12:22:50 UTC	1379	IN	Data Raw: 70 65 6f 66 20 74 3f 74 2e 74 6f 53 74 72 69 6e 67 28 29 3a 74 3b 61 3d 65 2c 6f 3d 72 3b 76 61 72 20 69 2c 61 2c 6f 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 53 74 72 69 6e 67 28 69 29 2c 65 3d 74 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2e 22 29 3b 66 6f 72 28 62 74 28 69 2c 69 2c 61 2c 6f 29 3b 2d 31 21 3d 3d 65 3b 29 65 3d 28 74 3d 74 2e 73 75 62 73 74 72 28 30 2c 65 29 29 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2e 22 29 2c 62 74 28 69 2c 74 2c 61 2c 6f 29 3b 62 74 28 69 2c 77 74 2c 61 2c 6f 29 7d 3b 72 65 74 75 72 6e 21 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 53 74 72 69 6e 67 28 74 29 2c 6e 3d 5f 74 28 65 29 7c 7c 5f 74 28 77 74 29 2c 72 3d 65 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2e 22 29 3b 21 Data Ascii: peof t?t.toString():t;a=e,o=r;var i,a,o,e=function(){var t=String(i),e=t.lastIndexOf(".");for(bt(i,i,a,o);-1!==e;)e=(t=t.substr(0,e)).lastIndexOf("."),bt(i,t,a,o);bt(i,wt,a,o)};return!!function(t){for(var e=String(t),n=_t(e)\|\|_t(wt),r=e.lastIndexOf(".");!
2024-04-26 12:22:50 UTC	1379	IN	Data Raw: 61 6d 65 3a 2f 28 28 75 73 65 72 6e 61 6d 65 3d 29 7c 28 6c 6f 67 69 6e 3d 29 7c 28 75 73 65 72 69 64 29 29 5b 5e 26 2f 3f 5d 2b 2f 67 69 2c 72 65 64 61 63 74 65 64 50 61 73 73 77 6f 72 64 3a 2f 28 28 70 61 73 73 77 6f 72 64 3d 29 7c 28 70 61 73 73 77 64 3d 29 7c 28 70 61 73 73 3d 29 29 5b 5e 26 2f 3f 5d 2b 2f 67 69 2c 72 65 64 61 63 74 65 64 43 72 65 64 65 6e 74 69 61 6c 73 3a 2f 28 6c 6f 67 69 6e 28 20 63 72 65 64 28 65 6e 74 69 61 6c 29 3f 73 7c 20 69 6e 66 6f 28 72 6d 61 74 69 6f 6e 29 3f 29 3f 7c 63 72 65 64 28 65 6e 74 69 61 6c 29 3f 73 29 20 3f 3a 5c 73 2a 5c 53 2b 5c 73 2b 5c 2f 3f 5c 73 2a 5c 53 2b 2f 67 69 2c 72 65 64 61 63 74 65 64 56 69 73 61 43 72 65 64 69 74 43 61 72 64 3a 2f 5c 62 34 5b 30 2d 39 5d 7b 31 32 7d 28 3f 3a 5b 30 2d 39 5d 7b 33 Data Ascii: ame:/((username=)\|(login=)\|(userid))[^&/?]+/gi,redactedPassword:/((password=)\|(passwd=)\|(pass=))[^&/?]+/gi,redactedCredentials:/(login( cred(ential)?s\| info(rmation)?)?\|cred(ential)?s) ?:\s\S+\s+\/?\s\S+/gi,redactedVisaCreditCard:/\b4[0-9]{12}(?:[0-9]{3
2024-04-26 12:22:50 UTC	1379	IN	Data Raw: 7b 76 61 72 20 69 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3a 7b 7d 3b 74 25 32 3f 52 74 28 4f 62 6a 65 63 74 28 69 29 2c 21 30 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 3b 65 3d 72 2c 6e 3d 69 5b 74 3d 74 5d 2c 28 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 6e 75 6c 6c 3d 3d 3d 74 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 6e 3d 74 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 6e 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 72 65 74 75 72 6e 28 22 73 74 72 69 6e 67 22 3d 3d 3d 65 3f 53 74 72 69 6e 67 3a 4e 75 6d 62 65 72 29 Data Ascii: {var i=null!=arguments[t]?arguments[t]:{};t%2?Rt(Object(i),!0).forEach(function(t){var e,n;e=r,n=i[t=t],(t=function(t){t=function(t,e){if("object"!=typeof t\|\|null===t)return t;var n=t[Symbol.toPrimitive];if(n===undefined)return("string"===e?String:Number)
2024-04-26 12:22:50 UTC	1379	IN	Data Raw: 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 3f 46 74 28 74 2c 65 29 3a 76 6f 69 64 20 30 7d 28 74 29 29 7c 7c 65 26 26 74 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 63 26 26 28 74 3d 63 29 2c 61 3d 30 2c 7b 73 3a 6f 3d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 7d 2c 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 3e 3d 74 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 30 7d 3a 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 74 5b 61 2b 2b 5d 7d 7d 2c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 72 6f 77 20 74 7d 2c 66 3a 6f 7d 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 Data Ascii: nt(?:8\|16\|32)(?:Clamped)?Array$/.test(n)?Ft(t,e):void 0}(t))\|\|e&&t&&"number"==typeof t.length)return c&&(t=c),a=0,{s:o=function o(){},n:function(){return a>=t.length?{done:!0}:{done:!1,value:t[a++]}},e:function(t){throw t},f:o};throw new TypeError("Invali
2024-04-26 12:22:50 UTC	1379	IN	Data Raw: 50 28 74 2c 22 61 6c 74 22 29 7c 7c 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 63 68 69 6c 64 4e 6f 64 65 73 2c 6e 3d 6e 75 6c 6c 2c 72 3d 30 3b 72 3c 65 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 69 66 28 33 3d 3d 3d 28 6e 3d 65 5b 72 5d 29 2e 6e 6f 64 65 54 79 70 65 26 26 6e 2e 6e 6f 64 65 56 61 6c 75 65 26 26 6e 2e 6e 6f 64 65 56 61 6c 75 65 2e 6d 61 74 63 68 28 2f 5c 53 2f 29 29 72 65 74 75 72 6e 20 6e 2e 6e 6f 64 65 56 61 6c 75 65 2e 74 72 69 6d 28 29 3b 69 66 28 31 3d 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 26 26 6e 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 69 28 6e 29 7d 7d 28 74 29 29 7c 7c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 30 21 3d 3d 6e 2e 69 6e 64 65 78 4f Data Ascii: P(t,"alt")\|\|function i(t){for(var e=t.childNodes,n=null,r=0;r<e.length;r++){if(3===(n=e[r]).nodeType&&n.nodeValue&&n.nodeValue.match(/\S/))return n.nodeValue.trim();if(1===n.nodeType&&n.childNodes.length)return i(n)}}(t))\|\|"string"==typeof n&&0!==n.indexO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49760	52.84.150.50	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:53 UTC	676	OUT	HEAD /en HTTP/1.1 Host: account.venmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-middleware-preflight: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://account.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; _csrf=DDftkNPgEA155iagiWokS3RO
2024-04-26 12:22:53 UTC	825	IN	HTTP/1.1 200 OK Connection: close Date: Fri, 26 Apr 2024 12:22:53 GMT Server: nginx x-powered-by: Express Set-Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; Max-Age=157680000; Domain=venmo.com; Path=/; Expires=Wed, 25 Apr 2029 12:22:53 GMT; HttpOnly; Secure Set-Cookie: s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; Max-Age=1800; Domain=venmo.com; Path=/; Expires=Fri, 26 Apr 2024 12:52:53 GMT; HttpOnly; Secure Cache-Control: no-store, no-cache, private, max-age=0 x-envoy-upstream-service-time: 4 strict-transport-security: max-age=31536000 Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 64924074212560e583e5c4823e606c04.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C4 X-Amz-Cf-Id: b2FflTLZKFfE1oqWXkqfnTfPKkMIB_Y-2b8Cuf3ufLGtpNdgtXdTQw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49762	52.84.150.50	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:53 UTC	694	OUT	GET /_next/static/chunks/9744.04c9c3ae7494be82.js HTTP/1.1 Host: account.venmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; _csrf=DDftkNPgEA155iagiWokS3RO
2024-04-26 12:22:53 UTC	702	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 9894 Connection: close Date: Fri, 26 Apr 2024 12:22:53 GMT Server: nginx x-powered-by: Express Cache-Control: public, max-age=31536000, immutable x-frame-options: deny Accept-Ranges: bytes Last-Modified: Wed, 17 Apr 2024 16:20:43 GMT ETag: W/"26a6-18eecdc4778" x-envoy-upstream-service-time: 4 strict-transport-security: max-age=31536000 Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 52074688afd894d830ad9c52cc685378.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C4 X-Amz-Cf-Id: MfDb1S8fR18lxjihfn949XW6RFsY5G9Em1Bhp77W7jbOvj9v8FzCbg==
2024-04-26 12:22:53 UTC	9894	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 37 34 34 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 35 39 37 34 34 3a 0a 2f 2a 2a 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 5f 5f 75 6e 75 73 65 64 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 0a 0a 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 72 28 5f 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 5f 5f 29 3b 0a 2f 2a 20 68 61 72 6d 6f 6e 79 20 69 6d 70 6f 72 74 20 2a 2f 20 76 Data Ascii: "use strict";(self["webpackChunk_N_E"] = self["webpackChunk_N_E"] \|\| []).push([[9744],{/*/ 59744:// (function(__unused_webpack_module, __webpack_exports__, __webpack_require__) {__webpack_require__.r(__webpack_exports__);/ harmony import */ v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49761	52.84.150.50	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:53 UTC	732	OUT	GET /static/images/logo.svg HTTP/1.1 Host: account.venmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://account.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; _csrf=DDftkNPgEA155iagiWokS3RO
2024-04-26 12:22:53 UTC	680	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 2558 Connection: close Date: Fri, 26 Apr 2024 12:22:53 GMT Server: nginx x-powered-by: Express Cache-Control: no-store, no-cache, private, max-age=0 x-frame-options: deny Accept-Ranges: bytes Last-Modified: Wed, 17 Apr 2024 16:17:41 GMT ETag: W/"9fe-18eecd98088" x-envoy-upstream-service-time: 5 strict-transport-security: max-age=31536000 Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 1d70b90303ff56b86662db87683a2a04.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: zGjUG4ubyWF43kZtiYihCn11kNS3KumzEgFdyLTJ5ykn9JxHa9aDlA==
2024-04-26 12:22:53 UTC	2558	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 31 31 22 20 68 65 69 67 68 74 3d 22 34 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 31 31 20 34 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 33 34 2e 35 37 37 31 20 30 2e 38 32 32 30 32 31 43 33 35 2e 39 39 37 34 20 33 2e 31 36 37 33 33 20 33 36 2e 36 33 37 37 20 35 2e 35 38 33 30 31 20 33 36 2e 36 33 37 37 20 38 2e 36 33 34 35 31 43 33 36 2e 36 33 37 37 20 31 38 2e 33 36 37 32 20 32 38 2e 33 32 37 37 20 33 31 2e 30 31 30 37 20 32 31 2e 35 38 33 32 20 33 39 2e 38 38 38 38 48 36 2e 31 37 38 32 35 4c 30 20 32 2e 39 35 32 39 36 4c 31 33 2e 34 38 38 37 20 31 2e 36 37 32 35 Data Ascii: <svg width="211" height="41" viewBox="0 0 211 41" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M34.5771 0.822021C35.9974 3.16733 36.6377 5.58301 36.6377 8.63451C36.6377 18.3672 28.3277 31.0107 21.5832 39.8888H6.17825L0 2.95296L13.4887 1.6725

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49764	151.101.193.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:53 UTC	523	OUT	GET /da/r/fb.js HTTP/1.1 Host: c.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:22:53 UTC	1042	IN	HTTP/1.1 200 OK Connection: close Content-Length: 67714 Access-Control-Allow-Headers: x-csrf-token Content-Type: application/javascript DC: ccg11-origin-www-1.paypal.com Etag: "65de8f54-10882" Last-Modified: Wed, 28 Feb 2024 01:41:40 GMT Paypal-Debug-Id: 735026f4d7107 Server: ECAcc (dac/9C80) Traceparent: 00-0000000000000000000735026f4d7107-674b5dae460a1e45-01 X-Content-Type-Options: nosniff Accept-Ranges: bytes Age: 128 Date: Fri, 26 Apr 2024 12:22:53 GMT Via: 1.1 varnish Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-gnv1820020-GNV X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1714134174.719650,VS0,VE2 vary: Accept-Encoding, Accept-Encoding Expires: Sat, 27 Apr 2024 12:22:53 GMT Cache-Control: no-cache, no-store, must-revalidate,max-age=86400 ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET ACCESS-CONTROL-ALLOW-CREDENTIALS: false ACCESS-CONTROL-MAX-AGE: 86400 Server-Timing: content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: *
2024-04-26 12:22:54 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 50 41 59 50 41 4c 3d 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 7c 7c 7b 7d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 72 65 74 75 72 6e 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f Data Ascii: "use strict";var PAYPAL=window.PAYPAL\|\|{};!function(){function e(n){return e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.proto
2024-04-26 12:22:54 UTC	16384	IN	Data Raw: 69 66 69 63 2f 46 69 6a 69 22 3d 3d 3d 69 2e 6e 61 6d 65 26 26 31 34 31 34 32 34 35 36 65 35 3d 3d 3d 65 5b 36 5d 2e 73 26 26 31 33 39 36 31 30 31 36 65 35 3d 3d 3d 65 5b 36 5d 2e 65 29 72 65 74 75 72 6e 20 30 3b 72 65 74 75 72 6e 20 74 7d 28 65 2c 6e 2c 69 2c 74 29 2c 69 7d 2c 69 3d 7b 7d 2c 6f 3d 71 2e 6f 6c 73 6f 6e 2e 64 73 74 5f 72 75 6c 65 73 2e 7a 6f 6e 65 73 2c 61 3d 6f 2e 6c 65 6e 67 74 68 2c 72 3d 79 2e 41 4d 42 49 47 55 49 54 49 45 53 5b 6e 5d 2c 63 3d 30 3b 63 3c 61 3b 63 2b 2b 29 7b 76 61 72 20 73 3d 6f 5b 63 5d 2c 75 3d 74 28 6f 5b 63 5d 29 3b 22 4e 2f 41 22 21 3d 3d 75 26 26 28 69 5b 73 2e 6e 61 6d 65 5d 3d 75 29 7d 66 6f 72 28 76 61 72 20 64 20 69 6e 20 69 29 69 66 28 69 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 64 29 29 66 6f 72 28 Data Ascii: ific/Fiji"===i.name&&14142456e5===e[6].s&&13961016e5===e[6].e)return 0;return t}(e,n,i,t),i},i={},o=q.olson.dst_rules.zones,a=o.length,r=y.AMBIGUITIES[n],c=0;c<a;c++){var s=o[c],u=t(o[c]);"N/A"!==u&&(i[s.name]=u)}for(var d in i)if(i.hasOwnProperty(d))for(
2024-04-26 12:22:54 UTC	16384	IN	Data Raw: 22 22 29 29 7d 7d 7d 28 65 29 3b 63 2e 74 69 6d 65 3d 6c 2e 74 69 6d 65 2c 63 2e 70 74 31 3d 6c 2e 70 74 31 3b 74 72 79 7b 76 61 72 20 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 2c 69 3d 22 22 2c 6f 3d 22 22 2c 61 3d 5b 5d 3b 69 66 28 65 2e 6e 61 76 69 67 61 74 6f 72 26 26 65 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7b 76 61 72 20 72 3d 65 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 3b 69 3d 67 65 28 69 2c 72 29 2c 74 3d 46 28 31 2c 35 29 3b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 73 3d 72 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 72 2e 6c 65 6e 67 74 68 3c 3d 31 30 30 3f 72 2e 6c 65 6e 67 74 68 3a 31 30 30 29 2c 75 3d 30 3b 75 3c 3d 73 2e 6c 65 6e 67 74 68 2f 74 3b 75 2b 2b 29 63 2b 3d 73 2e 73 75 62 Data Ascii: ""))}}}(e);c.time=l.time,c.pt1=l.pt1;try{var m=function(e,n){var t,i="",o="",a=[];if(e.navigator&&e.navigator.userAgent){var r=e.navigator.userAgent;i=ge(i,r),t=F(1,5);for(var c="",s=r.substring(0,r.length<=100?r.length:100),u=0;u<=s.length/t;u++)c+=s.sub
2024-04-26 12:22:54 UTC	16384	IN	Data Raw: 72 79 26 26 76 6f 69 64 20 30 21 3d 3d 74 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 65 6d 6f 72 79 2e 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 3f 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 65 6d 6f 72 79 2e 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 3a 31 30 37 33 37 34 31 38 32 34 29 2f 31 30 34 38 35 37 36 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 28 6e 65 77 20 45 72 72 6f 72 28 22 64 65 74 65 63 74 49 6e 63 6f 67 6e 69 74 6f 20 73 6f 6d 65 68 6f 77 20 66 61 69 6c 65 64 20 74 6f 20 71 75 65 72 79 20 73 74 6f 72 61 67 65 20 71 75 6f 74 61 3a 20 22 2b 65 2e 6d 65 73 73 61 67 65 29 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 76 6f 69 64 20 30 21 3d 3d 73 65 6c 66 2e 50 72 6f 6d 69 73 65 26 26 76 6f 69 64 20 30 21 3d 3d 73 65 6c Data Ascii: ry&&void 0!==t.performance.memory.jsHeapSizeLimit?performance.memory.jsHeapSizeLimit:1073741824)/1048576))}),(function(e){n(new Error("detectIncognito somehow failed to query storage quota: "+e.message))}))}function u(){void 0!==self.Promise&&void 0!==sel
2024-04-26 12:22:54 UTC	2178	IN	Data Raw: 26 69 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 62 75 26 26 4c 65 28 69 29 2c 69 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 63 64 26 26 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 29 7b 76 61 72 20 6e 3d 70 61 72 73 65 49 6e 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 64 2e 4c 53 5f 50 31 5f 50 4f 53 54 5f 43 4f 55 4e 54 53 29 2c 31 30 29 7c 7c 30 2c 74 3d 70 61 72 73 65 49 6e 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 64 2e 4c 53 5f 50 32 5f 50 4f 53 54 5f 54 49 4d 45 29 2c 31 30 29 7c 7c 30 2c 69 3d 77 69 6e 64 6f 77 2e 6c 6f 63 Data Ascii: &i.configuration.bu&&Le(i),i.configuration.cd&&function(e){if(null==e?void 0:e.configuration.localStorage){var n=parseInt(window.localStorage.getItem(d.LS_P1_POST_COUNTS),10)\|\|0,t=parseInt(window.localStorage.getItem(d.LS_P2_POST_TIME),10)\|\|0,i=window.loc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49767	151.101.2.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:53 UTC	357	OUT	GET /v1/identify HTTP/1.1 Host: identity.mparticle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:22:53 UTC	400	IN	HTTP/1.1 404 Not Found Connection: close Content-Length: 0 Server: Kestrel X-Origin-Name: 4PrgpUXX9K0sNAH1JImfyI--F_us1_origin Accept-Ranges: bytes Age: 0 Date: Fri, 26 Apr 2024 12:22:53 GMT Via: 1.1 varnish X-Served-By: cache-pdk-kfty2130093-PDK X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1714134174.789819,VS0,VE16 X-Fastly-Trace-Id: 3169008308 Strict-Transport-Security: max-age=900

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49769	52.84.150.50	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:53 UTC	851	OUT	GET /_next/static/chunks/pages/index-33aaf4f439c82a26.js HTTP/1.1 Host: account.venmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://account.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; _csrf=DDftkNPgEA155iagiWokS3RO
2024-04-26 12:22:54 UTC	707	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 1321651 Connection: close Date: Fri, 26 Apr 2024 12:22:54 GMT Server: nginx x-powered-by: Express Cache-Control: public, max-age=31536000, immutable x-frame-options: deny Accept-Ranges: bytes Last-Modified: Wed, 17 Apr 2024 16:20:43 GMT ETag: W/"142ab3-18eecdc4778" x-envoy-upstream-service-time: 5 strict-transport-security: max-age=31536000 Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 3b6959d147738fd4bde35db4104f4052.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: wfj5ZFIVQcLFe4qSSM-esagzH5ozIrwyNXD6Z4vc9jX3ZyRR5p9jJQ==
2024-04-26 12:22:54 UTC	15432	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 34 30 35 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 32 33 39 38 33 3a 0a 2f 2a 2a 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 5f 5f 75 6e 75 73 65 64 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 0a 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 2f 2f 20 45 53 4d 20 43 4f 4d 50 41 54 20 46 4c 41 47 0a 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 72 28 5f 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 5f 5f 29 3b 0a 0a 2f 2f Data Ascii: (self["webpackChunk_N_E"] = self["webpackChunk_N_E"] \|\| []).push([[5405],{/*/ 23983:/*/ (function(__unused_webpack_module, __webpack_exports__, __webpack_require__) {"use strict";// ESM COMPAT FLAG__webpack_require__.r(__webpack_exports__);//
2024-04-26 12:22:54 UTC	16384	IN	Data Raw: 6c 59 65 61 72 28 29 3b 0a 20 20 64 61 74 65 2e 73 65 74 46 75 6c 6c 59 65 61 72 28 79 65 61 72 20 2b 20 31 2c 20 30 2c 20 30 29 3b 0a 20 20 64 61 74 65 2e 73 65 74 48 6f 75 72 73 28 32 33 2c 20 35 39 2c 20 35 39 2c 20 39 39 39 29 3b 0a 20 20 72 65 74 75 72 6e 20 64 61 74 65 3b 0a 7d 0a 3b 2f 2f 20 43 4f 4e 43 41 54 45 4e 41 54 45 44 20 4d 4f 44 55 4c 45 3a 20 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 64 61 74 65 2d 66 6e 73 2f 65 73 6d 2f 69 73 44 61 74 65 2f 69 6e 64 65 78 2e 6a 73 0a 0a 0a 2f 2a 2a 0a 20 2a 20 40 6e 61 6d 65 20 69 73 44 61 74 65 0a 20 2a 20 40 63 61 74 65 67 6f 72 79 20 43 6f 6d 6d 6f 6e 20 48 65 6c 70 65 72 73 0a 20 2a 20 40 73 75 6d 6d 61 72 79 20 49 73 20 74 68 65 20 67 69 76 65 6e 20 76 61 6c 75 65 20 61 20 64 61 74 65 3f 0a 20 Data Ascii: lYear(); date.setFullYear(year + 1, 0, 0); date.setHours(23, 59, 59, 999); return date;};// CONCATENATED MODULE: ./node_modules/date-fns/esm/isDate/index.js/** * @name isDate * @category Common Helpers * @summary Is the given value a date?
2024-04-26 12:22:54 UTC	16384	IN	Data Raw: 20 72 65 74 75 72 6e 20 61 64 64 4c 65 61 64 69 6e 67 5a 65 72 6f 73 28 66 72 61 63 74 69 6f 6e 61 6c 53 65 63 6f 6e 64 73 2c 20 74 6f 6b 65 6e 2e 6c 65 6e 67 74 68 29 3b 0a 20 20 7d 0a 7d 3b 0a 2f 2a 20 68 61 72 6d 6f 6e 79 20 64 65 66 61 75 6c 74 20 65 78 70 6f 72 74 20 2a 2f 20 76 61 72 20 6c 69 67 68 74 46 6f 72 6d 61 74 74 65 72 73 20 3d 20 28 66 6f 72 6d 61 74 74 65 72 73 29 3b 0a 3b 2f 2f 20 43 4f 4e 43 41 54 45 4e 41 54 45 44 20 4d 4f 44 55 4c 45 3a 20 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 64 61 74 65 2d 66 6e 73 2f 65 73 6d 2f 5f 6c 69 62 2f 66 6f 72 6d 61 74 2f 66 6f 72 6d 61 74 74 65 72 73 2f 69 6e 64 65 78 2e 6a 73 0a 0a 0a 0a 0a 0a 0a 0a 76 61 72 20 64 61 79 50 65 72 69 6f 64 45 6e 75 6d 20 3d 20 7b 0a 20 20 61 6d 3a 20 27 61 6d 27 2c Data Ascii: return addLeadingZeros(fractionalSeconds, token.length); }};/* harmony default export */ var lightFormatters = (formatters);;// CONCATENATED MODULE: ./node_modules/date-fns/esm/_lib/format/formatters/index.jsvar dayPeriodEnum = { am: 'am',
2024-04-26 12:22:54 UTC	16384	IN	Data Raw: 6c 75 65 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 27 6e 61 72 72 6f 77 27 2c 0a 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 65 78 74 3a 20 27 66 6f 72 6d 61 74 74 69 6e 67 27 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 63 61 73 65 20 27 62 62 62 62 27 3a 0a 20 20 20 20 20 20 64 65 66 61 75 6c 74 3a 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6c 6f 63 61 6c 69 7a 65 2e 64 61 79 50 65 72 69 6f 64 28 64 61 79 50 65 72 69 6f 64 45 6e 75 6d 56 61 6c 75 65 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 27 77 69 64 65 27 2c 0a 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 65 78 74 3a 20 27 66 6f 72 6d 61 74 74 69 6e 67 27 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 7d 0a 20 20 7d 2c 0a 20 20 2f 2f 20 69 6e Data Ascii: lue, { width: 'narrow', context: 'formatting' }); case 'bbbb': default: return localize.dayPeriod(dayPeriodEnumValue, { width: 'wide', context: 'formatting' }); } }, // in
2024-04-26 12:22:54 UTC	441	IN	Data Raw: 77 69 64 74 68 20 3d 20 6f 70 74 69 6f 6e 73 20 21 3d 3d 20 6e 75 6c 6c 20 26 26 20 6f 70 74 69 6f 6e 73 20 21 3d 3d 20 76 6f 69 64 20 30 20 26 26 20 6f 70 74 69 6f 6e 73 2e 77 69 64 74 68 20 3f 20 53 74 72 69 6e 67 28 6f 70 74 69 6f 6e 73 2e 77 69 64 74 68 29 20 3a 20 61 72 67 73 2e 64 65 66 61 75 6c 74 57 69 64 74 68 3b 0a 20 20 20 20 20 20 76 61 6c 75 65 73 41 72 72 61 79 20 3d 20 61 72 67 73 2e 76 61 6c 75 65 73 5b 5f 77 69 64 74 68 5d 20 7c 7c 20 61 72 67 73 2e 76 61 6c 75 65 73 5b 5f 64 65 66 61 75 6c 74 57 69 64 74 68 5d 3b 0a 20 20 20 20 7d 0a 20 20 20 20 76 61 72 20 69 6e 64 65 78 20 3d 20 61 72 67 73 2e 61 72 67 75 6d 65 6e 74 43 61 6c 6c 62 61 63 6b 20 3f 20 61 72 67 73 2e 61 72 67 75 6d 65 6e 74 43 61 6c 6c 62 61 63 6b 28 64 69 72 74 79 49 6e Data Ascii: width = options !== null && options !== void 0 && options.width ? String(options.width) : args.defaultWidth; valuesArray = args.values[_width] \|\| args.values[_defaultWidth]; } var index = args.argumentCallback ? args.argumentCallback(dirtyIn
2024-04-26 12:22:54 UTC	16384	IN	Data Raw: 5d 3b 0a 20 20 7d 3b 0a 7d 0a 3b 2f 2f 20 43 4f 4e 43 41 54 45 4e 41 54 45 44 20 4d 4f 44 55 4c 45 3a 20 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 64 61 74 65 2d 66 6e 73 2f 65 73 6d 2f 6c 6f 63 61 6c 65 2f 65 6e 2d 55 53 2f 5f 6c 69 62 2f 6c 6f 63 61 6c 69 7a 65 2f 69 6e 64 65 78 2e 6a 73 0a 0a 76 61 72 20 65 72 61 56 61 6c 75 65 73 20 3d 20 7b 0a 20 20 6e 61 72 72 6f 77 3a 20 5b 27 42 27 2c 20 27 41 27 5d 2c 0a 20 20 61 62 62 72 65 76 69 61 74 65 64 3a 20 5b 27 42 43 27 2c 20 27 41 44 27 5d 2c 0a 20 20 77 69 64 65 3a 20 5b 27 42 65 66 6f 72 65 20 43 68 72 69 73 74 27 2c 20 27 41 6e 6e 6f 20 44 6f 6d 69 6e 69 27 5d 0a 7d 3b 0a 76 61 72 20 71 75 61 72 74 65 72 56 61 6c 75 65 73 20 3d 20 7b 0a 20 20 6e 61 72 72 6f 77 3a 20 5b 27 31 27 2c 20 27 32 27 2c Data Ascii: ]; };};// CONCATENATED MODULE: ./node_modules/date-fns/esm/locale/en-US/_lib/localize/index.jsvar eraValues = { narrow: ['B', 'A'], abbreviated: ['BC', 'AD'], wide: ['Before Christ', 'Anno Domini']};var quarterValues = { narrow: ['1', '2',
2024-04-26 12:22:54 UTC	16384	IN	Data Raw: 20 20 20 7c 20 30 31 2c 20 30 32 2c 20 2e 2e 2e 2c 20 31 32 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 20 20 20 20 20 20 20 7c 0a 20 2a 20 7c 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 20 4c 4c 4c 20 20 20 20 20 7c 20 4a 61 6e 2c 20 46 65 62 2c 20 2e 2e 2e 2c 20 44 65 63 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 20 20 20 20 20 20 20 7c 0a 20 2a 20 7c 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 20 4c 4c 4c 4c 20 20 20 20 7c 20 4a 61 6e 75 61 72 79 2c 20 46 65 62 72 75 61 72 79 2c 20 2e 2e 2e 2c 20 44 65 63 65 6d 62 65 72 20 20 7c 20 32 20 20 20 20 20 7c 0a 20 2a 20 7c 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: \| 01, 02, ..., 12 \| \| * \| \| LLL \| Jan, Feb, ..., Dec \| \| * \| \| LLLL \| January, February, ..., December \| 2 \| * \|
2024-04-26 12:22:54 UTC	16384	IN	Data Raw: 6f 6e 73 24 6c 6f 63 61 6c 65 33 2c 20 5f 6f 70 74 69 6f 6e 73 24 6c 6f 63 61 6c 65 33 24 6f 70 74 69 2c 20 5f 64 65 66 61 75 6c 74 4f 70 74 69 6f 6e 73 24 6c 6f 63 61 6c 33 2c 20 5f 64 65 66 61 75 6c 74 4f 70 74 69 6f 6e 73 24 6c 6f 63 61 6c 34 3b 0a 20 20 72 65 71 75 69 72 65 64 41 72 67 73 28 32 2c 20 61 72 67 75 6d 65 6e 74 73 29 3b 0a 20 20 76 61 72 20 66 6f 72 6d 61 74 53 74 72 20 3d 20 53 74 72 69 6e 67 28 64 69 72 74 79 46 6f 72 6d 61 74 53 74 72 29 3b 0a 20 20 76 61 72 20 64 65 66 61 75 6c 74 4f 70 74 69 6f 6e 73 20 3d 20 67 65 74 44 65 66 61 75 6c 74 4f 70 74 69 6f 6e 73 28 29 3b 0a 20 20 76 61 72 20 6c 6f 63 61 6c 65 20 3d 20 28 5f 72 65 66 20 3d 20 28 5f 6f 70 74 69 6f 6e 73 24 6c 6f 63 61 6c 65 20 3d 20 6f 70 74 69 6f 6e 73 20 3d 3d 3d 20 6e Data Ascii: ons$locale3, _options$locale3$opti, _defaultOptions$local3, _defaultOptions$local4; requiredArgs(2, arguments); var formatStr = String(dirtyFormatStr); var defaultOptions = getDefaultOptions(); var locale = (_ref = (_options$locale = options === n
2024-04-26 12:22:54 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 6e 65 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 3a 20 6f 5b 69 2b 2b 5d 0a 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 65 3a 20 66 75 6e 63 74 69 6f 6e 20 65 28 5f 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 5f 65 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 66 3a 20 46 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 7d 0a 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 69 74 65 72 61 74 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c Data Ascii: }; return { done: false, value: o[i++] }; }, e: function e(_e) { throw _e; }, f: F }; } throw new TypeError("Invalid attempt to iterate non-iterabl
2024-04-26 12:22:54 UTC	16384	IN	Data Raw: 61 6c 6c 62 61 63 6b 28 79 65 61 72 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 79 65 61 72 3a 20 79 65 61 72 2c 0a 20 20 20 20 20 20 20 20 20 20 69 73 54 77 6f 44 69 67 69 74 59 65 61 72 3a 20 74 6f 6b 65 6e 20 3d 3d 3d 20 27 79 79 27 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 73 77 69 74 63 68 20 28 74 6f 6b 65 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 63 61 73 65 20 27 79 27 3a 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6d 61 70 56 61 6c 75 65 28 70 61 72 73 65 4e 44 69 67 69 74 73 28 34 2c 20 64 61 74 65 53 74 72 69 6e 67 29 2c 20 76 61 6c 75 65 43 61 6c 6c 62 61 63 6b 29 3b 0a 20 20 20 20 20 20 20 20 63 61 73 65 20 27 79 6f 27 3a 0a 20 20 20 20 20 20 20 20 Data Ascii: allback(year) { return { year: year, isTwoDigitYear: token === 'yy' }; }; switch (token) { case 'y': return mapValue(parseNDigits(4, dateString), valueCallback); case 'yo':

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49770	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:54 UTC	532	OUT	GET /ncs/ncs.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:22:54 UTC	785	IN	HTTP/1.1 200 OK Connection: close Content-Length: 14920 Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Etag: "65f9e1ac-3a48" Last-Modified: Tue, 19 Mar 2024 19:04:12 GMT Paypal-Debug-Id: 6dcdb4e69d562 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000006dcdb4e69d562-b8ecbbfa9ad5a8be-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:22:54 GMT X-Served-By: cache-dfw-kdal2120039-DFW, cache-gnv1820029-GNV X-Cache: HIT, MISS X-Cache-Hits: 22, 0 X-Timer: S1714134175.569059,VS0,VE25 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31557600
2024-04-26 12:22:54 UTC	1379	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 6e 63 73 28 77 69 6e 64 6f 77 29 20 7b 0a 20 20 63 6f 6e 73 74 20 67 65 74 43 6f 6f 6b 69 65 50 72 65 66 20 3d 20 28 63 6f 6f 6b 69 65 50 72 65 66 73 53 74 72 69 6e 67 29 20 3d 3e 20 7b 0a 20 20 20 20 6c 65 74 20 63 6f 6f 6b 69 65 50 72 65 66 73 56 61 6c 75 65 53 74 72 69 6e 67 3b 0a 20 20 20 20 6c 65 74 20 6d 61 74 63 68 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 6d 61 74 63 68 28 6e 65 77 20 52 65 67 45 78 70 28 27 28 5e 7c 20 29 27 20 2b 20 28 63 6f 6f 6b 69 65 50 72 65 66 73 53 74 72 69 6e 67 20 7c 7c 20 27 63 6f 6f 6b 69 65 5f 70 72 65 66 73 27 29 20 2b 20 27 3d 28 5b 5e 3b 5d 2b 29 27 29 29 3b 0a 20 20 20 20 69 66 20 28 6d 61 74 63 68 29 20 7b 20 63 6f 6f 6b 69 65 50 72 65 66 73 56 61 6c 75 65 53 74 72 69 Data Ascii: (function ncs(window) { const getCookiePref = (cookiePrefsString) => { let cookiePrefsValueString; let match = document.cookie.match(new RegExp('(^\| )' + (cookiePrefsString \|\| 'cookie_prefs') + '=([^;]+)')); if (match) { cookiePrefsValueStri
2024-04-26 12:22:54 UTC	1379	IN	Data Raw: 74 20 63 6c 69 65 6e 74 43 6f 6f 6b 69 65 20 3d 20 64 6f 63 75 6d 65 6e 74 43 6f 6f 6b 69 65 20 26 26 20 64 6f 63 75 6d 65 6e 74 43 6f 6f 6b 69 65 2e 6d 61 70 28 6e 61 6d 65 56 61 6c 75 65 20 3d 3e 20 6e 61 6d 65 56 61 6c 75 65 20 26 26 20 6e 61 6d 65 56 61 6c 75 65 2e 73 70 6c 69 74 28 27 3d 27 29 5b 30 5d 20 26 26 20 6e 61 6d 65 56 61 6c 75 65 2e 73 70 6c 69 74 28 27 3d 27 29 5b 30 5d 2e 74 72 69 6d 28 29 29 0a 20 20 20 20 6c 65 74 20 73 70 65 63 69 61 6c 43 6f 6f 6b 69 65 73 20 3d 20 63 6f 6f 6b 69 65 4c 69 73 74 2e 66 69 6c 74 65 72 28 63 6f 6f 6b 69 65 20 3d 3e 20 63 6f 6f 6b 69 65 2e 65 6e 64 73 57 69 74 68 28 22 2a 22 29 29 2e 6d 61 70 28 63 6f 6f 6b 69 65 20 3d 3e 20 63 6f 6f 6b 69 65 2e 74 72 69 6d 28 29 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 20 Data Ascii: t clientCookie = documentCookie && documentCookie.map(nameValue => nameValue && nameValue.split('=')[0] && nameValue.split('=')[0].trim()) let specialCookies = cookieList.filter(cookie => cookie.endsWith("*")).map(cookie => cookie.trim().substring(0,
2024-04-26 12:22:54 UTC	1379	IN	Data Raw: 6f 6f 6b 69 65 4d 61 70 70 69 6e 67 2e 73 72 63 20 3d 20 60 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 6e 63 73 2f 24 7b 74 65 6e 61 6e 74 7d 2f 6d 61 70 70 69 6e 67 2e 6a 73 60 3b 0a 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 6f 6f 6b 69 65 4d 61 70 70 69 6e 67 29 0a 20 20 20 20 20 20 63 6f 6f 6b 69 65 4d 61 70 70 69 6e 67 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6c 6f 61 64 27 2c 20 28 29 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 6c 65 74 20 7b 20 65 73 73 65 6e 74 69 61 6c 2c 20 66 75 6e 63 74 69 6f 6e 61 6c 2c 20 6d 61 72 6b 65 74 69 6e 67 2c 20 70 65 72 66 6f 72 6d 61 6e 63 65 2c 20 66 69 6c 74 65 72 41 50 49 2c 20 69 73 43 6c 69 65 Data Ascii: ookieMapping.src = `https://www.paypalobjects.com/ncs/${tenant}/mapping.js`; document.head.appendChild(cookieMapping) cookieMapping.addEventListener('load', () => { let { essential, functional, marketing, performance, filterAPI, isClie
2024-04-26 12:22:54 UTC	1379	IN	Data Raw: 20 65 76 61 6c 75 61 74 65 28 70 6f 6c 69 63 79 44 61 74 61 2e 6c 61 6e 67 75 61 67 65 2c 20 74 65 6e 61 6e 74 29 2c 0a 20 20 20 20 20 20 63 6f 75 6e 74 72 79 20 3d 20 65 76 61 6c 75 61 74 65 28 70 6f 6c 69 63 79 44 61 74 61 2e 63 6f 75 6e 74 72 79 2c 20 74 65 6e 61 6e 74 29 3b 0a 20 20 20 20 69 66 20 28 21 70 6f 6c 69 63 79 44 61 74 61 20 7c 7c 20 21 63 6f 75 6e 74 72 79 20 7c 7c 20 21 6c 61 6e 67 75 61 67 65 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 7d 0a 20 20 20 20 6c 65 74 20 63 6f 6f 6b 69 65 50 72 65 66 73 53 74 72 69 6e 67 20 3d 20 74 65 6e 61 6e 74 44 61 74 61 5b 27 63 6f 6f 6b 69 65 50 72 65 66 73 53 74 72 69 6e 67 27 5d 3b 0a 20 20 20 20 6c 65 74 20 63 6f 6f 6b 69 65 50 72 65 66 73 56 61 6c 75 65 20 3d 20 67 65 74 43 6f Data Ascii: evaluate(policyData.language, tenant), country = evaluate(policyData.country, tenant); if (!policyData \|\| !country \|\| !language) { return; } let cookiePrefsString = tenantData['cookiePrefsString']; let cookiePrefsValue = getCo
2024-04-26 12:22:54 UTC	1379	IN	Data Raw: 62 6a 65 63 74 2e 6b 65 79 73 28 69 6e 70 75 74 4f 62 6a 65 63 74 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 20 28 6b 65 79 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 6b 65 79 20 2b 20 27 3d 27 20 2b 20 69 6e 70 75 74 4f 62 6a 65 63 74 5b 6b 65 79 5d 3b 0a 20 20 20 20 7d 29 2e 6a 6f 69 6e 28 27 26 27 29 3b 0a 20 20 20 20 63 6f 6e 73 74 20 78 68 72 20 3d 20 77 69 6e 64 6f 77 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 20 3f 20 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 20 3a 20 6e 65 77 20 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 27 4d 69 63 72 6f 73 6f 66 74 2e 58 4d 4c 48 54 54 50 27 29 3b 0a 20 20 20 20 78 68 72 2e 6f 70 65 6e 28 27 47 45 54 27 2c 20 60 24 7b 72 65 71 75 65 73 74 55 52 4c 7d 2f 6d 79 61 63 63 6f 75 6e 74 2f 70 Data Ascii: bject.keys(inputObject).map(function (key) { return key + '=' + inputObject[key]; }).join('&'); const xhr = window.XMLHttpRequest ? new XMLHttpRequest() : new ActiveXObject('Microsoft.XMLHTTP'); xhr.open('GET', `${requestURL}/myaccount/p
2024-04-26 12:22:54 UTC	1379	IN	Data Raw: 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 73 73 45 6c 65 6d 65 6e 74 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 63 73 73 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 6e 6e 65 72 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 68 74 6d 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6f 6b 69 65 42 61 6e 6e 65 72 4a 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 69 64 27 2c 20 27 62 61 6e 6e 65 72 53 63 72 69 70 74 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6f 6b 69 65 42 61 6e 6e 65 72 4a 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 6e 6f 6e 63 65 27 2c 20 6e 6f 6e 63 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6f 6b 69 65 42 61 6e 6e 65 72 4a 73 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 6a 73 2e 72 65 70 6c 61 63 Data Ascii: ; cssElement.innerHTML = css; banner.innerHTML = html; cookieBannerJs.setAttribute('id', 'bannerScript') cookieBannerJs.setAttribute('nonce', nonce) cookieBannerJs.innerHTML = js.replac
2024-04-26 12:22:54 UTC	1379	IN	Data Raw: 74 20 7b 20 74 65 6e 61 6e 74 2c 20 74 65 6e 61 6e 74 44 61 74 61 20 3d 20 7b 7d 20 7d 20 3d 20 67 65 74 50 6f 6c 69 63 79 49 6e 66 6f 28 29 3b 0a 20 20 20 20 6c 65 74 20 63 6f 6f 6b 69 65 50 72 65 66 73 53 74 72 69 6e 67 20 3d 20 74 65 6e 61 6e 74 44 61 74 61 5b 27 63 6f 6f 6b 69 65 50 72 65 66 73 53 74 72 69 6e 67 27 5d 3b 0a 20 20 20 20 63 6f 6f 6b 69 65 46 69 6c 74 65 72 28 74 65 6e 61 6e 74 2c 20 63 6f 6f 6b 69 65 50 72 65 66 73 53 74 72 69 6e 67 29 0a 20 20 7d 0a 0a 20 20 63 6f 6e 73 74 20 67 65 74 50 6f 6c 69 63 79 49 6e 66 6f 20 3d 20 28 29 20 3d 3e 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 64 61 74 61 4e 6f 64 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 70 6f 6c 69 63 79 2d 64 61 74 61 27 29 3b 0a 20 20 20 Data Ascii: t { tenant, tenantData = {} } = getPolicyInfo(); let cookiePrefsString = tenantData['cookiePrefsString']; cookieFilter(tenant, cookiePrefsString) } const getPolicyInfo = () => { const dataNode = document.getElementById('policy-data');
2024-04-26 12:22:54 UTC	1379	IN	Data Raw: 65 6e 61 6e 74 2c 20 74 65 6e 61 6e 74 44 61 74 61 20 3d 20 7b 7d 2c 20 70 6f 6f 6c 69 63 79 44 61 74 61 20 7d 20 3d 20 70 6f 6c 69 63 79 49 6e 66 6f 3b 0a 20 20 20 20 6c 65 74 20 7b 20 6e 6f 6e 63 65 2c 20 70 6f 6c 69 63 79 44 61 74 61 20 7d 20 3d 20 70 6f 6c 69 63 79 49 6e 66 6f 3b 0a 20 20 20 20 6e 6f 6e 63 65 20 3d 20 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 70 6f 6c 69 63 79 2d 64 61 74 61 27 29 20 26 26 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 70 6f 6c 69 63 79 2d 64 61 74 61 27 29 5b 27 6e 6f 6e 63 65 27 5d 29 20 7c 7c 20 6e 6f 6e 63 65 3b 0a 20 20 20 20 70 6f 6c 69 63 79 44 61 74 61 20 3d 20 70 6f 6c 69 63 79 44 61 74 61 20 7c 7c 20 70 6f 6f 6c 69 63 79 44 61 74 61 3b 0a 20 Data Ascii: enant, tenantData = {}, poolicyData } = policyInfo; let { nonce, policyData } = policyInfo; nonce = (document.getElementById('policy-data') && document.getElementById('policy-data')['nonce']) \|\| nonce; policyData = policyData \|\| poolicyData;
2024-04-26 12:22:54 UTC	1379	IN	Data Raw: 20 20 20 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0a 20 20 20 20 20 20 23 73 65 74 74 69 6e 67 73 43 6f 6e 74 65 6e 74 7b 77 69 64 74 68 3a 20 39 30 25 7d 20 20 20 20 20 20 0a 20 20 20 20 7d 3c 2f 73 74 79 6c 65 3e 60 29 0a 20 20 20 20 20 20 6d 61 6e 61 67 65 43 6f 6f 6b 69 65 73 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 65 74 74 69 6e 67 44 69 76 29 0a 20 20 20 20 20 20 6d 61 6e 61 67 65 43 6f 6f 6b 69 65 73 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 65 74 74 69 6e 67 53 74 79 6c 65 29 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 73 65 74 74 69 6e 67 44 69 76 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 28 60 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 65 74 74 69 Data Ascii: @media only screen and (max-width: 768px) { #settingsContent{width: 90%} }</style>`) manageCookies.appendChild(settingDiv) manageCookies.appendChild(settingStyle) } else { settingDiv.innerHTML = (`<div class="setti
2024-04-26 12:22:54 UTC	1379	IN	Data Raw: 72 69 67 68 74 3a 20 2d 30 2e 36 36 65 6d 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 23 73 65 74 74 69 6e 67 73 4d 6f 64 61 6c 43 6c 6f 73 65 3a 66 6f 63 75 73 7b 0a 20 20 20 20 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 33 70 78 20 73 6f 6c 69 64 20 23 30 30 37 30 42 41 3b 0a 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 2e 73 65 74 74 69 6e 67 73 4d 6f 64 61 6c 5f 68 65 61 64 65 72 20 62 75 74 74 6f 6e 2e 63 6f 6f 6b 69 65 42 61 6e 6e 65 72 5f 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 3a 3a 62 65 66 6f 72 65 7b 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 5c 32 37 31 35 22 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 73 65 74 74 69 6e 67 73 4d 6f 64 61 6c 5f 68 65 61 64 65 72 7b 0a 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 73 74 69 63 6b 79 Data Ascii: right: -0.66em; } #settingsModalClose:focus{ outline: 3px solid #0070BA; } .settingsModal_header button.cookieBanner_close-button::before{ content: "\\2715"; } .settingsModal_header{ position: sticky

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49771	151.101.193.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:54 UTC	723	OUT	GET /v1/r/d/i?js_src=https://c.paypal.com/da/r/fb.js HTTP/1.1 Host: c.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://account.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:22:54 UTC	1147	IN	HTTP/1.1 200 OK Connection: close Content-Length: 160 Accept-Ch: sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-platform, sec-ch-ua-platform-version, sec-ch-ua-arch, sec-ch-ua-wow64, sec-ch-ua-bitness, sec-ch-ua-model, sec-ch-ua-full Access-Control-Expose-Headers: Server-Timing CORRELATION-ID: 681f3019bbde7 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Security-Policy-Report-Only: default-src 'self' https://.paypal.com https://.paypalobjects.com; script-src 'self' https://.paypal.com https://.paypalobjects.com https://.paypalinc.com https://www.facebook.com 'unsafe-eval' 'unsafe-inline' blob:; connect-src 'self' https://.paypal.com; style-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; font-src 'self' https://.paypal.com https://.paypalobjects.com data:; img-src 'self' https: data:; form-action 'self' https://.paypal.com; base-uri 'self' https://.paypal.com; object-src 'self' https://.paypal.com https://.paypalobjects.com; report-uri https://www.paypal.com/csplog/api/log/csp Content-Type: text/html;charset=UTF-8
2024-04-26 12:22:54 UTC	960	IN	Data Raw: 4f 72 69 67 69 6e 2d 54 72 69 61 6c 3a 20 41 30 41 2f 75 42 57 30 6f 67 51 49 69 63 61 31 4b 6b 50 43 65 53 4f 6f 48 66 76 54 41 54 58 64 79 52 67 38 46 2f 4b 61 38 67 6a 4b 34 70 43 70 72 45 44 77 46 33 64 33 77 54 78 4e 7a 53 50 6e 31 41 53 62 35 6e 63 70 64 34 36 68 37 52 51 69 53 71 47 59 70 41 38 41 41 41 43 4d 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 4d 75 63 47 46 35 63 47 46 73 4c 6d 4e 76 62 54 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 32 56 75 5a 45 5a 31 62 47 78 56 63 32 56 79 51 57 64 6c 62 6e 52 42 5a 6e 52 6c 63 6c 4a 6c 5a 48 56 6a 64 47 6c 76 62 69 49 73 49 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 59 35 4e 54 55 78 4d 7a 55 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 Data Ascii: Origin-Trial: A0A/uBW0ogQIica1KkPCeSOoHfvTATXdyRg8F/Ka8gjK4pCprEDwF3d3wTxNzSPn1ASb5ncpd46h7RQiSqGYpA8AAACMeyJvcmlnaW4iOiJodHRwczovL2MucGF5cGFsLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY5NTUxMzU5OSwiaXNTdWJkb21ha
2024-04-26 12:22:54 UTC	160	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 50 61 79 50 61 6c 3c 2f 74 69 74 6c 65 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 2f 64 61 2f 72 2f 66 62 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html><head><title>PayPal</title><script type="text/javascript" src="https://c.paypal.com/da/r/fb.js"></script></head><body></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49772	151.101.193.35	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:54 UTC	648	OUT	GET /v1/r/d/b/p3?f=6a95feed-b818-45c4-8cb7-6b939748957f&s=venmo_web_webmo_login HTTP/1.1 Host: c6.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://account.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:22:54 UTC	793	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 Access-Control-Expose-Headers: Server-Timing CORRELATION-ID: bdd1759e34a36 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Paypal-Debug-Id: bdd1759e34a36 Traceparent: 00-0000000000000000000bdd1759e34a36-129c5fa2795709ef-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Fri, 26 Apr 2024 12:22:54 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-dfw-kdal2120084-DFW, cache-pdk-kfty2130080-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1714134175.802934,VS0,VE99 vary: Accept-Encoding Server-Timing: "traceparent;desc="00-0000000000000000000bdd1759e34a36-f39ddf662310102b-01"";content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49773	35.235.122.5	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:54 UTC	656	OUT	GET /v2/counter.cgi?p=6a95feed-b818-45c4-8cb7-6b939748957f&s=venmo_web_webmo_login HTTP/1.1 Host: b.stats.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://account.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:22:55 UTC	392	IN	HTTP/1.1 302 Found Connection: close Server: PayPal-B.Stats/1.0 Location: https://lvs.stats.paypal.com/v2/counter2.cgi?p=6a95feed-b818-45c4-8cb7-6b939748957f&s=venmo_web_webmo_login Content-Length: 0 Set-Cookie: c=a42fef4187f22a09cd8d; Domain=stats.paypal.com; expires=Thu, 21 Apr 2044 12:22:55 GMT; Path=/ Content-Type: application/octet-stream Date: Fri, 26 Apr 2024 12:22:55 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49778	151.101.193.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:56 UTC	697	OUT	OPTIONS /myaccount/privacy/cookieprefs/getBanner?showBanner=true&country=US&language=en&policyType=CookieBanner&originalHeaders={%22cookie%22:%22%22}&tenant=venmo&tenantData={} HTTP/1.1 Host: www.paypal.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: access-control-allow-origin,content-type Origin: https://account.venmo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://account.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:22:56 UTC	525	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: access-control-allow-origin, Content-Type, Accept, X-Requested-With Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://account.venmo.com Cache-Control: max-age=0, no-cache, no-store, must-revalidate
2024-04-26 12:22:56 UTC	2169	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 3b 20 73 74 79 6c 65 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 70 37 4d 4f 59 37 50 71 79 79 58 38 46 6d 4f 37 4a 54 57 46 6f 79 42 55 63 4e 30 6f 6c 2b 35 58 46 32 46 2f 4d 44 73 52 75 63 47 68 Data Ascii: Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; style-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; script-src 'nonce-p7MOY7PqyyX8FmO7JTWFoyBUcN0ol+5XF2F/MDsRucGh
2024-04-26 12:22:56 UTC	1356	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6e 73 69 64 3d 73 25 33 41 58 38 43 52 48 52 70 4d 30 77 71 63 43 43 73 72 72 69 6a 36 34 33 6f 4e 50 59 70 5f 39 48 59 67 2e 64 37 43 72 5a 6b 54 4a 25 32 42 6b 25 32 42 4f 64 6b 56 58 72 39 78 38 55 56 57 4b 6b 75 44 44 52 4b 65 73 4c 43 33 44 4e 47 72 32 53 35 41 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 37 5f 61 7a 3d 64 63 67 30 32 2e 70 68 78 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 46 72 69 2c 20 32 36 20 41 70 72 20 32 30 32 34 20 31 32 3a 35 32 3a 35 36 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 Data Ascii: Set-Cookie: nsid=s%3AX8CRHRpM0wqcCCsrrij643oNPYp_9HYg.d7CrZkTJ%2Bk%2BOdkVXr9x8UVWKkuDDRKesLC3DNGr2S5A; Path=/; HttpOnly; Secure; SameSite=NoneSet-Cookie: l7_az=dcg02.phx; Path=/; Domain=paypal.com; Expires=Fri, 26 Apr 2024 12:52:56 GMT; HttpOnly; Secure
2024-04-26 12:22:56 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49776	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:56 UTC	542	OUT	GET /ncs/venmo/mapping.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:22:56 UTC	787	IN	HTTP/1.1 200 OK Connection: close Content-Length: 646 Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Etag: "6495fc1a-286" Last-Modified: Fri, 23 Jun 2023 20:10:02 GMT Paypal-Debug-Id: 69afcd3721f57 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000069afcd3721f57-020de17de810de66-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:22:56 GMT X-Served-By: cache-dfw-kdfw8210056-DFW, cache-pdk-kpdk1780117-PDK X-Cache: HIT, MISS X-Cache-Hits: 11, 0 X-Timer: S1714134176.479024,VS0,VE21 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31557600
2024-04-26 12:22:56 UTC	646	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 69 66 28 77 69 6e 64 6f 77 29 7b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 63 6f 6f 6b 69 65 6d 61 70 70 69 6e 67 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 76 65 6e 6d 6f 22 3a 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 69 73 43 6c 69 65 6e 74 43 6f 6f 6b 69 65 73 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 66 69 6c 74 65 72 41 50 49 22 3a 20 22 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 65 73 73 65 6e 74 69 61 6c 22 3a 5b 22 63 6f 6f 6b 69 65 5f 70 72 65 66 73 22 2c 22 74 73 72 63 65 22 2c 22 74 73 22 2c 22 74 73 5f 63 22 2c 22 78 2d 70 70 2d 73 22 2c 22 6c 37 5f 61 7a 22 2c 22 4c 41 4e 47 22 2c 22 65 6e 66 6f 72 63 65 5f Data Ascii: (function(){ if(window){ window.cookiemapping = { "venmo":{ "isClientCookies": true, "filterAPI": "", "essential":["cookie_prefs","tsrce","ts","ts_c","x-pp-s","l7_az","LANG","enforce_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49779	151.101.193.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:56 UTC	566	OUT	GET /da/r/fb.js HTTP/1.1 Host: c.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://c.paypal.com/v1/r/d/i?js_src=https://c.paypal.com/da/r/fb.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:22:56 UTC	1049	IN	HTTP/1.1 200 OK Connection: close Content-Length: 67714 Access-Control-Allow-Headers: x-csrf-token Content-Type: application/javascript DC: ccg11-origin-www-1.paypal.com Etag: "65de8f54-10882" Last-Modified: Wed, 28 Feb 2024 01:41:40 GMT Paypal-Debug-Id: 9b1227dfb22d7 Server: ECAcc (dac/9C80) Traceparent: 00-00000000000000000009b1227dfb22d7-7d04f40e77b26291-01 X-Content-Type-Options: nosniff Accept-Ranges: bytes Age: 23246 Date: Fri, 26 Apr 2024 12:22:56 GMT Via: 1.1 varnish Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-pdk-kpdk1780128-PDK X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1714134176.478457,VS0,VE2 vary: Accept-Encoding, Accept-Encoding Expires: Sat, 27 Apr 2024 12:22:56 GMT Cache-Control: no-cache, no-store, must-revalidate,max-age=86400 ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET ACCESS-CONTROL-ALLOW-CREDENTIALS: false ACCESS-CONTROL-MAX-AGE: 86400 Server-Timing: content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: *
2024-04-26 12:22:56 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 50 41 59 50 41 4c 3d 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 7c 7c 7b 7d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 72 65 74 75 72 6e 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f Data Ascii: "use strict";var PAYPAL=window.PAYPAL\|\|{};!function(){function e(n){return e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.proto
2024-04-26 12:22:56 UTC	16384	IN	Data Raw: 69 66 69 63 2f 46 69 6a 69 22 3d 3d 3d 69 2e 6e 61 6d 65 26 26 31 34 31 34 32 34 35 36 65 35 3d 3d 3d 65 5b 36 5d 2e 73 26 26 31 33 39 36 31 30 31 36 65 35 3d 3d 3d 65 5b 36 5d 2e 65 29 72 65 74 75 72 6e 20 30 3b 72 65 74 75 72 6e 20 74 7d 28 65 2c 6e 2c 69 2c 74 29 2c 69 7d 2c 69 3d 7b 7d 2c 6f 3d 71 2e 6f 6c 73 6f 6e 2e 64 73 74 5f 72 75 6c 65 73 2e 7a 6f 6e 65 73 2c 61 3d 6f 2e 6c 65 6e 67 74 68 2c 72 3d 79 2e 41 4d 42 49 47 55 49 54 49 45 53 5b 6e 5d 2c 63 3d 30 3b 63 3c 61 3b 63 2b 2b 29 7b 76 61 72 20 73 3d 6f 5b 63 5d 2c 75 3d 74 28 6f 5b 63 5d 29 3b 22 4e 2f 41 22 21 3d 3d 75 26 26 28 69 5b 73 2e 6e 61 6d 65 5d 3d 75 29 7d 66 6f 72 28 76 61 72 20 64 20 69 6e 20 69 29 69 66 28 69 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 64 29 29 66 6f 72 28 Data Ascii: ific/Fiji"===i.name&&14142456e5===e[6].s&&13961016e5===e[6].e)return 0;return t}(e,n,i,t),i},i={},o=q.olson.dst_rules.zones,a=o.length,r=y.AMBIGUITIES[n],c=0;c<a;c++){var s=o[c],u=t(o[c]);"N/A"!==u&&(i[s.name]=u)}for(var d in i)if(i.hasOwnProperty(d))for(
2024-04-26 12:22:56 UTC	16384	IN	Data Raw: 22 22 29 29 7d 7d 7d 28 65 29 3b 63 2e 74 69 6d 65 3d 6c 2e 74 69 6d 65 2c 63 2e 70 74 31 3d 6c 2e 70 74 31 3b 74 72 79 7b 76 61 72 20 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 2c 69 3d 22 22 2c 6f 3d 22 22 2c 61 3d 5b 5d 3b 69 66 28 65 2e 6e 61 76 69 67 61 74 6f 72 26 26 65 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7b 76 61 72 20 72 3d 65 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 3b 69 3d 67 65 28 69 2c 72 29 2c 74 3d 46 28 31 2c 35 29 3b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 73 3d 72 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 72 2e 6c 65 6e 67 74 68 3c 3d 31 30 30 3f 72 2e 6c 65 6e 67 74 68 3a 31 30 30 29 2c 75 3d 30 3b 75 3c 3d 73 2e 6c 65 6e 67 74 68 2f 74 3b 75 2b 2b 29 63 2b 3d 73 2e 73 75 62 Data Ascii: ""))}}}(e);c.time=l.time,c.pt1=l.pt1;try{var m=function(e,n){var t,i="",o="",a=[];if(e.navigator&&e.navigator.userAgent){var r=e.navigator.userAgent;i=ge(i,r),t=F(1,5);for(var c="",s=r.substring(0,r.length<=100?r.length:100),u=0;u<=s.length/t;u++)c+=s.sub
2024-04-26 12:22:56 UTC	16384	IN	Data Raw: 72 79 26 26 76 6f 69 64 20 30 21 3d 3d 74 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 65 6d 6f 72 79 2e 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 3f 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 65 6d 6f 72 79 2e 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 3a 31 30 37 33 37 34 31 38 32 34 29 2f 31 30 34 38 35 37 36 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 28 6e 65 77 20 45 72 72 6f 72 28 22 64 65 74 65 63 74 49 6e 63 6f 67 6e 69 74 6f 20 73 6f 6d 65 68 6f 77 20 66 61 69 6c 65 64 20 74 6f 20 71 75 65 72 79 20 73 74 6f 72 61 67 65 20 71 75 6f 74 61 3a 20 22 2b 65 2e 6d 65 73 73 61 67 65 29 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 76 6f 69 64 20 30 21 3d 3d 73 65 6c 66 2e 50 72 6f 6d 69 73 65 26 26 76 6f 69 64 20 30 21 3d 3d 73 65 6c Data Ascii: ry&&void 0!==t.performance.memory.jsHeapSizeLimit?performance.memory.jsHeapSizeLimit:1073741824)/1048576))}),(function(e){n(new Error("detectIncognito somehow failed to query storage quota: "+e.message))}))}function u(){void 0!==self.Promise&&void 0!==sel
2024-04-26 12:22:56 UTC	2178	IN	Data Raw: 26 69 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 62 75 26 26 4c 65 28 69 29 2c 69 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 63 64 26 26 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 29 7b 76 61 72 20 6e 3d 70 61 72 73 65 49 6e 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 64 2e 4c 53 5f 50 31 5f 50 4f 53 54 5f 43 4f 55 4e 54 53 29 2c 31 30 29 7c 7c 30 2c 74 3d 70 61 72 73 65 49 6e 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 64 2e 4c 53 5f 50 32 5f 50 4f 53 54 5f 54 49 4d 45 29 2c 31 30 29 7c 7c 30 2c 69 3d 77 69 6e 64 6f 77 2e 6c 6f 63 Data Ascii: &i.configuration.bu&&Le(i),i.configuration.cd&&function(e){if(null==e?void 0:e.configuration.localStorage){var n=parseInt(window.localStorage.getItem(d.LS_P1_POST_COUNTS),10)\|\|0,t=parseInt(window.localStorage.getItem(d.LS_P2_POST_TIME),10)\|\|0,i=window.loc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49780	151.101.193.35	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:56 UTC	411	OUT	GET /v1/r/d/b/p3?f=6a95feed-b818-45c4-8cb7-6b939748957f&s=venmo_web_webmo_login HTTP/1.1 Host: c6.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:22:57 UTC	666	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 CORRELATION-ID: a57740555f91c Cache-Control: max-age=0, no-cache, no-store, must-revalidate Paypal-Debug-Id: a57740555f91c Traceparent: 00-0000000000000000000a57740555f91c-916e366b8ccd5ee5-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Fri, 26 Apr 2024 12:22:56 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-iad-kjyo7100175-IAD, cache-gnv1820021-GNV X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1714134177.879845,VS0,VE105 vary: Accept-Encoding Server-Timing: content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49783	52.84.150.50	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:56 UTC	474	OUT	GET /en HTTP/1.1 Host: account.venmo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; _csrf=DDftkNPgEA155iagiWokS3RO
2024-04-26 12:22:57 UTC	1253	IN	HTTP/1.1 307 Temporary Redirect Transfer-Encoding: chunked Connection: close Date: Fri, 26 Apr 2024 12:22:57 GMT Server: nginx x-powered-by: Express Set-Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; Max-Age=157680000; Domain=venmo.com; Path=/; Expires=Wed, 25 Apr 2029 12:22:57 GMT; HttpOnly; Secure Set-Cookie: s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; Max-Age=1800; Domain=venmo.com; Path=/; Expires=Fri, 26 Apr 2024 12:52:57 GMT; HttpOnly; Secure Set-Cookie: api_access_token=; Max-Age=-1; Domain=venmo.com; Path=/ Set-Cookie: pwv_id_token=; Max-Age=-1; Domain=venmo.com; Path=/ Set-Cookie: v_g_id=; Max-Age=-1; Domain=venmo.com; Path=/ Set-Cookie: w_fc=; Max-Age=-1; Domain=venmo.com; Path=/ Set-Cookie: group_user_api_access_token=; Max-Age=-1; Domain=venmo.com; Path=/ Cache-Control: no-store, no-cache, private, max-age=0 Location: https://venmo.com/account/sign-in?next=%2F x-envoy-upstream-service-time: 4 strict-transport-security: max-age=31536000 Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 53d271bfbca89325493bdef6385252ee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C4 X-Amz-Cf-Id: VPrJI68mMMTaWIj_eBe8wuezldfsLLIj0XqQpJ7WV4Pke1iL9XjFeA==
2024-04-26 12:22:57 UTC	48	IN	Data Raw: 32 61 0d 0a 68 74 74 70 73 3a 2f 2f 76 65 6e 6d 6f 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 2f 73 69 67 6e 2d 69 6e 3f 6e 65 78 74 3d 25 32 46 0d 0a Data Ascii: 2ahttps://venmo.com/account/sign-in?next=%2F
2024-04-26 12:22:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49782	52.84.150.50	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:56 UTC	494	OUT	GET /static/images/logo.svg HTTP/1.1 Host: account.venmo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; _csrf=DDftkNPgEA155iagiWokS3RO
2024-04-26 12:22:57 UTC	680	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 2558 Connection: close Date: Fri, 26 Apr 2024 12:22:57 GMT Server: nginx x-powered-by: Express Cache-Control: no-store, no-cache, private, max-age=0 x-frame-options: deny Accept-Ranges: bytes Last-Modified: Wed, 17 Apr 2024 16:17:41 GMT ETag: W/"9fe-18eecd98088" x-envoy-upstream-service-time: 4 strict-transport-security: max-age=31536000 Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 a849aab265796f3b1c80dee87a056b44.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: jJtrOdhJ-pQJypEyxPR-0v8rxTWCNJZcPPmkUhEa7koMtut7ELxsdg==
2024-04-26 12:22:57 UTC	2558	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 31 31 22 20 68 65 69 67 68 74 3d 22 34 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 31 31 20 34 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 33 34 2e 35 37 37 31 20 30 2e 38 32 32 30 32 31 43 33 35 2e 39 39 37 34 20 33 2e 31 36 37 33 33 20 33 36 2e 36 33 37 37 20 35 2e 35 38 33 30 31 20 33 36 2e 36 33 37 37 20 38 2e 36 33 34 35 31 43 33 36 2e 36 33 37 37 20 31 38 2e 33 36 37 32 20 32 38 2e 33 32 37 37 20 33 31 2e 30 31 30 37 20 32 31 2e 35 38 33 32 20 33 39 2e 38 38 38 38 48 36 2e 31 37 38 32 35 4c 30 20 32 2e 39 35 32 39 36 4c 31 33 2e 34 38 38 37 20 31 2e 36 37 32 35 Data Ascii: <svg width="211" height="41" viewBox="0 0 211 41" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M34.5771 0.822021C35.9974 3.16733 36.6377 5.58301 36.6377 8.63451C36.6377 18.3672 28.3277 31.0107 21.5832 39.8888H6.17825L0 2.95296L13.4887 1.6725

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49785	52.84.150.50	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:57 UTC	683	OUT	GET /_next/static/css/ce80a052d4932c39.css HTTP/1.1 Host: account.venmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://account.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; _csrf=DDftkNPgEA155iagiWokS3RO
2024-04-26 12:22:57 UTC	689	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=UTF-8 Content-Length: 42933 Connection: close Date: Fri, 26 Apr 2024 12:22:57 GMT Server: nginx x-powered-by: Express Cache-Control: public, max-age=31536000, immutable x-frame-options: deny Accept-Ranges: bytes Last-Modified: Wed, 17 Apr 2024 16:20:43 GMT ETag: W/"a7b5-18eecdc4778" x-envoy-upstream-service-time: 6 strict-transport-security: max-age=31536000 Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 64924074212560e583e5c4823e606c04.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C4 X-Amz-Cf-Id: XBKVe0s_83FiPPz-yOoqVNUA9ZSrxupsBBNut9AaZxzKfHFhBJ4IoQ==
2024-04-26 12:22:57 UTC	15695	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 63 74 6f 20 47 72 6f 74 65 73 6b 20 41 22 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 53 63 74 6f 20 47 72 6f 74 65 73 6b 20 41 22 29 2c 75 72 6c 28 22 2f 73 74 61 74 69 63 2f 66 6f 6e 74 73 2f 53 63 74 6f 2d 47 72 6f 74 65 73 6b 2d 41 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 63 74 6f 20 47 72 6f 74 65 73 6b 20 41 20 49 74 61 6c 69 63 22 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 6c 6f 63 61 Data Ascii: @font-face{font-family:"Scto Grotesk A";font-style:normal;font-weight:400;src:local("Scto Grotesk A"),url("/static/fonts/Scto-Grotesk-A-Regular.woff") format("woff")}@font-face{font-family:"Scto Grotesk A Italic";font-style:italic;font-weight:400;src:loca
2024-04-26 12:22:57 UTC	16384	IN	Data Raw: 74 61 69 6e 65 72 5f 5f 39 76 4f 7a 76 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 63 74 6f 20 47 72 6f 74 65 73 6b 20 41 20 42 6f 6c 64 22 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 36 70 78 7d 2e 66 6f 6f 74 65 72 5f 66 6f 6f 74 65 72 43 6f 6e 74 61 69 6e 65 72 5f 5f 63 54 6e 4b 67 20 2e 66 6f 6f 74 65 72 5f 64 69 73 63 6c 61 69 6d 65 72 5f 5f 6b 35 44 4f 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 36 70 78 3b 63 6f 6c 6f 72 3a 23 36 62 36 65 37 36 7d 2e 66 6f 6f 74 65 72 5f 66 6f 6f 74 65 72 43 6f 6e 74 61 69 6e 65 72 5f 5f 63 54 6e 4b 67 20 2e 66 6f 6f 74 65 72 5f 64 69 73 63 6c 61 69 6d 65 72 5f 5f 6b 35 44 4f 6e 3e 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 63 74 6f 20 47 72 6f 74 65 73 6b 20 41 20 42 6f 6c 64 22 7d 40 6d 65 64 69 61 28 6d Data Ascii: tainer__9vOzv{font-family:"Scto Grotesk A Bold";margin-right:56px}.footer_footerContainer__cTnKg .footer_disclaimer__k5DOn{padding-top:16px;color:#6b6e76}.footer_footerContainer__cTnKg .footer_disclaimer__k5DOn>a{font-family:"Scto Grotesk A Bold"}@media(m
2024-04-26 12:22:57 UTC	10854	IN	Data Raw: 35 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 53 63 74 6f 20 47 72 6f 74 65 73 6b 20 41 20 4d 65 64 69 75 6d 22 29 2c 75 72 6c 28 22 2f 73 74 61 74 69 63 2f 66 6f 6e 74 73 2f 53 63 74 6f 2d 47 72 6f 74 65 73 6b 2d 41 2d 4d 65 64 69 75 6d 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 63 74 6f 20 47 72 6f 74 65 73 6b 20 41 20 42 6f 6c 64 22 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 53 63 74 6f 20 47 72 6f 74 65 73 6b 20 41 20 42 6f 6c 64 22 29 2c 75 72 6c 28 22 2f 73 74 61 74 69 63 2f 66 6f 6e 74 73 2f 53 63 74 6f 2d 47 72 6f 74 65 73 6b 2d 41 2d 42 6f 6c 64 2e 77 6f Data Ascii: 500;src:local("Scto Grotesk A Medium"),url("/static/fonts/Scto-Grotesk-A-Medium.woff") format("woff")}@font-face{font-family:"Scto Grotesk A Bold";font-style:normal;font-weight:700;src:local("Scto Grotesk A Bold"),url("/static/fonts/Scto-Grotesk-A-Bold.wo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49786	151.101.193.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:57 UTC	777	OUT	GET /myaccount/privacy/cookieprefs/getBanner?showBanner=true&country=US&language=en&policyType=CookieBanner&originalHeaders={%22cookie%22:%22%22}&tenant=venmo&tenantData={} HTTP/1.1 Host: www.paypal.com Connection: keep-alive Access-Control-Allow-Origin: * Accept: / Content-Type: application/json sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://account.venmo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://account.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:22:57 UTC	1376	IN	HTTP/1.1 200 OK Connection: close Content-Length: 17852 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://account.venmo.com Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; style-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; script-src 'nonce-HSNyDXUaFD4l4jO6UbRYnrEu3+fzz1i5bkJbIrLjZDYXTfwx' 'self' 'unsafe-inline' https://.paypal.com https://.paypalobjects.com https://recaptcha.net/; img-src 'self' * data:; object-src 'none'; font-src 'self' https://.paypal.com https://.paypalobjects.com; frame-src 'self' https://.paypalobjects.com https://.paypal.com https://recaptcha.net/ https://.qualtrics.com; connect-src 'self' 'unsafe-inline' https://.paypal.com https://.paypalobjects.com https://id.venmo.com https://venmo.com/ https://.qualtrics.com; form-action 'self' https://.paypal.com; base-uri 'self' https://.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp Content-Type: application/json; charset=utf-8 Etag: W/"45bc-3v9hDkhLMdpqIn15/fWtYd2sszA"
2024-04-26 12:22:57 UTC	1355	IN	Data Raw: 4f 72 69 67 69 6e 2d 54 72 69 61 6c 3a 20 41 6c 49 6f 67 56 33 4b 46 74 6e 62 66 56 43 79 6c 39 5a 32 4e 70 72 45 37 46 44 38 50 59 43 74 2b 54 51 69 59 64 45 33 70 70 65 4a 6a 4a 30 78 4a 4b 63 74 68 59 77 4f 78 58 70 52 43 4e 6f 70 78 56 57 64 4f 49 45 4e 4d 63 4e 53 76 51 43 47 41 6d 6a 30 66 77 30 41 41 41 42 32 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 42 68 65 58 42 68 62 43 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6c 4e 6c 62 6d 52 47 64 57 78 73 56 58 4e 6c 63 6b 46 6e 5a 57 35 30 51 57 5a 30 5a 58 4a 53 5a 57 52 31 59 33 52 70 62 32 34 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 32 4f 44 51 34 4f 44 59 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 Data Ascii: Origin-Trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLCJleHBpcnkiOjE2ODQ4ODYzOTksImlzU3ViZG9tYWluI
2024-04-26 12:22:57 UTC	1084	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 74 73 3d 76 72 65 58 70 59 72 53 25 33 44 31 38 30 38 37 34 32 31 37 37 25 32 36 76 74 65 58 70 59 72 53 25 33 44 31 37 31 34 31 33 35 39 37 37 25 32 36 76 72 25 33 44 31 61 35 62 64 36 30 36 31 38 66 30 61 64 31 30 33 34 39 36 32 30 63 32 66 63 66 63 66 30 38 39 25 32 36 76 74 25 33 44 31 61 35 62 64 36 30 36 31 38 66 30 61 64 31 30 33 34 39 36 32 30 63 32 66 63 66 63 66 30 38 38 25 32 36 76 74 79 70 25 33 44 6e 65 77 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 4d 6f 6e 2c 20 32 36 20 41 70 72 20 32 30 32 37 20 31 32 3a 32 32 3a 35 37 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 Data Ascii: Set-Cookie: ts=vreXpYrS%3D1808742177%26vteXpYrS%3D1714135977%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 26 Apr 2027 12:22:57 GMT; HttpOnly; Secure; SameSite=NoneS
2024-04-26 12:22:57 UTC	1378	IN	Data Raw: 7b 22 63 73 73 22 3a 22 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 5c 22 5c 22 3e 40 66 6f 6e 74 2d 66 61 63 65 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 5c 22 50 61 79 50 61 6c 53 61 6e 73 42 69 67 2d 52 65 67 75 6c 61 72 5c 22 3b 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 20 73 72 63 3a 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 70 61 79 70 61 6c 2d 75 69 2f 66 6f 6e 74 73 2f 50 61 79 50 61 6c 53 61 6e 73 42 69 67 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f Data Ascii: {"css":"<style nonce=\"\">@font-face { font-family: \"PayPalSansBig-Regular\"; font-style: normal; font-display: swap; src: url('https://www.paypalobjects.com/paypal-ui/fonts/PayPalSansBig-Regular.woff2') format('woff2'), url('https://www.paypalobjects.co
2024-04-26 12:22:57 UTC	1378	IN	Data Raw: 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 23 30 30 37 30 62 61 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 50 61 79 50 61 6c 53 61 6e 73 42 69 67 2d 52 65 67 75 6c 61 72 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 20 7d 20 2e 63 63 70 61 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 5f 63 6f 6e 74 65 6e 74 20 61 3a 66 6f 63 75 73 2c 20 2e 63 63 70 61 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 5f 62 75 74 74 6f 6e 47 72 6f 75 70 20 62 75 74 74 6f 6e 3a 66 6f 63 75 73 20 7b 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 30 30 37 30 42 41 3b 20 7d 20 2e 63 63 70 61 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 5f 62 75 74 74 6f 6e 47 72 6f 75 70 20 7b 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 35 65 6d 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 73 74 61 74 69 63 3b Data Ascii: ine; color: #0070ba; font-family: PayPalSansBig-Regular; font-weight: 500; } .ccpaCookieBanner_content a:focus, .ccpaCookieBanner_buttonGroup button:focus { border: 1px solid #0070BA; } .ccpaCookieBanner_buttonGroup { padding-right: 5em; position: static;
2024-04-26 12:22:57 UTC	1378	IN	Data Raw: 61 6e 6e 65 72 5f 72 74 6c 43 6f 6e 74 61 69 6e 65 72 20 2e 63 63 70 61 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 5f 62 75 74 74 6f 6e 47 72 6f 75 70 20 7b 20 70 61 64 64 69 6e 67 3a 20 30 20 30 20 30 2e 37 35 65 6d 20 30 3b 20 7d 20 62 75 74 74 6f 6e 2e 63 63 70 61 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 5f 64 65 63 6c 69 6e 65 2d 62 75 74 74 6f 6e 20 7b 20 6d 61 72 67 69 6e 3a 20 30 20 20 30 20 30 20 31 2e 32 35 72 65 6d 20 7d 20 7d 20 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 30 30 70 78 29 20 7b 20 2e 63 63 70 61 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 2d 61 63 63 65 70 74 65 64 41 6c 6c 20 7b 20 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 32 65 6d 3b Data Ascii: anner_rtlContainer .ccpaCookieBanner_buttonGroup { padding: 0 0 0.75em 0; } button.ccpaCookieBanner_decline-button { margin: 0 0 0 1.25rem } } @media only screen and (max-width: 600px) { .ccpaCookieBanner-acceptedAll { height: auto; padding-bottom: 12em;
2024-04-26 12:22:57 UTC	1378	IN	Data Raw: 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 7b 20 72 65 61 73 6f 6e 20 3d 20 27 63 6f 6f 6b 69 65 73 20 61 72 65 20 64 69 73 61 62 6c 65 64 27 3b 20 7d 20 65 6c 73 65 20 69 66 28 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 5c 22 69 73 55 73 65 72 41 63 63 65 70 74 65 64 5c 22 29 29 7b 20 72 65 61 73 6f 6e 20 3d 20 27 55 73 65 72 20 61 63 63 65 70 74 65 64 20 6f 72 20 64 65 63 6c 69 6e 65 64 27 3b 20 7d 20 65 6c 73 65 20 69 66 28 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 5c 22 69 73 42 61 6e 6e 65 72 43 6c 6f 73 65 64 5c 22 29 29 7b 20 72 65 61 73 6f 6e 20 3d 20 27 42 61 6e 6e 65 72 20 43 6c 6f 73 65 64 27 3b 20 7d 20 65 6c 73 65 20 69 66 28 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 Data Ascii: .cookieEnabled){ reason = 'cookies are disabled'; } else if(sessionStorage.getItem(\"isUserAccepted\")){ reason = 'User accepted or declined'; } else if(sessionStorage.getItem(\"isBannerClosed\")){ reason = 'Banner Closed'; } else if(sessionStorage.getIte
2024-04-26 12:22:57 UTC	1378	IN	Data Raw: 67 72 70 29 20 7c 7c 64 6f 63 75 6d 65 6e 74 2e 74 69 74 6c 65 3b 20 69 66 20 28 6d 61 6e 61 67 65 43 6f 6f 6b 69 65 73 4c 69 6e 6b 29 20 7b 20 6d 61 6e 61 67 65 43 6f 6f 6b 69 65 73 4c 69 6e 6b 2e 6f 6e 63 6c 69 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 69 66 28 74 72 75 65 29 7b 20 76 61 72 20 6d 61 6e 61 67 65 43 6f 6f 6b 69 65 73 44 61 74 61 20 3d 20 7b 20 65 3a 20 27 63 6c 27 2c 20 6c 69 6e 6b 3a 20 27 6d 61 6e 61 67 65 63 6f 6f 6b 69 65 73 27 2c 20 70 67 6c 6b 3a 20 74 72 61 63 6b 69 6e 67 50 61 67 65 4e 61 6d 65 20 2b 20 27 7c 6d 61 6e 61 67 65 63 6f 6f 6b 69 65 73 27 2c 20 70 67 6c 6e 3a 20 74 72 61 63 6b 69 6e 67 50 61 67 65 4e 61 6d 65 20 2b 20 27 7c 6d 61 6e 61 67 65 63 6f 6f 6b 69 65 73 27 2c 20 65 76 65 6e 74 5f 6e 61 6d 65 3a 20 Data Ascii: grp) \|\|document.title; if (manageCookiesLink) { manageCookiesLink.onclick = function() { if(true){ var manageCookiesData = { e: 'cl', link: 'managecookies', pglk: trackingPageName + '\|managecookies', pgln: trackingPageName + '\|managecookies', event_name:
2024-04-26 12:22:57 UTC	1378	IN	Data Raw: 5f 70 72 65 66 73 3a 20 27 54 3d 31 2c 50 3d 31 2c 46 3d 31 2c 74 79 70 65 3d 65 78 70 6c 69 63 69 74 5f 62 61 6e 6e 65 72 27 2c 20 65 76 65 6e 74 5f 6e 61 6d 65 3a 20 27 76 65 6e 6d 6f 5f 63 6f 6f 6b 69 65 5f 62 61 6e 6e 65 72 5f 61 63 63 65 70 74 5f 63 6c 69 63 6b 65 64 27 20 7d 3b 20 66 6f 72 28 76 61 72 20 6b 65 79 20 69 6e 20 62 61 6e 6e 65 72 46 70 74 69 44 61 74 61 29 7b 20 61 63 63 65 70 74 62 61 6e 6e 65 72 46 70 74 69 44 61 74 61 5b 6b 65 79 5d 20 3d 20 62 61 6e 6e 65 72 46 70 74 69 44 61 74 61 5b 6b 65 79 5d 3b 20 7d 3b 20 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 2e 61 6e 61 6c 79 74 69 63 73 2e 41 6e 61 6c 79 74 69 63 73 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 63 6f 72 64 43 6c 69 63 6b 28 7b 20 64 61 74 61 3a 20 61 63 63 65 70 74 62 61 6e 6e 65 Data Ascii: _prefs: 'T=1,P=1,F=1,type=explicit_banner', event_name: 'venmo_cookie_banner_accept_clicked' }; for(var key in bannerFptiData){ acceptbannerFptiData[key] = bannerFptiData[key]; }; window.PAYPAL.analytics.Analytics.prototype.recordClick({ data: acceptbanne
2024-04-26 12:22:57 UTC	1378	IN	Data Raw: 20 3d 20 7b 20 63 6f 6f 6b 69 65 62 61 6e 6e 65 72 68 69 64 64 65 6e 3a 20 27 74 72 75 65 27 2c 20 63 5f 70 72 65 66 73 3a 20 27 54 3d 30 2c 50 3d 31 2c 46 3d 31 2c 74 79 70 65 3d 65 78 70 6c 69 63 69 74 5f 62 61 6e 6e 65 72 27 20 7d 3b 20 66 6f 72 28 76 61 72 20 6b 65 79 20 69 6e 20 62 61 6e 6e 65 72 46 70 74 69 44 61 74 61 29 7b 20 75 70 64 61 74 65 64 46 70 74 69 44 61 74 61 5b 6b 65 79 5d 20 3d 20 62 61 6e 6e 65 72 46 70 74 69 44 61 74 61 5b 6b 65 79 5d 3b 20 7d 3b 20 66 6f 72 28 76 61 72 20 6b 65 79 20 69 6e 20 75 70 64 61 74 65 64 46 70 74 69 44 61 74 61 29 7b 20 77 69 6e 46 70 74 69 44 61 74 61 5b 6b 65 79 5d 20 3d 20 75 70 64 61 74 65 64 46 70 74 69 44 61 74 61 5b 6b 65 79 5d 3b 20 7d 3b 20 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 2e 61 6e 61 6c 79 Data Ascii: = { cookiebannerhidden: 'true', c_prefs: 'T=0,P=1,F=1,type=explicit_banner' }; for(var key in bannerFptiData){ updatedFptiData[key] = bannerFptiData[key]; }; for(var key in updatedFptiData){ winFptiData[key] = updatedFptiData[key]; }; window.PAYPAL.analy
2024-04-26 12:22:57 UTC	967	IN	Data Raw: 28 63 6f 6f 6b 69 65 42 61 6e 6e 65 72 41 63 63 65 70 74 41 6c 6c 20 26 26 20 63 6f 6f 6b 69 65 42 61 6e 6e 65 72 41 63 63 65 70 74 41 6c 6c 5b 30 5d 20 26 26 20 62 61 6e 6e 65 72 48 65 69 67 68 74 29 7b 20 63 6f 6f 6b 69 65 42 61 6e 6e 65 72 41 63 63 65 70 74 41 6c 6c 5b 30 5d 2e 73 74 79 6c 65 2e 70 61 64 64 69 6e 67 54 6f 70 20 3d 20 62 61 6e 6e 65 72 48 65 69 67 68 74 2f 31 36 20 2b 27 65 6d 27 3b 20 7d 20 7d 20 7d 3b 20 76 61 72 20 69 73 50 61 64 64 69 6e 67 42 6f 74 74 6f 6d 41 64 64 65 64 20 3d 20 66 61 6c 73 65 2c 20 62 61 6e 6e 65 72 50 61 64 64 69 6e 67 42 6f 74 74 6f 6d 20 3d 20 5c 22 5c 22 3b 20 66 75 6e 63 74 69 6f 6e 20 61 64 6a 75 73 74 50 61 64 64 69 6e 67 42 6f 74 74 6f 6d 28 61 64 64 4c 69 73 74 65 6e 65 72 29 7b 20 69 66 20 28 75 6e 64 Data Ascii: (cookieBannerAcceptAll && cookieBannerAcceptAll[0] && bannerHeight){ cookieBannerAcceptAll[0].style.paddingTop = bannerHeight/16 +'em'; } } }; var isPaddingBottomAdded = false, bannerPaddingBottom = \"\"; function adjustPaddingBottom(addListener){ if (und

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49789	151.101.193.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:57 UTC	648	OUT	POST /v1/r/d/b/p1 HTTP/1.1 Host: c.paypal.com Connection: keep-alive Content-Length: 1962 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://c.paypal.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://c.paypal.com/v1/r/d/i?js_src=https://c.paypal.com/da/r/fb.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:22:57 UTC	1962	OUT	Data Raw: 7b 22 61 70 70 49 64 22 3a 22 76 65 6e 6d 6f 5f 77 65 62 5f 77 65 62 6d 6f 5f 6c 6f 67 69 6e 22 2c 22 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 22 3a 22 36 61 39 35 66 65 65 64 2d 62 38 31 38 2d 34 35 63 34 2d 38 63 62 37 2d 36 62 39 33 39 37 34 38 39 35 37 66 22 2c 22 70 61 79 6c 6f 61 64 22 3a 7b 22 74 72 74 22 3a 66 61 6c 73 65 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 44 61 74 61 22 3a 7b 22 65 66 66 65 63 74 69 76 65 54 79 70 65 22 3a 22 33 67 22 2c 22 72 74 74 22 3a 22 33 35 30 22 2c 22 64 6f 77 6e 6c 69 6e 6b 22 3a 22 31 2e 35 35 22 7d 2c 22 6e 61 76 69 67 61 74 6f 72 22 3a 7b 22 61 70 70 4e 61 6d 65 22 3a 22 4e 65 74 73 63 61 70 65 22 2c 22 61 70 70 56 65 72 73 69 6f 6e 22 3a 22 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 Data Ascii: {"appId":"venmo_web_webmo_login","correlationId":"6a95feed-b818-45c4-8cb7-6b939748957f","payload":{"trt":false,"connectionData":{"effectiveType":"3g","rtt":"350","downlink":"1.55"},"navigator":{"appName":"Netscape","appVersion":"5.0 (Windows NT 10.0; Win6
2024-04-26 12:22:57 UTC	1153	IN	HTTP/1.1 200 OK Connection: close Content-Length: 125 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.paypal.com Access-Control-Expose-Headers: Server-Timing CORRELATION-ID: 8e272f8276ba2 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: application/json P3p: policyref="/w3c/p3p.xml", CP="NON DSP COR ADM OUR IND COM" Paypal-Debug-Id: 8e272f8276ba2 Set-Cookie: sc_f=7E_t1Dh3Xuq2yfzj-cUMvjpCn09p_IyvrlNUQ1DQ276Emhm-EnooZVJUdjUfLFIOSK8WVouVusELrD8ZEoggMphfOgb_7uL0msERVG;Domain=.paypal.com;Max-Age=0;Path=/;Secure;Version=1;Expires=Fri, 26-Apr-2024 05:22:57 GMT; HttpOnly; SameSite=None Set-Cookie: sc_f=7E_t1Dh3Xuq2yfzj-cUMvjpCn09p_IyvrlNUQ1DQ276Emhm-EnooZVJUdjUfLFIOSK8WVouVusELrD8ZEoggMphfOgb_7uL0msERVG;Domain=.paypal.com;Max-Age=157680000;Path=/;Secure;Version=1;Expires=Wed, 25-Apr-2029 05:22:57 GMT; HttpOnly; SameSite=None; Partitioned; Set-Cookie: KHcl0EuY7AKSMgfvHl7J5E7hPtK=H5vOX4Xx9E6rPaNsW1umPOEju90KfJTschjWY_e1f92eqJS1o6EoZAYAvBErjHwsTvfIlecHLC-YGp_e;Domain=.paypal.com;Max-Age=0;Path=/;Secure;Version=1;Expires=Fri, 26-Apr-2024 05:22:57 GMT; HttpOnly; SameSite=None
2024-04-26 12:22:57 UTC	916	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4b 48 63 6c 30 45 75 59 37 41 4b 53 4d 67 66 76 48 6c 37 4a 35 45 37 68 50 74 4b 3d 48 35 76 4f 58 34 58 78 39 45 36 72 50 61 4e 73 57 31 75 6d 50 4f 45 6a 75 39 30 4b 66 4a 54 73 63 68 6a 57 59 5f 65 31 66 39 32 65 71 4a 53 31 6f 36 45 6f 5a 41 59 41 76 42 45 72 6a 48 77 73 54 76 66 49 6c 65 63 48 4c 43 2d 59 47 70 5f 65 3b 44 6f 6d 61 69 6e 3d 2e 70 61 79 70 61 6c 2e 63 6f 6d 3b 4d 61 78 2d 41 67 65 3d 36 33 30 37 32 30 30 30 30 3b 50 61 74 68 3d 2f 3b 53 65 63 75 72 65 3b 56 65 72 73 69 6f 6e 3d 31 3b 45 78 70 69 72 65 73 3d 54 68 75 2c 20 32 31 2d 41 70 72 2d 32 30 34 34 20 30 35 3a 32 32 3a 35 37 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 50 61 72 74 69 74 69 6f 6e Data Ascii: Set-Cookie: KHcl0EuY7AKSMgfvHl7J5E7hPtK=H5vOX4Xx9E6rPaNsW1umPOEju90KfJTschjWY_e1f92eqJS1o6EoZAYAvBErjHwsTvfIlecHLC-YGp_e;Domain=.paypal.com;Max-Age=630720000;Path=/;Secure;Version=1;Expires=Thu, 21-Apr-2044 05:22:57 GMT; HttpOnly; SameSite=None; Partition
2024-04-26 12:22:57 UTC	125	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 73 63 22 3a 22 37 45 5f 74 31 44 68 33 58 75 71 32 79 66 7a 6a 2d 63 55 4d 76 6a 70 43 6e 30 39 70 5f 49 79 76 72 6c 4e 55 51 31 44 51 32 37 36 45 6d 68 6d 2d 45 6e 6f 6f 5a 56 4a 55 64 6a 55 66 4c 46 49 4f 53 4b 38 57 56 6f 75 56 75 73 45 4c 72 44 38 5a 45 6f 67 67 4d 70 68 66 4f 67 62 5f 37 75 4c 30 6d 73 45 52 56 47 22 7d Data Ascii: {"error":false,"sc":"7E_t1Dh3Xuq2yfzj-cUMvjpCn09p_IyvrlNUQ1DQ276Emhm-EnooZVJUdjUfLFIOSK8WVouVusELrD8ZEoggMphfOgb_7uL0msERVG"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49788	151.101.193.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:57 UTC	648	OUT	POST /v1/r/d/b/p2 HTTP/1.1 Host: c.paypal.com Connection: keep-alive Content-Length: 2500 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://c.paypal.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://c.paypal.com/v1/r/d/i?js_src=https://c.paypal.com/da/r/fb.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:22:57 UTC	2500	OUT	Data Raw: 7b 22 61 70 70 49 64 22 3a 22 76 65 6e 6d 6f 5f 77 65 62 5f 77 65 62 6d 6f 5f 6c 6f 67 69 6e 22 2c 22 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 22 3a 22 36 61 39 35 66 65 65 64 2d 62 38 31 38 2d 34 35 63 34 2d 38 63 62 37 2d 36 62 39 33 39 37 34 38 39 35 37 66 22 2c 22 70 61 79 6c 6f 61 64 22 3a 7b 22 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 63 63 6f 75 6e 74 2e 76 65 6e 6d 6f 2e 63 6f 6d 2f 73 69 67 6e 75 70 3f 65 6d 61 69 6c 3d 6e 6f 72 65 70 6c 79 31 31 25 34 30 77 71 65 72 64 66 64 2e 6f 6e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 26 69 6e 76 69 74 65 5f 69 64 3d 36 36 32 61 37 35 62 65 33 63 61 63 31 37 61 37 30 61 39 39 30 34 66 61 26 6e 72 3d 31 26 75 74 6d 5f 6d 65 64 69 75 6d 3d 65 6d 61 69 6c 26 75 74 6d 5f 73 6f 75 72 63 65 3d 70 6e 75 22 2c 22 Data Ascii: {"appId":"venmo_web_webmo_login","correlationId":"6a95feed-b818-45c4-8cb7-6b939748957f","payload":{"URL":"https://account.venmo.com/signup?email=noreply11%40wqerdfd.onmicrosoft.com&invite_id=662a75be3cac17a70a9904fa&nr=1&utm_medium=email&utm_source=pnu","
2024-04-26 12:22:58 UTC	1279	IN	HTTP/1.1 200 OK Connection: close Content-Length: 125 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.paypal.com Access-Control-Expose-Headers: Server-Timing CORRELATION-ID: a0f81e4adf5d5 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: application/json P3p: policyref="/w3c/p3p.xml", CP="NON DSP COR ADM OUR IND COM" Paypal-Debug-Id: a0f81e4adf5d5 Set-Cookie: sc_f=CEKPNHQG08AWc-eXVA4YPw93eSBWwxF4jXwznQNxJ_4VWbeV7FgS4yQ2I1Wt5sfyajVP4H77tpr0Ipov674wteSk7U1-EXiXl3h4f0;Domain=.paypal.com;Max-Age=0;Path=/;Secure;Version=1;Expires=Fri, 26-Apr-2024 05:22:58 GMT; HttpOnly; SameSite=None Set-Cookie: sc_f=CEKPNHQG08AWc-eXVA4YPw93eSBWwxF4jXwznQNxJ_4VWbeV7FgS4yQ2I1Wt5sfyajVP4H77tpr0Ipov674wteSk7U1-EXiXl3h4f0;Domain=.paypal.com;Max-Age=157680000;Path=/;Secure;Version=1;Expires=Wed, 25-Apr-2029 05:22:58 GMT; HttpOnly; SameSite=None; Partitioned; Traceparent: 00-0000000000000000000a0f81e4adf5d5-142036e98c866fb7-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Fri, 26 Apr 2024 12:22:58 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-dfw-kdal2120046-DFW, cache-pdk-kfty2130039-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 vary: Accept-Encoding
2024-04-26 12:22:58 UTC	164	IN	Data Raw: 53 65 72 76 65 72 2d 54 69 6d 69 6e 67 3a 20 22 74 72 61 63 65 70 61 72 65 6e 74 3b 64 65 73 63 3d 22 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 61 30 66 38 31 65 34 61 64 66 35 64 35 2d 64 63 33 37 36 31 61 34 62 30 64 66 31 64 34 33 2d 30 31 22 22 3b 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 3b 64 65 73 63 3d 22 22 2c 78 2d 63 64 6e 3b 64 65 73 63 3d 22 66 61 73 74 6c 79 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 0d 0a Data Ascii: Server-Timing: "traceparent;desc="00-0000000000000000000a0f81e4adf5d5-dc3761a4b0df1d43-01"";content-encoding;desc="",x-cdn;desc="fastly"Timing-Allow-Origin: *
2024-04-26 12:22:58 UTC	125	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 73 63 22 3a 22 43 45 4b 50 4e 48 51 47 30 38 41 57 63 2d 65 58 56 41 34 59 50 77 39 33 65 53 42 57 77 78 46 34 6a 58 77 7a 6e 51 4e 78 4a 5f 34 56 57 62 65 56 37 46 67 53 34 79 51 32 49 31 57 74 35 73 66 79 61 6a 56 50 34 48 37 37 74 70 72 30 49 70 6f 76 36 37 34 77 74 65 53 6b 37 55 31 2d 45 58 69 58 6c 33 68 34 66 30 22 7d Data Ascii: {"error":false,"sc":"CEKPNHQG08AWc-eXVA4YPw93eSBWwxF4jXwznQNxJ_4VWbeV7FgS4yQ2I1Wt5sfyajVP4H77tpr0Ipov674wteSk7U1-EXiXl3h4f0"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49794	52.84.150.38	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:57 UTC	456	OUT	GET /account/sign-in?next=%2F HTTP/1.1 Host: venmo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91
2024-04-26 12:22:58 UTC	1081	IN	HTTP/1.1 307 Temporary Redirect Transfer-Encoding: chunked Connection: close Date: Fri, 26 Apr 2024 12:22:58 GMT Server: nginx x-powered-by: Express Set-Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; Max-Age=157680000; Domain=venmo.com; Path=/; Expires=Wed, 25 Apr 2029 12:22:58 GMT; HttpOnly; Secure Set-Cookie: s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; Max-Age=1800; Domain=venmo.com; Path=/; Expires=Fri, 26 Apr 2024 12:52:58 GMT; HttpOnly; Secure Set-Cookie: _csrf=pKhoy7PoesEVNm2nuYnIc8xy; Path=/; Secure Cache-Control: no-store, no-cache, private, max-age=0 x-frame-options: deny Location: https://account.venmo.com/account/sign-in?next=%2F x-envoy-upstream-service-time: 98 strict-transport-security: max-age=31536000 Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 982dd7ed309ab3025635ef6f0ff61e82.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: aX29w4iasip45S-BbgR4wuIQrR1YbgNGd7dT3X4y2n0M0js-TAW7tA==
2024-04-26 12:22:58 UTC	56	IN	Data Raw: 33 32 0d 0a 68 74 74 70 73 3a 2f 2f 61 63 63 6f 75 6e 74 2e 76 65 6e 6d 6f 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 2f 73 69 67 6e 2d 69 6e 3f 6e 65 78 74 3d 25 32 46 0d 0a Data Ascii: 32https://account.venmo.com/account/sign-in?next=%2F
2024-04-26 12:22:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49795	151.101.1.35	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:57 UTC	1483	OUT	GET /ts?v=1.8.16&t=1714134176931&g=-120&page=main%3Aprivacy%3Apolicy%3Accpa&pgrp=main%3Aprivacy%3Apolicy&displaypage=Venmo%20%7C%20Sign%20up&ppage=privacy_banner&bannertype=cookiebanner&ccpg=US&flag=ccpa&bannerversion=v4&bannersource=ConsentNodeServ&xe=108814&xt=142081&eligibility_reason=true&cookie_disabled=false&tenant_code=venmo&event_name=venmo_cookie_banner_shown&e=ac&tenant_name=venmo&3p_vid=5c54414429c8af7c&3p_fpti=686430877c1fef0 HTTP/1.1 Host: t.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://account.venmo.com/signup?email=noreply11%40wqerdfd.onmicrosoft.com&invite_id=662a75be3cac17a70a9904fa&nr=1&utm_medium=email&utm_source=pnu Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; x-pp-s=eyJ0IjoiMTcxNDEzNDE3NzM1OSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742177%26vteXpYrS%3D1714135977%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088
2024-04-26 12:22:58 UTC	1232	IN	HTTP/1.1 200 OK Connection: close CORRELATION-ID: 27d2c84292cc9 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Fri, 26 Apr 2024 12:22:58 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: 27d2c84292cc9 Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1808742178%26vteXpYrS%3D1714135978%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew;Expires=Mon, 26 Apr 2027 12:22:58 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088;Expires=Mon, 26 Apr 2027 12:22:58 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-000000000000000000027d2c84292cc9-aa3f0ceb0ac81c05-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Fri, 26 Apr 2024 12:22:58 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-iad-kcgs7200159-IAD, cache-gnv1820028-GNV X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1714134178.116925,VS0,VE94 vary: Accept-Encoding Server-Timing: content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-04-26 12:22:58 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-04-26 12:22:58 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-04-26 12:22:58 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49796	52.84.150.50	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:57 UTC	562	OUT	GET /_next/static/css/ce80a052d4932c39.css HTTP/1.1 Host: account.venmo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; _csrf=DDftkNPgEA155iagiWokS3RO; cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial
2024-04-26 12:22:58 UTC	689	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=UTF-8 Content-Length: 42933 Connection: close Date: Fri, 26 Apr 2024 12:22:58 GMT Server: nginx x-powered-by: Express Cache-Control: public, max-age=31536000, immutable x-frame-options: deny Accept-Ranges: bytes Last-Modified: Wed, 17 Apr 2024 16:20:43 GMT ETag: W/"a7b5-18eecdc4778" x-envoy-upstream-service-time: 4 strict-transport-security: max-age=31536000 Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 a62211aa91c2317f2c505a32aa17cf8a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C4 X-Amz-Cf-Id: kaLQxearzNP87NcNjZDvC_hUPrGqzws8hhjKKvIArxiHrVv_Q0V4Qg==
2024-04-26 12:22:58 UTC	15695	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 63 74 6f 20 47 72 6f 74 65 73 6b 20 41 22 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 53 63 74 6f 20 47 72 6f 74 65 73 6b 20 41 22 29 2c 75 72 6c 28 22 2f 73 74 61 74 69 63 2f 66 6f 6e 74 73 2f 53 63 74 6f 2d 47 72 6f 74 65 73 6b 2d 41 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 63 74 6f 20 47 72 6f 74 65 73 6b 20 41 20 49 74 61 6c 69 63 22 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 6c 6f 63 61 Data Ascii: @font-face{font-family:"Scto Grotesk A";font-style:normal;font-weight:400;src:local("Scto Grotesk A"),url("/static/fonts/Scto-Grotesk-A-Regular.woff") format("woff")}@font-face{font-family:"Scto Grotesk A Italic";font-style:italic;font-weight:400;src:loca
2024-04-26 12:22:58 UTC	16384	IN	Data Raw: 74 61 69 6e 65 72 5f 5f 39 76 4f 7a 76 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 63 74 6f 20 47 72 6f 74 65 73 6b 20 41 20 42 6f 6c 64 22 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 36 70 78 7d 2e 66 6f 6f 74 65 72 5f 66 6f 6f 74 65 72 43 6f 6e 74 61 69 6e 65 72 5f 5f 63 54 6e 4b 67 20 2e 66 6f 6f 74 65 72 5f 64 69 73 63 6c 61 69 6d 65 72 5f 5f 6b 35 44 4f 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 36 70 78 3b 63 6f 6c 6f 72 3a 23 36 62 36 65 37 36 7d 2e 66 6f 6f 74 65 72 5f 66 6f 6f 74 65 72 43 6f 6e 74 61 69 6e 65 72 5f 5f 63 54 6e 4b 67 20 2e 66 6f 6f 74 65 72 5f 64 69 73 63 6c 61 69 6d 65 72 5f 5f 6b 35 44 4f 6e 3e 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 63 74 6f 20 47 72 6f 74 65 73 6b 20 41 20 42 6f 6c 64 22 7d 40 6d 65 64 69 61 28 6d Data Ascii: tainer__9vOzv{font-family:"Scto Grotesk A Bold";margin-right:56px}.footer_footerContainer__cTnKg .footer_disclaimer__k5DOn{padding-top:16px;color:#6b6e76}.footer_footerContainer__cTnKg .footer_disclaimer__k5DOn>a{font-family:"Scto Grotesk A Bold"}@media(m
2024-04-26 12:22:58 UTC	196	IN	Data Raw: 35 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 53 63 74 6f 20 47 72 6f 74 65 73 6b 20 41 20 4d 65 64 69 75 6d 22 29 2c 75 72 6c 28 22 2f 73 74 61 74 69 63 2f 66 6f 6e 74 73 2f 53 63 74 6f 2d 47 72 6f 74 65 73 6b 2d 41 2d 4d 65 64 69 75 6d 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 63 74 6f 20 47 72 6f 74 65 73 6b 20 41 20 42 6f 6c 64 22 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 53 63 74 6f Data Ascii: 500;src:local("Scto Grotesk A Medium"),url("/static/fonts/Scto-Grotesk-A-Medium.woff") format("woff")}@font-face{font-family:"Scto Grotesk A Bold";font-style:normal;font-weight:700;src:local("Scto
2024-04-26 12:22:58 UTC	10658	IN	Data Raw: 20 47 72 6f 74 65 73 6b 20 41 20 42 6f 6c 64 22 29 2c 75 72 6c 28 22 2f 73 74 61 74 69 63 2f 66 6f 6e 74 73 2f 53 63 74 6f 2d 47 72 6f 74 65 73 6b 2d 41 2d 42 6f 6c 64 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 41 74 68 6c 65 74 69 63 73 20 52 65 67 75 6c 61 72 22 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 41 74 68 6c 65 74 69 63 73 22 29 2c 75 72 6c 28 22 2f 73 74 61 74 69 63 2f 66 6f 6e 74 73 2f 41 74 68 6c 65 74 69 63 73 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 Data Ascii: Grotesk A Bold"),url("/static/fonts/Scto-Grotesk-A-Bold.woff") format("woff")}@font-face{font-family:"Athletics Regular";font-style:normal;font-weight:400;src:local("Athletics"),url("/static/fonts/Athletics-Regular.woff") format("woff")}@font-face{font-f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49798	151.101.129.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:58 UTC	948	OUT	GET /myaccount/privacy/cookieprefs/getBanner?showBanner=true&country=US&language=en&policyType=CookieBanner&originalHeaders={%22cookie%22:%22%22}&tenant=venmo&tenantData={} HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; x-pp-s=eyJ0IjoiMTcxNDEzNDE3NzM1OSIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3An7iR5EQmXKz-oKtVXIy1EEIPxyKSFcCK.1TZKfiuN5QvG6VUXG7uj%2F6PzQRey35iwuU69rZa1p10; ts=vreXpYrS%3D1808742177%26vteXpYrS%3D1714135977%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088
2024-04-26 12:22:58 UTC	1127	IN	HTTP/1.1 400 Bad Request Connection: close Content-Length: 11 Accept-Ch: Sec-CH-UA-Full Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; style-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; script-src 'nonce-QC7M0SMhAG3UDsr35rbPc7f4vHhrVaeI7fc0qvu4qGPzI/w3' 'self' 'unsafe-inline' https://.paypal.com https://.paypalobjects.com https://recaptcha.net/; img-src 'self' * data:; object-src 'none'; font-src 'self' https://.paypal.com https://.paypalobjects.com; frame-src 'self' https://.paypalobjects.com https://.paypal.com https://recaptcha.net/ https://.qualtrics.com; connect-src 'self' 'unsafe-inline' https://.paypal.com https://.paypalobjects.com https://id.venmo.com https://venmo.com/ https://.qualtrics.com; form-action 'self' https://.paypal.com; base-uri 'self' https://.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp Content-Type: text/plain; charset=utf-8 Etag: W/"b-EFiDB1U+dmqzx9Mo2UjcZ1SJPO8"
2024-04-26 12:22:58 UTC	1626	IN	Data Raw: 4f 72 69 67 69 6e 2d 54 72 69 61 6c 3a 20 41 6c 49 6f 67 56 33 4b 46 74 6e 62 66 56 43 79 6c 39 5a 32 4e 70 72 45 37 46 44 38 50 59 43 74 2b 54 51 69 59 64 45 33 70 70 65 4a 6a 4a 30 78 4a 4b 63 74 68 59 77 4f 78 58 70 52 43 4e 6f 70 78 56 57 64 4f 49 45 4e 4d 63 4e 53 76 51 43 47 41 6d 6a 30 66 77 30 41 41 41 42 32 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 42 68 65 58 42 68 62 43 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6c 4e 6c 62 6d 52 47 64 57 78 73 56 58 4e 6c 63 6b 46 6e 5a 57 35 30 51 57 5a 30 5a 58 4a 53 5a 57 52 31 59 33 52 70 62 32 34 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 32 4f 44 51 34 4f 44 59 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 Data Ascii: Origin-Trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLCJleHBpcnkiOjE2ODQ4ODYzOTksImlzU3ViZG9tYWluI
2024-04-26 12:22:58 UTC	152	IN	Data Raw: 58 2d 43 61 63 68 65 3a 20 4d 49 53 53 2c 20 4d 49 53 53 2c 20 4d 49 53 53 0d 0a 58 2d 43 61 63 68 65 2d 48 69 74 73 3a 20 30 2c 20 30 2c 20 30 0d 0a 58 2d 54 69 6d 65 72 3a 20 53 31 37 31 34 31 33 34 31 37 38 2e 33 30 31 33 32 37 2c 56 53 30 2c 56 45 31 31 39 0d 0a 53 65 72 76 65 72 2d 54 69 6d 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 3b 64 65 73 63 3d 22 22 2c 78 2d 63 64 6e 3b 64 65 73 63 3d 22 66 61 73 74 6c 79 22 0d 0a 0d 0a Data Ascii: X-Cache: MISS, MISS, MISSX-Cache-Hits: 0, 0, 0X-Timer: S1714134178.301327,VS0,VE119Server-Timing: content-encoding;desc="",x-cdn;desc="fastly"
2024-04-26 12:22:58 UTC	11	IN	Data Raw: 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49799	151.101.65.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:58 UTC	718	OUT	GET /v1/r/d/b/p1 HTTP/1.1 Host: c.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; x-pp-s=eyJ0IjoiMTcxNDEzNDE3NzM1OSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742177%26vteXpYrS%3D1714135977%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; l7_az=dcg16.slc
2024-04-26 12:22:58 UTC	971	IN	HTTP/1.1 405 Method Not Allowed Connection: close Content-Length: 151 Access-Control-Expose-Headers: Server-Timing CORRELATION-ID: dc6e5d033dd0f Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: application/json Paypal-Debug-Id: dc6e5d033dd0f Set-Cookie: l7_az=dcg16.slc; Path=/; Domain=paypal.com; Expires=Fri, 26 Apr 2024 12:52:58 GMT; HttpOnly; Secure; SameSite=None Traceparent: 00-0000000000000000000dc6e5d033dd0f-b4a673d7c742c7c1-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Fri, 26 Apr 2024 12:22:58 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-dfw-kdal2120096-DFW, cache-pdk-kfty2130091-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1714134178.447843,VS0,VE79 vary: Accept-Encoding Server-Timing: "traceparent;desc="00-0000000000000000000dc6e5d033dd0f-67914cb02bbe09b3-01"";content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: *
2024-04-26 12:22:58 UTC	151	IN	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 45 54 48 4f 44 5f 4e 4f 54 5f 53 55 50 50 4f 52 54 45 44 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 54 68 65 20 73 65 72 76 65 72 20 64 6f 65 73 20 6e 6f 74 20 69 6d 70 6c 65 6d 65 6e 74 20 74 68 65 20 72 65 71 75 65 73 74 65 64 20 48 54 54 50 20 6d 65 74 68 6f 64 2e 22 2c 22 64 65 62 75 67 5f 69 64 22 3a 22 64 63 36 65 35 64 30 33 33 64 64 30 66 22 2c 22 64 65 74 61 69 6c 73 22 3a 5b 5d 2c 22 6c 69 6e 6b 73 22 3a 5b 5d 7d Data Ascii: {"name":"METHOD_NOT_SUPPORTED","message":"The server does not implement the requested HTTP method.","debug_id":"dc6e5d033dd0f","details":[],"links":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49787	35.235.122.5	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:58 UTC	659	OUT	GET /v2/counter2.cgi?p=6a95feed-b818-45c4-8cb7-6b939748957f&s=venmo_web_webmo_login HTTP/1.1 Host: lvs.stats.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://account.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:22:58 UTC	257	IN	HTTP/1.1 200 OK Connection: close Server: PayPal-B.Stats/1.0 Content-Type: image/jpeg Content-Length: 42 Set-Cookie: c=c2f89b235ed144e10102; Domain=stats.paypal.com; expires=Thu, 21 Apr 2044 12:22:58 GMT; Path=/ Date: Fri, 26 Apr 2024 12:22:58 GMT
2024-04-26 12:22:58 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 01 44 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49793	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:58 UTC	595	OUT	GET /paypal-ui/fonts/PayPalSansBig-Regular.woff2 HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://account.venmo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://account.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:22:58 UTC	1078	IN	HTTP/1.1 200 OK Connection: close Content-Length: 25368 Cache-Control: s-maxage=31536000, public,max-age=3600 Etag: "60271cda-6318" Last-Modified: Sat, 13 Feb 2021 00:27:06 GMT Paypal-Debug-Id: b0907fae14baf Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000b0907fae14baf-ec86d7bd73a81afd-01 DC: ccg11-origin-www-1.paypal.com log-timing: fetch=104258,misspass=117,do_stream=0 log-origin: ip=66.211.169.102,port=443,name=F_ccg01_phx_origin_www_1_paypal_com,status=200,reason=OK,method=GET,url="/paypal-ui/fonts/PayPalSansBig-Regular.woff2",host=www.paypalobjects.com,shield=DFW,src_ip=140.248.68.108,alternate_path=0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:22:58 GMT X-Served-By: cache-dfw-kdfw8210108-DFW, cache-pdk-kfty2130079-PDK X-Cache: HIT, HIT X-Cache-Hits: 13490, 1862 X-Timer: S1714134179.525014,VS0,VE0 X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * CONTENT-TYPE: application/font-woff2 Strict-Transport-Security: max-age=31557600
2024-04-26 12:22:58 UTC	1379	IN	Data Raw: 77 4f 46 32 4f 54 54 4f 00 00 63 18 00 0c 00 00 00 00 a3 4c 00 00 62 c8 00 01 19 99 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0d 81 bb 18 1a 52 1b df 4c 1c 88 0a 06 60 00 88 1a 01 36 02 24 03 8c 1c 04 06 05 8b 1d 07 20 1b 72 a2 07 98 9b da 60 bd bb 6d 00 f0 ea 75 50 bb 68 14 02 1b 27 02 00 ed 7f 14 41 50 ea d9 ff ff 19 c9 c9 10 25 f8 12 a2 aa 6b b7 1e ca e0 90 a2 25 d6 47 a2 43 4c 10 24 ae 56 a3 f3 29 43 d0 5a 70 d8 a7 0a b3 43 1b 86 e1 4f 8e c2 89 be 57 19 3b 3c 95 e3 7c c8 a2 df 75 d7 84 c3 ae 82 e3 30 95 68 89 4a 17 f8 5d 6d d2 ea 35 30 63 bf e8 c6 e6 52 c3 af 23 99 90 0e a6 66 6e 34 14 45 67 92 84 b3 31 31 92 3a 48 6d 4f a7 f7 37 0b 19 0c 9f 59 33 df b1 82 91 c6 0c ef bf 0b b5 cf 44 ef ef 20 2e be f1 b6 6e 88 09 22 c2 f3 67 0f 3f 24 Data Ascii: wOF2OTTOcLbRL`6$ r`muPh'AP%k%GCL$V)CZpCOW;<\|u0hJ]m50cR#fn4Eg11:HmO7Y3D .n"g?$
2024-04-26 12:22:58 UTC	1379	IN	Data Raw: 8c 0b 4b 43 b6 32 d9 99 bb 46 b0 db ba 14 58 b8 fc 03 2e cb ec 2d 4a ae 1d e6 74 43 fe ac 6c 6e 65 dc be 3d d8 6d 34 8d 6c f7 ab 35 84 82 e3 ed 39 dc 10 7d 34 84 e6 3d d7 f2 bd f0 03 ee 3f cc fb c4 0f 3c 8a 71 1e ad 20 91 96 cd 21 8f 86 49 28 72 7c 8c cd bc 4f e0 c0 11 e6 e6 7e 4e d6 24 5c 13 d3 dc de 7f eb b9 8c 0e 63 69 92 bd 70 0e a6 a3 31 ca be b7 77 5f 26 d2 98 88 6d 60 ba 0c 8d b7 ad a5 78 93 36 0c 6f 72 86 36 89 6a 9b 08 0c 5a 1b 14 68 12 af 01 4b 55 d0 86 0d 7f b0 32 af da e8 df 72 32 38 c8 64 ca 9b be b7 6d 04 06 e7 84 e1 12 67 38 7e 83 be 10 df 3a f7 d4 6c 07 41 0f 08 f2 35 43 1c b5 02 6a e6 df 08 8d 48 3d 10 63 da 16 61 ed 21 14 4b ef 19 fe 47 7b 90 ed 89 36 f3 a1 cd 56 4e ce 66 16 aa c5 a7 e7 82 7d 8b bc 92 6f 6a 0b ad d1 c6 b3 d5 82 81 2e cc Data Ascii: KC2FX.-JtClne=m4l59}4=?<q !I(r\|O~N$\cip1w_&m`x6or6jZhKU2r28dmg8~:lA5CjH=ca!KG{6VNf}oj.
2024-04-26 12:22:58 UTC	1379	IN	Data Raw: b5 56 50 c4 b2 50 bb 23 70 ee f8 ba 13 97 ed 6f fa 98 0e 12 45 91 ff 79 b0 64 fd 0c f2 45 6d 49 66 04 5f 23 aa 07 75 95 79 4a b2 be 40 51 a5 63 63 17 e1 50 34 c4 0e 4c 8a 65 be 0d a2 2d c8 a0 42 3f 49 33 5c df b3 37 35 c2 84 7d 8f a2 66 d6 47 71 33 5d ae 52 32 55 50 23 17 5a ac 4f 85 64 e1 67 0b 92 76 26 5b 04 d2 49 60 f8 a4 62 be d6 c7 75 95 ef 4f 87 ba cc 18 bf 62 d3 24 dc f4 75 69 d3 01 bd 1e a3 2e 84 39 a6 41 89 c5 12 76 66 1b 96 66 0d 39 33 8f 24 15 27 e2 91 54 80 9d c8 86 25 76 8e fd ef ec cd 46 c4 a0 c0 85 fa 4d bc 41 1f c4 0c 0e e4 9d 2c 9f c9 de 36 98 a1 0f ef 95 55 93 58 4a a2 ef ab cb ad 7d b2 8a 0a b3 61 7c d7 7d 6d 93 fa 62 20 ce e2 00 a2 0c 2a d0 52 36 94 f0 87 76 e9 8e ab 33 a3 3c 0c 9d 19 e4 d8 ea 21 f7 d0 bc 52 4f 37 59 c4 47 7a 76 2c c7 Data Ascii: VPP#poEydEmIf_#uyJ@QccP4Le-B?I3\75}fGq3]R2UP#ZOdgv&[I`buOb$ui.9Avff93$'T%vFMA,6UXJ}a\|}mb *R6v3<!RO7YGzv,
2024-04-26 12:22:58 UTC	1379	IN	Data Raw: 51 a2 a5 05 f7 3a 5c 20 a1 eb e4 93 59 03 34 36 9e f2 fe ea 83 1f bf 0f 7a 50 1c b5 2a 3f 0c 05 ea 26 09 6b 7c 1d 81 32 0d 0e 5e b7 f1 50 ee c3 25 e9 02 c9 11 f8 14 15 c0 c3 49 a6 ce f7 83 22 0b cd b1 88 61 ca 83 44 21 6a 04 5c b4 58 85 46 5a a5 e9 58 b9 6e 8a 64 b2 d1 2a 8a 11 dc a3 90 d1 a2 67 bf 36 d3 ae 47 3f 03 e6 c8 1f 45 4e 15 08 62 60 87 bc 35 ec 8a d8 0e 3b d1 2a b4 82 e8 13 10 1b b0 1b 2d 3e c8 82 72 39 64 85 fd 11 7b 46 47 d0 4a b4 06 58 2d 70 1c b2 85 99 7d 90 03 1d 85 9c b0 88 3e 30 9a 7f 21 17 da 08 b9 81 4d 90 47 de 8c 76 30 5b 20 6f 00 f3 f4 5b 87 fc 70 02 8e 86 93 70 1c ed 1c 0a 0c b3 5e b9 30 da 05 a7 e4 bd 50 24 7a df 50 14 ce c1 e9 d1 7e 47 1e 41 07 0f 8a 85 d9 1b 1d 44 87 80 f8 ee f3 d8 18 5c 10 46 a1 64 f4 08 36 0c 17 61 0a 3a 89 b5 Data Ascii: Q:\ Y46zP?&k\|2^P%I"aD!j\XFZXndg6G?ENb`5;*->r9d{FGJX-p}>0!MGv0[ o[pp^0P$zP~GAD\Fd6a:
2024-04-26 12:22:58 UTC	1379	IN	Data Raw: 29 a7 40 b9 b1 7b df e9 4b 4d 4b b1 60 7f ec c9 38 a7 52 b7 f1 15 fc e0 4f 70 1c 01 81 ba dd 58 62 1f da 52 70 9c 38 3a 99 f8 76 c0 92 23 cd 2e 71 15 37 9d cb 66 fa c5 4e d9 7a a0 bb 0b 3a 39 44 f6 65 89 04 ff 27 f7 20 2e fe 9b ce 76 a3 48 ae f5 72 eb 09 88 84 e5 64 08 e4 d4 58 da 92 f2 92 2b 9e b3 ec 65 48 b9 0f ed 6e 0e f1 09 b9 19 25 83 b4 eb 3b b2 ae 15 37 65 6d 9f 5c 65 66 51 f5 81 21 bc 87 89 37 28 b7 a6 88 75 aa 06 dc 0b df ae a9 8e ab 0e 96 71 10 17 f2 fb cc 39 91 51 a3 a7 87 69 a1 57 27 58 8d 75 f4 18 33 b9 83 53 f1 50 c1 ad 59 65 46 6c 4f cd 9e 49 e6 c8 5c c0 12 7f 5a 98 be 79 05 78 bd ea 19 27 ff f7 73 48 1a 83 e8 c9 10 a5 fc 6e 2a 6d 3d 67 f9 6e d3 a6 94 cd cd 22 69 12 69 83 56 2a 91 ae c4 fc 3e d1 b1 63 bd 73 66 7b 8b 3f ee 10 a3 8e 66 f5 cc Data Ascii: )@{KMK`8ROpXbRp8:v#.q7fNz:9De' .vHrdX+eHn%;7em\efQ!7(uq9QiW'Xu3SPYeFlOI\Zyx'sHnm=gn"iiV>csf{?f
2024-04-26 12:22:58 UTC	1379	IN	Data Raw: 28 86 a8 9c 49 3b 32 2d a2 6e 4a fe fb 33 f4 7f d5 6c 4d 6b 8b a8 fc 9a 0e 67 8a 53 4b 7c 26 00 64 40 75 f4 7b 05 b4 0c 72 df d1 6b 0e 78 a8 83 8d 07 be c0 6e e3 45 a5 71 0e 2b 0d b7 35 79 20 95 5c 90 18 db 87 34 9b f8 c5 58 e2 b2 ff 7d 6b 1d 3f 0a a7 48 d8 27 1d fb 81 f6 04 f6 38 5f 0e f9 23 d8 7e 94 8e 26 e0 8a 0f 44 66 6b 9a 11 a8 43 11 ef 8a 56 de 42 2b 2b 3f f9 40 b9 a7 15 1d d8 b5 1a 1a e7 76 01 49 c9 c4 6e ff 10 5d 0d af dc a8 7c 3e 14 38 da ae f3 7b 88 fb 98 99 c9 5b 28 af 7b 40 72 d9 c4 30 ce 5a 47 de cd 1b 05 a5 18 7d 73 78 8e 76 bb d1 65 b4 5d c6 0b cd 26 7e fd 1b a9 53 c9 49 68 d8 52 a4 b3 d3 ab 2d c4 c2 22 26 53 e4 97 59 8c 53 5b 56 ae de ac e5 da 1c b4 fd c8 d5 13 19 ee fb da 83 9b 67 5e b0 96 5b 2b da bb 67 c5 aa dd ce 89 93 17 c4 8c 5a 0e Data Ascii: (I;2-nJ3lMkgSK\|&d@u{rkxnEq+5y \4X}k?H'8_#~&DfkCVB++?@vIn]\|>8{[({@r0ZG}sxve]&~SIhR-"&SYS[Vg^[+gZ
2024-04-26 12:22:58 UTC	1379	IN	Data Raw: 62 e9 53 38 67 78 b7 25 16 5a f9 ea 2a 2c 38 0b 45 37 68 27 b7 7f 1d 5a 38 5f 88 db 13 27 f4 cb 53 0e bf c3 2a ce 73 b2 3f 3e 19 74 df d0 d1 be a7 31 30 c4 c3 28 0b f6 b4 c4 76 e0 c4 4c e0 75 a0 df 2a d6 87 49 7e f4 df 48 26 ef 0a 84 0f 7d 1d 41 a2 76 cd b6 23 c5 35 e3 3b df 60 0d a5 d5 2c 4b c0 fc d7 21 c9 f4 be 00 bf cd 5b 1b 4f e2 6d 31 09 bf b1 8e 2b cb ac 21 69 35 cb 79 7d f9 6b 61 a0 d0 36 e2 1f 02 51 8e 9e 10 6f 15 5c 0d ca 91 35 29 6b 63 5f 8b 7f 4c 3c 57 fa 2f 50 fc db e4 22 d2 78 24 84 fe 63 52 9b 35 ba aa 49 a6 58 f3 6c cc dd d7 41 28 1c 00 f4 b5 79 75 46 df 0a c2 be 60 cf 54 66 17 c6 23 b3 6d f6 f1 d4 49 b2 57 3a 44 e6 63 da 76 e4 dc d1 5b a5 97 b5 9e e8 4e 9b b7 2c 5f b1 d9 19 13 f3 63 cc 98 95 99 d4 f0 32 8a ef 74 f6 a6 ac be bc c9 9f f8 e7 Data Ascii: bS8gx%Z,8E7h'Z8_'Ss?>t10(vLu*I~H&}Av#5;`,K![Om1+!i5y}ka6Qo\5)kc_L<W/P"x$cR5IXlA(yuF`Tf#mIW:Dcv[N,_c2t
2024-04-26 12:22:58 UTC	1379	IN	Data Raw: a4 ee 37 27 d7 75 bd 5b 79 17 a5 b2 27 71 b9 fa c6 63 86 e4 9f 5f f1 bf 4f cc b5 0d 60 ad 1c 08 82 4a c9 b1 e0 1e 68 bf ec f7 38 a4 aa e1 59 c7 e0 46 61 aa 1f ad f1 17 d7 ed 3c a3 f5 25 05 06 7e 55 ac 16 b8 48 6f 77 6d 42 41 a2 73 56 07 7d 43 8c 7d 8b db 8d 21 50 39 6f 26 83 d6 e8 86 c0 83 5f 11 15 c9 6e c7 3b 9d 8f cc 40 47 0f 1c 80 4b a1 17 ad 3f 82 66 91 03 7f 3a be 84 48 b8 8b 8d c0 d1 99 90 da 63 b7 95 1e 4f 20 1a 0e b4 c1 22 c2 eb bf cd 3f 46 90 38 b1 06 76 a6 22 d5 78 4b 03 71 8c 9d d8 1a 54 5e 11 e9 09 58 da 20 1a 18 ea cb 84 6a 16 06 fa c5 43 bc 71 34 59 44 f5 10 2c 43 c3 a3 ba 65 82 62 84 d9 a7 d1 23 5b bc 45 ff b7 f7 f3 fc 11 10 be 3d 80 8d fe 17 71 e3 6d 3a 0e b5 cf e7 26 e7 72 e6 da b8 1a de be 8d c4 2b 89 6f 4b 5d 68 41 65 f0 3a e4 9c 7c 4e Data Ascii: 7'u[y'qc_O`Jh8YFa<%~UHowmBAsV}C}!P9o&_n;@GK?f:HcO "?F8v"xKqT^X jCq4YD,Ceb#[E=qm:&r+oK]hAe:\|N
2024-04-26 12:22:58 UTC	1379	IN	Data Raw: 8d 5b 3c fb b4 b4 fd 89 50 f7 73 a6 43 93 51 43 72 77 f7 1b bb 28 38 0d 79 be 68 e4 b2 67 ae 99 f0 9d c8 29 b5 31 8f 73 be cc be 63 bf 63 1d 13 ff dd 82 57 ee c9 09 87 4e ae 21 24 96 ae 43 b5 0e 10 ea 85 a9 a8 99 c2 b4 ae d3 02 f9 83 a6 e7 34 c1 e2 75 d3 b5 ec ca aa e4 a0 ae 16 95 c4 0d 9f 32 20 1b 98 5c 43 83 23 cd 4e 68 e3 49 0b 0b d1 ea 2b 51 07 27 7e 24 5b 21 3f 60 e0 c6 8e e6 7e 66 22 30 e8 93 6c c2 8c 08 fa b2 13 27 5c e1 a2 8a f8 d8 be a3 0b b0 7a d8 f6 5e aa 6a 0d d1 2d e8 1f ff 80 f8 d2 99 a8 91 07 11 c8 92 72 42 f0 2d c3 03 ee 80 7a 8e 84 40 34 b9 5b db 88 ed 08 3b 11 24 58 4b 9e 7d d5 b1 56 9e 12 89 ac c9 24 e0 61 ad 2a e5 76 a2 a3 12 43 31 48 6b 05 91 e6 da fa 79 21 78 6a ec 55 06 8f 0e 04 3d 53 d4 a1 df 57 cb a3 0d 06 49 06 ce 28 c9 52 a1 11 Data Ascii: [<PsCQCrw(8yhg)1sccWN!$C4u2 \C#NhI+Q'~$[!?`~f"0l'\z^j-rB-z@4[;$XK}V$a*vC1Hky!xjU=SWI(R
2024-04-26 12:22:58 UTC	1379	IN	Data Raw: 11 ed 14 6b 9d 99 08 1b a7 3b 7c 3a 6c 67 62 f1 f5 45 0d 59 a5 30 e2 ad 27 ba 05 a1 2b 95 ea 43 1b cc 6f 8d 0b 66 32 55 c3 c8 f7 b3 61 a1 15 42 d0 65 60 41 44 03 ab ed e7 a2 87 7b 9a 0d 66 87 2a 00 bb bf e6 85 bf cc 38 60 c4 e2 5d c6 26 b3 22 bb a2 67 47 fd 93 7b 4f 66 a1 ef c3 45 d7 4d 1e 2d c8 c1 7b 92 62 e4 48 e9 ce f8 d0 3f 2a 0d f0 2a 35 62 58 16 69 a7 37 3e ba bf 63 da 27 1b c0 f1 6b 83 c5 cf 56 d9 6c e6 9c 42 31 ca 0d 9f 55 fc 24 61 7a 27 ac 1e 2c 72 bf 6e fb a7 36 70 0a 5e c2 a3 90 d3 d3 17 7e 56 54 52 4b f4 e9 6b 0e 45 83 c2 25 e6 4a 4f 0d 06 7c 77 76 e1 6e 25 ea e5 4a e6 bb fb d4 57 ca 6d bf 25 fc 54 a0 fb 49 65 c5 d0 68 e6 38 b9 db 17 47 2c ce 12 38 98 f3 34 7b 1a 38 2e c6 51 70 b2 88 34 9c eb 7c cf 13 38 22 32 67 05 13 e1 9f ec 55 6a b9 78 92 Data Ascii: k;\|:lgbEY0'+Cof2UaBe`AD{f8`]&"gG{OfEM-{bH?*5bXi7>c'kVlB1U$az',rn6p^~VTRKkE%JO\|wvn%JWm%TIeh8G,84{8.Qp4\|8"2gUjx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49801	151.101.65.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:58 UTC	718	OUT	GET /v1/r/d/b/p2 HTTP/1.1 Host: c.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; x-pp-s=eyJ0IjoiMTcxNDEzNDE3NzM1OSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742177%26vteXpYrS%3D1714135977%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; l7_az=dcg16.slc
2024-04-26 12:22:58 UTC	715	IN	HTTP/1.1 405 Method Not Allowed Connection: close Content-Length: 151 CORRELATION-ID: 331e5ba5887a1 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: application/json Paypal-Debug-Id: 331e5ba5887a1 Traceparent: 00-0000000000000000000331e5ba5887a1-7ab5ad10b0880d18-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Fri, 26 Apr 2024 12:22:58 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-iad-kiad7000140-IAD, cache-gnv1820020-GNV X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1714134179.735380,VS0,VE94 vary: Accept-Encoding Server-Timing: content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: *
2024-04-26 12:22:58 UTC	151	IN	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 45 54 48 4f 44 5f 4e 4f 54 5f 53 55 50 50 4f 52 54 45 44 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 54 68 65 20 73 65 72 76 65 72 20 64 6f 65 73 20 6e 6f 74 20 69 6d 70 6c 65 6d 65 6e 74 20 74 68 65 20 72 65 71 75 65 73 74 65 64 20 48 54 54 50 20 6d 65 74 68 6f 64 2e 22 2c 22 64 65 62 75 67 5f 69 64 22 3a 22 33 33 31 65 35 62 61 35 38 38 37 61 31 22 2c 22 64 65 74 61 69 6c 73 22 3a 5b 5d 2c 22 6c 69 6e 6b 73 22 3a 5b 5d 7d Data Ascii: {"name":"METHOD_NOT_SUPPORTED","message":"The server does not implement the requested HTTP method.","debug_id":"331e5ba5887a1","details":[],"links":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49802	52.84.150.50	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:58 UTC	549	OUT	GET /account/sign-in?next=%2F HTTP/1.1 Host: account.venmo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; _csrf=DDftkNPgEA155iagiWokS3RO; cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial
2024-04-26 12:22:59 UTC	1053	IN	HTTP/1.1 307 Temporary Redirect Transfer-Encoding: chunked Connection: close Date: Fri, 26 Apr 2024 12:22:59 GMT Server: nginx x-powered-by: Express Set-Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; Max-Age=157680000; Domain=venmo.com; Path=/; Expires=Wed, 25 Apr 2029 12:22:58 GMT; HttpOnly; Secure Set-Cookie: s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; Max-Age=1800; Domain=venmo.com; Path=/; Expires=Fri, 26 Apr 2024 12:52:58 GMT; HttpOnly; Secure Cache-Control: no-store, no-cache, private, max-age=0 x-frame-options: deny Location: https://id.venmo.com/signin?country.x=US&locale.x=en&ctxId=AAEyUY5fMgDhlsJRKlXdAzm7lRcXJsP_ni9kVophbJKfoQNlSSc-Jb6KzozS7wgjV1oU7YYu_pb7yiBuGuCdm3A= x-envoy-upstream-service-time: 277 strict-transport-security: max-age=31536000 Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 d884448b57edd26b9e1728c6eef625b0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C4 X-Amz-Cf-Id: 3HuNCqxoiz_lP09E3MrcKnhuyxYR-wRHVCKy6W1DbNk9IzGFODZPxg==
2024-04-26 12:22:59 UTC	153	IN	Data Raw: 39 33 0d 0a 68 74 74 70 73 3a 2f 2f 69 64 2e 76 65 6e 6d 6f 2e 63 6f 6d 2f 73 69 67 6e 69 6e 3f 63 6f 75 6e 74 72 79 2e 78 3d 55 53 26 6c 6f 63 61 6c 65 2e 78 3d 65 6e 26 63 74 78 49 64 3d 41 41 45 79 55 59 35 66 4d 67 44 68 6c 73 4a 52 4b 6c 58 64 41 7a 6d 37 6c 52 63 58 4a 73 50 5f 6e 69 39 6b 56 6f 70 68 62 4a 4b 66 6f 51 4e 6c 53 53 63 2d 4a 62 36 4b 7a 6f 7a 53 37 77 67 6a 56 31 6f 55 37 59 59 75 5f 70 62 37 79 69 42 75 47 75 43 64 6d 33 41 3d 0d 0a Data Ascii: 93https://id.venmo.com/signin?country.x=US&locale.x=en&ctxId=AAEyUY5fMgDhlsJRKlXdAzm7lRcXJsP_ni9kVophbJKfoQNlSSc-Jb6KzozS7wgjV1oU7YYu_pb7yiBuGuCdm3A=
2024-04-26 12:22:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49803	151.101.129.35	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:22:58 UTC	1143	OUT	GET /ts?v=1.8.16&t=1714134176931&g=-120&page=main%3Aprivacy%3Apolicy%3Accpa&pgrp=main%3Aprivacy%3Apolicy&displaypage=Venmo%20%7C%20Sign%20up&ppage=privacy_banner&bannertype=cookiebanner&ccpg=US&flag=ccpa&bannerversion=v4&bannersource=ConsentNodeServ&xe=108814&xt=142081&eligibility_reason=true&cookie_disabled=false&tenant_code=venmo&event_name=venmo_cookie_banner_shown&e=ac&tenant_name=venmo&3p_vid=5c54414429c8af7c&3p_fpti=686430877c1fef0 HTTP/1.1 Host: t.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; x-pp-s=eyJ0IjoiMTcxNDEzNDE3NzM1OSIsImwiOiIwIiwibSI6IjAifQ; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; l7_az=dcg16.slc; ts=vreXpYrS%3D1808742178%26vteXpYrS%3D1714135978%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew
2024-04-26 12:22:59 UTC	1232	IN	HTTP/1.1 200 OK Connection: close CORRELATION-ID: d44367b60af8f Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Fri, 26 Apr 2024 12:22:58 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: d44367b60af8f Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1808742178%26vteXpYrS%3D1714135978%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew;Expires=Mon, 26 Apr 2027 12:22:58 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088;Expires=Mon, 26 Apr 2027 12:22:58 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-0000000000000000000d44367b60af8f-6393b8d9b8d7385f-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Fri, 26 Apr 2024 12:22:58 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-iad-kiad7000095-IAD, cache-gnv1820034-GNV X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1714134179.891037,VS0,VE79 vary: Accept-Encoding Server-Timing: content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-04-26 12:22:59 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-04-26 12:22:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-04-26 12:22:59 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49808	35.235.122.5	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:00 UTC	793	OUT	GET /v2/counter2.cgi?p=6a95feed-b818-45c4-8cb7-6b939748957f&s=venmo_web_webmo_login HTTP/1.1 Host: lvs.stats.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; l7_az=dcg16.slc; ts=vreXpYrS%3D1808742178%26vteXpYrS%3D1714135978%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew; x-pp-s=eyJ0IjoiMTcxNDEzNDE3ODM3OSIsImwiOiIwIiwibSI6IjAifQ
2024-04-26 12:23:00 UTC	257	IN	HTTP/1.1 200 OK Connection: close Server: PayPal-B.Stats/1.0 Content-Type: image/jpeg Content-Length: 42 Set-Cookie: c=6d11aae559a8b2ddaee6; Domain=stats.paypal.com; expires=Thu, 21 Apr 2044 12:23:00 GMT; Path=/ Date: Fri, 26 Apr 2024 12:23:00 GMT
2024-04-26 12:23:00 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 01 44 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49810	151.101.194.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:01 UTC	681	OUT	POST /v3/JS/40433222e815b743853a4bb6b7a86058/events HTTP/1.1 Host: jssdks.mparticle.com Connection: keep-alive Content-Length: 1291 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: text/plain;charset=UTF-8 Content-Type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://account.venmo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://account.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:01 UTC	1291	OUT	Data Raw: 7b 22 73 6f 75 72 63 65 5f 72 65 71 75 65 73 74 5f 69 64 22 3a 22 30 31 33 33 62 39 62 39 2d 35 63 61 36 2d 34 35 34 63 2d 34 61 37 62 2d 34 65 36 61 63 31 63 63 39 61 65 39 22 2c 22 6d 70 69 64 22 3a 22 34 32 30 32 31 32 33 32 39 31 36 35 36 34 31 39 36 37 22 2c 22 74 69 6d 65 73 74 61 6d 70 5f 75 6e 69 78 74 69 6d 65 5f 6d 73 22 3a 31 37 31 34 31 33 34 31 37 39 39 30 34 2c 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 22 70 72 6f 64 75 63 74 69 6f 6e 22 2c 22 65 76 65 6e 74 73 22 3a 5b 7b 22 65 76 65 6e 74 5f 74 79 70 65 22 3a 22 73 65 73 73 69 6f 6e 5f 73 74 61 72 74 22 2c 22 64 61 74 61 22 3a 7b 22 74 69 6d 65 73 74 61 6d 70 5f 75 6e 69 78 74 69 6d 65 5f 6d 73 22 3a 31 37 31 34 31 33 34 31 36 38 33 30 30 2c 22 73 65 73 73 69 6f 6e 5f 75 75 69 64 22 3a 22 Data Ascii: {"source_request_id":"0133b9b9-5ca6-454c-4a7b-4e6ac1cc9ae9","mpid":"420212329165641967","timestamp_unixtime_ms":1714134179904,"environment":"production","events":[{"event_type":"session_start","data":{"timestamp_unixtime_ms":1714134168300,"session_uuid":"
2024-04-26 12:23:01 UTC	393	IN	HTTP/1.1 202 Accepted Connection: close Content-Type: application/json Server: Kestrel Access-Control-Allow-Origin: * X-Origin-Name: 7arPuRjnqGEhiMyprEtnLk--F_us1_origin Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:01 GMT Via: 1.1 varnish X-Served-By: cache-pdk-kfty2130078-PDK X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1714134181.348264,VS0,VE15 transfer-encoding: chunked
2024-04-26 12:23:01 UTC	4	IN	Data Raw: 32 38 0d 0a Data Ascii: 28
2024-04-26 12:23:01 UTC	40	IN	Data Raw: 7b 22 6d 70 69 64 22 3a 22 34 32 30 32 31 32 33 32 39 31 36 35 36 34 31 39 36 37 22 2c 22 53 74 6f 72 65 22 3a 7b 7d 7d Data Ascii: {"mpid":"420212329165641967","Store":{}}
2024-04-26 12:23:01 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-26 12:23:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49812	52.84.150.50	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:01 UTC	788	OUT	GET /static/images/favicon.svg HTTP/1.1 Host: account.venmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://account.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; _csrf=DDftkNPgEA155iagiWokS3RO; cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial
2024-04-26 12:23:01 UTC	679	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 458 Connection: close Date: Fri, 26 Apr 2024 12:23:01 GMT Server: nginx x-powered-by: Express Cache-Control: no-store, no-cache, private, max-age=0 x-frame-options: deny Accept-Ranges: bytes Last-Modified: Wed, 17 Apr 2024 16:17:41 GMT ETag: W/"1ca-18eecd98088" x-envoy-upstream-service-time: 5 strict-transport-security: max-age=31536000 Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 dc9f3acec7f164067c8f9a466973f368.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C4 X-Amz-Cf-Id: dBlJp36OljcGcDdQaVRKQXMlClSC-RONlEkpRpp9Df56HuZmxhlN5A==
2024-04-26 12:23:01 UTC	458	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 72 78 3d 22 38 22 20 66 69 6c 6c 3d 22 23 30 30 38 43 46 46 22 2f 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 33 34 2e 36 35 20 31 32 43 33 35 2e 35 38 30 32 20 31 33 2e 34 34 31 20 33 36 20 31 34 2e 39 32 34 37 20 33 36 20 31 36 2e 37 39 39 38 43 33 36 20 32 32 2e 37 37 38 37 Data Ascii: <svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg"><rect width="48" height="48" rx="8" fill="#008CFF"/><path fill-rule="evenodd" clip-rule="evenodd" d="M34.65 12C35.5802 13.441 36 14.9247 36 16.7998C36 22.7787

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49819	151.101.193.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:01 UTC	614	OUT	GET /signin?country.x=US&locale.x=en&ctxId=AAEyUY5fMgDhlsJRKlXdAzm7lRcXJsP_ni9kVophbJKfoQNlSSc-Jb6KzozS7wgjV1oU7YYu_pb7yiBuGuCdm3A= HTTP/1.1 Host: id.venmo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial
2024-04-26 12:23:02 UTC	1374	IN	HTTP/1.1 200 OK Connection: close Content-Length: 10465 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; script-src 'nonce-hKVV4u0f3K8AFH3bWuMeG15Janqo7WxObjh4oWCBG3LsDc0h' 'self' 'unsafe-inline' https://.paypal.com https://.paypalobjects.com https://fpnpmcdn.net; img-src 'self' * data: https://c.paypal.com; object-src 'none'; font-src 'self' https://.paypalobjects.com https://.paypal.com data:; frame-src 'self' https://.paypalobjects.com https://.paypal.com; connect-src 'self' 'unsafe-inline' https://.paypal.com https://.paypalobjects.com https://.fptls.com https://.fptls2.com https://.fptls3.com https://api.fpjs.io https://.api.fpjs.io; base-uri 'self' https://.paypal.com; form-action 'self' https://.paypal.com https://ih-prd.fisglobal.com/sso/SSOServlet; frame-ancestors 'self' https://.paypal.com https://.izettle.com https://paypal.com/axo; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp Content-Type: text/html; charset=utf-8 Etag: W/"2809-5okE+WdDfLjiJuIjcvP3ECSKnQs" Paypal-Debug-Id: f987295e78d7d
2024-04-26 12:23:02 UTC	1340	IN	Data Raw: 50 65 72 6d 69 73 73 69 6f 6e 73 2d 50 6f 6c 69 63 79 3a 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 61 72 63 68 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 77 6f 77 36 34 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 6d 6f 64 65 6c 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 Data Ascii: Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-ve
2024-04-26 12:23:02 UTC	1037	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 74 73 3d 76 72 65 58 70 59 72 53 25 33 44 31 38 30 38 37 34 32 31 38 31 25 32 36 76 74 65 58 70 59 72 53 25 33 44 31 37 31 34 31 33 35 39 38 31 25 32 36 76 72 25 33 44 31 61 35 62 65 38 33 35 31 38 66 30 61 61 33 30 32 30 39 30 62 63 39 32 66 63 62 36 39 39 65 34 25 32 36 76 74 25 33 44 31 61 35 62 65 38 33 35 31 38 66 30 61 61 33 30 32 30 39 30 62 63 39 32 66 63 62 36 39 39 65 33 25 32 36 76 74 79 70 25 33 44 6e 65 77 3b 20 44 6f 6d 61 69 6e 3d 76 65 6e 6d 6f 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 4d 6f 6e 2c 20 32 36 20 41 70 72 20 32 30 32 37 20 31 32 3a 32 33 3a 30 31 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 Data Ascii: Set-Cookie: ts=vreXpYrS%3D1808742181%26vteXpYrS%3D1714135981%26vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3%26vtyp%3Dnew; Domain=venmo.com; Expires=Mon, 26 Apr 2027 12:23:01 GMT; HttpOnly; Secure; SameSite=NoneSet-Cookie
2024-04-26 12:23:02 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 77 65 62 63 61 70 74 63 68 61 2f 6e 67 72 6c 43 61 70 74 63 68 61 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 Data Ascii: <!DOCTYPE html><html lang="en"><head><script async src="https://www.paypalobjects.com/webcaptcha/ngrlCaptcha.min.js"></script> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <meta http-equiv="X-U
2024-04-26 12:23:02 UTC	1378	IN	Data Raw: 67 6c 6f 62 61 6c 20 76 61 72 20 6f 72 20 69 6e 73 74 65 61 64 20 77 65 20 63 61 6e 20 75 73 65 20 74 68 69 73 20 64 61 74 61 20 69 66 20 70 61 73 73 65 64 20 61 6c 6f 6e 67 20 77 69 74 68 20 69 6e 69 74 69 61 6c 20 73 74 61 74 65 20 73 69 6e 63 65 20 61 6e 79 77 61 79 20 65 61 63 68 20 46 65 61 74 75 72 65 20 77 6f 75 6c 64 20 6e 65 65 64 20 74 6f 20 75 70 64 61 74 65 20 74 68 65 20 73 6f 75 72 63 65 49 44 20 61 74 6c 65 61 73 74 20 6f 6e 20 72 65 6e 64 65 72 69 6e 67 20 2d 2d 3e 0a 09 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 68 4b 56 56 34 75 30 66 33 4b 38 41 46 48 33 62 57 75 4d 65 47 31 35 4a 61 6e 71 6f 37 57 78 4f 62 6a 68 34 6f 57 43 42 47 33 4c 73 44 63 30 68 22 3e 0a 09 09 76 61 72 20 50 41 59 50 41 4c 20 3d 20 50 41 59 50 41 4c 20 7c 7c 20 Data Ascii: global var or instead we can use this data if passed along with initial state since anyway each Feature would need to update the sourceID atleast on rendering --><script nonce="hKVV4u0f3K8AFH3bWuMeG15Janqo7WxObjh4oWCBG3LsDc0h">var PAYPAL = PAYPAL \|\|
2024-04-26 12:23:02 UTC	1378	IN	Data Raw: 22 68 74 74 70 73 3a 5c 75 30 30 32 46 5c 75 30 30 32 46 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 5c 75 30 30 32 46 69 63 65 5c 75 30 30 32 46 63 6f 6e 74 65 6e 74 5c 75 30 30 32 46 63 32 30 32 34 30 33 32 32 31 30 33 35 34 32 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 63 74 78 49 64 22 3a 22 41 41 45 79 55 59 35 66 4d 67 44 68 6c 73 4a 52 4b 6c 58 64 41 7a 6d 37 6c 52 63 58 4a 73 50 5f 6e 69 39 6b 56 6f 70 68 62 4a 4b 66 6f 51 4e 6c 53 53 63 2d 4a 62 36 4b 7a 6f 7a 53 37 77 67 6a 56 31 6f 55 37 59 59 75 5f 70 62 37 79 69 42 75 47 75 43 64 6d 33 41 3d 22 2c 22 69 63 65 4d 61 6e 69 66 65 73 74 49 44 22 3a 22 61 70 70 2e 35 38 61 37 31 34 31 66 37 30 30 34 65 37 36 33 33 61 66 38 2e 6a 73 22 2c 22 69 6e 69 74 69 61 6c 44 61 Data Ascii: "https:\u002F\u002Fwww.paypalobjects.com\u002Fice\u002Fcontent\u002Fc20240322103542","country":"US","ctxId":"AAEyUY5fMgDhlsJRKlXdAzm7lRcXJsP_ni9kVophbJKfoQNlSSc-Jb6KzozS7wgjV1oU7YYu_pb7yiBuGuCdm3A=","iceManifestID":"app.58a7141f7004e7633af8.js","initialDa
2024-04-26 12:23:02 UTC	1378	IN	Data Raw: 3d 55 53 26 6c 6f 63 61 6c 65 2e 78 3d 66 72 5f 58 43 26 63 74 78 49 64 3d 41 41 45 79 55 59 35 66 4d 67 44 68 6c 73 4a 52 4b 6c 58 64 41 7a 6d 37 6c 52 63 58 4a 73 50 5f 6e 69 39 6b 56 6f 70 68 62 4a 4b 66 6f 51 4e 6c 53 53 63 2d 4a 62 36 4b 7a 6f 7a 53 37 77 67 6a 56 31 6f 55 37 59 59 75 5f 70 62 37 79 69 42 75 47 75 43 64 6d 33 41 25 33 44 26 6c 61 6e 67 54 67 6c 3d 66 72 22 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 4c 6f 63 61 6c 65 53 65 6c 65 63 74 6f 72 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 6c 6f 63 61 6c 65 43 6f 64 65 22 3a 22 65 73 5f 58 43 22 2c 22 6c 61 6e 67 75 61 67 65 43 6f 64 65 22 3a 22 65 73 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 6c 6f 63 61 6c 65 4c 61 62 65 6c 22 3a 22 45 73 70 Data Ascii: =US&locale.x=fr_XC&ctxId=AAEyUY5fMgDhlsJRKlXdAzm7lRcXJsP_ni9kVophbJKfoQNlSSc-Jb6KzozS7wgjV1oU7YYu_pb7yiBuGuCdm3A%3D&langTgl=fr","__typename":"LocaleSelector"},{"countryCode":"US","localeCode":"es_XC","languageCode":"es","selected":false,"localeLabel":"Esp
2024-04-26 12:23:02 UTC	1378	IN	Data Raw: 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 69 63 65 2f 76 65 6e 64 6f 72 30 2e 32 36 37 63 37 38 62 34 30 32 61 32 64 33 35 35 66 32 39 33 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 68 4b 56 56 34 75 30 66 33 4b 38 41 46 48 33 62 57 75 4d 65 47 31 35 4a 61 6e 71 6f 37 57 78 4f 62 6a 68 34 6f 57 43 42 47 33 4c 73 44 63 30 68 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 69 63 65 2f 76 65 6e 64 6f 72 31 2e 32 35 35 38 30 32 34 61 63 61 31 65 37 31 37 62 35 38 37 35 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 68 4b 56 56 34 75 30 66 33 4b 38 41 46 48 33 62 57 75 4d 65 47 31 35 4a 61 6e 71 6f 37 57 78 4f Data Ascii: ypalobjects.com/ice/vendor0.267c78b402a2d355f293.js"></script><script nonce="hKVV4u0f3K8AFH3bWuMeG15Janqo7WxObjh4oWCBG3LsDc0h" src="https://www.paypalobjects.com/ice/vendor1.2558024aca1e717b5875.js"></script><script nonce="hKVV4u0f3K8AFH3bWuMeG15Janqo7WxO
2024-04-26 12:23:02 UTC	1378	IN	Data Raw: 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 68 4b 56 56 34 75 30 66 33 4b 38 41 46 48 33 62 57 75 4d 65 47 31 35 4a 61 6e 71 6f 37 57 78 4f 62 6a 68 34 6f 57 43 42 47 33 4c 73 44 63 30 68 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 69 63 65 2f 76 65 6e 64 6f 72 56 65 6e 6d 6f 33 30 2e 38 61 66 64 35 65 62 35 62 66 30 35 37 61 36 36 33 32 36 32 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 68 4b 56 56 34 75 30 66 33 4b 38 41 46 48 33 62 57 75 4d 65 47 31 35 4a 61 6e 71 6f 37 57 78 4f 62 6a 68 34 6f 57 43 42 47 33 4c 73 44 63 30 68 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 69 63 65 2f 76 Data Ascii: cript nonce="hKVV4u0f3K8AFH3bWuMeG15Janqo7WxObjh4oWCBG3LsDc0h" src="https://www.paypalobjects.com/ice/vendorVenmo30.8afd5eb5bf057a663262.js"></script><script nonce="hKVV4u0f3K8AFH3bWuMeG15Janqo7WxObjh4oWCBG3LsDc0h" src="https://www.paypalobjects.com/ice/v
2024-04-26 12:23:02 UTC	1378	IN	Data Raw: 65 3d 22 68 4b 56 56 34 75 30 66 33 4b 38 41 46 48 33 62 57 75 4d 65 47 31 35 4a 61 6e 71 6f 37 57 78 4f 62 6a 68 34 6f 57 43 42 47 33 4c 73 44 63 30 68 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 69 63 65 2f 76 65 6e 64 6f 72 56 65 6e 6d 6f 33 39 2e 62 34 66 36 33 61 33 61 66 36 38 62 62 30 63 36 30 63 63 62 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 68 4b 56 56 34 75 30 66 33 4b 38 41 46 48 33 62 57 75 4d 65 47 31 35 4a 61 6e 71 6f 37 57 78 4f 62 6a 68 34 6f 57 43 42 47 33 4c 73 44 63 30 68 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 69 63 65 2f 76 65 6e 64 6f 72 56 65 6e 6d 6f Data Ascii: e="hKVV4u0f3K8AFH3bWuMeG15Janqo7WxObjh4oWCBG3LsDc0h" src="https://www.paypalobjects.com/ice/vendorVenmo39.b4f63a3af68bb0c60ccb.js"></script><script nonce="hKVV4u0f3K8AFH3bWuMeG15Janqo7WxObjh4oWCBG3LsDc0h" src="https://www.paypalobjects.com/ice/vendorVenmo
2024-04-26 12:23:02 UTC	819	IN	Data Raw: 6f 6e 73 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 64 61 74 61 3a 20 27 70 67 72 70 3d 69 63 65 25 33 41 76 65 6e 6d 6f 25 33 41 73 69 67 6e 69 6e 26 70 61 67 65 3d 69 63 65 25 33 41 76 65 6e 6d 6f 25 33 41 73 69 67 6e 69 6e 26 70 67 73 74 3d 31 37 31 34 31 33 34 31 38 31 39 35 39 26 63 61 6c 63 3d 66 39 38 37 32 39 35 65 37 38 64 37 64 26 6e 73 69 64 3d 72 31 49 56 67 64 71 4c 2d 79 50 77 44 4c 37 51 77 4f 7a 62 65 31 54 51 4d 79 4c 47 59 55 53 76 26 72 73 74 61 3d 65 6e 5f 55 53 26 70 67 74 66 3d 4e 6f 64 65 6a 73 26 65 6e 76 3d 6c 69 76 65 26 73 3d 63 69 26 63 63 70 67 3d 55 53 26 63 73 63 69 3d 66 39 64 38 61 30 32 64 64 61 31 65 34 39 39 64 61 39 66 64 63 63 61 62 30 64 33 31 63 61 31 31 26 63 6f 6d 70 3d 69 64 65 6e 74 69 74 79 61 70 70 73 6e 6f 64 65 Data Ascii: ons = { data: 'pgrp=ice%3Avenmo%3Asignin&page=ice%3Avenmo%3Asignin&pgst=1714134181959&calc=f987295e78d7d&nsid=r1IVgdqL-yPwDL7QwOzbe1TQMyLGYUSv&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=f9d8a02dda1e499da9fdccab0d31ca11&comp=identityappsnode

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49820	52.84.150.50	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:02 UTC	550	OUT	GET /static/images/favicon.svg HTTP/1.1 Host: account.venmo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; _csrf=DDftkNPgEA155iagiWokS3RO; cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial
2024-04-26 12:23:02 UTC	679	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 458 Connection: close Date: Fri, 26 Apr 2024 12:23:02 GMT Server: nginx x-powered-by: Express Cache-Control: no-store, no-cache, private, max-age=0 x-frame-options: deny Accept-Ranges: bytes Last-Modified: Wed, 17 Apr 2024 16:17:41 GMT ETag: W/"1ca-18eecd98088" x-envoy-upstream-service-time: 5 strict-transport-security: max-age=31536000 Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 b6efbf009f233af7a7aa7da68e6e2848.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: 1OcZrMZpeIL6b1AUNLw-PcyDjkgOskKd2kEyz3gVfdv4JgS7fdgJIA==
2024-04-26 12:23:02 UTC	458	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 72 78 3d 22 38 22 20 66 69 6c 6c 3d 22 23 30 30 38 43 46 46 22 2f 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 33 34 2e 36 35 20 31 32 43 33 35 2e 35 38 30 32 20 31 33 2e 34 34 31 20 33 36 20 31 34 2e 39 32 34 37 20 33 36 20 31 36 2e 37 39 39 38 43 33 36 20 32 32 2e 37 37 38 37 Data Ascii: <svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg"><rect width="48" height="48" rx="8" fill="#008CFF"/><path fill-rule="evenodd" clip-rule="evenodd" d="M34.65 12C35.5802 13.441 36 14.9247 36 16.7998C36 22.7787

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49822	52.84.150.50	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:06 UTC	1227	OUT	GET / HTTP/1.1 Host: account.venmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; _csrf=DDftkNPgEA155iagiWokS3RO; cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial; d_id=f9d8a02dda1e499da9fdccab0d31ca111714134181973; enforce_policy=ccpa; tsrce=identityappsnodeweb; x-pp-s=eyJ0IjoiMTcxNDEzNDE4MTk4MCIsImwiOiIwIiwibSI6IjAifQ; l7_az=dcg15.slc; ts=vreXpYrS%3D1808742181%26vteXpYrS%3D1714135981%26vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3%26vtyp%3Dnew; ts_c=vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3
2024-04-26 12:23:06 UTC	1253	IN	HTTP/1.1 307 Temporary Redirect Transfer-Encoding: chunked Connection: close Date: Fri, 26 Apr 2024 12:23:06 GMT Server: nginx x-powered-by: Express Set-Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; Max-Age=157680000; Domain=venmo.com; Path=/; Expires=Wed, 25 Apr 2029 12:23:06 GMT; HttpOnly; Secure Set-Cookie: s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; Max-Age=1800; Domain=venmo.com; Path=/; Expires=Fri, 26 Apr 2024 12:53:06 GMT; HttpOnly; Secure Set-Cookie: api_access_token=; Max-Age=-1; Domain=venmo.com; Path=/ Set-Cookie: pwv_id_token=; Max-Age=-1; Domain=venmo.com; Path=/ Set-Cookie: v_g_id=; Max-Age=-1; Domain=venmo.com; Path=/ Set-Cookie: w_fc=; Max-Age=-1; Domain=venmo.com; Path=/ Set-Cookie: group_user_api_access_token=; Max-Age=-1; Domain=venmo.com; Path=/ Cache-Control: no-store, no-cache, private, max-age=0 Location: https://venmo.com/account/sign-in?next=%2F x-envoy-upstream-service-time: 6 strict-transport-security: max-age=31536000 Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 6c06d3b8fdddf587c323accc30a7e51c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C4 X-Amz-Cf-Id: nFSE0mDbF0Xr1TwCPcx46Co9uS02HLCUgiDau-X72ltwA5Ry0vnB2A==
2024-04-26 12:23:06 UTC	48	IN	Data Raw: 32 61 0d 0a 68 74 74 70 73 3a 2f 2f 76 65 6e 6d 6f 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 2f 73 69 67 6e 2d 69 6e 3f 6e 65 78 74 3d 25 32 46 0d 0a Data Ascii: 2ahttps://venmo.com/account/sign-in?next=%2F
2024-04-26 12:23:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49823	52.84.150.50	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:06 UTC	1243	OUT	GET /account/sign-in?next=%2F HTTP/1.1 Host: venmo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial; _csrf=pKhoy7PoesEVNm2nuYnIc8xy; d_id=f9d8a02dda1e499da9fdccab0d31ca111714134181973; enforce_policy=ccpa; tsrce=identityappsnodeweb; x-pp-s=eyJ0IjoiMTcxNDEzNDE4MTk4MCIsImwiOiIwIiwibSI6IjAifQ; l7_az=dcg15.slc; ts=vreXpYrS%3D1808742181%26vteXpYrS%3D1714135981%26vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3%26vtyp%3Dnew; ts_c=vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3
2024-04-26 12:23:07 UTC	1022	IN	HTTP/1.1 307 Temporary Redirect Transfer-Encoding: chunked Connection: close Date: Fri, 26 Apr 2024 12:23:07 GMT Server: nginx x-powered-by: Express Set-Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; Max-Age=157680000; Domain=venmo.com; Path=/; Expires=Wed, 25 Apr 2029 12:23:06 GMT; HttpOnly; Secure Set-Cookie: s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; Max-Age=1800; Domain=venmo.com; Path=/; Expires=Fri, 26 Apr 2024 12:53:06 GMT; HttpOnly; Secure Cache-Control: no-store, no-cache, private, max-age=0 x-frame-options: deny Location: https://account.venmo.com/account/sign-in?next=%2F x-envoy-upstream-service-time: 219 strict-transport-security: max-age=31536000 Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 3b6959d147738fd4bde35db4104f4052.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: V7pl0LolIqphO-Sr2Hf0RK1iz0EJwcutT3YdRKFIlY-1OVjXmedHsQ==
2024-04-26 12:23:07 UTC	56	IN	Data Raw: 33 32 0d 0a 68 74 74 70 73 3a 2f 2f 61 63 63 6f 75 6e 74 2e 76 65 6e 6d 6f 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 2f 73 69 67 6e 2d 69 6e 3f 6e 65 78 74 3d 25 32 46 0d 0a Data Ascii: 32https://account.venmo.com/account/sign-in?next=%2F
2024-04-26 12:23:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49821	52.84.150.50	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:07 UTC	1251	OUT	GET /account/sign-in?next=%2F HTTP/1.1 Host: account.venmo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; _csrf=DDftkNPgEA155iagiWokS3RO; cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial; d_id=f9d8a02dda1e499da9fdccab0d31ca111714134181973; enforce_policy=ccpa; tsrce=identityappsnodeweb; x-pp-s=eyJ0IjoiMTcxNDEzNDE4MTk4MCIsImwiOiIwIiwibSI6IjAifQ; l7_az=dcg15.slc; ts=vreXpYrS%3D1808742181%26vteXpYrS%3D1714135981%26vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3%26vtyp%3Dnew; ts_c=vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3
2024-04-26 12:23:07 UTC	1053	IN	HTTP/1.1 307 Temporary Redirect Transfer-Encoding: chunked Connection: close Date: Fri, 26 Apr 2024 12:23:07 GMT Server: nginx x-powered-by: Express Set-Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; Max-Age=157680000; Domain=venmo.com; Path=/; Expires=Wed, 25 Apr 2029 12:23:07 GMT; HttpOnly; Secure Set-Cookie: s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; Max-Age=1800; Domain=venmo.com; Path=/; Expires=Fri, 26 Apr 2024 12:53:07 GMT; HttpOnly; Secure Cache-Control: no-store, no-cache, private, max-age=0 x-frame-options: deny Location: https://id.venmo.com/signin?country.x=US&locale.x=en&ctxId=AAGTMbXAr-_9hFOdMjFJeDIT2AVC4srohHO4prKJg35LG3f53du_Ei1CXj8jIlvNxkWTpu7ay42oUJl42vchI78= x-envoy-upstream-service-time: 304 strict-transport-security: max-age=31536000 Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 4185d2cf877d43718c5988a45f8edae4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C4 X-Amz-Cf-Id: 6BLwYLCZG_ig7eZX80cp5aakgWGVjZwED09xuWsimgQMRQb_vHn72g==
2024-04-26 12:23:07 UTC	153	IN	Data Raw: 39 33 0d 0a 68 74 74 70 73 3a 2f 2f 69 64 2e 76 65 6e 6d 6f 2e 63 6f 6d 2f 73 69 67 6e 69 6e 3f 63 6f 75 6e 74 72 79 2e 78 3d 55 53 26 6c 6f 63 61 6c 65 2e 78 3d 65 6e 26 63 74 78 49 64 3d 41 41 47 54 4d 62 58 41 72 2d 5f 39 68 46 4f 64 4d 6a 46 4a 65 44 49 54 32 41 56 43 34 73 72 6f 68 48 4f 34 70 72 4b 4a 67 33 35 4c 47 33 66 35 33 64 75 5f 45 69 31 43 58 6a 38 6a 49 6c 76 4e 78 6b 57 54 70 75 37 61 79 34 32 6f 55 4a 6c 34 32 76 63 68 49 37 38 3d 0d 0a Data Ascii: 93https://id.venmo.com/signin?country.x=US&locale.x=en&ctxId=AAGTMbXAr-_9hFOdMjFJeDIT2AVC4srohHO4prKJg35LG3f53du_Ei1CXj8jIlvNxkWTpu7ay42oUJl42vchI78=
2024-04-26 12:23:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49824	151.101.1.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:10 UTC	1424	OUT	GET /signin?country.x=US&locale.x=en&ctxId=AAGTMbXAr-_9hFOdMjFJeDIT2AVC4srohHO4prKJg35LG3f53du_Ei1CXj8jIlvNxkWTpu7ay42oUJl42vchI78= HTTP/1.1 Host: id.venmo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial; d_id=f9d8a02dda1e499da9fdccab0d31ca111714134181973; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=identityappsnodeweb; x-pp-s=eyJ0IjoiMTcxNDEzNDE4MTk4MCIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3Ar1IVgdqL-yPwDL7QwOzbe1TQMyLGYUSv.rXM9gf4tUyvmHMoq%2F2Zdgp4aiJfZ5ZCx1rHTg%2BhO7xY; l7_az=dcg15.slc; ts=vreXpYrS%3D1808742181%26vteXpYrS%3D1714135981%26vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3%26vtyp%3Dnew; ts_c=vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3
2024-04-26 12:23:10 UTC	1374	IN	HTTP/1.1 200 OK Connection: close Content-Length: 10470 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; script-src 'nonce-UgnFAqmSPdeMacWLd7YeCYhXB606wFrogY17TS/0SGo0FmBC' 'self' 'unsafe-inline' https://.paypal.com https://.paypalobjects.com https://fpnpmcdn.net; img-src 'self' * data: https://c.paypal.com; object-src 'none'; font-src 'self' https://.paypalobjects.com https://.paypal.com data:; frame-src 'self' https://.paypalobjects.com https://.paypal.com; connect-src 'self' 'unsafe-inline' https://.paypal.com https://.paypalobjects.com https://.fptls.com https://.fptls2.com https://.fptls3.com https://api.fpjs.io https://.api.fpjs.io; base-uri 'self' https://.paypal.com; form-action 'self' https://.paypal.com https://ih-prd.fisglobal.com/sso/SSOServlet; frame-ancestors 'self' https://.paypal.com https://.izettle.com https://paypal.com/axo; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp Content-Type: text/html; charset=utf-8 Etag: W/"280e-oYlvatvYa9d/Ytz5IzH978ycyPA" Paypal-Debug-Id: f412707ec485b
2024-04-26 12:23:10 UTC	1351	IN	Data Raw: 50 65 72 6d 69 73 73 69 6f 6e 73 2d 50 6f 6c 69 63 79 3a 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 61 72 63 68 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 77 6f 77 36 34 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 6d 6f 64 65 6c 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 Data Ascii: Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-ve
2024-04-26 12:23:10 UTC	546	IN	Data Raw: 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 58 2d 58 73 73 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 44 43 3a 20 63 63 67 31 31 2d 6f 72 69 67 69 6e 2d 77 77 77 2d 31 2e 70 61 79 70 61 6c 2e 63 6f 6d 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 2c 20 31 2e 31 20 76 61 72 6e 69 73 68 2c 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 44 61 74 65 3a 20 46 72 69 2c 20 32 36 20 41 70 72 20 32 30 32 34 20 31 32 3a 32 33 3a 31 30 20 47 4d 54 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 69 6e 63 6c 75 64 Data Ascii: X-Content-Type-Options: nosniffX-Xss-Protection: 1; mode=blockDC: ccg11-origin-www-1.paypal.comAccept-Ranges: bytesVia: 1.1 varnish, 1.1 varnish, 1.1 varnishDate: Fri, 26 Apr 2024 12:23:10 GMTStrict-Transport-Security: max-age=63072000; includ
2024-04-26 12:23:10 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 77 65 62 63 61 70 74 63 68 61 2f 6e 67 72 6c 43 61 70 74 63 68 61 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 Data Ascii: <!DOCTYPE html><html lang="en"><head><script async src="https://www.paypalobjects.com/webcaptcha/ngrlCaptcha.min.js"></script> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <meta http-equiv="X-U
2024-04-26 12:23:10 UTC	1378	IN	Data Raw: 67 6c 6f 62 61 6c 20 76 61 72 20 6f 72 20 69 6e 73 74 65 61 64 20 77 65 20 63 61 6e 20 75 73 65 20 74 68 69 73 20 64 61 74 61 20 69 66 20 70 61 73 73 65 64 20 61 6c 6f 6e 67 20 77 69 74 68 20 69 6e 69 74 69 61 6c 20 73 74 61 74 65 20 73 69 6e 63 65 20 61 6e 79 77 61 79 20 65 61 63 68 20 46 65 61 74 75 72 65 20 77 6f 75 6c 64 20 6e 65 65 64 20 74 6f 20 75 70 64 61 74 65 20 74 68 65 20 73 6f 75 72 63 65 49 44 20 61 74 6c 65 61 73 74 20 6f 6e 20 72 65 6e 64 65 72 69 6e 67 20 2d 2d 3e 0a 09 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 55 67 6e 46 41 71 6d 53 50 64 65 4d 61 63 57 4c 64 37 59 65 43 59 68 58 42 36 30 36 77 46 72 6f 67 59 31 37 54 53 2f 30 53 47 6f 30 46 6d 42 43 22 3e 0a 09 09 76 61 72 20 50 41 59 50 41 4c 20 3d 20 50 41 59 50 41 4c 20 7c 7c 20 Data Ascii: global var or instead we can use this data if passed along with initial state since anyway each Feature would need to update the sourceID atleast on rendering --><script nonce="UgnFAqmSPdeMacWLd7YeCYhXB606wFrogY17TS/0SGo0FmBC">var PAYPAL = PAYPAL \|\|
2024-04-26 12:23:10 UTC	1378	IN	Data Raw: 22 68 74 74 70 73 3a 5c 75 30 30 32 46 5c 75 30 30 32 46 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 5c 75 30 30 32 46 69 63 65 5c 75 30 30 32 46 63 6f 6e 74 65 6e 74 5c 75 30 30 32 46 63 32 30 32 34 30 33 32 32 31 30 33 35 34 32 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 63 74 78 49 64 22 3a 22 41 41 47 54 4d 62 58 41 72 2d 5f 39 68 46 4f 64 4d 6a 46 4a 65 44 49 54 32 41 56 43 34 73 72 6f 68 48 4f 34 70 72 4b 4a 67 33 35 4c 47 33 66 35 33 64 75 5f 45 69 31 43 58 6a 38 6a 49 6c 76 4e 78 6b 57 54 70 75 37 61 79 34 32 6f 55 4a 6c 34 32 76 63 68 49 37 38 3d 22 2c 22 69 63 65 4d 61 6e 69 66 65 73 74 49 44 22 3a 22 61 70 70 2e 35 38 61 37 31 34 31 66 37 30 30 34 65 37 36 33 33 61 66 38 2e 6a 73 22 2c 22 69 6e 69 74 69 61 6c 44 61 Data Ascii: "https:\u002F\u002Fwww.paypalobjects.com\u002Fice\u002Fcontent\u002Fc20240322103542","country":"US","ctxId":"AAGTMbXAr-_9hFOdMjFJeDIT2AVC4srohHO4prKJg35LG3f53du_Ei1CXj8jIlvNxkWTpu7ay42oUJl42vchI78=","iceManifestID":"app.58a7141f7004e7633af8.js","initialDa
2024-04-26 12:23:10 UTC	1378	IN	Data Raw: 3d 55 53 26 6c 6f 63 61 6c 65 2e 78 3d 66 72 5f 58 43 26 63 74 78 49 64 3d 41 41 47 54 4d 62 58 41 72 2d 5f 39 68 46 4f 64 4d 6a 46 4a 65 44 49 54 32 41 56 43 34 73 72 6f 68 48 4f 34 70 72 4b 4a 67 33 35 4c 47 33 66 35 33 64 75 5f 45 69 31 43 58 6a 38 6a 49 6c 76 4e 78 6b 57 54 70 75 37 61 79 34 32 6f 55 4a 6c 34 32 76 63 68 49 37 38 25 33 44 26 6c 61 6e 67 54 67 6c 3d 66 72 22 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 4c 6f 63 61 6c 65 53 65 6c 65 63 74 6f 72 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 6c 6f 63 61 6c 65 43 6f 64 65 22 3a 22 65 73 5f 58 43 22 2c 22 6c 61 6e 67 75 61 67 65 43 6f 64 65 22 3a 22 65 73 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 6c 6f 63 61 6c 65 4c 61 62 65 6c 22 3a 22 45 73 70 Data Ascii: =US&locale.x=fr_XC&ctxId=AAGTMbXAr-_9hFOdMjFJeDIT2AVC4srohHO4prKJg35LG3f53du_Ei1CXj8jIlvNxkWTpu7ay42oUJl42vchI78%3D&langTgl=fr","__typename":"LocaleSelector"},{"countryCode":"US","localeCode":"es_XC","languageCode":"es","selected":false,"localeLabel":"Esp
2024-04-26 12:23:10 UTC	1378	IN	Data Raw: 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 69 63 65 2f 76 65 6e 64 6f 72 30 2e 32 36 37 63 37 38 62 34 30 32 61 32 64 33 35 35 66 32 39 33 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 55 67 6e 46 41 71 6d 53 50 64 65 4d 61 63 57 4c 64 37 59 65 43 59 68 58 42 36 30 36 77 46 72 6f 67 59 31 37 54 53 2f 30 53 47 6f 30 46 6d 42 43 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 69 63 65 2f 76 65 6e 64 6f 72 31 2e 32 35 35 38 30 32 34 61 63 61 31 65 37 31 37 62 35 38 37 35 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 55 67 6e 46 41 71 6d 53 50 64 65 4d 61 63 57 4c 64 37 59 65 43 59 68 58 42 36 30 Data Ascii: ww.paypalobjects.com/ice/vendor0.267c78b402a2d355f293.js"></script><script nonce="UgnFAqmSPdeMacWLd7YeCYhXB606wFrogY17TS/0SGo0FmBC" src="https://www.paypalobjects.com/ice/vendor1.2558024aca1e717b5875.js"></script><script nonce="UgnFAqmSPdeMacWLd7YeCYhXB60
2024-04-26 12:23:10 UTC	1378	IN	Data Raw: 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 55 67 6e 46 41 71 6d 53 50 64 65 4d 61 63 57 4c 64 37 59 65 43 59 68 58 42 36 30 36 77 46 72 6f 67 59 31 37 54 53 2f 30 53 47 6f 30 46 6d 42 43 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 69 63 65 2f 76 65 6e 64 6f 72 56 65 6e 6d 6f 33 30 2e 38 61 66 64 35 65 62 35 62 66 30 35 37 61 36 36 33 32 36 32 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 55 67 6e 46 41 71 6d 53 50 64 65 4d 61 63 57 4c 64 37 59 65 43 59 68 58 42 36 30 36 77 46 72 6f 67 59 31 37 54 53 2f 30 53 47 6f 30 46 6d 42 43 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f Data Ascii: pt><script nonce="UgnFAqmSPdeMacWLd7YeCYhXB606wFrogY17TS/0SGo0FmBC" src="https://www.paypalobjects.com/ice/vendorVenmo30.8afd5eb5bf057a663262.js"></script><script nonce="UgnFAqmSPdeMacWLd7YeCYhXB606wFrogY17TS/0SGo0FmBC" src="https://www.paypalobjects.com/
2024-04-26 12:23:10 UTC	1378	IN	Data Raw: 20 6e 6f 6e 63 65 3d 22 55 67 6e 46 41 71 6d 53 50 64 65 4d 61 63 57 4c 64 37 59 65 43 59 68 58 42 36 30 36 77 46 72 6f 67 59 31 37 54 53 2f 30 53 47 6f 30 46 6d 42 43 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 69 63 65 2f 76 65 6e 64 6f 72 56 65 6e 6d 6f 33 39 2e 62 34 66 36 33 61 33 61 66 36 38 62 62 30 63 36 30 63 63 62 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 55 67 6e 46 41 71 6d 53 50 64 65 4d 61 63 57 4c 64 37 59 65 43 59 68 58 42 36 30 36 77 46 72 6f 67 59 31 37 54 53 2f 30 53 47 6f 30 46 6d 42 43 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 69 63 65 2f 76 65 6e 64 6f 72 Data Ascii: nonce="UgnFAqmSPdeMacWLd7YeCYhXB606wFrogY17TS/0SGo0FmBC" src="https://www.paypalobjects.com/ice/vendorVenmo39.b4f63a3af68bb0c60ccb.js"></script><script nonce="UgnFAqmSPdeMacWLd7YeCYhXB606wFrogY17TS/0SGo0FmBC" src="https://www.paypalobjects.com/ice/vendor
2024-04-26 12:23:10 UTC	824	IN	Data Raw: 69 4f 70 74 69 6f 6e 73 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 64 61 74 61 3a 20 27 70 67 72 70 3d 69 63 65 25 33 41 76 65 6e 6d 6f 25 33 41 73 69 67 6e 69 6e 26 70 61 67 65 3d 69 63 65 25 33 41 76 65 6e 6d 6f 25 33 41 73 69 67 6e 69 6e 26 70 67 73 74 3d 31 37 31 34 31 33 34 31 39 30 33 35 38 26 63 61 6c 63 3d 66 34 31 32 37 30 37 65 63 34 38 35 62 26 6e 73 69 64 3d 72 31 49 56 67 64 71 4c 2d 79 50 77 44 4c 37 51 77 4f 7a 62 65 31 54 51 4d 79 4c 47 59 55 53 76 26 72 73 74 61 3d 65 6e 5f 55 53 26 70 67 74 66 3d 4e 6f 64 65 6a 73 26 65 6e 76 3d 6c 69 76 65 26 73 3d 63 69 26 63 63 70 67 3d 55 53 26 63 73 63 69 3d 32 37 65 65 66 66 36 30 38 34 37 61 34 35 63 37 62 65 35 33 38 64 31 31 34 31 66 33 33 65 39 62 26 63 6f 6d 70 3d 69 64 65 6e 74 69 74 79 61 70 70 Data Ascii: iOptions = { data: 'pgrp=ice%3Avenmo%3Asignin&page=ice%3Avenmo%3Asignin&pgst=1714134190358&calc=f412707ec485b&nsid=r1IVgdqL-yPwDL7QwOzbe1TQMyLGYUSv&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=27eeff60847a45c7be538d1141f33e9b&comp=identityapp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49825	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:10 UTC	598	OUT	GET /paypal-ui/web/fonts-and-normalize/2-0-0/fonts-and-normalize.min.css HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:11 UTC	839	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2483 Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: text/css Etag: "624cd12a-9b3" Last-Modified: Tue, 05 Apr 2022 23:30:50 GMT Paypal-Debug-Id: e709b1efaa65e Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000e709b1efaa65e-ab765952eb86d4c4-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:11 GMT X-Served-By: cache-dfw-kdal2120045-DFW, cache-pdk-kfty2130079-PDK X-Cache: HIT, HIT X-Cache-Hits: 28, 0 X-Timer: S1714134191.199540,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 50 61 79 50 61 6c 4f 70 65 6e 2d 52 65 67 75 6c 61 72 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 70 61 79 70 61 6c 2d 75 69 2f 66 6f 6e 74 73 2f 50 61 79 50 61 6c 4f 70 65 6e 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 70 61 79 70 61 6c 2d 75 69 2f 66 6f 6e 74 73 2f 50 61 79 50 61 6c 4f 70 65 6e 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 Data Ascii: @font-face{font-display:swap;font-family:PayPalOpen-Regular;font-style:normal;src:url(https://www.paypalobjects.com/paypal-ui/fonts/PayPalOpen-Regular.woff2) format("woff2"),url(https://www.paypalobjects.com/paypal-ui/fonts/PayPalOpen-Regular.woff) format
2024-04-26 12:23:11 UTC	1104	IN	Data Raw: 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 3b 6d 61 72 67 69 6e 3a 30 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 62 75 74 74 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e Data Ascii: -family:inherit;font-size:100%;line-height:1.15;margin:0}button,input{overflow:visible}button,select{text-transform:none}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button}[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49827	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:10 UTC	587	OUT	GET /paypal-ui/fonts/PayPalSansSmall-Regular.woff2 HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://id.venmo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:11 UTC	822	IN	HTTP/1.1 200 OK Connection: close Content-Length: 18320 Cache-Control: s-maxage=31536000, public,max-age=3600 Etag: "60271cda-4790" Last-Modified: Sat, 13 Feb 2021 00:27:06 GMT Paypal-Debug-Id: dfa3d395d7c01 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000dfa3d395d7c01-6884c82399e32bdf-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:11 GMT X-Served-By: cache-dfw-kdfw8210022-DFW, cache-pdk-kfty2130040-PDK X-Cache: HIT, HIT X-Cache-Hits: 7925, 1 X-Timer: S1714134191.201275,VS0,VE2 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * CONTENT-TYPE: application/font-woff2 Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 77 4f 46 32 4f 54 54 4f 00 00 47 90 00 0c 00 00 00 00 7d f8 00 00 47 42 00 01 19 99 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0d fe 6e 1a 52 1b d4 1e 1c 84 16 06 60 00 8c 34 01 36 02 24 03 8b 72 04 06 05 88 23 07 20 1b 1c 7d 35 78 43 93 f2 ab 37 27 b3 d7 ce 92 56 8d 46 c4 6e 07 54 0a 65 47 47 21 b0 71 90 0c 78 8f ca fe ff ef c7 8d 21 82 0d b4 b2 f6 ff 03 52 64 c3 12 d2 a4 9a 45 85 49 5e 48 ec dc 4d 85 0c 8e 9c 64 ba b8 51 9f 50 0e 05 05 1a a9 e7 3a 78 47 ae 46 44 82 64 93 3d 4d 09 a1 22 99 2b ba e1 a7 51 b8 8b e6 f3 0f 16 7a ce 49 df 91 8a 34 7e 9e 6b 2d 1c 37 ca 85 e2 2c 38 39 33 94 a8 d8 1e d6 0f 35 3b d6 82 60 41 24 24 44 af 60 12 a7 24 da 33 30 ed 8e ba 68 0a fd 77 42 f7 a0 fe 94 fc db a1 d6 0e 8c 8c 96 43 7d c3 3c 35 79 d1 e8 fc 79 Data Ascii: wOF2OTTOG}GBnR`46$r# }5xC7'VFnTeGG!qx!RdEI^HMdQP:xGFDd=M"+QzI4~k-7,8935;`A$$D`$30hwBC}<5yy
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 42 12 99 22 fd 2a 99 28 74 af 3a 34 0b ed a5 07 26 39 b6 21 8b 6d b6 29 36 64 7d 3d 3d 7d a4 f7 0d 0c 6c a2 9b 24 01 9f a4 b2 c6 3f e1 b7 b5 02 10 9c 88 8a 51 fe 0e 90 31 9d dc 2a 39 64 7b cf 4f ce f6 dd f1 5e 61 34 da ed 25 d3 b1 b0 5d 73 dd 38 85 ea 14 f2 79 c6 db ed e6 c1 0c aa a1 59 af 72 93 eb fa 7d 74 e0 c7 05 83 09 37 0c 77 6c a8 46 37 38 c9 07 59 ff 08 3f 48 16 6f 65 ef f8 cb 36 57 b3 d1 eb 5c 65 49 32 ad 0b eb 46 2a 63 7f e0 ba b2 b4 ec 5c 5b 8b 8a fa 9f 86 bb ae 87 3d f6 f9 03 7d fe 88 fc 13 f6 0e d1 11 67 1d ba 1e 56 80 66 d2 8a 4a 0d 18 8d 38 47 97 ac 6e 8c be 79 a0 41 ad a1 c2 cf a1 0a 8a 2d 14 6f 41 f4 54 2a 9e fa 09 6d 01 fa 8e 0a 1a d0 06 5a 83 0e f0 07 68 87 5e 32 a0 45 db 09 bd 7c 81 dd 38 5f 0d f4 60 1f e8 1a b4 6c 03 fb 50 c3 02 47 e8 Data Ascii: B"(t:4&9!m)6d}==}l$?Q19d{O^a4%]s8yYr}t7wlF78Y?Hoe6W\eI2Fc\[=}gVfJ8GnyA-oATmZh^2E\|8_`lPG
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 4b a1 88 3e 3f 02 5d 5e 52 1f 45 bc 9d 01 64 de 81 86 37 99 ef af 61 c7 38 c0 26 75 46 26 04 b1 17 c8 c4 09 43 e0 39 da aa 4b 61 bb 35 5a aa f9 7f d9 6e f6 e7 7e 32 cb a6 d3 2e 20 16 9f c4 59 0a 76 57 cf 93 dc 30 7c 7a df d7 43 29 fe 98 cb ca ed fa f6 5f aa e7 3b 9c 51 7f 7f 90 09 32 ca 44 9f 27 bc 37 20 1a 2c a5 46 dc fd 25 e9 15 e2 ce fb 83 7d df 57 cd e3 c9 07 e0 fb 6f a8 95 2a 6f e2 b2 31 3f 19 02 8e 22 b0 86 76 6a 38 61 90 33 c4 ca 9e 4d 83 77 dc 4b dc 2c 2b 8d 82 17 e3 0c 21 ce ed d7 01 cb dd fc 42 da 9b ad a8 a3 fd 55 bb bf 8d 7b 7a 39 dc 93 85 16 32 f7 69 58 21 9a 43 d9 cf 13 f7 42 3b f4 9c 34 35 53 9d c6 cc 5f 34 f8 75 74 24 b9 35 6b 2c 11 5b e2 30 fe 88 04 31 42 ff 4a 06 4c b7 91 25 9d 50 1d 1d c0 6b eb 5f 83 9c 33 c0 73 1e f1 d0 53 2a e1 62 55 Data Ascii: K>?]^REd7a8&uF&C9Ka5Zn~2. YvW0\|zC)_;Q2D'7 ,F%}Woo1?"vj8a3MwK,+!BU{z92iX!CB;45S_4ut$5k,[01BJL%Pk_3sSbU
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 5e 29 17 ac 92 98 74 f7 32 b4 37 7f c4 c2 d1 9b 0d 37 01 2a fc da a3 8a dd 65 29 38 47 4b 4e 57 60 88 7b bc d5 fd 1a 6c 77 7d cc 8e 93 70 c6 9b a8 93 f5 57 c3 d3 5f cf 83 1b 7f 1f 58 ea 93 35 90 34 d0 df 1e 3b 51 52 cd 07 d8 31 3d 8b bc 76 2c be 3d 83 ea 7f 91 32 45 30 04 9c cf d5 b5 f0 21 63 ed 58 83 73 fd 7c a1 9e f2 cf 84 7b a6 77 a1 03 18 3f c2 e3 85 a0 5b a7 7e e4 85 d9 a1 4b 61 0e eb 07 ea 23 10 62 de 03 f0 fd b7 d4 07 2f b4 d6 b7 a2 af 7e 68 1b f4 90 6a 50 7e b1 36 29 37 84 13 06 3a 43 dc ae 14 70 b9 5b ff e6 be 5f 01 8f 94 a7 e5 b6 99 f5 40 2f cf bf 5d 95 83 d6 76 d1 0f df 83 66 36 c0 3c 02 50 df 03 78 d5 b5 eb 14 af 4a af 34 ac 9b 4d 79 ef 36 74 e3 e6 9b 00 17 fc ec 42 aa 4b e5 6d 1c dd 15 48 75 67 69 8d 57 57 93 55 39 25 eb 81 6e 1f 4c a4 9d c9 Data Ascii: ^)t277*e)8GKNW`{lw}pW_X54;QR1=v,=2E0!cXs\|{w?[~Ka#b/~hjP~6)7:Cp[_@/]vf6<PxJ4My6tBKmHugiWWU9%nL
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 1a 95 f6 cf fb 78 90 58 74 c0 40 7e 86 db c6 c3 02 b6 de c7 a5 ea 3e 70 9a 19 dc 83 f4 5e 8b 83 cb 76 53 47 34 a5 3d cf f0 c5 3b e3 87 22 07 5e 11 bc ad 8f de 32 e1 c6 bf f4 b7 24 76 8c d5 f0 2c 3f 78 ee cf b1 f6 e7 3b 7d 75 55 92 5d 84 c8 0f 3f 4e 9c e8 7c ff 45 4a 83 4f 35 99 5e 67 cc df ff 71 72 f3 e6 ff 7f d5 4a 7c e4 e9 5b 1b b2 b3 68 3a c5 d7 3c 14 68 3d 93 51 50 12 cc e4 92 14 a4 f8 6d 67 45 96 92 e4 05 57 e9 62 e0 5c bf 96 0c 9d 28 be 02 a7 3d f8 5a 74 05 26 e1 ba fd 5a 76 e4 d5 2f 9b 35 a5 a6 37 34 64 c8 4f 94 a5 86 bc 2b 89 88 4f ae 91 98 41 30 34 47 a8 a9 68 da b4 63 ef b7 bc af 52 91 53 75 a3 61 29 bc a5 90 d7 54 a2 e3 56 b2 91 05 aa c2 a3 96 28 ce 06 df 57 61 c5 02 c4 11 e7 8c 24 d1 db c1 85 a6 fc 28 c3 e3 9c 4e f2 d7 8b 8e fb 2e 8e 09 d1 7e Data Ascii: xXt@~>p^vSG4=;"^2$v,?x;}uU]?N\|EJO5^gqrJ\|[h:<h=QPmgEWb\(=Zt&Zv/574dO+OA04GhcRSua)TV(Wa$(N.~
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 7c 0b bf fd f7 91 35 89 8d b9 e3 95 c3 31 5f 05 71 30 e4 f0 37 e2 d7 5e 2f 11 c7 c4 16 2d 9e 9c 76 2f ee 12 97 fd 65 63 70 45 b9 0c 48 6b a7 7c 65 f9 eb 93 37 aa cc 36 b8 07 f3 86 26 62 7d 12 26 95 ad 4e 07 22 21 36 9b d7 3b 72 cc 74 de 35 1f 87 f2 b8 ab 32 14 8b fa d4 ea 6b ef 6d 9c f4 ad e2 0c 4d 0b bf 25 45 bf ee ad b1 37 1d da 8f 14 cb c9 23 91 9f dc 63 79 85 29 62 c9 99 2d 9a 4c 9f 70 34 d4 ee db fb e7 7c f8 86 cb 0f b2 2c be 27 2b c1 5d bf bb db f2 76 72 61 88 48 58 ce f2 1c 97 71 a8 9a bd 93 f1 97 f3 6e dd b5 52 19 e7 64 61 75 e6 ae fa 81 ca 8d 16 71 56 d5 6f b0 2a 48 7e 95 09 bb b9 32 f7 01 87 7e 12 99 f1 ba f0 ec fe b0 f9 a7 16 dc 7d 56 1a 16 39 df 81 4c de 98 1f b6 68 dd 79 2b af 52 fb a3 93 38 2b ba 3c b4 3a f2 fa 4a 8a 32 d9 6c e9 a8 e8 60 13 Data Ascii: \|51_q07^/-v/ecpEHk\|e76&b}&N"!6;rt52kmM%E7#cy)b-Lp4\|,'+]vraHXqnRdauqVo*H~2~}V9Lhy+R8+<:J2l`
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 61 57 7a 61 e6 bc 5c 30 c2 50 99 8a 48 6f 5b 0c 34 39 88 30 b1 96 93 6f 21 16 7b 59 d0 b8 83 ec e6 30 86 65 7e dd da 17 24 ee d3 2f 65 06 7f 89 65 67 28 5a 8b cf 37 51 60 ac cd dd 7c 1b ad 7f bb b6 72 84 94 ca 2f e7 58 9a 2d 88 ac a8 a6 34 4e 09 2e b9 9c 22 5b 20 9c 5e a6 89 98 4d aa c3 31 3f 67 48 c2 cb 68 f6 bc 06 5b 06 e9 24 df 5e e3 ac 1e 45 e0 9c ab 60 0d 3f 84 ae 5d ed 63 05 9a 4e 39 b6 56 bb de 8b 7c 44 5d 7f 94 22 5f 2c ce 36 4f 49 1d e1 08 17 eb 8f 51 de 14 31 b3 27 05 81 b8 73 42 16 d5 4d d8 22 66 f6 a2 70 4a bc 1e 9b a4 49 2c 0c a7 d7 ad e9 75 13 c8 e5 32 c7 cd aa d6 1b f8 09 d8 14 f6 0d 29 82 3c db 9d 3d 26 1f 17 6c bd 33 50 df eb eb 1a 86 ab 3e fa d8 b2 13 9e d7 6d f1 b0 79 eb 1f 36 36 ed 94 97 29 a9 e8 db 37 64 13 70 f1 f0 32 77 24 3d 9c 43 Data Ascii: aWza\0PHo[490o!{Y0e~$/eeg(Z7Q`\|r/X-4N."[ ^M1?gHh[$^E`?]cN9V\|D]"_,6OIQ1'sBM"fpJI,u2)<=&l3P>my66)7dp2w$=C
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 59 ef 58 e4 24 bf 68 2d c7 00 f7 aa fb d1 68 e0 11 75 87 bc 5e fd 14 06 03 c6 5e b9 7c 34 3f d0 fa e3 ed ea d7 a3 7d 70 fe ab af cb d5 3b 37 a2 1a 75 8d bc f5 54 f8 58 f0 12 d6 d8 04 66 df 08 f6 e7 ed b0 da 02 23 08 b6 37 5c 1a 0d 37 dc d2 c5 0d d2 62 77 f9 2e e1 55 d8 84 6a 7f 4c 33 0d 70 6d f9 c2 fe 17 b8 b6 46 4e bc c1 49 41 cb 4f c0 9f f0 70 14 6c d4 58 24 1b 03 60 0d 60 a9 e4 07 76 04 99 27 94 37 32 1f bc 98 8b 9b 8f 33 a3 8d b0 ac 73 c7 57 71 0e d2 72 a9 1c b5 cc 2e 6e bc d4 73 d8 0f b4 3d fe f1 56 23 b0 ac 51 f9 e0 3d 83 89 bd 54 35 19 6d 09 b5 1b 94 42 26 7b 35 37 92 b3 e6 86 34 25 6b a4 06 db 53 81 2c fe 49 03 8b 7a 58 0a 67 bd 1b b7 a3 7a 06 cf 3a 3f b5 6f 71 49 ff ac bd ec f1 ea 3b 6b 84 37 1b 6e 34 34 b0 91 0d ab 9d 61 ac 6c e0 04 de 19 74 30 Data Ascii: YX$h-hu^^\|4?}p;7uTXf#7\7bw.UjL3pmFNIAOplX$``v'723sWqr.ns=V#Q=T5mB&{574%kS,IzXgz:?oqI;k7n44alt0
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 5a 3b 4d 2b 95 d7 e0 94 09 e0 56 ea 7c 22 40 78 c1 3b 5b 09 b6 c1 69 21 9e f7 ac 3f f2 fb 35 b5 45 6d 46 39 45 e2 26 18 55 64 38 85 42 5f 94 73 27 ea 2b d2 51 9d 2e a5 a0 82 7a ba fc e7 c0 58 b9 d5 fb 07 73 75 8a d4 a6 42 d4 11 48 d0 a8 6d 9f 39 91 fd d1 37 4d a4 bf 18 b0 38 2f 59 23 53 fc 12 87 ba 0f 79 a6 f1 d2 b0 50 e4 7f d1 bf e0 0d f8 ef 3e 14 a6 4d d2 a4 b1 e5 eb 57 19 d6 fa a3 90 76 72 72 72 7a 41 2a 72 d5 2a a2 d1 a0 33 d4 fd 9c cf ff b4 89 15 dd 96 66 f2 63 50 dc ac f5 93 35 47 82 2f e6 0c b8 17 d0 a6 26 c9 fa 24 29 e9 66 a8 02 01 72 82 8e f7 d6 f6 03 5d de c2 da 87 51 d5 84 2c 71 9c 6e ba 97 72 ab 6b 1a e7 7e db 4c fa 66 65 d9 c1 c5 03 22 ef c2 c5 09 26 78 d7 74 7c 27 9f 75 e4 7d 30 dc 53 5b 35 88 4b e4 e7 f3 f2 9a 8d 88 d4 b6 cd 68 17 7c fd 9c Data Ascii: Z;M+V\|"@x;[i!?5EmF9E&Ud8B_s'+Q.zXsuBHm97M8/Y#SyP>MWvrrrzAr3fcP5G/&$)fr]Q,qnrk~Lfe"&xt\|'u}0S[5Kh\|
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: f5 92 d2 63 a6 1b 94 58 97 16 e3 ad c2 5c 29 47 49 29 ce 6d a2 05 d7 a3 13 73 90 4f 98 a4 5e a9 a4 1b 38 2a 0e 97 8c 7d c6 d2 fc 7a a7 5a 2b 00 bb 37 bf 74 0c d6 56 38 70 99 fc 72 66 76 b3 06 91 6c d1 d8 af 4c 60 a6 e6 58 f3 01 b6 1f 5d 20 3a 13 c9 f8 cf e0 3a ff 73 40 08 be b0 74 5c c0 13 72 1e 1e e0 5d 07 77 23 4d 2a 58 ea b7 94 cd 68 fa 84 29 f5 68 85 32 63 34 95 48 c5 bc cc 89 11 0c 67 2a 3e 6a 47 97 aa 2d db 3e 05 8d 72 dc 2a 8f 28 e7 33 2c d2 76 5a 3a 34 e3 66 f1 89 4a b8 2e 75 35 d7 a0 ab 24 d4 25 f4 19 85 66 e3 6d 54 cf 76 e7 7d d8 dd 5e 5f dd cb e1 05 9f 2d 2a 6c c8 e5 d1 3a 34 a3 3e 38 55 1b 2a 08 ce 29 15 08 47 2a c3 d9 f4 34 a2 1c 9d 1c 65 43 7d 1a b0 98 44 75 6b 32 ba a5 92 ba ae 20 bc f5 e4 90 76 df 41 67 ad 9f 83 e8 96 2f 4f 9c 6c eb ba 94 Data Ascii: cX\)GI)msO^8}zZ+7tV8prfvlL`X] ::s@t\r]w#MXh)h2c4Hg>jG->r(3,vZ:4fJ.u5$%fmTv}^_-l:4>8U)G*4eC}Duk2 vAg/Ol

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49831	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:10 UTC	578	OUT	GET /paypal-ui/web/icon-font/0-0-1/icon-font.min.css HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:11 UTC	770	IN	HTTP/1.1 200 OK Connection: close Content-Length: 487 Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: text/css Etag: "60271cdb-1e7" Last-Modified: Sat, 13 Feb 2021 00:27:07 GMT Paypal-Debug-Id: ba4035cfecf47 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000ba4035cfecf47-de89301002ed985b-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:11 GMT X-Served-By: cache-dfw-kdal2120039-DFW, cache-pdk-kfty2130067-PDK X-Cache: HIT, HIT X-Cache-Hits: 2, 0 X-Timer: S1714134191.199811,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:11 UTC	487	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 50 50 55 49 2d 49 63 6f 6e 73 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 70 61 79 70 61 6c 2d 75 69 2f 69 63 6f 6e 73 2f 66 6f 6e 74 5f 69 63 6f 6e 2f 30 2d 30 2d 32 39 2f 50 50 55 49 2d 49 63 6f 6e 73 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 75 72 6c 28 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 70 61 79 70 61 6c 2d 75 69 2f 69 63 6f 6e 73 2f 66 6f 6e 74 5f 69 63 6f 6e 2f 30 2d 30 2d 32 39 2f 50 50 55 49 2d 49 63 6f 6e 73 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 Data Ascii: @font-face{font-family:PPUI-Icons;src:url(https://www.paypalobjects.com/paypal-ui/icons/font_icon/0-0-29/PPUI-Icons.woff2) format('woff2'),url(https://www.paypalobjects.com/paypal-ui/icons/font_icon/0-0-29/PPUI-Icons.woff) format('woff'),url(https://www.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49830	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:10 UTC	552	OUT	GET /ice/assets/fn-sync-telemetry-min.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:11 UTC	853	IN	HTTP/1.1 200 OK Connection: close Content-Length: 5534 Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Etag: "60271b1d-159e" Last-Modified: Sat, 13 Feb 2021 00:19:41 GMT Paypal-Debug-Id: 9ecd642a8cf07 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000009ecd642a8cf07-78bfab5b9d0153bf-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:11 GMT X-Served-By: cache-dfw-kdfw8210043-DFW, cache-pdk-kfty2130032-PDK X-Cache: HIT, HIT X-Cache-Hits: 7, 0 X-Timer: S1714134191.200346,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 76 61 72 20 50 41 59 50 41 4c 3d 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 7c 7c 7b 7d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 2c 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 2b 3d 65 2e 63 68 61 72 43 6f 64 65 41 74 28 6e 29 3b 72 65 74 75 72 6e 20 74 26 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 2c 6e 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6e 2c 21 31 29 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 64 65 74 61 63 68 45 76 65 6e 74 26 26 Data Ascii: var PAYPAL=window.PAYPAL\|\|{};!function(){"use strict";function i(e){for(var t=0,n=0;n<e.length;n++)t+=e.charCodeAt(n);return t&=t}function s(e,t,n){"undefined"!=typeof e.removeEventListener?e.removeEventListener(t,n,!1):"undefined"!=typeof e.detachEvent&&
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 28 65 29 7b 72 65 74 75 72 6e 20 6e 2e 65 72 72 3d 6e 2e 65 72 72 7c 7c 7b 7d 2c 65 2b 3d 6e 2e 65 72 72 7d 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 70 7c 7c 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 70 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 2c 72 3b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 74 68 69 73 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 76 61 72 20 69 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 73 3d 69 2e 6c 65 6e 67 74 68 3e 3e 3e 30 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 65 2b 22 20 69 73 20 6e 6f 74 20 Data Ascii: (e){return n.err=n.err\|\|{},e+=n.err},Array.prototype.map\|\|(Array.prototype.map=function(e){var t,n,r;if(null==this)throw new TypeError("this is null or not defined");var i=Object(this),s=i.length>>>0;if("function"!=typeof e)throw new TypeError(e+" is not
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 7b 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 6e 2c 72 29 7b 69 66 28 6e 75 6c 6c 21 3d 65 29 7b 76 61 72 20 69 3d 6e 65 77 20 70 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 2e 63 61 70 74 75 72 65 28 65 2c 72 29 7d 2c 75 3d 7b 7d 3b 75 2e 69 64 3d 65 2e 69 64 2c 75 2e 6c 69 73 74 65 6e 65 72 3d 73 2c 75 2e 66 69 65 6c 64 3d 65 2c 74 2e 70 75 73 68 28 75 29 2c 6f 28 65 2c 22 6b 65 79 64 6f 77 6e 22 2c 73 29 2c 6f 28 65 2c 22 6b 65 79 75 70 22 2c 73 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 28 29 7b 74 68 69 73 2e 62 61 73 65 54 69 6d 65 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 74 68 69 73 2e 6b 65 79 49 6e 64 65 78 3d 30 2c 74 68 69 73 2e 63 6f 6e 74 72 6f 6c 43 6f 75 6e 74 3d 30 2c 74 68 69 73 2e 73 70 Data Ascii: {}return!1}function a(e,n,r){if(null!=e){var i=new p,s=function(e){i.capture(e,r)},u={};u.id=e.id,u.listener=s,u.field=e,t.push(u),o(e,"keydown",s),o(e,"keyup",s)}}function p(){this.baseTime=(new Date).getTime(),this.keyIndex=0,this.controlCount=0,this.sp
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 74 2e 6c 65 6e 67 74 68 3b 2b 2b 65 29 7b 76 61 72 20 6e 3d 74 5b 65 5d 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6e 2e 66 69 65 6c 64 26 26 28 73 28 6e 2e 66 69 65 6c 64 2c 22 6b 65 79 64 6f 77 6e 22 2c 6e 2e 6c 69 73 74 65 6e 65 72 29 2c 73 28 6e 2e 66 69 65 6c 64 2c 22 6b 65 79 75 70 22 2c 6e 2e 6c 69 73 74 65 6e 65 72 29 29 7d 7d 3b 72 65 74 75 72 6e 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 3d 6e 7c 7c 7b 7d 2c 21 31 3d 3d 3d 65 26 26 6e 2e 64 65 74 61 69 6c 26 26 6e 2e 64 65 74 61 69 6c 2e 66 69 65 6c 64 73 29 7b 65 3d 21 30 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 6e 2e 64 65 74 61 69 6c 2e 66 69 65 6c 64 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b Data Ascii: ion(){for(var e=0;e<t.length;++e){var n=t[e];"undefined"!=typeof n.field&&(s(n.field,"keydown",n.listener),s(n.field,"keyup",n.listener))}};return{init:function(n){if(n=n\|\|{},!1===e&&n.detail&&n.detail.fields){e=!0;for(var i=0;i<n.detail.fields.length;i++
2024-04-26 12:23:11 UTC	18	IN	Data Raw: 6e 63 44 61 74 61 3d 72 7d 28 77 69 6e 64 6f 77 29 3b Data Ascii: ncData=r}(window);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49828	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:11 UTC	552	OUT	GET /ice/runtime.db57914c5d92b0ff4de7.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:11 UTC	855	IN	HTTP/1.1 200 OK Connection: close Content-Length: 10652 Cache-Control: s-maxage=31536000, public,max-age=86400 Content-Type: application/javascript Etag: "66064785-299c" Last-Modified: Fri, 29 Mar 2024 04:45:57 GMT Paypal-Debug-Id: c8c2d75dc9674 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000c8c2d75dc9674-2cb87a2d1b028ec1-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:11 GMT X-Served-By: cache-dfw-kdal2120034-DFW, cache-pdk-kpdk1780024-PDK X-Cache: HIT, HIT X-Cache-Hits: 1, 0 X-Timer: S1714134191.207151,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 61 2c 64 2c 63 3d 7b 7d 2c 6f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 61 3d 6f 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 61 29 72 65 74 75 72 6e 20 61 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 64 3d 6f 5b 65 5d 3d 7b 69 64 3a 65 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 63 5b 65 5d 2e 63 61 6c 6c 28 64 2e 65 78 70 6f 72 74 73 2c 64 2c 64 2e 65 78 70 6f 72 74 73 2c 74 29 2c 64 2e 65 78 70 6f 72 74 73 7d 74 2e 6d 3d 63 2c 65 3d 5b 5d 2c 74 2e 4f 3d 28 61 2c 64 2c 63 2c 6f 29 3d 3e 7b 69 66 28 21 64 29 7b 76 61 72 20 72 3d 31 2f 30 3b 66 6f 72 28 6c 3d 30 3b 6c 3c 65 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 7b 66 6f 72 28 76 61 72 5b 64 2c 63 Data Ascii: (()=>{"use strict";var e,a,d,c={},o={};function t(e){var a=o[e];if(void 0!==a)return a.exports;var d=o[e]={id:e,exports:{}};return c[e].call(d.exports,d,d.exports,t),d.exports}t.m=c,e=[],t.O=(a,d,c,o)=>{if(!d){var r=1/0;for(l=0;l<e.length;l++){for(var[d,c
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 2d 35 35 66 32 63 31 62 32 22 2c 33 34 3a 22 76 65 6e 64 6f 72 56 65 6e 6d 6f 2d 35 62 63 37 33 32 36 38 22 2c 33 35 3a 22 76 65 6e 64 6f 72 56 65 6e 6d 6f 2d 35 64 39 32 37 64 32 62 22 2c 33 36 3a 22 76 65 6e 64 6f 72 56 65 6e 6d 6f 2d 35 64 63 31 31 37 31 32 22 2c 33 37 3a 22 76 65 6e 64 6f 72 56 65 6e 6d 6f 2d 35 65 33 62 32 35 61 63 22 2c 33 38 3a 22 76 65 6e 64 6f 72 56 65 6e 6d 6f 2d 36 61 61 39 66 33 63 66 22 2c 33 39 3a 22 76 65 6e 64 6f 72 56 65 6e 6d 6f 2d 38 66 32 38 33 66 63 36 22 2c 34 30 3a 22 76 65 6e 64 6f 72 56 65 6e 6d 6f 2d 39 31 65 63 33 65 64 32 22 2c 34 31 3a 22 76 65 6e 64 6f 72 56 65 6e 6d 6f 2d 39 34 65 36 61 61 34 63 22 2c 34 32 3a 22 76 65 6e 64 6f 72 56 65 6e 6d 6f 2d 61 31 64 35 34 61 61 63 22 2c 34 33 3a 22 76 65 6e 64 6f 72 Data Ascii: -55f2c1b2",34:"vendorVenmo-5bc73268",35:"vendorVenmo-5d927d2b",36:"vendorVenmo-5dc11712",37:"vendorVenmo-5e3b25ac",38:"vendorVenmo-6aa9f3cf",39:"vendorVenmo-8f283fc6",40:"vendorVenmo-91ec3ed2",41:"vendorVenmo-94e6aa4c",42:"vendorVenmo-a1d54aac",43:"vendor
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 5f 58 6f 5f 4c 61 79 6f 75 74 22 2c 39 30 3a 22 4f 70 65 6e 5f 42 61 6e 6b 69 6e 67 5f 43 6f 6e 73 65 6e 74 5f 4c 61 79 6f 75 74 22 2c 39 31 3a 22 50 61 73 73 77 6f 72 64 52 65 63 6f 76 65 72 79 22 2c 39 32 3a 22 50 61 73 73 77 6f 72 64 52 65 73 65 74 50 61 67 65 22 2c 39 33 3a 22 50 61 73 73 77 6f 72 64 53 74 61 72 74 50 61 67 65 22 2c 39 34 3a 22 50 61 79 50 61 6c 5f 42 75 73 69 6e 65 73 73 5f 41 63 63 6f 75 6e 74 5f 54 65 6d 70 6c 61 74 65 22 2c 39 35 3a 22 50 61 79 50 61 6c 5f 43 68 61 6e 67 65 50 61 73 73 77 6f 72 64 5f 53 74 61 72 74 54 65 6d 70 6c 61 74 65 22 2c 39 36 3a 22 50 61 79 50 61 6c 5f 43 6f 6e 73 65 6e 74 5f 50 61 67 65 5f 54 65 6d 70 6c 61 74 65 22 2c 39 37 3a 22 50 61 79 50 61 6c 5f 45 72 72 6f 72 5f 50 61 67 65 5f 54 65 6d 70 6c 61 74 Data Ascii: _Xo_Layout",90:"Open_Banking_Consent_Layout",91:"PasswordRecovery",92:"PasswordResetPage",93:"PasswordStartPage",94:"PayPal_Business_Account_Template",95:"PayPal_ChangePassword_StartTemplate",96:"PayPal_Consent_Page_Template",97:"PayPal_Error_Page_Templat
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 65 64 42 65 6e 65 66 69 63 69 61 72 79 22 2c 31 33 39 3a 22 57 69 64 67 65 74 5f 53 63 61 52 6f 75 74 65 73 22 2c 31 34 30 3a 22 57 69 64 67 65 74 5f 53 65 63 75 72 69 74 79 22 2c 31 34 31 3a 22 57 69 64 67 65 74 5f 55 70 64 61 74 65 45 6d 61 69 6c 22 2c 31 34 32 3a 22 57 69 64 67 65 74 5f 55 70 64 61 74 65 50 61 73 73 77 6f 72 64 22 2c 31 34 33 3a 22 57 69 64 67 65 74 73 52 6f 75 74 65 22 2c 31 34 34 3a 22 57 6f 72 6c 64 72 65 61 64 79 22 2c 31 34 35 3a 22 58 6f 6f 6d 5f 41 63 63 6f 75 6e 74 5f 4c 69 6e 6b 69 6e 67 5f 50 61 67 65 22 2c 31 34 36 3a 22 58 6f 6f 6d 5f 43 68 61 6e 67 65 50 61 73 73 77 6f 72 64 5f 53 74 61 72 74 54 65 6d 70 6c 61 74 65 22 2c 31 34 37 3a 22 58 6f 6f 6d 5f 45 6d 61 69 6c 54 65 6d 70 6c 61 74 65 22 2c 31 34 38 3a 22 58 6f 6f 6d Data Ascii: edBeneficiary",139:"Widget_ScaRoutes",140:"Widget_Security",141:"Widget_UpdateEmail",142:"Widget_UpdatePassword",143:"WidgetsRoute",144:"Worldready",145:"Xoom_Account_Linking_Page",146:"Xoom_ChangePassword_StartTemplate",147:"Xoom_EmailTemplate",148:"Xoom
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 35 31 3a 22 64 61 38 37 62 35 66 33 32 36 38 66 32 66 32 64 34 65 34 38 22 2c 35 32 3a 22 31 35 30 38 36 62 33 34 31 62 31 64 37 63 36 39 61 66 35 39 22 2c 35 33 3a 22 65 61 31 31 64 32 62 64 30 38 34 36 34 33 65 31 61 64 36 61 22 2c 35 34 3a 22 36 63 66 63 30 63 65 31 66 31 34 31 65 33 33 30 38 65 35 30 22 2c 35 35 3a 22 32 31 32 39 65 32 39 31 65 65 31 64 37 66 64 39 31 65 31 34 22 2c 35 36 3a 22 39 31 64 37 33 64 30 63 63 63 66 35 36 30 61 33 33 30 65 63 22 2c 35 37 3a 22 30 33 36 35 36 30 33 39 37 35 30 35 62 30 34 33 63 65 66 38 22 2c 35 38 3a 22 37 38 35 37 64 38 63 37 33 61 39 65 66 31 65 38 32 65 37 65 22 2c 35 39 3a 22 31 36 66 64 39 33 36 34 34 35 39 30 64 35 33 35 66 39 65 35 22 2c 36 30 3a 22 38 34 65 64 39 61 64 36 36 33 31 66 36 38 62 30 35 Data Ascii: 51:"da87b5f3268f2f2d4e48",52:"15086b341b1d7c69af59",53:"ea11d2bd084643e1ad6a",54:"6cfc0ce1f141e3308e50",55:"2129e291ee1d7fd91e14",56:"91d73d0cccf560a330ec",57:"036560397505b043cef8",58:"7857d8c73a9ef1e82e7e",59:"16fd93644590d535f9e5",60:"84ed9ad6631f68b05
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 63 22 2c 31 30 34 3a 22 31 38 64 61 32 36 38 66 37 38 30 66 34 35 64 38 32 63 35 32 22 2c 31 30 35 3a 22 33 64 34 33 62 32 31 35 63 33 65 33 30 33 62 34 33 65 39 38 22 2c 31 30 36 3a 22 35 63 62 30 34 34 37 66 32 38 33 38 37 63 32 61 30 35 33 65 22 2c 31 30 37 3a 22 30 61 38 37 65 30 32 66 30 61 33 63 62 33 38 36 31 39 65 62 22 2c 31 30 38 3a 22 34 33 62 62 34 35 33 35 39 62 32 61 35 33 37 39 32 30 62 31 22 2c 31 30 39 3a 22 30 32 62 64 31 38 39 33 36 64 37 37 37 33 31 61 34 36 64 63 22 2c 31 31 30 3a 22 61 35 35 39 39 32 62 39 66 63 39 64 65 65 37 61 35 62 31 34 22 2c 31 31 31 3a 22 38 65 66 31 63 61 36 31 30 33 31 62 35 30 61 31 39 63 36 63 22 2c 31 31 32 3a 22 34 30 36 65 62 36 39 39 66 61 35 63 65 61 33 30 36 38 64 38 22 2c 31 31 33 3a 22 63 64 66 66 Data Ascii: c",104:"18da268f780f45d82c52",105:"3d43b215c3e303b43e98",106:"5cb0447f28387c2a053e",107:"0a87e02f0a3cb38619eb",108:"43bb45359b2a537920b1",109:"02bd18936d77731a46dc",110:"a55992b9fc9dee7a5b14",111:"8ef1ca61031b50a19c6c",112:"406eb699fa5cea3068d8",113:"cdff
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 2c 31 35 38 3a 22 33 36 64 31 38 64 37 39 64 38 37 36 62 65 62 66 66 34 31 35 22 2c 31 35 39 3a 22 65 61 30 63 61 30 39 63 33 37 37 37 30 35 32 66 36 62 39 36 22 7d 5b 65 5d 2b 22 2e 6a 73 22 29 2c 74 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 29 72 65 74 75 72 6e 20 67 6c 6f 62 61 6c 54 68 69 73 3b 74 72 79 7b 72 65 74 75 72 6e 20 74 68 69 73 7c 7c 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 7d 63 61 74 63 68 28 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 7d 7d 28 29 2c 74 2e 6f 3d 28 65 2c 61 29 3d 3e 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 Data Ascii: ,158:"36d18d79d876bebff415",159:"ea0ca09c3777052f6b96"}[e]+".js"),t.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),t.o=(e,a)=>Object.protot
2024-04-26 12:23:11 UTC	999	IN	Data Raw: 6c 65 6e 67 74 68 2d 31 5d 2e 73 72 63 29 7d 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 75 74 6f 6d 61 74 69 63 20 70 75 62 6c 69 63 50 61 74 68 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 69 6e 20 74 68 69 73 20 62 72 6f 77 73 65 72 22 29 3b 65 3d 65 2e 72 65 70 6c 61 63 65 28 2f 23 2e 2a 24 2f 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 3f 2e 2a 24 2f 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2f 5b 5e 5c 2f 5d 2b 24 2f 2c 22 2f 22 29 2c 74 2e 70 3d 65 7d 29 28 29 2c 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 32 39 3a 30 7d 3b 74 2e 66 2e 6a 3d 28 61 2c 64 29 3d 3e 7b 76 61 72 20 63 3d 74 2e 6f 28 65 2c 61 29 3f 65 5b 61 5d 3a 76 6f 69 64 20 30 3b 69 66 28 30 21 3d 3d 63 29 69 66 28 63 29 64 2e 70 75 73 68 28 63 5b Data Ascii: length-1].src)}if(!e)throw new Error("Automatic publicPath is not supported in this browser");e=e.replace(/#.$/,"").replace(/\?.$/,"").replace(/\/[^\/]+$/,"/"),t.p=e})(),(()=>{var e={29:0};t.f.j=(a,d)=>{var c=t.o(e,a)?e[a]:void 0;if(0!==c)if(c)d.push(c[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49826	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:11 UTC	583	OUT	GET /paypal-ui/fonts/PayPalSansBig-Light.woff2 HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://id.venmo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:11 UTC	816	IN	HTTP/1.1 200 OK Connection: close Content-Length: 18360 Cache-Control: s-maxage=31536000, public,max-age=3600 Etag: "60271cda-47b8" Last-Modified: Sat, 13 Feb 2021 00:27:06 GMT Paypal-Debug-Id: bb1923b461c5a Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000bb1923b461c5a-45805bfe3cfd2c1a-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:11 GMT X-Served-By: cache-dfw-kdal2120125-DFW, cache-gnv1820023-GNV X-Cache: HIT, HIT X-Cache-Hits: 962, 0 X-Timer: S1714134191.205711,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * CONTENT-TYPE: application/font-woff2 Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 77 4f 46 32 4f 54 54 4f 00 00 47 b8 00 0c 00 00 00 00 7d c0 00 00 47 66 00 01 19 99 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0d 81 83 49 1a 52 1b cc 4a 1c 86 36 06 60 00 8c 34 01 36 02 24 03 8c 1c 04 06 05 88 19 07 20 1b e3 7c 35 6c 53 b0 59 bf db 06 40 73 6d 9f 85 cc 76 70 9c 87 8d 63 66 33 e8 4b 89 a0 26 35 9d fd ff a7 24 27 32 06 7b c1 b6 eb d5 b4 22 89 24 12 44 ce 4a ab 04 a7 bb 3d b7 39 8b f7 44 4e ac a3 5a 3d 51 64 e3 28 19 fb c8 ca 89 b3 2f 34 8c 32 9f 6c f2 fc cc 6c 92 70 e0 a6 6c ec 91 c7 ef f7 5d dc 7c b3 a0 53 6c c8 48 38 29 91 64 2c 91 21 6c 67 60 87 1a 7a 50 98 45 89 84 27 5d 15 4a a1 14 4a a3 4f 91 44 fa d2 25 32 9e 0c 8c 0a 44 5b f0 43 45 ea 50 4f 5c 61 fd 7d 7f 17 d7 0b f6 97 2f d4 a8 a1 48 50 a4 01 0d 7f e2 33 c0 1d 26 Data Ascii: wOF2OTTOG}GfIRJ6`46$ \|5lSY@smvpcf3K&5$'2{"$DJ=9DNZ=Qd(/42llpl]\|SlH8)d,!lg`zPE']JJOD%2D[CEPO\a}/HP3&
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 23 14 bf 4d 46 be 2d 49 cb 3d d1 c6 7b 6e 68 0b f7 69 fd 8a fb 42 80 01 2b ec a3 1f f1 48 3c 4d 3e 55 40 2e c9 76 1a ce ad a4 b6 d2 f1 2a 49 23 75 07 39 35 27 21 8a 99 e2 37 48 a6 39 21 a8 4c d3 95 58 d0 16 46 7d 92 51 94 58 59 a4 e2 5f 86 68 04 4c 82 b7 0c 04 24 90 5b 38 48 3c cc 52 bc 5e 47 c5 15 21 48 41 08 52 2c f9 59 9b a3 27 32 b5 94 23 55 6a ac 48 4d e8 83 f4 48 93 9a 18 c2 3e a6 25 d7 e4 6c 74 ec 52 a9 27 3d e1 13 fe 20 4f fa 11 1d d1 11 dd 9a 6e 44 4f f4 c4 6e ed 2e 45 61 84 26 0a 54 39 d7 dc 00 28 49 55 21 98 7c 07 40 ae 9c 79 a3 f3 ac cc 88 b2 8d 84 e9 ac 3f 49 2a d1 64 95 5a 0e 39 4c a7 53 90 57 40 66 28 aa 84 59 bc 06 79 e8 2e a6 68 2a 24 fd d6 98 8c 75 03 a6 d2 09 9c 32 6f e7 d3 e1 14 32 4e 90 3a 12 4f ca f7 bc 0f ff 25 aa 09 51 f8 ac 49 fc Data Ascii: #MF-I={nhiB+H<M>U@.vI#u95'!7H9!LXF}QXY_hL$[8H<R^G!HAR,Y'2#UjHMH>%ltR'= OnDOn.Ea&T9(IU!\|@y?IdZ9LSW@f(Yy.h*$u2o2N:O%QI
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 1f 3a af 20 73 7a 99 42 04 4b a4 5f 07 5b ab 16 63 1c 1e aa ed 6d 1a 22 76 53 fd 33 be 36 e5 58 9e ec 70 08 61 76 27 52 9a 67 5a f2 ac 3c 40 5f 42 5a ab c4 1f e8 93 c2 97 62 2f de e4 fd 6e 97 46 99 d4 47 7c a4 47 50 04 49 b1 7a 37 a2 aa 03 63 72 fd a3 b6 84 f6 a3 8a 74 8d f5 5a 8a a0 71 02 de 3c a1 54 25 74 44 b4 29 59 ba 1f 56 f5 55 dc 20 52 bf 87 cf 7c 73 1c 9c 8f 5a c7 3a c7 d8 96 b5 be bf a8 c9 32 d9 47 0f a7 6a bb 85 a5 45 f0 c5 ec dc ba ea 38 08 de dd 04 89 1d df da 58 2f c3 0a 06 4b 0b 4c 42 13 15 e4 d1 56 c3 a0 20 1f a6 dd 72 f0 61 bb 58 94 83 47 93 5f a3 49 61 38 69 20 22 0e f1 a0 81 80 70 84 81 46 02 e3 19 47 1a 89 0c f3 a5 eb 43 6b 2d 9d 66 53 b3 38 63 49 71 4e e0 45 38 8e 8b 00 07 58 5f 6c b3 4e 27 9a 79 3d bb fb 13 8d 6c ae 11 52 b0 06 11 55 Data Ascii: : szBK_[cm"vS36Xpav'RgZ<@_BZb/nFG\|GPIz7crtZq<T%tD)YVU R\|sZ:2GjE8X/KLBV raXG_Ia8i "pFGCk-fS8cIqNE8X_lN'y=lRU
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: c1 3e 36 c3 1f 96 c6 99 53 a4 98 49 d3 16 d9 a8 32 2a a8 32 7b 6d 6d ef 60 e6 1e f6 a2 c8 62 4a 2e 85 4b 38 fd df 15 2c 60 c2 e9 16 b3 b4 59 57 b2 fa b5 6c db 0e cd 0b 59 1f 2f 64 25 c2 d1 84 d0 59 1f 8d 87 78 c6 07 a7 f3 0e d6 76 ba 19 67 8e 27 33 3b 41 fe 50 22 51 b7 22 89 21 91 b4 8a 10 9f 9b e8 85 51 5e 0d 68 5a 07 75 47 cf 1d e0 27 d3 cd b7 ca e1 de ea 70 0b ad 72 f2 93 75 bf 4b 6d f1 aa 2f f2 11 56 56 df 2b a9 6c 35 ca 39 fc 2f b1 56 b7 ea 49 bd ab 1f 55 1a 65 ee a3 4b 45 12 63 4a 4b bc 19 c9 42 ae e6 6d 3e 67 63 04 8b 21 c6 20 96 38 e2 27 96 21 4f 29 8b 56 5e fd a6 2d bb ea ae e7 de fb a1 28 4b 72 ce 2d f7 3c f3 1e 32 a2 b0 63 d7 d1 0b 6f 7d f2 d5 2f 41 b6 2d f4 ee b7 f6 6f 61 6b 3a bf 1b da de bd 3d d1 ab 7d ad 1f f7 87 81 b9 1f ea 30 27 6e 78 23 Data Ascii: >6SI2*2{mm`bJ.K8,`YWlY/d%Yxvg'3;AP"Q"!Q^hZuG'pruKm/VV+l59/VIUeKEcJKBm>gc! 8'!O)V^-(Kr-<2co}/A-oak:=}0'nx#
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: fe 65 99 98 78 fb 31 27 39 ac 34 9d 87 55 39 da 94 ba d5 45 ad a5 dd da d0 53 64 69 99 0b 88 f0 90 81 af 41 41 19 32 01 37 f4 ba 0f b9 9f 00 fe a1 6f 17 69 b0 1d 47 e1 d1 8e e7 17 5d bc 43 ff d3 7f 82 28 4a e6 e7 e8 da 11 78 1a a7 89 b9 d4 a7 e9 82 37 ff 6f 5c 00 55 01 ae 17 88 cd a7 88 95 e7 e2 b9 f5 4f 23 f3 4e 4f 83 23 8f 5b 10 15 e0 58 4e 03 cc 86 e1 83 86 e3 e2 b0 2d 4d 7f 1d fa fb a6 56 e2 eb d0 a1 3c 01 d3 e5 20 bd bc 2f 5b d7 c1 96 e1 eb 12 82 e2 70 0d 98 87 16 74 10 7d dc 41 87 4a 4e a6 8e c0 e6 09 65 10 bc f0 07 7a ea ef 6e a9 d4 94 fa a4 4e 2b 58 22 a5 95 d3 87 4a c8 d8 63 11 ab fe f1 ff 27 51 cd 66 d7 da ef 65 a9 9c 45 b4 d7 49 b6 cb 0c b2 b7 e5 82 cf 16 6f 9d c0 37 37 b6 5f 7d 4a 35 10 3f af ac a8 6a 43 19 4d 75 c2 b0 0c f2 58 8c ba 83 cb 5e Data Ascii: ex1'94U9ESdiAA27oiG]C(Jx7o\UO#NO#[XN-MV< /[pt}AJNeznN+X"Jc'QfeEIo77_}J5?jCMuX^
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: bf a7 98 83 4b f2 cf df 7d a1 28 28 0a f8 74 5b 68 30 dd 77 6e 42 f3 a1 5b 28 25 8c 6d bb 3d 79 f8 c2 cc 9d 2f 45 1c ee e8 37 9e b9 74 d7 e9 95 f3 98 b1 f6 14 dd 63 64 a9 14 91 45 3f f2 75 e6 3f 86 1f e9 0f 69 66 34 45 ec 78 90 d8 73 a0 a6 a9 07 47 10 9d 04 c3 f3 4d 9b 13 53 cb 6e 46 5d b6 93 19 93 83 d3 b3 04 8b 78 36 38 1f 2d 1c 74 a1 32 4d 67 5b fb a3 1f 89 6c 59 99 24 f1 30 5c a1 53 f3 b2 48 be e9 62 42 97 b9 af d8 cc 6f a3 21 0b 93 80 1a e8 bc 1e ef fe 67 f2 26 11 9e 85 89 d5 ad e9 1a a6 70 8f b0 3e 43 08 f3 c2 e8 72 77 09 39 93 cc eb d8 6b b7 d3 6b fb e7 97 71 03 dd 15 d3 53 b4 c2 50 a6 1a b8 b5 8c b9 83 93 a7 51 6a e7 a8 44 60 a4 33 32 c6 1a 55 bc 64 84 5b 94 9d de 55 6c 4d b8 84 a6 73 8b 97 97 e0 73 52 80 c7 4d d2 cc f3 2c 31 0a 86 34 b6 d1 13 34 Data Ascii: K}((t[h0wnB[(%m=y/E7tcdE?u?if4ExsGMSnF]x68-t2Mg[lY$0\SHbBo!g&p>Crw9kkqSPQjD`32Ud[UlMssRM,144
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 02 23 20 08 fd f3 43 3c 0a bc cb 11 4b 15 2b a2 2d 80 55 f9 53 0f 5b b5 ae f3 89 5e 1a 0c d1 b0 a7 7a 98 41 ca 55 7d f7 00 8d 85 12 15 d1 63 20 16 aa ec 9b b1 1e f2 85 07 08 43 69 54 0c 54 c3 36 6d 6a 53 dc 09 54 ef 30 d7 19 68 be d1 ea cb 0c 54 7f c3 b2 bb 26 05 0e a9 39 43 cd 58 a9 be c4 60 f5 58 29 1e 53 9e a1 7f cb e8 33 e6 f0 da b4 60 9c ad 15 aa fd d5 92 5b 6f b7 d4 d8 ec e8 18 ce 1a 94 98 9f 0c ba 27 b9 e6 f0 36 69 54 55 e3 b6 c6 1a d1 d1 59 63 8e 23 94 43 1a 54 fe 77 ae d9 b6 f6 82 fd 0d c1 1c d7 f6 4e 35 aa 80 5f 54 fc 8f f6 ad 14 f4 e4 ee 69 71 88 72 3c f0 01 e7 e5 74 23 56 9f ee cd 4b 78 ab 54 a8 47 83 cf fd 39 bc 5f 7e 5e 12 ca c4 55 8b da 6b da 40 de 77 ea 70 ec d0 06 15 7d 40 3b bc 1f 65 8d 8e d1 6e a5 b6 69 a3 ea 96 a4 e6 26 27 1a 4d 99 c8 Data Ascii: # C<K+-US[^zAU}c CiTT6mjST0hT&9CX`X)S3`[o'6iTUYc#CTwN5_Tiqr<t#VKxTG9_~^Uk@wp}@;eni&'M
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: c3 c7 bd 8c 01 9b f4 b4 5e 26 f1 51 06 24 4e 13 d3 06 6a 1f 8b 09 a2 94 cf 56 b2 a6 b1 8a 74 1c cf fa 20 d2 08 cd 26 c6 a9 32 63 c9 c1 b1 72 70 55 a9 51 f7 d8 f3 38 2b c5 c6 6a 42 9c 4a 40 53 4e ae 93 93 a3 e2 51 35 97 da 9e 46 21 d8 fa ed 53 97 66 6f d3 91 bc 5f 00 4a d4 59 d7 7d 7b 62 22 47 37 59 3f 17 6d 73 f3 98 ba 70 00 ff 02 65 9b 56 83 eb 85 05 30 b1 78 f0 2d 83 8d c6 94 1f 52 34 a6 7e c3 e0 0e 14 8f 07 7b 1d 5c 7c e3 6e 3f 45 1c 8e ee e7 2c 87 3d a7 cc 13 b4 c8 23 b8 c8 6c 6a 17 61 92 81 b9 c2 2b 50 89 26 7a 7e 11 2f 52 a2 24 1c 69 0a f4 82 ba fc 26 d5 1a b5 f4 99 c5 0b 86 ee 4d a5 49 83 56 79 e2 f2 75 b0 6f 45 61 6a 2f 2e 32 b9 ed 13 2b a5 80 9e 83 14 46 45 ae 69 55 cb e4 b8 38 39 eb b0 cc 3d e4 2b 94 dc 4b 5a a0 5e 9c 40 bc d5 6d b4 e1 e8 b3 0a Data Ascii: ^&Q$NjVt &2crpUQ8+jBJ@SNQ5F!Sfo_JY}{b"G7Y?mspeV0x-R4~{\\|n?E,=#lja+P&z~/R$i&MIVyuoEaj/.2+FEiU89=+KZ^@m
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 51 37 36 2a 48 07 b7 cd 5a d9 a9 18 66 30 ae 08 11 bf bc 55 84 bc b3 d5 d8 d4 86 f2 cd e4 be e2 3c 25 08 69 38 f5 e0 c1 f2 f2 69 4f 6f 5e 66 6b 05 dc d4 47 6a 52 02 42 32 8b 13 11 a7 17 9f 87 3c a9 d6 f4 80 46 1d 59 d8 d7 3f 43 5d 2e 39 f6 ad 8d 50 87 af 06 7f ab 8e 3a c4 01 99 af af f0 9d 24 41 ac 26 4d 65 c0 ea 3d 50 d6 5d 8e c9 a6 f3 a3 4c ef f8 a7 1a 6f 99 29 c7 a0 14 09 6a 05 6c d1 e5 ea 2c 38 e4 be 0a 86 1e 1a aa e6 2c 88 1e 00 0e bd ef e6 b4 45 96 ab e5 a0 d8 86 d8 d1 76 8f 7c a3 6a fd de a9 7a f0 ed 5f 8e 1c bd 7a 79 6b 55 a6 9d 9d 29 dd 5a 8c ce cd 0e 8f cc 2e 0c 09 b8 7b 84 82 30 ac ca 84 17 cf 1b 73 4a 13 63 29 a9 3d 99 62 93 68 3a 8c e5 fc f7 d0 31 c9 b7 4e 0b 80 c8 52 4f 06 be 78 ef 9c ee 62 3c eb e3 4a 2a 4e 5a e3 35 0c 82 9b 3b 26 ce ae 70 Data Ascii: Q76HZf0U<%i8iOo^fkGjRB2<FY?C].9P:$A&Me=P]Lo)jl,8,Ev\|jz_zykU)Z.{0sJc)=bh:1NROxb<JNZ5;&p
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 99 d5 8a 5f 2c 02 d4 93 75 16 56 a4 5d 61 ed a2 f3 a5 51 17 47 6f 99 cf 38 1f 7b 73 64 61 21 60 33 21 a1 e6 82 c9 34 32 7a ec 60 d7 d1 81 fe dc c4 41 54 c6 35 29 09 96 89 f1 f2 43 1b fe 66 67 20 16 7e ce 20 a3 de 46 d2 a0 70 9e 75 80 8b a4 eb 43 53 21 2f c9 d2 84 bc 07 68 31 96 3c 75 1c 00 3d d5 52 07 b8 58 62 73 76 c5 88 be 62 d1 6f 9e 33 07 96 d7 64 e1 14 9c 33 bf a9 a4 16 c0 ed 8b 1b 74 d8 7e 1f 35 b6 47 25 01 63 9c 8e d1 56 a7 54 5b 76 97 37 b7 40 67 80 73 13 74 e8 43 98 72 33 30 3e 26 25 14 28 67 c7 f2 46 6a 0a c4 b9 28 fa d8 28 95 0c 50 b8 39 ea 1c 00 63 d5 c0 3a 35 0b 0e 07 a5 9d 73 1f 49 8c 8b 52 4a 5c a3 8d ea a9 dd 95 00 9f 4e 28 e6 7a cb 20 ab b5 96 e6 b0 7c 08 70 4d b2 6c 7d d3 8e f7 d3 0d 4b f7 71 1a c4 8f 17 8a 83 41 72 8b de b5 9b 7a d6 b5 Data Ascii: _,uV]aQGo8{sda!`3!42z`AT5)Cfg ~ FpuCS!/h1<u=RXbsvbo3d3t~5G%cVT[v7@gstCr30>&%(gFj((P9c:5sIRJ\N(z \|pMl}KqArz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49829	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:11 UTC	552	OUT	GET /ice/vendor0.267c78b402a2d355f293.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:11 UTC	852	IN	HTTP/1.1 200 OK Connection: close Content-Length: 62614 Cache-Control: s-maxage=31536000, public,max-age=86400 Content-Type: application/javascript Etag: "66064785-f496" Last-Modified: Fri, 29 Mar 2024 04:45:57 GMT Paypal-Debug-Id: 04d80c8e2e5a8 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000004d80c8e2e5a8-d039168699804c97-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:11 GMT X-Served-By: cache-dfw-kdal2120066-DFW, cache-gnv1820024-GNV X-Cache: HIT, MISS X-Cache-Hits: 3, 0 X-Timer: S1714134191.204779,VS0,VE25 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 30 5d 2c 7b 35 36 35 37 33 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 76 61 72 20 72 3d 6e 28 33 34 31 35 35 29 3b 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 64 66 70 2d 70 61 79 70 61 6c 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 39 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 Data Ascii: (self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[0],{56573:(t,e,n)=>{var r=n(34155);/! For license information please see dfp-paypal.js.LICENSE.txt /(()=>{var e={98:function(t,e){var n="undefined"!=typeof
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 74 29 3f 74 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 61 70 70 65 6e 64 28 74 5b 30 5d 2c 74 5b 31 5d 29 7d 29 2c 74 68 69 73 29 3a 74 26 26 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 28 74 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 61 70 70 65 6e 64 28 65 2c 74 5b 65 5d 29 7d 29 2c 74 68 69 73 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 74 29 7b 69 66 28 74 2e 62 6f 64 79 55 73 65 64 29 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 6c 72 65 61 64 79 20 72 65 61 64 22 29 29 3b 74 2e 62 6f 64 79 55 73 65 64 3d 21 30 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 74 29 7b 72 65 74 75 72 6e 20 Data Ascii: t)?t.forEach((function(t){this.append(t[0],t[1])}),this):t&&Object.getOwnPropertyNames(t).forEach((function(e){this.append(e,t[e])}),this)}function h(t){if(t.bodyUsed)return Promise.reject(new TypeError("Already read"));t.bodyUsed=!0}function _(t){return
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 66 28 74 29 26 26 74 68 69 73 2e 68 65 61 64 65 72 73 2e 73 65 74 28 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 29 29 7d 2c 6f 26 26 28 74 68 69 73 2e 62 6c 6f 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 68 28 74 68 69 73 29 3b 69 66 28 74 29 72 65 74 75 72 6e 20 74 3b 69 66 28 74 68 69 73 2e 5f 62 6f 64 79 42 6c 6f 62 29 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 74 68 69 73 2e 5f 62 6f 64 79 42 6c 6f 62 29 3b 69 66 28 74 68 69 73 2e 5f 62 6f 64 79 41 72 72 61 79 42 75 66 66 65 72 29 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6e 65 77 20 42 6c Data Ascii: f(t)&&this.headers.set("content-type","application/x-www-form-urlencoded;charset=UTF-8"))},o&&(this.blob=function(){var t=h(this);if(t)return t;if(this._bodyBlob)return Promise.resolve(this._bodyBlob);if(this._bodyArrayBuffer)return Promise.resolve(new Bl
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 70 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 63 28 74 29 29 7d 2c 70 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 68 69 73 2e 6d 61 70 5b 63 28 74 29 5d 3d 6c 28 65 29 7d 2c 70 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 68 69 73 2e 6d 61 70 29 74 68 69 73 2e 6d 61 70 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6e 29 26 26 74 2e 63 61 6c 6c 28 65 2c 74 68 69 73 2e 6d 61 70 5b 6e 5d 2c 6e 2c 74 68 69 73 29 7d 2c 70 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 5b 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e Data Ascii: p.hasOwnProperty(c(t))},p.prototype.set=function(t,e){this.map[c(t)]=l(e)},p.prototype.forEach=function(t,e){for(var n in this.map)this.map.hasOwnProperty(n)&&t.call(e,this.map[n],n,this)},p.prototype.keys=function(){var t=[];return this.forEach((function
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 69 6d 28 29 2e 73 70 6c 69 74 28 22 26 22 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 29 7b 76 61 72 20 6e 3d 74 2e 73 70 6c 69 74 28 22 3d 22 29 2c 72 3d 6e 2e 73 68 69 66 74 28 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2b 2f 67 2c 22 20 22 29 2c 6f 3d 6e 2e 6a 6f 69 6e 28 22 3d 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2b 2f 67 2c 22 20 22 29 3b 65 2e 61 70 70 65 6e 64 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 72 29 2c 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6f 29 29 7d 7d 29 29 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 77 28 74 2c 65 29 7b 65 7c 7c 28 65 3d 7b 7d 29 2c 74 68 69 73 2e 74 79 70 65 3d 22 64 65 66 61 75 6c 74 22 2c 74 68 69 73 2e 73 74 61 74 75 73 3d 76 6f 69 64 20 30 3d 3d 3d 65 2e Data Ascii: im().split("&").forEach((function(t){if(t){var n=t.split("="),r=n.shift().replace(/\+/g," "),o=n.join("=").replace(/\+/g," ");e.append(decodeURIComponent(r),decodeURIComponent(o))}})),e}function w(t,e){e\|\|(e={}),this.type="default",this.status=void 0===e.
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 52 65 71 75 65 73 74 3b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 61 2e 61 62 6f 72 74 28 29 7d 61 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 2c 6e 3d 7b 73 74 61 74 75 73 3a 61 2e 73 74 61 74 75 73 2c 73 74 61 74 75 73 54 65 78 74 3a 61 2e 73 74 61 74 75 73 54 65 78 74 2c 68 65 61 64 65 72 73 3a 28 74 3d 61 2e 67 65 74 41 6c 6c 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 73 28 29 7c 7c 22 22 2c 65 3d 6e 65 77 20 70 2c 74 2e 72 65 70 6c 61 63 65 28 2f 5c 72 3f 5c 6e 5b 5c 74 20 5d 2b 2f 67 2c 22 20 22 29 2e 73 70 6c 69 74 28 2f 5c 72 3f 5c 6e 2f 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 2e 73 70 6c 69 74 28 22 3a 22 29 2c 72 3d 6e 2e 73 68 69 66 74 28 29 2e 74 72 69 6d 28 29 3b Data Ascii: Request;function s(){a.abort()}a.onload=function(){var t,e,n={status:a.status,statusText:a.statusText,headers:(t=a.getAllResponseHeaders()\|\|"",e=new p,t.replace(/\r?\n[\t ]+/g," ").split(/\r?\n/).forEach((function(t){var n=t.split(":"),r=n.shift().trim();
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 6f 2e 52 65 73 70 6f 6e 73 65 2c 74 2e 65 78 70 6f 72 74 73 3d 65 7d 2c 32 38 37 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 74 2e 65 78 70 6f 72 74 73 3d 6e 28 32 33 32 29 7d 2c 32 33 32 3a 74 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 7b 5f 65 6e 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 65 6e 76 2e 44 45 50 4c 4f 59 5f 45 4e 56 7d 2c 69 73 44 65 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 5f 65 6e 76 28 29 3b 72 65 74 75 72 6e 21 28 21 74 7c 7c 21 2f 64 65 76 2f 69 2e 74 65 73 74 28 74 29 29 7c 7c 21 74 7d 2c 69 73 4e 6f 74 44 65 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 74 68 69 73 2e 69 73 44 65 76 28 29 7d 2c 69 73 54 65 73 74 3a 66 75 6e 63 74 69 6f Data Ascii: o.Response,t.exports=e},287:(t,e,n)=>{t.exports=n(232)},232:t=>{"use strict";t.exports={_env:function(){return r.env.DEPLOY_ENV},isDev:function(){const t=this._env();return!(!t\|\|!/dev/i.test(t))\|\|!t},isNotDev:function(){return!this.isDev()},isTest:functio
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 29 3d 3e 74 2e 64 65 66 61 75 6c 74 3a 28 29 3d 3e 74 3b 72 65 74 75 72 6e 20 6f 2e 64 28 65 2c 7b 61 3a 65 7d 29 2c 65 7d 2c 6f 2e 64 3d 28 74 2c 65 29 3d 3e 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 6f 2e 6f 28 65 2c 6e 29 26 26 21 6f 2e 6f 28 74 2c 6e 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6e 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 65 5b 6e 5d 7d 29 7d 2c 6f 2e 6f 3d 28 74 2c 65 29 3d 3e 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 65 29 2c 6f 2e 72 3d 74 3d 3e 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 26 26 4f 62 6a Data Ascii: )=>t.default:()=>t;return o.d(e,{a:e}),e},o.d=(t,e)=>{for(var n in e)o.o(e,n)&&!o.o(t,n)&&Object.defineProperty(t,n,{enumerable:!0,get:e[n]})},o.o=(t,e)=>Object.prototype.hasOwnProperty.call(t,e),o.r=t=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Obj
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 5d 3a 76 6f 69 64 20 30 7d 28 72 2c 22 73 63 72 69 70 74 55 72 6c 50 61 74 74 65 72 6e 22 29 29 26 26 76 6f 69 64 20 30 21 3d 3d 6f 3f 6f 3a 22 68 74 74 70 73 3a 2f 2f 66 70 6e 70 6d 63 64 6e 2e 6e 65 74 2f 76 3c 76 65 72 73 69 6f 6e 3e 2f 3c 61 70 69 4b 65 79 3e 2f 6c 6f 61 64 65 72 5f 76 3c 6c 6f 61 64 65 72 56 65 72 73 69 6f 6e 3e 2e 6a 73 22 3b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 73 7c 7c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 73 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 50 49 20 6b 65 79 20 72 65 71 75 69 72 65 64 22 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 76 61 72 20 6f 3d 5b 5d 3b 72 65 74 75 Data Ascii: ]:void 0}(r,"scriptUrlPattern"))&&void 0!==o?o:"https://fpnpmcdn.net/v<version>/<apiKey>/loader_v<loaderVersion>.js";return Promise.resolve().then((function(){if(!s\|\|"string"!=typeof s)throw new Error("API key required");return function(t,r){var o=[];retu
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 74 29 3f 74 3a 5b 74 5d 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 3b 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 2f 3c 5b 5e 3c 3e 5d 2b 3e 2f 67 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 3c 76 65 72 73 69 6f 6e 3e 22 3d 3d 3d 74 3f 22 33 22 3a 22 3c 61 70 69 4b 65 79 3e 22 3d 3d 3d 74 3f 6e 28 65 29 3a 22 3c 6c 6f 61 64 65 72 56 65 72 73 69 6f 6e 3e 22 3d 3d 3d 74 3f 6e 28 22 33 2e 38 2e 35 22 29 3a 74 7d 29 29 7d 28 53 74 72 69 6e 67 28 74 29 2c 65 29 7d 29 29 7d 28 66 2c 73 29 2c 61 29 2e 63 61 74 63 68 28 63 29 7d 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b Data Ascii: t)?t:[t]).map((function(t){return function(t,e){var n=encodeURIComponent;return t.replace(/<[^<>]+>/g,(function(t){return"<version>"===t?"3":"<apiKey>"===t?n(e):"<loaderVersion>"===t?n("3.8.5"):t}))}(String(t),e)}))}(f,s),a).catch(c)})).then((function(e){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49832	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:11 UTC	552	OUT	GET /ice/vendor1.2558024aca1e717b5875.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:11 UTC	856	IN	HTTP/1.1 200 OK Connection: close Content-Length: 91751 Cache-Control: s-maxage=31536000, public,max-age=86400 Content-Type: application/javascript Etag: "66064785-16667" Last-Modified: Fri, 29 Mar 2024 04:45:57 GMT Paypal-Debug-Id: 48a63eb6a11ec Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000048a63eb6a11ec-4e556eb361762526-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:11 GMT X-Served-By: cache-dfw-kdal2120137-DFW, cache-pdk-kpdk1780145-PDK X-Cache: HIT, HIT X-Cache-Hits: 7, 0 X-Timer: S1714134191.208890,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 5d 2c 7b 33 36 35 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 72 3d 6e 28 33 32 37 39 32 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 74 68 69 73 2e 6d 6f 64 65 3d 72 2e 4d 4f 44 45 5f 38 42 49 54 5f 42 59 54 45 2c 74 68 69 73 2e 64 61 74 61 3d 65 7d 6f 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 67 65 74 4c 65 6e 67 74 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 64 61 74 61 2e 6c 65 6e 67 74 68 7d 2c 77 72 69 74 65 3a 66 75 6e 63 74 Data Ascii: (self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[1],{3655:(e,t,n)=>{var r=n(32792);function o(e){this.mode=r.MODE_8BIT_BYTE,this.data=e}o.prototype={getLength:function(e){return this.data.length},write:funct
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 72 65 74 75 72 6e 20 74 68 69 73 3b 66 6f 72 28 76 61 72 20 74 3d 72 2e 67 6c 6f 67 28 74 68 69 73 2e 67 65 74 28 30 29 29 2d 72 2e 67 6c 6f 67 28 65 2e 67 65 74 28 30 29 29 2c 6e 3d 6e 65 77 20 41 72 72 61 79 28 74 68 69 73 2e 67 65 74 4c 65 6e 67 74 68 28 29 29 2c 69 3d 30 3b 69 3c 74 68 69 73 2e 67 65 74 4c 65 6e 67 74 68 28 29 3b 69 2b 2b 29 6e 5b 69 5d 3d 74 68 69 73 2e 67 65 74 28 69 29 3b 66 6f 72 28 69 3d 30 3b 69 3c 65 2e 67 65 74 4c 65 6e 67 74 68 28 29 3b 69 2b 2b 29 6e 5b 69 5d 5e 3d 72 2e 67 65 78 70 28 72 2e 67 6c 6f 67 28 65 2e 67 65 74 28 69 29 29 2b 74 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 6f 28 6e 2c 30 29 2e 6d 6f 64 28 65 29 7d 7d 2c 65 2e 65 78 70 6f 72 74 73 3d 6f 7d 2c 31 34 34 35 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 72 Data Ascii: return this;for(var t=r.glog(this.get(0))-r.glog(e.get(0)),n=new Array(this.getLength()),i=0;i<this.getLength();i++)n[i]=this.get(i);for(i=0;i<e.getLength();i++)n[i]^=r.gexp(r.glog(e.get(i))+t);return new o(n,0).mod(e)}},e.exports=o},14450:(e,t,n)=>{var r
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 50 72 6f 62 65 50 61 74 74 65 72 6e 28 30 2c 30 29 2c 74 68 69 73 2e 73 65 74 75 70 50 6f 73 69 74 69 6f 6e 50 72 6f 62 65 50 61 74 74 65 72 6e 28 74 68 69 73 2e 6d 6f 64 75 6c 65 43 6f 75 6e 74 2d 37 2c 30 29 2c 74 68 69 73 2e 73 65 74 75 70 50 6f 73 69 74 69 6f 6e 50 72 6f 62 65 50 61 74 74 65 72 6e 28 30 2c 74 68 69 73 2e 6d 6f 64 75 6c 65 43 6f 75 6e 74 2d 37 29 2c 74 68 69 73 2e 73 65 74 75 70 50 6f 73 69 74 69 6f 6e 41 64 6a 75 73 74 50 61 74 74 65 72 6e 28 29 2c 74 68 69 73 2e 73 65 74 75 70 54 69 6d 69 6e 67 50 61 74 74 65 72 6e 28 29 2c 74 68 69 73 2e 73 65 74 75 70 54 79 70 65 49 6e 66 6f 28 65 2c 74 29 2c 74 68 69 73 2e 74 79 70 65 4e 75 6d 62 65 72 3e 3d 37 26 26 74 68 69 73 2e 73 65 74 75 70 54 79 70 65 4e 75 6d 62 65 72 28 65 29 2c 6e 75 6c Data Ascii: ProbePattern(0,0),this.setupPositionProbePattern(this.moduleCount-7,0),this.setupPositionProbePattern(0,this.moduleCount-7),this.setupPositionAdjustPattern(),this.setupTimingPattern(),this.setupTypeInfo(e,t),this.typeNumber>=7&&this.setupTypeNumber(e),nul
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 73 2e 74 79 70 65 4e 75 6d 62 65 72 29 2c 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 65 5b 74 5d 2c 6f 3d 65 5b 6e 5d 3b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 2e 6d 6f 64 75 6c 65 73 5b 72 5d 5b 6f 5d 29 66 6f 72 28 76 61 72 20 69 3d 2d 32 3b 69 3c 3d 32 3b 69 2b 2b 29 66 6f 72 28 76 61 72 20 75 3d 2d 32 3b 75 3c 3d 32 3b 75 2b 2b 29 74 68 69 73 2e 6d 6f 64 75 6c 65 73 5b 72 2b 69 5d 5b 6f 2b 75 5d 3d 2d 32 3d 3d 69 7c 7c 32 3d 3d 69 7c 7c 2d 32 3d 3d 75 7c 7c 32 3d 3d 75 7c 7c 30 3d 3d 69 26 26 30 3d 3d 75 7d 7d 2c 6c 2e 73 65 74 75 70 54 79 70 65 4e 75 6d 62 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 61 2e Data Ascii: s.typeNumber),t=0;t<e.length;t++)for(var n=0;n<e.length;n++){var r=e[t],o=e[n];if(null==this.modules[r][o])for(var i=-2;i<=2;i++)for(var u=-2;u<=2;u++)this.modules[r+i][o+u]=-2==i\|\|2==i\|\|-2==u\|\|2==u\|\|0==i&&0==u}},l.setupTypeNumber=function(e){for(var t=a.
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 64 65 2c 65 29 29 2c 63 2e 77 72 69 74 65 28 75 29 7d 76 61 72 20 66 3d 30 3b 66 6f 72 28 6c 3d 30 3b 6c 3c 72 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 66 2b 3d 72 5b 6c 5d 2e 64 61 74 61 43 6f 75 6e 74 3b 69 66 28 75 2e 67 65 74 4c 65 6e 67 74 68 49 6e 42 69 74 73 28 29 3e 38 2a 66 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 63 6f 64 65 20 6c 65 6e 67 74 68 20 6f 76 65 72 66 6c 6f 77 2e 20 28 22 2b 75 2e 67 65 74 4c 65 6e 67 74 68 49 6e 42 69 74 73 28 29 2b 22 3e 22 2b 38 2a 66 2b 22 29 22 29 3b 66 6f 72 28 75 2e 67 65 74 4c 65 6e 67 74 68 49 6e 42 69 74 73 28 29 2b 34 3c 3d 38 2a 66 26 26 75 2e 70 75 74 28 30 2c 34 29 3b 75 2e 67 65 74 4c 65 6e 67 74 68 49 6e 42 69 74 73 28 29 25 38 21 3d 30 3b 29 75 2e 70 75 74 42 69 74 28 21 31 29 3b 66 6f 72 28 Data Ascii: de,e)),c.write(u)}var f=0;for(l=0;l<r.length;l++)f+=r[l].dataCount;if(u.getLengthInBits()>8f)throw new Error("code length overflow. ("+u.getLengthInBits()+">"+8f+")");for(u.getLengthInBits()+4<=8*f&&u.put(0,4);u.getLengthInBits()%8!=0;)u.putBit(!1);for(
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 31 32 5d 2c 5b 32 2c 38 36 2c 36 38 5d 2c 5b 34 2c 34 33 2c 32 37 5d 2c 5b 34 2c 34 33 2c 31 39 5d 2c 5b 34 2c 34 33 2c 31 35 5d 2c 5b 32 2c 39 38 2c 37 38 5d 2c 5b 34 2c 34 39 2c 33 31 5d 2c 5b 32 2c 33 32 2c 31 34 2c 34 2c 33 33 2c 31 35 5d 2c 5b 34 2c 33 39 2c 31 33 2c 31 2c 34 30 2c 31 34 5d 2c 5b 32 2c 31 32 31 2c 39 37 5d 2c 5b 32 2c 36 30 2c 33 38 2c 32 2c 36 31 2c 33 39 5d 2c 5b 34 2c 34 30 2c 31 38 2c 32 2c 34 31 2c 31 39 5d 2c 5b 34 2c 34 30 2c 31 34 2c 32 2c 34 31 2c 31 35 5d 2c 5b 32 2c 31 34 36 2c 31 31 36 5d 2c 5b 33 2c 35 38 2c 33 36 2c 32 2c 35 39 2c 33 37 5d 2c 5b 34 2c 33 36 2c 31 36 2c 34 2c 33 37 2c 31 37 5d 2c 5b 34 2c 33 36 2c 31 32 2c 34 2c 33 37 2c 31 33 5d 2c 5b 32 2c 38 36 2c 36 38 2c 32 2c 38 37 2c 36 39 5d 2c 5b 34 2c 36 39 2c Data Ascii: 12],[2,86,68],[4,43,27],[4,43,19],[4,43,15],[2,98,78],[4,49,31],[2,32,14,4,33,15],[4,39,13,1,40,14],[2,121,97],[2,60,38,2,61,39],[4,40,18,2,41,19],[4,40,14,2,41,15],[2,146,116],[3,58,36,2,59,37],[4,36,16,4,37,17],[4,36,12,4,37,13],[2,86,68,2,87,69],[4,69,
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 38 5d 2c 5b 37 2c 35 34 2c 32 34 2c 32 32 2c 35 35 2c 32 35 5d 2c 5b 32 32 2c 34 35 2c 31 35 2c 31 33 2c 34 36 2c 31 36 5d 2c 5b 31 30 2c 31 34 32 2c 31 31 34 2c 32 2c 31 34 33 2c 31 31 35 5d 2c 5b 31 39 2c 37 34 2c 34 36 2c 34 2c 37 35 2c 34 37 5d 2c 5b 32 38 2c 35 30 2c 32 32 2c 36 2c 35 31 2c 32 33 5d 2c 5b 33 33 2c 34 36 2c 31 36 2c 34 2c 34 37 2c 31 37 5d 2c 5b 38 2c 31 35 32 2c 31 32 32 2c 34 2c 31 35 33 2c 31 32 33 5d 2c 5b 32 32 2c 37 33 2c 34 35 2c 33 2c 37 34 2c 34 36 5d 2c 5b 38 2c 35 33 2c 32 33 2c 32 36 2c 35 34 2c 32 34 5d 2c 5b 31 32 2c 34 35 2c 31 35 2c 32 38 2c 34 36 2c 31 36 5d 2c 5b 33 2c 31 34 37 2c 31 31 37 2c 31 30 2c 31 34 38 2c 31 31 38 5d 2c 5b 33 2c 37 33 2c 34 35 2c 32 33 2c 37 34 2c 34 36 5d 2c 5b 34 2c 35 34 2c 32 34 2c 33 31 Data Ascii: 8],[7,54,24,22,55,25],[22,45,15,13,46,16],[10,142,114,2,143,115],[19,74,46,4,75,47],[28,50,22,6,51,23],[33,46,16,4,47,17],[8,152,122,4,153,123],[22,73,45,3,74,46],[8,53,23,26,54,24],[12,45,15,28,46,16],[3,147,117,10,148,118],[3,73,45,23,74,46],[4,54,24,31
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 72 6f 72 43 6f 72 72 65 63 74 4c 65 76 65 6c 3a 22 2b 74 29 3b 66 6f 72 28 76 61 72 20 72 3d 6e 2e 6c 65 6e 67 74 68 2f 33 2c 69 3d 6e 65 77 20 41 72 72 61 79 2c 61 3d 30 3b 61 3c 72 3b 61 2b 2b 29 66 6f 72 28 76 61 72 20 75 3d 6e 5b 33 2a 61 2b 30 5d 2c 73 3d 6e 5b 33 2a 61 2b 31 5d 2c 6c 3d 6e 5b 33 2a 61 2b 32 5d 2c 63 3d 30 3b 63 3c 75 3b 63 2b 2b 29 69 2e 70 75 73 68 28 6e 65 77 20 6f 28 73 2c 6c 29 29 3b 72 65 74 75 72 6e 20 69 7d 2c 6f 2e 67 65 74 52 73 42 6c 6f 63 6b 54 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 20 72 2e 4c 3a 72 65 74 75 72 6e 20 6f 2e 52 53 5f 42 4c 4f 43 4b 5f 54 41 42 4c 45 5b 34 2a 28 65 2d 31 29 2b 30 5d 3b 63 61 73 65 20 72 2e 4d 3a 72 65 74 75 72 6e 20 6f 2e 52 53 5f Data Ascii: rorCorrectLevel:"+t);for(var r=n.length/3,i=new Array,a=0;a<r;a++)for(var u=n[3a+0],s=n[3a+1],l=n[3a+2],c=0;c<u;c++)i.push(new o(s,l));return i},o.getRsBlockTable=function(e,t){switch(t){case r.L:return o.RS_BLOCK_TABLE[4(e-1)+0];case r.M:return o.RS_
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 37 38 2c 31 30 34 2c 31 33 30 5d 2c 5b 36 2c 33 30 2c 35 36 2c 38 32 2c 31 30 38 2c 31 33 34 5d 2c 5b 36 2c 33 34 2c 36 30 2c 38 36 2c 31 31 32 2c 31 33 38 5d 2c 5b 36 2c 33 30 2c 35 38 2c 38 36 2c 31 31 34 2c 31 34 32 5d 2c 5b 36 2c 33 34 2c 36 32 2c 39 30 2c 31 31 38 2c 31 34 36 5d 2c 5b 36 2c 33 30 2c 35 34 2c 37 38 2c 31 30 32 2c 31 32 36 2c 31 35 30 5d 2c 5b 36 2c 32 34 2c 35 30 2c 37 36 2c 31 30 32 2c 31 32 38 2c 31 35 34 5d 2c 5b 36 2c 32 38 2c 35 34 2c 38 30 2c 31 30 36 2c 31 33 32 2c 31 35 38 5d 2c 5b 36 2c 33 32 2c 35 38 2c 38 34 2c 31 31 30 2c 31 33 36 2c 31 36 32 5d 2c 5b 36 2c 32 36 2c 35 34 2c 38 32 2c 31 31 30 2c 31 33 38 2c 31 36 36 5d 2c 5b 36 2c 33 30 2c 35 38 2c 38 36 2c 31 31 34 2c 31 34 32 2c 31 37 30 5d 5d 2c 47 31 35 3a 31 33 33 35 Data Ascii: 78,104,130],[6,30,56,82,108,134],[6,34,60,86,112,138],[6,30,58,86,114,142],[6,34,62,90,118,146],[6,30,54,78,102,126,150],[6,24,50,76,102,128,154],[6,28,54,80,106,132,158],[6,32,58,84,110,136,162],[6,26,54,82,110,138,166],[6,30,58,86,114,142,170]],G15:1335
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 68 28 65 29 7b 63 61 73 65 20 72 2e 4d 4f 44 45 5f 4e 55 4d 42 45 52 3a 72 65 74 75 72 6e 20 31 32 3b 63 61 73 65 20 72 2e 4d 4f 44 45 5f 41 4c 50 48 41 5f 4e 55 4d 3a 72 65 74 75 72 6e 20 31 31 3b 63 61 73 65 20 72 2e 4d 4f 44 45 5f 38 42 49 54 5f 42 59 54 45 3a 72 65 74 75 72 6e 20 31 36 3b 63 61 73 65 20 72 2e 4d 4f 44 45 5f 4b 41 4e 4a 49 3a 72 65 74 75 72 6e 20 31 30 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6d 6f 64 65 3a 22 2b 65 29 7d 65 6c 73 65 7b 69 66 28 21 28 74 3c 34 31 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 74 79 70 65 3a 22 2b 74 29 3b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 20 72 2e 4d 4f 44 45 5f 4e 55 4d 42 45 52 3a 72 65 74 75 72 6e 20 31 34 3b 63 61 73 65 20 72 2e 4d 4f 44 45 5f Data Ascii: h(e){case r.MODE_NUMBER:return 12;case r.MODE_ALPHA_NUM:return 11;case r.MODE_8BIT_BYTE:return 16;case r.MODE_KANJI:return 10;default:throw new Error("mode:"+e)}else{if(!(t<41))throw new Error("type:"+t);switch(e){case r.MODE_NUMBER:return 14;case r.MODE_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49833	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:11 UTC	552	OUT	GET /ice/vendor2.de67a7244c5b0a8f94eb.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:11 UTC	854	IN	HTTP/1.1 200 OK Connection: close Content-Length: 8581 Cache-Control: s-maxage=31536000, public,max-age=86400 Content-Type: application/javascript Etag: "66064785-2185" Last-Modified: Fri, 29 Mar 2024 04:45:57 GMT Paypal-Debug-Id: d1ff175eb38b2 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000d1ff175eb38b2-8580c738e564a1a3-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:11 GMT X-Served-By: cache-dfw-kdfw8210038-DFW, cache-pdk-kpdk1780045-PDK X-Cache: HIT, HIT X-Cache-Hits: 2, 0 X-Timer: S1714134192.800839,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 7b 39 33 33 37 39 3a 65 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 2d 31 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 74 5b 6e 5d 2e 69 64 65 6e 74 69 66 69 65 72 3d 3d 3d 65 29 7b 72 3d 6e 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 63 3d 7b 7d 2c 61 3d 5b 5d Data Ascii: (self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[2],{93379:e=>{"use strict";var t=[];function r(e){for(var r=-1,n=0;n<t.length;n++)if(t[n].identifier===e){r=n;break}return r}function n(e,n){for(var c={},a=[]
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 20 74 68 65 20 76 61 6c 75 65 20 66 6f 72 20 74 68 65 20 27 69 6e 73 65 72 74 27 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 69 6e 76 61 6c 69 64 2e 22 29 3b 6e 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 72 29 7d 7d 2c 31 39 32 31 36 3a 65 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 74 79 6c 65 22 29 3b 72 65 74 75 72 6e 20 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 73 28 74 2c 65 2e 61 74 74 72 69 62 75 74 65 73 29 2c 65 2e 69 6e 73 65 72 74 28 74 2c 65 2e 6f 70 74 69 6f 6e 73 29 2c 74 7d 7d 2c 33 35 36 35 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 Data Ascii: the value for the 'insert' parameter is invalid.");n.appendChild(r)}},19216:e=>{"use strict";e.exports=function(e){var t=document.createElement("style");return e.setAttributes(t,e.attributes),e.insert(t,e.options),t}},3565:(e,t,r)=>{"use strict";e.export
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 7b 76 61 72 20 72 3d 7b 7d 3b 72 65 74 75 72 6e 20 65 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 28 75 2e 64 65 66 61 75 6c 74 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 65 26 26 6e 26 26 28 72 5b 63 2e 63 61 6d 65 6c 43 61 73 65 28 65 2c 74 29 5d 3d 6e 29 7d 29 29 2c 72 29 3a 72 7d 7d 2c 32 36 36 37 38 3a 28 65 2c 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 74 2e 63 61 6d 65 6c 43 61 73 65 3d 76 6f 69 64 20 30 3b 76 61 72 20 72 3d 2f 5e 2d 2d 5b 61 2d 7a 41 2d 5a 30 2d 39 2d 5d 2b 24 2f 2c 6e 3d 2f 2d 28 5b 61 2d 7a 5d 29 2f 67 2c 75 3d 2f 5e 5b 5e 2d 5d 2b 24 2f 2c 63 3d 2f 5e 2d 28 77 65 62 6b 69 74 7c 6d 6f 7a 7c 6d 73 7c 6f 7c 6b 68 74 6d 6c 29 2d 2f 2c 61 3d 66 Data Ascii: {var r={};return e&&"string"==typeof e?(u.default(e,(function(e,n){e&&n&&(r[c.camelCase(e,t)]=n)})),r):r}},26678:(e,t)=>{"use strict";t.__esModule=!0,t.camelCase=void 0;var r=/^--[a-zA-Z0-9-]+$/,n=/-([a-z])/g,u=/^[^-]+$/,c=/^-(webkit\|moz\|ms\|o\|khtml)-/,a=f
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 28 76 61 72 20 68 3d 30 2c 6d 3d 30 2c 62 3d 70 2c 79 3d 30 2c 67 3d 30 2c 6b 3d 30 2c 77 3d 31 2c 43 3d 31 2c 78 3d 31 2c 4d 3d 30 2c 45 3d 22 22 2c 46 3d 61 2c 6a 3d 6c 2c 4f 3d 6e 2c 54 3d 45 3b 43 3b 29 73 77 69 74 63 68 28 6b 3d 4d 2c 4d 3d 28 30 2c 63 2e 6c 70 29 28 29 29 7b 63 61 73 65 20 34 30 3a 69 66 28 31 30 38 21 3d 6b 26 26 35 38 3d 3d 28 30 2c 75 2e 75 4f 29 28 54 2c 62 2d 31 29 29 7b 2d 31 21 3d 28 30 2c 75 2e 43 77 29 28 54 2b 3d 28 30 2c 75 2e 67 78 29 28 28 30 2c 63 2e 69 46 29 28 4d 29 2c 22 26 22 2c 22 26 5c 66 22 29 2c 22 26 5c 66 22 29 26 26 28 78 3d 2d 31 29 3b 62 72 65 61 6b 7d 63 61 73 65 20 33 34 3a 63 61 73 65 20 33 39 3a 63 61 73 65 20 39 31 3a 54 2b 3d 28 30 2c 63 2e 69 46 29 28 4d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 39 3a Data Ascii: (var h=0,m=0,b=p,y=0,g=0,k=0,w=1,C=1,x=1,M=0,E="",F=a,j=l,O=n,T=E;C;)switch(k=M,M=(0,c.lp)()){case 40:if(108!=k&&58==(0,u.uO)(T,b-1)){-1!=(0,u.Cw)(T+=(0,u.gx)((0,c.iF)(M),"&","&\f"),"&\f")&&(x=-1);break}case 34:case 39:case 91:T+=(0,c.iF)(M);break;case 9:
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 70 2c 64 29 7b 66 6f 72 28 76 61 72 20 76 3d 73 2d 31 2c 68 3d 30 3d 3d 3d 73 3f 69 3a 5b 22 22 5d 2c 6d 3d 28 30 2c 75 2e 45 69 29 28 68 29 2c 62 3d 30 2c 79 3d 30 2c 67 3d 30 3b 62 3c 61 3b 2b 2b 62 29 66 6f 72 28 76 61 72 20 6b 3d 30 2c 77 3d 28 30 2c 75 2e 74 62 29 28 65 2c 76 2b 31 2c 76 3d 28 30 2c 75 2e 57 6e 29 28 79 3d 6f 5b 62 5d 29 29 2c 43 3d 65 3b 6b 3c 6d 3b 2b 2b 6b 29 28 43 3d 28 30 2c 75 2e 66 79 29 28 79 3e 30 3f 68 5b 6b 5d 2b 22 20 22 2b 77 3a 28 30 2c 75 2e 67 78 29 28 77 2c 2f 26 5c 66 2f 67 2c 68 5b 6b 5d 29 29 29 26 26 28 6c 5b 67 2b 2b 5d 3d 43 29 3b 72 65 74 75 72 6e 28 30 2c 63 2e 64 48 29 28 65 2c 74 2c 72 2c 30 3d 3d 3d 73 3f 6e 2e 46 72 3a 66 2c 6c 2c 70 2c 64 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 2c 72 29 7b 72 65 Data Ascii: p,d){for(var v=s-1,h=0===s?i:[""],m=(0,u.Ei)(h),b=0,y=0,g=0;b<a;++b)for(var k=0,w=(0,u.tb)(e,v+1,v=(0,u.Wn)(y=o[b])),C=e;k<m;++k)(C=(0,u.fy)(y>0?h[k]+" "+w:(0,u.gx)(w,/&\f/g,h[k])))&&(l[g++]=C);return(0,c.dH)(e,t,r,0===s?n.Fr:f,l,p,d)}function o(e,t,r){re
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 74 75 72 6e 20 69 3d 73 3c 61 3f 28 30 2c 6e 2e 75 4f 29 28 6f 2c 73 2b 2b 29 3a 30 2c 63 2b 2b 2c 31 30 3d 3d 3d 69 26 26 28 63 3d 31 2c 75 2b 2b 29 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b 72 65 74 75 72 6e 28 30 2c 6e 2e 75 4f 29 28 6f 2c 73 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 29 7b 72 65 74 75 72 6e 20 73 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 30 2c 6e 2e 74 62 29 28 6f 2c 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 79 28 65 29 7b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 20 30 3a 63 61 73 65 20 39 3a 63 61 73 65 20 31 30 3a 63 61 73 65 20 31 33 3a 63 61 73 65 20 33 32 3a 72 65 74 75 72 6e 20 35 3b 63 61 73 65 20 33 33 3a 63 61 73 65 20 34 33 3a 63 61 73 65 20 34 34 3a 63 61 73 65 20 34 37 3a 63 61 73 65 20 36 Data Ascii: turn i=s<a?(0,n.uO)(o,s++):0,c++,10===i&&(c=1,u++),i}function h(){return(0,n.uO)(o,s)}function m(){return s}function b(e,t){return(0,n.tb)(o,e,t)}function y(e){switch(e){case 0:case 9:case 10:case 13:case 32:return 5;case 33:case 43:case 44:case 47:case 6
2024-04-26 12:23:11 UTC	307	IN	Data Raw: 65 29 29 3f 65 5b 30 5d 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 74 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 30 7c 65 2e 63 68 61 72 43 6f 64 65 41 74 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 73 6c 69 63 65 28 74 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 7d 66 75 6e 63 74 69 6f 6e 20 68 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 70 75 73 68 Data Ascii: e))?e[0]:e}function o(e,t,r){return e.replace(t,r)}function f(e,t){return e.indexOf(t)}function l(e,t){return 0\|e.charCodeAt(t)}function p(e,t,r){return e.slice(t,r)}function d(e){return e.length}function v(e){return e.length}function h(e,t){return t.push

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49836	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:11 UTC	552	OUT	GET /ice/vendor3.58593f5f5e8f1c345472.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:11 UTC	855	IN	HTTP/1.1 200 OK Connection: close Content-Length: 62803 Cache-Control: s-maxage=31536000, public,max-age=86400 Content-Type: application/javascript Etag: "66064785-f553" Last-Modified: Fri, 29 Mar 2024 04:45:57 GMT Paypal-Debug-Id: a006d99a5ec53 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000a006d99a5ec53-38b5349ed1c6d259-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:11 GMT X-Served-By: cache-dfw-kdal2120078-DFW, cache-pdk-kpdk1780060-PDK X-Cache: HIT, HIT X-Cache-Hits: 2, 0 X-Timer: S1714134192.812439,VS0,VE4 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 5d 2c 7b 35 39 35 39 31 3a 28 74 2c 65 2c 72 29 3d 3e 7b 76 61 72 20 6e 3d 72 28 35 30 30 30 38 29 2e 64 65 66 61 75 6c 74 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 2f 2a 21 20 72 65 67 65 6e 65 72 61 74 6f 72 2d 72 75 6e 74 69 6d 65 20 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 2d 2d 20 6c 69 63 65 6e 73 65 20 28 4d 49 54 29 3a 20 Data Ascii: (self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[3],{59591:(t,e,r)=>{var n=r(50008).default;function o(){"use strict";/*! regenerator-runtime -- Copyright (c) 2014-present, Facebook, Inc. -- license (MIT):
2024-04-26 12:23:11 UTC	1363	IN	Data Raw: 3d 3d 3d 61 2e 74 79 70 65 29 7b 69 66 28 6e 3d 72 2e 64 6f 6e 65 3f 22 63 6f 6d 70 6c 65 74 65 64 22 3a 22 73 75 73 70 65 6e 64 65 64 59 69 65 6c 64 22 2c 61 2e 61 72 67 3d 3d 3d 70 29 63 6f 6e 74 69 6e 75 65 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 61 2e 61 72 67 2c 64 6f 6e 65 3a 72 2e 64 6f 6e 65 7d 7d 22 74 68 72 6f 77 22 3d 3d 3d 61 2e 74 79 70 65 26 26 28 6e 3d 22 63 6f 6d 70 6c 65 74 65 64 22 2c 72 2e 6d 65 74 68 6f 64 3d 22 74 68 72 6f 77 22 2c 72 2e 61 72 67 3d 61 2e 61 72 67 29 7d 7d 7d 28 74 2c 72 2c 75 29 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 74 2c 65 2c 72 29 7b 74 72 79 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 22 6e 6f 72 6d 61 6c 22 2c 61 72 67 3a 74 2e 63 61 6c 6c 28 65 2c 72 29 7d 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 7b 74 Data Ascii: ===a.type){if(n=r.done?"completed":"suspendedYield",a.arg===p)continue;return{value:a.arg,done:r.done}}"throw"===a.type&&(n="completed",r.method="throw",r.arg=a.arg)}}}(t,r,u),i}function l(t,e,r){try{return{type:"normal",arg:t.call(e,r)}}catch(t){return{t
2024-04-26 12:23:11 UTC	1371	IN	Data Raw: 67 29 3b 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 6e 2e 74 79 70 65 29 72 65 74 75 72 6e 20 65 2e 6d 65 74 68 6f 64 3d 22 74 68 72 6f 77 22 2c 65 2e 61 72 67 3d 6e 2e 61 72 67 2c 65 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 70 3b 76 61 72 20 6f 3d 6e 2e 61 72 67 3b 72 65 74 75 72 6e 20 6f 3f 6f 2e 64 6f 6e 65 3f 28 65 5b 74 2e 72 65 73 75 6c 74 4e 61 6d 65 5d 3d 6f 2e 76 61 6c 75 65 2c 65 2e 6e 65 78 74 3d 74 2e 6e 65 78 74 4c 6f 63 2c 22 72 65 74 75 72 6e 22 21 3d 3d 65 2e 6d 65 74 68 6f 64 26 26 28 65 2e 6d 65 74 68 6f 64 3d 22 6e 65 78 74 22 2c 65 2e 61 72 67 3d 76 6f 69 64 20 30 29 2c 65 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 70 29 3a 6f 3a 28 65 2e 6d 65 74 68 6f 64 3d 22 74 68 72 6f 77 22 2c 65 2e 61 72 67 3d 6e 65 77 20 54 79 70 65 45 72 72 Data Ascii: g);if("throw"===n.type)return e.method="throw",e.arg=n.arg,e.delegate=null,p;var o=n.arg;return o?o.done?(e[t.resultName]=o.value,e.next=t.nextLoc,"return"!==e.method&&(e.method="next",e.arg=void 0),e.delegate=null,p):o:(e.method="throw",e.arg=new TypeErr
2024-04-26 12:23:11 UTC	1371	IN	Data Raw: 6f 74 6f 74 79 70 65 2c 61 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 29 29 2c 65 2e 41 73 79 6e 63 49 74 65 72 61 74 6f 72 3d 42 2c 65 2e 61 73 79 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 2c 6f 2c 69 29 7b 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 69 3d 50 72 6f 6d 69 73 65 29 3b 76 61 72 20 75 3d 6e 65 77 20 42 28 68 28 74 2c 72 2c 6e 2c 6f 29 2c 69 29 3b 72 65 74 75 72 6e 20 65 2e 69 73 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 28 72 29 3f 75 3a 75 2e 6e 65 78 74 28 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 64 6f 6e 65 3f 74 2e 76 61 6c 75 65 3a 75 2e 6e 65 78 74 28 29 7d 29 29 7d 2c 45 28 62 29 2c 63 28 62 2c 73 2c 22 47 65 6e 65 72 61 74 6f 72 22 29 2c 63 28 Data Ascii: ototype,a,(function(){return this})),e.AsyncIterator=B,e.async=function(t,r,n,o,i){void 0===i&&(i=Promise);var u=new B(h(t,r,n,o),i);return e.isGeneratorFunction(r)?u:u.next().then((function(t){return t.done?t.value:u.next()}))},E(b),c(b,s,"Generator"),c(
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 74 75 72 6e 20 72 28 6f 2e 66 69 6e 61 6c 6c 79 4c 6f 63 29 7d 65 6c 73 65 20 69 66 28 66 29 7b 69 66 28 74 68 69 73 2e 70 72 65 76 3c 6f 2e 63 61 74 63 68 4c 6f 63 29 72 65 74 75 72 6e 20 72 28 6f 2e 63 61 74 63 68 4c 6f 63 2c 21 30 29 7d 65 6c 73 65 7b 69 66 28 21 61 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 74 72 79 20 73 74 61 74 65 6d 65 6e 74 20 77 69 74 68 6f 75 74 20 63 61 74 63 68 20 6f 72 20 66 69 6e 61 6c 6c 79 22 29 3b 69 66 28 74 68 69 73 2e 70 72 65 76 3c 6f 2e 66 69 6e 61 6c 6c 79 4c 6f 63 29 72 65 74 75 72 6e 20 72 28 6f 2e 66 69 6e 61 6c 6c 79 4c 6f 63 29 7d 7d 7d 7d 2c 61 62 72 75 70 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 2e 6c 65 6e 67 74 68 Data Ascii: turn r(o.finallyLoc)}else if(f){if(this.prev<o.catchLoc)return r(o.catchLoc,!0)}else{if(!a)throw new Error("try statement without catch or finally");if(this.prev<o.finallyLoc)return r(o.finallyLoc)}}}},abrupt:function(t,e){for(var r=this.tryEntries.length
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 73 7d 2c 35 30 30 30 38 3a 74 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 65 28 72 29 7b 72 65 74 75 72 6e 20 74 2e 65 78 70 6f 72 74 73 3d 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 74 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 74 7d 2c 74 2e 65 78 70 6f 72 Data Ascii: s},50008:t=>{function e(r){return t.exports=e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},t.expor
2024-04-26 12:23:11 UTC	1355	IN	Data Raw: 72 28 76 61 72 20 72 3d 5b 5d 2c 6e 3d 5b 5d 2c 6f 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 3f 55 69 6e 74 38 41 72 72 61 79 3a 41 72 72 61 79 2c 69 3d 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 22 2c 75 3d 30 2c 66 3d 69 2e 6c 65 6e 67 74 68 3b 75 3c 66 3b 2b 2b 75 29 72 5b 75 5d 3d 69 5b 75 5d 2c 6e 5b 69 2e 63 68 61 72 43 6f 64 65 41 74 28 75 29 5d 3d 75 3b 66 75 6e 63 74 69 6f 6e 20 61 28 74 29 7b 76 61 72 20 65 3d 74 2e 6c 65 6e 67 74 68 3b 69 66 28 65 25 34 3e 30 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 73 74 72 Data Ascii: r(var r=[],n=[],o="undefined"!=typeof Uint8Array?Uint8Array:Array,i="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",u=0,f=i.length;u<f;++u)r[u]=i[u],n[i.charCodeAt(u)]=u;function a(t){var e=t.length;if(e%4>0)throw new Error("Invalid str
2024-04-26 12:23:11 UTC	1371	IN	Data Raw: 7d 2e 62 69 6e 64 28 6e 75 6c 6c 2c 6f 29 29 3b 72 65 74 75 72 6e 20 6e 7d 2c 72 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 3b 72 65 74 75 72 6e 20 72 2e 64 28 65 2c 22 61 22 2c 65 29 2c 65 7d 2c 72 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 65 29 7d 2c 72 2e 70 3d 22 22 2c 72 28 72 2e 73 3d 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 72 65 74 75 72 Data Ascii: }.bind(null,o));return n},r.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return r.d(e,"a",e),e},r.o=function(t,e){return{}.hasOwnProperty.call(t,e)},r.p="",r(r.s=0)}([function(t,e,r){"use strict";function o(){retur
2024-04-26 12:23:11 UTC	1371	IN	Data Raw: 20 68 28 29 7b 73 2b 3d 31 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 73 2d 3d 31 2c 63 28 29 7d 76 61 72 20 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 69 66 28 74 68 69 73 2e 72 65 73 6f 6c 76 65 64 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 72 65 6a 65 63 74 65 64 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 65 72 72 6f 72 48 61 6e 64 6c 65 64 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 76 61 6c 75 65 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 65 72 72 6f 72 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 68 61 6e 64 6c 65 72 73 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 64 69 73 70 61 74 63 68 69 6e 67 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 73 74 61 63 6b 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 72 65 73 6f 6c 76 65 Data Ascii: h(){s+=1}function l(){s-=1,c()}var p=function(){function t(t){var e=this;if(this.resolved=void 0,this.rejected=void 0,this.errorHandled=void 0,this.value=void 0,this.error=void 0,this.handlers=void 0,this.dispatching=void 0,this.stack=void 0,this.resolve
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 72 65 73 6f 6c 76 65 64 2c 72 3d 74 68 69 73 2e 72 65 6a 65 63 74 65 64 2c 6e 3d 74 68 69 73 2e 68 61 6e 64 6c 65 72 73 3b 69 66 28 21 74 68 69 73 2e 64 69 73 70 61 74 63 68 69 6e 67 26 26 28 65 7c 7c 72 29 29 7b 74 68 69 73 2e 64 69 73 70 61 74 63 68 69 6e 67 3d 21 30 2c 68 28 29 3b 66 6f 72 28 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 2e 72 65 73 6f 6c 76 65 28 74 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 2e 72 65 6a 65 63 74 28 74 29 7d 29 29 7d 2c 75 3d 30 3b 75 3c 6e 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 7b 76 61 72 20 66 3d 6e 5b 75 5d 2c 61 3d 66 2e 6f 6e 53 75 63 63 65 73 73 2c 73 3d 66 2e 6f Data Ascii: n(){var e=this.resolved,r=this.rejected,n=this.handlers;if(!this.dispatching&&(e\|\|r)){this.dispatching=!0,h();for(var o=function(t,e){return t.then((function(t){e.resolve(t)}),(function(t){e.reject(t)}))},u=0;u<n.length;u++){var f=n[u],a=f.onSuccess,s=f.o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49834	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:11 UTC	552	OUT	GET /ice/vendor4.be50f34cce539da04c25.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:11 UTC	855	IN	HTTP/1.1 200 OK Connection: close Content-Length: 13819 Cache-Control: s-maxage=31536000, public,max-age=86400 Content-Type: application/javascript Etag: "66064785-35fb" Last-Modified: Fri, 29 Mar 2024 04:45:57 GMT Paypal-Debug-Id: b35dbaf1dd520 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000b35dbaf1dd520-38656168def30751-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:11 GMT X-Served-By: cache-dfw-kdfw8210065-DFW, cache-pdk-kpdk1780023-PDK X-Cache: HIT, HIT X-Cache-Hits: 7, 0 X-Timer: S1714134192.807676,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 5d 2c 7b 33 38 37 35 31 3a 28 74 2c 65 2c 72 29 3d 3e 7b 72 2e 64 28 65 2c 7b 67 37 3a 28 29 3d 3e 61 7d 29 3b 76 61 72 20 6e 3d 6e 75 6c 6c 2c 6f 3d 7b 7d 2c 69 3d 31 2c 63 3d 22 40 77 72 79 2f 63 6f 6e 74 65 78 74 3a 53 6c 6f 74 22 2c 75 3d 41 72 72 61 79 2c 61 3d 75 5b 63 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 74 68 69 73 2e 69 64 3d Data Ascii: "use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[4],{38751:(t,e,r)=>{r.d(e,{g7:()=>a});var n=null,o={},i=1,c="@wry/context:Slot",u=Array,a=u[c]\|\|function(){var t=function(){function t(){this.id=
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 20 41 72 72 61 79 5d 22 3a 69 66 28 74 2e 6c 65 6e 67 74 68 21 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 3a 69 66 28 62 28 74 2c 65 29 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 6c 3d 66 28 74 29 2c 79 3d 66 28 65 29 2c 68 3d 6c 2e 6c 65 6e 67 74 68 3b 69 66 28 68 21 3d 3d 79 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 76 3d 30 3b 76 3c 68 3b 2b 2b 76 29 69 66 28 21 69 2e 63 61 6c 6c 28 65 2c 6c 5b 76 5d 29 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 3d 30 3b 76 3c 68 3b 2b 2b 76 29 7b 76 61 72 20 64 3d 6c 5b 76 5d 3b 69 66 28 21 73 28 74 5b 64 5d 2c 65 5b 64 5d 29 29 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 3b 63 61 73 65 22 5b 6f 62 Data Ascii: Array]":if(t.length!==e.length)return!1;case"[object Object]":if(b(t,e))return!0;var l=f(t),y=f(e),h=l.length;if(h!==y.length)return!1;for(var v=0;v<h;++v)if(!i.call(e,l[v]))return!1;for(v=0;v<h;++v){var d=l[v];if(!s(t[d],e[d]))return!1}return!0;case"[ob
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 6f 64 65 5d 20 7d 22 3b 66 75 6e 63 74 69 6f 6e 20 62 28 74 2c 65 29 7b 76 61 72 20 72 3d 75 2e 67 65 74 28 74 29 3b 69 66 28 72 29 7b 69 66 28 72 2e 68 61 73 28 65 29 29 72 65 74 75 72 6e 21 30 7d 65 6c 73 65 20 75 2e 73 65 74 28 74 2c 72 3d 6e 65 77 20 53 65 74 29 3b 72 65 74 75 72 6e 20 72 2e 61 64 64 28 65 29 2c 21 31 7d 7d 2c 36 35 37 3a 28 74 2c 65 2c 72 29 3d 3e 7b 72 2e 64 28 65 2c 7b 42 3a 28 29 3d 3e 75 7d 29 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 7d 2c 6f 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 69 3d 6f 2e 66 6f 72 45 61 63 68 2c 63 3d 6f 2e 73 6c 69 63 65 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 Data Ascii: ode] }";function b(t,e){var r=u.get(t);if(r){if(r.has(e))return!0}else u.set(t,r=new Set);return r.add(e),!1}},657:(t,e,r)=>{r.d(e,{B:()=>u});var n=function(){return Object.create(null)},o=Array.prototype,i=o.forEach,c=o.slice,u=function(){function t(t,e)
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 49 53 20 53 4f 46 54 57 41 52 45 20 49 4e 43 4c 55 44 49 4e 47 20 41 4c 4c 20 49 4d 50 4c 49 45 44 20 57 41 52 52 41 4e 54 49 45 53 20 4f 46 20 4d 45 52 43 48 41 4e 54 41 42 49 4c 49 54 59 0a 41 4e 44 20 46 49 54 4e 45 53 53 2e 20 49 4e 20 4e 4f 20 45 56 45 4e 54 20 53 48 41 4c 4c 20 54 48 45 20 41 55 54 48 4f 52 20 42 45 20 4c 49 41 42 4c 45 20 46 4f 52 20 41 4e 59 20 53 50 45 43 49 41 4c 2c 20 44 49 52 45 43 54 2c 0a 49 4e 44 49 52 45 43 54 2c 20 4f 52 20 43 4f 4e 53 45 51 55 45 4e 54 49 41 4c 20 44 41 4d 41 47 45 53 20 4f 52 20 41 4e 59 20 44 41 4d 41 47 45 53 20 57 48 41 54 53 4f 45 56 45 52 20 52 45 53 55 4c 54 49 4e 47 20 46 52 4f 4d 0a 4c 4f 53 53 20 4f 46 20 55 53 45 2c 20 44 41 54 41 20 4f 52 20 50 52 4f 46 49 54 53 2c 20 57 48 45 54 48 45 52 20 Data Ascii: IS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITYAND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROMLOSS OF USE, DATA OR PROFITS, WHETHER
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 66 3d 73 2e 69 6e 64 65 78 4f 66 28 22 6c 6f 67 22 29 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 73 2e 69 6e 64 65 78 4f 66 28 74 29 3e 3d 66 29 7b 76 61 72 20 65 3d 63 6f 6e 73 6f 6c 65 5b 74 5d 7c 7c 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 3b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 63 6f 6e 73 6f 6c 65 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 7d 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 64 65 62 75 67 3d 6c 28 22 64 65 62 75 67 22 29 2c 74 2e 6c 6f 67 3d 6c 28 22 6c 6f 67 22 29 2c 74 2e 77 61 72 6e 3d 6c 28 22 77 61 72 6e 22 29 2c 74 2e 65 72 72 6f 72 3d 6c 28 22 65 72 72 6f 72 22 29 7d 28 61 7c 7c 28 61 3d 7b 7d 29 29 7d 2c 35 38 39 36 31 3a 28 74 2c 65 2c 72 29 3d 3e 7b 72 2e 64 28 65 2c Data Ascii: f=s.indexOf("log");function l(t){return function(){if(s.indexOf(t)>=f){var e=console[t]\|\|console.log;return e.apply(console,arguments)}}}!function(t){t.debug=l("debug"),t.log=l("log"),t.warn=l("warn"),t.error=l("error")}(a\|\|(a={}))},58961:(t,e,r)=>{r.d(e,
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 69 6f 6e 28 74 2c 65 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 20 6f 28 74 2c 65 29 3b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 74 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 3b 22 4f 62 6a 65 63 74 22 3d 3d 3d 72 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 28 72 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 3b 69 66 28 22 4d 61 70 22 3d 3d 3d 72 7c 7c 22 53 65 74 22 3d 3d 3d 72 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 74 29 3b 69 66 28 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 72 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c Data Ascii: ion(t,e){if(!t)return;if("string"==typeof t)return o(t,e);var r=Object.prototype.toString.call(t).slice(8,-1);"Object"===r&&t.constructor&&(r=t.constructor.name);if("Map"===r\|\|"Set"===r)return Array.from(t);if("Arguments"===r\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Cl
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 69 64 20 30 21 3d 3d 65 3f 65 3a 78 7d 66 75 6e 63 74 69 6f 6e 20 68 28 74 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 78 7d 66 75 6e 63 74 69 6f 6e 20 76 28 74 29 7b 76 2e 6c 6f 67 3f 76 2e 6c 6f 67 28 74 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 74 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 74 28 29 7d 63 61 74 63 68 28 74 29 7b 76 28 74 29 7d 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 77 28 74 29 7b 76 61 72 20 65 3d 74 2e 5f 63 6c 65 61 6e 75 70 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 26 26 28 74 2e 5f 63 6c 65 61 6e 75 70 3d 76 6f 69 64 20 30 2c 65 29 29 Data Ascii: id 0!==e?e:x}function h(t){return t instanceof x}function v(t){v.log?v.log(t):setTimeout((function(){throw t}))}function d(t){Promise.resolve().then((function(){try{t()}catch(t){v(t)}}))}function w(t){var e=t._cleanup;if(void 0!==e&&(t._cleanup=void 0,e))
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 68 69 73 29 29 7d 2c 63 28 74 2c 5b 7b 6b 65 79 3a 22 63 6c 6f 73 65 64 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 63 6c 6f 73 65 64 22 3d 3d 3d 74 68 69 73 2e 5f 73 74 61 74 65 7d 7d 5d 29 2c 74 7d 28 29 2c 4f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 5f 73 75 62 73 63 72 69 70 74 69 6f 6e 3d 74 7d 76 61 72 20 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 65 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 5f 28 74 68 69 73 2e 5f 73 75 62 73 63 72 69 70 74 69 6f 6e 2c 22 6e 65 78 74 22 2c 74 29 7d 2c 65 2e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 5f 28 74 68 69 73 2e 5f 73 75 62 73 63 72 69 70 74 69 6f 6e 2c 22 65 72 72 6f 72 22 2c 74 29 7d Data Ascii: his))},c(t,[{key:"closed",get:function(){return"closed"===this._state}}]),t}(),O=function(){function t(t){this._subscription=t}var e=t.prototype;return e.next=function(t){_(this._subscription,"next",t)},e.error=function(t){_(this._subscription,"error",t)}
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 73 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 28 79 28 74 68 69 73 29 29 28 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 65 2e 73 75 62 73 63 72 69 62 65 28 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 69 66 28 21 74 28 65 29 29 72 65 74 75 72 6e 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 72 2e 65 72 72 6f 72 28 74 29 7d 72 2e 6e 65 78 74 28 65 29 7d 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 2e 65 72 72 6f 72 28 74 29 7d 2c 63 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 63 6f 6d 70 6c Data Ascii: s;if("function"!=typeof t)throw new TypeError(t+" is not a function");return new(y(this))((function(r){return e.subscribe({next:function(e){try{if(!t(e))return}catch(t){return r.error(t)}r.next(e)},error:function(t){r.error(t)},complete:function(){r.compl
2024-04-26 12:23:11 UTC	1379	IN	Data Raw: 74 69 6f 6e 28 74 29 7b 6e 2e 65 72 72 6f 72 28 74 29 7d 2c 63 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 6f 2e 69 6e 64 65 78 4f 66 28 69 29 3b 74 3e 3d 30 26 26 6f 2e 73 70 6c 69 63 65 28 74 2c 31 29 2c 63 28 29 7d 7d 29 3b 6f 2e 70 75 73 68 28 69 29 7d 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 2e 65 72 72 6f 72 28 74 29 7d 2c 63 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 63 28 29 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 69 2e 63 6c 6f 73 65 64 26 26 30 3d 3d 3d 6f 2e 6c 65 6e 67 74 68 26 26 6e 2e 63 6f 6d 70 6c 65 74 65 28 29 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 75 Data Ascii: tion(t){n.error(t)},complete:function(){var t=o.indexOf(i);t>=0&&o.splice(t,1),c()}});o.push(i)},error:function(t){n.error(t)},complete:function(){c()}});function c(){i.closed&&0===o.length&&n.complete()}return function(){o.forEach((function(t){return t.u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49835	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:13 UTC	552	OUT	GET /ice/vendor5.9d5ed3531243aee5e049.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:13 UTC	855	IN	HTTP/1.1 200 OK Connection: close Content-Length: 21249 Cache-Control: s-maxage=31536000, public,max-age=86400 Content-Type: application/javascript Etag: "66064785-5301" Last-Modified: Fri, 29 Mar 2024 04:45:57 GMT Paypal-Debug-Id: 9d1833165bc3d Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000009d1833165bc3d-f5e98a86f61b6bdd-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:13 GMT X-Served-By: cache-dfw-kdal2120028-DFW, cache-pdk-kfty2130072-PDK X-Cache: HIT, HIT X-Cache-Hits: 9, 0 X-Timer: S1714134193.125236,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 5d 2c 7b 32 33 35 34 31 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 52 79 3a 28 29 3d 3e 66 7d 29 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 3f 6e 75 6c 6c 3a 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 65 5b 30 5d 3a 65 29 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 7d 2c 6f 3d 6e Data Ascii: (self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[5],{23541:(e,t,r)=>{"use strict";r.d(t,{Ry:()=>f});var n=function(e){return"undefined"==typeof document?null:(Array.isArray(e)?e[0]:e).ownerDocument.body},o=n
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 65 3a 5b 65 5d 29 2c 69 3d 74 7c 7c 6e 28 65 29 3b 72 65 74 75 72 6e 20 69 3f 28 6f 2e 70 75 73 68 2e 61 70 70 6c 79 28 6f 2c 41 72 72 61 79 2e 66 72 6f 6d 28 69 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 61 72 69 61 2d 6c 69 76 65 5d 22 29 29 29 2c 63 28 6f 2c 69 2c 72 2c 22 61 72 69 61 2d 68 69 64 64 65 6e 22 29 29 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 7d 2c 39 36 36 39 3a 28 65 2c 74 2c 72 29 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 72 28 35 31 36 30 39 29 7d 2c 35 35 34 34 38 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 36 34 38 36 37 29 2c 6f 3d 72 28 33 36 30 32 36 29 2c 69 3d 72 28 34 33 37 32 Data Ascii: (Array.isArray(e)?e:[e]),i=t\|\|n(e);return i?(o.push.apply(o,Array.from(i.querySelectorAll("[aria-live]"))),c(o,i,r,"aria-hidden")):function(){return null}}},9669:(e,t,r)=>{e.exports=r(51609)},55448:(e,t,r)=>{"use strict";var n=r(64867),o=r(36026),i=r(4372
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 22 52 65 71 75 65 73 74 20 61 62 6f 72 74 65 64 22 2c 6c 2e 45 43 4f 4e 4e 41 42 4f 52 54 45 44 2c 65 2c 45 29 29 2c 45 3d 6e 75 6c 6c 29 7d 2c 45 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 28 6e 65 77 20 6c 28 22 4e 65 74 77 6f 72 6b 20 45 72 72 6f 72 22 2c 6c 2e 45 52 52 5f 4e 45 54 57 4f 52 4b 2c 65 2c 45 2c 45 29 29 2c 45 3d 6e 75 6c 6c 7d 2c 45 2e 6f 6e 74 69 6d 65 6f 75 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 65 2e 74 69 6d 65 6f 75 74 3f 22 74 69 6d 65 6f 75 74 20 6f 66 20 22 2b 65 2e 74 69 6d 65 6f 75 74 2b 22 6d 73 20 65 78 63 65 65 64 65 64 22 3a 22 74 69 6d 65 6f 75 74 20 65 78 63 65 65 64 65 64 22 2c 6e 3d 65 2e 74 72 61 6e 73 69 74 69 6f 6e 61 6c 7c 7c 66 3b 65 2e 74 69 6d 65 6f 75 74 45 72 72 6f 72 4d 65 Data Ascii: "Request aborted",l.ECONNABORTED,e,E)),E=null)},E.onerror=function(){r(new l("Network Error",l.ERR_NETWORK,e,E,E)),E=null},E.ontimeout=function(){var t=e.timeout?"timeout of "+e.timeout+"ms exceeded":"timeout exceeded",n=e.transitional\|\|f;e.timeoutErrorMe
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 72 3d 6e 65 77 20 69 28 74 29 2c 61 3d 6f 28 69 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 71 75 65 73 74 2c 72 29 3b 72 65 74 75 72 6e 20 6e 2e 65 78 74 65 6e 64 28 61 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2c 72 29 2c 6e 2e 65 78 74 65 6e 64 28 61 2c 72 29 2c 61 2e 63 72 65 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 65 28 73 28 74 2c 72 29 29 7d 2c 61 7d 28 72 28 34 35 35 34 36 29 29 3b 61 2e 41 78 69 6f 73 3d 69 2c 61 2e 43 61 6e 63 65 6c 65 64 45 72 72 6f 72 3d 72 28 36 30 36 34 34 29 2c 61 2e 43 61 6e 63 65 6c 54 6f 6b 65 6e 3d 72 28 31 34 39 37 32 29 2c 61 2e 69 73 43 61 6e 63 65 6c 3d 72 28 32 36 35 30 32 29 2c 61 2e 56 45 52 53 49 4f 4e 3d 72 28 39 37 32 38 38 29 2e 76 65 72 73 Data Ascii: unction e(t){var r=new i(t),a=o(i.prototype.request,r);return n.extend(a,i.prototype,r),n.extend(a,r),a.create=function(r){return e(s(t,r))},a}(r(45546));a.Axios=i,a.CanceledError=r(60644),a.CancelToken=r(14972),a.isCancel=r(26502),a.VERSION=r(97288).vers
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 74 73 3d 6f 7d 2c 36 30 36 34 34 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 38 32 36 34 38 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 6e 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 75 6c 6c 3d 3d 65 3f 22 63 61 6e 63 65 6c 65 64 22 3a 65 2c 6e 2e 45 52 52 5f 43 41 4e 43 45 4c 45 44 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 22 43 61 6e 63 65 6c 65 64 45 72 72 6f 72 22 7d 72 28 36 34 38 36 37 29 2e 69 6e 68 65 72 69 74 73 28 6f 2c 6e 2c 7b 5f 5f 43 41 4e 43 45 4c 5f 5f 3a 21 30 7d 29 2c 65 2e 65 78 70 6f 72 74 73 3d 6f 7d 2c 32 36 35 30 32 3a 65 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 28 21 65 7c 7c 21 65 2e 5f 5f 43 41 Data Ascii: ts=o},60644:(e,t,r)=>{"use strict";var n=r(82648);function o(e){n.call(this,null==e?"canceled":e,n.ERR_CANCELED),this.name="CanceledError"}r(64867).inherits(o,n,{__CANCEL__:!0}),e.exports=o},26502:e=>{"use strict";e.exports=function(e){return!(!e\|\|!e.__CA
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 65 29 7d 66 6f 72 28 3b 75 2e 6c 65 6e 67 74 68 3b 29 69 3d 69 2e 74 68 65 6e 28 75 2e 73 68 69 66 74 28 29 2c 75 2e 73 68 69 66 74 28 29 29 3b 72 65 74 75 72 6e 20 69 7d 2c 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 55 72 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 61 28 74 68 69 73 2e 64 65 66 61 75 6c 74 73 2c 65 29 3b 76 61 72 20 74 3d 75 28 65 2e 62 61 73 65 55 52 4c 2c 65 2e 75 72 6c 29 3b 72 65 74 75 72 6e 20 6f 28 74 2c 65 2e 70 61 72 61 6d 73 2c 65 2e 70 61 72 61 6d 73 53 65 72 69 61 6c 69 7a 65 72 29 7d 2c 6e 2e 66 6f 72 45 61 63 68 28 5b 22 64 65 6c 65 74 65 22 2c 22 67 65 74 22 2c 22 68 65 61 64 22 2c 22 6f 70 74 69 6f 6e 73 22 5d 2c 28 66 Data Ascii: )}catch(e){return Promise.reject(e)}for(;u.length;)i=i.then(u.shift(),u.shift());return i},l.prototype.getUri=function(e){e=a(this.defaults,e);var t=u(e.baseURL,e.url);return o(t,e.params,e.paramsSerializer)},n.forEach(["delete","get","head","options"],(f
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 76 61 6c 75 65 3a 65 7d 7d 29 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 6f 2c 73 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 69 2c 22 69 73 41 78 69 6f 73 45 72 72 6f 72 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 6f 2e 66 72 6f 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 73 2c 61 2c 75 29 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 69 29 3b 72 65 74 75 72 6e 20 6e 2e 74 6f 46 6c 61 74 4f 62 6a 65 63 74 28 65 2c 63 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 21 3d 3d 45 72 72 6f 72 2e 70 72 6f 74 6f 74 79 70 65 7d 29 29 2c 6f 2e 63 61 6c 6c 28 63 2c 65 2e 6d 65 73 73 61 67 65 2c 74 2c 72 2c 73 2c 61 29 2c 63 2e 6e 61 6d 65 3d 65 2e 6e 61 6d 65 2c Data Ascii: value:e}})),Object.defineProperties(o,s),Object.defineProperty(i,"isAxiosError",{value:!0}),o.from=function(e,t,r,s,a,u){var c=Object.create(i);return n.toFlatObject(e,c,(function(e){return e!==Error.prototype})),o.call(c,e.message,t,r,s,a),c.name=e.name,
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 72 61 6e 73 66 6f 72 6d 52 65 73 70 6f 6e 73 65 29 2c 74 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 28 74 29 7c 7c 28 75 28 65 29 2c 74 26 26 74 2e 72 65 73 70 6f 6e 73 65 26 26 28 74 2e 72 65 73 70 6f 6e 73 65 2e 64 61 74 61 3d 6f 2e 63 61 6c 6c 28 65 2c 74 2e 72 65 73 70 6f 6e 73 65 2e 64 61 74 61 2c 74 2e 72 65 73 70 6f 6e 73 65 2e 68 65 61 64 65 72 73 2c 65 2e 74 72 61 6e 73 66 6f 72 6d 52 65 73 70 6f 6e 73 65 29 29 29 2c 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 74 29 7d 29 29 7d 7d 2c 34 37 31 38 35 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 36 34 38 36 37 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 3d 74 7c 7c 7b 7d 3b 76 61 72 Data Ascii: ransformResponse),t}),(function(t){return i(t)\|\|(u(e),t&&t.response&&(t.response.data=o.call(e,t.response.data,t.response.headers,e.transformResponse))),Promise.reject(t)}))}},47185:(e,t,r)=>{"use strict";var n=r(64867);e.exports=function(e,t){t=t\|\|{};var
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 29 3f 74 28 6e 65 77 20 6e 28 22 52 65 71 75 65 73 74 20 66 61 69 6c 65 64 20 77 69 74 68 20 73 74 61 74 75 73 20 63 6f 64 65 20 22 2b 72 2e 73 74 61 74 75 73 2c 5b 6e 2e 45 52 52 5f 42 41 44 5f 52 45 51 55 45 53 54 2c 6e 2e 45 52 52 5f 42 41 44 5f 52 45 53 50 4f 4e 53 45 5d 5b 4d 61 74 68 2e 66 6c 6f 6f 72 28 72 2e 73 74 61 74 75 73 2f 31 30 30 29 2d 34 5d 2c 72 2e 63 6f 6e 66 69 67 2c 72 2e 72 65 71 75 65 73 74 2c 72 29 29 3a 65 28 72 29 7d 7d 2c 31 38 35 32 37 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 36 34 38 36 37 29 2c 6f 3d 72 28 34 35 35 34 36 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 69 3d 74 68 69 73 7c 7c 6f 3b 72 65 74 75 72 6e 20 6e 2e Data Ascii: )?t(new n("Request failed with status code "+r.status,[n.ERR_BAD_REQUEST,n.ERR_BAD_RESPONSE][Math.floor(r.status/100)-4],r.config,r.request,r)):e(r)}},18527:(e,t,r)=>{"use strict";var n=r(64867),o=r(45546);e.exports=function(e,t,r){var i=this\|\|o;return n.
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 66 79 29 28 65 29 7d 28 65 29 29 3a 65 7d 5d 2c 74 72 61 6e 73 66 6f 72 6d 52 65 73 70 6f 6e 73 65 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 74 72 61 6e 73 69 74 69 6f 6e 61 6c 7c 7c 70 2e 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2c 72 3d 74 26 26 74 2e 73 69 6c 65 6e 74 4a 53 4f 4e 50 61 72 73 69 6e 67 2c 6e 3d 74 26 26 74 2e 66 6f 72 63 65 64 4a 53 4f 4e 50 61 72 73 69 6e 67 2c 69 3d 21 72 26 26 22 6a 73 6f 6e 22 3d 3d 3d 74 68 69 73 2e 72 65 73 70 6f 6e 73 65 54 79 70 65 3b 69 66 28 69 7c 7c 6e 26 26 6f 2e 69 73 53 74 72 69 6e 67 28 65 29 26 26 65 2e 6c 65 6e 67 74 68 29 74 72 79 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 70 61 72 73 65 28 65 29 7d 63 61 74 63 68 28 65 29 7b 69 66 28 69 29 7b 69 66 28 22 53 79 6e 74 61 78 45 72 Data Ascii: fy)(e)}(e)):e}],transformResponse:[function(e){var t=this.transitional\|\|p.transitional,r=t&&t.silentJSONParsing,n=t&&t.forcedJSONParsing,i=!r&&"json"===this.responseType;if(i\|\|n&&o.isString(e)&&e.length)try{return JSON.parse(e)}catch(e){if(i){if("SyntaxEr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49837	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:13 UTC	552	OUT	GET /ice/vendor6.0d835df92abd25f3083d.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:13 UTC	857	IN	HTTP/1.1 200 OK Connection: close Content-Length: 118285 Cache-Control: s-maxage=31536000, public,max-age=86400 Content-Type: application/javascript Etag: "66064785-1ce0d" Last-Modified: Fri, 29 Mar 2024 04:45:57 GMT Paypal-Debug-Id: 955c6cc10a37a Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000955c6cc10a37a-6a40baebee5b1bff-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:13 GMT X-Served-By: cache-dfw-kdal2120146-DFW, cache-pdk-kpdk1780134-PDK X-Cache: HIT, HIT X-Cache-Hits: 3, 0 X-Timer: S1714134193.125756,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 5d 2c 7b 32 33 35 36 34 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 64 28 74 2c 7b 5a 54 3a 28 29 3d 3e 69 2c 70 69 3a 28 29 3d 3e 6f 2c 5f 54 3a 28 29 3d 3e 61 2c 6d 47 3a 28 29 3d 3e 73 2c 4a 68 3a 28 29 3d 3e 63 2c 65 76 3a 28 29 3d 3e 75 7d 29 3b 0a 2f 2a 21 20 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a Data Ascii: "use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[6],{23564:(e,t,r)=>{r.d(t,{ZT:()=>i,pi:()=>o,_T:()=>a,mG:()=>s,Jh:()=>c,ev:()=>u});/! ********************************************************
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 65 2c 74 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 75 6c 6c 3d 3d 3d 74 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 29 3a 28 72 2e 70 72 6f 74 6f 74 79 70 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 72 29 7d 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 72 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 69 29 26 26 28 65 5b 69 5d 3d 74 5b 69 5d 29 3b 72 65 74 Data Ascii: e,t),e.prototype=null===t?Object.create(t):(r.prototype=t.prototype,new r)}var o=function(){return o=Object.assign\|\|function(e){for(var t,r=1,n=arguments.length;r<n;r++)for(var i in t=arguments[r])Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i]);ret
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 6e 3d 30 2c 69 26 26 28 6f 3d 5b 32 26 6f 5b 30 5d 2c 69 2e 76 61 6c 75 65 5d 29 2c 6f 5b 30 5d 29 7b 63 61 73 65 20 30 3a 63 61 73 65 20 31 3a 69 3d 6f 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 20 61 2e 6c 61 62 65 6c 2b 2b 2c 7b 76 61 6c 75 65 3a 6f 5b 31 5d 2c 64 6f 6e 65 3a 21 31 7d 3b 63 61 73 65 20 35 3a 61 2e 6c 61 62 65 6c 2b 2b 2c 6e 3d 6f 5b 31 5d 2c 6f 3d 5b 30 5d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 20 37 3a 6f 3d 61 2e 6f 70 73 2e 70 6f 70 28 29 2c 61 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 3b 64 65 66 61 75 6c 74 3a 69 66 28 21 28 69 3d 61 2e 74 72 79 73 2c 28 69 3d 69 2e 6c 65 6e 67 74 68 3e 30 26 26 69 5b 69 2e 6c 65 6e 67 74 68 2d 31 5d 29 7c 7c 36 21 3d 3d 6f 5b 30 5d 26 26 32 21 3d 3d 6f 5b 30 Data Ascii: n=0,i&&(o=[2&o[0],i.value]),o[0]){case 0:case 1:i=o;break;case 4:return a.label++,{value:o[1],done:!1};case 5:a.label++,n=o[1],o=[0];continue;case 7:o=a.ops.pop(),a.trys.pop();continue;default:if(!(i=a.trys,(i=i.length>0&&i[i.length-1])\|\|6!==o[0]&&2!==o[0
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 6f 74 79 70 65 2e 6d 6f 64 69 66 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 61 6e 73 66 6f 72 6d 46 6f 72 4c 69 6e 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 61 64 51 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 21 21 65 2e 6f 70 74 69 6d 69 73 74 69 63 29 2c 74 68 69 73 2e 72 65 61 64 28 28 30 2c 6e 2e 70 69 29 28 28 30 2c 6e 2e 70 69 29 28 7b 7d 2c 65 29 2c 7b 72 6f 6f 74 49 64 3a 65 2e 69 64 7c 7c 22 52 4f 4f 54 5f 51 55 45 52 59 22 2c 6f 70 74 69 6d 69 73 74 69 63 3a 74 7d 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 61 64 46 Data Ascii: otype.modify=function(e){return!1},e.prototype.transformForLink=function(e){return e},e.prototype.readQuery=function(e,t){return void 0===t&&(t=!!e.optimistic),this.read((0,n.pi)((0,n.pi)({},e),{rootId:e.id\|\|"ROOT_QUERY",optimistic:t}))},e.prototype.readF
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 29 3b 72 65 74 75 72 6e 20 74 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 28 30 2c 6d 2e 73 29 28 65 29 26 26 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 5f 5f 44 45 56 5f 5f 26 26 21 4f 62 6a 65 63 74 2e 69 73 46 72 6f 7a 65 6e 28 65 29 29 74 72 79 7b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 65 29 7d 63 61 74 63 68 28 65 29 7b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 54 79 70 65 45 72 72 6f 72 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 68 72 6f 77 20 65 7d 72 65 74 75 72 6e 20 65 7d 28 65 29 3d 3d 3d 65 26 26 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 28 65 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 28 30 2c 6d 2e 73 29 28 65 5b 72 5d 29 26 26 74 2e 61 64 64 28 65 Data Ascii: );return t.forEach((function(e){(0,m.s)(e)&&function(e){if(__DEV__&&!Object.isFrozen(e))try{Object.freeze(e)}catch(e){if(e instanceof TypeError)return null;throw e}return e}(e)===e&&Object.getOwnPropertyNames(e).forEach((function(r){(0,m.s)(e[r])&&t.add(e
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 28 6e 75 6c 6c 29 2c 74 68 69 73 2e 67 65 74 46 69 65 6c 64 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 62 28 28 30 2c 6c 2e 59 6b 29 28 65 29 3f 72 2e 67 65 74 28 65 2e 5f 5f 72 65 66 2c 74 29 3a 65 26 26 65 5b 74 5d 29 7d 2c 74 68 69 73 2e 63 61 6e 52 65 61 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 30 2c 6c 2e 59 6b 29 28 65 29 3f 72 2e 68 61 73 28 65 2e 5f 5f 72 65 66 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 7d 2c 74 68 69 73 2e 74 6f 52 65 66 65 72 65 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 28 30 2c 6c 2e 6b 51 29 28 65 29 3b 69 66 28 28 30 2c 6c 2e 59 6b 29 28 65 29 29 72 65 74 Data Ascii: (null),this.getFieldValue=function(e,t){return b((0,l.Yk)(e)?r.get(e.__ref,t):e&&e[t])},this.canRead=function(e){return(0,l.Yk)(e)?r.has(e.__ref):"object"==typeof e},this.toReference=function(e,t){if("string"==typeof e)return(0,l.kQ)(e);if((0,l.Yk)(e))ret
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 5f 65 78 69 73 74 73 3d 31 29 2c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 61 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 6f 7c 7c 6f 5b 65 5d 21 3d 3d 73 5b 65 5d 29 7b 63 5b 65 5d 3d 31 3b 76 61 72 20 74 3d 44 28 65 29 3b 74 3d 3d 3d 65 7c 7c 6e 2e 70 6f 6c 69 63 69 65 73 2e 68 61 73 4b 65 79 41 72 67 73 28 73 2e 5f 5f 74 79 70 65 6e 61 6d 65 2c 74 29 7c 7c 28 63 5b 74 5d 3d 31 29 2c 76 6f 69 64 20 30 21 3d 3d 73 5b 65 5d 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 43 7c 7c 64 65 6c 65 74 65 20 73 5b 65 5d 7d 7d 29 29 2c 21 63 2e 5f 5f 74 79 70 65 6e 61 6d 65 7c 7c 6f 26 26 6f 2e 5f 5f 74 79 70 65 6e 61 6d 65 7c 7c 74 68 69 73 2e 70 6f 6c 69 63 69 65 73 2e 72 6f 6f 74 54 79 70 65 6e 61 6d 65 73 42 79 49 64 5b 72 5d 21 3d Data Ascii: _exists=1),Object.keys(a).forEach((function(e){if(!o\|\|o[e]!==s[e]){c[e]=1;var t=D(e);t===e\|\|n.policies.hasKeyArgs(s.__typename,t)\|\|(c[t]=1),void 0!==s[e]\|\|n instanceof C\|\|delete s[e]}})),!c.__typename\|\|o&&o.__typename\|\|this.policies.rootTypenamesById[r]!=
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 2c 74 29 7b 76 61 72 20 72 3d 21 31 3b 72 65 74 75 72 6e 20 65 2e 69 64 26 26 28 6b 2e 63 61 6c 6c 28 74 68 69 73 2e 64 61 74 61 2c 65 2e 69 64 29 26 26 28 72 3d 74 68 69 73 2e 64 65 6c 65 74 65 28 65 2e 69 64 2c 65 2e 66 69 65 6c 64 4e 61 6d 65 2c 65 2e 61 72 67 73 29 29 2c 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 43 26 26 74 68 69 73 21 3d 3d 74 26 26 28 72 3d 74 68 69 73 2e 70 61 72 65 6e 74 2e 65 76 69 63 74 28 65 2c 74 29 7c 7c 72 29 2c 28 65 2e 66 69 65 6c 64 4e 61 6d 65 7c 7c 72 29 26 26 74 68 69 73 2e 67 72 6f 75 70 2e 64 69 72 74 79 28 65 2e 69 64 2c 65 2e 66 69 65 6c 64 4e 61 6d 65 7c 7c 22 5f 5f 65 78 69 73 74 73 22 29 29 2c 72 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 72 Data Ascii: ,t){var r=!1;return e.id&&(k.call(this.data,e.id)&&(r=this.delete(e.id,e.fieldName,e.args)),this instanceof C&&this!==t&&(r=this.parent.evict(e,t)\|\|r),(e.fieldName\|\|r)&&this.group.dirty(e.id,e.fieldName\|\|"__exists")),r},e.prototype.clear=function(){this.r
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 65 6e 67 74 68 29 7b 66 6f 72 28 76 61 72 20 69 3d 74 68 69 73 3b 69 20 69 6e 73 74 61 6e 63 65 6f 66 20 43 3b 29 69 3d 69 2e 70 61 72 65 6e 74 3b 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 2e 64 65 6c 65 74 65 28 65 29 7d 29 29 7d 72 65 74 75 72 6e 20 6e 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 43 68 69 6c 64 52 65 66 49 64 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 6b 2e 63 61 6c 6c 28 74 68 69 73 2e 72 65 66 73 2c 65 29 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 72 65 66 73 5b 65 5d 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 72 3d 74 68 69 73 2e 64 61 74 61 5b 65 5d 3b 69 66 28 21 72 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 6e 3d 6e 65 77 20 53 65 74 28 5b 72 5d Data Ascii: ength){for(var i=this;i instanceof C;)i=i.parent;n.forEach((function(e){return i.delete(e)}))}return n},e.prototype.findChildRefIds=function(e){if(!k.call(this.refs,e)){var t=this.refs[e]=Object.create(null),r=this.data[e];if(!r)return t;var n=new Set([r]
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 74 68 69 73 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 53 74 6f 72 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 6f 72 61 67 65 54 72 69 65 2e 6c 6f 6f 6b 75 70 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 29 7d 2c 74 7d 28 65 29 3b 65 2e 52 6f 6f 74 3d 74 7d 28 78 7c 7c 28 78 3d 7b 7d 29 29 3b 76 61 72 20 43 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 72 2c 6e 2c 69 29 7b 76 61 72 20 6f 3d 65 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2e 70 6f 6c 69 63 69 65 73 2c 69 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 6f 2e 69 64 3d 74 2c 6f 2e 70 61 72 65 6e 74 3d 72 2c 6f 2e 72 65 70 6c 61 79 3d 6e 2c 6f 2e 67 72 6f 75 70 3d 69 2c 6e 28 6f 29 2c 6f 7d 72 65 74 75 72 6e 28 30 2c 6e 2e Data Ascii: this},t.prototype.getStorage=function(){return this.storageTrie.lookupArray(arguments)},t}(e);e.Root=t}(x\|\|(x={}));var C=function(e){function t(t,r,n,i){var o=e.call(this,r.policies,i)\|\|this;return o.id=t,o.parent=r,o.replay=n,o.group=i,n(o),o}return(0,n.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49838	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:13 UTC	552	OUT	GET /ice/vendor7.1044927e5ff102e2510c.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:13 UTC	855	IN	HTTP/1.1 200 OK Connection: close Content-Length: 58188 Cache-Control: s-maxage=31536000, public,max-age=86400 Content-Type: application/javascript Etag: "66064785-e34c" Last-Modified: Fri, 29 Mar 2024 04:45:57 GMT Paypal-Debug-Id: 88919fa92f80f Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000088919fa92f80f-8aafe2800eb3c6ba-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:13 GMT X-Served-By: cache-dfw-kdfw8210064-DFW, cache-pdk-kpdk1780092-PDK X-Cache: HIT, HIT X-Cache-Hits: 1, 0 X-Timer: S1714134194.539493,VS0,VE2 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 5d 2c 7b 31 32 34 38 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 50 73 3a 28 29 3d 3e 42 7d 29 3b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 69 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 Data Ascii: (self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[7],{12489:(e,t,n)=>{"use strict";n.d(t,{Ps:()=>B});var i=function(){return i=Object.assign\|\|function(e){for(var t,n=1,i=arguments.length;n<i;n++)for(var r in
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 74 28 6d 2e 73 6c 69 63 65 28 31 2c 64 2b 31 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 5b 22 22 2c 65 5d 7d 29 29 2c 5b 5b 22 20 22 2c 68 28 76 2d 31 29 2b 22 5e 22 5d 2c 5b 22 22 2c 6d 5b 64 2b 31 5d 5d 5d 29 29 7d 72 65 74 75 72 6e 20 75 2b 66 28 5b 5b 22 22 2e 63 6f 6e 63 61 74 28 6f 2d 31 29 2c 6c 5b 72 2d 31 5d 5d 2c 5b 22 22 2e 63 6f 6e 63 61 74 28 6f 29 2c 70 5d 2c 5b 22 22 2c 68 28 63 2d 31 29 2b 22 5e 22 5d 2c 5b 22 22 2e 63 6f 6e 63 61 74 28 6f 2b 31 29 2c 6c 5b 72 2b 31 5d 5d 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 76 61 72 20 74 3d 65 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 5b 30 5d 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 65 5b 31 5d 7d 29 29 2c 6e 3d 4d 61 74 68 Data Ascii: t(m.slice(1,d+1).map((function(e){return["",e]})),[[" ",h(v-1)+"^"],["",m[d+1]]]))}return u+f([["".concat(o-1),l[r-1]],["".concat(o),p],["",h(c-1)+"^"],["".concat(o+1),l[r+1]]])}function f(e){var t=e.filter((function(e){e[0];return void 0!==e[1]})),n=Math
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 6b 54 72 61 63 65 28 74 68 69 73 2c 64 29 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 68 69 73 2c 22 73 74 61 63 6b 22 2c 7b 76 61 6c 75 65 3a 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 64 28 22 53 79 6e 74 61 78 20 45 72 72 6f 72 3a 20 22 2e 63 6f 6e 63 61 74 28 6e 29 2c 76 6f 69 64 20 30 2c 65 2c 5b 74 5d 29 7d 64 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 45 72 72 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 64 7d 2c 6e 61 6d 65 3a 7b 76 61 6c 75 65 3a 22 47 72 61 70 Data Ascii: kTrace(this,d):Object.defineProperty(this,"stack",{value:Error().stack,writable:!0,configurable:!0})}function v(e,t,n){return new d("Syntax Error: ".concat(n),void 0,e,[t])}d.prototype=Object.create(Error.prototype,{constructor:{value:d},name:{value:"Grap
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 3a 22 49 6e 70 75 74 56 61 6c 75 65 44 65 66 69 6e 69 74 69 6f 6e 22 2c 49 4e 54 45 52 46 41 43 45 5f 54 59 50 45 5f 44 45 46 49 4e 49 54 49 4f 4e 3a 22 49 6e 74 65 72 66 61 63 65 54 79 70 65 44 65 66 69 6e 69 74 69 6f 6e 22 2c 55 4e 49 4f 4e 5f 54 59 50 45 5f 44 45 46 49 4e 49 54 49 4f 4e 3a 22 55 6e 69 6f 6e 54 79 70 65 44 65 66 69 6e 69 74 69 6f 6e 22 2c 45 4e 55 4d 5f 54 59 50 45 5f 44 45 46 49 4e 49 54 49 4f 4e 3a 22 45 6e 75 6d 54 79 70 65 44 65 66 69 6e 69 74 69 6f 6e 22 2c 45 4e 55 4d 5f 56 41 4c 55 45 5f 44 45 46 49 4e 49 54 49 4f 4e 3a 22 45 6e 75 6d 56 61 6c 75 65 44 65 66 69 6e 69 74 69 6f 6e 22 2c 49 4e 50 55 54 5f 4f 42 4a 45 43 54 5f 54 59 50 45 5f 44 45 46 49 4e 49 54 49 4f 4e 3a 22 49 6e 70 75 74 4f 62 6a 65 63 74 54 79 70 65 44 65 66 69 Data Ascii: :"InputValueDefinition",INTERFACE_TYPE_DEFINITION:"InterfaceTypeDefinition",UNION_TYPE_DEFINITION:"UnionTypeDefinition",ENUM_TYPE_DEFINITION:"EnumTypeDefinition",ENUM_VALUE_DEFINITION:"EnumValueDefinition",INPUT_OBJECT_TYPE_DEFINITION:"InputObjectTypeDefi
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 29 29 2e 73 6c 69 63 65 28 2d 34 29 2c 27 22 27 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 6f 75 72 63 65 2c 69 3d 6e 2e 62 6f 64 79 2c 72 3d 69 2e 6c 65 6e 67 74 68 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 65 2e 6c 65 6e 67 74 68 2c 72 3d 74 3b 66 6f 72 28 3b 72 3c 69 3b 29 7b 76 61 72 20 61 3d 65 2e 63 68 61 72 43 6f 64 65 41 74 28 72 29 3b 69 66 28 39 3d 3d 3d 61 7c 7c 33 32 3d 3d 3d 61 7c 7c 34 34 3d 3d 3d 61 7c 7c 36 35 32 37 39 3d 3d 3d 61 29 2b 2b 72 3b 65 6c 73 65 20 69 66 28 31 30 3d 3d 3d 61 29 2b 2b 72 2c 2b 2b 6e 2e 6c 69 6e 65 2c 6e 2e 6c 69 6e 65 53 74 61 72 74 3d 72 3b 65 6c 73 65 7b 69 66 28 31 33 21 3d 3d 61 29 62 72 65 61 6b 3b 31 30 3d 3d 3d 65 2e 63 68 61 72 43 6f Data Ascii: )).slice(-4),'"')}function x(e,t){var n=e.source,i=n.body,r=i.length,a=function(e,t,n){var i=e.length,r=t;for(;r<i;){var a=e.charCodeAt(r);if(9===a\|\|32===a\|\|44===a\|\|65279===a)++r;else if(10===a)++r,++n.line,n.lineStart=r;else{if(13!==a)break;10===e.charCo
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 31 3a 63 61 73 65 20 38 32 3a 63 61 73 65 20 38 33 3a 63 61 73 65 20 38 34 3a 63 61 73 65 20 38 35 3a 63 61 73 65 20 38 36 3a 63 61 73 65 20 38 37 3a 63 61 73 65 20 38 38 3a 63 61 73 65 20 38 39 3a 63 61 73 65 20 39 30 3a 63 61 73 65 20 39 35 3a 63 61 73 65 20 39 37 3a 63 61 73 65 20 39 38 3a 63 61 73 65 20 39 39 3a 63 61 73 65 20 31 30 30 3a 63 61 73 65 20 31 30 31 3a 63 61 73 65 20 31 30 32 3a 63 61 73 65 20 31 30 33 3a 63 61 73 65 20 31 30 34 3a 63 61 73 65 20 31 30 35 3a 63 61 73 65 20 31 30 36 3a 63 61 73 65 20 31 30 37 3a 63 61 73 65 20 31 30 38 3a 63 61 73 65 20 31 30 39 3a 63 61 73 65 20 31 31 30 3a 63 61 73 65 20 31 31 31 3a 63 61 73 65 20 31 31 32 3a 63 61 73 65 20 31 31 33 3a 63 61 73 65 20 31 31 34 3a 63 61 73 65 20 31 31 35 3a 63 61 73 65 20 Data Ascii: 1:case 82:case 83:case 84:case 85:case 86:case 87:case 88:case 89:case 90:case 95:case 97:case 98:case 99:case 100:case 101:case 102:case 103:case 104:case 105:case 106:case 107:case 108:case 109:case 110:case 111:case 112:case 113:case 114:case 115:case
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 72 43 6f 64 65 41 74 28 73 2b 31 29 26 26 33 34 3d 3d 3d 6f 2e 63 68 61 72 43 6f 64 65 41 74 28 73 2b 32 29 29 72 65 74 75 72 6e 20 6c 2b 3d 6f 2e 73 6c 69 63 65 28 63 2c 73 29 2c 6e 65 77 20 49 28 54 2e 42 4c 4f 43 4b 5f 53 54 52 49 4e 47 2c 74 2c 73 2b 33 2c 6e 2c 69 2c 72 2c 28 30 2c 79 2e 57 37 29 28 6c 29 29 3b 69 66 28 75 3c 33 32 26 26 39 21 3d 3d 75 26 26 31 30 21 3d 3d 75 26 26 31 33 21 3d 3d 75 29 74 68 72 6f 77 20 76 28 65 2c 73 2c 22 49 6e 76 61 6c 69 64 20 63 68 61 72 61 63 74 65 72 20 77 69 74 68 69 6e 20 53 74 72 69 6e 67 3a 20 22 2e 63 6f 6e 63 61 74 28 4f 28 75 29 2c 22 2e 22 29 29 3b 31 30 3d 3d 3d 75 3f 28 2b 2b 73 2c 2b 2b 61 2e 6c 69 6e 65 2c 61 2e 6c 69 6e 65 53 74 61 72 74 3d 73 29 3a 31 33 3d 3d 3d 75 3f 28 31 30 3d 3d 3d 6f 2e 63 Data Ascii: rCodeAt(s+1)&&34===o.charCodeAt(s+2))return l+=o.slice(c,s),new I(T.BLOCK_STRING,t,s+3,n,i,r,(0,y.W7)(l));if(u<32&&9!==u&&10!==u&&13!==u)throw v(e,s,"Invalid character within String: ".concat(O(u),"."));10===u?(++s,++a.line,a.lineStart=s):13===u?(10===o.c
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 30 21 3d 3d 65 26 26 31 33 21 3d 3d 65 29 72 65 74 75 72 6e 22 43 61 6e 6e 6f 74 20 63 6f 6e 74 61 69 6e 20 74 68 65 20 69 6e 76 61 6c 69 64 20 63 68 61 72 61 63 74 65 72 20 22 2e 63 6f 6e 63 61 74 28 4f 28 65 29 2c 22 2e 22 29 3b 69 66 28 33 39 3d 3d 3d 65 29 72 65 74 75 72 6e 22 55 6e 65 78 70 65 63 74 65 64 20 73 69 6e 67 6c 65 20 71 75 6f 74 65 20 63 68 61 72 61 63 74 65 72 20 28 27 29 2c 20 64 69 64 20 79 6f 75 20 6d 65 61 6e 20 74 6f 20 75 73 65 20 61 20 64 6f 75 62 6c 65 20 71 75 6f 74 65 20 28 5c 22 29 3f 22 3b 72 65 74 75 72 6e 22 43 61 6e 6e 6f 74 20 70 61 72 73 65 20 74 68 65 20 75 6e 65 78 70 65 63 74 65 64 20 63 68 61 72 61 63 74 65 72 20 22 2e 63 6f 6e 63 61 74 28 4f 28 65 29 2c 22 2e 22 29 7d 28 63 29 29 7d 66 75 6e 63 74 69 6f 6e 20 41 28 Data Ascii: 0!==e&&13!==e)return"Cannot contain the invalid character ".concat(O(e),".");if(39===e)return"Unexpected single quote character ('), did you mean to use a double quote (\")?";return"Cannot parse the unexpected character ".concat(O(e),".")}(c))}function A(
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 2c 30 2c 30 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 7b 73 6f 75 72 63 65 3a 65 2c 6f 70 74 69 6f 6e 73 3a 74 2c 6c 61 73 74 54 6f 6b 65 6e 3a 6e 2c 74 6f 6b 65 6e 3a 6e 2c 6c 69 6e 65 3a 31 2c 6c 69 6e 65 53 74 61 72 74 3a 30 2c 61 64 76 61 6e 63 65 3a 4e 2c 6c 6f 6f 6b 61 68 65 61 64 3a 67 7d 7d 28 6e 29 2c 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 73 3d 74 7c 7c 7b 7d 7d 76 61 72 20 74 3d 65 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 70 61 72 73 65 4e 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 65 78 70 65 63 74 54 6f 6b 65 6e 28 54 2e 4e 41 4d 45 29 3b 72 65 74 75 72 6e 7b 6b 69 6e 64 3a 6d 2e 4e 41 4d 45 2c 76 61 6c 75 65 3a 65 2e 76 61 6c 75 65 2c 6c 6f 63 3a 74 68 69 73 2e 6c 6f 63 28 65 29 7d 7d 2c 74 2e Data Ascii: ,0,0,null);return{source:e,options:t,lastToken:n,token:n,line:1,lineStart:0,advance:N,lookahead:g}}(n),this._options=t\|\|{}}var t=e.prototype;return t.parseName=function(){var e=this.expectToken(T.NAME);return{kind:m.NAME,value:e.value,loc:this.loc(e)}},t.
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 61 72 69 61 62 6c 65 44 65 66 69 6e 69 74 69 6f 6e 73 28 29 2c 64 69 72 65 63 74 69 76 65 73 3a 74 68 69 73 2e 70 61 72 73 65 44 69 72 65 63 74 69 76 65 73 28 21 31 29 2c 73 65 6c 65 63 74 69 6f 6e 53 65 74 3a 74 68 69 73 2e 70 61 72 73 65 53 65 6c 65 63 74 69 6f 6e 53 65 74 28 29 2c 6c 6f 63 3a 74 68 69 73 2e 6c 6f 63 28 65 29 7d 7d 2c 74 2e 70 61 72 73 65 4f 70 65 72 61 74 69 6f 6e 54 79 70 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 65 78 70 65 63 74 54 6f 6b 65 6e 28 54 2e 4e 41 4d 45 29 3b 73 77 69 74 63 68 28 65 2e 76 61 6c 75 65 29 7b 63 61 73 65 22 71 75 65 72 79 22 3a 72 65 74 75 72 6e 22 71 75 65 72 79 22 3b 63 61 73 65 22 6d 75 74 61 74 69 6f 6e 22 3a 72 65 74 75 72 6e 22 6d 75 74 61 74 69 6f 6e 22 3b 63 61 73 65 22 Data Ascii: ariableDefinitions(),directives:this.parseDirectives(!1),selectionSet:this.parseSelectionSet(),loc:this.loc(e)}},t.parseOperationType=function(){var e=this.expectToken(T.NAME);switch(e.value){case"query":return"query";case"mutation":return"mutation";case"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49839	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:13 UTC	552	OUT	GET /ice/vendor8.3458659a4a33819095f2.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:13 UTC	856	IN	HTTP/1.1 200 OK Connection: close Content-Length: 70998 Cache-Control: s-maxage=31536000, public,max-age=86400 Content-Type: application/javascript Etag: "66064785-11556" Last-Modified: Fri, 29 Mar 2024 04:45:57 GMT Paypal-Debug-Id: fe42e40957ca9 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000fe42e40957ca9-e29c8a3b58f90dcc-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:13 GMT X-Served-By: cache-dfw-kdfw8210178-DFW, cache-pdk-kpdk1780065-PDK X-Cache: HIT, HIT X-Cache-Hits: 2, 0 X-Timer: S1714134194.585019,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 5d 2c 7b 38 30 31 33 32 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 74 7c 7c 21 30 3d 3d 3d 74 7c 7c 21 31 3d 3d 3d 74 29 72 65 74 75 72 6e 20 4e 61 4e 3b 76 61 72 20 65 3d 4e 75 6d 62 65 72 28 74 29 3b 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 65 29 3f 65 3a 65 3c 30 3f 4d 61 74 68 2e 63 65 69 6c 28 65 29 3a 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 7d 66 75 6e 63 74 69 6f Data Ascii: "use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[8],{80132:(t,e,n)=>{function r(t){if(null===t\|\|!0===t\|\|!1===t)return NaN;var e=Number(t);return isNaN(e)?e:e<0?Math.ceil(e):Math.floor(e)}functio
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 65 28 29 2c 73 3d 6e 65 77 20 44 61 74 65 28 6e 2e 67 65 74 54 69 6d 65 28 29 29 3b 73 2e 73 65 74 4d 6f 6e 74 68 28 6e 2e 67 65 74 4d 6f 6e 74 68 28 29 2b 61 2b 31 2c 30 29 3b 76 61 72 20 63 3d 73 2e 67 65 74 44 61 74 65 28 29 3b 72 65 74 75 72 6e 20 75 3e 3d 63 3f 73 3a 28 6e 2e 73 65 74 46 75 6c 6c 59 65 61 72 28 73 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 2c 73 2e 67 65 74 4d 6f 6e 74 68 28 29 2c 75 29 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 2c 65 29 7b 6f 28 32 2c 61 72 67 75 6d 65 6e 74 73 29 3b 76 61 72 20 6e 3d 72 28 65 29 3b 72 65 74 75 72 6e 20 73 28 74 2c 31 32 2a 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 74 29 7b 6f 28 31 2c 61 72 67 75 6d 65 6e 74 73 29 3b 76 61 72 20 65 3d 69 28 74 29 3b 72 65 74 75 72 6e 20 65 2e 73 65 74 48 6f 75 Data Ascii: e(),s=new Date(n.getTime());s.setMonth(n.getMonth()+a+1,0);var c=s.getDate();return u>=c?s:(n.setFullYear(s.getFullYear(),s.getMonth(),u),n)}function c(t,e){o(2,arguments);var n=r(e);return s(t,12*n)}function l(t){o(1,arguments);var e=i(t);return e.setHou
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 3b 76 61 72 20 6e 3d 72 28 65 29 3b 72 65 74 75 72 6e 20 70 28 74 2c 2d 6e 29 7d 76 61 72 20 67 3d 38 36 34 65 35 3b 66 75 6e 63 74 69 6f 6e 20 62 28 74 29 7b 6f 28 31 2c 61 72 67 75 6d 65 6e 74 73 29 3b 76 61 72 20 65 3d 31 2c 6e 3d 69 28 74 29 2c 72 3d 6e 2e 67 65 74 55 54 43 44 61 79 28 29 2c 61 3d 28 72 3c 65 3f 37 3a 30 29 2b 72 2d 65 3b 72 65 74 75 72 6e 20 6e 2e 73 65 74 55 54 43 44 61 74 65 28 6e 2e 67 65 74 55 54 43 44 61 74 65 28 29 2d 61 29 2c 6e 2e 73 65 74 55 54 43 48 6f 75 72 73 28 30 2c 30 2c 30 2c 30 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 54 28 74 29 7b 6f 28 31 2c 61 72 67 75 6d 65 6e 74 73 29 3b 76 61 72 20 65 3d 69 28 74 29 2c 6e 3d 65 2e 67 65 74 55 54 43 46 75 6c 6c 59 65 61 72 28 29 2c 72 3d 6e 65 77 20 44 61 74 65 28 30 29 3b 72 2e Data Ascii: ;var n=r(e);return p(t,-n)}var g=864e5;function b(t){o(1,arguments);var e=1,n=i(t),r=n.getUTCDay(),a=(r<e?7:0)+r-e;return n.setUTCDate(n.getUTCDate()-a),n.setUTCHours(0,0,0,0),n}function T(t){o(1,arguments);var e=i(t),n=e.getUTCFullYear(),r=new Date(0);r.
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 3d 6e 75 6c 6c 21 3d 3d 28 61 3d 6e 75 6c 6c 21 3d 3d 28 75 3d 6e 75 6c 6c 21 3d 3d 28 73 3d 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 66 69 72 73 74 57 65 65 6b 43 6f 6e 74 61 69 6e 73 44 61 74 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 73 3f 73 3a 6e 75 6c 6c 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 3d 28 63 3d 65 2e 6c 6f 63 61 6c 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 63 7c 7c 6e 75 6c 6c 3d 3d 3d 28 6c 3d 63 2e 6f 70 74 69 6f 6e 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6c 3f 76 6f 69 64 20 30 3a 6c 2e 66 69 72 73 74 57 65 65 6b 43 6f 6e 74 61 69 6e 73 44 61 74 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 75 3f 75 3a 79 2e 66 69 72 73 74 57 65 65 6b 43 6f 6e 74 61 69 6e 73 44 61 74 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 61 3f 61 3a 6e 75 6c 6c 3d 3d 3d 28 64 3d Data Ascii: =null!==(a=null!==(u=null!==(s=null==e?void 0:e.firstWeekContainsDate)&&void 0!==s?s:null==e\|\|null===(c=e.locale)\|\|void 0===c\|\|null===(l=c.options)\|\|void 0===l?void 0:l.firstWeekContainsDate)&&void 0!==u?u:y.firstWeekContainsDate)&&void 0!==a?a:null===(d=
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 6e 67 28 29 3b 72 2e 6c 65 6e 67 74 68 3c 65 3b 29 72 3d 22 30 22 2b 72 3b 72 65 74 75 72 6e 20 6e 2b 72 7d 63 6f 6e 73 74 20 4e 3d 7b 79 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 2e 67 65 74 55 54 43 46 75 6c 6c 59 65 61 72 28 29 2c 72 3d 6e 3e 30 3f 6e 3a 31 2d 6e 3b 72 65 74 75 72 6e 20 59 28 22 79 79 22 3d 3d 3d 65 3f 72 25 31 30 30 3a 72 2c 65 2e 6c 65 6e 67 74 68 29 7d 2c 4d 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 2e 67 65 74 55 54 43 4d 6f 6e 74 68 28 29 3b 72 65 74 75 72 6e 22 4d 22 3d 3d 3d 65 3f 53 74 72 69 6e 67 28 6e 2b 31 29 3a 59 28 6e 2b 31 2c 32 29 7d 2c 64 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 59 28 74 2e 67 65 74 55 54 43 44 61 74 65 28 29 2c 65 2e 6c 65 6e 67 Data Ascii: ng();r.length<e;)r="0"+r;return n+r}const N={y:function(t,e){var n=t.getUTCFullYear(),r=n>0?n:1-n;return Y("yy"===e?r%100:r,e.length)},M:function(t,e){var n=t.getUTCMonth();return"M"===e?String(n+1):Y(n+1,2)},d:function(t,e){return Y(t.getUTCDate(),e.leng
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 74 2e 67 65 74 55 54 43 46 75 6c 6c 59 65 61 72 28 29 2c 65 2e 6c 65 6e 67 74 68 29 7d 2c 51 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 4d 61 74 68 2e 63 65 69 6c 28 28 74 2e 67 65 74 55 54 43 4d 6f 6e 74 68 28 29 2b 31 29 2f 33 29 3b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 51 22 3a 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 72 29 3b 63 61 73 65 22 51 51 22 3a 72 65 74 75 72 6e 20 59 28 72 2c 32 29 3b 63 61 73 65 22 51 6f 22 3a 72 65 74 75 72 6e 20 6e 2e 6f 72 64 69 6e 61 6c 4e 75 6d 62 65 72 28 72 2c 7b 75 6e 69 74 3a 22 71 75 61 72 74 65 72 22 7d 29 3b 63 61 73 65 22 51 51 51 22 3a 72 65 74 75 72 6e 20 6e 2e 71 75 61 72 74 65 72 28 72 2c 7b 77 69 64 74 68 3a 22 61 62 62 72 65 76 69 61 74 65 64 22 2c 63 6f 6e 74 65 78 74 3a Data Ascii: t.getUTCFullYear(),e.length)},Q:function(t,e,n){var r=Math.ceil((t.getUTCMonth()+1)/3);switch(e){case"Q":return String(r);case"QQ":return Y(r,2);case"Qo":return n.ordinalNumber(r,{unit:"quarter"});case"QQQ":return n.quarter(r,{width:"abbreviated",context:
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 68 3a 22 6e 61 72 72 6f 77 22 2c 63 6f 6e 74 65 78 74 3a 22 73 74 61 6e 64 61 6c 6f 6e 65 22 7d 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 6e 2e 6d 6f 6e 74 68 28 72 2c 7b 77 69 64 74 68 3a 22 77 69 64 65 22 2c 63 6f 6e 74 65 78 74 3a 22 73 74 61 6e 64 61 6c 6f 6e 65 22 7d 29 7d 7d 2c 77 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 72 29 7b 76 61 72 20 61 3d 53 28 74 2c 72 29 3b 72 65 74 75 72 6e 22 77 6f 22 3d 3d 3d 65 3f 6e 2e 6f 72 64 69 6e 61 6c 4e 75 6d 62 65 72 28 61 2c 7b 75 6e 69 74 3a 22 77 65 65 6b 22 7d 29 3a 59 28 61 2c 65 2e 6c 65 6e 67 74 68 29 7d 2c 49 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 4d 28 74 29 3b 72 65 74 75 72 6e 22 49 6f 22 3d 3d 3d 65 3f 6e 2e 6f 72 64 69 6e 61 6c 4e 75 6d 62 65 72 28 72 Data Ascii: h:"narrow",context:"standalone"});default:return n.month(r,{width:"wide",context:"standalone"})}},w:function(t,e,n,r){var a=S(t,r);return"wo"===e?n.ordinalNumber(a,{unit:"week"}):Y(a,e.length)},I:function(t,e,n){var r=M(t);return"Io"===e?n.ordinalNumber(r
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 63 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 72 29 7b 76 61 72 20 61 3d 74 2e 67 65 74 55 54 43 44 61 79 28 29 2c 6f 3d 28 61 2d 72 2e 77 65 65 6b 53 74 61 72 74 73 4f 6e 2b 38 29 25 37 7c 7c 37 3b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 63 22 3a 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 6f 29 3b 63 61 73 65 22 63 63 22 3a 72 65 74 75 72 6e 20 59 28 6f 2c 65 2e 6c 65 6e 67 74 68 29 3b 63 61 73 65 22 63 6f 22 3a 72 65 74 75 72 6e 20 6e 2e 6f 72 64 69 6e 61 6c 4e 75 6d 62 65 72 28 6f 2c 7b 75 6e 69 74 3a 22 64 61 79 22 7d 29 3b 63 61 73 65 22 63 63 63 22 3a 72 65 74 75 72 6e 20 6e 2e 64 61 79 28 61 2c 7b 77 69 64 74 68 3a 22 61 62 62 72 65 76 69 61 74 65 64 22 2c 63 6f 6e 74 65 78 74 3a 22 73 74 61 6e 64 61 6c 6f 6e 65 22 7d 29 3b 63 61 73 65 22 Data Ascii: c:function(t,e,n,r){var a=t.getUTCDay(),o=(a-r.weekStartsOn+8)%7\|\|7;switch(e){case"c":return String(o);case"cc":return Y(o,e.length);case"co":return n.ordinalNumber(o,{unit:"day"});case"ccc":return n.day(a,{width:"abbreviated",context:"standalone"});case"
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 68 3a 22 61 62 62 72 65 76 69 61 74 65 64 22 2c 63 6f 6e 74 65 78 74 3a 22 66 6f 72 6d 61 74 74 69 6e 67 22 7d 29 3b 63 61 73 65 22 62 62 62 22 3a 72 65 74 75 72 6e 20 6e 2e 64 61 79 50 65 72 69 6f 64 28 72 2c 7b 77 69 64 74 68 3a 22 61 62 62 72 65 76 69 61 74 65 64 22 2c 63 6f 6e 74 65 78 74 3a 22 66 6f 72 6d 61 74 74 69 6e 67 22 7d 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 63 61 73 65 22 62 62 62 62 62 22 3a 72 65 74 75 72 6e 20 6e 2e 64 61 79 50 65 72 69 6f 64 28 72 2c 7b 77 69 64 74 68 3a 22 6e 61 72 72 6f 77 22 2c 63 6f 6e 74 65 78 74 3a 22 66 6f 72 6d 61 74 74 69 6e 67 22 7d 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 6e 2e 64 61 79 50 65 72 69 6f 64 28 72 2c 7b 77 69 64 74 68 3a 22 77 69 64 65 22 2c 63 6f 6e 74 65 78 74 3a 22 66 6f 72 Data Ascii: h:"abbreviated",context:"formatting"});case"bbb":return n.dayPeriod(r,{width:"abbreviated",context:"formatting"}).toLowerCase();case"bbbbb":return n.dayPeriod(r,{width:"narrow",context:"formatting"});default:return n.dayPeriod(r,{width:"wide",context:"for
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 74 75 72 6e 20 52 28 61 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 52 28 61 2c 22 3a 22 29 7d 7d 2c 78 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 72 29 7b 76 61 72 20 61 3d 28 72 2e 5f 6f 72 69 67 69 6e 61 6c 44 61 74 65 7c 7c 74 29 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 3b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 78 22 3a 72 65 74 75 72 6e 20 6a 28 61 29 3b 63 61 73 65 22 78 78 78 78 22 3a 63 61 73 65 22 78 78 22 3a 72 65 74 75 72 6e 20 52 28 61 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 52 28 61 2c 22 3a 22 29 7d 7d 2c 4f 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 72 29 7b 76 61 72 20 61 3d 28 72 2e 5f 6f 72 69 67 69 6e 61 6c 44 61 74 65 7c 7c 74 29 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 Data Ascii: turn R(a);default:return R(a,":")}},x:function(t,e,n,r){var a=(r._originalDate\|\|t).getTimezoneOffset();switch(e){case"x":return j(a);case"xxxx":case"xx":return R(a);default:return R(a,":")}},O:function(t,e,n,r){var a=(r._originalDate\|\|t).getTimezoneOffset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49840	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:13 UTC	552	OUT	GET /ice/vendor9.2d8760f4fc1a0aa6631b.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:13 UTC	857	IN	HTTP/1.1 200 OK Connection: close Content-Length: 28641 Cache-Control: s-maxage=31536000, public,max-age=86400 Content-Type: application/javascript Etag: "66064785-6fe1" Last-Modified: Fri, 29 Mar 2024 04:45:57 GMT Paypal-Debug-Id: 50b82dc295dba Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000050b82dc295dba-578b8d10c127b737-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:13 GMT X-Served-By: cache-dfw-kdal2120027-DFW, cache-pdk-kfty2130088-PDK X-Cache: HIT, MISS X-Cache-Hits: 2, 0 X-Timer: S1714134194.587390,VS0,VE19 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 5d 2c 7b 33 30 33 31 34 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 73 7d 29 3b 76 61 72 20 6e 3d 72 28 32 35 34 37 37 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 65 29 7b 74 5b 30 3d 3d 3d 72 2e 69 6e 64 65 78 4f 66 28 22 2d 2d 22 29 3f 72 3a 28 30 2c 6e 2e 5a 29 28 72 29 5d 3d 65 5b 72 5d 7d 72 65 74 75 72 6e 20 65 2e 66 61 6c 6c Data Ascii: "use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[9],{30314:(e,t,r)=>{r.d(t,{Z:()=>s});var n=r(25477);function i(e){var t={};for(var r in e){t[0===r.indexOf("--")?r:(0,n.Z)(r)]=e[r]}return e.fall
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 65 6e 64 2d 77 69 64 74 68 22 3a 69 2c 22 62 6f 72 64 65 72 2d 62 6c 6f 63 6b 2d 73 74 61 72 74 22 3a 69 2c 22 62 6f 72 64 65 72 2d 62 6c 6f 63 6b 2d 73 74 61 72 74 2d 77 69 64 74 68 22 3a 69 2c 22 62 6f 72 64 65 72 2d 62 6c 6f 63 6b 2d 77 69 64 74 68 22 3a 69 2c 22 62 6f 72 64 65 72 2d 69 6e 6c 69 6e 65 22 3a 69 2c 22 62 6f 72 64 65 72 2d 69 6e 6c 69 6e 65 2d 65 6e 64 22 3a 69 2c 22 62 6f 72 64 65 72 2d 69 6e 6c 69 6e 65 2d 65 6e 64 2d 77 69 64 74 68 22 3a 69 2c 22 62 6f 72 64 65 72 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 22 3a 69 2c 22 62 6f 72 64 65 72 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 2d 77 69 64 74 68 22 3a 69 2c 22 62 6f 72 64 65 72 2d 69 6e 6c 69 6e 65 2d 77 69 64 74 68 22 3a 69 2c 22 62 6f 72 64 65 72 2d 73 74 61 72 74 2d 73 74 61 72 74 2d 72 Data Ascii: end-width":i,"border-block-start":i,"border-block-start-width":i,"border-block-width":i,"border-inline":i,"border-inline-end":i,"border-inline-end-width":i,"border-inline-start":i,"border-inline-start-width":i,"border-inline-width":i,"border-start-start-r
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 74 69 76 65 3a 69 2c 22 70 65 72 73 70 65 63 74 69 76 65 2d 6f 72 69 67 69 6e 2d 78 22 3a 6f 2c 22 70 65 72 73 70 65 63 74 69 76 65 2d 6f 72 69 67 69 6e 2d 79 22 3a 6f 2c 22 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 22 3a 6f 2c 22 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 2d 78 22 3a 6f 2c 22 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 2d 79 22 3a 6f 2c 22 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 2d 7a 22 3a 6f 2c 22 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 22 3a 73 2c 22 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 22 3a 73 2c 22 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 22 3a 69 2c 22 66 6c 65 78 2d 62 61 73 69 73 22 3a 69 2c 22 73 68 61 70 65 2d 6d 61 72 67 69 6e 22 3a 69 2c 73 69 7a 65 3a 69 2c 67 61 70 3a 69 Data Ascii: tive:i,"perspective-origin-x":o,"perspective-origin-y":o,"transform-origin":o,"transform-origin-x":o,"transform-origin-y":o,"transform-origin-z":o,"transition-delay":s,"transition-duration":s,"vertical-align":i,"flex-basis":i,"shape-margin":i,size:i,gap:i
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 7d 2c 72 2c 7b 70 61 72 65 6e 74 3a 74 68 69 73 7d 29 29 2c 74 29 74 68 69 73 2e 72 75 6c 65 73 2e 61 64 64 28 6f 2c 74 5b 6f 5d 29 3b 74 68 69 73 2e 72 75 6c 65 73 2e 70 72 6f 63 65 73 73 28 29 7d 76 61 72 20 74 3d 65 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 67 65 74 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 75 6c 65 73 2e 67 65 74 28 65 29 7d 2c 74 2e 61 64 64 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 72 75 6c 65 73 2e 61 64 64 28 65 2c 74 2c 72 29 3b 72 65 74 75 72 6e 20 6e 26 26 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6a 73 73 2e 70 6c 75 67 69 6e 73 2e 6f 6e 50 72 6f 63 65 73 73 52 75 6c 65 28 6e 29 2c 6e 7d 2c 74 2e 72 65 70 6c 61 Data Ascii: },r,{parent:this})),t)this.rules.add(o,t[o]);this.rules.process()}var t=e.prototype;return t.getRule=function(e){return this.rules.get(e)},t.addRule=function(e,t,r){var n=this.rules.add(e,t,r);return n&&this.options.jss.plugins.onProcessRule(n),n},t.repla
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 7d 29 29 3b 64 65 6c 65 74 65 20 69 5b 73 5d 7d 7d 28 65 2c 74 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 65 2e 6f 70 74 69 6f 6e 73 2c 69 3d 65 2e 73 74 79 6c 65 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 69 29 69 66 28 22 40 22 3d 3d 3d 6f 5b 30 5d 26 26 6f 2e 73 75 62 73 74 72 28 30 2c 73 2e 6c 65 6e 67 74 68 29 3d 3d 3d 73 29 7b 76 61 72 20 61 3d 68 28 6f 2e 73 75 62 73 74 72 28 73 2e 6c 65 6e 67 74 68 29 2c 65 2e 73 65 6c 65 63 74 6f 72 29 3b 74 2e 61 64 64 52 75 6c 65 28 61 2c 69 5b 6f 5d 2c 28 30 2c 6e 2e 5a 29 28 7b 7d 2c 72 2c 7b 73 65 6c 65 63 74 6f 72 3a 61 7d 29 29 2c 64 65 6c 65 74 65 20 69 5b 6f 5d 7d 7d 28 65 2c 74 29 29 7d 7d 7d 7d 2c 36 33 30 35 37 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 64 28 74 2c 7b 5a 3a 28 29 3d Data Ascii: }));delete i[s]}}(e,t),function(e,t){var r=e.options,i=e.style;for(var o in i)if("@"===o[0]&&o.substr(0,s.length)===s){var a=h(o.substr(s.length),e.selector);t.addRule(a,i[o],(0,n.Z)({},r,{selector:a})),delete i[o]}}(e,t))}}}},63057:(e,t,r)=>{r.d(t,{Z:()=
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 65 6e 67 74 68 2d 74 2e 6c 65 6e 67 74 68 7d 3b 72 65 74 75 72 6e 7b 6f 6e 50 72 6f 63 65 73 73 53 74 79 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 69 66 28 22 73 74 79 6c 65 22 21 3d 3d 72 2e 74 79 70 65 29 72 65 74 75 72 6e 20 74 3b 66 6f 72 28 76 61 72 20 6e 3d 7b 7d 2c 69 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 73 6f 72 74 28 65 29 2c 73 3d 30 3b 73 3c 69 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 6e 5b 69 5b 73 5d 5d 3d 74 5b 69 5b 73 5d 5d 3b 72 65 74 75 72 6e 20 6e 7d 7d 7d 7d 2c 32 37 32 30 32 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 61 7d 29 3b 76 61 72 20 6e 3d 72 28 35 34 30 31 33 29 2c 69 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 73 3d 22 66 6e 56 61 6c 75 65 73 22 2b 69 2c 6f 3d 22 66 6e 53 74 79 6c 65 22 2b Data Ascii: ength-t.length};return{onProcessStyle:function(t,r){if("style"!==r.type)return t;for(var n={},i=Object.keys(t).sort(e),s=0;s<i.length;s++)n[i[s]]=t[i[s]];return n}}}},27202:(e,t,r)=>{r.d(t,{Z:()=>a});var n=r(54013),i=Date.now(),s="fnValues"+i,o="fnStyle"+
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 65 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 2e 6d 61 70 28 68 29 3b 69 66 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 6c 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 74 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 65 29 74 5b 72 5d 3d 68 28 65 5b 72 5d 29 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 2c 72 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 22 75 6e 6e 61 6d 65 64 22 29 3b 76 61 72 20 6e 3d 72 2e 6a 73 73 2c 69 3d 68 28 74 29 2c 73 3d 6e 2e 70 6c 75 67 69 6e 73 2e 6f 6e 43 72 65 61 74 65 52 75 6c 65 28 65 2c 69 2c 72 29 3b 72 65 74 75 72 Data Ascii: e){if(null==e\|\|"object"!=typeof e)return e;if(Array.isArray(e))return e.map(h);if(e.constructor!==l)return e;var t={};for(var r in e)t[r]=h(e[r]);return t}function d(e,t,r){void 0===e&&(e="unnamed");var n=r.jss,i=h(t),s=n.plugins.onCreateRule(e,i,r);retur
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 62 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6d 3f 6d 28 65 29 3a 65 2e 72 65 70 6c 61 63 65 28 67 2c 22 5c 5c 24 31 22 29 7d 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 72 29 7b 74 68 69 73 2e 74 79 70 65 3d 22 73 74 79 6c 65 22 2c 74 68 69 73 2e 69 73 50 72 6f 63 65 73 73 65 64 3d 21 31 3b 76 61 72 20 6e 3d 72 2e 73 68 65 65 74 2c 69 3d 72 2e 52 65 6e 64 65 72 65 72 3b 74 68 69 73 2e 6b 65 79 3d 65 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 72 2c 74 68 69 73 2e 73 74 79 6c 65 3d 74 2c 6e 3f 74 68 69 73 2e 72 65 6e 64 65 72 65 72 3d 6e 2e 72 65 6e 64 65 72 65 72 3a 69 26 26 28 74 68 69 73 2e 72 65 6e 64 65 72 65 72 3d 6e 65 77 20 69 29 7d 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 74 79 70 65 2e Data Ascii: b=function(e){return m?m(e):e.replace(g,"\\$1")},R=function(){function e(e,t,r){this.type="style",this.isProcessed=!1;var n=r.sheet,i=r.Renderer;this.key=e,this.options=r,this.style=t,n?this.renderer=n.renderer:i&&(this.renderer=new i)}return e.prototype.
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 72 6e 20 76 28 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 54 65 78 74 2c 74 68 69 73 2e 73 74 79 6c 65 2c 72 29 7d 2c 28 30 2c 73 2e 5a 29 28 74 2c 5b 7b 6b 65 79 3a 22 73 65 6c 65 63 74 6f 72 22 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 21 3d 3d 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 54 65 78 74 29 7b 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 54 65 78 74 3d 65 3b 76 61 72 20 74 3d 74 68 69 73 2e 72 65 6e 64 65 72 65 72 2c 72 3d 74 68 69 73 2e 72 65 6e 64 65 72 61 62 6c 65 3b 69 66 28 72 26 26 74 29 74 2e 73 65 74 53 65 6c 65 63 74 6f 72 28 72 2c 65 29 7c 7c 74 2e 72 65 70 6c 61 63 65 52 75 6c 65 28 72 2c 74 68 69 73 29 7d 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 54 65 78 Data Ascii: rn v(this.selectorText,this.style,r)},(0,s.Z)(t,[{key:"selector",set:function(e){if(e!==this.selectorText){this.selectorText=e;var t=this.renderer,r=this.renderable;if(r&&t)t.setSelector(r,e)\|\|t.replaceRule(r,this)}},get:function(){return this.selectorTex
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 20 43 2e 74 65 73 74 28 65 29 3f 6e 65 77 20 50 28 65 2c 74 2c 72 29 3a 6e 75 6c 6c 7d 7d 2c 4f 3d 7b 69 6e 64 65 6e 74 3a 31 2c 63 68 69 6c 64 72 65 6e 3a 21 30 7d 2c 41 3d 2f 40 6b 65 79 66 72 61 6d 65 73 5c 73 2b 28 5b 5c 77 2d 5d 2b 29 2f 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 72 29 7b 74 68 69 73 2e 74 79 70 65 3d 22 6b 65 79 66 72 61 6d 65 73 22 2c 74 68 69 73 2e 61 74 3d 22 40 6b 65 79 66 72 61 6d 65 73 22 2c 74 68 69 73 2e 69 73 50 72 6f 63 65 73 73 65 64 3d 21 31 3b 76 61 72 20 69 3d 65 2e 6d 61 74 63 68 28 41 29 3b 69 26 26 69 5b 31 5d 3f 74 68 69 73 2e 6e 61 6d 65 3d 69 5b 31 5d 3a 74 68 69 73 2e 6e 61 6d 65 3d 22 6e 6f 6e 61 6d 65 22 2c 74 68 69 73 2e 6b 65 79 3d 74 68 69 73 2e 74 79 70 65 2b 22 Data Ascii: C.test(e)?new P(e,t,r):null}},O={indent:1,children:!0},A=/@keyframes\s+([\w-]+)/,j=function(){function e(e,t,r){this.type="keyframes",this.at="@keyframes",this.isProcessed=!1;var i=e.match(A);i&&i[1]?this.name=i[1]:this.name="noname",this.key=this.type+"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49841	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:13 UTC	558	OUT	GET /ice/vendorVenmo30.8afd5eb5bf057a663262.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:13 UTC	857	IN	HTTP/1.1 200 OK Connection: close Content-Length: 244562 Cache-Control: s-maxage=31536000, public,max-age=86400 Content-Type: application/javascript Etag: "66064785-3bb52" Last-Modified: Fri, 29 Mar 2024 04:45:57 GMT Paypal-Debug-Id: a32251e250f72 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000a32251e250f72-e5802964e7b3c325-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:13 GMT X-Served-By: cache-dfw-kdfw8210111-DFW, cache-pdk-kfty2130075-PDK X-Cache: HIT, HIT X-Cache-Hits: 1, 0 X-Timer: S1714134194.594718,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 30 5d 2c 7b 37 30 39 32 32 3a 41 3d 3e 7b 41 2e 65 78 70 6f 72 74 73 3d 22 64 61 74 61 3a 66 6f 6e 74 2f 77 6f 66 66 3b 62 61 73 65 36 34 2c 64 30 39 47 52 6b 39 55 56 45 38 41 41 4c 2b 59 41 41 73 41 41 41 41 42 62 56 67 41 41 51 41 41 41 41 43 39 76 41 41 41 41 58 51 41 41 41 4d 50 41 41 43 2f 4d 41 41 41 41 47 68 44 52 6b 59 67 41 41 41 4a 50 41 41 41 5a 50 38 41 41 49 4a 6c 4a 73 31 2b 2f 45 64 51 54 31 4d 41 41 48 57 30 41 Data Ascii: "use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[30],{70922:A=>{A.exports="data:font/woff;base64,d09GRk9UVE8AAL+YAAsAAAABbVgAAQAAAAC9vAAAAXQAAAMPAAC/MAAAAGhDRkYgAAAJPAAAZP8AAIJlJs1+/EdQT1MAAHW0A
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 44 51 4a 63 74 71 56 6a 5a 41 59 72 2b 33 6b 41 67 58 52 46 65 6d 6e 35 46 45 32 6f 36 6e 4e 4b 48 34 35 6f 36 43 49 69 63 32 6d 36 4a 33 54 48 70 4e 74 62 44 4e 79 30 67 6d 79 46 4b 74 71 6e 48 69 78 4f 67 6b 33 57 57 77 6a 2b 61 70 6a 59 65 64 50 4b 43 2b 6e 50 56 77 7a 5a 5a 38 73 47 65 56 34 59 78 56 58 78 47 62 43 4c 75 6b 36 64 70 32 51 66 6b 43 54 6e 56 6c 61 5a 72 71 62 70 34 66 32 4b 73 76 36 69 45 74 37 42 2b 56 71 73 74 74 4b 2f 2f 4d 32 2f 75 34 78 2f 77 39 4e 64 33 47 4d 69 4e 62 63 72 70 42 71 33 63 61 33 62 56 65 33 39 32 72 75 4c 76 39 6e 58 56 53 35 6d 2b 6a 42 6d 64 30 58 2b 77 4d 69 72 79 71 74 41 48 6a 61 68 64 51 48 64 42 52 56 47 49 62 68 39 37 73 4a 41 52 4a 61 51 70 48 6d 4f 6a 73 77 69 52 69 71 69 67 67 32 53 6d 67 69 4b 6c 49 55 Data Ascii: DQJctqVjZAYr+3kAgXRFemn5FE2o6nNKH45o6CIic2m6J3THpNtbDNy0gmyFKtqnHixOgk3WWwj+apjYedPKC+nPVwzZZ8sGeV4YxVXxGbCLuk6dp2QfkCTnVlaZrqbp4f2Ksv6iEt7B+VqsttK//M2/u4x/w9Nd3GMiNbcrpBq3ca3bVe392ruLv9nXVS5m+jBmd0X+wMiryqtAHjahdQHdBRVGIbh97sJARJaQpHmOjswiRiqigg2SmgiKlIU
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 6e 6e 4a 4e 7a 33 31 61 72 6d 56 61 59 58 34 65 74 71 70 66 61 46 36 69 6b 70 65 59 35 63 64 4d 63 35 34 35 57 46 6e 73 59 4b 50 5a 66 6a 4a 6d 59 59 30 5a 48 32 30 6d 43 32 4d 69 44 6e 4b 63 33 51 77 32 38 51 6c 6d 50 74 48 55 4a 35 6e 49 5a 44 4e 66 4c 61 61 2b 76 72 6d 50 71 71 39 6b 37 6a 4e 4d 66 6d 74 54 33 38 59 4d 74 6a 54 35 50 61 50 32 31 56 2f 74 7a 65 4e 61 78 66 4f 4d 34 6c 69 6e 45 6a 79 6e 63 6a 79 76 38 6a 79 72 43 71 78 58 57 56 35 51 43 69 2b 71 49 69 2b 72 4b 70 74 55 6d 63 30 36 69 31 64 30 4e 69 2b 70 43 6c 74 30 44 6c 73 56 34 6a 57 46 65 56 55 65 72 36 73 57 62 38 68 6e 6d 38 37 6c 62 61 58 79 70 67 4c 65 55 52 70 76 6d 64 7a 33 39 42 6e 76 71 79 34 66 71 4a 48 4f 35 30 4e 64 77 43 65 36 69 49 39 30 49 5a 2b 71 43 52 2b 72 4d 5a 2b Data Ascii: nnJNz31armVaYX4etqpfaF6ikpeY5cdMc545WFnsYKPZfjJmYY0ZH20mC2MiDnKc3Qw28QlmPtHUJ5nIZDNfLaa+vrmPqq9k7jNMfmtT38YMtjT5PaP21V/tzeNaxfOM4linEjyncjyv8jyrCqxXWV5QCi+qIi+rKptUmc06i1d0Ni+pClt0DlsV4jWFeVUer6sWb8hnm87lbaXypgLeURpvmdz39Bnvqy4fqJHO50NdwCe6iI90IZ+qCR+rMZ+
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 65 2b 38 67 42 5a 39 58 51 47 6c 61 6a 31 56 54 52 43 42 71 44 78 71 78 78 31 33 68 70 47 6d 67 61 61 6f 49 31 59 5a 6f 57 6d 72 61 61 39 70 6f 75 6d 68 36 61 76 70 6f 42 6d 67 54 4e 59 45 32 6d 4a 6c 63 7a 58 44 4e 4f 4d 31 55 7a 52 37 4e 51 73 30 4b 7a 54 72 4e 5a 73 30 74 7a 55 48 4e 43 63 30 35 7a 56 58 4e 54 38 30 44 7a 54 50 4e 61 38 31 46 6a 73 61 66 73 4f 58 75 64 76 57 42 66 79 39 37 4e 76 71 36 39 6e 33 32 77 66 54 50 37 4e 76 59 64 37 4b 50 74 2b 39 6f 50 74 45 2b 78 7a 37 49 76 73 42 39 6c 50 39 46 2b 68 76 31 38 2b 79 58 32 71 2b 30 33 32 6d 2b 7a 33 32 74 2f 78 50 36 30 2f 55 58 37 36 2f 5a 33 37 42 2f 62 6c 39 75 2f 74 66 2f 4c 33 73 71 72 65 4a 36 76 79 74 66 67 7a 58 78 74 33 70 74 76 78 49 66 77 4c 66 68 58 2f 4a 66 57 65 64 6d 5a 57 58 Data Ascii: e+8gBZ9XQGlaj1VTRCBqDxqxx13hpGmgaaoI1YZoWmraa9poumh6avpoBmgTNYE2mJlczXDNOM1UzR7NQs0KzTrNZs0tzUHNCc05zVXNT80DzTPNa81FjsafsOXudvWBfy97Nvq69n32wfTP7NvYd7KPt+9oPtE+xz7IvsB9lP9F+hv18+yX2q+032m+z32t/xP60/UX76/Z37B/bl9u/tf/L3sqreJ6vytfgzXxt3ptvxIfwLfhX/JfWedmZWX
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 56 4a 54 6c 43 61 38 53 31 6e 61 38 62 58 62 47 70 43 37 72 2b 42 4d 66 38 64 49 53 45 39 2f 69 76 44 68 49 78 76 72 30 6c 35 75 41 51 53 30 6a 4f 2f 45 33 34 72 2b 55 34 71 46 2b 57 67 32 4b 58 39 47 35 4a 53 38 68 30 70 75 56 42 65 73 63 72 72 39 2f 48 36 6c 76 75 4f 39 37 31 66 51 2f 49 53 63 6d 51 68 6a 4d 38 73 73 4e 47 68 59 6b 75 4c 53 2f 2b 57 56 53 59 30 4e 31 47 65 7a 74 78 45 65 54 4c 78 71 55 78 6c 62 71 49 79 6b 5a 6a 49 30 35 69 62 4b 45 38 69 50 70 55 70 7a 45 32 30 54 57 42 75 6f 6a 4a 39 75 59 6e 79 2b 73 41 6b 50 68 4f 58 75 6b 78 54 71 43 44 6c 6f 45 5a 41 55 35 32 45 72 37 4b 64 78 79 52 6c 63 46 79 44 7a 4f 7a 34 67 66 4a 6a 6b 50 79 49 6c 78 38 4a 38 69 4e 52 66 69 54 4a 6a 32 54 35 6b 53 49 2f 42 73 75 50 56 50 6d 52 4a 6a 2f 53 35 Data Ascii: VJTlCa8S1na8bXbGpC7r+BMf8dISE9/ivDhIxvr0l5uAQS0jO/E34r+U4qF+Wg2KX9G5JS8h0puVBescrr9/H6lvuO971fQ/IScmQhjM8ssNGhYkuLS/+WVSY0N1GeztxEeTLxqUxlbqIykZjI05ibKE8iPpUpzE20TWBuojJ9uYny+sAkPhOXukxTqCDloEZAU52Er7KdxyRlcFyDzOz4gfJjkPyIlx8J8iNRfiTJj2T5kSI/BsuPVPmRJj/S5
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 4d 4c 6e 74 75 63 4a 56 57 51 6d 6f 64 75 5a 64 6f 74 7a 31 2b 30 77 48 44 71 36 37 63 36 39 6b 79 6e 68 63 30 31 51 68 34 57 36 70 4e 70 31 45 6b 42 38 43 64 75 45 4f 44 70 66 37 66 67 35 78 77 53 68 69 63 79 6c 6b 55 58 5a 38 59 62 75 58 5a 4d 44 66 44 76 73 76 7a 33 4a 52 4f 71 77 78 47 73 32 30 41 32 68 73 31 45 6e 68 42 79 4e 2b 58 32 59 43 5a 68 38 5a 75 2f 34 6f 6c 47 5a 68 6f 79 4d 33 49 36 52 71 56 76 32 54 4a 59 48 77 33 58 4f 33 53 6a 77 4e 6b 4c 74 75 78 66 65 33 4f 74 31 77 47 2b 5a 6d 54 43 72 6d 51 48 7a 63 33 2f 65 61 43 6a 65 73 76 4c 51 32 63 30 5a 69 62 4e 4d 59 47 43 42 6e 75 70 2b 6c 44 67 59 69 64 43 6f 55 7a 32 7a 72 70 6e 6f 4c 36 62 6b 5a 79 65 6c 35 79 33 66 4d 4e 58 73 7a 62 59 35 48 50 76 42 70 4a 56 2b 63 51 4a 50 6c 69 79 30 Data Ascii: MLntucJVWQmoduZdotz1+0wHDq67c69kynhc01Qh4W6pNp1EkB8CduEODpf7fg5xwShicylkUXZ8YbuXZMDfDvsvz3JROqwxGs20A2hs1EnhByN+X2YCZh8Zu/4olGZhoyM3I6RqVv2TJYHw3XO3SjwNkLtuxfe3Ot1wG+ZmTCrmQHzc3/eaCjesvLQ2c0ZibNMYGCBnup+lDgYidCoUz2zrpnoL6bkZyel5y3fMNXszbY5HPvBpJV+cQJPliy0
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 48 63 35 46 46 32 54 33 47 6a 6c 69 78 73 79 52 75 4e 71 61 78 78 78 2f 5a 79 34 69 48 76 6b 63 61 58 4b 54 4d 42 41 4e 33 57 2b 68 6e 44 51 78 53 63 31 51 56 59 56 7a 64 57 4a 36 68 4a 70 30 41 6e 67 44 53 37 78 78 2b 62 59 2f 31 76 76 79 35 65 4e 48 4c 6c 7a 73 63 54 51 79 73 6d 65 76 64 71 59 72 54 70 74 57 72 39 6c 59 58 4a 53 54 6c 70 36 62 6d 35 36 52 56 31 52 73 30 71 37 71 4b 6d 71 46 50 77 36 66 2b 62 57 73 39 36 47 6f 70 4d 79 78 49 34 61 5a 74 56 4a 31 61 55 49 64 55 52 75 4b 34 6e 78 38 72 42 75 76 66 54 30 64 64 42 41 47 61 76 7a 70 36 4c 2f 41 46 56 35 43 33 57 71 50 4c 51 58 7a 65 46 78 2b 48 4e 51 6d 30 30 78 6b 4c 64 6e 58 6c 4b 68 76 6b 33 32 77 6c 6f 56 70 77 4b 45 2b 37 32 75 57 64 57 2b 64 6f 44 44 69 5a 43 4a 36 4a 4b 34 4d 61 6c 78 Data Ascii: Hc5FF2T3GjlixsyRuNqaxxx/Zy4iHvkcaXKTMBAN3W+hnDQxSc1QVYVzdWJ6hJp0AngDS7xx+bY/1vvy5eNHLlzscTQysmevdqYrTptWr9lYXJSTlp6bm56RV1Rs0q7qKmqFPw6f+bWs96GopMyxI4aZtVJ1aUIdURuK4nx8rBuvfT0ddBAGavzp6L/AFV5C3WqPLQXzeFx+HNQm00xkLdnXlKhvk32wloVpwKE+72uWdW+doDDiZCJ6JK4Malx
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 6e 31 35 38 2f 77 6f 34 50 59 77 75 30 62 7a 72 79 57 6c 52 67 6a 34 45 4a 6c 43 4a 4a 49 45 65 75 57 64 73 77 52 41 4f 76 69 54 73 48 50 36 76 4a 51 42 59 47 77 6d 35 47 5a 77 30 63 49 4b 4b 70 47 55 44 61 4d 62 2b 7a 6a 36 41 64 47 72 6f 71 44 31 42 38 53 62 58 36 39 55 6b 51 43 58 70 64 48 78 7a 4c 54 6d 38 38 74 4d 32 73 2f 51 67 58 50 6d 6f 64 64 30 4e 64 72 54 44 6a 2f 73 5a 66 39 31 2f 51 2b 4c 4f 39 49 37 4f 61 4e 7a 57 45 72 6d 39 78 4a 4d 4c 30 6a 4f 31 33 50 75 50 57 74 50 73 61 48 5a 79 47 4d 69 46 59 31 4c 34 4e 2b 76 31 39 65 65 41 62 4c 61 6c 61 56 7a 62 37 62 39 44 71 56 77 58 48 31 34 44 47 48 32 4c 72 6f 52 66 67 69 4b 72 46 67 39 45 39 4f 58 62 30 33 76 4a 6c 30 36 59 74 4d 32 45 32 48 61 32 65 56 72 6a 43 54 70 73 34 66 66 68 45 77 38 Data Ascii: n158/wo4PYwu0bzryWlRgj4EJlCJJIEeuWdswRAOviTsHP6vJQBYGwm5GZw0cIKKpGUDaMb+zj6AdGroqD1B8SbX69UkQCXpdHxzLTm88tM2s/QgXPmodd0NdrTDj/sZf91/Q+LO9I7OaNzWErm9xJML0jO13PuPWtPsaHZyGMiFY1L4N+v19eeAbLalaVzb7b9DqVwXH14DGH2LroRfgiKrFg9E9OXb03vJl06YtM2E2Ha2eVrjCTps4ffhEw8
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 51 71 54 59 32 69 4d 45 43 6e 52 6c 44 55 65 49 6f 61 72 61 49 6d 71 4b 6e 4e 4e 4c 57 4e 6f 72 5a 53 31 48 61 4b 4b 71 47 6f 61 52 53 31 79 34 37 61 53 56 46 37 56 64 51 68 69 6a 70 43 55 59 63 70 36 68 68 46 7a 61 53 6f 6f 78 51 31 69 36 4a 6e 73 39 51 4f 69 6c 35 67 52 79 32 68 36 4d 55 43 4e 59 4f 69 74 36 6d 70 67 78 53 39 57 30 30 74 70 2b 67 44 44 48 57 63 6f 6f 2f 78 31 41 6d 4b 4f 6b 56 52 4a 79 6e 71 4e 45 56 66 59 4b 6b 7a 4e 50 32 4c 48 56 56 4b 30 57 55 55 4e 59 65 69 66 37 57 6a 7a 6c 48 55 52 59 6f 36 54 31 4f 58 4b 65 6f 53 52 64 39 57 55 31 63 6f 2b 67 46 4e 62 61 44 6f 52 79 72 71 4b 6b 56 64 70 36 68 72 4e 50 32 55 70 65 5a 53 39 43 75 4f 75 6b 46 52 4e 79 6d 71 6a 4b 59 2f 71 71 68 35 46 50 33 5a 6a 72 70 46 30 52 61 4f 6d 6b 39 52 74 Data Ascii: QqTY2iMECnRlDUeIoaraImqKnNNLWNorZS1HaKKqGoaRS1y47aSVF7VdQhijpCUYcp6hhFzaSooxQ1i6Jns9QOil5gRy2h6MUCNYOit6mpgxS9W00tp+gDDHWcoo/x1AmKOkVRJynqNEVfYKkzNP2LHVVK0WUUNYeif7WjzlHURYo6T1OXKeoSRd9WU1co+gFNbaDoRyrqKkVdp6hrNP2UpeZS9CuOukFRNymqjKY/qqh5FP3ZjrpF0RaOmk9Rt
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 48 39 37 2f 7a 37 2b 4b 66 34 54 2f 43 66 35 54 2f 57 2f 34 50 39 6e 51 33 50 44 37 67 30 4c 47 70 59 30 30 6a 55 4b 62 74 53 6c 30 62 45 41 50 71 42 4a 51 4f 75 41 33 67 46 35 41 52 4d 44 35 67 51 73 44 64 67 59 73 44 50 67 63 4d 43 72 77 4f 71 42 62 51 4f 37 42 69 59 45 6a 67 32 63 45 62 67 77 73 43 6a 77 61 4f 43 35 77 4f 75 42 76 77 57 2b 43 78 4b 44 36 67 54 35 42 6b 55 46 64 51 75 4b 43 55 6f 49 47 68 73 30 4e 57 68 65 30 4f 71 67 62 55 46 48 67 35 34 47 63 38 45 64 67 6d 63 45 62 32 35 4d 4e 32 37 53 2b 4f 66 47 4a 78 71 2f 61 2b 4c 56 4a 4c 37 4a 39 68 43 37 6b 43 59 68 72 55 4a 36 68 79 53 48 5a 49 57 4d 44 70 6b 56 73 69 5a 6b 53 38 6a 70 6b 4a 63 68 4a 46 51 62 36 68 72 71 48 39 6f 79 74 47 4e 6f 7a 39 44 45 30 4f 4f 68 62 30 4b 2f 68 4f 6e 43 Data Ascii: H97/z7+Kf4T/Cf5T/W/4P9nQ3PD7g0LGpY00jUKbtSl0bEAPqBJQOuA3gF5ARMD5gQsDdgYsDPgcMCrwOqBbQO7BiYEjg2cEbgwsCjwaOC5wOuBvwW+CxKD6gT5BkUFdQuKCUoIGhs0NWhe0OqgbUFHg54Gc8EdgmcEb25MN27S+OfGJxq/a+LVJL7J9hC7kCYhrUJ6hySHZIWMDpkVsiZkS8jpkJchJFQb6hrqH9oytGNoz9DE0OOhb0K/hOnC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49842	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:13 UTC	558	OUT	GET /ice/vendorVenmo31.5a9959c341dbc4604a67.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:13 UTC	857	IN	HTTP/1.1 200 OK Connection: close Content-Length: 107053 Cache-Control: s-maxage=31536000, public,max-age=86400 Content-Type: application/javascript Etag: "66064785-1a22d" Last-Modified: Fri, 29 Mar 2024 04:45:57 GMT Paypal-Debug-Id: da3600480f2dc Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000da3600480f2dc-462af1251fd8b499-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:13 GMT X-Served-By: cache-dfw-kdfw8210085-DFW, cache-pdk-kfty2130033-PDK X-Cache: HIT, HIT X-Cache-Hits: 8, 0 X-Timer: S1714134194.812094,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 31 5d 2c 7b 34 39 31 32 3a 28 65 2c 74 2c 61 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 64 65 66 61 75 6c 74 22 69 6e 20 65 3f 65 2e 64 65 66 61 75 6c 74 3a 65 7d 76 61 72 20 6e 3d 72 28 61 28 33 35 37 37 36 29 29 2c 6f 3d 61 28 35 34 32 38 38 29 2c 69 3d 61 28 38 34 33 39 35 29 2c 6c 3d 72 28 61 28 38 36 30 31 30 29 29 2c 73 Data Ascii: "use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[31],{4912:(e,t,a)=>{function r(e){return e&&"object"==typeof e&&"default"in e?e.default:e}var n=r(a(35776)),o=a(54288),i=a(84395),l=r(a(86010)),s
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 4e 3d 65 2e 73 75 6d 6d 61 72 79 2c 50 3d 65 2e 64 65 74 61 69 6c 73 2c 4c 3d 65 2e 64 65 66 61 75 6c 74 45 78 70 61 6e 64 65 64 2c 6a 3d 76 6f 69 64 20 30 21 3d 3d 4c 26 26 4c 2c 42 3d 69 2e 5f 5f 72 65 73 74 28 65 2c 5b 22 69 63 6f 6e 56 61 72 69 61 6e 74 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 2c 22 64 65 74 61 69 6c 73 43 6c 61 73 73 4e 61 6d 65 22 2c 22 63 6f 6c 6c 61 70 73 65 41 72 69 61 4c 61 62 65 6c 22 2c 22 65 78 70 61 6e 64 41 72 69 61 4c 61 62 65 6c 22 2c 22 63 6c 61 73 73 65 73 22 2c 22 72 65 6d 6f 76 65 4f 75 74 65 72 50 61 64 64 69 6e 67 22 2c 22 73 6d 61 6c 6c 45 78 70 61 6e 64 65 64 49 6e 6e 65 72 50 61 64 64 69 6e 67 22 2c 22 73 75 6d 6d 61 72 79 22 2c 22 64 65 74 61 69 6c 73 22 2c 22 64 65 66 61 75 6c 74 45 78 70 61 6e 64 65 64 22 5d 29 Data Ascii: N=e.summary,P=e.details,L=e.defaultExpanded,j=void 0!==L&&L,B=i.__rest(e,["iconVariant","className","detailsClassName","collapseAriaLabel","expandAriaLabel","classes","removeOuterPadding","smallExpandedInnerPadding","summary","details","defaultExpanded"])
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 4e 61 6d 65 3a 6f 28 75 2e 61 64 64 72 65 73 73 43 6f 6e 74 61 69 6e 65 72 2c 63 29 7d 2c 73 26 26 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 75 2e 61 64 64 72 65 73 73 41 6c 69 61 73 7d 2c 73 29 2c 74 3f 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 75 2e 61 64 64 72 65 73 73 4c 69 6e 65 7d 2c 74 29 3a 6e 75 6c 6c 2c 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 75 2e 61 64 64 72 65 73 73 4c 69 6e 65 7d 2c 61 2c 22 2c c2 a0 22 2c 72 2c 22 c2 a0 22 2c 6c 29 29 7d 7d 2c 39 37 33 35 38 3a 28 65 2c 74 2c 61 29 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 Data Ascii: Name:o(u.addressContainer,c)},s&&n.createElement("p",{className:u.addressAlias},s),t?n.createElement("p",{className:u.addressLine},t):null,n.createElement("p",{className:u.addressLine},a,",",r,"",l))}},97358:(e,t,a)=>{Object.defineProperty(t,"__esModu
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 74 2e 73 65 6c 65 63 74 28 29 7d 7d 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 54 28 29 2c 50 28 21 31 29 7d 2c 54 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 22 21 3d 3d 77 26 26 22 30 22 21 3d 3d 77 29 7b 76 61 72 20 65 3d 77 2e 69 6e 64 65 78 4f 66 28 22 2e 22 29 2c 74 3d 77 3b 65 3c 30 3f 74 3d 77 2b 22 2e 30 30 22 3a 65 3d 3d 3d 77 2e 6c 65 6e 67 74 68 2d 31 3f 74 3d 77 2b 22 30 30 22 3a 65 3d 3d 3d 77 2e 6c 65 6e 67 74 68 2d 32 26 26 28 74 3d 77 2b 22 30 22 29 2c 74 21 3d 3d 77 26 26 6a 28 74 29 7d 7d 2c 46 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 61 3d 74 2e 6d 69 6e 57 69 64 74 68 2c 72 3d 74 2e 62 61 73 65 57 69 64 74 68 2c 6e 3d 74 2e 6f 6e 65 57 69 64 74 68 3b 69 66 28 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e Data Ascii: t.select()}},R=function(){T(),P(!1)},T=function(){if(""!==w&&"0"!==w){var e=w.indexOf("."),t=w;e<0?t=w+".00":e===w.length-1?t=w+"00":e===w.length-2&&(t=w+"0"),t!==w&&j(t)}},F=function(e,t){var a=t.minWidth,r=t.baseWidth,n=t.oneWidth;if(0===e.length)return
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 64 65 66 61 75 6c 74 22 69 6e 20 65 3f 65 2e 64 65 66 61 75 6c 74 3a 65 7d 76 61 72 20 6e 3d 72 28 61 28 33 35 37 37 36 29 29 2c 6f 3d 72 28 61 28 38 36 30 31 30 29 29 2c 69 3d 61 28 39 33 35 30 31 29 2c 6c 3d 61 28 37 33 31 33 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 61 3d 65 2e 76 61 6c 75 65 2c 72 3d 76 6f 69 64 20 30 3d 3d 3d 61 3f 22 30 22 3a 61 2c 73 3d 65 2e 63 6c 61 73 73 4e 61 6d 65 2c 63 3d 76 6f 69 64 20 30 3d 3d 3d 73 3f 22 22 3a 73 2c 75 3d 65 2e 69 73 45 72 72 6f 72 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 73 74 61 72 74 73 57 69 74 68 28 22 2d 22 29 2c 61 3d 74 3f 65 2e 73 75 62 73 74 72 28 31 29 Data Ascii: &"object"==typeof e&&"default"in e?e.default:e}var n=r(a(35776)),o=r(a(86010)),i=a(93501),l=a(73131);e.exports=function(e){var t,a=e.value,r=void 0===a?"0":a,s=e.className,c=void 0===s?"":s,u=e.isError,d=function(e){var t=e.startsWith("-"),a=t?e.substr(1)
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 6d 61 69 6e 7d 2c 22 26 2e 65 72 72 6f 72 22 3a 7b 63 6f 6c 6f 72 3a 65 2e 70 61 6c 65 74 74 65 2e 65 72 72 6f 72 2e 6d 61 69 6e 7d 7d 2c 63 6f 6e 74 61 69 6e 65 72 3a 7b 74 65 78 74 41 6c 69 67 6e 3a 22 63 65 6e 74 65 72 22 7d 2c 65 72 72 6f 72 4d 65 73 73 61 67 65 3a 7b 63 6f 6c 6f 72 3a 65 2e 70 61 6c 65 74 74 65 2e 65 72 72 6f 72 2e 6d 61 69 6e 2c 22 26 20 3e 20 2e 65 78 63 6c 61 6d 61 74 69 6f 6e 22 3a 7b 70 6f 73 69 74 69 6f 6e 3a 22 72 65 6c 61 74 69 76 65 22 2c 74 6f 70 3a 65 2e 73 70 61 63 69 6e 67 28 31 29 7d 7d 2c 6c 61 62 65 6c 3a 7b 74 65 78 74 41 6c 69 67 6e 3a 22 72 69 67 68 74 22 2c 66 6f 6e 74 53 69 7a 65 3a 65 2e 74 79 70 6f 67 72 61 70 68 79 2e 70 78 54 6f 52 65 6d 28 35 32 29 2c 66 6f 6e 74 46 61 6d 69 6c 79 3a 6e 2e 61 74 68 6c 65 74 Data Ascii: main},"&.error":{color:e.palette.error.main}},container:{textAlign:"center"},errorMessage:{color:e.palette.error.main,"& > .exclamation":{position:"relative",top:e.spacing(1)}},label:{textAlign:"right",fontSize:e.typography.pxToRem(52),fontFamily:n.athlet
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 70 6c 61 79 73 74 6f 72 65 3a 7b 22 26 20 3e 20 73 76 67 22 3a 7b 6d 61 72 67 69 6e 3a 22 2d 31 33 25 22 7d 7d 2c 62 75 74 74 6f 6e 52 6f 6f 74 3a 7b 22 26 3a 68 6f 76 65 72 22 3a 7b 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 69 6e 68 65 72 69 74 22 7d 7d 7d 29 7d 29 2c 7b 6e 61 6d 65 3a 22 56 65 6e 6d 6f 41 70 70 4c 69 6e 6b 22 7d 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 6c 61 73 73 65 73 2c 61 3d 65 2e 63 6c 61 73 73 4e 61 6d 65 2c 72 3d 76 6f 69 64 20 30 3d 3d 3d 61 3f 22 22 3a 61 2c 6e 3d 65 2e 73 68 6f 77 49 6e 44 65 73 6b 74 6f 70 2c 69 3d 76 6f 69 64 20 30 21 3d 3d 6e 26 26 6e 2c 64 3d 65 2e 74 79 70 65 2c 70 3d 6e 75 6c 6c 3b 73 77 69 74 63 68 28 76 6f 69 64 20 30 3d 3d 3d 64 3f 22 49 50 68 6f 6e 65 42 6c 61 Data Ascii: playstore:{"& > svg":{margin:"-13%"}},buttonRoot:{"&:hover":{backgroundColor:"inherit"}}})}),{name:"VenmoAppLink"})((function(e){var t=e.classes,a=e.className,r=void 0===a?"":a,n=e.showInDesktop,i=void 0!==n&&n,d=e.type,p=null;switch(void 0===d?"IPhoneBla
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 72 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 64 65 66 61 75 6c 74 22 69 6e 20 65 3f 65 2e 64 65 66 61 75 6c 74 3a 65 7d 76 61 72 20 6e 3d 72 28 61 28 33 35 37 37 36 29 29 2c 6f 3d 61 28 38 34 33 39 35 29 2c 69 3d 72 28 61 28 38 36 30 31 30 29 29 2c 6c 3d 61 28 39 38 36 36 30 29 2c 73 3d 72 28 61 28 38 32 35 37 35 29 29 2c 63 3d 61 28 31 31 34 39 37 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 73 72 63 2c 61 3d 65 2e 73 69 7a 65 2c 72 3d 76 6f 69 64 20 30 3d 3d 3d 61 3f 22 6d 64 22 3a 61 2c 75 3d 65 2e 63 6c 61 73 73 4e 61 6d 65 2c 64 3d 76 6f 69 64 20 30 3d 3d 3d 75 3f 22 22 3a 75 2c 70 3d 65 2e 6f 6e 43 6c 69 63 6b 2c 6d 3d 65 2e 74 79 70 65 Data Ascii: r(e){return e&&"object"==typeof e&&"default"in e?e.default:e}var n=r(a(35776)),o=a(84395),i=r(a(86010)),l=a(98660),s=r(a(82575)),c=a(11497);e.exports=function(e){var t=e.src,a=e.size,r=void 0===a?"md":a,u=e.className,d=void 0===u?"":u,p=e.onClick,m=e.type
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 6e 67 3a 22 63 6f 6e 74 65 6e 74 2d 62 6f 78 22 2c 62 6f 72 64 65 72 57 69 64 74 68 3a 22 31 70 78 22 2c 62 6f 72 64 65 72 43 6f 6c 6f 72 3a 22 74 72 61 6e 73 70 61 72 65 6e 74 22 2c 22 26 3a 66 6f 63 75 73 2c 20 26 3a 68 6f 76 65 72 22 3a 7b 62 6f 72 64 65 72 53 74 79 6c 65 3a 22 73 6f 6c 69 64 22 2c 62 6f 72 64 65 72 43 6f 6c 6f 72 3a 65 2e 70 61 6c 65 74 74 65 2e 70 72 69 6d 61 72 79 2e 6d 61 69 6e 7d 7d 2c 75 73 65 72 3a 7b 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 65 2e 70 61 6c 65 74 74 65 2e 63 6f 6d 6d 6f 6e 2e 77 68 69 74 65 2c 63 6f 6c 6f 72 3a 65 2e 70 61 6c 65 74 74 65 2e 63 6f 6d 6d 6f 6e 2e 62 6c 61 63 6b 7d 2c 69 63 6f 6e 3a 7b 63 6f 6c 6f 72 3a 65 2e 70 61 6c 65 74 74 65 2e 63 6f 6d 6d 6f 6e 2e 77 68 69 74 65 7d 2c 70 72 69 6d 61 72 Data Ascii: ng:"content-box",borderWidth:"1px",borderColor:"transparent","&:focus, &:hover":{borderStyle:"solid",borderColor:e.palette.primary.main}},user:{backgroundColor:e.palette.common.white,color:e.palette.common.black},icon:{color:e.palette.common.white},primar
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 61 72 69 61 6e 74 3a 22 73 75 62 74 69 74 6c 65 31 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 73 2e 6c 61 62 65 6c 7d 2c 61 29 29 7d 7d 2c 37 38 38 32 31 3a 28 65 2c 74 2c 61 29 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 72 3d 61 28 35 33 34 32 29 3b 74 2e 42 61 64 67 65 3d 72 7d 2c 34 36 32 39 39 3a 28 65 2c 74 2c 61 29 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 72 3d 61 28 35 34 32 38 38 29 2e 6d 61 6b 65 53 74 79 6c 65 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 63 6f 6e 74 61 69 6e 65 72 3a Data Ascii: ariant:"subtitle1",className:s.label},a))}},78821:(e,t,a)=>{Object.defineProperty(t,"__esModule",{value:!0});var r=a(5342);t.Badge=r},46299:(e,t,a)=>{Object.defineProperty(t,"__esModule",{value:!0});var r=a(54288).makeStyles((function(e){return{container:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49843	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:13 UTC	558	OUT	GET /ice/vendorVenmo32.82f13c5642468dd4c86e.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:13 UTC	850	IN	HTTP/1.1 200 OK Connection: close Content-Length: 20105 Cache-Control: s-maxage=31536000, public,max-age=86400 Content-Type: application/javascript Etag: "66064785-4e89" Last-Modified: Fri, 29 Mar 2024 04:45:57 GMT Paypal-Debug-Id: 4c1c16538df0e Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000004c1c16538df0e-df2f651bd457a53b-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:13 GMT X-Served-By: cache-dfw-kdal2120065-DFW, cache-gnv1820024-GNV X-Cache: HIT, HIT X-Cache-Hits: 3, 0 X-Timer: S1714134194.863548,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 32 5d 2c 7b 35 39 34 34 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 6f 3d 6e 28 38 37 34 36 32 29 2c 72 3d 6e 28 34 35 39 38 37 29 2c 69 3d 6e 28 33 35 37 37 36 29 2c 61 3d 6e 28 38 36 30 31 30 29 2c 6c 3d 6e 28 34 31 35 39 38 29 2c 73 3d 6e 28 35 32 35 34 33 29 2c 64 3d 69 2e 66 6f 72 77 61 72 64 52 65 66 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 Data Ascii: "use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[32],{59446:(e,t,n)=>{n.d(t,{Z:()=>c});var o=n(87462),r=n(45987),i=n(35776),a=n(86010),l=n(41598),s=n(52543),d=i.forwardRef((function(e,t){var n=e
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 32 29 22 3a 22 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 31 32 29 22 7d 7d 2c 63 6f 6c 6f 72 53 65 63 6f 6e 64 61 72 79 3a 7b 22 26 24 75 6e 64 65 72 6c 69 6e 65 3a 61 66 74 65 72 22 3a 7b 62 6f 72 64 65 72 42 6f 74 74 6f 6d 43 6f 6c 6f 72 3a 65 2e 70 61 6c 65 74 74 65 2e 73 65 63 6f 6e 64 61 72 79 2e 6d 61 69 6e 7d 7d 2c 75 6e 64 65 72 6c 69 6e 65 3a 7b 22 26 3a 61 66 74 65 72 22 3a 7b 62 6f 72 64 65 72 42 6f 74 74 6f 6d 3a 22 32 70 78 20 73 6f 6c 69 64 20 22 2e 63 6f 6e 63 61 74 28 65 2e 70 61 6c 65 74 74 65 2e 70 72 69 6d 61 72 79 2e 6d 61 69 6e 29 2c 6c 65 66 74 3a 30 2c 62 6f 74 74 6f 6d 3a 30 2c 63 6f 6e 74 65 6e 74 3a 27 22 22 27 2c 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 Data Ascii: ba(0, 0, 0, 0.12)":"rgba(255, 255, 255, 0.12)"}},colorSecondary:{"&$underline:after":{borderBottomColor:e.palette.secondary.main}},underline:{"&:after":{borderBottom:"2px solid ".concat(e.palette.primary.main),left:0,bottom:0,content:'""',position:"absolu
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 52 61 64 69 75 73 3a 22 69 6e 68 65 72 69 74 22 7d 7d 2c 69 6e 70 75 74 4d 61 72 67 69 6e 44 65 6e 73 65 3a 7b 70 61 64 64 69 6e 67 54 6f 70 3a 32 33 2c 70 61 64 64 69 6e 67 42 6f 74 74 6f 6d 3a 36 7d 2c 69 6e 70 75 74 48 69 64 64 65 6e 4c 61 62 65 6c 3a 7b 70 61 64 64 69 6e 67 54 6f 70 3a 31 38 2c 70 61 64 64 69 6e 67 42 6f 74 74 6f 6d 3a 31 39 2c 22 26 24 69 6e 70 75 74 4d 61 72 67 69 6e 44 65 6e 73 65 22 3a 7b 70 61 64 64 69 6e 67 54 6f 70 3a 31 30 2c 70 61 64 64 69 6e 67 42 6f 74 74 6f 6d 3a 31 31 7d 7d 2c 69 6e 70 75 74 4d 75 6c 74 69 6c 69 6e 65 3a 7b 70 61 64 64 69 6e 67 3a 30 7d 2c 69 6e 70 75 74 41 64 6f 72 6e 65 64 53 74 61 72 74 3a 7b 70 61 64 64 69 6e 67 4c 65 66 74 3a 30 7d 2c 69 6e 70 75 74 41 64 6f 72 6e 65 64 45 6e 64 3a 7b 70 61 64 64 69 Data Ascii: Radius:"inherit"}},inputMarginDense:{paddingTop:23,paddingBottom:6},inputHiddenLabel:{paddingTop:18,paddingBottom:19,"&$inputMarginDense":{paddingTop:10,paddingBottom:11}},inputMultiline:{padding:0},inputAdornedStart:{paddingLeft:0},inputAdornedEnd:{paddi
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 64 20 30 21 3d 3d 45 3f 45 3a 71 3b 62 26 26 7a 26 26 41 28 21 31 29 3b 76 61 72 20 47 3d 69 2e 75 73 65 43 61 6c 6c 62 61 63 6b 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6a 28 21 30 29 7d 29 2c 5b 5d 29 2c 4f 3d 7b 61 64 6f 72 6e 65 64 53 74 61 72 74 3a 46 2c 73 65 74 41 64 6f 72 6e 65 64 53 74 61 72 74 3a 49 2c 63 6f 6c 6f 72 3a 6d 2c 64 69 73 61 62 6c 65 64 3a 62 2c 65 72 72 6f 72 3a 79 2c 66 69 6c 6c 65 64 3a 24 2c 66 6f 63 75 73 65 64 3a 7a 2c 66 75 6c 6c 57 69 64 74 68 3a 77 2c 68 69 64 64 65 6e 4c 61 62 65 6c 3a 53 2c 6d 61 72 67 69 6e 3a 28 22 73 6d 61 6c 6c 22 3d 3d 3d 6b 3f 22 64 65 6e 73 65 22 3a 76 6f 69 64 20 30 29 7c 7c 4e 2c 6f 6e 42 6c 75 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 41 28 21 31 29 7d 2c 6f 6e 45 6d 70 74 79 3a 69 2e 75 73 65 43 61 Data Ascii: d 0!==E?E:q;b&&z&&A(!1);var G=i.useCallback((function(){j(!0)}),[]),O={adornedStart:F,setAdornedStart:I,color:m,disabled:b,error:y,filled:$,focused:z,fullWidth:w,hiddenLabel:S,margin:("small"===k?"dense":void 0)\|\|N,onBlur:function(){A(!1)},onEmpty:i.useCa
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 31 29 2c 73 3d 6e 28 35 32 35 34 33 29 2c 64 3d 6e 28 32 32 33 31 38 29 2c 63 3d 6e 28 39 33 38 37 31 29 2c 75 3d 69 2e 66 6f 72 77 61 72 64 52 65 66 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 63 68 65 63 6b 65 64 3b 76 61 72 20 6e 3d 65 2e 63 6c 61 73 73 65 73 2c 73 3d 65 2e 63 6c 61 73 73 4e 61 6d 65 2c 75 3d 65 2e 63 6f 6e 74 72 6f 6c 2c 66 3d 65 2e 64 69 73 61 62 6c 65 64 2c 70 3d 28 65 2e 69 6e 70 75 74 52 65 66 2c 65 2e 6c 61 62 65 6c 29 2c 6d 3d 65 2e 6c 61 62 65 6c 50 6c 61 63 65 6d 65 6e 74 2c 67 3d 76 6f 69 64 20 30 3d 3d 3d 6d 3f 22 65 6e 64 22 3a 6d 2c 76 3d 28 65 2e 6e 61 6d 65 2c 65 2e 6f 6e 43 68 61 6e 67 65 2c 65 2e 76 61 6c 75 65 2c 28 30 2c 72 2e 5a 29 28 65 2c 5b 22 63 68 65 63 6b 65 64 22 2c 22 63 6c 61 73 73 65 73 22 2c 22 Data Ascii: 1),s=n(52543),d=n(22318),c=n(93871),u=i.forwardRef((function(e,t){e.checked;var n=e.classes,s=e.className,u=e.control,f=e.disabled,p=(e.inputRef,e.label),m=e.labelPlacement,g=void 0===m?"end":m,v=(e.name,e.onChange,e.value,(0,r.Z)(e,["checked","classes","
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 62 65 6c 22 7d 29 28 75 29 7d 2c 33 32 39 34 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 6f 2e 5a 7d 29 3b 76 61 72 20 6f 3d 6e 28 33 30 35 35 33 29 7d 2c 36 35 36 32 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 64 7d 29 3b 76 61 72 20 6f 3d 6e 28 38 37 34 36 32 29 2c 72 3d 6e 28 34 35 39 38 37 29 2c 69 3d 6e 28 33 35 37 37 36 29 2c 61 3d 6e 28 38 36 30 31 30 29 2c 6c 3d 6e 28 35 32 35 34 33 29 2c 73 3d 69 2e 66 6f 72 77 61 72 64 52 65 66 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 63 6c 61 73 73 65 73 2c 6c 3d 65 2e 63 6c 61 73 73 4e 61 6d 65 2c 73 3d 65 2e 72 6f 77 2c 64 3d 76 6f 69 64 20 30 21 3d 3d 73 26 26 73 2c 63 3d 28 30 2c 72 Data Ascii: bel"})(u)},3294:(e,t,n)=>{n.r(t),n.d(t,{default:()=>o.Z});var o=n(30553)},6562:(e,t,n)=>{n.d(t,{Z:()=>d});var o=n(87462),r=n(45987),i=n(35776),a=n(86010),l=n(52543),s=i.forwardRef((function(e,t){var n=e.classes,l=e.className,s=e.row,d=void 0!==s&&s,c=(0,r
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 3a 7b 5f 5f 68 74 6d 6c 3a 22 26 23 38 32 30 33 3b 22 7d 7d 29 3a 6e 29 7d 29 29 3b 63 6f 6e 73 74 20 75 3d 28 30 2c 64 2e 5a 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 72 6f 6f 74 3a 28 30 2c 72 2e 5a 29 28 7b 63 6f 6c 6f 72 3a 65 2e 70 61 6c 65 74 74 65 2e 74 65 78 74 2e 73 65 63 6f 6e 64 61 72 79 7d 2c 65 2e 74 79 70 6f 67 72 61 70 68 79 2e 63 61 70 74 69 6f 6e 2c 7b 74 65 78 74 41 6c 69 67 6e 3a 22 6c 65 66 74 22 2c 6d 61 72 67 69 6e 54 6f 70 3a 33 2c 6d 61 72 67 69 6e 3a 30 2c 22 26 24 64 69 73 61 62 6c 65 64 22 3a 7b 63 6f 6c 6f 72 3a 65 2e 70 61 6c 65 74 74 65 2e 74 65 78 74 2e 64 69 73 61 62 6c 65 64 7d 2c 22 26 24 65 72 72 6f 72 22 3a 7b 63 6f 6c 6f 72 3a 65 2e 70 61 6c 65 74 74 Data Ascii: slySetInnerHTML:{__html:""}}):n)}));const u=(0,d.Z)((function(e){return{root:(0,r.Z)({color:e.palette.text.secondary},e.typography.caption,{textAlign:"left",marginTop:3,margin:0,"&$disabled":{color:e.palette.text.disabled},"&$error":{color:e.palett
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 73 65 63 6f 6e 64 61 72 79 7d 2c 65 2e 74 79 70 6f 67 72 61 70 68 79 2e 62 6f 64 79 31 2c 7b 6c 69 6e 65 48 65 69 67 68 74 3a 31 2c 70 61 64 64 69 6e 67 3a 30 2c 22 26 24 66 6f 63 75 73 65 64 22 3a 7b 63 6f 6c 6f 72 3a 65 2e 70 61 6c 65 74 74 65 2e 70 72 69 6d 61 72 79 2e 6d 61 69 6e 7d 2c 22 26 24 64 69 73 61 62 6c 65 64 22 3a 7b 63 6f 6c 6f 72 3a 65 2e 70 61 6c 65 74 74 65 2e 74 65 78 74 2e 64 69 73 61 62 6c 65 64 7d 2c 22 26 24 65 72 72 6f 72 22 3a 7b 63 6f 6c 6f 72 3a 65 2e 70 61 6c 65 74 74 65 2e 65 72 72 6f 72 2e 6d 61 69 6e 7d 7d 29 2c 63 6f 6c 6f 72 53 65 63 6f 6e 64 61 72 79 3a 7b 22 26 24 66 6f 63 75 73 65 64 22 3a 7b 63 6f 6c 6f 72 3a 65 2e 70 61 6c 65 74 74 65 2e 73 65 63 6f 6e 64 61 72 79 2e 6d 61 69 6e 7d 7d 2c 66 6f 63 75 73 65 64 3a 7b 7d Data Ascii: secondary},e.typography.body1,{lineHeight:1,padding:0,"&$focused":{color:e.palette.primary.main},"&$disabled":{color:e.palette.text.disabled},"&$error":{color:e.palette.error.main}}),colorSecondary:{"&$focused":{color:e.palette.secondary.main}},focused:{}
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 2c 22 73 6d 22 2c 22 73 70 61 63 69 6e 67 22 2c 22 77 72 61 70 22 2c 22 78 6c 22 2c 22 78 73 22 2c 22 7a 65 72 6f 4d 69 6e 57 69 64 74 68 22 5d 29 2c 48 3d 28 30 2c 61 2e 64 65 66 61 75 6c 74 29 28 63 2e 72 6f 6f 74 2c 75 2c 67 26 26 5b 63 2e 63 6f 6e 74 61 69 6e 65 72 2c 30 21 3d 3d 6b 26 26 63 5b 22 73 70 61 63 69 6e 67 2d 78 73 2d 22 2e 63 6f 6e 63 61 74 28 53 74 72 69 6e 67 28 6b 29 29 5d 5d 2c 78 26 26 63 2e 69 74 65 6d 2c 24 26 26 63 2e 7a 65 72 6f 4d 69 6e 57 69 64 74 68 2c 22 72 6f 77 22 21 3d 3d 68 26 26 63 5b 22 64 69 72 65 63 74 69 6f 6e 2d 78 73 2d 22 2e 63 6f 6e 63 61 74 28 53 74 72 69 6e 67 28 68 29 29 5d 2c 22 77 72 61 70 22 21 3d 3d 4d 26 26 63 5b 22 77 72 61 70 2d 78 73 2d 22 2e 63 6f 6e 63 61 74 28 53 74 72 69 6e 67 28 4d 29 29 5d 2c 22 Data Ascii: ,"sm","spacing","wrap","xl","xs","zeroMinWidth"]),H=(0,a.default)(c.root,u,g&&[c.container,0!==k&&c["spacing-xs-".concat(String(k))]],x&&c.item,$&&c.zeroMinWidth,"row"!==h&&c["direction-xs-".concat(String(h))],"wrap"!==M&&c["wrap-xs-".concat(String(M))],"
2024-04-26 12:23:13 UTC	1379	IN	Data Raw: 22 63 65 6e 74 65 72 22 7d 2c 22 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 2d 78 73 2d 66 6c 65 78 2d 73 74 61 72 74 22 3a 7b 61 6c 69 67 6e 43 6f 6e 74 65 6e 74 3a 22 66 6c 65 78 2d 73 74 61 72 74 22 7d 2c 22 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 2d 78 73 2d 66 6c 65 78 2d 65 6e 64 22 3a 7b 61 6c 69 67 6e 43 6f 6e 74 65 6e 74 3a 22 66 6c 65 78 2d 65 6e 64 22 7d 2c 22 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 2d 78 73 2d 73 70 61 63 65 2d 62 65 74 77 65 65 6e 22 3a 7b 61 6c 69 67 6e 43 6f 6e 74 65 6e 74 3a 22 73 70 61 63 65 2d 62 65 74 77 65 65 6e 22 7d 2c 22 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 2d 78 73 2d 73 70 61 63 65 2d 61 72 6f 75 6e 64 22 3a 7b 61 6c 69 67 6e 43 6f 6e 74 65 6e 74 3a 22 73 70 61 63 65 2d 61 72 6f 75 6e 64 22 7d 2c 22 6a 75 73 74 69 66 Data Ascii: "center"},"align-content-xs-flex-start":{alignContent:"flex-start"},"align-content-xs-flex-end":{alignContent:"flex-end"},"align-content-xs-space-between":{alignContent:"space-between"},"align-content-xs-space-around":{alignContent:"space-around"},"justif

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49844	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:14 UTC	558	OUT	GET /ice/vendorVenmo33.c787738d7252865aa635.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:14 UTC	853	IN	HTTP/1.1 200 OK Connection: close Content-Length: 29464 Cache-Control: s-maxage=31536000, public,max-age=86400 Content-Type: application/javascript Etag: "66064785-7318" Last-Modified: Fri, 29 Mar 2024 04:45:57 GMT Paypal-Debug-Id: c99d0995940cc Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000c99d0995940cc-c9d351dd768addc8-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:14 GMT X-Served-By: cache-dfw-kdfw8210069-DFW, cache-gnv1820021-GNV X-Cache: HIT, MISS X-Cache-Hits: 10, 0 X-Timer: S1714134194.265696,VS0,VE23 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 33 5d 2c 7b 32 37 35 38 34 3a 61 3d 3e 7b 61 2e 65 78 70 6f 72 74 73 3d 27 3c 73 76 67 20 69 64 3d 22 6c 69 76 65 74 79 70 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 31 39 2e 36 36 34 30 37 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 39 2e 36 36 34 30 37 20 34 30 22 3e 5c 6e 20 20 3c 74 69 74 Data Ascii: "use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[33],{27584:a=>{a.exports='<svg id="livetype" xmlns="http://www.w3.org/2000/svg" width="119.66407" height="40" viewBox="0 0 119.66407 40">\n <tit
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 2e 33 36 36 32 31 2c 30 2d 2e 37 32 39 34 39 2d 2e 30 30 37 38 2d 31 2e 30 39 31 37 39 2c 30 2d 2e 33 30 36 36 34 2c 30 2d 2e 36 31 34 32 36 2d 2e 30 30 33 39 2d 2e 39 32 30 39 61 31 33 2e 35 30 37 31 2c 31 33 2e 35 30 37 31 2c 30 2c 30 2c 30 2d 2e 31 38 35 36 2d 32 2e 30 30 32 2c 36 2e 36 31 37 37 2c 36 2e 36 31 37 37 2c 30 2c 30 2c 30 2d 2e 36 31 39 31 2d 31 2e 39 30 33 33 32 2c 36 2e 34 36 36 31 39 2c 36 2e 34 36 36 31 39 2c 30 2c 30 2c 30 2d 32 2e 37 39 38 38 2d 32 2e 37 39 39 38 2c 36 2e 37 36 37 35 34 2c 36 2e 37 36 37 35 34 2c 30 2c 30 2c 30 2d 31 2e 39 30 38 32 2d 2e 36 32 37 2c 31 33 2e 30 34 33 39 34 2c 31 33 2e 30 34 33 39 34 2c 30 2c 30 2c 30 2d 32 2d 2e 31 37 36 37 36 63 2d 2e 33 30 34 37 2d 2e 30 30 34 38 38 2d 2e 36 31 37 32 2d 2e 30 31 30 Data Ascii: .36621,0-.72949-.0078-1.09179,0-.30664,0-.61426-.0039-.9209a13.5071,13.5071,0,0,0-.1856-2.002,6.6177,6.6177,0,0,0-.6191-1.90332,6.46619,6.46619,0,0,0-2.7988-2.7998,6.76754,6.76754,0,0,0-1.9082-.627,13.04394,13.04394,0,0,0-2-.17676c-.3047-.00488-.6172-.010
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 2e 30 32 32 35 2c 35 2e 38 36 31 36 38 2c 35 2e 38 36 31 36 38 2c 30 2c 30 2c 31 2d 31 2e 36 36 38 2e 35 34 39 38 2c 31 32 2e 35 34 32 31 38 2c 31 32 2e 35 34 32 31 38 2c 30 2c 30 2c 31 2d 31 2e 38 36 39 32 2e 31 36 33 31 63 2d 2e 32 39 32 39 2e 30 30 36 38 2d 2e 35 39 39 36 2e 30 31 30 37 2d 2e 38 39 37 34 2e 30 31 30 37 6c 2d 31 2e 30 38 34 2e 30 30 32 5a 22 2f 3e 5c 6e 20 20 20 20 20 20 3c 2f 67 3e 5c 6e 20 20 20 20 20 20 3c 67 20 69 64 3d 22 5f 47 72 6f 75 70 5f 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 26 6c 74 3b 47 72 6f 75 70 26 67 74 3b 22 3e 5c 6e 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 5f 47 72 6f 75 70 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 26 6c 74 3b 47 72 6f 75 70 26 67 74 3b 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 Data Ascii: .0225,5.86168,5.86168,0,0,1-1.668.5498,12.54218,12.54218,0,0,1-1.8692.1631c-.2929.0068-.5996.0107-.8974.0107l-1.084.002Z"/>\n </g>\n <g id="_Group_" data-name="<Group>">\n <g id="_Group_2" data-name="<Group>">\n <g id
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 20 3c 70 61 74 68 20 64 3d 22 4d 35 35 2e 31 35 39 36 39 2c 32 35 2e 39 36 39 37 33 63 30 2c 32 2e 38 31 33 34 38 2d 31 2e 35 30 35 38 36 2c 34 2e 36 32 31 30 39 2d 33 2e 37 37 38 33 32 2c 34 2e 36 32 31 30 39 61 33 2e 30 36 39 33 2c 33 2e 30 36 39 33 2c 30 2c 30 2c 31 2d 32 2e 38 34 38 36 33 2d 31 2e 35 38 34 68 2d 2e 30 34 33 76 34 2e 34 38 34 33 38 68 2d 31 2e 38 35 38 34 56 32 31 2e 34 34 32 33 38 48 34 38 2e 34 33 30 32 76 31 2e 35 30 35 38 36 68 2e 30 33 34 31 38 61 33 2e 32 31 31 36 32 2c 33 2e 32 31 31 36 32 2c 30 2c 30 2c 31 2c 32 2e 38 38 32 38 31 2d 31 2e 36 30 30 35 39 43 35 33 2e 36 34 35 2c 32 31 2e 33 34 37 36 36 2c 35 35 2e 31 35 39 36 39 2c 32 33 2e 31 36 34 30 36 2c 35 35 2e 31 35 39 36 39 2c 32 35 2e 39 36 39 37 33 5a 6d 2d 31 2e 39 31 Data Ascii: <path d="M55.15969,25.96973c0,2.81348-1.50586,4.62109-3.77832,4.62109a3.0693,3.0693,0,0,1-2.84863-1.584h-.043v4.48438h-1.8584V21.44238H48.4302v1.50586h.03418a3.21162,3.21162,0,0,1,2.88281-1.60059C53.645,21.34766,55.15969,23.16406,55.15969,25.96973Zm-1.91
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 2c 33 2e 34 34 32 33 38 2c 30 2c 32 2e 33 32 33 32 34 2d 31 2e 38 35 30 35 39 2c 33 2e 37 37 38 33 32 2d 34 2e 37 39 33 39 35 2c 33 2e 37 37 38 33 32 2d 32 2e 37 35 33 39 31 2c 30 2d 34 2e 36 31 33 32 38 2d 31 2e 34 32 30 39 2d 34 2e 37 33 33 34 2d 33 2e 36 36 37 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 20 23 66 66 66 22 2f 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 38 33 2e 33 34 36 32 31 2c 31 39 2e 32 39 39 38 76 32 2e 31 34 32 35 38 68 31 2e 37 32 31 36 38 76 31 2e 34 37 31 36 38 48 38 33 2e 33 34 36 32 31 76 34 2e 39 39 31 32 31 63 30 2c 2e 37 37 35 33 39 2e 33 34 34 37 33 2c 31 2e 31 33 36 37 32 2c 31 2e 31 30 31 35 36 2c 31 2e 31 33 36 37 32 61 35 2e 38 30 37 35 32 2c 35 2e 38 30 37 35 32 2c 30 2c 30 2c 30 2c 2e 36 31 Data Ascii: ,3.44238,0,2.32324-1.85059,3.77832-4.79395,3.77832-2.75391,0-4.61328-1.4209-4.7334-3.667Z" style="fill: #fff"/>\n <path d="M83.34621,19.2998v2.14258h1.72168v1.47168H83.34621v4.99121c0,.77539.34473,1.13672,1.10156,1.13672a5.80752,5.80752,0,0,0,.61
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 37 37 33 2c 32 2e 31 37 37 33 2c 30 2c 30 2c 30 2d 32 2e 32 32 30 37 2d 32 2e 32 39 37 38 35 41 32 2e 32 39 32 2c 32 2e 32 39 32 2c 30 2c 30 2c 30 2c 31 30 33 2e 31 30 32 30 37 2c 32 35 2e 31 33 34 37 37 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 20 23 66 66 66 22 2f 3e 5c 6e 20 20 20 20 20 20 20 20 3c 2f 67 3e 5c 6e 20 20 20 20 20 20 3c 2f 67 3e 5c 6e 20 20 20 20 3c 2f 67 3e 5c 6e 20 20 20 20 3c 67 20 69 64 3d 22 5f 47 72 6f 75 70 5f 34 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 26 6c 74 3b 47 72 6f 75 70 26 67 74 3b 22 3e 5c 6e 20 20 20 20 20 20 3c 67 3e 5c 6e 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 33 37 2e 38 32 36 31 39 2c 38 2e 37 33 31 61 32 2e 36 33 39 36 34 2c 32 2e 36 33 39 36 34 2c 30 2c 30 2c 31 2c 32 2e 38 30 37 36 32 2c 32 2e 39 Data Ascii: 773,2.1773,0,0,0-2.2207-2.29785A2.292,2.292,0,0,0,103.10207,25.13477Z" style="fill: #fff"/>\n </g>\n </g>\n </g>\n <g id="_Group_4" data-name="<Group>">\n <g>\n <path d="M37.82619,8.731a2.63964,2.63964,0,0,1,2.80762,2.9
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 2c 31 2c 31 2d 34 2e 32 34 37 35 36 2c 30 5a 6d 33 2e 33 33 33 2c 30 63 30 2d 2e 39 37 36 30 37 2d 2e 34 33 38 34 38 2d 31 2e 35 34 36 38 37 2d 31 2e 32 30 38 2d 31 2e 35 34 36 38 37 2d 2e 37 37 32 34 36 2c 30 2d 31 2e 32 30 37 2e 35 37 30 38 2d 31 2e 32 30 37 2c 31 2e 35 34 36 38 38 2c 30 2c 2e 39 38 33 38 39 2e 34 33 34 35 37 2c 31 2e 35 35 30 32 39 2c 31 2e 32 30 37 2c 31 2e 35 35 30 32 39 43 36 34 2e 31 31 32 33 32 2c 31 33 2e 39 39 34 36 33 2c 36 34 2e 35 35 30 38 2c 31 33 2e 34 32 34 33 32 2c 36 34 2e 35 35 30 38 2c 31 32 2e 34 34 34 33 34 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 20 23 66 66 66 22 2f 3e 5c 6e 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 36 36 2e 34 30 30 39 2c 31 33 2e 34 32 34 33 32 63 30 2d 2e 38 31 30 35 35 2e 36 30 Data Ascii: ,1,1-4.24756,0Zm3.333,0c0-.97607-.43848-1.54687-1.208-1.54687-.77246,0-1.207.5708-1.207,1.54688,0,.98389.43457,1.55029,1.207,1.55029C64.11232,13.99463,64.5508,13.42432,64.5508,12.44434Z" style="fill: #fff"/>\n <path d="M66.4009,13.42432c0-.81055.60
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 30 32 39 2c 31 2e 32 30 37 2c 31 2e 35 35 30 32 39 43 38 32 2e 31 32 34 35 33 2c 31 33 2e 39 39 34 36 33 2c 38 32 2e 35 36 33 2c 31 33 2e 34 32 34 33 32 2c 38 32 2e 35 36 33 2c 31 32 2e 34 34 34 33 34 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 20 23 66 66 66 22 2f 3e 5c 6e 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 38 34 2e 36 36 39 34 35 2c 31 30 2e 31 39 34 38 32 68 2e 38 35 35 34 37 76 2e 37 31 35 33 33 68 2e 30 36 36 34 31 61 31 2e 33 34 38 2c 31 2e 33 34 38 2c 30 2c 30 2c 31 2c 31 2e 33 34 33 37 35 2d 2e 38 30 32 32 35 2c 31 2e 34 36 34 35 36 2c 31 2e 34 36 34 35 36 2c 30 2c 30 2c 31 2c 31 2e 35 35 38 35 39 2c 31 2e 36 37 34 38 76 32 2e 39 31 35 48 38 37 2e 36 30 35 56 31 32 2e 30 30 35 38 36 63 30 2d 2e 37 32 33 36 33 2d 2e 33 31 34 34 Data Ascii: 029,1.207,1.55029C82.12453,13.99463,82.563,13.42432,82.563,12.44434Z" style="fill: #fff"/>\n <path d="M84.66945,10.19482h.85547v.71533h.06641a1.348,1.348,0,0,1,1.34375-.80225,1.46456,1.46456,0,0,1,1.55859,1.6748v2.915H87.605V12.00586c0-.72363-.3144
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 31 39 2e 36 36 34 30 37 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 39 2e 36 36 34 30 37 20 34 30 22 3e 5c 6e 20 20 3c 74 69 74 6c 65 3e 44 6f 77 6e 6c 6f 61 64 5f 6f 6e 5f 74 68 65 5f 41 70 70 5f 53 74 6f 72 65 5f 42 61 64 67 65 5f 55 53 2d 55 4b 5f 52 47 42 5f 77 68 74 5f 30 39 32 39 31 37 3c 2f 74 69 74 6c 65 3e 5c 6e 20 20 3c 67 3e 5c 6e 20 20 20 20 3c 67 3e 5c 6e 20 20 20 20 20 20 3c 67 3e 5c 6e 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 31 30 2e 31 33 34 37 37 2c 30 48 39 2e 35 33 34 36 38 63 2d 2e 33 36 36 37 2c 30 2d 2e 37 32 39 2c 30 2d 31 2e 30 39 34 37 33 2e 30 30 32 2d 2e 33 Data Ascii: ="http://www.w3.org/2000/svg" width="119.66407" height="40" viewBox="0 0 119.66407 40">\n <title>Download_on_the_App_Store_Badge_US-UK_RGB_wht_092917</title>\n <g>\n <g>\n <g>\n <path d="M110.13477,0H9.53468c-.3667,0-.729,0-1.09473.002-.3
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 2e 37 36 37 35 34 2c 36 2e 37 36 37 35 34 2c 30 2c 30 2c 30 2d 31 2e 39 30 38 32 2d 2e 36 32 37 2c 31 33 2e 30 34 33 39 34 2c 31 33 2e 30 34 33 39 34 2c 30 2c 30 2c 30 2d 32 2d 2e 31 37 36 37 36 63 2d 2e 33 30 34 37 2d 2e 30 30 34 38 38 2d 2e 36 31 37 32 2d 2e 30 31 30 37 34 2d 2e 39 32 31 39 2d 2e 30 31 32 36 39 2d 2e 33 35 39 34 2d 2e 30 30 32 2d 2e 37 32 34 36 2d 2e 30 30 32 2d 31 2e 30 38 34 2d 2e 30 30 32 5a 22 2f 3e 5c 6e 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 38 2e 34 34 34 38 33 2c 33 39 2e 31 32 35 63 2d 2e 33 30 34 36 38 2c 30 2d 2e 36 30 32 2d 2e 30 30 33 39 2d 2e 39 30 34 32 39 2d 2e 30 31 30 37 61 31 32 2e 36 38 37 31 34 2c 31 32 2e 36 38 37 31 34 2c 30 2c 30 2c 31 2d 31 2e 38 36 39 31 34 2d 2e 31 36 33 31 2c 35 2e 38 38 33 38 Data Ascii: .76754,6.76754,0,0,0-1.9082-.627,13.04394,13.04394,0,0,0-2-.17676c-.3047-.00488-.6172-.01074-.9219-.01269-.3594-.002-.7246-.002-1.084-.002Z"/>\n <path d="M8.44483,39.125c-.30468,0-.602-.0039-.90429-.0107a12.68714,12.68714,0,0,1-1.86914-.1631,5.8838

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49845	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:14 UTC	558	OUT	GET /ice/vendorVenmo34.1ac1cc6ce8985ed3f498.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:14 UTC	856	IN	HTTP/1.1 200 OK Connection: close Content-Length: 77066 Cache-Control: s-maxage=31536000, public,max-age=86400 Content-Type: application/javascript Etag: "66064786-12d0a" Last-Modified: Fri, 29 Mar 2024 04:45:58 GMT Paypal-Debug-Id: 2a51b65b625c0 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000002a51b65b625c0-281dd14c77902e6f-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:14 GMT X-Served-By: cache-dfw-kdal2120079-DFW, cache-pdk-kpdk1780106-PDK X-Cache: HIT, HIT X-Cache-Hits: 1, 0 X-Timer: S1714134194.325201,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 34 5d 2c 7b 33 36 39 33 39 3a 28 65 2c 74 2c 61 29 3d 3e 7b 61 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 68 7d 29 3b 76 61 72 20 6f 3d 61 28 38 37 34 36 32 29 2c 72 3d 61 28 38 34 35 30 36 29 2c 6e 3d 61 28 32 39 34 33 39 29 2c 69 3d 61 28 34 35 39 38 37 29 2c 6c 3d 61 28 33 35 37 37 36 29 2c 73 3d 28 61 28 35 39 38 36 34 29 2c 61 28 38 36 30 31 30 29 29 2c 63 3d 61 28 36 36 30 33 37 29 2c 64 3d 61 28 37 39 38 39 35 29 2c 70 3d 61 28 Data Ascii: "use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[34],{36939:(e,t,a)=>{a.d(t,{Z:()=>h});var o=a(87462),r=a(84506),n=a(29439),i=a(45987),l=a(35776),s=(a(59864),a(86010)),c=a(66037),d=a(79895),p=a(
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 65 74 75 72 6e 7b 72 6f 6f 74 3a 7b 70 6f 73 69 74 69 6f 6e 3a 22 72 65 6c 61 74 69 76 65 22 2c 74 72 61 6e 73 69 74 69 6f 6e 3a 65 2e 74 72 61 6e 73 69 74 69 6f 6e 73 2e 63 72 65 61 74 65 28 5b 22 6d 61 72 67 69 6e 22 5d 2c 74 29 2c 22 26 3a 62 65 66 6f 72 65 22 3a 7b 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 2c 6c 65 66 74 3a 30 2c 74 6f 70 3a 2d 31 2c 72 69 67 68 74 3a 30 2c 68 65 69 67 68 74 3a 31 2c 63 6f 6e 74 65 6e 74 3a 27 22 22 27 2c 6f 70 61 63 69 74 79 3a 31 2c 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 65 2e 70 61 6c 65 74 74 65 2e 64 69 76 69 64 65 72 2c 74 72 61 6e 73 69 74 69 6f 6e 3a 65 2e 74 72 61 6e 73 69 74 69 6f 6e 73 2e 63 72 65 61 74 65 28 5b 22 6f 70 61 63 69 74 79 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f Data Ascii: eturn{root:{position:"relative",transition:e.transitions.create(["margin"],t),"&:before":{position:"absolute",left:0,top:-1,right:0,height:1,content:'""',opacity:1,backgroundColor:e.palette.divider,transition:e.transitions.create(["opacity","background-co
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 74 7d 2c 64 29 29 7d 29 29 3b 63 6f 6e 73 74 20 63 3d 28 30 2c 6c 2e 5a 29 28 7b 72 6f 6f 74 3a 7b 64 69 73 70 6c 61 79 3a 22 66 6c 65 78 22 2c 61 6c 69 67 6e 49 74 65 6d 73 3a 22 63 65 6e 74 65 72 22 2c 70 61 64 64 69 6e 67 3a 38 2c 6a 75 73 74 69 66 79 43 6f 6e 74 65 6e 74 3a 22 66 6c 65 78 2d 65 6e 64 22 7d 2c 73 70 61 63 69 6e 67 3a 7b 22 26 20 3e 20 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 22 3a 7b 6d 61 72 67 69 6e 4c 65 66 74 3a 38 7d 7d 7d 2c 7b 6e 61 6d 65 3a 22 4d 75 69 41 63 63 6f 72 64 69 6f 6e 41 63 74 69 6f 6e 73 22 7d 29 28 73 29 7d 2c 36 31 32 30 31 3a 28 65 2c 74 2c 61 29 3d 3e 7b 61 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 6f 3d 61 28 38 37 34 36 32 29 2c 72 3d 61 28 34 35 39 38 37 29 2c 6e 3d 61 28 33 35 Data Ascii: t},d))}));const c=(0,l.Z)({root:{display:"flex",alignItems:"center",padding:8,justifyContent:"flex-end"},spacing:{"& > :not(:first-child)":{marginLeft:8}}},{name:"MuiAccordionActions"})(s)},61201:(e,t,a)=>{a.d(t,{Z:()=>c});var o=a(87462),r=a(45987),n=a(35
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 65 29 7b 6b 26 26 6b 28 65 29 2c 67 26 26 67 28 65 29 7d 2c 72 65 66 3a 74 7d 2c 62 29 2c 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 28 30 2c 69 2e 64 65 66 61 75 6c 74 29 28 63 2e 63 6f 6e 74 65 6e 74 2c 5a 26 26 63 2e 65 78 70 61 6e 64 65 64 29 7d 2c 61 29 2c 75 26 26 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 2e 5a 2c 28 30 2c 6f 2e 5a 29 28 7b 63 6c 61 73 73 4e 61 6d 65 3a 28 30 2c 69 2e 64 65 66 61 75 6c 74 29 28 63 2e 65 78 70 61 6e 64 49 63 6f 6e 2c 5a 26 26 63 2e 65 78 70 61 6e 64 65 64 29 2c 65 64 67 65 3a 22 65 6e 64 22 2c 63 6f 6d 70 6f 6e 65 6e 74 3a 22 64 69 76 22 2c 74 61 62 49 6e 64 65 78 3a 6e 75 6c 6c 2c 72 6f 6c 65 3a 6e 75 6c 6c 2c 22 61 72 69 61 2d 68 69 64 64 65 6e 22 3a Data Ascii: e){k&&k(e),g&&g(e)},ref:t},b),n.createElement("div",{className:(0,i.default)(c.content,Z&&c.expanded)},a),u&&n.createElement(s.Z,(0,o.Z)({className:(0,i.default)(c.expandIcon,Z&&c.expanded),edge:"end",component:"div",tabIndex:null,role:null,"aria-hidden":
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 2e 5a 29 28 65 2c 5b 22 63 6c 61 73 73 65 73 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 2c 22 63 6f 6c 6f 72 22 2c 22 70 6f 73 69 74 69 6f 6e 22 5d 29 3b 72 65 74 75 72 6e 20 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 5a 2c 28 30 2c 6f 2e 5a 29 28 7b 73 71 75 61 72 65 3a 21 30 2c 63 6f 6d 70 6f 6e 65 6e 74 3a 22 68 65 61 64 65 72 22 2c 65 6c 65 76 61 74 69 6f 6e 3a 34 2c 63 6c 61 73 73 4e 61 6d 65 3a 28 30 2c 69 2e 64 65 66 61 75 6c 74 29 28 61 2e 72 6f 6f 74 2c 61 5b 22 70 6f 73 69 74 69 6f 6e 22 2e 63 6f 6e 63 61 74 28 28 30 2c 73 2e 5a 29 28 6d 29 29 5d 2c 61 5b 22 63 6f 6c 6f 72 22 2e 63 6f 6e 63 61 74 28 28 30 2c 73 2e 5a 29 28 70 29 29 5d 2c 6c 2c 22 66 69 78 65 64 22 3d 3d 3d 6d 26 26 22 6d 75 69 2d 66 69 78 65 64 22 29 2c 72 65 66 3a 74 7d Data Ascii: .Z)(e,["classes","className","color","position"]);return n.createElement(c.Z,(0,o.Z)({square:!0,component:"header",elevation:4,className:(0,i.default)(a.root,a["position".concat((0,s.Z)(m))],a["color".concat((0,s.Z)(p))],l,"fixed"===m&&"mui-fixed"),ref:t}
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 63 68 69 6c 64 72 65 6e 2c 63 3d 65 2e 63 6c 61 73 73 65 73 2c 64 3d 65 2e 63 6c 61 73 73 4e 61 6d 65 2c 70 3d 65 2e 63 6f 6d 70 6f 6e 65 6e 74 2c 75 3d 76 6f 69 64 20 30 3d 3d 3d 70 3f 22 64 69 76 22 3a 70 2c 6d 3d 65 2e 69 6d 67 50 72 6f 70 73 2c 66 3d 65 2e 73 69 7a 65 73 2c 68 3d 65 2e 73 72 63 2c 67 3d 65 2e 73 72 63 53 65 74 2c 62 3d 65 2e 76 61 72 69 61 6e 74 2c 76 3d 76 6f 69 64 20 30 3d 3d 3d 62 3f 22 63 69 72 63 75 6c 61 72 22 3a 62 2c 79 3d 28 30 2c 72 2e 5a 29 28 65 2c 5b 22 61 6c 74 22 2c 22 63 68 69 6c 64 72 65 6e 22 2c 22 63 6c 61 73 73 65 73 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 2c 22 63 6f 6d 70 6f 6e 65 6e 74 22 2c 22 69 6d 67 50 72 6f 70 73 22 2c 22 73 69 7a 65 73 22 2c 22 73 72 63 22 2c 22 73 72 63 53 65 74 22 2c 22 76 61 72 69 61 6e Data Ascii: children,c=e.classes,d=e.className,p=e.component,u=void 0===p?"div":p,m=e.imgProps,f=e.sizes,h=e.src,g=e.srcSet,b=e.variant,v=void 0===b?"circular":b,y=(0,r.Z)(e,["alt","children","classes","className","component","imgProps","sizes","src","srcSet","varian
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 25 22 2c 74 65 78 74 41 6c 69 67 6e 3a 22 63 65 6e 74 65 72 22 2c 6f 62 6a 65 63 74 46 69 74 3a 22 63 6f 76 65 72 22 2c 63 6f 6c 6f 72 3a 22 74 72 61 6e 73 70 61 72 65 6e 74 22 2c 74 65 78 74 49 6e 64 65 6e 74 3a 31 65 34 7d 2c 66 61 6c 6c 62 61 63 6b 3a 7b 77 69 64 74 68 3a 22 37 35 25 22 2c 68 65 69 67 68 74 3a 22 37 35 25 22 7d 7d 7d 29 2c 7b 6e 61 6d 65 3a 22 4d 75 69 41 76 61 74 61 72 22 7d 29 28 63 29 7d 2c 38 32 35 37 35 3a 28 65 2c 74 2c 61 29 3d 3e 7b 61 2e 72 28 74 29 2c 61 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 6f 2e 5a 7d 29 3b 76 61 72 20 6f 3d 61 28 35 30 35 32 37 29 7d 2c 33 32 36 39 32 3a 28 65 2c 74 2c 61 29 3d 3e 7b 61 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 64 7d 29 3b 76 61 72 20 6f 3d 61 28 38 37 34 36 32 29 2c 72 3d 61 28 Data Ascii: %",textAlign:"center",objectFit:"cover",color:"transparent",textIndent:1e4},fallback:{width:"75%",height:"75%"}}}),{name:"MuiAvatar"})(c)},82575:(e,t,a)=>{a.r(t),a.d(t,{default:()=>o.Z});var o=a(50527)},32692:(e,t,a)=>{a.d(t,{Z:()=>d});var o=a(87462),r=a(
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 2c 76 3d 65 2e 6d 61 78 2c 79 3d 76 6f 69 64 20 30 3d 3d 3d 76 3f 39 39 3a 76 2c 78 3d 65 2e 6f 76 65 72 6c 61 70 2c 5a 3d 76 6f 69 64 20 30 3d 3d 3d 78 3f 22 72 65 63 74 61 6e 67 6c 65 22 3a 78 2c 6b 3d 65 2e 73 68 6f 77 5a 65 72 6f 2c 43 3d 76 6f 69 64 20 30 21 3d 3d 6b 26 26 6b 2c 45 3d 65 2e 76 61 72 69 61 6e 74 2c 52 3d 76 6f 69 64 20 30 3d 3d 3d 45 3f 22 73 74 61 6e 64 61 72 64 22 3a 45 2c 53 3d 28 30 2c 72 2e 5a 29 28 65 2c 5b 22 61 6e 63 68 6f 72 4f 72 69 67 69 6e 22 2c 22 62 61 64 67 65 43 6f 6e 74 65 6e 74 22 2c 22 63 68 69 6c 64 72 65 6e 22 2c 22 63 6c 61 73 73 65 73 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 2c 22 63 6f 6c 6f 72 22 2c 22 63 6f 6d 70 6f 6e 65 6e 74 22 2c 22 69 6e 76 69 73 69 62 6c 65 22 2c 22 6d 61 78 22 2c 22 6f 76 65 72 6c 61 70 Data Ascii: ,v=e.max,y=void 0===v?99:v,x=e.overlap,Z=void 0===x?"rectangle":x,k=e.showZero,C=void 0!==k&&k,E=e.variant,R=void 0===E?"standard":E,S=(0,r.Z)(e,["anchorOrigin","badgeContent","children","classes","className","color","component","invisible","max","overlap
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 65 2e 70 61 6c 65 74 74 65 2e 70 72 69 6d 61 72 79 2e 6d 61 69 6e 2c 63 6f 6c 6f 72 3a 65 2e 70 61 6c 65 74 74 65 2e 70 72 69 6d 61 72 79 2e 63 6f 6e 74 72 61 73 74 54 65 78 74 7d 2c 63 6f 6c 6f 72 53 65 63 6f 6e 64 61 72 79 3a 7b 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 65 2e 70 61 6c 65 74 74 65 2e 73 65 63 6f 6e 64 61 72 79 2e 6d 61 69 6e 2c 63 6f 6c 6f 72 3a 65 2e 70 61 6c 65 74 74 65 2e 73 65 63 6f 6e 64 61 72 79 2e 63 6f 6e 74 72 61 73 74 54 65 78 74 7d 2c 63 6f 6c 6f 72 45 72 72 6f 72 3a 7b 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 65 2e 70 61 6c 65 74 74 65 2e 65 72 72 6f 72 2e 6d 61 69 6e 2c 63 6f 6c 6f 72 3a 65 2e 70 61 6c 65 74 74 65 2e 65 72 72 6f 72 2e 63 6f 6e 74 72 61 73 74 54 65 78 74 7d Data Ascii: kgroundColor:e.palette.primary.main,color:e.palette.primary.contrastText},colorSecondary:{backgroundColor:e.palette.secondary.main,color:e.palette.secondary.contrastText},colorError:{backgroundColor:e.palette.error.main,color:e.palette.error.contrastText}
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 61 6e 67 6c 65 3a 7b 62 6f 74 74 6f 6d 3a 30 2c 6c 65 66 74 3a 30 2c 74 72 61 6e 73 66 6f 72 6d 3a 22 73 63 61 6c 65 28 31 29 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 20 35 30 25 29 22 2c 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3a 22 30 25 20 31 30 30 25 22 2c 22 26 24 69 6e 76 69 73 69 62 6c 65 22 3a 7b 74 72 61 6e 73 66 6f 72 6d 3a 22 73 63 61 6c 65 28 30 29 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 20 35 30 25 29 22 7d 7d 2c 61 6e 63 68 6f 72 4f 72 69 67 69 6e 42 6f 74 74 6f 6d 4c 65 66 74 52 65 63 74 61 6e 67 75 6c 61 72 3a 7b 62 6f 74 74 6f 6d 3a 30 2c 6c 65 66 74 3a 30 2c 74 72 61 6e 73 66 6f 72 6d 3a 22 73 63 61 6c 65 28 31 29 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 20 35 30 25 29 22 2c 74 72 61 6e 73 66 6f 72 6d 4f 72 69 Data Ascii: angle:{bottom:0,left:0,transform:"scale(1) translate(-50%, 50%)",transformOrigin:"0% 100%","&$invisible":{transform:"scale(0) translate(-50%, 50%)"}},anchorOriginBottomLeftRectangular:{bottom:0,left:0,transform:"scale(1) translate(-50%, 50%)",transformOri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49847	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:14 UTC	558	OUT	GET /ice/vendorVenmo35.8a7a4e709b77ea3ea16a.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:14 UTC	852	IN	HTTP/1.1 200 OK Connection: close Content-Length: 16759 Cache-Control: s-maxage=31536000, public,max-age=86400 Content-Type: application/javascript Etag: "66064786-4177" Last-Modified: Fri, 29 Mar 2024 04:45:58 GMT Paypal-Debug-Id: a918da6cb89d2 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000a918da6cb89d2-f68fe1f17179d9d2-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:14 GMT X-Served-By: cache-dfw-kdal2120132-DFW, cache-gnv1820025-GNV X-Cache: HIT, MISS X-Cache-Hits: 7, 0 X-Timer: S1714134194.475485,VS0,VE25 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 35 5d 2c 7b 31 35 39 32 31 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 70 7d 29 3b 76 61 72 20 6e 3d 72 28 38 37 34 36 32 29 2c 6f 3d 72 28 31 35 36 37 31 29 2c 61 3d 72 28 34 33 31 34 34 29 2c 73 3d 72 28 33 35 37 37 36 29 2c 69 3d 72 28 35 34 30 31 33 29 2c 63 3d 72 28 32 36 39 37 35 29 2c 75 3d 72 28 35 30 33 34 29 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 Data Ascii: "use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[35],{15921:(e,t,r)=>{r.d(t,{Z:()=>p});var n=r(87462),o=r(15671),a=r(43144),s=r(35776),i=r(54013),c=r(26975),u=r(5034),p=function(){function e(){v
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 69 73 61 62 6c 65 47 65 6e 65 72 61 74 69 6f 6e 3a 6c 7d 2c 64 29 3b 69 66 28 21 5a 2e 6a 73 73 2e 6f 70 74 69 6f 6e 73 2e 69 6e 73 65 72 74 69 6f 6e 50 6f 69 6e 74 26 26 69 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 29 7b 69 66 28 21 6e 29 7b 76 61 72 20 68 3d 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 3b 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 28 22 6d 75 69 2d 69 6e 6a 65 63 74 2d 66 69 72 73 74 22 29 2c 68 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6e 2c 68 2e 66 69 72 73 74 43 68 69 6c 64 29 7d 5a 2e 6a 73 73 3d 28 30 2c 63 2e 55 65 29 28 7b 70 6c 75 67 69 6e 73 3a 28 30 2c 75 2e 5a 29 28 29 2e 70 6c 75 67 69 6e 73 2c 69 6e 73 65 72 74 69 6f 6e 50 6f 69 6e 74 3a 6e 7d 29 7d 72 65 74 Data Ascii: isableGeneration:l},d);if(!Z.jss.options.insertionPoint&&i&&"undefined"!=typeof window){if(!n){var h=document.head;n=document.createComment("mui-inject-first"),h.insertBefore(n,h.firstChild)}Z.jss=(0,c.Ue)({plugins:(0,u.Z)().plugins,insertionPoint:n})}ret
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 6f 70 74 69 6f 6e 73 2e 74 68 65 6d 65 5b 6e 2e 5a 5d 26 26 22 22 3d 3d 3d 63 3f 22 22 2e 63 6f 6e 63 61 74 28 69 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 6c 28 29 29 3a 69 7d 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 75 29 2e 63 6f 6e 63 61 74 28 73 29 2e 63 6f 6e 63 61 74 28 6c 28 29 29 7d 7d 7d 2c 31 30 31 35 30 3a 28 65 2c 74 2c 72 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 72 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 6e 7d 29 7d 2c 39 33 38 36 39 3a 28 65 2c 74 2c 72 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 74 68 65 6d 65 2c 72 3d 65 2e 6e 61 6d 65 2c 6e 3d 65 2e 70 72 6f 70 73 3b 69 66 28 21 74 7c 7c 21 74 2e 70 72 6f 70 73 7c 7c 21 74 2e 70 72 6f 70 73 5b 72 5d 29 72 65 74 75 Data Ascii: options.theme[n.Z]&&""===c?"".concat(i,"-").concat(l()):i}return"".concat(u).concat(s).concat(l())}}},10150:(e,t,r)=>{function n(e){return e}r.d(t,{Z:()=>n})},93869:(e,t,r)=>{function n(e){var t=e.theme,r=e.name,n=e.props;if(!t\|\|!t.props\|\|!t.props[r])retu
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 7d 7d 29 3b 76 61 72 20 6f 3d 21 31 3b 72 65 74 75 72 6e 20 6e 2e 63 6c 61 73 73 65 73 21 3d 3d 6e 2e 63 61 63 68 65 43 6c 61 73 73 65 73 2e 6c 61 73 74 4a 53 53 26 26 28 6e 2e 63 61 63 68 65 43 6c 61 73 73 65 73 2e 6c 61 73 74 4a 53 53 3d 6e 2e 63 6c 61 73 73 65 73 2c 6f 3d 21 30 29 2c 74 21 3d 3d 6e 2e 63 61 63 68 65 43 6c 61 73 73 65 73 2e 6c 61 73 74 50 72 6f 70 26 26 28 6e 2e 63 61 63 68 65 43 6c 61 73 73 65 73 2e 6c 61 73 74 50 72 6f 70 3d 74 2c 6f 3d 21 30 29 2c 6f 26 26 28 6e 2e 63 61 63 68 65 43 6c 61 73 73 65 73 2e 76 61 6c 75 65 3d 28 30 2c 69 2e 5a 29 28 7b 62 61 73 65 43 6c 61 73 73 65 73 3a 6e 2e 63 61 63 68 65 43 6c 61 73 73 65 73 2e 6c 61 73 74 4a 53 53 2c 6e 65 77 43 6c 61 73 73 65 73 3a 74 2c 43 6f 6d 70 6f 6e 65 6e 74 3a 72 7d 29 29 2c Data Ascii: }});var o=!1;return n.classes!==n.cacheClasses.lastJSS&&(n.cacheClasses.lastJSS=n.classes,o=!0),t!==n.cacheClasses.lastProp&&(n.cacheClasses.lastProp=t,o=!0),o&&(n.cacheClasses.value=(0,i.Z)({baseClasses:n.cacheClasses.lastJSS,newClasses:t,Component:r})),
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 74 73 4d 61 6e 61 67 65 72 2c 6f 2c 72 29 3b 61 2e 72 65 66 73 2d 3d 31 3b 76 61 72 20 73 3d 6e 2e 73 68 65 65 74 73 52 65 67 69 73 74 72 79 3b 30 3d 3d 3d 61 2e 72 65 66 73 26 26 28 63 2e 64 65 6c 65 74 65 28 6e 2e 73 68 65 65 74 73 4d 61 6e 61 67 65 72 2c 6f 2c 72 29 2c 6e 2e 6a 73 73 2e 72 65 6d 6f 76 65 53 74 79 6c 65 53 68 65 65 74 28 61 2e 73 74 61 74 69 63 53 68 65 65 74 29 2c 73 26 26 73 2e 72 65 6d 6f 76 65 28 61 2e 73 74 61 74 69 63 53 68 65 65 74 29 29 2c 74 2e 64 79 6e 61 6d 69 63 53 68 65 65 74 26 26 28 6e 2e 6a 73 73 2e 72 65 6d 6f 76 65 53 74 79 6c 65 53 68 65 65 74 28 74 2e 64 79 6e 61 6d 69 63 53 68 65 65 74 29 2c 73 26 26 73 2e 72 65 6d 6f 76 65 28 74 2e 64 79 6e 61 6d 69 63 53 68 65 65 74 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 Data Ascii: tsManager,o,r);a.refs-=1;var s=n.sheetsRegistry;0===a.refs&&(c.delete(n.sheetsManager,o,r),n.jss.removeStyleSheet(a.staticSheet),s&&s.remove(a.staticSheet)),t.dynamicSheet&&(n.jss.removeStyleSheet(t.dynamicSheet),s&&s.remove(t.dynamicSheet))}}function b(e
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 2c 6e 2e 5a 29 28 7b 7d 2c 74 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 72 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 5b 65 5d 26 26 28 6f 5b 65 5d 3d 22 22 2e 63 6f 6e 63 61 74 28 74 5b 65 5d 2c 22 20 22 29 2e 63 6f 6e 63 61 74 28 72 5b 65 5d 29 29 7d 29 29 2c 6f 7d 7d 2c 34 39 36 39 39 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 6c 7d 29 3b 76 61 72 20 6e 3d 72 28 38 37 34 36 32 29 2c 6f 3d 72 28 34 35 39 38 37 29 2c 61 3d 72 28 33 35 37 37 36 29 2c 73 3d 72 28 38 36 30 31 30 29 2c 69 3d 72 28 38 36 37 39 29 2c 63 3d 72 2e 6e 28 69 29 2c 75 3d 72 28 37 33 39 31 34 29 3b 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 29 7b 76 61 72 20 72 3d 7b 7d 3b 72 65 74 75 72 6e 20 4f 62 6a 65 Data Ascii: ,n.Z)({},t);return Object.keys(r).forEach((function(e){r[e]&&(o[e]="".concat(t[e]," ").concat(r[e]))})),o}},49699:(e,t,r)=>{r.d(t,{Z:()=>l});var n=r(87462),o=r(45987),a=r(35776),s=r(86010),i=r(8679),c=r.n(i),u=r(73914);function p(e,t){var r={};return Obje
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 74 28 6f 2e 5a 29 7d 7d 2c 33 38 39 32 30 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 6c 7d 29 3b 76 61 72 20 6e 3d 72 28 38 37 34 36 32 29 2c 6f 3d 72 28 34 35 39 38 37 29 2c 61 3d 72 28 33 35 37 37 36 29 2c 73 3d 72 28 38 36 37 39 29 2c 69 3d 72 2e 6e 28 73 29 2c 63 3d 72 28 37 33 39 31 34 29 2c 75 3d 72 28 39 33 38 36 39 29 2c 70 3d 72 28 31 35 39 29 3b 63 6f 6e 73 74 20 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 73 3d 74 2e 64 65 66 61 75 6c 74 54 68 65 6d 65 2c 6c 3d Data Ascii: t(o.Z)}},38920:(e,t,r)=>{r.d(t,{Z:()=>l});var n=r(87462),o=r(45987),a=r(35776),s=r(8679),i=r.n(s),c=r(73914),u=r(93869),p=r(159);const l=function(e){var t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};return function(r){var s=t.defaultTheme,l=
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 5a 29 28 7b 70 72 6f 70 3a 22 62 6f 72 64 65 72 54 6f 70 22 2c 74 68 65 6d 65 4b 65 79 3a 22 62 6f 72 64 65 72 73 22 2c 74 72 61 6e 73 66 6f 72 6d 3a 61 7d 29 2c 63 3d 28 30 2c 6e 2e 5a 29 28 7b 70 72 6f 70 3a 22 62 6f 72 64 65 72 52 69 67 68 74 22 2c 74 68 65 6d 65 4b 65 79 3a 22 62 6f 72 64 65 72 73 22 2c 74 72 61 6e 73 66 6f 72 6d 3a 61 7d 29 2c 75 3d 28 30 2c 6e 2e 5a 29 28 7b 70 72 6f 70 3a 22 62 6f 72 64 65 72 42 6f 74 74 6f 6d 22 2c 74 68 65 6d 65 4b 65 79 3a 22 62 6f 72 64 65 72 73 22 2c 74 72 61 6e 73 66 6f 72 6d 3a 61 7d 29 2c 70 3d 28 30 2c 6e 2e 5a 29 28 7b 70 72 6f 70 3a 22 62 6f 72 64 65 72 4c 65 66 74 22 2c 74 68 65 6d 65 4b 65 79 3a 22 62 6f 72 64 65 72 73 22 2c 74 72 61 6e 73 66 6f 72 6d 3a 61 7d 29 2c 6c 3d 28 30 2c 6e 2e 5a 29 28 7b 70 Data Ascii: Z)({prop:"borderTop",themeKey:"borders",transform:a}),c=(0,n.Z)({prop:"borderRight",themeKey:"borders",transform:a}),u=(0,n.Z)({prop:"borderBottom",themeKey:"borders",transform:a}),p=(0,n.Z)({prop:"borderLeft",themeKey:"borders",transform:a}),l=(0,n.Z)({p
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 2c 6e 2e 5a 29 28 7b 70 72 6f 70 3a 22 6f 76 65 72 66 6c 6f 77 22 7d 29 2c 63 3d 28 30 2c 6e 2e 5a 29 28 7b 70 72 6f 70 3a 22 74 65 78 74 4f 76 65 72 66 6c 6f 77 22 7d 29 2c 75 3d 28 30 2c 6e 2e 5a 29 28 7b 70 72 6f 70 3a 22 76 69 73 69 62 69 6c 69 74 79 22 7d 29 2c 70 3d 28 30 2c 6e 2e 5a 29 28 7b 70 72 6f 70 3a 22 77 68 69 74 65 53 70 61 63 65 22 7d 29 3b 63 6f 6e 73 74 20 6c 3d 28 30 2c 6f 2e 5a 29 28 61 2c 73 2c 69 2c 63 2c 75 2c 70 29 7d 2c 32 33 36 33 33 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 64 28 74 2c 7b 5a 50 3a 28 29 3d 3e 79 7d 29 3b 76 61 72 20 6e 3d 72 28 38 32 34 35 29 2c 6f 3d 72 28 38 35 36 38 30 29 2c 61 3d 28 30 2c 6e 2e 5a 29 28 7b 70 72 6f 70 3a 22 66 6c 65 78 42 61 73 69 73 22 7d 29 2c 73 3d 28 30 2c 6e 2e 5a 29 28 7b 70 72 6f 70 3a Data Ascii: ,n.Z)({prop:"overflow"}),c=(0,n.Z)({prop:"textOverflow"}),u=(0,n.Z)({prop:"visibility"}),p=(0,n.Z)({prop:"whiteSpace"});const l=(0,o.Z)(a,s,i,c,u,p)},23633:(e,t,r)=>{r.d(t,{ZP:()=>y});var n=r(8245),o=r(85680),a=(0,n.Z)({prop:"flexBasis"}),s=(0,n.Z)({prop:
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 63 6f 6c 6f 72 22 2c 63 73 73 50 72 6f 70 65 72 74 79 3a 22 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 2c 74 68 65 6d 65 4b 65 79 3a 22 70 61 6c 65 74 74 65 22 7d 29 3b 63 6f 6e 73 74 20 69 3d 28 30 2c 6f 2e 5a 29 28 61 2c 73 29 7d 2c 34 33 39 33 39 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 64 28 74 2c 7b 5a 50 3a 28 29 3d 3e 6c 7d 29 3b 76 61 72 20 6e 3d 72 28 38 32 34 35 29 2c 6f 3d 72 28 38 35 36 38 30 29 2c 61 3d 28 30 2c 6e 2e 5a 29 28 7b 70 72 6f 70 3a 22 70 6f 73 69 74 69 6f 6e 22 7d 29 2c 73 3d 28 30 2c 6e 2e 5a 29 28 7b 70 72 6f 70 3a 22 7a 49 6e 64 65 78 22 2c 74 68 65 6d 65 4b 65 79 3a 22 7a 49 6e 64 65 78 22 7d 29 2c 69 3d 28 30 2c 6e 2e 5a 29 28 7b 70 72 6f 70 3a 22 74 6f 70 22 7d 29 2c 63 3d 28 30 2c 6e 2e 5a 29 28 7b 70 72 6f 70 3a 22 72 Data Ascii: color",cssProperty:"backgroundColor",themeKey:"palette"});const i=(0,o.Z)(a,s)},43939:(e,t,r)=>{r.d(t,{ZP:()=>l});var n=r(8245),o=r(85680),a=(0,n.Z)({prop:"position"}),s=(0,n.Z)({prop:"zIndex",themeKey:"zIndex"}),i=(0,n.Z)({prop:"top"}),c=(0,n.Z)({prop:"r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49846	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:14 UTC	558	OUT	GET /ice/vendorVenmo36.7650ba577c53d9e0f615.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:14 UTC	856	IN	HTTP/1.1 200 OK Connection: close Content-Length: 52145 Cache-Control: s-maxage=31536000, public,max-age=86400 Content-Type: application/javascript Etag: "66064786-cbb1" Last-Modified: Fri, 29 Mar 2024 04:45:58 GMT Paypal-Debug-Id: 64caac2df1cad Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000064caac2df1cad-d5020ced5526f699-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:14 GMT X-Served-By: cache-dfw-kdal2120119-DFW, cache-pdk-kpdk1780143-PDK X-Cache: MISS, HIT X-Cache-Hits: 0, 0 X-Timer: S1714134194.362918,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 36 5d 2c 7b 35 32 37 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 43 61 6c 65 6e 64 61 72 3a 28 29 3d 3e 70 65 2c 43 6c 6f 63 6b 3a 28 29 3d 3e 6b 65 2c 43 6c 6f 63 6b 56 69 65 77 3a 28 29 3d 3e 53 65 2c 44 61 74 65 50 69 63 6b 65 72 3a 28 29 3d 3e 6b 74 2c 44 61 74 65 54 69 6d 65 50 69 63 6b 65 72 3a 28 29 3d 3e 51 74 2c 44 61 79 3a 28 29 3d 3e 5f 2c 4b 65 79 62 6f 61 72 64 44 61 74 65 50 69 63 Data Ascii: "use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[36],{5276:(e,t,n)=>{n.r(t),n.d(t,{Calendar:()=>pe,Clock:()=>ke,ClockView:()=>Se,DatePicker:()=>kt,DateTimePicker:()=>Qt,Day:()=>_,KeyboardDatePic
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 7d 76 61 72 20 45 3d 28 30 2c 70 2e 5a 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 73 74 61 74 69 63 57 72 61 70 70 65 72 52 6f 6f 74 3a 7b 6f 76 65 72 66 6c 6f 77 3a 22 68 69 64 64 65 6e 22 2c 6d 69 6e 57 69 64 74 68 3a 33 31 30 2c 64 69 73 70 6c 61 79 3a 22 66 6c 65 78 22 2c 66 6c 65 78 44 69 72 65 63 74 69 6f 6e 3a 22 63 6f 6c 75 6d 6e 22 2c 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 65 2e 70 61 6c 65 74 74 65 2e 62 61 63 6b 67 72 6f 75 6e 64 2e 70 61 70 65 72 7d 7d 7d 29 2c 7b 6e 61 6d 65 3a 22 4d 75 69 50 69 63 6b 65 72 73 53 74 61 74 69 63 57 72 61 70 70 65 72 22 7d 29 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 68 69 6c 64 72 65 6e 2c 6e 3d 45 28 29 3b 72 65 74 75 72 6e 28 30 2c 72 2e 63 72 65 Data Ascii: }var E=(0,p.Z)((function(e){return{staticWrapperRoot:{overflow:"hidden",minWidth:310,display:"flex",flexDirection:"column",backgroundColor:e.palette.background.paper}}}),{name:"MuiPickersStaticWrapper"}),P=function(e){var t=e.children,n=E();return(0,r.cre
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 3a 7b 6a 75 73 74 69 66 79 43 6f 6e 74 65 6e 74 3a 22 66 6c 65 78 2d 73 74 61 72 74 22 2c 22 26 20 3e 20 2a 3a 66 69 72 73 74 2d 63 68 69 6c 64 22 3a 7b 6d 61 72 67 69 6e 52 69 67 68 74 3a 22 61 75 74 6f 22 7d 7d 7d 29 2c 4f 3d 28 30 2c 68 2e 5a 29 28 4d 2c 7b 6e 61 6d 65 3a 22 4d 75 69 50 69 63 6b 65 72 73 4d 6f 64 61 6c 22 7d 29 28 6b 29 2c 78 3d 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 72 2e 75 73 65 45 66 66 65 63 74 3a 72 2e 75 73 65 4c 61 79 6f 75 74 45 66 66 65 63 74 3b 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 5b 65 2e 6b 65 79 5d 3b 6e 26 26 28 6e 28 29 2c 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 28 65 2c 74 29 7b 76 61 72 20 6e 3d Data Ascii: :{justifyContent:"flex-start","& > *:first-child":{marginRight:"auto"}}}),O=(0,h.Z)(M,{name:"MuiPickersModal"})(k),x="undefined"==typeof window?r.useEffect:r.useLayoutEffect;function T(e,t){var n=t[e.key];n&&(n(),e.preventDefault())}function Z(e,t){var n=
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 6f 70 65 6e 2c 6e 3d 28 65 2e 77 69 64 65 72 2c 65 2e 63 68 69 6c 64 72 65 6e 29 2c 61 3d 65 2e 50 6f 70 6f 76 65 72 50 72 6f 70 73 2c 6f 3d 28 65 2e 6f 6e 43 6c 65 61 72 2c 65 2e 6f 6e 44 69 73 6d 69 73 73 29 2c 69 3d 28 65 2e 6f 6e 53 65 74 54 6f 64 61 79 2c 65 2e 6f 6e 41 63 63 65 70 74 29 2c 6c 3d 28 65 2e 73 68 6f 77 54 61 62 73 2c 65 2e 44 61 74 65 49 6e 70 75 74 50 72 6f 70 73 29 2c 73 3d 65 2e 49 6e 70 75 74 43 6f 6d 70 6f 6e 65 6e 74 2c 64 3d 28 30 2c 75 2e 5a 29 28 65 2c 5b 22 6f 70 65 6e 22 2c 22 77 69 64 65 72 22 2c 22 63 68 69 6c 64 72 65 6e 22 2c 22 50 6f 70 6f 76 65 72 50 72 6f 70 73 22 2c 22 6f 6e 43 6c 65 61 72 22 2c 22 6f 6e 44 69 73 6d 69 73 73 22 2c 22 6f 6e 53 65 74 54 6f 64 61 79 22 2c 22 6f 6e 41 63 63 65 70 74 22 2c 22 73 68 6f 77 Data Ascii: open,n=(e.wider,e.children),a=e.PopoverProps,o=(e.onClear,e.onDismiss),i=(e.onSetToday,e.onAccept),l=(e.showTabs,e.DateInputProps),s=e.InputComponent,d=(0,u.Z)(e,["open","wider","children","PopoverProps","onClear","onDismiss","onSetToday","onAccept","show
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 70 72 69 6d 61 72 79 2e 6d 61 69 6e 2c 66 6f 6e 74 57 65 69 67 68 74 3a 65 2e 74 79 70 6f 67 72 61 70 68 79 2e 66 6f 6e 74 57 65 69 67 68 74 4d 65 64 69 75 6d 2c 22 26 3a 68 6f 76 65 72 22 3a 7b 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 65 2e 70 61 6c 65 74 74 65 2e 70 72 69 6d 61 72 79 2e 6d 61 69 6e 7d 7d 2c 64 61 79 44 69 73 61 62 6c 65 64 3a 7b 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3a 22 6e 6f 6e 65 22 2c 63 6f 6c 6f 72 3a 65 2e 70 61 6c 65 74 74 65 2e 74 65 78 74 2e 68 69 6e 74 7d 7d 7d 29 2c 7b 6e 61 6d 65 3a 22 4d 75 69 50 69 63 6b 65 72 73 44 61 79 22 7d 29 2c 58 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 68 69 6c 64 72 65 6e 2c 6e 3d 65 2e 64 69 73 61 62 6c 65 64 2c 61 3d 65 2e 68 69 64 64 65 6e 2c 6f 3d 65 2e 63 75 Data Ascii: primary.main,fontWeight:e.typography.fontWeightMedium,"&:hover":{backgroundColor:e.palette.primary.main}},dayDisabled:{pointerEvents:"none",color:e.palette.text.hint}}}),{name:"MuiPickersDay"}),X=function(e){var t=e.children,n=e.disabled,a=e.hidden,o=e.cu
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 7d 7d 2c 22 73 6c 69 64 65 45 6e 74 65 72 2d 6c 65 66 74 22 3a 7b 77 69 6c 6c 43 68 61 6e 67 65 3a 22 74 72 61 6e 73 66 6f 72 6d 22 2c 74 72 61 6e 73 66 6f 72 6d 3a 22 74 72 61 6e 73 6c 61 74 65 28 31 30 30 25 29 22 7d 2c 22 73 6c 69 64 65 45 6e 74 65 72 2d 72 69 67 68 74 22 3a 7b 77 69 6c 6c 43 68 61 6e 67 65 3a 22 74 72 61 6e 73 66 6f 72 6d 22 2c 74 72 61 6e 73 66 6f 72 6d 3a 22 74 72 61 6e 73 6c 61 74 65 28 2d 31 30 30 25 29 22 7d 2c 73 6c 69 64 65 45 6e 74 65 72 41 63 74 69 76 65 3a 7b 74 72 61 6e 73 66 6f 72 6d 3a 22 74 72 61 6e 73 6c 61 74 65 28 30 25 29 22 2c 74 72 61 6e 73 69 74 69 6f 6e 3a 74 7d 2c 73 6c 69 64 65 45 78 69 74 3a 7b 74 72 61 6e 73 66 6f 72 6d 3a 22 74 72 61 6e 73 6c 61 74 65 28 30 25 29 22 7d 2c 22 73 6c 69 64 65 45 78 69 74 41 63 Data Ascii: }},"slideEnter-left":{willChange:"transform",transform:"translate(100%)"},"slideEnter-right":{willChange:"transform",transform:"translate(-100%)"},slideEnterActive:{transform:"translate(0%)",transition:t},slideExit:{transform:"translate(0%)"},"slideExitAc
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 72 3a 65 2e 70 61 6c 65 74 74 65 2e 74 65 78 74 2e 68 69 6e 74 7d 7d 7d 29 2c 7b 6e 61 6d 65 3a 22 4d 75 69 50 69 63 6b 65 72 73 43 61 6c 65 6e 64 61 72 48 65 61 64 65 72 22 7d 29 2c 69 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 75 72 72 65 6e 74 4d 6f 6e 74 68 2c 6e 3d 65 2e 6f 6e 4d 6f 6e 74 68 43 68 61 6e 67 65 2c 61 3d 65 2e 6c 65 66 74 41 72 72 6f 77 49 63 6f 6e 2c 6f 3d 65 2e 72 69 67 68 74 41 72 72 6f 77 49 63 6f 6e 2c 6c 3d 65 2e 6c 65 66 74 41 72 72 6f 77 42 75 74 74 6f 6e 50 72 6f 70 73 2c 73 3d 65 2e 72 69 67 68 74 41 72 72 6f 77 42 75 74 74 6f 6e 50 72 6f 70 73 2c 75 3d 65 2e 64 69 73 61 62 6c 65 50 72 65 76 4d 6f 6e 74 68 2c 70 3d 65 2e 64 69 73 61 62 6c 65 4e 65 78 74 4d 6f 6e 74 68 2c 6d 3d 65 2e 73 6c 69 64 65 44 Data Ascii: r:e.palette.text.hint}}}),{name:"MuiPickersCalendarHeader"}),ie=function(e){var t=e.currentMonth,n=e.onMonthChange,a=e.leftArrowIcon,o=e.rightArrowIcon,l=e.leftArrowButtonProps,s=e.rightArrowButtonProps,u=e.disablePrevMonth,p=e.disableNextMonth,m=e.slideD
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 7b 72 65 74 75 72 6e 20 72 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 52 2e 5a 2c 65 2c 72 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 38 2e 35 39 20 31 36 2e 35 39 4c 31 33 2e 31 37 20 31 32 20 38 2e 35 39 20 37 2e 34 31 20 31 30 20 36 6c 36 20 36 2d 36 20 36 2d 31 2e 34 31 2d 31 2e 34 31 7a 22 7d 29 2c 72 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 64 3a 22 4d 30 20 30 68 32 34 76 32 34 48 30 56 30 7a 22 7d 29 29 7d 29 2c 6e 75 6c 6c 29 2c 64 69 73 61 62 6c 65 50 72 65 76 4d 6f 6e 74 68 3a 21 31 2c 64 69 73 61 62 6c 65 4e 65 78 74 4d 6f 6e 74 68 3a 21 31 7d 3b 76 61 72 20 6c 65 3d 66 Data Ascii: {return r.default.createElement(R.Z,e,r.default.createElement("path",{d:"M8.59 16.59L13.17 12 8.59 7.41 10 6l6 6-6 6-1.41-1.41z"}),r.default.createElement("path",{fill:"none",d:"M0 0h24v24H0V0z"}))}),null),disablePrevMonth:!1,disableNextMonth:!1};var le=f
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 6f 75 6c 64 44 69 73 61 62 6c 65 50 72 65 76 4d 6f 6e 74 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6e 2e 70 72 6f 70 73 2c 74 3d 65 2e 75 74 69 6c 73 2c 72 3d 65 2e 64 69 73 61 62 6c 65 50 61 73 74 2c 61 3d 65 2e 6d 69 6e 44 61 74 65 2c 6f 3d 74 2e 64 61 74 65 28 29 2c 69 3d 74 2e 73 74 61 72 74 4f 66 4d 6f 6e 74 68 28 72 26 26 74 2e 69 73 41 66 74 65 72 28 6f 2c 74 2e 64 61 74 65 28 61 29 29 3f 6f 3a 74 2e 64 61 74 65 28 61 29 29 3b 72 65 74 75 72 6e 21 74 2e 69 73 42 65 66 6f 72 65 28 69 2c 6e 2e 73 74 61 74 65 2e 63 75 72 72 65 6e 74 4d 6f 6e 74 68 29 7d 2c 6e 2e 73 68 6f 75 6c 64 44 69 73 61 62 6c 65 4e 65 78 74 4d 6f 6e 74 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6e 2e 70 72 6f 70 73 2c 74 3d 65 2e 75 74 69 6c 73 2c 72 Data Ascii: ouldDisablePrevMonth=function(){var e=n.props,t=e.utils,r=e.disablePast,a=e.minDate,o=t.date(),i=t.startOfMonth(r&&t.isAfter(o,t.date(a))?o:t.date(a));return!t.isBefore(i,n.state.currentMonth)},n.shouldDisableNextMonth=function(){var e=n.props,t=e.utils,r
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 7b 6b 65 79 3a 22 77 65 65 6b 2d 22 2e 63 6f 6e 63 61 74 28 65 5b 30 5d 2e 74 6f 53 74 72 69 6e 67 28 29 29 2c 63 6c 61 73 73 4e 61 6d 65 3a 61 2e 77 65 65 6b 7d 2c 6e 2e 72 65 6e 64 65 72 44 61 79 73 28 65 29 29 7d 29 29 7d 2c 6e 2e 72 65 6e 64 65 72 44 61 79 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 2e 70 72 6f 70 73 2c 61 3d 74 2e 64 61 74 65 2c 6f 3d 74 2e 72 65 6e 64 65 72 44 61 79 2c 69 3d 74 2e 75 74 69 6c 73 2c 6c 3d 69 2e 64 61 74 65 28 29 2c 73 3d 69 2e 73 74 61 72 74 4f 66 44 61 79 28 61 29 2c 63 3d 69 2e 67 65 74 4d 6f 6e 74 68 28 6e 2e 73 74 61 74 65 2e 63 75 72 72 65 6e 74 4d 6f 6e 74 68 29 3b 72 65 74 75 72 6e 20 65 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 2e 73 68 6f 75 6c 64 44 69 73 Data Ascii: {key:"week-".concat(e[0].toString()),className:a.week},n.renderDays(e))}))},n.renderDays=function(e){var t=n.props,a=t.date,o=t.renderDay,i=t.utils,l=i.date(),s=i.startOfDay(a),c=i.getMonth(n.state.currentMonth);return e.map((function(e){var t=n.shouldDis

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49849	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:14 UTC	558	OUT	GET /ice/vendorVenmo37.ac605bb7b8c8fbbc0b96.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:14 UTC	855	IN	HTTP/1.1 200 OK Connection: close Content-Length: 58556 Cache-Control: s-maxage=31536000, public,max-age=86400 Content-Type: application/javascript Etag: "66064786-e4bc" Last-Modified: Fri, 29 Mar 2024 04:45:58 GMT Paypal-Debug-Id: 095b0b148678d Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000095b0b148678d-f94c93b45aaf7e2b-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:14 GMT X-Served-By: cache-dfw-kdal2120048-DFW, cache-pdk-kfty2130039-PDK X-Cache: HIT, HIT X-Cache-Hits: 4, 0 X-Timer: S1714134195.694425,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 37 5d 2c 7b 37 39 38 39 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 73 7d 29 3b 76 61 72 20 72 3d 6e 28 34 35 39 38 37 29 2c 61 3d 6e 28 38 37 34 36 32 29 2c 6f 3d 6e 28 33 35 37 37 36 29 2c 69 3d 6e 28 38 36 30 31 30 29 2c 6c 3d 6e 28 35 32 35 34 33 29 2c 63 3d 6f 2e 66 6f 72 77 61 72 64 52 65 66 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 63 6c 61 73 73 65 73 2c 6c 3d Data Ascii: "use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[37],{79895:(e,t,n)=>{n.d(t,{Z:()=>s});var r=n(45987),a=n(87462),o=n(35776),i=n(86010),l=n(52543),c=o.forwardRef((function(e,t){var n=e.classes,l=
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 28 6e 3d 65 2e 77 69 64 74 68 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 72 65 74 75 72 6e 5b 65 2e 68 6f 72 69 7a 6f 6e 74 61 6c 2c 65 2e 76 65 72 74 69 63 61 6c 5d 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 3f 22 22 2e 63 6f 6e 63 61 74 28 65 2c 22 70 78 22 29 3a 65 7d 29 29 2e 6a 6f 69 6e 28 22 20 22 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 28 29 3a 65 7d 76 61 72 20 79 3d 6f 2e 66 6f 72 77 61 72 64 52 65 66 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 61 63 74 69 6f 6e 2c 64 3d 65 2e 61 6e 63 68 6f 72 45 6c 2c 79 3d 65 2e 61 6e 63 68 6f 72 4f Data Ascii: (n=e.width),n}function b(e){return[e.horizontal,e.vertical].map((function(e){return"number"==typeof e?"".concat(e,"px"):e})).join(" ")}function g(e){return"function"==typeof e?e():e}var y=o.forwardRef((function(e,t){var n=e.action,d=e.anchorEl,y=e.anchorO
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 6f 70 3a 6e 2e 74 6f 70 2b 76 28 6e 2c 72 29 2c 6c 65 66 74 3a 6e 2e 6c 65 66 74 2b 68 28 6e 2c 5a 2e 68 6f 72 69 7a 6f 6e 74 61 6c 29 7d 7d 29 2c 5b 64 2c 5a 2e 68 6f 72 69 7a 6f 6e 74 61 6c 2c 5a 2e 76 65 72 74 69 63 61 6c 2c 78 2c 77 5d 29 2c 51 3d 6f 2e 75 73 65 43 61 6c 6c 62 61 63 6b 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 30 3b 69 66 28 50 26 26 22 61 6e 63 68 6f 72 45 6c 22 3d 3d 3d 77 29 7b 76 61 72 20 6e 3d 50 28 65 29 3b 69 66 28 6e 26 26 65 2e 63 6f 6e 74 61 69 6e 73 28 6e 29 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 2c 72 3d 30 3b 6e 26 26 6e 21 3d 3d 65 3b 29 72 2b 3d 28 6e 3d 6e 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 2e 73 63 72 6f 6c 6c 54 6f 70 3b 72 65 74 Data Ascii: op:n.top+v(n,r),left:n.left+h(n,Z.horizontal)}}),[d,Z.horizontal,Z.vertical,x,w]),Q=o.useCallback((function(e){var t=0;if(P&&"anchorEl"===w){var n=P(e);if(n&&e.contains(n)){var r=function(e,t){for(var n=t,r=0;n&&n!==e;)r+=(n=n.parentElement).scrollTop;ret
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 74 69 76 65 48 61 6e 64 6c 65 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 56 3f 7b 75 70 64 61 74 65 50 6f 73 69 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 65 28 29 7d 7d 3a 6e 75 6c 6c 7d 29 2c 5b 56 2c 6e 65 5d 29 2c 6f 2e 75 73 65 45 66 66 65 63 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 56 29 7b 76 61 72 20 65 3d 28 30 2c 69 2e 5a 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 65 28 29 7d 29 29 3b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 73 69 7a 65 22 2c 65 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 63 6c 65 61 72 28 29 2c 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 73 69 7a 65 22 2c 65 29 7d 7d 7d 29 2c 5b Data Ascii: tiveHandle(n,(function(){return V?{updatePosition:function(){ne()}}:null}),[V,ne]),o.useEffect((function(){if(V){var e=(0,i.Z)((function(){ne()}));return window.addEventListener("resize",e),function(){e.clear(),window.removeEventListener("resize",e)}}}),[
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 66 69 65 72 73 2c 45 3d 65 2e 6f 70 65 6e 2c 77 3d 65 2e 70 6c 61 63 65 6d 65 6e 74 2c 6b 3d 76 6f 69 64 20 30 3d 3d 3d 77 3f 22 62 6f 74 74 6f 6d 22 3a 77 2c 43 3d 65 2e 70 6f 70 70 65 72 4f 70 74 69 6f 6e 73 2c 53 3d 76 6f 69 64 20 30 3d 3d 3d 43 3f 6d 3a 43 2c 4c 3d 65 2e 70 6f 70 70 65 72 52 65 66 2c 52 3d 65 2e 73 74 79 6c 65 2c 4e 3d 65 2e 74 72 61 6e 73 69 74 69 6f 6e 2c 50 3d 76 6f 69 64 20 30 21 3d 3d 4e 26 26 4e 2c 54 3d 28 30 2c 61 2e 5a 29 28 65 2c 5b 22 61 6e 63 68 6f 72 45 6c 22 2c 22 63 68 69 6c 64 72 65 6e 22 2c 22 63 6f 6e 74 61 69 6e 65 72 22 2c 22 64 69 73 61 62 6c 65 50 6f 72 74 61 6c 22 2c 22 6b 65 65 70 4d 6f 75 6e 74 65 64 22 2c 22 6d 6f 64 69 66 69 65 72 73 22 2c 22 6f 70 65 6e 22 2c 22 70 6c 61 63 65 6d 65 6e 74 22 2c 22 70 6f 70 Data Ascii: fiers,E=e.open,w=e.placement,k=void 0===w?"bottom":w,C=e.popperOptions,S=void 0===C?m:C,L=e.popperRef,R=e.style,N=e.transition,P=void 0!==N&&N,T=(0,a.Z)(e,["anchorEl","children","container","disablePortal","keepMounted","modifiers","open","placement","pop
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 7d 29 2c 5b 5d 29 2c 6f 2e 75 73 65 45 66 66 65 63 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 45 7c 7c 50 7c 7c 6a 28 29 7d 29 2c 5b 45 2c 50 5d 29 2c 21 5a 26 26 21 45 26 26 28 21 50 7c 7c 44 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 71 3d 7b 70 6c 61 63 65 6d 65 6e 74 3a 48 7d 3b 72 65 74 75 72 6e 20 50 26 26 28 71 2e 54 72 61 6e 73 69 74 69 6f 6e 50 72 6f 70 73 3d 7b 69 6e 3a 45 2c 6f 6e 45 6e 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 56 28 21 31 29 7d 2c 6f 6e 45 78 69 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 56 28 21 30 29 2c 6a 28 29 7d 7d 29 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 5a 2c 7b 64 69 73 61 62 6c 65 50 6f 72 74 61 6c 3a 67 2c 63 6f 6e 74 61 69 6e 65 72 3a 68 7d 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 Data Ascii: }),[]),o.useEffect((function(){E\|\|P\|\|j()}),[E,P]),!Z&&!E&&(!P\|\|D))return null;var q={placement:H};return P&&(q.TransitionProps={in:E,onEnter:function(){V(!1)},onExited:function(){V(!0),j()}}),o.createElement(c.Z,{disablePortal:g,container:h},o.createEleme
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 74 2c 64 75 72 61 74 69 6f 6e 3a 65 2e 74 72 61 6e 73 69 74 69 6f 6e 73 2e 64 75 72 61 74 69 6f 6e 2e 73 68 6f 72 74 65 73 74 7d 29 7d 7d 2c 6c 61 79 65 72 3a 7b 6c 65 66 74 3a 30 2c 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 2c 74 72 61 6e 73 66 6f 72 6d 3a 22 73 63 61 6c 65 28 30 29 22 2c 74 72 61 6e 73 69 74 69 6f 6e 3a 65 2e 74 72 61 6e 73 69 74 69 6f 6e 73 2e 63 72 65 61 74 65 28 22 74 72 61 6e 73 66 6f 72 6d 22 2c 7b 65 61 73 69 6e 67 3a 65 2e 74 72 61 6e 73 69 74 69 6f 6e 73 2e 65 61 73 69 6e 67 2e 65 61 73 65 49 6e 2c 64 75 72 61 74 69 6f 6e 3a 65 2e 74 72 61 6e 73 69 74 69 6f 6e 73 2e 64 75 72 61 74 69 6f 6e 2e 73 68 6f 72 74 65 73 74 7d 29 7d 2c 63 68 65 63 6b 65 64 3a 7b 7d 7d 7d 29 2c 7b 6e 61 6d 65 3a 22 50 72 69 76 61 74 65 52 Data Ascii: t,duration:e.transitions.duration.shortest})}},layer:{left:0,position:"absolute",transform:"scale(0)",transition:e.transitions.create("transform",{easing:e.transitions.easing.easeIn,duration:e.transitions.duration.shortest})},checked:{}}}),{name:"PrivateR
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 68 65 63 6b 65 64 22 3a 7b 63 6f 6c 6f 72 3a 65 2e 70 61 6c 65 74 74 65 2e 70 72 69 6d 61 72 79 2e 6d 61 69 6e 2c 22 26 3a 68 6f 76 65 72 22 3a 7b 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 28 30 2c 70 2e 46 71 29 28 65 2e 70 61 6c 65 74 74 65 2e 70 72 69 6d 61 72 79 2e 6d 61 69 6e 2c 65 2e 70 61 6c 65 74 74 65 2e 61 63 74 69 6f 6e 2e 68 6f 76 65 72 4f 70 61 63 69 74 79 29 2c 22 40 6d 65 64 69 61 20 28 68 6f 76 65 72 3a 20 6e 6f 6e 65 29 22 3a 7b 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 74 72 61 6e 73 70 61 72 65 6e 74 22 7d 7d 7d 2c 22 26 24 64 69 73 61 62 6c 65 64 22 3a 7b 63 6f 6c 6f 72 3a 65 2e 70 61 6c 65 74 74 65 2e 61 63 74 69 6f 6e 2e 64 69 73 61 62 6c 65 64 7d 7d 2c 63 6f 6c 6f 72 53 65 63 6f 6e 64 61 72 79 3a 7b 22 26 24 63 68 65 Data Ascii: hecked":{color:e.palette.primary.main,"&:hover":{backgroundColor:(0,p.Fq)(e.palette.primary.main,e.palette.action.hoverOpacity),"@media (hover: none)":{backgroundColor:"transparent"}}},"&$disabled":{color:e.palette.action.disabled}},colorSecondary:{"&$che
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 69 6f 67 72 6f 75 70 22 2c 72 65 66 3a 45 7d 2c 68 29 2c 70 29 29 7d 29 29 7d 2c 37 39 33 30 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 72 7d 29 3b 63 6f 6e 73 74 20 72 3d 6e 28 33 35 37 37 36 29 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 29 7d 2c 33 36 37 33 31 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 61 3a 28 29 3d 3e 72 2e 5a 7d 29 3b 76 61 72 20 72 3d 6e 28 37 37 31 39 29 7d 2c 37 37 31 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 6f 7d 29 3b 76 61 72 20 72 3d 6e 28 33 35 37 37 36 29 2c 61 3d 6e 28 37 39 33 30 35 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 72 65 74 75 72 6e 20 72 2e 75 73 65 43 6f 6e 74 65 78 74 28 61 2e 5a 29 7d 7d 2c 34 36 33 37 3a 28 65 2c 74 2c 6e 29 3d Data Ascii: iogroup",ref:E},h),p))}))},79305:(e,t,n)=>{n.d(t,{Z:()=>r});const r=n(35776).createContext()},36731:(e,t,n)=>{n.d(t,{a:()=>r.Z});var r=n(7719)},7719:(e,t,n)=>{n.d(t,{Z:()=>o});var r=n(35776),a=n(79305);function o(){return r.useContext(a.Z)}},4637:(e,t,n)=
2024-04-26 12:23:14 UTC	1379	IN	Data Raw: 73 2e 70 72 6f 70 73 2e 63 68 69 6c 64 72 65 6e 7d 7d 5d 29 2c 6e 7d 28 63 2e 43 6f 6d 70 6f 6e 65 6e 74 29 7d 2c 31 31 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 7a 7d 29 3b 76 61 72 20 72 3d 6e 28 38 37 34 36 32 29 2c 61 3d 6e 28 34 35 39 38 37 29 2c 6f 3d 6e 28 33 35 37 37 36 29 2c 69 3d 6e 28 36 35 38 33 35 29 2c 6c 3d 6e 28 32 39 34 33 39 29 2c 63 3d 6e 28 37 31 30 30 32 29 2c 73 3d 6e 28 36 30 32 38 38 29 2c 75 3d 28 6e 28 35 39 38 36 34 29 2c 6e 28 38 36 30 31 30 29 29 2c 64 3d 6e 28 33 30 36 32 36 29 2c 70 3d 6e 28 39 33 38 37 31 29 2c 66 3d 6e 28 33 38 33 39 36 29 2c 6d 3d 6e 28 33 36 35 31 39 29 2c 76 3d 6e 28 31 37 32 39 34 29 2c 68 3d 6e 28 32 32 37 37 35 29 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 29 7b 72 Data Ascii: s.props.children}}]),n}(c.Component)},110:(e,t,n)=>{n.d(t,{Z:()=>z});var r=n(87462),a=n(45987),o=n(35776),i=n(65835),l=n(29439),c=n(71002),s=n(60288),u=(n(59864),n(86010)),d=n(30626),p=n(93871),f=n(38396),m=n(36519),v=n(17294),h=n(22775);function b(e,t){r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49850	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:14 UTC	558	OUT	GET /ice/vendorVenmo38.18ef90e268efd5088cd9.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:14 UTC	854	IN	HTTP/1.1 200 OK Connection: close Content-Length: 127013 Cache-Control: s-maxage=31536000, public,max-age=86400 Content-Type: application/javascript Etag: "66064786-1f025" Last-Modified: Fri, 29 Mar 2024 04:45:58 GMT Paypal-Debug-Id: 891fc5610525f Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000891fc5610525f-dfb2757eb7e6bbcf-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:14 GMT X-Served-By: cache-dfw-kdfw8210032-DFW, cache-gnv1820026-GNV X-Cache: HIT, MISS X-Cache-Hits: 7, 0 X-Timer: S1714134195.878608,VS0,VE23 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:15 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 38 5d 2c 7b 31 39 35 33 31 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 64 65 66 61 75 6c 74 22 69 6e 20 65 3f 65 2e 64 65 66 61 75 6c 74 3a 65 7d 76 61 72 20 72 3d 6c 28 6e 28 33 35 37 37 36 29 29 2c 61 3d 6e 28 38 34 33 39 35 29 2c 69 3d 6c 28 6e 28 36 32 30 31 35 29 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 Data Ascii: "use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[38],{19531:(e,t,n)=>{function l(e){return e&&"object"==typeof e&&"default"in e?e.default:e}var r=l(n(35776)),a=n(84395),i=l(n(62015));e.exports=f
2024-04-26 12:23:15 UTC	16384	IN	Data Raw: 34 35 20 31 37 2e 35 20 39 2e 32 43 31 37 2e 35 20 36 2e 31 35 35 34 35 20 31 34 2e 32 32 33 38 20 33 2e 35 20 31 30 20 33 2e 35 43 35 2e 37 37 36 32 20 33 2e 35 20 32 2e 34 39 39 39 39 20 36 2e 31 35 35 34 35 20 32 2e 34 39 39 39 39 20 39 2e 32 43 32 2e 34 39 39 39 39 20 31 30 2e 33 39 36 32 20 32 2e 39 39 35 36 35 20 31 31 2e 35 35 30 33 20 33 2e 39 33 30 34 20 31 32 2e 35 32 38 37 4c 34 2e 39 39 31 36 20 31 33 2e 36 33 39 35 4c 33 2e 36 32 39 36 35 20 31 35 2e 38 37 34 4c 37 2e 33 37 32 34 39 20 31 34 2e 35 35 34 34 5a 22 7d 29 29 7d 7d 2c 33 37 37 32 31 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 64 65 66 61 75 6c 74 22 69 6e 20 Data Ascii: 45 17.5 9.2C17.5 6.15545 14.2238 3.5 10 3.5C5.7762 3.5 2.49999 6.15545 2.49999 9.2C2.49999 10.3962 2.99565 11.5503 3.9304 12.5287L4.9916 13.6395L3.62965 15.874L7.37249 14.5544Z"}))}},37721:(e,t,n)=>{function l(e){return e&&"object"==typeof e&&"default"in
2024-04-26 12:23:15 UTC	16384	IN	Data Raw: 2e 36 33 31 36 20 38 2e 38 37 38 38 39 20 31 31 2e 38 39 37 34 43 38 2e 38 34 37 32 37 20 31 31 2e 39 38 39 36 20 38 2e 38 31 34 33 38 20 31 32 2e 31 31 30 33 20 38 2e 37 38 33 33 31 20 31 32 2e 32 33 36 38 43 38 2e 36 37 39 30 36 20 31 32 2e 36 36 31 33 20 38 2e 38 36 32 34 38 20 31 33 2e 31 31 31 37 20 39 2e 32 34 35 37 35 20 31 33 2e 33 32 31 38 43 31 30 2e 30 30 35 35 20 31 33 2e 37 33 38 33 20 31 30 2e 38 37 37 20 31 34 2e 30 33 32 20 31 31 2e 38 36 30 31 20 31 34 2e 32 30 32 38 5a 22 7d 29 2c 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 37 2e 39 35 31 39 33 20 31 30 2e 36 30 36 33 43 39 2e 31 34 36 32 37 20 31 30 2e 30 31 30 32 20 39 2e 39 36 36 35 38 20 38 2e 37 37 36 32 31 20 39 2e 39 36 36 35 38 20 37 2e 33 Data Ascii: .6316 8.87889 11.8974C8.84727 11.9896 8.81438 12.1103 8.78331 12.2368C8.67906 12.6613 8.86248 13.1117 9.24575 13.3218C10.0055 13.7383 10.877 14.032 11.8601 14.2028Z"}),r.createElement("path",{d:"M7.95193 10.6063C9.14627 10.0102 9.96658 8.77621 9.96658 7.3
2024-04-26 12:23:15 UTC	16384	IN	Data Raw: 74 65 45 6c 65 6d 65 6e 74 28 22 64 65 66 73 22 2c 6e 75 6c 6c 2c 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 63 6c 69 70 50 61 74 68 22 2c 7b 69 64 3a 22 63 6c 69 70 30 22 7d 2c 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 72 65 63 74 22 2c 7b 77 69 64 74 68 3a 22 32 30 22 2c 68 65 69 67 68 74 3a 22 32 30 22 2c 66 69 6c 6c 3a 22 77 68 69 74 65 22 7d 29 29 29 29 7d 7d 2c 33 30 35 33 32 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 64 65 66 61 75 6c 74 22 69 6e 20 65 3f 65 2e 64 65 66 61 75 6c 74 3a 65 7d 76 61 72 20 72 3d 6c 28 6e 28 33 35 37 37 36 29 29 2c 61 3d 6e 28 38 34 33 39 35 29 2c 69 3d 6c 28 6e 28 36 32 30 31 35 Data Ascii: teElement("defs",null,r.createElement("clipPath",{id:"clip0"},r.createElement("rect",{width:"20",height:"20",fill:"white"}))))}},30532:(e,t,n)=>{function l(e){return e&&"object"==typeof e&&"default"in e?e.default:e}var r=l(n(35776)),a=n(84395),i=l(n(62015
2024-04-26 12:23:15 UTC	16384	IN	Data Raw: 7d 7d 2c 31 30 36 38 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 64 65 66 61 75 6c 74 22 69 6e 20 65 3f 65 2e 64 65 66 61 75 6c 74 3a 65 7d 76 61 72 20 72 3d 6c 28 6e 28 33 35 37 37 36 29 29 2c 61 3d 6e 28 38 34 33 39 35 29 2c 69 3d 6c 28 6e 28 36 32 30 31 35 29 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 69 2c 61 2e 5f 5f 61 73 73 69 67 6e 28 7b 74 69 74 6c 65 41 63 63 65 73 73 3a 22 50 65 74 22 7d 2c 65 29 2c 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 67 22 2c 7b 63 6c 69 70 50 61 74 68 3a 22 75 72 6c 28 23 63 6c 69 70 30 29 Data Ascii: }},10685:(e,t,n)=>{function l(e){return e&&"object"==typeof e&&"default"in e?e.default:e}var r=l(n(35776)),a=n(84395),i=l(n(62015));e.exports=function(e){return r.createElement(i,a.__assign({titleAccess:"Pet"},e),r.createElement("g",{clipPath:"url(#clip0)
2024-04-26 12:23:15 UTC	16384	IN	Data Raw: 43 31 37 2e 38 35 38 39 20 38 2e 38 32 39 35 33 20 31 38 2e 31 34 32 34 20 39 2e 31 31 33 30 36 20 31 38 2e 31 34 32 34 20 39 2e 34 36 32 38 31 56 31 30 2e 35 35 33 38 43 31 38 2e 31 34 32 34 20 31 30 2e 39 30 33 35 20 31 37 2e 38 35 38 39 20 31 31 2e 31 38 37 31 20 31 37 2e 35 30 39 32 20 31 31 2e 31 38 37 31 48 31 36 2e 34 31 38 32 43 31 36 2e 30 36 38 34 20 31 31 2e 31 38 37 31 20 31 35 2e 37 38 34 39 20 31 30 2e 39 30 33 35 20 31 35 2e 37 38 34 39 20 31 30 2e 35 35 33 38 56 39 2e 34 36 32 38 31 5a 4d 31 34 2e 38 34 36 35 20 31 34 2e 33 33 30 34 43 31 34 2e 34 39 36 38 20 31 34 2e 33 33 30 34 20 31 34 2e 32 31 33 33 20 31 34 2e 36 31 34 20 31 34 2e 32 31 33 33 20 31 34 2e 39 36 33 37 56 31 35 2e 32 36 38 39 43 31 34 2e 32 31 33 33 20 31 35 2e 36 31 38 Data Ascii: C17.8589 8.82953 18.1424 9.11306 18.1424 9.46281V10.5538C18.1424 10.9035 17.8589 11.1871 17.5092 11.1871H16.4182C16.0684 11.1871 15.7849 10.9035 15.7849 10.5538V9.46281ZM14.8465 14.3304C14.4968 14.3304 14.2133 14.614 14.2133 14.9637V15.2689C14.2133 15.618
2024-04-26 12:23:15 UTC	16384	IN	Data Raw: 35 35 20 31 37 2e 30 31 34 43 39 2e 35 30 34 35 35 20 31 36 2e 31 36 36 20 38 2e 38 31 37 31 32 20 31 35 2e 34 37 38 35 20 37 2e 39 36 39 31 32 20 31 35 2e 34 37 38 35 43 37 2e 31 32 31 31 32 20 31 35 2e 34 37 38 35 20 36 2e 34 33 33 36 38 20 31 36 2e 31 36 36 20 36 2e 34 33 33 36 38 20 31 37 2e 30 31 34 43 36 2e 34 33 33 36 38 20 31 37 2e 38 36 32 20 37 2e 31 32 31 31 32 20 31 38 2e 35 34 39 34 20 37 2e 39 36 39 31 32 20 31 38 2e 35 34 39 34 5a 22 7d 29 2c 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 31 34 2e 38 37 38 36 20 31 38 2e 35 34 39 34 43 31 35 2e 37 32 36 36 20 31 38 2e 35 34 39 34 20 31 36 2e 34 31 34 20 31 37 2e 38 36 32 20 31 36 2e 34 31 34 20 31 37 2e 30 31 34 43 31 36 2e 34 31 34 20 31 36 2e 31 36 36 Data Ascii: 55 17.014C9.50455 16.166 8.81712 15.4785 7.96912 15.4785C7.12112 15.4785 6.43368 16.166 6.43368 17.014C6.43368 17.862 7.12112 18.5494 7.96912 18.5494Z"}),r.createElement("path",{d:"M14.8786 18.5494C15.7266 18.5494 16.414 17.862 16.414 17.014C16.414 16.166
2024-04-26 12:23:15 UTC	12325	IN	Data Raw: 45 6c 65 6d 65 6e 74 28 69 2c 61 2e 5f 5f 61 73 73 69 67 6e 28 7b 74 69 74 6c 65 41 63 63 65 73 73 3a 22 56 65 6e 6d 6f 22 7d 2c 6e 29 2c 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 66 69 6c 6c 3a 74 2c 66 69 6c 6c 52 75 6c 65 3a 22 65 76 65 6e 6f 64 64 22 2c 63 6c 69 70 52 75 6c 65 3a 22 65 76 65 6e 6f 64 64 22 2c 64 3a 22 4d 31 37 2e 38 34 30 33 20 30 2e 37 37 43 31 38 2e 35 32 34 39 20 31 2e 38 37 38 33 35 20 31 38 2e 38 33 33 38 20 33 2e 30 31 39 36 31 20 31 38 2e 38 33 33 38 20 34 2e 34 36 31 38 34 43 31 38 2e 38 33 33 38 20 39 2e 30 36 30 35 39 20 31 34 2e 38 32 37 34 20 31 35 2e 30 33 34 39 20 31 31 2e 35 37 35 34 20 31 39 2e 32 33 48 34 2e 31 34 38 33 35 4c 31 2e 31 37 20 31 2e 37 37 37 32 33 4c 37 2e 36 37 33 32 35 20 Data Ascii: Element(i,a.__assign({titleAccess:"Venmo"},n),r.createElement("path",{fill:t,fillRule:"evenodd",clipRule:"evenodd",d:"M17.8403 0.77C18.5249 1.87835 18.8338 3.01961 18.8338 4.46184C18.8338 9.06059 14.8274 15.0349 11.5754 19.23H4.14835L1.17 1.77723L7.67325

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49853	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:15 UTC	558	OUT	GET /ice/vendorVenmo39.b4f63a3af68bb0c60ccb.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:15 UTC	852	IN	HTTP/1.1 200 OK Connection: close Content-Length: 10756 Cache-Control: s-maxage=31536000, public,max-age=86400 Content-Type: application/javascript Etag: "66064786-2a04" Last-Modified: Fri, 29 Mar 2024 04:45:58 GMT Paypal-Debug-Id: 1232f1f7fe4da Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000001232f1f7fe4da-d7808ebcf5a5b75b-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:15 GMT X-Served-By: cache-dfw-kdfw8210114-DFW, cache-gnv1820028-GNV X-Cache: HIT, MISS X-Cache-Hits: 2, 0 X-Timer: S1714134195.091811,VS0,VE23 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 39 5d 2c 7b 37 34 39 30 35 3a 28 65 2c 72 2c 74 29 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 6e 3d 74 28 32 34 31 31 33 29 2c 6f 3d 74 28 35 36 37 37 35 29 2c 61 3d 74 28 33 39 31 34 39 29 2c 69 3d 74 28 34 39 33 39 36 29 2c 63 3d 74 28 39 36 36 35 36 29 2c 75 3d 74 28 38 38 39 35 34 29 2c 6c 3d 74 28 37 Data Ascii: "use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[39],{74905:(e,r,t)=>{Object.defineProperty(r,"__esModule",{value:!0});var n=t(24113),o=t(56775),a=t(39149),i=t(49396),c=t(96656),u=t(88954),l=t(7
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 74 63 68 4f 6e 3d 75 2c 72 2e 53 77 69 74 63 68 4f 66 66 3d 6c 2c 72 2e 43 6f 6d 6d 65 6e 74 3d 66 2c 72 2e 48 65 61 72 74 3d 73 2c 72 2e 47 65 6e 65 72 69 63 43 72 65 64 69 74 43 61 72 64 3d 76 2c 72 2e 46 61 63 65 62 6f 6f 6b 63 69 72 63 6c 65 64 3d 70 2c 72 2e 46 61 63 65 62 6f 6f 6b 62 61 73 69 63 3d 79 2c 72 2e 45 6e 76 65 6c 6f 70 65 3d 64 2c 72 2e 44 6f 77 6e 6c 6f 61 64 3d 68 2c 72 2e 4d 65 64 69 63 61 6c 3d 5f 2c 72 2e 4c 6f 63 6b 3d 62 2c 72 2e 52 65 77 61 72 64 73 3d 77 2c 72 2e 46 69 72 65 3d 6d 2c 72 2e 48 65 61 6c 74 68 3d 50 2c 72 2e 49 6e 73 74 61 67 72 61 6d 3d 67 2c 72 2e 50 6c 61 6e 65 3d 53 2c 72 2e 50 6c 75 73 3d 4f 2c 72 2e 57 6f 72 6c 64 3d 78 2c 72 2e 50 69 63 74 75 72 65 72 65 76 65 72 73 65 3d 6b 2c 72 2e 56 65 6e 6d 6f 64 6f 6c Data Ascii: tchOn=u,r.SwitchOff=l,r.Comment=f,r.Heart=s,r.GenericCreditCard=v,r.Facebookcircled=p,r.Facebookbasic=y,r.Envelope=d,r.Download=h,r.Medical=_,r.Lock=b,r.Rewards=w,r.Fire=m,r.Health=P,r.Instagram=g,r.Plane=S,r.Plus=O,r.World=x,r.Picturereverse=k,r.Venmodol
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 38 32 34 33 31 29 3b 74 28 33 38 32 38 36 29 3b 76 61 72 20 66 3d 74 28 37 36 37 35 36 29 3b 74 28 34 36 37 39 39 29 3b 76 61 72 20 73 3d 74 28 38 32 36 37 32 29 2c 76 3d 74 28 34 36 38 32 30 29 3b 74 28 33 33 39 33 35 29 3b 76 61 72 20 70 3d 74 28 35 33 36 36 31 29 3b 74 28 36 30 34 30 37 29 3b 76 61 72 20 79 3d 74 28 33 32 39 35 35 29 3b 74 28 38 38 35 36 36 29 3b 76 61 72 20 64 3d 74 28 35 34 39 30 36 29 3b 74 28 33 32 37 35 38 29 3b 76 61 72 20 68 3d 74 28 36 37 38 39 29 3b 74 28 32 39 39 30 35 29 3b 76 61 72 20 5f 3d 74 28 33 35 31 34 34 29 2c 62 3d 74 28 31 36 31 36 29 3b 74 28 39 35 36 30 29 3b 76 61 72 20 77 3d 74 28 35 39 36 37 36 29 3b 74 28 38 30 36 32 37 29 3b 76 61 72 20 6d 3d 74 28 31 38 30 37 39 29 3b 74 28 38 39 32 34 30 29 3b 76 61 72 20 Data Ascii: 82431);t(38286);var f=t(76756);t(46799);var s=t(82672),v=t(46820);t(33935);var p=t(53661);t(60407);var y=t(32955);t(88566);var d=t(54906);t(32758);var h=t(6789);t(29905);var _=t(35144),b=t(1616);t(9560);var w=t(59676);t(80627);var m=t(18079);t(89240);var
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0a 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 0a 0a 50 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 75 73 65 2c 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 2f 6f 72 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 66 6f 72 20 61 6e 79 0a 70 75 72 70 6f 73 65 20 77 69 74 68 20 6f 72 20 77 69 74 68 6f 75 74 20 66 65 65 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2e 0a 0a 54 48 45 20 53 4f 46 54 57 41 52 45 20 49 53 20 50 52 4f 56 49 44 45 44 20 22 41 53 20 49 53 22 20 41 4e 44 20 54 48 45 20 41 55 54 48 4f 52 20 44 49 53 43 4c 41 49 4d 53 20 41 Data Ascii: ************************************Copyright (c) Microsoft Corporation.Permission to use, copy, modify, and/or distribute this software for anypurpose with or without fee is hereby granted.THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS A
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 2d 20 3e 30 29 26 26 21 28 6e 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 69 2e 70 75 73 68 28 6e 2e 76 61 6c 75 65 29 7d 63 61 74 63 68 28 65 29 7b 6f 3d 7b 65 72 72 6f 72 3a 65 7d 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 6e 26 26 21 6e 2e 64 6f 6e 65 26 26 28 74 3d 61 2e 72 65 74 75 72 6e 29 26 26 74 2e 63 61 6c 6c 28 61 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 6f 29 74 68 72 6f 77 20 6f 2e 65 72 72 6f 72 7d 7d 72 65 74 75 72 6e 20 69 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 61 3f 28 74 68 69 73 2e 76 3d 65 2c 74 68 69 73 29 3a 6e 65 77 20 61 28 65 29 7d 72 2e 5f 5f 61 73 73 69 67 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 5f 5f 61 73 73 69 67 6e 3d 4f 62 Data Ascii: - >0)&&!(n=a.next()).done;)i.push(n.value)}catch(e){o={error:e}}finally{try{n&&!n.done&&(t=a.return)&&t.call(a)}finally{if(o)throw o.error}}return i}function a(e){return this instanceof a?(this.v=e,this):new a(e)}r.__assign=function(){return r.__assign=Ob
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 79 6e 63 49 74 65 72 61 74 6f 72 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2e 22 29 3b 76 61 72 20 72 2c 74 3d 65 5b 53 79 6d 62 6f 6c 2e 61 73 79 6e 63 49 74 65 72 61 74 6f 72 5d 3b 72 65 74 75 72 6e 20 74 3f 74 2e 63 61 6c 6c 28 65 29 3a 28 65 3d 6e 28 65 29 2c 72 3d 7b 7d 2c 6f 28 22 6e 65 78 74 22 29 2c 6f 28 22 74 68 72 6f 77 22 29 2c 6f 28 22 72 65 74 75 72 6e 22 29 2c 72 5b 53 79 6d 62 6f 6c 2e 61 73 79 6e 63 49 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 72 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 72 5b 74 5d 3d 65 5b 74 5d 26 26 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 28 66 75 6e 63 74 Data Ascii: yncIterator is not defined.");var r,t=e[Symbol.asyncIterator];return t?t.call(e):(e=n(e),r={},o("next"),o("throw"),o("return"),r[Symbol.asyncIterator]=function(){return this},r);function o(t){r[t]=e[t]&&function(r){return new Promise((function(n,o){(funct
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 74 53 74 61 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 65 29 22 64 65 66 61 75 6c 74 22 3d 3d 3d 74 7c 7c 72 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 74 29 7c 7c 28 72 5b 74 5d 3d 65 5b 74 5d 29 7d 2c 72 2e 5f 5f 65 78 74 65 6e 64 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 65 7d 74 28 65 2c 72 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 75 6c 6c 3d 3d 3d 72 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 72 29 3a 28 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 72 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 6e 29 7d 2c 72 2e 5f 5f 67 65 6e 65 72 61 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 76 61 72 20 74 2c 6e Data Ascii: tStar=function(e,r){for(var t in e)"default"===t\|\|r.hasOwnProperty(t)\|\|(r[t]=e[t])},r.__extends=function(e,r){function n(){this.constructor=e}t(e,r),e.prototype=null===r?Object.create(r):(n.prototype=r.prototype,new n)},r.__generator=function(e,r){var t,n
2024-04-26 12:23:15 UTC	1103	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 72 3d 7b 7d 3b 69 66 28 6e 75 6c 6c 21 3d 65 29 66 6f 72 28 76 61 72 20 74 20 69 6e 20 65 29 4f 62 6a 65 63 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 26 26 28 72 5b 74 5d 3d 65 5b 74 5d 29 3b 72 65 74 75 72 6e 20 72 2e 64 65 66 61 75 6c 74 3d 65 2c 72 7d 2c 72 2e 5f 5f 6d 61 6b 65 54 65 6d 70 6c 61 74 65 4f 62 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 72 61 77 22 2c 7b 76 61 6c 75 65 3a 72 7d 29 3a 65 2e 72 61 77 3d 72 Data Ascii: unction(e){if(e&&e.__esModule)return e;var r={};if(null!=e)for(var t in e)Object.hasOwnProperty.call(e,t)&&(r[t]=e[t]);return r.default=e,r},r.__makeTemplateObject=function(e,r){return Object.defineProperty?Object.defineProperty(e,"raw",{value:r}):e.raw=r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49852	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:15 UTC	558	OUT	GET /ice/vendorVenmo40.6b9396492b9ecd85d966.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:15 UTC	856	IN	HTTP/1.1 200 OK Connection: close Content-Length: 75682 Cache-Control: s-maxage=31536000, public,max-age=86400 Content-Type: application/javascript Etag: "66064786-127a2" Last-Modified: Fri, 29 Mar 2024 04:45:58 GMT Paypal-Debug-Id: 129e6a2f6d7fd Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000129e6a2f6d7fd-cf97601625a78d45-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:15 GMT X-Served-By: cache-dfw-kdfw8210068-DFW, cache-pdk-kfty2130072-PDK X-Cache: HIT, HIT X-Cache-Hits: 9, 0 X-Timer: S1714134195.210677,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 30 5d 2c 7b 39 38 36 36 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 41 63 63 6f 72 64 69 6f 6e 3a 28 29 3d 3e 78 2e 5a 2c 41 63 63 6f 72 64 69 6f 6e 41 63 74 69 6f 6e 73 3a 28 29 3d 3e 77 2e 5a 2c 41 63 63 6f 72 64 69 6f 6e 44 65 74 61 69 6c 73 3a 28 29 3d 3e 4f 2e 5a 2c 41 63 63 6f 72 64 69 6f 6e 53 75 6d 6d 61 72 79 3a 28 29 3d 3e 45 2e 5a 2c 41 70 70 42 61 72 3a 28 29 3d 3e 43 2e 5a 2c 41 76 Data Ascii: "use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[40],{98660:(e,t,n)=>{n.r(t),n.d(t,{Accordion:()=>x.Z,AccordionActions:()=>w.Z,AccordionDetails:()=>O.Z,AccordionSummary:()=>E.Z,AppBar:()=>C.Z,Av
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 4c 61 62 65 6c 3a 28 29 3d 3e 4d 65 2e 5a 2c 4c 69 6e 65 61 72 50 72 6f 67 72 65 73 73 3a 28 29 3d 3e 49 65 2e 5a 2c 4c 69 6e 6b 3a 28 29 3d 3e 50 65 2e 5a 2c 4c 69 73 74 3a 28 29 3d 3e 41 65 2e 5a 2c 4c 69 73 74 49 74 65 6d 3a 28 29 3d 3e 46 65 2e 5a 2c 4c 69 73 74 49 74 65 6d 41 76 61 74 61 72 3a 28 29 3d 3e 44 65 2e 5a 2c 4c 69 73 74 49 74 65 6d 49 63 6f 6e 3a 28 29 3d 3e 52 65 2e 5a 2c 4c 69 73 74 49 74 65 6d 53 65 63 6f 6e 64 61 72 79 41 63 74 69 6f 6e 3a 28 29 3d 3e 4e 65 2e 5a 2c 4c 69 73 74 49 74 65 6d 54 65 78 74 3a 28 29 3d 3e 42 65 2e 5a 2c 4c 69 73 74 53 75 62 68 65 61 64 65 72 3a 28 29 3d 3e 7a 65 2e 5a 2c 4d 65 6e 75 3a 28 29 3d 3e 48 65 2e 5a 2c 4d 65 6e 75 49 74 65 6d 3a 28 29 3d 3e 57 65 2e 5a 2c 4d 65 6e 75 4c 69 73 74 3a 28 29 3d 3e 56 Data Ascii: Label:()=>Me.Z,LinearProgress:()=>Ie.Z,Link:()=>Pe.Z,List:()=>Ae.Z,ListItem:()=>Fe.Z,ListItemAvatar:()=>De.Z,ListItemIcon:()=>Re.Z,ListItemSecondaryAction:()=>Ne.Z,ListItemText:()=>Be.Z,ListSubheader:()=>ze.Z,Menu:()=>He.Z,MenuItem:()=>We.Z,MenuList:()=>V
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 29 3d 3e 61 2e 5a 2c 63 72 65 61 74 65 47 65 6e 65 72 61 74 65 43 6c 61 73 73 4e 61 6d 65 3a 28 29 3d 3e 6f 2e 63 72 65 61 74 65 47 65 6e 65 72 61 74 65 43 6c 61 73 73 4e 61 6d 65 2c 63 72 65 61 74 65 4d 75 69 54 68 65 6d 65 3a 28 29 3d 3e 6f 2e 63 72 65 61 74 65 4d 75 69 54 68 65 6d 65 2c 63 72 65 61 74 65 53 74 79 6c 65 73 3a 28 29 3d 3e 6f 2e 63 72 65 61 74 65 53 74 79 6c 65 73 2c 63 72 65 61 74 65 53 76 67 49 63 6f 6e 3a 28 29 3d 3e 6c 2e 5a 2c 63 72 65 61 74 65 54 68 65 6d 65 3a 28 29 3d 3e 6f 2e 63 72 65 61 74 65 54 68 65 6d 65 2c 64 61 72 6b 65 6e 3a 28 29 3d 3e 6f 2e 64 61 72 6b 65 6e 2c 64 65 62 6f 75 6e 63 65 3a 28 29 3d 3e 75 2e 5a 2c 64 65 63 6f 6d 70 6f 73 65 43 6f 6c 6f 72 3a 28 29 3d 3e 6f 2e 64 65 63 6f 6d 70 6f 73 65 43 6f 6c 6f 72 2c 64 Data Ascii: )=>a.Z,createGenerateClassName:()=>o.createGenerateClassName,createMuiTheme:()=>o.createMuiTheme,createStyles:()=>o.createStyles,createSvgIcon:()=>l.Z,createTheme:()=>o.createTheme,darken:()=>o.darken,debounce:()=>u.Z,decomposeColor:()=>o.decomposeColor,d
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 76 61 72 20 63 3d 6e 28 38 33 37 31 31 29 2c 64 3d 6e 28 33 30 36 32 36 29 2c 70 3d 6e 28 38 30 37 31 33 29 3b 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 76 61 72 20 68 3d 6e 28 33 34 32 33 36 29 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 2c 6e 2c 72 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 76 61 72 20 76 3d 6e 28 32 32 37 37 35 29 2c 67 3d 6e 28 35 35 31 39 32 29 2c 62 3d 6e 28 31 37 32 39 34 29 2c 5a 3d 6e 28 39 35 30 30 31 29 2c 79 3d 6e 28 32 34 38 39 36 29 2c 78 3d 6e 28 33 36 39 33 39 29 2c 77 3d 6e 28 35 33 35 33 37 29 2c 4f 3d 6e 28 36 31 32 30 31 29 2c 45 3d 6e 28 35 30 37 34 33 29 2c Data Ascii: ction(){return null}}var c=n(83711),d=n(30626),p=n(80713);function f(e){return function(){return null}}var h=n(34236);function m(e,t,n,r,o){return null}var v=n(22775),g=n(55192),b=n(17294),Z=n(95001),y=n(24896),x=n(36939),w=n(53537),O=n(61201),E=n(50743),
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 68 74 3d 6e 28 34 36 38 36 29 2c 6d 74 3d 6e 28 36 32 30 38 37 29 2c 76 74 3d 6e 28 39 33 34 37 31 29 2c 67 74 3d 6e 28 39 35 37 30 29 2c 62 74 3d 6e 28 34 31 34 32 33 29 2c 5a 74 3d 6e 28 38 32 33 30 32 29 2c 79 74 3d 6e 28 39 39 36 31 33 29 2c 78 74 3d 6e 28 38 38 32 32 32 29 2c 77 74 3d 6e 28 35 36 38 34 37 29 2c 4f 74 3d 6e 28 39 37 34 37 33 29 2c 45 74 3d 6e 28 38 33 37 35 30 29 2c 43 74 3d 6e 28 36 31 36 35 37 29 2c 53 74 3d 6e 28 35 37 33 39 34 29 2c 54 74 3d 6e 28 34 37 31 32 31 29 2c 6b 74 3d 6e 28 33 39 30 31 30 29 2c 4c 74 3d 6e 28 37 32 33 38 38 29 2c 4d 74 3d 6e 28 33 39 38 30 33 29 2c 49 74 3d 6e 28 38 37 33 34 33 29 2c 50 74 3d 6e 28 32 38 33 35 38 29 2c 41 74 3d 6e 28 38 36 38 29 2c 46 74 3d 6e 28 32 32 33 31 38 29 2c 44 74 3d 6e 28 35 34 Data Ascii: ht=n(4686),mt=n(62087),vt=n(93471),gt=n(9570),bt=n(41423),Zt=n(82302),yt=n(99613),xt=n(88222),wt=n(56847),Ot=n(97473),Et=n(83750),Ct=n(61657),St=n(57394),Tt=n(47121),kt=n(39010),Lt=n(72388),Mt=n(39803),It=n(87343),Pt=n(28358),At=n(868),Ft=n(22318),Dt=n(54
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 0a 20 2a 20 4c 49 43 45 4e 53 45 20 66 69 6c 65 20 69 6e 20 74 68 65 20 72 6f 6f 74 20 64 69 72 65 63 74 6f 72 79 20 6f 66 20 74 68 69 73 20 73 6f 75 72 63 65 20 74 72 65 65 2e 0a 20 2a 2f 2c 35 36 36 30 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 66 7d 29 3b 76 61 72 20 72 3d 6e 28 38 37 34 36 32 29 2c 6f 3d 6e 28 32 39 34 33 39 29 2c 69 3d 6e 28 34 35 39 38 37 29 2c 61 3d 6e 28 33 35 37 37 36 29 2c 6c 3d 6e 28 38 36 30 31 30 29 2c 75 3d 6e 28 32 32 37 37 35 29 2c 73 3d 6e 28 32 32 36 30 31 29 2c 63 3d 6e 28 35 32 35 34 33 29 2c 64 3d 6e 28 31 37 38 31 32 29 2c 70 3d 61 2e 66 6f 72 77 61 72 64 52 65 66 28 28 66 Data Ascii: sed under the MIT license found in the * LICENSE file in the root directory of this source tree. */,56608:(e,t,n)=>{n.d(t,{Z:()=>f});var r=n(87462),o=n(29439),i=n(45987),a=n(35776),l=n(86010),u=n(22775),s=n(22601),c=n(52543),d=n(17812),p=a.forwardRef((f
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 4f 6e 6c 79 3a 43 2c 72 65 66 3a 79 2c 72 65 71 75 69 72 65 64 3a 53 2c 74 61 62 49 6e 64 65 78 3a 54 2c 74 79 70 65 3a 6b 2c 76 61 6c 75 65 3a 4c 7d 2c 5a 29 29 2c 41 3f 70 3a 67 29 7d 29 29 3b 63 6f 6e 73 74 20 66 3d 28 30 2c 63 2e 5a 29 28 7b 72 6f 6f 74 3a 7b 70 61 64 64 69 6e 67 3a 39 7d 2c 63 68 65 63 6b 65 64 3a 7b 7d 2c 64 69 73 61 62 6c 65 64 3a 7b 7d 2c 69 6e 70 75 74 3a 7b 63 75 72 73 6f 72 3a 22 69 6e 68 65 72 69 74 22 2c 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 2c 6f 70 61 63 69 74 79 3a 30 2c 77 69 64 74 68 3a 22 31 30 30 25 22 2c 68 65 69 67 68 74 3a 22 31 30 30 25 22 2c 74 6f 70 3a 30 2c 6c 65 66 74 3a 30 2c 6d 61 72 67 69 6e 3a 30 2c 70 61 64 64 69 6e 67 3a 30 2c 7a 49 6e 64 65 78 3a 31 7d 7d 2c 7b 6e 61 6d 65 3a 22 50 72 Data Ascii: Only:C,ref:y,required:S,tabIndex:T,type:k,value:L},Z)),A?p:g)}));const f=(0,c.Z)({root:{padding:9},checked:{},disabled:{},input:{cursor:"inherit",position:"absolute",opacity:0,width:"100%",height:"100%",top:0,left:0,margin:0,padding:0,zIndex:1}},{name:"Pr
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 31 37 2e 35 33 20 32 20 31 32 20 32 7a 6d 35 20 31 33 2e 35 39 4c 31 35 2e 35 39 20 31 37 20 31 32 20 31 33 2e 34 31 20 38 2e 34 31 20 31 37 20 37 20 31 35 2e 35 39 20 31 30 2e 35 39 20 31 32 20 37 20 38 2e 34 31 20 38 2e 34 31 20 37 20 31 32 20 31 30 2e 35 39 20 31 35 2e 35 39 20 37 20 31 37 20 38 2e 34 31 20 31 33 2e 34 31 20 31 32 20 31 37 20 31 35 2e 35 39 7a 22 7d 29 2c 22 43 61 6e 63 65 6c 22 29 7d 2c 34 31 32 31 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 6f 7d 29 3b 76 61 72 20 72 3d 6e 28 33 35 37 37 36 29 3b 63 6f 6e 73 74 20 6f 3d 28 30 2c 6e 28 36 33 37 38 36 29 2e 5a 29 28 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 31 39 20 33 48 35 63 2d 31 2e 31 31 20 30 2d 32 20 2e 39 Data Ascii: 17.53 2 12 2zm5 13.59L15.59 17 12 13.41 8.41 17 7 15.59 10.59 12 7 8.41 8.41 7 12 10.59 15.59 7 17 8.41 13.41 12 17 15.59z"}),"Cancel")},41216:(e,t,n)=>{n.d(t,{Z:()=>o});var r=n(35776);const o=(0,n(63786).Z)(r.createElement("path",{d:"M19 3H5c-1.11 0-2 .9
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 6f 7d 29 3b 76 61 72 20 72 3d 6e 28 33 35 37 37 36 29 3b 63 6f 6e 73 74 20 6f 3d 28 30 2c 6e 28 36 33 37 38 36 29 2e 5a 29 28 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 36 20 31 30 63 2d 31 2e 31 20 30 2d 32 20 2e 39 2d 32 20 32 73 2e 39 20 32 20 32 20 32 20 32 2d 2e 39 20 32 2d 32 2d 2e 39 2d 32 2d 32 2d 32 7a 6d 31 32 20 30 63 2d 31 2e 31 20 30 2d 32 20 2e 39 2d 32 20 32 73 2e 39 20 32 20 32 20 32 20 32 2d 2e 39 20 32 2d 32 2d 2e 39 2d 32 2d 32 2d 32 7a 6d 2d 36 20 30 63 2d 31 2e 31 20 30 2d 32 20 2e 39 2d 32 20 32 73 2e 39 20 32 20 32 20 32 20 32 2d 2e 39 20 32 2d 32 2d 2e 39 2d 32 2d 32 2d 32 7a 22 7d 29 2c 22 4d 6f 72 65 48 6f 72 69 7a 22 29 7d 2c 39 Data Ascii: t,n)=>{n.d(t,{Z:()=>o});var r=n(35776);const o=(0,n(63786).Z)(r.createElement("path",{d:"M6 10c-1.1 0-2 .9-2 2s.9 2 2 2 2-.9 2-2-.9-2-2-2zm12 0c-1.1 0-2 .9-2 2s.9 2 2 2 2-.9 2-2-.9-2-2-2zm-6 0c-1.1 0-2 .9-2 2s.9 2 2 2 2-.9 2-2-.9-2-2-2z"}),"MoreHoriz")},9
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 30 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 31 3b 72 65 74 75 72 6e 20 4d 61 74 68 2e 6d 69 6e 28 4d 61 74 68 2e 6d 61 78 28 74 2c 65 29 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 65 3d 65 2e 73 75 62 73 74 72 28 31 29 3b 76 61 72 20 74 3d 6e 65 77 20 52 65 67 45 78 70 28 22 2e 7b 31 2c 22 2e 63 6f 6e 63 61 74 28 65 2e 6c 65 6e 67 74 68 3e 3d 36 3f 32 3a 31 2c 22 7d 22 29 2c 22 67 22 29 2c 6e 3d 65 2e 6d 61 74 63 68 28 74 29 3b 72 65 74 75 72 6e 20 6e 26 26 31 3d 3d 3d 6e 5b 30 5d 2e 6c 65 6e 67 74 68 26 26 28 6e 3d 6e 2e Data Ascii: 0!==arguments[1]?arguments[1]:0,n=arguments.length>2&&void 0!==arguments[2]?arguments[2]:1;return Math.min(Math.max(t,e),n)}function i(e){e=e.substr(1);var t=new RegExp(".{1,".concat(e.length>=6?2:1,"}"),"g"),n=e.match(t);return n&&1===n[0].length&&(n=n.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49848	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:15 UTC	558	OUT	GET /ice/vendorVenmo41.09e9e80f30091690ed55.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:15 UTC	854	IN	HTTP/1.1 200 OK Connection: close Content-Length: 6668 Cache-Control: s-maxage=31536000, public,max-age=86400 Content-Type: application/javascript Etag: "66064786-1a0c" Last-Modified: Fri, 29 Mar 2024 04:45:58 GMT Paypal-Debug-Id: 8927642bdb0b6 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000008927642bdb0b6-0d2953efbe642694-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:15 GMT X-Served-By: cache-dfw-kdal2120027-DFW, cache-pdk-kfty2130048-PDK X-Cache: HIT, HIT X-Cache-Hits: 1, 0 X-Timer: S1714134195.370514,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 31 5d 2c 7b 37 35 34 34 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 57 3a 28 29 3d 3e 70 2c 5a 3a 28 29 3d 3e 66 7d 29 3b 76 61 72 20 69 3d 6e 28 38 37 34 36 32 29 2c 61 3d 6e 28 34 35 39 38 37 29 2c 6f 3d 6e 28 33 35 37 37 36 29 2c 6c 3d 6e 28 39 39 33 38 36 29 2c 72 3d 6e 28 35 32 35 34 33 29 2c 64 3d 6e 28 38 39 33 34 35 29 2c 73 3d 6e 28 32 32 36 30 31 29 2c 63 3d 6e 28 32 35 32 30 31 29 2c 75 3d 6e 28 33 38 37 Data Ascii: "use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[41],{75445:(e,t,n)=>{n.d(t,{W:()=>p,Z:()=>f});var i=n(87462),a=n(45987),o=n(35776),l=n(99386),r=n(52543),d=n(89345),s=n(22601),c=n(25201),u=n(387
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 72 3d 65 2e 63 6c 61 73 73 65 73 2c 75 3d 65 2e 49 63 6f 6e 43 6f 6d 70 6f 6e 65 6e 74 2c 70 3d 76 6f 69 64 20 30 3d 3d 3d 75 3f 63 2e 5a 3a 75 2c 6d 3d 65 2e 69 6e 70 75 74 2c 66 3d 76 6f 69 64 20 30 3d 3d 3d 6d 3f 68 3a 6d 2c 67 3d 65 2e 69 6e 70 75 74 50 72 6f 70 73 2c 62 3d 28 65 2e 76 61 72 69 61 6e 74 2c 28 30 2c 61 2e 5a 29 28 65 2c 5b 22 63 68 69 6c 64 72 65 6e 22 2c 22 63 6c 61 73 73 65 73 22 2c 22 49 63 6f 6e 43 6f 6d 70 6f 6e 65 6e 74 22 2c 22 69 6e 70 75 74 22 2c 22 69 6e 70 75 74 50 72 6f 70 73 22 2c 22 76 61 72 69 61 6e 74 22 5d 29 29 2c 76 3d 28 30 2c 73 2e 5a 29 28 29 2c 79 3d 28 30 2c 64 2e 5a 29 28 7b 70 72 6f 70 73 3a 65 2c 6d 75 69 46 6f 72 6d 43 6f 6e 74 72 6f 6c 3a 76 2c 73 74 61 74 65 73 3a 5b 22 76 61 72 69 61 6e 74 22 5d 7d 29 3b Data Ascii: r=e.classes,u=e.IconComponent,p=void 0===u?c.Z:u,m=e.input,f=void 0===m?h:m,g=e.inputProps,b=(e.variant,(0,a.Z)(e,["children","classes","IconComponent","input","inputProps","variant"])),v=(0,s.Z)(),y=(0,d.Z)({props:e,muiFormControl:v,states:["variant"]});
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 73 65 45 66 66 65 63 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 26 26 63 28 21 30 29 7d 29 2c 5b 6f 5d 29 2c 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 69 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 73 3f 74 3a 72 29 7d 7d 2c 36 36 37 31 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 66 7d 29 3b 76 61 72 20 69 3d 6e 28 38 37 34 36 32 29 2c 61 3d 6e 28 34 35 39 38 37 29 2c 6f 3d 6e 28 33 35 37 37 36 29 2c 6c 3d 6e 28 38 36 30 31 30 29 2c 72 3d 6e 28 34 31 35 39 38 29 2c 64 3d 6e 28 34 39 34 32 29 2c 73 3d 6e 28 35 32 35 34 33 29 2c 63 3d 6e 28 38 39 32 30 29 2c 75 3d 6e 28 39 33 38 37 31 29 2c 70 3d 6f 2e 66 6f 72 77 61 72 64 52 65 66 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 63 68 69 6c 64 72 65 6e 3b 76 61 Data Ascii: seEffect((function(){o&&c(!0)}),[o]),i.createElement(i.Fragment,null,s?t:r)}},66718:(e,t,n)=>{n.d(t,{Z:()=>f});var i=n(87462),a=n(45987),o=n(35776),l=n(86010),r=n(41598),d=n(4942),s=n(52543),c=n(8920),u=n(93871),p=o.forwardRef((function(e,t){e.children;va
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 6e 73 69 74 69 6f 6e 3a 65 2e 74 72 61 6e 73 69 74 69 6f 6e 73 2e 63 72 65 61 74 65 28 22 77 69 64 74 68 22 2c 7b 64 75 72 61 74 69 6f 6e 3a 31 35 30 2c 65 61 73 69 6e 67 3a 65 2e 74 72 61 6e 73 69 74 69 6f 6e 73 2e 65 61 73 69 6e 67 2e 65 61 73 65 4f 75 74 7d 29 7d 2c 6c 65 67 65 6e 64 4c 61 62 65 6c 6c 65 64 3a 7b 64 69 73 70 6c 61 79 3a 22 62 6c 6f 63 6b 22 2c 77 69 64 74 68 3a 22 61 75 74 6f 22 2c 74 65 78 74 41 6c 69 67 6e 3a 22 6c 65 66 74 22 2c 70 61 64 64 69 6e 67 3a 30 2c 68 65 69 67 68 74 3a 31 31 2c 66 6f 6e 74 53 69 7a 65 3a 22 30 2e 37 35 65 6d 22 2c 76 69 73 69 62 69 6c 69 74 79 3a 22 68 69 64 64 65 6e 22 2c 6d 61 78 57 69 64 74 68 3a 2e 30 31 2c 74 72 61 6e 73 69 74 69 6f 6e 3a 65 2e 74 72 61 6e 73 69 74 69 6f 6e 73 2e 63 72 65 61 74 65 28 Data Ascii: nsition:e.transitions.create("width",{duration:150,easing:e.transitions.easing.easeOut})},legendLabelled:{display:"block",width:"auto",textAlign:"left",padding:0,height:11,fontSize:"0.75em",visibility:"hidden",maxWidth:.01,transition:e.transitions.create(
2024-04-26 12:23:15 UTC	1152	IN	Data Raw: 75 72 6e 7b 72 6f 6f 74 3a 7b 70 6f 73 69 74 69 6f 6e 3a 22 72 65 6c 61 74 69 76 65 22 2c 62 6f 72 64 65 72 52 61 64 69 75 73 3a 65 2e 73 68 61 70 65 2e 62 6f 72 64 65 72 52 61 64 69 75 73 2c 22 26 3a 68 6f 76 65 72 20 24 6e 6f 74 63 68 65 64 4f 75 74 6c 69 6e 65 22 3a 7b 62 6f 72 64 65 72 43 6f 6c 6f 72 3a 65 2e 70 61 6c 65 74 74 65 2e 74 65 78 74 2e 70 72 69 6d 61 72 79 7d 2c 22 40 6d 65 64 69 61 20 28 68 6f 76 65 72 3a 20 6e 6f 6e 65 29 22 3a 7b 22 26 3a 68 6f 76 65 72 20 24 6e 6f 74 63 68 65 64 4f 75 74 6c 69 6e 65 22 3a 7b 62 6f 72 64 65 72 43 6f 6c 6f 72 3a 74 7d 7d 2c 22 26 24 66 6f 63 75 73 65 64 20 24 6e 6f 74 63 68 65 64 4f 75 74 6c 69 6e 65 22 3a 7b 62 6f 72 64 65 72 43 6f 6c 6f 72 3a 65 2e 70 61 6c 65 74 74 65 2e 70 72 69 6d 61 72 79 2e 6d 61 Data Ascii: urn{root:{position:"relative",borderRadius:e.shape.borderRadius,"&:hover $notchedOutline":{borderColor:e.palette.text.primary},"@media (hover: none)":{"&:hover $notchedOutline":{borderColor:t}},"&$focused $notchedOutline":{borderColor:e.palette.primary.ma

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49854	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:15 UTC	558	OUT	GET /ice/vendorVenmo42.db2dd660920af1943272.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:15 UTC	855	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42470 Cache-Control: s-maxage=31536000, public,max-age=86400 Content-Type: application/javascript Etag: "66064786-a5e6" Last-Modified: Fri, 29 Mar 2024 04:45:58 GMT Paypal-Debug-Id: 0e22aa8da7b7a Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000000e22aa8da7b7a-967856a4a7aabd33-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:15 GMT X-Served-By: cache-dfw-kdal2120137-DFW, cache-pdk-kfty2130050-PDK X-Cache: HIT, HIT X-Cache-Hits: 7, 0 X-Timer: S1714134196.678529,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 32 5d 2c 7b 34 31 34 32 33 3a 28 65 2c 74 2c 6f 29 3d 3e 7b 6f 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 75 7d 29 3b 76 61 72 20 6e 3d 6f 28 34 35 39 38 37 29 2c 72 3d 6f 28 34 39 34 32 29 2c 61 3d 6f 28 38 37 34 36 32 29 2c 69 3d 6f 28 33 35 37 37 36 29 2c 6c 3d 6f 28 38 36 30 31 30 29 2c 63 3d 6f 28 35 32 35 34 33 29 2c 73 3d 6f 28 33 32 34 36 37 29 2c 64 3d 6f 28 39 33 38 37 31 29 2c 66 3d 69 2e 66 6f 72 77 61 72 64 52 65 66 28 28 Data Ascii: "use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[42],{41423:(e,t,o)=>{o.d(t,{Z:()=>u});var n=o(45987),r=o(4942),a=o(87462),i=o(35776),l=o(86010),c=o(52543),s=o(32467),d=o(93871),f=i.forwardRef((
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 62 72 65 61 6b 70 6f 69 6e 74 73 2e 75 70 28 22 73 6d 22 29 2c 7b 70 61 64 64 69 6e 67 3a 22 36 70 78 20 32 34 70 78 22 7d 29 2c 28 30 2c 72 2e 5a 29 28 74 2c 22 6f 76 65 72 66 6c 6f 77 22 2c 22 68 69 64 64 65 6e 22 29 2c 28 30 2c 72 2e 5a 29 28 74 2c 22 77 68 69 74 65 53 70 61 63 65 22 2c 22 6e 6f 72 6d 61 6c 22 29 2c 28 30 2c 72 2e 5a 29 28 74 2c 22 74 65 78 74 41 6c 69 67 6e 22 2c 22 63 65 6e 74 65 72 22 29 2c 28 30 2c 72 2e 5a 29 28 74 2c 65 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 75 70 28 22 73 6d 22 29 2c 7b 6d 69 6e 57 69 64 74 68 3a 31 36 30 7d 29 2c 74 29 29 2c 6c 61 62 65 6c 49 63 6f 6e 3a 7b 6d 69 6e 48 65 69 67 68 74 3a 37 32 2c 70 61 64 64 69 6e 67 54 6f 70 3a 39 2c 22 26 20 24 77 72 61 70 70 65 72 20 3e 20 2a 3a 66 69 72 73 74 2d 63 68 69 6c Data Ascii: breakpoints.up("sm"),{padding:"6px 24px"}),(0,r.Z)(t,"overflow","hidden"),(0,r.Z)(t,"whiteSpace","normal"),(0,r.Z)(t,"textAlign","center"),(0,r.Z)(t,e.breakpoints.up("sm"),{minWidth:160}),t)),labelIcon:{minHeight:72,paddingTop:9,"& $wrapper > *:first-chil
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 48 65 61 64 65 72 22 5d 29 2c 79 3d 61 2e 75 73 65 4d 65 6d 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 70 61 64 64 69 6e 67 3a 70 2c 73 69 7a 65 3a 76 2c 73 74 69 63 6b 79 48 65 61 64 65 72 3a 67 7d 7d 29 2c 5b 70 2c 76 2c 67 5d 29 3b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 5a 2e 50 72 6f 76 69 64 65 72 2c 7b 76 61 6c 75 65 3a 79 7d 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 66 2c 28 30 2c 72 2e 5a 29 28 7b 72 6f 6c 65 3a 66 3d 3d 3d 73 3f 6e 75 6c 6c 3a 22 74 61 62 6c 65 22 2c 72 65 66 3a 74 2c 63 6c 61 73 73 4e 61 6d 65 3a 28 30 2c 69 2e 64 65 66 61 75 6c 74 29 28 6f 2e 72 6f 6f 74 2c 6c 2c 67 26 26 6f 2e 73 74 69 63 6b 79 48 65 61 64 65 72 29 7d 2c 62 29 29 29 7d 29 29 3b 63 6f 6e 73 74 20 Data Ascii: Header"]),y=a.useMemo((function(){return{padding:p,size:v,stickyHeader:g}}),[p,v,g]);return a.createElement(c.Z.Provider,{value:y},a.createElement(f,(0,r.Z)({role:f===s?null:"table",ref:t,className:(0,i.default)(o.root,l,g&&o.stickyHeader)},b)))}));const
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 67 6e 2c 75 3d 76 6f 69 64 20 30 3d 3d 3d 73 3f 22 69 6e 68 65 72 69 74 22 3a 73 2c 70 3d 65 2e 63 6c 61 73 73 65 73 2c 6d 3d 65 2e 63 6c 61 73 73 4e 61 6d 65 2c 76 3d 65 2e 63 6f 6d 70 6f 6e 65 6e 74 2c 68 3d 65 2e 70 61 64 64 69 6e 67 2c 67 3d 65 2e 73 63 6f 70 65 2c 62 3d 65 2e 73 69 7a 65 2c 79 3d 65 2e 73 6f 72 74 44 69 72 65 63 74 69 6f 6e 2c 5a 3d 65 2e 76 61 72 69 61 6e 74 2c 78 3d 28 30 2c 6e 2e 5a 29 28 65 2c 5b 22 61 6c 69 67 6e 22 2c 22 63 6c 61 73 73 65 73 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 2c 22 63 6f 6d 70 6f 6e 65 6e 74 22 2c 22 70 61 64 64 69 6e 67 22 2c 22 73 63 6f 70 65 22 2c 22 73 69 7a 65 22 2c 22 73 6f 72 74 44 69 72 65 63 74 69 6f 6e 22 2c 22 76 61 72 69 61 6e 74 22 5d 29 2c 77 3d 61 2e 75 73 65 43 6f 6e 74 65 78 74 28 64 2e 5a Data Ascii: gn,u=void 0===s?"inherit":s,p=e.classes,m=e.className,v=e.component,h=e.padding,g=e.scope,b=e.size,y=e.sortDirection,Z=e.variant,x=(0,n.Z)(e,["align","classes","className","component","padding","scope","size","sortDirection","variant"]),w=a.useContext(d.Z
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 6c 3a 7b 70 61 64 64 69 6e 67 3a 22 36 70 78 20 32 34 70 78 20 36 70 78 20 31 36 70 78 22 2c 22 26 3a 6c 61 73 74 2d 63 68 69 6c 64 22 3a 7b 70 61 64 64 69 6e 67 52 69 67 68 74 3a 31 36 7d 2c 22 26 24 70 61 64 64 69 6e 67 43 68 65 63 6b 62 6f 78 22 3a 7b 77 69 64 74 68 3a 32 34 2c 70 61 64 64 69 6e 67 3a 22 30 20 31 32 70 78 20 30 20 31 36 70 78 22 2c 22 26 3a 6c 61 73 74 2d 63 68 69 6c 64 22 3a 7b 70 61 64 64 69 6e 67 4c 65 66 74 3a 31 32 2c 70 61 64 64 69 6e 67 52 69 67 68 74 3a 31 36 7d 2c 22 26 20 3e 20 2a 22 3a 7b 70 61 64 64 69 6e 67 3a 30 7d 7d 7d 2c 70 61 64 64 69 6e 67 43 68 65 63 6b 62 6f 78 3a 7b 77 69 64 74 68 3a 34 38 2c 70 61 64 64 69 6e 67 3a 22 30 20 30 20 30 20 34 70 78 22 2c 22 26 3a 6c 61 73 74 2d 63 68 69 6c 64 22 3a 7b 70 61 64 64 69 Data Ascii: l:{padding:"6px 24px 6px 16px","&:last-child":{paddingRight:16},"&$paddingCheckbox":{width:24,padding:"0 12px 0 16px","&:last-child":{paddingLeft:12,paddingRight:16},"& > *":{padding:0}}},paddingCheckbox:{width:48,padding:"0 0 0 4px","&:last-child":{paddi
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 3a 28 30 2c 69 2e 64 65 66 61 75 6c 74 29 28 6f 2e 72 6f 6f 74 2c 6c 29 2c 72 65 66 3a 74 2c 72 6f 6c 65 3a 75 3d 3d 3d 64 3f 6e 75 6c 6c 3a 22 72 6f 77 67 72 6f 75 70 22 7d 2c 70 29 29 29 7d 29 29 3b 63 6f 6e 73 74 20 75 3d 28 30 2c 6c 2e 5a 29 28 7b 72 6f 6f 74 3a 7b 64 69 73 70 6c 61 79 3a 22 74 61 62 6c 65 2d 66 6f 6f 74 65 72 2d 67 72 6f 75 70 22 7d 7d 2c 7b 6e 61 6d 65 3a 22 4d 75 69 54 61 62 6c 65 46 6f 6f 74 65 72 22 7d 29 28 66 29 7d 2c 38 33 37 35 30 3a 28 65 2c 74 2c 6f 29 3d 3e 7b 6f 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 75 7d 29 3b 76 61 72 20 6e 3d 6f 28 38 37 34 36 32 29 2c 72 3d 6f 28 34 35 39 38 37 29 2c 61 3d 6f 28 33 35 37 37 36 29 2c 69 3d 6f 28 38 36 30 31 30 29 2c 6c 3d 6f 28 35 32 35 34 33 29 2c 63 3d 6f 28 31 30 34 36 32 29 2c 73 3d Data Ascii: :(0,i.default)(o.root,l),ref:t,role:u===d?null:"rowgroup"},p)))}));const u=(0,l.Z)({root:{display:"table-footer-group"}},{name:"MuiTableFooter"})(f)},83750:(e,t,o)=>{o.d(t,{Z:()=>u});var n=o(87462),r=o(45987),a=o(35776),i=o(86010),l=o(52543),c=o(10462),s=
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 5a 29 28 7b 6f 6e 43 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 28 65 2c 75 2d 31 29 2c 66 28 65 2c 75 2d 31 29 7d 2c 64 69 73 61 62 6c 65 64 3a 30 3d 3d 3d 75 2c 63 6f 6c 6f 72 3a 22 69 6e 68 65 72 69 74 22 7d 2c 6f 29 2c 22 72 74 6c 22 3d 3d 3d 76 2e 64 69 72 65 63 74 69 6f 6e 3f 62 3a 79 29 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 67 2e 5a 2c 28 30 2c 6e 2e 5a 29 28 7b 6f 6e 43 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 28 65 2c 75 2b 31 29 2c 66 28 65 2c 75 2b 31 29 7d 2c 64 69 73 61 62 6c 65 64 3a 2d 31 21 3d 3d 69 26 26 75 3e 3d 4d 61 74 68 2e 63 65 69 6c 28 69 2f 70 29 2d 31 2c 63 6f 6c 6f 72 3a 22 69 6e 68 65 72 69 74 22 7d 2c 6c 29 2c 22 72 74 6c 22 3d 3d 3d 76 2e 64 69 72 65 63 74 69 6f 6e 3f 5a 3a 78 29 29 7d 29 Data Ascii: Z)({onClick:function(e){s(e,u-1),f(e,u-1)},disabled:0===u,color:"inherit"},o),"rtl"===v.direction?b:y),a.createElement(g.Z,(0,n.Z)({onClick:function(e){s(e,u+1),f(e,u+1)},disabled:-1!==i&&u>=Math.ceil(i/p)-1,color:"inherit"},l),"rtl"===v.direction?Z:x))})
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 3d 28 30 2c 45 2e 5a 29 28 29 2c 4a 3d 28 30 2c 45 2e 5a 29 28 29 2c 4b 3d 56 2e 6e 61 74 69 76 65 3f 22 6f 70 74 69 6f 6e 22 3a 73 2e 5a 3b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 52 2c 28 30 2c 6e 2e 5a 29 28 7b 63 6c 61 73 73 4e 61 6d 65 3a 28 30 2c 69 2e 64 65 66 61 75 6c 74 29 28 62 2e 72 6f 6f 74 2c 79 29 2c 63 6f 6c 53 70 61 6e 3a 6f 2c 72 65 66 3a 74 7d 2c 6a 29 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 75 2e 5a 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 62 2e 74 6f 6f 6c 62 61 72 7d 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 62 2e 73 70 61 63 65 72 7d 29 2c 24 2e 6c 65 6e 67 74 68 3e 31 26 26 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 70 2e 5a 2c 7b 63 Data Ascii: =(0,E.Z)(),J=(0,E.Z)(),K=V.native?"option":s.Z;return a.createElement(R,(0,n.Z)({className:(0,i.default)(b.root,y),colSpan:o,ref:t},j),a.createElement(u.Z,{className:b.toolbar},a.createElement("div",{className:b.spacer}),$.length>1&&a.createElement(p.Z,{c
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 74 22 7d 2c 73 65 6c 65 63 74 49 63 6f 6e 3a 7b 7d 2c 69 6e 70 75 74 3a 7b 63 6f 6c 6f 72 3a 22 69 6e 68 65 72 69 74 22 2c 66 6f 6e 74 53 69 7a 65 3a 22 69 6e 68 65 72 69 74 22 2c 66 6c 65 78 53 68 72 69 6e 6b 3a 30 7d 2c 6d 65 6e 75 49 74 65 6d 3a 7b 7d 2c 61 63 74 69 6f 6e 73 3a 7b 66 6c 65 78 53 68 72 69 6e 6b 3a 30 2c 6d 61 72 67 69 6e 4c 65 66 74 3a 32 30 7d 7d 7d 29 2c 7b 6e 61 6d 65 3a 22 4d 75 69 54 61 62 6c 65 50 61 67 69 6e 61 74 69 6f 6e 22 7d 29 28 52 29 7d 2c 35 37 33 39 34 3a 28 65 2c 74 2c 6f 29 3d 3e 7b 6f 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 66 7d 29 3b 76 61 72 20 6e 3d 6f 28 38 37 34 36 32 29 2c 72 3d 6f 28 34 35 39 38 37 29 2c 61 3d 6f 28 33 35 37 37 36 29 2c 69 3d 6f 28 38 36 30 31 30 29 2c 6c 3d 6f 28 35 32 35 34 33 29 2c 63 3d 6f 28 Data Ascii: t"},selectIcon:{},input:{color:"inherit",fontSize:"inherit",flexShrink:0},menuItem:{},actions:{flexShrink:0,marginLeft:20}}}),{name:"MuiTablePagination"})(R)},57394:(e,t,o)=>{o.d(t,{Z:()=>f});var n=o(87462),r=o(45987),a=o(35776),i=o(86010),l=o(52543),c=o(
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 28 65 2c 5b 22 61 63 74 69 76 65 22 2c 22 63 68 69 6c 64 72 65 6e 22 2c 22 63 6c 61 73 73 65 73 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 2c 22 64 69 72 65 63 74 69 6f 6e 22 2c 22 68 69 64 65 53 6f 72 74 49 63 6f 6e 22 2c 22 49 63 6f 6e 43 6f 6d 70 6f 6e 65 6e 74 22 5d 29 3b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 2e 5a 2c 28 30 2c 6e 2e 5a 29 28 7b 63 6c 61 73 73 4e 61 6d 65 3a 28 30 2c 69 2e 64 65 66 61 75 6c 74 29 28 75 2e 72 6f 6f 74 2c 70 2c 63 26 26 75 2e 61 63 74 69 76 65 29 2c 63 6f 6d 70 6f 6e 65 6e 74 3a 22 73 70 61 6e 22 2c 64 69 73 61 62 6c 65 52 69 70 70 6c 65 3a 21 30 2c 72 65 66 3a 74 7d 2c 5a 29 2c 66 2c 67 26 26 21 63 3f 6e 75 6c 6c 3a 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 79 2c 7b 63 6c 61 73 73 4e Data Ascii: (e,["active","children","classes","className","direction","hideSortIcon","IconComponent"]);return a.createElement(s.Z,(0,n.Z)({className:(0,i.default)(u.root,p,c&&u.active),component:"span",disableRipple:!0,ref:t},Z),f,g&&!c?null:a.createElement(y,{classN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49855	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:15 UTC	558	OUT	GET /ice/vendorVenmo43.bbd5f60f16ee575715aa.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:15 UTC	852	IN	HTTP/1.1 200 OK Connection: close Content-Length: 168596 Cache-Control: s-maxage=31536000, public,max-age=86400 Content-Type: application/javascript Etag: "66064786-29294" Last-Modified: Fri, 29 Mar 2024 04:45:58 GMT Paypal-Debug-Id: 49d8fa08aede6 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000049d8fa08aede6-a731fe833a2e3224-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:15 GMT X-Served-By: cache-dfw-kdfw8210177-DFW, cache-gnv1820027-GNV X-Cache: HIT, HIT X-Cache-Hits: 9, 0 X-Timer: S1714134196.805634,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 33 5d 2c 7b 38 36 30 37 33 3a 41 3d 3e 7b 41 2e 65 78 70 6f 72 74 73 3d 22 64 61 74 61 3a 66 6f 6e 74 2f 77 6f 66 66 3b 62 61 73 65 36 34 2c 64 30 39 47 52 67 41 42 41 41 41 41 41 4b 49 45 41 42 49 41 41 41 41 42 61 62 77 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 42 45 55 30 6c 48 41 41 43 68 2f 41 41 41 41 41 67 41 41 41 41 49 41 41 41 41 41 55 64 45 52 55 59 41 41 41 47 55 41 Data Ascii: "use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[43],{86073:A=>{A.exports="data:font/woff;base64,d09GRgABAAAAAKIEABIAAAABabwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEU0lHAACh/AAAAAgAAAAIAAAAAUdERUYAAAGUA
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 47 6e 57 67 66 59 65 55 54 75 4a 61 74 46 2b 57 4c 61 37 30 78 56 32 5a 39 68 48 65 4e 35 30 45 79 33 71 4a 6d 46 62 61 68 30 4b 34 32 33 44 30 34 61 6e 30 71 2f 63 45 71 73 63 38 69 74 68 74 61 68 76 6a 53 72 52 6e 57 70 62 33 57 6d 4d 70 79 74 41 58 69 4d 72 7a 33 62 6a 57 47 38 38 39 6f 6c 57 51 65 55 64 62 6a 46 31 63 78 56 45 55 6f 4d 6f 36 75 42 5a 62 50 58 55 71 61 58 4f 64 72 45 72 42 61 6d 52 77 66 34 6a 65 47 73 2b 58 67 56 59 52 63 35 64 59 75 58 49 53 36 30 47 65 5a 6b 31 49 2b 39 57 2f 35 6a 4d 49 50 64 38 79 56 31 67 7a 65 35 43 57 2b 6f 75 5a 72 78 45 59 34 6c 74 64 41 38 54 54 34 77 69 53 6d 43 66 72 61 77 65 64 61 64 62 71 37 2f 50 7a 57 34 63 38 2f 45 77 30 65 72 5a 35 37 59 76 52 4c 46 50 32 30 48 55 42 33 35 55 43 31 47 31 52 47 31 52 Data Ascii: GnWgfYeUTuJatF+WLa70xV2Z9hHeN50Ey3qJmFbah0K423D04an0q/cEqsc8ithtahvjSrRnWpb3WmMpytAXiMrz3bjWG889olWQeUdbjF1cxVEUoMo6uBZbPXUqaXOdrErBamRwf4jeGs+XgVYRc5dYuXIS60GeZk1I+9W/5jMIPd8yV1gze5CW+ouZrxEY4ltdA8TT4wiSmCfrawedadbq7/PzW4c8/Ew0erZ57YvRLFP20HUB35UC1G1RG1R
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 56 70 4c 56 51 4e 59 57 73 70 72 49 69 70 4c 56 53 46 5a 4c 49 4e 47 69 67 5a 46 57 6f 79 43 72 68 6c 6b 31 6c 56 58 44 65 7a 46 7a 61 43 6d 37 6b 59 48 59 4c 6c 5a 5a 76 73 62 71 58 73 76 56 66 58 43 2f 50 61 63 48 62 4b 55 65 74 41 66 31 73 4e 32 6b 52 2f 42 4f 52 5a 38 4f 38 2b 30 65 4c 57 42 63 61 41 39 70 6b 55 33 52 45 7a 5a 54 75 58 61 44 6c 74 76 44 57 6f 48 76 4f 61 75 6b 63 2f 75 7a 6a 30 7a 71 48 30 62 6e 63 72 53 4b 44 75 5a 72 4a 50 32 4b 36 45 32 62 71 6e 4c 4c 30 30 61 37 57 35 76 73 52 6c 58 59 4e 46 58 61 34 36 71 79 61 31 56 74 31 36 76 57 5a 6d 6d 4c 76 61 41 6d 65 30 72 62 62 4c 6e 61 57 4b 63 64 66 34 63 39 6f 55 35 62 4a 4c 4d 37 6e 65 77 2b 46 37 52 6e 58 44 65 62 36 35 4a 74 6b 55 74 68 54 4c 65 58 58 45 39 37 7a 66 57 32 55 74 65 Data Ascii: VpLVQNYWsprIipLVSFZLINGigZFWoyCrhlk1lVXDezFzaCm7kYHYLlZZvsbqXsvVfXC/PacHbKUetAf1sN2kR/BORZ8O8+0eLWBcaA9pkU3REzZTuXaDltvDWoHvOaukc/uzj0zqH0bncrSKDuZrJP2K6E2bqnLL00a7W5vsRlXYNFXa46qya1Vt16vWZmmLvaAme0rbbLnaWKcdf4c9oU5bJLM7new+F7RnXDeb65JtkUthTLeXXE97zfW2Ute
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 50 62 6e 64 33 4a 42 77 46 59 2b 46 6f 4f 41 61 4f 68 65 50 49 6a 62 2f 6e 41 50 76 35 76 51 6f 41 7a 58 38 37 61 50 34 6e 31 6f 6b 75 37 76 6f 7a 76 34 73 4f 2f 62 4f 74 67 59 50 4b 35 55 6d 44 7a 78 72 79 62 63 35 2f 70 47 54 6c 6c 6d 39 6c 46 6b 57 57 57 35 6e 2b 49 59 38 74 74 7a 6d 32 52 47 4c 64 7a 56 5a 71 52 62 62 42 43 71 33 56 71 71 33 46 6d 6d 77 6e 73 2b 31 57 5a 55 30 36 31 42 72 73 64 57 76 47 57 6d 2b 74 57 4c 46 5a 68 64 55 6a 33 34 2f 70 44 64 6a 65 74 59 2f 49 57 32 38 66 37 73 47 71 48 52 4c 78 72 51 6f 79 74 73 63 73 46 66 49 66 56 6d 7a 31 56 58 7a 32 35 7a 6a 5a 62 58 46 4b 4a 76 47 31 69 34 65 65 4c 75 46 38 46 66 59 4f 5a 33 67 62 32 57 77 31 37 48 6b 48 33 57 35 6c 39 2f 56 57 4c 4f 47 4a 53 70 77 68 48 2b 31 64 43 56 38 48 58 78 Data Ascii: Pbnd3JBwFY+FoOAaOhePIjb/nAPv5vQoAzX87aP4n1oku7vozv4sO/bOtgYPK5UmDzxrybc5/pGTllm9lFkWWW5n+IY8ttzm2RGLdzVZqRbbBCq3Vqq3Fmmwns+1WZU061BrsdWvGWm+tWLFZhdUj34/pDdjetY/IW28f7sGqHRLxrQoytscsFfIfVmz1VXz25zjZbXFKJvG1i4eeLuF8FfYOZ3gb2Ww17HkH3W5l9/VWLOGJSpwhH+1dCV8HXx
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 48 61 7a 76 76 41 4f 44 64 50 37 7a 74 65 52 5a 2f 6f 64 66 67 56 4f 54 33 61 74 6d 73 48 7a 30 4a 79 70 44 6e 37 74 46 56 54 4c 52 50 44 61 56 77 48 68 6f 79 4f 4e 45 4a 79 67 64 45 35 78 32 7a 4d 6a 47 6a 66 56 7a 4d 71 4d 56 5a 4e 54 78 4f 73 6d 33 4b 37 54 75 64 79 65 75 5a 30 4a 76 70 2b 71 50 50 42 7a 54 76 67 4e 6d 79 6b 31 59 79 38 47 37 6e 33 57 6e 67 35 56 6b 42 74 47 62 77 55 4e 4f 4c 57 4a 30 70 6f 76 79 59 71 4c 56 55 35 42 61 32 52 4e 74 4a 48 68 4b 48 54 35 72 36 54 64 43 30 37 58 71 6b 45 6a 54 73 5a 6a 65 4c 4d 53 6d 6c 41 38 33 47 57 52 55 5a 56 64 34 2b 31 69 64 66 76 36 54 54 62 34 36 70 39 37 59 73 42 72 66 66 5a 55 58 64 66 76 35 70 70 54 6d 68 34 66 49 69 49 47 6c 51 54 71 61 73 71 78 6e 72 65 74 43 66 70 58 5a 44 58 32 62 64 42 67 Data Ascii: HazvvAODdP7zteRZ/odfgVOT3atmsHz0JypDn7tFVTLRPDaVwHhoyONEJygdE5x2zMjGjfVzMqMVZNTxOsm3K7TudyeuZ0Jvp+qPPBzTvgNmyk1Yy8G7n3Wng5VkBtGbwUNOLWJ0povyYqLVU5Ba2RNtJHhKHT5r6TdC07XqkEjTsZjeLMSmlA83GWRUZVd4+1idfv6TTb46p97YsBrffZUXdfv5ppTmh4fIiIGlQTqasqxnretCfpXZDX2bdBg
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 42 33 69 47 53 50 77 4e 30 55 4c 33 2f 61 73 48 6e 47 4f 50 77 78 45 5a 47 54 47 4f 31 65 70 71 78 6b 31 37 4d 65 38 4b 73 54 51 73 45 2b 76 41 57 4e 6a 6b 66 4f 41 76 6d 4e 45 44 65 67 49 66 64 2f 53 44 6e 4a 36 68 32 35 61 6f 57 57 36 47 45 73 65 75 7a 65 65 43 50 32 62 61 65 35 4d 74 46 4c 46 50 63 79 37 33 2f 58 5a 33 2f 53 4b 52 76 7a 33 67 46 2f 67 6a 61 4e 63 68 64 62 73 75 66 32 63 73 33 4a 53 7a 4e 2b 47 58 46 33 35 31 79 72 30 37 2f 42 73 53 6b 67 36 31 35 75 46 39 37 6a 76 57 32 6a 63 72 32 73 31 71 63 31 77 72 4f 70 4d 65 42 36 67 67 73 2b 52 44 58 41 38 30 4c 2b 38 46 68 52 78 79 69 6a 35 4e 38 35 65 72 4b 36 4f 79 69 41 4f 4b 56 6d 39 6d 54 55 6a 67 58 42 47 56 4e 48 7a 47 67 4d 35 7a 64 33 6c 6c 31 34 50 61 44 4c 65 57 53 6c 7a 75 30 55 47 Data Ascii: B3iGSPwN0UL3/asHnGOPwxEZGTGO1epqxk17Me8KsTQsE+vAWNjkfOAvmNEDegIfd/SDnJ6h25aoWW6GEseuzeeCP2bae5MtFLFPcy73/XZ3/SKRvz3gF/gjaNchdbsuf2cs3JSzN+GXF351yr07/BsSkg615uF97jvW2jcr2s1qc1wrOpMeB6ggs+RDXA80L+8FhRxyij5N85erK6OyiAOKVm9mTUjgXBGVNHzGgM5zd3ll14PaDLeWSlzu0UG
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 36 6e 67 4f 35 62 79 2b 63 69 4b 50 74 6f 75 4c 65 54 72 50 39 59 75 38 6e 72 66 79 53 72 6c 79 4d 4b 58 74 6c 71 6e 44 67 35 36 34 56 5a 50 48 64 63 68 6e 2b 62 4c 6a 43 62 76 70 41 31 2f 7a 66 58 36 71 53 2f 37 49 33 33 48 4c 49 59 53 31 31 57 48 51 2b 51 37 70 37 64 74 44 54 39 57 62 4a 35 53 4c 56 76 43 44 4b 6b 56 75 4e 4c 6e 68 55 2b 47 6a 34 57 58 4e 58 54 4c 72 71 44 53 54 6f 63 2b 4f 66 6a 79 79 50 72 4b 64 53 6d 4f 31 32 6a 57 36 59 4f 59 52 39 4c 65 51 5a 58 41 72 41 33 5a 66 34 47 51 2f 39 4a 58 52 32 39 41 73 52 4e 4d 52 7a 55 44 34 46 4a 58 42 30 51 51 62 68 4b 61 6b 64 49 2f 76 47 57 6e 68 36 65 42 62 34 5a 58 67 70 35 44 56 6b 4b 57 52 4f 5a 46 78 31 52 6b 7a 71 6b 7a 70 61 4c 59 70 4e 39 36 4a 78 39 4a 6e 49 57 4e 67 4e 34 4a 79 4d 77 50 Data Ascii: 6ngO5by+ciKPtouLeTrP9Yu8nrfySrlyMKXtlqnDg564VZPHdchn+bLjCbvpA1/zfX6qS/7I33HLIYS11WHQ+Q7p7dtDT9WbJ5SLVvCDKkVuNLnhU+Gj4WXNXTLrqDSToc+OfjyyPrKdSmO12jW6YOYR9LeQZXArA3Zf4GQ/9JXR29AsRNMRzUD4FJXB0QQbhKakdI/vGWnh6eBb4ZXgp5DVkKWROZFx1RkzqkzpaLYpN96Jx9JnIWNgN4JyMwP
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 4a 76 54 32 78 74 79 66 32 39 73 51 45 54 6e 4c 50 68 48 73 4f 64 4d 2b 79 65 38 62 55 6a 44 4b 44 6a 4c 49 2f 46 38 72 75 47 62 74 6e 32 54 77 33 70 65 78 75 56 54 50 62 6a 72 4c 37 6c 4d 33 6e 49 47 49 4f 4e 6f 65 79 4f 38 54 75 55 48 61 48 59 65 34 67 64 35 6a 6f 44 68 48 2f 64 79 69 35 51 33 43 48 77 65 34 77 69 5a 75 34 6c 79 7a 33 47 55 33 63 7a 79 78 47 4d 4e 73 59 78 78 77 57 32 4f 75 46 52 68 4f 4c 6a 53 61 57 47 48 6d 57 47 6e 57 57 73 64 35 65 4e 78 73 56 57 6f 77 36 72 55 61 46 4e 6e 70 70 6f 73 2b 59 51 6a 39 76 55 4f 64 4e 33 6d 63 45 48 78 68 31 50 6a 53 61 2b 4d 67 59 77 63 64 38 52 70 33 50 2b 59 61 68 66 47 74 73 7a 6e 66 47 4f 4d 2f 4f 4b 48 35 52 78 41 51 6c 46 44 4e 57 61 57 55 6f 4b 4b 73 69 45 31 52 53 6c 55 47 71 71 59 6e 78 71 6d Data Ascii: JvT2xtyf29sQETnLPhHsOdM+ye8bUjDKDjLI/F8ruGbtn2Tw3pexuVTPbjrL7lM3nIGIONoeyO8TuUHaHYe4gd5joDhH/dyi5Q3CHwe4wiZu4lyz3GU3czyxGMNsYxxwW2OuFRhOLjSaWGHmWGnWWsd5eNxsVWow6rUaFNnppos+YQj9vUOdN3mcEHxh1PjSa+MgYwcd8Rp3P+YahfGtsznfGOM/OKH5RxAQlFDNWaWUoKKsiE1RSlUGqqYnxqm
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 77 47 76 34 65 49 63 39 52 4e 62 70 57 6e 51 5a 63 52 63 7a 59 38 36 47 6d 76 65 4e 66 6e 66 76 54 33 46 5a 6b 6d 56 4c 78 6a 30 74 30 6d 58 37 6c 47 33 55 62 4e 32 2f 53 51 5a 37 7a 71 50 56 2f 34 79 54 2b 42 44 5a 50 67 75 41 79 33 4b 31 43 68 53 59 38 78 43 37 59 38 37 46 6d 76 65 64 2b 58 66 76 5a 76 59 4d 4d 6c 4f 69 48 54 48 51 70 56 61 74 5a 72 33 4b 4a 74 6a 33 6a 4f 36 7a 37 77 6c 56 2f 38 46 39 67 49 53 61 36 52 35 55 35 46 71 72 54 6f 4d 32 48 4a 6a 6b 63 39 37 77 30 66 2b 74 71 76 2f 67 39 73 70 47 54 58 79 6e 61 58 59 74 56 61 39 5a 75 30 62 4e 64 6a 58 76 43 6d 6a 33 7a 6a 4e 79 63 44 47 79 58 46 64 58 4c 63 72 55 53 4e 4e 67 4f 6d 72 4e 6a 7a 75 42 65 39 35 57 50 66 2b 74 32 70 77 45 5a 4c 64 62 31 63 39 79 68 56 71 39 32 67 61 61 76 32 50 Data Ascii: wGv4eIc9RNbpWnQZcRczY86GmveNfnfvT3FZkmVLxj0t0mX7lG3UbN2/SQZ7zqPV/4yT+BDZPguAy3K1ChSY8xC7Y87Fmved+XfvZvYMMlOiHTHQpVatZr3KJtj3jO6z7wlV/8F9gISa6R5U5FqrToM2HJjkc97w0f+tqv/g9spGTXynaXYtVa9Zu0bNdjXvCmj3zjNycDGyXFdXLcrUSNNgOmrNjzuBe95WPf+t2pwEZLdb1c9yhVq92gaav2P
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 64 48 52 34 4c 34 36 48 74 77 50 6b 65 6f 59 6f 55 56 39 67 6b 78 50 2f 48 56 79 68 2b 62 7a 30 5a 55 6b 72 76 33 66 38 51 34 67 6f 48 49 6f 44 7a 6e 2b 39 79 58 6c 42 73 64 66 79 42 53 76 66 2f 58 78 61 35 35 50 55 67 4a 4c 66 6b 45 6c 58 61 31 72 64 4c 4e 75 30 61 32 36 54 62 66 72 44 74 32 6e 2b 2f 57 41 48 74 52 7a 65 6c 34 76 36 45 56 72 59 6f 4e 74 69 41 32 31 59 54 62 63 52 74 68 49 47 32 57 6a 62 59 79 4e 74 58 45 32 33 69 61 67 35 4a 6e 77 6c 51 76 2f 71 36 68 4d 62 52 72 53 6e 4c 5a 71 53 38 4a 4e 33 4b 31 32 77 59 2b 72 66 66 43 7a 61 6f 4e 78 6b 7a 70 68 33 75 75 41 65 61 65 6a 35 32 64 52 73 68 75 66 76 65 65 79 4b 71 6c 53 4b 71 30 79 4b 71 74 79 4b 71 38 4b 71 71 68 4b 71 71 77 71 71 71 70 71 71 71 34 61 71 71 6c 61 71 71 30 36 6d 71 6c 78 Data Ascii: dHR4L46HtwPkeoYoUV9gkxP/HVyh+bz0ZUkrv3f8Q4goHIoDzn+9yXlBsdfyBSvf/Xxa55PUgJLfkElXa1rdLNu0a26TbfrDt2n+/WAHtRzel4v6EVrYoNtiA21YTbcRthIG2WjbYyNtXE23iag5JnwlQv/q6hMbRrSnLZqS8JN3K12wY+rffCzaoNxkzph3uuAeaej52dRshufveeyKqlSKq0yKqtyKq8KqqhKqqwqqqpqqq4aqqlaqq06mqlx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49856	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:15 UTC	558	OUT	GET /ice/vendorVenmo44.443f4f43a85bbfae67ed.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:15 UTC	852	IN	HTTP/1.1 200 OK Connection: close Content-Length: 47731 Cache-Control: s-maxage=31536000, public,max-age=86400 Content-Type: application/javascript Etag: "66064786-ba73" Last-Modified: Fri, 29 Mar 2024 04:45:58 GMT Paypal-Debug-Id: e8e12deb452ba Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000e8e12deb452ba-d53b617db70e1e9b-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:15 GMT X-Served-By: cache-dfw-kdal2120045-DFW, cache-gnv1820024-GNV X-Cache: HIT, MISS X-Cache-Hits: 2, 0 X-Timer: S1714134196.905197,VS0,VE26 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 34 5d 2c 7b 38 32 35 39 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 76 7d 29 3b 76 61 72 20 6f 3d 6e 28 38 37 34 36 32 29 2c 72 3d 6e 28 34 35 39 38 37 29 2c 61 3d 6e 28 33 35 37 37 36 29 2c 69 3d 6e 28 34 35 36 39 37 29 2c 6c 3d 6e 2e 6e 28 69 29 2c 73 3d 6e 28 39 37 31 34 38 29 2c 64 3d 6e 28 38 39 32 30 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 68 69 6c 64 72 65 Data Ascii: "use strict";(self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[44],{82598:(e,t,n)=>{n.d(t,{Z:()=>v});var o=n(87462),r=n(45987),a=n(35776),i=n(45697),l=n.n(i),s=n(97148),d=n(8920);function c(e){var t=e.childre
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 69 76 61 74 65 48 69 64 64 65 6e 43 73 73 22 7d 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 68 69 6c 64 72 65 6e 2c 6e 3d 65 2e 63 6c 61 73 73 65 73 2c 6f 3d 65 2e 63 6c 61 73 73 4e 61 6d 65 2c 69 3d 65 2e 6f 6e 6c 79 2c 6c 3d 28 28 30 2c 72 2e 5a 29 28 65 2c 5b 22 63 68 69 6c 64 72 65 6e 22 2c 22 63 6c 61 73 73 65 73 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 2c 22 6f 6e 6c 79 22 5d 29 2c 28 30 2c 64 2e 5a 29 28 29 29 2c 73 3d 5b 5d 3b 6f 26 26 73 2e 70 75 73 68 28 6f 29 3b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 6c 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 6b 65 79 73 2e 6c 65 6e 67 74 68 3b 63 2b 3d 31 29 7b 76 61 72 20 75 3d 6c 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 6b 65 79 73 5b 63 5d 2c 70 3d 65 5b 22 22 2e 63 6f 6e 63 61 74 Data Ascii: ivateHiddenCss"})((function(e){var t=e.children,n=e.classes,o=e.className,i=e.only,l=((0,r.Z)(e,["children","classes","className","only"]),(0,d.Z)()),s=[];o&&s.push(o);for(var c=0;c<l.breakpoints.keys.length;c+=1){var u=l.breakpoints.keys[c],p=e["".concat
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 72 20 6e 3d 65 2e 63 6c 61 73 73 65 73 2c 6c 3d 65 2e 63 6c 61 73 73 4e 61 6d 65 2c 64 3d 65 2e 63 6f 6c 6f 72 2c 63 3d 76 6f 69 64 20 30 3d 3d 3d 64 3f 22 69 6e 68 65 72 69 74 22 3a 64 2c 75 3d 65 2e 63 6f 6d 70 6f 6e 65 6e 74 2c 70 3d 76 6f 69 64 20 30 3d 3d 3d 75 3f 22 73 70 61 6e 22 3a 75 2c 6d 3d 65 2e 66 6f 6e 74 53 69 7a 65 2c 66 3d 76 6f 69 64 20 30 3d 3d 3d 6d 3f 22 6d 65 64 69 75 6d 22 3a 6d 2c 76 3d 28 30 2c 72 2e 5a 29 28 65 2c 5b 22 63 6c 61 73 73 65 73 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 2c 22 63 6f 6c 6f 72 22 2c 22 63 6f 6d 70 6f 6e 65 6e 74 22 2c 22 66 6f 6e 74 53 69 7a 65 22 5d 29 3b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 70 2c 28 30 2c 6f 2e 5a 29 28 7b 63 6c 61 73 73 4e 61 6d 65 3a 28 30 2c 69 2e 64 65 Data Ascii: r n=e.classes,l=e.className,d=e.color,c=void 0===d?"inherit":d,u=e.component,p=void 0===u?"span":u,m=e.fontSize,f=void 0===m?"medium":m,v=(0,r.Z)(e,["classes","className","color","component","fontSize"]);return a.createElement(p,(0,o.Z)({className:(0,i.de
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 2c 22 63 6f 6c 6f 72 22 2c 22 64 69 73 61 62 6c 65 64 22 2c 22 64 69 73 61 62 6c 65 46 6f 63 75 73 52 69 70 70 6c 65 22 2c 22 73 69 7a 65 22 5d 29 3b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 64 2e 5a 2c 28 30 2c 6f 2e 5a 29 28 7b 63 6c 61 73 73 4e 61 6d 65 3a 28 30 2c 69 2e 64 65 66 61 75 6c 74 29 28 75 2e 72 6f 6f 74 2c 70 2c 22 64 65 66 61 75 6c 74 22 21 3d 3d 66 26 26 75 5b 22 63 6f 6c 6f 72 22 2e 63 6f 6e 63 61 74 28 28 30 2c 63 2e 5a 29 28 66 29 29 5d 2c 67 26 26 75 2e 64 69 73 61 62 6c 65 64 2c 22 73 6d 61 6c 6c 22 3d 3d 3d 5a 26 26 75 5b 22 73 69 7a 65 22 2e 63 6f 6e 63 61 74 28 28 30 2c 63 2e 5a 29 28 5a 29 29 5d 2c 7b 73 74 61 72 74 3a 75 2e 65 64 67 65 53 74 61 72 74 2c 65 6e 64 Data Ascii: ","className","color","disabled","disableFocusRipple","size"]);return a.createElement(d.Z,(0,o.Z)({className:(0,i.default)(u.root,p,"default"!==f&&u["color".concat((0,c.Z)(f))],g&&u.disabled,"small"===Z&&u["size".concat((0,c.Z)(Z))],{start:u.edgeStart,end
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 3a 7b 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 74 72 61 6e 73 70 61 72 65 6e 74 22 7d 7d 7d 2c 64 69 73 61 62 6c 65 64 3a 7b 7d 2c 73 69 7a 65 53 6d 61 6c 6c 3a 7b 70 61 64 64 69 6e 67 3a 33 2c 66 6f 6e 74 53 69 7a 65 3a 65 2e 74 79 70 6f 67 72 61 70 68 79 2e 70 78 54 6f 52 65 6d 28 31 38 29 7d 2c 6c 61 62 65 6c 3a 7b 77 69 64 74 68 3a 22 31 30 30 25 22 2c 64 69 73 70 6c 61 79 3a 22 66 6c 65 78 22 2c 61 6c 69 67 6e 49 74 65 6d 73 3a 22 69 6e 68 65 72 69 74 22 2c 6a 75 73 74 69 66 79 43 6f 6e 74 65 6e 74 3a 22 69 6e 68 65 72 69 74 22 7d 7d 7d 29 2c 7b 6e 61 6d 65 3a 22 4d 75 69 49 63 6f 6e 42 75 74 74 6f 6e 22 7d 29 28 75 29 7d 2c 31 38 39 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 Data Ascii: :{backgroundColor:"transparent"}}},disabled:{},sizeSmall:{padding:3,fontSize:e.typography.pxToRem(18)},label:{width:"100%",display:"flex",alignItems:"inherit",justifyContent:"inherit"}}}),{name:"MuiIconButton"})(u)},1890:(e,t,n)=>{n.r(t),n.d(t,{default:()
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 6f 2c 72 2c 69 3b 65 26 26 65 2e 63 6f 6d 70 6c 65 74 65 26 26 28 65 2e 77 69 64 74 68 2f 65 2e 68 65 69 67 68 74 3e 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 6f 66 66 73 65 74 57 69 64 74 68 2f 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 3f 28 28 6e 3d 65 2e 63 6c 61 73 73 4c 69 73 74 29 2e 72 65 6d 6f 76 65 2e 61 70 70 6c 79 28 6e 2c 28 30 2c 61 2e 5a 29 28 74 2e 69 6d 67 46 75 6c 6c 57 69 64 74 68 2e 73 70 6c 69 74 28 22 20 22 29 29 29 2c 28 6f 3d 65 2e 63 6c 61 73 73 4c 69 73 74 29 2e 61 64 64 2e 61 70 70 6c 79 28 6f 2c 28 30 2c 61 2e 5a 29 28 74 2e 69 6d 67 46 75 6c 6c 48 65 69 67 68 74 2e 73 70 6c 69 74 28 22 20 22 29 29 29 29 3a 28 28 72 3d 65 2e Data Ascii: unction(e,t){var n,o,r,i;e&&e.complete&&(e.width/e.height>e.parentElement.offsetWidth/e.parentElement.offsetHeight?((n=e.classList).remove.apply(n,(0,a.Z)(t.imgFullWidth.split(" "))),(o=e.classList).add.apply(o,(0,a.Z)(t.imgFullHeight.split(" ")))):((r=e.
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 65 66 74 3a 22 35 30 25 22 7d 2c 69 6d 67 46 75 6c 6c 57 69 64 74 68 3a 7b 77 69 64 74 68 3a 22 31 30 30 25 22 2c 70 6f 73 69 74 69 6f 6e 3a 22 72 65 6c 61 74 69 76 65 22 2c 74 72 61 6e 73 66 6f 72 6d 3a 22 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 22 2c 74 6f 70 3a 22 35 30 25 22 7d 7d 2c 7b 6e 61 6d 65 3a 22 4d 75 69 49 6d 61 67 65 4c 69 73 74 49 74 65 6d 22 7d 29 28 70 29 7d 2c 39 30 37 36 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 64 7d 29 3b 76 61 72 20 6f 3d 6e 28 38 37 34 36 32 29 2c 72 3d 6e 28 34 35 39 38 37 29 2c 61 3d 6e 28 33 35 37 37 36 29 2c 69 3d 6e 28 38 36 30 31 30 29 2c 6c 3d 6e 28 35 32 35 34 33 29 2c 73 3d 61 2e 66 6f 72 77 61 72 64 52 65 66 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 Data Ascii: eft:"50%"},imgFullWidth:{width:"100%",position:"relative",transform:"translateY(-50%)",top:"50%"}},{name:"MuiImageListItem"})(p)},90760:(e,t,n)=>{n.d(t,{Z:()=>d});var o=n(87462),r=n(45987),a=n(35776),i=n(86010),l=n(52543),s=a.forwardRef((function(e,t){var
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 66 6c 6f 77 3a 22 68 69 64 64 65 6e 22 7d 2c 74 69 74 6c 65 57 72 61 70 41 63 74 69 6f 6e 50 6f 73 4c 65 66 74 3a 7b 6d 61 72 67 69 6e 4c 65 66 74 3a 30 7d 2c 74 69 74 6c 65 57 72 61 70 41 63 74 69 6f 6e 50 6f 73 52 69 67 68 74 3a 7b 6d 61 72 67 69 6e 52 69 67 68 74 3a 30 7d 2c 74 69 74 6c 65 3a 7b 66 6f 6e 74 53 69 7a 65 3a 65 2e 74 79 70 6f 67 72 61 70 68 79 2e 70 78 54 6f 52 65 6d 28 31 36 29 2c 6c 69 6e 65 48 65 69 67 68 74 3a 22 32 34 70 78 22 2c 74 65 78 74 4f 76 65 72 66 6c 6f 77 3a 22 65 6c 6c 69 70 73 69 73 22 2c 6f 76 65 72 66 6c 6f 77 3a 22 68 69 64 64 65 6e 22 2c 77 68 69 74 65 53 70 61 63 65 3a 22 6e 6f 77 72 61 70 22 7d 2c 73 75 62 74 69 74 6c 65 3a 7b 66 6f 6e 74 53 69 7a 65 3a 65 2e 74 79 70 6f 67 72 61 70 68 79 2e 70 78 54 6f 52 65 6d 28 Data Ascii: flow:"hidden"},titleWrapActionPosLeft:{marginLeft:0},titleWrapActionPosRight:{marginRight:0},title:{fontSize:e.typography.pxToRem(16),lineHeight:"24px",textOverflow:"ellipsis",overflow:"hidden",whiteSpace:"nowrap"},subtitle:{fontSize:e.typography.pxToRem(
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 6e 29 2c 6c 65 66 74 3a 30 2c 62 6f 74 74 6f 6d 3a 30 2c 63 6f 6e 74 65 6e 74 3a 27 22 22 27 2c 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 2c 72 69 67 68 74 3a 30 2c 74 72 61 6e 73 66 6f 72 6d 3a 22 73 63 61 6c 65 58 28 30 29 22 2c 74 72 61 6e 73 69 74 69 6f 6e 3a 65 2e 74 72 61 6e 73 69 74 69 6f 6e 73 2e 63 72 65 61 74 65 28 22 74 72 61 6e 73 66 6f 72 6d 22 2c 7b 64 75 72 61 74 69 6f 6e 3a 65 2e 74 72 61 6e 73 69 74 69 6f 6e 73 2e 64 75 72 61 74 69 6f 6e 2e 73 68 6f 72 74 65 72 2c 65 61 73 69 6e 67 3a 65 2e 74 72 61 6e 73 69 74 69 6f 6e 73 2e 65 61 73 69 6e 67 2e 65 61 73 65 4f 75 74 7d 29 2c 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3a 22 6e 6f 6e 65 22 7d 2c 22 26 24 66 6f 63 75 73 65 64 3a 61 66 74 65 72 22 3a 7b 74 72 61 6e 73 66 6f 72 6d Data Ascii: n),left:0,bottom:0,content:'""',position:"absolute",right:0,transform:"scaleX(0)",transition:e.transitions.create("transform",{duration:e.transitions.duration.shorter,easing:e.transitions.easing.easeOut}),pointerEvents:"none"},"&$focused:after":{transform
2024-04-26 12:23:15 UTC	1379	IN	Data Raw: 29 28 29 7c 7c 7b 7d 2c 78 3d 62 3b 72 65 74 75 72 6e 20 62 26 26 5a 2e 76 61 72 69 61 6e 74 2c 5a 26 26 21 78 26 26 28 78 3d 5a 2e 76 61 72 69 61 6e 74 29 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 64 2e 5a 2e 50 72 6f 76 69 64 65 72 2c 7b 76 61 6c 75 65 3a 6e 75 6c 6c 7d 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 70 2c 28 30 2c 6f 2e 5a 29 28 7b 63 6c 61 73 73 4e 61 6d 65 3a 28 30 2c 69 2e 64 65 66 61 75 6c 74 29 28 73 2e 72 6f 6f 74 2c 63 2c 22 65 6e 64 22 3d 3d 3d 68 3f 73 2e 70 6f 73 69 74 69 6f 6e 45 6e 64 3a 73 2e 70 6f 73 69 74 69 6f 6e 53 74 61 72 74 2c 66 26 26 73 2e 64 69 73 61 62 6c 65 50 6f 69 6e 74 65 72 45 76 65 6e 74 73 2c 5a 2e 68 69 64 64 65 6e 4c 61 62 65 6c 26 26 73 2e 68 69 64 64 65 6e 4c 61 62 65 6c 2c 22 66 69 6c 6c Data Ascii: )()\|\|{},x=b;return b&&Z.variant,Z&&!x&&(x=Z.variant),a.createElement(d.Z.Provider,{value:null},a.createElement(p,(0,o.Z)({className:(0,i.default)(s.root,c,"end"===h?s.positionEnd:s.positionStart,f&&s.disablePointerEvents,Z.hiddenLabel&&s.hiddenLabel,"fill

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49857	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:15 UTC	548	OUT	GET /ice/app.58a7141f7004e7633af8.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:16 UTC	853	IN	HTTP/1.1 200 OK Connection: close Content-Length: 23204 Cache-Control: s-maxage=31536000, public,max-age=86400 Content-Type: application/javascript Etag: "66064785-5aa4" Last-Modified: Fri, 29 Mar 2024 04:45:57 GMT Paypal-Debug-Id: 4c7a4e407aba6 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000004c7a4e407aba6-c3d8c7071cabd0ea-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:15 GMT X-Served-By: cache-dfw-kdfw8210141-DFW, cache-gnv1820029-GNV X-Cache: HIT, MISS X-Cache-Hits: 10, 0 X-Timer: S1714134196.923791,VS0,VE23 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:16 UTC	1379	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 35 31 5d 2c 7b 34 34 35 38 3a 28 65 2c 6e 2c 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 28 34 39 34 32 29 2c 6f 3d 74 28 33 35 37 37 36 29 2c 63 3d 74 28 36 34 39 37 39 29 2c 69 3d 74 28 35 33 37 36 38 29 2c 61 3d 74 28 35 33 32 32 31 29 2c 6c 3d 74 28 37 33 36 38 38 29 2c 75 3d 74 28 39 36 36 39 29 2c 73 3d 74 2e 6e 28 75 29 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 63 6f 6e 74 65 6e 74 55 72 6c 42 61 73 65 Data Ascii: (self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[151],{4458:(e,n,t)=>{"use strict";var r=t(4942),o=t(35776),c=t(64979),i=t(53768),a=t(53221),l=t(73688),u=t(9669),s=t.n(u),d=function(e){var n=e.contentUrlBase
2024-04-26 12:23:16 UTC	1379	IN	Data Raw: 72 3d 76 6f 69 64 20 30 3d 3d 3d 74 3f 22 2f 73 69 67 6e 69 6e 22 3a 74 2c 6f 3d 65 2e 72 65 74 75 72 6e 55 72 69 2c 63 3d 65 2e 73 74 61 74 65 2c 69 3d 65 2e 74 65 6e 61 6e 74 2c 61 3d 22 2f 61 70 69 22 3b 22 2f 61 70 70 73 22 21 3d 3d 72 26 26 22 2f 69 64 61 70 70 73 22 21 3d 3d 72 7c 7c 28 61 3d 22 2f 67 72 61 70 68 71 6c 22 29 3b 76 61 72 20 6c 3d 5b 5d 3b 72 65 74 75 72 6e 20 69 26 26 6c 2e 70 75 73 68 28 22 74 65 6e 61 6e 74 3d 22 2e 63 6f 6e 63 61 74 28 69 29 29 2c 6e 26 26 6c 2e 70 75 73 68 28 22 69 6e 74 65 6e 74 3d 22 2e 63 6f 6e 63 61 74 28 6e 29 29 2c 6f 26 26 6c 2e 70 75 73 68 28 22 72 65 74 75 72 6e 55 72 69 3d 22 2e 63 6f 6e 63 61 74 28 6f 29 29 2c 63 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 63 26 26 6c 2e 70 75 73 68 28 22 73 74 61 Data Ascii: r=void 0===t?"/signin":t,o=e.returnUri,c=e.state,i=e.tenant,a="/api";"/apps"!==r&&"/idapps"!==r\|\|(a="/graphql");var l=[];return i&&l.push("tenant=".concat(i)),n&&l.push("intent=".concat(n)),o&&l.push("returnUri=".concat(o)),c&&"undefined"!==c&&l.push("sta
2024-04-26 12:23:16 UTC	1379	IN	Data Raw: 74 2e 65 28 34 29 2c 74 2e 65 28 32 37 29 2c 74 2e 65 28 32 34 29 2c 74 2e 65 28 31 32 29 2c 74 2e 65 28 32 31 29 2c 74 2e 65 28 31 35 29 2c 74 2e 65 28 31 34 29 2c 74 2e 65 28 32 38 29 2c 74 2e 65 28 31 39 29 2c 74 2e 65 28 32 33 29 2c 74 2e 65 28 31 38 29 2c 74 2e 65 28 31 31 29 2c 74 2e 65 28 32 32 29 2c 74 2e 65 28 32 30 29 2c 74 2e 65 28 32 36 29 2c 74 2e 65 28 31 33 29 2c 74 2e 65 28 31 36 29 2c 74 2e 65 28 31 30 29 2c 74 2e 65 28 32 35 29 2c 74 2e 65 28 31 37 29 2c 74 2e 65 28 34 39 29 2c 74 2e 65 28 36 37 29 5d 29 2e 74 68 65 6e 28 74 2e 62 69 6e 64 28 74 2c 34 39 35 36 32 29 29 7d 29 29 2c 54 3d 6f 2e 64 65 66 61 75 6c 74 2e 6c 61 7a 79 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 65 28 38 31 29 2e 74 68 65 6e 28 74 2e 62 69 Data Ascii: t.e(4),t.e(27),t.e(24),t.e(12),t.e(21),t.e(15),t.e(14),t.e(28),t.e(19),t.e(23),t.e(18),t.e(11),t.e(22),t.e(20),t.e(26),t.e(13),t.e(16),t.e(10),t.e(25),t.e(17),t.e(49),t.e(67)]).then(t.bind(t,49562))})),T=o.default.lazy((function(){return t.e(81).then(t.bi
2024-04-26 12:23:16 UTC	1379	IN	Data Raw: 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5b 74 2e 65 28 36 29 2c 74 2e 65 28 35 29 2c 74 2e 65 28 33 29 2c 74 2e 65 28 38 29 2c 74 2e 65 28 37 29 2c 74 2e 65 28 39 29 2c 74 2e 65 28 30 29 2c 74 2e 65 28 31 29 2c 74 2e 65 28 32 29 2c 74 2e 65 28 34 29 2c 74 2e 65 28 32 37 29 2c 74 2e 65 28 32 34 29 2c 74 2e 65 28 31 32 29 2c 74 2e 65 28 32 31 29 2c 74 2e 65 28 31 35 29 2c 74 2e 65 28 31 34 29 2c 74 2e 65 28 32 38 29 2c 74 2e 65 28 31 39 29 2c 74 2e 65 28 32 33 29 2c 74 2e 65 28 31 38 29 2c 74 2e 65 28 31 31 29 2c 74 2e 65 28 32 32 29 2c 74 2e 65 28 32 30 29 2c 74 2e 65 28 32 36 29 2c 74 2e 65 28 31 33 29 2c 74 2e 65 28 31 36 29 2c 74 2e 65 28 31 30 29 2c 74 2e 65 28 32 35 29 2c 74 2e 65 28 31 37 29 2c 74 2e 65 28 39 31 29 5d 29 2e 74 68 65 6e 28 74 2e 62 69 6e Data Ascii: Promise.all([t.e(6),t.e(5),t.e(3),t.e(8),t.e(7),t.e(9),t.e(0),t.e(1),t.e(2),t.e(4),t.e(27),t.e(24),t.e(12),t.e(21),t.e(15),t.e(14),t.e(28),t.e(19),t.e(23),t.e(18),t.e(11),t.e(22),t.e(20),t.e(26),t.e(13),t.e(16),t.e(10),t.e(25),t.e(17),t.e(91)]).then(t.bin
2024-04-26 12:23:16 UTC	1379	IN	Data Raw: 29 2c 74 2e 65 28 31 38 29 2c 74 2e 65 28 31 31 29 2c 74 2e 65 28 32 32 29 2c 74 2e 65 28 32 30 29 2c 74 2e 65 28 32 36 29 2c 74 2e 65 28 31 33 29 2c 74 2e 65 28 31 36 29 2c 74 2e 65 28 31 30 29 2c 74 2e 65 28 32 35 29 2c 74 2e 65 28 31 37 29 2c 74 2e 65 28 31 31 35 29 5d 29 2e 74 68 65 6e 28 74 2e 62 69 6e 64 28 74 2c 36 35 36 31 38 29 29 7d 29 29 2c 7a 3d 6f 2e 64 65 66 61 75 6c 74 2e 6c 61 7a 79 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5b 74 2e 65 28 36 29 2c 74 2e 65 28 35 29 2c 74 2e 65 28 33 29 2c 74 2e 65 28 38 29 2c 74 2e 65 28 37 29 2c 74 2e 65 28 39 29 2c 74 2e 65 28 30 29 2c 74 2e 65 28 31 29 2c 74 2e 65 28 32 29 2c 74 2e 65 28 34 29 2c 74 2e 65 28 32 37 29 2c 74 2e 65 28 32 34 29 2c 74 2e Data Ascii: ),t.e(18),t.e(11),t.e(22),t.e(20),t.e(26),t.e(13),t.e(16),t.e(10),t.e(25),t.e(17),t.e(115)]).then(t.bind(t,65618))})),z=o.default.lazy((function(){return Promise.all([t.e(6),t.e(5),t.e(3),t.e(8),t.e(7),t.e(9),t.e(0),t.e(1),t.e(2),t.e(4),t.e(27),t.e(24),t.
2024-04-26 12:23:16 UTC	1379	IN	Data Raw: 6e 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5b 74 2e 65 28 36 29 2c 74 2e 65 28 35 29 2c 74 2e 65 28 33 29 2c 74 2e 65 28 38 29 2c 74 2e 65 28 37 29 2c 74 2e 65 28 39 29 2c 74 2e 65 28 30 29 2c 74 2e 65 28 31 29 2c 74 2e 65 28 32 29 2c 74 2e 65 28 34 29 2c 74 2e 65 28 32 37 29 2c 74 2e 65 28 32 34 29 2c 74 2e 65 28 31 32 29 2c 74 2e 65 28 32 31 29 2c 74 2e 65 28 31 35 29 2c 74 2e 65 28 31 34 29 2c 74 2e 65 28 32 38 29 2c 74 2e 65 28 31 39 29 2c 74 2e 65 28 32 33 29 2c 74 2e 65 28 31 38 29 2c 74 2e 65 28 31 31 29 2c 74 2e 65 28 32 32 29 2c 74 2e 65 28 32 30 29 2c 74 2e 65 28 32 36 29 2c 74 2e 65 28 31 33 29 2c 74 2e 65 28 31 36 29 2c 74 2e 65 28 31 30 29 2c 74 2e 65 28 32 35 29 2c 74 2e 65 28 31 37 29 2c 74 2e 65 28 31 34 33 29 5d 29 2e 74 68 65 6e 28 74 2e Data Ascii: n Promise.all([t.e(6),t.e(5),t.e(3),t.e(8),t.e(7),t.e(9),t.e(0),t.e(1),t.e(2),t.e(4),t.e(27),t.e(24),t.e(12),t.e(21),t.e(15),t.e(14),t.e(28),t.e(19),t.e(23),t.e(18),t.e(11),t.e(22),t.e(20),t.e(26),t.e(13),t.e(16),t.e(10),t.e(25),t.e(17),t.e(143)]).then(t.
2024-04-26 12:23:16 UTC	1379	IN	Data Raw: 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 77 2e 55 54 2c 6e 75 6c 6c 2c 6f 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 43 2e 72 73 2c 6e 75 6c 6c 2c 6f 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 43 2e 41 57 2c 7b 70 61 74 68 3a 22 2f 61 75 74 68 22 2c 63 6f 6d 70 6f 6e 65 6e 74 3a 49 7d 29 2c 6f 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 43 2e 41 57 2c 7b 70 61 74 68 3a 22 2f 61 75 74 68 66 6c 6f 77 22 2c 63 6f 6d 70 6f 6e 65 6e 74 3a 53 7d 29 2c 6f 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 43 2e 41 57 2c 7b 70 61 74 68 3a 22 2f 63 6f 6e 6e 65 63 74 22 2c 63 6f 6d 70 6f 6e 65 6e 74 3a 54 7d 29 2c 6f 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 Data Ascii: t.createElement(w.UT,null,o.default.createElement(C.rs,null,o.default.createElement(C.AW,{path:"/auth",component:I}),o.default.createElement(C.AW,{path:"/authflow",component:S}),o.default.createElement(C.AW,{path:"/connect",component:T}),o.default.createE
2024-04-26 12:23:16 UTC	1379	IN	Data Raw: 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 6e 26 26 28 72 3d 72 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 6e 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 29 2c 74 2e 70 75 73 68 2e 61 70 70 6c 79 28 74 2c 72 29 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 56 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 31 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 74 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 Data Ascii: );if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);n&&(r=r.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,r)}return t}function V(e){for(var n=1;n<arguments.length;n++){var t=null!=argume
2024-04-26 12:23:16 UTC	1379	IN	Data Raw: 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 5b 5d 2c 6e 3d 65 5b 30 5d 2e 64 61 74 61 7c 7c 65 5b 31 5d 2e 64 61 74 61 3b 72 65 74 75 72 6e 28 30 2c 63 2e 53 31 29 28 7b 63 6f 6e 74 65 6e 74 3a 6e 7d 29 2c 58 28 6e 75 6c 6c 2c 6e 29 7d 29 29 2e 63 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 58 28 6e 75 6c 6c 29 7d 29 29 3a 58 28 6e 75 6c 6c 29 7d 2c 35 33 32 32 31 3a 28 65 2c 6e 2c 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 64 28 6e 2c 7b 75 3a 28 29 3d 3e 69 2c 6a 3a 28 29 3d 3e 61 7d 29 3b 76 61 72 20 72 2c 6f 3d 74 28 32 33 33 30 37 29 2c 63 3d 74 28 39 30 36 37 35 29 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ents.length>0&&void 0!==arguments[0]?arguments[0]:[],n=e[0].data\|\|e[1].data;return(0,c.S1)({content:n}),X(null,n)})).catch((function(){return X(null)})):X(null)},53221:(e,n,t)=>{"use strict";t.d(n,{u:()=>i,j:()=>a});var r,o=t(23307),c=t(90675),i=function(
2024-04-26 12:23:16 UTC	1379	IN	Data Raw: 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 6e 26 26 28 72 3d 72 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 6e 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 29 2c 74 2e 70 75 73 68 2e 61 70 70 6c 79 28 74 2c 72 29 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 31 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 74 3d 6e 75 6c 6c 21 3d 61 Data Ascii: eys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);n&&(r=r.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,r)}return t}function f(e){for(var n=1;n<arguments.length;n++){var t=null!=a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49851	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:15 UTC	546	OUT	GET /webcaptcha/ngrlCaptcha.min.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:16 UTC	789	IN	HTTP/1.1 200 OK Connection: close Content-Length: 23093 Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Etag: "659ee48a-5a35" Last-Modified: Wed, 10 Jan 2024 18:40:10 GMT Paypal-Debug-Id: 2cec6e6f59d2f Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000002cec6e6f59d2f-ffacb1043f6015df-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:15 GMT X-Served-By: cache-dfw-kdfw8210166-DFW, cache-pdk-kfty2130027-PDK X-Cache: HIT, HIT X-Cache-Hits: 137, 0 X-Timer: S1714134196.993545,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:16 UTC	1379	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 61 2e 65 78 70 6f 72 74 73 2c 61 2c 61 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 61 2e 6c 3d 21 30 2c 61 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};return e[r].call(a.exports,a,a.exports,n),a.l=!0,a.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=fun
2024-04-26 12:23:16 UTC	1379	IN	Data Raw: 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 5b 5d 3b 65 3b 65 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 65 2e 63 6c 61 73 73 4e 61 6d 65 2e 6d 61 74 63 68 28 74 29 26 26 6e 2e 70 75 73 68 28 65 29 3b 72 65 74 75 72 6e 20 6e 7d 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 7b 76 61 72 20 72 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 65 29 72 2e 70 75 73 68 28 6e 28 61 29 29 3b 72 65 74 75 72 6e 20 72 7d 72 65 74 75 72 6e 20 6e 28 65 29 7d 2c 65 2e 65 78 70 6f 72 74 73 2e 61 64 64 43 6c 61 73 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 3d 31 29 7b Data Ascii: n(e){for(var n=[];e;e=e.nextSibling)1===e.nodeType&&e.className.match(t)&&n.push(e);return n}if(Array.isArray(e)){var r=[];for(var a in e)r.push(n(a));return r}return n(e)},e.exports.addClass=function(e,t){if(Array.isArray(e))for(var n=0;n<e.length;n+=1){
2024-04-26 12:23:16 UTC	1379	IN	Data Raw: 50 54 43 48 41 5f 45 56 45 4e 54 22 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 72 65 74 75 72 6e 28 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 29 28 Data Ascii: PTCHA_EVENT"}},function(e,t){function n(e){return(n="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(
2024-04-26 12:23:16 UTC	1379	IN	Data Raw: 61 6d 65 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 2e 76 61 6c 75 65 29 29 7d 72 65 74 75 72 6e 20 61 7d 2c 65 2e 65 78 70 6f 72 74 73 2e 67 65 74 58 4d 4c 48 54 54 50 52 65 73 70 6f 6e 73 65 54 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 72 79 7b 76 61 72 20 6e 3d 22 75 74 66 2d 38 22 2c 72 3d 22 74 65 78 74 2f 68 74 6d 6c 22 2c 61 3d 65 2e 67 65 74 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 28 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 29 2c 69 3d 6e 65 77 20 46 69 6c 65 52 65 61 64 65 72 3b 69 66 28 61 29 7b 72 3d 61 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 2e 74 72 69 6d 28 29 3b 76 61 72 20 6f 3d 2f 63 68 61 72 73 65 74 5c 73 2a 3d 5c 73 2a 5c 22 3f 28 5b 5e 5c 73 5c 22 5d 2a 29 5c 22 3f 5c 73 2a 24 2f 69 Data Ascii: ame+"="+encodeURIComponent(t.value))}return a},e.exports.getXMLHTTPResponseText=function(e,t){try{var n="utf-8",r="text/html",a=e.getResponseHeader("Content-Type"),i=new FileReader;if(a){r=a.split(";")[0].trim();var o=/charset\s=\s\"?([^\s\"])\"?\s$/i
2024-04-26 12:23:16 UTC	1379	IN	Data Raw: 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 29 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 74 68 69 73 2e 5f 65 76 65 6e 74 73 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 7c 7c 7b 7d 2c 74 68 69 73 2e 5f 6d 61 78 4c 69 73 74 65 6e 65 72 73 3d 74 68 69 73 2e 5f 6d 61 78 4c 69 73 74 65 6e 65 72 73 7c 7c 76 6f 69 64 20 30 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 3d 6e 28 65 29 26 26 6e 75 6c 6c 21 3d 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 65 7d 65 2e 65 78 70 6f 72 74 73 3d 72 2c 72 2e 45 76 65 6e 74 Data Ascii: type?"symbol":typeof e})(e)}function r(){this._events=this._events\|\|{},this._maxListeners=this._maxListeners\|\|void 0}function a(e){return"function"==typeof e}function i(e){return"object"===n(e)&&null!==e}function o(e){return void 0===e}e.exports=r,r.Event
2024-04-26 12:23:16 UTC	1379	IN	Data Raw: 73 74 65 6e 65 72 22 2c 65 2c 61 28 74 2e 6c 69 73 74 65 6e 65 72 29 3f 74 2e 6c 69 73 74 65 6e 65 72 3a 74 29 2c 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 3f 69 28 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 29 3f 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 2e 70 75 73 68 28 74 29 3a 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 3d 5b 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 2c 74 5d 3a 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 3d 74 2c 69 28 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 29 26 26 21 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 2e 77 61 72 6e 65 64 26 26 28 6e 3d 6f 28 74 68 69 73 2e 5f 6d 61 78 4c 69 73 74 65 6e 65 72 73 29 3f 72 2e 64 65 66 61 75 6c 74 4d 61 78 4c 69 73 74 65 6e 65 72 73 3a 74 68 69 73 2e 5f 6d 61 78 4c 69 73 Data Ascii: stener",e,a(t.listener)?t.listener:t),this._events[e]?i(this._events[e])?this._events[e].push(t):this._events[e]=[this._events[e],t]:this._events[e]=t,i(this._events[e])&&!this._events[e].warned&&(n=o(this._maxListeners)?r.defaultMaxListeners:this._maxLis
2024-04-26 12:23:16 UTC	1379	IN	Data Raw: 72 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 69 66 28 21 74 68 69 73 2e 5f 65 76 65 6e 74 73 29 72 65 74 75 72 6e 20 74 68 69 73 3b 69 66 28 21 74 68 69 73 2e 5f 65 76 65 6e 74 73 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 29 72 65 74 75 72 6e 20 30 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 5f 65 76 65 6e 74 73 3d 7b 7d 3a 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 26 26 64 65 6c 65 74 65 20 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 2c 74 68 69 73 3b 69 66 28 30 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 74 20 69 6e 20 74 68 69 73 2e 5f 65 76 65 6e 74 73 29 22 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 22 21 3d 3d 74 26 26 74 68 69 73 2e 72 65 6d 6f 76 65 41 6c Data Ascii: rs=function(e){var t,n;if(!this._events)return this;if(!this._events.removeListener)return 0===arguments.length?this._events={}:this._events[e]&&delete this._events[e],this;if(0===arguments.length){for(t in this._events)"removeListener"!==t&&this.removeAl
2024-04-26 12:23:16 UTC	1379	IN	Data Raw: 5c 5c 5d 3f 22 69 6e 76 61 6c 69 64 43 6f 64 65 5b 5c 5c 5d 3f 22 2f 29 7d 63 61 74 63 68 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 65 72 72 6f 72 20 69 6e 20 63 68 65 63 6b 69 6e 67 20 66 61 69 6c 65 64 22 29 7d 72 65 74 75 72 6e 20 74 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 38 29 2c 61 3d 6e 28 32 29 2c 69 3d 6e 28 31 29 2c 6f 3d 6e 28 30 29 3b 65 2e 65 78 70 6f 72 74 73 3d 7b 63 68 61 6c 6c 65 6e 67 65 48 61 6e 64 6c 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 61 64 73 52 65 73 70 6f 6e 73 65 2c 73 3d 65 2e 65 72 72 6f 72 52 65 73 70 6f 6e 73 65 2c 6c 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 6e 67 72 6c 2d 61 6e 6f 6d 61 6c 79 64 65 Data Ascii: \\]?"invalidCode[\\]?"/)}catch(e){console.log("error in checking failed")}return t}}},function(e,t,n){var r=n(8),a=n(2),i=n(1),o=n(0);e.exports={challengeHandler:function(e,t){var n=e.adsResponse,s=e.errorResponse,l=document.querySelector(".ngrl-anomalyde
2024-04-26 12:23:16 UTC	1379	IN	Data Raw: 29 29 2c 61 3d 5b 5d 3b 30 21 3d 3d 72 2e 6c 65 6e 67 74 68 26 26 72 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 70 75 73 68 28 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 29 29 2c 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 6c 75 72 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 2e 74 61 72 67 65 74 2e 69 64 29 3b 6f 2e 68 61 73 43 6c 61 73 73 28 6f 2e 67 65 74 50 61 72 65 6e 74 73 28 74 2c 22 74 65 78 74 49 6e 70 75 74 22 29 2c 22 66 69 65 6c 64 69 6e 76 61 6c 69 64 22 29 26 26 6f 2e 61 64 64 43 6c 61 73 73 28 6f 2e 67 65 74 50 61 72 65 6e 74 73 28 74 2c 22 74 65 78 74 49 6e 70 75 74 22 29 2c 22 68 61 73 Data Ascii: )),a=[];0!==r.length&&r.forEach(function(e){a.push(e.getAttribute("name")),e.addEventListener("blur",function(e){var t=document.getElementById(e.target.id);o.hasClass(o.getParents(t,"textInput"),"fieldinvalid")&&o.addClass(o.getParents(t,"textInput"),"has
2024-04-26 12:23:16 UTC	1379	IN	Data Raw: 29 7d 2c 61 6e 69 6d 61 74 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 22 29 3b 65 2e 73 6c 69 64 65 44 6f 77 6e 28 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 73 6c 69 64 65 55 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 65 6d 69 74 28 22 73 6c 69 64 55 70 22 29 7d 29 7d 2c 35 65 33 29 7d 2c 76 65 72 69 66 79 46 6f 72 6d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 74 61 72 67 65 74 2c 72 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 76 61 6c 69 64 61 74 65 2c 20 2e 76 61 6c 69 64 Data Ascii: )},animateNotification:function(){var e=document.getElementById("notifications");e.slideDown(),setTimeout(function(){e.slideUp(function(){t.emit("slidUp")})},5e3)},verifyForm:function(e){var n=e.target,r=[].slice.call(n.querySelectorAll(".validate, .valid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49858	151.101.1.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:16 UTC	1687	OUT	GET /auth/createchallenge/4c37721843a6c126/recaptchav3.js?_sessionID=r1IVgdqL-yPwDL7QwOzbe1TQMyLGYUSv HTTP/1.1 Host: id.venmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/signin?country.x=US&locale.x=en&ctxId=AAGTMbXAr-_9hFOdMjFJeDIT2AVC4srohHO4prKJg35LG3f53du_Ei1CXj8jIlvNxkWTpu7ay42oUJl42vchI78= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial; d_id=f9d8a02dda1e499da9fdccab0d31ca111714134181973; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=identityappsnodeweb; nsid=s%3Ar1IVgdqL-yPwDL7QwOzbe1TQMyLGYUSv.rXM9gf4tUyvmHMoq%2F2Zdgp4aiJfZ5ZCx1rHTg%2BhO7xY; l7_az=dcg15.slc; ts_c=vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3; x-pp-s=eyJ0IjoiMTcxNDEzNDE5MDM3OSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742190%26vteXpYrS%3D1714135990%26vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3%26vtyp%3Dnew
2024-04-26 12:23:16 UTC	299	IN	HTTP/1.1 200 OK Connection: close Content-Length: 11250 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Cache-Control: max-age=0, no-cache, no-store, must-revalidate
2024-04-26 12:23:16 UTC	2442	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 6f 62 6a 65 63 74 73 2e 70 61 79 70 61 6c 2e 63 6e 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 57 57 52 6b 66 73 43 52 51 4d 59 43 71 49 63 73 78 4e 73 4a 32 79 66 44 74 55 4c 37 47 4c 39 73 45 37 56 4b 54 70 2b 77 52 46 41 31 6a 2f 76 67 27 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e Data Ascii: Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypal.cn https://.paypalobjects.com https://objects.paypal.cn; script-src 'nonce-WWRkfsCRQMYCqIcsxNsJ2yfDtUL7GL9sE7VKTp+wRFA1j/vg' 'self' https://.paypal.com https://*.paypal.cn
2024-04-26 12:23:16 UTC	1364	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 78 2d 70 70 2d 73 3d 65 79 4a 30 49 6a 6f 69 4d 54 63 78 4e 44 45 7a 4e 44 45 35 4e 6a 59 33 4f 53 49 73 49 6d 77 69 4f 69 49 77 49 69 77 69 62 53 49 36 49 6a 41 69 66 51 3b 20 44 6f 6d 61 69 6e 3d 2e 76 65 6e 6d 6f 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 74 73 72 63 65 3d 61 75 74 68 63 68 61 6c 6c 65 6e 67 65 6e 6f 64 65 77 65 62 3b 20 44 6f 6d 61 69 6e 3d 2e 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 4d 6f 6e 2c 20 32 39 20 41 70 72 20 32 30 32 34 20 31 32 3a 32 33 3a 31 36 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b Data Ascii: Set-Cookie: x-pp-s=eyJ0IjoiMTcxNDEzNDE5NjY3OSIsImwiOiIwIiwibSI6IjAifQ; Domain=.venmo.com; Path=/; HttpOnly; Secure; SameSite=NoneSet-Cookie: tsrce=authchallengenodeweb; Domain=.paypal.com; Path=/; Expires=Mon, 29 Apr 2024 12:23:16 GMT; HttpOnly; Secure;
2024-04-26 12:23:16 UTC	63	IN	Data Raw: 53 65 72 76 65 72 2d 54 69 6d 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 3b 64 65 73 63 3d 22 22 2c 78 2d 63 64 6e 3b 64 65 73 63 3d 22 66 61 73 74 6c 79 22 0d 0a 0d 0a Data Ascii: Server-Timing: content-encoding;desc="",x-cdn;desc="fastly"
2024-04-26 12:23:16 UTC	1378	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 30 78 33 36 66 64 28 29 7b 76 61 72 20 5f 30 78 35 37 62 36 36 33 3d 5b 27 78 2d 72 65 71 75 65 73 74 65 64 2d 77 69 74 68 27 2c 27 73 65 61 72 63 68 27 2c 27 74 72 61 6e 73 69 74 69 6f 6e 27 2c 27 61 62 5a 6f 43 43 75 74 59 3a 62 6c 61 45 6e 73 7a 6b 77 71 79 42 56 56 4f 55 71 72 59 41 4c 6a 71 4e 79 65 69 44 27 2c 27 74 6f 53 74 72 69 6e 67 27 2c 27 69 6e 66 6f 27 2c 27 37 34 70 78 27 2c 27 32 59 4f 4c 54 70 47 27 2c 27 70 61 79 70 61 6c 2e 63 6f 6d 27 2c 27 67 72 63 76 33 65 6e 74 65 72 70 72 69 73 65 66 72 61 6d 65 27 2c 27 62 6f 64 79 27 2c 27 26 5f 73 65 73 73 69 6f 6e 49 44 3d 27 2c 27 73 69 67 6e 69 6e 27 2c 27 61 63 74 69 6f 6e 27 2c 27 70 61 72 73 65 27 2c 27 6c 6f 67 44 61 74 61 27 2c 27 62 6f 74 74 6f 6d 27 2c 27 Data Ascii: function _0x36fd(){var _0x57b663=['x-requested-with','search','transition','abZoCCutY:blaEnszkwqyBVVOUqrYALjqNyeiD','toString','info','74px','2YOLTpG','paypal.com','grcv3enterpriseframe','body','&_sessionID=','signin','action','parse','logData','bottom','
2024-04-26 12:23:16 UTC	1378	IN	Data Raw: 64 27 2c 27 6d 65 73 73 61 67 65 27 2c 27 31 30 4d 76 66 4b 6c 6a 27 2c 27 73 74 72 69 6e 67 69 66 79 27 2c 27 33 33 4f 41 79 50 77 44 27 2c 27 6f 62 6a 65 63 74 27 2c 27 5f 63 73 72 66 3d 27 2c 27 64 61 74 61 27 2c 27 69 66 72 61 6d 65 27 2c 27 73 6f 75 72 63 65 27 2c 27 73 61 6e 64 62 6f 78 27 2c 27 55 52 4c 27 2c 27 73 69 7a 65 27 5d 3b 5f 30 78 33 36 66 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 30 78 35 37 62 36 36 33 3b 7d 3b 72 65 74 75 72 6e 20 5f 30 78 33 36 66 64 28 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 32 30 62 33 28 5f 30 78 34 33 35 34 61 31 2c 5f 30 78 32 65 61 37 37 35 29 7b 76 61 72 20 5f 30 78 31 39 33 66 63 63 3d 5f 30 78 33 36 66 64 28 29 3b 72 65 74 75 72 6e 20 5f 30 78 32 30 62 33 3d 66 75 6e 63 74 69 6f 6e Data Ascii: d','message','10MvfKlj','stringify','33OAyPwD','object','_csrf=','data','iframe','source','sandbox','URL','size'];_0x36fd=function(){return _0x57b663;};return _0x36fd();}function _0x20b3(_0x4354a1,_0x2ea775){var _0x193fcc=_0x36fd();return _0x20b3=function
2024-04-26 12:23:16 UTC	1378	IN	Data Raw: 7d 3b 72 65 74 75 72 6e 20 5f 30 78 34 61 32 64 64 33 3d 21 5b 5d 2c 5f 30 78 32 39 35 65 63 66 3b 7d 3b 7d 28 29 29 2c 5f 30 78 32 38 66 63 33 37 3d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 37 39 36 63 39 34 3d 21 21 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 61 32 36 32 35 2c 5f 30 78 32 61 32 36 64 35 29 7b 76 61 72 20 5f 30 78 32 38 32 32 35 38 3d 5f 30 78 37 39 36 63 39 34 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 34 33 37 63 64 39 3d 5f 30 78 32 30 62 33 3b 69 66 28 5f 30 78 32 61 32 36 64 35 29 7b 76 61 72 20 5f 30 78 32 65 62 38 30 30 3d 5f 30 78 32 61 32 36 64 35 5b 5f 30 78 34 33 37 63 64 39 28 30 78 38 62 29 5d 28 5f 30 78 31 61 32 36 32 35 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 Data Ascii: };return _0x4a2dd3=![],_0x295ecf;};}()),_0x28fc37=(function(){var _0x796c94=!![];return function(_0x1a2625,_0x2a26d5){var _0x282258=_0x796c94?function(){var _0x437cd9=_0x20b3;if(_0x2a26d5){var _0x2eb800=_0x2a26d5[_0x437cd9(0x8b)](_0x1a2625,arguments);retu
2024-04-26 12:23:16 UTC	1378	IN	Data Raw: 67 47 50 59 4b 45 4e 73 49 27 5b 5f 30 78 31 35 39 65 62 64 28 30 78 39 35 29 5d 28 5f 30 78 32 36 62 39 39 64 2c 27 27 29 5b 5f 30 78 31 35 39 65 62 64 28 30 78 38 66 29 5d 28 27 3b 27 29 2c 5f 30 78 35 64 65 33 30 30 2c 5f 30 78 37 31 63 64 62 31 2c 5f 30 78 35 38 65 35 34 38 2c 5f 30 78 35 63 64 66 63 36 2c 5f 30 78 34 62 61 35 65 66 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 39 63 32 61 65 2c 5f 30 78 35 64 36 64 31 31 2c 5f 30 78 35 30 31 61 64 64 29 7b 76 61 72 20 5f 30 78 35 61 62 65 62 31 3d 5f 30 78 31 35 39 65 62 64 3b 69 66 28 5f 30 78 32 39 63 32 61 65 5b 5f 30 78 35 61 62 65 62 31 28 30 78 39 62 29 5d 21 3d 5f 30 78 35 64 36 64 31 31 29 72 65 74 75 72 6e 21 5b 5d 3b 66 6f 72 28 76 61 72 20 5f 30 78 31 61 31 34 62 36 3d 30 78 30 3b 5f 30 78 31 Data Ascii: gGPYKENsI'[_0x159ebd(0x95)](_0x26b99d,'')[_0x159ebd(0x8f)](';'),_0x5de300,_0x71cdb1,_0x58e548,_0x5cdfc6,_0x4ba5ef=function(_0x29c2ae,_0x5d6d11,_0x501add){var _0x5abeb1=_0x159ebd;if(_0x29c2ae[_0x5abeb1(0x9b)]!=_0x5d6d11)return![];for(var _0x1a14b6=0x0;_0x1
2024-04-26 12:23:16 UTC	1378	IN	Data Raw: 31 63 64 62 31 5d 2c 5f 30 78 31 34 65 35 66 64 3d 21 21 5f 30 78 32 37 62 39 31 61 5b 5f 30 78 35 64 65 33 30 30 5d 5b 5f 30 78 35 38 65 35 34 38 5d 26 26 5f 30 78 32 37 62 39 31 61 5b 5f 30 78 35 64 65 33 30 30 5d 5b 5f 30 78 35 38 65 35 34 38 5d 5b 5f 30 78 35 63 64 66 63 36 5d 2c 5f 30 78 34 37 63 39 31 30 3d 5f 30 78 33 65 65 34 33 66 7c 7c 5f 30 78 31 34 65 35 66 64 3b 69 66 28 21 5f 30 78 34 37 63 39 31 30 29 72 65 74 75 72 6e 3b 76 61 72 20 5f 30 78 35 38 39 30 33 39 3d 21 5b 5d 3b 66 6f 72 28 76 61 72 20 5f 30 78 32 34 38 33 32 66 3d 30 78 30 3b 5f 30 78 32 34 38 33 32 66 3c 5f 30 78 39 33 62 37 38 35 5b 5f 30 78 31 35 39 65 62 64 28 30 78 39 62 29 5d 3b 5f 30 78 32 34 38 33 32 66 2b 2b 29 7b 76 61 72 20 5f 30 78 37 31 63 64 62 31 3d 5f 30 78 39 Data Ascii: 1cdb1],_0x14e5fd=!!_0x27b91a[_0x5de300][_0x58e548]&&_0x27b91a[_0x5de300][_0x58e548][_0x5cdfc6],_0x47c910=_0x3ee43f\|\|_0x14e5fd;if(!_0x47c910)return;var _0x589039=![];for(var _0x24832f=0x0;_0x24832f<_0x93b785[_0x159ebd(0x9b)];_0x24832f++){var _0x71cdb1=_0x9
2024-04-26 12:23:16 UTC	1378	IN	Data Raw: 5f 30 78 32 39 64 39 62 65 28 30 78 63 31 29 5d 28 5f 30 78 31 65 65 30 65 30 29 2c 5f 30 78 33 64 36 66 62 30 3d 5f 30 78 35 35 63 63 63 39 5b 5f 30 78 33 31 66 61 34 35 5d 2c 5f 30 78 32 61 32 65 33 64 3d 5f 30 78 32 65 37 32 31 63 5b 5f 30 78 33 64 36 66 62 30 5d 7c 7c 5f 30 78 34 64 62 31 65 37 3b 5f 30 78 34 64 62 31 65 37 5b 5f 30 78 32 39 64 39 62 65 28 30 78 66 33 29 5d 3d 5f 30 78 31 65 65 30 65 30 5b 27 62 69 6e 64 27 5d 28 5f 30 78 31 65 65 30 65 30 29 2c 5f 30 78 34 64 62 31 65 37 5b 27 74 6f 53 74 72 69 6e 67 27 5d 3d 5f 30 78 32 61 32 65 33 64 5b 27 74 6f 53 74 72 69 6e 67 27 5d 5b 27 62 69 6e 64 27 5d 28 5f 30 78 32 61 32 65 33 64 29 2c 5f 30 78 32 65 37 32 31 63 5b 5f 30 78 33 64 36 66 62 30 5d 3d 5f 30 78 34 64 62 31 65 37 3b 7d 7d 29 3b Data Ascii: _0x29d9be(0xc1)](_0x1ee0e0),_0x3d6fb0=_0x55ccc9[_0x31fa45],_0x2a2e3d=_0x2e721c[_0x3d6fb0]\|\|_0x4db1e7;_0x4db1e7[_0x29d9be(0xf3)]=_0x1ee0e0['bind'](_0x1ee0e0),_0x4db1e7['toString']=_0x2a2e3d['toString']['bind'](_0x2a2e3d),_0x2e721c[_0x3d6fb0]=_0x4db1e7;}});
2024-04-26 12:23:16 UTC	1378	IN	Data Raw: 62 29 5d 3c 30 78 32 29 72 65 74 75 72 6e 20 5f 30 78 35 34 37 30 33 36 3b 76 61 72 20 5f 30 78 33 31 31 38 37 62 3d 5f 30 78 31 35 65 39 38 65 5b 5f 30 78 38 37 30 37 66 33 28 30 78 39 38 29 5d 28 27 2e 27 29 3b 69 66 28 21 5f 30 78 33 31 31 38 37 62 29 72 65 74 75 72 6e 20 5f 30 78 35 34 37 30 33 36 3b 5f 30 78 32 66 61 32 65 38 5b 5f 30 78 38 37 30 37 66 33 28 30 78 63 64 29 5d 28 5f 30 78 33 31 31 38 37 62 29 3e 3d 30 78 30 26 26 28 5f 30 78 35 34 37 30 33 36 3d 5f 30 78 35 34 64 66 38 34 5b 27 6f 72 69 67 69 6e 27 5d 29 3b 7d 63 61 74 63 68 28 5f 30 78 32 31 35 36 34 64 29 7b 63 6f 6e 73 6f 6c 65 5b 5f 30 78 38 37 30 37 66 33 28 30 78 39 65 29 5d 28 5f 30 78 32 31 35 36 34 64 29 3b 7d 72 65 74 75 72 6e 20 5f 30 78 35 34 37 30 33 36 3b 7d 76 61 72 20 Data Ascii: b)]<0x2)return _0x547036;var _0x31187b=_0x15e98e[_0x8707f3(0x98)]('.');if(!_0x31187b)return _0x547036;_0x2fa2e8[_0x8707f3(0xcd)](_0x31187b)>=0x0&&(_0x547036=_0x54df84['origin']);}catch(_0x21564d){console[_0x8707f3(0x9e)](_0x21564d);}return _0x547036;}var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49859	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:16 UTC	594	OUT	GET /ice/content/c20240322103542/US/en.json HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://id.venmo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:16 UTC	850	IN	HTTP/1.1 200 OK Connection: close Content-Length: 68275 Cache-Control: s-maxage=31536000, public,max-age=86400 Content-Type: application/json Etag: "660325ff-10ab3" Last-Modified: Tue, 26 Mar 2024 19:46:07 GMT Paypal-Debug-Id: 1b8e29e8bb57c Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000001b8e29e8bb57c-554226c2e9c2fce0-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:16 GMT X-Served-By: cache-dfw-kdal2120134-DFW, cache-pdk-kfty2130058-PDK X-Cache: HIT, HIT X-Cache-Hits: 2, 0 X-Timer: S1714134197.712642,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:16 UTC	1379	IN	Data Raw: 7b 22 61 75 74 68 42 75 74 74 6f 6e 22 3a 7b 22 62 75 74 74 6f 6e 22 3a 7b 22 63 6f 6e 6e 65 63 74 22 3a 22 43 6f 6e 6e 65 63 74 20 77 69 74 68 20 50 61 79 50 61 6c 22 2c 22 6c 6f 67 49 6e 22 3a 22 4c 6f 67 20 69 6e 20 77 69 74 68 20 50 61 79 50 61 6c 22 2c 22 73 69 67 6e 55 70 22 3a 22 53 69 67 6e 20 75 70 20 77 69 74 68 20 50 61 79 50 61 6c 22 2c 22 63 6f 6e 74 69 6e 75 65 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 20 50 61 79 50 61 6c 22 7d 7d 2c 22 61 75 74 68 66 6c 6f 77 22 3a 7b 22 70 61 79 70 61 6c 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 4c 69 73 74 22 3a 7b 22 68 65 61 64 65 72 22 3a 22 51 75 69 63 6b 20 73 65 63 75 72 69 74 79 20 63 68 65 63 6b 22 2c 22 73 75 62 68 65 61 64 65 72 22 3a 22 57 65 20 6a 75 73 74 20 6e 65 65 64 20 73 6f 6d 65 20 Data Ascii: {"authButton":{"button":{"connect":"Connect with PayPal","logIn":"Log in with PayPal","signUp":"Sign up with PayPal","continue":"Continue with PayPal"}},"authflow":{"paypal":{"challengeList":{"header":"Quick security check","subheader":"We just need some
2024-04-26 12:23:16 UTC	1379	IN	Data Raw: 6f 6e 65 22 2c 22 69 76 72 22 3a 22 48 61 76 65 20 75 73 20 63 61 6c 6c 20 79 6f 75 22 7d 2c 22 62 75 74 74 6f 6e 22 3a 7b 22 6e 65 78 74 22 3a 22 4e 65 78 74 22 2c 22 65 6d 61 69 6c 4c 61 62 65 6c 22 3a 22 53 65 6e 64 20 45 6d 61 69 6c 22 2c 22 73 6d 73 4c 61 62 65 6c 22 3a 22 53 65 6e 64 20 54 65 78 74 22 2c 22 69 76 72 4c 61 62 65 6c 22 3a 22 43 61 6c 6c 20 4e 6f 77 22 2c 22 63 6c 6f 73 65 4c 61 62 65 6c 22 3a 22 43 6c 6f 73 65 22 2c 22 67 6f 4c 61 62 65 6c 22 3a 22 47 6f 22 2c 22 63 61 6c 6c 69 6e 67 4c 61 62 65 6c 22 3a 22 43 61 6c 6c 69 6e 67 2e 2e 2e 22 2c 22 73 61 76 65 4c 61 62 65 6c 22 3a 22 53 61 76 65 22 2c 22 63 61 6c 6c 41 67 61 69 6e 4c 61 62 65 6c 22 3a 22 43 61 6c 6c 20 61 67 61 69 6e 22 2c 22 65 6d 61 69 6c 4d 65 4c 61 62 65 6c 22 3a 22 Data Ascii: one","ivr":"Have us call you"},"button":{"next":"Next","emailLabel":"Send Email","smsLabel":"Send Text","ivrLabel":"Call Now","closeLabel":"Close","goLabel":"Go","callingLabel":"Calling...","saveLabel":"Save","callAgainLabel":"Call again","emailMeLabel":"
2024-04-26 12:23:16 UTC	1379	IN	Data Raw: 6e 74 61 63 74 20 75 73 22 2c 22 6e 65 65 64 48 65 6c 70 22 3a 22 4e 65 65 64 20 61 20 68 61 6e 64 3f 20 7b 6c 69 6e 6b 7d 22 2c 22 63 6f 6e 74 61 63 74 55 73 4c 69 6e 6b 54 65 78 74 22 3a 22 57 65 20 63 61 6e 20 68 65 6c 70 22 2c 22 63 61 6c 6c 55 73 22 3a 22 43 61 6c 6c 20 75 73 22 2c 22 73 65 72 76 69 63 65 48 6f 75 72 73 22 3a 22 4f 75 72 20 73 65 72 76 69 63 65 20 68 6f 75 72 73 22 2c 22 68 65 6c 70 43 65 6e 74 65 72 48 65 61 64 69 6e 67 22 3a 22 4f 74 68 65 72 20 77 61 79 73 20 74 6f 20 63 6f 6e 74 61 63 74 20 75 73 22 2c 22 68 65 6c 70 43 65 6e 74 65 72 4c 69 6e 6b 54 65 78 74 22 3a 22 48 65 6c 70 20 43 65 6e 74 65 72 22 2c 22 68 65 6c 70 43 65 6e 74 65 72 54 65 78 74 22 3a 22 56 69 73 69 74 20 74 68 65 20 7b 68 65 6c 70 43 65 6e 74 65 72 4c 69 6e Data Ascii: ntact us","needHelp":"Need a hand? {link}","contactUsLinkText":"We can help","callUs":"Call us","serviceHours":"Our service hours","helpCenterHeading":"Other ways to contact us","helpCenterLinkText":"Help Center","helpCenterText":"Visit the {helpCenterLin
2024-04-26 12:23:16 UTC	1379	IN	Data Raw: 73 74 22 3a 7b 22 68 65 61 64 65 72 22 3a 22 51 75 69 63 6b 20 73 65 63 75 72 69 74 79 20 63 68 65 63 6b 22 2c 22 73 75 62 68 65 61 64 65 72 22 3a 22 57 65 20 6a 75 73 74 20 6e 65 65 64 20 73 6f 6d 65 20 61 64 64 69 74 69 6f 6e 61 6c 20 69 6e 66 6f 20 74 6f 20 63 6f 6e 66 69 72 6d 20 69 74 27 73 20 79 6f 75 2e 22 2c 22 6c 6f 67 6f 41 6c 74 54 65 78 74 22 3a 22 58 6f 6f 6d 3a 20 41 20 50 61 79 50 61 6c 20 53 65 72 76 69 63 65 22 2c 22 73 6d 73 22 3a 7b 22 75 73 65 22 3a 22 57 65 20 73 65 6e 74 20 61 20 73 65 63 75 72 69 74 79 20 63 6f 64 65 20 74 6f 20 7b 6f 74 70 44 65 73 74 69 6e 61 74 69 6f 6e 7d 2e 22 2c 22 69 6e 66 6f 22 3a 22 42 79 20 63 6f 6e 74 69 6e 75 69 6e 67 2c 20 79 6f 75 20 63 6f 6e 66 69 72 6d 20 74 68 61 74 20 79 6f 75 20 61 72 65 20 61 75 Data Ascii: st":{"header":"Quick security check","subheader":"We just need some additional info to confirm it's you.","logoAltText":"Xoom: A PayPal Service","sms":{"use":"We sent a security code to {otpDestination}.","info":"By continuing, you confirm that you are au
2024-04-26 12:23:16 UTC	1379	IN	Data Raw: 67 6f 4c 61 62 65 6c 22 3a 22 47 6f 22 2c 22 63 61 6c 6c 69 6e 67 4c 61 62 65 6c 22 3a 22 43 61 6c 6c 69 6e 67 2e 2e 2e 22 2c 22 73 61 76 65 4c 61 62 65 6c 22 3a 22 53 61 76 65 22 2c 22 63 61 6c 6c 41 67 61 69 6e 4c 61 62 65 6c 22 3a 22 43 61 6c 6c 20 61 67 61 69 6e 22 2c 22 65 6d 61 69 6c 4d 65 4c 61 62 65 6c 22 3a 22 45 6d 61 69 6c 20 4d 65 22 7d 2c 22 6c 69 6e 6b 73 22 3a 7b 22 63 61 6e 63 65 6c 22 3a 22 42 61 63 6b 20 74 6f 20 6c 6f 67 69 6e 22 7d 2c 22 6c 6f 61 64 69 6e 67 54 65 78 74 22 3a 22 4c 6f 61 64 69 6e 67 22 2c 22 65 72 72 6f 72 73 22 3a 7b 22 73 65 72 76 69 63 65 45 72 72 6f 72 22 3a 22 53 6f 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 21 22 2c 22 4e 41 50 46 61 69 6c 75 72 65 22 3a 22 54 68 69 73 20 74 79 70 65 20 6f 66 20 70 68 Data Ascii: goLabel":"Go","callingLabel":"Calling...","saveLabel":"Save","callAgainLabel":"Call again","emailMeLabel":"Email Me"},"links":{"cancel":"Back to login"},"loadingText":"Loading","errors":{"serviceError":"Something went wrong!","NAPFailure":"This type of ph
2024-04-26 12:23:16 UTC	1379	IN	Data Raw: 67 22 3a 22 4f 74 68 65 72 20 77 61 79 73 20 74 6f 20 63 6f 6e 74 61 63 74 20 75 73 22 2c 22 68 65 6c 70 43 65 6e 74 65 72 4c 69 6e 6b 54 65 78 74 22 3a 22 48 65 6c 70 20 43 65 6e 74 65 72 22 2c 22 68 65 6c 70 43 65 6e 74 65 72 54 65 78 74 22 3a 22 56 69 73 69 74 20 74 68 65 20 7b 68 65 6c 70 43 65 6e 74 65 72 4c 69 6e 6b 7d 22 7d 2c 22 64 6f 6e 65 22 3a 7b 22 74 69 74 6c 65 22 3a 22 41 6c 6c 20 53 65 74 21 22 2c 22 72 65 64 69 72 65 63 74 69 6e 67 22 3a 22 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 22 7d 2c 22 6d 61 78 41 74 74 65 6d 70 74 73 22 3a 7b 22 74 69 74 6c 65 22 3a 22 53 6f 72 72 79 2c 20 77 65 20 63 6f 75 6c 64 6e e2 80 99 74 20 63 6f 6e 66 69 72 6d 20 69 74 e2 80 99 73 20 79 6f 75 22 2c 22 74 72 79 41 6e 6f 74 68 65 72 57 61 79 22 3a 22 54 72 Data Ascii: g":"Other ways to contact us","helpCenterLinkText":"Help Center","helpCenterText":"Visit the {helpCenterLink}"},"done":{"title":"All Set!","redirecting":"Redirecting..."},"maxAttempts":{"title":"Sorry, we couldnt confirm its you","tryAnotherWay":"Tr
2024-04-26 12:23:16 UTC	1379	IN	Data Raw: 2c 22 63 68 61 6e 67 65 50 61 73 73 77 6f 72 64 22 3a 22 43 68 61 6e 67 65 20 50 61 73 73 77 6f 72 64 22 7d 2c 22 65 72 72 6f 72 73 22 3a 7b 22 73 65 72 76 69 63 65 45 72 72 6f 72 22 3a 22 53 6f 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 22 7d 7d 2c 22 64 6f 6e 65 22 3a 7b 22 74 69 74 6c 65 22 3a 22 50 61 73 73 77 6f 72 64 20 43 68 61 6e 67 65 64 21 22 2c 22 72 65 64 69 72 65 63 74 69 6e 67 22 3a 22 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 22 7d 7d 2c 22 76 65 6e 6d 6f 22 3a 7b 22 63 68 61 6e 67 65 50 61 73 73 77 6f 72 64 22 3a 7b 22 68 65 61 64 65 72 22 3a 22 43 68 61 6e 67 65 20 59 6f 75 72 20 50 61 73 73 77 6f 72 64 22 2c 22 73 75 62 48 65 61 64 65 72 22 3a 22 57 68 65 6e 20 79 6f 75 Data Ascii: ,"changePassword":"Change Password"},"errors":{"serviceError":"Something went wrong. Please try again."}},"done":{"title":"Password Changed!","redirecting":"Redirecting..."}},"venmo":{"changePassword":{"header":"Change Your Password","subHeader":"When you
2024-04-26 12:23:16 UTC	1379	IN	Data Raw: 20 6f 72 20 6d 65 72 63 68 61 6e 74 20 61 63 63 6f 75 6e 74 20 74 6f 20 74 72 79 20 61 67 61 69 6e 2e 22 2c 22 69 6e 76 61 6c 69 64 54 6f 6b 65 6e 54 69 74 6c 65 22 3a 22 59 6f 75 72 20 74 72 61 6e 73 61 63 74 69 6f 6e 20 63 6f 6e 74 61 69 6e 73 20 61 6e 20 69 6e 76 61 6c 69 64 20 74 6f 6b 65 6e 22 2c 22 67 65 6e 65 72 69 63 54 69 74 6c 65 22 3a 22 53 6f 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 22 2c 22 67 65 6e 65 72 69 63 4d 65 73 73 61 67 65 22 3a 22 47 69 76 65 20 69 74 20 61 6e 6f 74 68 65 72 20 74 72 79 2e 22 2c 22 73 65 6c 66 4c 6f 67 69 6e 54 69 74 6c 65 22 3a 22 59 6f 75 20 63 61 6e 6e 6f 74 20 67 72 61 6e 74 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 79 6f 75 72 73 65 6c 66 22 2c 22 73 65 6c 66 4c 6f 67 69 6e 4d 65 73 73 61 67 65 Data Ascii: or merchant account to try again.","invalidTokenTitle":"Your transaction contains an invalid token","genericTitle":"Something went wrong","genericMessage":"Give it another try.","selfLoginTitle":"You cannot grant permission to yourself","selfLoginMessage
2024-04-26 12:23:16 UTC	1379	IN	Data Raw: 61 63 74 69 6f 6e 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 2e 20 50 6c 65 61 73 65 20 72 65 74 75 72 6e 20 61 6e 64 20 72 65 70 6f 72 74 20 74 68 69 73 20 65 72 72 6f 72 20 73 6f 20 74 68 61 74 20 77 65 20 63 61 6e 20 73 75 70 70 6f 72 74 20 69 74 20 69 6e 20 74 68 65 20 66 75 74 75 72 65 2e 20 28 69 6e 76 61 6c 69 64 20 73 63 6f 70 65 29 22 2c 22 69 6e 74 65 72 6e 61 6c 45 72 72 6f 72 54 69 74 6c 65 22 3a 22 53 6f 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 20 6f 6e 20 6f 75 72 20 65 6e 64 22 2c 22 69 6e 74 65 72 6e 61 6c 45 72 72 6f 72 4d 65 73 73 61 67 65 22 3a 22 53 6f 72 72 79 2c 20 77 65 e2 80 99 72 65 20 68 61 76 69 6e 67 20 74 72 6f 75 62 6c 65 20 63 6f 6d 70 6c 65 74 69 6e 67 20 79 6f 75 72 20 72 65 71 75 65 73 74 20 72 69 67 Data Ascii: action is not supported. Please return and report this error so that we can support it in the future. (invalid scope)","internalErrorTitle":"Something went wrong on our end","internalErrorMessage":"Sorry, were having trouble completing your request rig
2024-04-26 12:23:16 UTC	1379	IN	Data Raw: 20 7b 64 69 73 70 6c 61 79 4e 61 6d 65 7d 22 2c 22 63 61 6e 63 65 6c 43 6f 6e 66 69 72 6d 22 3a 7b 22 74 69 74 6c 65 22 3a 22 43 61 6e 63 65 6c 20 76 65 72 69 66 69 63 61 74 69 6f 6e 3f 22 2c 22 63 6f 6e 74 65 6e 74 22 3a 22 59 6f 75 27 6c 6c 20 72 65 74 75 72 6e 20 74 6f 20 7b 63 6c 69 65 6e 74 5f 64 69 73 70 6c 61 79 5f 6e 61 6d 65 7d 20 77 69 74 68 6f 75 74 20 73 68 61 72 69 6e 67 20 79 6f 75 72 20 49 44 27 73 20 76 65 72 69 66 69 65 64 20 73 74 61 74 75 73 2e 22 2c 22 63 61 6e 63 65 6c 42 75 74 74 6f 6e 22 3a 22 43 61 6e 63 65 6c 22 7d 2c 22 61 6c 74 4d 65 73 73 61 67 65 22 3a 22 43 6f 6e 73 65 6e 74 20 43 6f 6d 70 6c 65 74 65 22 7d 2c 22 74 70 70 52 65 64 69 72 65 63 74 54 72 61 6e 73 69 74 69 6f 6e 22 3a 7b 22 6c 65 67 61 6c 43 6f 6e 74 65 6e 74 54 Data Ascii: {displayName}","cancelConfirm":{"title":"Cancel verification?","content":"You'll return to {client_display_name} without sharing your ID's verified status.","cancelButton":"Cancel"},"altMessage":"Consent Complete"},"tppRedirectTransition":{"legalContentT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49860	151.101.1.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:17 UTC	1790	OUT	GET /auth/recaptcha/grcenterprise_v3.html HTTP/1.1 Host: id.venmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://id.venmo.com/signin?country.x=US&locale.x=en&ctxId=AAGTMbXAr-_9hFOdMjFJeDIT2AVC4srohHO4prKJg35LG3f53du_Ei1CXj8jIlvNxkWTpu7ay42oUJl42vchI78= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial; d_id=f9d8a02dda1e499da9fdccab0d31ca111714134181973; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=identityappsnodeweb; nsid=s%3Ar1IVgdqL-yPwDL7QwOzbe1TQMyLGYUSv.rXM9gf4tUyvmHMoq%2F2Zdgp4aiJfZ5ZCx1rHTg%2BhO7xY; l7_az=dcg15.slc; ts_c=vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3; ts=vreXpYrS%3D1808742190%26vteXpYrS%3D1714135990%26vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3%26vtyp%3Dnew; x-pp-s=eyJ0IjoiMTcxNDEzNDE5NjY3OSIsImwiOiIwIiwibSI6IjAifQ
2024-04-26 12:23:17 UTC	1352	IN	HTTP/1.1 200 OK Connection: close Content-Length: 5299 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Accept-Ranges: bytes Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: text/html; charset=UTF-8 Etag: W/"14b3-18ef5a82bd8" Last-Modified: Fri, 19 Apr 2024 09:20:23 GMT Paypal-Debug-Id: f2102714f3b6b Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com") Set-Cookie: l7_az=dcg15.slc; Domain=venmo.com; Expires=Fri, 26 Apr 2024 12:53:17 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: ts=vreXpYrS%3D1808742197%26vteXpYrS%3D1714135997%26vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3%26vtyp%3Dnew; Domain=venmo.com; Expires=Mon, 26 Apr 2027 12:23:17 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: ts_c=vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3; Domain=venmo.com; Expires=Mon, 26 Apr 2027 12:23:17 GMT; Secure; SameSite=None
2024-04-26 12:23:17 UTC	527	IN	Data Raw: 54 72 61 63 65 70 61 72 65 6e 74 3a 20 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 66 32 31 30 32 37 31 34 66 33 62 36 62 2d 34 31 35 64 34 65 61 38 33 32 66 32 33 66 30 34 2d 30 31 0d 0a 44 43 3a 20 63 63 67 31 31 2d 6f 72 69 67 69 6e 2d 77 77 77 2d 31 2e 70 61 79 70 61 6c 2e 63 6f 6d 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 2c 20 31 2e 31 20 76 61 72 6e 69 73 68 2c 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 44 61 74 65 3a 20 46 72 69 2c 20 32 36 20 41 70 72 20 32 30 32 34 20 31 32 3a 32 33 3a 31 37 20 47 4d 54 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c 6f Data Ascii: Traceparent: 00-0000000000000000000f2102714f3b6b-415d4ea832f23f04-01DC: ccg11-origin-www-1.paypal.comVia: 1.1 varnish, 1.1 varnish, 1.1 varnishDate: Fri, 26 Apr 2024 12:23:17 GMTStrict-Transport-Security: max-age=63072000; includeSubDomains; prelo
2024-04-26 12:23:17 UTC	1378	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 73 74 79 6c 65 3e 0a 09 09 2e 67 72 65 63 61 70 74 63 68 61 2d 62 61 64 67 65 7b 0a 09 09 09 62 6f 74 74 6f 6d 3a 20 33 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 7d 0a 09 3c 2f 73 74 79 6c 65 3e 0a 09 3c 73 63 72 69 70 74 3e 0a 0a 09 09 76 61 72 20 70 70 5f 6c 6f 63 5f 6d 61 70 20 3d 20 7b 22 61 72 5f 45 47 22 3a 22 61 72 22 2c 22 64 61 5f 44 4b 22 3a 22 64 61 22 2c 22 64 65 5f 44 45 22 3a 22 64 65 22 2c 22 64 65 5f 44 45 5f 41 54 22 3a 22 64 65 2d 41 54 22 2c 22 64 65 5f 44 45 5f 43 48 Data Ascii: <html><head><meta name="viewport" content="width=device-width, initial-scale=1.0"><style>.grecaptcha-badge{bottom: 3px !important;}</style><script>var pp_loc_map = {"ar_EG":"ar","da_DK":"da","de_DE":"de","de_DE_AT":"de-AT","de_DE_CH
2024-04-26 12:23:17 UTC	1378	IN	Data Raw: 6f 6d 27 5d 3b 0a 09 09 09 76 61 72 20 74 61 72 67 65 74 4f 72 69 67 69 6e 20 3d 20 27 2f 27 3b 0a 09 09 09 74 72 79 7b 0a 09 09 09 09 69 66 28 21 77 69 6e 64 6f 77 2e 55 52 4c 29 7b 0a 09 09 09 09 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 4f 72 69 67 69 6e 3b 0a 09 09 09 09 7d 0a 0a 09 09 09 09 76 61 72 20 6f 72 69 67 69 6e 55 72 6c 20 3d 20 6e 65 77 20 77 69 6e 64 6f 77 2e 55 52 4c 28 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 29 3b 0a 09 09 09 09 69 66 28 21 6f 72 69 67 69 6e 55 72 6c 20 7c 7c 20 21 6f 72 69 67 69 6e 55 72 6c 2e 68 6f 73 74 6e 61 6d 65 20 7c 7c 20 74 79 70 65 6f 66 20 6f 72 69 67 69 6e 55 72 6c 2e 68 6f 73 74 6e 61 6d 65 20 21 3d 3d 20 22 73 74 72 69 6e 67 22 29 7b 0a 09 09 09 09 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 4f 72 Data Ascii: om'];var targetOrigin = '/';try{if(!window.URL){return targetOrigin;}var originUrl = new window.URL(document.referrer);if(!originUrl \|\| !originUrl.hostname \|\| typeof originUrl.hostname !== "string"){return targetOr
2024-04-26 12:23:17 UTC	1378	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 09 74 72 79 20 7b 0a 09 09 09 09 09 09 67 72 65 63 61 70 74 63 68 61 2e 65 6e 74 65 72 70 72 69 73 65 2e 65 78 65 63 75 74 65 28 64 61 74 61 2e 73 6b 65 79 2c 20 7b 61 63 74 69 6f 6e 3a 20 64 61 74 61 2e 61 63 74 69 6f 6e 7d 29 0a 09 09 09 09 09 09 09 09 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 74 6f 6b 65 6e 29 20 7b 0a 09 09 09 09 09 09 09 09 09 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 0a 09 09 09 09 09 09 09 09 09 09 74 6f 6b 65 6e 3a 20 74 6f 6b 65 6e 2c 0a 09 09 09 09 09 09 09 09 09 09 73 6f 75 72 63 65 3a 20 27 61 64 66 72 61 6d 65 27 2c 0a 09 09 09 09 09 09 09 09 09 09 72 65 6e 64 65 72 53 74 61 72 74 54 69 6d 65 Data Ascii: unction() {try {grecaptcha.enterprise.execute(data.skey, {action: data.action}).then(function(token) {window.parent.postMessage(JSON.stringify({token: token,source: 'adframe',renderStartTime
2024-04-26 12:23:17 UTC	1165	IN	Data Raw: 6f 73 74 4d 65 73 73 61 67 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 0a 09 09 09 09 09 09 65 72 72 6f 72 3a 20 27 65 72 72 6f 72 5f 70 61 72 73 69 6e 67 5f 64 61 74 61 27 2c 0a 09 09 09 09 09 09 73 6f 75 72 63 65 3a 20 27 61 64 66 72 61 6d 65 27 2c 0a 09 09 09 09 09 09 61 63 74 69 6f 6e 3a 27 6c 6f 67 44 61 74 61 27 2c 0a 09 09 09 09 09 09 70 61 67 65 3a 27 52 45 43 41 50 54 43 48 41 5f 56 33 5f 45 4e 54 27 2c 0a 09 09 09 09 09 7d 29 2c 20 67 65 74 54 61 72 67 65 74 4f 72 69 67 69 6e 28 29 29 3b 0a 09 09 09 09 09 72 65 74 75 72 6e 3b 0a 09 09 09 09 7d 0a 0a 09 09 09 09 2f 2f 20 49 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 20 73 6f 75 72 63 65 20 6f 72 20 72 65 71 75 65 73 74 20 64 61 74 61 0a 09 09 09 09 69 66 20 28 21 64 61 74 61 20 7c 7c 20 Data Ascii: ostMessage(JSON.stringify({error: 'error_parsing_data',source: 'adframe',action:'logData',page:'RECAPTCHA_V3_ENT',}), getTargetOrigin());return;}// Invalid request source or request dataif (!data \|\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49861	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:17 UTC	550	OUT	GET /ice/Login.dfe4e44db7dc076499b3.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:17 UTC	853	IN	HTTP/1.1 200 OK Connection: close Content-Length: 70282 Cache-Control: s-maxage=31536000, public,max-age=86400 Content-Type: application/javascript Etag: "66064785-1128a" Last-Modified: Fri, 29 Mar 2024 04:45:57 GMT Paypal-Debug-Id: a97d622e61845 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000a97d622e61845-01e05b2807874aeb-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:17 GMT X-Served-By: cache-dfw-kdfw8210173-DFW, cache-gnv1820020-GNV X-Cache: HIT, MISS X-Cache-Hits: 2, 0 X-Timer: S1714134197.480274,VS0,VE23 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:17 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 38 5d 2c 7b 39 34 31 30 38 3a 28 65 2c 6e 2c 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 64 28 6e 2c 7b 5f 31 3a 28 29 3d 3e 72 2c 45 5a 3a 28 29 3d 3e 69 2c 4f 31 3a 28 29 3d 3e 61 2c 59 62 3a 28 29 3d 3e 6f 2c 43 34 3a 28 29 3d 3e 63 2c 65 42 3a 28 29 3d 3e 6c 2c 72 38 3a 28 29 3d 3e 5f 7d 29 3b 76 61 72 20 72 3d 7b 54 52 59 5f 41 4e 4f 54 48 45 52 5f 57 41 59 3a 22 2f 61 75 74 68 66 6c 6f 77 22 2c 41 55 54 48 46 4c 4f 57 3a 22 2f 61 75 74 68 66 6c Data Ascii: (self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[88],{94108:(e,n,t)=>{"use strict";t.d(n,{_1:()=>r,EZ:()=>i,O1:()=>a,Yb:()=>o,C4:()=>c,eB:()=>l,r8:()=>_});var r={TRY_ANOTHER_WAY:"/authflow",AUTHFLOW:"/authfl
2024-04-26 12:23:17 UTC	16384	IN	Data Raw: 5c 6e 20 20 20 20 70 75 62 6c 69 63 43 72 65 64 65 6e 74 69 61 6c 54 79 70 65 20 40 63 6c 69 65 6e 74 5c 6e 20 20 20 20 70 75 62 6c 69 63 43 72 65 64 65 6e 74 69 61 6c 56 65 72 69 66 69 65 64 20 40 63 6c 69 65 6e 74 5c 6e 20 20 20 20 72 65 64 69 72 65 63 74 55 72 69 20 40 63 6c 69 65 6e 74 5c 6e 20 20 20 20 72 65 6d 65 6d 62 65 72 65 64 55 73 65 72 20 40 63 6c 69 65 6e 74 5c 6e 20 20 20 20 72 65 74 75 72 6e 55 72 69 20 40 63 6c 69 65 6e 74 5c 6e 20 20 20 20 73 68 6f 77 54 72 61 6e 73 69 74 69 6f 6e 20 40 63 6c 69 65 6e 74 5c 6e 20 20 20 20 73 68 6f 77 4e 6f 6e 54 72 61 6e 73 70 61 72 65 6e 74 4d 61 73 6b 20 40 63 6c 69 65 6e 74 5c 6e 20 20 20 20 73 68 6f 77 50 77 64 53 6c 69 64 69 6e 67 54 72 61 6e 73 69 74 69 6f 6e 53 74 61 74 65 20 40 63 6c 69 65 6e 74 Data Ascii: \n publicCredentialType @client\n publicCredentialVerified @client\n redirectUri @client\n rememberedUser @client\n returnUri @client\n showTransition @client\n showNonTransparentMask @client\n showPwdSlidingTransitionState @client
2024-04-26 12:23:17 UTC	16384	IN	Data Raw: 2e 5a 29 28 6e 2c 4e 2e 69 50 2e 54 45 4e 41 4e 54 2c 45 29 2c 28 30 2c 61 2e 5a 29 28 6e 2c 4e 2e 69 50 2e 43 4f 4e 54 45 58 54 5f 49 44 2c 4c 29 2c 28 30 2c 61 2e 5a 29 28 6e 2c 4e 2e 69 50 2e 50 55 42 4c 49 43 5f 43 52 45 44 5f 54 59 50 45 2c 55 29 2c 6e 29 29 29 7d 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 28 30 2c 54 2e 5a 29 28 49 28 29 2e 6d 61 72 6b 28 28 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 63 2c 6c 2c 5f 2c 73 2c 75 2c 64 2c 54 2c 70 2c 50 2c 4f 2c 41 2c 66 2c 76 2c 6d 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 49 28 29 2e 77 72 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 3b 3b 29 73 77 69 74 63 68 28 65 2e 70 72 65 76 3d 65 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 69 Data Ascii: .Z)(n,N.iP.TENANT,E),(0,a.Z)(n,N.iP.CONTEXT_ID,L),(0,a.Z)(n,N.iP.PUBLIC_CRED_TYPE,U),n)))},V=function(){var e=(0,T.Z)(I().mark((function e(){var r,i,o,c,l,_,s,u,d,T,p,P,O,A,f,v,m=arguments;return I().wrap((function(e){for(;;)switch(e.prev=e.next){case 0:i
2024-04-26 12:23:17 UTC	16384	IN	Data Raw: 54 2e 5a 29 28 49 28 29 2e 6d 61 72 6b 28 28 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 49 28 29 2e 77 72 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 3b 3b 29 73 77 69 74 63 68 28 65 2e 70 72 65 76 3d 65 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 74 3d 4e 2e 4b 41 2e 4c 4f 47 49 4e 5f 57 49 54 48 5f 50 41 53 53 57 4f 52 44 5f 49 4e 53 54 45 41 44 5b 72 2e 74 79 70 65 3d 3d 3d 4e 2e 48 45 2e 47 45 54 5f 43 4f 44 45 3f 4e 2e 48 45 2e 47 45 54 5f 43 4f 44 45 3a 4e 2e 48 45 2e 45 52 52 4f 52 5d 2c 75 28 74 2e 46 50 54 49 29 2c 64 28 74 2e 43 41 4c 29 2c 65 2e 6e 65 78 74 3d 35 2c 6e 28 7b 76 61 72 69 61 62 6c 65 73 3a 7b 73 68 6f 77 54 72 61 6e 73 69 74 69 6f 6e 3a 21 31 2c 73 68 6f 77 50 Data Ascii: T.Z)(I().mark((function e(){var t;return I().wrap((function(e){for(;;)switch(e.prev=e.next){case 0:return t=N.KA.LOGIN_WITH_PASSWORD_INSTEAD[r.type===N.HE.GET_CODE?N.HE.GET_CODE:N.HE.ERROR],u(t.FPTI),d(t.CAL),e.next=5,n({variables:{showTransition:!1,showP
2024-04-26 12:23:18 UTC	4746	IN	Data Raw: 64 3a 7b 74 79 70 65 3a 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2c 6e 61 6d 65 3a 6e 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2c 73 74 61 74 75 73 3a 74 2c 64 61 74 61 3a 72 7d 7d 29 7d 2c 63 61 6c 53 74 61 74 75 73 3a 73 2c 66 70 74 69 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 28 30 2c 69 2e 6a 29 28 29 3b 6e 26 26 6e 2e 74 72 61 63 6b 28 7b 6c 6f 67 67 65 72 3a 6c 2c 70 61 79 6c 6f 61 64 3a 65 7d 29 7d 2c 73 70 6c 75 6e 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 28 30 2c 69 2e 6a 29 28 29 3b 6e 26 26 6e 2e 74 72 61 63 6b 28 7b 6c 6f 67 67 65 72 3a 5f 2c 70 61 79 6c 6f 61 64 3a 65 7d 29 7d 2c 66 6c 75 73 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 28 30 2c 69 2e 6a 29 28 29 3b 72 65 74 75 72 6e 20 65 3f Data Ascii: d:{type:e.toUpperCase(),name:n.toUpperCase(),status:t,data:r}})},calStatus:s,fpti:function(e){var n=(0,i.j)();n&&n.track({logger:l,payload:e})},splunk:function(e){var n=(0,i.j)();n&&n.track({logger:_,payload:e})},flush:function(){var e=(0,i.j)();return e?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49862	151.101.2.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:17 UTC	383	OUT	GET /ice/content/c20240322103542/US/en.json HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:17 UTC	850	IN	HTTP/1.1 200 OK Connection: close Content-Length: 68275 Cache-Control: s-maxage=31536000, public,max-age=86400 Content-Type: application/json Etag: "660325ff-10ab3" Last-Modified: Tue, 26 Mar 2024 19:46:07 GMT Paypal-Debug-Id: 1b8e29e8bb57c Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000001b8e29e8bb57c-554226c2e9c2fce0-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:17 GMT X-Served-By: cache-dfw-kdal2120134-DFW, cache-pdk-kpdk1780144-PDK X-Cache: HIT, HIT X-Cache-Hits: 2, 1 X-Timer: S1714134198.613598,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:17 UTC	16384	IN	Data Raw: 7b 22 61 75 74 68 42 75 74 74 6f 6e 22 3a 7b 22 62 75 74 74 6f 6e 22 3a 7b 22 63 6f 6e 6e 65 63 74 22 3a 22 43 6f 6e 6e 65 63 74 20 77 69 74 68 20 50 61 79 50 61 6c 22 2c 22 6c 6f 67 49 6e 22 3a 22 4c 6f 67 20 69 6e 20 77 69 74 68 20 50 61 79 50 61 6c 22 2c 22 73 69 67 6e 55 70 22 3a 22 53 69 67 6e 20 75 70 20 77 69 74 68 20 50 61 79 50 61 6c 22 2c 22 63 6f 6e 74 69 6e 75 65 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 20 50 61 79 50 61 6c 22 7d 7d 2c 22 61 75 74 68 66 6c 6f 77 22 3a 7b 22 70 61 79 70 61 6c 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 4c 69 73 74 22 3a 7b 22 68 65 61 64 65 72 22 3a 22 51 75 69 63 6b 20 73 65 63 75 72 69 74 79 20 63 68 65 63 6b 22 2c 22 73 75 62 68 65 61 64 65 72 22 3a 22 57 65 20 6a 75 73 74 20 6e 65 65 64 20 73 6f 6d 65 20 Data Ascii: {"authButton":{"button":{"connect":"Connect with PayPal","logIn":"Log in with PayPal","signUp":"Sign up with PayPal","continue":"Continue with PayPal"}},"authflow":{"paypal":{"challengeList":{"header":"Quick security check","subheader":"We just need some
2024-04-26 12:23:17 UTC	16384	IN	Data Raw: 63 6b 22 7d 7d 2c 22 65 72 72 6f 72 22 3a 7b 22 6c 69 6e 6b 22 3a 7b 22 65 78 70 69 72 65 64 22 3a 22 59 6f 75 72 20 6f 6e 62 6f 61 72 64 69 6e 67 20 6c 69 6e 6b 20 68 61 73 20 65 78 70 69 72 65 64 2e 20 3c 62 72 3e 20 43 6f 6e 74 61 63 74 20 73 75 70 70 6f 72 74 20 74 65 61 6d 20 74 6f 20 72 65 63 65 69 76 65 20 6e 65 77 20 6c 69 6e 6b 2e 22 7d 2c 22 77 72 6f 6e 67 49 6e 66 6f 22 3a 22 53 6f 6d 65 20 6f 66 20 79 6f 75 72 20 69 6e 66 6f 20 69 73 6e 27 74 20 63 6f 72 72 65 63 74 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 22 2c 22 73 6f 6d 65 74 68 69 6e 67 57 72 6f 6e 67 22 3a 22 53 6f 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 21 22 2c 22 6f 74 70 22 3a 7b 22 77 72 6f 6e 67 22 3a 22 50 6c 65 61 73 65 20 63 68 65 63 6b 20 74 68 65 Data Ascii: ck"}},"error":{"link":{"expired":"Your onboarding link has expired. <br> Contact support team to receive new link."},"wrongInfo":"Some of your info isn't correct. Please try again.","somethingWrong":"Something went wrong!","otp":{"wrong":"Please check the
2024-04-26 12:23:17 UTC	16384	IN	Data Raw: 7a 61 74 69 6f 6e 20 69 73 6e 27 74 20 73 65 74 20 75 70 20 66 6f 72 20 53 53 4f 2e 20 4c 6f 67 20 69 6e 20 77 69 74 68 20 70 61 73 73 77 6f 72 64 20 69 6e 73 74 65 61 64 2e 22 2c 22 62 75 74 74 6f 6e 22 3a 7b 22 6e 65 78 74 22 3a 22 4e 65 78 74 22 7d 7d 7d 2c 22 73 65 63 6f 6e 64 61 72 79 55 73 65 72 4f 6e 62 6f 61 72 64 69 6e 67 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 54 65 6d 70 6c 61 74 65 22 3a 7b 22 68 65 61 64 65 72 22 3a 22 51 75 69 63 6b 20 73 65 63 75 72 69 74 79 20 63 68 65 63 6b 22 2c 22 73 75 62 68 65 61 64 65 72 22 3a 22 57 65 20 6a 75 73 74 20 6e 65 65 64 20 73 6f 6d 65 20 61 64 64 69 74 69 6f 6e 61 6c 20 69 6e 66 6f 20 74 6f 20 63 6f 6e 66 69 72 6d 20 69 74 27 73 20 79 6f 75 2e 22 2c 22 65 6d 61 69 6c 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 Data Ascii: zation isn't set up for SSO. Log in with password instead.","button":{"next":"Next"}}},"secondaryUserOnboarding":{"challengeTemplate":{"header":"Quick security check","subheader":"We just need some additional info to confirm it's you.","email":{"challenge
2024-04-26 12:23:17 UTC	16384	IN	Data Raw: 65 6e 74 5f 74 65 6d 70 6c 61 74 65 5f 6e 61 74 69 76 65 5f 73 64 6b 5f 67 72 6f 75 70 22 3a 22 57 65 e2 80 99 6c 6c 20 73 68 61 72 65 20 79 6f 75 72 20 65 6d 61 69 6c 2c 20 73 68 69 70 70 69 6e 67 20 61 64 64 72 65 73 73 2c 20 61 6e 64 20 74 68 65 20 6c 61 73 74 20 34 20 64 69 67 69 74 73 20 6f 66 20 79 6f 75 72 20 70 61 79 6d 65 6e 74 20 6d 65 74 68 6f 64 20 77 69 74 68 20 7b 63 6c 69 65 6e 74 5f 64 69 73 70 6c 61 79 5f 6e 61 6d 65 7d 2e 20 59 6f 75 20 63 61 6e 20 75 70 64 61 74 65 20 74 68 69 73 20 70 65 72 6d 69 73 73 69 6f 6e 20 61 74 20 61 6e 79 20 74 69 6d 65 20 69 6e 20 79 6f 75 72 20 50 61 79 50 61 6c 20 61 63 63 6f 75 6e 74 2e 22 2c 22 63 6f 6e 74 65 6e 74 5f 74 65 6d 70 6c 61 74 65 5f 69 7a 65 74 74 6c 65 5f 67 72 6f 75 70 22 3a 22 42 79 20 63 Data Ascii: ent_template_native_sdk_group":"Well share your email, shipping address, and the last 4 digits of your payment method with {client_display_name}. You can update this permission at any time in your PayPal account.","content_template_izettle_group":"By c
2024-04-26 12:23:17 UTC	2739	IN	Data Raw: 74 20 6d 65 74 68 6f 64 73 20 6c 69 6e 6b 65 64 20 74 6f 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 20 70 65 72 20 3c 61 20 68 72 65 66 3d 5c 22 7b 70 61 79 70 61 6c 5f 70 6f 6c 69 63 79 5f 75 72 6c 7d 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 3e 50 61 79 50 61 6c 20 50 6f 6c 69 63 69 65 73 2e 3c 2f 61 3e 22 7d 2c 22 61 62 6f 75 74 22 3a 7b 22 70 32 70 22 3a 22 3c 75 6c 20 63 6c 61 73 73 3d 5c 22 63 61 74 65 67 6f 72 79 41 74 74 72 69 62 75 74 65 73 4c 69 73 74 5c 22 3e 3c 6c 69 3e 43 6f 6d 6d 75 6e 69 63 61 74 65 20 70 65 72 73 6f 6e 2d 74 6f 2d 70 65 72 73 6f 6e 20 70 61 79 6d 65 6e 74 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 74 6f 20 50 61 79 50 61 6c 3c 2f 6c 69 3e 3c 6c 69 3e 45 6e 61 62 6c 65 20 79 6f 75 20 74 6f 20 72 65 71 75 65 73 Data Ascii: t methods linked to your account per <a href=\"{paypal_policy_url}\" target=\"_blank\">PayPal Policies.</a>"},"about":{"p2p":"<ul class=\"categoryAttributesList\"><li>Communicate person-to-person payment instructions to PayPal</li><li>Enable you to reques

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49864	142.250.217.227	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:17 UTC	590	OUT	GET /recaptcha/enterprise.js?render=6LdCCOUUAAAAAHTE-Snr6hi4HJGtJk_d1_ce-gWB&hl=en HTTP/1.1 Host: www.recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:18 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Fri, 26 Apr 2024 12:23:18 GMT Date: Fri, 26 Apr 2024 12:23:18 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 12:23:18 UTC	727	IN	Data Raw: 36 62 37 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 45 3d 27 65 6e 74 65 72 70 72 69 73 65 27 2c 61 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 2c 67 72 3d 61 5b 45 5d 3d 61 5b 45 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f Data Ascii: 6b7/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['_
2024-04-26 12:23:18 UTC	999	IN	Data Raw: 47 4a 69 42 75 2f 4c 32 47 66 51 63 70 6c 43 2f 51 6b 44 4a 4f 53 31 66 42 6f 58 35 51 34 2f 48 4c 66 54 31 64 58 70 44 31 74 64 37 43 32 70 65 58 45 33 62 53 43 4a 69 59 64 77 6f 46 63 4e 67 51 41 41 41 43 53 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 4a 6c 59 32 46 77 64 47 4e 6f 59 53 35 75 5a 58 51 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 79 49 73 49 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 Data Ascii: GJiBu/L2GfQcplC/QkDJOS1fBoX5Q4/HLfT1dXpD1td7C2peXE3bSCJiYdwoFcNgQAAACSeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0e
2024-04-26 12:23:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49863	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:18 UTC	658	OUT	GET /paypal-ui/fonts/PayPalOpen-Regular.woff2 HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://id.venmo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.paypalobjects.com/paypal-ui/web/fonts-and-normalize/2-0-0/fonts-and-normalize.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:18 UTC	1066	IN	HTTP/1.1 200 OK Connection: close Content-Length: 27457 Cache-Control: s-maxage=31536000, public,max-age=3600 Etag: "6298f2c0-6b41" Last-Modified: Thu, 02 Jun 2022 17:26:24 GMT Paypal-Debug-Id: ef34c08dd6d3 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000000ef34c08dd6d3-00df6852e9101a70-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish log-timing: fetch=26476,misspass=159,do_stream=0 log-origin: shield=DFW,src_ip=140.248.68.46,alternate_path=0,ip=140.248.68.46,port=443,name=shield_ssl_cache_dfw_kdfw8210046_DFW,status=200,reason=OK,method=GET,url="/paypal-ui/fonts/PayPalOpen-Regular.woff2",host=www.paypalobjects.com Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:18 GMT X-Served-By: cache-dfw-kdfw8210046-DFW, cache-gnv1820027-GNV X-Cache: HIT, HIT X-Cache-Hits: 2524, 1948 X-Timer: S1714134198.229249,VS0,VE0 X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * CONTENT-TYPE: application/font-woff2 Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:18 UTC	1379	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6b 41 00 0e 00 00 00 01 02 2c 00 00 69 83 00 01 00 00 00 00 69 dc 00 00 01 65 00 00 03 c5 00 00 00 00 00 00 00 00 1b 81 85 1c 1c 64 06 60 00 85 0c 11 08 0a 82 b7 70 82 81 7f 01 36 02 24 03 90 40 0b 88 22 00 04 20 05 89 7b 07 9a 78 0c 07 1b 26 e2 17 14 bd f5 47 38 4f 20 66 b1 56 3e c7 2a 94 71 7b 84 db 06 a1 16 47 60 f3 c7 46 06 82 8d 03 80 b9 97 1a b3 ff ff cf 4a 3a c6 10 c8 c6 10 55 ab 7a ff 05 be 15 36 7d 37 1e 16 04 66 95 74 4d d5 2a bb a4 72 8e 90 de a4 ce 50 2d 10 75 f9 11 95 2a 20 b5 2d a2 8b 8b 97 02 ec 13 0e 1d d3 ed 25 8c 8b ea a0 ca 2e d7 3c c2 4a 3d ee 87 96 7b 52 a6 8a 88 68 6d 4c 5c 99 c2 8a d9 6b 6e 7f ce dd d6 1b f8 68 bc 74 83 3e 18 9a 10 08 14 ec 2f ca 1d c3 fa bd f3 55 09 61 f1 d3 c6 b6 b5 a1 15 21 4d a0 5c Data Ascii: wOF2kA,iied`p6$@" {x&G8O fV>q{G`FJ:Uz6}7ftMrP-u* -%.<J={RhmL\knht>/Ua!M\
2024-04-26 12:23:18 UTC	1379	IN	Data Raw: 85 a7 e8 0f 3b 9a c1 f6 5d 80 a1 80 69 48 5f 91 f5 3e dd ae b0 53 43 34 85 5b b0 35 2b 5a 15 77 94 b9 4a 55 17 5d 80 a1 80 c9 a8 31 bf c8 5c 62 ee f8 00 ea 5a f5 1b ea bf 35 c4 17 6a 06 35 3a f3 f1 4f e4 4e b8 91 e6 a0 e9 c6 4b f4 87 f5 cf 26 34 cf 6b 37 0e fd a2 65 68 4b 32 61 6b d6 2a e0 16 b4 3a 6d 5a 3b a9 cb d8 32 47 43 fb a4 8e 27 43 37 53 c4 22 f0 f4 dd 32 5f b6 ac 01 d2 a6 a5 bf a3 bf 0b 37 32 ff 66 01 2f 88 90 58 96 37 0c f9 46 7b 3e a1 e9 8a e9 06 9c 64 b9 60 f9 c9 6a b7 4e d2 95 37 e7 82 63 be 3c 32 a9 0d 2d 58 1d 92 93 b1 35 ef 24 3f 75 b8 56 a4 50 9e dc a6 df b2 de b7 b1 de c7 d9 24 36 9d 2d 6e cb 4c b1 1f 35 c8 b6 e4 32 42 45 02 cf ef 87 aa da 9d 2c 28 ad 9c 30 ea d8 65 ff de 6a dd 4a 7f 84 b2 9b 3c ed cf 3c e0 8b 8f 52 ef 5e bf fd 76 6d f5 Data Ascii: ;]iH_>SC4[5+ZwJU]1\bZ5j5:ONK&4k7ehK2ak*:mZ;2GC'C7S"2_72f/X7F{>d`jN7c<2-X5$?uVP$6-nL52BE,(0ejJ<<R^vm
2024-04-26 12:23:18 UTC	1379	IN	Data Raw: 85 4a e3 1e 4c 1f 6c c1 c1 23 20 36 c9 be 9f 84 07 3e 01 21 11 31 09 29 19 39 c5 f2 c3 fc 95 67 52 41 51 41 4d 43 4b c7 d0 0e 33 ce 70 71 f3 f0 c6 8f a0 70 a2 f4 10 65 c4 35 06 4d 98 12 13 2f 40 2b 29 2d fb f0 67 2d ab d5 ef 7e b7 7e 88 76 61 20 50 dd 33 ab 9f 1a d8 6f 98 31 b7 c1 e8 07 c4 f5 21 5f 37 76 bb 82 54 a8 a6 6b 94 6a 53 f5 00 2a 8d 7b 37 ab 61 26 c1 16 1c 3c 02 62 93 04 b8 84 07 3e 01 21 11 31 09 29 19 39 c5 4f 2b 1b 56 96 55 79 54 15 4a 2a a8 69 68 e9 18 da e1 86 33 5c dc 3c bc f1 23 28 2c da 43 4a 23 55 63 0a 13 a6 c4 c4 0b 00 92 d2 b2 7f ee 59 45 6a 2b ae be ad b5 ba f2 a9 fc ba b0 0b 03 81 9a d2 b9 cf ab ce 2f 28 dc 3d 37 f5 a9 81 a0 a1 71 a6 b7 43 00 6e 36 2d 1d a7 94 27 90 dd 8e 0c 44 93 00 56 2e 7e 64 ab ee e2 dd 03 90 c8 46 66 20 4e bb Data Ascii: JLl# 6>!1)9gRAQAMCK3pqpe5M/@+)-g-~~va P3o1!_7vTkjS{7a&<b>!1)9O+VUyTJih3\<#(,CJ#UcYEj+/(=7qCn6-'DV.~dFf N
2024-04-26 12:23:18 UTC	1379	IN	Data Raw: d5 f5 aa 59 28 ee 34 3c e1 13 10 12 11 93 90 92 91 53 78 4c 45 4d 43 4b c7 d0 0e 2b 4e e2 0a 37 0f 6f fc 08 0a 8b 1a 32 92 31 4c 98 12 13 6f 40 2d 69 69 d9 e9 47 67 21 55 84 21 50 e5 a5 f3 0b 0a 17 63 27 16 57 55 34 be ea 64 4d ed ee 59 d5 7f 73 7d c5 22 88 19 b3 88 b3 06 54 32 7d ef aa 27 7b fb a6 23 de a9 b6 ce e6 32 99 19 86 39 d4 80 3a 50 83 10 96 90 7a d5 40 0d 6a bb 1e 83 ca b6 71 4d 3a de bb 2c 73 35 d7 df 6c c9 6b 0f c3 30 0c 53 06 cb 52 af d7 eb f5 7a 3d 00 00 cc e5 31 15 35 0d 2d 1d 43 9c e2 8e 97 f6 31 fc 24 80 a0 90 b0 88 68 86 30 62 2c 13 98 12 13 9f ce 30 00 4c 42 52 4a 5a 66 95 bd 10 7c 2c a4 42 28 0c 8e 40 a2 da ab cf 6f 41 e1 62 1c c4 e2 aa 6a 19 5f 7d 7d c3 8c e6 c6 a6 99 75 c4 06 64 72 fa a0 ee ba dc e8 3e f5 a3 ac 53 b5 d0 a4 30 12 25 Data Ascii: Y(4<SxLEMCK+N7o21Lo@-iiGg!U!Pc'WU4dMYs}"T2}'{#29:Pz@jqM:,s5lk0SRz=15-C1$h0b,0LBRJZf\|,B(@oAbj_}}udr>S0%
2024-04-26 12:23:18 UTC	1379	IN	Data Raw: 49 56 34 bb 10 05 3c c8 b5 00 f3 8d dc 43 2f 0b 95 52 d8 80 de 9c bf d3 74 db 2c 88 d8 a5 96 80 00 01 19 f8 60 82 02 66 9a fe 72 58 b0 71 9b 80 36 b1 8b 0a 97 3e 70 4b a8 cd 2b 37 93 77 dc 3d 3a de 84 87 32 ea cd 23 c1 38 c2 fa 30 18 3d ca 4b c4 1b 0b f6 83 90 d3 47 4d 17 ea 61 eb 8d 20 28 2e 07 35 d7 5e 7d f7 2b 92 fd ef 3e 30 23 d4 09 b3 3a 3d 3c 65 74 8f a9 cf 78 18 eb 7c 0e a9 2a 88 a7 cf b6 3c 3b 59 5c 1a 08 a1 a0 07 e6 54 9f 2a a1 ba 36 22 2f ba 1d d7 de d3 5f 1d 17 cc 9f 3d 07 fa 95 bd 69 20 af 93 fb 25 b2 d2 e1 9c 7f ab 21 b6 b4 56 cd 3d a3 08 97 72 de d7 26 c5 31 91 ac 48 4d 46 4e e1 31 15 35 0d 2d 1d 03 bf a0 b0 e8 3b 9e 3d 38 8e e3 2e eb 76 21 c0 10 28 38 f5 53 99 c5 48 22 c1 5c 2d 35 09 b6 4c 30 55 f2 a9 d3 69 64 ea 18 79 03 0c ed cc c0 b5 be Data Ascii: IV4<C/Rt,`frXq6>pK+7w=:2#80=KGMa (.5^}+>0#:=<etx\|<;Y\T6"/_=i %!V=r&1HMFN15-;=8.v!(8SH"\-5L0Uidy
2024-04-26 12:23:18 UTC	1379	IN	Data Raw: 91 c0 d0 c5 7f 4e 4d ec 4a 1e 90 c9 c8 d9 dd 3b 35 b2 0f ad ae 12 cb eb 5e 3f 2c 95 92 e0 bd 03 ee b4 38 9a 9f 7d 68 60 d9 d4 75 94 2a 08 41 d2 d7 bd e9 ce 15 17 5a 0f 25 ae b5 83 c8 40 85 9a 04 72 55 47 3e 9b 17 02 e8 73 68 67 3e 85 24 14 d0 e0 91 ef ce 0d 0d 09 49 d3 c5 c9 68 c1 83 f8 a7 29 5c e9 b2 2a 60 48 4b 7b a4 07 27 db 7d 73 a4 9d 87 42 1a cb 81 82 b8 7a 16 04 0d 39 8d 0a 12 6d 76 44 a9 5e c9 bb 0c 34 f7 a5 22 4f 8e 41 7b 23 3c 9a 47 27 c7 b8 f5 46 d0 9a 27 01 b4 e4 04 ad 16 e8 30 1d 60 3a 0e f2 1d da 47 30 79 38 1b d3 f7 f5 c2 99 3a 81 32 ba 27 17 2c 8c be 3e bc 3d 60 e8 aa 74 70 bb 92 07 64 1e 78 92 9d 1a d9 87 46 aa b4 04 74 8f 6d 29 1f 0f f7 ad 9c 0a a7 c5 21 84 f6 a1 bd b8 db c4 75 ba f4 cf 52 0c be f0 1c 43 69 ae 6e 84 84 cb 36 93 0f f9 04 Data Ascii: NMJ;5^?,8}h`uAZ%@rUG>shg>$Ih)\`HK{'}sBz9mvD^4"OA{#<G'F'0`:G0y8:2',>=`tpdxFtm)!uRCin6
2024-04-26 12:23:18 UTC	1379	IN	Data Raw: 26 b4 3a b0 f2 f0 61 49 19 4a e4 dc 54 fb 4c 58 18 8c 25 b0 7e 6d de 42 c3 82 c6 db 21 a3 f7 ba a1 3f be 24 7e 6e 57 57 f3 37 83 5b e7 63 46 19 35 37 d5 f8 e8 b7 5a a4 37 36 14 00 ad d7 6f 29 98 50 15 1a 02 94 f1 f6 b1 4c 03 7d 2a 99 1a 5c a3 c5 b9 84 da 45 05 e7 72 3d ce ac 61 72 94 15 99 1e ce 93 3a e5 aa 59 e0 4d c3 bb 08 40 a5 d1 28 4f f0 89 f1 29 15 1a 23 f4 22 8b 82 8f d3 d5 cd cd e1 4e 04 a4 4a 25 db 7c 8f d0 55 68 55 60 63 a8 b9 9d 35 57 a5 d2 bc aa 2a 82 59 3d 6e 5d b1 2a 41 c3 4c c0 7d 15 1b 0a 39 16 fa d4 70 7a 4a e1 67 00 c8 7c 52 33 e1 26 04 57 74 2f d3 2d dd 74 2f e3 1e f6 04 a3 c4 e5 05 fe 0e 27 c6 48 f3 ba 02 27 63 ec 62 b3 c0 49 80 c5 30 5b 60 4f c9 51 a4 46 d2 45 c4 85 8b bd 44 70 14 d4 98 29 f9 31 a4 d4 2b 5b 94 96 e4 42 6d 57 d0 26 ab Data Ascii: &:aIJTLX%~mB!?$~nWW7[cF57Z76o)PL}\Er=ar:YM@(O)#"NJ%\|UhU`c5WY=n]*AL}9pzJg\|R3&Wt/-t/'H'cbI0[`OQFEDp)1+[BmW&
2024-04-26 12:23:18 UTC	1379	IN	Data Raw: 5c 3e 7b c8 7f 07 5d 5d da d8 ff 4c 1c df 77 c4 11 20 ee a3 c5 6d 49 40 c7 8c 0c 11 5b b7 b5 bf 41 c5 24 1a 58 de f2 6c 04 3f 11 b9 23 6f dd fd 99 13 27 a0 06 6a c5 e3 e5 67 dd d7 1c 5c 5a 68 99 b3 b8 71 80 aa 99 d2 59 ff 8c fd 95 d4 9f 38 5b 47 66 b4 5b ce 13 08 8c 0d 8b 89 d5 d1 90 28 2c 41 48 b5 6e 78 ae b5 0a 58 7d e4 cb d8 3e 43 8b 16 b7 49 d3 3a 1b 52 e6 f5 90 d5 32 22 9c e6 c3 22 24 b1 5c b0 62 23 ba 59 08 e1 da 79 41 e5 30 b4 aa 52 e1 f7 64 0f 36 98 58 cb 26 40 e8 84 41 b3 45 8b c0 29 ad e2 55 a5 2a 70 12 0c 03 a3 47 4d e5 78 4e 03 03 ef 69 7e 2d 4b cb 20 36 a7 92 4a b0 21 39 b7 6c 73 1c 07 be f6 02 ba e2 6e 3c 9c 7d 33 61 ff 1c 13 25 d4 18 cb 80 ea 74 62 af 3f 0c a1 cb 7a bd f8 de 26 82 51 81 99 8d 85 26 41 42 31 43 e4 2e bf 4f 17 c4 87 44 62 e0 Data Ascii: \>{]]Lw mI@[A$Xl?#o'jg\ZhqY8[Gf[(,AHnxX}>CI:R2""$\b#YyA0Rd6X&@AE)U*pGMxNi~-K 6J!9lsn<}3a%tb?z&Q&AB1C.ODb
2024-04-26 12:23:18 UTC	1379	IN	Data Raw: 29 fa 97 3c 21 96 b5 3e 72 cf 8d 34 35 59 d9 1f 02 db 4d 93 5d c0 39 d6 1e b4 7d db 2d 38 58 3d ff 52 99 09 d8 02 be 88 0d 6d 8a c0 29 69 0d 2a 31 c5 17 91 b2 28 d4 ec d8 53 77 0e 6c 99 73 00 06 ac 32 6a a7 23 14 61 bf 0e f2 62 d3 c4 41 7b 36 12 fa 2e cf 6b db 00 d6 eb 30 8e 85 75 e5 75 21 97 2a 78 07 70 dc 78 21 35 92 d6 34 0a 18 5e d1 59 42 a6 f2 c6 41 da 47 b9 3f ec f4 32 a6 98 0e 28 c2 e2 61 f4 3e d3 ee ac 21 6c a3 a9 8f 54 c0 55 3a d3 7a 26 95 93 86 f0 8d bc 48 7c 60 ba bc cc a7 5a 10 ef c7 16 68 88 a6 23 44 b4 15 1f ad 5b 53 cc 26 8e 4e 37 91 31 e5 6a 36 da 94 35 f7 1d 91 d5 b4 75 0d 2d 89 61 a1 9a 4d 0d a1 5d 35 e3 98 0c 76 1d 73 3a 03 70 4e af d9 ec 8c 2f d4 a2 c7 d8 48 55 83 ab c8 00 47 89 21 8e 48 e7 c1 d7 6e 84 ef 3d 10 6f 2c e5 f5 e7 2f c8 bf Data Ascii: )<!>r45YM]9}-8X=Rm)i1(Swls2j#abA{6.k0uu!xpx!54^YBAG?2(a>!lTU:z&H\|`Zh#D[S&N71j65u-aM]5vs:pN/HUG!Hn=o,/
2024-04-26 12:23:18 UTC	1379	IN	Data Raw: 28 87 d9 ea 60 b8 38 08 c9 f3 6a ff 2c 11 2a 69 6b b4 5f 9c 58 85 1e 7a 16 bd f1 d9 ac bf f7 f7 24 07 bb 36 00 64 43 4b e5 38 43 fd af 69 3d 9d 33 14 96 98 f3 c2 79 52 90 86 17 5b ae d1 95 6d 10 ba 61 e2 e3 0d 43 b7 05 73 a9 83 8b e1 64 a2 6d 30 ef 91 7f ae 2e a5 cc 02 a1 b6 31 b1 f7 25 17 3d b7 c3 9e 0c df c0 e5 79 c8 95 90 83 01 48 d1 bd 0d f9 ed 90 ac be 46 03 3d 5b 77 6d e9 62 62 9a 3f cf 66 01 83 12 02 80 cf 77 f4 3b 14 6f 21 f0 d5 fe 2b 6f e9 36 d5 f3 c1 c9 e1 80 62 26 b6 ce 47 d3 a4 19 2c 08 49 b5 3b 42 5b eb c3 96 12 c2 d6 a3 65 73 73 63 d6 ed 13 14 7b 01 26 be 65 a9 ea 8b 75 b3 52 b8 7c 10 eb 93 83 18 65 17 a9 cf 37 aa f3 24 b8 d3 3e a7 c3 dc 0f b1 b3 22 95 64 56 a1 58 f2 11 07 f1 2c 9f 2a 67 31 7b d7 25 03 31 89 5a f4 89 06 d2 d8 ba 46 9f 4c 78 Data Ascii: (`8j,ik_Xz$6dCK8Ci=3yR[maCsdm0.1%=yHF=[wmbb?fw;o!+o6b&G,I;B[essc{&euR\|e7$>"dVX,g1{%1ZFLx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49869	151.101.1.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:19 UTC	1823	OUT	POST /idapps/logger HTTP/1.1 Host: id.venmo.com Connection: keep-alive Content-Length: 830 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-csrf-token: lEd6937tifwPAQ0XLiIcaSHCRJd3ghPkHAmgw= sec-ch-ua-arch: "x86" x-app-name: identityclientexperience sec-ch-ua-platform-version: "10.0.0" X-Requested-With: XMLHttpRequest sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json sec-ch-ua-full-version: "117.0.5938.132" accept: application/json Origin: https://id.venmo.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://id.venmo.com/signin?country.x=US&locale.x=en&ctxId=AAGTMbXAr-_9hFOdMjFJeDIT2AVC4srohHO4prKJg35LG3f53du_Ei1CXj8jIlvNxkWTpu7ay42oUJl42vchI78= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial; d_id=f9d8a02dda1e499da9fdccab0d31ca111714134181973; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=identityappsnodeweb; nsid=s%3Ar1IVgdqL-yPwDL7QwOzbe1TQMyLGYUSv.rXM9gf4tUyvmHMoq%2F2Zdgp4aiJfZ5ZCx1rHTg%2BhO7xY; l7_az=dcg15.slc; ts_c=vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3; ts=vreXpYrS%3D1808742190%26vteXpYrS%3D1714135990%26vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3%26vtyp%3Dnew; x-pp-s=eyJ0IjoiMTcxNDEzNDE5NjY3OSIsImwiOiIwIiwibSI6IjAifQ
2024-04-26 12:23:19 UTC	830	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 6c 65 76 65 6c 22 3a 22 69 6e 66 6f 22 2c 22 65 76 65 6e 74 22 3a 22 6c 6f 67 67 65 72 5f 69 6e 69 74 22 2c 22 70 61 79 6c 6f 61 64 22 3a 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 31 37 31 34 31 33 34 31 39 35 36 33 30 22 2c 22 63 6f 6d 70 22 3a 22 69 63 65 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 5f 55 53 22 2c 22 6c 6f 63 61 6c 65 5f 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 62 72 6f 77 73 65 72 5f 63 6c 69 65 6e 74 5f 74 79 70 65 22 3a 22 62 72 6f 77 73 65 72 22 7d 7d 5d 2c 22 6d 65 74 61 22 3a 7b 7d 2c 22 74 72 61 63 6b 69 6e 67 22 3a 5b 7b 22 6c 6f 67 67 65 72 22 3a 22 43 41 4c 22 2c 22 70 61 79 6c 6f 61 64 22 3a 7b 22 74 79 70 65 22 3a 22 49 43 45 5f 4c 4f 47 49 4e 5f 56 45 4e 4d 4f 22 2c 22 6e 61 6d 65 22 Data Ascii: {"events":[{"level":"info","event":"logger_init","payload":{"timestamp":"1714134195630","comp":"ice","locale":"en_US","locale_country":"US","browser_client_type":"browser"}}],"meta":{},"tracking":[{"logger":"CAL","payload":{"type":"ICE_LOGIN_VENMO","name"
2024-04-26 12:23:19 UTC	1344	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1210 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Allow-Credentials: true Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; script-src 'nonce-Zj1rMplFN5qSZEqwJ0CzFSBwaCK+Y7LiJaGLItN88M3tjcp3' 'self' 'unsafe-inline' https://.paypal.com https://.paypalobjects.com https://fpnpmcdn.net; img-src 'self' * data: https://c.paypal.com; object-src 'none'; font-src 'self' https://.paypalobjects.com https://.paypal.com data:; frame-src 'self' https://.paypalobjects.com https://.paypal.com; connect-src 'self' 'unsafe-inline' https://.paypal.com https://.paypalobjects.com https://.fptls.com https://.fptls2.com https://.fptls3.com https://api.fpjs.io https://.api.fpjs.io; base-uri 'self' https://.paypal.com; form-action 'self' https://.paypal.com https://ih-prd.fisglobal.com/sso/SSOServlet; frame-ancestors 'self' https://.paypal.com https://.izettle.com https://paypal.com/axo; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp Content-Type: application/json; charset=utf-8
2024-04-26 12:23:19 UTC	1356	IN	Data Raw: 45 74 61 67 3a 20 57 2f 22 34 62 61 2d 39 32 73 41 5a 52 4d 50 74 4d 4c 70 31 79 53 30 61 50 56 37 51 69 7a 53 6e 78 30 22 0d 0a 50 61 79 70 61 6c 2d 44 65 62 75 67 2d 49 64 3a 20 66 38 39 36 30 35 34 61 37 36 31 39 62 0d 0a 50 65 72 6d 69 73 73 69 6f 6e 73 2d 50 6f 6c 69 63 79 3a 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 61 72 63 68 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 77 6f 77 36 34 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 6d 6f 64 65 6c 3d 28 73 65 6c 66 20 22 68 74 74 70 73 Data Ascii: Etag: W/"4ba-92sAZRMPtMLp1yS0aPV7QizSnx0"Paypal-Debug-Id: f896054a7619bPermissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https
2024-04-26 12:23:19 UTC	616	IN	Data Raw: 54 72 61 63 65 70 61 72 65 6e 74 3a 20 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 66 38 39 36 30 35 34 61 37 36 31 39 62 2d 35 39 35 63 61 63 35 38 31 33 35 65 63 62 32 61 2d 30 31 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 58 2d 58 73 73 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 44 43 3a 20 63 63 67 31 31 2d 6f 72 69 67 69 6e 2d 77 77 77 2d 31 2e 70 61 79 70 61 6c 2e 63 6f 6d 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 2c 20 31 2e 31 20 76 61 72 6e 69 73 68 2c 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 44 61 74 65 3a 20 46 72 69 2c 20 32 36 20 41 70 72 20 Data Ascii: Traceparent: 00-0000000000000000000f896054a7619b-595cac58135ecb2a-01X-Content-Type-Options: nosniffX-Xss-Protection: 1; mode=blockDC: ccg11-origin-www-1.paypal.comAccept-Ranges: bytesVia: 1.1 varnish, 1.1 varnish, 1.1 varnishDate: Fri, 26 Apr
2024-04-26 12:23:19 UTC	1210	IN	Data Raw: 7b 22 73 79 73 22 3a 7b 22 6c 69 6e 6b 73 22 3a 7b 22 6a 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 6a 73 22 2c 22 63 73 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 63 73 73 22 2c 22 74 65 6d 70 6c 61 74 65 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 74 65 6d 70 6c 61 74 65 73 2f 55 53 2f 65 6e 22 2c 22 72 65 73 6f 75 72 63 65 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 22 2c 22 6f 72 69 67 69 6e 61 6c 54 65 6d 70 6c 61 74 65 42 61 73 65 55 72 6c 22 3a Data Ascii: {"sys":{"links":{"jsBaseUrl":"https://www.paypalobjects.com/js","cssBaseUrl":"https://www.paypalobjects.com/css","templateBaseUrl":"https://www.paypalobjects.com/templates/US/en","resourceBaseUrl":"https://www.paypalobjects.com","originalTemplateBaseUrl":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49872	151.101.1.35	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:21 UTC	1488	OUT	GET /ts?v=1.8.16&t=1714134198349&g=-120&e=err&page=ice%3Avenmo%3Asignin&pgrp=ice%3Avenmo%3Asignin&comp=identityappsnodeweb&erpg=Script%20error&error_type=WINDOW_ONERROR&error_source=-%200%3A0&tenant_name=venmo HTTP/1.1 Host: t.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://id.venmo.com/signin?country.x=US&locale.x=en&ctxId=AAGTMbXAr-_9hFOdMjFJeDIT2AVC4srohHO4prKJg35LG3f53du_Ei1CXj8jIlvNxkWTpu7ay42oUJl42vchI78= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; KHcl0EuY7AKSMgfvHl7J5E7hPtK=H5vOX4Xx9E6rPaNsW1umPOEju90KfJTschjWY_e1f92eqJS1o6EoZAYAvBErjHwsTvfIlecHLC-YGp_e; l7_az=dcg16.slc; sc_f=CEKPNHQG08AWc-eXVA4YPw93eSBWwxF4jXwznQNxJ_4VWbeV7FgS4yQ2I1Wt5sfyajVP4H77tpr0Ipov674wteSk7U1-EXiXl3h4f0; ts=vreXpYrS%3D1808742178%26vteXpYrS%3D1714135978%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew; x-pp-s=eyJ0IjoiMTcxNDEzNDE3ODM3OSIsImwiOiIwIiwibSI6IjAifQ
2024-04-26 12:23:21 UTC	1237	IN	HTTP/1.1 200 OK Connection: close CORRELATION-ID: 322738017b195 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Fri, 26 Apr 2024 12:23:21 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: 322738017b195 Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1808742201%26vteXpYrS%3D1714136001%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew;Expires=Mon, 26 Apr 2027 12:23:21 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088;Expires=Mon, 26 Apr 2027 12:23:21 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-0000000000000000000322738017b195-3d87a17992cb9703-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Fri, 26 Apr 2024 12:23:21 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-dfw-kdfw8210082-DFW, cache-pdk-kfty2130044-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1714134202.808429,VS0,VE63 vary: Accept-Encoding Server-Timing: content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-04-26 12:23:21 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-04-26 12:23:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-04-26 12:23:21 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49867	151.101.193.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:21 UTC	1401	OUT	GET /da/r/fb.js HTTP/1.1 Host: c.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; KHcl0EuY7AKSMgfvHl7J5E7hPtK=H5vOX4Xx9E6rPaNsW1umPOEju90KfJTschjWY_e1f92eqJS1o6EoZAYAvBErjHwsTvfIlecHLC-YGp_e; l7_az=dcg16.slc; sc_f=CEKPNHQG08AWc-eXVA4YPw93eSBWwxF4jXwznQNxJ_4VWbeV7FgS4yQ2I1Wt5sfyajVP4H77tpr0Ipov674wteSk7U1-EXiXl3h4f0; ts=vreXpYrS%3D1808742178%26vteXpYrS%3D1714135978%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew; x-pp-s=eyJ0IjoiMTcxNDEzNDE3ODM3OSIsImwiOiIwIiwibSI6IjAifQ
2024-04-26 12:23:21 UTC	1049	IN	HTTP/1.1 200 OK Connection: close Content-Length: 67714 Access-Control-Allow-Headers: x-csrf-token Content-Type: application/javascript DC: ccg11-origin-www-1.paypal.com Etag: "65de8f54-10882" Last-Modified: Wed, 28 Feb 2024 01:41:40 GMT Paypal-Debug-Id: 9b1227dfb22d7 Server: ECAcc (dac/9C80) Traceparent: 00-00000000000000000009b1227dfb22d7-7d04f40e77b26291-01 X-Content-Type-Options: nosniff Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:21 GMT Via: 1.1 varnish Age: 23271 Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-pdk-kfty2130048-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1714134202.659911,VS0,VE3 vary: Accept-Encoding, Accept-Encoding Expires: Sat, 27 Apr 2024 12:23:21 GMT Cache-Control: no-cache, no-store, must-revalidate,max-age=86400 ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET ACCESS-CONTROL-ALLOW-CREDENTIALS: false ACCESS-CONTROL-MAX-AGE: 86400 Server-Timing: content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: *
2024-04-26 12:23:21 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 50 41 59 50 41 4c 3d 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 7c 7c 7b 7d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 72 65 74 75 72 6e 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f Data Ascii: "use strict";var PAYPAL=window.PAYPAL\|\|{};!function(){function e(n){return e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.proto
2024-04-26 12:23:21 UTC	16384	IN	Data Raw: 69 66 69 63 2f 46 69 6a 69 22 3d 3d 3d 69 2e 6e 61 6d 65 26 26 31 34 31 34 32 34 35 36 65 35 3d 3d 3d 65 5b 36 5d 2e 73 26 26 31 33 39 36 31 30 31 36 65 35 3d 3d 3d 65 5b 36 5d 2e 65 29 72 65 74 75 72 6e 20 30 3b 72 65 74 75 72 6e 20 74 7d 28 65 2c 6e 2c 69 2c 74 29 2c 69 7d 2c 69 3d 7b 7d 2c 6f 3d 71 2e 6f 6c 73 6f 6e 2e 64 73 74 5f 72 75 6c 65 73 2e 7a 6f 6e 65 73 2c 61 3d 6f 2e 6c 65 6e 67 74 68 2c 72 3d 79 2e 41 4d 42 49 47 55 49 54 49 45 53 5b 6e 5d 2c 63 3d 30 3b 63 3c 61 3b 63 2b 2b 29 7b 76 61 72 20 73 3d 6f 5b 63 5d 2c 75 3d 74 28 6f 5b 63 5d 29 3b 22 4e 2f 41 22 21 3d 3d 75 26 26 28 69 5b 73 2e 6e 61 6d 65 5d 3d 75 29 7d 66 6f 72 28 76 61 72 20 64 20 69 6e 20 69 29 69 66 28 69 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 64 29 29 66 6f 72 28 Data Ascii: ific/Fiji"===i.name&&14142456e5===e[6].s&&13961016e5===e[6].e)return 0;return t}(e,n,i,t),i},i={},o=q.olson.dst_rules.zones,a=o.length,r=y.AMBIGUITIES[n],c=0;c<a;c++){var s=o[c],u=t(o[c]);"N/A"!==u&&(i[s.name]=u)}for(var d in i)if(i.hasOwnProperty(d))for(
2024-04-26 12:23:21 UTC	16384	IN	Data Raw: 22 22 29 29 7d 7d 7d 28 65 29 3b 63 2e 74 69 6d 65 3d 6c 2e 74 69 6d 65 2c 63 2e 70 74 31 3d 6c 2e 70 74 31 3b 74 72 79 7b 76 61 72 20 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 2c 69 3d 22 22 2c 6f 3d 22 22 2c 61 3d 5b 5d 3b 69 66 28 65 2e 6e 61 76 69 67 61 74 6f 72 26 26 65 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7b 76 61 72 20 72 3d 65 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 3b 69 3d 67 65 28 69 2c 72 29 2c 74 3d 46 28 31 2c 35 29 3b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 73 3d 72 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 72 2e 6c 65 6e 67 74 68 3c 3d 31 30 30 3f 72 2e 6c 65 6e 67 74 68 3a 31 30 30 29 2c 75 3d 30 3b 75 3c 3d 73 2e 6c 65 6e 67 74 68 2f 74 3b 75 2b 2b 29 63 2b 3d 73 2e 73 75 62 Data Ascii: ""))}}}(e);c.time=l.time,c.pt1=l.pt1;try{var m=function(e,n){var t,i="",o="",a=[];if(e.navigator&&e.navigator.userAgent){var r=e.navigator.userAgent;i=ge(i,r),t=F(1,5);for(var c="",s=r.substring(0,r.length<=100?r.length:100),u=0;u<=s.length/t;u++)c+=s.sub
2024-04-26 12:23:21 UTC	16384	IN	Data Raw: 72 79 26 26 76 6f 69 64 20 30 21 3d 3d 74 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 65 6d 6f 72 79 2e 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 3f 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 65 6d 6f 72 79 2e 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 3a 31 30 37 33 37 34 31 38 32 34 29 2f 31 30 34 38 35 37 36 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 28 6e 65 77 20 45 72 72 6f 72 28 22 64 65 74 65 63 74 49 6e 63 6f 67 6e 69 74 6f 20 73 6f 6d 65 68 6f 77 20 66 61 69 6c 65 64 20 74 6f 20 71 75 65 72 79 20 73 74 6f 72 61 67 65 20 71 75 6f 74 61 3a 20 22 2b 65 2e 6d 65 73 73 61 67 65 29 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 76 6f 69 64 20 30 21 3d 3d 73 65 6c 66 2e 50 72 6f 6d 69 73 65 26 26 76 6f 69 64 20 30 21 3d 3d 73 65 6c Data Ascii: ry&&void 0!==t.performance.memory.jsHeapSizeLimit?performance.memory.jsHeapSizeLimit:1073741824)/1048576))}),(function(e){n(new Error("detectIncognito somehow failed to query storage quota: "+e.message))}))}function u(){void 0!==self.Promise&&void 0!==sel
2024-04-26 12:23:21 UTC	2178	IN	Data Raw: 26 69 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 62 75 26 26 4c 65 28 69 29 2c 69 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 63 64 26 26 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 29 7b 76 61 72 20 6e 3d 70 61 72 73 65 49 6e 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 64 2e 4c 53 5f 50 31 5f 50 4f 53 54 5f 43 4f 55 4e 54 53 29 2c 31 30 29 7c 7c 30 2c 74 3d 70 61 72 73 65 49 6e 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 64 2e 4c 53 5f 50 32 5f 50 4f 53 54 5f 54 49 4d 45 29 2c 31 30 29 7c 7c 30 2c 69 3d 77 69 6e 64 6f 77 2e 6c 6f 63 Data Ascii: &i.configuration.bu&&Le(i),i.configuration.cd&&function(e){if(null==e?void 0:e.configuration.localStorage){var n=parseInt(window.localStorage.getItem(d.LS_P1_POST_COUNTS),10)\|\|0,t=parseInt(window.localStorage.getItem(d.LS_P2_POST_TIME),10)\|\|0,i=window.loc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49868	151.101.193.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:21 UTC	830	OUT	OPTIONS /myaccount/privacy/cookieprefs/getBanner?showBanner=true&country=US&language=en&policyType=CookieBanner&originalHeaders={%22cookie%22:%22cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial%22}&tenant=venmo&tenantData={%22cookiePrefsString%22:%22cookie_prefs%22,%22bannerVariant%22:%22hidden%22} HTTP/1.1 Host: www.paypal.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: access-control-allow-origin,content-type,x-requested-with Origin: https://id.venmo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:21 UTC	520	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: access-control-allow-origin, Content-Type, Accept, X-Requested-With Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://id.venmo.com Cache-Control: max-age=0, no-cache, no-store, must-revalidate
2024-04-26 12:23:21 UTC	2169	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 3b 20 73 74 79 6c 65 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 6a 6d 39 46 72 33 54 56 31 58 47 46 37 48 36 44 75 31 59 62 4d 58 30 51 35 50 51 65 48 51 72 57 35 67 75 53 34 35 7a 61 51 30 30 54 Data Ascii: Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; style-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; script-src 'nonce-jm9Fr3TV1XGF7H6Du1YbMX0Q5PQeHQrW5guS45zaQ00T
2024-04-26 12:23:21 UTC	1352	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6e 73 69 64 3d 73 25 33 41 41 6a 78 2d 48 77 79 45 71 47 44 36 61 6e 32 66 6b 44 37 4a 6a 66 30 73 73 71 47 54 6d 4c 4e 61 2e 35 45 4d 35 47 49 55 70 6d 6b 55 66 4c 58 73 61 77 64 34 69 7a 6d 41 31 71 43 48 51 6f 64 6b 4d 38 7a 77 30 45 72 69 74 41 46 77 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 37 5f 61 7a 3d 64 63 67 30 32 2e 70 68 78 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 46 72 69 2c 20 32 36 20 41 70 72 20 32 30 32 34 20 31 32 3a 35 33 3a 32 31 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: nsid=s%3AAjx-HwyEqGD6an2fkD7Jjf0ssqGTmLNa.5EM5GIUpmkUfLXsawd4izmA1qCHQodkM8zw0EritAFw; Path=/; HttpOnly; Secure; SameSite=NoneSet-Cookie: l7_az=dcg02.phx; Path=/; Domain=paypal.com; Expires=Fri, 26 Apr 2024 12:53:21 GMT; HttpOnly; Secure; Sa
2024-04-26 12:23:21 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49866	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:21 UTC	569	OUT	GET /ice/Venmo_Form_Page_Template.d93cb7f386b09f5aebb5.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:21 UTC	852	IN	HTTP/1.1 200 OK Connection: close Content-Length: 24178 Cache-Control: s-maxage=31536000, public,max-age=86400 Content-Type: application/javascript Etag: "66064785-5e72" Last-Modified: Fri, 29 Mar 2024 04:45:57 GMT Paypal-Debug-Id: f7e0f94db264c Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000f7e0f94db264c-93e2f477f34ec384-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:21 GMT X-Served-By: cache-dfw-kdfw8210121-DFW, cache-gnv1820034-GNV X-Cache: HIT, MISS X-Cache-Hits: 4, 0 X-Timer: S1714134202.658571,VS0,VE23 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:21 UTC	1379	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 69 64 65 6e 74 69 74 79 63 6c 69 65 6e 74 65 78 70 65 72 69 65 6e 63 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 32 35 5d 2c 7b 31 33 38 30 3a 28 74 2c 6e 2c 65 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 72 28 6e 29 2c 65 2e 64 28 6e 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 71 7d 29 3b 76 61 72 20 6f 3d 65 28 32 39 34 33 39 29 2c 61 3d 65 28 33 35 37 37 36 29 2c 69 3d 65 28 37 31 36 34 31 29 2c 6c 3d 65 28 37 35 32 35 39 29 2c 72 3d 65 28 34 39 34 32 29 2c 64 3d 65 28 32 34 30 37 30 29 2c 73 3d 65 28 39 33 33 37 39 29 2c 63 3d 65 2e 6e 28 73 29 2c 75 3d 65 28 37 Data Ascii: (self.webpackChunkidentityclientexperience=self.webpackChunkidentityclientexperience\|\|[]).push([[125],{1380:(t,n,e)=>{"use strict";e.r(n),e.d(n,{default:()=>q});var o=e(29439),a=e(35776),i=e(71641),l=e(75259),r=e(4942),d=e(24070),s=e(93379),c=e.n(s),u=e(7
2024-04-26 12:23:21 UTC	1379	IN	Data Raw: 30 2c 72 2e 5a 29 28 65 2c 49 2e 48 45 2e 47 45 54 5f 43 4f 44 45 2c 22 67 65 74 4f 74 70 43 6f 64 65 22 29 2c 65 29 2c 54 3d 52 5b 66 2e 74 79 70 65 5d 7c 7c 22 22 3b 72 65 74 75 72 6e 20 61 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 22 2e 63 6f 6e 63 61 74 28 66 2e 74 79 70 65 3d 3d 3d 49 2e 48 45 2e 47 45 54 5f 43 4f 44 45 3f 22 67 65 74 2d 6f 74 70 2d 63 6f 64 65 2d 22 3a 22 22 2c 22 6c 6f 67 69 6e 2d 63 6f 6e 74 61 69 6e 65 72 22 29 7d 2c 66 2e 74 79 70 65 3d 3d 3d 49 2e 48 45 2e 47 45 54 5f 43 4f 44 45 26 26 61 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 6f 74 70 43 68 61 6e 67 65 41 63 63 6f Data Ascii: 0,r.Z)(e,I.HE.GET_CODE,"getOtpCode"),e),T=R[f.type]\|\|"";return a.default.createElement("div",{className:"".concat(f.type===I.HE.GET_CODE?"get-otp-code-":"","login-container")},f.type===I.HE.GET_CODE&&a.default.createElement("div",{className:"otpChangeAcco
2024-04-26 12:23:21 UTC	1379	IN	Data Raw: 2c 61 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 6f 72 6d 22 2c 7b 6d 65 74 68 6f 64 3a 22 70 6f 73 74 22 2c 6f 6e 53 75 62 6d 69 74 3a 75 2c 6e 6f 56 61 6c 69 64 61 74 65 3a 21 30 2c 61 75 74 6f 43 6f 6d 70 6c 65 74 65 3a 22 6f 6e 22 7d 2c 73 29 2c 61 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 6e 75 6c 6c 2c 22 66 61 6c 73 65 22 21 3d 3d 42 26 26 41 26 26 61 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 73 69 67 6e 2d 75 70 2d 73 65 63 74 69 6f 6e 22 7d 2c 61 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 64 2e 7a 78 2c 7b 6c 6f 61 64 69 6e 67 3a 6f 26 26 68 3d 3d 3d 4e 2c 6b 69 6e Data Ascii: ,a.default.createElement("form",{method:"post",onSubmit:u,noValidate:!0,autoComplete:"on"},s),a.default.createElement("div",null,"false"!==B&&A&&a.default.createElement("div",{className:"sign-up-section"},a.default.createElement(d.zx,{loading:o&&h===N,kin
2024-04-26 12:23:21 UTC	1379	IN	Data Raw: 28 30 2c 61 2e 75 73 65 52 65 66 29 28 6e 75 6c 6c 29 2c 78 3d 28 30 2c 61 2e 75 73 65 53 74 61 74 65 29 28 21 31 29 2c 45 3d 28 30 2c 6f 2e 5a 29 28 78 2c 32 29 2c 79 3d 45 5b 30 5d 2c 50 3d 45 5b 31 5d 2c 48 3d 7a 28 50 2c 6b 2c 6d 29 2c 4e 3d 47 28 50 2c 79 2c 6b 29 2c 42 3d 28 30 2c 76 2e 5a 50 29 28 22 76 65 6e 6d 6f 2e 6c 6f 67 69 6e 22 29 3b 72 65 74 75 72 6e 20 61 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 54 2c 7b 6f 6e 53 75 62 6d 69 74 46 6f 72 6d 48 61 6e 64 6c 65 72 3a 65 2c 62 75 74 74 6f 6e 43 6c 69 63 6b 65 64 53 74 61 74 65 3a 75 2c 73 65 74 42 75 74 74 6f 6e 43 6c 69 63 6b 65 64 53 74 61 74 65 3a 70 2c 6f 6e 43 6c 69 63 6b 53 69 67 6e 55 70 42 75 74 74 6f 6e 48 61 6e 64 6c 65 72 3a 6e 2c 6f 6e 43 6c 69 63 6b 43 Data Ascii: (0,a.useRef)(null),x=(0,a.useState)(!1),E=(0,o.Z)(x,2),y=E[0],P=E[1],H=z(P,k,m),N=G(P,y,k),B=(0,v.ZP)("venmo.login");return a.default.createElement(T,{onSubmitFormHandler:e,buttonClickedState:u,setButtonClickedState:p,onClickSignUpButtonHandler:n,onClickC
2024-04-26 12:23:21 UTC	1379	IN	Data Raw: 74 65 45 6c 65 6d 65 6e 74 28 61 2e 64 65 66 61 75 6c 74 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 61 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 6d 6f 62 69 6c 65 4e 75 6d 62 65 72 22 7d 2c 75 28 22 76 65 6e 6d 6f 2e 6d 6f 62 69 6c 65 4e 75 6d 62 65 72 22 29 29 2c 61 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 62 72 22 2c 6e 75 6c 6c 29 2c 61 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 6d 61 73 6b 65 64 50 68 6f 6e 65 4e 75 6d 62 65 72 22 7d 2c 73 2e 6d 61 73 6b 65 64 50 68 6f 6e 65 4e 75 6d 62 65 72 29 2c 61 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 Data Ascii: teElement(a.default.Fragment,null,a.default.createElement("p",{className:"mobileNumber"},u("venmo.mobileNumber")),a.default.createElement("br",null),a.default.createElement("p",{className:"maskedPhoneNumber"},s.maskedPhoneNumber),a.default.createElement("
2024-04-26 12:23:21 UTC	1379	IN	Data Raw: 26 26 6e 3d 3d 3d 52 2c 22 64 61 74 61 2d 74 65 73 74 69 64 22 3a 22 73 75 62 6d 69 74 4f 74 70 43 6f 64 65 22 2c 76 61 72 69 61 6e 74 3a 22 63 6f 6e 74 61 69 6e 65 64 22 2c 63 6f 6c 6f 72 3a 22 70 72 69 6d 61 72 79 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 73 75 62 6d 69 74 4f 74 70 43 6f 64 65 42 75 74 74 6f 6e 22 2c 74 79 70 65 3a 22 73 75 62 6d 69 74 22 2c 6f 6e 43 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 28 52 29 2c 63 28 29 7d 7d 2c 70 28 22 76 65 6e 6d 6f 2e 6f 74 70 43 6f 64 65 53 75 62 6d 69 73 73 69 6f 6e 2e 73 75 62 6d 69 74 22 29 29 29 2c 61 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 6e 75 6c 6c 2c 61 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 64 2e 7a 78 2c 7b 73 69 Data Ascii: &&n===R,"data-testid":"submitOtpCode",variant:"contained",color:"primary",className:"submitOtpCodeButton",type:"submit",onClick:function(){o(R),c()}},p("venmo.otpCodeSubmission.submit"))),a.default.createElement("div",null,a.default.createElement(d.zx,{si
2024-04-26 12:23:21 UTC	1379	IN	Data Raw: 2e 5a 29 28 6e 2c 49 2e 48 45 2e 45 52 52 4f 52 2c 57 29 2c 6e 29 5b 77 2e 74 79 70 65 5d 3b 72 65 74 75 72 6e 20 61 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 54 2c 7b 6f 6e 53 75 62 6d 69 74 46 6f 72 6d 48 61 6e 64 6c 65 72 3a 6f 2c 62 75 74 74 6f 6e 43 6c 69 63 6b 65 64 53 74 61 74 65 3a 67 2c 73 65 74 42 75 74 74 6f 6e 43 6c 69 63 6b 65 64 53 74 61 74 65 3a 66 2c 6f 6e 43 6c 69 63 6b 53 69 67 6e 55 70 42 75 74 74 6f 6e 48 61 6e 64 6c 65 72 3a 65 2c 6f 6e 43 6c 69 63 6b 43 61 6e 63 65 6c 4c 69 6e 6b 48 61 6e 64 6c 65 72 3a 64 2c 73 68 6f 77 54 72 61 6e 73 69 74 69 6f 6e 3a 78 2c 70 61 67 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 53 74 61 74 65 3a 43 2c 73 65 74 50 61 67 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 53 74 61 74 65 3a 68 Data Ascii: .Z)(n,I.HE.ERROR,W),n)[w.type];return a.default.createElement(T,{onSubmitFormHandler:o,buttonClickedState:g,setButtonClickedState:f,onClickSignUpButtonHandler:e,onClickCancelLinkHandler:d,showTransition:x,pageNotificationState:C,setPageNotificationState:h
2024-04-26 12:23:21 UTC	1379	IN	Data Raw: 65 3a 67 2c 73 65 74 42 75 74 74 6f 6e 43 6c 69 63 6b 65 64 53 74 61 74 65 3a 66 2c 6f 6e 43 6c 69 63 6b 53 69 67 6e 55 70 42 75 74 74 6f 6e 48 61 6e 64 6c 65 72 3a 6e 2c 6f 6e 43 6c 69 63 6b 43 61 6e 63 65 6c 4c 69 6e 6b 48 61 6e 64 6c 65 72 3a 65 2c 73 68 6f 77 54 72 61 6e 73 69 74 69 6f 6e 3a 79 2c 70 61 67 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 53 74 61 74 65 3a 43 2c 73 65 74 50 61 67 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 53 74 61 74 65 3a 6b 2c 63 61 6e 63 65 6c 41 6e 64 52 65 74 75 72 6e 55 72 6c 3a 78 2c 6f 74 70 50 61 67 65 53 74 61 74 65 3a 45 7d 2c 61 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 61 2e 64 65 66 61 75 6c 74 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 61 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c Data Ascii: e:g,setButtonClickedState:f,onClickSignUpButtonHandler:n,onClickCancelLinkHandler:e,showTransition:y,pageNotificationState:C,setPageNotificationState:k,cancelAndReturnUrl:x,otpPageState:E},a.default.createElement(a.default.Fragment,null,a.default.createEl
2024-04-26 12:23:21 UTC	1379	IN	Data Raw: 69 6e 22 29 29 2c 45 2e 63 68 61 6c 6c 65 6e 67 65 49 64 26 26 61 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 6f 74 70 43 68 61 6e 67 65 54 6f 4f 74 70 4c 6f 67 69 6e 42 75 74 74 6f 6e 22 7d 2c 61 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 64 2e 7a 78 2c 7b 73 69 7a 65 3a 22 6c 61 72 67 65 22 2c 6b 69 6e 64 3a 22 74 65 72 74 69 61 72 79 22 2c 6f 6e 43 6c 69 63 6b 3a 6d 7d 2c 48 28 22 76 65 6e 6d 6f 2e 67 65 74 4f 74 70 43 6f 64 65 2e 6c 6f 67 69 6e 57 69 74 68 4f 74 70 49 6e 73 74 65 61 64 22 29 29 29 29 29 7d 29 2c 22 70 61 73 73 77 6f 72 64 56 69 65 77 22 29 3b 76 61 72 20 59 3d 65 28 37 34 39 30 35 29 2c 56 3d 65 28 31 33 34 35 37 29 2c 58 3d 65 28 Data Ascii: in")),E.challengeId&&a.default.createElement("div",{className:"otpChangeToOtpLoginButton"},a.default.createElement(d.zx,{size:"large",kind:"tertiary",onClick:m},H("venmo.getOtpCode.loginWithOtpInstead")))))}),"passwordView");var Y=e(74905),V=e(13457),X=e(
2024-04-26 12:23:21 UTC	1379	IN	Data Raw: 6f 72 6d 48 61 6e 64 6c 65 72 3a 6d 2c 6f 6e 43 6c 69 63 6b 43 61 6e 63 65 6c 4c 69 6e 6b 48 61 6e 64 6c 65 72 3a 73 2c 6f 6e 43 6c 69 63 6b 43 68 61 6e 67 65 50 75 62 6c 69 63 43 72 65 64 65 6e 74 69 61 6c 48 61 6e 64 6c 65 72 3a 43 2c 6f 6e 53 75 62 6d 69 74 4f 74 70 49 6e 70 75 74 48 61 6e 64 6c 65 72 3a 53 2c 6f 6e 53 75 62 6d 69 74 47 65 74 4f 74 70 43 6f 64 65 42 75 74 74 6f 6e 3a 65 2c 6f 6e 43 6c 69 63 6b 43 68 61 6e 67 65 46 72 6f 6d 4f 74 70 54 6f 50 61 73 73 77 6f 72 64 4c 6f 67 69 6e 3a 68 2c 6f 6e 43 68 61 6e 67 65 4f 74 70 49 6e 70 75 74 48 61 6e 64 6c 65 72 3a 77 2c 62 75 74 74 6f 6e 43 6c 69 63 6b 65 64 53 74 61 74 65 3a 7a 2c 73 65 74 42 75 74 74 6f 6e 43 6c 69 63 6b 65 64 53 74 61 74 65 3a 47 2c 70 61 67 65 4e 6f 74 69 66 69 63 61 74 69 Data Ascii: ormHandler:m,onClickCancelLinkHandler:s,onClickChangePublicCredentialHandler:C,onSubmitOtpInputHandler:S,onSubmitGetOtpCodeButton:e,onClickChangeFromOtpToPasswordLogin:h,onChangeOtpInputHandler:w,buttonClickedState:z,setButtonClickedState:G,pageNotificati

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49870	151.101.1.35	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:21 UTC	2043	OUT	GET /ts?v=1.8.16&t=1714134198976&g=-120&pgrp=ice%3Avenmo%3Asignin&page=ice%3Avenmo%3Asignin&pgst=1714134190358&calc=f412707ec485b&nsid=r1IVgdqL-yPwDL7QwOzbe1TQMyLGYUSv&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=27eeff60847a45c7be538d1141f33e9b&comp=identityappsnodeweb&tsrce=identityappsnodeweb&cu=0&ef_policy=ccpa&c_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial&flnm=identityappsnodeweb&tenant_name=venmo&e=im&imsrc=setup&view=%7B%22t10%22%3A529%2C%22t11%22%3A13578%2C%22tcp%22%3A10472%2C%22et%22%3A%223g%22%2C%22nt%22%3A%22navigate%22%2C%22bt%22%3A102%7D&pt=Log%20in%20%7C%20Venmo&cd=24&sw=1280&sh=1024&dw=1280&dh=1024&bw=1280&bh=907&ce=1&t1=529&t1c=528&t1d=146&t1s=289&t2=411&t3=13&t4d=0&t4=0&t4e=10472&tt=0&rdc=0&protocol=http%2F1.1&cdn=fastly&res=%7B%7D HTTP/1.1 Host: t.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://id.venmo.com/signin?country.x=US&locale.x=en&ctxId=AAGTMbXAr-_9hFOdMjFJeDIT2AVC4srohHO4prKJg35LG3f53du_Ei1CXj8jIlvNxkWTpu7ay42oUJl42vchI78= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; KHcl0EuY7AKSMgfvHl7J5E7hPtK=H5vOX4Xx9E6rPaNsW1umPOEju90KfJTschjWY_e1f92eqJS1o6EoZAYAvBErjHwsTvfIlecHLC-YGp_e; l7_az=dcg16.slc; sc_f=CEKPNHQG08AWc-eXVA4YPw93eSBWwxF4jXwznQNxJ_4VWbeV7FgS4yQ2I1Wt5sfyajVP4H77tpr0Ipov674wteSk7U1-EXiXl3h4f0; ts=vreXpYrS%3D1808742178%26vteXpYrS%3D1714135978%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew; x-pp-s=eyJ0IjoiMTcxNDEzNDE3ODM3OSIsImwiOiIwIiwibSI6IjAifQ
2024-04-26 12:23:21 UTC	1237	IN	HTTP/1.1 200 OK Connection: close CORRELATION-ID: 2195b860c7883 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Fri, 26 Apr 2024 12:23:21 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: 2195b860c7883 Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1808742201%26vteXpYrS%3D1714136001%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew;Expires=Mon, 26 Apr 2027 12:23:21 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088;Expires=Mon, 26 Apr 2027 12:23:21 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-00000000000000000002195b860c7883-c720c36742fcc260-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Fri, 26 Apr 2024 12:23:21 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-dfw-kdfw8210023-DFW, cache-pdk-kfty2130087-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1714134202.813334,VS0,VE86 vary: Accept-Encoding Server-Timing: content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-04-26 12:23:21 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-04-26 12:23:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-04-26 12:23:21 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49871	151.101.193.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:21 UTC	1256	OUT	GET /idapps/logger HTTP/1.1 Host: id.venmo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l7_az=dcg15.slc; ts=vreXpYrS%3D1808742199%26vteXpYrS%3D1714135999%26vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3%26vtyp%3Dnew; ts_c=vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3; v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial; d_id=f9d8a02dda1e499da9fdccab0d31ca111714134181973; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=identityappsnodeweb; nsid=s%3Ar1IVgdqL-yPwDL7QwOzbe1TQMyLGYUSv.rXM9gf4tUyvmHMoq%2F2Zdgp4aiJfZ5ZCx1rHTg%2BhO7xY; l7_az=dcg15.slc; ts_c=vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3; ts=vreXpYrS%3D1808742190%26vteXpYrS%3D1714135990%26vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3%26vtyp%3Dnew; x-pp-s=eyJ0IjoiMTcxNDEzNDE5OTM1MCIsImwiOiIwIiwibSI6IjAifQ
2024-04-26 12:23:21 UTC	1130	IN	HTTP/1.1 302 Found Connection: close Content-Length: 0 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Location: https://venmo.com/ Paypal-Debug-Id: f889202c24409 Set-Cookie: ts=vreXpYrS%3D1808742201%26vteXpYrS%3D1714136001%26vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3%26vtyp%3Dnew; Domain=venmo.com; Expires=Mon, 26 Apr 2027 12:23:21 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: ts_c=vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3; Domain=venmo.com; Expires=Mon, 26 Apr 2027 12:23:21 GMT; Secure; SameSite=None Traceparent: 00-0000000000000000000f889202c24409-64b4e8a14744c2d9-01 DC: ccg11-origin-www-1.paypal.com Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish, 1.1 varnish Date: Fri, 26 Apr 2024 12:23:21 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-dfw-kdal2120043-DFW, cache-pdk-kpdk1780124-PDK, cache-pdk-kpdk1780124-PDK X-Cache: MISS, MISS, MISS X-Cache-Hits: 0, 0, 0 X-Timer: S1714134202.661946,VS0,VE75 Server-Timing: content-encoding;desc="",x-cdn;desc="fastly"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49873	151.101.193.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:22 UTC	1606	OUT	GET /myaccount/privacy/cookieprefs/getBanner?showBanner=true&country=US&language=en&policyType=CookieBanner&originalHeaders={%22cookie%22:%22cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial%22}&tenant=venmo&tenantData={%22cookiePrefsString%22:%22cookie_prefs%22,%22bannerVariant%22:%22hidden%22} HTTP/1.1 Host: www.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Access-Control-Allow-Origin: * Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-platform: "Windows" Origin: https://id.venmo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; nsid=s%3An7iR5EQmXKz-oKtVXIy1EEIPxyKSFcCK.1TZKfiuN5QvG6VUXG7uj%2F6PzQRey35iwuU69rZa1p10; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; KHcl0EuY7AKSMgfvHl7J5E7hPtK=H5vOX4Xx9E6rPaNsW1umPOEju90KfJTschjWY_e1f92eqJS1o6EoZAYAvBErjHwsTvfIlecHLC-YGp_e; l7_az=dcg16.slc; sc_f=CEKPNHQG08AWc-eXVA4YPw93eSBWwxF4jXwznQNxJ_4VWbeV7FgS4yQ2I1Wt5sfyajVP4H77tpr0Ipov674wteSk7U1-EXiXl3h4f0; x-pp-s=eyJ0IjoiMTcxNDEzNDE3ODM3OSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742201%26vteXpYrS%3D1714136001%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew
2024-04-26 12:23:23 UTC	1371	IN	HTTP/1.1 200 OK Connection: close Content-Length: 15183 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://id.venmo.com Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; style-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; script-src 'nonce-WLO3szhUEgk0Fvn5kypm8eWF4fwjrH2uBL0wBJ6KJVIBkIWk' 'self' 'unsafe-inline' https://.paypal.com https://.paypalobjects.com https://recaptcha.net/; img-src 'self' * data:; object-src 'none'; font-src 'self' https://.paypal.com https://.paypalobjects.com; frame-src 'self' https://.paypalobjects.com https://.paypal.com https://recaptcha.net/ https://.qualtrics.com; connect-src 'self' 'unsafe-inline' https://.paypal.com https://.paypalobjects.com https://id.venmo.com https://venmo.com/ https://.qualtrics.com; form-action 'self' https://.paypal.com; base-uri 'self' https://.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp Content-Type: application/json; charset=utf-8 Etag: W/"3b4f-7ZrKyKyhDwIJ3yOKIyKH97ull98"
2024-04-26 12:23:23 UTC	1191	IN	Data Raw: 4f 72 69 67 69 6e 2d 54 72 69 61 6c 3a 20 41 6c 49 6f 67 56 33 4b 46 74 6e 62 66 56 43 79 6c 39 5a 32 4e 70 72 45 37 46 44 38 50 59 43 74 2b 54 51 69 59 64 45 33 70 70 65 4a 6a 4a 30 78 4a 4b 63 74 68 59 77 4f 78 58 70 52 43 4e 6f 70 78 56 57 64 4f 49 45 4e 4d 63 4e 53 76 51 43 47 41 6d 6a 30 66 77 30 41 41 41 42 32 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 42 68 65 58 42 68 62 43 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6c 4e 6c 62 6d 52 47 64 57 78 73 56 58 4e 6c 63 6b 46 6e 5a 57 35 30 51 57 5a 30 5a 58 4a 53 5a 57 52 31 59 33 52 70 62 32 34 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 32 4f 44 51 34 4f 44 59 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 Data Ascii: Origin-Trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLCJleHBpcnkiOjE2ODQ4ODYzOTksImlzU3ViZG9tYWluI
2024-04-26 12:23:23 UTC	1084	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 74 73 3d 76 72 65 58 70 59 72 53 25 33 44 31 38 30 38 37 34 32 32 30 32 25 32 36 76 74 65 58 70 59 72 53 25 33 44 31 37 31 34 31 33 36 30 30 32 25 32 36 76 72 25 33 44 31 61 35 62 64 36 30 36 31 38 66 30 61 64 31 30 33 34 39 36 32 30 63 32 66 63 66 63 66 30 38 39 25 32 36 76 74 25 33 44 31 61 35 62 64 36 30 36 31 38 66 30 61 64 31 30 33 34 39 36 32 30 63 32 66 63 66 63 66 30 38 38 25 32 36 76 74 79 70 25 33 44 6e 65 77 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 4d 6f 6e 2c 20 32 36 20 41 70 72 20 32 30 32 37 20 31 32 3a 32 33 3a 32 32 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 Data Ascii: Set-Cookie: ts=vreXpYrS%3D1808742202%26vteXpYrS%3D1714136002%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 26 Apr 2027 12:23:22 GMT; HttpOnly; Secure; SameSite=NoneS
2024-04-26 12:23:23 UTC	1378	IN	Data Raw: 7b 22 63 73 73 22 3a 22 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 5c 22 5c 22 3e 40 66 6f 6e 74 2d 66 61 63 65 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 5c 22 50 61 79 50 61 6c 53 61 6e 73 42 69 67 2d 52 65 67 75 6c 61 72 5c 22 3b 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 20 73 72 63 3a 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 70 61 79 70 61 6c 2d 75 69 2f 66 6f 6e 74 73 2f 50 61 79 50 61 6c 53 61 6e 73 42 69 67 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f Data Ascii: {"css":"<style nonce=\"\">@font-face { font-family: \"PayPalSansBig-Regular\"; font-style: normal; font-display: swap; src: url('https://www.paypalobjects.com/paypal-ui/fonts/PayPalSansBig-Regular.woff2') format('woff2'), url('https://www.paypalobjects.co
2024-04-26 12:23:23 UTC	1378	IN	Data Raw: 69 6f 6e 20 72 65 61 73 6f 6e 54 6f 48 69 64 65 42 61 6e 6e 65 72 28 29 7b 20 6c 65 74 20 72 65 61 73 6f 6e 20 3d 20 27 27 3b 20 74 72 79 20 7b 20 69 66 20 28 66 61 6c 73 65 20 26 26 20 74 72 75 65 20 26 26 20 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 7b 20 72 65 61 73 6f 6e 20 3d 20 27 63 6f 6f 6b 69 65 73 20 61 72 65 20 64 69 73 61 62 6c 65 64 27 3b 20 7d 20 65 6c 73 65 20 69 66 28 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 5c 22 69 73 55 73 65 72 41 63 63 65 70 74 65 64 5c 22 29 29 7b 20 72 65 61 73 6f 6e 20 3d 20 27 55 73 65 72 20 61 63 63 65 70 74 65 64 20 6f 72 20 64 65 63 6c 69 6e 65 64 27 3b 20 7d 20 65 6c 73 65 20 69 66 28 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d Data Ascii: ion reasonToHideBanner(){ let reason = ''; try { if (false && true && !navigator.cookieEnabled){ reason = 'cookies are disabled'; } else if(sessionStorage.getItem(\"isUserAccepted\")){ reason = 'User accepted or declined'; } else if(sessionStorage.getItem
2024-04-26 12:23:23 UTC	1378	IN	Data Raw: 61 6e 6e 65 72 2d 61 63 63 65 70 74 65 64 41 6c 6c 5c 22 29 3b 20 76 61 72 20 74 72 61 63 6b 69 6e 67 50 61 67 65 4e 61 6d 65 20 3d 20 27 27 20 7c 7c 20 28 77 69 6e 64 6f 77 2e 66 70 74 69 20 26 26 20 77 69 6e 64 6f 77 2e 66 70 74 69 2e 70 67 72 70 29 20 7c 7c 64 6f 63 75 6d 65 6e 74 2e 74 69 74 6c 65 3b 20 69 66 20 28 6d 61 6e 61 67 65 43 6f 6f 6b 69 65 73 4c 69 6e 6b 29 20 7b 20 6d 61 6e 61 67 65 43 6f 6f 6b 69 65 73 4c 69 6e 6b 2e 6f 6e 63 6c 69 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 69 66 28 74 72 75 65 29 7b 20 76 61 72 20 6d 61 6e 61 67 65 43 6f 6f 6b 69 65 73 44 61 74 61 20 3d 20 7b 20 65 3a 20 27 63 6c 27 2c 20 6c 69 6e 6b 3a 20 27 6d 61 6e 61 67 65 63 6f 6f 6b 69 65 73 27 2c 20 70 67 6c 6b 3a 20 74 72 61 63 6b 69 6e 67 50 61 67 65 Data Ascii: anner-acceptedAll\"); var trackingPageName = '' \|\| (window.fpti && window.fpti.pgrp) \|\|document.title; if (manageCookiesLink) { manageCookiesLink.onclick = function() { if(true){ var manageCookiesData = { e: 'cl', link: 'managecookies', pglk: trackingPage
2024-04-26 12:23:23 UTC	1378	IN	Data Raw: 72 61 63 6b 69 6e 67 50 61 67 65 4e 61 6d 65 20 2b 20 27 7c 61 63 63 65 70 74 63 6f 6f 6b 69 65 73 27 2c 20 70 67 6c 6e 3a 20 74 72 61 63 6b 69 6e 67 50 61 67 65 4e 61 6d 65 20 2b 20 27 7c 61 63 63 65 70 74 63 6f 6f 6b 69 65 73 27 2c 20 63 5f 70 72 65 66 73 3a 20 27 54 3d 31 2c 50 3d 31 2c 46 3d 31 2c 74 79 70 65 3d 65 78 70 6c 69 63 69 74 5f 62 61 6e 6e 65 72 27 2c 20 65 76 65 6e 74 5f 6e 61 6d 65 3a 20 27 76 65 6e 6d 6f 5f 63 6f 6f 6b 69 65 5f 62 61 6e 6e 65 72 5f 61 63 63 65 70 74 5f 63 6c 69 63 6b 65 64 27 20 7d 3b 20 66 6f 72 28 76 61 72 20 6b 65 79 20 69 6e 20 62 61 6e 6e 65 72 46 70 74 69 44 61 74 61 29 7b 20 61 63 63 65 70 74 62 61 6e 6e 65 72 46 70 74 69 44 61 74 61 5b 6b 65 79 5d 20 3d 20 62 61 6e 6e 65 72 46 70 74 69 44 61 74 61 5b 6b 65 79 5d Data Ascii: rackingPageName + '\|acceptcookies', pgln: trackingPageName + '\|acceptcookies', c_prefs: 'T=1,P=1,F=1,type=explicit_banner', event_name: 'venmo_cookie_banner_accept_clicked' }; for(var key in bannerFptiData){ acceptbannerFptiData[key] = bannerFptiData[key]
2024-04-26 12:23:23 UTC	1378	IN	Data Raw: 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 28 77 69 6e 64 6f 77 20 26 26 20 77 69 6e 64 6f 77 2e 66 70 74 69 29 20 7c 7c 20 7b 7d 29 29 3b 20 76 61 72 20 75 70 64 61 74 65 64 46 70 74 69 44 61 74 61 20 3d 20 7b 20 63 6f 6f 6b 69 65 62 61 6e 6e 65 72 68 69 64 64 65 6e 3a 20 27 74 72 75 65 27 2c 20 63 5f 70 72 65 66 73 3a 20 27 54 3d 30 2c 50 3d 31 2c 46 3d 31 2c 74 79 70 65 3d 65 78 70 6c 69 63 69 74 5f 62 61 6e 6e 65 72 27 20 7d 3b 20 66 6f 72 28 76 61 72 20 6b 65 79 20 69 6e 20 62 61 6e 6e 65 72 46 70 74 69 44 61 74 61 29 7b 20 75 70 64 61 74 65 64 46 70 74 69 44 61 74 61 5b 6b 65 79 5d 20 3d 20 62 61 6e 6e 65 72 46 70 74 69 44 61 74 61 5b 6b 65 79 5d 3b 20 7d 3b 20 66 6f 72 28 76 61 72 20 6b 65 79 20 69 6e 20 75 Data Ascii: = JSON.parse(JSON.stringify((window && window.fpti) \|\| {})); var updatedFptiData = { cookiebannerhidden: 'true', c_prefs: 'T=0,P=1,F=1,type=explicit_banner' }; for(var key in bannerFptiData){ updatedFptiData[key] = bannerFptiData[key]; }; for(var key in u
2024-04-26 12:23:23 UTC	1378	IN	Data Raw: 6b 69 65 42 61 6e 6e 65 72 27 29 3b 20 76 61 72 20 62 61 6e 6e 65 72 48 65 69 67 68 74 20 3d 20 63 6f 6f 6b 69 65 42 61 6e 6e 65 72 20 3f 20 63 6f 6f 6b 69 65 42 61 6e 6e 65 72 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 20 3a 20 30 3b 20 69 66 28 63 6f 6f 6b 69 65 42 61 6e 6e 65 72 41 63 63 65 70 74 41 6c 6c 20 26 26 20 63 6f 6f 6b 69 65 42 61 6e 6e 65 72 41 63 63 65 70 74 41 6c 6c 5b 30 5d 20 26 26 20 62 61 6e 6e 65 72 48 65 69 67 68 74 29 7b 20 63 6f 6f 6b 69 65 42 61 6e 6e 65 72 41 63 63 65 70 74 41 6c 6c 5b 30 5d 2e 73 74 79 6c 65 2e 70 61 64 64 69 6e 67 54 6f 70 20 3d 20 62 61 6e 6e 65 72 48 65 69 67 68 74 2f 31 36 20 2b 27 65 6d 27 3b 20 7d 20 7d 20 7d 3b 20 76 61 72 20 69 73 50 61 64 64 69 6e 67 42 6f 74 74 6f 6d 41 64 64 65 64 20 3d 20 66 61 6c 73 65 Data Ascii: kieBanner'); var bannerHeight = cookieBanner ? cookieBanner.clientHeight : 0; if(cookieBannerAcceptAll && cookieBannerAcceptAll[0] && bannerHeight){ cookieBannerAcceptAll[0].style.paddingTop = bannerHeight/16 +'em'; } } }; var isPaddingBottomAdded = false
2024-04-26 12:23:23 UTC	1378	IN	Data Raw: 64 64 65 64 20 26 26 20 62 61 6e 6e 65 72 50 61 64 64 69 6e 67 42 6f 74 74 6f 6d 20 21 3d 3d 20 62 6f 64 79 50 61 64 64 69 6e 67 42 6f 74 74 6f 6d 29 20 7b 20 69 73 50 61 64 64 69 6e 67 42 6f 74 74 6f 6d 41 64 64 65 64 20 3d 20 66 61 6c 73 65 3b 20 7d 20 7d 20 7d 20 7d 20 20 69 66 20 28 61 64 64 4c 69 73 74 65 6e 65 72 29 20 7b 20 61 64 6a 75 73 74 50 61 64 64 69 6e 67 42 6f 74 74 6f 6d 45 76 65 6e 74 28 29 3b 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 72 65 73 69 7a 65 27 2c 20 61 64 6a 75 73 74 50 61 64 64 69 6e 67 42 6f 74 74 6f 6d 45 76 65 6e 74 29 3b 20 20 7d 20 65 6c 73 65 20 7b 20 76 61 72 20 63 6f 6f 6b 69 65 42 61 6e 6e 65 72 41 63 63 65 70 74 41 6c 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 Data Ascii: dded && bannerPaddingBottom !== bodyPaddingBottom) { isPaddingBottomAdded = false; } } } } if (addListener) { adjustPaddingBottomEvent(); window.addEventListener('resize', adjustPaddingBottomEvent); } else { var cookieBannerAcceptAll = document.getEleme
2024-04-26 12:23:23 UTC	1378	IN	Data Raw: 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 28 77 69 6e 64 6f 77 20 26 26 20 77 69 6e 64 6f 77 2e 66 70 74 69 29 20 7c 7c 20 7b 7d 29 29 3b 20 62 61 6e 6e 65 72 46 70 74 69 44 61 74 61 20 3d 20 7b 20 70 61 67 65 3a 20 20 27 6d 61 69 6e 3a 70 72 69 76 61 63 79 3a 70 6f 6c 69 63 79 3a 63 63 70 61 27 2c 20 70 67 72 70 3a 20 20 27 6d 61 69 6e 3a 70 72 69 76 61 63 79 3a 70 6f 6c 69 63 79 27 2c 20 64 69 73 70 6c 61 79 70 61 67 65 3a 20 28 77 69 6e 64 6f 77 2e 66 70 74 69 20 26 26 20 77 69 6e 64 6f 77 2e 66 70 74 69 2e 70 67 72 70 29 20 7c 7c 64 6f 63 75 6d 65 6e 74 2e 74 69 74 6c 65 2c 20 70 70 61 67 65 3a 20 27 70 72 69 76 61 63 79 5f 62 61 6e 6e 65 72 27 2c 20 62 61 6e 6e 65 72 74 79 70 65 3a 20 27 63 6f 6f 6b 69 65 62 61 6e 6e 65 72 27 2c 20 63 63 70 67 3a 20 Data Ascii: SON.stringify((window && window.fpti) \|\| {})); bannerFptiData = { page: 'main:privacy:policy:ccpa', pgrp: 'main:privacy:policy', displaypage: (window.fpti && window.fpti.pgrp) \|\|document.title, ppage: 'privacy_banner', bannertype: 'cookiebanner', ccpg:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49874	151.101.193.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:22 UTC	1621	OUT	GET /v1/r/d/i?js_src=https://c.paypal.com/da/r/fb.js HTTP/1.1 Host: c.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; KHcl0EuY7AKSMgfvHl7J5E7hPtK=H5vOX4Xx9E6rPaNsW1umPOEju90KfJTschjWY_e1f92eqJS1o6EoZAYAvBErjHwsTvfIlecHLC-YGp_e; l7_az=dcg16.slc; sc_f=CEKPNHQG08AWc-eXVA4YPw93eSBWwxF4jXwznQNxJ_4VWbeV7FgS4yQ2I1Wt5sfyajVP4H77tpr0Ipov674wteSk7U1-EXiXl3h4f0; x-pp-s=eyJ0IjoiMTcxNDEzNDE3ODM3OSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742201%26vteXpYrS%3D1714136001%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew
2024-04-26 12:23:22 UTC	1147	IN	HTTP/1.1 200 OK Connection: close Content-Length: 160 Accept-Ch: sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-platform, sec-ch-ua-platform-version, sec-ch-ua-arch, sec-ch-ua-wow64, sec-ch-ua-bitness, sec-ch-ua-model, sec-ch-ua-full Access-Control-Expose-Headers: Server-Timing CORRELATION-ID: 3c975032fcb6e Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Security-Policy-Report-Only: default-src 'self' https://.paypal.com https://.paypalobjects.com; script-src 'self' https://.paypal.com https://.paypalobjects.com https://.paypalinc.com https://www.facebook.com 'unsafe-eval' 'unsafe-inline' blob:; connect-src 'self' https://.paypal.com; style-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; font-src 'self' https://.paypal.com https://.paypalobjects.com data:; img-src 'self' https: data:; form-action 'self' https://.paypal.com; base-uri 'self' https://.paypal.com; object-src 'self' https://.paypal.com https://.paypalobjects.com; report-uri https://www.paypal.com/csplog/api/log/csp Content-Type: text/html;charset=UTF-8
2024-04-26 12:23:22 UTC	960	IN	Data Raw: 4f 72 69 67 69 6e 2d 54 72 69 61 6c 3a 20 41 30 41 2f 75 42 57 30 6f 67 51 49 69 63 61 31 4b 6b 50 43 65 53 4f 6f 48 66 76 54 41 54 58 64 79 52 67 38 46 2f 4b 61 38 67 6a 4b 34 70 43 70 72 45 44 77 46 33 64 33 77 54 78 4e 7a 53 50 6e 31 41 53 62 35 6e 63 70 64 34 36 68 37 52 51 69 53 71 47 59 70 41 38 41 41 41 43 4d 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 4d 75 63 47 46 35 63 47 46 73 4c 6d 4e 76 62 54 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 32 56 75 5a 45 5a 31 62 47 78 56 63 32 56 79 51 57 64 6c 62 6e 52 42 5a 6e 52 6c 63 6c 4a 6c 5a 48 56 6a 64 47 6c 76 62 69 49 73 49 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 59 35 4e 54 55 78 4d 7a 55 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 Data Ascii: Origin-Trial: A0A/uBW0ogQIica1KkPCeSOoHfvTATXdyRg8F/Ka8gjK4pCprEDwF3d3wTxNzSPn1ASb5ncpd46h7RQiSqGYpA8AAACMeyJvcmlnaW4iOiJodHRwczovL2MucGF5cGFsLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY5NTUxMzU5OSwiaXNTdWJkb21ha
2024-04-26 12:23:22 UTC	160	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 50 61 79 50 61 6c 3c 2f 74 69 74 6c 65 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 2f 64 61 2f 72 2f 66 62 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html><head><title>PayPal</title><script type="text/javascript" src="https://c.paypal.com/da/r/fb.js"></script></head><body></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49875	151.101.193.35	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:22 UTC	1235	OUT	GET /v1/r/d/b/p3?f=27eeff60847a45c7be538d1141f33e9b&s=ICE_VENMO_LOGIN_PUBLIC_PAGE HTTP/1.1 Host: c6.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; KHcl0EuY7AKSMgfvHl7J5E7hPtK=H5vOX4Xx9E6rPaNsW1umPOEju90KfJTschjWY_e1f92eqJS1o6EoZAYAvBErjHwsTvfIlecHLC-YGp_e; l7_az=dcg16.slc; sc_f=CEKPNHQG08AWc-eXVA4YPw93eSBWwxF4jXwznQNxJ_4VWbeV7FgS4yQ2I1Wt5sfyajVP4H77tpr0Ipov674wteSk7U1-EXiXl3h4f0; x-pp-s=eyJ0IjoiMTcxNDEzNDE3ODM3OSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742201%26vteXpYrS%3D1714136001%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew
2024-04-26 12:23:22 UTC	793	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 Access-Control-Expose-Headers: Server-Timing CORRELATION-ID: 0b313612cee60 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Paypal-Debug-Id: 0b313612cee60 Traceparent: 00-00000000000000000000b313612cee60-2a8e60e5bedf29bc-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Fri, 26 Apr 2024 12:23:22 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-dfw-kdfw8210152-DFW, cache-pdk-kpdk1780068-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1714134203.697150,VS0,VE87 vary: Accept-Encoding Server-Timing: "traceparent;desc="00-00000000000000000000b313612cee60-41818007554ec05e-01"";content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49876	35.235.122.5	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:22 UTC	1328	OUT	GET /v1/counter.cgi?r=cD0yN2VlZmY2MDg0N2E0NWM3YmU1MzhkMTE0MWYzM2U5YiZpPTEwMi4xMjkuMTUyLjIyMCZ0PTE3MTQxMzQxOTAuMzcxJmE9MjEmcz1JQ0VfTE9HSU5fQVBQ8GhQ_E8vIveUuXZlN3mbElNj91k HTTP/1.1 Host: b.stats.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; KHcl0EuY7AKSMgfvHl7J5E7hPtK=H5vOX4Xx9E6rPaNsW1umPOEju90KfJTschjWY_e1f92eqJS1o6EoZAYAvBErjHwsTvfIlecHLC-YGp_e; l7_az=dcg16.slc; sc_f=CEKPNHQG08AWc-eXVA4YPw93eSBWwxF4jXwznQNxJ_4VWbeV7FgS4yQ2I1Wt5sfyajVP4H77tpr0Ipov674wteSk7U1-EXiXl3h4f0; x-pp-s=eyJ0IjoiMTcxNDEzNDE3ODM3OSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742201%26vteXpYrS%3D1714136001%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew
2024-04-26 12:23:23 UTC	479	IN	HTTP/1.1 302 Found Connection: close Server: PayPal-B.Stats/1.0 Location: https://lvs.stats.paypal.com/v1/counter2.cgi?r=cD0yN2VlZmY2MDg0N2E0NWM3YmU1MzhkMTE0MWYzM2U5YiZpPTEwMi4xMjkuMTUyLjIyMCZ0PTE3MTQxMzQxOTAuMzcxJmE9MjEmcz1JQ0VfTE9HSU5fQVBQ8GhQ_E8vIveUuXZlN3mbElNj91k Content-Length: 0 Set-Cookie: c=06ba4d2eec35082909ff; Domain=stats.paypal.com; expires=Thu, 21 Apr 2044 12:23:22 GMT; Path=/ Content-Type: application/octet-stream Date: Fri, 26 Apr 2024 12:23:22 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49877	151.101.1.35	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:22 UTC	1893	OUT	GET /ts?v=1.8.16&t=1714134201800&g=-120&pgrp=ice%3Avenmo%3Asignin&page=ice%3Avenmo%3Asignin%3ApubCredView&pgst=1714134190358&calc=f412707ec485b&nsid=r1IVgdqL-yPwDL7QwOzbe1TQMyLGYUSv&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=27eeff60847a45c7be538d1141f33e9b&comp=identityappsnodeweb&tsrce=identityappsnodeweb&cu=0&ef_policy=ccpa&c_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial&flnm=identityappsnodeweb&tenant_name=venmo&view=%7B%22t11%22%3A16630%2C%22et%22%3A%223g%22%2C%22pt%22%3A%22Log%20in%20%7C%20Venmo%22%2C%22ru%22%3A%22%22%7D&cd=24&sw=1280&sh=1024&dw=1280&dh=1024&bw=1280&bh=907&tt=-1714134185169&e=pf HTTP/1.1 Host: t.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://id.venmo.com/signin?country.x=US&locale.x=en&ctxId=AAGTMbXAr-_9hFOdMjFJeDIT2AVC4srohHO4prKJg35LG3f53du_Ei1CXj8jIlvNxkWTpu7ay42oUJl42vchI78= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; KHcl0EuY7AKSMgfvHl7J5E7hPtK=H5vOX4Xx9E6rPaNsW1umPOEju90KfJTschjWY_e1f92eqJS1o6EoZAYAvBErjHwsTvfIlecHLC-YGp_e; l7_az=dcg16.slc; sc_f=CEKPNHQG08AWc-eXVA4YPw93eSBWwxF4jXwznQNxJ_4VWbeV7FgS4yQ2I1Wt5sfyajVP4H77tpr0Ipov674wteSk7U1-EXiXl3h4f0; x-pp-s=eyJ0IjoiMTcxNDEzNDE3ODM3OSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742201%26vteXpYrS%3D1714136001%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew
2024-04-26 12:23:23 UTC	1237	IN	HTTP/1.1 200 OK Connection: close CORRELATION-ID: 553a15453c973 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Fri, 26 Apr 2024 12:23:22 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: 553a15453c973 Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1808742202%26vteXpYrS%3D1714136002%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew;Expires=Mon, 26 Apr 2027 12:23:22 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088;Expires=Mon, 26 Apr 2027 12:23:22 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-0000000000000000000553a15453c973-48a184d94b9e5175-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Fri, 26 Apr 2024 12:23:22 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-dfw-kdfw8210027-DFW, cache-pdk-kpdk1780030-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1714134203.877837,VS0,VE54 vary: Accept-Encoding Server-Timing: content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-04-26 12:23:23 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-04-26 12:23:23 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-04-26 12:23:23 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49879	52.84.150.38	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:22 UTC	920	OUT	GET / HTTP/1.1 Host: venmo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial; _csrf=pKhoy7PoesEVNm2nuYnIc8xy; d_id=f9d8a02dda1e499da9fdccab0d31ca111714134181973; enforce_policy=ccpa; tsrce=identityappsnodeweb; l7_az=dcg15.slc; ts_c=vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3; ts=vreXpYrS%3D1808742190%26vteXpYrS%3D1714135990%26vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3%26vtyp%3Dnew; x-pp-s=eyJ0IjoiMTcxNDEzNDE5OTM1MCIsImwiOiIwIiwibSI6IjAifQ
2024-04-26 12:23:23 UTC	703	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 680185 Connection: close Date: Fri, 26 Apr 2024 12:23:23 GMT Server: nginx Cache-Control: public, max-age=0, must-revalidate Last-Modified: Wed, 24 Apr 2024 19:12:17 GMT ETag: "075a4af6ea7e3ce15fab8e2fd9ae3a3e" x-envoy-upstream-service-time: 40 strict-transport-security: max-age=31536000 Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 bfc010d7a2d10333bff157410781201c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C4 X-Amz-Cf-Id: s3aIyvWuKPIsKQfPVC0_POzeuhntngcK0ZlZWRdhVW-9Iw8Lei19hg==
2024-04-26 12:23:23 UTC	15681	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><meta charSet="utf-8"/><meta http-equiv="x-ua-compatible" content="ie=edge"/><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/><link rel="icon" href="/favicon.ico"/><link rel="ap
2024-04-26 12:23:23 UTC	9903	IN	Data Raw: 34 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 37 35 30 70 78 29 7b 2e 61 74 6f 6d 73 2d 62 75 74 74 6f 6e 2d 69 6e 6c 69 6e 65 4c 69 6e 6b 2d 74 65 78 74 43 6f 6e 74 61 69 6e 65 72 2d 6c 69 74 6c 65 4c 69 6e 6b 3a 6e 6f 74 28 2e 6e 6f 2d 78 6c 29 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 74 68 6c 65 74 69 63 73 20 4d 65 64 69 75 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 38 72 65 6d 7d 7d 2e 61 74 6f 6d 73 2d 62 75 74 74 6f 6e 2d 69 6e 6c 69 6e 65 4c 69 6e 6b 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 38 72 65 6d 3b 63 6f 6c 6f 72 3a 23 30 30 37 34 Data Ascii: 4rem;font-style:normal;font-weight:500}@media only screen and (min-width:1750px){.atoms-button-inlineLink-textContainer-litleLink:not(.no-xl){font-family:Athletics Medium;font-size:1.8rem}}.atoms-button-inlineLink-container{border-radius:.8rem;color:#0074
2024-04-26 12:23:23 UTC	16384	IN	Data Raw: 61 79 65 72 69 6e 67 50 61 74 74 65 72 6e 2d 6c 61 79 65 72 69 6e 67 5f 5f 62 6f 74 74 6f 6d 2d 72 69 67 68 74 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 32 2e 35 72 65 6d 2c 32 2e 35 72 65 6d 2c 30 29 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 37 35 30 70 78 29 7b 2e 61 74 6f 6d 73 2d 6c 61 79 65 72 69 6e 67 50 61 74 74 65 72 6e 2d 6c 61 79 65 72 69 6e 67 5f 5f 62 6f 74 74 6f 6d 2d 72 69 67 68 74 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 33 72 65 6d 2c 33 72 65 6d 2c 30 29 7d 7d 2e 61 74 6f 6d 73 2d 6c 61 79 65 72 69 6e 67 50 61 74 74 65 72 6e 2d 6c 61 79 65 72 69 6e 67 5f 5f 74 6f 70 2d 6c 65 66 74 7b 62 6f 74 74 6f 6d 3a 61 75 74 6f Data Ascii: ayeringPattern-layering__bottom-right{transform:translate3d(2.5rem,2.5rem,0)}}@media only screen and (min-width:1750px){.atoms-layeringPattern-layering__bottom-right{transform:translate3d(3rem,3rem,0)}}.atoms-layeringPattern-layering__top-left{bottom:auto
2024-04-26 12:23:23 UTC	16384	IN	Data Raw: 69 6e 65 72 5f 5f 76 69 64 65 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 75 6e 73 65 74 3b 62 6f 72 64 65 72 3a 2e 31 72 65 6d 20 73 6f 6c 69 64 20 23 30 30 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 72 65 6d 3b 68 65 69 67 68 74 3a 35 30 72 65 6d 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 38 30 25 3b 7a 2d 69 6e 64 65 78 3a 31 30 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 61 74 6f 6d 73 2d 6f 76 65 72 6c 61 79 20 2e 6d 6f 64 61 6c 2d Data Ascii: iner__video{background-color:#fff;background-color:unset;border:.1rem solid #000;border-radius:2rem;height:50rem;height:auto;margin:auto;overflow:hidden;position:relative;width:80%;z-index:10}@media only screen and (min-width:768px){.atoms-overlay .modal-
2024-04-26 12:23:23 UTC	6574	IN	Data Raw: 6d 73 2d 63 6f 6e 74 61 69 6e 65 72 20 74 61 62 6c 65 20 74 72 20 74 68 20 70 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 6d 6f 6c 65 63 75 6c 65 73 2d 74 61 62 6c 65 74 65 72 6d 73 2d 63 6f 6e 74 61 69 6e 65 72 20 74 61 62 6c 65 20 74 72 20 74 68 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 2e 6d 6f 6c 65 63 75 6c 65 73 2d 74 61 62 6c 65 74 65 72 6d 73 2d 63 6f 6e 74 61 69 6e 65 72 20 74 61 62 6c 65 20 74 72 20 74 68 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 2e 31 72 65 6d 20 73 6f 6c 69 64 20 23 64 38 64 62 64 66 7d 2e 6d 6f 6c 65 63 75 6c 65 73 2d 74 61 62 6c 65 74 65 72 6d 73 2d 63 6f 6e 74 61 69 6e 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 2e 6d 6f Data Ascii: ms-container table tr th p:last-child{margin-bottom:0}.molecules-tableterms-container table tr th:first-child,.molecules-tableterms-container table tr th:last-child{border-top:.1rem solid #d8dbdf}.molecules-tableterms-container table tr td:first-child,.mo
2024-04-26 12:23:23 UTC	8949	IN	Data Raw: 72 3a 2e 31 72 65 6d 20 73 6f 6c 69 64 20 23 64 38 64 62 64 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 72 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 36 72 65 6d 3b 70 61 64 64 69 6e 67 3a 32 72 65 6d 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 32 7d 2e 6d 6f 6c 65 63 75 6c 65 73 2d 74 61 62 73 74 65 72 6d 73 2d 73 65 6c 65 63 74 6f 72 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 6f 6c 65 63 75 6c 65 73 2d 74 61 62 73 74 65 72 6d 73 2d 73 65 6c 65 63 74 6f 72 20 73 70 61 6e 7b 66 6f 6e 74 2d Data Ascii: r:.1rem solid #d8dbdf;border-radius:1rem;margin-bottom:6rem;padding:2rem;position:absolute;width:100%;z-index:2}.molecules-tabsterms-selector{align-items:center;display:flex;justify-content:space-between;width:100%}.molecules-tabsterms-selector span{font-
2024-04-26 12:23:23 UTC	6396	IN	Data Raw: 6d 69 6e 2d 77 69 64 74 68 3a 31 32 38 30 70 78 29 7b 2e 6d 6f 6c 65 63 75 6c 65 73 2d 63 6f 6c 6f 72 50 69 63 6b 65 72 50 61 74 74 65 72 6e 73 49 74 65 6d 2d 62 75 74 74 6f 6e 5f 5f 61 63 74 69 76 65 3a 62 65 66 6f 72 65 7b 68 65 69 67 68 74 3a 33 2e 32 72 65 6d 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 2e 35 72 65 6d 2c 2d 2e 35 72 65 6d 2c 30 29 3b 77 69 64 74 68 3a 33 2e 32 72 65 6d 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 37 35 30 70 78 29 7b 2e 6d 6f 6c 65 63 75 6c 65 73 2d 63 6f 6c 6f 72 50 69 63 6b 65 72 50 61 74 74 65 72 6e 73 49 74 65 6d 2d 62 75 74 74 6f 6e 5f 5f 61 63 74 69 76 65 3a 62 65 66 6f 72 65 7b 68 65 69 67 68 74 3a 33 2e 37 72 65 6d 3b Data Ascii: min-width:1280px){.molecules-colorPickerPatternsItem-button__active:before{height:3.2rem;transform:translate3d(-.5rem,-.5rem,0);width:3.2rem}}@media only screen and (min-width:1750px){.molecules-colorPickerPatternsItem-button__active:before{height:3.7rem;
2024-04-26 12:23:23 UTC	12792	IN	Data Raw: 72 70 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 61 66 35 30 64 63 7d 2e 6d 6f 6c 65 63 75 6c 65 73 2d 6f 75 72 4f 66 66 69 63 65 73 49 74 65 6d 2d 69 63 6f 6e 57 72 61 70 70 65 72 5f 5f 6d 61 67 65 6e 74 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 35 66 61 30 7d 2e 6d 6f 6c 65 63 75 6c 65 73 2d 6f 75 72 4f 66 66 69 63 65 73 49 74 65 6d 2d 69 63 6f 6e 57 72 61 70 70 65 72 5f 5f 76 69 6f 6c 65 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 34 35 34 65 61 7d 2e 6d 6f 6c 65 63 75 6c 65 73 2d 6f 75 72 4f 66 66 69 63 65 73 49 74 65 6d 2d 69 63 6f 6e 57 72 61 70 70 65 72 5f 5f 72 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 61 34 31 34 62 7d 2e 6d 6f 6c 65 63 75 6c 65 73 2d 6f 75 72 Data Ascii: rple{background-color:#af50dc}.molecules-ourOfficesItem-iconWrapper__magenta{background-color:#ff5fa0}.molecules-ourOfficesItem-iconWrapper__violet{background-color:#5454ea}.molecules-ourOfficesItem-iconWrapper__red{background-color:#fa414b}.molecules-our
2024-04-26 12:23:23 UTC	4631	IN	Data Raw: 61 70 74 75 72 65 45 6c 65 6d 65 6e 74 73 2d 72 6f 77 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 2d 72 65 76 65 72 73 65 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 38 30 70 78 29 7b 2e 6d 6f 6c 65 63 75 6c 65 73 2d 65 6d 61 69 6c 43 61 70 74 75 72 65 45 6c 65 6d 65 6e 74 73 2d 72 6f 77 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 75 6e 73 65 74 7d 7d 2e 6d 6f 6c 65 63 75 6c 65 73 2d 65 6d 61 69 6c 43 61 70 74 75 72 65 45 6c 65 6d 65 6e 74 73 2d 63 6f 6e 74 65 6e 74 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 68 65 69 67 68 74 3a 31 30 30 25 3b Data Ascii: aptureElements-row{flex-direction:column-reverse}@media only screen and (min-width:1280px){.molecules-emailCaptureElements-row{flex-direction:unset}}.molecules-emailCaptureElements-content{align-items:center;display:flex;flex-direction:column;height:100%;
2024-04-26 12:23:23 UTC	12792	IN	Data Raw: 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 72 65 6d 7d 2e 6d 6f 6c 65 63 75 6c 65 73 2d 65 6d 61 69 6c 43 61 70 74 75 72 65 45 6c 65 6d 65 6e 74 73 2d 69 63 6f 6e 73 43 6f 6e 74 61 69 6e 65 72 20 62 75 74 74 6f 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 6d 6f 6c 65 63 75 6c 65 73 2d 65 6d 61 69 6c 43 61 70 74 75 72 65 45 6c 65 6d 65 6e 74 73 2d 69 63 6f 6e 73 43 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 6d 6f 6c 65 63 75 6c 65 73 2d 65 6d 61 69 6c 43 61 70 74 75 72 65 45 6c 65 6d 65 6e 74 73 2d 69 63 6f 6e 73 43 6f 6e 74 61 69 6e 65 72 20 62 75 74 74 6f 6e 7b 6d Data Ascii: {margin-right:2rem}.molecules-emailCaptureElements-iconsContainer button:last-child{margin-right:0}@media only screen and (min-width:768px){.molecules-emailCaptureElements-iconsContainer{display:flex}.molecules-emailCaptureElements-iconsContainer button{m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49881	151.101.129.35	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:22 UTC	911	OUT	GET /ts?v=1.8.16&t=1714134198349&g=-120&e=err&page=ice%3Avenmo%3Asignin&pgrp=ice%3Avenmo%3Asignin&comp=identityappsnodeweb&erpg=Script%20error&error_type=WINDOW_ONERROR&error_source=-%200%3A0&tenant_name=venmo HTTP/1.1 Host: t.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; l7_az=dcg16.slc; x-pp-s=eyJ0IjoiMTcxNDEzNDE3ODM3OSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742201%26vteXpYrS%3D1714136001%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew
2024-04-26 12:23:23 UTC	1237	IN	HTTP/1.1 200 OK Connection: close CORRELATION-ID: 8437257dcb445 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Fri, 26 Apr 2024 12:23:23 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: 8437257dcb445 Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1808742203%26vteXpYrS%3D1714136003%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew;Expires=Mon, 26 Apr 2027 12:23:23 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088;Expires=Mon, 26 Apr 2027 12:23:23 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-00000000000000000008437257dcb445-f7f6f7a9ded841ea-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Fri, 26 Apr 2024 12:23:23 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-dfw-kdal2120100-DFW, cache-pdk-kfty2130031-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1714134203.067130,VS0,VE67 vary: Accept-Encoding Server-Timing: content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-04-26 12:23:23 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-04-26 12:23:23 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-04-26 12:23:23 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49880	151.101.129.35	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:22 UTC	1466	OUT	GET /ts?v=1.8.16&t=1714134198976&g=-120&pgrp=ice%3Avenmo%3Asignin&page=ice%3Avenmo%3Asignin&pgst=1714134190358&calc=f412707ec485b&nsid=r1IVgdqL-yPwDL7QwOzbe1TQMyLGYUSv&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=27eeff60847a45c7be538d1141f33e9b&comp=identityappsnodeweb&tsrce=identityappsnodeweb&cu=0&ef_policy=ccpa&c_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial&flnm=identityappsnodeweb&tenant_name=venmo&e=im&imsrc=setup&view=%7B%22t10%22%3A529%2C%22t11%22%3A13578%2C%22tcp%22%3A10472%2C%22et%22%3A%223g%22%2C%22nt%22%3A%22navigate%22%2C%22bt%22%3A102%7D&pt=Log%20in%20%7C%20Venmo&cd=24&sw=1280&sh=1024&dw=1280&dh=1024&bw=1280&bh=907&ce=1&t1=529&t1c=528&t1d=146&t1s=289&t2=411&t3=13&t4d=0&t4=0&t4e=10472&tt=0&rdc=0&protocol=http%2F1.1&cdn=fastly&res=%7B%7D HTTP/1.1 Host: t.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; l7_az=dcg16.slc; x-pp-s=eyJ0IjoiMTcxNDEzNDE3ODM3OSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742201%26vteXpYrS%3D1714136001%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew
2024-04-26 12:23:23 UTC	1237	IN	HTTP/1.1 200 OK Connection: close CORRELATION-ID: 2d19bfe6a68b0 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Fri, 26 Apr 2024 12:23:23 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: 2d19bfe6a68b0 Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1808742203%26vteXpYrS%3D1714136003%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew;Expires=Mon, 26 Apr 2027 12:23:23 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088;Expires=Mon, 26 Apr 2027 12:23:23 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-00000000000000000002d19bfe6a68b0-07a9c2b0c85883a1-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Fri, 26 Apr 2024 12:23:23 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-dfw-kdfw8210056-DFW, cache-pdk-kpdk1780121-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1714134203.067623,VS0,VE68 vary: Accept-Encoding Server-Timing: content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-04-26 12:23:23 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-04-26 12:23:23 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-04-26 12:23:23 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49878	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:22 UTC	592	OUT	GET /ice/assets/venmo/fonts/Scto-Grotesk-A-Regular.woff HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://id.venmo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:23 UTC	844	IN	HTTP/1.1 200 OK Connection: close Content-Length: 41894 Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: font/woff Etag: "60b7d63b-a3a6" Last-Modified: Wed, 02 Jun 2021 19:04:27 GMT Paypal-Debug-Id: 1f14f04870c46 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000001f14f04870c46-c0834c1dd364d1cd-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:22 GMT X-Served-By: cache-dfw-kdfw8210128-DFW, cache-pdk-kpdk1780132-PDK X-Cache: HIT, HIT X-Cache-Hits: 1583, 0 X-Timer: S1714134203.993189,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:23 UTC	1379	IN	Data Raw: 77 4f 46 46 4f 54 54 4f 00 00 a3 a6 00 0b 00 00 00 01 43 40 00 01 00 00 00 00 a1 c0 00 00 01 75 00 00 03 12 00 00 a3 38 00 00 00 6e 43 46 46 20 00 00 09 40 00 00 5d e8 00 00 79 52 c3 5a ce 62 47 50 4f 53 00 00 6e 88 00 00 33 35 00 00 aa da 66 89 4c f7 47 53 55 42 00 00 6b 08 00 00 03 7e 00 00 07 b2 60 a9 4b 52 4f 53 2f 32 00 00 01 6c 00 00 00 59 00 00 00 60 90 d2 61 18 63 6d 61 70 00 00 04 34 00 00 04 f6 00 00 06 e6 9d fb ce 44 68 65 61 64 00 00 01 08 00 00 00 36 00 00 00 36 10 47 27 90 68 68 65 61 00 00 01 40 00 00 00 21 00 00 00 24 08 0d 05 77 68 6d 74 78 00 00 67 28 00 00 03 df 00 00 08 ba d8 de 72 3d 6d 61 78 70 00 00 01 64 00 00 00 06 00 00 00 06 02 33 50 00 6e 61 6d 65 00 00 01 c8 00 00 02 69 00 00 06 15 ad 50 96 f2 70 6f 73 74 00 00 09 2c 00 00 00 Data Ascii: wOFFOTTOC@u8nCFF @]yRZbGPOSn35fLGSUBk~`KROS/2lY`acmap4Dhead66G'hhea@!$whmtxg(r=maxpd3PnameiPpost,
2024-04-26 12:23:23 UTC	1379	IN	Data Raw: 43 19 c6 70 6e e2 46 6e 66 0e 77 33 9a 15 3c 46 0e 63 b9 85 71 64 6b 0c 37 68 9c 6e d5 58 4d d2 64 e5 d8 a3 73 6a 43 1c e5 c9 65 8a 26 32 59 b7 30 95 69 54 d4 68 96 71 1f 6b 78 42 ed a9 ca 29 dc ce 74 66 70 07 93 34 5e d9 1c d5 83 f4 61 16 77 a9 50 5b c8 64 08 77 32 93 5a 2c a1 80 e5 dc cf 03 3c c4 c3 ac 64 15 ab 79 d4 ee f0 71 7e 65 1f fb d5 88 d9 e4 31 8f 7c e6 b3 80 85 2c e2 1e 16 13 17 f7 a9 1d 33 db 32 c4 db 5b 69 66 cf b8 b5 dd 53 16 13 c8 51 8e f2 b5 41 a5 ae be 6b e9 de 72 db 5c 71 b9 cd a1 e9 a1 bb 42 fb bd 1a 5e 3d 2f e4 f9 5e 8a d7 dc 4b f3 d2 bd 11 de 78 2f c7 9b e9 3d 16 f6 c3 29 e1 ee e1 cc 70 df f0 7c df f9 f1 7e 35 3f c9 af e7 87 fc 54 bf bd 9f e5 0f f2 ef f1 97 f8 05 8d 86 04 f7 07 4f 07 cf 06 9b 82 57 82 f7 82 2d c1 9e 94 79 8d e7 9f b1 Data Ascii: CpnFnfw3<Fcqdk7hnXMdsjCe&2Y0iThqkxB)tfp4^awP[dw2Z,<dyq~e1\|,32[ifSQAkr\qB^=/^Kx/=)p\|~5?TOW-y
2024-04-26 12:23:23 UTC	1379	IN	Data Raw: 9a 5a 4f fd 44 ed a6 0e 52 67 a8 4b d4 0d aa 80 2a a6 aa a9 c7 d4 73 ea a3 92 50 2a 95 ac d2 52 c9 2b 3b 2a ed 95 3d 95 7d 94 de 4a 3f e5 50 e5 78 65 88 32 42 39 4b b9 40 f9 83 72 a5 72 a3 72 ab 72 9f f2 84 f2 bc 32 4b 99 a7 bc a3 bc af fc 55 59 a3 7c a2 7c a9 fc a0 14 68 82 56 d1 3a 5a 4f b7 a4 db d0 1d 69 07 ba 2f 3d 84 1e 4d 07 d2 21 f4 74 7a 36 3d 97 4e a4 57 d0 3f d2 9b e9 fd f4 19 3a 83 ce a6 6f d1 65 f4 03 ba 8e 7e 4d 0b 8c 82 d1 32 2d 98 f6 4c 37 c6 99 71 67 fa 31 03 99 11 cc 38 66 0a 33 95 89 62 e2 99 85 cc 1a e6 27 66 2f 73 9a b9 c6 94 30 d5 4c 1d 23 a8 b4 2a 5e 65 af 72 55 f9 a9 c6 aa 82 55 b1 aa 25 aa d5 aa f5 aa 9f 55 bb 54 07 55 c7 55 67 54 e9 aa eb aa 7c 55 b1 aa 42 55 ab 7a ae 7a ab 7a af 02 95 59 4d aa 19 b5 56 dd 44 ad 57 5b a9 8d 6a 5b Data Ascii: ZODRgKsPR+;=}J?Pxe2B9K@rrrr2KUY\|\|hV:ZOi/=M!tz6=NW?:oe~M2-L7qg18f3b'f/s0L#^erUU%UTUUgT\|UBUzzzYMVDW[j[
2024-04-26 12:23:23 UTC	1379	IN	Data Raw: 21 8c 0b 97 07 30 2e 5c 1a be b8 70 71 7e e0 22 34 1a 4f 75 91 67 9e 44 14 8b 3d 02 5e aa a7 e2 5b 71 9d c7 45 c4 f4 a0 ae d1 31 a1 c1 e2 25 44 bc 84 8a 97 30 f1 12 2e 5e a6 8a 97 69 e2 25 42 bc 4c 17 2f 33 c4 4b a4 78 99 29 5e a2 c4 4b b4 78 99 25 5e 66 8b 97 18 f1 12 2b 5e e2 c4 4b bc 78 99 23 5e 12 c4 cb 5c f1 32 4f bc cc 97 b0 78 f8 9d bc bd e4 c2 57 2c 1c 7b 49 f6 e2 d4 cf 51 2e ba cb 85 bd 5c 38 c8 85 93 5c 48 56 d7 cb cb 59 e6 6b 28 9c e4 42 b2 41 27 4f 99 c1 53 62 77 94 0b 2f 07 47 b9 90 45 fb c8 94 3e 2e 72 e1 29 e3 9c e4 a2 87 0c 94 54 72 ee e5 20 17 92 14 87 5e 8e 72 d1 f0 e4 20 17 dd 65 3e 67 b9 e8 29 17 2e 72 21 37 cc 4b 6e 98 97 5c bb ac bc 93 97 ac 84 97 b7 5c f4 93 3b 44 6e b4 b7 24 ba 87 b3 bd 5c 34 3c 39 ca 45 77 b9 e8 21 17 4e 72 e1 2c Data Ascii: !0.\pq~"4OugD=^[qE1%D0.^i%BL/3Kx)^Kx%^f+^Kx#^\2OxW,{IQ.\8\HVYk(BA'OSbw/GE>.r)Tr ^r e>g).r!7Kn\\;Dn$\4<9Ew!Nr,
2024-04-26 12:23:23 UTC	1379	IN	Data Raw: 47 ce 9e 38 39 ea 60 ea 2a e3 50 c6 77 dd e5 a0 47 d6 da ea 6b d7 c6 c0 0a 1f 15 f2 47 cb e8 d1 10 e0 aa 82 e6 4a 64 c9 80 25 78 d1 72 d5 3a 61 bd de 21 7b e8 ef 71 86 cb 8b 69 f4 93 ca 75 cb a8 cb cb 2b d4 ee cc 4f a8 e9 43 5f 68 f6 83 ba 75 fe 07 15 58 6e 7a 50 51 6f f5 64 d4 cd ee fb 0d be bb 68 48 56 dd f9 e1 72 c8 4f ae ea 2a 66 35 28 9d cb 10 f3 8b fa af 21 ad 54 48 f9 83 9b 57 1b 2b c8 42 d3 f5 b7 e7 1f 0c 19 6b e5 33 7a b2 cb 72 03 2c 53 21 1f 08 d6 17 5e 4c 2b dd 64 40 0b 54 b3 7e a2 07 ee 8c 39 77 d5 4a c7 95 74 64 b9 f6 5a a1 79 92 be 71 72 7d 98 f1 fb a8 02 e3 1f 40 d3 4e 4c c0 00 3a 35 c0 6f af 87 75 e3 4c 6c 7d ac fb 8d c1 46 47 a4 c4 ee 29 eb 0e 1d 9e 55 34 e7 57 6b 58 0b 7f eb 71 33 c9 56 c8 38 72 dc ce 63 c1 06 78 26 78 d3 a7 26 ec f1 77 Data Ascii: G89`PwGkGJd%xr:a!{qiu+OC_huXnzPQodhHVrOf5(!THW+Bk3zr,S!^L+d@T~9wJtdZyqr}@NL:5ouLl}FG)U4WkXq3V8rcx&x&w
2024-04-26 12:23:23 UTC	1379	IN	Data Raw: ca 5b c0 92 9b 13 f2 b9 67 e0 a1 bd 0c fa 0c 60 ae 58 9c 89 e0 b5 e6 5e e1 bc 64 85 af a0 09 34 41 0e af 82 f9 0e a8 09 6a 02 0e 1d 00 2f b9 f7 42 e7 c0 e9 52 38 56 aa d5 cb 83 f2 f4 e6 79 7e d6 ac b1 0d 03 92 09 5d af 3e b8 46 9e cb 83 ee 37 29 18 8a 4d ce b7 48 ab 9f 8f 6a 69 d4 bc 06 9a ab e6 43 2d cd 65 f5 81 a6 fa d9 3c dc b9 06 4b af 92 da 1f 59 d3 f6 48 7e 25 bb 92 a5 b5 2f 6e 5f af d8 ba 3d 79 cd 2e 83 16 69 4a 01 50 86 4a 8b f6 7f ea 44 d7 32 d5 d8 f1 c0 43 a6 1a 3b 9e df 18 74 d0 d4 99 d6 5e 83 d3 59 e4 b9 02 e8 7d 8b 82 c1 da 77 e1 fc 43 3f 36 c5 34 4a 5b 78 f8 50 ce ce 14 71 52 17 ab d6 cf 8b c5 13 bf f3 30 3c f1 b5 2b 79 8b da 72 2d 0e 1a 78 6d 52 a9 e9 db 04 2d 3a 06 0b ca c8 3c d8 49 e5 c1 02 3d ec 2c 43 3b 19 dd 3c 1e 0f 7e b7 30 56 9b 85 Data Ascii: [g`X^d4Aj/BR8Vy~]>F7)MHjiC-e<KYH~%/n_=y.iJPJD2C;t^Y}wC?64J[xPqR0<+yr-xmR-:<I=,C;<~0V
2024-04-26 12:23:23 UTC	1379	IN	Data Raw: 7d dc f4 ad 05 69 d1 c4 a2 bd 45 2f 8b 01 16 e3 2c a6 5b cc b7 58 63 71 d0 e2 bc 45 ae 45 a9 45 9d 85 99 fb 96 6b c7 f5 e2 46 71 51 5c 06 57 c6 99 9a 35 6b 66 68 e6 d4 6c 60 b3 29 cd 12 9a ad 6a b6 bb d9 d9 66 37 9b d5 34 fb 4b cf ea 5b e9 bb e9 7d f4 07 f4 f5 96 4d 2d 3b 59 8e b6 9c 61 b9 d0 72 bd e5 ab ef 89 ef 5b 7e 6f f8 de e6 fb 9e df 0f fe 3e e4 fb 79 df 9f fd fe ce f7 2f 9b ab 9b b7 69 ee d9 7c 45 f3 9d cd 4f 35 cf 69 fe aa 05 db a2 55 0b f7 16 01 2d 66 b6 58 d2 62 67 8b c2 16 75 56 a4 95 de aa 83 95 b7 d5 78 ab ed 56 17 ac 4a ac 5e 58 33 d6 0e d6 fd ad 27 5a 27 58 6f 68 a9 6a 69 d3 b2 57 cb d1 2d 97 b6 dc dd 32 af e5 c3 96 c0 37 e1 db f3 de fc 7a fe 20 9f c9 df e7 5f 19 18 83 b5 a1 bb 61 a0 61 8a 21 de 90 6c d8 63 38 63 b8 69 a8 36 bc 33 3a 18 07 Data Ascii: }iE/,[XcqEEEkFqQ\W5kfhl`)jf74K[}M-;Yar[~o>y/i\|EO5iU-fXbguVxVJ^X3'Z'XohjiW-27z _aa!lc8ci63:
2024-04-26 12:23:23 UTC	1379	IN	Data Raw: a2 b2 3e a3 74 c7 93 ee 08 35 85 e4 e5 aa 1f 2b 20 e8 3e 25 54 59 be 64 70 a0 6e 41 a7 dd de f7 f0 b9 55 3f a6 ef 42 ff a8 71 06 e4 0b 03 e8 c7 17 4b b3 9f 58 3d 18 5e 81 58 a4 ec ef e6 ec 77 26 e0 f2 58 43 d7 40 cf e1 8e 56 48 f3 b2 1f 18 9f ff 7a 2c eb 86 01 c5 cd d7 77 1c 7c a9 f4 f6 85 f3 cf d2 8d 38 df 9f 44 4f 99 3c 34 ce db da 55 98 a7 bf 7e fa 52 71 c1 d9 e0 80 21 21 e1 0e 93 0c 93 32 66 9e bf 62 a5 83 13 c8 25 0b 9a 16 c0 d3 02 b0 be 4e e6 dd 86 a6 f7 e1 e4 2d e8 72 93 12 46 6f d3 e7 e5 1c b8 7a da 38 7e d3 b9 d9 d9 d6 4f 1f bc 87 01 d8 bc db 82 37 da 88 7e 40 03 91 27 5a 87 a2 a0 1b 1a 0e 9b af 5f df b8 fd 9a 31 47 b5 20 70 f4 92 e1 d6 28 10 b5 87 f6 10 02 41 60 0b 3d 71 a6 19 05 3a 9c 99 e2 e0 76 5c 0f ff b9 73 b7 5e 34 c2 d3 01 7e aa 2b 11 a3 Data Ascii: >t5+ >%TYdpnAU?BqKX=^Xw&XC@VHz,w\|8DO<4U~Rq!!2fb%N-rFoz8~O7~@'Z_1G p(A`=q:v\s^4~+
2024-04-26 12:23:23 UTC	1379	IN	Data Raw: e5 52 d7 b1 5c c9 22 5e f7 0b 4f de a9 80 e5 15 94 1d 1e 93 2b cb 8a 05 02 a7 d7 8a 72 ca 83 d5 8d e2 2d 2a ca e1 a7 72 ee 52 5b 9e 9b 1b 87 f1 5d f7 b3 07 84 29 14 6c 2a d7 37 be 41 19 64 4e a4 9f e2 42 48 a4 dd 18 dd bb fd e2 f6 0c d5 8d 97 68 8f 0b c3 a9 c9 f8 b6 db 62 96 3c 88 f9 ba f0 ba 2d 2c 79 51 30 52 03 58 5d 22 fc 52 bc f4 8e c5 8b 7b 70 ef 1e 97 2a 8c 87 5f f4 0b 59 6e d6 34 9e 4b bd 01 ec d0 0a 6b 1d 0a c2 71 c6 29 e1 7b ea 94 30 4c ff 2b 83 63 15 3f 60 91 1f fd 2b 83 17 fd 75 f4 20 bc 66 2f 15 92 f3 c1 32 81 84 fe b7 29 41 29 e4 eb 53 58 b4 fd 36 6c 87 a6 18 39 0f fe cc 7f 2d a3 07 61 b4 46 68 af 47 4d 5f 43 d3 fc 14 b6 3d 6a 32 04 9a 20 ee 36 70 22 e9 e8 87 e5 a0 ce 07 be 9c 7a d8 93 bf 71 92 85 e6 95 54 de 12 f6 70 5d 27 68 69 0d 2d 9e 54 Data Ascii: R\"^O+r-rR[])l7AdNBHhb<-,yQ0RX]"R{p*_Yn4Kkq){0L+c?`+u f/2)A)SX6l9-aFhGM_C=j2 6p"zqTp]'hi-T
2024-04-26 12:23:23 UTC	1379	IN	Data Raw: ad 69 f4 93 c4 5e 02 1d 4a 64 76 e8 af 17 c2 4b cc e1 0c 74 50 ca 37 ba c4 e4 12 b8 80 55 38 7f 8f 2a 85 bf f5 10 89 86 dd 83 61 10 55 82 63 fc 61 fd d0 30 ec ff cc 7d 95 c2 8f 25 e6 1f 25 62 f2 09 76 fb af 00 e9 85 b1 c8 93 2e 57 99 09 68 2e e0 3f f1 56 84 2c 35 f7 d5 0b 53 4a cc 53 64 ea 37 98 5a c8 14 fa ea cd 63 c1 93 f6 50 09 04 6a 6e c6 7f e2 ad 08 d9 84 d2 f4 e6 29 be 82 48 fe 44 e8 47 3d 81 0b 7a a1 1f 9a 4c 57 aa d0 1b 6c b2 f8 0f df 9a 45 08 6e 4a 33 4c 21 e4 80 49 6f ee 07 93 69 77 15 bc 41 dd 11 fe c3 b7 82 08 91 bb f3 b5 30 96 7a 8d bb 53 18 5b 62 1e 8b e5 fe 25 f8 90 f5 42 7f 0a 1c fe d2 83 2b fe b9 23 b7 cb 99 48 34 78 77 70 1f 9f 89 dc f1 0f 3f 8d 1f 0f a2 d1 bb 22 37 2c 28 bf 1e be 29 81 6f 70 42 7b b0 be d9 23 71 74 1a 7a 6e 00 ca 94 f3 Data Ascii: i^JdvKtP7U8*aUca0}%%bv.Wh.?V,5SJSd7ZcPjn)HDG=zLWlEnJ3L!IoiwA0zS[b%B+#H4xwp?"7,()opB{#qtzn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49885	151.101.193.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:23 UTC	1449	OUT	GET /da/r/fb.js HTTP/1.1 Host: c.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://c.paypal.com/v1/r/d/i?js_src=https://c.paypal.com/da/r/fb.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; KHcl0EuY7AKSMgfvHl7J5E7hPtK=H5vOX4Xx9E6rPaNsW1umPOEju90KfJTschjWY_e1f92eqJS1o6EoZAYAvBErjHwsTvfIlecHLC-YGp_e; l7_az=dcg16.slc; sc_f=CEKPNHQG08AWc-eXVA4YPw93eSBWwxF4jXwznQNxJ_4VWbeV7FgS4yQ2I1Wt5sfyajVP4H77tpr0Ipov674wteSk7U1-EXiXl3h4f0; x-pp-s=eyJ0IjoiMTcxNDEzNDE3ODM3OSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742201%26vteXpYrS%3D1714136001%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew
2024-04-26 12:23:23 UTC	1049	IN	HTTP/1.1 200 OK Connection: close Content-Length: 67714 Access-Control-Allow-Headers: x-csrf-token Content-Type: application/javascript DC: ccg11-origin-www-1.paypal.com Etag: "65de8f54-10882" Last-Modified: Wed, 28 Feb 2024 01:41:40 GMT Paypal-Debug-Id: 9b1227dfb22d7 Server: ECAcc (dac/9C80) Traceparent: 00-00000000000000000009b1227dfb22d7-7d04f40e77b26291-01 X-Content-Type-Options: nosniff Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:23 GMT Via: 1.1 varnish Age: 23273 Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-pdk-kpdk1780038-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1714134203.350234,VS0,VE2 vary: Accept-Encoding, Accept-Encoding Expires: Sat, 27 Apr 2024 12:23:23 GMT Cache-Control: no-cache, no-store, must-revalidate,max-age=86400 ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET ACCESS-CONTROL-ALLOW-CREDENTIALS: false ACCESS-CONTROL-MAX-AGE: 86400 Server-Timing: content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: *
2024-04-26 12:23:23 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 50 41 59 50 41 4c 3d 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 7c 7c 7b 7d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 72 65 74 75 72 6e 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f Data Ascii: "use strict";var PAYPAL=window.PAYPAL\|\|{};!function(){function e(n){return e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.proto
2024-04-26 12:23:23 UTC	16384	IN	Data Raw: 69 66 69 63 2f 46 69 6a 69 22 3d 3d 3d 69 2e 6e 61 6d 65 26 26 31 34 31 34 32 34 35 36 65 35 3d 3d 3d 65 5b 36 5d 2e 73 26 26 31 33 39 36 31 30 31 36 65 35 3d 3d 3d 65 5b 36 5d 2e 65 29 72 65 74 75 72 6e 20 30 3b 72 65 74 75 72 6e 20 74 7d 28 65 2c 6e 2c 69 2c 74 29 2c 69 7d 2c 69 3d 7b 7d 2c 6f 3d 71 2e 6f 6c 73 6f 6e 2e 64 73 74 5f 72 75 6c 65 73 2e 7a 6f 6e 65 73 2c 61 3d 6f 2e 6c 65 6e 67 74 68 2c 72 3d 79 2e 41 4d 42 49 47 55 49 54 49 45 53 5b 6e 5d 2c 63 3d 30 3b 63 3c 61 3b 63 2b 2b 29 7b 76 61 72 20 73 3d 6f 5b 63 5d 2c 75 3d 74 28 6f 5b 63 5d 29 3b 22 4e 2f 41 22 21 3d 3d 75 26 26 28 69 5b 73 2e 6e 61 6d 65 5d 3d 75 29 7d 66 6f 72 28 76 61 72 20 64 20 69 6e 20 69 29 69 66 28 69 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 64 29 29 66 6f 72 28 Data Ascii: ific/Fiji"===i.name&&14142456e5===e[6].s&&13961016e5===e[6].e)return 0;return t}(e,n,i,t),i},i={},o=q.olson.dst_rules.zones,a=o.length,r=y.AMBIGUITIES[n],c=0;c<a;c++){var s=o[c],u=t(o[c]);"N/A"!==u&&(i[s.name]=u)}for(var d in i)if(i.hasOwnProperty(d))for(
2024-04-26 12:23:23 UTC	16384	IN	Data Raw: 22 22 29 29 7d 7d 7d 28 65 29 3b 63 2e 74 69 6d 65 3d 6c 2e 74 69 6d 65 2c 63 2e 70 74 31 3d 6c 2e 70 74 31 3b 74 72 79 7b 76 61 72 20 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 2c 69 3d 22 22 2c 6f 3d 22 22 2c 61 3d 5b 5d 3b 69 66 28 65 2e 6e 61 76 69 67 61 74 6f 72 26 26 65 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7b 76 61 72 20 72 3d 65 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 3b 69 3d 67 65 28 69 2c 72 29 2c 74 3d 46 28 31 2c 35 29 3b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 73 3d 72 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 72 2e 6c 65 6e 67 74 68 3c 3d 31 30 30 3f 72 2e 6c 65 6e 67 74 68 3a 31 30 30 29 2c 75 3d 30 3b 75 3c 3d 73 2e 6c 65 6e 67 74 68 2f 74 3b 75 2b 2b 29 63 2b 3d 73 2e 73 75 62 Data Ascii: ""))}}}(e);c.time=l.time,c.pt1=l.pt1;try{var m=function(e,n){var t,i="",o="",a=[];if(e.navigator&&e.navigator.userAgent){var r=e.navigator.userAgent;i=ge(i,r),t=F(1,5);for(var c="",s=r.substring(0,r.length<=100?r.length:100),u=0;u<=s.length/t;u++)c+=s.sub
2024-04-26 12:23:23 UTC	16384	IN	Data Raw: 72 79 26 26 76 6f 69 64 20 30 21 3d 3d 74 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 65 6d 6f 72 79 2e 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 3f 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 65 6d 6f 72 79 2e 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 3a 31 30 37 33 37 34 31 38 32 34 29 2f 31 30 34 38 35 37 36 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 28 6e 65 77 20 45 72 72 6f 72 28 22 64 65 74 65 63 74 49 6e 63 6f 67 6e 69 74 6f 20 73 6f 6d 65 68 6f 77 20 66 61 69 6c 65 64 20 74 6f 20 71 75 65 72 79 20 73 74 6f 72 61 67 65 20 71 75 6f 74 61 3a 20 22 2b 65 2e 6d 65 73 73 61 67 65 29 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 76 6f 69 64 20 30 21 3d 3d 73 65 6c 66 2e 50 72 6f 6d 69 73 65 26 26 76 6f 69 64 20 30 21 3d 3d 73 65 6c Data Ascii: ry&&void 0!==t.performance.memory.jsHeapSizeLimit?performance.memory.jsHeapSizeLimit:1073741824)/1048576))}),(function(e){n(new Error("detectIncognito somehow failed to query storage quota: "+e.message))}))}function u(){void 0!==self.Promise&&void 0!==sel
2024-04-26 12:23:23 UTC	2178	IN	Data Raw: 26 69 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 62 75 26 26 4c 65 28 69 29 2c 69 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 63 64 26 26 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 29 7b 76 61 72 20 6e 3d 70 61 72 73 65 49 6e 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 64 2e 4c 53 5f 50 31 5f 50 4f 53 54 5f 43 4f 55 4e 54 53 29 2c 31 30 29 7c 7c 30 2c 74 3d 70 61 72 73 65 49 6e 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 64 2e 4c 53 5f 50 32 5f 50 4f 53 54 5f 54 49 4d 45 29 2c 31 30 29 7c 7c 30 2c 69 3d 77 69 6e 64 6f 77 2e 6c 6f 63 Data Ascii: &i.configuration.bu&&Le(i),i.configuration.cd&&function(e){if(null==e?void 0:e.configuration.localStorage){var n=parseInt(window.localStorage.getItem(d.LS_P1_POST_COUNTS),10)\|\|0,t=parseInt(window.localStorage.getItem(d.LS_P2_POST_TIME),10)\|\|0,i=window.loc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49886	151.101.193.35	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:23 UTC	784	OUT	GET /v1/r/d/b/p3?f=27eeff60847a45c7be538d1141f33e9b&s=ICE_VENMO_LOGIN_PUBLIC_PAGE HTTP/1.1 Host: c6.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; l7_az=dcg16.slc; x-pp-s=eyJ0IjoiMTcxNDEzNDE3ODM3OSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742201%26vteXpYrS%3D1714136001%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew
2024-04-26 12:23:23 UTC	794	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 Access-Control-Expose-Headers: Server-Timing CORRELATION-ID: c9e5d985b317b Cache-Control: max-age=0, no-cache, no-store, must-revalidate Paypal-Debug-Id: c9e5d985b317b Traceparent: 00-0000000000000000000c9e5d985b317b-08f2bcd931692bf0-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Fri, 26 Apr 2024 12:23:23 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-dfw-kdfw8210039-DFW, cache-pdk-kfty2130048-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1714134203.353644,VS0,VE100 vary: Accept-Encoding Server-Timing: "traceparent;desc="00-0000000000000000000c9e5d985b317b-5cc35e6f7b6cc8f6-01"";content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49887	151.101.129.35	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:23 UTC	1316	OUT	GET /ts?v=1.8.16&t=1714134201800&g=-120&pgrp=ice%3Avenmo%3Asignin&page=ice%3Avenmo%3Asignin%3ApubCredView&pgst=1714134190358&calc=f412707ec485b&nsid=r1IVgdqL-yPwDL7QwOzbe1TQMyLGYUSv&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=27eeff60847a45c7be538d1141f33e9b&comp=identityappsnodeweb&tsrce=identityappsnodeweb&cu=0&ef_policy=ccpa&c_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial&flnm=identityappsnodeweb&tenant_name=venmo&view=%7B%22t11%22%3A16630%2C%22et%22%3A%223g%22%2C%22pt%22%3A%22Log%20in%20%7C%20Venmo%22%2C%22ru%22%3A%22%22%7D&cd=24&sw=1280&sh=1024&dw=1280&dh=1024&bw=1280&bh=907&tt=-1714134185169&e=pf HTTP/1.1 Host: t.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; l7_az=dcg16.slc; x-pp-s=eyJ0IjoiMTcxNDEzNDE3ODM3OSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742202%26vteXpYrS%3D1714136002%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew
2024-04-26 12:23:23 UTC	1237	IN	HTTP/1.1 200 OK Connection: close CORRELATION-ID: f0f01a022329d Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Fri, 26 Apr 2024 12:23:23 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: f0f01a022329d Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1808742203%26vteXpYrS%3D1714136003%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew;Expires=Mon, 26 Apr 2027 12:23:23 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088;Expires=Mon, 26 Apr 2027 12:23:23 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-0000000000000000000f0f01a022329d-fe82032f119bc863-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Fri, 26 Apr 2024 12:23:23 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-dfw-kdfw8210030-DFW, cache-pdk-kfty2130042-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1714134204.501156,VS0,VE66 vary: Accept-Encoding Server-Timing: content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-04-26 12:23:23 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-04-26 12:23:23 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-04-26 12:23:23 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49888	35.235.122.5	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:23 UTC	1331	OUT	GET /v1/counter2.cgi?r=cD0yN2VlZmY2MDg0N2E0NWM3YmU1MzhkMTE0MWYzM2U5YiZpPTEwMi4xMjkuMTUyLjIyMCZ0PTE3MTQxMzQxOTAuMzcxJmE9MjEmcz1JQ0VfTE9HSU5fQVBQ8GhQ_E8vIveUuXZlN3mbElNj91k HTTP/1.1 Host: lvs.stats.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; KHcl0EuY7AKSMgfvHl7J5E7hPtK=H5vOX4Xx9E6rPaNsW1umPOEju90KfJTschjWY_e1f92eqJS1o6EoZAYAvBErjHwsTvfIlecHLC-YGp_e; l7_az=dcg16.slc; sc_f=CEKPNHQG08AWc-eXVA4YPw93eSBWwxF4jXwznQNxJ_4VWbeV7FgS4yQ2I1Wt5sfyajVP4H77tpr0Ipov674wteSk7U1-EXiXl3h4f0; x-pp-s=eyJ0IjoiMTcxNDEzNDE3ODM3OSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742202%26vteXpYrS%3D1714136002%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew
2024-04-26 12:23:23 UTC	257	IN	HTTP/1.1 200 OK Connection: close Server: PayPal-B.Stats/1.0 Content-Type: image/jpeg Content-Length: 42 Set-Cookie: c=17de2387d82a9c63c649; Domain=stats.paypal.com; expires=Thu, 21 Apr 2044 12:23:23 GMT; Path=/ Date: Fri, 26 Apr 2024 12:23:23 GMT
2024-04-26 12:23:23 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 01 44 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49889	151.101.1.35	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:23 UTC	2015	OUT	GET /ts?v=1.8.16&t=1714134202778&g=-120&pgrp=main%3Aprivacy%3Apolicy&page=main%3Aprivacy%3Apolicy%3Accpa&pgst=1714134190358&calc=f412707ec485b&nsid=r1IVgdqL-yPwDL7QwOzbe1TQMyLGYUSv&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=27eeff60847a45c7be538d1141f33e9b&comp=identityappsnodeweb&tsrce=identityappsnodeweb&cu=0&ef_policy=ccpa&c_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial&flnm=identityappsnodeweb&tenant_name=venmo&displaypage=ice%3Avenmo%3Asignin&ppage=privacy_banner&bannertype=cookiebanner&flag=ccpa&bannerversion=v6&bannersource=ConsentNodeServ&bannervariant=hidden&xe=108814&xt=142081&eligibility_reason=true&cookie_disabled=false&reason_to_hide=Banner%20Closed&tenant_code=venmo&event_name=venmo_cookie_banner_shown&e=ac HTTP/1.1 Host: t.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://id.venmo.com/signin?country.x=US&locale.x=en&ctxId=AAGTMbXAr-_9hFOdMjFJeDIT2AVC4srohHO4prKJg35LG3f53du_Ei1CXj8jIlvNxkWTpu7ay42oUJl42vchI78= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; KHcl0EuY7AKSMgfvHl7J5E7hPtK=H5vOX4Xx9E6rPaNsW1umPOEju90KfJTschjWY_e1f92eqJS1o6EoZAYAvBErjHwsTvfIlecHLC-YGp_e; l7_az=dcg16.slc; sc_f=CEKPNHQG08AWc-eXVA4YPw93eSBWwxF4jXwznQNxJ_4VWbeV7FgS4yQ2I1Wt5sfyajVP4H77tpr0Ipov674wteSk7U1-EXiXl3h4f0; x-pp-s=eyJ0IjoiMTcxNDEzNDIwMjc5NSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742202%26vteXpYrS%3D1714136002%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew
2024-04-26 12:23:24 UTC	1237	IN	HTTP/1.1 200 OK Connection: close CORRELATION-ID: 4aa95e4cd4738 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Fri, 26 Apr 2024 12:23:23 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: 4aa95e4cd4738 Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1808742203%26vteXpYrS%3D1714136003%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew;Expires=Mon, 26 Apr 2027 12:23:23 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088;Expires=Mon, 26 Apr 2027 12:23:23 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-00000000000000000004aa95e4cd4738-cf532e53db403cde-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Fri, 26 Apr 2024 12:23:23 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-dfw-kdfw8210061-DFW, cache-pdk-kfty2130047-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1714134204.881191,VS0,VE61 vary: Accept-Encoding Server-Timing: content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-04-26 12:23:24 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-04-26 12:23:24 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-04-26 12:23:24 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49890	151.101.129.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:23 UTC	1091	OUT	GET /myaccount/privacy/cookieprefs/getBanner?showBanner=true&country=US&language=en&policyType=CookieBanner&originalHeaders={%22cookie%22:%22cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial%22}&tenant=venmo&tenantData={%22cookiePrefsString%22:%22cookie_prefs%22,%22bannerVariant%22:%22hidden%22} HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; nsid=s%3An7iR5EQmXKz-oKtVXIy1EEIPxyKSFcCK.1TZKfiuN5QvG6VUXG7uj%2F6PzQRey35iwuU69rZa1p10; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; l7_az=dcg16.slc; x-pp-s=eyJ0IjoiMTcxNDEzNDIwMjc5NSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742202%26vteXpYrS%3D1714136002%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew
2024-04-26 12:23:24 UTC	1127	IN	HTTP/1.1 400 Bad Request Connection: close Content-Length: 11 Accept-Ch: Sec-CH-UA-Full Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; style-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; script-src 'nonce-GCX2IpryA3oLpXVLXUnj59Y9vLwMzMKpUtYDaGCBYwCgwsIo' 'self' 'unsafe-inline' https://.paypal.com https://.paypalobjects.com https://recaptcha.net/; img-src 'self' * data:; object-src 'none'; font-src 'self' https://.paypal.com https://.paypalobjects.com; frame-src 'self' https://.paypalobjects.com https://.paypal.com https://recaptcha.net/ https://.qualtrics.com; connect-src 'self' 'unsafe-inline' https://.paypal.com https://.paypalobjects.com https://id.venmo.com https://venmo.com/ https://.qualtrics.com; form-action 'self' https://.paypal.com; base-uri 'self' https://.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp Content-Type: text/plain; charset=utf-8 Etag: W/"b-EFiDB1U+dmqzx9Mo2UjcZ1SJPO8"
2024-04-26 12:23:24 UTC	1587	IN	Data Raw: 4f 72 69 67 69 6e 2d 54 72 69 61 6c 3a 20 41 6c 49 6f 67 56 33 4b 46 74 6e 62 66 56 43 79 6c 39 5a 32 4e 70 72 45 37 46 44 38 50 59 43 74 2b 54 51 69 59 64 45 33 70 70 65 4a 6a 4a 30 78 4a 4b 63 74 68 59 77 4f 78 58 70 52 43 4e 6f 70 78 56 57 64 4f 49 45 4e 4d 63 4e 53 76 51 43 47 41 6d 6a 30 66 77 30 41 41 41 42 32 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 42 68 65 58 42 68 62 43 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6c 4e 6c 62 6d 52 47 64 57 78 73 56 58 4e 6c 63 6b 46 6e 5a 57 35 30 51 57 5a 30 5a 58 4a 53 5a 57 52 31 59 33 52 70 62 32 34 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 32 4f 44 51 34 4f 44 59 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 Data Ascii: Origin-Trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLCJleHBpcnkiOjE2ODQ4ODYzOTksImlzU3ViZG9tYWluI
2024-04-26 12:23:24 UTC	318	IN	Data Raw: 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c 6f 61 64 0d 0a 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 64 66 77 2d 6b 64 66 77 38 32 31 30 31 36 36 2d 44 46 57 2c 20 63 61 63 68 65 2d 70 64 6b 2d 6b 70 64 6b 31 37 38 30 30 34 38 2d 50 44 4b 2c 20 63 61 63 68 65 2d 70 64 6b 2d 6b 70 64 6b 31 37 38 30 30 34 38 2d 50 44 4b 0d 0a 58 2d 43 61 63 68 65 3a 20 4d 49 53 53 2c 20 4d 49 53 53 2c 20 4d 49 53 53 0d 0a 58 2d 43 61 63 68 65 2d 48 69 74 73 3a 20 30 2c 20 30 2c 20 30 0d 0a 58 2d 54 69 6d 65 72 3a 20 53 31 37 31 34 31 33 34 32 30 34 2e 38 39 31 33 31 34 2c 56 53 30 2c 56 45 39 38 0d 0a Data Ascii: Strict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-dfw-kdfw8210166-DFW, cache-pdk-kpdk1780048-PDK, cache-pdk-kpdk1780048-PDKX-Cache: MISS, MISS, MISSX-Cache-Hits: 0, 0, 0X-Timer: S1714134204.891314,VS0,VE98
2024-04-26 12:23:24 UTC	11	IN	Data Raw: 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49891	151.101.193.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:23 UTC	1531	OUT	POST /v1/r/d/b/p1 HTTP/1.1 Host: c.paypal.com Connection: keep-alive Content-Length: 1969 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: application/json sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://c.paypal.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://c.paypal.com/v1/r/d/i?js_src=https://c.paypal.com/da/r/fb.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; KHcl0EuY7AKSMgfvHl7J5E7hPtK=H5vOX4Xx9E6rPaNsW1umPOEju90KfJTschjWY_e1f92eqJS1o6EoZAYAvBErjHwsTvfIlecHLC-YGp_e; l7_az=dcg16.slc; sc_f=CEKPNHQG08AWc-eXVA4YPw93eSBWwxF4jXwznQNxJ_4VWbeV7FgS4yQ2I1Wt5sfyajVP4H77tpr0Ipov674wteSk7U1-EXiXl3h4f0; x-pp-s=eyJ0IjoiMTcxNDEzNDIwMjc5NSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742202%26vteXpYrS%3D1714136002%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew
2024-04-26 12:23:23 UTC	1969	OUT	Data Raw: 7b 22 61 70 70 49 64 22 3a 22 49 43 45 5f 56 45 4e 4d 4f 5f 4c 4f 47 49 4e 5f 50 55 42 4c 49 43 5f 50 41 47 45 22 2c 22 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 22 3a 22 32 37 65 65 66 66 36 30 38 34 37 61 34 35 63 37 62 65 35 33 38 64 31 31 34 31 66 33 33 65 39 62 22 2c 22 70 61 79 6c 6f 61 64 22 3a 7b 22 74 72 74 22 3a 66 61 6c 73 65 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 44 61 74 61 22 3a 7b 22 65 66 66 65 63 74 69 76 65 54 79 70 65 22 3a 22 33 67 22 2c 22 72 74 74 22 3a 22 33 35 30 22 2c 22 64 6f 77 6e 6c 69 6e 6b 22 3a 22 31 2e 35 35 22 7d 2c 22 6e 61 76 69 67 61 74 6f 72 22 3a 7b 22 61 70 70 4e 61 6d 65 22 3a 22 4e 65 74 73 63 61 70 65 22 2c 22 61 70 70 56 65 72 73 69 6f 6e 22 3a 22 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 Data Ascii: {"appId":"ICE_VENMO_LOGIN_PUBLIC_PAGE","correlationId":"27eeff60847a45c7be538d1141f33e9b","payload":{"trt":false,"connectionData":{"effectiveType":"3g","rtt":"350","downlink":"1.55"},"navigator":{"appName":"Netscape","appVersion":"5.0 (Windows NT 10.0; Wi
2024-04-26 12:23:24 UTC	1367	IN	HTTP/1.1 200 OK Connection: close Content-Length: 125 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.paypal.com CORRELATION-ID: 445934ef05791 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: application/json P3p: policyref="/w3c/p3p.xml", CP="NON DSP COR ADM OUR IND COM" Paypal-Debug-Id: 445934ef05791 Set-Cookie: sc_f=CEKPNHQG08AWc-eXVA4YPw93eSBWwxF4jXwznQNxJ_4VWbeV7FgS4yQ2I1Wt5sfyajVP4H77tpr0Ipov674wteSk7U1-EXiXl3h4f0;Domain=.paypal.com;Max-Age=0;Path=/;Secure;Version=1;Expires=Fri, 26-Apr-2024 05:23:24 GMT; HttpOnly; SameSite=None Set-Cookie: sc_f=CEKPNHQG08AWc-eXVA4YPw93eSBWwxF4jXwznQNxJ_4VWbeV7FgS4yQ2I1Wt5sfyajVP4H77tpr0Ipov674wteSk7U1-EXiXl3h4f0;Domain=.paypal.com;Max-Age=157680000;Path=/;Secure;Version=1;Expires=Wed, 25-Apr-2029 05:23:24 GMT; HttpOnly; SameSite=None; Partitioned; Set-Cookie: KHcl0EuY7AKSMgfvHl7J5E7hPtK=H5vOX4Xx9E6rPaNsW1umPOEju90KfJTschjWY_e1f92eqJS1o6EoZAYAvBErjHwsTvfIlecHLC-YGp_e;Domain=.paypal.com;Max-Age=0;Path=/;Secure;Version=1;Expires=Fri, 26-Apr-2024 05:23:24 GMT; HttpOnly; SameSite=None Set-Cookie: KHcl0EuY7AKSMgfvHl7J5E7hPtK=H5vOX4Xx9E6rPaNsW1umPOEju90KfJTschjWY_e1f92eqJS1o6EoZAYAvBErjHwsTvfIlecHLC-YGp_e;Domain=.paypal.com;Max-Age=630720000;Path=/;Secure;Version=1;Expires=Thu, 21-Apr-2044 05:23:24 GMT; HttpOnly; SameSite=None; Partitioned;
2024-04-26 12:23:24 UTC	579	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 37 5f 61 7a 3d 64 63 67 31 36 2e 73 6c 63 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 46 72 69 2c 20 32 36 20 41 70 72 20 32 30 32 34 20 31 32 3a 35 33 3a 32 34 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 54 72 61 63 65 70 61 72 65 6e 74 3a 20 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 34 34 35 39 33 34 65 66 30 35 37 39 31 2d 34 34 33 65 31 66 30 65 34 34 39 38 66 61 63 64 2d 30 31 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 2c 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 44 61 74 65 Data Ascii: Set-Cookie: l7_az=dcg16.slc; Path=/; Domain=paypal.com; Expires=Fri, 26 Apr 2024 12:53:24 GMT; HttpOnly; Secure; SameSite=NoneTraceparent: 00-0000000000000000000445934ef05791-443e1f0e4498facd-01Accept-Ranges: bytesVia: 1.1 varnish, 1.1 varnishDate
2024-04-26 12:23:24 UTC	125	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 73 63 22 3a 22 43 45 4b 50 4e 48 51 47 30 38 41 57 63 2d 65 58 56 41 34 59 50 77 39 33 65 53 42 57 77 78 46 34 6a 58 77 7a 6e 51 4e 78 4a 5f 34 56 57 62 65 56 37 46 67 53 34 79 51 32 49 31 57 74 35 73 66 79 61 6a 56 50 34 48 37 37 74 70 72 30 49 70 6f 76 36 37 34 77 74 65 53 6b 37 55 31 2d 45 58 69 58 6c 33 68 34 66 30 22 7d Data Ascii: {"error":false,"sc":"CEKPNHQG08AWc-eXVA4YPw93eSBWwxF4jXwznQNxJ_4VWbeV7FgS4yQ2I1Wt5sfyajVP4H77tpr0Ipov674wteSk7U1-EXiXl3h4f0"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49892	151.101.193.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:23 UTC	1531	OUT	POST /v1/r/d/b/p2 HTTP/1.1 Host: c.paypal.com Connection: keep-alive Content-Length: 2607 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: application/json sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://c.paypal.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://c.paypal.com/v1/r/d/i?js_src=https://c.paypal.com/da/r/fb.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; KHcl0EuY7AKSMgfvHl7J5E7hPtK=H5vOX4Xx9E6rPaNsW1umPOEju90KfJTschjWY_e1f92eqJS1o6EoZAYAvBErjHwsTvfIlecHLC-YGp_e; l7_az=dcg16.slc; sc_f=CEKPNHQG08AWc-eXVA4YPw93eSBWwxF4jXwznQNxJ_4VWbeV7FgS4yQ2I1Wt5sfyajVP4H77tpr0Ipov674wteSk7U1-EXiXl3h4f0; x-pp-s=eyJ0IjoiMTcxNDEzNDIwMjc5NSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742202%26vteXpYrS%3D1714136002%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew
2024-04-26 12:23:23 UTC	2607	OUT	Data Raw: 7b 22 61 70 70 49 64 22 3a 22 49 43 45 5f 56 45 4e 4d 4f 5f 4c 4f 47 49 4e 5f 50 55 42 4c 49 43 5f 50 41 47 45 22 2c 22 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 22 3a 22 32 37 65 65 66 66 36 30 38 34 37 61 34 35 63 37 62 65 35 33 38 64 31 31 34 31 66 33 33 65 39 62 22 2c 22 70 61 79 6c 6f 61 64 22 3a 7b 22 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 2e 76 65 6e 6d 6f 2e 63 6f 6d 2f 73 69 67 6e 69 6e 3f 63 6f 75 6e 74 72 79 2e 78 3d 55 53 26 6c 6f 63 61 6c 65 2e 78 3d 65 6e 26 63 74 78 49 64 3d 41 41 47 54 4d 62 58 41 72 2d 5f 39 68 46 4f 64 4d 6a 46 4a 65 44 49 54 32 41 56 43 34 73 72 6f 68 48 4f 34 70 72 4b 4a 67 33 35 4c 47 33 66 35 33 64 75 5f 45 69 31 43 58 6a 38 6a 49 6c 76 4e 78 6b 57 54 70 75 37 61 79 34 32 6f 55 4a 6c 34 32 76 63 68 49 37 38 3d Data Ascii: {"appId":"ICE_VENMO_LOGIN_PUBLIC_PAGE","correlationId":"27eeff60847a45c7be538d1141f33e9b","payload":{"URL":"https://id.venmo.com/signin?country.x=US&locale.x=en&ctxId=AAGTMbXAr-_9hFOdMjFJeDIT2AVC4srohHO4prKJg35LG3f53du_Ei1CXj8jIlvNxkWTpu7ay42oUJl42vchI78=
2024-04-26 12:23:24 UTC	1315	IN	HTTP/1.1 200 OK Connection: close Content-Length: 125 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.paypal.com CORRELATION-ID: 126e60ca6ddf0 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: application/json P3p: policyref="/w3c/p3p.xml", CP="NON DSP COR ADM OUR IND COM" Paypal-Debug-Id: 126e60ca6ddf0 Set-Cookie: sc_f=CEKPNHQG08AWc-eXVA4YPw93eSBWwxF4jXwznQNxJ_4VWbeV7FgS4yQ2I1Wt5sfyajVP4H77tpr0Ipov674wteSk7U1-EXiXl3h4f0;Domain=.paypal.com;Max-Age=0;Path=/;Secure;Version=1;Expires=Fri, 26-Apr-2024 05:23:24 GMT; HttpOnly; SameSite=None Set-Cookie: sc_f=CEKPNHQG08AWc-eXVA4YPw93eSBWwxF4jXwznQNxJ_4VWbeV7FgS4yQ2I1Wt5sfyajVP4H77tpr0Ipov674wteSk7U1-EXiXl3h4f0;Domain=.paypal.com;Max-Age=157680000;Path=/;Secure;Version=1;Expires=Wed, 25-Apr-2029 05:23:24 GMT; HttpOnly; SameSite=None; Partitioned; Traceparent: 00-0000000000000000000126e60ca6ddf0-41578945ac923274-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Fri, 26 Apr 2024 12:23:24 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-iad-kiad7000099-IAD, cache-gnv1820033-GNV X-Cache: MISS, MISS X-Cache-Hits: 0, 0 vary: Accept-Encoding Server-Timing: content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: *
2024-04-26 12:23:24 UTC	125	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 73 63 22 3a 22 43 45 4b 50 4e 48 51 47 30 38 41 57 63 2d 65 58 56 41 34 59 50 77 39 33 65 53 42 57 77 78 46 34 6a 58 77 7a 6e 51 4e 78 4a 5f 34 56 57 62 65 56 37 46 67 53 34 79 51 32 49 31 57 74 35 73 66 79 61 6a 56 50 34 48 37 37 74 70 72 30 49 70 6f 76 36 37 34 77 74 65 53 6b 37 55 31 2d 45 58 69 58 6c 33 68 34 66 30 22 7d Data Ascii: {"error":false,"sc":"CEKPNHQG08AWc-eXVA4YPw93eSBWwxF4jXwznQNxJ_4VWbeV7FgS4yQ2I1Wt5sfyajVP4H77tpr0Ipov674wteSk7U1-EXiXl3h4f0"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49893	35.235.122.5	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:24 UTC	904	OUT	GET /v1/counter2.cgi?r=cD0yN2VlZmY2MDg0N2E0NWM3YmU1MzhkMTE0MWYzM2U5YiZpPTEwMi4xMjkuMTUyLjIyMCZ0PTE3MTQxMzQxOTAuMzcxJmE9MjEmcz1JQ0VfTE9HSU5fQVBQ8GhQ_E8vIveUuXZlN3mbElNj91k HTTP/1.1 Host: lvs.stats.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; l7_az=dcg16.slc; c=6d11aae559a8b2ddaee6; x-pp-s=eyJ0IjoiMTcxNDEzNDIwMjc5NSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742203%26vteXpYrS%3D1714136003%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew
2024-04-26 12:23:24 UTC	257	IN	HTTP/1.1 200 OK Connection: close Server: PayPal-B.Stats/1.0 Content-Type: image/jpeg Content-Length: 42 Set-Cookie: c=6d11aae559a8b2ddaee6; Domain=stats.paypal.com; expires=Thu, 21 Apr 2044 12:23:24 GMT; Path=/ Date: Fri, 26 Apr 2024 12:23:24 GMT
2024-04-26 12:23:24 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 01 44 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49895	151.101.65.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:25 UTC	718	OUT	GET /v1/r/d/b/p1 HTTP/1.1 Host: c.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; l7_az=dcg16.slc; ts=vreXpYrS%3D1808742203%26vteXpYrS%3D1714136003%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew; x-pp-s=eyJ0IjoiMTcxNDEzNDIwMzk2MSIsImwiOiIwIiwibSI6IjAifQ
2024-04-26 12:23:26 UTC	966	IN	HTTP/1.1 405 Method Not Allowed Connection: close Content-Length: 151 Access-Control-Expose-Headers: Server-Timing CORRELATION-ID: b122352011d27 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: application/json Paypal-Debug-Id: b122352011d27 Set-Cookie: l7_az=dcg16.slc; Path=/; Domain=paypal.com; Expires=Fri, 26 Apr 2024 12:53:26 GMT; HttpOnly; Secure; SameSite=None Traceparent: 00-0000000000000000000b122352011d27-4eeee09aed71506f-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Fri, 26 Apr 2024 12:23:26 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-iad-kcgs7200131-IAD, cache-gnv1820025-GNV X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1714134206.002601,VS0,VE96 vary: Accept-Encoding Server-Timing: "traceparent;desc="00-0000000000000000000b122352011d27-0ae3a08bd1fec7d3-01"";content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: *
2024-04-26 12:23:26 UTC	151	IN	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 45 54 48 4f 44 5f 4e 4f 54 5f 53 55 50 50 4f 52 54 45 44 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 54 68 65 20 73 65 72 76 65 72 20 64 6f 65 73 20 6e 6f 74 20 69 6d 70 6c 65 6d 65 6e 74 20 74 68 65 20 72 65 71 75 65 73 74 65 64 20 48 54 54 50 20 6d 65 74 68 6f 64 2e 22 2c 22 64 65 62 75 67 5f 69 64 22 3a 22 62 31 32 32 33 35 32 30 31 31 64 32 37 22 2c 22 64 65 74 61 69 6c 73 22 3a 5b 5d 2c 22 6c 69 6e 6b 73 22 3a 5b 5d 7d Data Ascii: {"name":"METHOD_NOT_SUPPORTED","message":"The server does not implement the requested HTTP method.","debug_id":"b122352011d27","details":[],"links":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49894	151.101.129.35	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:25 UTC	1438	OUT	GET /ts?v=1.8.16&t=1714134202778&g=-120&pgrp=main%3Aprivacy%3Apolicy&page=main%3Aprivacy%3Apolicy%3Accpa&pgst=1714134190358&calc=f412707ec485b&nsid=r1IVgdqL-yPwDL7QwOzbe1TQMyLGYUSv&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=27eeff60847a45c7be538d1141f33e9b&comp=identityappsnodeweb&tsrce=identityappsnodeweb&cu=0&ef_policy=ccpa&c_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial&flnm=identityappsnodeweb&tenant_name=venmo&displaypage=ice%3Avenmo%3Asignin&ppage=privacy_banner&bannertype=cookiebanner&flag=ccpa&bannerversion=v6&bannersource=ConsentNodeServ&bannervariant=hidden&xe=108814&xt=142081&eligibility_reason=true&cookie_disabled=false&reason_to_hide=Banner%20Closed&tenant_code=venmo&event_name=venmo_cookie_banner_shown&e=ac HTTP/1.1 Host: t.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; l7_az=dcg16.slc; ts=vreXpYrS%3D1808742203%26vteXpYrS%3D1714136003%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew; x-pp-s=eyJ0IjoiMTcxNDEzNDIwMzk2MSIsImwiOiIwIiwibSI6IjAifQ
2024-04-26 12:23:26 UTC	1232	IN	HTTP/1.1 200 OK Connection: close CORRELATION-ID: bed91c3e77263 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Fri, 26 Apr 2024 12:23:26 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: bed91c3e77263 Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1808742206%26vteXpYrS%3D1714136006%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew;Expires=Mon, 26 Apr 2027 12:23:26 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088;Expires=Mon, 26 Apr 2027 12:23:26 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-0000000000000000000bed91c3e77263-f48b18370f690190-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Fri, 26 Apr 2024 12:23:26 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-iad-kiad7000098-IAD, cache-gnv1820026-GNV X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1714134206.137651,VS0,VE97 vary: Accept-Encoding Server-Timing: content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-04-26 12:23:27 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-04-26 12:23:27 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-04-26 12:23:27 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49898	151.101.65.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:26 UTC	718	OUT	GET /v1/r/d/b/p2 HTTP/1.1 Host: c.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; l7_az=dcg16.slc; ts=vreXpYrS%3D1808742203%26vteXpYrS%3D1714136003%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew; x-pp-s=eyJ0IjoiMTcxNDEzNDIwMzk2MSIsImwiOiIwIiwibSI6IjAifQ
2024-04-26 12:23:26 UTC	843	IN	HTTP/1.1 405 Method Not Allowed Connection: close Content-Length: 151 Access-Control-Expose-Headers: Server-Timing CORRELATION-ID: deef1916a784c Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: application/json Paypal-Debug-Id: deef1916a784c Traceparent: 00-0000000000000000000deef1916a784c-39bf721a5f031b3e-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Fri, 26 Apr 2024 12:23:26 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-dfw-kdfw8210104-DFW, cache-pdk-kfty2130075-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1714134207.750231,VS0,VE93 vary: Accept-Encoding Server-Timing: "traceparent;desc="00-0000000000000000000deef1916a784c-6c9b33e488bac752-01"";content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: *
2024-04-26 12:23:26 UTC	151	IN	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 45 54 48 4f 44 5f 4e 4f 54 5f 53 55 50 50 4f 52 54 45 44 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 54 68 65 20 73 65 72 76 65 72 20 64 6f 65 73 20 6e 6f 74 20 69 6d 70 6c 65 6d 65 6e 74 20 74 68 65 20 72 65 71 75 65 73 74 65 64 20 48 54 54 50 20 6d 65 74 68 6f 64 2e 22 2c 22 64 65 62 75 67 5f 69 64 22 3a 22 64 65 65 66 31 39 31 36 61 37 38 34 63 22 2c 22 64 65 74 61 69 6c 73 22 3a 5b 5d 2c 22 6c 69 6e 6b 73 22 3a 5b 5d 7d Data Ascii: {"name":"METHOD_NOT_SUPPORTED","message":"The server does not implement the requested HTTP method.","debug_id":"deef1916a784c","details":[],"links":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49899	151.101.193.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:26 UTC	2034	OUT	GET /v1/r/d/b/w?f=27eeff60847a45c7be538d1141f33e9b&s=ICE_VENMO_LOGIN_PUBLIC_PAGE&d=%7B%22rDT%22%3A%2251844%2C51614%2C51241%3A36470%2C36236%2C36037%3A10854%2C10618%2C10316%3A21097%2C20860%2C20528%3A31343%2C31104%2C30756%3A10849%2C10608%2C10262%3A31338%2C31095%2C30769%3A15967%2C15722%2C15413%3A31378%2C31173%2C33880%3A46749%2C46540%2C46139%3A16015%2C15800%2C15388%3A5772%2C5553%2C5138%3A41639%2C41411%2C41042%3A41642%2C41410%2C41005%3A41646%2C41408%2C41026%3A5788%2C5546%2C5139%3A5794%2C5543%2C5164%3A51906%2C51648%2C51275%3A26296%2C26031%2C25691%3A46794%2C46520%2C46139%3A17999%2C30%22%7D HTTP/1.1 Host: c.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; KHcl0EuY7AKSMgfvHl7J5E7hPtK=H5vOX4Xx9E6rPaNsW1umPOEju90KfJTschjWY_e1f92eqJS1o6EoZAYAvBErjHwsTvfIlecHLC-YGp_e; l7_az=dcg16.slc; sc_f=CEKPNHQG08AWc-eXVA4YPw93eSBWwxF4jXwznQNxJ_4VWbeV7FgS4yQ2I1Wt5sfyajVP4H77tpr0Ipov674wteSk7U1-EXiXl3h4f0; ts=vreXpYrS%3D1808742203%26vteXpYrS%3D1714136003%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew; x-pp-s=eyJ0IjoiMTcxNDEzNDIwMzk2MSIsImwiOiIwIiwibSI6IjAifQ
2024-04-26 12:23:27 UTC	778	IN	HTTP/1.1 204 No Content Connection: close Access-Control-Expose-Headers: Server-Timing CORRELATION-ID: 00cabacc3456b Cache-Control: max-age=0, no-cache, no-store, must-revalidate Paypal-Debug-Id: 00cabacc3456b Traceparent: 00-000000000000000000000cabacc3456b-4de229caf624bbb6-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Fri, 26 Apr 2024 12:23:26 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-iad-kiad7000115-IAD, cache-gnv1820021-GNV X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1714134207.858976,VS0,VE129 vary: Accept-Encoding Server-Timing: "traceparent;desc="00-000000000000000000000cabacc3456b-a204a96623e77d44-01"";content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49900	151.101.1.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:28 UTC	1746	OUT	POST /auth/verifygrcenterprise HTTP/1.1 Host: id.venmo.com Connection: keep-alive Content-Length: 473 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" x-requested-with: XMLHttpRequest sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://id.venmo.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://id.venmo.com/signin?country.x=US&locale.x=en&ctxId=AAGTMbXAr-_9hFOdMjFJeDIT2AVC4srohHO4prKJg35LG3f53du_Ei1CXj8jIlvNxkWTpu7ay42oUJl42vchI78= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; d_id=f9d8a02dda1e499da9fdccab0d31ca111714134181973; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=identityappsnodeweb; nsid=s%3Ar1IVgdqL-yPwDL7QwOzbe1TQMyLGYUSv.rXM9gf4tUyvmHMoq%2F2Zdgp4aiJfZ5ZCx1rHTg%2BhO7xY; l7_az=dcg15.slc; ts_c=vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3; ts=vreXpYrS%3D1808742190%26vteXpYrS%3D1714135990%26vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3%26vtyp%3Dnew; x-pp-s=eyJ0IjoiMTcxNDEzNDE5OTM1MCIsImwiOiIwIiwibSI6IjAifQ; cookie_prefs=T%3D0%2CP%3D1%2CF%3D1%2Ctype%3Dinitial
2024-04-26 12:23:28 UTC	473	OUT	Data Raw: 5f 63 73 72 66 3d 66 77 7a 62 30 6d 39 70 6c 36 4b 74 58 76 6d 6a 72 51 4e 4e 52 78 37 70 41 55 68 25 32 42 56 25 32 42 58 79 5a 49 65 47 59 25 33 44 26 72 65 66 54 69 6d 65 73 74 61 6d 70 3d 31 37 31 34 31 33 34 31 39 36 35 37 38 26 67 72 63 56 33 45 6e 74 54 6f 6b 65 6e 3d 48 46 62 6d 6c 36 66 52 42 63 43 42 67 48 58 56 6c 50 51 45 4e 65 51 51 51 63 47 57 45 62 51 79 70 37 4e 7a 52 5f 46 52 63 50 4b 68 49 70 41 7a 74 75 41 30 6b 36 63 54 78 44 57 54 4e 61 4c 78 67 4c 42 41 35 73 43 68 6f 4a 52 31 78 47 53 6c 39 79 44 6b 59 74 61 6b 63 32 61 47 64 5a 54 54 4e 47 59 46 68 7a 4d 42 68 36 5a 43 6b 34 43 32 30 74 56 33 6c 52 43 42 52 70 53 55 31 59 54 6c 68 50 52 56 56 65 5a 67 68 53 65 79 31 78 59 6a 4e 47 51 56 78 2d 56 6d 74 57 62 77 64 54 50 69 49 5f 66 Data Ascii: _csrf=fwzb0m9pl6KtXvmjrQNNRx7pAUh%2BV%2BXyZIeGY%3D&refTimestamp=1714134196578&grcV3EntToken=HFbml6fRBcCBgHXVlPQENeQQQcGWEbQyp7NzR_FRcPKhIpAztuA0k6cTxDWTNaLxgLBA5sChoJR1xGSl9yDkYtakc2aGdZTTNGYFhzMBh6ZCk4C20tV3lRCBRpSU1YTlhPRVVeZghSey1xYjNGQVx-VmtWbwdTPiI_f
2024-04-26 12:23:28 UTC	295	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Cache-Control: max-age=0, no-cache, no-store, must-revalidate
2024-04-26 12:23:28 UTC	2352	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 6f 62 6a 65 63 74 73 2e 70 61 79 70 61 6c 2e 63 6e 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 4b 42 70 49 39 74 77 56 32 34 4c 41 38 6f 59 69 72 67 52 7a 34 36 68 32 4f 59 70 67 58 56 30 59 45 79 41 57 45 45 38 78 70 63 31 50 63 55 39 47 27 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e Data Ascii: Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypal.cn https://.paypalobjects.com https://objects.paypal.cn; script-src 'nonce-KBpI9twV24LA8oYirgRz46h2OYpgXV0YEyAWEE8xpc1PcU9G' 'self' https://.paypal.com https://*.paypal.cn
2024-04-26 12:23:28 UTC	1394	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 78 2d 70 70 2d 73 3d 65 79 4a 30 49 6a 6f 69 4d 54 63 78 4e 44 45 7a 4e 44 49 77 4f 44 55 7a 4d 79 49 73 49 6d 77 69 4f 69 49 77 49 69 77 69 62 53 49 36 49 6a 41 69 66 51 3b 20 44 6f 6d 61 69 6e 3d 2e 76 65 6e 6d 6f 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 74 73 72 63 65 3d 61 75 74 68 63 68 61 6c 6c 65 6e 67 65 6e 6f 64 65 77 65 62 3b 20 44 6f 6d 61 69 6e 3d 2e 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 4d 6f 6e 2c 20 32 39 20 41 70 72 20 32 30 32 34 20 31 32 3a 32 33 3a 32 38 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b Data Ascii: Set-Cookie: x-pp-s=eyJ0IjoiMTcxNDEzNDIwODUzMyIsImwiOiIwIiwibSI6IjAifQ; Domain=.venmo.com; Path=/; HttpOnly; Secure; SameSite=NoneSet-Cookie: tsrce=authchallengenodeweb; Domain=.paypal.com; Path=/; Expires=Mon, 29 Apr 2024 12:23:28 GMT; HttpOnly; Secure;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49901	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:28 UTC	608	OUT	GET /paypal-ui/web/favicon/venmo.svg HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://id.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:28 UTC	807	IN	HTTP/1.1 200 OK Connection: close Content-Length: 536 Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: image/svg+xml Etag: "609d9d3b-218" Last-Modified: Thu, 13 May 2021 21:42:19 GMT Paypal-Debug-Id: 323c9b919ae6f Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000323c9b919ae6f-57c28232da403ec8-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:28 GMT X-Served-By: cache-dfw-kdfw8210039-DFW, cache-pdk-kfty2130060-PDK X-Cache: HIT, HIT X-Cache-Hits: 8, 0 X-Timer: S1714134208.410010,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:28 UTC	536	IN	Data Raw: 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 30 20 34 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 70 61 74 68 20 7b 0a 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 30 30 37 34 44 45 3b 0a 20 20 20 20 7d 0a 20 20 20 20 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 20 64 61 72 6b 29 20 7b 0a 20 20 20 20 20 20 70 61 74 68 20 7b 0a 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 33 34 2e 35 37 37 31 20 30 2e 38 32 32 30 32 31 43 33 35 2e Data Ascii: <svg viewBox="0 0 40 40" fill="none" xmlns="http://www.w3.org/2000/svg"> <style> path { fill: #0074DE; } @media (prefers-color-scheme: dark) { path { fill: #fff; } } </style> <path d="M34.5771 0.822021C35.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49902	151.101.2.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:28 UTC	376	OUT	GET /paypal-ui/web/favicon/venmo.svg HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:29 UTC	807	IN	HTTP/1.1 200 OK Connection: close Content-Length: 536 Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: image/svg+xml Etag: "609d9d3b-218" Last-Modified: Thu, 13 May 2021 21:42:19 GMT Paypal-Debug-Id: 323c9b919ae6f Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000323c9b919ae6f-57c28232da403ec8-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:28 GMT X-Served-By: cache-dfw-kdfw8210039-DFW, cache-pdk-kpdk1780059-PDK X-Cache: HIT, HIT X-Cache-Hits: 8, 1 X-Timer: S1714134209.993680,VS0,VE2 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:29 UTC	536	IN	Data Raw: 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 30 20 34 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 70 61 74 68 20 7b 0a 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 30 30 37 34 44 45 3b 0a 20 20 20 20 7d 0a 20 20 20 20 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 20 64 61 72 6b 29 20 7b 0a 20 20 20 20 20 20 70 61 74 68 20 7b 0a 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 33 34 2e 35 37 37 31 20 30 2e 38 32 32 30 32 31 43 33 35 2e Data Ascii: <svg viewBox="0 0 40 40" fill="none" xmlns="http://www.w3.org/2000/svg"> <style> path { fill: #0074DE; } @media (prefers-color-scheme: dark) { path { fill: #fff; } } </style> <path d="M34.5771 0.822021C35.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49903	151.101.193.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:30 UTC	1267	OUT	GET /auth/verifygrcenterprise HTTP/1.1 Host: id.venmo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l7_az=dcg15.slc; ts=vreXpYrS%3D1808742208%26vteXpYrS%3D1714136008%26vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3%26vtyp%3Dnew; ts_c=vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3; v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; d_id=f9d8a02dda1e499da9fdccab0d31ca111714134181973; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=identityappsnodeweb; nsid=s%3Ar1IVgdqL-yPwDL7QwOzbe1TQMyLGYUSv.rXM9gf4tUyvmHMoq%2F2Zdgp4aiJfZ5ZCx1rHTg%2BhO7xY; l7_az=dcg15.slc; ts_c=vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3; ts=vreXpYrS%3D1808742190%26vteXpYrS%3D1714135990%26vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3%26vtyp%3Dnew; cookie_prefs=T%3D0%2CP%3D1%2CF%3D1%2Ctype%3Dinitial; x-pp-s=eyJ0IjoiMTcxNDEzNDIwODUzMyIsImwiOiIwIiwibSI6IjAifQ
2024-04-26 12:23:30 UTC	299	IN	HTTP/1.1 302 Found Connection: close Content-Length: 29 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Cache-Control: max-age=0, no-cache, no-store, must-revalidate
2024-04-26 12:23:30 UTC	2412	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 6f 62 6a 65 63 74 73 2e 70 61 79 70 61 6c 2e 63 6e 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 39 34 35 47 68 68 58 72 6d 30 70 56 44 31 6f 76 73 7a 45 42 49 6e 4c 67 4d 36 73 7a 66 6e 42 47 47 6b 67 79 76 45 37 35 54 74 49 73 6d 31 6e 77 27 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e Data Ascii: Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypal.cn https://.paypalobjects.com https://objects.paypal.cn; script-src 'nonce-945GhhXrm0pVD1ovszEBInLgM6szfnBGGkgyvE75TtIsm1nw' 'self' https://.paypal.com https://*.paypal.cn
2024-04-26 12:23:30 UTC	1394	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 78 2d 70 70 2d 73 3d 65 79 4a 30 49 6a 6f 69 4d 54 63 78 4e 44 45 7a 4e 44 49 78 4d 44 49 77 4d 53 49 73 49 6d 77 69 4f 69 49 77 49 69 77 69 62 53 49 36 49 6a 41 69 66 51 3b 20 44 6f 6d 61 69 6e 3d 2e 76 65 6e 6d 6f 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 74 73 72 63 65 3d 61 75 74 68 63 68 61 6c 6c 65 6e 67 65 6e 6f 64 65 77 65 62 3b 20 44 6f 6d 61 69 6e 3d 2e 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 4d 6f 6e 2c 20 32 39 20 41 70 72 20 32 30 32 34 20 31 32 3a 32 33 3a 33 30 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b Data Ascii: Set-Cookie: x-pp-s=eyJ0IjoiMTcxNDEzNDIxMDIwMSIsImwiOiIwIiwibSI6IjAifQ; Domain=.venmo.com; Path=/; HttpOnly; Secure; SameSite=NoneSet-Cookie: tsrce=authchallengenodeweb; Domain=.paypal.com; Path=/; Expires=Mon, 29 Apr 2024 12:23:30 GMT; HttpOnly; Secure;
2024-04-26 12:23:30 UTC	29	IN	Data Raw: 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 2f 73 69 67 6e 69 6e Data Ascii: Found. Redirecting to /signin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49904	151.101.193.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:31 UTC	1005	OUT	GET /signin HTTP/1.1 Host: id.venmo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; d_id=f9d8a02dda1e499da9fdccab0d31ca111714134181973; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=identityappsnodeweb; nsid=s%3Ar1IVgdqL-yPwDL7QwOzbe1TQMyLGYUSv.rXM9gf4tUyvmHMoq%2F2Zdgp4aiJfZ5ZCx1rHTg%2BhO7xY; l7_az=dcg15.slc; ts_c=vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3; ts=vreXpYrS%3D1808742190%26vteXpYrS%3D1714135990%26vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3%26vtyp%3Dnew; cookie_prefs=T%3D0%2CP%3D1%2CF%3D1%2Ctype%3Dinitial; x-pp-s=eyJ0IjoiMTcxNDEzNDIxMDIwMSIsImwiOiIwIiwibSI6IjAifQ
2024-04-26 12:23:31 UTC	1373	IN	HTTP/1.1 200 OK Connection: close Content-Length: 9980 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; script-src 'nonce-E+m0DKboNSWsvhL925s02gS/HEZvSTN3HBZ2Ccsnz/C2yqcE' 'self' 'unsafe-inline' https://.paypal.com https://.paypalobjects.com https://fpnpmcdn.net; img-src 'self' * data: https://c.paypal.com; object-src 'none'; font-src 'self' https://.paypalobjects.com https://.paypal.com data:; frame-src 'self' https://.paypalobjects.com https://.paypal.com; connect-src 'self' 'unsafe-inline' https://.paypal.com https://.paypalobjects.com https://.fptls.com https://.fptls2.com https://.fptls3.com https://api.fpjs.io https://.api.fpjs.io; base-uri 'self' https://.paypal.com; form-action 'self' https://.paypal.com https://ih-prd.fisglobal.com/sso/SSOServlet; frame-ancestors 'self' https://.paypal.com https://.izettle.com https://paypal.com/axo; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp Content-Type: text/html; charset=utf-8 Etag: W/"2624-DgvnEQgoj5Fc+1fH8jSt3Lujiuw" Paypal-Debug-Id: f6447290931cb
2024-04-26 12:23:31 UTC	1351	IN	Data Raw: 50 65 72 6d 69 73 73 69 6f 6e 73 2d 50 6f 6c 69 63 79 3a 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 61 72 63 68 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 77 6f 77 36 34 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 6d 6f 64 65 6c 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 73 65 6c 66 20 22 68 74 74 70 73 3a 2f 2f 63 2e 70 61 79 70 61 6c 2e 63 6f 6d 22 29 2c 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 Data Ascii: Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-ve
2024-04-26 12:23:31 UTC	546	IN	Data Raw: 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 58 2d 58 73 73 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 44 43 3a 20 63 63 67 31 31 2d 6f 72 69 67 69 6e 2d 77 77 77 2d 31 2e 70 61 79 70 61 6c 2e 63 6f 6d 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 2c 20 31 2e 31 20 76 61 72 6e 69 73 68 2c 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 44 61 74 65 3a 20 46 72 69 2c 20 32 36 20 41 70 72 20 32 30 32 34 20 31 32 3a 32 33 3a 33 31 20 47 4d 54 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 69 6e 63 6c 75 64 Data Ascii: X-Content-Type-Options: nosniffX-Xss-Protection: 1; mode=blockDC: ccg11-origin-www-1.paypal.comAccept-Ranges: bytesVia: 1.1 varnish, 1.1 varnish, 1.1 varnishDate: Fri, 26 Apr 2024 12:23:31 GMTStrict-Transport-Security: max-age=63072000; includ
2024-04-26 12:23:31 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 77 65 62 63 61 70 74 63 68 61 2f 6e 67 72 6c 43 61 70 74 63 68 61 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 Data Ascii: <!DOCTYPE html><html lang="en"><head><script async src="https://www.paypalobjects.com/webcaptcha/ngrlCaptcha.min.js"></script> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <meta http-equiv="X-U
2024-04-26 12:23:31 UTC	1378	IN	Data Raw: 67 6c 6f 62 61 6c 20 76 61 72 20 6f 72 20 69 6e 73 74 65 61 64 20 77 65 20 63 61 6e 20 75 73 65 20 74 68 69 73 20 64 61 74 61 20 69 66 20 70 61 73 73 65 64 20 61 6c 6f 6e 67 20 77 69 74 68 20 69 6e 69 74 69 61 6c 20 73 74 61 74 65 20 73 69 6e 63 65 20 61 6e 79 77 61 79 20 65 61 63 68 20 46 65 61 74 75 72 65 20 77 6f 75 6c 64 20 6e 65 65 64 20 74 6f 20 75 70 64 61 74 65 20 74 68 65 20 73 6f 75 72 63 65 49 44 20 61 74 6c 65 61 73 74 20 6f 6e 20 72 65 6e 64 65 72 69 6e 67 20 2d 2d 3e 0a 09 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 45 2b 6d 30 44 4b 62 6f 4e 53 57 73 76 68 4c 39 32 35 73 30 32 67 53 2f 48 45 5a 76 53 54 4e 33 48 42 5a 32 43 63 73 6e 7a 2f 43 32 79 71 63 45 22 3e 0a 09 09 76 61 72 20 50 41 59 50 41 4c 20 3d 20 50 41 59 50 41 4c 20 7c 7c 20 Data Ascii: global var or instead we can use this data if passed along with initial state since anyway each Feature would need to update the sourceID atleast on rendering --><script nonce="E+m0DKboNSWsvhL925s02gS/HEZvSTN3HBZ2Ccsnz/C2yqcE">var PAYPAL = PAYPAL \|\|
2024-04-26 12:23:31 UTC	1378	IN	Data Raw: 22 68 74 74 70 73 3a 5c 75 30 30 32 46 5c 75 30 30 32 46 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 5c 75 30 30 32 46 69 63 65 5c 75 30 30 32 46 63 6f 6e 74 65 6e 74 5c 75 30 30 32 46 63 32 30 32 34 30 33 32 32 31 30 33 35 34 32 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 63 74 78 49 64 22 3a 22 41 41 47 34 39 72 53 76 58 39 35 30 64 57 43 32 75 47 4f 4f 53 74 6e 44 51 66 65 61 35 64 41 76 62 46 55 6f 55 4c 4c 31 64 73 75 66 73 48 55 4c 42 66 48 72 76 4b 72 43 69 65 6e 5f 57 6a 53 32 50 6c 32 2d 5a 51 35 54 59 61 30 75 50 6c 54 76 75 46 63 6f 4e 37 41 39 22 2c 22 69 63 65 4d 61 6e 69 66 65 73 74 49 44 22 3a 22 61 70 70 2e 35 38 61 37 31 34 31 66 37 30 30 34 65 37 36 33 33 61 66 38 2e 6a 73 22 2c 22 69 6e 69 74 69 61 6c 44 61 Data Ascii: "https:\u002F\u002Fwww.paypalobjects.com\u002Fice\u002Fcontent\u002Fc20240322103542","country":"US","ctxId":"AAG49rSvX950dWC2uGOOStnDQfea5dAvbFUoULL1dsufsHULBfHrvKrCien_WjS2Pl2-ZQ5TYa0uPlTvuFcoN7A9","iceManifestID":"app.58a7141f7004e7633af8.js","initialDa
2024-04-26 12:23:31 UTC	1378	IN	Data Raw: 73 69 67 6e 69 6e 3f 63 6f 75 6e 74 72 79 2e 78 3d 55 53 26 6c 6f 63 61 6c 65 2e 78 3d 65 73 5f 58 43 26 6c 61 6e 67 54 67 6c 3d 65 73 22 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 4c 6f 63 61 6c 65 53 65 6c 65 63 74 6f 72 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 6c 6f 63 61 6c 65 43 6f 64 65 22 3a 22 7a 68 5f 58 43 22 2c 22 6c 61 6e 67 75 61 67 65 43 6f 64 65 22 3a 22 7a 68 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 6c 6f 63 61 6c 65 4c 61 62 65 6c 22 3a 22 e4 b8 ad e6 96 87 22 2c 22 6c 6f 63 61 6c 65 53 65 6c 65 63 74 6f 72 55 72 6c 22 3a 22 5c 75 30 30 32 46 69 64 61 70 70 73 5c 75 30 30 32 46 73 69 67 6e 69 6e 3f 63 6f 75 6e 74 72 79 2e 78 3d 55 53 26 6c 6f 63 61 6c 65 2e 78 3d 7a 68 5f 58 43 26 6c 61 Data Ascii: signin?country.x=US&locale.x=es_XC&langTgl=es","__typename":"LocaleSelector"},{"countryCode":"US","localeCode":"zh_XC","languageCode":"zh","selected":false,"localeLabel":"","localeSelectorUrl":"\u002Fidapps\u002Fsignin?country.x=US&locale.x=zh_XC&la
2024-04-26 12:23:31 UTC	1378	IN	Data Raw: 32 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 45 2b 6d 30 44 4b 62 6f 4e 53 57 73 76 68 4c 39 32 35 73 30 32 67 53 2f 48 45 5a 76 53 54 4e 33 48 42 5a 32 43 63 73 6e 7a 2f 43 32 79 71 63 45 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 69 63 65 2f 76 65 6e 64 6f 72 34 2e 62 65 35 30 66 33 34 63 63 65 35 33 39 64 61 30 34 63 32 35 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 45 2b 6d 30 44 4b 62 6f 4e 53 57 73 76 68 4c 39 32 35 73 30 32 67 53 2f 48 45 5a 76 53 54 4e 33 48 42 5a 32 43 63 73 6e 7a 2f 43 32 79 71 63 45 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 Data Ascii: 2.js"></script><script nonce="E+m0DKboNSWsvhL925s02gS/HEZvSTN3HBZ2Ccsnz/C2yqcE" src="https://www.paypalobjects.com/ice/vendor4.be50f34cce539da04c25.js"></script><script nonce="E+m0DKboNSWsvhL925s02gS/HEZvSTN3HBZ2Ccsnz/C2yqcE" src="https://www.paypalobject
2024-04-26 12:23:31 UTC	1378	IN	Data Raw: 32 35 73 30 32 67 53 2f 48 45 5a 76 53 54 4e 33 48 42 5a 32 43 63 73 6e 7a 2f 43 32 79 71 63 45 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 69 63 65 2f 76 65 6e 64 6f 72 56 65 6e 6d 6f 33 33 2e 63 37 38 37 37 33 38 64 37 32 35 32 38 36 35 61 61 36 33 35 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 45 2b 6d 30 44 4b 62 6f 4e 53 57 73 76 68 4c 39 32 35 73 30 32 67 53 2f 48 45 5a 76 53 54 4e 33 48 42 5a 32 43 63 73 6e 7a 2f 43 32 79 71 63 45 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 69 63 65 2f 76 65 6e 64 6f 72 56 65 6e 6d 6f 33 34 2e 31 61 63 31 63 63 36 63 65 38 39 38 35 65 64 33 Data Ascii: 25s02gS/HEZvSTN3HBZ2Ccsnz/C2yqcE" src="https://www.paypalobjects.com/ice/vendorVenmo33.c787738d7252865aa635.js"></script><script nonce="E+m0DKboNSWsvhL925s02gS/HEZvSTN3HBZ2Ccsnz/C2yqcE" src="https://www.paypalobjects.com/ice/vendorVenmo34.1ac1cc6ce8985ed3
2024-04-26 12:23:31 UTC	1378	IN	Data Raw: 5a 76 53 54 4e 33 48 42 5a 32 43 63 73 6e 7a 2f 43 32 79 71 63 45 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 69 63 65 2f 76 65 6e 64 6f 72 56 65 6e 6d 6f 34 32 2e 64 62 32 64 64 36 36 30 39 32 30 61 66 31 39 34 33 32 37 32 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 45 2b 6d 30 44 4b 62 6f 4e 53 57 73 76 68 4c 39 32 35 73 30 32 67 53 2f 48 45 5a 76 53 54 4e 33 48 42 5a 32 43 63 73 6e 7a 2f 43 32 79 71 63 45 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 69 63 65 2f 76 65 6e 64 6f 72 56 65 6e 6d 6f 34 33 2e 62 62 64 35 66 36 30 66 31 36 65 65 35 37 35 37 31 35 61 61 2e 6a 73 22 3e 3c Data Ascii: ZvSTN3HBZ2Ccsnz/C2yqcE" src="https://www.paypalobjects.com/ice/vendorVenmo42.db2dd660920af1943272.js"></script><script nonce="E+m0DKboNSWsvhL925s02gS/HEZvSTN3HBZ2Ccsnz/C2yqcE" src="https://www.paypalobjects.com/ice/vendorVenmo43.bbd5f60f16ee575715aa.js"><
2024-04-26 12:23:31 UTC	334	IN	Data Raw: 2e 66 70 74 69 4f 70 74 69 6f 6e 73 2c 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 63 6b 4c 61 7a 79 44 61 74 61 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 6c 61 7a 79 44 61 74 61 49 64 3a 20 27 69 64 65 6e 74 69 74 79 61 70 70 73 6e 6f 64 65 77 65 62 27 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 50 41 59 50 41 4c 2e 63 6f 72 65 5b 27 70 74 61 27 5d 20 3d 20 50 41 59 50 41 4c 2e 61 6e 61 6c 79 74 69 63 73 2e 73 65 74 75 70 28 66 70 74 69 4f 70 74 69 6f 6e 73 29 3b 0a 20 20 20 20 7d 0a 20 20 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 2f 61 75 74 68 2f 63 72 65 61 74 65 63 68 61 6c 6c 65 6e 67 65 2f 30 32 34 63 36 33 61 65 63 37 33 62 39 31 66 37 2f 72 65 63 61 70 74 63 Data Ascii: .fptiOptions, trackLazyData: true, lazyDataId: 'identityappsnodeweb' }; } PAYPAL.core['pta'] = PAYPAL.analytics.setup(fptiOptions); } </script><script async src="/auth/createchallenge/024c63aec73b91f7/recaptc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49905	104.18.249.37	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:31 UTC	1213	OUT	GET /hc/en-us/requests/new HTTP/1.1 Host: help.venmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; d_id=f9d8a02dda1e499da9fdccab0d31ca111714134181973; enforce_policy=ccpa; tsrce=identityappsnodeweb; l7_az=dcg15.slc; ts_c=vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3; ts=vreXpYrS%3D1808742190%26vteXpYrS%3D1714135990%26vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3%26vtyp%3Dnew; cookie_prefs=T%3D0%2CP%3D1%2CF%3D1%2Ctype%3Dinitial; x-pp-s=eyJ0IjoiMTcxNDEzNDIwODUzMyIsImwiOiIwIiwibSI6IjAifQ
2024-04-26 12:23:31 UTC	1316	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 12:23:31 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a68b646f8067de-MIA CF-Cache-Status: BYPASS Cache-Control: max-age=0, private, must-revalidate Content-Language: en-us Set-Cookie: _help_center_session=NFB4LzM5YTA5M05KdEJIazFkTkgxMXQ2TjJicGdNdXd0WFFYVzZQMThLNFRoQTNGSzQzcGY0OFloalRWS3RIL3k4MC9LUmk5RytVVXBsWkxRaThTOWwrZWJ1SU5VMDdzT3BYU0gxZHFIR3U2c1JicUJzMzNjVGNhTVFTVFUxZnp2aXZzYzZySkNZdnRoYytlZGU2VytaSHJMVEFsZURSQTFjR0dtelNnb09ETjNzakFQeDN4ck1XQ0pVblN3UkN1Wlh0MEZZVHNYZDAreHB4V0lnQTFGQT09LS1PdkdRdHNUalRldjUxRGhaRG53QU9BPT0%3D--9f11e1a53bc4cc3b9e021f393cb6057c73b5707a; path=/; secure; HttpOnly; SameSite=None Strict-Transport-Security: max-age=259200; includeSubDomains Vary: Accept-Encoding X-Cached: MISS x-frame-options: SAMEORIGIN x-runtime: 0.144462 x-ua-compatible: IE=edge x-xss-protection: 1; mode=block x-zendesk-origin-server: app-server-requests-5658b55869-qrl5s Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jb9SRzrT4xrYwQJx46q%2F53wpO%2BlmgR58DHuX%2F3lONq%2Br5IjQO1pPAJfmDaFhC1gWHtGk9Ro2mJ6tcEegN7xREKiQuvyxcr17giaeQcDRqOcwC%2FhqGXKzK2zZoMB60zUi"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
2024-04-26 12:23:31 UTC	161	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 72 75 69 64 3d 34 64 37 31 38 37 36 31 63 61 33 36 36 35 61 64 65 35 31 38 65 39 38 37 32 38 63 66 63 34 65 35 35 37 38 36 66 61 39 66 2d 31 37 31 34 31 33 34 32 31 31 3b 20 70 61 74 68 3d 2f 3b 20 64 6f 6d 61 69 6e 3d 2e 68 65 6c 70 2e 76 65 6e 6d 6f 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: Set-Cookie: __cfruid=4d718761ca3665ade518e98728cfc4e55786fa9f-1714134211; path=/; domain=.help.venmo.com; HttpOnly; Secure; SameSite=NoneServer: cloudflare
2024-04-26 12:23:31 UTC	1369	IN	Data Raw: 31 61 31 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 3c 21 2d 2d 20 76 32 34 34 34 38 20 2d 2d 3e 0a 0a 0a 20 20 3c 74 69 74 6c 65 3e 53 75 62 6d 69 74 20 61 20 72 65 71 75 65 73 74 20 26 6e 64 61 73 68 3b 20 56 65 6e 6d 6f 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 0a 0a 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 76 65 6e 6d 6f 2e 63 6f 6d 2f 68 63 2f 65 6e 2d 75 73 2f 72 65 71 75 65 73 74 73 2f 6e 65 77 22 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 3e 0a 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 Data Ascii: 1a17<!DOCTYPE html><html dir="ltr" lang="en-US"><head> <meta charset="utf-8" /> ... v24448 --> <title>Submit a request – Venmo</title> <link href="https://help.venmo.com/hc/en-us/requests/new" rel="canonical"> <link rel="style
2024-04-26 12:23:31 UTC	1369	IN	Data Raw: 22 68 74 74 70 73 3a 2f 2f 61 6a 61 78 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 75 69 2f 31 2e 31 33 2e 32 2f 6a 71 75 65 72 79 2d 75 69 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2e 69 6e 70 75 74 6d 61 73 6b 2f 35 2e 30 2e 37 2f 6a 71 75 65 72 79 2e 69 6e 70 75 74 6d 61 73 6b 2e 6d 69 6e 2e 6a 73 22 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 61 70 2f 33 2e 33 2e 37 2f 6a 73 2f 62 6f 6f 74 73 74 72 Data Ascii: "https://ajax.googleapis.com/ajax/libs/jqueryui/1.13.2/jquery-ui.min.js"></script><script src="https://cdnjs.cloudflare.com/ajax/libs/jquery.inputmask/5.0.7/jquery.inputmask.min.js"><script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstr
2024-04-26 12:23:31 UTC	1369	IN	Data Raw: 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 3b 0a 20 20 20 20 67 61 28 27 73 65 6e 64 27 2c 20 27 65 76 65 6e 74 27 2c 20 27 68 63 4c 6f 61 64 65 64 27 2c 20 27 76 69 73 69 74 6f 72 49 50 27 2c 20 64 61 74 61 2e 69 70 29 3b 0a 20 20 7d 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 20 45 6e 64 20 6f 66 20 22 53 75 62 6d 69 74 20 61 20 72 65 71 75 65 73 74 22 20 6c 69 6e 6b 20 63 6c 69 63 6b 20 73 63 72 69 70 74 20 2d 2d 3e 0a 0a 3c 21 2d 2d 20 43 55 53 54 4f 4d 49 5a 41 54 49 4f 4e 3a 20 43 6f 6f 6b 69 65 20 62 61 6e 6e 65 72 20 73 63 72 69 70 74 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 20 69 64 3d 22 70 6f 6c 69 63 79 2d 64 61 74 61 22 3e 0a 20 20 Data Ascii: = window.location.pathname; ga('send', 'event', 'hcLoaded', 'visitorIP', data.ip); });</script>... End of "Submit a request" link click script -->... CUSTOMIZATION: Cookie banner script --><script type="application/json" id="policy-data">
2024-04-26 12:23:31 UTC	1369	IN	Data Raw: 6f 64 79 20 63 6c 61 73 73 3d 22 22 3e 0a 20 20 0a 20 20 0a 0a 20 20 3c 21 2d 2d 20 43 55 53 54 4f 4d 49 5a 41 54 49 4f 4e 3a 20 53 74 61 72 74 20 73 63 72 69 70 74 20 74 6f 20 72 65 64 69 72 65 63 74 20 74 6f 20 63 6f 6e 74 61 63 74 20 66 6f 72 6d 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 76 61 72 20 75 72 6c 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 0a 20 20 69 66 20 28 75 72 6c 20 3d 3d 3d 20 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 76 65 6e 6d 6f 2e 63 6f 6d 2f 63 6f 6e 74 61 63 74 22 20 7c 7c 20 75 72 6c 20 3d 3d 3d 20 22 68 74 74 70 3a 2f 2f 68 65 6c 70 2e 76 65 6e 6d 6f 2e 63 6f 6d 2f 63 6f 6e 74 61 63 74 22 20 7c 7c 20 75 72 6c 20 3d 3d 3d 20 22 68 65 6c 70 2e 76 65 6e 6d 6f 2e 63 6f 6d 2f 63 6f 6e 74 61 63 74 Data Ascii: ody class=""> ... CUSTOMIZATION: Start script to redirect to contact form --><script> var url = window.location.href; if (url === "https://help.venmo.com/contact" \|\| url === "http://help.venmo.com/contact" \|\| url === "help.venmo.com/contact
2024-04-26 12:23:31 UTC	1211	IN	Data Raw: 69 6e 3c 2f 61 3e 0a 20 20 20 20 3c 2f 6e 61 76 3e 0a 20 20 20 20 3c 21 2d 2d 20 43 55 53 54 4f 4d 49 5a 41 54 49 4f 4e 3a 20 73 69 67 6e 65 64 20 69 6e 20 65 78 70 65 72 69 65 6e 63 65 20 61 6e 64 20 73 69 67 6e 20 69 6e 20 6c 69 6e 6b 20 72 65 6d 6f 76 65 64 20 2d 2d 3e 0a 20 20 3c 2f 64 69 76 3e 0a 3c 2f 68 65 61 64 65 72 3e 0a 0a 3c 21 2d 2d 20 43 55 53 54 4f 4d 49 5a 41 54 49 4f 4e 3a 20 42 61 6e 6e 65 72 20 66 6f 72 20 63 75 73 74 6f 6d 20 6d 65 73 73 61 67 69 6e 67 20 64 75 72 69 6e 67 20 65 6d 65 72 67 65 6e 63 69 65 73 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 61 6e 6e 65 72 22 3e 0a 20 20 3c 74 61 62 6c 65 20 3e 0a 20 20 20 20 3c 74 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 74 72 3e 0a 20 20 20 20 20 20 20 20 3c 74 64 3e 3c 73 70 61 6e 20 63 6c 61 Data Ascii: in</a> </nav> ... CUSTOMIZATION: signed in experience and sign in link removed --> </div></header>... CUSTOMIZATION: Banner for custom messaging during emergencies<div class="banner"> <table > <tbody> <tr> <td><span cla
2024-04-26 12:23:31 UTC	1369	IN	Data Raw: 33 66 39 64 0d 0a 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 7d 0a 20 20 2e 62 69 67 54 69 74 6c 65 20 7b 0a 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 38 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 38 70 78 3b 0a 20 20 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 09 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 2d 33 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 7d 0a 20 20 2e 73 65 61 72 63 68 2d 69 6e 6e 65 72 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 32 36 70 78 3b 0a 20 20 Data Ascii: 3f9dleft: auto; } .bigTitle {font-size: 38px; font-weight: 500; line-height: 38px; text-align: center; letter-spacing: -3px; margin: 0; } .search-inner { display: flex; flex-direction: column; padding: 0 26px;
2024-04-26 12:23:31 UTC	1369	IN	Data Raw: 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0a 20 20 09 2e 73 65 61 72 63 68 2d 69 6e 6e 65 72 20 7b 0a 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 36 31 30 70 78 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 73 65 61 72 63 68 2d 66 6f 72 6d 2d 77 72 61 70 70 65 72 20 7b 0a 20 20 09 09 77 69 64 74 68 3a 20 34 30 30 70 78 3b 0a 20 20 09 7d 0a 20 20 09 2e 6f 74 68 65 72 2d 63 6f 6e 74 61 63 74 73 5f 5f 63 61 72 64 73 20 7b 0a 20 20 09 09 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 72 6f 77 3b 0a 20 20 09 7d 0a 20 20 09 2e 62 69 67 54 69 74 6c 65 20 7b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 36 38 70 78 3b 0a 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 Data Ascii: width: 768px) { .search-inner { align-items: center; max-width: 610px; } .search-form-wrapper { width: 400px; } .other-contacts__cards { flex-direction: row; } .bigTitle { font-size: 68px; line-height
2024-04-26 12:23:31 UTC	1369	IN	Data Raw: 72 20 68 65 6c 70 20 63 65 6e 74 65 72 20 74 6f 70 69 63 73 2c 20 6f 72 20 73 65 61 72 63 68 20 62 79 20 6b 65 79 77 6f 72 64 0a 20 20 20 20 20 20 20 20 74 6f 20 66 69 6e 64 20 6d 6f 72 65 20 69 6e 66 6f 20 6f 6e 20 6d 61 6e 61 67 69 6e 67 20 70 61 79 6d 65 6e 74 73 2c 20 6f 70 65 6e 69 6e 67 20 64 69 73 70 75 74 65 73 2c 20 61 6e 64 20 6d 6f 72 65 2e 0a 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 65 61 72 63 68 2d 66 6f 72 6d 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 3c 68 32 20 63 6c 61 73 73 3d 22 76 69 73 69 62 69 6c 69 74 79 2d 68 69 64 64 65 6e 22 3e 53 65 61 72 63 68 3c 2f 68 32 3e 0a 20 20 20 20 20 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 Data Ascii: r help center topics, or search by keyword to find more info on managing payments, opening disputes, and more. </span> </p> <div class="search-form-wrapper"> <h2 class="visibility-hidden">Search</h2> <svg xmlns="http://ww
2024-04-26 12:23:31 UTC	1369	IN	Data Raw: 68 72 65 66 3d 27 2f 68 63 2f 65 6e 2d 75 73 2f 61 72 74 69 63 6c 65 73 2f 33 36 30 30 31 32 39 33 32 31 35 34 2d 41 64 64 69 6e 67 2d 4d 6f 6e 65 79 2d 74 6f 2d 59 6f 75 72 2d 56 65 6e 6d 6f 2d 42 61 6c 61 6e 63 65 27 20 6f 6e 63 6c 69 63 6b 3d 22 72 65 63 6f 72 64 4c 69 6e 6b 28 74 68 69 73 2e 68 72 65 66 29 22 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 41 64 64 69 6e 67 20 4d 6f 6e 65 79 20 74 6f 20 59 6f 75 72 20 56 65 6e 6d 6f 20 42 61 6c 61 6e 63 65 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: href='/hc/en-us/articles/360012932154-Adding-Money-to-Your-Venmo-Balance' onclick="recordLink(this.href)" > Adding Money to Your Venmo Balance </a> </li>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49907	104.18.70.113	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:34 UTC	591	OUT	GET /hc/theming_assets/802785/498597/style.css?digest=28556028217875 HTTP/1.1 Host: p19.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:34 UTC	859	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 12:23:34 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close x-ua-compatible: IE=edge cache-control: max-age=604800, public x-zendesk-processed-host-header: p19.zdassets.com strict-transport-security: max-age=0 x-zendesk-origin-server: app-server-7d9d8674dc-9lwk7 etag: W/"082ea8638a54284038fee9d450fcb751" x-runtime: 0.018403 Protocol: HTTP/1.1 always CF-Cache-Status: HIT Age: 73528 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F8%2FIrdNOhcHhZvtTMwjJDPa%2FUONtBAoZBygomIaD7I0ntjzUtJ6%2BjKJe8TNPMeS1Ak6SRD98FXtTPIsn%2B8ny%2B6Scp6aHMwYZ1Qgi%2FvWS5w5HXNs6s1bT%2FaPQVUyFoGl4ruE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a68b7aaabf6dc8-MIA
2024-04-26 12:23:34 UTC	510	IN	Data Raw: 37 63 34 36 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 0a 2f 2a 20 43 4f 4c 4f 52 53 20 2a 2f 0a 3a 72 6f 6f 74 20 7b 0a 20 20 2d 2d 65 72 72 6f 72 3a 20 76 61 72 28 2d 2d 7a 64 2d 63 6f 6c 6f 72 2d 72 65 64 2d 36 30 30 29 3b 0a 7d 0a 0a 2f 2a 2a 2a 2a 2a 20 4e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2a 2a 2a 2a 2f 0a 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 38 2e 30 2e 31 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 0a 68 74 6d 6c 20 7b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 31 35 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 61 75 74 6f 3b 0a 7d 0a 0a Data Ascii: 7c46@charset "UTF-8";/* COLORS /:root { --error: var(--zd-color-red-600);}/** Normalize.css **//! normalize.css v8.0.1 \| MIT License \| github.com/necolas/normalize.css */html { line-height: 1.15; -webkit-text-size-adjust: auto;}
2024-04-26 12:23:34 UTC	1369	IN	Data Raw: 73 69 7a 65 3a 20 31 65 6d 3b 0a 7d 0a 0a 61 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 7d 0a 0a 61 62 62 72 5b 74 69 74 6c 65 5d 20 7b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 6e 6f 6e 65 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 0a 7d 0a 0a 62 2c 0a 73 74 72 6f 6e 67 20 7b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 65 72 3b 0a 7d 0a 0a 63 6f 64 65 2c 0a 6b 62 64 2c 0a 73 61 6d 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 6d 6f 6e 6f 73 70 61 63 65 2c 20 6d 6f 6e 6f 73 70 61 63 65 3b 0a 20 Data Ascii: size: 1em;}a { background-color: transparent;}abbr[title] { border-bottom: none; text-decoration: underline; text-decoration: underline dotted;}b,strong { font-weight: bolder;}code,kbd,samp { font-family: monospace, monospace;
2024-04-26 12:23:34 UTC	1369	IN	Data Raw: 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 2c 0a 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 20 7b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 5b 74 79 70 65 3d 22 6e 75 6d 62 65 72 22 5d 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 0a 5b 74 79 70 65 3d 22 6e 75 6d 62 65 72 22 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 7d 0a 0a 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 74 65 78 74 66 69 65 6c 64 3b 0a 20 20 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 20 2d 32 70 Data Ascii: e="checkbox"],[type="radio"] { box-sizing: border-box; padding: 0;}[type="number"]::-webkit-inner-spin-button,[type="number"]::-webkit-outer-spin-button { height: auto;}[type="search"] { -webkit-appearance: textfield; outline-offset: -2p
2024-04-26 12:23:34 UTC	1369	IN	Data Raw: 61 28 30 2c 20 31 34 30 2c 20 32 35 35 2c 20 31 29 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 61 3a 68 6f 76 65 72 2c 20 61 3a 61 63 74 69 76 65 2c 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 0a 69 6e 70 75 74 2c 0a 74 65 78 74 61 72 65 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 7d 0a 0a 69 6e 70 75 74 20 7b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 6f 72 64 Data Ascii: a(0, 140, 255, 1); text-decoration: none;}a:hover, a:active, a:focus { text-decoration: underline;}input,textarea { color: #000; font-size: 14px;}input { font-weight: 300; max-width: 100%; box-sizing: border-box; transition: bord
2024-04-26 12:23:34 UTC	1369	IN	Data Raw: 69 64 74 68 3a 20 39 30 25 3b 0a 20 20 7d 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 2d 64 69 76 69 64 65 72 20 7b 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 75 6c 20 7b 0a 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 2e 65 72 72 6f 72 2d 70 61 67 65 20 7b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 36 30 70 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 20 35 25 3b 0a 7d 0a 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 31 36 30 70 78 29 20 7b 0a 20 20 2e Data Ascii: idth: 90%; }}.container-divider { border-top: 1px solid #ddd; margin-bottom: 20px;}ul { list-style: none; margin: 0; padding: 0;}.error-page { max-width: 1160px; margin: 0 auto; padding: 0 5%;}@media (min-width: 1160px) { .
2024-04-26 12:23:34 UTC	1369	IN	Data Raw: 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 6f 75 63 68 2d 63 61 6c 6c 6f 75 74 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0a 20 20 2e 62 75 74 74 6f 6e 2c 20 2e 73 65 63 74 69 6f 6e 2d 73 75 62 73 63 72 69 62 65 20 62 75 74 74 6f 6e 2c 20 2e 61 72 74 69 63 6c 65 2d 73 75 62 73 63 72 69 62 65 20 62 75 74 74 6f 6e 2c 20 2e 63 6f 6d 6d 75 6e 69 74 79 2d 66 6f 6c 6c 6f 77 20 62 75 74 74 6f 6e 2c 20 2e 72 65 71 75 65 73 74 73 2d 74 61 62 6c 65 2d 74 6f 6f 6c 62 61 72 20 2e 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 2d 73 75 62 73 63 72 69 62 65 20 62 75 74 74 6f 6e 2c 20 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 73 2d 73 75 62 73 63 72 69 62 65 20 62 75 74 74 6f 6e 2c 20 2e Data Ascii: idth: 100%; -webkit-touch-callout: none;}@media (min-width: 768px) { .button, .section-subscribe button, .article-subscribe button, .community-follow button, .requests-table-toolbar .organization-subscribe button, .subscriptions-subscribe button, .
2024-04-26 12:23:34 UTC	1369	IN	Data Raw: 73 2c 20 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 70 72 65 76 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 20 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 66 69 72 73 74 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 20 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 6c 61 73 74 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 20 2e 65 64 69 74 2d 70 72 6f 66 69 6c 65 2d 62 75 74 74 6f 6e 20 61 3a 66 6f 63 75 73 2c 20 2e 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2c 20 2e 73 65 63 74 69 6f 6e 2d 73 75 62 73 63 72 69 62 65 20 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2c 20 2e 73 65 63 74 69 6f 6e 2d 73 75 62 73 63 72 69 62 65 20 62 75 74 74 6f 6e 5b 64 61 74 61 2d 73 65 6c 65 63 74 65 64 3d 22 74 72 75 65 22 5d 2c 20 2e 61 72 74 69 63 6c 65 2d 73 75 62 73 63 72 69 62 65 20 Data Ascii: s, .pagination-prev-link:focus, .pagination-first-link:focus, .pagination-last-link:focus, .edit-profile-button a:focus, .button.button-primary, .section-subscribe button.button-primary, .section-subscribe button[data-selected="true"], .article-subscribe
2024-04-26 12:23:34 UTC	1369	IN	Data Raw: 20 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 2c 20 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 73 2d 73 75 62 73 63 72 69 62 65 20 62 75 74 74 6f 6e 5b 64 61 74 61 2d 73 65 6c 65 63 74 65 64 3d 22 74 72 75 65 22 5d 3a 68 6f 76 65 72 2c 20 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 6e 65 78 74 2d 6c 69 6e 6b 3a 68 6f 76 65 72 2c 20 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 70 72 65 76 2d 6c 69 6e 6b 3a 68 6f 76 65 72 2c 20 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 66 69 72 73 74 2d 6c 69 6e 6b 3a 68 6f 76 65 72 2c 20 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 6c 61 73 74 Data Ascii: button.button-primary:hover, .subscriptions-subscribe button[data-selected="true"]:hover, .button-primary.pagination-next-link:hover, .button-primary.pagination-prev-link:hover, .button-primary.pagination-first-link:hover, .button-primary.pagination-last
2024-04-26 12:23:34 UTC	1369	IN	Data Raw: 69 6d 61 72 79 3a 61 63 74 69 76 65 2c 20 2e 72 65 71 75 65 73 74 73 2d 74 61 62 6c 65 2d 74 6f 6f 6c 62 61 72 20 2e 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 2d 73 75 62 73 63 72 69 62 65 20 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 3a 61 63 74 69 76 65 2c 20 2e 72 65 71 75 65 73 74 73 2d 74 61 62 6c 65 2d 74 6f 6f 6c 62 61 72 20 2e 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 2d 73 75 62 73 63 72 69 62 65 20 62 75 74 74 6f 6e 5b 64 61 74 61 2d 73 65 6c 65 63 74 65 64 3d 22 74 72 75 65 22 5d 3a 61 63 74 69 76 65 2c 20 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 73 2d 73 75 62 73 63 72 69 62 65 20 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 3a 61 63 74 69 76 65 2c 20 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 73 2d 73 75 62 73 63 72 69 62 Data Ascii: imary:active, .requests-table-toolbar .organization-subscribe button.button-primary:active, .requests-table-toolbar .organization-subscribe button[data-selected="true"]:active, .subscriptions-subscribe button.button-primary:active, .subscriptions-subscrib
2024-04-26 12:23:34 UTC	1369	IN	Data Raw: 74 6f 6e 2d 6c 61 72 67 65 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 61 75 74 6f 3b 0a 20 20 7d 0a 7d 0a 0a 2e 62 75 74 74 6f 6e 2d 6c 61 72 67 65 3a 68 6f 76 65 72 2c 20 2e 62 75 74 74 6f 6e 2d 6c 61 72 67 65 3a 61 63 74 69 76 65 2c 20 2e 62 75 74 74 6f 6e 2d 6c 61 72 67 65 3a 66 6f 63 75 73 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 3a 68 6f 76 65 72 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 3a 61 63 74 69 76 65 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 3a 66 6f 63 75 73 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 35 34 39 39 3b 0a 7d 0a 0a 2e 62 75 74 74 6f 6e 2d 6c 61 72 67 65 5b 64 Data Ascii: ton-large, input[type="submit"] { width: auto; }}.button-large:hover, .button-large:active, .button-large:focus, input[type="submit"]:hover, input[type="submit"]:active, input[type="submit"]:focus { background-color: #005499;}.button-large[d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49911	104.18.70.113	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:34 UTC	589	OUT	GET /hc/assets/application-dabd91632e59b822715fbd3d678bb2b8.css HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:34 UTC	1117	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 12:23:34 GMT Content-Type: text/css Content-Length: 50929 Connection: close x-amz-id-2: azZWrV0nGF0ymC6LOGV5yqRSHZyhlFwhxNGkLz78VBH2lMtxEEjGKwSfL/gK/FHvpl+OktV9/0/ipYtQmEY+Kg== x-amz-request-id: K2S486SFDK66G45T x-amz-replication-status: COMPLETED Last-Modified: Wed, 24 Apr 2024 09:07:05 GMT ETag: "04f3a41483e9dfe36d52404867dc1527" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=604800 x-amz-version-id: zYvfqLavK.uLPcXY_fQfhYD.TPZyjDwg CF-Cache-Status: HIT Age: 184420 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9zxIL6oOZ1RDw6BrnUtnw0VZZ2nYyIAQVfMrJmTv1kX5mpU6QLS47NpWHS%2FlDxeVp1P5g2JLPca4oDwVZuDdKBHs8CqONhLev1io9TSvkwBtAicBq3mCzZ3eVa4B5KFslRNFNxA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 87a68b7aaf5602e8-MIA
2024-04-26 12:23:34 UTC	252	IN	Data Raw: 66 69 67 75 72 65 2e 77 79 73 69 77 79 67 2d 74 61 62 6c 65 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 6d 61 72 67 69 6e 3a 2e 39 65 6d 20 61 75 74 6f 7d 66 69 67 75 72 65 2e 77 79 73 69 77 79 67 2d 74 61 62 6c 65 20 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 3b 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 3a 30 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 5b 64 69 72 3d 6c 74 72 5d 20 66 69 67 75 72 65 2e 77 79 73 69 77 79 67 2d 74 61 62 6c 65 20 74 61 62 6c 65 20 74 68 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 5b 64 69 72 3d 72 74 6c 5d 20 66 69 67 75 72 65 2e 77 79 73 69 77 79 67 2d 74 61 62 6c 65 20 74 61 62 6c 65 20 74 68 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 Data Ascii: figure.wysiwyg-table{display:table;margin:.9em auto}figure.wysiwyg-table table{border-collapse:collapse;border-spacing:0;height:100%;width:100%}[dir=ltr] figure.wysiwyg-table table th{text-align:left}[dir=rtl] figure.wysiwyg-table table th{text-align:r
2024-04-26 12:23:34 UTC	1369	IN	Data Raw: 69 67 68 74 7d 66 69 67 75 72 65 2e 77 79 73 69 77 79 67 2d 74 61 62 6c 65 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 61 70 74 69 6f 6e 2d 73 69 64 65 3a 74 6f 70 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 63 61 70 74 69 6f 6e 3b 70 61 64 64 69 6e 67 3a 34 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 74 61 62 6c 65 2e 77 79 73 69 77 79 67 2d 74 61 62 6c 65 2d 72 65 73 69 7a 65 64 7b 74 61 62 6c 65 2d 6c 61 79 6f 75 74 3a 66 69 78 65 64 7d 66 69 67 75 72 65 2e 77 79 73 69 77 79 67 2d 6d 65 64 69 61 7b 6d 61 72 67 69 6e 3a 30 7d 66 69 67 75 72 65 2e 77 79 73 69 77 79 67 2d 69 6d 61 67 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 63 Data Ascii: ight}figure.wysiwyg-table figcaption{caption-side:top;display:table-caption;padding:4px;text-align:center;word-break:break-word}table.wysiwyg-table-resized{table-layout:fixed}figure.wysiwyg-media{margin:0}figure.wysiwyg-image{background:none;border:none;c
2024-04-26 12:23:34 UTC	1369	IN	Data Raw: 61 72 67 69 6e 2d 6c 65 66 74 3a 31 2e 35 65 6d 7d 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 77 79 73 69 77 79 67 2d 69 6d 61 67 65 2d 61 6c 69 67 6e 2d 65 6e 64 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 2e 35 65 6d 7d 5b 64 69 72 3d 22 6c 74 72 22 5d 20 2e 77 79 73 69 77 79 67 2d 69 6d 61 67 65 2d 62 6c 6f 63 6b 2d 65 6e 64 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 77 79 73 69 77 79 67 2d 69 6d 61 67 65 2d 62 6c 6f 63 6b 2d 65 6e 64 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 5b 64 69 72 3d 22 6c 74 72 22 5d 20 2e 77 79 73 69 77 79 67 2d 69 6d 61 67 65 2d 62 6c 6f 63 6b 2d 65 6e 64 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 7d 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 77 79 73 69 77 79 67 2d 69 6d 61 67 Data Ascii: argin-left:1.5em}[dir="rtl"] .wysiwyg-image-align-end{margin-right:1.5em}[dir="ltr"] .wysiwyg-image-block-end{margin-right:0}[dir="rtl"] .wysiwyg-image-block-end{margin-left:0}[dir="ltr"] .wysiwyg-image-block-end{margin-left:auto}[dir="rtl"] .wysiwyg-imag
2024-04-26 12:23:34 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 23 65 36 65 36 65 36 7d 2e 77 79 73 69 77 79 67 2d 63 6f 6c 6f 72 2d 72 65 64 7b 63 6f 6c 6f 72 3a 72 65 64 7d 2e 77 79 73 69 77 79 67 2d 63 6f 6c 6f 72 2d 6f 72 61 6e 67 65 7b 63 6f 6c 6f 72 3a 23 66 39 30 7d 2e 77 79 73 69 77 79 67 2d 63 6f 6c 6f 72 2d 79 65 6c 6c 6f 77 7b 63 6f 6c 6f 72 3a 23 66 66 30 7d 2e 77 79 73 69 77 79 67 2d 63 6f 6c 6f 72 2d 67 72 65 65 6e 7b 63 6f 6c 6f 72 3a 6c 69 6d 65 7d 2e 77 79 73 69 77 79 67 2d 63 6f 6c 6f 72 2d 63 79 61 6e 7b 63 6f 6c 6f 72 3a 61 71 75 61 7d 2e 77 79 73 69 77 79 67 2d 63 6f 6c 6f 72 2d 62 6c 75 65 7b 63 6f 6c 6f 72 3a 62 6c 75 65 7d 2e 77 79 73 69 77 79 67 2d 63 6f 6c 6f 72 2d 70 75 72 70 6c 65 7b 63 6f 6c 6f 72 3a 23 39 30 66 7d 2e 77 79 73 69 77 79 67 2d 63 6f 6c 6f 72 2d 70 69 6e 6b 7b Data Ascii: olor:#e6e6e6}.wysiwyg-color-red{color:red}.wysiwyg-color-orange{color:#f90}.wysiwyg-color-yellow{color:#ff0}.wysiwyg-color-green{color:lime}.wysiwyg-color-cyan{color:aqua}.wysiwyg-color-blue{color:blue}.wysiwyg-color-purple{color:#90f}.wysiwyg-color-pink{
2024-04-26 12:23:34 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 23 36 36 66 7d 2e 77 79 73 69 77 79 67 2d 63 6f 6c 6f 72 2d 62 6c 75 65 37 30 7b 63 6f 6c 6f 72 3a 23 39 39 66 7d 2e 77 79 73 69 77 79 67 2d 63 6f 6c 6f 72 2d 62 6c 75 65 31 31 30 7b 63 6f 6c 6f 72 3a 23 30 30 63 7d 2e 77 79 73 69 77 79 67 2d 63 6f 6c 6f 72 2d 62 6c 75 65 31 32 30 7b 63 6f 6c 6f 72 3a 23 30 30 39 7d 2e 77 79 73 69 77 79 67 2d 63 6f 6c 6f 72 2d 62 6c 75 65 31 33 30 7b 63 6f 6c 6f 72 3a 23 30 30 36 7d 2e 77 79 73 69 77 79 67 2d 63 6f 6c 6f 72 2d 70 75 72 70 6c 65 39 30 7b 63 6f 6c 6f 72 3a 23 61 64 33 33 66 66 7d 2e 77 79 73 69 77 79 67 2d 63 6f 6c 6f 72 2d 70 75 72 70 6c 65 38 30 7b 63 6f 6c 6f 72 3a 23 63 32 36 36 66 66 7d 2e 77 79 73 69 77 79 67 2d 63 6f 6c 6f 72 2d 70 75 72 70 6c 65 37 30 7b 63 6f 6c 6f 72 3a 23 64 36 39 Data Ascii: olor:#66f}.wysiwyg-color-blue70{color:#99f}.wysiwyg-color-blue110{color:#00c}.wysiwyg-color-blue120{color:#009}.wysiwyg-color-blue130{color:#006}.wysiwyg-color-purple90{color:#ad33ff}.wysiwyg-color-purple80{color:#c266ff}.wysiwyg-color-purple70{color:#d69
2024-04-26 12:23:34 UTC	1369	IN	Data Raw: 69 77 79 67 2d 69 6e 64 65 6e 74 35 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 35 30 70 78 7d 5b 64 69 72 3d 72 74 6c 5d 20 2e 77 79 73 69 77 79 67 2d 69 6e 64 65 6e 74 35 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 35 30 70 78 7d 2e 77 79 73 69 77 79 67 2d 69 6e 64 65 6e 74 36 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 36 30 70 78 7d 5b 64 69 72 3d 72 74 6c 5d 20 2e 77 79 73 69 77 79 67 2d 69 6e 64 65 6e 74 36 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 36 30 70 78 7d 2e 77 79 73 69 77 79 67 2d 69 6e 64 65 6e 74 37 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 37 30 70 78 7d 5b 64 69 72 3d 72 74 6c 5d 20 2e 77 79 73 69 77 79 67 2d 69 6e 64 65 6e 74 37 Data Ascii: iwyg-indent5{padding-left:50px}[dir=rtl] .wysiwyg-indent5{padding-left:auto;padding-right:50px}.wysiwyg-indent6{padding-left:60px}[dir=rtl] .wysiwyg-indent6{padding-left:auto;padding-right:60px}.wysiwyg-indent7{padding-left:70px}[dir=rtl] .wysiwyg-indent7
2024-04-26 12:23:34 UTC	1369	IN	Data Raw: 67 2d 69 6e 64 65 6e 74 31 38 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 38 30 70 78 7d 2e 77 79 73 69 77 79 67 2d 69 6e 64 65 6e 74 31 39 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 39 30 70 78 7d 5b 64 69 72 3d 72 74 6c 5d 20 2e 77 79 73 69 77 79 67 2d 69 6e 64 65 6e 74 31 39 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 39 30 70 78 7d 2e 77 79 73 69 77 79 67 2d 69 6e 64 65 6e 74 32 30 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 30 30 70 78 7d 5b 64 69 72 3d 72 74 6c 5d 20 2e 77 79 73 69 77 79 67 2d 69 6e 64 65 6e 74 32 30 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 30 70 78 7d Data Ascii: g-indent18{padding-left:auto;padding-right:180px}.wysiwyg-indent19{padding-left:190px}[dir=rtl] .wysiwyg-indent19{padding-left:auto;padding-right:190px}.wysiwyg-indent20{padding-left:200px}[dir=rtl] .wysiwyg-indent20{padding-left:auto;padding-right:200px}
2024-04-26 12:23:34 UTC	1369	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 33 66 33 66 33 7d 7a 64 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 6d 75 6c 74 69 62 72 61 6e 64 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 34 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 34 70 78 7d 7a 64 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 6d 75 6c 74 69 62 72 61 6e 64 20 65 6d 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 7a 64 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 6d 75 6c 74 69 62 72 61 6e 64 20 7a 64 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 74 69 74 6c 65 2d 6d 75 6c 74 69 62 72 61 6e 64 7b 63 6f 6c 6f 72 3a 23 Data Ascii: ackground-color:#f3f3f3}zd-autocomplete-multibrand:last-child{border-bottom-left-radius:4px;border-bottom-right-radius:4px}zd-autocomplete-multibrand em{font-style:normal;font-weight:bold}zd-autocomplete-multibrand zd-autocomplete-title-multibrand{color:#
2024-04-26 12:23:34 UTC	1369	IN	Data Raw: 6c 6c 73 2d 63 6f 6e 74 61 69 6e 65 72 5d 20 6c 69 5b 64 61 74 61 2d 68 63 2d 70 69 6c 6c 3d 74 72 75 65 5d 7b 68 65 69 67 68 74 3a 32 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 33 70 78 3b 6d 61 72 67 69 6e 3a 32 2e 35 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 32 66 32 66 32 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 66 32 66 32 66 32 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 7d 75 6c 5b 64 61 74 61 2d 68 63 2d 70 69 6c 6c 73 2d 63 6f 6e 74 61 69 6e 65 72 5d 20 6c 69 5b 64 61 74 61 2d 68 63 2d 70 69 6c 6c 3d 74 72 75 65 5d 5b 61 72 69 61 2d 69 6e 76 61 6c 69 64 3d 74 72 75 65 5d 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 30 33 62 33 30 Data Ascii: lls-container] li[data-hc-pill=true]{height:25px;line-height:23px;margin:2.5px;background-color:#f2f2f2;cursor:default;border:1px solid #f2f2f2;border-radius:2px}ul[data-hc-pills-container] li[data-hc-pill=true][aria-invalid=true]{border:1px solid #e03b30
2024-04-26 12:23:34 UTC	1369	IN	Data Raw: 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 38 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 30 30 30 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 35 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 29 3b 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 31 31 31 30 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 74 77 68 6f 2d 76 69 65 77 20 75 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 7d 2e 61 74 77 68 6f 2d 76 69 65 77 20 75 6c 20 2e 63 75 Data Ascii: top:0;left:0;display:none;margin-top:18px;background:#fff;color:#000;border:1px solid #ddd;border-radius:3px;box-shadow:0 0 5px rgba(0,0,0,.1);min-width:120px;z-index:11110 !important}.atwho-view ul{list-style:none;padding:0;margin:auto}.atwho-view ul .cu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49908	104.17.25.14	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:34 UTC	574	OUT	GET /ajax/libs/jquery.inputmask/5.0.7/jquery.inputmask.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:35 UTC	950	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 12:23:34 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61ce34d0-73d7" Last-Modified: Thu, 30 Dec 2021 22:38:08 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Wed, 16 Apr 2025 12:23:34 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6vDeruTnoK6iYAUPFuYEKY5a9U93OSnen95zqxuyvAXQ5VdK0G4MJKxBYEpZ9Ah6QNp1z%2F6LB4jqUwAp%2BeSdxe2Mj1Mf1IbsBBUL1Qb1g%2BJmaNBjVvm%2F8%2BxdDaIdPaU3K0zrgpjY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87a68b7aabbbdb19-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 12:23:35 UTC	419	IN	Data Raw: 37 62 66 62 0d 0a 2f 2a 21 0a 20 2a 20 64 69 73 74 2f 6a 71 75 65 72 79 2e 69 6e 70 75 74 6d 61 73 6b 2e 6d 69 6e 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 52 6f 62 69 6e 48 65 72 62 6f 74 73 2f 49 6e 70 75 74 6d 61 73 6b 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 30 20 2d 20 32 30 32 31 20 52 6f 62 69 6e 20 48 65 72 62 6f 74 73 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 56 65 72 73 69 6f 6e 3a 20 35 2e 30 2e 37 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 29 6d 6f 64 75 Data Ascii: 7bfb/! dist/jquery.inputmask.min * https://github.com/RobinHerbots/Inputmask * Copyright (c) 2010 - 2021 Robin Herbots * Licensed under the MIT license * Version: 5.0.7 */!function(e,t){if("object"==typeof exports&&"object"==typeof module)modu
2024-04-26 12:23:35 UTC	1369	IN	Data Raw: 72 79 29 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 69 29 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 3a 65 29 5b 61 5d 3d 69 5b 61 5d 7d 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 33 30 34 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 76 61 72 20 61 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 2c 69 28 33 38 35 31 29 2c 69 28 32 31 39 29 2c 69 28 32 30 37 29 2c 69 28 35 32 39 36 29 3b 76 61 72 20 6e 3d 28 28 61 3d Data Ascii: ry);for(var a in i)("object"==typeof exports?exports:e)[a]=i[a]}}(self,(function(e){return function(){"use strict";var t={3046:function(e,t,i){var a;Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0,i(3851),i(219),i(207),i(5296);var n=((a=
2024-04-26 12:23:35 UTC	1369	IN	Data Raw: 6f 75 70 53 65 70 61 72 61 74 6f 72 3a 22 22 2c 6b 65 65 70 53 74 61 74 69 63 3a 6e 75 6c 6c 2c 70 6f 73 69 74 69 6f 6e 43 61 72 65 74 4f 6e 54 61 62 3a 21 30 2c 74 61 62 54 68 72 6f 75 67 68 3a 21 31 2c 73 75 70 70 6f 72 74 73 49 6e 70 75 74 54 79 70 65 3a 5b 22 74 65 78 74 22 2c 22 74 65 6c 22 2c 22 75 72 6c 22 2c 22 70 61 73 73 77 6f 72 64 22 2c 22 73 65 61 72 63 68 22 5d 2c 69 67 6e 6f 72 61 62 6c 65 73 3a 5b 6e 2e 64 65 66 61 75 6c 74 2e 42 41 43 4b 53 50 41 43 45 2c 6e 2e 64 65 66 61 75 6c 74 2e 54 41 42 2c 6e 2e 64 65 66 61 75 6c 74 5b 22 50 41 55 53 45 2f 42 52 45 41 4b 22 5d 2c 6e 2e 64 65 66 61 75 6c 74 2e 45 53 43 41 50 45 2c 6e 2e 64 65 66 61 75 6c 74 2e 50 41 47 45 5f 55 50 2c 6e 2e 64 65 66 61 75 6c 74 2e 50 41 47 45 5f 44 4f 57 4e 2c 6e 2e Data Ascii: oupSeparator:"",keepStatic:null,positionCaretOnTab:!0,tabThrough:!1,supportsInputType:["text","tel","url","password","search"],ignorables:[n.default.BACKSPACE,n.default.TAB,n.default["PAUSE/BREAK"],n.default.ESCAPE,n.default.PAGE_UP,n.default.PAGE_DOWN,n.
2024-04-26 12:23:35 UTC	1369	IN	Data Raw: 2e 6d 6f 62 69 6c 65 3d 74 2e 69 70 68 6f 6e 65 3d 74 2e 69 65 6d 6f 62 69 6c 65 3d 74 2e 69 65 3d 76 6f 69 64 20 30 3b 76 61 72 20 61 2c 6e 3d 28 61 3d 69 28 39 33 38 30 29 29 26 26 61 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 61 3a 7b 64 65 66 61 75 6c 74 3a 61 7d 3b 76 61 72 20 72 3d 6e 2e 64 65 66 61 75 6c 74 2e 6e 61 76 69 67 61 74 6f 72 26 26 6e 2e 64 65 66 61 75 6c 74 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 7c 7c 22 22 2c 6f 3d 72 2e 69 6e 64 65 78 4f 66 28 22 4d 53 49 45 20 22 29 3e 30 7c 7c 72 2e 69 6e 64 65 78 4f 66 28 22 54 72 69 64 65 6e 74 2f 22 29 3e 30 2c 73 3d 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 6e 2e 64 65 66 61 75 6c 74 2c 6c 3d 2f 69 65 6d 6f 62 69 6c 65 2f 69 2e 74 65 73 74 28 72 29 2c 75 3d 2f 69 70 68 6f Data Ascii: .mobile=t.iphone=t.iemobile=t.ie=void 0;var a,n=(a=i(9380))&&a.__esModule?a:{default:a};var r=n.default.navigator&&n.default.navigator.userAgent\|\|"",o=r.indexOf("MSIE ")>0\|\|r.indexOf("Trident/")>0,s="ontouchstart"in n.default,l=/iemobile/i.test(r),u=/ipho
2024-04-26 12:23:35 UTC	1369	IN	Data Raw: 6f 20 69 74 65 72 61 74 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 20 6d 65 74 68 6f 64 2e 22 29 7d 76 61 72 20 72 2c 6f 3d 21 30 2c 73 3d 21 31 3b 72 65 74 75 72 6e 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 3d 69 2e 63 61 6c 6c 28 65 29 7d 2c 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 69 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 6f 3d 65 2e 64 6f 6e 65 2c 65 7d 2c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 3d 21 30 2c 72 3d 65 7d 2c 66 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 Data Ascii: o iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}var r,o=!0,s=!1;return{s:function(){i=i.call(e)},n:function(){var e=i.next();return o=e.done,e},e:function(e){s=!0,r=e},f:function(){try
2024-04-26 12:23:35 UTC	1369	IN	Data Raw: 72 6c 4b 65 79 7c 7c 76 6f 69 64 20 30 21 3d 3d 74 2e 75 73 65 72 4f 70 74 69 6f 6e 73 2e 69 6e 73 65 72 74 4d 6f 64 65 3f 21 30 3d 3d 3d 69 2e 74 61 62 54 68 72 6f 75 67 68 26 26 70 3d 3d 3d 72 2e 64 65 66 61 75 6c 74 2e 54 41 42 3f 21 30 3d 3d 3d 65 2e 73 68 69 66 74 4b 65 79 3f 28 68 2e 65 6e 64 3d 6e 2e 73 65 65 6b 50 72 65 76 69 6f 75 73 2e 63 61 6c 6c 28 74 2c 68 2e 65 6e 64 2c 21 30 29 2c 21 30 3d 3d 3d 75 2e 67 65 74 54 65 73 74 2e 63 61 6c 6c 28 74 2c 68 2e 65 6e 64 2d 31 29 2e 6d 61 74 63 68 2e 73 74 61 74 69 63 26 26 68 2e 65 6e 64 2d 2d 2c 68 2e 62 65 67 69 6e 3d 6e 2e 73 65 65 6b 50 72 65 76 69 6f 75 73 2e 63 61 6c 6c 28 74 2c 68 2e 65 6e 64 2c 21 30 29 2c 68 2e 62 65 67 69 6e 3e 3d 30 26 26 68 2e 65 6e 64 3e 30 26 26 28 65 2e 70 72 65 76 65 Data Ascii: rlKey\|\|void 0!==t.userOptions.insertMode?!0===i.tabThrough&&p===r.default.TAB?!0===e.shiftKey?(h.end=n.seekPrevious.call(t,h.end,!0),!0===u.getTest.call(t,h.end-1).match.static&&h.end--,h.begin=n.seekPrevious.call(t,h.end,!0),h.begin>=0&&h.end>0&&(e.preve
2024-04-26 12:23:35 UTC	1369	IN	Data Raw: 49 6e 70 75 74 45 76 65 6e 74 3d 21 30 2c 21 30 3b 69 66 28 6d 29 7b 34 34 21 3d 3d 6d 26 26 34 36 21 3d 3d 6d 7c 7c 33 21 3d 3d 65 2e 6c 6f 63 61 74 69 6f 6e 7c 7c 22 22 3d 3d 3d 63 2e 72 61 64 69 78 50 6f 69 6e 74 7c 7c 28 6d 3d 63 2e 72 61 64 69 78 50 6f 69 6e 74 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 29 3b 76 61 72 20 76 2c 67 3d 74 3f 7b 62 65 67 69 6e 3a 6f 2c 65 6e 64 3a 6f 7d 3a 6e 2e 63 61 72 65 74 2e 63 61 6c 6c 28 75 2c 70 29 2c 6b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6d 29 3b 6b 3d 63 2e 73 75 62 73 74 69 74 75 74 65 73 5b 6b 5d 7c 7c 6b 2c 64 2e 77 72 69 74 65 4f 75 74 42 75 66 66 65 72 3d 21 30 3b 76 61 72 20 79 3d 73 2e 69 73 56 61 6c 69 64 2e 63 61 6c 6c 28 75 2c 67 2c 6b 2c 61 2c 76 6f 69 64 20 30 2c 76 6f 69 Data Ascii: InputEvent=!0,!0;if(m){44!==m&&46!==m\|\|3!==e.location\|\|""===c.radixPoint\|\|(m=c.radixPoint.charCodeAt(0));var v,g=t?{begin:o,end:o}:n.caret.call(u,p),k=String.fromCharCode(m);k=c.substitutes[k]\|\|k,d.writeOutBuffer=!0;var y=s.isValid.call(u,g,k,a,void 0,voi
2024-04-26 12:23:35 UTC	1369	IN	Data Raw: 62 6f 61 72 64 44 61 74 61 2e 67 65 74 44 61 74 61 28 22 54 65 78 74 22 29 2b 75 3b 65 6c 73 65 7b 69 66 28 21 65 2e 63 6c 69 70 62 6f 61 72 64 44 61 74 61 7c 7c 21 65 2e 63 6c 69 70 62 6f 61 72 64 44 61 74 61 2e 67 65 74 44 61 74 61 29 72 65 74 75 72 6e 21 30 3b 72 3d 73 2b 65 2e 63 6c 69 70 62 6f 61 72 64 44 61 74 61 2e 67 65 74 44 61 74 61 28 22 74 65 78 74 2f 70 6c 61 69 6e 22 29 2b 75 7d 76 61 72 20 66 3d 72 3b 69 66 28 69 2e 69 73 52 54 4c 29 7b 66 3d 66 2e 73 70 6c 69 74 28 22 22 29 3b 76 61 72 20 64 2c 70 3d 63 28 6e 2e 67 65 74 42 75 66 66 65 72 54 65 6d 70 6c 61 74 65 2e 63 61 6c 6c 28 69 29 29 3b 74 72 79 7b 66 6f 72 28 70 2e 73 28 29 3b 21 28 64 3d 70 2e 6e 28 29 29 2e 64 6f 6e 65 3b 29 7b 76 61 72 20 68 3d 64 2e 76 61 6c 75 65 3b 66 5b 30 5d Data Ascii: boardData.getData("Text")+u;else{if(!e.clipboardData\|\|!e.clipboardData.getData)return!0;r=s+e.clipboardData.getData("text/plain")+u}var f=r;if(i.isRTL){f=f.split("");var d,p=c(n.getBufferTemplate.call(i));try{for(p.s();!(d=p.n()).done;){var h=d.value;f[0]
2024-04-26 12:23:35 UTC	1369	IN	Data Raw: 69 6f 6e 2e 63 61 6c 6c 28 74 2c 73 29 29 2c 76 29 7b 63 61 73 65 22 69 6e 73 65 72 74 54 65 78 74 22 3a 62 5b 73 2d 31 5d 3d 3d 3d 79 5b 73 5d 26 26 72 2e 62 65 67 69 6e 3d 3d 79 2e 6c 65 6e 67 74 68 2d 31 26 26 67 2e 70 75 73 68 28 79 5b 73 5d 29 2c 73 3d 6f 3b 62 72 65 61 6b 3b 63 61 73 65 22 69 6e 73 65 72 74 52 65 70 6c 61 63 65 6d 65 6e 74 54 65 78 74 22 3a 63 61 73 65 22 64 65 6c 65 74 65 43 6f 6e 74 65 6e 74 42 61 63 6b 77 61 72 64 22 3a 79 5b 73 5d 3d 3d 3d 6b 3f 72 2e 65 6e 64 2b 2b 3a 73 3d 6f 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 79 5b 73 5d 21 3d 3d 62 5b 73 5d 26 26 28 79 5b 73 2b 31 5d 21 3d 3d 6b 26 26 79 5b 73 2b 31 5d 21 3d 3d 6c 26 26 76 6f 69 64 20 30 21 3d 3d 79 5b 73 2b 31 5d 7c 7c 28 62 5b 73 5d 21 3d 3d 6c 7c 7c 62 5b 73 2b Data Ascii: ion.call(t,s)),v){case"insertText":b[s-1]===y[s]&&r.begin==y.length-1&&g.push(y[s]),s=o;break;case"insertReplacementText":case"deleteContentBackward":y[s]===k?r.end++:s=o;break;default:y[s]!==b[s]&&(y[s+1]!==k&&y[s+1]!==l&&void 0!==y[s+1]\|\|(b[s]!==l\|\|b[s+
2024-04-26 12:23:35 UTC	1369	IN	Data Raw: 74 68 69 73 2e 69 6e 70 75 74 6d 61 73 6b 2c 69 3d 74 68 69 73 2c 61 3d 65 26 26 65 2e 64 65 74 61 69 6c 3f 65 2e 64 65 74 61 69 6c 5b 30 5d 3a 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3b 76 6f 69 64 20 30 3d 3d 3d 61 26 26 28 61 3d 69 2e 69 6e 70 75 74 6d 61 73 6b 2e 5f 76 61 6c 75 65 47 65 74 28 21 30 29 29 2c 28 30 2c 6c 2e 61 70 70 6c 79 49 6e 70 75 74 56 61 6c 75 65 29 28 69 2c 61 29 2c 28 65 2e 64 65 74 61 69 6c 26 26 76 6f 69 64 20 30 21 3d 3d 65 2e 64 65 74 61 69 6c 5b 31 5d 7c 7c 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 29 26 26 6e 2e 63 61 72 65 74 2e 63 61 6c 6c 28 74 2c 69 2c 65 2e 64 65 74 61 69 6c 3f 65 2e 64 65 74 61 69 6c 5b 31 5d 3a 61 72 67 75 6d 65 6e 74 73 5b 32 5d 29 7d 2c 66 6f 63 75 73 45 76 65 6e 74 3a 66 75 6e 63 Data Ascii: this.inputmask,i=this,a=e&&e.detail?e.detail[0]:arguments[1];void 0===a&&(a=i.inputmask._valueGet(!0)),(0,l.applyInputValue)(i,a),(e.detail&&void 0!==e.detail[1]\|\|void 0!==arguments[2])&&n.caret.call(t,i,e.detail?e.detail[1]:arguments[2])},focusEvent:func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49913	104.18.72.113	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:35 UTC	640	OUT	GET /theme_assets/802785/d0f6f42d1a879a88ea2c1aabe52e3edc9b18de3f.png HTTP/1.1 Host: theme.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:35 UTC	1218	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 12:23:35 GMT Content-Type: image/png Content-Length: 61654 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: HEAD, GET Access-Control-Max-Age: 86400 x-amz-replication-status: COMPLETED Last-Modified: Mon, 26 Oct 2020 20:28:19 GMT ETag: "556ac4d291a0c93455cc57fd17bef380" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 x-amz-version-id: hpLJY_DGvmPBRap4.sCPNMmBg.2xaT1Z Vary: Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 6bcc5cb16e0756268a257daab0f6082c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: I2mFwvhXqgHV5CZud9hikvNKqOxo_S6poKzsisxT4vLxENFvwCK7GQ== Age: 41270 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EXXa3nWWLp5n52k4YY9tEBcXAoRjyvkzGsH2zo6F26xk4YfIQwfoMeU%2BUmsVAI8FXY2y%2B%2F8WQlQtsMXGRcjwSpmzn0FF3IfOt8uoIurSo6FoT8HclSRMH3unKziME9dY6uocag%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Server: cloudflare CF-RAY: 87a68b807e0d5c76-MIA
2024-04-26 12:23:35 UTC	151	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 ec 00 00 01 f2 08 06 00 00 00 58 a1 51 c9 00 00 01 1c 69 43 43 50 41 64 6f 62 65 20 52 47 42 20 28 31 39 39 38 29 00 00 28 cf 63 60 60 52 48 2c 28 c8 61 12 60 60 c8 cd 2b 29 0a 72 77 52 88 88 8c 52 60 7f c8 c0 ce c0 cb 20 c0 60 ce c0 9f 98 5c 5c e0 18 10 e0 c3 00 04 30 1a 15 7c bb c6 c0 08 a2 2f eb 82 cc 62 20 0d 70 a5 a4 16 27 03 e9 3f 40 9c 9d 5c 50 54 c2 c0 c0 98 01 64 2b 97 97 14 80 d8 3d Data Ascii: PNGIHDRXQiCCPAdobe RGB (1998)(c``RH,(a``+)rwRR` `\\0\|/b p'?@\PTd+=
2024-04-26 12:23:35 UTC	1369	IN	Data Raw: 40 b6 48 52 36 98 bd 00 c4 2e 02 3a 10 c8 de 02 62 a7 43 d8 27 c0 6a 20 ec 3b 60 35 21 41 ce 40 f6 07 20 9b 2f 09 cc 66 02 d9 c5 97 0e 61 0b 80 d8 50 7b 41 40 d0 31 25 3f 29 55 01 e4 7b 0d 43 4b 4b 0b 4d 06 2a 83 92 d4 8a 12 10 ed 9c 5f 50 59 94 99 9e 51 a2 e0 08 0c a9 54 05 cf bc 64 3d 1d 05 23 03 43 73 06 06 50 b8 43 54 7f 0e 04 87 27 a3 d8 19 84 18 02 20 c4 e6 48 30 30 f8 2f 65 60 60 f9 83 10 33 e9 65 60 58 a0 c3 c0 c0 3f 15 21 a6 66 c8 c0 20 a0 cf c0 b0 6f 4e 72 69 51 19 d4 18 46 26 63 06 06 42 7c 00 35 03 4a 63 92 01 98 a6 00 00 00 09 70 48 59 73 00 00 17 12 00 00 17 12 01 67 9f d2 52 00 00 06 65 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 Data Ascii: @HR6.:bC'j ;`5!A@ /faP{A@1%?)U{CKKM*_PYQTd=#CsPCT' H00/e``3e`X?!f oNriQF&cB\|5JcpHYsgReiTXtXML:com.adobe.xmp<?xpacket begin="" id="
2024-04-26 12:23:35 UTC	1369	IN	Data Raw: 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 65 32 35 36 37 30 33 63 2d 32 37 66 37 2d 34 38 61 64 2d 39 31 66 33 2d 34 63 62 61 64 33 38 31 36 62 62 39 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 30 2d 31 30 2d 32 33 54 31 39 3a 31 36 3a 35 31 2d 30 35 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 30 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 36 34 38 65 37 38 66 35 2d 31 36 32 35 2d 34 66 32 65 2d 39 66 32 Data Ascii: stEvt:instanceID="xmp.iid:e256703c-27f7-48ad-91f3-4cbad3816bb9" stEvt:when="2020-10-23T19:16:51-05:00" stEvt:softwareAgent="Adobe Photoshop 21.0 (Macintosh)" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:648e78f5-1625-4f2e-9f2
2024-04-26 12:23:35 UTC	1369	IN	Data Raw: 00 0c 3b 00 00 00 00 00 00 00 00 00 c0 b0 03 00 00 00 00 00 00 00 00 c0 b0 03 00 00 00 00 00 00 00 00 00 0c 3b 00 00 00 00 00 00 00 00 00 0c 3b 00 00 00 00 00 00 00 00 00 c0 b0 03 00 00 00 00 00 00 00 00 c0 b0 03 00 00 00 00 00 00 00 00 00 0c 3b 00 00 00 00 00 00 00 00 00 0c 3b 00 00 00 00 00 00 00 00 00 c0 b0 03 00 00 00 00 00 00 00 00 00 0c 3b 00 00 00 00 00 00 00 00 00 0c 3b 00 00 00 00 00 00 00 00 00 c0 b0 03 00 00 00 00 00 00 00 00 c0 b0 03 00 00 00 00 00 00 00 00 00 0c 3b 00 00 00 00 00 00 00 00 00 0c 3b 00 00 00 00 00 00 00 00 00 c0 b0 03 00 00 00 00 00 00 00 00 c0 b0 03 00 00 00 00 00 00 00 00 00 0c 3b 00 00 00 00 00 00 00 00 00 0c 3b 00 00 00 00 00 00 00 00 00 c0 b0 03 00 00 00 00 00 00 00 00 c0 b0 03 00 00 00 00 00 00 00 00 00 0c 3b 00 00 00 00 Data Ascii: ;;;;;;;;;;;;
2024-04-26 12:23:35 UTC	1369	IN	Data Raw: 51 df 2b 2e 91 29 b7 d4 b8 cd 78 c1 f8 3a 06 f7 2c 7a f0 f9 86 77 af 25 93 7d a6 37 fb a8 e8 ab 58 31 ec 78 31 b8 fd 52 31 d1 2d ed 82 ff 98 37 fd 28 1b 83 cf 4a 5a 38 51 7d a5 ae f7 44 5e e6 dc 75 5e 65 cd cf 31 e7 0d 2f a9 57 55 4e 47 54 ce 59 df 69 54 c9 34 82 62 66 5a 84 6f 76 b7 f5 0c ba 27 bd 07 2f 3f 27 80 b5 c6 1a ef 06 98 6a 5b 5e 49 1f 6f 35 4d fc 00 e3 da 98 5c a7 3f f3 12 eb 7d 8d e6 28 58 a5 ae 7a 80 32 d6 38 cd 33 c1 be 89 e9 78 fc 0f af 18 60 14 66 04 af 90 39 c9 e6 c6 41 5e 15 ef b3 de b5 fe e7 84 f1 bd 37 83 60 99 f7 00 72 43 0c 3b 0c bb 6c 07 53 4b ad 6d 43 4b 44 ee 46 6e 37 e3 74 e3 21 e3 f3 1c 0f 34 83 69 f5 d8 f6 15 ad 61 b3 85 37 5d e6 de 2c 1a b9 51 e6 65 2f 36 06 b3 2e 56 56 fb d2 e6 45 d0 77 02 11 b1 24 70 aa 37 35 e4 8b 22 68 fb Data Ascii: Q+.)x:,zw%}7X1x1R1-7(JZ8Q}D^u^e1/WUNGTYiT4bfZov'/?'j[^Io5M\?}(Xz283x`f9A^7`rC;lSKmCKDFn7t!4ia7],Qe/6.VVEw$p75"h
2024-04-26 12:23:35 UTC	1369	IN	Data Raw: bf 61 51 96 db 78 03 e3 0a aa 90 43 a3 e2 87 9e 11 89 9b fa de 1a c1 ff 46 97 dc ad 8f ae 75 00 b9 c3 8a f4 f5 43 cb f0 ec ca b4 fe c8 a3 0d 07 37 8d bd 61 67 27 71 aa e7 0a df e7 19 2d 1f 20 6e 60 7a 16 d1 00 a5 a9 cd 9b 7a 26 ae 36 f7 78 96 5d 9f 7e e5 2d 2e b0 39 ed 7b 63 bc 8d 64 e8 6b 85 e7 6d 2d 28 4d af 4c f5 cb 23 e9 0f 95 32 23 44 9b ae e7 2d 99 81 51 97 bf 0a f1 f2 22 8c dd c7 d0 fe 37 5c 94 a5 b6 6d 67 5c 88 51 97 75 73 7d e7 02 c6 8b 66 ce cc 8b c1 46 70 49 41 cb 45 35 e2 2e 2b 72 d7 8d fa de b2 5e af d2 47 63 35 55 56 05 45 6d e3 6c d8 b1 ee 53 78 c6 24 74 50 d2 2e 4f 7d 8c 99 ba 89 f3 cc 12 aa 2a ab 67 47 2e 67 39 a9 a8 c3 a8 8b 26 57 b0 0e 56 ea 26 80 be f0 5b 0e 76 bc 11 3e 34 e1 cb 68 60 da 45 27 76 e9 67 bf 65 65 c8 36 d5 5a c5 a7 70 af Data Ascii: aQxCFuC7ag'q- n`zz&6x]~-.9{cdkm-(ML#2#D-Q"7\mg\Qus}fFpIAE5.+r^Gc5UVEmlSx$tP.O}*gG.g9&WV&[v>4h`E'vgee6Zp
2024-04-26 12:23:35 UTC	1369	IN	Data Raw: 93 12 d2 bf 4f 40 4b 28 22 d6 e5 6b 3d 97 3c c4 ee d3 e8 09 45 c0 c5 dc 83 15 05 7d b0 e4 aa 1d ef b7 f4 aa 86 e9 2b 10 86 7f 97 e7 68 13 bd a0 86 1d 3b c5 86 9c 42 90 d0 81 ae 1b da 3a f3 bd 51 af 08 2f 8e 75 bd 1b 45 fa 00 54 c6 e7 e5 09 58 2c d9 ce 61 39 5a 42 91 71 7a 42 ae 51 5f a2 25 00 24 84 65 d8 72 55 8e f5 7b 79 b9 18 fd 04 b2 c1 df 8c b2 42 1b 76 ec 14 1b fe e9 73 fd 84 0e 78 6f a3 af 33 03 8b ec e2 d8 94 f5 ea 20 03 fe 14 f7 f5 ec ec f8 9f 47 47 28 32 3e d0 03 99 98 c7 6d 47 74 04 80 04 a1 07 10 4d 4a 78 a5 8f f3 b5 8d d3 e8 1b 90 03 1e ca f6 7d 50 50 c3 8e 9d 62 c3 b3 51 42 07 be 1b d0 d6 99 bd 8b e8 02 b9 81 f1 77 34 87 0c 59 10 e3 be 5e cb f8 06 0d a1 08 19 13 f3 eb d4 48 34 04 80 84 b1 2f 36 dd af 63 7c a9 71 33 7d 02 72 c8 79 85 34 ec d8 Data Ascii: O@K("k=<E}+h;B:Q/uETX,a9ZBqzBQ_%$erU{yBvsxo3 GG(2>mGtMJx}PPbQBw4Y^H4/6c\|q3}ry4
2024-04-26 12:23:35 UTC	1369	IN	Data Raw: 45 c2 df 62 9c 67 36 33 de 44 43 48 10 2b 72 69 d8 35 a3 81 43 71 45 49 42 5f 68 eb c4 13 11 d7 74 e3 72 76 61 82 e8 71 27 15 c6 00 98 ea 59 88 dd fd d1 0a 00 8a 84 37 63 9c 63 de 84 7e 90 30 b4 19 69 9b 9c 18 76 5e d0 bc 4b 23 3b b3 06 c3 0e d2 78 24 c2 7a d6 65 9a 1f 44 94 ff 44 2c 56 46 a0 09 c0 ff 70 42 4c ee 5b 58 97 19 00 8a 85 b7 63 9a 5f ee 81 76 50 8c b3 11 c2 1a 76 6b 68 60 67 fe 99 60 c3 ee 5b f4 0d cc fd 11 d6 73 09 fa 40 84 69 15 a1 58 99 83 1e 00 ff c3 69 31 b9 6f 59 8d 56 00 50 24 7c 16 c3 dc b2 83 f1 31 da 41 42 79 2e 97 86 dd b9 34 b0 33 df 1b b5 12 6a d8 7d 86 be 81 59 19 51 2d 37 2f 67 61 57 88 36 c3 23 14 2f e7 a3 07 c0 ff 70 72 4c ee 5b de 40 2b 00 c0 b0 8b ec 18 bd 0a dd 20 e1 f4 cb 95 61 c7 4e b1 e1 68 8f 61 07 1e 37 44 50 c7 7a c6 Data Ascii: Ebg63DCH+ri5CqEIB_htrvaq'Y7cc~0iv^K#;x$zeDD,VFpBL[Xc_vPvkh`g`[s@iXi1oYVP$\|1ABy.43j}YQ-7/gaW6#/prL[@+ aNha7DPz
2024-04-26 12:23:35 UTC	1369	IN	Data Raw: 4c b4 75 d6 0b 44 ea 64 db b0 e3 a6 c7 9d bf 25 cc b0 fb 04 4d 03 b3 7e 81 b4 62 27 a6 04 4c 21 f0 b4 7c b9 c8 b5 a9 5b e0 f6 c7 ec c9 4f f2 77 72 f9 2f 8b 1f d7 ca 81 86 ad 8c 3b 69 e7 ac 72 55 c4 ef 57 b6 42 a3 bc f2 91 67 e0 4c 35 3a 65 41 bf ee c6 f5 b4 6b 64 78 cf b8 cc 98 68 b4 ce 52 c5 d5 6a da 35 27 74 8d d8 58 dc cb 58 87 2e d9 9f c5 57 9d 49 9e 65 0d f5 f0 f3 0d da 3c ab f4 c8 aa 61 e7 09 c5 4e b1 8e 65 aa 09 32 eb 5a a3 67 60 de 2a a0 5e 97 d2 fe 19 73 52 c4 63 ef 01 c6 d0 82 4e 2b 27 46 72 c3 a7 e5 bf 6c 0a b0 55 9e b4 ac 63 5c 49 bb 67 8d 93 23 3e 6e ce 40 a3 9c a3 0d ad ce 2a ff 65 f7 c1 3a 39 d2 71 bc 37 cd 92 f6 2e c0 3a 95 de 52 04 5b e4 e2 41 8a a7 ef 4c 66 11 64 9d d2 88 8d c5 57 a3 49 d6 39 b2 00 3a 6e c6 32 23 59 65 f7 5c 18 76 ec 14 Data Ascii: LuDd%M~b'L!\|[Owr/;irUWBgL5:eAkdxhRj5'tXX.WIe<aNe2Zg`^sRcN+'FrlUc\Ig#>n@e:9q7.:R[ALfdWI9:n2#Ye\v
2024-04-26 12:23:35 UTC	1369	IN	Data Raw: 80 98 dc 47 fd 07 bd c2 cf 48 c9 aa 61 87 30 a1 98 17 63 c3 ee 62 f4 0b cc a4 3c 57 62 7d 46 9b 57 cb d7 46 8b 18 c5 dc 56 de 3a 60 2c 7e 5e d8 a7 c4 5f 11 3b 4e cc 8c 49 9c ad 41 ab e4 ad 51 c8 1a 67 a1 68 11 83 b8 6d 86 4e ce ec 15 03 7d d9 ec c9 9d b3 23 a0 df ef d1 21 34 d7 c5 28 5f 59 8d 5e a1 f8 2c 57 86 1d 3b c5 ba 71 6e 8c 0d bb 97 d1 2f 30 6d f3 a8 cf 1e b4 77 8d 5c 16 a3 78 6b 67 bc 8f 66 6b cf 2f b0 0e 1b a0 81 33 83 63 12 6b 7f 45 ab f8 99 e9 19 e8 ca 2e a2 6e 7c 1c 93 b8 ed 8c 56 ce 6c 1e 03 7d 87 a2 93 33 73 0a ac 5d 23 e3 4b 74 08 5d 5d d7 23 46 39 cb 39 68 16 9a ba b9 30 ec d8 29 d6 8d 95 31 35 eb 58 bf 2e e2 8b fa 6a 9d 03 da bc 46 36 89 49 bc 69 aa cf 8b e8 95 62 db 02 6b 31 1a 0d 9c 29 63 2a 47 a2 59 15 71 5d cf 43 23 27 9e 88 49 dc 6e Data Ascii: GHa0cb<Wb}FWFV:`,~^_;NIAQghmN}#!4(_Y^,W;qn/0mw\xkgfk/3ckE.n\|Vl}3s]#Kt]]#F99h0)15X.jF6Iibk1)c*GYq]C#'In

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49914	104.18.10.207	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:35 UTC	572	OUT	GET /bootstrap/3.4.1/css/bootstrap.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:35 UTC	932	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 12:23:35 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"7f89537eaf606bff49f5cc1a7c24dbca" Last-Modified: Mon, 25 Jan 2021 22:04:00 GMT CDN-CachedAt: 07/17/2022 00:24:14 CDN-ProxyVer: 1.02 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 625 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 7eae7ce72529f88cb3df7b4b04acedfa CDN-Cache: HIT CF-Cache-Status: HIT Age: 5082419 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87a68b808e6e0981-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 12:23:35 UTC	437	IN	Data Raw: 37 63 30 66 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 34 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 68 74 6d Data Ascii: 7c0f/! Bootstrap v3.4.1 (https://getbootstrap.com/) * Copyright 2011-2019 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */htm
2024-04-26 12:23:35 UTC	1369	IN	Data Raw: 61 72 79 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 61 75 64 69 6f 2c 63 61 6e 76 61 73 2c 70 72 6f 67 72 65 73 73 2c 76 69 64 65 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 30 7d 5b 68 69 64 64 65 6e 5d 2c 74 65 6d 70 6c 61 74 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 61 3a 61 63 74 69 76 65 2c 61 3a 68 6f 76 65 72 7b 6f 75 74 6c 69 6e 65 3a 30 7d 61 62 62 72 5b 74 69 74 6c 65 5d 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b Data Ascii: ary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:none;
2024-04-26 12:23:35 UTC	1369	IN	Data Raw: 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 7d 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f Data Ascii: g:border-box;padding:0}input[type=number]::-webkit-inner-spin-button,input[type=number]::-webkit-outer-spin-button{height:auto}input[type=search]{-webkit-appearance:textfield;-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-bo
2024-04-26 12:23:35 UTC	1369	IN	Data Raw: 6f 6c 6c 61 70 73 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 61 62 6c 65 20 74 64 2c 2e 74 61 62 6c 65 20 74 68 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 20 74 64 2c 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 20 74 68 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 47 6c 79 70 68 69 63 6f 6e 73 20 48 61 6c 66 6c 69 6e 67 73 22 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 65 6f 74 29 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f Data Ascii: ollapse!important}.table td,.table th{background-color:#fff!important}.table-bordered td,.table-bordered th{border:1px solid #ddd!important}}@font-face{font-family:"Glyphicons Halflings";src:url(../fonts/glyphicons-halflings-regular.eot);src:url(../fonts/
2024-04-26 12:23:35 UTC	1369	IN	Data Raw: 2e 67 6c 79 70 68 69 63 6f 6e 2d 75 73 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 69 6c 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 68 2d 6c 61 72 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 68 2d 6c 69 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 6d 6f 76 65 3a Data Ascii: .glyphicon-user:before{content:"\e008"}.glyphicon-film:before{content:"\e009"}.glyphicon-th-large:before{content:"\e010"}.glyphicon-th:before{content:"\e011"}.glyphicon-th-list:before{content:"\e012"}.glyphicon-ok:before{content:"\e013"}.glyphicon-remove:
2024-04-26 12:23:35 UTC	1369	IN	Data Raw: 6e 2d 74 61 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 61 67 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 62 6f 6f 6b 6d 61 72 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 72 69 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 61 6d 65 72 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6f 6e 74 3a 62 65 66 6f 72 65 7b 63 Data Ascii: n-tag:before{content:"\e041"}.glyphicon-tags:before{content:"\e042"}.glyphicon-book:before{content:"\e043"}.glyphicon-bookmark:before{content:"\e044"}.glyphicon-print:before{content:"\e045"}.glyphicon-camera:before{content:"\e046"}.glyphicon-font:before{c
2024-04-26 12:23:35 UTC	1369	IN	Data Raw: 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 61 73 74 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 74 65 70 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 65 6a 65 63 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d Data Ascii: fore{content:"\e074"}.glyphicon-forward:before{content:"\e075"}.glyphicon-fast-forward:before{content:"\e076"}.glyphicon-step-forward:before{content:"\e077"}.glyphicon-eject:before{content:"\e078"}.glyphicon-chevron-left:before{content:"\e079"}.glyphicon-
2024-04-26 12:23:35 UTC	1369	IN	Data Raw: 6f 6e 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 30 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 61 6c 65 6e 64 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 30 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 61 6e 64 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d Data Ascii: on-plane:before{content:"\e108"}.glyphicon-calendar:before{content:"\e109"}.glyphicon-random:before{content:"\e110"}.glyphicon-comment:before{content:"\e111"}.glyphicon-magnet:before{content:"\e112"}.glyphicon-chevron-up:before{content:"\e113"}.glyphicon-
2024-04-26 12:23:35 UTC	1369	IN	Data Raw: 5c 65 31 33 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 62 72 69 65 66 63 61 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 33 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 75 6c 6c 73 63 72 65 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 64 61 73 68 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 61 70 65 72 63 6c 69 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 68 65 61 72 74 2d 65 6d 70 74 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6c 69 6e 6b 3a 62 65 66 6f 72 65 7b 63 6f Data Ascii: \e138"}.glyphicon-briefcase:before{content:"\e139"}.glyphicon-fullscreen:before{content:"\e140"}.glyphicon-dashboard:before{content:"\e141"}.glyphicon-paperclip:before{content:"\e142"}.glyphicon-heart-empty:before{content:"\e143"}.glyphicon-link:before{co
2024-04-26 12:23:35 UTC	1369	IN	Data Raw: 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 65 6e 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 64 69 73 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 73 61 76 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 73 61 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 6f 70 65 6e 3a 62 65 66 6f 72 Data Ascii: }.glyphicon-send:before{content:"\e171"}.glyphicon-floppy-disk:before{content:"\e172"}.glyphicon-floppy-saved:before{content:"\e173"}.glyphicon-floppy-remove:before{content:"\e174"}.glyphicon-floppy-save:before{content:"\e175"}.glyphicon-floppy-open:befor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49915	104.18.70.113	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:36 UTC	569	OUT	GET /hc/theming_assets/802785/498597/style.css HTTP/1.1 Host: p19.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:36 UTC	887	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 12:23:36 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close x-ua-compatible: IE=edge cache-control: max-age=604800, public x-zendesk-processed-host-header: p19.zdassets.com strict-transport-security: max-age=0 x-zendesk-origin-server: app-server-7644798797-pchlk etag: W/"082ea8638a54284038fee9d450fcb751" x-request-id: 82d1eba6e9496990-IAD x-runtime: 0.017120 Protocol: HTTP/1.1 always CF-Cache-Status: HIT Age: 54709 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dcksKIFsYXVMJFfLT%2BBRz0%2ByJPIOSY0prpA56q1FTLPiaCvNs9M4NzeOUIOKBnWiLNaS%2BRnvghbtaQK4Pc3Yj54HXdVt0jxtyiAdXKZCg7H3kHXO7ySQbC0ZRKqNrnGpP1U%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a68b84cc14334f-MIA
2024-04-26 12:23:36 UTC	482	IN	Data Raw: 37 63 32 61 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 0a 2f 2a 20 43 4f 4c 4f 52 53 20 2a 2f 0a 3a 72 6f 6f 74 20 7b 0a 20 20 2d 2d 65 72 72 6f 72 3a 20 76 61 72 28 2d 2d 7a 64 2d 63 6f 6c 6f 72 2d 72 65 64 2d 36 30 30 29 3b 0a 7d 0a 0a 2f 2a 2a 2a 2a 2a 20 4e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2a 2a 2a 2a 2f 0a 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 38 2e 30 2e 31 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 0a 68 74 6d 6c 20 7b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 31 35 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 61 75 74 6f 3b 0a 7d 0a 0a Data Ascii: 7c2a@charset "UTF-8";/* COLORS /:root { --error: var(--zd-color-red-600);}/** Normalize.css **//! normalize.css v8.0.1 \| MIT License \| github.com/necolas/normalize.css */html { line-height: 1.15; -webkit-text-size-adjust: auto;}
2024-04-26 12:23:36 UTC	1369	IN	Data Raw: 6f 6e 6f 73 70 61 63 65 2c 20 6d 6f 6e 6f 73 70 61 63 65 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 65 6d 3b 0a 7d 0a 0a 61 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 7d 0a 0a 61 62 62 72 5b 74 69 74 6c 65 5d 20 7b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 6e 6f 6e 65 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 0a 7d 0a 0a 62 2c 0a 73 74 72 6f 6e 67 20 7b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 65 72 3b 0a 7d 0a 0a 63 6f 64 65 2c 0a 6b 62 64 2c 0a 73 61 6d 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d Data Ascii: onospace, monospace; font-size: 1em;}a { background-color: transparent;}abbr[title] { border-bottom: none; text-decoration: underline; text-decoration: underline dotted;}b,strong { font-weight: bolder;}code,kbd,samp { font-fam
2024-04-26 12:23:36 UTC	1369	IN	Data Raw: 20 7b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 61 75 74 6f 3b 0a 7d 0a 0a 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 2c 0a 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 20 7b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 5b 74 79 70 65 3d 22 6e 75 6d 62 65 72 22 5d 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 0a 5b 74 79 70 65 3d 22 6e 75 6d 62 65 72 22 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 7d 0a 0a 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 74 65 78 74 Data Ascii: { overflow: auto;}[type="checkbox"],[type="radio"] { box-sizing: border-box; padding: 0;}[type="number"]::-webkit-inner-spin-button,[type="number"]::-webkit-outer-spin-button { height: auto;}[type="search"] { -webkit-appearance: text
2024-04-26 12:23:36 UTC	1369	IN	Data Raw: 65 3a 20 31 36 70 78 3b 0a 7d 0a 0a 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 31 34 30 2c 20 32 35 35 2c 20 31 29 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 61 3a 68 6f 76 65 72 2c 20 61 3a 61 63 74 69 76 65 2c 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 0a 69 6e 70 75 74 2c 0a 74 65 78 74 61 72 65 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 7d 0a 0a 69 6e 70 75 74 20 7b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f Data Ascii: e: 16px;}a { color: rgba(0, 140, 255, 1); text-decoration: none;}a:hover, a:active, a:focus { text-decoration: underline;}input,textarea { color: #000; font-size: 14px;}input { font-weight: 300; max-width: 100%; box-sizing: bo
2024-04-26 12:23:36 UTC	1369	IN	Data Raw: 69 6e 65 72 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 39 30 25 3b 0a 20 20 7d 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 2d 64 69 76 69 64 65 72 20 7b 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 75 6c 20 7b 0a 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 2e 65 72 72 6f 72 2d 70 61 67 65 20 7b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 36 30 70 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 20 35 25 3b 0a 7d 0a 0a 40 6d 65 64 Data Ascii: iner { padding: 0; width: 90%; }}.container-divider { border-top: 1px solid #ddd; margin-bottom: 20px;}ul { list-style: none; margin: 0; padding: 0;}.error-page { max-width: 1160px; margin: 0 auto; padding: 0 5%;}@med
2024-04-26 12:23:36 UTC	1369	IN	Data Raw: 3b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 6f 75 63 68 2d 63 61 6c 6c 6f 75 74 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0a 20 20 2e 62 75 74 74 6f 6e 2c 20 2e 73 65 63 74 69 6f 6e 2d 73 75 62 73 63 72 69 62 65 20 62 75 74 74 6f 6e 2c 20 2e 61 72 74 69 63 6c 65 2d 73 75 62 73 63 72 69 62 65 20 62 75 74 74 6f 6e 2c 20 2e 63 6f 6d 6d 75 6e 69 74 79 2d 66 6f 6c 6c 6f 77 20 62 75 74 74 6f 6e 2c 20 2e 72 65 71 75 65 73 74 73 2d 74 61 62 6c 65 2d 74 6f 6f 6c 62 61 72 20 2e 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 2d 73 75 62 73 63 72 69 62 65 20 62 75 74 74 6f 6e 2c 20 2e 73 75 62 73 63 Data Ascii: ; white-space: nowrap; width: 100%; -webkit-touch-callout: none;}@media (min-width: 768px) { .button, .section-subscribe button, .article-subscribe button, .community-follow button, .requests-table-toolbar .organization-subscribe button, .subsc
2024-04-26 12:23:36 UTC	1369	IN	Data Raw: 2c 20 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 6e 65 78 74 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 20 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 70 72 65 76 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 20 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 66 69 72 73 74 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 20 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 6c 61 73 74 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 20 2e 65 64 69 74 2d 70 72 6f 66 69 6c 65 2d 62 75 74 74 6f 6e 20 61 3a 66 6f 63 75 73 2c 20 2e 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2c 20 2e 73 65 63 74 69 6f 6e 2d 73 75 62 73 63 72 69 62 65 20 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2c 20 2e 73 65 63 74 69 6f 6e 2d 73 75 62 73 63 72 69 62 65 20 62 75 74 74 6f 6e 5b 64 61 74 61 2d 73 65 6c 65 63 74 65 64 3d Data Ascii: , .pagination-next-link:focus, .pagination-prev-link:focus, .pagination-first-link:focus, .pagination-last-link:focus, .edit-profile-button a:focus, .button.button-primary, .section-subscribe button.button-primary, .section-subscribe button[data-selected=
2024-04-26 12:23:36 UTC	1369	IN	Data Raw: 65 72 2c 20 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 73 2d 73 75 62 73 63 72 69 62 65 20 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 2c 20 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 73 2d 73 75 62 73 63 72 69 62 65 20 62 75 74 74 6f 6e 5b 64 61 74 61 2d 73 65 6c 65 63 74 65 64 3d 22 74 72 75 65 22 5d 3a 68 6f 76 65 72 2c 20 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 6e 65 78 74 2d 6c 69 6e 6b 3a 68 6f 76 65 72 2c 20 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 70 72 65 76 2d 6c 69 6e 6b 3a 68 6f 76 65 72 2c 20 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 66 69 72 73 74 2d 6c 69 6e 6b 3a 68 6f 76 65 72 2c 20 2e 62 75 Data Ascii: er, .subscriptions-subscribe button.button-primary:hover, .subscriptions-subscribe button[data-selected="true"]:hover, .button-primary.pagination-next-link:hover, .button-primary.pagination-prev-link:hover, .button-primary.pagination-first-link:hover, .bu
2024-04-26 12:23:36 UTC	1369	IN	Data Raw: 6e 69 74 79 2d 66 6f 6c 6c 6f 77 20 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 3a 61 63 74 69 76 65 2c 20 2e 72 65 71 75 65 73 74 73 2d 74 61 62 6c 65 2d 74 6f 6f 6c 62 61 72 20 2e 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 2d 73 75 62 73 63 72 69 62 65 20 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 3a 61 63 74 69 76 65 2c 20 2e 72 65 71 75 65 73 74 73 2d 74 61 62 6c 65 2d 74 6f 6f 6c 62 61 72 20 2e 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 2d 73 75 62 73 63 72 69 62 65 20 62 75 74 74 6f 6e 5b 64 61 74 61 2d 73 65 6c 65 63 74 65 64 3d 22 74 72 75 65 22 5d 3a 61 63 74 69 76 65 2c 20 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 73 2d 73 75 62 73 63 72 69 62 65 20 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 3a 61 63 74 Data Ascii: nity-follow button.button-primary:active, .requests-table-toolbar .organization-subscribe button.button-primary:active, .requests-table-toolbar .organization-subscribe button[data-selected="true"]:active, .subscriptions-subscribe button.button-primary:act
2024-04-26 12:23:36 UTC	1369	IN	Data Raw: 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0a 20 20 2e 62 75 74 74 6f 6e 2d 6c 61 72 67 65 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 61 75 74 6f 3b 0a 20 20 7d 0a 7d 0a 0a 2e 62 75 74 74 6f 6e 2d 6c 61 72 67 65 3a 68 6f 76 65 72 2c 20 2e 62 75 74 74 6f 6e 2d 6c 61 72 67 65 3a 61 63 74 69 76 65 2c 20 2e 62 75 74 74 6f 6e 2d 6c 61 72 67 65 3a 66 6f 63 75 73 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 3a 68 6f 76 65 72 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 3a 61 63 74 69 76 65 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 3a 66 6f 63 75 73 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a Data Ascii: (min-width: 768px) { .button-large, input[type="submit"] { width: auto; }}.button-large:hover, .button-large:active, .button-large:focus, input[type="submit"]:hover, input[type="submit"]:active, input[type="submit"]:focus { background-color:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49916	104.18.72.113	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:36 UTC	406	OUT	GET /theme_assets/802785/d0f6f42d1a879a88ea2c1aabe52e3edc9b18de3f.png HTTP/1.1 Host: theme.zdassets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:36 UTC	1226	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 12:23:36 GMT Content-Type: image/png Content-Length: 61654 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: HEAD, GET Access-Control-Max-Age: 86400 x-amz-replication-status: COMPLETED Last-Modified: Mon, 26 Oct 2020 20:28:19 GMT ETag: "556ac4d291a0c93455cc57fd17bef380" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 x-amz-version-id: hpLJY_DGvmPBRap4.sCPNMmBg.2xaT1Z Vary: Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 6bcc5cb16e0756268a257daab0f6082c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: I2mFwvhXqgHV5CZud9hikvNKqOxo_S6poKzsisxT4vLxENFvwCK7GQ== Age: 41271 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qh3pi2AM7bKwWtxyuBi5S%2FFqgaSOgrIQGOvyi5N8Y%2Bg50hK0y7JA%2F%2B8XsNZRRKxvpb%2BY5NDomqZA1M4r769%2FAoVuBAc2q6EbjYIshvTG845ieGnNaiMpNmuoo13wgn2bqZ%2BsYg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Server: cloudflare CF-RAY: 87a68b859ae72221-MIA
2024-04-26 12:23:36 UTC	143	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 ec 00 00 01 f2 08 06 00 00 00 58 a1 51 c9 00 00 01 1c 69 43 43 50 41 64 6f 62 65 20 52 47 42 20 28 31 39 39 38 29 00 00 28 cf 63 60 60 52 48 2c 28 c8 61 12 60 60 c8 cd 2b 29 0a 72 77 52 88 88 8c 52 60 7f c8 c0 ce c0 cb 20 c0 60 ce c0 9f 98 5c 5c e0 18 10 e0 c3 00 04 30 1a 15 7c bb c6 c0 08 a2 2f eb 82 cc 62 20 0d 70 a5 a4 16 27 03 e9 3f 40 9c 9d 5c 50 54 c2 c0 c0 98 01 Data Ascii: PNGIHDRXQiCCPAdobe RGB (1998)(c``RH,(a``+)rwRR` `\\0\|/b p'?@\PT
2024-04-26 12:23:36 UTC	1369	IN	Data Raw: 64 2b 97 97 14 80 d8 3d 40 b6 48 52 36 98 bd 00 c4 2e 02 3a 10 c8 de 02 62 a7 43 d8 27 c0 6a 20 ec 3b 60 35 21 41 ce 40 f6 07 20 9b 2f 09 cc 66 02 d9 c5 97 0e 61 0b 80 d8 50 7b 41 40 d0 31 25 3f 29 55 01 e4 7b 0d 43 4b 4b 0b 4d 06 2a 83 92 d4 8a 12 10 ed 9c 5f 50 59 94 99 9e 51 a2 e0 08 0c a9 54 05 cf bc 64 3d 1d 05 23 03 43 73 06 06 50 b8 43 54 7f 0e 04 87 27 a3 d8 19 84 18 02 20 c4 e6 48 30 30 f8 2f 65 60 60 f9 83 10 33 e9 65 60 58 a0 c3 c0 c0 3f 15 21 a6 66 c8 c0 20 a0 cf c0 b0 6f 4e 72 69 51 19 d4 18 46 26 63 06 06 42 7c 00 35 03 4a 63 92 01 98 a6 00 00 00 09 70 48 59 73 00 00 17 12 00 00 17 12 01 67 9f d2 52 00 00 06 65 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef Data Ascii: d+=@HR6.:bC'j ;`5!A@ /faP{A@1%?)U{CKKM*_PYQTd=#CsPCT' H00/e``3e`X?!f oNriQF&cB\|5JcpHYsgReiTXtXML:com.adobe.xmp<?xpacket begin="
2024-04-26 12:23:36 UTC	1369	IN	Data Raw: 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 65 32 35 36 37 30 33 63 2d 32 37 66 37 2d 34 38 61 64 2d 39 31 66 33 2d 34 63 62 61 64 33 38 31 36 62 62 39 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 30 2d 31 30 2d 32 33 54 31 39 3a 31 36 3a 35 31 2d 30 35 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 30 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 36 34 38 65 37 38 66 35 2d 31 36 32 35 2d Data Ascii: "saved" stEvt:instanceID="xmp.iid:e256703c-27f7-48ad-91f3-4cbad3816bb9" stEvt:when="2020-10-23T19:16:51-05:00" stEvt:softwareAgent="Adobe Photoshop 21.0 (Macintosh)" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:648e78f5-1625-
2024-04-26 12:23:36 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 0c 3b 00 00 00 00 00 00 00 00 00 c0 b0 03 00 00 00 00 00 00 00 00 c0 b0 03 00 00 00 00 00 00 00 00 00 0c 3b 00 00 00 00 00 00 00 00 00 0c 3b 00 00 00 00 00 00 00 00 00 c0 b0 03 00 00 00 00 00 00 00 00 c0 b0 03 00 00 00 00 00 00 00 00 00 0c 3b 00 00 00 00 00 00 00 00 00 0c 3b 00 00 00 00 00 00 00 00 00 c0 b0 03 00 00 00 00 00 00 00 00 00 0c 3b 00 00 00 00 00 00 00 00 00 0c 3b 00 00 00 00 00 00 00 00 00 c0 b0 03 00 00 00 00 00 00 00 00 c0 b0 03 00 00 00 00 00 00 00 00 00 0c 3b 00 00 00 00 00 00 00 00 00 0c 3b 00 00 00 00 00 00 00 00 00 c0 b0 03 00 00 00 00 00 00 00 00 c0 b0 03 00 00 00 00 00 00 00 00 00 0c 3b 00 00 00 00 00 00 00 00 00 0c 3b 00 00 00 00 00 00 00 00 00 c0 b0 03 00 00 00 00 00 00 00 00 c0 b0 03 00 00 00 00 00 00 00 Data Ascii: ;;;;;;;;;;;
2024-04-26 12:23:36 UTC	1369	IN	Data Raw: 4a bd 0e 28 c7 2b 87 31 51 df 2b 2e 91 29 b7 d4 b8 cd 78 c1 f8 3a 06 f7 2c 7a f0 f9 86 77 af 25 93 7d a6 37 fb a8 e8 ab 58 31 ec 78 31 b8 fd 52 31 d1 2d ed 82 ff 98 37 fd 28 1b 83 cf 4a 5a 38 51 7d a5 ae f7 44 5e e6 dc 75 5e 65 cd cf 31 e7 0d 2f a9 57 55 4e 47 54 ce 59 df 69 54 c9 34 82 62 66 5a 84 6f 76 b7 f5 0c ba 27 bd 07 2f 3f 27 80 b5 c6 1a ef 06 98 6a 5b 5e 49 1f 6f 35 4d fc 00 e3 da 98 5c a7 3f f3 12 eb 7d 8d e6 28 58 a5 ae 7a 80 32 d6 38 cd 33 c1 be 89 e9 78 fc 0f af 18 60 14 66 04 af 90 39 c9 e6 c6 41 5e 15 ef b3 de b5 fe e7 84 f1 bd 37 83 60 99 f7 00 72 43 0c 3b 0c bb 6c 07 53 4b ad 6d 43 4b 44 ee 46 6e 37 e3 74 e3 21 e3 f3 1c 0f 34 83 69 f5 d8 f6 15 ad 61 b3 85 37 5d e6 de 2c 1a b9 51 e6 65 2f 36 06 b3 2e 56 56 fb d2 e6 45 d0 77 02 11 b1 24 70 Data Ascii: J(+1Q+.)x:,zw%}7X1x1R1-7(JZ8Q}D^u^e1/WUNGTYiT4bfZov'/?'j[^Io5M\?}(Xz283x`f9A^7`rC;lSKmCKDFn7t!4ia7],Qe/6.VVEw$p
2024-04-26 12:23:36 UTC	1369	IN	Data Raw: 92 8c 28 d2 d8 5d 86 fe bf 61 51 96 db 78 03 e3 0a aa 90 43 a3 e2 87 9e 11 89 9b fa de 1a c1 ff 46 97 dc ad 8f ae 75 00 b9 c3 8a f4 f5 43 cb f0 ec ca b4 fe c8 a3 0d 07 37 8d bd 61 67 27 71 aa e7 0a df e7 19 2d 1f 20 6e 60 7a 16 d1 00 a5 a9 cd 9b 7a 26 ae 36 f7 78 96 5d 9f 7e e5 2d 2e b0 39 ed 7b 63 bc 8d 64 e8 6b 85 e7 6d 2d 28 4d af 4c f5 cb 23 e9 0f 95 32 23 44 9b ae e7 2d 99 81 51 97 bf 0a f1 f2 22 8c dd c7 d0 fe 37 5c 94 a5 b6 6d 67 5c 88 51 97 75 73 7d e7 02 c6 8b 66 ce cc 8b c1 46 70 49 41 cb 45 35 e2 2e 2b 72 d7 8d fa de b2 5e af d2 47 63 35 55 56 05 45 6d e3 6c d8 b1 ee 53 78 c6 24 74 50 d2 2e 4f 7d 8c 99 ba 89 f3 cc 12 aa 2a ab 67 47 2e 67 39 a9 a8 c3 a8 8b 26 57 b0 0e 56 ea 26 80 be f0 5b 0e 76 bc 11 3e 34 e1 cb 68 60 da 45 27 76 e9 67 bf 65 65 Data Ascii: (]aQxCFuC7ag'q- n`zz&6x]~-.9{cdkm-(ML#2#D-Q"7\mg\Qus}fFpIAE5.+r^Gc5UVEmlSx$tP.O}*gG.g9&WV&[v>4h`E'vgee
2024-04-26 12:23:36 UTC	1369	IN	Data Raw: d4 da 37 3f d0 0f a0 02 93 12 d2 bf 4f 40 4b 28 22 d6 e5 6b 3d 97 3c c4 ee d3 e8 09 45 c0 c5 dc 83 15 05 7d b0 e4 aa 1d ef b7 f4 aa 86 e9 2b 10 86 7f 97 e7 68 13 bd a0 86 1d 3b c5 86 9c 42 90 d0 81 ae 1b da 3a f3 bd 51 af 08 2f 8e 75 bd 1b 45 fa 00 54 c6 e7 e5 09 58 2c d9 ce 61 39 5a 42 91 71 7a 42 ae 51 5f a2 25 00 24 84 65 d8 72 55 8e f5 7b 79 b9 18 fd 04 b2 c1 df 8c b2 42 1b 76 ec 14 1b fe e9 73 fd 84 0e 78 6f a3 af 33 03 8b ec e2 d8 94 f5 ea 20 03 fe 14 f7 f5 ec ec f8 9f 47 47 28 32 3e d0 03 99 98 c7 6d 47 74 04 80 04 a1 07 10 4d 4a 78 a5 8f f3 b5 8d d3 e8 1b 90 03 1e ca f6 7d 50 50 c3 8e 9d 62 c3 b3 51 42 07 be 1b d0 d6 99 bd 8b e8 02 b9 81 f1 77 34 87 0c 59 10 e3 be 5e cb f8 06 0d a1 08 19 13 f3 eb d4 48 34 04 80 84 b1 2f 36 dd af 63 7c a9 71 33 7d Data Ascii: 7?O@K("k=<E}+h;B:Q/uETX,a9ZBqzBQ_%$erU{yBvsxo3 GG(2>mGtMJx}PPbQBw4Y^H4/6c\|q3}
2024-04-26 12:23:36 UTC	1369	IN	Data Raw: 17 93 7b 97 61 68 05 00 45 c2 df 62 9c 67 36 33 de 44 43 48 10 2b 72 69 d8 35 a3 81 43 71 45 49 42 5f 68 eb c4 13 11 d7 74 e3 72 76 61 82 e8 71 27 15 c6 00 98 ea 59 88 dd fd d1 0a 00 8a 84 37 63 9c 63 de 84 7e 90 30 b4 19 69 9b 9c 18 76 5e d0 bc 4b 23 3b b3 06 c3 0e d2 78 24 c2 7a d6 65 9a 1f 44 94 ff 44 2c 56 46 a0 09 c0 ff 70 42 4c ee 5b 58 97 19 00 8a 85 b7 63 9a 5f ee 81 76 50 8c b3 11 c2 1a 76 6b 68 60 67 fe 99 60 c3 ee 5b f4 0d cc fd 11 d6 73 09 fa 40 84 69 15 a1 58 99 83 1e 00 ff c3 69 31 b9 6f 59 8d 56 00 50 24 7c 16 c3 dc b2 83 f1 31 da 41 42 79 2e 97 86 dd b9 34 b0 33 df 1b b5 12 6a d8 7d 86 be 81 59 19 51 2d 37 2f 67 61 57 88 36 c3 23 14 2f e7 a3 07 c0 ff 70 72 4c ee 5b de 40 2b 00 c0 b0 8b ec 18 bd 0a dd 20 e1 f4 cb 95 61 c7 4e b1 e1 68 8f 61 Data Ascii: {ahEbg63DCH+ri5CqEIB_htrvaq'Y7cc~0iv^K#;x$zeDD,VFpBL[Xc_vPvkh`g`[s@iXi1oYVP$\|1ABy.43j}YQ-7/gaW6#/prL[@+ aNha
2024-04-26 12:23:36 UTC	1369	IN	Data Raw: f2 f2 8d 73 ac 5d 63 19 4c b4 75 d6 0b 44 ea 64 db b0 e3 a6 c7 9d bf 25 cc b0 fb 04 4d 03 b3 7e 81 b4 62 27 a6 04 4c 21 f0 b4 7c b9 c8 b5 a9 5b e0 f6 c7 ec c9 4f f2 77 72 f9 2f 8b 1f d7 ca 81 86 ad 8c 3b 69 e7 ac 72 55 c4 ef 57 b6 42 a3 bc f2 91 67 e0 4c 35 3a 65 41 bf ee c6 f5 b4 6b 64 78 cf b8 cc 98 68 b4 ce 52 c5 d5 6a da 35 27 74 8d d8 58 dc cb 58 87 2e d9 9f c5 57 9d 49 9e 65 0d f5 f0 f3 0d da 3c ab f4 c8 aa 61 e7 09 c5 4e b1 8e 65 aa 09 32 eb 5a a3 67 60 de 2a a0 5e 97 d2 fe 19 73 52 c4 63 ef 01 c6 d0 82 4e 2b 27 46 72 c3 a7 e5 bf 6c 0a b0 55 9e b4 ac 63 5c 49 bb 67 8d 93 23 3e 6e ce 40 a3 9c a3 0d ad ce 2a ff 65 f7 c1 3a 39 d2 71 bc 37 cd 92 f6 2e c0 3a 95 de 52 04 5b e4 e2 41 8a a7 ef 4c 66 11 64 9d d2 88 8d c5 57 a3 49 d6 39 b2 00 3a 6e c6 32 23 Data Ascii: s]cLuDd%M~b'L!\|[Owr/;irUWBgL5:eAkdxhRj5'tXX.WIe<aNe2Zg`^sRcN+'FrlUc\Ig#>n@e:9q7.:R[ALfdWI9:n2#
2024-04-26 12:23:36 UTC	1369	IN	Data Raw: 87 65 54 48 c6 62 96 d6 80 98 dc 47 fd 07 bd c2 cf 48 c9 aa 61 87 30 a1 98 17 63 c3 ee 62 f4 0b cc a4 3c 57 62 7d 46 9b 57 cb d7 46 8b 18 c5 dc 56 de 3a 60 2c 7e 5e d8 a7 c4 5f 11 3b 4e cc 8c 49 9c ad 41 ab e4 ad 51 c8 1a 67 a1 68 11 83 b8 6d 86 4e ce ec 15 03 7d d9 ec c9 9d b3 23 a0 df ef d1 21 34 d7 c5 28 5f 59 8d 5e a1 f8 2c 57 86 1d 3b c5 ba 71 6e 8c 0d bb 97 d1 2f 30 6d f3 a8 cf 1e b4 77 8d 5c 16 a3 78 6b 67 bc 8f 66 6b cf 2f b0 0e 1b a0 81 33 83 63 12 6b 7f 45 ab f8 99 e9 19 e8 ca 2e a2 6e 7c 1c 93 b8 ed 8c 56 ce 6c 1e 03 7d 87 a2 93 33 73 0a ac 5d 23 e3 4b 74 08 5d 5d d7 23 46 39 cb 39 68 16 9a ba b9 30 ec d8 29 d6 8d 95 31 35 eb 58 bf 2e e2 8b fa 6a 9d 03 da bc 46 36 89 49 bc 69 aa cf 8b e8 95 62 db 02 6b 31 1a 0d 9c 29 63 2a 47 a2 59 15 71 5d cf Data Ascii: eTHbGHa0cb<Wb}FWFV:`,~^_;NIAQghmN}#!4(_Y^,W;qn/0mw\xkgfk/3ckE.n\|Vl}3s]#Kt]]#F99h0)15X.jF6Iibk1)c*GYq]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49917	108.156.83.58	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:36 UTC	702	OUT	GET /gkyt4bl1j2fs/5yRidqdbuOKk7K0V29FCdJ/888b7572a363f3186dfaff7e08dc17c0/91a44210-06d0-4304-b0da-411cc5e66917_app-store-icon.svg HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:36 UTC	529	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 5190 Connection: close Date: Fri, 26 Apr 2024 12:23:37 GMT Last-Modified: Thu, 23 Jul 2020 02:14:59 GMT ETag: "cfcc87c27175bbc1df90ead8169e3a2e" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 c8bcdad2cb88c57a5e39f7757d2e9f6a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P2 X-Amz-Cf-Id: rtsYRtPFnHZiZJc4KdEiAizIxO1IfICL0tDO0Is7xLEMwpjkYN49Ow==
2024-04-26 12:23:36 UTC	5190	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 35 39 22 20 68 65 69 67 68 74 3d 22 34 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 39 20 34 35 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 72 65 63 74 20 78 3d 22 30 2e 37 35 22 20 79 3d 22 31 2e 37 32 33 31 34 22 20 77 69 64 74 68 3d 22 31 35 37 2e 35 22 20 68 65 69 67 68 74 3d 22 34 32 2e 34 39 31 31 22 20 72 78 3d 22 32 31 2e 32 34 35 36 22 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 20 73 74 72 6f 6b 65 3d 22 62 6c 61 63 6b 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 2e 35 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 39 2e 36 34 33 37 20 32 36 2e 36 33 39 36 43 34 39 2e 33 33 38 35 20 32 37 2e Data Ascii: <svg width="159" height="45" viewBox="0 0 159 45" fill="none" xmlns="http://www.w3.org/2000/svg"><rect x="0.75" y="1.72314" width="157.5" height="42.4911" rx="21.2456" fill="white" stroke="black" stroke-width="1.5"/><path d="M49.6437 26.6396C49.3385 27.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49906	104.18.249.37	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:36 UTC	1750	OUT	GET /hc/en-us/requests/new?ticket_form_id=624807 HTTP/1.1 Host: help.venmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://help.venmo.com/hc/en-us/requests/new Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; d_id=f9d8a02dda1e499da9fdccab0d31ca111714134181973; enforce_policy=ccpa; tsrce=identityappsnodeweb; l7_az=dcg15.slc; ts_c=vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3; cookie_prefs=T%3D0%2CP%3D1%2CF%3D1%2Ctype%3Dinitial; x-pp-s=eyJ0IjoiMTcxNDEzNDIxMTMyMyIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742211%26vteXpYrS%3D1714136011%26vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3%26vtyp%3Dnew; _help_center_session=NFB4LzM5YTA5M05KdEJIazFkTkgxMXQ2TjJicGdNdXd0WFFYVzZQMThLNFRoQTNGSzQzcGY0OFloalRWS3RIL3k4MC9LUmk5RytVVXBsWkxRaThTOWwrZWJ1SU5VMDdzT3BYU0gxZHFIR3U2c1JicUJzMzNjVGNhTVFTVFUxZnp2aXZzYzZySkNZdnRoYytlZGU2VytaSHJMVEFsZURSQTFjR0dtelNnb09ETjNzakFQeDN4ck1XQ0pVblN3UkN1Wlh0MEZZVHNYZDAreHB4V0lnQTFGQT09LS1PdkdRdHNUalRldjUxRGhaRG53QU9BPT0%3D--9f11e1a53bc4cc3b9e021f393cb6057c73b5707a; __cfruid=4d718761ca3665ade518e98728cfc4e55786fa9f-1714134211
2024-04-26 12:23:37 UTC	1338	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 12:23:37 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a68b8678159ae5-MIA CF-Cache-Status: BYPASS Cache-Control: max-age=0, private, must-revalidate Content-Language: en-us Set-Cookie: _help_center_session=ODlFR2dSZi85dzJTaFRSYkNhcVM3ME5hRXZUS2Y1S0t6clY2dnJ5VHVKL1dodEpWRm15NmdpZUg5TUNSeWE0THB5TkZONmkwTlJkVE00dHNUOWhLdjFlblJXbk9HYndQakZMdjBvVndVMmF0TENxWi9kMWNZWmNTZFJCZE1XdFFxWndOVkJKY2JXcjJpbGlrNWhzQ01QajJ0cjJYbmUyM2dZdS9pSjdxMXZHRlcwWnRGd056ZnFTeWdPM2ZGNFNjQ0hZMUYwRnovMG9CMEVLbEQ2bzVjdz09LS1nVHB3RzV0RE1UV0x0SmltSVNMRWV3PT0%3D--a061474dcdcfc9d4f03fd5255b000e327d5e29e1; path=/; secure; HttpOnly; SameSite=None Strict-Transport-Security: max-age=259200; includeSubDomains Vary: Accept-Encoding X-Cached: MISS x-frame-options: SAMEORIGIN x-runtime: 0.326858 x-ua-compatible: IE=edge x-xss-protection: 1; mode=block x-zendesk-origin-server: app-server-requests-5658b55869-2nlh8 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=akKCvGWlEicVF5MCvj%2B6RRUMXazGxV35V06ke6RdQLyKHWQyryeYvWwpRGNx1Rof6TRtWqj7KdsrLsK%2Ftg%2FGKeVY362OA56p2ZLwCMlzMrGNqq%2FeedovO1%2Fob2svz2s8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-04-26 12:23:37 UTC	31	IN	Data Raw: 31 61 30 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 69 72 Data Ascii: 1a08<!DOCTYPE html><html dir
2024-04-26 12:23:37 UTC	1369	IN	Data Raw: 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 3c 21 2d 2d 20 76 32 34 34 34 38 20 2d 2d 3e 0a 0a 0a 20 20 3c 74 69 74 6c 65 3e 53 75 62 6d 69 74 20 61 20 72 65 71 75 65 73 74 20 26 6e 64 61 73 68 3b 20 56 65 6e 6d 6f 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 0a 0a 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 76 65 6e 6d 6f 2e 63 6f 6d 2f 68 63 2f 65 6e 2d 75 73 2f 72 65 71 75 65 73 74 73 2f 6e 65 77 22 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 3e 0a 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 2f 73 74 61 74 69 63 2e 7a 64 61 73 73 65 74 73 2e Data Ascii: ="ltr" lang="en-US"><head> <meta charset="utf-8" /> ... v24448 --> <title>Submit a request – Venmo</title> <link href="https://help.venmo.com/hc/en-us/requests/new" rel="canonical"> <link rel="stylesheet" href="//static.zdassets.
2024-04-26 12:23:37 UTC	1369	IN	Data Raw: 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 75 69 2f 31 2e 31 33 2e 32 2f 6a 71 75 65 72 79 2d 75 69 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2e 69 6e 70 75 74 6d 61 73 6b 2f 35 2e 30 2e 37 2f 6a 71 75 65 72 79 2e 69 6e 70 75 74 6d 61 73 6b 2e 6d 69 6e 2e 6a 73 22 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 61 70 2f 33 2e 33 2e 37 2f 6a 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 20 45 6e 64 20 73 Data Ascii: ax/libs/jqueryui/1.13.2/jquery-ui.min.js"></script><script src="https://cdnjs.cloudflare.com/ajax/libs/jquery.inputmask/5.0.7/jquery.inputmask.min.js"><script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js"></script>... End s
2024-04-26 12:23:37 UTC	1369	IN	Data Raw: 20 20 67 61 28 27 73 65 6e 64 27 2c 20 27 65 76 65 6e 74 27 2c 20 27 68 63 4c 6f 61 64 65 64 27 2c 20 27 76 69 73 69 74 6f 72 49 50 27 2c 20 64 61 74 61 2e 69 70 29 3b 0a 20 20 7d 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 20 45 6e 64 20 6f 66 20 22 53 75 62 6d 69 74 20 61 20 72 65 71 75 65 73 74 22 20 6c 69 6e 6b 20 63 6c 69 63 6b 20 73 63 72 69 70 74 20 2d 2d 3e 0a 0a 3c 21 2d 2d 20 43 55 53 54 4f 4d 49 5a 41 54 49 4f 4e 3a 20 43 6f 6f 6b 69 65 20 62 61 6e 6e 65 72 20 73 63 72 69 70 74 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 20 69 64 3d 22 70 6f 6c 69 63 79 2d 64 61 74 61 22 3e 0a 20 20 7b 0a 20 20 20 20 22 70 6f 6c 69 63 69 65 73 22 3a 20 5b 22 43 6f 6f 6b 69 65 42 61 6e 6e 65 Data Ascii: ga('send', 'event', 'hcLoaded', 'visitorIP', data.ip); });</script>... End of "Submit a request" link click script -->... CUSTOMIZATION: Cookie banner script --><script type="application/json" id="policy-data"> { "policies": ["CookieBanne
2024-04-26 12:23:37 UTC	1369	IN	Data Raw: 54 4f 4d 49 5a 41 54 49 4f 4e 3a 20 53 74 61 72 74 20 73 63 72 69 70 74 20 74 6f 20 72 65 64 69 72 65 63 74 20 74 6f 20 63 6f 6e 74 61 63 74 20 66 6f 72 6d 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 76 61 72 20 75 72 6c 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 0a 20 20 69 66 20 28 75 72 6c 20 3d 3d 3d 20 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 76 65 6e 6d 6f 2e 63 6f 6d 2f 63 6f 6e 74 61 63 74 22 20 7c 7c 20 75 72 6c 20 3d 3d 3d 20 22 68 74 74 70 3a 2f 2f 68 65 6c 70 2e 76 65 6e 6d 6f 2e 63 6f 6d 2f 63 6f 6e 74 61 63 74 22 20 7c 7c 20 75 72 6c 20 3d 3d 3d 20 22 68 65 6c 70 2e 76 65 6e 6d 6f 2e 63 6f 6d 2f 63 6f 6e 74 61 63 74 22 29 20 7b 0a 20 20 09 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 Data Ascii: TOMIZATION: Start script to redirect to contact form --><script> var url = window.location.href; if (url === "https://help.venmo.com/contact" \|\| url === "http://help.venmo.com/contact" \|\| url === "help.venmo.com/contact") { window.location.replace
2024-04-26 12:23:37 UTC	1165	IN	Data Raw: 4f 4d 49 5a 41 54 49 4f 4e 3a 20 73 69 67 6e 65 64 20 69 6e 20 65 78 70 65 72 69 65 6e 63 65 20 61 6e 64 20 73 69 67 6e 20 69 6e 20 6c 69 6e 6b 20 72 65 6d 6f 76 65 64 20 2d 2d 3e 0a 20 20 3c 2f 64 69 76 3e 0a 3c 2f 68 65 61 64 65 72 3e 0a 0a 3c 21 2d 2d 20 43 55 53 54 4f 4d 49 5a 41 54 49 4f 4e 3a 20 42 61 6e 6e 65 72 20 66 6f 72 20 63 75 73 74 6f 6d 20 6d 65 73 73 61 67 69 6e 67 20 64 75 72 69 6e 67 20 65 6d 65 72 67 65 6e 63 69 65 73 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 61 6e 6e 65 72 22 3e 0a 20 20 3c 74 61 62 6c 65 20 3e 0a 20 20 20 20 3c 74 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 74 72 3e 0a 20 20 20 20 20 20 20 20 3c 74 64 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 77 61 72 6e 69 6e 67 22 3e e2 9a a0 3c 2f 73 70 61 6e 3e 3c 2f 74 64 3e 0a 20 20 Data Ascii: OMIZATION: signed in experience and sign in link removed --> </div></header>... CUSTOMIZATION: Banner for custom messaging during emergencies<div class="banner"> <table > <tbody> <tr> <td><span class="warning"></span></td>
2024-04-26 12:23:37 UTC	1369	IN	Data Raw: 35 35 61 34 0d 0a 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 09 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 7d 0a 20 20 2e 62 69 67 54 69 74 6c 65 20 7b 0a 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 38 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 38 70 78 3b 0a 20 20 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 09 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 2d 33 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 7d 0a 20 20 2e 73 65 61 72 63 68 2d 69 6e 6e 65 72 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 70 61 64 64 Data Ascii: 55a4ight: 15px; left: auto; } .bigTitle {font-size: 38px; font-weight: 500; line-height: 38px; text-align: center; letter-spacing: -3px; margin: 0; } .search-inner { display: flex; flex-direction: column; padd
2024-04-26 12:23:37 UTC	1369	IN	Data Raw: 0a 20 20 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0a 20 20 09 2e 73 65 61 72 63 68 2d 69 6e 6e 65 72 20 7b 0a 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 36 31 30 70 78 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 73 65 61 72 63 68 2d 66 6f 72 6d 2d 77 72 61 70 70 65 72 20 7b 0a 20 20 09 09 77 69 64 74 68 3a 20 34 30 30 70 78 3b 0a 20 20 09 7d 0a 20 20 09 2e 6f 74 68 65 72 2d 63 6f 6e 74 61 63 74 73 5f 5f 63 61 72 64 73 20 7b 0a 20 20 09 09 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 72 6f 77 3b 0a 20 20 09 7d 0a 20 20 09 2e 62 69 67 54 69 74 6c 65 20 7b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 36 38 70 78 3b 0a 20 20 Data Ascii: @media (min-width: 768px) { .search-inner { align-items: center; max-width: 610px; } .search-form-wrapper { width: 400px; } .other-contacts__cards { flex-direction: row; } .bigTitle { font-size: 68px;
2024-04-26 12:23:37 UTC	1369	IN	Data Raw: 64 20 69 6e 20 6f 75 72 20 70 6f 70 75 6c 61 72 20 68 65 6c 70 20 63 65 6e 74 65 72 20 74 6f 70 69 63 73 2c 20 6f 72 20 73 65 61 72 63 68 20 62 79 20 6b 65 79 77 6f 72 64 0a 20 20 20 20 20 20 20 20 74 6f 20 66 69 6e 64 20 6d 6f 72 65 20 69 6e 66 6f 20 6f 6e 20 6d 61 6e 61 67 69 6e 67 20 70 61 79 6d 65 6e 74 73 2c 20 6f 70 65 6e 69 6e 67 20 64 69 73 70 75 74 65 73 2c 20 61 6e 64 20 6d 6f 72 65 2e 0a 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 65 61 72 63 68 2d 66 6f 72 6d 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 3c 68 32 20 63 6c 61 73 73 3d 22 76 69 73 69 62 69 6c 69 74 79 2d 68 69 64 64 65 6e 22 3e 53 65 61 72 63 68 3c 2f 68 32 3e 0a 20 20 20 20 20 20 3c 73 76 67 20 78 Data Ascii: d in our popular help center topics, or search by keyword to find more info on managing payments, opening disputes, and more. </span> </p> <div class="search-form-wrapper"> <h2 class="visibility-hidden">Search</h2> <svg x
2024-04-26 12:23:37 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 27 2f 68 63 2f 65 6e 2d 75 73 2f 61 72 74 69 63 6c 65 73 2f 33 36 30 30 31 32 39 33 32 31 35 34 2d 41 64 64 69 6e 67 2d 4d 6f 6e 65 79 2d 74 6f 2d 59 6f 75 72 2d 56 65 6e 6d 6f 2d 42 61 6c 61 6e 63 65 27 20 6f 6e 63 6c 69 63 6b 3d 22 72 65 63 6f 72 64 4c 69 6e 6b 28 74 68 69 73 2e 68 72 65 66 29 22 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 41 64 64 69 6e 67 20 4d 6f 6e 65 79 20 74 6f 20 59 6f 75 72 20 56 65 6e 6d 6f 20 42 61 6c 61 6e 63 65 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <a href='/hc/en-us/articles/360012932154-Adding-Money-to-Your-Venmo-Balance' onclick="recordLink(this.href)" > Adding Money to Your Venmo Balance </a> </li>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49920	108.156.83.58	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:39 UTC	704	OUT	GET /gkyt4bl1j2fs/4elL6z7sEJbFubKUU7uwv7/ee2688b999e8da3cff3009d5f56f5d73/e01b9c58-a73a-4d18-ae2b-2d81cc537c7a_google-play-icon.svg HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49918	151.101.193.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:39 UTC	742	OUT	OPTIONS /myaccount/privacy/cookieprefs/getBanner?showBanner=true&country=US&language=en&policyType=CookieBanner&originalHeaders={%22cookie%22:%22cookie_prefs=T%3D0%2CP%3D1%2CF%3D1%2Ctype%3Dinitial%22}&tenant=venmo&tenantData={} HTTP/1.1 Host: www.paypal.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: access-control-allow-origin,content-type Origin: https://help.venmo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:39 UTC	522	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: access-control-allow-origin, Content-Type, Accept, X-Requested-With Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://help.venmo.com Cache-Control: max-age=0, no-cache, no-store, must-revalidate
2024-04-26 12:23:39 UTC	2169	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 3b 20 73 74 79 6c 65 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 56 37 54 47 45 62 69 37 71 36 4d 2f 2b 37 67 4e 59 52 70 67 55 47 49 34 45 6a 35 37 46 42 59 76 7a 45 7a 57 76 62 4f 68 58 55 52 36 Data Ascii: Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; style-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; script-src 'nonce-V7TGEbi7q6M/+7gNYRpgUGI4Ej57FBYvzEzWvbOhXUR6
2024-04-26 12:23:39 UTC	1344	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6e 73 69 64 3d 73 25 33 41 5a 66 6c 76 63 56 46 30 67 75 76 46 6f 54 38 78 65 53 4a 5f 75 6e 42 72 51 78 67 30 32 48 50 49 2e 51 59 6b 54 42 43 66 63 42 54 39 62 6a 68 68 36 74 77 71 7a 68 57 41 25 32 46 52 4d 4b 46 62 47 47 47 6f 73 65 36 47 54 30 79 77 73 41 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 37 5f 61 7a 3d 64 63 67 30 32 2e 70 68 78 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 46 72 69 2c 20 32 36 20 41 70 72 20 32 30 32 34 20 31 32 3a 35 33 3a 33 39 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 Data Ascii: Set-Cookie: nsid=s%3AZflvcVF0guvFoT8xeSJ_unBrQxg02HPI.QYkTBCfcBT9bjhh6twqzhWA%2FRMKFbGGGose6GT0ywsA; Path=/; HttpOnly; Secure; SameSite=NoneSet-Cookie: l7_az=dcg02.phx; Path=/; Domain=paypal.com; Expires=Fri, 26 Apr 2024 12:53:39 GMT; HttpOnly; Secure;
2024-04-26 12:23:39 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49922	108.156.83.58	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:39 UTC	702	OUT	GET /gkyt4bl1j2fs/5a1jYA8djo9ilD72T9fVm5/2a6ff67c8a89ae2ec823abd826f566a8/ebb370be-e241-4600-949a-4f6710b1b142_instagram-icon.svg HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49921	104.16.124.96	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:39 UTC	557	OUT	GET /cdn-cgi/trace HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://help.venmo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49924	108.156.83.76	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:39 UTC	468	OUT	GET /gkyt4bl1j2fs/5yRidqdbuOKk7K0V29FCdJ/888b7572a363f3186dfaff7e08dc17c0/91a44210-06d0-4304-b0da-411cc5e66917_app-store-icon.svg HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:39 UTC	536	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 5190 Connection: close Date: Fri, 26 Apr 2024 12:23:37 GMT Last-Modified: Thu, 23 Jul 2020 02:14:59 GMT ETag: "cfcc87c27175bbc1df90ead8169e3a2e" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 19f81b125c62da79641b37663ddce94c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P2 X-Amz-Cf-Id: nMdUuDfu_TQVT0BDnKGSbS8eY5ns_DabgZRVfIzzGli0qAJ-mrdXIA== Age: 3
2024-04-26 12:23:39 UTC	3198	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 35 39 22 20 68 65 69 67 68 74 3d 22 34 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 39 20 34 35 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 72 65 63 74 20 78 3d 22 30 2e 37 35 22 20 79 3d 22 31 2e 37 32 33 31 34 22 20 77 69 64 74 68 3d 22 31 35 37 2e 35 22 20 68 65 69 67 68 74 3d 22 34 32 2e 34 39 31 31 22 20 72 78 3d 22 32 31 2e 32 34 35 36 22 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 20 73 74 72 6f 6b 65 3d 22 62 6c 61 63 6b 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 2e 35 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 39 2e 36 34 33 37 20 32 36 2e 36 33 39 36 43 34 39 2e 33 33 38 35 20 32 37 2e Data Ascii: <svg width="159" height="45" viewBox="0 0 159 45" fill="none" xmlns="http://www.w3.org/2000/svg"><rect x="0.75" y="1.72314" width="157.5" height="42.4911" rx="21.2456" fill="white" stroke="black" stroke-width="1.5"/><path d="M49.6437 26.6396C49.3385 27.
2024-04-26 12:23:39 UTC	1992	IN	Data Raw: 39 35 2e 38 39 34 37 20 31 36 2e 39 37 34 32 20 39 34 2e 39 38 34 37 20 31 36 2e 39 37 34 32 43 39 33 2e 30 31 30 37 20 31 36 2e 39 37 34 32 20 39 31 2e 35 34 30 37 20 31 38 2e 30 39 34 32 20 39 31 2e 35 34 30 37 20 31 39 2e 36 33 34 32 43 39 31 2e 35 34 30 37 20 32 31 2e 33 35 36 32 20 39 32 2e 36 36 30 37 20 32 32 2e 33 33 36 32 20 39 34 2e 39 31 34 37 20 32 32 2e 35 37 34 32 43 39 36 2e 36 30 38 37 20 32 32 2e 37 35 36 32 20 39 37 2e 33 37 38 37 20 32 33 2e 32 36 30 32 20 39 37 2e 33 37 38 37 20 32 34 2e 30 38 36 32 43 39 37 2e 33 36 34 37 20 32 35 2e 30 35 32 32 20 39 36 2e 35 32 34 37 20 32 35 2e 36 39 36 32 20 39 35 2e 31 33 38 37 20 32 35 2e 36 39 36 32 43 39 33 2e 36 39 36 37 20 32 35 2e 36 39 36 32 20 39 32 2e 37 30 32 37 20 32 34 2e 37 37 32 32 Data Ascii: 95.8947 16.9742 94.9847 16.9742C93.0107 16.9742 91.5407 18.0942 91.5407 19.6342C91.5407 21.3562 92.6607 22.3362 94.9147 22.5742C96.6087 22.7562 97.3787 23.2602 97.3787 24.0862C97.3647 25.0522 96.5247 25.6962 95.1387 25.6962C93.6967 25.6962 92.7027 24.7722

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49928	104.16.124.96	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:39 UTC	557	OUT	GET /cdn-cgi/trace HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://help.venmo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:39 UTC	332	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 12:23:39 GMT Content-Type: text/plain Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 87a68b99a8f29aef-MIA X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache
2024-04-26 12:23:39 UTC	319	IN	Data Raw: 31 33 38 0d 0a 66 6c 3d 33 36 33 66 31 35 32 0a 68 3d 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 0a 69 70 3d 31 30 32 2e 31 32 39 2e 31 35 32 2e 32 32 30 0a 74 73 3d 31 37 31 34 31 33 34 32 31 39 2e 37 38 34 0a 76 69 73 69 74 5f 73 63 68 65 6d 65 3d 68 74 74 70 73 0a 75 61 67 3d 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 0a 63 6f 6c 6f 3d 4d 49 41 0a 73 6c 69 76 65 72 3d 6e 6f 6e 65 0a 68 74 74 70 3d 68 74 74 70 2f 31 2e 31 0a 6c 6f 63 3d 55 53 0a 74 6c 73 3d Data Ascii: 138fl=363f152h=www.cloudflare.comip=102.129.152.220ts=1714134219.784visit_scheme=httpsuag=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36colo=MIAsliver=nonehttp=http/1.1loc=UStls=
2024-04-26 12:23:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49927	151.101.193.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:39 UTC	742	OUT	OPTIONS /myaccount/privacy/cookieprefs/getBanner?showBanner=true&country=US&language=en&policyType=CookieBanner&originalHeaders={%22cookie%22:%22cookie_prefs=T%3D0%2CP%3D1%2CF%3D1%2Ctype%3Dinitial%22}&tenant=venmo&tenantData={} HTTP/1.1 Host: www.paypal.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: access-control-allow-origin,content-type Origin: https://help.venmo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:39 UTC	522	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: access-control-allow-origin, Content-Type, Accept, X-Requested-With Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://help.venmo.com Cache-Control: max-age=0, no-cache, no-store, must-revalidate
2024-04-26 12:23:39 UTC	2169	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 3b 20 73 74 79 6c 65 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 72 73 45 67 53 42 41 55 45 74 7a 51 6d 2f 4e 2b 37 36 79 7a 4f 69 37 6c 54 77 73 47 6e 2f 69 4f 36 79 6a 77 34 79 2b 4b 61 32 64 73 Data Ascii: Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; style-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; script-src 'nonce-rsEgSBAUEtzQm/N+76yzOi7lTwsGn/iO6yjw4y+Ka2ds
2024-04-26 12:23:39 UTC	1353	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6e 73 69 64 3d 73 25 33 41 33 73 51 35 6f 78 58 43 55 53 73 6e 53 54 34 58 6d 30 31 57 31 2d 54 57 39 56 43 45 69 38 4c 74 2e 25 32 42 4a 65 72 30 53 7a 4a 48 76 68 6e 64 4f 45 77 6a 4d 76 51 6d 73 79 6c 48 39 66 67 4c 54 65 48 6f 54 6f 62 6b 5a 54 76 61 52 77 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 37 5f 61 7a 3d 64 63 67 31 36 2e 73 6c 63 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 46 72 69 2c 20 32 36 20 41 70 72 20 32 30 32 34 20 31 32 3a 35 33 3a 33 39 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 Data Ascii: Set-Cookie: nsid=s%3A3sQ5oxXCUSsnST4Xm01W1-TW9VCEi8Lt.%2BJer0SzJHvhndOEwjMvQmsylH9fgLTeHoTobkZTvaRw; Path=/; HttpOnly; Secure; SameSite=NoneSet-Cookie: l7_az=dcg16.slc; Path=/; Domain=paypal.com; Expires=Fri, 26 Apr 2024 12:53:39 GMT; HttpOnly; Secure;
2024-04-26 12:23:39 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49929	108.156.83.58	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:39 UTC	704	OUT	GET /gkyt4bl1j2fs/4elL6z7sEJbFubKUU7uwv7/ee2688b999e8da3cff3009d5f56f5d73/e01b9c58-a73a-4d18-ae2b-2d81cc537c7a_google-play-icon.svg HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:40 UTC	529	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 5215 Connection: close Date: Fri, 26 Apr 2024 12:23:40 GMT Last-Modified: Thu, 23 Jul 2020 02:15:46 GMT ETag: "446e18ca3767a3b9c9bf347d004f003c" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 3a65c9dde615de8123b1d207de65bacc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P2 X-Amz-Cf-Id: nliLNrPJiPxDWxCaKa7TXGWQdrJzrb6o5OIkEA-dl7EBIHXDgjgaag==
2024-04-26 12:23:40 UTC	5215	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 35 39 22 20 68 65 69 67 68 74 3d 22 34 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 39 20 34 35 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 72 65 63 74 20 78 3d 22 30 2e 37 35 22 20 79 3d 22 31 2e 37 30 39 32 33 22 20 77 69 64 74 68 3d 22 31 35 37 2e 35 22 20 68 65 69 67 68 74 3d 22 34 32 2e 34 39 31 31 22 20 72 78 3d 22 32 31 2e 32 34 35 36 22 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 20 73 74 72 6f 6b 65 3d 22 62 6c 61 63 6b 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 2e 35 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 36 34 2e 36 31 34 20 31 36 2e 39 34 36 33 43 36 31 2e 36 37 34 20 31 36 2e 39 30 Data Ascii: <svg width="159" height="45" viewBox="0 0 159 45" fill="none" xmlns="http://www.w3.org/2000/svg"><rect x="0.75" y="1.70923" width="157.5" height="42.4911" rx="21.2456" fill="white" stroke="black" stroke-width="1.5"/><path d="M64.614 16.9463C61.674 16.90

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49931	104.18.70.113	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:39 UTC	556	OUT	GET /hc/assets/en-us.05a4d042de4a0bd7e0e4.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:40 UTC	1136	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 12:23:40 GMT Content-Type: application/javascript Content-Length: 217399 Connection: close x-amz-id-2: a9gwUzXRxXFrDAVtsT58d/IScANmrRd3Rj2EXnNBlx/WqL/ZXMCnSvBDLfni7sNCc1ZDrC2Ex79B/birt3jVeQ== x-amz-request-id: W1E42XPFGWWDVFYA x-amz-replication-status: COMPLETED Last-Modified: Fri, 22 Mar 2024 09:42:32 GMT ETag: "05a4d042de4a0bd7e0e4cb23b83adcf1" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=604800 x-amz-version-id: IfkAU9Booky3hB4pzWFs8mDROgBynelT CF-Cache-Status: HIT Age: 172871 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0cd3KgtrUxujub8b8sgMDaLZEargUWGQ8h%2BjBylz668WC6STDm37U%2B2cwotymXcjM57mHDdeJ7zNuCcwOK3NEOGHECcXJGtzAiXToPinfzP1XKkrVX%2FsZoc3paDKzIIPJvUXJSA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 87a68b9b1d013352-MIA
2024-04-26 12:23:40 UTC	233	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 49 31 38 4e 3d 77 69 6e 64 6f 77 2e 49 31 38 4e 7c 7c 7b 7d 3b 76 61 72 20 65 2c 74 3d 7b 6c 6f 63 61 6c 65 3a 22 65 6e 2d 75 73 22 2c 64 69 72 65 63 74 69 6f 6e 3a 22 6c 74 72 22 2c 74 72 61 6e 73 6c 61 74 69 6f 6e 73 3a 7b 22 61 63 74 69 76 65 6d 6f 64 65 6c 2e 61 74 74 72 69 62 75 74 65 73 2e 72 65 71 75 65 73 74 2e 61 6e 6f 6e 79 6d 6f 75 73 5f 72 65 71 75 65 73 74 65 72 5f 65 6d 61 69 6c 22 3a 22 41 6e 6f 6e 79 6d 6f 75 73 20 72 65 71 75 65 73 74 65 72 20 65 6d 61 69 6c 3a 22 2c 22 61 63 74 69 76 65 6d 6f 64 65 6c 2e 61 74 74 72 69 62 75 74 65 73 2e 72 65 71 75 65 73 74 2e 72 65 63 61 70 74 63 68 61 22 3a 22 52 65 63 61 70 74 63 Data Ascii: !function(){window.I18N=window.I18N\|\|{};var e,t={locale:"en-us",direction:"ltr",translations:{"activemodel.attributes.request.anonymous_requester_email":"Anonymous requester email:","activemodel.attributes.request.recaptcha":"Recaptc
2024-04-26 12:23:40 UTC	1369	IN	Data Raw: 68 61 3a 22 2c 22 61 63 74 69 76 65 6d 6f 64 65 6c 2e 65 72 72 6f 72 73 2e 6d 6f 64 65 6c 73 2e 74 6f 70 69 63 5f 66 6f 72 6d 2e 61 74 74 72 69 62 75 74 65 73 2e 62 61 73 65 2e 74 6f 70 69 63 5f 6c 69 6d 69 74 22 3a 22 59 6f 75 20 68 61 76 65 20 72 65 61 63 68 65 64 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 74 6f 70 69 63 73 20 66 6f 72 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 3a 20 25 7b 74 6f 70 69 63 5f 6c 69 6d 69 74 7d 22 2c 22 61 63 74 69 76 65 72 65 63 6f 72 64 2e 61 74 74 72 69 62 75 74 65 73 2e 63 6f 6d 6d 65 6e 74 2e 62 6f 64 79 22 3a 22 43 6f 6d 6d 65 6e 74 3a 22 2c 22 61 63 74 69 76 65 72 65 63 6f 72 64 2e 61 74 74 72 69 62 75 74 65 73 2e 63 6f 6d 6d 75 6e 69 74 79 5f 63 6f 6d 6d 65 6e 74 2e 62 6f 64 79 22 3a 22 43 6f Data Ascii: ha:","activemodel.errors.models.topic_form.attributes.base.topic_limit":"You have reached the maximum number of topics for your account: %{topic_limit}","activerecord.attributes.comment.body":"Comment:","activerecord.attributes.community_comment.body":"Co
2024-04-26 12:23:40 UTC	1369	IN	Data Raw: 72 73 2e 6d 6f 64 65 6c 73 2e 75 73 65 72 5f 73 65 67 6d 65 6e 74 2e 61 74 74 72 69 62 75 74 65 73 2e 67 72 6f 75 70 5f 72 65 73 74 72 69 63 74 69 6f 6e 73 2e 6e 6f 74 5f 6f 6e 5f 73 61 6d 65 5f 61 63 63 6f 75 6e 74 22 3a 22 63 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 6f 66 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 67 72 6f 75 70 73 22 2c 22 61 63 74 69 76 65 72 65 63 6f 72 64 2e 65 72 72 6f 72 73 2e 6d 6f 64 65 6c 73 2e 75 73 65 72 5f 73 65 67 6d 65 6e 74 2e 61 74 74 72 69 62 75 74 65 73 2e 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 5f 72 65 73 74 72 69 63 74 69 6f 6e 73 2e 69 6e 76 61 6c 69 64 5f 72 65 73 74 72 69 63 74 69 6f 6e 73 5f 66 6f 72 5f 75 73 65 72 5f 74 79 70 65 22 3a 22 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 20 Data Ascii: rs.models.user_segment.attributes.group_restrictions.not_on_same_account":"could not find one or more of the specified groups","activerecord.errors.models.user_segment.attributes.organization_restrictions.invalid_restrictions_for_user_type":"organization
2024-04-26 12:23:40 UTC	1369	IN	Data Raw: 6f 6f 20 62 69 67 22 2c 22 65 72 72 6f 72 73 2e 66 6f 72 6d 61 74 22 3a 22 25 7b 61 74 74 72 69 62 75 74 65 7d 20 25 7b 6d 65 73 73 61 67 65 7d 22 2c 22 65 72 72 6f 72 73 2e 6d 65 73 73 61 67 65 73 2e 61 63 63 65 73 73 5f 70 6f 6c 69 63 79 2e 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 5f 72 65 73 74 72 69 63 74 69 6f 6e 73 2e 6e 65 77 5f 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 5f 72 65 73 74 72 69 63 74 69 6f 6e 73 5f 6e 6f 74 5f 61 6c 6c 6f 77 65 64 5f 62 79 5f 70 6c 61 6e 22 3a 22 59 6f 75 72 20 70 6c 61 6e 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 74 68 69 73 20 66 65 61 74 75 72 65 2e 20 59 6f 75 20 63 61 6e 6e 6f 74 20 61 64 64 20 6e 65 77 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 20 72 65 73 74 72 69 63 74 69 6f 6e 73 2e 22 2c 22 65 72 72 6f 72 73 2e Data Ascii: oo big","errors.format":"%{attribute} %{message}","errors.messages.access_policy.organization_restrictions.new_organization_restrictions_not_allowed_by_plan":"Your plan does not support this feature. You cannot add new organization restrictions.","errors.
2024-04-26 12:23:40 UTC	1369	IN	Data Raw: 6e 74 73 5f 65 78 70 69 72 65 64 22 3a 22 55 70 6c 6f 61 64 65 64 20 61 74 74 61 63 68 6d 65 6e 74 73 20 65 78 70 69 72 65 64 2e 20 50 6c 65 61 73 65 20 72 65 6d 6f 76 65 20 74 68 65 20 61 74 74 61 63 68 6d 65 6e 74 73 20 61 6e 64 20 72 65 75 70 6c 6f 61 64 20 74 68 65 6d 20 62 65 66 6f 72 65 20 73 75 62 6d 69 74 74 69 6e 67 20 61 67 61 69 6e 2e 22 2c 22 65 72 72 6f 72 73 2e 6d 65 73 73 61 67 65 73 2e 73 61 6d 65 5f 61 63 63 6f 75 6e 74 22 3a 22 64 6f 65 73 20 6e 6f 74 20 62 65 6c 6f 6e 67 20 74 6f 20 61 20 76 61 6c 69 64 20 61 63 63 6f 75 6e 74 22 2c 22 68 65 6c 70 65 72 73 2e 73 65 6c 65 63 74 2e 70 72 6f 6d 70 74 22 3a 22 50 6c 65 61 73 65 20 73 65 6c 65 63 74 22 2c 22 68 65 6c 70 65 72 73 2e 73 75 62 6d 69 74 2e 63 72 65 61 74 65 22 3a 22 43 72 65 61 Data Ascii: nts_expired":"Uploaded attachments expired. Please remove the attachments and reupload them before submitting again.","errors.messages.same_account":"does not belong to a valid account","helpers.select.prompt":"Please select","helpers.submit.create":"Crea
2024-04-26 12:23:40 UTC	1369	IN	Data Raw: 68 75 6d 61 6e 2e 73 74 6f 72 61 67 65 5f 75 6e 69 74 73 2e 75 6e 69 74 73 2e 62 79 74 65 2e 6f 6e 65 22 3a 22 42 79 74 65 22 2c 22 6e 75 6d 62 65 72 2e 68 75 6d 61 6e 2e 73 74 6f 72 61 67 65 5f 75 6e 69 74 73 2e 75 6e 69 74 73 2e 62 79 74 65 2e 6f 74 68 65 72 22 3a 22 42 79 74 65 73 22 2c 22 6e 75 6d 62 65 72 2e 68 75 6d 61 6e 2e 73 74 6f 72 61 67 65 5f 75 6e 69 74 73 2e 75 6e 69 74 73 2e 67 62 22 3a 22 47 42 22 2c 22 6e 75 6d 62 65 72 2e 68 75 6d 61 6e 2e 73 74 6f 72 61 67 65 5f 75 6e 69 74 73 2e 75 6e 69 74 73 2e 6b 62 22 3a 22 4b 42 22 2c 22 6e 75 6d 62 65 72 2e 68 75 6d 61 6e 2e 73 74 6f 72 61 67 65 5f 75 6e 69 74 73 2e 75 6e 69 74 73 2e 6d 62 22 3a 22 4d 42 22 2c 22 6e 75 6d 62 65 72 2e 68 75 6d 61 6e 2e 73 74 6f 72 61 67 65 5f 75 6e 69 74 73 2e 75 Data Ascii: human.storage_units.units.byte.one":"Byte","number.human.storage_units.units.byte.other":"Bytes","number.human.storage_units.units.gb":"GB","number.human.storage_units.units.kb":"KB","number.human.storage_units.units.mb":"MB","number.human.storage_units.u
2024-04-26 12:23:40 UTC	1369	IN	Data Raw: 22 54 72 61 6e 73 6c 61 74 69 6f 6e 20 6c 6f 63 61 6c 65 20 76 61 6c 75 65 73 20 28 25 7b 76 61 6c 75 65 73 7d 29 20 61 72 65 20 69 6e 76 61 6c 69 64 20 66 6f 72 20 74 68 69 73 20 48 65 6c 70 20 43 65 6e 74 65 72 2e 22 2c 22 74 78 74 2e 68 65 6c 70 5f 63 65 6e 74 65 72 2e 61 72 74 69 63 6c 65 2e 65 72 72 6f 72 2e 6d 69 73 73 69 6e 67 5f 70 65 72 6d 69 73 73 69 6f 6e 5f 67 72 6f 75 70 5f 69 64 22 3a 22 59 6f 75 20 6d 75 73 74 20 70 72 6f 76 69 64 65 20 70 65 72 6d 69 73 73 69 6f 6e 5f 67 72 6f 75 70 5f 69 64 2e 22 2c 22 74 78 74 2e 68 65 6c 70 5f 63 65 6e 74 65 72 2e 61 72 74 69 63 6c 65 2e 65 72 72 6f 72 2e 6d 69 73 73 69 6e 67 5f 75 73 65 72 5f 73 65 67 6d 65 6e 74 5f 69 64 22 3a 22 59 6f 75 20 6d 75 73 74 20 70 72 6f 76 69 64 65 20 75 73 65 72 5f 73 65 Data Ascii: "Translation locale values (%{values}) are invalid for this Help Center.","txt.help_center.article.error.missing_permission_group_id":"You must provide permission_group_id.","txt.help_center.article.error.missing_user_segment_id":"You must provide user_se
2024-04-26 12:23:40 UTC	1369	IN	Data Raw: 64 61 79 22 2c 22 74 78 74 2e 68 65 6c 70 5f 63 65 6e 74 65 72 2e 61 73 73 65 74 73 2e 6a 61 76 61 73 63 72 69 70 74 73 2e 6d 6f 6d 65 6e 74 2e 72 65 6c 61 74 69 76 65 5f 74 69 6d 65 2e 64 64 22 3a 22 25 64 20 64 61 79 73 22 2c 22 74 78 74 2e 68 65 6c 70 5f 63 65 6e 74 65 72 2e 61 73 73 65 74 73 2e 6a 61 76 61 73 63 72 69 70 74 73 2e 6d 6f 6d 65 6e 74 2e 72 65 6c 61 74 69 76 65 5f 74 69 6d 65 2e 66 75 74 75 72 65 22 3a 22 69 6e 20 25 73 22 2c 22 74 78 74 2e 68 65 6c 70 5f 63 65 6e 74 65 72 2e 61 73 73 65 74 73 2e 6a 61 76 61 73 63 72 69 70 74 73 2e 6d 6f 6d 65 6e 74 2e 72 65 6c 61 74 69 76 65 5f 74 69 6d 65 2e 68 22 3a 22 31 20 68 6f 75 72 22 2c 22 74 78 74 2e 68 65 6c 70 5f 63 65 6e 74 65 72 2e 61 73 73 65 74 73 2e 6a 61 76 61 73 63 72 69 70 74 73 2e 6d Data Ascii: day","txt.help_center.assets.javascripts.moment.relative_time.dd":"%d days","txt.help_center.assets.javascripts.moment.relative_time.future":"in %s","txt.help_center.assets.javascripts.moment.relative_time.h":"1 hour","txt.help_center.assets.javascripts.m
2024-04-26 12:23:40 UTC	1369	IN	Data Raw: 20 76 61 6c 69 64 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 22 2c 22 74 78 74 2e 68 65 6c 70 5f 63 65 6e 74 65 72 2e 63 6f 6e 74 61 63 74 5f 64 65 74 61 69 6c 73 5f 6d 6f 64 61 6c 2e 61 64 64 45 6d 61 69 6c 42 75 74 74 6f 6e 2e 6c 61 62 65 6c 22 3a 22 41 64 64 20 65 6d 61 69 6c 22 2c 22 74 78 74 2e 68 65 6c 70 5f 63 65 6e 74 65 72 2e 63 6f 6e 74 61 63 74 5f 64 65 74 61 69 6c 73 5f 6d 6f 64 61 6c 2e 61 64 64 50 68 6f 6e 65 42 75 74 74 6f 6e 2e 6c 61 62 65 6c 22 3a 22 41 64 64 20 70 68 6f 6e 65 22 2c 22 74 78 74 2e 68 65 6c 70 5f 63 65 6e 74 65 72 2e 63 6f 6e 74 61 63 74 5f 64 65 74 61 69 6c 73 5f 6d 6f 64 61 6c 2e 61 64 64 50 68 6f 6e 65 4e 75 6d 62 65 72 46 69 65 6c 64 2e 6c 61 62 65 6c 22 3a 22 41 64 64 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 22 2c 22 74 Data Ascii: valid email address","txt.help_center.contact_details_modal.addEmailButton.label":"Add email","txt.help_center.contact_details_modal.addPhoneButton.label":"Add phone","txt.help_center.contact_details_modal.addPhoneNumberField.label":"Add phone number","t
2024-04-26 12:23:40 UTC	1369	IN	Data Raw: 74 2e 68 65 6c 70 5f 63 65 6e 74 65 72 2e 63 6f 6e 74 61 63 74 5f 64 65 74 61 69 6c 73 5f 6d 6f 64 61 6c 2e 65 6d 61 69 6c 56 65 72 69 66 69 63 61 74 69 6f 6e 41 6c 65 72 74 2e 62 6f 64 79 22 3a 22 41 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 65 6d 61 69 6c 20 77 61 73 20 73 65 6e 74 20 74 6f 20 7b 7b 65 6d 61 69 6c 5f 61 64 64 72 65 73 73 7d 7d 2e 20 49 66 20 79 6f 75 20 64 6f 6e 27 74 20 73 65 65 20 69 74 2c 20 63 68 65 63 6b 20 79 6f 75 72 20 73 70 61 6d 20 6f 72 20 7b 7b 23 72 65 73 65 6e 64 5f 6c 69 6e 6b 7d 7d 72 65 73 65 6e 64 20 76 65 72 69 66 69 63 61 74 69 6f 6e 7b 7b 2f 72 65 73 65 6e 64 5f 6c 69 6e 6b 7d 7d 2e 22 2c 22 74 78 74 2e 68 65 6c 70 5f 63 65 6e 74 65 72 2e 63 6f 6e 74 61 63 74 5f 64 65 74 61 69 6c 73 5f 6d 6f 64 61 6c 2e 65 6d 61 69 Data Ascii: t.help_center.contact_details_modal.emailVerificationAlert.body":"A verification email was sent to {{email_address}}. If you don't see it, check your spam or {{#resend_link}}resend verification{{/resend_link}}.","txt.help_center.contact_details_modal.emai

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	49925	108.156.83.76	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:40 UTC	470	OUT	GET /gkyt4bl1j2fs/4elL6z7sEJbFubKUU7uwv7/ee2688b999e8da3cff3009d5f56f5d73/e01b9c58-a73a-4d18-ae2b-2d81cc537c7a_google-play-icon.svg HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:40 UTC	536	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 5215 Connection: close Date: Fri, 26 Apr 2024 12:23:40 GMT Last-Modified: Thu, 23 Jul 2020 02:15:46 GMT ETag: "446e18ca3767a3b9c9bf347d004f003c" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 edc731fea88a8cd61136d321a3ec9df2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P2 X-Amz-Cf-Id: GEBZz9B-HZuivv-791a-r7sbEu7i7SnqQIb-sL97DkQ3ZFOUv073DA== Age: 1
2024-04-26 12:23:40 UTC	5215	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 35 39 22 20 68 65 69 67 68 74 3d 22 34 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 39 20 34 35 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 72 65 63 74 20 78 3d 22 30 2e 37 35 22 20 79 3d 22 31 2e 37 30 39 32 33 22 20 77 69 64 74 68 3d 22 31 35 37 2e 35 22 20 68 65 69 67 68 74 3d 22 34 32 2e 34 39 31 31 22 20 72 78 3d 22 32 31 2e 32 34 35 36 22 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 20 73 74 72 6f 6b 65 3d 22 62 6c 61 63 6b 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 2e 35 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 36 34 2e 36 31 34 20 31 36 2e 39 34 36 33 43 36 31 2e 36 37 34 20 31 36 2e 39 30 Data Ascii: <svg width="159" height="45" viewBox="0 0 159 45" fill="none" xmlns="http://www.w3.org/2000/svg"><rect x="0.75" y="1.70923" width="157.5" height="42.4911" rx="21.2456" fill="white" stroke="black" stroke-width="1.5"/><path d="M64.614 16.9463C61.674 16.90

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	49933	151.101.193.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:40 UTC	1501	OUT	GET /myaccount/privacy/cookieprefs/getBanner?showBanner=true&country=US&language=en&policyType=CookieBanner&originalHeaders={%22cookie%22:%22cookie_prefs=T%3D0%2CP%3D1%2CF%3D1%2Ctype%3Dinitial%22}&tenant=venmo&tenantData={} HTTP/1.1 Host: www.paypal.com Connection: keep-alive Access-Control-Allow-Origin: * Accept: / Content-Type: application/json sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://help.venmo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; nsid=s%3An7iR5EQmXKz-oKtVXIy1EEIPxyKSFcCK.1TZKfiuN5QvG6VUXG7uj%2F6PzQRey35iwuU69rZa1p10; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; KHcl0EuY7AKSMgfvHl7J5E7hPtK=H5vOX4Xx9E6rPaNsW1umPOEju90KfJTschjWY_e1f92eqJS1o6EoZAYAvBErjHwsTvfIlecHLC-YGp_e; l7_az=dcg16.slc; sc_f=CEKPNHQG08AWc-eXVA4YPw93eSBWwxF4jXwznQNxJ_4VWbeV7FgS4yQ2I1Wt5sfyajVP4H77tpr0Ipov674wteSk7U1-EXiXl3h4f0; x-pp-s=eyJ0IjoiMTcxNDEzNDIwMzk2MSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742206%26vteXpYrS%3D1714136006%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew
2024-04-26 12:23:40 UTC	1373	IN	HTTP/1.1 200 OK Connection: close Content-Length: 17752 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://help.venmo.com Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; style-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; script-src 'nonce-PkaDeDBB8UnV9ihnFZdAc3ArnWcGf3bSQDKdGt8F7RtDqFM2' 'self' 'unsafe-inline' https://.paypal.com https://.paypalobjects.com https://recaptcha.net/; img-src 'self' * data:; object-src 'none'; font-src 'self' https://.paypal.com https://.paypalobjects.com; frame-src 'self' https://.paypalobjects.com https://.paypal.com https://recaptcha.net/ https://.qualtrics.com; connect-src 'self' 'unsafe-inline' https://.paypal.com https://.paypalobjects.com https://id.venmo.com https://venmo.com/ https://.qualtrics.com; form-action 'self' https://.paypal.com; base-uri 'self' https://.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp Content-Type: application/json; charset=utf-8 Etag: W/"4558-TkpLNdDgl8gECu1dhoXs4UgltUo"
2024-04-26 12:23:40 UTC	1191	IN	Data Raw: 4f 72 69 67 69 6e 2d 54 72 69 61 6c 3a 20 41 6c 49 6f 67 56 33 4b 46 74 6e 62 66 56 43 79 6c 39 5a 32 4e 70 72 45 37 46 44 38 50 59 43 74 2b 54 51 69 59 64 45 33 70 70 65 4a 6a 4a 30 78 4a 4b 63 74 68 59 77 4f 78 58 70 52 43 4e 6f 70 78 56 57 64 4f 49 45 4e 4d 63 4e 53 76 51 43 47 41 6d 6a 30 66 77 30 41 41 41 42 32 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 42 68 65 58 42 68 62 43 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6c 4e 6c 62 6d 52 47 64 57 78 73 56 58 4e 6c 63 6b 46 6e 5a 57 35 30 51 57 5a 30 5a 58 4a 53 5a 57 52 31 59 33 52 70 62 32 34 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 32 4f 44 51 34 4f 44 59 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 Data Ascii: Origin-Trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLCJleHBpcnkiOjE2ODQ4ODYzOTksImlzU3ViZG9tYWluI
2024-04-26 12:23:40 UTC	1074	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 74 73 3d 76 72 65 58 70 59 72 53 25 33 44 31 38 30 38 37 34 32 32 32 30 25 32 36 76 74 65 58 70 59 72 53 25 33 44 31 37 31 34 31 33 36 30 32 30 25 32 36 76 72 25 33 44 31 61 35 62 64 36 30 36 31 38 66 30 61 64 31 30 33 34 39 36 32 30 63 32 66 63 66 63 66 30 38 39 25 32 36 76 74 25 33 44 31 61 35 62 64 36 30 36 31 38 66 30 61 64 31 30 33 34 39 36 32 30 63 32 66 63 66 63 66 30 38 38 25 32 36 76 74 79 70 25 33 44 6e 65 77 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 4d 6f 6e 2c 20 32 36 20 41 70 72 20 32 30 32 37 20 31 32 3a 32 33 3a 34 30 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 Data Ascii: Set-Cookie: ts=vreXpYrS%3D1808742220%26vteXpYrS%3D1714136020%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 26 Apr 2027 12:23:40 GMT; HttpOnly; Secure; SameSite=NoneS
2024-04-26 12:23:40 UTC	1378	IN	Data Raw: 7b 22 63 73 73 22 3a 22 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 5c 22 5c 22 3e 40 66 6f 6e 74 2d 66 61 63 65 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 5c 22 50 61 79 50 61 6c 53 61 6e 73 42 69 67 2d 52 65 67 75 6c 61 72 5c 22 3b 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 20 73 72 63 3a 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 70 61 79 70 61 6c 2d 75 69 2f 66 6f 6e 74 73 2f 50 61 79 50 61 6c 53 61 6e 73 42 69 67 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f Data Ascii: {"css":"<style nonce=\"\">@font-face { font-family: \"PayPalSansBig-Regular\"; font-style: normal; font-display: swap; src: url('https://www.paypalobjects.com/paypal-ui/fonts/PayPalSansBig-Regular.woff2') format('woff2'), url('https://www.paypalobjects.co
2024-04-26 12:23:40 UTC	1378	IN	Data Raw: 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 23 30 30 37 30 62 61 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 50 61 79 50 61 6c 53 61 6e 73 42 69 67 2d 52 65 67 75 6c 61 72 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 20 7d 20 2e 63 63 70 61 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 5f 63 6f 6e 74 65 6e 74 20 61 3a 66 6f 63 75 73 2c 20 2e 63 63 70 61 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 5f 62 75 74 74 6f 6e 47 72 6f 75 70 20 62 75 74 74 6f 6e 3a 66 6f 63 75 73 20 7b 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 30 30 37 30 42 41 3b 20 7d 20 2e 63 63 70 61 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 5f 62 75 74 74 6f 6e 47 72 6f 75 70 20 7b 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 35 65 6d 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 73 74 61 74 69 63 3b Data Ascii: ine; color: #0070ba; font-family: PayPalSansBig-Regular; font-weight: 500; } .ccpaCookieBanner_content a:focus, .ccpaCookieBanner_buttonGroup button:focus { border: 1px solid #0070BA; } .ccpaCookieBanner_buttonGroup { padding-right: 5em; position: static;
2024-04-26 12:23:40 UTC	1378	IN	Data Raw: 61 6e 6e 65 72 5f 72 74 6c 43 6f 6e 74 61 69 6e 65 72 20 2e 63 63 70 61 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 5f 62 75 74 74 6f 6e 47 72 6f 75 70 20 7b 20 70 61 64 64 69 6e 67 3a 20 30 20 30 20 30 2e 37 35 65 6d 20 30 3b 20 7d 20 62 75 74 74 6f 6e 2e 63 63 70 61 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 5f 64 65 63 6c 69 6e 65 2d 62 75 74 74 6f 6e 20 7b 20 6d 61 72 67 69 6e 3a 20 30 20 20 30 20 30 20 31 2e 32 35 72 65 6d 20 7d 20 7d 20 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 30 30 70 78 29 20 7b 20 2e 63 63 70 61 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 2d 61 63 63 65 70 74 65 64 41 6c 6c 20 7b 20 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 32 65 6d 3b Data Ascii: anner_rtlContainer .ccpaCookieBanner_buttonGroup { padding: 0 0 0.75em 0; } button.ccpaCookieBanner_decline-button { margin: 0 0 0 1.25rem } } @media only screen and (max-width: 600px) { .ccpaCookieBanner-acceptedAll { height: auto; padding-bottom: 12em;
2024-04-26 12:23:40 UTC	1378	IN	Data Raw: 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 7b 20 72 65 61 73 6f 6e 20 3d 20 27 63 6f 6f 6b 69 65 73 20 61 72 65 20 64 69 73 61 62 6c 65 64 27 3b 20 7d 20 65 6c 73 65 20 69 66 28 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 5c 22 69 73 55 73 65 72 41 63 63 65 70 74 65 64 5c 22 29 29 7b 20 72 65 61 73 6f 6e 20 3d 20 27 55 73 65 72 20 61 63 63 65 70 74 65 64 20 6f 72 20 64 65 63 6c 69 6e 65 64 27 3b 20 7d 20 65 6c 73 65 20 69 66 28 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 5c 22 69 73 42 61 6e 6e 65 72 43 6c 6f 73 65 64 5c 22 29 29 7b 20 72 65 61 73 6f 6e 20 3d 20 27 42 61 6e 6e 65 72 20 43 6c 6f 73 65 64 27 3b 20 7d 20 65 6c 73 65 20 69 66 28 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 Data Ascii: .cookieEnabled){ reason = 'cookies are disabled'; } else if(sessionStorage.getItem(\"isUserAccepted\")){ reason = 'User accepted or declined'; } else if(sessionStorage.getItem(\"isBannerClosed\")){ reason = 'Banner Closed'; } else if(sessionStorage.getIte
2024-04-26 12:23:40 UTC	1378	IN	Data Raw: 67 72 70 29 20 7c 7c 64 6f 63 75 6d 65 6e 74 2e 74 69 74 6c 65 3b 20 69 66 20 28 6d 61 6e 61 67 65 43 6f 6f 6b 69 65 73 4c 69 6e 6b 29 20 7b 20 6d 61 6e 61 67 65 43 6f 6f 6b 69 65 73 4c 69 6e 6b 2e 6f 6e 63 6c 69 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 69 66 28 74 72 75 65 29 7b 20 76 61 72 20 6d 61 6e 61 67 65 43 6f 6f 6b 69 65 73 44 61 74 61 20 3d 20 7b 20 65 3a 20 27 63 6c 27 2c 20 6c 69 6e 6b 3a 20 27 6d 61 6e 61 67 65 63 6f 6f 6b 69 65 73 27 2c 20 70 67 6c 6b 3a 20 74 72 61 63 6b 69 6e 67 50 61 67 65 4e 61 6d 65 20 2b 20 27 7c 6d 61 6e 61 67 65 63 6f 6f 6b 69 65 73 27 2c 20 70 67 6c 6e 3a 20 74 72 61 63 6b 69 6e 67 50 61 67 65 4e 61 6d 65 20 2b 20 27 7c 6d 61 6e 61 67 65 63 6f 6f 6b 69 65 73 27 2c 20 65 76 65 6e 74 5f 6e 61 6d 65 3a 20 Data Ascii: grp) \|\|document.title; if (manageCookiesLink) { manageCookiesLink.onclick = function() { if(true){ var manageCookiesData = { e: 'cl', link: 'managecookies', pglk: trackingPageName + '\|managecookies', pgln: trackingPageName + '\|managecookies', event_name:
2024-04-26 12:23:40 UTC	1378	IN	Data Raw: 5f 70 72 65 66 73 3a 20 27 54 3d 31 2c 50 3d 31 2c 46 3d 31 2c 74 79 70 65 3d 65 78 70 6c 69 63 69 74 5f 62 61 6e 6e 65 72 27 2c 20 65 76 65 6e 74 5f 6e 61 6d 65 3a 20 27 76 65 6e 6d 6f 5f 63 6f 6f 6b 69 65 5f 62 61 6e 6e 65 72 5f 61 63 63 65 70 74 5f 63 6c 69 63 6b 65 64 27 20 7d 3b 20 66 6f 72 28 76 61 72 20 6b 65 79 20 69 6e 20 62 61 6e 6e 65 72 46 70 74 69 44 61 74 61 29 7b 20 61 63 63 65 70 74 62 61 6e 6e 65 72 46 70 74 69 44 61 74 61 5b 6b 65 79 5d 20 3d 20 62 61 6e 6e 65 72 46 70 74 69 44 61 74 61 5b 6b 65 79 5d 3b 20 7d 3b 20 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 2e 61 6e 61 6c 79 74 69 63 73 2e 41 6e 61 6c 79 74 69 63 73 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 63 6f 72 64 43 6c 69 63 6b 28 7b 20 64 61 74 61 3a 20 61 63 63 65 70 74 62 61 6e 6e 65 Data Ascii: _prefs: 'T=1,P=1,F=1,type=explicit_banner', event_name: 'venmo_cookie_banner_accept_clicked' }; for(var key in bannerFptiData){ acceptbannerFptiData[key] = bannerFptiData[key]; }; window.PAYPAL.analytics.Analytics.prototype.recordClick({ data: acceptbanne
2024-04-26 12:23:40 UTC	1378	IN	Data Raw: 20 3d 20 7b 20 63 6f 6f 6b 69 65 62 61 6e 6e 65 72 68 69 64 64 65 6e 3a 20 27 74 72 75 65 27 2c 20 63 5f 70 72 65 66 73 3a 20 27 54 3d 30 2c 50 3d 31 2c 46 3d 31 2c 74 79 70 65 3d 65 78 70 6c 69 63 69 74 5f 62 61 6e 6e 65 72 27 20 7d 3b 20 66 6f 72 28 76 61 72 20 6b 65 79 20 69 6e 20 62 61 6e 6e 65 72 46 70 74 69 44 61 74 61 29 7b 20 75 70 64 61 74 65 64 46 70 74 69 44 61 74 61 5b 6b 65 79 5d 20 3d 20 62 61 6e 6e 65 72 46 70 74 69 44 61 74 61 5b 6b 65 79 5d 3b 20 7d 3b 20 66 6f 72 28 76 61 72 20 6b 65 79 20 69 6e 20 75 70 64 61 74 65 64 46 70 74 69 44 61 74 61 29 7b 20 77 69 6e 46 70 74 69 44 61 74 61 5b 6b 65 79 5d 20 3d 20 75 70 64 61 74 65 64 46 70 74 69 44 61 74 61 5b 6b 65 79 5d 3b 20 7d 3b 20 77 69 6e 64 6f 77 2e 50 41 59 50 41 4c 2e 61 6e 61 6c 79 Data Ascii: = { cookiebannerhidden: 'true', c_prefs: 'T=0,P=1,F=1,type=explicit_banner' }; for(var key in bannerFptiData){ updatedFptiData[key] = bannerFptiData[key]; }; for(var key in updatedFptiData){ winFptiData[key] = updatedFptiData[key]; }; window.PAYPAL.analy
2024-04-26 12:23:40 UTC	1378	IN	Data Raw: 28 63 6f 6f 6b 69 65 42 61 6e 6e 65 72 41 63 63 65 70 74 41 6c 6c 20 26 26 20 63 6f 6f 6b 69 65 42 61 6e 6e 65 72 41 63 63 65 70 74 41 6c 6c 5b 30 5d 20 26 26 20 62 61 6e 6e 65 72 48 65 69 67 68 74 29 7b 20 63 6f 6f 6b 69 65 42 61 6e 6e 65 72 41 63 63 65 70 74 41 6c 6c 5b 30 5d 2e 73 74 79 6c 65 2e 70 61 64 64 69 6e 67 54 6f 70 20 3d 20 62 61 6e 6e 65 72 48 65 69 67 68 74 2f 31 36 20 2b 27 65 6d 27 3b 20 7d 20 7d 20 7d 3b 20 76 61 72 20 69 73 50 61 64 64 69 6e 67 42 6f 74 74 6f 6d 41 64 64 65 64 20 3d 20 66 61 6c 73 65 2c 20 62 61 6e 6e 65 72 50 61 64 64 69 6e 67 42 6f 74 74 6f 6d 20 3d 20 5c 22 5c 22 3b 20 66 75 6e 63 74 69 6f 6e 20 61 64 6a 75 73 74 50 61 64 64 69 6e 67 42 6f 74 74 6f 6d 28 61 64 64 4c 69 73 74 65 6e 65 72 29 7b 20 69 66 20 28 75 6e 64 Data Ascii: (cookieBannerAcceptAll && cookieBannerAcceptAll[0] && bannerHeight){ cookieBannerAcceptAll[0].style.paddingTop = bannerHeight/16 +'em'; } } }; var isPaddingBottomAdded = false, bannerPaddingBottom = \"\"; function adjustPaddingBottom(addListener){ if (und

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	49935	104.16.124.96	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:40 UTC	355	OUT	GET /cdn-cgi/trace HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:40 UTC	332	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 12:23:40 GMT Content-Type: text/plain Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 87a68b9ebcfb742e-MIA X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache
2024-04-26 12:23:40 UTC	317	IN	Data Raw: 31 33 36 0d 0a 66 6c 3d 33 36 38 66 32 30 36 0a 68 3d 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 0a 69 70 3d 31 30 32 2e 31 32 39 2e 31 35 32 2e 32 32 30 0a 74 73 3d 31 37 31 34 31 33 34 32 32 30 2e 36 0a 76 69 73 69 74 5f 73 63 68 65 6d 65 3d 68 74 74 70 73 0a 75 61 67 3d 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 0a 63 6f 6c 6f 3d 4d 49 41 0a 73 6c 69 76 65 72 3d 6e 6f 6e 65 0a 68 74 74 70 3d 68 74 74 70 2f 31 2e 31 0a 6c 6f 63 3d 55 53 0a 74 6c 73 3d 54 4c Data Ascii: 136fl=368f206h=www.cloudflare.comip=102.129.152.220ts=1714134220.6visit_scheme=httpsuag=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36colo=MIAsliver=nonehttp=http/1.1loc=UStls=TL
2024-04-26 12:23:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	49936	108.156.83.58	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:40 UTC	702	OUT	GET /gkyt4bl1j2fs/5a1jYA8djo9ilD72T9fVm5/2a6ff67c8a89ae2ec823abd826f566a8/ebb370be-e241-4600-949a-4f6710b1b142_instagram-icon.svg HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:41 UTC	529	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 3342 Connection: close Date: Fri, 26 Apr 2024 12:23:41 GMT Last-Modified: Thu, 23 Jul 2020 02:19:15 GMT ETag: "4223adb8dab2d52edcdd0254d6010866" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 19f81b125c62da79641b37663ddce94c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P2 X-Amz-Cf-Id: JWT-RHLcEDZ7tyS7pSAG_RQxuwKQsecwkQetzIdYzzjFKyD89N0BUA==
2024-04-26 12:23:41 UTC	3342	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 30 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 30 20 32 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 35 2e 36 34 32 34 36 20 30 2e 38 36 31 37 43 36 2e 36 36 36 34 37 20 30 2e 38 31 35 31 30 39 20 36 2e 39 39 33 36 38 20 30 2e 38 30 33 37 31 31 20 39 2e 36 30 30 39 31 20 30 2e 38 30 33 37 31 31 48 39 2e 35 39 37 39 31 43 31 32 2e 32 30 35 39 20 30 2e 38 30 33 37 31 31 20 31 32 2e 35 33 31 39 20 30 2e 38 31 35 31 30 39 20 31 Data Ascii: <svg width="20" height="20" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M5.64246 0.8617C6.66647 0.815109 6.99368 0.803711 9.60091 0.803711H9.59791C12.2059 0.803711 12.5319 0.815109 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	49937	104.18.248.37	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:40 UTC	545	OUT	GET /auth/v2/host/without_iframe.js HTTP/1.1 Host: venmo.zendesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:41 UTC	1140	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 12:23:41 GMT Content-Type: text/html; charset=utf-8 Content-Length: 165 Connection: close p3p: CP="NOI DSP COR NID ADMa OPTa OUR NOR" vary: Accept x-xss-protection: 1; mode=block location: https://static.zdassets.com/auth/111e8e6e01b3952840fd6ff2ae791fb522c67b19/v2/host-without-iframe.js cache-control: max-age=86400, public strict-transport-security: max-age=31536000; includeSubDomains x-zendesk-origin-server: classic-app-server-7d9454f7ff-6s7vk x-runtime: 0.044846 X-Zendesk-Zorg: yes X-Request-ID: 879e4f9d0ba0748f-MIA CF-Cache-Status: HIT Age: 86345 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tk52JX8JGQKyw4NWaFVWM5hc%2BgXSpp3yazojx%2BN6cgMyIqTKue10SYiPdx2YWeMBZubuQHNX6WQUG6uC5gzhQH4fm0Nnf%2BvDnB%2BcdCOyluyEhf2xdeWqKKYg3L9Xd%2Fp3Psla"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=9de2deed91df12f9cbafa83991996480ba0d22b6-1714134221; path=/; domain=.venmo.zendesk.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87a68ba19dad7431-MIA
2024-04-26 12:23:41 UTC	165	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 59 6f 75 20 61 72 65 20 62 65 69 6e 67 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 7a 64 61 73 73 65 74 73 2e 63 6f 6d 2f 61 75 74 68 2f 31 31 31 65 38 65 36 65 30 31 62 33 39 35 32 38 34 30 66 64 36 66 66 32 61 65 37 39 31 66 62 35 32 32 63 36 37 62 31 39 2f 76 32 2f 68 6f 73 74 2d 77 69 74 68 6f 75 74 2d 69 66 72 61 6d 65 2e 6a 73 22 3e 72 65 64 69 72 65 63 74 65 64 3c 2f 61 3e 2e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><body>You are being <a href="https://static.zdassets.com/auth/111e8e6e01b3952840fd6ff2ae791fb522c67b19/v2/host-without-iframe.js">redirected</a>.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	49938	108.156.83.58	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:41 UTC	700	OUT	GET /gkyt4bl1j2fs/1Xnb0FQsxsETwn52uJjqmH/547b5cde0b90489e9de1adf379f69168/64e29ead-c913-4ac2-b39d-c0a03b61cb6a_twitter-icon.svg HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:41 UTC	529	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1499 Connection: close Date: Fri, 26 Apr 2024 12:23:42 GMT Last-Modified: Thu, 23 Jul 2020 02:18:39 GMT ETag: "5166c0d79bae42ff989c186869dc25c0" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 1d180e6d1aa5f424d0d3571ff7011a02.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P2 X-Amz-Cf-Id: bzcNcuBIB-xEqaKK5PWQ9VQmti94w3rSyg5E8vFe0pYqcgkzfFs4xg==
2024-04-26 12:23:41 UTC	1499	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 32 22 20 68 65 69 67 68 74 3d 22 31 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 32 20 31 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 30 2e 35 39 30 39 20 35 2e 30 32 34 30 37 4c 31 30 2e 36 33 35 35 20 35 2e 37 35 39 33 35 4c 39 2e 38 39 32 31 33 20 35 2e 36 36 39 33 31 43 37 2e 31 38 36 34 33 20 35 2e 33 32 34 31 38 20 34 2e 38 32 32 36 36 20 34 2e 31 35 33 37 35 20 32 2e 38 31 35 36 39 20 32 2e 31 38 38 30 32 4c 31 2e 38 33 34 35 20 31 2e 32 31 32 36 Data Ascii: <svg width="22" height="18" viewBox="0 0 22 18" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M10.5909 5.02407L10.6355 5.75935L9.89213 5.66931C7.18643 5.32418 4.82266 4.15375 2.81569 2.18802L1.8345 1.2126

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	49939	104.18.70.113	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:41 UTC	573	OUT	GET /hc/assets/hc_enduser-fb88a13df887cd7e3577fa4983341c63.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:41 UTC	1126	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 12:23:41 GMT Content-Type: application/javascript Content-Length: 616722 Connection: close x-amz-id-2: 4/n2N3b1WWtHwOFaukuXkyAqMxiLBU6u8M5pW0lA1RBEuVvcdraFrt6g5RbeJYo9mdqmJkxBBIg= x-amz-request-id: K2S1KA332659YZGD x-amz-replication-status: COMPLETED Last-Modified: Wed, 24 Apr 2024 09:07:10 GMT ETag: "8d8be71cb03af1f2c20524f69272efe8" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=604800 x-amz-version-id: tTetcAcuYAfmox863ZVRstOztipWSCyE CF-Cache-Status: HIT Age: 184427 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vFjt2ENYiPyjQ9cOeExIBRKuassJa2y2%2Be%2FdIpVK%2FbNxWFyVkzTSgbvbXiVCKVNFfaKXywzKmkjXRNpiSoXtP7ZGZmvVhkXab%2F88R1dMk1WhAGLJvY2Gdpm0Q33oslVIhdQr8MQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 87a68ba408e93712-MIA
2024-04-26 12:23:41 UTC	243	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 68 63 5f 65 6e 64 75 73 65 72 2d 66 62 38 38 61 31 33 64 66 38 38 37 63 64 37 65 33 35 37 37 66 61 34 39 38 33 33 34 31 63 36 33 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 61 3d 7b 33 38 30 31 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 36 36 33 34 31 29 7d 2c 37 38 37 30 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 63 6f 6e 73 74 20 72 3d 6e 28 37 33 32 31 36 29 2c 61 3d 6e 28 33 37 35 36 36 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 69 66 28 21 28 74 68 69 73 20 Data Ascii: /! For license information please see hc_enduser-fb88a13df887cd7e3577fa4983341c63.js.LICENSE.txt /!function(){var e,t,n,r,a={38016:function(e,t,n){e.exports=n(66341)},78701:function(e,t,n){const r=n(73216),a=n(37566);function o(){if(!(this
2024-04-26 12:23:41 UTC	1369	IN	Data Raw: 69 6e 73 74 61 6e 63 65 6f 66 20 6f 29 29 72 65 74 75 72 6e 20 6e 65 77 20 6f 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 74 3d 61 2e 67 65 74 28 29 2e 66 69 6c 65 73 2e 69 6e 74 6c 3b 74 26 26 21 77 69 6e 64 6f 77 2e 49 6e 74 6c 3f 72 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 7c 7c 49 6e 74 6c 2e 43 6f 6c 6c 61 74 6f 72 7c 7c 28 49 6e 74 6c 2e 43 6f 6c 6c 61 74 6f 72 3d 6f 29 2c 65 28 74 29 7d 29 29 3a 65 28 29 7d 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 6e 3d 61 2e 67 65 74 28 29 2e 66 69 6c 65 73 2c 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 2c 69 3d 6e 5b 22 72 65 6c 61 74 69 76 65 2e 22 2b 28 22 6e 6f 22 3d 3d 3d 6f 3f 22 6e 6e 22 3a 6f 29 5d 7c 7c 6e 5b Data Ascii: instanceof o))return new o}function i(e,t){!function(e){const t=a.get().files.intl;t&&!window.Intl?r(t,(function(t){t\|\|Intl.Collator\|\|(Intl.Collator=o),e(t)})):e()}((function(){const n=a.get().files,o=e.split("-")[0],i=n["relative."+("no"===o?"nn":o)]\|\|n[
2024-04-26 12:23:41 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 3f 65 3a 30 3d 3d 3d 74 26 26 65 2b 22 2e 7a 65 72 6f 22 69 6e 20 6e 3f 65 2b 22 2e 7a 65 72 6f 22 3a 31 3d 3d 3d 74 26 26 65 2b 22 2e 6f 6e 65 22 69 6e 20 6e 3f 65 2b 22 2e 6f 6e 65 22 3a 32 3d 3d 3d 74 26 26 65 2b 22 2e 74 77 6f 22 69 6e 20 6e 3f 65 2b 22 2e 74 77 6f 22 3a 65 2b 22 2e 6f 74 68 65 72 22 69 6e 20 6e 3f 65 2b 22 2e 6f 74 68 65 72 22 3a 65 2b 22 2e 6d 61 6e 79 22 69 6e 20 6e 3f 65 2b 22 2e 6d 61 6e 79 22 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 69 2e 67 65 74 28 29 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 28 29 2e 74 72 61 6e 73 6c 61 74 69 6f 6e 73 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 6f 75 6c 64 Data Ascii: return void 0===t?e:0===t&&e+".zero"in n?e+".zero":1===t&&e+".one"in n?e+".one":2===t&&e+".two"in n?e+".two":e+".other"in n?e+".other":e+".many"in n?e+".many":e}function l(){if(void 0===i.get()\|\|"object"!=typeof i.get().translations)throw new Error("Could
2024-04-26 12:23:41 UTC	1369	IN	Data Raw: 67 22 29 2c 6f 3d 5b 5d 3b 6c 65 74 20 63 2c 75 3d 7b 70 61 72 74 73 3a 5b 5d 7d 2c 62 3d 30 3b 66 6f 72 28 3b 3b 29 7b 63 6f 6e 73 74 20 6e 3d 61 2e 65 78 65 63 28 72 29 3b 69 66 28 6e 5b 31 5d 26 26 75 2e 70 61 72 74 73 2e 70 75 73 68 28 7b 74 79 70 65 3a 22 74 65 78 74 22 2c 76 61 6c 75 65 3a 6e 5b 31 5d 7d 29 2c 22 5c 6e 22 3d 3d 3d 6e 5b 34 5d 29 75 2e 70 61 72 74 73 2e 70 75 73 68 28 7b 74 79 70 65 3a 22 6e 65 77 6c 69 6e 65 22 2c 76 61 6c 75 65 3a 68 28 74 2e 6e 65 77 6c 69 6e 65 2c 22 5c 6e 22 2c 62 2b 2b 29 7d 29 3b 65 6c 73 65 20 69 66 28 22 23 22 3d 3d 3d 6e 5b 32 5d 29 63 3d 7b 74 79 70 65 3a 22 72 61 6e 67 65 22 2c 6e 61 6d 65 3a 6e 5b 33 5d 2c 70 61 72 74 73 3a 5b 5d 7d 2c 75 2e 70 61 72 74 73 2e 70 75 73 68 28 63 29 2c 6f 2e 70 75 73 68 28 Data Ascii: g"),o=[];let c,u={parts:[]},b=0;for(;;){const n=a.exec(r);if(n[1]&&u.parts.push({type:"text",value:n[1]}),"\n"===n[4])u.parts.push({type:"newline",value:h(t.newline,"\n",b++)});else if("#"===n[2])c={type:"range",name:n[3],parts:[]},u.parts.push(c),o.push(
2024-04-26 12:23:41 UTC	1369	IN	Data Raw: 20 74 2e 73 74 61 72 74 73 57 69 74 68 28 65 29 7d 29 29 7d 2c 67 2e 67 65 74 43 6c 64 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 28 29 2c 21 69 2e 67 65 74 28 29 2e 63 6c 64 72 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 74 68 65 20 43 4c 44 52 20 64 61 74 61 20 69 6e 20 74 68 65 20 67 6c 6f 62 61 6c 20 49 31 38 4e 20 76 61 72 69 61 62 6c 65 2c 20 6d 61 6b 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 74 68 65 20 43 4c 44 52 20 64 61 74 61 20 77 69 74 68 20 74 68 65 20 70 6c 75 67 69 6e 22 29 3b 72 65 74 75 72 6e 20 69 2e 67 65 74 28 29 2e 63 6c 64 72 7d 2c 67 2e 6c 61 6e 67 75 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 74 3d 67 2e 67 65 74 43 6c 64 72 28 29 2c Data Ascii: t.startsWith(e)}))},g.getCldr=function(){if(l(),!i.get().cldr)throw new Error("Could not find the CLDR data in the global I18N variable, make sure to include the CLDR data with the plugin");return i.get().cldr},g.language=function(e){const t=g.getCldr(),
2024-04-26 12:23:41 UTC	1369	IN	Data Raw: 3d 72 5b 65 5d 7d 29 29 7d 6d 28 29 7d 2c 76 6f 69 64 20 30 21 3d 3d 69 2e 67 65 74 28 29 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 28 29 2e 74 72 61 6e 73 6c 61 74 69 6f 6e 73 26 26 6d 28 29 2c 65 2e 65 78 70 6f 72 74 73 3d 67 7d 2c 39 38 39 37 31 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 61 2e 65 78 70 6f 72 74 73 2c 61 2c 61 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 61 Data Ascii: =r[e]}))}m()},void 0!==i.get()&&"object"==typeof i.get().translations&&m(),e.exports=g},98971:function(e){e.exports=function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};return e[r].call(a.exports,a,a.exports,n),a
2024-04-26 12:23:41 UTC	1369	IN	Data Raw: 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 28 74 68 69 73 2c 65 29 2c 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 7d 72 65 74 75 72 6e 20 72 28 65 2c 5b 7b 6b 65 79 3a 22 61 64 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 6c 69 73 74 65 6e 65 72 73 2e 66 69 6e 64 49 6e 64 65 78 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e Data Ascii: on(){function e(){!function(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}(this,e),this.listeners=[]}return r(e,[{key:"add",value:function(e){var t=this,n=function(e){return t.listeners.findIndex((function(t){return t.
2024-04-26 12:23:41 UTC	1369	IN	Data Raw: 6f 6e 2e 68 72 65 66 3d 66 2e 72 65 64 69 72 65 63 74 55 72 6c 7c 7c 22 2f 61 63 63 65 73 73 2f 6c 6f 67 69 6e 3f 72 65 74 75 72 6e 5f 74 6f 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2c 21 30 7d 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 72 65 74 75 72 6e 20 65 5b 22 58 2d 5a 65 6e 64 65 73 6b 2d 52 65 6e 65 77 2d 53 65 73 73 69 6f 6e 22 5d 7c 7c 28 65 5b 22 58 2d 5a 65 6e 64 65 73 6b 2d 52 65 6e 65 77 2d 53 65 73 73 69 6f 6e 22 5d 3d 22 66 61 6c 73 65 22 29 2c 66 65 74 63 68 28 66 2e Data Ascii: on.href=f.redirectUrl\|\|"/access/login?return_to="+encodeURIComponent(window.location.href),!0}function b(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};return e["X-Zendesk-Renew-Session"]\|\|(e["X-Zendesk-Renew-Session"]="false"),fetch(f.
2024-04-26 12:23:41 UTC	1369	IN	Data Raw: 65 54 69 6d 65 6f 75 74 29 28 35 39 65 33 29 3a 6e 3c 32 38 35 65 33 26 26 28 30 2c 6f 2e 73 65 74 49 64 6c 65 53 74 61 74 65 54 69 6d 65 6f 75 74 29 28 32 38 35 65 33 29 7d 7d 7d 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 2d 44 61 74 65 2e 6e 6f 77 28 29 7d 3b 74 2e 73 74 61 72 74 53 65 73 73 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 64 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 73 7c 7c 28 73 3d 21 30 2c 79 28 29 2c 28 30 2c 6f 2e 61 64 64 49 64 6c 65 53 74 61 74 65 4c 69 73 74 65 6e 65 72 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 69 64 6c 65 22 3d 3d Data Ascii: eTimeout)(59e3):n<285e3&&(0,o.setIdleStateTimeout)(285e3)}}},k=function(){return d-Date.now()};t.startSession=function(){f=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},d=Date.now(),s\|\|(s=!0,y(),(0,o.addIdleStateListener)((function(e){"idle"==
2024-04-26 12:23:41 UTC	1369	IN	Data Raw: 5c 74 5c 74 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 66 61 6b 65 49 64 3a 20 66 61 6b 65 49 64 7d 29 3b 5c 74 5c 74 5c 74 7d 2c 20 74 69 6d 65 29 3b 5c 74 5c 74 5c 74 62 72 65 61 6b 3b 5c 74 5c 74 63 61 73 65 20 27 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 27 3a 5c 74 5c 74 5c 74 69 66 20 28 66 61 6b 65 49 64 54 6f 49 64 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 20 28 66 61 6b 65 49 64 29 29 20 7b 5c 74 5c 74 5c 74 5c 74 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 66 61 6b 65 49 64 54 6f 49 64 5b 66 61 6b 65 49 64 5d 29 3b 5c 74 5c 74 5c 74 5c 74 64 65 6c 65 74 65 20 66 61 6b 65 49 64 54 6f 49 64 5b 66 61 6b 65 49 64 5d 3b 5c 74 5c 74 5c 74 7d 5c 74 5c 74 5c 74 62 72 65 61 6b 3b 5c 74 5c 74 63 61 73 65 20 27 73 65 74 54 69 6d 65 6f 75 74 27 3a 5c 74 5c 74 5c Data Ascii: \t\tpostMessage({fakeId: fakeId});\t\t\t}, time);\t\t\tbreak;\t\tcase 'clearInterval':\t\t\tif (fakeIdToId.hasOwnProperty (fakeId)) {\t\t\t\tclearInterval(fakeIdToId[fakeId]);\t\t\t\tdelete fakeIdToId[fakeId];\t\t\t}\t\t\tbreak;\t\tcase 'setTimeout':\t\t\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	49941	108.156.83.58	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:41 UTC	700	OUT	GET /gkyt4bl1j2fs/p9L2SKCwCmCkWSOrv7P3N/c7f77485b0aa297256d3428a97e7492b/757a8c1a-d41a-4a53-8fb3-cac665c2bd89_facebook-icon.svg HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:41 UTC	539	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 413 Connection: close Last-Modified: Thu, 23 Jul 2020 02:16:37 GMT Server: Contentful Images API Access-Control-Allow-Origin: * Date: Fri, 26 Apr 2024 07:04:05 GMT Cache-Control: max-age=31536000 ETag: "518021e3dd69af49a601e3900511518c" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 fe16c80658be143c81fdffc7cbf895ae.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P2 X-Amz-Cf-Id: Uoz-gcGmSGcWXl_g6oq4qO0lj4GYP-KmFyXq4YUaVEhZHxFY1w9vdw== Age: 19177
2024-04-26 12:23:41 UTC	413	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 22 20 68 65 69 67 68 74 3d 22 32 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 20 32 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 36 2e 36 37 36 37 35 20 32 30 2e 33 38 33 34 56 31 30 2e 35 39 32 34 48 39 2e 33 38 30 30 34 4c 39 2e 37 33 38 32 38 20 37 2e 32 31 38 33 37 48 36 2e 36 37 36 37 35 4c 36 2e 36 38 31 33 35 20 35 2e 35 32 39 36 34 43 36 2e 36 38 31 33 35 20 34 2e 36 34 39 36 34 20 36 2e 37 36 34 39 38 20 34 2e 31 37 38 31 32 20 38 2e 30 32 39 Data Ascii: <svg width="10" height="21" viewBox="0 0 10 21" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M6.67675 20.3834V10.5924H9.38004L9.73828 7.21837H6.67675L6.68135 5.52964C6.68135 4.64964 6.76498 4.17812 8.029

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	49940	104.18.70.113	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:41 UTC	577	OUT	GET /hc/theming_assets/802785/498597/script.js?digest=28556028217875 HTTP/1.1 Host: p19.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:41 UTC	880	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 12:23:41 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-ua-compatible: IE=edge vary: Accept cache-control: max-age=604800, public x-zendesk-processed-host-header: p19.zdassets.com strict-transport-security: max-age=0 x-zendesk-origin-server: app-server-7d9d8674dc-r2k9f etag: W/"7b6398a068227220c7feebdc795894b9" x-runtime: 0.017276 Protocol: HTTP/1.1 always CF-Cache-Status: HIT Age: 73535 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G3LpPPIiHw6l8z%2B1xKKLUvroLwJLzVkNFyNWY6ageeA%2FWOSgCLj%2F4CxcBRIX%2BRLtLRob28pglg3IarJsEt%2BgdfiXpqlIOLH6lNk0SZr1OL0g%2BN80twUuCsJ1dSAoDM0%2BhnE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a68ba40e8ca4dc-MIA
2024-04-26 12:23:41 UTC	489	IN	Data Raw: 37 63 33 32 0d 0a 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 2f 2f 20 4b 65 79 20 6d 61 70 0a 20 20 76 61 72 20 45 4e 54 45 52 20 3d 20 31 33 3b 0a 20 20 76 61 72 20 45 53 43 41 50 45 20 3d 20 32 37 3b 0a 20 20 76 61 72 20 53 50 41 43 45 20 3d 20 33 32 3b 0a 20 20 76 61 72 20 55 50 20 3d 20 33 38 3b 0a 20 20 76 61 72 20 44 4f 57 4e 20 3d 20 34 30 3b 0a 20 20 76 61 72 20 54 41 42 20 3d 20 39 3b 0a 0a 20 20 66 75 6e 63 74 69 6f 6e 20 63 6c 6f 73 65 73 74 20 28 65 6c 65 6d 65 6e 74 2c 20 73 65 6c 65 63 74 6f 72 29 20 7b 0a 20 20 20 20 69 66 20 28 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 73 65 73 74 Data Ascii: 7c32document.addEventListener('DOMContentLoaded', function() { // Key map var ENTER = 13; var ESCAPE = 27; var SPACE = 32; var UP = 38; var DOWN = 40; var TAB = 9; function closest (element, selector) { if (Element.prototype.closest
2024-04-26 12:23:41 UTC	1369	IN	Data Raw: 74 79 70 65 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 20 26 26 20 65 6c 65 6d 65 6e 74 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 28 73 65 6c 65 63 74 6f 72 29 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 6c 65 6d 65 6e 74 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 65 6c 65 6d 65 6e 74 20 3d 20 65 6c 65 6d 65 6e 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 20 7c 7c 20 65 6c 65 6d 65 6e 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 0a 20 20 20 20 7d 20 77 68 69 6c 65 20 28 65 6c 65 6d 65 6e 74 20 21 3d 3d 20 6e 75 6c 6c 20 26 26 20 65 6c 65 6d 65 6e 74 2e 6e 6f 64 65 54 79 70 65 20 3d 3d 3d 20 31 29 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0a 20 20 7d 0a 0a 20 20 2f 2f 20 73 6f 63 69 Data Ascii: type.webkitMatchesSelector && element.webkitMatchesSelector(selector)) { return element; } element = element.parentElement \|\| element.parentNode; } while (element !== null && element.nodeType === 1); return null; } // soci
2024-04-26 12:23:41 UTC	1369	IN	Data Raw: 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 66 6f 63 75 73 27 2c 20 66 75 6e 63 74 69 6f 6e 20 66 6f 63 75 73 43 6f 6d 6d 65 6e 74 43 6f 6e 74 61 69 6e 65 72 54 65 78 74 61 72 65 61 28 29 20 7b 0a 20 20 20 20 20 20 63 6f 6d 6d 65 6e 74 43 6f 6e 74 61 69 6e 65 72 46 6f 72 6d 43 6f 6e 74 72 6f 6c 73 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 62 6c 6f 63 6b 27 3b 0a 20 20 20 20 20 20 63 6f 6d 6d 65 6e 74 43 6f 6e 74 61 69 6e 65 72 54 65 78 74 61 72 65 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 66 6f 63 75 73 27 2c 20 66 6f 63 75 73 43 6f 6d 6d 65 6e 74 43 6f 6e 74 61 69 6e 65 72 54 65 78 74 61 72 65 61 29 3b 0a 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 69 66 20 28 63 6f 6d 6d 65 6e 74 43 6f 6e 74 61 69 6e 65 72 54 65 78 Data Ascii: dEventListener('focus', function focusCommentContainerTextarea() { commentContainerFormControls.style.display = 'block'; commentContainerTextarea.removeEventListener('focus', focusCommentContainerTextarea); }); if (commentContainerTex
2024-04-26 12:23:41 UTC	1369	IN	Data Raw: 2c 0a 20 20 20 20 72 65 71 75 65 73 74 4d 61 72 6b 41 73 53 6f 6c 76 65 64 43 68 65 63 6b 62 6f 78 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 72 65 71 75 65 73 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 63 6f 6d 6d 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 27 29 2c 0a 20 20 20 20 72 65 71 75 65 73 74 43 6f 6d 6d 65 6e 74 53 75 62 6d 69 74 42 75 74 74 6f 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 72 65 71 75 65 73 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 63 6f 6d 6d 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 27 29 3b 0a 0a 20 20 69 66 20 28 72 65 71 75 65 73 74 4d 61 Data Ascii: , requestMarkAsSolvedCheckbox = document.querySelector('.request-container .comment-container input[type=checkbox]'), requestCommentSubmitButton = document.querySelector('.request-container .comment-container input[type=submit]'); if (requestMa
2024-04-26 12:23:41 UTC	1369	IN	Data Raw: 75 74 74 6f 6e 2e 64 69 73 61 62 6c 65 64 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 29 3b 0a 20 20 7d 0a 0a 20 20 2f 2f 20 44 69 73 61 62 6c 65 20 73 75 62 6d 69 74 20 62 75 74 74 6f 6e 20 69 66 20 74 65 78 74 61 72 65 61 20 69 73 20 65 6d 70 74 79 0a 20 20 69 66 20 28 72 65 71 75 65 73 74 43 6f 6d 6d 65 6e 74 54 65 78 74 61 72 65 61 20 26 26 20 72 65 71 75 65 73 74 43 6f 6d 6d 65 6e 74 54 65 78 74 61 72 65 61 2e 76 61 6c 75 65 20 3d 3d 3d 20 27 27 29 20 7b 0a 20 20 20 20 72 65 71 75 65 73 74 43 6f 6d 6d 65 6e 74 53 75 62 6d 69 74 42 75 74 74 6f 6e 2e 64 69 73 61 62 6c 65 64 20 3d 20 74 72 75 65 3b 0a 20 20 7d 0a 0a 20 20 2f 2f 20 53 75 62 6d 69 74 20 72 65 71 75 65 73 74 73 20 66 69 6c 74 65 72 20 66 6f 72 6d 20 6f 6e 20 73 74 Data Ascii: utton.disabled = false; } }); } // Disable submit button if textarea is empty if (requestCommentTextarea && requestCommentTextarea.value === '') { requestCommentSubmitButton.disabled = true; } // Submit requests filter form on st
2024-04-26 12:23:41 UTC	1369	IN	Data Raw: 61 72 20 75 73 65 72 4d 65 6e 75 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 23 75 73 65 72 2d 6e 61 76 27 29 3b 0a 0a 20 20 62 75 72 67 65 72 4d 65 6e 75 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 3b 0a 20 20 20 20 74 6f 67 67 6c 65 4e 61 76 69 67 61 74 69 6f 6e 28 74 68 69 73 2c 20 75 73 65 72 4d 65 6e 75 29 3b 0a 20 20 7d 29 3b 0a 0a 0a 20 20 75 73 65 72 4d 65 6e 75 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6b 65 79 75 70 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 69 66 20 28 65 2e 6b 65 79 43 6f 64 65 20 3d 3d 3d 20 45 53 43 41 50 45 Data Ascii: ar userMenu = document.querySelector('#user-nav'); burgerMenu.addEventListener('click', function(e) { e.stopPropagation(); toggleNavigation(this, userMenu); }); userMenu.addEventListener('keyup', function(e) { if (e.keyCode === ESCAPE
2024-04-26 12:23:41 UTC	1369	IN	Data Raw: 6c 54 72 69 67 67 65 72 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 73 65 65 2d 61 6c 6c 2d 73 65 63 74 69 6f 6e 73 2d 74 72 69 67 67 65 72 22 29 3b 0a 20 20 76 61 72 20 73 75 62 73 65 63 74 69 6f 6e 73 4c 69 73 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 73 65 63 74 69 6f 6e 2d 6c 69 73 74 22 29 3b 0a 0a 20 20 69 66 20 28 73 75 62 73 65 63 74 69 6f 6e 73 4c 69 73 74 20 26 26 20 73 75 62 73 65 63 74 69 6f 6e 73 4c 69 73 74 2e 63 68 69 6c 64 72 65 6e 2e 6c 65 6e 67 74 68 20 3e 20 36 29 20 7b 0a 20 20 20 20 73 65 65 41 6c 6c 54 72 69 67 67 65 72 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 68 69 64 64 65 6e 22 2c 20 66 61 6c 73 65 29 3b 0a 0a 20 20 20 20 73 65 Data Ascii: lTrigger = document.querySelector("#see-all-sections-trigger"); var subsectionsList = document.querySelector(".section-list"); if (subsectionsList && subsectionsList.children.length > 6) { seeAllTrigger.setAttribute("aria-hidden", false); se
2024-04-26 12:23:41 UTC	1369	IN	Data Raw: 20 20 74 79 70 65 6f 66 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 45 6c 6d 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 2e 66 6f 63 75 73 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 0a 20 20 29 20 7b 0a 20 20 20 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 45 6c 6d 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 2e 66 6f 63 75 73 28 29 3b 0a 20 20 7d 0a 0a 20 20 2f 2f 20 44 72 6f 70 64 6f 77 6e 73 0a 20 20 0a 20 20 66 75 6e 63 74 69 6f 6e 20 44 72 6f 70 64 6f 77 6e 28 74 6f 67 67 6c 65 2c 20 6d 65 6e 75 29 20 7b 0a 20 20 20 20 74 68 69 73 2e 74 6f 67 67 6c 65 20 3d 20 74 6f 67 67 6c 65 3b 0a 20 20 20 20 74 68 69 73 2e 6d 65 6e 75 20 3d 20 6d 65 6e 75 3b 0a 0a 20 20 20 20 74 68 69 73 2e 6d 65 6e 75 50 6c 61 63 65 6d 65 Data Ascii: typeof notificationElm.previousElementSibling.focus === "function" ) { notificationElm.previousElementSibling.focus(); } // Dropdowns function Dropdown(toggle, menu) { this.toggle = toggle; this.menu = menu; this.menuPlaceme
2024-04-26 12:23:41 UTC	1369	IN	Data Raw: 74 68 20 3e 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 2c 0a 20 20 20 20 20 20 20 20 62 6f 74 74 6f 6d 3a 20 72 65 63 74 2e 74 6f 70 20 3c 20 30 20 7c 7c 20 72 65 63 74 2e 74 6f 70 20 2b 20 72 65 63 74 2e 68 65 69 67 68 74 20 3e 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 0a 20 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 20 69 66 20 28 6f 76 65 72 66 6c 6f 77 2e 72 69 67 68 74 20 7c 7c 20 74 68 69 73 2e 6d 65 6e 75 50 6c 61 63 65 6d 65 6e 74 2e 65 6e 64 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 6d 65 6e 75 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 2d 65 6e 64 22 29 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 69 66 20 28 6f 76 65 72 66 6c 6f 77 2e 62 6f 74 74 6f 6d 20 7c 7c Data Ascii: th > window.innerWidth, bottom: rect.top < 0 \|\| rect.top + rect.height > window.innerHeight }; if (overflow.right \|\| this.menuPlacement.end) { this.menu.classList.add("dropdown-menu-end"); } if (overflow.bottom \|\|
2024-04-26 12:23:41 UTC	1369	IN	Data Raw: 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 6f 70 65 6e 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 66 6f 63 75 73 4e 65 78 74 4d 65 6e 75 49 74 65 6d 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 63 61 73 65 20 55 50 3a 0a 20 20 20 20 20 20 20 20 20 20 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 6f 70 65 6e 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 66 6f 63 75 73 50 72 65 76 69 6f 75 73 4d 65 6e 75 49 74 65 6d 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 63 61 73 65 20 45 53 43 41 50 45 3a 0a 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 64 69 73 6d 69 73 73 28 29 3b 0a 20 Data Ascii: (); this.open(); this.focusNextMenuItem(); break; case UP: e.preventDefault(); this.open(); this.focusPreviousMenuItem(); break; case ESCAPE: this.dismiss();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	49942	151.101.66.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:43 UTC	564	OUT	GET /messaging/venmo/v12/messaging-venmo-loader.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:43 UTC	851	IN	HTTP/1.1 200 OK Connection: close Content-Length: 14590 Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Etag: "65ef314d-38fe" Last-Modified: Mon, 11 Mar 2024 16:29:01 GMT Paypal-Debug-Id: 6901dd2f815a0 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000006901dd2f815a0-81f6b280f140b20f-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:43 GMT X-Served-By: cache-dfw-kdal2120077-DFW, cache-gnv1820028-GNV X-Cache: HIT, MISS X-Cache-Hits: 7, 0 X-Timer: S1714134223.425652,VS0,VE26 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:43 UTC	1379	IN	Data Raw: 2f 2a 20 65 73 6c 69 6e 74 2d 64 69 73 61 62 6c 65 20 6e 6f 2d 76 61 72 20 2a 2f 0a 2f 2a 2a 0a 20 2a 20 54 68 69 73 20 69 73 20 74 68 65 20 6c 61 75 6e 63 68 65 72 20 66 6f 72 20 6c 6f 67 67 65 64 2d 6f 75 74 20 63 68 61 74 73 20 69 74 20 73 68 6f 75 6c 64 20 72 65 61 64 20 63 68 61 74 20 73 63 72 69 70 74 20 61 6e 64 20 70 6f 6c 79 66 69 6c 6c 73 3a 0a 20 2a 20 2d 20 64 6f 20 6e 6f 74 20 77 72 69 74 65 20 65 73 36 0a 20 2a 20 2d 20 64 6f 20 6e 6f 74 20 61 64 64 20 64 65 70 65 6e 64 65 6e 63 69 65 73 0a 20 2a 20 2d 20 6b 65 65 70 20 6d 69 6e 69 6d 75 6d 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 0a 20 2a 20 53 75 70 70 6f 72 74 65 64 20 62 72 6f 77 73 65 72 73 20 49 45 31 31 2b 2c 20 43 68 72 6f 6d 65 2c 20 53 61 66 61 72 69 2c 20 46 69 72 65 66 6f 78 0a Data Ascii: /* eslint-disable no-var //* * This is the launcher for logged-out chats it should read chat script and polyfills: * - do not write es6 * - do not add dependencies * - keep minimum functionality * Supported browsers IE11+, Chrome, Safari, Firefox
2024-04-26 12:23:43 UTC	1379	IN	Data Raw: 72 0a 20 20 20 20 76 61 72 20 66 72 61 6d 65 53 74 61 74 75 73 20 3d 20 27 6d 6f 75 6e 74 69 6e 67 27 3b 0a 20 20 20 20 2f 2f 20 65 73 6c 69 6e 74 2d 64 69 73 61 62 6c 65 2d 6e 65 78 74 2d 6c 69 6e 65 20 6e 6f 2d 76 61 72 0a 20 20 20 20 76 61 72 20 63 68 61 74 4e 6f 64 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 6d 6f 75 6e 74 50 6f 69 6e 74 4e 61 6d 65 29 3b 0a 20 20 20 20 2f 2f 20 65 73 6c 69 6e 74 2d 64 69 73 61 62 6c 65 2d 6e 65 78 74 2d 6c 69 6e 65 0a 20 20 20 20 20 76 61 72 20 74 72 61 6e 73 69 74 69 6f 6e 56 61 6c 75 65 20 3d 20 27 62 6f 74 74 6f 6d 20 30 2e 33 73 20 65 61 73 65 20 30 73 2c 20 68 65 69 67 68 74 20 30 2e 33 73 20 65 61 73 65 20 30 73 2c 20 77 69 64 74 68 20 30 2e 33 73 20 65 61 73 65 20 30 73 Data Ascii: r var frameStatus = 'mounting'; // eslint-disable-next-line no-var var chatNode = document.getElementById(mountPointName); // eslint-disable-next-line var transitionValue = 'bottom 0.3s ease 0s, height 0.3s ease 0s, width 0.3s ease 0s
2024-04-26 12:23:43 UTC	1379	IN	Data Raw: 65 20 27 6d 65 73 73 61 67 69 6e 67 2d 73 68 6f 77 2d 70 72 6f 6d 70 74 27 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 68 6f 77 50 72 6f 6d 70 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 75 73 65 72 47 75 69 64 45 6c 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 72 65 71 75 65 73 74 5f 63 75 73 74 6f 6d 5f 66 69 65 6c 64 73 5f 31 35 30 30 30 30 34 34 34 33 31 32 32 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 75 73 65 72 47 75 69 64 45 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 73 65 72 47 75 69 64 45 6c 65 2e 76 61 6c 75 65 20 3d 20 65 76 74 2e 64 61 74 61 2e 75 73 65 72 47 75 69 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 Data Ascii: e 'messaging-show-prompt': { showPrompt(); const userGuidEle = document.getElementById('request_custom_fields_1500004443122'); if(userGuidEle) { userGuidEle.value = evt.data.userGuid; }
2024-04-26 12:23:43 UTC	1379	IN	Data Raw: 2d 69 64 27 2c 20 62 74 6f 61 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 20 69 64 3a 20 65 76 74 2e 64 61 74 61 2e 63 6f 6e 76 65 72 73 61 74 69 6f 6e 49 64 2c 20 74 69 6d 65 3a 20 6e 65 77 20 44 61 74 65 28 29 20 7d 29 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 73 74 6f 72 61 67 65 27 2c 20 65 20 3d 3e 20 7b 0a 20 20 20 20 20 20 69 66 28 65 2e 6b 65 79 20 3d 3d 3d 20 27 72 65 73 65 74 2d 63 68 61 74 2d 74 69 6d 65 72 27 29 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 64 61 74 61 20 3d 20 6c 6f 63 61 6c 53 74 6f 72 Data Ascii: -id', btoa(JSON.stringify({ id: evt.data.conversationId, time: new Date() }))); break; } } } }); window.addEventListener('storage', e => { if(e.key === 'reset-chat-timer') { const data = localStor
2024-04-26 12:23:43 UTC	1379	IN	Data Raw: 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 68 61 74 4e 6f 64 65 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 66 72 61 6d 65 53 74 61 74 75 73 20 3d 20 27 6d 6f 75 6e 74 65 64 27 3b 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 73 68 6f 77 43 68 61 74 28 29 20 7b 0a 20 20 20 20 20 20 69 66 28 66 72 61 6d 65 53 74 61 74 75 73 20 3d 3d 3d 20 27 6d 6f 75 6e 74 65 64 27 20 7c 7c 20 66 72 61 6d 65 53 74 61 74 75 73 20 3d 3d 3d 20 27 64 69 73 70 6c 61 79 69 6e 67 2d 70 72 6f 6d 70 74 27 29 20 7b 0a 20 20 20 20 20 20 20 20 66 72 61 6d 65 53 74 61 74 75 73 20 3d 20 27 64 69 73 70 6c 61 79 69 6e 67 27 3b 0a 20 20 20 20 20 20 20 20 63 68 61 74 4e 6f 64 65 2e 73 74 79 6c 65 2e 76 69 73 69 62 69 6c 69 74 79 20 3d 20 27 76 69 73 Data Ascii: document.body.appendChild(chatNode); } frameStatus = 'mounted'; function showChat() { if(frameStatus === 'mounted' \|\| frameStatus === 'displaying-prompt') { frameStatus = 'displaying'; chatNode.style.visibility = 'vis
2024-04-26 12:23:43 UTC	1379	IN	Data Raw: 65 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 20 3d 20 27 32 30 34 70 78 27 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 69 73 4d 6f 62 69 6c 65 56 69 65 77 28 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 6d 61 74 63 68 65 72 20 3d 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 27 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 27 29 3b 0a 20 20 20 20 20 20 69 66 28 6d 61 74 63 68 65 72 2e 6d 61 74 63 68 65 73 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 7d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 73 68 6f 77 46 61 62 28 29 20 7b 0a 20 20 20 20 20 20 69 66 28 66 72 61 6d 65 Data Ascii: e.style.height = '204px'; } } function isMobileView() { const matcher = window.matchMedia('(max-width: 767px)'); if(matcher.matches) { return true; } return false; } function showFab() { if(frame
2024-04-26 12:23:43 UTC	1379	IN	Data Raw: 43 68 61 74 28 29 20 7b 0a 20 20 20 20 20 20 69 66 28 66 72 61 6d 65 53 74 61 74 75 73 20 3d 3d 3d 20 27 6d 69 6e 69 6d 69 7a 65 64 27 29 20 7b 0a 20 20 20 20 20 20 20 20 66 72 61 6d 65 53 74 61 74 75 73 20 3d 20 27 64 69 73 70 6c 61 79 69 6e 67 27 3b 0a 20 20 20 20 20 20 20 20 63 68 61 74 4e 6f 64 65 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 20 3d 20 27 36 34 30 70 78 27 3b 0a 20 20 20 20 20 20 20 20 63 68 61 74 4e 6f 64 65 2e 73 74 79 6c 65 2e 77 69 64 74 68 20 3d 20 27 34 32 30 70 78 27 3b 0a 20 20 20 20 20 20 20 20 63 68 61 74 4e 6f 64 65 2e 73 74 79 6c 65 2e 72 69 67 68 74 20 3d 20 27 34 30 70 78 27 3b 0a 20 20 20 20 20 20 20 20 69 66 28 69 73 4d 6f 62 69 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 63 68 61 74 4e 6f 64 65 2e 73 74 79 6c 65 2e 77 69 Data Ascii: Chat() { if(frameStatus === 'minimized') { frameStatus = 'displaying'; chatNode.style.height = '640px'; chatNode.style.width = '420px'; chatNode.style.right = '40px'; if(isMobile) { chatNode.style.wi
2024-04-26 12:23:43 UTC	1379	IN	Data Raw: 20 20 20 20 63 68 61 74 4e 6f 64 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 6e 6f 6e 65 27 3b 0a 20 20 20 20 20 20 20 20 20 20 66 72 61 6d 65 53 74 61 74 75 73 20 3d 20 27 6d 6f 75 6e 74 65 64 27 3b 0a 20 20 20 20 20 20 20 20 7d 2e 62 69 6e 64 28 74 68 69 73 29 2c 20 32 39 30 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 62 65 66 6f 72 65 75 6e 6c 6f 61 64 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 69 66 28 66 72 61 6d 65 53 74 61 74 75 73 20 21 3d 3d 20 27 64 69 73 70 6c 61 79 69 6e 67 27 29 20 7b 0a 20 20 20 20 20 20 20 20 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 27 6d 65 73 73 61 67 69 6e 67 Data Ascii: chatNode.style.display = 'none'; frameStatus = 'mounted'; }.bind(this), 290); } } window.addEventListener('beforeunload', function() { if(frameStatus !== 'displaying') { localStorage.removeItem('messaging
2024-04-26 12:23:43 UTC	1379	IN	Data Raw: 73 70 6f 6e 73 65 27 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 65 66 61 75 6c 74 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 63 62 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 62 28 7b 7d 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 74 61 74 75 73 3a 20 78 68 72 2e 73 74 61 74 75 73 2c 0a 20 20 20 20 20 20 Data Ascii: sponse' }); } } break; } default: { if (typeof cb === 'function') { cb({}, { status: xhr.status,
2024-04-26 12:23:43 UTC	1379	IN	Data Raw: 27 3b 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 65 74 51 75 65 72 79 53 74 72 69 6e 67 50 61 72 61 6d 73 20 28 71 75 65 72 79 29 20 7b 0a 20 20 20 20 20 20 69 66 20 28 71 75 65 72 79 20 3d 3d 3d 20 27 27 29 20 72 65 74 75 72 6e 20 7b 7d 3b 0a 20 20 20 20 20 20 2f 2f 20 65 73 6c 69 6e 74 2d 64 69 73 61 62 6c 65 2d 6e 65 78 74 2d 6c 69 6e 65 20 6e 6f 2d 76 61 72 0a 20 20 20 20 20 20 76 61 72 20 70 61 72 61 6d 73 20 3d 20 7b 7d 3b 0a 20 20 20 20 20 20 2f 2f 20 65 73 6c 69 6e 74 2d 64 69 73 61 62 6c 65 2d 6e 65 78 74 2d 6c 69 6e 65 20 6e 6f 2d 76 61 72 0a 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 71 75 65 72 79 2e 6c 65 6e 67 74 68 3b 20 2b 2b 69 29 20 7b 0a 20 20 20 20 20 20 20 20 2f 2f 20 65 73 6c 69 6e 74 2d 64 69 Data Ascii: '; function getQueryStringParams (query) { if (query === '') return {}; // eslint-disable-next-line no-var var params = {}; // eslint-disable-next-line no-var for (var i = 0; i < query.length; ++i) { // eslint-di

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	49944	104.18.70.113	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:43 UTC	588	OUT	GET /auth/111e8e6e01b3952840fd6ff2ae791fb522c67b19/v2/host-without-iframe.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:44 UTC	1083	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 12:23:43 GMT Content-Type: application/javascript Content-Length: 3594 Connection: close x-amz-id-2: YNhqtucY7tJICC0PGzRwtoOei7z0j4KI8KbXbhaqEUA25tLSupEfBuwCW0wnE3qESDc+xRI4JQ0= x-amz-request-id: FRAXGHP6ZPRA1HG0 x-amz-replication-status: COMPLETED Last-Modified: Wed, 25 Oct 2023 18:53:30 GMT ETag: "35166401913bc433e702156b229abb6d" x-amz-server-side-encryption: AES256 x-amz-version-id: KSmUWZZPaK1vsWrmUQVn23dSj1b63R2s CF-Cache-Status: HIT Age: 2665 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x%2FF7ZjiwQqNCJXm98USTS14X36wsOYfSyW2uVvCW3%2F0NaJ4xBdMY6hMHm5WHZ8xCcg%2BvJWf8zUrgtj1HxQFcpCEMq8w5YW5BvkAH3G7MvJSTrmlHUNlGDx1WlcJ4vtWLbcczJ%2BM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 87a68bb3890d6dad-MIA
2024-04-26 12:23:44 UTC	286	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 74 3d 7b 37 38 3a 28 74 2c 65 2c 72 29 3d 3e 7b 76 61 72 20 6e 3d 72 28 34 32 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 21 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4d 69 73 73 69 6e 67 20 65 6c 6d 22 29 3b 76 61 72 20 72 3d 7b 7d 3b 72 65 74 75 72 6e 28 65 7c 7c 5b 5d 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 22 64 61 74 61 2d 22 2b 6e 28 65 29 2c 69 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 6f 29 3b 2f 5e 28 74 72 75 65 7c 66 61 6c 73 65 29 24 2f 2e 74 65 73 74 28 69 29 26 26 28 69 3d 22 74 72 75 65 22 3d 3d 3d 69 29 2c 2f 5e 5c 64 2b 24 2f 2e 74 65 73 74 28 69 29 26 26 28 69 3d 70 61 72 73 65 49 6e 74 28 69 2c Data Ascii: (()=>{var t={78:(t,e,r)=>{var n=r(427);t.exports=function(t,e){if(!t)throw new Error("Missing elm");var r={};return(e\|\|[]).forEach((function(e){var o="data-"+n(e),i=t.getAttribute(o);/^(true\|false)$/.test(i)&&(i="true"===i),/^\d+$/.test(i)&&(i=parseInt(i,
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: 34 32 37 3a 74 3d 3e 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 28 5b 41 2d 5a 5d 29 2f 67 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 2d 22 2e 63 6f 6e 63 61 74 28 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 29 29 7d 7d 2c 34 36 32 3a 74 3d 3e 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 28 5b 41 2d 5a 5d 29 2f 67 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 5f 22 2e 63 6f 6e 63 61 74 28 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 29 29 7d 7d 2c 35 34 3a 28 74 2c 65 2c 72 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 Data Ascii: 427:t=>{t.exports=function(t){return(t\|\|"").replace(/([A-Z])/g,(function(t){return"-".concat(t.toLowerCase())}))}},462:t=>{t.exports=function(t){return(t\|\|"").replace(/([A-Z])/g,(function(t){return"_".concat(t.toLowerCase())}))}},54:(t,e,r)=>{function n(t
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 65 3d 5b 5d 2c 72 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 74 75 72 6e 54 6f 29 2e 6d 61 74 63 68 28 2f 28 68 74 74 70 3a 5c 2f 5c 2f 7c 68 74 74 70 73 3a 5c 2f 5c 2f 29 2b 28 2e 2a 29 28 5c 2f 61 64 6d 69 6e 7c 5c 2f 61 67 65 6e 74 7c 5c 2f 63 68 61 74 7c 5c 2f 63 6f 6e 6e 65 63 74 7c 5c 2f 65 78 70 6c 6f 72 65 7c 5c 2f 73 65 6c 6c 7c 6f 61 75 74 68 5c 2f 29 2f 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 69 64 50 61 72 61 6d 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 74 2e 6f 70 74 69 6f 6e 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 72 29 26 26 65 2e 70 75 73 68 28 22 22 2e 63 6f 6e 63 61 Data Ascii: unction(){var t=this,e=[],r=decodeURIComponent(this.options.returnTo).match(/(http:\/\/\|https:\/\/)+(.*)(\/admin\|\/agent\|\/chat\|\/connect\|\/explore\|\/sell\|oauth\/)/);return this.validParams.forEach((function(r){t.options.hasOwnProperty(r)&&e.push("".conca
2024-04-26 12:23:44 UTC	570	IN	Data Raw: 74 69 6f 6e 22 5d 2c 74 68 69 73 2e 65 6c 6d 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 5b 73 72 63 2a 3d 22 2f 61 75 74 68 2f 76 32 22 5d 27 29 2c 21 74 68 69 73 2e 65 6c 6d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 73 63 72 69 70 74 20 74 61 67 20 66 6f 72 20 7a 65 6e 64 65 73 6b 5f 61 75 74 68 22 29 3b 69 66 28 74 68 69 73 2e 64 65 63 6c 61 72 61 74 69 76 65 4f 70 74 69 6f 6e 73 3d 69 28 74 68 69 73 2e 65 6c 6d 2c 74 68 69 73 2e 4b 45 59 53 29 2c 21 74 68 69 73 2e 64 65 63 6c 61 72 61 74 69 76 65 4f 70 74 69 6f 6e 73 2e 61 75 74 68 44 6f 6d 61 69 6e 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 65 6c Data Ascii: tion"],this.elm=document.currentScript\|\|document.querySelector('[src*="/auth/v2"]'),!this.elm)throw new Error("Could not find script tag for zendesk_auth");if(this.declarativeOptions=i(this.elm,this.KEYS),!this.declarativeOptions.authDomain){var t=this.el

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	49946	151.101.1.35	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:43 UTC	1692	OUT	GET /ts?v=1.8.16&t=1714134220066&g=-120&tenant_name=venmo&bchn=venmohelp&comp=zendeskguide&ccpg=US&page_template=new_request_page&pgrp=main%3Aprivacy%3Apolicy&rsta=English%20(US)&lgin=out&page=main%3Aprivacy%3Apolicy%3Accpa&displaypage=venmo%3Ahelp%3Anew_request_page&ppage=privacy_banner&bannertype=cookiebanner&flag=ccpa&bannerversion=v4&bannersource=ConsentNodeServ&xe=108814&xt=142081&eligibility_reason=true&cookie_disabled=false&tenant_code=venmo&event_name=venmo_cookie_banner_shown&e=ac HTTP/1.1 Host: t.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://help.venmo.com/hc/en-us/requests/new?ticket_form_id=624807 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; KHcl0EuY7AKSMgfvHl7J5E7hPtK=H5vOX4Xx9E6rPaNsW1umPOEju90KfJTschjWY_e1f92eqJS1o6EoZAYAvBErjHwsTvfIlecHLC-YGp_e; l7_az=dcg16.slc; sc_f=CEKPNHQG08AWc-eXVA4YPw93eSBWwxF4jXwznQNxJ_4VWbeV7FgS4yQ2I1Wt5sfyajVP4H77tpr0Ipov674wteSk7U1-EXiXl3h4f0; x-pp-s=eyJ0IjoiMTcxNDEzNDIyMDUxNyIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742220%26vteXpYrS%3D1714136020%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew
2024-04-26 12:23:44 UTC	1233	IN	HTTP/1.1 200 OK Connection: close CORRELATION-ID: 8deb8c1cb2813 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Fri, 26 Apr 2024 12:23:44 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: 8deb8c1cb2813 Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1808742224%26vteXpYrS%3D1714136024%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew;Expires=Mon, 26 Apr 2027 12:23:44 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088;Expires=Mon, 26 Apr 2027 12:23:44 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-00000000000000000008deb8c1cb2813-e0a33b6f2b18f32e-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Fri, 26 Apr 2024 12:23:44 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-iad-kcgs7200150-IAD, cache-gnv1820029-GNV X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1714134224.066550,VS0,VE100 vary: Accept-Encoding Server-Timing: content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-04-26 12:23:44 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-04-26 12:23:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-04-26 12:23:44 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	49948	104.18.72.113	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:43 UTC	609	OUT	GET /theme_assets/802785/43065093092a48698aa577eafb2107a333c91b30.ttf HTTP/1.1 Host: theme.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://help.venmo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://p19.zdassets.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:44 UTC	1232	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 12:23:44 GMT Content-Type: application/x-font-ttf Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: HEAD, GET Access-Control-Max-Age: 86400 x-amz-replication-status: COMPLETED Last-Modified: Wed, 21 Oct 2020 21:57:03 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: g5C51XqBuZHfn1Y.haFiTUWf45cPfkPN Cache-Control: public, max-age=86400 ETag: W/"8c519f30b3ec4d8c2de3964ca2bb3a58" Vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 b6efbf009f233af7a7aa7da68e6e2848.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: HZwAPzjFvkzslZJGzVJXVcIySd5VL9wVMHjyscUia10gHPKrazVf1g== Age: 70382 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iM%2FAjKS6hA7Px3qVP3hphWIVfck8f6Ui%2F3foN%2FqBn12Ik81GoAfSNcqRjq9T0XAnXBCu5cLg0ZjkhP5tpWgpRzXKwADQH6cB1460ZGZAD7YXRXpkmsyAN7vJ9gtPBvpHeIMUMQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Server: cloudflare CF-RAY: 87a68bb4bbea034d-MIA
2024-04-26 12:23:44 UTC	137	IN	Data Raw: 37 61 64 31 0d 0a 00 01 00 00 00 0f 00 80 00 03 00 70 46 46 54 4d 86 3b 36 dc 00 01 71 34 00 00 00 1c 47 44 45 46 10 6d 12 28 00 00 f4 40 00 00 00 5a 47 50 4f 53 54 07 66 62 00 01 02 b4 00 00 6e 80 47 53 55 42 61 8f 32 20 00 00 f4 9c 00 00 0e 18 4f 53 2f 32 29 24 2b 1e 00 00 01 78 00 00 00 60 63 6d 61 70 65 4d 4b 04 00 00 0b 40 00 00 04 2e 67 61 73 70 ff ff 00 03 00 00 f4 38 00 00 00 08 67 6c 79 66 d4 4b fe Data Ascii: 7ad1pFFTM;6q4GDEFm(@ZGPOSTfbnGSUBa2 OS/2)$+x`cmapeMK@.gasp8glyfK
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: ab 00 00 14 34 00 00 c7 d8 68 65 61 64 0e 94 7c 54 00 00 00 fc 00 00 00 36 68 68 65 61 07 36 05 7e 00 00 01 34 00 00 00 24 68 6d 74 78 ec c2 44 ae 00 00 01 d8 00 00 09 68 6c 6f 63 61 d3 a5 05 9a 00 00 0f 70 00 00 04 c4 6d 61 78 70 02 a9 00 51 00 00 01 58 00 00 00 20 6e 61 6d 65 a7 7d 81 9a 00 00 dc 0c 00 00 05 c7 70 6f 73 74 98 9f 3c 46 00 00 e1 d4 00 00 12 63 00 01 00 00 00 01 00 00 92 15 85 1d 5f 0f 3c f5 00 0b 03 e8 00 00 00 00 d5 34 ce 3b 00 00 00 00 d7 13 6a 94 fe b1 fe fd 04 7c 03 a3 00 00 00 08 00 02 00 00 00 00 00 00 00 01 00 00 03 11 ff 29 00 f5 04 aa fe b1 ff 57 04 7c 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 53 00 01 00 00 02 61 00 4e 00 06 00 00 00 00 00 02 00 00 00 01 00 01 00 00 00 40 00 00 00 00 00 00 00 03 02 3f 01 f4 00 05 00 00 Data Ascii: 4head\|T6hhea6~4$hmtxDhlocapmaxpQX name}post<Fc_<4;j\|)W\|SaN@?
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: 00 d6 00 3c 02 35 00 43 01 4c 00 3c 02 58 ff fc 01 1c ff fb 02 de 00 43 02 17 00 3c 02 de 00 43 02 17 00 3c 02 de 00 43 02 17 00 3c 02 36 00 00 02 de 00 43 02 17 00 3c 03 2a 00 30 02 35 00 21 03 2a 00 30 02 35 00 21 03 2a 00 30 02 35 00 21 04 aa 00 30 03 aa 00 21 02 6e 00 43 01 c0 00 3c 02 6e 00 43 01 c0 00 2e 02 6e 00 43 01 c0 00 3c 02 6b 00 1b 01 d3 00 1b 02 6b 00 1b 01 d3 00 1b 02 6b 00 1b 01 d3 00 1b 02 6b 00 1b 01 d3 00 1b 02 54 00 14 01 e7 00 11 02 54 00 14 01 e7 00 11 02 54 00 14 01 e7 00 11 02 9e 00 3c 02 17 00 3b 02 9e 00 3c 02 17 00 3b 02 9e 00 3c 02 17 00 3b 02 9e 00 3c 02 17 00 3b 02 9e 00 3c 02 17 00 3b 02 9e 00 3c 02 17 00 3b 03 85 00 0d 02 e2 00 17 02 90 00 0d 02 21 00 17 02 90 00 0d 02 75 00 28 01 cc 00 25 02 75 00 28 01 cc 00 25 02 75 00 Data Ascii: <5CL<XC<C<C<6C<05!05!*05!0!nC<nC.nC<kkkkTTT<;<;<;<;<;<;!u(%u(%u
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: b8 fe f5 ff 87 ff 43 ff 70 00 00 00 00 00 03 00 00 00 03 00 00 00 1c 00 01 00 00 00 00 02 24 00 03 00 01 00 00 00 1c 00 04 02 08 00 00 00 7e 00 40 00 05 00 3e 00 0d 00 7e 01 7f 01 92 01 b6 01 ff 02 1b 02 37 02 bb 02 c7 02 dd 03 04 03 08 03 0c 03 13 03 28 03 94 03 a9 03 bc 03 c0 1e 85 1e 8b 1e 9e 1e f3 20 14 20 1a 20 1e 20 22 20 26 20 30 20 3a 20 44 20 70 20 79 20 89 20 ac 21 22 21 54 21 5f 21 93 21 99 21 aa 21 b4 22 02 22 06 22 0f 22 12 22 1a 22 1e 22 2b 22 48 22 60 22 65 24 68 24 cf 24 ea 25 8a 25 cb 25 d0 26 3a 27 13 2b 11 ff ff 00 00 00 0d 00 20 00 a0 01 92 01 b5 01 fc 02 18 02 37 02 bb 02 c6 02 d8 03 00 03 06 03 0a 03 12 03 26 03 94 03 a9 03 bc 03 c0 1e 80 1e 8a 1e 9e 1e f2 20 13 20 18 20 1c 20 20 20 26 20 30 20 39 20 44 20 70 20 74 20 80 20 ac 21 22 Data Ascii: Cp$~@>~7( " & 0 : D p y !"!T!_!!!!"""""""+"H"`"e$h$$%%%&:'+ 7& & 0 9 D p t !"
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: 14 38 14 4c 14 60 14 78 14 a2 14 cc 14 fc 15 2a 15 58 15 8a 15 ca 16 10 16 2a 16 68 16 8e 16 b4 16 de 17 1a 17 38 17 58 17 a0 17 de 18 1c 18 5e 18 ae 18 fe 19 50 19 a8 19 f0 1a 24 1a 58 1a 90 1a d4 1a e8 1a fc 1b 14 1b 3c 1b 7a 1b b0 1b da 1c 06 1c 36 1c 74 1c b0 1c de 1d 1a 1d 40 1d 66 1d 90 1d c6 1d fa 1e 24 1e 6a 1e 8a 1e c8 1e f4 1f 3e 1f 6a 1f b2 1f e4 20 14 20 4a 20 7e 20 b6 20 ee 21 24 21 58 21 82 21 b4 21 de 22 10 22 2e 22 60 22 8a 22 ca 22 ee 23 2c 23 54 23 94 23 b6 23 ee 24 28 24 6c 24 ae 24 fa 25 36 25 80 25 c8 26 18 26 3a 26 62 26 88 26 ae 26 d6 26 fc 27 10 27 22 27 42 27 64 27 80 27 ae 27 c8 27 d4 27 fc 28 3e 28 6c 28 92 28 c4 28 f2 29 0a 29 20 29 34 29 5a 29 7e 29 94 29 a8 29 c8 29 e4 2a 00 2a 1a 2a 38 2a 5c 2a 8a 2a be 2a e0 2b 08 2b 2c 2b Data Ascii: 8L`xXh8X^P$X<z6t@f$j>j J ~ !$!X!!!""."`"""#,#T###$($l$$%6%%&&:&b&&&&''"'B'd'''''(>(l((()) )4)Z)~))))**8\***++,+
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: f5 21 a7 4a 64 0b 48 4b 0f 68 4e 22 32 47 0e ca 24 a9 5a 76 0b 49 4b 0e 85 01 20 c4 08 32 24 28 32 e9 53 1b ea 0a 41 00 00 00 05 00 2c ff f9 02 af 02 c3 00 09 00 0d 00 19 00 21 00 29 00 00 12 32 16 15 14 06 22 26 35 34 13 01 33 01 13 32 36 35 34 26 23 22 06 15 14 16 04 32 16 14 06 22 26 34 16 32 36 34 26 22 06 14 82 78 57 56 7a 55 22 01 eb 52 fe 15 1e 21 2d 2d 21 20 2d 2d 01 42 7a 55 55 7a 55 72 40 2e 2e 40 2d 02 c3 56 3b 3d 56 56 3d 3c fd 94 02 ba fd 46 01 e0 2e 22 20 2e 2e 20 22 2e c5 55 7a 55 55 7a 8c 2e 42 2e 2e 42 00 00 00 03 00 21 ff f1 02 99 02 cb 00 21 00 2b 00 33 00 00 13 26 35 34 37 36 33 32 17 16 15 14 06 07 17 36 35 34 27 37 16 15 14 07 17 23 27 06 23 22 26 35 34 36 37 36 35 34 26 23 22 06 15 14 13 32 37 03 06 15 14 16 c8 1e 2c 2c 44 3f 2a 2a Data Ascii: !JdHKhN"2G$ZvIK 2$(2SA,!)2"&5432654&#"2"&4264&"xWVzU"R!--! --BzUUzUr@..@-V;=VV=<F." .. ".UzUUz.B..B!!+3&547632654'7#'#"&5467654&#"27,,D?**
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: a9 a6 a3 a4 74 00 00 00 00 03 00 2c ff f1 02 3e 02 cb 00 14 00 1f 00 2b 00 00 13 26 35 34 36 32 16 15 14 07 1e 01 15 14 06 23 22 26 35 34 3e 01 32 36 35 34 26 23 22 06 15 14 13 32 36 35 34 26 23 22 06 15 14 16 a0 51 82 ca 83 53 36 3d 93 75 76 94 3d 8f 7c 4b 4c 3d 3e 4b 89 4b 5a 5c 49 4b 5c 5b 01 7c 32 5b 55 6d 6d 55 5c 32 1b 5b 39 61 7a 78 63 39 5c 41 39 2f 31 3d 3d 31 2f fe 6d 48 3c 3a 49 49 3a 3c 48 00 00 02 00 2c ff f1 02 34 02 cb 00 17 00 23 00 00 05 22 26 27 37 06 16 33 32 36 37 06 23 22 26 35 34 36 33 32 16 15 14 06 03 22 06 15 14 16 33 32 36 35 34 26 01 23 66 85 03 61 01 4c 40 4b 5b 09 44 73 63 8a 96 69 78 91 8f 7c 42 5c 59 45 40 5a 57 0f 78 64 10 43 4e 79 78 52 88 65 67 8c ab a1 c0 ce 02 7f 59 41 40 57 56 43 3e 5a 00 02 00 21 ff f8 00 a2 01 e9 00 Data Ascii: t,>+&5462#"&54>2654&#"2654&#"QS6=uv=\|KL=>KKZ\IK\[\|2[UmmU\2[9azxc9\A9/1==1/mH<:II:<H,4#"&'73267#"&54632"32654&#faL@K[Dscix\|B\YE@ZWxdCNyxRegYA@WVC>Z!
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: 11 43 5f 01 81 5f 5f fe 7f 02 bc fe d8 01 28 fd 44 01 38 fe c8 00 00 00 01 00 43 00 00 00 a2 02 bc 00 03 00 00 33 11 33 11 43 5f 02 bc fd 44 00 01 00 14 ff f1 02 0d 02 bc 00 14 00 00 13 37 06 15 14 17 16 33 32 36 35 11 33 11 14 06 23 22 26 35 34 18 5d 04 2f 2f 44 46 55 5f 8b 6f 6c 93 01 25 0d 19 20 5a 2a 29 58 4a 01 ce fe 33 71 8d 81 78 23 00 00 01 00 43 ff ff 02 78 02 bc 00 0b 00 00 17 11 33 11 01 33 09 01 23 01 07 15 43 5d 01 55 82 fe c3 01 3e 79 fe f6 55 01 02 bd fe be 01 42 fe d3 fe 70 01 4e 50 fe 00 00 00 01 00 43 00 00 02 21 02 bc 00 05 00 00 33 11 33 11 21 15 43 5f 01 7f 02 bc fd 9f 5b 00 00 00 00 01 00 43 00 00 03 29 02 bc 00 0c 00 00 33 11 33 1b 01 33 11 23 11 03 23 0b 01 43 77 fc fb 78 5f e2 65 df 02 02 bc fd b0 02 50 fd 44 02 13 fd ed 02 0d fd Data Ascii: C___(D8C33C_D732653#"&54]//DFU_ol% Z*)XJ3qx#Cx33#C]U>yUBpNPC!33!C_[C)333##Cwx_ePD
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: 35 06 23 22 26 35 34 36 17 32 36 3d 01 07 0e 01 15 14 16 e2 78 37 64 38 01 5a 04 6f 56 5e 67 59 2d 5d 4e 57 5a 5d 34 43 6a 34 36 32 01 22 14 14 27 2f 36 2e 0e 07 58 65 5c 51 fe bb 3c 4b 55 3b 44 4e cc 4a 3c 1c 11 0a 23 20 1f 25 00 00 00 02 00 3c ff f1 02 25 02 bc 00 0d 00 19 00 00 33 11 33 11 36 33 32 16 14 06 23 22 27 15 36 32 36 35 34 27 26 22 07 06 15 14 3c 5e 3e 6a 62 81 81 62 6a 3e 54 84 54 2a 2a 84 2a 2a 02 bc fe e3 52 94 d8 94 51 42 4d 5c 48 47 2e 2f 2f 2e 47 48 00 01 00 21 ff f1 01 fb 01 f1 00 18 00 00 01 32 16 17 07 2e 01 23 22 06 15 14 16 33 32 36 37 17 0e 01 23 22 26 34 36 01 11 51 71 10 57 07 42 32 3f 52 53 43 37 4f 05 5a 09 81 59 6d 8a 86 01 f1 57 4b 1d 2d 37 5c 42 4d 5f 43 36 16 52 6c 90 de 92 00 00 00 00 02 00 21 ff f1 02 0b 02 bc 00 0d 00 Data Ascii: 5#"&54626=x7d8ZoV^gY-]NWZ]4Cj462"'/6.Xe\Q<KU;DNJ<# %<%33632#"'62654'&"<^>jbbj>TT****RQBM\HG.//.GH!2.#"3267#"&46QqWB2?RSC7OZYmWK-7\BM_C6Rl!
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: 36 33 32 16 17 07 2e 01 23 22 06 15 14 16 17 16 15 14 07 06 23 22 27 26 1b 5a 08 44 34 2f 37 70 af 65 4c 43 65 10 53 09 36 26 25 2d 29 33 c2 37 37 56 57 3a 3c ab 11 35 3e 25 1e 38 0c 12 84 3c 4f 50 42 1a 28 2c 1b 17 1a 1c 05 14 88 48 2b 2c 33 36 00 00 00 00 01 00 11 ff f1 01 d1 02 72 00 17 00 00 13 35 33 35 33 15 33 15 23 15 14 16 33 32 36 27 17 16 06 23 22 26 3d 01 11 58 5f f4 f4 2d 2a 29 2d 03 5b 04 62 4d 56 63 01 8e 54 90 90 54 e8 2d 31 3d 33 09 55 69 62 55 e6 00 00 01 00 3b ff f1 01 db 01 e2 00 11 00 00 01 11 23 35 06 23 22 26 35 11 33 11 14 33 32 36 35 11 01 db 5f 38 61 4f 59 5f 66 39 43 01 e2 fe 1e 38 47 63 56 01 38 fe db 76 51 46 01 04 00 01 00 11 00 00 01 f8 01 e2 00 06 00 00 13 33 1b 01 33 03 23 11 64 90 8f 64 c1 64 01 e2 fe 9b 01 65 fe 1e 00 01 Data Ascii: 632.#"#"'&ZD4/7peLCeS6&%-)377VW:<5>%8<OPB(,H+,36r53533#326'#"&=X_-*)-[bMVcTT-1=3UibU;#5#"&533265_8aOY_f9C8GcV8vQF33#ddde

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	49949	104.18.72.113	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:43 UTC	609	OUT	GET /theme_assets/802785/f408530a5bc2fca90f5f8f7befc0c3b563556d2d.ttf HTTP/1.1 Host: theme.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://help.venmo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://p19.zdassets.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:44 UTC	1238	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 12:23:44 GMT Content-Type: application/x-font-ttf Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: HEAD, GET Access-Control-Max-Age: 86400 x-amz-replication-status: COMPLETED Last-Modified: Wed, 02 Dec 2020 22:43:34 GMT ETag: W/"c11532d8af656ed3d4d0d6d1a366d676" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 x-amz-version-id: JFWx2vYDPxM8XvMpC9e4zoHxQv0kNHjg Vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 b3ca1a7752327aa687a6611c7f28951e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: Bu4WAhaq2opvbYLAtKb4AlWVwLk2RhiDanOsMWyy2_Hnk9CHEzecUw== Age: 86084 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sdd%2BE5SjxiUvzrZgD3cqx%2Fu38%2BWrLYP80EgcuGc9fYC6adZvb8CLlrim%2FPUDr0sZlbTW3fUrKgMhyj5XiW1ZEvvI4Y%2BCHlbpYyUC6u9991jsj1uuSSFElTLvIjX7snq%2Flz1iDw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Server: cloudflare CF-RAY: 87a68bb53dbcdadd-MIA
2024-04-26 12:23:44 UTC	131	IN	Data Raw: 37 61 63 62 0d 0a 00 01 00 00 00 0f 00 80 00 03 00 70 46 46 54 4d 87 2c e1 f3 00 01 50 90 00 00 00 1c 47 44 45 46 04 01 06 06 00 00 d1 5c 00 00 00 2a 47 50 4f 53 53 92 ab 27 00 00 d6 88 00 00 7a 08 47 53 55 42 bd 18 a3 7a 00 00 d1 88 00 00 05 00 4f 53 2f 32 90 d2 61 14 00 00 01 78 00 00 00 60 63 6d 61 70 92 8b bb c1 00 00 0a ac 00 00 04 16 67 61 73 70 ff ff 00 03 00 00 d1 54 00 00 00 08 67 Data Ascii: 7acbpFFTM,PGDEF\*GPOSS'zGSUBzOS/2ax`cmapgaspTg
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: 6c 79 66 9d b3 9d f8 00 00 13 30 00 00 a7 c0 68 65 61 64 10 4f 27 95 00 00 00 fc 00 00 00 36 68 68 65 61 08 0d 05 82 00 00 01 34 00 00 00 24 68 6d 74 78 fa 7e 73 50 00 00 01 d8 00 00 08 d4 6c 6f 63 61 ec 32 15 94 00 00 0e c4 00 00 04 6c 6d 61 78 70 02 7e 00 5b 00 00 01 58 00 00 00 20 6e 61 6d 65 84 de 0a 01 00 00 ba f0 00 00 07 0e 70 6f 73 74 a2 e2 e7 42 00 00 c2 00 00 00 0f 52 00 01 00 00 00 01 00 00 15 91 2d df 5f 0f 3c f5 00 0b 03 e8 00 00 00 00 d6 56 f5 dc 00 00 00 00 d6 e2 ee 0a ff 38 ff 23 04 be 03 a7 00 00 00 08 00 02 00 00 00 00 00 00 00 01 00 00 03 20 ff 38 00 f4 04 dc ff 38 ff 38 04 be 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 35 00 01 00 00 02 35 00 58 00 07 00 00 00 00 00 02 00 00 00 01 00 01 00 00 00 40 00 00 00 00 00 00 00 03 02 5e Data Ascii: lyf0headO'6hhea4$hmtx~sPloca2lmaxp~[X namepostBR-_<V8# 88855X@^
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: 00 5d 01 4b 00 53 02 4e 00 5d 01 70 00 53 02 5f 00 23 01 13 00 1e 02 f4 00 5d 02 3c 00 53 02 f4 00 5d 02 3c 00 53 02 f4 00 5d 02 3c 00 53 02 d0 00 11 02 f4 00 5d 02 3c 00 53 02 fe 00 34 02 3a 00 31 02 fe 00 34 02 3a 00 31 02 fe 00 34 02 3a 00 31 04 9c 00 34 03 b7 00 31 02 bb 00 5d 01 71 00 53 02 bb 00 5d 01 71 00 49 02 bb 00 5d 01 71 00 2e 02 8b 00 32 02 03 00 34 02 8b 00 32 02 03 00 34 02 8b 00 32 02 03 00 34 02 8b 00 32 02 03 00 34 02 79 00 1e 01 6d 00 1d 02 79 00 1e 01 6d 00 1d 02 79 00 1e 01 77 00 22 02 be 00 4d 02 34 00 4d 02 be 00 4d 02 34 00 4d 02 be 00 4d 02 34 00 4d 02 be 00 4d 02 34 00 4d 02 be 00 4d 02 34 00 4d 02 be 00 4d 02 34 00 4d 03 f0 00 1f 02 fc 00 1e 02 7c 00 03 01 fb 00 19 02 7c 00 03 02 6f 00 28 01 e6 00 2c 02 6f 00 28 01 e6 00 2c 02 Data Ascii: ]KSN]pS_#]<S]<S]<S]<S4:14:14:141]qS]qI]q.24242424ymymyw"M4MM4MM4MM4MM4MM4M\|\|o(,o(,
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: a1 25 b3 25 b7 25 bd 25 c1 25 cb 25 d5 25 ea 26 91 27 93 29 b6 2b 19 2b 2f f6 c3 fb 02 ff ff 00 00 00 20 00 a0 01 92 01 b5 01 fa 02 18 02 37 02 c6 02 d8 03 c0 1e 80 1e 8a 1e f2 20 13 20 18 20 1c 20 20 20 26 20 30 20 39 20 44 20 70 20 74 20 7d 20 80 20 ac 21 22 21 26 21 53 21 90 22 02 22 06 22 0f 22 11 22 1a 22 1e 22 2b 22 48 22 60 22 64 22 95 22 99 22 a0 24 60 25 a0 25 b2 25 b6 25 bc 25 c0 25 ca 25 cf 25 e7 26 90 27 8a 29 b6 2b 12 2b 2c f6 c3 fb 01 ff ff ff e3 ff c2 ff af ff 8d ff 4a ff 32 ff 17 fe 89 fe 79 fd 97 e2 d8 e2 d4 e2 6e e1 4f e1 4c e1 4b e1 4a e1 47 e1 3e e1 36 e1 2d e1 02 e0 ff e0 fc e0 fb e0 d9 e0 64 e0 61 e0 35 e0 04 df 96 df 93 df 8b df 8a df 83 df 80 df 74 df 58 df 41 df 3e df 0f df 0e df 08 dd 49 dc 13 dc 03 dc 01 db fd db fb db f3 db f0 Data Ascii: %%%%%%%&')++/ 7 & 0 9 D p t } !"!&!S!"""""""+"H"`"d"""$`%%%%%%%%&')++,J2ynOLKJG>6-da5tXA>I
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: 21 4c 21 80 21 bc 21 f8 22 3c 22 5e 22 88 22 b0 22 d6 22 f8 23 1a 23 2e 23 42 23 60 23 7e 23 9c 23 c0 23 d2 23 e0 24 02 24 2c 24 52 24 74 24 9c 24 c2 24 da 24 f0 25 04 25 20 25 3a 25 50 25 64 25 7a 25 8c 25 a6 25 bc 25 da 25 fe 26 24 26 4e 26 70 26 98 26 c2 26 e6 27 0e 27 36 27 5c 27 8e 27 bc 27 ea 28 14 28 44 28 8a 28 b2 28 d4 29 02 29 2c 29 56 29 7c 29 bc 29 f6 2a 3a 2a 78 2a cc 2b 1a 2b 5e 2b 9c 2b c8 2c 04 2c 20 2c 46 2c 60 2c 86 2c b6 2c e8 2d 0c 2d 32 2d 60 2d 90 2d c4 2d fa 2e 24 2e 4e 2e 7e 2e ac 2e d2 2e fa 2f 1c 2f 48 2f 6a 2f 88 2f a6 2f c4 2f e2 30 04 30 26 30 52 30 70 30 8e 30 c8 31 1e 31 4a 31 a4 31 e6 32 26 32 6c 32 ac 32 cc 32 fa 33 12 33 24 33 36 33 4e 33 5a 33 78 33 90 33 ac 33 c0 33 d8 33 fa 34 1e 34 40 34 64 34 8c 34 b4 34 d6 34 f4 35 Data Ascii: !L!!!"<"^""""##.#B#`#~####$$,$R$t$$$$%% %:%P%d%z%%%%%&$&N&p&&&''6'\'''((D((()),)V)\|)):x*++^++,, ,F,`,,,--2-`---.$.N.~...//H/j////00&0R0p0011J112&2l22233$363N3Z3x3333344@4d44445
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: b6 00 03 00 00 13 07 23 27 96 0f 3c 0f 02 b6 ec ec 00 00 00 01 00 3c ff 9b 01 1b 02 c7 00 0a 00 00 13 16 17 23 2e 01 34 36 37 33 06 87 04 90 50 41 4e 4e 41 50 90 01 31 d9 bd 57 d6 d2 d6 57 bd 00 00 00 00 01 00 14 ff 9b 00 f3 02 c7 00 0a 00 00 13 26 27 33 1e 01 14 06 07 23 36 a8 04 90 50 41 4e 4e 41 50 90 01 31 d9 bd 57 d6 d2 d6 57 bd 00 00 00 00 01 00 32 01 70 01 88 02 b6 00 0e 00 00 13 27 37 27 37 17 27 33 07 37 17 07 17 07 27 92 32 50 7e 13 7c 02 3e 04 7c 13 7e 50 32 4b 01 70 24 69 26 3b 2c 84 84 2c 3b 26 69 24 6c 00 00 01 00 5c 00 59 02 2e 02 2b 00 0b 00 00 13 35 33 35 33 15 33 15 23 15 23 35 5c c6 45 c7 c7 45 01 20 45 c6 c6 45 c7 c7 00 01 00 3b ff 6a 00 bb 00 6b 00 0a 00 00 37 15 14 06 23 35 32 3d 01 23 35 bb 43 3d 47 32 6b 85 3c 40 34 43 1f 6b 00 00 Data Ascii: #'<<#.4673PANNAP1WW&'3#6PANNAP1WW2p'7'7'37'2P~\|>\|~P2Kp$i&;,,;&i$l\Y.+53533##5\EE EE;jk7#52=#5C=G2k<@4Ck
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: 00 00 01 14 0e 03 1d 01 23 35 34 3e 03 35 34 26 23 22 06 07 23 3e 01 33 32 16 01 35 33 15 01 c5 27 38 38 27 44 25 35 35 25 47 39 3e 4b 03 4f 05 71 65 5a 74 fe eb 6b 02 0d 2d 45 2a 26 32 20 11 11 2c 44 29 26 34 21 2d 41 46 3b 5b 6c 67 fd a6 6b 6b 00 02 00 3c ff 5c 03 6f 02 9a 00 2e 00 37 00 00 25 22 26 35 34 36 33 32 17 35 33 11 14 33 32 36 35 34 26 20 06 15 14 16 33 32 37 15 06 23 22 2e 01 35 34 36 33 32 16 15 14 06 23 22 26 27 06 27 32 36 34 26 22 06 14 16 01 c1 55 73 73 53 67 32 43 26 32 41 b7 fe c6 c7 c5 97 56 49 49 57 7c be 61 f0 b4 b6 d9 66 48 2a 37 06 35 56 43 4a 4a 86 49 4a 0e 7c 6c 6b 7c 4a 42 fe ad 39 7a 63 86 b8 d4 9c 9b c8 19 39 15 71 b8 6e ba ed d8 99 82 99 27 24 4b 3e 5e 98 5d 5d 98 5e 00 00 00 02 00 1b 00 00 02 b0 02 b6 00 07 00 0a 00 00 21 Data Ascii: #54>54&#"#>3253'88'D%55%G9>KOqeZtk-E&2 ,D)&4!-AF;[lgkk<\o.7%"&546325332654& 327#".54632#"&''264&"UssSg2C&2AVIIW\|afH75VCJJIJ\|lk\|JB9zc9qn'$K>^]]^!
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: 4d 46 38 51 17 2d 11 5b 48 54 6b 71 5e 44 45 43 36 52 16 2d 11 5c 48 57 6c 00 01 00 1e 00 00 02 5b 02 b6 00 07 00 00 13 35 21 15 23 11 23 11 1e 02 3d f6 51 02 6c 4a 4a fd 94 02 6c 00 00 01 00 4d ff f5 02 71 02 b6 00 0f 00 00 04 22 26 35 11 33 11 14 16 32 36 35 11 33 11 14 01 da f6 97 51 68 b2 68 51 0b 8e 86 01 ad fe 53 60 6c 6c 60 01 ad fe 53 86 00 00 01 00 19 00 00 02 7e 02 b6 00 06 00 00 1b 02 33 01 23 03 6f dc e0 53 fe fe 65 fe 02 b6 fd 9e 02 62 fd 4a 02 b6 00 00 00 01 00 1f 00 00 03 d1 02 b6 00 0c 00 00 21 23 0b 01 23 03 33 1b 01 33 1b 01 33 03 14 6e ae ae 6e bd 54 a4 ae 68 ae a4 52 02 6b fd 95 02 b6 fd 98 02 68 fd 98 02 68 00 00 01 00 19 00 00 02 7b 02 b6 00 0b 00 00 33 23 09 01 33 1b 01 33 09 01 23 03 79 60 01 01 fe ff 64 cd d1 60 fe ff 01 01 64 cd Data Ascii: MF8Q-[HTkq^DEC6R-\HWl[5!##=QlJJlMq"&532653QhhQS`ll`S~3#oSebJ!##333nnThRkhh{3#33#y`d`d
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: 00 00 00 9e 02 b6 00 03 00 00 13 33 11 23 53 4b 4b 02 b6 fd 4a 00 00 00 00 01 00 53 00 00 03 15 01 f4 00 1e 00 00 01 11 23 11 34 23 22 06 15 11 23 11 34 26 23 22 06 15 11 23 11 33 15 36 33 32 17 36 33 32 16 03 15 4a 72 33 4c 4b 38 3a 35 4a 4b 48 34 61 6c 2a 3b 6a 4d 5d 01 36 fe ca 01 33 7f 4b 43 fe dc 01 2c 46 40 57 48 fe ed 01 eb 49 52 57 57 5f 00 01 00 53 00 00 01 ef 01 f4 00 11 00 00 33 23 11 33 15 36 33 32 16 15 11 23 11 34 23 22 06 15 9e 4b 48 38 6e 53 5b 4b 76 43 4d 01 eb 4a 53 66 59 fe cb 01 25 8d 5c 43 00 02 00 31 ff f7 02 09 01 f4 00 07 00 0f 00 00 04 22 26 34 36 32 16 14 04 32 36 34 26 22 06 14 01 86 d2 83 83 d2 83 fe c9 96 52 53 94 53 09 89 ea 8a 8a ea 47 68 a8 69 69 a8 00 00 00 02 00 53 ff 51 02 1f 01 f4 00 0e 00 16 00 00 05 22 27 15 23 11 33 Data Ascii: 3#SKKJS#4#"#4&#"#3632632Jr3LK8:5JKH4al*;jM]63KC,F@WHIRWW_S3#3632#4#"KH8nS[KvCMJSfY%\C1"&462264&"RSSGhiiSQ"'#3
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: 00 13 35 33 2e 03 35 34 36 33 32 16 15 23 34 26 23 22 06 15 14 1e 01 17 33 15 23 16 15 14 07 21 15 21 35 3e 01 35 34 27 55 4f 01 1b 09 0c 75 60 6a 7b 50 51 42 3e 47 10 22 04 d2 bf 04 45 01 66 fe 22 33 3c 07 01 14 3f 03 3e 19 36 18 50 76 79 67 4a 50 48 38 1d 38 4a 09 3f 18 0b 77 31 49 49 13 48 45 11 1a 00 00 00 02 00 37 00 6a 01 e9 02 1b 00 1a 00 22 00 00 25 22 27 07 27 37 26 35 34 37 27 37 17 36 32 17 37 17 07 16 15 14 07 17 07 27 06 26 32 36 34 26 22 06 14 01 10 3f 2e 3a 31 3b 1c 1d 3d 31 3c 2f 7a 2e 3d 31 3e 1e 1d 3c 31 3a 2f 71 66 3d 3d 66 3d 84 20 3a 30 3c 2d 3e 3c 30 3d 31 3d 20 20 3d 31 3d 2f 3d 3c 2f 3c 30 3a 20 3f 46 70 46 46 70 00 01 00 11 00 00 02 83 02 b6 00 16 00 00 21 23 35 23 35 33 35 23 35 33 03 33 1b 01 33 03 33 15 23 15 33 15 23 01 70 4d Data Ascii: 53.54632#4&#"3#!!5>54'UOu`j{PQB>G"Ef"3<?>6PvygJPH88J?w1IIHE7j"%"''7&547'7627'&264&"?.:1;=1</z.=1><1:/qf==f= :0<-><0=1= =1=/=</<0: ?FpFFp!#5#535#53333#3#pM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	49952	108.156.83.76	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:44 UTC	468	OUT	GET /gkyt4bl1j2fs/5a1jYA8djo9ilD72T9fVm5/2a6ff67c8a89ae2ec823abd826f566a8/ebb370be-e241-4600-949a-4f6710b1b142_instagram-icon.svg HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:44 UTC	536	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 3342 Connection: close Date: Fri, 26 Apr 2024 12:23:41 GMT Last-Modified: Thu, 23 Jul 2020 02:19:15 GMT ETag: "4223adb8dab2d52edcdd0254d6010866" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c8bcdad2cb88c57a5e39f7757d2e9f6a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P2 X-Amz-Cf-Id: nBfqbBCjgHG8g6xrRSlny8O1jh3Ix0CAAUBGzCS6PLkDzo0fCE6asg== Age: 4
2024-04-26 12:23:44 UTC	3342	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 30 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 30 20 32 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 35 2e 36 34 32 34 36 20 30 2e 38 36 31 37 43 36 2e 36 36 36 34 37 20 30 2e 38 31 35 31 30 39 20 36 2e 39 39 33 36 38 20 30 2e 38 30 33 37 31 31 20 39 2e 36 30 30 39 31 20 30 2e 38 30 33 37 31 31 48 39 2e 35 39 37 39 31 43 31 32 2e 32 30 35 39 20 30 2e 38 30 33 37 31 31 20 31 32 2e 35 33 31 39 20 30 2e 38 31 35 31 30 39 20 31 Data Ascii: <svg width="20" height="20" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M5.64246 0.8617C6.66647 0.815109 6.99368 0.803711 9.60091 0.803711H9.59791C12.2059 0.803711 12.5319 0.815109 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	49954	108.156.83.76	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:44 UTC	466	OUT	GET /gkyt4bl1j2fs/1Xnb0FQsxsETwn52uJjqmH/547b5cde0b90489e9de1adf379f69168/64e29ead-c913-4ac2-b39d-c0a03b61cb6a_twitter-icon.svg HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:44 UTC	536	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1499 Connection: close Date: Fri, 26 Apr 2024 12:23:42 GMT Last-Modified: Thu, 23 Jul 2020 02:18:39 GMT ETag: "5166c0d79bae42ff989c186869dc25c0" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 19730f0d78f5675aa7f2838252596968.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P2 X-Amz-Cf-Id: DIWsISnpL_0FQPA82SyUwVm04Pm6oEx7EATg7mPoy2LLwKKApUvGuA== Age: 3
2024-04-26 12:23:44 UTC	1499	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 32 22 20 68 65 69 67 68 74 3d 22 31 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 32 20 31 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 30 2e 35 39 30 39 20 35 2e 30 32 34 30 37 4c 31 30 2e 36 33 35 35 20 35 2e 37 35 39 33 35 4c 39 2e 38 39 32 31 33 20 35 2e 36 36 39 33 31 43 37 2e 31 38 36 34 33 20 35 2e 33 32 34 31 38 20 34 2e 38 32 32 36 36 20 34 2e 31 35 33 37 35 20 32 2e 38 31 35 36 39 20 32 2e 31 38 38 30 32 4c 31 2e 38 33 34 35 20 31 2e 32 31 32 36 Data Ascii: <svg width="22" height="18" viewBox="0 0 22 18" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M10.5909 5.02407L10.6355 5.75935L9.89213 5.66931C7.18643 5.32418 4.82266 4.15375 2.81569 2.18802L1.8345 1.2126

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	49953	108.156.83.76	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:44 UTC	466	OUT	GET /gkyt4bl1j2fs/p9L2SKCwCmCkWSOrv7P3N/c7f77485b0aa297256d3428a97e7492b/757a8c1a-d41a-4a53-8fb3-cac665c2bd89_facebook-icon.svg HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:44 UTC	539	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 413 Connection: close Last-Modified: Thu, 23 Jul 2020 02:16:37 GMT Server: Contentful Images API Access-Control-Allow-Origin: * Date: Fri, 26 Apr 2024 07:04:05 GMT Cache-Control: max-age=31536000 ETag: "518021e3dd69af49a601e3900511518c" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 038457f797aa314915a62d82c1c45e26.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P2 X-Amz-Cf-Id: KluPwDyeGTqtWSIxLCJoJ2ya0grgF-G30Q1-YC9bLrrZeVwvKBelmA== Age: 19180
2024-04-26 12:23:44 UTC	413	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 22 20 68 65 69 67 68 74 3d 22 32 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 20 32 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 36 2e 36 37 36 37 35 20 32 30 2e 33 38 33 34 56 31 30 2e 35 39 32 34 48 39 2e 33 38 30 30 34 4c 39 2e 37 33 38 32 38 20 37 2e 32 31 38 33 37 48 36 2e 36 37 36 37 35 4c 36 2e 36 38 31 33 35 20 35 2e 35 32 39 36 34 43 36 2e 36 38 31 33 35 20 34 2e 36 34 39 36 34 20 36 2e 37 36 34 39 38 20 34 2e 31 37 38 31 32 20 38 2e 30 32 39 Data Ascii: <svg width="10" height="21" viewBox="0 0 10 21" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M6.67675 20.3834V10.5924H9.38004L9.73828 7.21837H6.67675L6.68135 5.52964C6.68135 4.64964 6.76498 4.17812 8.029

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	49950	151.101.129.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:44 UTC	1016	OUT	GET /myaccount/privacy/cookieprefs/getBanner?showBanner=true&country=US&language=en&policyType=CookieBanner&originalHeaders={%22cookie%22:%22cookie_prefs=T%3D0%2CP%3D1%2CF%3D1%2Ctype%3Dinitial%22}&tenant=venmo&tenantData={} HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; nsid=s%3An7iR5EQmXKz-oKtVXIy1EEIPxyKSFcCK.1TZKfiuN5QvG6VUXG7uj%2F6PzQRey35iwuU69rZa1p10; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; l7_az=dcg16.slc; x-pp-s=eyJ0IjoiMTcxNDEzNDIyMDUxNyIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742220%26vteXpYrS%3D1714136020%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew
2024-04-26 12:23:44 UTC	1127	IN	HTTP/1.1 400 Bad Request Connection: close Content-Length: 11 Accept-Ch: Sec-CH-UA-Full Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; style-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; script-src 'nonce-Gw7/v7r9IhF1x2fn+AqoS2d2lCMXj6vUl6VVFE6var4cnVdL' 'self' 'unsafe-inline' https://.paypal.com https://.paypalobjects.com https://recaptcha.net/; img-src 'self' * data:; object-src 'none'; font-src 'self' https://.paypal.com https://.paypalobjects.com; frame-src 'self' https://.paypalobjects.com https://.paypal.com https://recaptcha.net/ https://.qualtrics.com; connect-src 'self' 'unsafe-inline' https://.paypal.com https://.paypalobjects.com https://id.venmo.com https://venmo.com/ https://.qualtrics.com; form-action 'self' https://.paypal.com; base-uri 'self' https://.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp Content-Type: text/plain; charset=utf-8 Etag: W/"b-EFiDB1U+dmqzx9Mo2UjcZ1SJPO8"
2024-04-26 12:23:44 UTC	1587	IN	Data Raw: 4f 72 69 67 69 6e 2d 54 72 69 61 6c 3a 20 41 6c 49 6f 67 56 33 4b 46 74 6e 62 66 56 43 79 6c 39 5a 32 4e 70 72 45 37 46 44 38 50 59 43 74 2b 54 51 69 59 64 45 33 70 70 65 4a 6a 4a 30 78 4a 4b 63 74 68 59 77 4f 78 58 70 52 43 4e 6f 70 78 56 57 64 4f 49 45 4e 4d 63 4e 53 76 51 43 47 41 6d 6a 30 66 77 30 41 41 41 42 32 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 42 68 65 58 42 68 62 43 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6c 4e 6c 62 6d 52 47 64 57 78 73 56 58 4e 6c 63 6b 46 6e 5a 57 35 30 51 57 5a 30 5a 58 4a 53 5a 57 52 31 59 33 52 70 62 32 34 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 32 4f 44 51 34 4f 44 59 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 Data Ascii: Origin-Trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLCJleHBpcnkiOjE2ODQ4ODYzOTksImlzU3ViZG9tYWluI
2024-04-26 12:23:44 UTC	319	IN	Data Raw: 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c 6f 61 64 0d 0a 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 64 66 77 2d 6b 64 61 6c 32 31 32 30 31 30 31 2d 44 46 57 2c 20 63 61 63 68 65 2d 70 64 6b 2d 6b 66 74 79 32 31 33 30 30 32 31 2d 50 44 4b 2c 20 63 61 63 68 65 2d 70 64 6b 2d 6b 66 74 79 32 31 33 30 30 32 31 2d 50 44 4b 0d 0a 58 2d 43 61 63 68 65 3a 20 4d 49 53 53 2c 20 4d 49 53 53 2c 20 4d 49 53 53 0d 0a 58 2d 43 61 63 68 65 2d 48 69 74 73 3a 20 30 2c 20 30 2c 20 30 0d 0a 58 2d 54 69 6d 65 72 3a 20 53 31 37 31 34 31 33 34 32 32 34 2e 33 34 34 30 34 31 2c 56 53 30 2c 56 45 31 30 37 0d Data Ascii: Strict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-dfw-kdal2120101-DFW, cache-pdk-kfty2130021-PDK, cache-pdk-kfty2130021-PDKX-Cache: MISS, MISS, MISSX-Cache-Hits: 0, 0, 0X-Timer: S1714134224.344041,VS0,VE107
2024-04-26 12:23:44 UTC	11	IN	Data Raw: 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	49919	104.18.249.37	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:44 UTC	1657	OUT	POST /hc/activity HTTP/1.1 Host: help.venmo.com Connection: keep-alive Content-Length: 380 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://help.venmo.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://help.venmo.com/hc/en-us/requests/new?ticket_form_id=624807 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; d_id=f9d8a02dda1e499da9fdccab0d31ca111714134181973; enforce_policy=ccpa; tsrce=identityappsnodeweb; l7_az=dcg15.slc; ts_c=vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3; cookie_prefs=T%3D0%2CP%3D1%2CF%3D1%2Ctype%3Dinitial; x-pp-s=eyJ0IjoiMTcxNDEzNDIxMTMyMyIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742211%26vteXpYrS%3D1714136011%26vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3%26vtyp%3Dnew; __cfruid=4d718761ca3665ade518e98728cfc4e55786fa9f-1714134211; _help_center_session=ODlFR2dSZi85dzJTaFRSYkNhcVM3ME5hRXZUS2Y1S0t6clY2dnJ5VHVKL1dodEpWRm15NmdpZUg5TUNSeWE0THB5TkZONmkwTlJkVE00dHNUOWhLdjFlblJXbk9HYndQakZMdjBvVndVMmF0TENxWi9kMWNZWmNTZFJCZE1XdFFxWndOVkJKY2JXcjJpbGlrNWhzQ01QajJ0cjJYbmUyM2dZdS9pSjdxMXZHRlcwWnRGd056ZnFTeWdPM2ZGNFNjQ0hZMUYwRnovMG9CMEVLbEQ2bzVjdz09LS1nVHB3RzV0RE1UV0x0SmltSVNMRWV3PT0%3D--a061474dcdcfc9d4f03fd5255b000e327d5e29e1
2024-04-26 12:23:44 UTC	380	OUT	Data Raw: 7b 22 65 76 65 6e 74 22 3a 22 73 75 62 6d 69 74 5f 72 65 71 75 65 73 74 5f 66 6f 72 6d 5f 76 69 65 77 65 64 22 2c 22 64 61 74 61 22 3a 22 42 41 68 37 42 7a 6f 56 63 47 46 79 5a 57 35 30 58 33 52 70 59 32 74 6c 64 46 39 70 5a 44 41 36 43 6c 39 74 5a 58 52 68 65 77 77 36 44 32 46 6a 59 32 39 31 62 6e 52 66 61 57 52 70 41 2b 45 2f 44 44 6f 54 61 47 56 73 63 46 39 6a 5a 57 35 30 5a 58 4a 66 61 57 52 70 42 50 49 6c 37 67 73 36 44 57 4a 79 59 57 35 6b 58 32 6c 6b 61 51 4f 6c 6d 77 63 36 44 48 56 7a 5a 58 4a 66 61 57 51 77 4f 68 4e 31 63 32 56 79 58 33 4a 76 62 47 56 66 62 6d 46 74 5a 55 6b 69 44 6b 46 4f 54 30 35 5a 54 55 39 56 55 77 59 36 42 6b 56 55 4f 67 74 73 62 32 4e 68 62 47 56 4a 49 67 70 6c 62 69 31 31 63 77 59 37 44 46 51 36 47 6d 46 75 62 32 35 35 62 Data Ascii: {"event":"submit_request_form_viewed","data":"BAh7BzoVcGFyZW50X3RpY2tldF9pZDA6Cl9tZXRheww6D2FjY291bnRfaWRpA+E/DDoTaGVscF9jZW50ZXJfaWRpBPIl7gs6DWJyYW5kX2lkaQOlmwc6DHVzZXJfaWQwOhN1c2VyX3JvbGVfbmFtZUkiDkFOT05ZTU9VUwY6BkVUOgtsb2NhbGVJIgplbi11cwY7DFQ6GmFub255b
2024-04-26 12:23:44 UTC	822	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 12:23:44 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 87a68bb5d99431f2-MIA CF-Cache-Status: DYNAMIC referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none X-Request-ID: 87a68bb6f24f31f2-MIA x-runtime: 0.002151 x-xss-protection: 1; mode=block X-Zendesk-Zorg: yes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ijEQ0Vl8xOlseG1320NzA8ZS%2FhIgNhoZX%2Bq0C2eO8OdNJYt7OTVXwuQUN6fTHe0Y8XDyrmfFFW7YzhCNIudb9%2BvnN%2BgK5Zjg10sBeSD5t04Mo2THNM%2Fw4yD4koCNrwP1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-04-26 12:23:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	49955	104.18.70.113	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:44 UTC	573	OUT	GET /hc/assets/Datepicker-773be0690e250f0aee14c3624440e63d.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:44 UTC	1127	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 12:23:44 GMT Content-Type: application/javascript Content-Length: 18378 Connection: close x-amz-id-2: f9RdY07zG0tK+nRj3tSa0FbcTnenF7uxbMrlj4XUGVFFLxo+iSk7tqltSQzhIBGRQmu0nsaKiJ4= x-amz-request-id: FTJPW5G1S1ZP3GKA x-amz-replication-status: COMPLETED Last-Modified: Thu, 21 Mar 2024 14:12:05 GMT ETag: "2ac7d13db73c56258c169965a4157d12" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=604800 x-amz-version-id: qgUdQmexSt4Id.kNDpoL9QuMgUS5xHyh CF-Cache-Status: HIT Age: 221555 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qCIoV%2Bi%2B8cZW58EawHsoOBy%2F6CKwZ8sBfYYf4CXLzZjsZeqLNEq2kNFPqRr6IWpmQ0JL2WgbcjlI3mUuzFZctjkeqL22awhHnNS%2BQ6gxeK8PjNUVaULYSoUMRlV1PLC9JqY%2BMrM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 87a68bb8af264c13-MIA
2024-04-26 12:23:44 UTC	242	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 44 61 74 65 70 69 63 6b 65 72 2d 37 37 33 62 65 30 36 39 30 65 32 35 30 66 30 61 65 65 31 34 63 33 36 32 34 34 34 30 65 36 33 64 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 68 65 6c 70 5f 63 65 6e 74 65 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 68 65 6c 70 5f 63 65 6e 74 65 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 37 31 37 38 5d 2c 7b 31 38 37 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 66 75 6e 63 74 Data Ascii: /! For license information please see Datepicker-773be0690e250f0aee14c3624440e63d.js.LICENSE.txt /(self.webpackChunkhelp_center=self.webpackChunkhelp_center\|\|[]).push([[77178],{18729:function(e,t,n){"use strict";n.r(t),n.d(t,{default:funct
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 7d 7d 29 3b 76 61 72 20 61 3d 6e 28 36 38 34 32 30 29 2c 69 3d 6e 28 32 37 33 34 34 29 2c 73 3d 6e 28 31 39 37 35 35 29 2c 6f 3d 6e 2e 6e 28 73 29 2c 72 3d 6e 28 33 38 30 31 36 29 2c 6c 3d 6e 2e 6e 28 72 29 2c 68 3d 6e 28 33 30 33 38 31 29 2c 64 3d 6e 2e 6e 28 68 29 2c 75 3d 6e 28 38 34 33 31 39 29 2c 63 3d 6e 2e 6e 28 75 29 2c 66 3d 6e 28 38 32 31 36 29 2c 70 3d 6c 28 29 28 22 64 61 74 65 2e 64 61 74 65 70 69 63 6b 65 72 2e 64 61 74 65 5f 66 6f 72 6d 61 74 22 29 2e 72 65 70 6c 61 63 65 28 22 64 64 22 2c 22 5f 30 31 5f 22 29 2e 72 65 70 6c 61 63 65 28 22 64 22 2c 22 5f 30 32 5f 22 29 2e 72 65 70 6c 61 63 65 28 22 6f 6f 22 2c 22 5f 30 33 5f 22 29 2e 72 65 70 6c 61 63 65 28 22 6f 22 2c 22 5f 30 34 5f 22 29 2e 72 65 Data Ascii: ion(){return g}});var a=n(68420),i=n(27344),s=n(19755),o=n.n(s),r=n(38016),l=n.n(r),h=n(30381),d=n.n(h),u=n(84319),c=n.n(u),f=n(8216),p=l()("date.datepicker.date_format").replace("dd","_01_").replace("d","_02_").replace("oo","_03_").replace("o","_04_").re
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: 6e 63 2e 62 69 6e 64 28 74 68 69 73 29 2c 66 69 72 73 74 44 61 79 3a 4e 75 6d 62 65 72 28 6c 28 29 28 22 64 61 74 65 2e 64 61 74 65 70 69 63 6b 65 72 2e 66 69 72 73 74 5f 64 61 79 22 29 29 2c 69 73 52 54 4c 3a 22 72 74 6c 22 3d 3d 3d 6c 28 29 2e 67 65 74 44 69 72 28 29 2c 73 68 6f 77 4d 6f 6e 74 68 41 66 74 65 72 59 65 61 72 3a 42 6f 6f 6c 65 61 6e 28 4e 75 6d 62 65 72 28 6c 28 29 28 22 64 61 74 65 2e 64 61 74 65 70 69 63 6b 65 72 2e 73 68 6f 77 5f 6d 6f 6e 74 68 5f 61 66 74 65 72 5f 79 65 61 72 22 29 29 29 2c 79 65 61 72 53 75 66 66 69 78 3a 6c 28 29 28 22 64 61 74 65 2e 64 61 74 65 70 69 63 6b 65 72 2e 79 65 61 72 5f 73 75 66 66 69 78 22 29 2c 69 31 38 6e 3a 7b 70 72 65 76 69 6f 75 73 4d 6f 6e 74 68 3a 6c 28 29 28 22 64 61 74 65 2e 64 61 74 65 70 69 63 Data Ascii: nc.bind(this),firstDay:Number(l()("date.datepicker.first_day")),isRTL:"rtl"===l().getDir(),showMonthAfterYear:Boolean(Number(l()("date.datepicker.show_month_after_year"))),yearSuffix:l()("date.datepicker.year_suffix"),i18n:{previousMonth:l()("date.datepic
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: 74 29 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 63 6c 61 73 73 4e 61 6d 65 3d 72 28 28 22 20 22 2b 65 2e 63 6c 61 73 73 4e 61 6d 65 2b 22 20 22 29 2e 72 65 70 6c 61 63 65 28 22 20 22 2b 74 2b 22 20 22 2c 22 20 22 29 29 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 2f 41 72 72 61 79 2f 2e 74 65 73 74 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 29 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 2f 44 61 74 65 2f 2e 74 65 73 74 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 29 26 26 21 69 73 4e 61 4e 28 65 2e 67 65 74 54 69 6d 65 28 29 29 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 Data Ascii: t)},d=function(e,t){e.className=r((" "+e.className+" ").replace(" "+t+" "," "))},u=function(e){return/Array/.test(Object.prototype.toString.call(e))},c=function(e){return/Date/.test(Object.prototype.toString.call(e))&&!isNaN(e.getTime())},f=function(e){va
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: 67 65 3a 31 30 2c 73 68 6f 77 57 65 65 6b 4e 75 6d 62 65 72 3a 21 31 2c 70 69 63 6b 57 68 6f 6c 65 57 65 65 6b 3a 21 31 2c 6d 69 6e 59 65 61 72 3a 30 2c 6d 61 78 59 65 61 72 3a 39 39 39 39 2c 6d 69 6e 4d 6f 6e 74 68 3a 76 6f 69 64 20 30 2c 6d 61 78 4d 6f 6e 74 68 3a 76 6f 69 64 20 30 2c 73 74 61 72 74 52 61 6e 67 65 3a 6e 75 6c 6c 2c 65 6e 64 52 61 6e 67 65 3a 6e 75 6c 6c 2c 69 73 52 54 4c 3a 21 31 2c 79 65 61 72 53 75 66 66 69 78 3a 22 22 2c 73 68 6f 77 4d 6f 6e 74 68 41 66 74 65 72 59 65 61 72 3a 21 31 2c 73 68 6f 77 44 61 79 73 49 6e 4e 65 78 74 41 6e 64 50 72 65 76 69 6f 75 73 4d 6f 6e 74 68 73 3a 21 31 2c 65 6e 61 62 6c 65 53 65 6c 65 63 74 69 6f 6e 44 61 79 73 49 6e 4e 65 78 74 41 6e 64 50 72 65 76 69 6f 75 73 4d 6f 6e 74 68 73 3a 21 31 2c 6e 75 6d Data Ascii: ge:10,showWeekNumber:!1,pickWholeWeek:!1,minYear:0,maxYear:9999,minMonth:void 0,maxMonth:void 0,startRange:null,endRange:null,isRTL:!1,yearSuffix:"",showMonthAfterYear:!1,showDaysInNextAndPreviousMonths:!1,enableSelectionDaysInNextAndPreviousMonths:!1,num
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: 6a 6f 69 6e 28 22 20 22 29 2b 27 22 20 61 72 69 61 2d 73 65 6c 65 63 74 65 64 3d 22 27 2b 6e 2b 27 22 3e 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 70 69 6b 61 2d 62 75 74 74 6f 6e 20 70 69 6b 61 2d 64 61 79 22 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 64 61 74 61 2d 70 69 6b 61 2d 79 65 61 72 3d 22 27 2b 65 2e 79 65 61 72 2b 27 22 20 64 61 74 61 2d 70 69 6b 61 2d 6d 6f 6e 74 68 3d 22 27 2b 65 2e 6d 6f 6e 74 68 2b 27 22 20 64 61 74 61 2d 70 69 6b 61 2d 64 61 79 3d 22 27 2b 65 2e 64 61 79 2b 27 22 3e 27 2b 65 2e 64 61 79 2b 22 3c 2f 62 75 74 74 6f 6e 3e 3c 2f 74 64 3e 22 7d 2c 4d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 73 65 74 48 6f 75 72 73 28 30 2c 30 2c 30 2c 30 29 3b 76 61 72 20 6e 3d 65 2e 67 65 74 44 61 74 65 28 29 2c 61 3d 65 2e 67 Data Ascii: join(" ")+'" aria-selected="'+n+'"><button class="pika-button pika-day" type="button" data-pika-year="'+e.year+'" data-pika-month="'+e.month+'" data-pika-day="'+e.day+'">'+e.day+"</button></td>"},M=function(e,t){e.setHours(0,0,0,0);var n=e.getDate(),a=e.g
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: 31 38 6e 2e 6d 6f 6e 74 68 73 5b 61 5d 2b 27 3c 73 65 6c 65 63 74 20 63 6c 61 73 73 3d 22 70 69 6b 61 2d 73 65 6c 65 63 74 20 70 69 6b 61 2d 73 65 6c 65 63 74 2d 6d 6f 6e 74 68 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 3e 27 2b 6c 2e 6a 6f 69 6e 28 22 22 29 2b 22 3c 2f 73 65 6c 65 63 74 3e 3c 2f 64 69 76 3e 22 2c 75 28 63 2e 79 65 61 72 52 61 6e 67 65 29 3f 28 6f 3d 63 2e 79 65 61 72 52 61 6e 67 65 5b 30 5d 2c 72 3d 63 2e 79 65 61 72 52 61 6e 67 65 5b 31 5d 2b 31 29 3a 28 6f 3d 6e 2d 63 2e 79 65 61 72 52 61 6e 67 65 2c 72 3d 31 2b 6e 2b 63 2e 79 65 61 72 52 61 6e 67 65 29 2c 6c 3d 5b 5d 3b 6f 3c 72 26 26 6f 3c 3d 63 2e 6d 61 78 59 65 61 72 3b 6f 2b 2b 29 6f 3e 3d 63 2e 6d 69 6e 59 65 61 72 26 26 6c 2e 70 75 73 68 28 27 3c 6f 70 74 69 6f 6e 20 76 61 6c Data Ascii: 18n.months[a]+'<select class="pika-select pika-select-month" tabindex="-1">'+l.join("")+"</select></div>",u(c.yearRange)?(o=c.yearRange[0],r=c.yearRange[1]+1):(o=n-c.yearRange,r=1+n+c.yearRange),l=[];o<r&&o<=c.maxYear;o++)o>=c.minYear&&l.push('<option val
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: 6f 75 6e 64 26 26 69 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 68 69 64 65 28 29 2c 68 2e 62 6c 75 72 46 69 65 6c 64 4f 6e 53 65 6c 65 63 74 26 26 68 2e 66 69 65 6c 64 26 26 68 2e 66 69 65 6c 64 2e 62 6c 75 72 28 29 7d 29 2c 31 30 30 29 29 29 2c 6c 28 74 2c 22 70 69 6b 61 2d 73 65 6c 65 63 74 22 29 29 72 2e 5f 63 3d 21 30 3b 65 6c 73 65 7b 69 66 28 21 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 29 72 65 74 75 72 6e 20 65 2e 72 65 74 75 72 6e 56 61 6c 75 65 3d 21 31 2c 21 31 3b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 7d 7d 2c 72 2e 5f 6f 6e 43 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 28 65 3d 65 7c 7c 77 69 6e 64 6f 77 2e 65 76 65 6e 74 29 2e 74 61 72 67 65 74 7c 7c 65 2e 73 72 63 45 6c 65 6d 65 6e 74 Data Ascii: ound&&i((function(){r.hide(),h.blurFieldOnSelect&&h.field&&h.field.blur()}),100))),l(t,"pika-select"))r._c=!0;else{if(!e.preventDefault)return e.returnValue=!1,!1;e.preventDefault()}}},r._onChange=function(e){var t=(e=e\|\|window.event).target\|\|e.srcElement
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: 3b 22 29 2c 73 28 74 2c 22 63 68 61 6e 67 65 22 2c 72 2e 5f 6f 6e 43 68 61 6e 67 65 29 29 29 3b 64 6f 7b 69 66 28 6c 28 61 2c 22 70 69 6b 61 2d 73 69 6e 67 6c 65 22 29 7c 7c 61 3d 3d 3d 68 2e 74 72 69 67 67 65 72 29 72 65 74 75 72 6e 7d 77 68 69 6c 65 28 61 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 29 3b 72 2e 5f 76 26 26 74 21 3d 3d 68 2e 74 72 69 67 67 65 72 26 26 61 21 3d 3d 68 2e 74 72 69 67 67 65 72 26 26 72 2e 68 69 64 65 28 29 7d 7d 2c 72 2e 65 6c 3d 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 72 2e 65 6c 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 70 69 6b 61 2d 73 69 6e 67 6c 65 22 2b 28 68 2e 69 73 52 54 4c 3f 22 20 69 73 2d 72 74 6c 22 3a 22 22 29 2b 28 68 2e 74 68 65 6d 65 3f 22 20 22 2b 68 2e 74 68 65 6d 65 3a 22 22 29 2c 73 28 Data Ascii: ;"),s(t,"change",r._onChange)));do{if(l(a,"pika-single")\|\|a===h.trigger)return}while(a=a.parentNode);r._v&&t!==h.trigger&&a!==h.trigger&&r.hide()}},r.el=a.createElement("div"),r.el.className="pika-single"+(h.isRTL?" is-rtl":"")+(h.theme?" "+h.theme:""),s(
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: 6e 75 6d 62 65 72 4f 66 4d 6f 6e 74 68 73 2c 31 30 29 7c 7c 31 3b 69 66 28 74 2e 6e 75 6d 62 65 72 4f 66 4d 6f 6e 74 68 73 3d 6e 3e 34 3f 34 3a 6e 2c 63 28 74 2e 6d 69 6e 44 61 74 65 29 7c 7c 28 74 2e 6d 69 6e 44 61 74 65 3d 21 31 29 2c 63 28 74 2e 6d 61 78 44 61 74 65 29 7c 7c 28 74 2e 6d 61 78 44 61 74 65 3d 21 31 29 2c 74 2e 6d 69 6e 44 61 74 65 26 26 74 2e 6d 61 78 44 61 74 65 26 26 74 2e 6d 61 78 44 61 74 65 3c 74 2e 6d 69 6e 44 61 74 65 26 26 28 74 2e 6d 61 78 44 61 74 65 3d 74 2e 6d 69 6e 44 61 74 65 3d 21 31 29 2c 74 2e 6d 69 6e 44 61 74 65 26 26 74 68 69 73 2e 73 65 74 4d 69 6e 44 61 74 65 28 74 2e 6d 69 6e 44 61 74 65 29 2c 74 2e 6d 61 78 44 61 74 65 26 26 74 68 69 73 2e 73 65 74 4d 61 78 44 61 74 65 28 74 2e 6d 61 78 44 61 74 65 29 2c 75 28 74 Data Ascii: numberOfMonths,10)\|\|1;if(t.numberOfMonths=n>4?4:n,c(t.minDate)\|\|(t.minDate=!1),c(t.maxDate)\|\|(t.maxDate=!1),t.minDate&&t.maxDate&&t.maxDate<t.minDate&&(t.maxDate=t.minDate=!1),t.minDate&&this.setMinDate(t.minDate),t.maxDate&&this.setMaxDate(t.maxDate),u(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	49956	104.18.70.113	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:44 UTC	568	OUT	GET /hc/assets/58177-c7d87290b4661a50fc92c3b423498d5b.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:44 UTC	1129	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 12:23:44 GMT Content-Type: application/javascript Content-Length: 29130 Connection: close x-amz-id-2: pOJ90rborMtWoJda2IXi63OH1riv2o6XoAhMBGzfHwVcRU87RzsTo9UBQ1Rm15vicqgfppUJH3Q= x-amz-request-id: GJRKGEQRFFX15HW7 x-amz-replication-status: COMPLETED Last-Modified: Mon, 18 Mar 2024 13:40:00 GMT ETag: "f728ce6548206ded4269a9173894a01b" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=604800 x-amz-version-id: CnZhvRfWTaBRAmENRV5efWeXosoUgnUZ CF-Cache-Status: HIT Age: 172874 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HCBXmxGINsSgtm8mqG%2B5hFQv1LlrTBVah0HN%2FGkV%2B%2Fgwu0gqRsURY2ntonzDQ7FW2cB%2BuDfCNngUu7u0sm77eD7jL2caJkjjVFYIId8NKLse8fn38DmJq6nkqgqtTsMVldS%2B7lo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 87a68bb8be558de4-MIA
2024-04-26 12:23:44 UTC	240	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 35 38 31 37 37 2d 63 37 64 38 37 32 39 30 62 34 36 36 31 61 35 30 66 63 39 32 63 33 62 34 32 33 34 39 38 64 35 62 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 68 65 6c 70 5f 63 65 6e 74 65 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 68 65 6c 70 5f 63 65 6e 74 65 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 38 31 37 37 5d 2c 7b 33 31 33 35 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 76 61 72 20 6e 2c 72 2c 73 3b 21 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 3d 5b 69 28 31 39 Data Ascii: /! For license information please see 58177-c7d87290b4661a50fc92c3b423498d5b.js.LICENSE.txt /(self.webpackChunkhelp_center=self.webpackChunkhelp_center\|\|[]).push([[58177],{31355:function(e,t,i){var n,r,s;!function(o){"use strict";r=[i(19
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: 37 35 35 29 2c 69 28 31 32 32 30 33 29 5d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 69 3d 22 64 72 61 67 6f 76 65 72 22 3d 3d 3d 74 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 64 61 74 61 54 72 61 6e 73 66 65 72 3d 6e 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 26 26 6e 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 64 61 74 61 54 72 61 6e 73 66 65 72 3b 76 61 72 20 72 3d 6e 2e 64 61 74 61 54 72 61 6e 73 66 65 72 3b 72 26 26 2d 31 21 3d 3d 65 2e 69 6e 41 72 72 61 79 28 22 46 69 6c 65 73 22 2c 72 2e 74 79 70 65 73 29 26 26 21 31 21 3d 3d 74 68 69 73 2e 5f 74 72 69 67 67 65 72 28 74 2c 65 2e 45 76 65 6e 74 28 74 2c 7b 64 65 6c 65 67 61 74 65 64 45 76 65 6e 74 3a 6e 7d 29 29 26 26 28 Data Ascii: 755),i(12203)],n=function(e){function t(t){var i="dragover"===t;return function(n){n.dataTransfer=n.originalEvent&&n.originalEvent.dataTransfer;var r=n.dataTransfer;r&&-1!==e.inArray("Files",r.types)&&!1!==this._trigger(t,e.Event(t,{delegatedEvent:n}))&&(
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: 31 38 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 72 65 74 75 72 6e 20 74 3d 74 68 69 73 2e 6d 65 73 73 61 67 65 73 5b 74 5d 7c 7c 74 2e 74 6f 53 74 72 69 6e 67 28 29 2c 69 26 26 65 2e 65 61 63 68 28 69 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 74 3d 74 2e 72 65 70 6c 61 63 65 28 22 7b 22 2b 65 2b 22 7d 22 2c 69 29 7d 29 29 2c 74 7d 2c 66 6f 72 6d 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 65 72 69 61 6c 69 7a 65 41 72 72 61 79 28 29 7d 2c 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 69 66 28 74 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 29 72 65 74 75 72 6e 21 31 3b 28 69 2e 61 75 74 6f 55 70 6c 6f 61 64 7c 7c 21 31 21 3d 3d 69 2e 61 75 74 6f 55 70 6c 6f 61 64 26 26 65 28 74 68 Data Ascii: 18n:function(t,i){return t=this.messages[t]\|\|t.toString(),i&&e.each(i,(function(e,i){t=t.replace("{"+e+"}",i)})),t},formData:function(e){return e.serializeArray()},add:function(t,i){if(t.isDefaultPrevented())return!1;(i.autoUpload\|\|!1!==i.autoUpload&&e(th
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: 2c 62 69 74 72 61 74 65 3a 30 7d 3b 74 2e 5f 70 72 6f 67 72 65 73 73 3f 65 2e 65 78 74 65 6e 64 28 74 2e 5f 70 72 6f 67 72 65 73 73 2c 69 29 3a 74 2e 5f 70 72 6f 67 72 65 73 73 3d 69 7d 2c 5f 69 6e 69 74 52 65 73 70 6f 6e 73 65 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 69 66 28 65 2e 5f 72 65 73 70 6f 6e 73 65 29 66 6f 72 28 74 20 69 6e 20 65 2e 5f 72 65 73 70 6f 6e 73 65 29 65 2e 5f 72 65 73 70 6f 6e 73 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 74 29 26 26 64 65 6c 65 74 65 20 65 2e 5f 72 65 73 70 6f 6e 73 65 5b 74 5d 3b 65 6c 73 65 20 65 2e 5f 72 65 73 70 6f 6e 73 65 3d 7b 7d 7d 2c 5f 6f 6e 50 72 6f 67 72 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 69 66 28 74 2e 6c 65 6e 67 74 68 43 6f 6d 70 75 74 61 Data Ascii: ,bitrate:0};t._progress?e.extend(t._progress,i):t._progress=i},_initResponseObject:function(e){var t;if(e._response)for(t in e._response)e._response.hasOwnProperty(t)&&delete e._response[t];else e._response={}},_onProgress:function(t,i){if(t.lengthComputa
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: 62 6a 65 63 74 20 22 2b 65 2b 22 5d 22 7d 2c 5f 69 6e 69 74 58 48 52 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 69 2c 6e 3d 74 68 69 73 2c 72 3d 74 2e 66 69 6c 65 73 5b 30 5d 2c 73 3d 74 2e 6d 75 6c 74 69 70 61 72 74 7c 7c 21 65 2e 73 75 70 70 6f 72 74 2e 78 68 72 46 69 6c 65 55 70 6c 6f 61 64 2c 6f 3d 22 61 72 72 61 79 22 3d 3d 3d 65 2e 74 79 70 65 28 74 2e 70 61 72 61 6d 4e 61 6d 65 29 3f 74 2e 70 61 72 61 6d 4e 61 6d 65 5b 30 5d 3a 74 2e 70 61 72 61 6d 4e 61 6d 65 3b 74 2e 68 65 61 64 65 72 73 3d 65 2e 65 78 74 65 6e 64 28 7b 7d 2c 74 2e 68 65 61 64 65 72 73 29 2c 74 2e 63 6f 6e 74 65 6e 74 52 61 6e 67 65 26 26 28 74 2e 68 65 61 64 65 72 73 5b 22 43 6f 6e 74 65 6e 74 2d 52 61 6e 67 65 22 5d 3d 74 2e 63 6f 6e 74 65 6e 74 52 61 6e 67 Data Ascii: bject "+e+"]"},_initXHRData:function(t){var i,n=this,r=t.files[0],s=t.multipart\|\|!e.support.xhrFileUpload,o="array"===e.type(t.paramName)?t.paramName[0]:t.paramName;t.headers=e.extend({},t.headers),t.contentRange&&(t.headers["Content-Range"]=t.contentRang
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: 6f 61 64 28 65 29 3f 28 74 68 69 73 2e 5f 63 68 75 6e 6b 65 64 55 70 6c 6f 61 64 28 65 2c 21 30 29 7c 7c 28 65 2e 64 61 74 61 7c 7c 74 68 69 73 2e 5f 69 6e 69 74 58 48 52 44 61 74 61 28 65 29 2c 74 68 69 73 2e 5f 69 6e 69 74 50 72 6f 67 72 65 73 73 4c 69 73 74 65 6e 65 72 28 65 29 29 2c 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 26 26 28 65 2e 64 61 74 61 54 79 70 65 3d 22 70 6f 73 74 6d 65 73 73 61 67 65 20 22 2b 28 65 2e 64 61 74 61 54 79 70 65 7c 7c 22 22 29 29 29 3a 74 68 69 73 2e 5f 69 6e 69 74 49 66 72 61 6d 65 53 65 74 74 69 6e 67 73 28 65 29 7d 2c 5f 67 65 74 50 61 72 61 6d 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 69 3d 65 28 74 2e 66 69 6c 65 49 6e 70 75 74 29 2c 6e 3d 74 2e 70 61 72 61 6d 4e 61 6d 65 3b 72 65 74 75 72 6e 20 6e Data Ascii: oad(e)?(this._chunkedUpload(e,!0)\|\|(e.data\|\|this._initXHRData(e),this._initProgressListener(e)),e.postMessage&&(e.dataType="postmessage "+(e.dataType\|\|""))):this._initIframeSettings(e)},_getParamName:function(t){var i=e(t.fileInput),n=t.paramName;return n
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: 72 65 73 6f 6c 76 65 57 69 74 68 28 69 2c 6e 29 3a 21 31 3d 3d 3d 74 26 26 72 2e 72 65 6a 65 63 74 57 69 74 68 28 69 2c 6e 29 2c 73 2e 61 62 6f 72 74 3d 72 2e 70 72 6f 6d 69 73 65 2c 74 68 69 73 2e 5f 65 6e 68 61 6e 63 65 50 72 6f 6d 69 73 65 28 73 29 7d 2c 5f 61 64 64 43 6f 6e 76 65 6e 69 65 6e 63 65 4d 65 74 68 6f 64 73 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 76 61 72 20 6e 3d 74 68 69 73 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 44 65 66 65 72 72 65 64 28 29 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 6e 2c 74 29 2e 70 72 6f 6d 69 73 65 28 29 7d 3b 69 2e 70 72 6f 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 73 29 7b 72 65 74 75 72 6e 28 74 7c 7c 73 29 26 26 28 69 2e 5f 70 72 6f 63 65 73 73 51 75 65 75 65 3d 74 68 69 73 Data Ascii: resolveWith(i,n):!1===t&&r.rejectWith(i,n),s.abort=r.promise,this._enhancePromise(s)},_addConvenienceMethods:function(t,i){var n=this,r=function(t){return e.Deferred().resolveWith(n,t).promise()};i.process=function(t,s){return(t\|\|s)&&(i._processQueue=this
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: 75 6e 6b 53 69 7a 65 7c 7c 61 2c 75 3d 74 68 69 73 2e 5f 62 6c 6f 62 53 6c 69 63 65 2c 63 3d 65 2e 44 65 66 65 72 72 65 64 28 29 2c 64 3d 63 2e 70 72 6f 6d 69 73 65 28 29 3b 72 65 74 75 72 6e 21 28 21 28 74 68 69 73 2e 5f 69 73 58 48 52 55 70 6c 6f 61 64 28 74 29 26 26 75 26 26 28 6c 7c 7c 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 65 2e 74 79 70 65 28 70 29 3f 70 28 74 29 3a 70 29 3c 61 29 29 7c 7c 74 2e 64 61 74 61 29 26 26 28 21 21 69 7c 7c 28 6c 3e 3d 61 3f 28 6f 2e 65 72 72 6f 72 3d 74 2e 69 31 38 6e 28 22 75 70 6c 6f 61 64 65 64 42 79 74 65 73 22 29 2c 74 68 69 73 2e 5f 67 65 74 58 48 52 50 72 6f 6d 69 73 65 28 21 31 2c 74 2e 63 6f 6e 74 65 78 74 2c 5b 6e 75 6c 6c 2c 22 65 72 72 6f 72 22 2c 6f 2e 65 72 72 6f 72 5d 29 29 3a 28 72 3d 66 75 6e 63 74 69 Data Ascii: unkSize\|\|a,u=this._blobSlice,c=e.Deferred(),d=c.promise();return!(!(this._isXHRUpload(t)&&u&&(l\|\|("function"===e.type(p)?p(t):p)<a))\|\|t.data)&&(!!i\|\|(l>=a?(o.error=t.i18n("uploadedBytes"),this._getXHRPromise(!1,t.context,[null,"error",o.error])):(r=functi
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: 42 69 74 72 61 74 65 54 69 6d 65 72 2c 74 68 69 73 2e 5f 70 72 6f 67 72 65 73 73 2e 6c 6f 61 64 65 64 3d 74 68 69 73 2e 5f 70 72 6f 67 72 65 73 73 2e 74 6f 74 61 6c 3d 30 2c 74 68 69 73 2e 5f 70 72 6f 67 72 65 73 73 2e 62 69 74 72 61 74 65 3d 30 29 2c 74 68 69 73 2e 5f 69 6e 69 74 52 65 73 70 6f 6e 73 65 4f 62 6a 65 63 74 28 74 29 2c 74 68 69 73 2e 5f 69 6e 69 74 50 72 6f 67 72 65 73 73 4f 62 6a 65 63 74 28 74 29 2c 74 2e 5f 70 72 6f 67 72 65 73 73 2e 6c 6f 61 64 65 64 3d 74 2e 6c 6f 61 64 65 64 3d 74 2e 75 70 6c 6f 61 64 65 64 42 79 74 65 73 7c 7c 30 2c 74 2e 5f 70 72 6f 67 72 65 73 73 2e 74 6f 74 61 6c 3d 74 2e 74 6f 74 61 6c 3d 74 68 69 73 2e 5f 67 65 74 54 6f 74 61 6c 28 74 2e 66 69 6c 65 73 29 7c 7c 31 2c 74 2e 5f 70 72 6f 67 72 65 73 73 2e 62 69 74 Data Ascii: BitrateTimer,this._progress.loaded=this._progress.total=0,this._progress.bitrate=0),this._initResponseObject(t),this._initProgressObject(t),t._progress.loaded=t.loaded=t.uploadedBytes\|\|0,t._progress.total=t.total=this._getTotal(t.files)\|\|1,t._progress.bit
2024-04-26 12:23:44 UTC	1369	IN	Data Raw: 74 50 72 6f 67 72 65 73 73 4c 69 73 74 65 6e 65 72 28 6c 29 2c 61 2e 5f 6f 6e 41 6c 77 61 79 73 28 65 2c 74 2c 69 2c 6c 29 2c 61 2e 5f 73 65 6e 64 69 6e 67 2d 3d 31 2c 61 2e 5f 61 63 74 69 76 65 2d 3d 31 2c 6c 2e 6c 69 6d 69 74 43 6f 6e 63 75 72 72 65 6e 74 55 70 6c 6f 61 64 73 26 26 6c 2e 6c 69 6d 69 74 43 6f 6e 63 75 72 72 65 6e 74 55 70 6c 6f 61 64 73 3e 61 2e 5f 73 65 6e 64 69 6e 67 29 66 6f 72 28 76 61 72 20 6e 3d 61 2e 5f 73 6c 6f 74 73 2e 73 68 69 66 74 28 29 3b 6e 3b 29 7b 69 66 28 22 70 65 6e 64 69 6e 67 22 3d 3d 3d 61 2e 5f 67 65 74 44 65 66 65 72 72 65 64 53 74 61 74 65 28 6e 29 29 7b 6e 2e 72 65 73 6f 6c 76 65 28 29 3b 62 72 65 61 6b 7d 6e 3d 61 2e 5f 73 6c 6f 74 73 2e 73 68 69 66 74 28 29 7d 30 3d 3d 3d 61 2e 5f 61 63 74 69 76 65 26 26 61 2e Data Ascii: tProgressListener(l),a._onAlways(e,t,i,l),a._sending-=1,a._active-=1,l.limitConcurrentUploads&&l.limitConcurrentUploads>a._sending)for(var n=a._slots.shift();n;){if("pending"===a._getDeferredState(n)){n.resolve();break}n=a._slots.shift()}0===a._active&&a.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	49959	104.18.70.113	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:44 UTC	569	OUT	GET /hc/assets/Upload-2dd75a9c3f6aa1598fd38a8ab92dd726.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:45 UTC	1130	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 12:23:45 GMT Content-Type: application/javascript Content-Length: 7612 Connection: close x-amz-id-2: rE4W+n1vP25uQhNMZmZ/GxEBL4kJR5+Aa66B829BpJGlHZywu5LwL/hDt954/t6P7zygCAi6930= x-amz-request-id: FYEK99YGXTYFRXQ0 x-amz-replication-status: COMPLETED Last-Modified: Thu, 21 Mar 2024 14:12:06 GMT ETag: "5bcfbcf0b69d2e73652ba4f543ec0044" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=604800 x-amz-version-id: QrdZrv_LLO_eATfFuo6OguyPPj7aoEeA CF-Cache-Status: HIT Age: 244015 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=paarhV%2BjUGVwF2SL%2B9R9or0fupCWXMTLyVsonTfz%2BVDabQy3%2F0faFLK4GtsdYT1qs7pnUn0dJAHLsn%2FSuemMsAbp0NMC%2BXjiV%2Fe6r8R4oVGvoZoGTkKgosgzCNkOfOtsHJ7uHqM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 87a68bbaac2b288c-MIA
2024-04-26 12:23:45 UTC	239	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 68 65 6c 70 5f 63 65 6e 74 65 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 68 65 6c 70 5f 63 65 6e 74 65 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 34 38 30 36 5d 2c 7b 33 39 34 33 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 2e 72 28 74 29 2c 72 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 44 7d 7d 29 3b 76 61 72 20 69 3d 72 28 32 38 32 32 32 29 2c 6e 3d 72 2e 6e 28 69 29 2c 61 3d 72 28 38 30 32 32 32 29 2c 6f 3d 72 2e 6e 28 61 29 2c 73 3d 72 28 38 34 34 36 29 2c 6c 3d 72 2e 6e 28 73 29 2c 75 3d 72 28 36 36 38 37 30 29 2c 64 3d 72 2e 6e 28 Data Ascii: "use strict";(self.webpackChunkhelp_center=self.webpackChunkhelp_center\|\|[]).push([[64806],{39434:function(e,t,r){r.r(t),r.d(t,{default:function(){return D}});var i=r(28222),n=r.n(i),a=r(80222),o=r.n(a),s=r(8446),l=r.n(s),u=r(66870),d=r.n(
2024-04-26 12:23:45 UTC	1369	IN	Data Raw: 75 29 2c 68 3d 72 28 32 39 37 34 37 29 2c 63 3d 72 2e 6e 28 68 29 2c 70 3d 72 28 39 36 37 31 38 29 2c 66 3d 72 2e 6e 28 70 29 2c 6d 3d 72 28 38 36 33 30 32 29 2c 76 3d 72 28 33 33 39 33 38 29 2c 62 3d 72 28 34 34 38 34 35 29 2c 78 3d 72 28 33 30 32 32 32 29 2c 67 3d 72 2e 6e 28 78 29 2c 79 3d 72 28 38 31 36 30 37 29 2c 24 3d 72 2e 6e 28 79 29 2c 5f 3d 72 28 31 31 38 38 32 29 2c 6b 3d 72 2e 6e 28 5f 29 2c 77 3d 72 28 35 31 36 37 39 29 2c 54 3d 72 2e 6e 28 77 29 2c 45 3d 72 28 33 35 36 32 37 29 2c 55 3d 72 2e 6e 28 45 29 2c 7a 3d 72 28 31 34 34 31 38 29 2c 50 3d 72 2e 6e 28 7a 29 2c 52 3d 72 28 38 30 30 34 30 29 2c 5a 3d 72 2e 6e 28 52 29 2c 71 3d 72 28 31 39 37 35 35 29 2c 53 3d 72 2e 6e 28 71 29 2c 6a 3d 72 28 37 33 35 36 30 29 2c 4f 3d 72 28 33 38 30 31 Data Ascii: u),h=r(29747),c=r.n(h),p=r(96718),f=r.n(p),m=r(86302),v=r(33938),b=r(44845),x=r(30222),g=r.n(x),y=r(81607),$=r.n(y),_=r(11882),k=r.n(_),w=r(51679),T=r.n(w),E=r(35627),U=r.n(E),z=r(14418),P=r.n(z),R=r(80040),Z=r.n(R),q=r(19755),S=r.n(q),j=r(73560),O=r(3801
2024-04-26 12:23:45 UTC	1369	IN	Data Raw: 29 7b 74 68 69 73 2e 63 6c 65 61 6e 75 70 28 29 2c 74 68 69 73 2e 70 6f 70 75 6c 61 74 65 28 29 2c 74 68 69 73 2e 73 65 74 75 70 28 29 7d 2c 63 6c 65 61 6e 75 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 24 70 6f 6f 6c 2e 65 6d 70 74 79 28 29 2c 74 68 69 73 2e 24 65 72 72 6f 72 2e 68 69 64 65 28 29 7d 2c 70 6f 70 75 6c 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 74 68 69 73 2e 24 70 6f 6f 6c 2e 64 61 74 61 28 22 75 70 6c 6f 61 64 73 22 29 7c 7c 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 76 61 72 20 69 3d 74 2e 73 68 69 66 74 28 29 3b 69 66 28 69 29 7b 76 61 72 20 6e 3d 69 2e 64 69 73 70 6c 61 79 5f 66 69 6c 65 5f 6e 61 6d 65 7c 7c 69 2e 66 69 6c 65 5f 6e 61 6d 65 2c 61 3d 65 2e 72 65 6e 64 65 72 28 Data Ascii: ){this.cleanup(),this.populate(),this.setup()},cleanup:function(){this.$pool.empty(),this.$error.hide()},populate:function(){var e=this,t=this.$pool.data("uploads")\|\|[];!function r(){var i=t.shift();if(i){var n=i.display_file_name\|\|i.file_name,a=e.render(
2024-04-26 12:23:45 UTC	1369	IN	Data Raw: 76 65 2c 74 68 69 73 29 29 2c 54 28 29 28 65 29 2e 63 61 6c 6c 28 65 2c 22 5b 64 61 74 61 2d 75 70 6c 6f 61 64 2d 72 65 6d 6f 76 65 5d 22 29 2e 6b 65 79 75 70 28 74 68 69 73 2e 68 61 6e 64 6c 65 4b 65 79 55 70 2e 62 69 6e 64 28 74 68 69 73 29 29 7d 2c 68 61 6e 64 6c 65 4b 65 79 55 70 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 31 33 21 3d 3d 65 2e 6b 65 79 43 6f 64 65 26 26 33 32 21 3d 3d 65 2e 6b 65 79 43 6f 64 65 7c 7c 53 28 29 2e 70 72 6f 78 79 28 74 68 69 73 2e 72 65 6d 6f 76 65 2c 74 68 69 73 29 28 65 29 7d 2c 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 24 75 70 6c 6f 61 64 65 72 2e 66 69 6c 65 75 70 6c 6f 61 64 28 7b 64 72 6f 70 5a 6f 6e 65 3a 74 68 69 73 2e 24 64 72 6f 70 7a Data Ascii: ve,this)),T()(e).call(e,"[data-upload-remove]").keyup(this.handleKeyUp.bind(this))},handleKeyUp:function(e){e.preventDefault(),13!==e.keyCode&&32!==e.keyCode\|\|S().proxy(this.remove,this)(e)},setup:function(){this.$uploader.fileupload({dropZone:this.$dropz
2024-04-26 12:23:45 UTC	1369	IN	Data Raw: 69 64 22 29 2c 65 2e 61 62 72 75 70 74 28 22 72 65 74 75 72 6e 22 29 3b 63 61 73 65 20 31 31 3a 28 61 3d 72 2e 72 65 6e 64 65 72 28 7b 66 69 6c 65 6e 61 6d 65 3a 69 2e 6e 61 6d 65 7d 29 29 2e 61 74 74 72 28 22 61 72 69 61 2d 62 75 73 79 22 2c 21 30 29 2c 72 2e 61 70 70 65 6e 64 28 61 29 2c 74 2e 63 6f 6e 74 65 78 74 3d 61 2c 74 2e 66 6f 72 6d 44 61 74 61 3d 5b 7b 6e 61 6d 65 3a 22 61 75 74 68 65 6e 74 69 63 69 74 79 5f 74 6f 6b 65 6e 22 2c 76 61 6c 75 65 3a 6e 7d 5d 2c 74 2e 73 75 62 6d 69 74 28 29 3b 63 61 73 65 20 31 37 3a 63 61 73 65 22 65 6e 64 22 3a 72 65 74 75 72 6e 20 65 2e 73 74 6f 70 28 29 7d 7d 29 2c 65 29 7d 29 29 29 28 29 7d 2c 65 78 69 73 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 2c 69 3d 74 68 69 73 3b 72 65 74 75 72 Data Ascii: id"),e.abrupt("return");case 11:(a=r.render({filename:i.name})).attr("aria-busy",!0),r.append(a),t.context=a,t.formData=[{name:"authenticity_token",value:n}],t.submit();case 17:case"end":return e.stop()}}),e)})))()},exists:function(e){var t,r,i=this;retur
2024-04-26 12:23:45 UTC	1369	IN	Data Raw: 65 74 61 69 6c 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6a 71 58 48 52 2e 72 65 73 70 6f 6e 73 65 4a 53 4f 4e 26 26 65 2e 6a 71 58 48 52 2e 72 65 73 70 6f 6e 73 65 4a 53 4f 4e 5b 30 5d 26 26 65 2e 6a 71 58 48 52 2e 72 65 73 70 6f 6e 73 65 4a 53 4f 4e 5b 30 5d 2e 65 72 72 6f 72 7c 7c 6e 75 6c 6c 7d 2c 66 6c 61 73 68 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 2c 69 3b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 42 61 64 20 52 65 71 75 65 73 74 22 3a 63 61 73 65 22 46 69 6c 65 20 74 6f 6f 20 62 69 67 22 3a 69 3d 43 28 29 28 22 74 78 74 2e 68 65 6c 70 5f 63 65 6e 74 65 72 2e 76 69 65 77 73 2e 73 68 61 72 65 64 2e 75 70 6c 6f 61 64 5f 65 72 72 6f 72 2e 66 69 6c 65 5f 74 6f 6f 5f 62 69 67 22 29 3b 62 72 65 61 6b 3b Data Ascii: etails:function(e){return e.jqXHR.responseJSON&&e.jqXHR.responseJSON[0]&&e.jqXHR.responseJSON[0].error\|\|null},flash:function(e,t){var r,i;switch(e){case"Bad Request":case"File too big":i=C()("txt.help_center.views.shared.upload_error.file_too_big");break;
2024-04-26 12:23:45 UTC	528	IN	Data Raw: 75 65 29 2e 69 6e 6c 69 6e 65 7d 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 6d 6f 76 65 28 29 7d 29 29 3b 76 61 72 20 69 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 65 6d 70 6c 61 74 65 22 29 3b 69 2e 69 6e 6e 65 72 48 54 4d 4c 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 74 65 78 74 61 72 65 61 22 29 2e 76 61 6c 75 65 2c 28 30 2c 6d 2e 5a 29 28 69 2e 63 6f 6e 74 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 64 61 74 61 2d 69 6d 61 67 65 2d 74 6f 6b 65 6e 5d 22 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 65 2e 64 61 74 61 73 65 74 2c 69 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 Data Ascii: ue).inline})).forEach((function(e){return e.remove()}));var i=document.createElement("template");i.innerHTML=t.querySelector("textarea").value,(0,m.Z)(i.content.querySelectorAll("[data-image-token]")).forEach((function(e){var r=e.dataset,i=document.create

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	49960	104.18.70.113	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:44 UTC	574	OUT	GET /hc/assets/Multiselect-a2d65a7b7e9a562b8613b7199407bbdf.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:45 UTC	1135	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 12:23:45 GMT Content-Type: application/javascript Content-Length: 11919 Connection: close x-amz-id-2: 1orelU9bjpgQUrd5EOcmLR9AxYE1EYW/kD1qDdVW3xlV9Bmi/L6uV9wnF22uosrG+Bzc25ocePk= x-amz-request-id: XKZ77EPR0TACQWAQ x-amz-replication-status: COMPLETED Last-Modified: Mon, 18 Mar 2024 13:40:04 GMT ETag: "90c1775d172df374f22631d6d2bd2007" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=604800 x-amz-version-id: 1QFXffuPjGIZw_oe0IlyBZxtsMnqJ9dL CF-Cache-Status: HIT Age: 172875 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6y3kvObVizRD52dlVGWVqHXMRbETPbJ89%2FmqQq%2FVw%2F%2Bn839xXZWVBjEZ%2Bfp9%2BA%2Fu4duXFIbjIdp2Tg%2BTETudntXVg0yuJpzokjOZGeloKsZxZeUYTbWlMDnm0d4%2BeNzlcfskfj8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 87a68bbabe609071-MIA
2024-04-26 12:23:45 UTC	234	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 68 65 6c 70 5f 63 65 6e 74 65 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 68 65 6c 70 5f 63 65 6e 74 65 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 30 34 31 39 5d 2c 7b 33 30 37 30 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 7a 7d 7d 29 3b 76 61 72 20 69 3d 6e 28 38 36 33 30 32 29 2c 73 3d 6e 28 36 38 34 32 30 29 2c 61 3d 6e 28 32 37 33 34 34 29 2c 6f 3d 6e 28 37 36 39 38 36 29 2c 72 3d 6e 2e 6e 28 6f 29 2c 63 3d 6e 28 31 31 38 38 32 29 2c 6c 3d 6e 2e 6e 28 63 Data Ascii: (self.webpackChunkhelp_center=self.webpackChunkhelp_center\|\|[]).push([[20419],{30703:function(e,t,n){"use strict";n.r(t),n.d(t,{default:function(){return z}});var i=n(86302),s=n(68420),a=n(27344),o=n(76986),r=n.n(o),c=n(11882),l=n.n(c
2024-04-26 12:23:45 UTC	1369	IN	Data Raw: 29 2c 75 3d 6e 28 33 39 30 32 32 29 2c 70 3d 6e 2e 6e 28 75 29 2c 64 3d 6e 28 31 34 34 31 38 29 2c 68 3d 6e 2e 6e 28 64 29 2c 76 3d 6e 28 38 33 37 32 38 29 2c 66 3d 6e 28 39 37 36 30 36 29 2c 62 3d 6e 2e 6e 28 66 29 2c 6b 3d 6e 28 32 34 32 38 32 29 2c 67 3d 6e 2e 6e 28 6b 29 2c 79 3d 28 6e 28 33 35 36 32 37 29 2c 31 33 29 2c 6d 3d 32 37 2c 4f 3d 33 32 2c 78 3d 33 38 2c 45 3d 34 30 2c 53 3d 33 39 2c 49 3d 33 37 2c 77 3d 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 29 7b 76 61 72 20 69 3d 5b 5d 3b 72 65 74 75 72 6e 20 6e 26 26 69 2e 70 75 73 68 28 7b 70 61 72 65 6e 74 3a 6e 7d 29 2c 74 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 2e 70 75 73 68 28 74 2e 6f 70 74 69 6f 6e 73 3f 72 28 29 28 7b 7d 2c 74 2c 7b 6f 70 74 69 6f 6e 73 3a 65 28 Data Ascii: ),u=n(39022),p=n.n(u),d=n(14418),h=n.n(d),v=n(83728),f=n(97606),b=n.n(f),k=n(24282),g=n.n(k),y=(n(35627),13),m=27,O=32,x=38,E=40,S=39,I=37,w=function e(t,n){var i=[];return n&&i.push({parent:n}),t.forEach((function(t){i.push(t.options?r()({},t,{options:e(
2024-04-26 12:23:45 UTC	1369	IN	Data Raw: 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 70 72 6f 70 73 2c 6e 3d 74 2e 69 73 4f 70 65 6e 2c 69 3d 74 2e 6f 70 65 6e 4d 65 6e 75 2c 73 3d 74 2e 75 6e 73 65 6c 65 63 74 4f 70 74 69 6f 6e 2c 61 3d 74 2e 66 6f 63 75 73 54 6f 67 67 6c 65 2c 6f 3d 65 2e 74 61 72 67 65 74 3b 4d 28 6f 2c 27 5b 61 72 69 61 2d 6c 61 62 65 6c 3d 22 63 6c 6f 73 65 22 5d 27 29 7c 7c 4d 28 6f 2c 27 73 70 61 6e 5b 61 72 69 61 2d 6c 61 62 65 6c 3d 22 27 2e 63 6f 6e 63 61 74 28 43 28 29 28 22 74 78 74 2e 68 65 6c 70 5f 63 65 6e 74 65 72 2e 76 69 65 77 73 2e 72 65 71 75 65 73 74 73 2e 6e 65 77 2e 6d 75 6c 74 69 73 65 6c 65 63 74 5f 72 65 6d 6f 76 65 5f 76 61 6c 75 65 22 29 2c 27 22 5d 27 29 29 3f 73 28 65 2e 74 61 72 67 65 74 2e 6e Data Ascii: er",value:function(e){var t=this.props,n=t.isOpen,i=t.openMenu,s=t.unselectOption,a=t.focusToggle,o=e.target;M(o,'[aria-label="close"]')\|\|M(o,'span[aria-label="'.concat(C()("txt.help_center.views.requests.new.multiselect_remove_value"),'"]'))?s(e.target.n
2024-04-26 12:23:45 UTC	1369	IN	Data Raw: 28 5f 29 2c 4e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 28 30 2c 73 2e 5a 29 28 74 68 69 73 2c 65 29 2c 74 68 69 73 2e 70 72 6f 70 73 3d 74 2c 74 68 69 73 2e 72 65 6e 64 65 72 28 29 2c 74 68 69 73 2e 73 65 74 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 72 65 74 75 72 6e 28 30 2c 61 2e 5a 29 28 65 2c 5b 7b 6b 65 79 3a 22 75 70 64 61 74 65 50 72 6f 70 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 70 72 6f 70 73 2c 6e 3d 74 2e 6f 70 74 69 6f 6e 73 2c 69 3d 74 2e 73 65 6c 65 63 74 65 64 4f 70 74 69 6f 6e 73 2c 73 3d 65 2e 6f 70 74 69 6f 6e 73 2c 61 3d 65 2e 73 65 6c 65 63 74 65 64 4f 70 74 69 6f 6e 73 3b 69 66 28 74 68 69 73 2e 70 72 6f 70 73 3d 72 28 29 28 7b 7d 2c Data Ascii: (_),N=function(){function e(t){(0,s.Z)(this,e),this.props=t,this.render(),this.setEventListeners()}return(0,a.Z)(e,[{key:"updateProps",value:function(e){var t=this.props,n=t.options,i=t.selectedOptions,s=e.options,a=e.selectedOptions;if(this.props=r()({},
2024-04-26 12:23:45 UTC	1369	IN	Data Raw: 65 64 22 2c 22 74 72 75 65 22 29 29 7d 29 29 2c 6f 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 69 6e 70 75 74 5b 76 61 6c 75 65 3d 27 22 2e 63 6f 6e 63 61 74 28 65 2c 22 27 5d 22 29 29 3b 74 26 26 28 74 2e 63 68 65 63 6b 65 64 3d 21 31 2c 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 63 68 65 63 6b 65 64 22 2c 22 66 61 6c 73 65 22 29 29 7d 29 29 7d 7d 2c 7b 6b 65 79 3a 22 66 6f 63 75 73 43 75 72 72 65 6e 74 4f 70 74 69 6f 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 70 72 6f 70 73 2c 74 3d 65 2e 63 6f 6e 74 61 69 6e 65 Data Ascii: ed","true"))})),o.forEach((function(e){var t=n.querySelector("input[value='".concat(e,"']"));t&&(t.checked=!1,t.parentElement.parentElement.setAttribute("aria-checked","false"))}))}},{key:"focusCurrentOption",value:function(){var e=this.props,t=e.containe
2024-04-26 12:23:45 UTC	1369	IN	Data Raw: 31 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 29 29 2e 63 61 6c 6c 28 76 2c 67 3f 22 63 68 65 63 6b 65 64 22 3a 22 22 2c 27 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 3e 27 29 3a 27 3c 69 6e 70 75 74 20 64 69 73 61 62 6c 65 64 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 2f 3e 27 2c 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 29 29 2e 63 61 6c 6c 28 69 2c 66 3f 43 28 29 28 22 74 78 74 2e 68 65 6c 70 5f 63 65 6e 74 65 72 2e 76 69 65 77 73 2e 61 64 6d 69 6e 2e 73 68 61 72 65 64 2e 62 61 63 6b 22 29 3a 65 2e 6c 61 62 65 6c 2c 22 5c Data Ascii: 1"\n ')).call(v,g?"checked":"",'\n type="checkbox"\n />'):'<input disabled aria-hidden="true" type="checkbox"/>',"\n ")).call(i,f?C()("txt.help_center.views.admin.shared.back"):e.label,"\
2024-04-26 12:23:45 UTC	1369	IN	Data Raw: 69 73 29 2c 74 68 69 73 2e 66 6f 63 75 73 4f 70 74 69 6f 6e 3d 74 68 69 73 2e 66 6f 63 75 73 4f 70 74 69 6f 6e 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 66 6f 63 75 73 50 72 65 76 69 6f 75 73 3d 74 68 69 73 2e 66 6f 63 75 73 50 72 65 76 69 6f 75 73 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 66 6f 63 75 73 4e 65 78 74 3d 74 68 69 73 2e 66 6f 63 75 73 4e 65 78 74 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 66 6f 63 75 73 54 6f 67 67 6c 65 3d 74 68 69 73 2e 66 6f 63 75 73 54 6f 67 67 6c 65 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 73 65 6c 65 63 74 46 6f 63 75 73 65 64 3d 74 68 69 73 2e 73 65 6c 65 63 74 46 6f 63 75 73 65 64 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 66 6f 63 75 73 48 61 6e 64 6c 65 72 3d 74 68 69 73 Data Ascii: is),this.focusOption=this.focusOption.bind(this),this.focusPrevious=this.focusPrevious.bind(this),this.focusNext=this.focusNext.bind(this),this.focusToggle=this.focusToggle.bind(this),this.selectFocused=this.selectFocused.bind(this),this.focusHandler=this
2024-04-26 12:23:45 UTC	1369	IN	Data Raw: 28 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 6f 70 65 6e 4d 65 6e 75 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 53 74 61 74 65 28 7b 69 73 4f 70 65 6e 3a 21 30 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 63 6c 6f 73 65 4d 65 6e 75 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 53 74 61 74 65 28 7b 69 73 4f 70 65 6e 3a 21 31 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 73 65 6c 65 63 74 4f 70 74 69 6f 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 74 68 69 73 2e 73 74 61 74 65 2e 73 65 6c 65 63 74 65 64 4f 70 74 69 6f 6e 73 3b 74 68 69 73 2e 73 65 74 53 74 61 74 65 28 7b 73 65 6c 65 63 74 65 64 4f 70 74 69 6f 6e 73 3a 70 28 29 28 74 3d 5b 5d 29 2e 63 61 6c 6c 28 74 2c 28 30 2c Data Ascii: ()}}},{key:"openMenu",value:function(){this.setState({isOpen:!0})}},{key:"closeMenu",value:function(){this.setState({isOpen:!1})}},{key:"selectOption",value:function(e){var t,n=this.state.selectedOptions;this.setState({selectedOptions:p()(t=[]).call(t,(0,
2024-04-26 12:23:45 UTC	1369	IN	Data Raw: 74 68 69 73 2e 73 74 61 74 65 2e 66 6f 63 75 73 65 64 49 6e 64 65 78 3b 2d 31 21 3d 3d 65 26 26 74 68 69 73 2e 66 6f 63 75 73 4f 70 74 69 6f 6e 28 65 2d 31 29 7d 7d 2c 7b 6b 65 79 3a 22 66 6f 63 75 73 4e 65 78 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 73 74 61 74 65 2c 74 3d 65 2e 66 6f 63 75 73 65 64 49 6e 64 65 78 3b 74 21 3d 3d 65 2e 6f 70 74 69 6f 6e 73 2e 6c 65 6e 67 74 68 2d 31 26 26 74 68 69 73 2e 66 6f 63 75 73 4f 70 74 69 6f 6e 28 74 2b 31 29 7d 7d 2c 7b 6b 65 79 3a 22 75 70 64 61 74 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 76 69 65 77 73 2e 74 6f 67 67 6c 65 2e 75 70 64 61 74 65 50 72 6f 70 73 28 74 68 69 73 2e 73 74 61 74 65 29 2c 74 68 69 73 2e 76 69 65 77 73 Data Ascii: this.state.focusedIndex;-1!==e&&this.focusOption(e-1)}},{key:"focusNext",value:function(){var e=this.state,t=e.focusedIndex;t!==e.options.length-1&&this.focusOption(t+1)}},{key:"update",value:function(){this.views.toggle.updateProps(this.state),this.views
2024-04-26 12:23:45 UTC	733	IN	Data Raw: 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 29 7d 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 72 65 74 75 72 6e 20 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 6f 2c 65 29 2c 6e 65 77 20 4b 28 7b 6f 70 74 69 6f 6e 73 3a 69 2c 73 65 6c 65 63 74 65 64 4f 70 74 69 6f 6e 73 3a 73 2c 61 74 74 72 69 62 75 74 65 73 3a 61 2c 63 6f 6e 74 61 69 6e 65 72 3a 6f 7d 29 7d 7d 2c 39 38 35 32 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 28 31 34 30 33 38 29 3b 76 61 72 20 69 3d 6e 28 35 34 30 35 38 29 3b 65 2e 65 78 70 6f 72 74 73 3d 69 2e 70 61 72 73 65 49 6e 74 7d 2c 32 39 38 30 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 Data Ascii: Attribute("aria-labelledby")},o=document.createElement("div");return e.parentNode.replaceChild(o,e),new K({options:i,selectedOptions:s,attributes:a,container:o})}},98524:function(e,t,n){n(14038);var i=n(54058);e.exports=i.parseInt},29806:function(e,t,n){v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	49961	104.18.249.37	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:44 UTC	1541	OUT	GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1 Host: help.venmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; d_id=f9d8a02dda1e499da9fdccab0d31ca111714134181973; enforce_policy=ccpa; tsrce=identityappsnodeweb; l7_az=dcg15.slc; ts_c=vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3; cookie_prefs=T%3D0%2CP%3D1%2CF%3D1%2Ctype%3Dinitial; x-pp-s=eyJ0IjoiMTcxNDEzNDIxMTMyMyIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742211%26vteXpYrS%3D1714136011%26vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3%26vtyp%3Dnew; __cfruid=4d718761ca3665ade518e98728cfc4e55786fa9f-1714134211; _help_center_session=ODlFR2dSZi85dzJTaFRSYkNhcVM3ME5hRXZUS2Y1S0t6clY2dnJ5VHVKL1dodEpWRm15NmdpZUg5TUNSeWE0THB5TkZONmkwTlJkVE00dHNUOWhLdjFlblJXbk9HYndQakZMdjBvVndVMmF0TENxWi9kMWNZWmNTZFJCZE1XdFFxWndOVkJKY2JXcjJpbGlrNWhzQ01QajJ0cjJYbmUyM2dZdS9pSjdxMXZHRlcwWnRGd056ZnFTeWdPM2ZGNFNjQ0hZMUYwRnovMG9CMEVLbEQ2bzVjdz09LS1nVHB3RzV0RE1UV0x0SmltSVNMRWV3PT0%3D--a061474dcdcfc9d4f03fd5255b000e327d5e29e1; _gat=1
2024-04-26 12:23:45 UTC	613	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 12:23:45 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, public location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/471dc2adc340/main.js Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qexb4XvgxOZjLzM5x3vw0QuQOk%2By6J6JlzKbHTDViswdwErqFlufUhbhfgaUKUp36EerPHAADSmcaXJuYJ%2BjX46HZTr7h3j9xqjLKy2LU2Ek7aznCfZGWng7Jojp%2FQlZ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a68bba7ed73376-MIA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	49957	104.18.70.113	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:44 UTC	580	OUT	GET /hc/assets/conditionalFields-94035710ae792963e0b0a4085dfc0d64.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:45 UTC	1134	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 12:23:45 GMT Content-Type: application/javascript Content-Length: 2924 Connection: close x-amz-id-2: y1kpjzRISCf/Vy1MZ9yA2AUWzsvMk0rRTfe1V8mMONFFFj6fin13ygagN0kYet6eAiX3MC+iywyRWux//EuEYQ== x-amz-request-id: 7MVYF1RJN90W6YN0 x-amz-replication-status: COMPLETED Last-Modified: Tue, 19 Mar 2024 13:05:46 GMT ETag: "cf598d80939b4c3edaec3129a8ad6e2f" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=604800 x-amz-version-id: daLlAfF0w.rgvwJQsEHkc9ewjxzU3ISf CF-Cache-Status: HIT Age: 562542 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yv6EVAoWlUk%2B0YkisuMCmC8orq%2Bsm46Tl12yErt4SutSU5NzEfEm331SOwVOLdvIDp3wTKWgw9hJ0f4Fwo3lKAWg3L2pcfh6KpWmEmw3R54M4URtvtSPQqI%2FLYefQt8Pz77ADL4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 87a68bba9b055c64-MIA
2024-04-26 12:23:45 UTC	235	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 68 65 6c 70 5f 63 65 6e 74 65 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 68 65 6c 70 5f 63 65 6e 74 65 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 33 33 31 34 5d 2c 7b 35 39 38 31 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 69 29 7b 69 2e 72 28 6e 29 3b 76 61 72 20 72 3d 69 28 39 37 36 30 36 29 2c 74 3d 69 2e 6e 28 72 29 2c 63 3d 69 28 31 31 38 38 32 29 2c 6c 3d 69 2e 6e 28 63 29 2c 64 3d 69 28 35 31 36 37 39 29 2c 75 3d 69 2e 6e 28 64 29 2c 6f 3d 69 28 31 34 34 31 38 29 2c 61 3d 69 2e 6e 28 6f 29 2c 66 3d 69 28 31 39 37 35 35 29 2c 73 3d 69 2e 6e 28 66 29 2c 68 3d 69 28 31 33 34 36 39 29 Data Ascii: "use strict";(self.webpackChunkhelp_center=self.webpackChunkhelp_center\|\|[]).push([[23314],{59818:function(e,n,i){i.r(n);var r=i(97606),t=i.n(r),c=i(11882),l=i.n(c),d=i(51679),u=i.n(d),o=i(14418),a=i.n(o),f=i(19755),s=i.n(f),h=i(13469)
2024-04-26 12:23:45 UTC	1369	IN	Data Raw: 2c 76 3d 69 28 37 33 35 36 30 29 2c 70 3d 69 28 33 38 30 31 36 29 2c 5f 3d 69 2e 6e 28 70 29 2c 71 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 30 2c 68 2e 74 6f 41 72 72 61 79 29 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 74 28 29 28 65 29 2e 63 61 6c 6c 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 2e 22 2e 63 6f 6e 63 61 74 28 65 29 7d 29 29 2e 6a 6f 69 6e 28 22 2c 22 29 29 29 7d 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 30 2c 68 2e 74 6f 41 72 72 61 79 29 28 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 6e 70 75 74 2c 20 74 65 78 74 61 72 65 61 2c 20 73 65 6c 65 63 74 22 29 29 7d 2c 46 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 Data Ascii: ,v=i(73560),p=i(38016),_=i.n(p),q=function(e){return(0,h.toArray)(document.querySelectorAll(t()(e).call(e,(function(e){return".".concat(e)})).join(",")))},b=function(e){return(0,h.toArray)(e.querySelectorAll("input, textarea, select"))},F=function(e){retu
2024-04-26 12:23:45 UTC	1320	IN	Data Raw: 63 61 74 69 6f 6e 2e 66 6f 72 6d 73 2e 6f 70 74 69 6f 6e 61 6c 22 29 2c 69 3d 46 28 65 29 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 29 3b 72 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 6f 70 74 69 6f 6e 61 6c 22 29 2c 72 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 22 28 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 29 22 29 2c 69 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 72 29 7d 29 29 7d 28 28 30 2c 68 2e 64 69 66 66 65 72 65 6e 63 65 29 28 74 2c 72 29 29 2c 6d 28 28 30 2c 68 2e 64 69 66 66 65 72 65 6e 63 65 29 28 72 2c 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 72 65 74 75 72 6e 28 30 2c 68 2e 6f 62 6a 65 63 74 29 28 65 2c 74 28 29 28 65 29 2e 63 61 6c 6c 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b Data Ascii: cation.forms.optional"),i=F(e),r=document.createElement("span");r.classList.add("optional"),r.textContent="(".concat(n,")"),i.appendChild(r)}))}((0,h.difference)(t,r)),m((0,h.difference)(r,t))}function k(e){return(0,h.object)(e,t()(e).call(e,(function(e){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	49958	104.18.70.113	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:44 UTC	568	OUT	GET /hc/assets/92085-55ddff94373af8bb6493031a7691529c.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:45 UTC	1126	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 12:23:45 GMT Content-Type: application/javascript Content-Length: 1843 Connection: close x-amz-id-2: 91XSCNcIfFRy782+NR5zK+NltsC6RXjPKowMhOJtFgbupstvSacXgA4iIpQmTP/opCUIx7SsgY0= x-amz-request-id: J4D5QQC2Z1GDGTEM x-amz-replication-status: COMPLETED Last-Modified: Thu, 21 Mar 2024 14:12:05 GMT ETag: "b8cccae3cb418a4a6dd6ebfbf57bb693" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=604800 x-amz-version-id: 3KX6DYe6ksKLU2rHNVE.vIpdXSBEs_OV CF-Cache-Status: HIT Age: 234663 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cANFTLASvHXoCSgl9gBeebx5RU0Q8A1UnQhStPq79sgxuhA3%2FLKxYx5gq7oYQSyYgv6XVC%2FLSQ7zJNq7s8H%2BdVA3gI5O9vzzAMyoH4PYlEFhU6AZtVpiyUX9%2FdZM75BMcfyx%2FvI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 87a68bba9c50a51c-MIA
2024-04-26 12:23:45 UTC	243	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 68 65 6c 70 5f 63 65 6e 74 65 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 68 65 6c 70 5f 63 65 6e 74 65 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 32 30 38 35 5d 2c 7b 39 32 30 38 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 2e 72 28 74 29 2c 72 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 6e 44 69 67 69 74 73 52 65 67 65 78 3d 2f 5b 5e 5c 64 5d 2f 67 2c 74 68 69 73 2e 63 63 4e 75 6d 62 65 72 73 52 65 67 65 78 3d 2f 5b 30 2d 39 5d 7b 31 33 2c 31 39 7d 2f 2c 74 68 69 Data Ascii: "use strict";(self.webpackChunkhelp_center=self.webpackChunkhelp_center\|\|[]).push([[92085],{92085:function(e,t,r){r.r(t),r.d(t,{default:function(){return o}});var n=function(){this.nonDigitsRegex=/[^\d]/g,this.ccNumbersRegex=/[0-9]{13,19}/,thi
2024-04-26 12:23:45 UTC	1369	IN	Data Raw: 73 2e 72 65 64 61 63 74 65 64 43 43 4e 75 6d 62 65 72 52 65 67 65 78 3d 2f 5e 5b 58 5d 7b 39 2c 31 35 7d 2f 2c 74 68 69 73 2e 6d 69 6e 4c 65 6e 67 74 68 3d 31 33 2c 74 68 69 73 2e 6d 61 78 4c 65 6e 67 74 68 3d 31 39 7d 3b 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 72 65 64 61 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 68 69 73 2e 61 6c 72 65 61 64 79 52 65 64 61 63 74 65 64 43 43 4e 75 6d 62 65 72 28 65 29 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 74 3d 74 68 69 73 2e 72 65 6d 6f 76 65 4e 6f 6e 44 69 67 69 74 73 28 65 29 3b 69 66 28 74 68 69 73 2e 76 61 6c 69 64 4c 65 6e 67 74 68 28 74 29 29 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 64 61 63 74 43 43 4e 75 6d 62 65 72 28 74 2e 74 6f 53 74 72 69 6e 67 28 29 29 3b 76 61 72 20 72 3d 74 68 69 73 2e Data Ascii: s.redactedCCNumberRegex=/^[X]{9,15}/,this.minLength=13,this.maxLength=19};n.prototype={redact:function(e){if(this.alreadyRedactedCCNumber(e))return e;var t=this.removeNonDigits(e);if(this.validLength(t))return this.redactCCNumber(t.toString());var r=this.
2024-04-26 12:23:45 UTC	231	IN	Data Raw: 7c 28 28 75 3d 6e 65 77 20 73 28 65 2c 74 29 29 2e 66 6f 72 6d 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 6c 75 72 22 2c 75 2e 6f 6e 42 6c 75 72 2c 21 30 29 2c 75 2e 66 6f 72 6d 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 73 75 62 6d 69 74 22 2c 75 2e 6f 6e 53 75 62 6d 69 74 29 29 7d 2c 72 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 75 2e 66 6f 72 6d 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 6c 75 72 22 2c 75 2e 6f 6e 42 6c 75 72 2c 21 30 29 2c 75 2e 66 6f 72 6d 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 73 75 62 6d 69 74 22 2c 75 2e 6f 6e 53 75 62 6d 69 74 29 2c 75 3d 6e 75 6c 6c 7d 7d 7d 7d 5d 29 3b Data Ascii: \|((u=new s(e,t)).form.addEventListener("blur",u.onBlur,!0),u.form.addEventListener("submit",u.onSubmit))},reset:function(){u.form.removeEventListener("blur",u.onBlur,!0),u.form.removeEventListener("submit",u.onSubmit),u=null}}}}]);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	49964	151.101.129.35	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:47 UTC	1196	OUT	GET /ts?v=1.8.16&t=1714134220066&g=-120&tenant_name=venmo&bchn=venmohelp&comp=zendeskguide&ccpg=US&page_template=new_request_page&pgrp=main%3Aprivacy%3Apolicy&rsta=English%20(US)&lgin=out&page=main%3Aprivacy%3Apolicy%3Accpa&displaypage=venmo%3Ahelp%3Anew_request_page&ppage=privacy_banner&bannertype=cookiebanner&flag=ccpa&bannerversion=v4&bannersource=ConsentNodeServ&xe=108814&xt=142081&eligibility_reason=true&cookie_disabled=false&tenant_code=venmo&event_name=venmo_cookie_banner_shown&e=ac HTTP/1.1 Host: t.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; l7_az=dcg16.slc; ts=vreXpYrS%3D1808742224%26vteXpYrS%3D1714136024%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew; x-pp-s=eyJ0IjoiMTcxNDEzNDIyNDQxMSIsImwiOiIwIiwibSI6IjAifQ
2024-04-26 12:23:47 UTC	1233	IN	HTTP/1.1 200 OK Connection: close CORRELATION-ID: ba2223e598ed3 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Fri, 26 Apr 2024 12:23:47 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: ba2223e598ed3 Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1808742227%26vteXpYrS%3D1714136027%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew;Expires=Mon, 26 Apr 2027 12:23:47 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088;Expires=Mon, 26 Apr 2027 12:23:47 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-0000000000000000000ba2223e598ed3-feb15b9c092e1f20-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Fri, 26 Apr 2024 12:23:47 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-iad-kjyo7100045-IAD, cache-gnv1820031-GNV X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1714134228.691653,VS0,VE107 vary: Accept-Encoding Server-Timing: content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-04-26 12:23:47 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-04-26 12:23:47 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-04-26 12:23:47 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	49965	104.18.249.37	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:47 UTC	1558	OUT	GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/471dc2adc340/main.js HTTP/1.1 Host: help.venmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; d_id=f9d8a02dda1e499da9fdccab0d31ca111714134181973; enforce_policy=ccpa; tsrce=identityappsnodeweb; l7_az=dcg15.slc; ts_c=vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3; cookie_prefs=T%3D0%2CP%3D1%2CF%3D1%2Ctype%3Dinitial; x-pp-s=eyJ0IjoiMTcxNDEzNDIxMTMyMyIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742211%26vteXpYrS%3D1714136011%26vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3%26vtyp%3Dnew; __cfruid=4d718761ca3665ade518e98728cfc4e55786fa9f-1714134211; _help_center_session=ODlFR2dSZi85dzJTaFRSYkNhcVM3ME5hRXZUS2Y1S0t6clY2dnJ5VHVKL1dodEpWRm15NmdpZUg5TUNSeWE0THB5TkZONmkwTlJkVE00dHNUOWhLdjFlblJXbk9HYndQakZMdjBvVndVMmF0TENxWi9kMWNZWmNTZFJCZE1XdFFxWndOVkJKY2JXcjJpbGlrNWhzQ01QajJ0cjJYbmUyM2dZdS9pSjdxMXZHRlcwWnRGd056ZnFTeWdPM2ZGNFNjQ0hZMUYwRnovMG9CMEVLbEQ2bzVjdz09LS1nVHB3RzV0RE1UV0x0SmltSVNMRWV3PT0%3D--a061474dcdcfc9d4f03fd5255b000e327d5e29e1; _gat=1
2024-04-26 12:23:47 UTC	624	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 12:23:47 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: accept-encoding cache-control: max-age=14400, public x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fJA%2FHCsqztSF17cMr2Poac2yd6gFcXpdeUeWF6zjUJI%2BPwgZ5jIOQaBhPzvyn1lyq5nmmcnJVYei9vvBUPWYbur2SouxT8F0R%2FmiX5cSycEhki6zCcUH2ckA8%2Fua9Vs9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a68bcb0ead495a-MIA
2024-04-26 12:23:47 UTC	745	IN	Data Raw: 31 65 62 62 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 62 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 56 2c 67 2c 68 2c 6d 2c 6e 2c 78 2c 79 2c 41 29 7b 56 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 65 2c 55 2c 66 2c 43 29 7b 66 6f 72 28 55 3d 62 2c 66 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 43 3d 70 61 72 73 65 49 6e 74 28 55 28 35 37 31 29 29 2f 31 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 34 39 31 29 29 2f 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 55 28 35 33 37 29 29 2f 33 29 2b 70 61 72 73 65 49 6e 74 28 55 28 35 34 31 29 29 2f 34 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 35 30 37 29 29 2f 35 2a 28 2d 70 61 72 73 65 49 6e 74 28 55 28 35 38 38 29 29 2f 36 29 2b 70 61 72 73 65 49 6e 74 28 55 28 34 38 37 29 29 Data Ascii: 1ebbwindow._cf_chl_opt={cFPWv:'b'};~function(V,g,h,m,n,x,y,A){V=b,function(c,e,U,f,C){for(U=b,f=c();!![];)try{if(C=parseInt(U(571))/1+-parseInt(U(491))/2(-parseInt(U(537))/3)+parseInt(U(541))/4+-parseInt(U(507))/5(-parseInt(U(588))/6)+parseInt(U(487))
2024-04-26 12:23:47 UTC	1369	IN	Data Raw: 28 61 34 28 34 39 30 29 29 5d 28 48 29 29 3a 66 75 6e 63 74 69 6f 6e 28 4e 2c 61 35 2c 4f 29 7b 66 6f 72 28 61 35 3d 61 34 2c 4e 5b 61 35 28 35 38 31 29 5d 28 29 2c 4f 3d 30 3b 4f 3c 4e 5b 61 35 28 35 36 30 29 5d 3b 4e 5b 4f 5d 3d 3d 3d 4e 5b 4f 2b 31 5d 3f 4e 5b 61 35 28 35 34 34 29 5d 28 4f 2b 31 2c 31 29 3a 4f 2b 3d 31 29 3b 72 65 74 75 72 6e 20 4e 7d 28 48 29 2c 49 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 49 3d 49 5b 61 34 28 35 32 30 29 5d 5b 61 34 28 35 37 34 29 5d 28 49 29 2c 4a 3d 30 3b 4a 3c 48 5b 61 34 28 35 36 30 29 5d 3b 4b 3d 48 5b 4a 5d 2c 4c 3d 73 28 43 2c 44 2c 4b 29 2c 49 28 4c 29 3f 28 4d 3d 4c 3d 3d 3d 27 73 27 26 26 21 43 5b 61 34 28 35 33 33 29 5d 28 44 5b 4b 5d 29 2c 61 34 28 35 35 31 29 3d 3d 3d 45 2b 4b 3f Data Ascii: (a4(490))](H)):function(N,a5,O){for(a5=a4,N[a5(581)](),O=0;O<N[a5(560)];N[O]===N[O+1]?N[a5(544)](O+1,1):O+=1);return N}(H),I='nAsAaAb'.split('A'),I=I[a4(520)][a4(574)](I),J=0;J<H[a4(560)];K=H[J],L=s(C,D,K),I(L)?(M=L==='s'&&!C[a4(533)](D[K]),a4(551)===E+K?
2024-04-26 12:23:47 UTC	1369	IN	Data Raw: 65 6c 73 65 7b 66 6f 72 28 54 3d 31 2c 47 3d 30 3b 47 3c 4d 3b 4f 3d 54 7c 4f 3c 3c 31 2c 50 3d 3d 45 2d 31 3f 28 50 3d 30 2c 4e 5b 61 61 28 35 31 30 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3d 30 2c 47 2b 2b 29 3b 66 6f 72 28 54 3d 4a 5b 61 61 28 35 36 34 29 5d 28 30 29 2c 47 3d 30 3b 31 36 3e 47 3b 4f 3d 4f 3c 3c 31 7c 54 26 31 2c 50 3d 3d 45 2d 31 3f 28 50 3d 30 2c 4e 5b 61 61 28 35 31 30 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3e 3e 3d 31 2c 47 2b 2b 29 3b 7d 4b 2d 2d 2c 4b 3d 3d 30 26 26 28 4b 3d 4d 61 74 68 5b 61 61 28 35 36 39 29 5d 28 32 2c 4d 29 2c 4d 2b 2b 29 2c 64 65 6c 65 74 65 20 49 5b 4a 5d 7d 65 6c 73 65 20 66 6f 72 28 54 3d 48 5b 4a 5d 2c 47 3d 30 3b 47 3c 4d 3b 4f 3d 54 26 31 2e 39 31 7c 4f 3c 3c 31 2e 35 Data Ascii: else{for(T=1,G=0;G<M;O=T\|O<<1,P==E-1?(P=0,N[aa(510)](F(O)),O=0):P++,T=0,G++);for(T=J[aa(564)](0),G=0;16>G;O=O<<1\|T&1,P==E-1?(P=0,N[aa(510)](F(O)),O=0):P++,T>>=1,G++);}K--,K==0&&(K=Math[aa(569)](2,M),M++),delete I[J]}else for(T=H[J],G=0;G<M;O=T&1.91\|O<<1.5
2024-04-26 12:23:47 UTC	1369	IN	Data Raw: 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 4d 2a 28 30 3c 53 3f 31 3a 30 29 2c 4d 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 51 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 64 28 35 36 39 29 5d 28 32 2c 38 29 2c 4d 3d 31 3b 52 21 3d 4d 3b 53 3d 4f 26 4e 2c 4f 3e 3e 3d 31 2c 4f 3d 3d 30 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 4d 2a 28 30 3c 53 3f 31 3a 30 29 2c 4d 3c 3c 3d 31 29 3b 54 3d 65 28 51 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 64 28 35 36 39 29 5d 28 32 2c 31 36 29 2c 4d 3d 31 3b 52 21 3d 4d 3b 53 3d 4f 26 4e 2c 4f 3e 3e 3d 31 2c 30 3d 3d 4f 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 4d 2a 28 30 3c 53 3f 31 3a 30 29 2c 4d 3c 3c Data Ascii: =E,N=F(P++)),Q\|=M(0<S?1:0),M<<=1);switch(Q){case 0:for(Q=0,R=Math[ad(569)](2,8),M=1;R!=M;S=O&N,O>>=1,O==0&&(O=E,N=F(P++)),Q\|=M(0<S?1:0),M<<=1);T=e(Q);break;case 1:for(Q=0,R=Math[ad(569)](2,16),M=1;R!=M;S=O&N,O>>=1,0==O&&(O=E,N=F(P++)),Q\|=M*(0<S?1:0),M<<
2024-04-26 12:23:47 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 47 3d 7b 7d 2c 47 2e 72 3d 7b 7d 2c 47 2e 65 3d 48 2c 47 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 28 63 2c 64 2c 65 29 7b 72 65 74 75 72 6e 20 65 3d 61 28 29 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 29 7b 72 65 74 75 72 6e 20 66 3d 66 2d 34 38 35 2c 68 3d 65 5b 66 5d 2c 68 7d 2c 62 28 63 2c 64 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 63 2c 65 2c 61 30 29 7b 72 65 74 75 72 6e 20 61 30 3d 56 2c 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 5b 61 30 28 34 39 32 29 5d 26 26 30 3c 63 5b 61 30 28 34 39 32 29 5d 5b 61 30 28 34 39 35 29 5d 5b 61 30 28 35 37 39 29 5d 5b 61 30 28 35 36 37 29 5d 28 65 29 5b 61 30 28 35 35 36 29 5d 28 61 30 28 35 30 34 29 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 43 2c 44 2c 61 31 2c 45 29 7b 61 31 3d 56 3b 74 Data Ascii: return G={},G.r={},G.e=H,G}}function b(c,d,e){return e=a(),b=function(f,g,h){return f=f-485,h=e[f],h},b(c,d)}function o(c,e,a0){return a0=V,e instanceof c[a0(492)]&&0<c[a0(492)][a0(495)][a0(579)][a0(567)](e)[a0(556)](a0(504))}function s(e,C,D,a1,E){a1=V;t
2024-04-26 12:23:47 UTC	1369	IN	Data Raw: 48 66 66 70 35 3b 7a 78 52 5a 79 65 37 3b 4d 45 4a 56 51 46 39 3b 4a 55 46 67 31 3b 77 73 65 68 48 37 3b 6d 52 42 51 53 33 3b 5a 62 71 4e 71 38 3b 4f 64 49 61 4a 31 3b 41 6f 68 43 39 3b 59 74 72 77 37 3b 71 6a 47 4d 4d 6a 38 3b 48 6d 46 6d 45 71 31 3b 4d 42 48 45 37 3b 6b 51 6d 46 4f 36 2c 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 68 2f 2c 20 2d 20 2c 6d 61 70 2c 69 73 41 72 72 61 79 2c 66 6c 6f 6f 72 2c 4d 42 48 45 37 2c 69 73 4e 61 4e 2c 74 69 6d 65 6f 75 74 2c 33 35 32 31 32 35 39 79 4f 44 42 4b 62 2c 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 2c 37 38 79 6a 4d 4e 49 73 2c 25 32 62 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 2c 62 6f 64 79 2c 32 33 36 32 37 35 36 55 58 4c 74 69 46 2c 63 72 65 61 74 Data Ascii: Hffp5;zxRZye7;MEJVQF9;JUFg1;wsehH7;mRBQS3;ZbqNq8;OdIaJ1;AohC9;Ytrw7;qjGMMj8;HmFmEq1;MBHE7;kQmFO6,/cdn-cgi/challenge-platform/h/, - ,map,isArray,floor,MBHE7,isNaN,timeout,3521259yODBKb,setRequestHeader,78yjMNIs,%2b,application/json,body,2362756UXLtiF,creat
2024-04-26 12:23:47 UTC	285	IN	Data Raw: 2c 46 3d 5a 28 35 32 37 29 2b 67 5b 5a 28 35 38 32 29 5d 5b 5a 28 35 30 35 29 5d 2b 5a 28 35 35 39 29 2b 31 2b 5a 28 35 37 37 29 2b 45 2e 72 2b 5a 28 35 37 32 29 2c 47 3d 6e 65 77 20 67 5b 28 5a 28 35 36 33 29 29 5d 28 29 2c 21 47 29 72 65 74 75 72 6e 3b 48 3d 5a 28 34 39 39 29 2c 47 5b 5a 28 34 38 39 29 5d 28 48 2c 46 2c 21 21 5b 5d 29 2c 47 5b 5a 28 35 33 34 29 5d 3d 32 35 30 30 2c 47 5b 5a 28 35 30 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 47 5b 5a 28 35 33 36 29 5d 28 5a 28 35 35 34 29 2c 5a 28 35 31 36 29 29 2c 49 3d 7b 7d 2c 49 5b 5a 28 35 31 38 29 5d 3d 44 2c 4a 3d 41 5b 5a 28 35 32 34 29 5d 28 4a 53 4f 4e 5b 5a 28 35 31 37 29 5d 28 49 29 29 5b 5a 28 35 31 32 29 5d 28 27 2b 27 2c 5a 28 35 33 38 29 29 2c 47 5b 5a 28 35 38 34 29 5d 28 27 76 Data Ascii: ,F=Z(527)+g[Z(582)][Z(505)]+Z(559)+1+Z(577)+E.r+Z(572),G=new g[(Z(563))](),!G)return;H=Z(499),G[Z(489)](H,F,!![]),G[Z(534)]=2500,G[Z(500)]=function(){},G[Z(536)](Z(554),Z(516)),I={},I[Z(518)]=D,J=A[Z(524)](JSON[Z(517)](I))[Z(512)]('+',Z(538)),G[Z(584)]('v
2024-04-26 12:23:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	49967	104.18.249.37	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:47 UTC	1365	OUT	GET /hc/activity HTTP/1.1 Host: help.venmo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; d_id=f9d8a02dda1e499da9fdccab0d31ca111714134181973; enforce_policy=ccpa; tsrce=identityappsnodeweb; l7_az=dcg15.slc; ts_c=vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3; cookie_prefs=T%3D0%2CP%3D1%2CF%3D1%2Ctype%3Dinitial; x-pp-s=eyJ0IjoiMTcxNDEzNDIxMTMyMyIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742211%26vteXpYrS%3D1714136011%26vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3%26vtyp%3Dnew; __cfruid=4d718761ca3665ade518e98728cfc4e55786fa9f-1714134211; _help_center_session=ODlFR2dSZi85dzJTaFRSYkNhcVM3ME5hRXZUS2Y1S0t6clY2dnJ5VHVKL1dodEpWRm15NmdpZUg5TUNSeWE0THB5TkZONmkwTlJkVE00dHNUOWhLdjFlblJXbk9HYndQakZMdjBvVndVMmF0TENxWi9kMWNZWmNTZFJCZE1XdFFxWndOVkJKY2JXcjJpbGlrNWhzQ01QajJ0cjJYbmUyM2dZdS9pSjdxMXZHRlcwWnRGd056ZnFTeWdPM2ZGNFNjQ0hZMUYwRnovMG9CMEVLbEQ2bzVjdz09LS1nVHB3RzV0RE1UV0x0SmltSVNMRWV3PT0%3D--a061474dcdcfc9d4f03fd5255b000e327d5e29e1; _gat=1
2024-04-26 12:23:48 UTC	843	IN	HTTP/1.1 404 Not Found Date: Fri, 26 Apr 2024 12:23:48 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 87a68bcd6cda7482-MIA CF-Cache-Status: MISS Vary: Accept-Encoding referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none X-Request-ID: 87a68bcd97237482-MIA x-runtime: 0.001020 x-xss-protection: 1; mode=block X-Zendesk-Zorg: yes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XOdSnuPZXitBGwMmhaE6unQk1TT9gnQzJ2ZICGP9zq9p%2F7lEpcONmANtTPPimt6gYj1%2B7whHv2xq4uxMpgFIFRgpNzMVRxpvdgsTlbpoY0rPGJRIz6b3qk5vC2C4Av1u"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-04-26 12:23:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	49971	151.101.193.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:47 UTC	580	OUT	GET /smartchat/open/messaging/venmo/chat-meta HTTP/1.1 Host: www.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://help.venmo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:48 UTC	540	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1345 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: content-type, x-bot-app, x-csrf-token Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Origin: https://help.venmo.com Access-Control-Max-Age: 1000 Cache-Control: max-age=0, no-cache, no-store, must-revalidate
2024-04-26 12:23:48 UTC	2164	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6e 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 4a 4f 2b 4a 57 66 66 45 61 38 6a 63 53 65 2b 61 6f 4f 6e 48 47 4b 73 41 4f 68 76 39 4a 33 79 75 38 38 46 48 31 4b 67 39 79 73 51 57 55 35 58 55 27 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e Data Ascii: Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com https://.paypal.cn; script-src 'nonce-JO+JWffEa8jcSe+aoOnHGKsAOhv9J3yu88FH1Kg9ysQWU5XU' 'self' https://.paypal.com https://.paypalobjects.com https://.paypal.
2024-04-26 12:23:48 UTC	1394	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 78 2d 70 70 2d 73 3d 65 79 4a 30 49 6a 6f 69 4d 54 63 78 4e 44 45 7a 4e 44 49 79 4f 44 45 34 4d 53 49 73 49 6d 77 69 4f 69 49 77 49 69 77 69 62 53 49 36 49 6a 41 69 66 51 3b 20 44 6f 6d 61 69 6e 3d 2e 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6e 73 69 64 3d 73 25 33 41 42 65 48 6e 65 77 71 6f 58 65 4a 68 7a 77 67 30 78 51 78 58 6d 62 4a 68 4d 34 61 70 57 77 4a 37 2e 71 36 72 37 63 59 47 42 25 32 46 62 63 6f 45 73 68 51 55 79 67 78 33 4d 58 6f 6e 4f 38 78 31 72 4a 4b 53 35 6e 43 50 73 48 77 4f 57 73 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 Data Ascii: Set-Cookie: x-pp-s=eyJ0IjoiMTcxNDEzNDIyODE4MSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=NoneSet-Cookie: nsid=s%3ABeHnewqoXeJhzwg0xQxXmbJhM4apWwJ7.q6r7cYGB%2FbcoEshQUygx3MXonO8x1rJKS5nCPsHwOWs; Path=/; HttpOnly; Secu
2024-04-26 12:23:48 UTC	63	IN	Data Raw: 53 65 72 76 65 72 2d 54 69 6d 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 3b 64 65 73 63 3d 22 22 2c 78 2d 63 64 6e 3b 64 65 73 63 3d 22 66 61 73 74 6c 79 22 0d 0a 0d 0a Data Ascii: Server-Timing: content-encoding;desc="",x-cdn;desc="fastly"
2024-04-26 12:23:48 UTC	1345	IN	Data Raw: 7b 22 64 65 76 69 63 65 54 79 70 65 22 3a 22 44 45 53 4b 54 4f 50 22 2c 22 62 72 6f 77 73 65 72 22 3a 22 43 68 72 6f 6d 65 22 2c 22 69 73 4d 6f 62 69 6c 65 22 3a 66 61 6c 73 65 2c 22 69 73 53 74 72 65 61 6d 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 73 68 6f 77 43 68 61 74 50 72 6f 6d 70 74 22 3a 74 72 75 65 2c 22 73 79 73 22 3a 7b 22 6c 69 6e 6b 73 22 3a 7b 22 6a 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 77 65 62 2f 72 65 73 2f 38 63 62 2f 32 30 32 62 34 32 66 39 61 31 39 61 33 35 37 39 30 30 64 64 35 35 38 31 39 35 36 39 35 2f 6a 73 22 2c 22 63 73 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 Data Ascii: {"deviceType":"DESKTOP","browser":"Chrome","isMobile":false,"isStreamingEnabled":false,"showChatPrompt":true,"sys":{"links":{"jsBaseUrl":"https://www.paypalobjects.com/web/res/8cb/202b42f9a19a357900dd558195695/js","cssBaseUrl":"https://www.paypalobjects.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	49972	151.101.129.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:47 UTC	1392	OUT	GET /smartchat/messaging-chat-loading/venmo HTTP/1.1 Host: www.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; nsid=s%3An7iR5EQmXKz-oKtVXIy1EEIPxyKSFcCK.1TZKfiuN5QvG6VUXG7uj%2F6PzQRey35iwuU69rZa1p10; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; KHcl0EuY7AKSMgfvHl7J5E7hPtK=H5vOX4Xx9E6rPaNsW1umPOEju90KfJTschjWY_e1f92eqJS1o6EoZAYAvBErjHwsTvfIlecHLC-YGp_e; l7_az=dcg16.slc; sc_f=CEKPNHQG08AWc-eXVA4YPw93eSBWwxF4jXwznQNxJ_4VWbeV7FgS4yQ2I1Wt5sfyajVP4H77tpr0Ipov674wteSk7U1-EXiXl3h4f0; ts=vreXpYrS%3D1808742224%26vteXpYrS%3D1714136024%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew; x-pp-s=eyJ0IjoiMTcxNDEzNDIyNDQxMSIsImwiOiIwIiwibSI6IjAifQ
2024-04-26 12:23:48 UTC	1373	IN	HTTP/1.1 200 OK Connection: close Content-Length: 7731 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com https://.paypal.cn; script-src 'nonce-Wq+1Z1TRIFnk+cNLkwlETOy1nFY2OtciZRPN3eszN+Nax849' 'self' https://.paypal.com https://.paypalobjects.com https://.paypal.cn 'unsafe-inline' ; style-src 'self' https://.paypal.com https://.paypalobjects.com https://.paypal.cn 'unsafe-inline' ; img-src 'self' https: data:; object-src 'none'; connect-src 'self' https://.paypal.com https://.paypalobjects.com https://.paypal.cn 'unsafe-inline' https://.kampyle.com https://.qualtrics.com; font-src 'self' https://.paypal.com https://.paypalobjects.com https://.paypal.cn data:; base-uri 'self' https://.paypal.com; form-action 'self' https://.paypal.com; frame-ancestors 'self' https://help.venmo.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp; frame-src 'self' https://.paypal.com https://.paypalobjects.com https://.paypal.cn https://*.qualtrics.com; Content-Type: text/html; charset=utf-8 Etag: W/"1dda-C98dKkaw3ufayRveCfdkiwdB/pc"
2024-04-26 12:23:48 UTC	1343	IN	Data Raw: 4f 72 69 67 69 6e 2d 54 72 69 61 6c 3a 20 41 6c 49 6f 67 56 33 4b 46 74 6e 62 66 56 43 79 6c 39 5a 32 4e 70 72 45 37 46 44 38 50 59 43 74 2b 54 51 69 59 64 45 33 70 70 65 4a 6a 4a 30 78 4a 4b 63 74 68 59 77 4f 78 58 70 52 43 4e 6f 70 78 56 57 64 4f 49 45 4e 4d 63 4e 53 76 51 43 47 41 6d 6a 30 66 77 30 41 41 41 42 32 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 42 68 65 58 42 68 62 43 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6c 4e 6c 62 6d 52 47 64 57 78 73 56 58 4e 6c 63 6b 46 6e 5a 57 35 30 51 57 5a 30 5a 58 4a 53 5a 57 52 31 59 33 52 70 62 32 34 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 32 4f 44 51 34 4f 44 59 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 Data Ascii: Origin-Trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLCJleHBpcnkiOjE2ODQ4ODYzOTksImlzU3ViZG9tYWluI
2024-04-26 12:23:48 UTC	1055	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 74 73 3d 76 72 65 58 70 59 72 53 25 33 44 31 38 30 38 37 34 32 32 32 38 25 32 36 76 74 65 58 70 59 72 53 25 33 44 31 37 31 34 31 33 36 30 32 38 25 32 36 76 72 25 33 44 31 61 35 62 64 36 30 36 31 38 66 30 61 64 31 30 33 34 39 36 32 30 63 32 66 63 66 63 66 30 38 39 25 32 36 76 74 25 33 44 31 61 35 62 64 36 30 36 31 38 66 30 61 64 31 30 33 34 39 36 32 30 63 32 66 63 66 63 66 30 38 38 25 32 36 76 74 79 70 25 33 44 6e 65 77 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 4d 6f 6e 2c 20 32 36 20 41 70 72 20 32 30 32 37 20 31 32 3a 32 33 3a 34 38 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 Data Ascii: Set-Cookie: ts=vreXpYrS%3D1808742228%26vteXpYrS%3D1714136028%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 26 Apr 2027 12:23:48 GMT; HttpOnly; Secure; SameSite=NoneS
2024-04-26 12:23:48 UTC	1378	IN	Data Raw: 3c 21 44 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 77 65 62 63 61 70 74 63 68 61 2f 6e 67 72 6c 43 61 70 74 63 68 61 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f Data Ascii: <!Doctype html><html lang="en"><head><script async src="https://www.paypalobjects.com/webcaptcha/ngrlCaptcha.min.js"></script><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta http-equiv="X-UA-Compatible" co
2024-04-26 12:23:48 UTC	1378	IN	Data Raw: 61 6c 53 61 6e 73 42 69 67 2d 52 65 67 75 6c 61 72 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 32 63 32 65 32 66 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 7d 64 65 74 61 69 6c 73 2c 6d 61 69 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 3b 6d 61 72 67 69 6e 3a 2e 36 37 65 6d 20 30 7d 68 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 68 65 69 67 68 74 3a 30 7d 63 6f 64 65 2c 6b 62 64 2c 70 72 65 2c 73 Data Ascii: alSansBig-Regular,Helvetica Neue,Arial,sans-serif;color:#2c2e2f}body{margin:0;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}details,main{display:block}h1{font-size:2em;margin:.67em 0}hr{box-sizing:content-box;height:0}code,kbd,pre,s
2024-04-26 12:23:48 UTC	1378	IN	Data Raw: 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 64 65 63 6f 72 61 74 69 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 3a 3a 2d 77 65 62 6b 69 74 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 62 75 74 74 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 3b 66 6f 6e 74 3a 69 6e 68 65 72 69 74 7d 73 75 6d 6d 61 72 79 7b 64 69 73 70 6c 61 79 3a 6c 69 73 74 2d 69 74 65 6d 7d 5b 68 69 64 64 65 6e 5d 2c 74 65 6d 70 6c 61 74 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 68 65 61 64 65 72 20 7b 68 65 69 67 68 74 3a 20 35 36 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 29 3b 63 6f 6c 6f 72 3a 20 72 67 62 28 30 2c 20 30 2c 20 30 29 3b Data Ascii: ::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}summary{display:list-item}[hidden],template{display:none}header {height: 56px;background-color: rgb(255, 255, 255);color: rgb(0, 0, 0);
2024-04-26 12:23:48 UTC	1378	IN	Data Raw: 64 64 65 6e 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 36 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 36 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 36 70 78 3b 22 3e 3c 73 76 67 20 77 69 64 74 68 3d 22 33 30 70 78 22 20 68 65 69 67 68 74 3d 22 33 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 30 20 33 30 22 3e 3c 67 20 69 64 3d 22 63 69 72 63 6c 65 73 22 3e 3c 63 69 72 63 6c 65 20 69 64 3d 22 63 69 72 63 6c 65 2d 6f 6e 65 22 20 73 74 79 6c 65 3d 22 73 74 72 6f 6b 65 3a 20 6e 6f 6e 65 3b 20 66 69 6c 6c 3a 20 23 63 62 64 32 64 36 22 63 78 3d 22 35 22 63 79 3d 22 31 35 22 72 3d 22 33 22 20 2f 3e 3c 63 69 72 63 6c 65 20 69 64 3d 22 63 69 72 63 6c 65 2d 74 77 6f 22 20 73 74 79 6c 65 3d 22 73 74 72 6f 6b 65 3a 20 6e 6f 6e 65 Data Ascii: dden;padding-left: 16px;padding-right: 16px;padding-top: 16px;"><svg width="30px" height="30px" viewBox="0 0 30 30"><g id="circles"><circle id="circle-one" style="stroke: none; fill: #cbd2d6"cx="5"cy="15"r="3" /><circle id="circle-two" style="stroke: none
2024-04-26 12:23:48 UTC	1378	IN	Data Raw: 72 22 3a 7b 22 63 68 61 74 42 6f 74 22 3a 7b 22 74 69 74 6c 65 22 3a 22 56 65 6e 6d 6f 20 48 65 6c 70 22 7d 7d 2c 22 6d 65 73 73 61 67 65 73 22 3a 7b 22 63 68 61 74 42 6f 74 22 3a 7b 22 6e 69 63 6b 6e 61 6d 65 22 3a 22 56 65 6e 6d 6f 20 41 73 73 69 73 74 61 6e 74 22 7d 2c 22 6d 65 73 73 61 67 65 73 55 6e 61 76 61 69 6c 61 62 6c 65 22 3a 7b 22 74 69 74 6c 65 22 3a 22 53 6f 72 72 79 2c 20 6f 75 72 20 63 68 61 74 62 6f 74 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 22 7d 2c 22 63 68 61 74 55 6e 61 76 61 69 6c 61 62 6c 65 22 3a 7b 22 6d 65 73 73 61 67 65 22 3a 22 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 6f 75 72 20 73 75 70 70 6f 72 74 20 74 65 61 6d 20 62 79 20 73 65 6e 64 69 6e 67 20 75 73 20 61 20 6d 65 73 73 61 67 65 Data Ascii: r":{"chatBot":{"title":"Venmo Help"}},"messages":{"chatBot":{"nickname":"Venmo Assistant"},"messagesUnavailable":{"title":"Sorry, our chatbot is currently unavailable."},"chatUnavailable":{"message":"Please contact our support team by sending us a message
2024-04-26 12:23:48 UTC	841	IN	Data Raw: 65 72 73 61 74 69 6f 6e 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 79 6f 75 72 20 6d 65 73 73 61 67 65 20 63 65 6e 74 65 72 2e 22 2c 22 65 6e 64 42 75 74 74 6f 6e 54 65 78 74 22 3a 22 45 6e 64 20 43 6f 6e 76 65 72 73 61 74 69 6f 6e 22 2c 22 69 6e 70 75 74 50 6c 61 63 65 48 6f 6c 64 65 72 22 3a 22 45 6e 74 65 72 20 61 20 6d 65 73 73 61 67 65 22 2c 22 66 6f 6f 74 65 72 54 65 78 74 22 3a 22 42 65 74 61 22 2c 22 70 72 69 76 61 63 79 4d 65 73 73 61 67 65 22 3a 22 43 68 61 74 73 20 6d 61 79 20 62 65 20 73 61 76 65 64 20 61 6e 64 20 75 73 65 64 20 62 79 20 56 65 6e 6d 6f 20 61 6e 64 20 61 75 74 68 6f 72 69 7a 65 64 20 70 61 72 74 6e 65 72 73 20 74 6f 20 69 6d 70 72 6f 76 65 20 6f 75 72 20 73 65 72 76 69 63 65 73 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e 66 Data Ascii: ersation can be found in your message center.","endButtonText":"End Conversation","inputPlaceHolder":"Enter a message","footerText":"Beta","privacyMessage":"Chats may be saved and used by Venmo and authorized partners to improve our services. For more inf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	49973	104.18.249.37	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:48 UTC	1632	OUT	POST /cdn-cgi/challenge-platform/h/b/jsd/r/87a68b8678159ae5 HTTP/1.1 Host: help.venmo.com Connection: keep-alive Content-Length: 15819 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://help.venmo.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; d_id=f9d8a02dda1e499da9fdccab0d31ca111714134181973; enforce_policy=ccpa; tsrce=identityappsnodeweb; l7_az=dcg15.slc; ts_c=vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3; cookie_prefs=T%3D0%2CP%3D1%2CF%3D1%2Ctype%3Dinitial; x-pp-s=eyJ0IjoiMTcxNDEzNDIxMTMyMyIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742211%26vteXpYrS%3D1714136011%26vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3%26vtyp%3Dnew; __cfruid=4d718761ca3665ade518e98728cfc4e55786fa9f-1714134211; _help_center_session=ODlFR2dSZi85dzJTaFRSYkNhcVM3ME5hRXZUS2Y1S0t6clY2dnJ5VHVKL1dodEpWRm15NmdpZUg5TUNSeWE0THB5TkZONmkwTlJkVE00dHNUOWhLdjFlblJXbk9HYndQakZMdjBvVndVMmF0TENxWi9kMWNZWmNTZFJCZE1XdFFxWndOVkJKY2JXcjJpbGlrNWhzQ01QajJ0cjJYbmUyM2dZdS9pSjdxMXZHRlcwWnRGd056ZnFTeWdPM2ZGNFNjQ0hZMUYwRnovMG9CMEVLbEQ2bzVjdz09LS1nVHB3RzV0RE1UV0x0SmltSVNMRWV3PT0%3D--a061474dcdcfc9d4f03fd5255b000e327d5e29e1; _gat=1
2024-04-26 12:23:48 UTC	15819	OUT	Data Raw: 7b 22 77 70 22 3a 22 65 43 6a 68 4a 55 39 54 4a 30 6a 4a 74 44 7a 39 67 39 6f 77 24 68 55 6d 77 34 71 77 56 46 56 61 61 55 54 39 79 38 77 2d 35 6d 63 35 47 6a 77 6b 2d 4f 70 7a 35 30 39 66 77 74 67 6a 51 6e 43 43 77 34 52 61 77 64 77 61 6d 61 6a 39 77 6c 61 39 41 7a 32 68 52 30 43 4c 58 5a 68 2d 35 75 43 71 34 57 66 6f 44 51 45 68 41 75 4a 33 71 37 39 57 38 2d 52 56 77 4a 6a 6a 62 56 6b 55 4c 6e 77 72 51 6e 47 4b 4c 77 4b 68 44 6b 77 55 33 6a 77 56 68 55 55 68 75 74 68 56 77 39 35 77 24 30 42 77 39 37 4c 77 48 4e 54 34 51 43 4f 39 34 52 6e 6a 77 55 4e 4c 77 55 7a 70 24 77 70 55 77 39 4c 6c 47 31 6a 5a 66 71 6d 55 51 55 39 4b 41 71 43 38 4a 75 2b 36 4b 2d 77 46 68 55 56 59 78 43 77 54 42 43 35 44 47 2d 49 6c 51 77 70 36 4b 52 75 46 34 68 77 31 52 46 47 56 Data Ascii: {"wp":"eCjhJU9TJ0jJtDz9g9ow$hUmw4qwVFVaaUT9y8w-5mc5Gjwk-Opz509fwtgjQnCCw4Rawdwamaj9wla9Az2hR0CLXZh-5uCq4WfoDQEhAuJ3q79W8-RVwJjjbVkULnwrQnGKLwKhDkwU3jwVhUUhuthVw95w$0Bw97LwHNT4QCO94RnjwUNLwUzp$wpUw9LlG1jZfqmUQU9KAqC8Ju+6K-wFhUVYxCwTBC5DG-IlQwp6KRuF4hw1RFGV
2024-04-26 12:23:48 UTC	783	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 12:23:48 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 0 Connection: close Set-Cookie: cf_clearance=WG9M.G1I0uWGDuEVNNC1kljrQfozxChvyWOelpqFWfM-1714134228-1.0.1.1-12vALB0hny6rPk4ftCL1_hoYQWCflr3.bhRg1O0gHnvAm_blgMuy2BBer40RvdAP_l4wu1QA38mpNgKbsPYWBw; path=/; expires=Sat, 26-Apr-25 12:23:48 GMT; domain=.help.venmo.com; HttpOnly; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TgTPhRmT7yjGVoXpKFdHMnmvYv5uvMmrBd5kggQ6jIg2vQDYBv5NfpecFsHLZtQ62jzPqSSyJkOcGG5WNHDvMZduKvsiSCKeWp5W7xYkbxQWXDJ3esTQsKZdX%2FA%2BD20g"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a68bcf880421cd-MIA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	49974	35.190.80.1	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:48 UTC	527	OUT	OPTIONS /report/v4?s=XOdSnuPZXitBGwMmhaE6unQk1TT9gnQzJ2ZICGP9zq9p%2F7lEpcONmANtTPPimt6gYj1%2B7whHv2xq4uxMpgFIFRgpNzMVRxpvdgsTlbpoY0rPGJRIz6b3qk5vC2C4Av1u HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://help.venmo.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:49 UTC	336	IN	HTTP/1.1 200 OK content-length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Fri, 26 Apr 2024 12:23:48 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	49975	151.101.1.35	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:48 UTC	1864	OUT	GET /ts?v=1.8.16&t=1714134227841&g=-120&tenant_name=venmo&bchn=venmohelp&comp=zendeskguide&ccpg=us&page_template=new_request_page&pgrp=venmo%3Ahelp%3Anew_request_page&rsta=English%20(US)&lgin=out&e=im&c_prefs=T%3D0%2CP%3D1%2CF%3D1%2Ctype%3Dinitial&ef_policy=ccpa&imsrc=setup&view=%7B%22t10%22%3A11%2C%22t11%22%3A11554%2C%22tcp%22%3A2700%2C%22et%22%3A%223g%22%2C%22nt%22%3A%22navigate%22%2C%22bt%22%3A2847%7D&pt=Venmo%20Contact%20Us&ru=https%3A%2F%2Fhelp.venmo.com%2Fhc%2Fen-us%2Frequests%2Fnew&cd=24&sw=1280&sh=1024&dw=1280&dh=1024&bw=1280&bh=907&ce=1&t1=11&t1c=0&t1d=0&t1s=0&t2=2561&t3=47&t4d=0&t4=0&t4e=1510&tt=10168&rdc=0&protocol=http%2F1.1&res=%7B%7D&rtt=3586 HTTP/1.1 Host: t.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://help.venmo.com/hc/en-us/requests/new?ticket_form_id=624807 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; KHcl0EuY7AKSMgfvHl7J5E7hPtK=H5vOX4Xx9E6rPaNsW1umPOEju90KfJTschjWY_e1f92eqJS1o6EoZAYAvBErjHwsTvfIlecHLC-YGp_e; l7_az=dcg16.slc; sc_f=CEKPNHQG08AWc-eXVA4YPw93eSBWwxF4jXwznQNxJ_4VWbeV7FgS4yQ2I1Wt5sfyajVP4H77tpr0Ipov674wteSk7U1-EXiXl3h4f0; tsrce=smartchatnodeweb; x-pp-s=eyJ0IjoiMTcxNDEzNDIyODE5MCIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742228%26vteXpYrS%3D1714136028%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew
2024-04-26 12:23:49 UTC	1237	IN	HTTP/1.1 200 OK Connection: close CORRELATION-ID: 81a255a2de1a0 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Fri, 26 Apr 2024 12:23:49 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: 81a255a2de1a0 Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1808742229%26vteXpYrS%3D1714136029%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew;Expires=Mon, 26 Apr 2027 12:23:49 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088;Expires=Mon, 26 Apr 2027 12:23:49 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-000000000000000000081a255a2de1a0-545ee83c94453194-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Fri, 26 Apr 2024 12:23:49 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-dfw-kdfw8210114-DFW, cache-pdk-kfty2130091-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1714134229.195021,VS0,VE82 vary: Accept-Encoding Server-Timing: content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-04-26 12:23:49 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-04-26 12:23:49 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-04-26 12:23:49 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	49976	151.101.129.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:49 UTC	1479	OUT	GET /smartchat/open/messaging/venmo/window?entryPoint=new_request_page&token=undefined&page=/hc/en-us/requests/new&msgToken=null HTTP/1.1 Host: www.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; nsid=s%3An7iR5EQmXKz-oKtVXIy1EEIPxyKSFcCK.1TZKfiuN5QvG6VUXG7uj%2F6PzQRey35iwuU69rZa1p10; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; KHcl0EuY7AKSMgfvHl7J5E7hPtK=H5vOX4Xx9E6rPaNsW1umPOEju90KfJTschjWY_e1f92eqJS1o6EoZAYAvBErjHwsTvfIlecHLC-YGp_e; l7_az=dcg16.slc; sc_f=CEKPNHQG08AWc-eXVA4YPw93eSBWwxF4jXwznQNxJ_4VWbeV7FgS4yQ2I1Wt5sfyajVP4H77tpr0Ipov674wteSk7U1-EXiXl3h4f0; tsrce=smartchatnodeweb; x-pp-s=eyJ0IjoiMTcxNDEzNDIyODE5MCIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742228%26vteXpYrS%3D1714136028%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew
2024-04-26 12:23:49 UTC	1373	IN	HTTP/1.1 200 OK Connection: close Content-Length: 9848 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com https://.paypal.cn; script-src 'nonce-K0cx7NPgSOy9+hIJiQCUX2ZG17WuSqKd+/PWybf0JVdTd1dS' 'self' https://.paypal.com https://.paypalobjects.com https://.paypal.cn 'unsafe-inline' ; style-src 'self' https://.paypal.com https://.paypalobjects.com https://.paypal.cn 'unsafe-inline' ; img-src 'self' https: data:; object-src 'none'; connect-src 'self' https://.paypal.com https://.paypalobjects.com https://.paypal.cn 'unsafe-inline' https://.kampyle.com https://.qualtrics.com; font-src 'self' https://.paypal.com https://.paypalobjects.com https://.paypal.cn data:; base-uri 'self' https://.paypal.com; form-action 'self' https://.paypal.com; frame-ancestors 'self' https://help.venmo.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp; frame-src 'self' https://.paypal.com https://.paypalobjects.com https://.paypal.cn https://*.qualtrics.com; Content-Type: text/html; charset=utf-8 Etag: W/"261f-Hpty8NEw3jEtxNI1Wof4CVIuXwM"
2024-04-26 12:23:49 UTC	1191	IN	Data Raw: 4f 72 69 67 69 6e 2d 54 72 69 61 6c 3a 20 41 6c 49 6f 67 56 33 4b 46 74 6e 62 66 56 43 79 6c 39 5a 32 4e 70 72 45 37 46 44 38 50 59 43 74 2b 54 51 69 59 64 45 33 70 70 65 4a 6a 4a 30 78 4a 4b 63 74 68 59 77 4f 78 58 70 52 43 4e 6f 70 78 56 57 64 4f 49 45 4e 4d 63 4e 53 76 51 43 47 41 6d 6a 30 66 77 30 41 41 41 42 32 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 42 68 65 58 42 68 62 43 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6c 4e 6c 62 6d 52 47 64 57 78 73 56 58 4e 6c 63 6b 46 6e 5a 57 35 30 51 57 5a 30 5a 58 4a 53 5a 57 52 31 59 33 52 70 62 32 34 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 32 4f 44 51 34 4f 44 59 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 Data Ascii: Origin-Trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLCJleHBpcnkiOjE2ODQ4ODYzOTksImlzU3ViZG9tYWluI
2024-04-26 12:23:49 UTC	1055	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 74 73 3d 76 72 65 58 70 59 72 53 25 33 44 31 38 30 38 37 34 32 32 32 39 25 32 36 76 74 65 58 70 59 72 53 25 33 44 31 37 31 34 31 33 36 30 32 39 25 32 36 76 72 25 33 44 31 61 35 62 64 36 30 36 31 38 66 30 61 64 31 30 33 34 39 36 32 30 63 32 66 63 66 63 66 30 38 39 25 32 36 76 74 25 33 44 31 61 35 62 64 36 30 36 31 38 66 30 61 64 31 30 33 34 39 36 32 30 63 32 66 63 66 63 66 30 38 38 25 32 36 76 74 79 70 25 33 44 6e 65 77 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 4d 6f 6e 2c 20 32 36 20 41 70 72 20 32 30 32 37 20 31 32 3a 32 33 3a 34 39 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 Data Ascii: Set-Cookie: ts=vreXpYrS%3D1808742229%26vteXpYrS%3D1714136029%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 26 Apr 2027 12:23:49 GMT; HttpOnly; Secure; SameSite=NoneS
2024-04-26 12:23:49 UTC	1378	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 77 65 62 63 61 70 74 63 68 61 2f 6e 67 72 6c 43 61 70 74 63 68 61 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 74 69 74 6c 65 3e 56 65 6e 6d 6f 20 4d 65 73 73 61 67 69 6e 67 20 43 68 61 74 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 Data Ascii: <html lang="en"><head><script async src="https://www.paypalobjects.com/webcaptcha/ngrlCaptcha.min.js"></script><title>Venmo Messaging Chat</title><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta http-eq
2024-04-26 12:23:49 UTC	1378	IN	Data Raw: 67 68 74 3a 30 7d 63 6f 64 65 2c 6b 62 64 2c 70 72 65 2c 73 61 6d 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6d 6f 6e 6f 73 70 61 63 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 61 62 62 72 5b 74 69 74 6c 65 5d 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 7d 62 2c 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 65 72 7d 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 30 25 7d 73 75 62 2c 73 75 70 7b 66 6f 6e Data Ascii: ght:0}code,kbd,pre,samp{font-family:monospace;font-size:1em}a{background-color:transparent}abbr[title]{border-bottom:none;-webkit-text-decoration:underline dotted;text-decoration:underline dotted}b,strong{font-weight:bolder}small{font-size:80%}sub,sup{fon
2024-04-26 12:23:49 UTC	1378	IN	Data Raw: 63 6f 6c 6f 72 3a 20 72 67 62 28 30 2c 20 30 2c 20 30 29 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 28 32 30 33 2c 20 32 31 30 2c 20 32 31 34 29 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 68 65 69 67 68 74 3a 20 35 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 35 35 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 53 63 74 6f 20 47 72 6f 74 65 73 6b 20 41 20 42 6f 6c 64 27 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 53 63 74 6f 20 47 72 6f 74 65 73 6b 20 41 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 27 6e 6f 72 6d 61 6c 27 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 27 6e 6f 72 6d 61 6c 27 3b 73 72 63 3a Data Ascii: color: rgb(0, 0, 0);border-bottom: 1px solid rgb(203, 210, 214);text-align: center;height: 55px;line-height: 55px;font-family: 'Scto Grotesk A Bold';font-size: 16px;}@font-face {font-family: 'Scto Grotesk A';font-style: 'normal';font-weight: 'normal';src:
2024-04-26 12:23:49 UTC	1378	IN	Data Raw: 73 74 72 6f 6b 65 3a 20 6e 6f 6e 65 3b 20 66 69 6c 6c 3a 20 23 63 62 64 32 64 36 22 63 78 3d 22 31 35 22 63 79 3d 22 31 35 22 72 3d 22 33 22 20 2f 3e 3c 63 69 72 63 6c 65 20 69 64 3d 22 63 69 72 63 6c 65 2d 74 68 72 65 65 22 20 73 74 79 6c 65 3d 22 73 74 72 6f 6b 65 3a 20 6e 6f 6e 65 3b 20 66 69 6c 6c 3a 20 23 39 64 61 33 61 36 22 63 78 3d 22 32 35 22 63 79 3d 22 31 35 22 72 3d 22 33 22 20 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 4b 30 63 78 37 4e 50 67 53 4f 79 39 26 23 78 32 42 3b 68 49 4a 69 51 43 55 58 32 5a 47 31 37 57 75 53 71 4b 64 26 23 78 32 42 3b 26 23 78 32 46 3b 50 57 79 62 66 30 4a 56 64 54 64 31 64 53 3e 76 61 72 20 6c 69 67 68 74 47 72 65 79 20 3d 20 22 23 63 62 64 32 64 36 22 3b 76 61 Data Ascii: stroke: none; fill: #cbd2d6"cx="15"cy="15"r="3" /><circle id="circle-three" style="stroke: none; fill: #9da3a6"cx="25"cy="15"r="3" /></g></svg></div><script nonce=K0cx7NPgSOy9+hIJiQCUX2ZG17WuSqKd+/PWybf0JVdTd1dS>var lightGrey = "#cbd2d6";va
2024-04-26 12:23:49 UTC	1378	IN	Data Raw: 3e 20 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 76 65 6e 6d 6f 2d 63 68 61 74 27 29 2e 73 74 79 6c 65 2e 77 69 64 74 68 20 3d 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 20 2b 20 27 70 78 27 3b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 76 65 6e 6d 6f 2d 63 68 61 74 27 29 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 20 3d 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 20 2b 20 27 70 78 27 3b 7d 29 3b 7d 29 3b 76 61 72 20 6d 65 73 73 61 67 69 6e 67 43 68 61 74 20 3d 20 7b 6c 61 62 65 6c 73 3a 20 7b 22 68 65 61 64 65 72 22 3a 7b 22 63 68 61 74 42 6f 74 22 3a 7b 22 74 69 74 6c 65 22 3a 22 56 65 6e 6d 6f 20 48 65 6c 70 22 7d 7d 2c 22 6d 65 73 73 61 67 65 73 22 3a 7b 22 63 68 61 Data Ascii: > {document.getElementById('venmo-chat').style.width = window.innerWidth + 'px';document.getElementById('venmo-chat').style.height = window.innerHeight + 'px';});});var messagingChat = {labels: {"header":{"chatBot":{"title":"Venmo Help"}},"messages":{"cha
2024-04-26 12:23:49 UTC	1378	IN	Data Raw: 6e 22 2c 22 65 6e 64 4d 6f 64 61 6c 42 6f 74 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 45 6e 64 20 74 68 69 73 20 63 6f 6e 76 65 72 73 61 74 69 6f 6e 20 77 69 74 68 20 74 68 65 20 56 65 6e 6d 6f 20 41 73 73 69 73 74 61 6e 74 5c 75 30 30 33 66 22 2c 22 65 6e 64 4d 6f 64 61 6c 43 6f 6e 66 69 72 6d 22 3a 22 45 6e 64 20 43 6f 6e 76 65 72 73 61 74 69 6f 6e 22 2c 22 65 6e 64 4d 6f 64 61 6c 43 61 6e 63 65 6c 22 3a 22 43 6f 6e 74 69 6e 75 65 20 43 6f 6e 76 65 72 73 61 74 69 6f 6e 22 2c 22 65 6e 64 4d 6f 64 61 6c 53 75 62 74 69 74 6c 65 22 3a 22 41 20 74 72 61 6e 73 63 72 69 70 74 20 6f 66 20 63 6f 6e 76 65 72 73 61 74 69 6f 6e 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 79 6f 75 72 20 6d 65 73 73 61 67 65 20 63 65 6e 74 65 72 2e 22 2c 22 65 6e 64 42 75 74 Data Ascii: n","endModalBotDescription":"End this conversation with the Venmo Assistant\u003f","endModalConfirm":"End Conversation","endModalCancel":"Continue Conversation","endModalSubtitle":"A transcript of conversation can be found in your message center.","endBut
2024-04-26 12:23:49 UTC	1378	IN	Data Raw: 4d 69 4f 69 4a 7a 4f 6d 34 33 61 56 49 31 52 56 46 74 57 45 74 36 4c 57 39 4c 64 46 5a 59 53 58 6b 78 52 55 56 4a 55 48 68 35 53 31 4e 47 59 30 4e 4c 4c 6a 46 55 57 6b 74 6d 61 58 56 4f 4e 56 46 32 52 7a 5a 57 56 56 68 48 4e 33 56 71 4c 7a 5a 51 65 6c 46 53 5a 58 6b 7a 4e 57 6c 33 64 56 55 32 4f 58 4a 61 59 54 46 77 4d 54 41 69 4c 43 4a 74 49 6a 6f 69 62 6a 64 70 55 6a 56 46 55 57 31 59 53 33 6f 74 62 30 74 30 56 6c 68 4a 65 54 46 46 52 55 6c 51 65 48 6c 4c 55 30 5a 6a 51 30 73 69 4c 43 4a 30 49 6a 70 37 49 6e 5a 79 5a 56 68 77 57 58 4a 54 49 6a 6f 69 4d 54 67 77 4f 44 63 30 4d 6a 49 79 4f 53 49 73 49 6e 5a 30 5a 56 68 77 57 58 4a 54 49 6a 6f 69 4d 54 63 78 4e 44 45 7a 4e 6a 41 79 4f 53 49 73 49 6e 5a 79 49 6a 6f 69 4d 57 45 31 59 6d 51 32 4d 44 59 78 4f Data Ascii: MiOiJzOm43aVI1RVFtWEt6LW9LdFZYSXkxRUVJUHh5S1NGY0NLLjFUWktmaXVONVF2RzZWVVhHN3VqLzZQelFSZXkzNWl3dVU2OXJaYTFwMTAiLCJtIjoibjdpUjVFUW1YS3otb0t0VlhJeTFFRUlQeHlLU0ZjQ0siLCJ0Ijp7InZyZVhwWXJTIjoiMTgwODc0MjIyOSIsInZ0ZVhwWXJTIjoiMTcxNDEzNjAyOSIsInZyIjoiMWE1YmQ2MDYxO
2024-04-26 12:23:49 UTC	202	IN	Data Raw: 37 57 75 53 71 4b 64 26 23 78 32 42 3b 26 23 78 32 46 3b 50 57 79 62 66 30 4a 56 64 54 64 31 64 53 20 73 72 63 3d 22 68 74 74 70 73 26 23 78 33 41 3b 26 23 78 32 46 3b 26 23 78 32 46 3b 77 77 77 26 23 78 32 45 3b 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 26 23 78 32 45 3b 63 6f 6d 26 23 78 32 46 3b 6d 65 73 73 61 67 69 6e 67 26 23 78 32 46 3b 76 65 6e 6d 6f 26 23 78 32 46 3b 76 31 30 26 23 78 32 46 3b 6d 65 73 73 61 67 69 6e 67 26 23 78 32 44 3b 6d 75 6c 74 69 74 65 6e 61 6e 74 26 23 78 32 44 3b 73 64 6b 26 23 78 32 45 3b 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: 7WuSqKd+/PWybf0JVdTd1dS src="https://www.paypalobjects.com/messaging/venmo/v10/messaging-multitenant-sdk.js"></script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	49968	104.18.249.37	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:49 UTC	1571	OUT	GET /cdn-cgi/challenge-platform/h/b/jsd/r/87a68b8678159ae5 HTTP/1.1 Host: help.venmo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_id=fp01-2a584590-dd1c-4765-bbb1-9457246c7152; s_id=5ee1bf7e-70ba-4cf4-9d7c-46d74f7e5a91; d_id=f9d8a02dda1e499da9fdccab0d31ca111714134181973; enforce_policy=ccpa; tsrce=identityappsnodeweb; l7_az=dcg15.slc; ts_c=vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3; cookie_prefs=T%3D0%2CP%3D1%2CF%3D1%2Ctype%3Dinitial; x-pp-s=eyJ0IjoiMTcxNDEzNDIxMTMyMyIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742211%26vteXpYrS%3D1714136011%26vr%3D1a5be83518f0aa302090bc92fcb699e4%26vt%3D1a5be83518f0aa302090bc92fcb699e3%26vtyp%3Dnew; __cfruid=4d718761ca3665ade518e98728cfc4e55786fa9f-1714134211; _help_center_session=ODlFR2dSZi85dzJTaFRSYkNhcVM3ME5hRXZUS2Y1S0t6clY2dnJ5VHVKL1dodEpWRm15NmdpZUg5TUNSeWE0THB5TkZONmkwTlJkVE00dHNUOWhLdjFlblJXbk9HYndQakZMdjBvVndVMmF0TENxWi9kMWNZWmNTZFJCZE1XdFFxWndOVkJKY2JXcjJpbGlrNWhzQ01QajJ0cjJYbmUyM2dZdS9pSjdxMXZHRlcwWnRGd056ZnFTeWdPM2ZGNFNjQ0hZMUYwRnovMG9CMEVLbEQ2bzVjdz09LS1nVHB3RzV0RE1UV0x0SmltSVNMRWV3PT0%3D--a061474dcdcfc9d4f03fd5255b000e327d5e29e1; _gat=1; cf_clearance=WG9M.G1I0uWGDuEVNNC1kljrQfozxChvyWOelpqFWfM-1714134228-1.0.1.1-12vALB0hny6rPk4ftCL1_hoYQWCflr3.bhRg1O0gHnvAm_blgMuy2BBer40RvdAP_l4wu1QA38mpNgKbsPYWBw
2024-04-26 12:23:49 UTC	669	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 12:23:49 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: pysUxuhntPMGN5UIquvvPA==$P87rcjjkso0aaf+DeUBJQA== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D74HcA0eRfm9s4yZhAaeMQuJuDwCRVTAQhux%2B81jdiRv7igPiTWMKNywvCGPZrQ%2FLJvb%2BP5c5Kd1mpxD5Z0gfJyycAyK2qLTfRgHdmg00NyXsAmuSPybf9jV2tiOI3RG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a68bd4ed35370a-MIA
2024-04-26 12:23:49 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	49981	151.101.130.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:49 UTC	596	OUT	GET /messaging/venmo-assets/Scto-Grotesk-A-Regular.woff HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.paypal.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:49 UTC	838	IN	HTTP/1.1 200 OK Connection: close Content-Length: 41894 Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: font/woff Etag: "60271ccd-a3a6" Last-Modified: Sat, 13 Feb 2021 00:26:53 GMT Paypal-Debug-Id: 6d846966e47e3 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000006d846966e47e3-0b3d450095d75e80-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:49 GMT X-Served-By: cache-dfw-kdfw8210154-DFW, cache-gnv1820025-GNV X-Cache: HIT, MISS X-Cache-Hits: 2, 0 X-Timer: S1714134229.331814,VS0,VE23 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 77 4f 46 46 4f 54 54 4f 00 00 a3 a6 00 0b 00 00 00 01 43 40 00 01 00 00 00 00 a1 c0 00 00 01 75 00 00 03 12 00 00 a3 38 00 00 00 6e 43 46 46 20 00 00 09 40 00 00 5d e8 00 00 79 52 c3 5a ce 62 47 50 4f 53 00 00 6e 88 00 00 33 35 00 00 aa da 66 89 4c f7 47 53 55 42 00 00 6b 08 00 00 03 7e 00 00 07 b2 60 a9 4b 52 4f 53 2f 32 00 00 01 6c 00 00 00 59 00 00 00 60 90 d2 61 18 63 6d 61 70 00 00 04 34 00 00 04 f6 00 00 06 e6 9d fb ce 44 68 65 61 64 00 00 01 08 00 00 00 36 00 00 00 36 10 47 27 90 68 68 65 61 00 00 01 40 00 00 00 21 00 00 00 24 08 0d 05 77 68 6d 74 78 00 00 67 28 00 00 03 df 00 00 08 ba d8 de 72 3d 6d 61 78 70 00 00 01 64 00 00 00 06 00 00 00 06 02 33 50 00 6e 61 6d 65 00 00 01 c8 00 00 02 69 00 00 06 15 ad 50 96 f2 70 6f 73 74 00 00 09 2c 00 00 00 Data Ascii: wOFFOTTOC@u8nCFF @]yRZbGPOSn35fLGSUBk~`KROS/2lY`acmap4Dhead66G'hhea@!$whmtxg(r=maxpd3PnameiPpost,
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 43 19 c6 70 6e e2 46 6e 66 0e 77 33 9a 15 3c 46 0e 63 b9 85 71 64 6b 0c 37 68 9c 6e d5 58 4d d2 64 e5 d8 a3 73 6a 43 1c e5 c9 65 8a 26 32 59 b7 30 95 69 54 d4 68 96 71 1f 6b 78 42 ed a9 ca 29 dc ce 74 66 70 07 93 34 5e d9 1c d5 83 f4 61 16 77 a9 50 5b c8 64 08 77 32 93 5a 2c a1 80 e5 dc cf 03 3c c4 c3 ac 64 15 ab 79 d4 ee f0 71 7e 65 1f fb d5 88 d9 e4 31 8f 7c e6 b3 80 85 2c e2 1e 16 13 17 f7 a9 1d 33 db 32 c4 db 5b 69 66 cf b8 b5 dd 53 16 13 c8 51 8e f2 b5 41 a5 ae be 6b e9 de 72 db 5c 71 b9 cd a1 e9 a1 bb 42 fb bd 1a 5e 3d 2f e4 f9 5e 8a d7 dc 4b f3 d2 bd 11 de 78 2f c7 9b e9 3d 16 f6 c3 29 e1 ee e1 cc 70 df f0 7c df f9 f1 7e 35 3f c9 af e7 87 fc 54 bf bd 9f e5 0f f2 ef f1 97 f8 05 8d 86 04 f7 07 4f 07 cf 06 9b 82 57 82 f7 82 2d c1 9e 94 79 8d e7 9f b1 Data Ascii: CpnFnfw3<Fcqdk7hnXMdsjCe&2Y0iThqkxB)tfp4^awP[dw2Z,<dyq~e1\|,32[ifSQAkr\qB^=/^Kx/=)p\|~5?TOW-y
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 9a 5a 4f fd 44 ed a6 0e 52 67 a8 4b d4 0d aa 80 2a a6 aa a9 c7 d4 73 ea a3 92 50 2a 95 ac d2 52 c9 2b 3b 2a ed 95 3d 95 7d 94 de 4a 3f e5 50 e5 78 65 88 32 42 39 4b b9 40 f9 83 72 a5 72 a3 72 ab 72 9f f2 84 f2 bc 32 4b 99 a7 bc a3 bc af fc 55 59 a3 7c a2 7c a9 fc a0 14 68 82 56 d1 3a 5a 4f b7 a4 db d0 1d 69 07 ba 2f 3d 84 1e 4d 07 d2 21 f4 74 7a 36 3d 97 4e a4 57 d0 3f d2 9b e9 fd f4 19 3a 83 ce a6 6f d1 65 f4 03 ba 8e 7e 4d 0b 8c 82 d1 32 2d 98 f6 4c 37 c6 99 71 67 fa 31 03 99 11 cc 38 66 0a 33 95 89 62 e2 99 85 cc 1a e6 27 66 2f 73 9a b9 c6 94 30 d5 4c 1d 23 a8 b4 2a 5e 65 af 72 55 f9 a9 c6 aa 82 55 b1 aa 25 aa d5 aa f5 aa 9f 55 bb 54 07 55 c7 55 67 54 e9 aa eb aa 7c 55 b1 aa 42 55 ab 7a ae 7a ab 7a af 02 95 59 4d aa 19 b5 56 dd 44 ad 57 5b a9 8d 6a 5b Data Ascii: ZODRgKsPR+;=}J?Pxe2B9K@rrrr2KUY\|\|hV:ZOi/=M!tz6=NW?:oe~M2-L7qg18f3b'f/s0L#^erUU%UTUUgT\|UBUzzzYMVDW[j[
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 21 8c 0b 97 07 30 2e 5c 1a be b8 70 71 7e e0 22 34 1a 4f 75 91 67 9e 44 14 8b 3d 02 5e aa a7 e2 5b 71 9d c7 45 c4 f4 a0 ae d1 31 a1 c1 e2 25 44 bc 84 8a 97 30 f1 12 2e 5e a6 8a 97 69 e2 25 42 bc 4c 17 2f 33 c4 4b a4 78 99 29 5e a2 c4 4b b4 78 99 25 5e 66 8b 97 18 f1 12 2b 5e e2 c4 4b bc 78 99 23 5e 12 c4 cb 5c f1 32 4f bc cc 97 b0 78 f8 9d bc bd e4 c2 57 2c 1c 7b 49 f6 e2 d4 cf 51 2e ba cb 85 bd 5c 38 c8 85 93 5c 48 56 d7 cb cb 59 e6 6b 28 9c e4 42 b2 41 27 4f 99 c1 53 62 77 94 0b 2f 07 47 b9 90 45 fb c8 94 3e 2e 72 e1 29 e3 9c e4 a2 87 0c 94 54 72 ee e5 20 17 92 14 87 5e 8e 72 d1 f0 e4 20 17 dd 65 3e 67 b9 e8 29 17 2e 72 21 37 cc 4b 6e 98 97 5c bb ac bc 93 97 ac 84 97 b7 5c f4 93 3b 44 6e b4 b7 24 ba 87 b3 bd 5c 34 3c 39 ca 45 77 b9 e8 21 17 4e 72 e1 2c Data Ascii: !0.\pq~"4OugD=^[qE1%D0.^i%BL/3Kx)^Kx%^f+^Kx#^\2OxW,{IQ.\8\HVYk(BA'OSbw/GE>.r)Tr ^r e>g).r!7Kn\\;Dn$\4<9Ew!Nr,
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 47 ce 9e 38 39 ea 60 ea 2a e3 50 c6 77 dd e5 a0 47 d6 da ea 6b d7 c6 c0 0a 1f 15 f2 47 cb e8 d1 10 e0 aa 82 e6 4a 64 c9 80 25 78 d1 72 d5 3a 61 bd de 21 7b e8 ef 71 86 cb 8b 69 f4 93 ca 75 cb a8 cb cb 2b d4 ee cc 4f a8 e9 43 5f 68 f6 83 ba 75 fe 07 15 58 6e 7a 50 51 6f f5 64 d4 cd ee fb 0d be bb 68 48 56 dd f9 e1 72 c8 4f ae ea 2a 66 35 28 9d cb 10 f3 8b fa af 21 ad 54 48 f9 83 9b 57 1b 2b c8 42 d3 f5 b7 e7 1f 0c 19 6b e5 33 7a b2 cb 72 03 2c 53 21 1f 08 d6 17 5e 4c 2b dd 64 40 0b 54 b3 7e a2 07 ee 8c 39 77 d5 4a c7 95 74 64 b9 f6 5a a1 79 92 be 71 72 7d 98 f1 fb a8 02 e3 1f 40 d3 4e 4c c0 00 3a 35 c0 6f af 87 75 e3 4c 6c 7d ac fb 8d c1 46 47 a4 c4 ee 29 eb 0e 1d 9e 55 34 e7 57 6b 58 0b 7f eb 71 33 c9 56 c8 38 72 dc ce 63 c1 06 78 26 78 d3 a7 26 ec f1 77 Data Ascii: G89`PwGkGJd%xr:a!{qiu+OC_huXnzPQodhHVrOf5(!THW+Bk3zr,S!^L+d@T~9wJtdZyqr}@NL:5ouLl}FG)U4WkXq3V8rcx&x&w
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: ca 5b c0 92 9b 13 f2 b9 67 e0 a1 bd 0c fa 0c 60 ae 58 9c 89 e0 b5 e6 5e e1 bc 64 85 af a0 09 34 41 0e af 82 f9 0e a8 09 6a 02 0e 1d 00 2f b9 f7 42 e7 c0 e9 52 38 56 aa d5 cb 83 f2 f4 e6 79 7e d6 ac b1 0d 03 92 09 5d af 3e b8 46 9e cb 83 ee 37 29 18 8a 4d ce b7 48 ab 9f 8f 6a 69 d4 bc 06 9a ab e6 43 2d cd 65 f5 81 a6 fa d9 3c dc b9 06 4b af 92 da 1f 59 d3 f6 48 7e 25 bb 92 a5 b5 2f 6e 5f af d8 ba 3d 79 cd 2e 83 16 69 4a 01 50 86 4a 8b f6 7f ea 44 d7 32 d5 d8 f1 c0 43 a6 1a 3b 9e df 18 74 d0 d4 99 d6 5e 83 d3 59 e4 b9 02 e8 7d 8b 82 c1 da 77 e1 fc 43 3f 36 c5 34 4a 5b 78 f8 50 ce ce 14 71 52 17 ab d6 cf 8b c5 13 bf f3 30 3c f1 b5 2b 79 8b da 72 2d 0e 1a 78 6d 52 a9 e9 db 04 2d 3a 06 0b ca c8 3c d8 49 e5 c1 02 3d ec 2c 43 3b 19 dd 3c 1e 0f 7e b7 30 56 9b 85 Data Ascii: [g`X^d4Aj/BR8Vy~]>F7)MHjiC-e<KYH~%/n_=y.iJPJD2C;t^Y}wC?64J[xPqR0<+yr-xmR-:<I=,C;<~0V
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 7d dc f4 ad 05 69 d1 c4 a2 bd 45 2f 8b 01 16 e3 2c a6 5b cc b7 58 63 71 d0 e2 bc 45 ae 45 a9 45 9d 85 99 fb 96 6b c7 f5 e2 46 71 51 5c 06 57 c6 99 9a 35 6b 66 68 e6 d4 6c 60 b3 29 cd 12 9a ad 6a b6 bb d9 d9 66 37 9b d5 34 fb 4b cf ea 5b e9 bb e9 7d f4 07 f4 f5 96 4d 2d 3b 59 8e b6 9c 61 b9 d0 72 bd e5 ab ef 89 ef 5b 7e 6f f8 de e6 fb 9e df 0f fe 3e e4 fb 79 df 9f fd fe ce f7 2f 9b ab 9b b7 69 ee d9 7c 45 f3 9d cd 4f 35 cf 69 fe aa 05 db a2 55 0b f7 16 01 2d 66 b6 58 d2 62 67 8b c2 16 75 56 a4 95 de aa 83 95 b7 d5 78 ab ed 56 17 ac 4a ac 5e 58 33 d6 0e d6 fd ad 27 5a 27 58 6f 68 a9 6a 69 d3 b2 57 cb d1 2d 97 b6 dc dd 32 af e5 c3 96 c0 37 e1 db f3 de fc 7a fe 20 9f c9 df e7 5f 19 18 83 b5 a1 bb 61 a0 61 8a 21 de 90 6c d8 63 38 63 b8 69 a8 36 bc 33 3a 18 07 Data Ascii: }iE/,[XcqEEEkFqQ\W5kfhl`)jf74K[}M-;Yar[~o>y/i\|EO5iU-fXbguVxVJ^X3'Z'XohjiW-27z _aa!lc8ci63:
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: a2 b2 3e a3 74 c7 93 ee 08 35 85 e4 e5 aa 1f 2b 20 e8 3e 25 54 59 be 64 70 a0 6e 41 a7 dd de f7 f0 b9 55 3f a6 ef 42 ff a8 71 06 e4 0b 03 e8 c7 17 4b b3 9f 58 3d 18 5e 81 58 a4 ec ef e6 ec 77 26 e0 f2 58 43 d7 40 cf e1 8e 56 48 f3 b2 1f 18 9f ff 7a 2c eb 86 01 c5 cd d7 77 1c 7c a9 f4 f6 85 f3 cf d2 8d 38 df 9f 44 4f 99 3c 34 ce db da 55 98 a7 bf 7e fa 52 71 c1 d9 e0 80 21 21 e1 0e 93 0c 93 32 66 9e bf 62 a5 83 13 c8 25 0b 9a 16 c0 d3 02 b0 be 4e e6 dd 86 a6 f7 e1 e4 2d e8 72 93 12 46 6f d3 e7 e5 1c b8 7a da 38 7e d3 b9 d9 d9 d6 4f 1f bc 87 01 d8 bc db 82 37 da 88 7e 40 03 91 27 5a 87 a2 a0 1b 1a 0e 9b af 5f df b8 fd 9a 31 47 b5 20 70 f4 92 e1 d6 28 10 b5 87 f6 10 02 41 60 0b 3d 71 a6 19 05 3a 9c 99 e2 e0 76 5c 0f ff b9 73 b7 5e 34 c2 d3 01 7e aa 2b 11 a3 Data Ascii: >t5+ >%TYdpnAU?BqKX=^Xw&XC@VHz,w\|8DO<4U~Rq!!2fb%N-rFoz8~O7~@'Z_1G p(A`=q:v\s^4~+
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: e5 52 d7 b1 5c c9 22 5e f7 0b 4f de a9 80 e5 15 94 1d 1e 93 2b cb 8a 05 02 a7 d7 8a 72 ca 83 d5 8d e2 2d 2a ca e1 a7 72 ee 52 5b 9e 9b 1b 87 f1 5d f7 b3 07 84 29 14 6c 2a d7 37 be 41 19 64 4e a4 9f e2 42 48 a4 dd 18 dd bb fd e2 f6 0c d5 8d 97 68 8f 0b c3 a9 c9 f8 b6 db 62 96 3c 88 f9 ba f0 ba 2d 2c 79 51 30 52 03 58 5d 22 fc 52 bc f4 8e c5 8b 7b 70 ef 1e 97 2a 8c 87 5f f4 0b 59 6e d6 34 9e 4b bd 01 ec d0 0a 6b 1d 0a c2 71 c6 29 e1 7b ea 94 30 4c ff 2b 83 63 15 3f 60 91 1f fd 2b 83 17 fd 75 f4 20 bc 66 2f 15 92 f3 c1 32 81 84 fe b7 29 41 29 e4 eb 53 58 b4 fd 36 6c 87 a6 18 39 0f fe cc 7f 2d a3 07 61 b4 46 68 af 47 4d 5f 43 d3 fc 14 b6 3d 6a 32 04 9a 20 ee 36 70 22 e9 e8 87 e5 a0 ce 07 be 9c 7a d8 93 bf 71 92 85 e6 95 54 de 12 f6 70 5d 27 68 69 0d 2d 9e 54 Data Ascii: R\"^O+r-rR[])l7AdNBHhb<-,yQ0RX]"R{p*_Yn4Kkq){0L+c?`+u f/2)A)SX6l9-aFhGM_C=j2 6p"zqTp]'hi-T
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: ad 69 f4 93 c4 5e 02 1d 4a 64 76 e8 af 17 c2 4b cc e1 0c 74 50 ca 37 ba c4 e4 12 b8 80 55 38 7f 8f 2a 85 bf f5 10 89 86 dd 83 61 10 55 82 63 fc 61 fd d0 30 ec ff cc 7d 95 c2 8f 25 e6 1f 25 62 f2 09 76 fb af 00 e9 85 b1 c8 93 2e 57 99 09 68 2e e0 3f f1 56 84 2c 35 f7 d5 0b 53 4a cc 53 64 ea 37 98 5a c8 14 fa ea cd 63 c1 93 f6 50 09 04 6a 6e c6 7f e2 ad 08 d9 84 d2 f4 e6 29 be 82 48 fe 44 e8 47 3d 81 0b 7a a1 1f 9a 4c 57 aa d0 1b 6c b2 f8 0f df 9a 45 08 6e 4a 33 4c 21 e4 80 49 6f ee 07 93 69 77 15 bc 41 dd 11 fe c3 b7 82 08 91 bb f3 b5 30 96 7a 8d bb 53 18 5b 62 1e 8b e5 fe 25 f8 90 f5 42 7f 0a 1c fe d2 83 2b fe b9 23 b7 cb 99 48 34 78 77 70 1f 9f 89 dc f1 0f 3f 8d 1f 0f a2 d1 bb 22 37 2c 28 bf 1e be 29 81 6f 70 42 7b b0 be d9 23 71 74 1a 7a 6e 00 ca 94 f3 Data Ascii: i^JdvKtP7U8*aUca0}%%bv.Wh.?V,5SJSd7ZcPjn)HDG=zLWlEnJ3L!IoiwA0zS[b%B+#H4xwp?"7,()opB{#qtzn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	49982	151.101.130.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:49 UTC	595	OUT	GET /messaging/venmo-assets/Scto-Grotesk-A-Italic.woff HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.paypal.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:49 UTC	748	IN	HTTP/1.1 404 Not Found Connection: close Content-Length: 1108 Content-Type: text/html Paypal-Debug-Id: 1477dc7988500 Traceparent: 00-00000000000000000001477dc7988500-c86a720e699b966c-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:49 GMT X-Served-By: cache-dfw-kdfw8210173-DFW, cache-gnv1820029-GNV X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1714134229.332099,VS0,VE201 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, must-revalidate, proxy-revalidate, private, max-age=0, s-maxage=0 ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:49 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 65 72 72 6f 72 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8"> <title>404</title> <link rel="stylesheet" href="error.css" type="text/css"> <meta name="viewport" content="width=device-width, initial-scale=1"> <style> body { backgr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	49980	151.101.130.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:49 UTC	595	OUT	GET /messaging/venmo-assets/Scto-Grotesk-A-Medium.woff HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.paypal.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:49 UTC	843	IN	HTTP/1.1 200 OK Connection: close Content-Length: 48780 Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: font/woff Etag: "60271ccc-be8c" Last-Modified: Sat, 13 Feb 2021 00:26:52 GMT Paypal-Debug-Id: e20efd417758d Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000e20efd417758d-05e3b71d87a71f23-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:49 GMT X-Served-By: cache-dfw-kdfw8210074-DFW, cache-pdk-kpdk1780093-PDK X-Cache: HIT, MISS X-Cache-Hits: 2, 0 X-Timer: S1714134229.335553,VS0,VE19 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 77 4f 46 46 4f 54 54 4f 00 00 be 8c 00 0b 00 00 00 01 6c 44 00 01 00 00 00 00 bc ac 00 00 01 74 00 00 03 11 00 00 be 20 00 00 00 6c 43 46 46 20 00 00 09 44 00 00 64 54 00 00 7f a0 a7 12 c7 42 47 50 4f 53 00 00 75 04 00 00 47 a5 00 00 cd 86 80 db e1 09 47 53 55 42 00 00 71 84 00 00 03 7e 00 00 07 b2 60 a9 4b 52 4f 53 2f 32 00 00 01 6c 00 00 00 57 00 00 00 60 91 37 61 e4 63 6d 61 70 00 00 04 38 00 00 04 f5 00 00 06 e6 9e 01 ce 44 68 65 61 64 00 00 01 08 00 00 00 36 00 00 00 36 10 49 27 82 68 68 65 61 00 00 01 40 00 00 00 21 00 00 00 24 08 0f 05 80 68 6d 74 78 00 00 6d 98 00 00 03 ec 00 00 08 c6 05 79 6b 3c 6d 61 78 70 00 00 01 64 00 00 00 06 00 00 00 06 02 33 50 00 6e 61 6d 65 00 00 01 c4 00 00 02 74 00 00 06 17 90 59 bd 19 70 6f 73 74 00 00 09 30 00 00 00 Data Ascii: wOFFOTTOlDt lCFF DdTBGPOSuGGSUBq~`KROS/2lW`7acmap8Dhead66I'hhea@!$hmtxmyk<maxpd3PnametYpost0
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: d3 9f 81 0c 62 30 b7 71 2b b7 33 8d 19 0c 65 09 4f 90 c3 70 ee 62 04 d9 1a c6 2d 1a a1 bb 35 5c 63 34 56 39 f6 e8 9c 5a 12 4f 09 72 b9 57 a3 19 ab bb 18 c7 7d 94 d2 50 1e e6 11 d6 f0 94 da 51 8e 0a dc cf 78 26 f0 00 63 34 52 d9 9c d0 52 6e 64 32 53 b4 43 db c9 64 00 13 99 44 15 16 92 c7 62 1e e5 31 96 b1 9c 15 ac 64 15 8f db 1d 3e c9 af 1c a2 50 b5 99 ca 4c 66 31 9b 39 cc 65 1e 0f 32 9f 05 c4 c7 7f 62 c7 4c b5 0c 09 f6 56 1a d8 33 6e 6e f7 94 c5 28 72 94 a3 d9 da a0 22 57 c3 35 71 6f b9 5d 6e 77 dc 96 d0 f8 d0 94 50 a1 57 c9 ab ee 85 3c df 4b f5 1a 7a cd bc 0c 6f 88 37 d2 cb f1 26 79 4f 84 fd 70 6a b8 6b 38 33 dc 2b 3c c7 77 7e 82 5f de 4f f1 ab fb 21 3f dd 6f e7 67 f9 fd fc f9 fe 42 3f af f6 80 e0 d1 e0 d9 e0 f9 60 73 b0 35 78 37 d8 1e 1c 48 9d 95 36 a7 Data Ascii: b0q+3eOpb-5\c4V9ZOrW}PQx&c4RRnd2SCdDb1d>PLf19e2bLV3nn(r"W5qo]nwPW<Kzo7&yOpjk83+<w~_O!?ogB?`s5x7H6
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: b2 19 b2 3f 64 0b 65 4b 64 6b 64 1b 65 fb 64 47 65 e7 65 97 65 37 65 0f 65 4f 64 af 65 75 72 42 2e 97 b3 72 0b 39 2f ef 20 77 96 7b ca bb ca bb cb 83 e5 a1 f2 61 f2 28 79 82 3c 4d 3e 49 3e 4d fe bb 7c b1 fc 6f f9 7a f9 4e f9 41 f9 19 f9 25 f9 0d f9 5d 79 99 bc 5c fe 42 fe 56 fe 49 2e 50 04 c5 50 6a 4a 43 b5 a2 ac a9 0e 94 0b d5 8d ea 4b 0d a6 22 a8 28 6a 2c 35 8e 1a 4f 4d a5 66 53 f3 a9 3f a9 0d d4 3e ea 38 75 8e ba 42 95 50 8f a8 97 d4 7b 4a a0 cd 68 15 dd 92 b6 a3 9d 68 0f da 97 ee 41 f7 a2 07 d0 e1 f4 68 3a 8e 4e a1 b3 e8 c9 74 1e bd 84 5e 47 ef a1 4f d3 b7 e8 87 f4 4b 5a 60 54 0c cf 38 33 9d 99 60 66 28 33 86 c9 60 a6 33 7f 30 0b 99 65 cc 6a 66 23 b3 83 d9 c7 1c 63 ce 32 45 cc 4d e6 1e f3 98 79 cd d4 32 1f 19 60 8c 0a 52 41 2b 54 8a 26 0a 8d c2 52 a1 Data Ascii: ?deKdkdedGeee7eeOdeurB.r9/ w{a(y<M>I>M\|ozNA%]y\BVI.PPjJCK"(j,5OMfS?>8uBP{JhhAh:Nt^GOKZ`T83`f(3`30ejf#c2EMy2`RA+T&R
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 53 ea c2 cc 58 53 07 66 c6 4a dd 97 19 2b 8e 0f 0c a2 53 f1 50 17 69 26 48 48 19 d8 22 e0 a9 3a 0e bf 8a f3 3c 06 09 63 23 1d 53 d3 a3 c7 88 8f 28 f1 11 2d 3e 62 c4 47 ac f8 88 13 1f f1 e2 23 41 7c 8c 15 1f 89 e2 23 49 7c 24 8b 8f 14 f1 91 2a 3e d2 c4 c7 38 f1 91 2e 3e 32 c4 47 a6 f8 c8 12 1f d9 e2 23 47 7c 8c 17 1f 13 c4 c7 44 29 17 77 bf 7b 77 7f 13 08 14 81 ab b7 a4 2f ee 3d 5c 4d c0 cd 04 9c 4d c0 c5 04 dc 4d 40 d2 3a 6f 7f 0f 13 5d 03 70 37 01 49 07 dd fd 4c 04 7e 12 b9 ab 09 f8 bb b8 9a 80 89 75 80 09 33 c0 cb 04 fc 4c 79 ee 26 d0 c9 94 28 89 e4 e1 ed 62 02 12 17 17 6f 57 13 68 f8 72 31 01 37 13 9d 87 09 78 9a 80 97 09 98 2a e6 6f aa 98 bf a9 74 93 f0 ee fe 26 21 fc bb 9b 40 0f 53 83 98 2a dd 5d 62 dd c9 c3 d9 04 1a be 5c 4d c0 cd 04 3a 99 80 bb 09 Data Ascii: SXSfJ+SPi&HH":<c#S(->bG#A\|#I\|$>8.>2G#G\|D)w{w/=\MMM@:o]p7IL~u3Ly&(boWhr17xot&!@S*]b\M:
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 9a 57 6b ea 8d cd 29 50 d1 60 23 4c a3 6c 69 44 18 ad ac 04 2b 0a 11 b4 95 d1 0a 11 f8 d5 9a 06 5b e3 34 11 07 b7 04 81 65 7d 40 f7 98 cc 27 8f 3e 3b 54 db 37 6d 70 0f fd 0d 7a d7 8a 95 ab 75 aa de 2c 57 db 81 e5 aa 3a f1 ea 93 9b 26 c5 c5 a6 65 c6 c4 64 ac df 35 47 df 95 0e 98 7f 62 74 95 56 25 cc d3 d8 5f 0c ad ca d0 1d 9d 4a a1 09 4c d0 df 23 8e cd be ad b0 a5 17 a1 5f 1e 74 81 56 53 15 d6 77 3f 32 d0 62 59 f9 43 20 2c df f4 2f 74 ca d7 f5 5e 49 c1 38 e6 fc d4 7d d1 8b 83 14 1f e9 3f 40 ee 73 1f 35 5a a1 f8 e4 67 cd 20 d5 d4 ae be 36 96 70 1a a5 6a 8a 26 e7 c7 45 58 f6 1b 15 1d 30 43 07 f1 0c ea 0a c9 9a b3 bb f7 17 fd a9 43 a3 98 bc 49 8b f2 b4 03 56 65 ef 3a 6a a9 36 24 40 8d 15 ab b2 66 d5 82 36 57 03 91 60 09 d6 90 f8 29 f1 d9 c0 cb fa 97 c0 52 6d Data Ascii: Wk)P`#LliD+[4e}@'>;T7mpzu,W:&ed5GbtV%_JL#_tVSw?2bYC ,/t^I8}?@s5Zg 6pj&EX0CCIVe:j6$@f6W`)Rm
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: fd 70 84 42 ad 68 f4 06 cb 08 ef ad 18 f5 79 50 9e fd 78 d1 7c 4f 3c cb 55 43 6f 55 da f9 2d 53 79 15 6a 8a 3c f0 af a9 aa 62 36 af aa 81 eb 34 28 fb 96 20 2a 70 40 5a 58 bc 0e f2 6d bf 86 d4 c2 46 a6 fc d8 f5 47 d7 0e c5 3b 88 33 ec 28 08 a7 50 33 1a 65 a0 24 4a 70 97 10 3c 98 e2 db e0 83 26 53 d0 98 56 1b 42 28 15 fa c5 ce 11 79 21 cf 1a 27 68 54 52 b8 f9 f4 1e bd 6a c4 f4 54 5e 55 0e 1f 1e a9 34 f3 ca b7 de 3d 7a 45 e1 4f 87 07 a7 fd da d5 b2 cb 66 ff 93 3d 75 25 f4 c8 cb 29 65 79 e5 b8 71 ec 72 5f f6 cb 86 cd 2f 61 de 2b 15 58 8f e6 55 d0 14 b9 bc 1d c3 77 c0 c2 36 05 97 0e 78 0e 1f 01 2e 6f a1 29 16 27 07 15 53 a8 c5 67 68 c1 8c 87 62 8a 3b d3 01 94 9a be ac fa 55 e1 e9 fb ff ac 9c 9b b7 4a a7 16 12 df 1a 09 e1 b5 95 38 ab cd 30 be ae 17 5e c3 cc b7 Data Ascii: pBhyPx\|O<UCoU-Syj<b64( *p@ZXmFG;3(P3e$Jp<&SVB(y!'hTRjT^U4=zEOf=u%)eyqr_/a+XUw6x.o)'Sghb;UJ80^
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 3c 51 3e 45 be 58 7e 48 5e 28 7f 20 7f 4d 85 52 23 a9 0c 6a 0a b5 9a da 4b 9d a4 0a a9 52 aa 92 aa a1 75 b4 13 ed 4b 8f a7 6f d3 15 f4 7b fa 5f a6 11 e3 c4 f8 32 41 4c 7f 1c d8 4f 60 96 32 1b 98 b3 cc 4d e6 95 42 a6 d0 28 9a 2b dc 14 dd 15 a1 8a cd 8a e3 8a 42 25 ab ec ab 8c 52 8e 53 4e 53 2e 56 1e 50 9e 53 5e 53 96 29 9f b3 34 6b c7 06 b0 69 ec 64 f6 21 fb 8a fd a2 52 aa ba ab fa ab 46 a9 92 55 59 aa 0d 38 cc 5e d1 68 47 a3 6b 8d fe d3 78 b2 ba b1 7a 86 fa a2 fa eb 2f ce bf 0c f8 65 e9 2f 07 7e a9 6c a2 6e e2 db 64 64 93 69 4d 96 35 b9 d2 e4 6b d3 4e 4d d7 9b 37 33 77 30 0f 37 8f 37 cf 36 df 61 7e da fc 9e f9 3b ae 09 67 cd 75 e2 fc b9 81 5c 34 97 c9 cd e4 d6 70 bb b9 d3 dc 0d ee 69 b3 96 cd ec 9b 85 36 8b 6c 36 b9 d9 5f cd de 68 68 8d 83 a6 a7 66 84 26 Data Ascii: <Q>EX~H^( MR#jKRuKo{_2ALO`2MB(+B%RSNS.VPS^S)4kid!RFUY8^hGkxz/e/~lnddiM5kNM73w0776a~;gu\4pi6l6_hhf&
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: e4 6f e9 e6 38 bd 79 b9 60 26 32 e7 8c 66 12 19 cd 55 2e e3 e7 b0 38 32 1a bf 8f 85 f1 f9 3c 8e 11 cc f6 b1 c8 2c 9f 17 18 18 ff 80 dc ff c5 51 b6 1f c6 6b be 38 3e f8 d7 11 0b 52 61 83 1d ad 4f 2f 64 9f 6c 34 2f 0c e7 5c a4 14 30 bc 87 2f df 12 c1 e0 42 bf 97 bf 80 2f 62 5e 4f 9b bf 79 78 68 b3 83 97 de 04 4f 43 c4 0e f6 01 84 96 41 e7 32 f2 9c 50 2d ab 16 fc 35 eb d9 71 a8 33 85 b8 6e a0 a0 d3 91 0f f5 90 de 08 3e 14 d8 36 7c 6c 12 3f b4 65 a8 09 7e eb 4c 81 ae 0c 0b bd 09 ba cc e3 c7 a1 2e 14 b2 35 bd a7 89 ef 4d 68 08 eb a6 c1 84 12 3f 5b 5a 2d fc 9b cb 16 3e 02 bf 47 5c 4e ed 12 96 3b 51 db 8d 85 d6 16 37 77 1d 3c 7d 66 d7 98 a0 a0 84 31 61 43 12 0e de d4 c1 52 0b 50 79 5e f4 f0 f4 ec 8f 54 48 55 d1 bf a2 b2 e2 22 a8 70 bc 36 23 97 e5 72 ce 88 a4 67 Data Ascii: o8y`&2fU.82<,Qk8>RaO/dl4/\0/B/b^OyxhOCA2P-5q3n>6\|l?e~L.5Mh?[Z->G\N;Q7w<}f1aCRPy^THU"p6#rg
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 56 98 ab 49 c6 aa f0 3b cf 15 44 b1 3a f5 00 8c fb 09 b6 7c 90 1d 81 b9 4e 3c fa 13 d7 d0 a1 12 9a 3c 21 81 ac 91 c1 7b 43 6f cd 34 76 18 1f cd 8b 0c 36 d6 70 e5 0b 58 ee 6d 47 9e 2b 37 2a 60 a2 86 7b db 97 57 0f 9f 25 16 40 96 d6 c2 d4 1a 99 e0 64 31 96 8f e2 8d 8d 53 58 1c f5 8a ab 52 44 0d 57 35 0a 05 8c 67 b9 5a 90 19 5c 7c f9 ce 23 78 18 27 e2 cb e0 1e 14 24 62 dc 30 1e 7f 94 1a 42 36 b0 b0 00 97 ef 51 39 0d 57 2c f9 3d a4 bc e7 ca 0d 27 e1 ba 06 2c fd ce b7 ef 12 1e 3f 34 4e 77 3e 6d c8 b6 00 ad 5f 78 f4 a8 54 3d 57 50 22 ad 4d 6c 64 b8 f2 57 a7 cf 5e be bd 33 0a eb cf d1 f7 b0 8f 79 76 e1 e8 c5 9b bb a3 7c 74 e8 e4 7b 46 14 51 64 39 b5 86 bb 07 3d 2c dc 58 ee e8 2c 3e 45 6c 24 d8 57 27 eb 8a db 08 39 66 83 4f 2a 3f cd d4 a0 6f e1 e5 74 0d a8 df bf Data Ascii: VI;D:\|N<<!{Co4v6pXmG+7`{W%@d1SXRDW5gZ\\|#x'$b0B6Q9W,=',?4Nw>m_xT=WP"MldW^3yv\|t{FQd9=,X,>El$W'9fO?ot
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 7a e7 69 9e 1c be 78 ff 0c 56 88 25 ba 0a fa cd b4 6e e7 ec b4 48 ed ed 8b 11 5b 3c ea 82 8d 63 d9 f9 ea 65 7a 4f 3a 6c e6 98 94 30 ad ef e8 8b 15 7a 75 1f 98 77 00 5c 0e dc 39 7c f5 20 79 ee e8 e3 33 f5 67 8a 8f 62 1b 92 a6 41 e6 1f 6c 70 14 64 fe f1 83 f8 6c fb 11 99 23 73 9b b6 c8 5c 77 d4 e2 53 79 c5 87 0f 8f 3c ad ad bd 3d 6d 6c 7c 2a 3e e9 1e 23 4a 73 e6 d1 65 fa b4 37 75 9e ee ff 82 da be 7c d5 96 6d 96 67 12 36 f6 c7 ca 4a 43 a7 2e 9a 8c 29 53 33 75 01 77 6e d3 1b 56 fc 96 a9 57 43 ac 41 79 8d 04 a7 5b e0 7a 13 56 df 94 1d 30 28 35 c0 a0 35 b7 60 0d 30 d7 d0 69 5a 98 8f 2a 35 65 f4 6b 58 4e a1 e5 37 a1 d2 86 b1 43 eb da c3 3a ca 06 55 de 84 e5 d8 fe 64 08 9d ae 80 e7 15 f2 5c 31 38 16 63 89 2f 68 3a 5f ef f5 a8 fc c6 d5 87 0f 7b 5e f3 f1 0e 0e e9 Data Ascii: zixV%nH[<cezO:l0zuw\9\| y3gbAlpdl#s\wSy<=ml\|>#Jse7u\|mg6JC.)S3uwnVWCAy[zV0(55`0iZ5ekXN7C:Ud\18c/h:_{^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	49983	151.101.130.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:49 UTC	544	OUT	GET /staging/pa/js/pa_venmo.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:49 UTC	902	IN	HTTP/1.1 200 OK Connection: close Content-Length: 38519 Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Etag: "662adc92-9677" Last-Modified: Thu, 25 Apr 2024 22:43:30 GMT Paypal-Debug-Id: 2484606fbeb32 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000002484606fbeb32-fa223c94c6c1fd01-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:49 GMT X-Served-By: cache-dfw-kdfw8210096-DFW, cache-pdk-kpdk1780142-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1714134229.341980,VS0,VE144 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET ACCESS-CONTROL-ALLOW-HEADERS: x-csrf-token Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 2f 2a 40 20 32 30 32 34 20 50 61 79 50 61 6c 20 28 76 31 2e 38 2e 31 36 29 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 52 3d 22 76 65 6e 6d 6f 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 72 65 74 75 72 6e 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 74 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 6e 64 28 70 61 72 73 65 46 6c 6f 61 74 28 74 29 29 7c 7c 30 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 29 7b 69 66 28 21 74 7c 7c 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 4f 62 6a 65 63 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 41 72 72 61 79 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 65 2c 6e 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 Data Ascii: /@ 2024 PayPal (v1.8.16) /!function(){"use strict";var R="venmo";function o(){return(new Date).getTime()}function m(t){return Math.round(parseFloat(t))\|\|0}function a(t){if(!t\|\|t.constructor!==Object&&t.constructor!==Array)return t;var e,n=t.constructor
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 73 3d 22 2b 72 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 29 3a 22 22 3b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 74 2b 22 3d 22 2b 65 2b 69 2b 6e 2b 22 3b 20 70 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 53 65 63 75 72 65 22 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 2c 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 66 6f 72 28 76 61 72 20 72 3d 65 5b 6e 5d 3b 22 20 22 3d 3d 3d 72 2e 63 68 61 72 41 74 28 30 29 3b 29 72 3d 72 2e 73 75 62 73 74 72 69 6e 67 28 31 2c 72 2e 6c 65 6e 67 74 68 29 3b 69 66 28 30 3d 3d 3d 72 2e 69 6e 64 65 78 4f 66 28 74 2b 22 3d 22 29 29 72 65 74 75 72 6e 20 72 2e 73 75 62 73 74 Data Ascii: s="+r.toUTCString()):"";document.cookie=t+"="+e+i+n+"; path=/; SameSite=None; Secure"}function u(t){for(var e=document.cookie.split(";"),n=0;n<e.length;n++){for(var r=e[n];" "===r.charAt(0);)r=r.substring(1,r.length);if(0===r.indexOf(t+"="))return r.subst
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 72 2c 69 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2c 6f 3d 61 2e 63 72 65 61 74 65 53 74 79 6c 65 53 68 65 65 74 28 29 3b 66 6f 72 28 69 3d 61 2e 61 6c 6c 2c 65 3d 5b 5d 2c 6e 3d 28 74 3d 74 2e 72 65 70 6c 61 63 65 28 2f 5c 5b 66 6f 72 5c 62 2f 67 69 2c 22 5b 68 74 6d 6c 46 6f 72 22 29 2e 73 70 6c 69 74 28 22 2c 22 29 29 2e 6c 65 6e 67 74 68 3b 6e 2d 2d 3b 29 7b 66 6f 72 28 6f 2e 61 64 64 52 75 6c 65 28 74 5b 6e 5d 2c 22 6b 3a 76 22 29 2c 72 3d 69 2e 6c 65 6e 67 74 68 3b 72 2d 2d 3b 29 69 5b 72 5d 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 2e 6b 26 26 65 2e 70 75 73 68 28 69 5b 72 5d 29 3b 6f 2e 72 65 6d 6f 76 65 52 75 6c 65 28 30 29 7d 72 65 74 75 72 6e 20 65 7d 29 3b 76 61 72 20 4a 3d 7b 73 3a 22 73 65 73 73 69 6f Data Ascii: ction(t,e,n,r,i){var a=document,o=a.createStyleSheet();for(i=a.all,e=[],n=(t=t.replace(/\[for\b/gi,"[htmlFor").split(",")).length;n--;){for(o.addRule(t[n],"k:v"),r=i.length;r--;)i[r].currentStyle.k&&e.push(i[r]);o.removeRule(0)}return e});var J={s:"sessio
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 61 64 2f 69 2e 74 65 73 74 28 74 29 7c 7c 2f 69 50 68 6f 6e 65 2f 69 2e 74 65 73 74 28 74 29 29 26 26 2f 57 65 62 4b 69 74 2f 69 2e 74 65 73 74 28 74 29 26 26 2f 43 72 69 4f 53 2f 69 2e 74 65 73 74 28 74 29 3b 69 66 28 65 7c 7c 74 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 31 7d 28 29 29 26 26 28 65 2e 72 65 66 65 72 72 65 72 50 6f 6c 69 63 79 3d 22 6e 6f 2d 72 65 66 65 72 72 65 72 2d 77 68 65 6e 2d 64 6f 77 6e 67 72 61 64 65 22 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 2c 65 2c 6e 29 7b 74 26 26 28 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 2c 6e 2c 21 31 29 3a 74 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 74 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 65 2c 6e 29 29 7d Data Ascii: ad/i.test(t)\|\|/iPhone/i.test(t))&&/WebKit/i.test(t)&&/CriOS/i.test(t);if(e\|\|t)return;return 1}())&&(e.referrerPolicy="no-referrer-when-downgrade")}function p(t,e,n){t&&(t.addEventListener?t.addEventListener(e,n,!1):t.attachEvent&&t.attachEvent("on"+e,n))}
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 78 70 3a 69 7d 2c 48 28 58 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 29 7d 63 61 74 63 68 28 6f 29 7b 7d 72 65 74 75 72 6e 20 74 7d 7d 28 29 29 26 26 63 28 65 2c 7b 22 33 70 5f 76 69 64 22 3a 69 2e 76 69 64 2c 22 33 70 5f 66 70 74 69 22 3a 69 2e 66 70 74 69 7d 29 2c 5a 28 6e 3d 72 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 72 7c 7c 21 31 3d 3d 3d 72 28 29 29 3f 6e 3a 70 74 28 74 2c 65 29 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 74 29 7b 76 61 72 20 74 3d 64 74 28 74 29 2c 65 3d 6d 74 28 74 2c 74 2e 64 61 74 61 29 3b 72 65 74 75 72 6e 7b 64 61 74 61 3a 74 2e 64 61 74 61 2c 75 72 6c 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 74 2c 65 29 7b 76 61 72 20 6e 2c 72 3d 64 74 28 74 29 2c 69 3d 72 2e 64 61 74 61 2c 74 Data Ascii: xp:i},H(X,JSON.stringify(t))}catch(o){}return t}}())&&c(e,{"3p_vid":i.vid,"3p_fpti":i.fpti}),Z(n=r&&("function"!=typeof r\|\|!1===r())?n:pt(t,e)),n}function gt(t){var t=dt(t),e=mt(t,t.data);return{data:t.data,url:e}}function vt(t,e){var n,r=dt(t),i=r.data,t
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 63 74 69 6f 6e 20 45 74 28 74 2c 65 2c 6e 2c 72 29 7b 74 3d 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 2e 74 6f 53 74 72 69 6e 67 28 29 3a 74 3b 61 3d 65 2c 6f 3d 72 3b 76 61 72 20 69 2c 61 2c 6f 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 53 74 72 69 6e 67 28 69 29 2c 65 3d 74 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2e 22 29 3b 66 6f 72 28 62 74 28 69 2c 69 2c 61 2c 6f 29 3b 2d 31 21 3d 3d 65 3b 29 65 3d 28 74 3d 74 2e 73 75 62 73 74 72 28 30 2c 65 29 29 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2e 22 29 2c 62 74 28 69 2c 74 2c 61 2c 6f 29 3b 62 74 28 69 2c 77 74 2c 61 2c 6f 29 7d 3b 72 65 74 75 72 6e 21 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 53 74 72 69 6e 67 28 74 29 2c 6e 3d 5f 74 28 65 Data Ascii: ction Et(t,e,n,r){t="symbol"==typeof t?t.toString():t;a=e,o=r;var i,a,o,e=function(){var t=String(i),e=t.lastIndexOf(".");for(bt(i,i,a,o);-1!==e;)e=(t=t.substr(0,e)).lastIndexOf("."),bt(i,t,a,o);bt(i,wt,a,o)};return!!function(t){for(var e=String(t),n=_t(e
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 7c 28 7a 69 70 3d 29 29 5b 5e 26 2f 3f 5d 2b 2f 67 69 2c 72 65 64 61 63 74 65 64 55 73 65 72 4e 61 6d 65 3a 2f 28 28 75 73 65 72 6e 61 6d 65 3d 29 7c 28 6c 6f 67 69 6e 3d 29 7c 28 75 73 65 72 69 64 29 29 5b 5e 26 2f 3f 5d 2b 2f 67 69 2c 72 65 64 61 63 74 65 64 50 61 73 73 77 6f 72 64 3a 2f 28 28 70 61 73 73 77 6f 72 64 3d 29 7c 28 70 61 73 73 77 64 3d 29 7c 28 70 61 73 73 3d 29 29 5b 5e 26 2f 3f 5d 2b 2f 67 69 2c 72 65 64 61 63 74 65 64 43 72 65 64 65 6e 74 69 61 6c 73 3a 2f 28 6c 6f 67 69 6e 28 20 63 72 65 64 28 65 6e 74 69 61 6c 29 3f 73 7c 20 69 6e 66 6f 28 72 6d 61 74 69 6f 6e 29 3f 29 3f 7c 63 72 65 64 28 65 6e 74 69 61 6c 29 3f 73 29 20 3f 3a 5c 73 2a 5c 53 2b 5c 73 2b 5c 2f 3f 5c 73 2a 5c 53 2b 2f 67 69 2c 72 65 64 61 63 74 65 64 56 69 73 61 43 72 Data Ascii: \|(zip=))[^&/?]+/gi,redactedUserName:/((username=)\|(login=)\|(userid))[^&/?]+/gi,redactedPassword:/((password=)\|(passwd=)\|(pass=))[^&/?]+/gi,redactedCredentials:/(login( cred(ential)?s\| info(rmation)?)?\|cred(ential)?s) ?:\s\S+\s+\/?\s\S+/gi,redactedVisaCr
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 69 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3a 7b 7d 3b 74 25 32 3f 52 74 28 4f 62 6a 65 63 74 28 69 29 2c 21 30 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 3b 65 3d 72 2c 6e 3d 69 5b 74 3d 74 5d 2c 28 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 6e 75 6c 6c 3d 3d 3d 74 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 6e 3d 74 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 6e 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 72 65 Data Ascii: (var t=1;t<arguments.length;t++){var i=null!=arguments[t]?arguments[t]:{};t%2?Rt(Object(i),!0).forEach(function(t){var e,n;e=r,n=i[t=t],(t=function(t){t=function(t,e){if("object"!=typeof t\|\|null===t)return t;var n=t[Symbol.toPrimitive];if(n===undefined)re
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 6d 28 74 29 3a 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 6e 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 3f 46 74 28 74 2c 65 29 3a 76 6f 69 64 20 30 7d 28 74 29 29 7c 7c 65 26 26 74 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 63 26 26 28 74 3d 63 29 2c 61 3d 30 2c 7b 73 3a 6f 3d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 7d 2c 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 3e 3d 74 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 30 7d 3a 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 74 5b 61 2b 2b 5d 7d 7d 2c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 72 6f 77 20 74 7d 2c Data Ascii: m(t):"Arguments"===n\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(n)?Ft(t,e):void 0}(t))\|\|e&&t&&"number"==typeof t.length)return c&&(t=c),a=0,{s:o=function o(){},n:function(){return a>=t.length?{done:!0}:{done:!1,value:t[a++]}},e:function(t){throw t},
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 65 22 29 7c 7c 50 28 74 2c 22 63 6c 61 73 73 22 29 7c 7c 50 28 74 2c 22 68 72 65 66 22 29 7c 7c 50 28 74 2c 22 61 6c 74 22 29 7c 7c 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 63 68 69 6c 64 4e 6f 64 65 73 2c 6e 3d 6e 75 6c 6c 2c 72 3d 30 3b 72 3c 65 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 69 66 28 33 3d 3d 3d 28 6e 3d 65 5b 72 5d 29 2e 6e 6f 64 65 54 79 70 65 26 26 6e 2e 6e 6f 64 65 56 61 6c 75 65 26 26 6e 2e 6e 6f 64 65 56 61 6c 75 65 2e 6d 61 74 63 68 28 2f 5c 53 2f 29 29 72 65 74 75 72 6e 20 6e 2e 6e 6f 64 65 56 61 6c 75 65 2e 74 72 69 6d 28 29 3b 69 66 28 31 3d 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 26 26 6e 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 69 28 6e 29 7d 7d 28 74 29 29 7c 7c Data Ascii: e")\|\|P(t,"class")\|\|P(t,"href")\|\|P(t,"alt")\|\|function i(t){for(var e=t.childNodes,n=null,r=0;r<e.length;r++){if(3===(n=e[r]).nodeType&&n.nodeValue&&n.nodeValue.match(/\S/))return n.nodeValue.trim();if(1===n.nodeType&&n.childNodes.length)return i(n)}}(t))\|\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	49979	151.101.130.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:49 UTC	593	OUT	GET /messaging/venmo-assets/Scto-Grotesk-A-Bold.woff HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.paypal.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:49 UTC	842	IN	HTTP/1.1 200 OK Connection: close Content-Length: 49048 Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: font/woff Etag: "60271ccc-bf98" Last-Modified: Sat, 13 Feb 2021 00:26:52 GMT Paypal-Debug-Id: ae29b8dc4ef88 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000ae29b8dc4ef88-5088ab77e2d031ac-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:49 GMT X-Served-By: cache-dfw-kdfw8210119-DFW, cache-pdk-kpdk1780080-PDK X-Cache: HIT, HIT X-Cache-Hits: 14, 0 X-Timer: S1714134229.342438,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 77 4f 46 46 4f 54 54 4f 00 00 bf 98 00 0b 00 00 00 01 6d 58 00 01 00 00 00 00 bd bc 00 00 01 74 00 00 03 0f 00 00 bf 30 00 00 00 68 43 46 46 20 00 00 09 3c 00 00 64 ff 00 00 82 65 26 cd 7e fc 47 50 4f 53 00 00 75 b4 00 00 48 07 00 00 cb ea 72 71 c0 5c 47 53 55 42 00 00 72 34 00 00 03 7e 00 00 07 b2 60 a9 4b 52 4f 53 2f 32 00 00 01 6c 00 00 00 57 00 00 00 60 92 01 63 f4 63 6d 61 70 00 00 04 30 00 00 04 f5 00 00 06 e6 9e 01 ce 44 68 65 61 64 00 00 01 08 00 00 00 36 00 00 00 36 10 4b 27 69 68 68 65 61 00 00 01 40 00 00 00 21 00 00 00 24 08 11 05 84 68 6d 74 78 00 00 6e 3c 00 00 03 f7 00 00 08 c6 22 ce 61 d1 6d 61 78 70 00 00 01 64 00 00 00 06 00 00 00 06 02 33 50 00 6e 61 6d 65 00 00 01 c4 00 00 02 6b 00 00 05 ff 94 1d 76 37 70 6f 73 74 00 00 09 28 00 00 00 Data Ascii: wOFFOTTOmXt0hCFF <de&~GPOSuHrq\GSUBr4~`KROS/2lW`ccmap0Dhead66K'ihhea@!$hmtxn<"amaxpd3Pnamekv7post(
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 2b b7 33 8d 19 0c 65 09 4f 90 c3 70 ee 62 04 d9 1a c6 2d 1a a1 bb 35 5c 63 34 56 39 f6 e8 9c 5a 12 4f 09 72 b9 57 a3 19 ab bb 18 c7 7d 94 d2 50 1e e6 11 d6 f0 94 da 51 8e 0a dc cf 78 26 f0 00 63 34 52 d9 9c d0 52 6e 64 32 53 b4 43 db c9 64 00 13 99 44 15 16 92 c7 62 1e e5 31 96 b1 9c 15 ac 64 15 8f db 1d 3e c9 af 1c a2 50 b5 99 ca 4c 66 31 9b 39 cc 65 1e 0f 32 9f 05 c4 c7 7f 62 c7 4c b5 0c 09 f6 56 1a d8 33 6e 6e f7 94 c5 28 72 94 a3 d9 da a0 22 57 c3 35 71 6f b9 5d 6e 77 dc 96 d0 f8 d0 94 50 a1 57 c9 ab ee 85 3c df 4b f5 1a 7a cd bc 0c 6f 88 37 d2 cb f1 26 79 4f 84 fd 70 6a b8 6b 38 33 dc 2b 3c c7 77 7e 82 5f de 4f f1 ab fb 21 3f dd 6f e7 67 f9 fd fc f9 fe 42 3f af f6 80 e0 d1 e0 d9 e0 f9 60 73 b0 35 78 37 d8 1e 1c 48 9d 95 36 a7 ce 86 f4 ca e9 d5 d2 1b Data Ascii: +3eOpb-5\c4V9ZOrW}PQx&c4RRnd2SCdDb1d>PLf19e2bLV3nn(r"W5qo]nwPW<Kzo7&yOpjk83+<w~_O!?ogB?`s5x7H6
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: b5 43 b5 5f 75 4a 75 5e 75 55 75 4f f5 9b ea a5 ea 93 9a 52 ab d5 bc da 49 2d aa eb aa 7d d5 41 ea a6 ea 96 ea 48 75 27 75 1f f5 20 75 8a 3a 4b 3d 5c 3d 56 3d 59 3d 57 bd 48 bd 5a bd 59 bd 5b 7d 5c 5d aa be a2 fe 55 7d 4b 7d 5f fd bb fa 8d fa 4f b5 c4 50 0c c7 e8 18 81 a9 c5 b8 31 75 19 3f a6 19 d3 91 e9 ce c4 30 83 98 c1 cc 10 66 28 33 9a 99 c4 cc 64 7e 62 8a 98 1d cc 41 e6 24 73 81 29 63 1e 30 cf 99 b7 8c c4 da b1 5a b6 26 eb c9 fa b0 81 6c 18 db 8a 6d c7 76 65 7b b3 03 d8 24 36 83 cd 63 47 b0 d3 d8 79 ec 2a 76 1b 7b 8c bd c6 de 63 9f b3 12 a7 e5 44 ce 97 0b e1 22 b9 5e dc 40 2e 87 1b c7 4d e5 66 73 3f 73 cb b9 b5 5c 09 b7 83 3b c0 9d e0 ce 71 57 b9 db dc 43 ee 25 f7 9e fb c8 01 67 d5 d0 1a 56 a3 d5 54 d1 08 1a 83 c6 ac 71 d7 78 69 1a 68 1a 6a 82 35 61 Data Ascii: C_uJu^uUuORI-}AHu'u u:K=\=V=Y=WHZY[}\]U}K}_OP1u?0f(3d~bA$s)c0Z&lmve{$6cGy*v{cD"^@.Mfs?s\;qWC%gVTqxihj5a
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: cc 4d b4 4d 60 6e a2 32 7d b9 89 f2 fa c0 24 3e 13 97 ba 4c 53 a8 20 e5 a0 46 40 53 9d 84 af b2 9d c7 24 65 70 5c 83 cc ec f8 81 f2 63 90 fc 88 97 1f 09 f2 23 51 7e 24 c9 8f 64 f9 91 22 3f 06 cb 8f 54 f9 91 26 3f d2 e5 47 86 fc c8 94 1f 59 f2 63 88 fc c8 96 1f 39 f2 23 57 7e e4 c9 8f 7c f9 51 20 3f 86 ca 8f 42 f9 31 4c 81 e2 f4 07 b4 6c 61 4b da c8 89 7f 63 45 5e 02 5a f9 db 92 86 b6 c4 d7 96 f8 d9 92 00 5b a2 48 5d e3 16 81 36 ba 8a 24 c0 96 28 32 18 10 6e 23 08 57 c8 fd 6d 49 0b 3f 7f 5b 62 63 dd da 86 d9 3a d8 96 84 db 60 01 b6 a4 91 ad 50 69 52 60 63 3f 5b a2 70 f1 6b ec 6f 4b 2a 72 7e b6 a4 a1 8d 2e d0 96 04 d9 92 60 5b 62 eb 58 0b 5b c7 5a d8 6a b7 35 3e a0 85 ad 11 2d 5a da 92 56 b6 01 b1 75 ba a5 c2 ba 51 a0 af 2d a9 c8 f9 db 92 86 b6 a4 91 2d 09 Data Ascii: MM`n2}$>LS F@S$ep\c#Q~$d"?T&?GYc9#W~\|Q ?B1LlaKcE^Z[H]6$(2n#WmI?[bc:`PiR`c?[pkoK*r~.`[bX[Zj5>-ZVuQ--
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 66 a2 e2 26 af 59 3f 6d b5 f1 e5 8d 4d 60 b7 d7 ac 7d 2a f4 ce 58 b5 79 c7 da a5 27 7e 32 83 71 0d 93 cb 35 6b 1d 17 65 d2 3a 8b 3a 68 2d 0f ac 1b 4b 6a 58 b7 12 57 99 7d 00 4b 9c ad 25 a4 86 54 c2 10 0f 16 5a cb 03 de 8a 05 77 69 1b 78 58 b7 31 5a a8 6a 75 84 50 78 01 95 c8 0b f0 91 30 af 15 de 12 60 a0 1e 0b 5e d2 04 86 88 6c 5d f2 2f 2f f8 17 43 6a c8 6f f5 e4 37 67 84 59 27 c8 38 da f9 65 0c f8 df 23 a3 d8 7c 32 94 79 cc ae 9c bf 7c e1 3a 63 49 51 5e b2 76 48 df 03 7d 8d 6d 73 db 46 98 1f b0 c5 0b 17 2d 35 69 e7 8a ae bc 76 a0 e8 c1 6b a5 c9 82 db 85 ce 6f b3 4d 7b c6 30 a4 07 d7 63 69 ea de c9 a5 1a 62 60 67 93 4a bf f8 80 d7 08 8d 7b f9 07 0e 8c 0b ef 3e 06 da f0 67 87 b3 9e 6b 4d 3d 16 31 d0 81 db 3d 62 4d e2 ec 9e 1a 30 b2 d3 80 69 f6 1b d1 2f d1 Data Ascii: f&Y?mM`}*Xy'~2q5ke::h-KjXW}K%TZwixX1ZjuPx0`^l]//Cjo7gY'8e#\|2y\|:cIQ^vH}msF-5ivkoM{0cib`gJ{>gkM=1=bM0i/
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: e6 a7 e5 0c 61 d8 a6 c4 85 19 53 30 3e 2f d7 d0 fe 58 af cb a6 73 6a 79 01 fd b8 a0 cc ba 16 96 fb f4 49 cb 7d 95 16 da 39 a1 9c 4f 80 50 82 4a ba 39 4b e6 c0 07 98 0e 7f 30 a4 09 4b 42 c8 38 12 04 e3 18 d2 9c 85 19 e4 1d 99 49 de 31 da 96 bc 6e 55 27 1c 83 29 24 b8 3b 31 84 10 95 06 74 ec dd cf a5 e8 b0 f8 1b c0 bf 13 b8 87 7e 36 11 1d 7b 8f a8 4e 10 c3 2c 12 ac d1 59 a2 04 ad a1 ef ae 8c 33 c5 7b e7 cd 59 6c ba c9 4d 1a 91 3f b9 c0 98 37 7c c1 4a 2d f1 27 3a 52 09 9f fe a4 12 ca 8d bf 36 28 ae 55 48 48 dc f5 47 8f f6 5c bf a7 85 15 b1 a2 96 d8 09 c7 a6 0c 5a de db 38 79 fc f4 69 93 64 4b ec 05 2e ad 17 b0 87 56 ad 39 37 d3 74 9d 73 ee de d7 c7 ac ad cf eb cb b4 6d 49 a7 d7 9f 3f c2 8e 0f 63 0b b4 6f 3a f2 5a 54 60 8f 81 09 94 22 49 20 47 ae 59 db 30 44 Data Ascii: aS0>/XsjyI}9OPJ9K0KB8I1nU')$;1t~6{N,Y3{YlM?7\|J-':R6(UHHG\Z8yidK.V97tsmI?co:ZT`"I GY0D
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 35 87 a2 7f b5 a3 ce 51 d4 45 8a 3a 4f 53 97 29 ea 12 45 df 56 53 57 28 fa 01 4d 6d a0 e8 47 2a ea 2a 45 5d a7 a8 6b 34 fd 94 a5 e6 52 f4 2b 8e ba 41 51 37 29 aa 8c a6 3f aa a8 79 14 fd d9 8e ba 45 d1 16 8e 9a 4f 51 b7 29 ea 1e 45 dd a1 a9 fb 14 f5 13 45 15 51 76 b4 9a 7a 40 d9 b1 5a ea 21 45 fd 46 51 8f 68 3b 47 86 7a 4a 51 4f 28 bb 1a 76 d4 33 ca ce c8 51 8b 28 3b 37 86 4a a0 ec bc 28 6a 3a 45 cd a6 ec ea 52 d4 02 8a 5a 4b 51 c5 94 5d 3d 33 35 88 a2 96 52 d4 0a 8a 5a 43 d9 b5 f3 a6 32 28 2a 9d b2 2b ec 6b d7 50 de e8 e8 40 75 46 49 b8 8e 15 bf a2 fe a2 ab d2 81 74 6b ba 0f 9d 4d ff 44 2f a0 57 d1 9b e8 63 f4 25 fa 77 fa 1d fd b7 5d b8 dd 58 bb 39 2a 17 d5 79 35 ab ae a3 0e 56 47 aa a3 d5 09 ea 42 f5 2a f5 0e f5 71 f5 05 a6 21 d3 82 e9 cd 24 30 d3 98 55 Data Ascii: 5QE:OS)EVSW(MmG*E]k4R+AQ7)?yEOQ)EEQvz@Z!EFQh;GzJQO(v3Q(;7J(j:ERZKQ]=35RZC2(+kP@uFItkMD/Wc%w]X9y5VGBq!$0U
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 60 21 4c 32 09 24 1a bd 66 4b 3b 6e ed 5e 41 aa c6 2a 39 9d 35 47 67 d5 4d 07 1f 69 5b c1 76 5e 7f 0d 7d c1 c5 c2 6a 38 c1 40 0d e2 42 6a 70 45 e4 04 a3 7f 9c 41 16 0b 5d d1 d3 68 2e 23 76 00 3b 47 68 8e 5e 4e 75 b0 3b 02 2e fa db d2 78 0c 4a de 07 3c 21 5e c4 2f a4 09 31 4c 34 81 c8 5e 9a b3 65 d7 15 e3 d9 ad f1 71 5e 24 74 fa 7c 62 36 cf 18 c6 60 88 31 63 29 33 f3 2e 74 f9 09 30 9c 79 41 6e 59 97 d8 18 93 c4 9f c4 bc 2e a2 55 87 61 b2 0f 36 64 d5 27 18 93 c7 5b a3 06 f2 e8 ca d5 28 46 94 11 b6 d7 5f a1 7a 31 0f 79 b0 5e 20 d5 d9 15 64 3d f3 82 d5 81 1b b6 8b be 8e 31 3c 83 3f 35 78 ab ae 3b 75 e5 61 05 f1 41 e6 e8 07 c9 89 ce 5a a3 02 49 01 56 64 c1 ed be 0a 72 c1 47 89 a9 96 f3 ca 48 40 47 04 dc 42 bc 5b 32 93 8e 6a 19 f9 6b b9 23 96 57 bf 05 2f 65 be Data Ascii: `!L2$fK;n^A*95GgMi[v^}j8@BjpEA]h.#v;Gh^Nu;.xJ<!^/1L4^eq^$t\|b6`1c)3.t0yAnY.Ua6d'[(F_z1y^ d=1<?5x;uaAZIVdrGH@GB[2jk#W/e
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 49 17 72 f8 fe 3c 8d 51 2f 9c 43 0c 89 1a 1d cc 17 f5 15 97 5a 02 55 10 32 50 24 f5 58 98 2c 9f 11 74 64 61 aa 7c 96 e0 c5 e2 38 ed 63 74 f0 af be e2 ba bf 0b 54 96 c7 4e 3e a2 6e 5d 5f 71 39 52 f4 13 75 73 71 ed ac 93 e7 61 5d 13 5e b7 50 a4 f7 4a b7 55 57 2d 51 51 a2 ae 8f 38 85 47 5d 51 43 3f d4 85 d7 ef 8f e4 f5 43 c3 38 fd 7e e2 ee 2d ea 76 89 97 e4 8d 08 5c 3d 23 36 62 f0 0e c2 15 4e 7f b8 ef d6 d3 c9 bc bc bb 40 6f 97 57 49 1b 98 51 8f 47 cc c3 28 11 b0 04 43 ed 2c 14 89 89 bc fe 70 82 68 d2 f5 e4 11 c9 84 1c 44 d5 76 98 d1 40 24 bb 57 1d 13 ff c0 15 fa 11 e7 5a 63 e9 20 8c e0 fb f0 83 45 47 39 98 1d 03 46 fd fd 69 bc fe 8d 37 af bf 6f e5 20 55 d0 bf e9 ce eb fc 0a 79 0c a2 e9 f9 22 f4 b5 c9 87 11 d7 20 70 9d cb 88 a6 75 d7 f4 3e 38 e4 2b 89 b1 94 Data Ascii: Ir<Q/CZU2P$X,tda\|8ctTN>n]_q9Rusqa]^PJUW-QQ8G]QC?C8~-v\=#6bN@oWIQG(C,phDv@$WZc EG9Fi7o Uy" pu>8+
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: a5 0e 34 e9 8f 44 78 f5 6d 6c e8 57 94 75 38 c7 74 64 08 b3 ab 60 f5 a8 34 43 c2 e0 61 bd 72 52 67 2e e9 87 2e ae db d8 63 e5 8f e1 a7 47 2f 8f d1 27 4f bd fc 53 aa 77 4a 75 72 1e 4f fa ca 1e 28 6a ae be d0 08 94 94 34 c2 92 be f8 d7 10 ff fa 9a 4e 39 41 53 d4 78 b5 20 14 ff 70 94 49 53 fc 33 e2 5f 28 fe 19 50 51 35 35 41 1f a7 5b 3b 8e 5d 3d b2 25 ab ff 3c d3 9f ec fb b1 c1 27 3c 8c a4 5a e3 26 a4 3a a9 fe a0 31 54 fb f0 f0 e4 bb 9f cd 6e ec 80 09 29 59 bd 8d 6d 13 8e dd 42 6f cf 1e a6 ef 02 9f 03 17 0e 5d dc 4d 9f dc 77 ff dc ab f3 bf ec 53 9d 94 32 05 e2 f8 c1 03 1c c1 f1 e3 07 f9 e9 fe 91 38 12 47 0f 77 e2 68 da e7 f4 e7 83 47 1f 3e 3c 0c 72 73 0b 0e f2 f0 68 fc e8 4f d3 7d c2 08 e7 ee 1d 65 8f 84 30 97 d9 ae bf 33 c5 0b 96 6d 28 36 1c 4f 59 db c5 84 Data Ascii: 4DxmlWu8td`4CarRg..cG/'OSwJurO(j4N9ASx pIS3_(PQ55A[;]=%<'<Z&:1Tn)YmBo]MwS28GwhG><rshO}e03m(6OY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	49978	151.101.130.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:49 UTC	548	OUT	GET /webcaptcha/ngrlCaptcha.min.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:49 UTC	789	IN	HTTP/1.1 200 OK Connection: close Content-Length: 23093 Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Etag: "659ee48a-5a35" Last-Modified: Wed, 10 Jan 2024 18:40:10 GMT Paypal-Debug-Id: 2cec6e6f59d2f Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000002cec6e6f59d2f-ffacb1043f6015df-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:49 GMT X-Served-By: cache-dfw-kdfw8210166-DFW, cache-pdk-kpdk1780031-PDK X-Cache: HIT, HIT X-Cache-Hits: 137, 1 X-Timer: S1714134229.342205,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 61 2e 65 78 70 6f 72 74 73 2c 61 2c 61 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 61 2e 6c 3d 21 30 2c 61 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};return e[r].call(a.exports,a,a.exports,n),a.l=!0,a.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=fun
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 5b 5d 3b 65 3b 65 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 65 2e 63 6c 61 73 73 4e 61 6d 65 2e 6d 61 74 63 68 28 74 29 26 26 6e 2e 70 75 73 68 28 65 29 3b 72 65 74 75 72 6e 20 6e 7d 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 7b 76 61 72 20 72 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 65 29 72 2e 70 75 73 68 28 6e 28 61 29 29 3b 72 65 74 75 72 6e 20 72 7d 72 65 74 75 72 6e 20 6e 28 65 29 7d 2c 65 2e 65 78 70 6f 72 74 73 2e 61 64 64 43 6c 61 73 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 3d 31 29 7b Data Ascii: n(e){for(var n=[];e;e=e.nextSibling)1===e.nodeType&&e.className.match(t)&&n.push(e);return n}if(Array.isArray(e)){var r=[];for(var a in e)r.push(n(a));return r}return n(e)},e.exports.addClass=function(e,t){if(Array.isArray(e))for(var n=0;n<e.length;n+=1){
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 50 54 43 48 41 5f 45 56 45 4e 54 22 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 72 65 74 75 72 6e 28 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 29 28 Data Ascii: PTCHA_EVENT"}},function(e,t){function n(e){return(n="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 61 6d 65 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 2e 76 61 6c 75 65 29 29 7d 72 65 74 75 72 6e 20 61 7d 2c 65 2e 65 78 70 6f 72 74 73 2e 67 65 74 58 4d 4c 48 54 54 50 52 65 73 70 6f 6e 73 65 54 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 72 79 7b 76 61 72 20 6e 3d 22 75 74 66 2d 38 22 2c 72 3d 22 74 65 78 74 2f 68 74 6d 6c 22 2c 61 3d 65 2e 67 65 74 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 28 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 29 2c 69 3d 6e 65 77 20 46 69 6c 65 52 65 61 64 65 72 3b 69 66 28 61 29 7b 72 3d 61 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 2e 74 72 69 6d 28 29 3b 76 61 72 20 6f 3d 2f 63 68 61 72 73 65 74 5c 73 2a 3d 5c 73 2a 5c 22 3f 28 5b 5e 5c 73 5c 22 5d 2a 29 5c 22 3f 5c 73 2a 24 2f 69 Data Ascii: ame+"="+encodeURIComponent(t.value))}return a},e.exports.getXMLHTTPResponseText=function(e,t){try{var n="utf-8",r="text/html",a=e.getResponseHeader("Content-Type"),i=new FileReader;if(a){r=a.split(";")[0].trim();var o=/charset\s=\s\"?([^\s\"])\"?\s$/i
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 29 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 74 68 69 73 2e 5f 65 76 65 6e 74 73 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 7c 7c 7b 7d 2c 74 68 69 73 2e 5f 6d 61 78 4c 69 73 74 65 6e 65 72 73 3d 74 68 69 73 2e 5f 6d 61 78 4c 69 73 74 65 6e 65 72 73 7c 7c 76 6f 69 64 20 30 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 3d 6e 28 65 29 26 26 6e 75 6c 6c 21 3d 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 65 7d 65 2e 65 78 70 6f 72 74 73 3d 72 2c 72 2e 45 76 65 6e 74 Data Ascii: type?"symbol":typeof e})(e)}function r(){this._events=this._events\|\|{},this._maxListeners=this._maxListeners\|\|void 0}function a(e){return"function"==typeof e}function i(e){return"object"===n(e)&&null!==e}function o(e){return void 0===e}e.exports=r,r.Event
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 73 74 65 6e 65 72 22 2c 65 2c 61 28 74 2e 6c 69 73 74 65 6e 65 72 29 3f 74 2e 6c 69 73 74 65 6e 65 72 3a 74 29 2c 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 3f 69 28 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 29 3f 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 2e 70 75 73 68 28 74 29 3a 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 3d 5b 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 2c 74 5d 3a 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 3d 74 2c 69 28 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 29 26 26 21 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 2e 77 61 72 6e 65 64 26 26 28 6e 3d 6f 28 74 68 69 73 2e 5f 6d 61 78 4c 69 73 74 65 6e 65 72 73 29 3f 72 2e 64 65 66 61 75 6c 74 4d 61 78 4c 69 73 74 65 6e 65 72 73 3a 74 68 69 73 2e 5f 6d 61 78 4c 69 73 Data Ascii: stener",e,a(t.listener)?t.listener:t),this._events[e]?i(this._events[e])?this._events[e].push(t):this._events[e]=[this._events[e],t]:this._events[e]=t,i(this._events[e])&&!this._events[e].warned&&(n=o(this._maxListeners)?r.defaultMaxListeners:this._maxLis
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 72 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 69 66 28 21 74 68 69 73 2e 5f 65 76 65 6e 74 73 29 72 65 74 75 72 6e 20 74 68 69 73 3b 69 66 28 21 74 68 69 73 2e 5f 65 76 65 6e 74 73 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 29 72 65 74 75 72 6e 20 30 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 5f 65 76 65 6e 74 73 3d 7b 7d 3a 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 26 26 64 65 6c 65 74 65 20 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 2c 74 68 69 73 3b 69 66 28 30 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 74 20 69 6e 20 74 68 69 73 2e 5f 65 76 65 6e 74 73 29 22 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 22 21 3d 3d 74 26 26 74 68 69 73 2e 72 65 6d 6f 76 65 41 6c Data Ascii: rs=function(e){var t,n;if(!this._events)return this;if(!this._events.removeListener)return 0===arguments.length?this._events={}:this._events[e]&&delete this._events[e],this;if(0===arguments.length){for(t in this._events)"removeListener"!==t&&this.removeAl
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 5c 5c 5d 3f 22 69 6e 76 61 6c 69 64 43 6f 64 65 5b 5c 5c 5d 3f 22 2f 29 7d 63 61 74 63 68 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 65 72 72 6f 72 20 69 6e 20 63 68 65 63 6b 69 6e 67 20 66 61 69 6c 65 64 22 29 7d 72 65 74 75 72 6e 20 74 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 38 29 2c 61 3d 6e 28 32 29 2c 69 3d 6e 28 31 29 2c 6f 3d 6e 28 30 29 3b 65 2e 65 78 70 6f 72 74 73 3d 7b 63 68 61 6c 6c 65 6e 67 65 48 61 6e 64 6c 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 61 64 73 52 65 73 70 6f 6e 73 65 2c 73 3d 65 2e 65 72 72 6f 72 52 65 73 70 6f 6e 73 65 2c 6c 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 6e 67 72 6c 2d 61 6e 6f 6d 61 6c 79 64 65 Data Ascii: \\]?"invalidCode[\\]?"/)}catch(e){console.log("error in checking failed")}return t}}},function(e,t,n){var r=n(8),a=n(2),i=n(1),o=n(0);e.exports={challengeHandler:function(e,t){var n=e.adsResponse,s=e.errorResponse,l=document.querySelector(".ngrl-anomalyde
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 29 29 2c 61 3d 5b 5d 3b 30 21 3d 3d 72 2e 6c 65 6e 67 74 68 26 26 72 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 70 75 73 68 28 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 29 29 2c 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 6c 75 72 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 2e 74 61 72 67 65 74 2e 69 64 29 3b 6f 2e 68 61 73 43 6c 61 73 73 28 6f 2e 67 65 74 50 61 72 65 6e 74 73 28 74 2c 22 74 65 78 74 49 6e 70 75 74 22 29 2c 22 66 69 65 6c 64 69 6e 76 61 6c 69 64 22 29 26 26 6f 2e 61 64 64 43 6c 61 73 73 28 6f 2e 67 65 74 50 61 72 65 6e 74 73 28 74 2c 22 74 65 78 74 49 6e 70 75 74 22 29 2c 22 68 61 73 Data Ascii: )),a=[];0!==r.length&&r.forEach(function(e){a.push(e.getAttribute("name")),e.addEventListener("blur",function(e){var t=document.getElementById(e.target.id);o.hasClass(o.getParents(t,"textInput"),"fieldinvalid")&&o.addClass(o.getParents(t,"textInput"),"has
2024-04-26 12:23:49 UTC	1379	IN	Data Raw: 29 7d 2c 61 6e 69 6d 61 74 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 22 29 3b 65 2e 73 6c 69 64 65 44 6f 77 6e 28 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 73 6c 69 64 65 55 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 65 6d 69 74 28 22 73 6c 69 64 55 70 22 29 7d 29 7d 2c 35 65 33 29 7d 2c 76 65 72 69 66 79 46 6f 72 6d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 74 61 72 67 65 74 2c 72 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 76 61 6c 69 64 61 74 65 2c 20 2e 76 61 6c 69 64 Data Ascii: )},animateNotification:function(){var e=document.getElementById("notifications");e.slideDown(),setTimeout(function(){e.slideUp(function(){t.emit("slidUp")})},5e3)},verifyForm:function(e){var n=e.target,r=[].slice.call(n.querySelectorAll(".validate, .valid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	49984	35.190.80.1	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:49 UTC	470	OUT	POST /report/v4?s=XOdSnuPZXitBGwMmhaE6unQk1TT9gnQzJ2ZICGP9zq9p%2F7lEpcONmANtTPPimt6gYj1%2B7whHv2xq4uxMpgFIFRgpNzMVRxpvdgsTlbpoY0rPGJRIz6b3qk5vC2C4Av1u HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 397 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:49 UTC	397	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 34 32 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 33 31 30 36 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 31 38 2e 32 34 39 2e 33 37 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 76 65 6e 6d 6f 2e 63 6f 6d Data Ascii: [{"age":42,"body":{"elapsed_time":3106,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.18.249.37","status_code":404,"type":"http.error"},"type":"network-error","url":"https://help.venmo.com
2024-04-26 12:23:49 UTC	168	IN	HTTP/1.1 200 OK content-length: 0 date: Fri, 26 Apr 2024 12:23:49 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	49985	151.101.129.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:51 UTC	840	OUT	GET /smartchat/open/messaging/venmo/chat-meta HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; nsid=s%3An7iR5EQmXKz-oKtVXIy1EEIPxyKSFcCK.1TZKfiuN5QvG6VUXG7uj%2F6PzQRey35iwuU69rZa1p10; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; l7_az=dcg16.slc; tsrce=smartchatnodeweb; x-pp-s=eyJ0IjoiMTcxNDEzNDIyODE5MCIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742228%26vteXpYrS%3D1714136028%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew
2024-04-26 12:23:51 UTC	1336	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1339 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com https://.paypal.cn; script-src 'nonce-afR6FLo12/DfUKbJdz4QYm4a8T9KRKoP2FwgAQFV+hLaJetC' 'self' https://.paypal.com https://.paypalobjects.com https://.paypal.cn 'unsafe-inline' ; style-src 'self' https://.paypal.com https://.paypalobjects.com https://.paypal.cn 'unsafe-inline' ; img-src 'self' https: data:; object-src 'none'; connect-src 'self' https://.paypal.com https://.paypalobjects.com https://.paypal.cn 'unsafe-inline' https://.kampyle.com https://.qualtrics.com; font-src 'self' https://.paypal.com https://.paypalobjects.com https://.paypal.cn data:; base-uri 'self' https://.paypal.com; form-action 'self' https://.paypal.com; frame-ancestors 'self' https://help.venmo.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp; frame-src 'self' https://.paypal.com https://.paypalobjects.com https://.paypal.cn https://*.qualtrics.com; Content-Type: application/json; charset=utf-8
2024-04-26 12:23:51 UTC	1234	IN	Data Raw: 45 74 61 67 3a 20 57 2f 22 35 33 62 2d 62 69 5a 79 46 51 51 47 55 77 59 32 2f 57 6b 2f 46 66 5a 32 34 65 58 6b 32 51 4d 22 0d 0a 4f 72 69 67 69 6e 2d 54 72 69 61 6c 3a 20 41 6c 49 6f 67 56 33 4b 46 74 6e 62 66 56 43 79 6c 39 5a 32 4e 70 72 45 37 46 44 38 50 59 43 74 2b 54 51 69 59 64 45 33 70 70 65 4a 6a 4a 30 78 4a 4b 63 74 68 59 77 4f 78 58 70 52 43 4e 6f 70 78 56 57 64 4f 49 45 4e 4d 63 4e 53 76 51 43 47 41 6d 6a 30 66 77 30 41 41 41 42 32 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 42 68 65 58 42 68 62 43 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6c 4e 6c 62 6d 52 47 64 57 78 73 56 58 4e 6c 63 6b 46 6e 5a 57 35 30 51 57 5a 30 5a 58 4a 53 5a 57 52 31 59 33 52 70 62 32 34 69 4c 43 Data Ascii: Etag: W/"53b-biZyFQQGUwY2/Wk/FfZ24eXk2QM"Origin-Trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLC
2024-04-26 12:23:51 UTC	1055	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 74 73 3d 76 72 65 58 70 59 72 53 25 33 44 31 38 30 38 37 34 32 32 33 31 25 32 36 76 74 65 58 70 59 72 53 25 33 44 31 37 31 34 31 33 36 30 33 31 25 32 36 76 72 25 33 44 31 61 35 62 64 36 30 36 31 38 66 30 61 64 31 30 33 34 39 36 32 30 63 32 66 63 66 63 66 30 38 39 25 32 36 76 74 25 33 44 31 61 35 62 64 36 30 36 31 38 66 30 61 64 31 30 33 34 39 36 32 30 63 32 66 63 66 63 66 30 38 38 25 32 36 76 74 79 70 25 33 44 6e 65 77 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 4d 6f 6e 2c 20 32 36 20 41 70 72 20 32 30 32 37 20 31 32 3a 32 33 3a 35 31 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 Data Ascii: Set-Cookie: ts=vreXpYrS%3D1808742231%26vteXpYrS%3D1714136031%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 26 Apr 2027 12:23:51 GMT; HttpOnly; Secure; SameSite=NoneS
2024-04-26 12:23:51 UTC	1339	IN	Data Raw: 7b 22 64 65 76 69 63 65 54 79 70 65 22 3a 22 44 45 53 4b 54 4f 50 22 2c 22 62 72 6f 77 73 65 72 22 3a 22 43 68 72 6f 6d 65 22 2c 22 69 73 4d 6f 62 69 6c 65 22 3a 66 61 6c 73 65 2c 22 69 73 53 74 72 65 61 6d 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 73 68 6f 77 43 68 61 74 50 72 6f 6d 70 74 22 3a 74 72 75 65 2c 22 73 79 73 22 3a 7b 22 6c 69 6e 6b 73 22 3a 7b 22 6a 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 77 65 62 2f 72 65 73 2f 38 63 62 2f 32 30 32 62 34 32 66 39 61 31 39 61 33 35 37 39 30 30 64 64 35 35 38 31 39 35 36 39 35 2f 6a 73 22 2c 22 63 73 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 Data Ascii: {"deviceType":"DESKTOP","browser":"Chrome","isMobile":false,"isStreamingEnabled":false,"showChatPrompt":true,"sys":{"links":{"jsBaseUrl":"https://www.paypalobjects.com/web/res/8cb/202b42f9a19a357900dd558195695/js","cssBaseUrl":"https://www.paypalobjects.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	49986	151.101.1.35	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:52 UTC	1592	OUT	GET /ts?v=1.8.16&t=1714134228851&g=-120&tenant_name=venmo&bchn=venmohelp&comp=zendeskguide&ccpg=us&page_template=new_request_page&pgrp=venmo%3Ahelp%3Anew_request_page&rsta=English%20(US)&lgin=out&event_name=t_paypal_cpl&t1=571&t1c=571&t1d=0&t1s=288&t2=383&t3=2&tt=956&protocol=http%2F1.1&cdn=fastly&tmpl=%2F%2Ft.paypal.&view=%7B%22t10%22%3A571%2C%22t11%22%3A956%2C%22nt%22%3A%22res%22%7D&e=pf HTTP/1.1 Host: t.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://help.venmo.com/hc/en-us/requests/new?ticket_form_id=624807 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; KHcl0EuY7AKSMgfvHl7J5E7hPtK=H5vOX4Xx9E6rPaNsW1umPOEju90KfJTschjWY_e1f92eqJS1o6EoZAYAvBErjHwsTvfIlecHLC-YGp_e; l7_az=dcg16.slc; sc_f=CEKPNHQG08AWc-eXVA4YPw93eSBWwxF4jXwznQNxJ_4VWbeV7FgS4yQ2I1Wt5sfyajVP4H77tpr0Ipov674wteSk7U1-EXiXl3h4f0; tsrce=smartchatnodeweb; x-pp-s=eyJ0IjoiMTcxNDEzNDIyODE5MCIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742229%26vteXpYrS%3D1714136029%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew
2024-04-26 12:23:52 UTC	1232	IN	HTTP/1.1 200 OK Connection: close CORRELATION-ID: 386569becdc1e Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Fri, 26 Apr 2024 12:23:52 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: 386569becdc1e Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1808742232%26vteXpYrS%3D1714136032%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew;Expires=Mon, 26 Apr 2027 12:23:52 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088;Expires=Mon, 26 Apr 2027 12:23:52 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-0000000000000000000386569becdc1e-371567fb2e317c25-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Fri, 26 Apr 2024 12:23:52 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-iad-kcgs7200161-IAD, cache-gnv1820028-GNV X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1714134232.491704,VS0,VE86 vary: Accept-Encoding Server-Timing: content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-04-26 12:23:52 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-04-26 12:23:52 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-04-26 12:23:52 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	49989	151.101.130.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:52 UTC	536	OUT	GET /pa/js/pa_venmo.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:52 UTC	898	IN	HTTP/1.1 200 OK Connection: close Content-Length: 38486 Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Etag: "662adc9c-9656" Last-Modified: Thu, 25 Apr 2024 22:43:40 GMT Paypal-Debug-Id: dcf74ca0e4eae Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000dcf74ca0e4eae-0d4a4f61a91a3c27-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:52 GMT X-Served-By: cache-dfw-kdfw8210033-DFW, cache-pdk-kpdk1780070-PDK X-Cache: HIT, HIT X-Cache-Hits: 1, 0 X-Timer: S1714134233.655326,VS0,VE2 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET ACCESS-CONTROL-ALLOW-HEADERS: x-csrf-token Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:52 UTC	1379	IN	Data Raw: 2f 2a 40 20 32 30 32 34 20 50 61 79 50 61 6c 20 28 76 31 2e 38 2e 31 36 29 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 52 3d 22 76 65 6e 6d 6f 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 72 65 74 75 72 6e 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 74 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 6e 64 28 70 61 72 73 65 46 6c 6f 61 74 28 74 29 29 7c 7c 30 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 29 7b 69 66 28 21 74 7c 7c 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 4f 62 6a 65 63 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 41 72 72 61 79 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 65 2c 6e 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 Data Ascii: /@ 2024 PayPal (v1.8.16) /!function(){"use strict";var R="venmo";function o(){return(new Date).getTime()}function m(t){return Math.round(parseFloat(t))\|\|0}function a(t){if(!t\|\|t.constructor!==Object&&t.constructor!==Array)return t;var e,n=t.constructor
2024-04-26 12:23:52 UTC	1379	IN	Data Raw: 74 2e 63 6f 6f 6b 69 65 3d 74 2b 22 3d 22 2b 65 2b 69 2b 6e 2b 22 3b 20 70 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 53 65 63 75 72 65 22 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 2c 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 66 6f 72 28 76 61 72 20 72 3d 65 5b 6e 5d 3b 22 20 22 3d 3d 3d 72 2e 63 68 61 72 41 74 28 30 29 3b 29 72 3d 72 2e 73 75 62 73 74 72 69 6e 67 28 31 2c 72 2e 6c 65 6e 67 74 68 29 3b 69 66 28 30 3d 3d 3d 72 2e 69 6e 64 65 78 4f 66 28 74 2b 22 3d 22 29 29 72 65 74 75 72 6e 20 72 2e 73 75 62 73 74 72 69 6e 67 28 28 74 2b 22 3d 22 29 2e 6c 65 6e 67 74 68 2c 72 2e 6c 65 6e 67 74 68 29 7d 72 Data Ascii: t.cookie=t+"="+e+i+n+"; path=/; SameSite=None; Secure"}function s(t){for(var e=document.cookie.split(";"),n=0;n<e.length;n++){for(var r=e[n];" "===r.charAt(0);)r=r.substring(1,r.length);if(0===r.indexOf(t+"="))return r.substring((t+"=").length,r.length)}r
2024-04-26 12:23:52 UTC	1379	IN	Data Raw: 2c 6f 3d 61 2e 63 72 65 61 74 65 53 74 79 6c 65 53 68 65 65 74 28 29 3b 66 6f 72 28 69 3d 61 2e 61 6c 6c 2c 65 3d 5b 5d 2c 6e 3d 28 74 3d 74 2e 72 65 70 6c 61 63 65 28 2f 5c 5b 66 6f 72 5c 62 2f 67 69 2c 22 5b 68 74 6d 6c 46 6f 72 22 29 2e 73 70 6c 69 74 28 22 2c 22 29 29 2e 6c 65 6e 67 74 68 3b 6e 2d 2d 3b 29 7b 66 6f 72 28 6f 2e 61 64 64 52 75 6c 65 28 74 5b 6e 5d 2c 22 6b 3a 76 22 29 2c 72 3d 69 2e 6c 65 6e 67 74 68 3b 72 2d 2d 3b 29 69 5b 72 5d 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 2e 6b 26 26 65 2e 70 75 73 68 28 69 5b 72 5d 29 3b 6f 2e 72 65 6d 6f 76 65 52 75 6c 65 28 30 29 7d 72 65 74 75 72 6e 20 65 7d 29 3b 76 61 72 20 4a 3d 7b 73 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 2c 6c 3a 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 7d 3b 66 75 6e Data Ascii: ,o=a.createStyleSheet();for(i=a.all,e=[],n=(t=t.replace(/\[for\b/gi,"[htmlFor").split(",")).length;n--;){for(o.addRule(t[n],"k:v"),r=i.length;r--;)i[r].currentStyle.k&&e.push(i[r]);o.removeRule(0)}return e});var J={s:"sessionStorage",l:"localStorage"};fun
2024-04-26 12:23:52 UTC	1379	IN	Data Raw: 29 26 26 2f 57 65 62 4b 69 74 2f 69 2e 74 65 73 74 28 74 29 26 26 2f 43 72 69 4f 53 2f 69 2e 74 65 73 74 28 74 29 3b 69 66 28 65 7c 7c 74 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 31 7d 28 29 29 26 26 28 65 2e 72 65 66 65 72 72 65 72 50 6f 6c 69 63 79 3d 22 6e 6f 2d 72 65 66 65 72 72 65 72 2d 77 68 65 6e 2d 64 6f 77 6e 67 72 61 64 65 22 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 2c 65 2c 6e 29 7b 74 26 26 28 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 2c 6e 2c 21 31 29 3a 74 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 74 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 65 2c 6e 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 74 2c 65 2c 6e 29 7b 65 26 26 28 65 2e 72 65 6d 6f 76 65 45 Data Ascii: )&&/WebKit/i.test(t)&&/CriOS/i.test(t);if(e\|\|t)return;return 1}())&&(e.referrerPolicy="no-referrer-when-downgrade")}function p(t,e,n){t&&(t.addEventListener?t.addEventListener(e,n,!1):t.attachEvent&&t.attachEvent("on"+e,n))}function l(t,e,n){e&&(e.removeE
2024-04-26 12:23:52 UTC	1379	IN	Data Raw: 63 68 28 6f 29 7b 7d 72 65 74 75 72 6e 20 74 7d 7d 28 29 29 26 26 63 28 65 2c 7b 22 33 70 5f 76 69 64 22 3a 69 2e 76 69 64 2c 22 33 70 5f 66 70 74 69 22 3a 69 2e 66 70 74 69 7d 29 2c 5a 28 6e 3d 72 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 72 7c 7c 21 31 3d 3d 3d 72 28 29 29 3f 6e 3a 70 74 28 74 2c 65 29 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 74 29 7b 76 61 72 20 74 3d 64 74 28 74 29 2c 65 3d 6d 74 28 74 2c 74 2e 64 61 74 61 29 3b 72 65 74 75 72 6e 7b 64 61 74 61 3a 74 2e 64 61 74 61 2c 75 72 6c 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 74 2c 65 29 7b 76 61 72 20 6e 2c 72 3d 64 74 28 74 29 2c 69 3d 72 2e 64 61 74 61 2c 74 3d 28 69 5b 72 74 5d 3d 64 6f 63 75 6d 65 6e 74 2e 74 69 74 6c 65 2c 69 5b 69 74 5d 3d 64 6f 63 Data Ascii: ch(o){}return t}}())&&c(e,{"3p_vid":i.vid,"3p_fpti":i.fpti}),Z(n=r&&("function"!=typeof r\|\|!1===r())?n:pt(t,e)),n}function gt(t){var t=dt(t),e=mt(t,t.data);return{data:t.data,url:e}}function vt(t,e){var n,r=dt(t),i=r.data,t=(i[rt]=document.title,i[it]=doc
2024-04-26 12:23:52 UTC	1379	IN	Data Raw: 70 65 6f 66 20 74 3f 74 2e 74 6f 53 74 72 69 6e 67 28 29 3a 74 3b 61 3d 65 2c 6f 3d 72 3b 76 61 72 20 69 2c 61 2c 6f 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 53 74 72 69 6e 67 28 69 29 2c 65 3d 74 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2e 22 29 3b 66 6f 72 28 62 74 28 69 2c 69 2c 61 2c 6f 29 3b 2d 31 21 3d 3d 65 3b 29 65 3d 28 74 3d 74 2e 73 75 62 73 74 72 28 30 2c 65 29 29 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2e 22 29 2c 62 74 28 69 2c 74 2c 61 2c 6f 29 3b 62 74 28 69 2c 77 74 2c 61 2c 6f 29 7d 3b 72 65 74 75 72 6e 21 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 53 74 72 69 6e 67 28 74 29 2c 6e 3d 5f 74 28 65 29 7c 7c 5f 74 28 77 74 29 2c 72 3d 65 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2e 22 29 3b 21 Data Ascii: peof t?t.toString():t;a=e,o=r;var i,a,o,e=function(){var t=String(i),e=t.lastIndexOf(".");for(bt(i,i,a,o);-1!==e;)e=(t=t.substr(0,e)).lastIndexOf("."),bt(i,t,a,o);bt(i,wt,a,o)};return!!function(t){for(var e=String(t),n=_t(e)\|\|_t(wt),r=e.lastIndexOf(".");!
2024-04-26 12:23:52 UTC	1379	IN	Data Raw: 61 6d 65 3a 2f 28 28 75 73 65 72 6e 61 6d 65 3d 29 7c 28 6c 6f 67 69 6e 3d 29 7c 28 75 73 65 72 69 64 29 29 5b 5e 26 2f 3f 5d 2b 2f 67 69 2c 72 65 64 61 63 74 65 64 50 61 73 73 77 6f 72 64 3a 2f 28 28 70 61 73 73 77 6f 72 64 3d 29 7c 28 70 61 73 73 77 64 3d 29 7c 28 70 61 73 73 3d 29 29 5b 5e 26 2f 3f 5d 2b 2f 67 69 2c 72 65 64 61 63 74 65 64 43 72 65 64 65 6e 74 69 61 6c 73 3a 2f 28 6c 6f 67 69 6e 28 20 63 72 65 64 28 65 6e 74 69 61 6c 29 3f 73 7c 20 69 6e 66 6f 28 72 6d 61 74 69 6f 6e 29 3f 29 3f 7c 63 72 65 64 28 65 6e 74 69 61 6c 29 3f 73 29 20 3f 3a 5c 73 2a 5c 53 2b 5c 73 2b 5c 2f 3f 5c 73 2a 5c 53 2b 2f 67 69 2c 72 65 64 61 63 74 65 64 56 69 73 61 43 72 65 64 69 74 43 61 72 64 3a 2f 5c 62 34 5b 30 2d 39 5d 7b 31 32 7d 28 3f 3a 5b 30 2d 39 5d 7b 33 Data Ascii: ame:/((username=)\|(login=)\|(userid))[^&/?]+/gi,redactedPassword:/((password=)\|(passwd=)\|(pass=))[^&/?]+/gi,redactedCredentials:/(login( cred(ential)?s\| info(rmation)?)?\|cred(ential)?s) ?:\s\S+\s+\/?\s\S+/gi,redactedVisaCreditCard:/\b4[0-9]{12}(?:[0-9]{3
2024-04-26 12:23:52 UTC	1379	IN	Data Raw: 7b 76 61 72 20 69 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3a 7b 7d 3b 74 25 32 3f 52 74 28 4f 62 6a 65 63 74 28 69 29 2c 21 30 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 3b 65 3d 72 2c 6e 3d 69 5b 74 3d 74 5d 2c 28 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 6e 75 6c 6c 3d 3d 3d 74 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 6e 3d 74 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 6e 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 72 65 74 75 72 6e 28 22 73 74 72 69 6e 67 22 3d 3d 3d 65 3f 53 74 72 69 6e 67 3a 4e 75 6d 62 65 72 29 Data Ascii: {var i=null!=arguments[t]?arguments[t]:{};t%2?Rt(Object(i),!0).forEach(function(t){var e,n;e=r,n=i[t=t],(t=function(t){t=function(t,e){if("object"!=typeof t\|\|null===t)return t;var n=t[Symbol.toPrimitive];if(n===undefined)return("string"===e?String:Number)
2024-04-26 12:23:52 UTC	1379	IN	Data Raw: 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 3f 46 74 28 74 2c 65 29 3a 76 6f 69 64 20 30 7d 28 74 29 29 7c 7c 65 26 26 74 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 63 26 26 28 74 3d 63 29 2c 61 3d 30 2c 7b 73 3a 6f 3d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 7d 2c 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 3e 3d 74 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 30 7d 3a 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 74 5b 61 2b 2b 5d 7d 7d 2c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 72 6f 77 20 74 7d 2c 66 3a 6f 7d 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 Data Ascii: nt(?:8\|16\|32)(?:Clamped)?Array$/.test(n)?Ft(t,e):void 0}(t))\|\|e&&t&&"number"==typeof t.length)return c&&(t=c),a=0,{s:o=function o(){},n:function(){return a>=t.length?{done:!0}:{done:!1,value:t[a++]}},e:function(t){throw t},f:o};throw new TypeError("Invali
2024-04-26 12:23:52 UTC	1379	IN	Data Raw: 50 28 74 2c 22 61 6c 74 22 29 7c 7c 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 63 68 69 6c 64 4e 6f 64 65 73 2c 6e 3d 6e 75 6c 6c 2c 72 3d 30 3b 72 3c 65 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 69 66 28 33 3d 3d 3d 28 6e 3d 65 5b 72 5d 29 2e 6e 6f 64 65 54 79 70 65 26 26 6e 2e 6e 6f 64 65 56 61 6c 75 65 26 26 6e 2e 6e 6f 64 65 56 61 6c 75 65 2e 6d 61 74 63 68 28 2f 5c 53 2f 29 29 72 65 74 75 72 6e 20 6e 2e 6e 6f 64 65 56 61 6c 75 65 2e 74 72 69 6d 28 29 3b 69 66 28 31 3d 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 26 26 6e 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 69 28 6e 29 7d 7d 28 74 29 29 7c 7c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 30 21 3d 3d 6e 2e 69 6e 64 65 78 4f Data Ascii: P(t,"alt")\|\|function i(t){for(var e=t.childNodes,n=null,r=0;r<e.length;r++){if(3===(n=e[r]).nodeType&&n.nodeValue&&n.nodeValue.match(/\S/))return n.nodeValue.trim();if(1===n.nodeType&&n.childNodes.length)return i(n)}}(t))\|\|"string"==typeof n&&0!==n.indexO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	49990	151.101.129.35	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:52 UTC	1368	OUT	GET /ts?v=1.8.16&t=1714134227841&g=-120&tenant_name=venmo&bchn=venmohelp&comp=zendeskguide&ccpg=us&page_template=new_request_page&pgrp=venmo%3Ahelp%3Anew_request_page&rsta=English%20(US)&lgin=out&e=im&c_prefs=T%3D0%2CP%3D1%2CF%3D1%2Ctype%3Dinitial&ef_policy=ccpa&imsrc=setup&view=%7B%22t10%22%3A11%2C%22t11%22%3A11554%2C%22tcp%22%3A2700%2C%22et%22%3A%223g%22%2C%22nt%22%3A%22navigate%22%2C%22bt%22%3A2847%7D&pt=Venmo%20Contact%20Us&ru=https%3A%2F%2Fhelp.venmo.com%2Fhc%2Fen-us%2Frequests%2Fnew&cd=24&sw=1280&sh=1024&dw=1280&dh=1024&bw=1280&bh=907&ce=1&t1=11&t1c=0&t1d=0&t1s=0&t2=2561&t3=47&t4d=0&t4=0&t4e=1510&tt=10168&rdc=0&protocol=http%2F1.1&res=%7B%7D&rtt=3586 HTTP/1.1 Host: t.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; l7_az=dcg16.slc; tsrce=smartchatnodeweb; x-pp-s=eyJ0IjoiMTcxNDEzNDIzMTYwMCIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742231%26vteXpYrS%3D1714136031%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew
2024-04-26 12:23:52 UTC	1237	IN	HTTP/1.1 200 OK Connection: close CORRELATION-ID: 9510e18f273ef Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Fri, 26 Apr 2024 12:23:52 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: 9510e18f273ef Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1808742232%26vteXpYrS%3D1714136032%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew;Expires=Mon, 26 Apr 2027 12:23:52 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088;Expires=Mon, 26 Apr 2027 12:23:52 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-00000000000000000009510e18f273ef-475a6bbb67de1d7a-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Fri, 26 Apr 2024 12:23:52 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-dfw-kdal2120076-DFW, cache-pdk-kfty2130074-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1714134233.785408,VS0,VE65 vary: Accept-Encoding Server-Timing: content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-04-26 12:23:52 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-04-26 12:23:52 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-04-26 12:23:52 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-26 12:23:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	49987	151.101.130.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:52 UTC	595	OUT	GET /messaging/venmo-assets/Scto-Grotesk-A-Italic.woff HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.paypal.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:52 UTC	751	IN	HTTP/1.1 404 Not Found Connection: close Content-Length: 1108 Content-Type: text/html Paypal-Debug-Id: 1477dc7988500 Traceparent: 00-00000000000000000001477dc7988500-c86a720e699b966c-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:52 GMT X-Served-By: cache-dfw-kdfw8210173-DFW, cache-pdk-kfty2130029-PDK X-Cache: HIT, MISS X-Cache-Hits: 1, 0 X-Timer: S1714134233.658950,VS0,VE19 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, must-revalidate, proxy-revalidate, private, max-age=0, s-maxage=0 ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:52 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 65 72 72 6f 72 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8"> <title>404</title> <link rel="stylesheet" href="error.css" type="text/css"> <meta name="viewport" content="width=device-width, initial-scale=1"> <style> body { backgr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	49988	151.101.130.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:52 UTC	567	OUT	GET /messaging/venmo/v10/messaging-multitenant-sdk.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:52 UTC	859	IN	HTTP/1.1 200 OK Connection: close Content-Length: 484309 Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Etag: "65c15338-763d5" Last-Modified: Mon, 05 Feb 2024 21:29:28 GMT Paypal-Debug-Id: bfa4deecf4893 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000bfa4deecf4893-70ba1a40eb850b21-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:52 GMT X-Served-By: cache-dfw-kdfw8210163-DFW, cache-pdk-kfty2130038-PDK X-Cache: HIT, MISS X-Cache-Hits: 1, 0 X-Timer: S1714134233.664331,VS0,VE198 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * ACCESS-CONTROL-ALLOW-METHODS: GET Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:52 UTC	1379	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=fun
2024-04-26 12:23:52 UTC	1379	IN	Data Raw: 72 20 6e 20 69 6e 20 74 29 65 5b 6e 5d 3d 74 5b 6e 5d 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 69 66 28 22 5f 5f 73 6f 75 72 63 65 22 21 3d 3d 6e 26 26 21 28 6e 20 69 6e 20 74 29 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 29 69 66 28 22 5f 5f 73 6f 75 72 63 65 22 21 3d 3d 72 26 26 65 5b 72 5d 21 3d 3d 74 5b 72 5d 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 65 29 7b 74 68 69 73 2e 70 72 6f 70 73 3d 65 7d 6e 2e 64 28 74 2c 22 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 2e 65 7d 29 29 2c 6e 2e 64 28 74 2c 22 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 2e Data Ascii: r n in t)e[n]=t[n];return e}function a(e,t){for(var n in e)if("__source"!==n&&!(n in t))return!0;for(var r in t)if("__source"!==r&&e[r]!==t[r])return!0;return!1}function _(e){this.props=e}n.d(t,"d",(function(){return o.e})),n.d(t,"c",(function(){return o.
2024-04-26 12:23:52 UTC	1379	IN	Data Raw: 5f 5f 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 29 7b 74 68 69 73 2e 75 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6f 3d 6e 75 6c 6c 7d 6f 2e 69 2e 75 6e 6d 6f 75 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 5f 5f 63 3b 74 26 26 74 2e 5f 5f 52 26 26 74 2e 5f 5f 52 28 29 2c 74 26 26 21 30 3d 3d 3d 65 2e 5f 5f 68 26 26 28 65 2e 74 79 70 65 3d 6e 75 6c 6c 29 2c 66 26 26 66 28 65 29 7d 2c 28 76 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 6f 2e 61 29 2e 5f 5f 63 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 2e 5f 5f 63 2c 72 3d 74 68 69 73 3b 6e 75 6c 6c 3d 3d 72 2e 74 26 26 28 72 2e 74 3d 5b 5d 29 2c 72 2e 74 2e 70 75 73 68 28 6e 29 3b 76 61 72 20 6f 3d 78 28 72 2e 5f 5f 76 29 2c 69 3d 21 31 2c 61 3d 66 75 6e 63 74 69 Data Ascii: __e(e)}function m(){this.u=null,this.o=null}o.i.unmount=function(e){var t=e.__c;t&&t.__R&&t.__R(),t&&!0===e.__h&&(e.type=null),f&&f(e)},(v.prototype=new o.a).__c=function(e,t){var n=t.__c,r=this;null==r.t&&(r.t=[]),r.t.push(n);var o=x(r.__v),i=!1,a=functi
2024-04-26 12:23:52 UTC	1379	IN	Data Raw: 2e 64 65 6c 65 74 65 28 74 29 2c 65 2e 70 72 6f 70 73 2e 72 65 76 65 61 6c 4f 72 64 65 72 26 26 28 22 74 22 21 3d 3d 65 2e 70 72 6f 70 73 2e 72 65 76 65 61 6c 4f 72 64 65 72 5b 30 5d 7c 7c 21 65 2e 6f 2e 73 69 7a 65 29 29 66 6f 72 28 6e 3d 65 2e 75 3b 6e 3b 29 7b 66 6f 72 28 3b 6e 2e 6c 65 6e 67 74 68 3e 33 3b 29 6e 2e 70 6f 70 28 29 28 29 3b 69 66 28 6e 5b 31 5d 3c 6e 5b 30 5d 29 62 72 65 61 6b 3b 65 2e 75 3d 6e 3d 6e 5b 32 5d 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 67 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 43 68 69 6c 64 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 63 6f 6e 74 65 78 74 7d 2c 65 2e 63 68 69 6c 64 72 65 6e 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 6e Data Ascii: .delete(t),e.props.revealOrder&&("t"!==e.props.revealOrder[0]\|\|!e.o.size))for(n=e.u;n;){for(;n.length>3;)n.pop()();if(n[1]<n[0])break;e.u=n=n[2]}};function g(e){return this.getChildContext=function(){return e.context},e.children}function b(e){var t=this,n
2024-04-26 12:23:52 UTC	1379	IN	Data Raw: 6e 74 7c 61 6c 69 67 6e 6d 65 6e 74 7c 61 72 61 62 69 63 7c 62 61 73 65 6c 69 6e 65 7c 63 61 70 7c 63 6c 69 70 28 3f 21 50 61 74 68 55 29 7c 63 6f 6c 6f 72 7c 64 6f 6d 69 6e 61 6e 74 7c 66 69 6c 6c 7c 66 6c 6f 6f 64 7c 66 6f 6e 74 7c 67 6c 79 70 68 28 3f 21 52 29 7c 68 6f 72 69 7a 7c 6d 61 72 6b 65 72 28 3f 21 48 7c 57 7c 55 29 7c 6f 76 65 72 6c 69 6e 65 7c 70 61 69 6e 74 7c 73 74 6f 70 7c 73 74 72 69 6b 65 74 68 72 6f 75 67 68 7c 73 74 72 6f 6b 65 7c 74 65 78 74 28 3f 21 4c 29 7c 75 6e 64 65 72 6c 69 6e 65 7c 75 6e 69 63 6f 64 65 7c 75 6e 69 74 73 7c 76 7c 76 65 63 74 6f 72 7c 76 65 72 74 7c 77 6f 72 64 7c 77 72 69 74 69 6e 67 7c 78 28 3f 21 43 29 29 5b 41 2d 5a 5d 2f 2c 6b 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 Data Ascii: nt\|alignment\|arabic\|baseline\|cap\|clip(?!PathU)\|color\|dominant\|fill\|flood\|font\|glyph(?!R)\|horiz\|marker(?!H\|W\|U)\|overline\|paint\|stop\|strikethrough\|stroke\|text(?!L)\|underline\|unicode\|units\|v\|vector\|vert\|word\|writing\|x(?!C))[A-Z]/,k="undefined"!=typeof docume
2024-04-26 12:23:52 UTC	1379	IN	Data Raw: 74 22 3a 2f 5e 6f 6e 66 6f 63 75 73 24 2f 69 2e 74 65 73 74 28 61 29 3f 61 3d 22 6f 6e 66 6f 63 75 73 69 6e 22 3a 2f 5e 6f 6e 62 6c 75 72 24 2f 69 2e 74 65 73 74 28 61 29 3f 61 3d 22 6f 6e 66 6f 63 75 73 6f 75 74 22 3a 2f 5e 6f 6e 28 41 6e 69 7c 54 72 61 7c 54 6f 75 7c 42 65 66 6f 72 65 49 6e 70 7c 43 6f 6d 70 6f 29 2f 2e 74 65 73 74 28 61 29 3f 61 3d 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 69 26 26 77 2e 74 65 73 74 28 61 29 3f 61 3d 61 2e 72 65 70 6c 61 63 65 28 2f 5b 41 2d 5a 30 2d 39 5d 2f 2c 22 2d 24 26 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 6e 75 6c 6c 3d 3d 3d 5f 26 26 28 5f 3d 76 6f 69 64 20 30 29 2c 72 5b 61 5d 3d 5f 29 7d 22 73 65 6c 65 63 74 22 3d 3d 74 26 26 72 2e 6d 75 6c 74 69 70 6c 65 26 26 41 72 72 61 79 2e 69 73 41 72 Data Ascii: t":/^onfocus$/i.test(a)?a="onfocusin":/^onblur$/i.test(a)?a="onfocusout":/^on(Ani\|Tra\|Tou\|BeforeInp\|Compo)/.test(a)?a=a.toLowerCase():i&&w.test(a)?a=a.replace(/[A-Z0-9]/,"-$&").toLowerCase():null===_&&(_=void 0),r[a]=_)}"select"==t&&r.multiple&&Array.isAr
2024-04-26 12:23:52 UTC	1379	IN	Data Raw: 41 74 4e 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 65 2e 5f 5f 6b 26 26 28 4f 62 6a 65 63 74 28 6f 2e 6a 29 28 6e 75 6c 6c 2c 65 29 2c 21 30 29 7d 2c 63 72 65 61 74 65 50 6f 72 74 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 6f 2e 65 29 28 62 2c 7b 5f 5f 76 3a 65 2c 69 3a 74 7d 29 7d 2c 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 3a 6f 2e 65 2c 63 72 65 61 74 65 43 6f 6e 74 65 78 74 3a 6f 2e 64 2c 63 72 65 61 74 65 46 61 63 74 6f 72 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 2e 65 2e 62 69 6e 64 28 6e 75 6c 6c 2c 65 29 7d 2c 63 6c 6f 6e 65 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 49 28 65 29 3f 6f 2e 63 2e 61 70 70 6c 79 Data Ascii: AtNode:function(e){return!!e.__k&&(Object(o.j)(null,e),!0)},createPortal:function(e,t){return Object(o.e)(b,{__v:e,i:t})},createElement:o.e,createContext:o.d,createFactory:function(e){return o.e.bind(null,e)},cloneElement:function(e){return I(e)?o.c.apply
2024-04-26 12:23:52 UTC	1379	IN	Data Raw: 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 55 7d 29 29 2c 6e 2e 64 28 74 2c 22 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 46 7d 29 29 2c 6e 2e 64 28 74 2c 22 6b 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 7d 29 29 2c 6e 2e 64 28 74 2c 22 69 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 29 29 3b 76 61 72 20 72 2c 6f 2c 69 2c 61 2c 5f 2c 70 2c 63 2c 73 3d 7b 7d 2c 6c 3d 5b 5d 2c 75 3d 2f 61 63 69 74 7c 65 78 28 3f 3a 73 7c 67 7c 6e 7c 70 7c 24 29 7c 72 70 68 7c 67 72 69 64 7c 6f 77 73 7c 6d 6e 63 7c 6e 74 77 7c 69 6e 65 5b 63 68 5d 7c 7a 6f 6f 7c 5e 6f 72 64 7c 69 74 65 72 61 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e Data Ascii: c",(function(){return U})),n.d(t,"d",(function(){return F})),n.d(t,"k",(function(){return T})),n.d(t,"i",(function(){return o}));var r,o,i,a,_,p,c,s={},l=[],u=/acit\|ex(?:s\|g\|n\|p\|$)\|rph\|grid\|ows\|mnc\|ntw\|ine[ch]\|zoo\|^ord\|itera/i;function d(e,t){for(var n in
2024-04-26 12:23:52 UTC	1379	IN	Data Raw: 64 65 72 69 6e 67 29 26 26 28 28 70 3d 6f 2e 64 65 62 6f 75 6e 63 65 52 65 6e 64 65 72 69 6e 67 29 7c 7c 5f 29 28 6b 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 66 6f 72 28 76 61 72 20 65 3b 6b 2e 5f 5f 72 3d 61 2e 6c 65 6e 67 74 68 3b 29 65 3d 61 2e 73 6f 72 74 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 5f 76 2e 5f 5f 62 2d 74 2e 5f 5f 76 2e 5f 5f 62 7d 29 29 2c 61 3d 5b 5d 2c 65 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 2c 72 2c 6f 2c 69 2c 61 3b 65 2e 5f 5f 64 26 26 28 69 3d 28 6f 3d 28 74 3d 65 29 2e 5f 5f 76 29 2e 5f 5f 65 2c 28 61 3d 74 2e 5f 5f 50 29 26 26 28 6e 3d 5b 5d 2c 28 72 3d 64 28 7b 7d 2c 6f 29 29 2e 5f 5f 76 3d 6f 2e 5f 5f 76 2b 31 2c 50 28 61 2c 6f 2c 72 2c 74 2e 5f Data Ascii: dering)&&((p=o.debounceRendering)\|\|_)(k)}function k(){for(var e;k.__r=a.length;)e=a.sort((function(e,t){return e.__v.__b-t.__v.__b})),a=[],e.some((function(e){var t,n,r,o,i,a;e.__d&&(i=(o=(t=e).__v).__e,(a=t.__P)&&(n=[],(r=d({},o)).__v=o.__v+1,P(a,o,r,t._
2024-04-26 12:23:52 UTC	1379	IN	Data Raw: 2e 5f 5f 6b 2c 69 3d 30 3b 6f 26 26 69 3c 6f 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 28 72 3d 6f 5b 69 5d 29 26 26 28 72 2e 5f 5f 3d 65 2c 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 2e 74 79 70 65 3f 4f 28 72 2c 74 2c 6e 29 3a 41 28 6e 2c 72 2c 72 2c 6f 2c 72 2e 5f 5f 65 2c 74 29 29 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 7c 7c 5b 5d 2c 6e 75 6c 6c 3d 3d 65 7c 7c 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 65 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 54 28 65 2c 74 29 7d 29 29 3a 74 2e 70 75 73 68 28 65 29 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 41 28 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 Data Ascii: .__k,i=0;o&&i<o.length;i++)(r=o[i])&&(r.__=e,t="function"==typeof r.type?O(r,t,n):A(n,r,r,o,r.__e,t));return t}function T(e,t){return t=t\|\|[],null==e\|\|"boolean"==typeof e\|\|(Array.isArray(e)?e.some((function(e){T(e,t)})):t.push(e)),t}function A(e,t,n,r,o,i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	49991	151.101.129.35	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:52 UTC	1096	OUT	GET /ts?v=1.8.16&t=1714134228851&g=-120&tenant_name=venmo&bchn=venmohelp&comp=zendeskguide&ccpg=us&page_template=new_request_page&pgrp=venmo%3Ahelp%3Anew_request_page&rsta=English%20(US)&lgin=out&event_name=t_paypal_cpl&t1=571&t1c=571&t1d=0&t1s=288&t2=383&t3=2&tt=956&protocol=http%2F1.1&cdn=fastly&tmpl=%2F%2Ft.paypal.&view=%7B%22t10%22%3A571%2C%22t11%22%3A956%2C%22nt%22%3A%22res%22%7D&e=pf HTTP/1.1 Host: t.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; l7_az=dcg16.slc; tsrce=smartchatnodeweb; x-pp-s=eyJ0IjoiMTcxNDEzNDIzMTYwMCIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742232%26vteXpYrS%3D1714136032%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew
2024-04-26 12:23:53 UTC	1237	IN	HTTP/1.1 200 OK Connection: close CORRELATION-ID: 4d117f5b69132 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Fri, 26 Apr 2024 12:23:53 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: 4d117f5b69132 Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1808742233%26vteXpYrS%3D1714136033%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew;Expires=Mon, 26 Apr 2027 12:23:53 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088;Expires=Mon, 26 Apr 2027 12:23:53 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-00000000000000000004d117f5b69132-649451acd624b0ce-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Fri, 26 Apr 2024 12:23:53 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-dfw-kdal2120063-DFW, cache-pdk-kfty2130073-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1714134233.146513,VS0,VE58 vary: Accept-Encoding Server-Timing: content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-04-26 12:23:53 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-04-26 12:23:53 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-04-26 12:23:53 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	49994	104.18.72.113	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:53 UTC	640	OUT	GET /theme_assets/802785/fa035520f344a1ebff45491abf0a9a9f9965e585.png HTTP/1.1 Host: theme.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://help.venmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:54 UTC	1221	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 12:23:54 GMT Content-Type: image/png Content-Length: 1487 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: HEAD, GET Access-Control-Max-Age: 86400 x-amz-replication-status: COMPLETED Last-Modified: Tue, 23 Jan 2024 15:43:09 GMT ETag: "2d6abb9f59114b0d6410786930b6c5ee" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 x-amz-version-id: fOz0FUa75RxpikyWa2HLEIGCIm23o1Ki Vary: Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 a849aab265796f3b1c80dee87a056b44.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: _m9pChxNfwVxq05stvwgF_XBflgX69SotpejcJVSOMSS_jlyzRChKQ== Age: 86282 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9Ywc4FS6YHm7SHqb59iUhg0QFdFEkgbpR%2BEFo1Ry0w%2FBlYZ5pp4pShX6XYZsQ7f%2B7pr0tJDKF%2BI%2FP0wlMIk2Q0LljyT65Aphec0ixYRlBzvo3vHn9GrZRoImUe8oew3lmSVFXA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Server: cloudflare CF-RAY: 87a68bf28e563376-MIA
2024-04-26 12:23:54 UTC	148	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 06 00 00 00 e2 98 77 38 00 00 05 96 49 44 41 54 78 01 ed 9d bd 72 1b 55 14 c7 ff bb 66 02 55 22 0a a0 62 22 06 a8 52 58 09 15 34 8e 9f 00 e7 01 18 e7 0d ec 3c 81 e3 96 61 46 d2 1b d8 25 9d 79 02 47 0d a9 48 ec 19 e8 98 41 7c 54 50 a0 50 41 a1 88 fb df eb 9d 95 95 95 b5 5a 9f 73 ef 6e 72 7e 33 b6 56 9f b6 ce ff 7c dd bb 57 ba 09 aa d2 9f 75 f0 12 3b 98 61 cb 5d eb 21 Data Ascii: PNGIHDR``w8IDATxrUfU"b"RX4<aF%yGHA\|TPPAZsnr~3V\|Wu;a]!
2024-04-26 12:23:54 UTC	1339	IN	Data Raw: 41 d7 1d 77 60 c0 d9 62 e2 6c 31 76 97 67 ee da 08 29 4e f0 28 99 54 7b ea 2a fa b3 ae 33 fc 9e 3b 7a 68 06 5f 83 04 47 4e 88 43 27 c4 f8 ea 87 2d c3 7b fc 81 33 fa 3e 8c fa 24 18 5c 08 31 29 bf bb 0c ef f5 a7 ce f8 5d 18 d7 27 71 e9 29 c5 76 59 34 a4 af 3c b8 3f eb 99 f1 85 a1 2d 69 d3 af 9d 6d 17 b8 1c 01 e6 f9 ba 94 44 42 21 80 cf f9 cf cd f8 ca 78 11 ee e6 35 a1 48 41 be e0 76 61 e8 e2 d3 d1 41 7e d5 47 00 53 cf 14 bf c0 08 c7 06 3e 62 2a f2 11 30 a7 88 11 88 a9 6f ef 93 2c f7 4f f1 37 8c d0 4c 18 05 69 36 bd 60 c4 20 9b da 61 0a da 82 11 07 37 af 96 ba 5f 3d 18 b1 e8 31 02 ba 30 62 d1 a5 00 36 c3 19 8f 4e 0a 23 2a 26 40 64 de 82 71 89 de fb ee e7 3d 60 d3 5d de ff d0 df b6 fd ad 6b da ff 83 0a 8d 10 a0 f3 b6 ff e9 de 72 3f 37 fd f1 6d 77 dc b9 e1 ce Data Ascii: Aw`bl1vg)N(T{3;zh_GNC'-{3>$\1)]'q)vY4<?-imDB!x5HAvaA~GS>b0o,O7Li6` a7_=10b6N#*&@dq=`]kr?7mw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	49993	151.101.129.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:53 UTC	1395	OUT	GET /smartchat/open/messaging/venmo/check-eligibility HTTP/1.1 Host: www.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.paypal.com/smartchat/open/messaging/venmo/window?entryPoint=new_request_page&token=undefined&page=/hc/en-us/requests/new&msgToken=null Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; nsid=s%3An7iR5EQmXKz-oKtVXIy1EEIPxyKSFcCK.1TZKfiuN5QvG6VUXG7uj%2F6PzQRey35iwuU69rZa1p10; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; KHcl0EuY7AKSMgfvHl7J5E7hPtK=H5vOX4Xx9E6rPaNsW1umPOEju90KfJTschjWY_e1f92eqJS1o6EoZAYAvBErjHwsTvfIlecHLC-YGp_e; l7_az=dcg16.slc; sc_f=CEKPNHQG08AWc-eXVA4YPw93eSBWwxF4jXwznQNxJ_4VWbeV7FgS4yQ2I1Wt5sfyajVP4H77tpr0Ipov674wteSk7U1-EXiXl3h4f0; tsrce=smartchatnodeweb; x-pp-s=eyJ0IjoiMTcxNDEzNDIzMTYwMCIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742233%26vteXpYrS%3D1714136033%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew
2024-04-26 12:23:54 UTC	1336	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1270 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com https://.paypal.cn; script-src 'nonce-9RKDW+fmPxDz1s5RKKskm/D8/tpWDxYY3nksvnORSjUeHc6v' 'self' https://.paypal.com https://.paypalobjects.com https://.paypal.cn 'unsafe-inline' ; style-src 'self' https://.paypal.com https://.paypalobjects.com https://.paypal.cn 'unsafe-inline' ; img-src 'self' https: data:; object-src 'none'; connect-src 'self' https://.paypal.com https://.paypalobjects.com https://.paypal.cn 'unsafe-inline' https://.kampyle.com https://.qualtrics.com; font-src 'self' https://.paypal.com https://.paypalobjects.com https://.paypal.cn data:; base-uri 'self' https://.paypal.com; form-action 'self' https://.paypal.com; frame-ancestors 'self' https://help.venmo.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp; frame-src 'self' https://.paypal.com https://.paypalobjects.com https://.paypal.cn https://*.qualtrics.com; Content-Type: application/json; charset=utf-8
2024-04-26 12:23:54 UTC	1234	IN	Data Raw: 45 74 61 67 3a 20 57 2f 22 34 66 36 2d 4f 6e 6f 46 49 6e 45 6d 41 61 42 53 74 43 4a 6f 76 53 56 65 55 4c 61 42 59 75 4d 22 0d 0a 4f 72 69 67 69 6e 2d 54 72 69 61 6c 3a 20 41 6c 49 6f 67 56 33 4b 46 74 6e 62 66 56 43 79 6c 39 5a 32 4e 70 72 45 37 46 44 38 50 59 43 74 2b 54 51 69 59 64 45 33 70 70 65 4a 6a 4a 30 78 4a 4b 63 74 68 59 77 4f 78 58 70 52 43 4e 6f 70 78 56 57 64 4f 49 45 4e 4d 63 4e 53 76 51 43 47 41 6d 6a 30 66 77 30 41 41 41 42 32 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 42 68 65 58 42 68 62 43 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6c 4e 6c 62 6d 52 47 64 57 78 73 56 58 4e 6c 63 6b 46 6e 5a 57 35 30 51 57 5a 30 5a 58 4a 53 5a 57 52 31 59 33 52 70 62 32 34 69 4c 43 Data Ascii: Etag: W/"4f6-OnoFInEmAaBStCJovSVeULaBYuM"Origin-Trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLC
2024-04-26 12:23:54 UTC	1045	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 74 73 3d 76 72 65 58 70 59 72 53 25 33 44 31 38 30 38 37 34 32 32 33 34 25 32 36 76 74 65 58 70 59 72 53 25 33 44 31 37 31 34 31 33 36 30 33 34 25 32 36 76 72 25 33 44 31 61 35 62 64 36 30 36 31 38 66 30 61 64 31 30 33 34 39 36 32 30 63 32 66 63 66 63 66 30 38 39 25 32 36 76 74 25 33 44 31 61 35 62 64 36 30 36 31 38 66 30 61 64 31 30 33 34 39 36 32 30 63 32 66 63 66 63 66 30 38 38 25 32 36 76 74 79 70 25 33 44 6e 65 77 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 4d 6f 6e 2c 20 32 36 20 41 70 72 20 32 30 32 37 20 31 32 3a 32 33 3a 35 34 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 Data Ascii: Set-Cookie: ts=vreXpYrS%3D1808742234%26vteXpYrS%3D1714136034%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 26 Apr 2027 12:23:54 GMT; HttpOnly; Secure; SameSite=NoneS
2024-04-26 12:23:54 UTC	1270	IN	Data Raw: 7b 22 65 6c 69 67 69 62 69 6c 69 74 79 22 3a 74 72 75 65 2c 22 73 79 73 22 3a 7b 22 6c 69 6e 6b 73 22 3a 7b 22 6a 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 77 65 62 2f 72 65 73 2f 38 63 62 2f 32 30 32 62 34 32 66 39 61 31 39 61 33 35 37 39 30 30 64 64 35 35 38 31 39 35 36 39 35 2f 6a 73 22 2c 22 63 73 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 77 65 62 2f 72 65 73 2f 38 63 62 2f 32 30 32 62 34 32 66 39 61 31 39 61 33 35 37 39 30 30 64 64 35 35 38 31 39 35 36 39 35 2f 63 73 73 22 2c 22 74 65 6d 70 6c 61 74 65 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 Data Ascii: {"eligibility":true,"sys":{"links":{"jsBaseUrl":"https://www.paypalobjects.com/web/res/8cb/202b42f9a19a357900dd558195695/js","cssBaseUrl":"https://www.paypalobjects.com/web/res/8cb/202b42f9a19a357900dd558195695/css","templateBaseUrl":"https://www.paypalob

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	49995	104.18.72.113	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:56 UTC	406	OUT	GET /theme_assets/802785/fa035520f344a1ebff45491abf0a9a9f9965e585.png HTTP/1.1 Host: theme.zdassets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:56 UTC	1221	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 12:23:56 GMT Content-Type: image/png Content-Length: 1487 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: HEAD, GET Access-Control-Max-Age: 86400 x-amz-replication-status: COMPLETED Last-Modified: Tue, 23 Jan 2024 15:43:09 GMT ETag: "2d6abb9f59114b0d6410786930b6c5ee" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 x-amz-version-id: fOz0FUa75RxpikyWa2HLEIGCIm23o1Ki Vary: Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 a849aab265796f3b1c80dee87a056b44.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: _m9pChxNfwVxq05stvwgF_XBflgX69SotpejcJVSOMSS_jlyzRChKQ== Age: 86284 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AqK6xHTQCeAU%2FXhawgoBL9LOMyEgN8iHeoDKMLCARf4uZNpye59zupA3FU%2FOs5W0Rr%2BuEyjmiCVeE8hsZCdafis8b0Jv74adj34e7LFByp%2BkX7lnbl242%2FolqwS8Y0Qd7okdGQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Server: cloudflare CF-RAY: 87a68c021b978dea-MIA
2024-04-26 12:23:56 UTC	148	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 06 00 00 00 e2 98 77 38 00 00 05 96 49 44 41 54 78 01 ed 9d bd 72 1b 55 14 c7 ff bb 66 02 55 22 0a a0 62 22 06 a8 52 58 09 15 34 8e 9f 00 e7 01 18 e7 0d ec 3c 81 e3 96 61 46 d2 1b d8 25 9d 79 02 47 0d a9 48 ec 19 e8 98 41 7c 54 50 a0 50 41 a1 88 fb df eb 9d 95 95 95 b5 5a 9f 73 ef 6e 72 7e 33 b6 56 9f b6 ce ff 7c dd bb 57 ba 09 aa d2 9f 75 f0 12 3b 98 61 cb 5d eb 21 Data Ascii: PNGIHDR``w8IDATxrUfU"b"RX4<aF%yGHA\|TPPAZsnr~3V\|Wu;a]!
2024-04-26 12:23:56 UTC	1339	IN	Data Raw: 41 d7 1d 77 60 c0 d9 62 e2 6c 31 76 97 67 ee da 08 29 4e f0 28 99 54 7b ea 2a fa b3 ae 33 fc 9e 3b 7a 68 06 5f 83 04 47 4e 88 43 27 c4 f8 ea 87 2d c3 7b fc 81 33 fa 3e 8c fa 24 18 5c 08 31 29 bf bb 0c ef f5 a7 ce f8 5d 18 d7 27 71 e9 29 c5 76 59 34 a4 af 3c b8 3f eb 99 f1 85 a1 2d 69 d3 af 9d 6d 17 b8 1c 01 e6 f9 ba 94 44 42 21 80 cf f9 cf cd f8 ca 78 11 ee e6 35 a1 48 41 be e0 76 61 e8 e2 d3 d1 41 7e d5 47 00 53 cf 14 bf c0 08 c7 06 3e 62 2a f2 11 30 a7 88 11 88 a9 6f ef 93 2c f7 4f f1 37 8c d0 4c 18 05 69 36 bd 60 c4 20 9b da 61 0a da 82 11 07 37 af 96 ba 5f 3d 18 b1 e8 31 02 ba 30 62 d1 a5 00 36 c3 19 8f 4e 0a 23 2a 26 40 64 de 82 71 89 de fb ee e7 3d 60 d3 5d de ff d0 df b6 fd ad 6b da ff 83 0a 8d 10 a0 f3 b6 ff e9 de 72 3f 37 fd f1 6d 77 dc b9 e1 ce Data Ascii: Aw`bl1vg)N(T{3;zh_GNC'-{3>$\1)]'q)vY4<?-imDB!x5HAvaA~GS>b0o,O7Li6` a7_=10b6N#*&@dq=`]kr?7mw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	49996	151.101.1.35	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:57 UTC	1677	OUT	GET /ts?v=1.8.16&t=1714134236213&g=-120&tenant_name=venmo&bchn=venmohelp&comp=zendeskguide&ccpg=us&page_template=new_request_page&pgrp=venmo%3Ahelp%3Anew_request_page&rsta=English%20(US)&lgin=out&event_name=messaging-show-prompt&guid=1a5bd60618f0ad10349620c2fcfcf089&e=im&c_prefs=T%3D0%2CP%3D1%2CF%3D1%2Ctype%3Dinitial&ef_policy=ccpa&pt=Venmo%20Contact%20Us&ru=https%3A%2F%2Fhelp.venmo.com%2Fhc%2Fen-us%2Frequests%2Fnew&cd=24&sw=1280&sh=1024&dw=1280&dh=1024&bw=1280&bh=907&ce=1 HTTP/1.1 Host: t.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://help.venmo.com/hc/en-us/requests/new?ticket_form_id=624807 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; KHcl0EuY7AKSMgfvHl7J5E7hPtK=H5vOX4Xx9E6rPaNsW1umPOEju90KfJTschjWY_e1f92eqJS1o6EoZAYAvBErjHwsTvfIlecHLC-YGp_e; l7_az=dcg16.slc; sc_f=CEKPNHQG08AWc-eXVA4YPw93eSBWwxF4jXwznQNxJ_4VWbeV7FgS4yQ2I1Wt5sfyajVP4H77tpr0Ipov674wteSk7U1-EXiXl3h4f0; tsrce=smartchatnodeweb; x-pp-s=eyJ0IjoiMTcxNDEzNDIzNDExMyIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742234%26vteXpYrS%3D1714136034%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew
2024-04-26 12:23:57 UTC	1237	IN	HTTP/1.1 200 OK Connection: close CORRELATION-ID: 6b1b3ade014b8 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Fri, 26 Apr 2024 12:23:57 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: 6b1b3ade014b8 Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1808742237%26vteXpYrS%3D1714136037%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew;Expires=Mon, 26 Apr 2027 12:23:57 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088;Expires=Mon, 26 Apr 2027 12:23:57 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-00000000000000000006b1b3ade014b8-875b27f41db0e945-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Fri, 26 Apr 2024 12:23:57 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-dfw-kdfw8210097-DFW, cache-pdk-kpdk1780112-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1714134237.285877,VS0,VE66 vary: Accept-Encoding Server-Timing: content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-04-26 12:23:57 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-04-26 12:23:57 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-04-26 12:23:57 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	49997	151.101.129.21	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:57 UTC	848	OUT	GET /smartchat/open/messaging/venmo/check-eligibility HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; nsid=s%3An7iR5EQmXKz-oKtVXIy1EEIPxyKSFcCK.1TZKfiuN5QvG6VUXG7uj%2F6PzQRey35iwuU69rZa1p10; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; l7_az=dcg16.slc; tsrce=smartchatnodeweb; x-pp-s=eyJ0IjoiMTcxNDEzNDIzNDExMyIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742234%26vteXpYrS%3D1714136034%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew
2024-04-26 12:23:57 UTC	1336	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1270 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com https://.paypal.cn; script-src 'nonce-gMSh+4Ivx2PkEtShRfUmjFtv0D9/wetHIrgH0ZUNU5VSuPaY' 'self' https://.paypal.com https://.paypalobjects.com https://.paypal.cn 'unsafe-inline' ; style-src 'self' https://.paypal.com https://.paypalobjects.com https://.paypal.cn 'unsafe-inline' ; img-src 'self' https: data:; object-src 'none'; connect-src 'self' https://.paypal.com https://.paypalobjects.com https://.paypal.cn 'unsafe-inline' https://.kampyle.com https://.qualtrics.com; font-src 'self' https://.paypal.com https://.paypalobjects.com https://.paypal.cn data:; base-uri 'self' https://.paypal.com; form-action 'self' https://.paypal.com; frame-ancestors 'self' https://help.venmo.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp; frame-src 'self' https://.paypal.com https://.paypalobjects.com https://.paypal.cn https://*.qualtrics.com; Content-Type: application/json; charset=utf-8
2024-04-26 12:23:57 UTC	1234	IN	Data Raw: 45 74 61 67 3a 20 57 2f 22 34 66 36 2d 53 39 2f 2f 49 51 4d 37 7a 48 54 78 42 47 76 64 6f 41 44 55 7a 5a 65 74 32 65 55 22 0d 0a 4f 72 69 67 69 6e 2d 54 72 69 61 6c 3a 20 41 6c 49 6f 67 56 33 4b 46 74 6e 62 66 56 43 79 6c 39 5a 32 4e 70 72 45 37 46 44 38 50 59 43 74 2b 54 51 69 59 64 45 33 70 70 65 4a 6a 4a 30 78 4a 4b 63 74 68 59 77 4f 78 58 70 52 43 4e 6f 70 78 56 57 64 4f 49 45 4e 4d 63 4e 53 76 51 43 47 41 6d 6a 30 66 77 30 41 41 41 42 32 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 42 68 65 58 42 68 62 43 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6c 4e 6c 62 6d 52 47 64 57 78 73 56 58 4e 6c 63 6b 46 6e 5a 57 35 30 51 57 5a 30 5a 58 4a 53 5a 57 52 31 59 33 52 70 62 32 34 69 4c 43 Data Ascii: Etag: W/"4f6-S9//IQM7zHTxBGvdoADUzZet2eU"Origin-Trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLC
2024-04-26 12:23:57 UTC	1055	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 74 73 3d 76 72 65 58 70 59 72 53 25 33 44 31 38 30 38 37 34 32 32 33 37 25 32 36 76 74 65 58 70 59 72 53 25 33 44 31 37 31 34 31 33 36 30 33 37 25 32 36 76 72 25 33 44 31 61 35 62 64 36 30 36 31 38 66 30 61 64 31 30 33 34 39 36 32 30 63 32 66 63 66 63 66 30 38 39 25 32 36 76 74 25 33 44 31 61 35 62 64 36 30 36 31 38 66 30 61 64 31 30 33 34 39 36 32 30 63 32 66 63 66 63 66 30 38 38 25 32 36 76 74 79 70 25 33 44 6e 65 77 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 4d 6f 6e 2c 20 32 36 20 41 70 72 20 32 30 32 37 20 31 32 3a 32 33 3a 35 37 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 Data Ascii: Set-Cookie: ts=vreXpYrS%3D1808742237%26vteXpYrS%3D1714136037%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 26 Apr 2027 12:23:57 GMT; HttpOnly; Secure; SameSite=NoneS
2024-04-26 12:23:57 UTC	1270	IN	Data Raw: 7b 22 65 6c 69 67 69 62 69 6c 69 74 79 22 3a 74 72 75 65 2c 22 73 79 73 22 3a 7b 22 6c 69 6e 6b 73 22 3a 7b 22 6a 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 77 65 62 2f 72 65 73 2f 38 63 62 2f 32 30 32 62 34 32 66 39 61 31 39 61 33 35 37 39 30 30 64 64 35 35 38 31 39 35 36 39 35 2f 6a 73 22 2c 22 63 73 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 77 65 62 2f 72 65 73 2f 38 63 62 2f 32 30 32 62 34 32 66 39 61 31 39 61 33 35 37 39 30 30 64 64 35 35 38 31 39 35 36 39 35 2f 63 73 73 22 2c 22 74 65 6d 70 6c 61 74 65 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 Data Ascii: {"eligibility":true,"sys":{"links":{"jsBaseUrl":"https://www.paypalobjects.com/web/res/8cb/202b42f9a19a357900dd558195695/js","cssBaseUrl":"https://www.paypalobjects.com/web/res/8cb/202b42f9a19a357900dd558195695/css","templateBaseUrl":"https://www.paypalob

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	49999	151.101.129.35	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:57 UTC	1543	OUT	GET /ts?v=1.8.16&t=1714134236199&g=-120&comp=smartchat&pgrp=main%3Ahelp%3Achat%3Avenmo%3A&page=main%3Ahelp%3Achat%3Avenmo%3Awidget%3A%3A%3A&tenant_name=venmo&tenant_id=3&event_source=web&lgin=out&event_product=chatBot&mobile_app=N&e=ac&event_name=chat_prompt_shown HTTP/1.1 Host: t.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.paypal.com/smartchat/open/messaging/venmo/window?entryPoint=new_request_page&token=undefined&page=/hc/en-us/requests/new&msgToken=null Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; KHcl0EuY7AKSMgfvHl7J5E7hPtK=H5vOX4Xx9E6rPaNsW1umPOEju90KfJTschjWY_e1f92eqJS1o6EoZAYAvBErjHwsTvfIlecHLC-YGp_e; l7_az=dcg16.slc; sc_f=CEKPNHQG08AWc-eXVA4YPw93eSBWwxF4jXwznQNxJ_4VWbeV7FgS4yQ2I1Wt5sfyajVP4H77tpr0Ipov674wteSk7U1-EXiXl3h4f0; tsrce=smartchatnodeweb; x-pp-s=eyJ0IjoiMTcxNDEzNDIzNDExMyIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742234%26vteXpYrS%3D1714136034%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew
2024-04-26 12:23:57 UTC	1237	IN	HTTP/1.1 200 OK Connection: close CORRELATION-ID: e1bef6d2d29e3 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Fri, 26 Apr 2024 12:23:57 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: e1bef6d2d29e3 Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1808742237%26vteXpYrS%3D1714136037%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew;Expires=Mon, 26 Apr 2027 12:23:57 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088;Expires=Mon, 26 Apr 2027 12:23:57 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-0000000000000000000e1bef6d2d29e3-f25a35276c36c84e-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Fri, 26 Apr 2024 12:23:57 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-dfw-kdfw8210115-DFW, cache-pdk-kpdk1780068-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1714134237.451610,VS0,VE90 vary: Accept-Encoding Server-Timing: content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-04-26 12:23:57 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-04-26 12:23:57 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-04-26 12:23:57 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-26 12:23:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	49998	151.101.130.133	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:57 UTC	595	OUT	GET /paypal-ui/icons/font_icon/0-0-29/PPUI-Icons.woff2 HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.paypal.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.paypal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 12:23:57 UTC	817	IN	HTTP/1.1 200 OK Connection: close Content-Length: 27188 Cache-Control: s-maxage=31536000, public,max-age=3600 Etag: "6099e6f0-6a34" Last-Modified: Tue, 11 May 2021 02:07:44 GMT Paypal-Debug-Id: c9209b1265090 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000c9209b1265090-d1217203163fae12-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 12:23:57 GMT X-Served-By: cache-dfw-kdfw8210150-DFW, cache-gnv1820033-GNV X-Cache: HIT, HIT X-Cache-Hits: 1969, 0 X-Timer: S1714134237.341992,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * CONTENT-TYPE: application/font-woff2 Strict-Transport-Security: max-age=31557600
2024-04-26 12:23:57 UTC	1379	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6a 34 00 0b 00 00 00 00 e1 30 00 00 69 e3 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 60 00 64 11 08 0a 83 b2 30 82 d5 69 01 36 02 24 03 85 48 0b 82 66 00 04 20 05 83 2a 07 20 1b c0 b0 33 a3 36 9a 17 a3 23 2a 66 ef 75 64 a0 56 90 56 9e d9 ff 25 b9 43 54 db 13 6e df 95 48 2a 64 ac 50 0f b5 68 eb 40 ff 16 64 98 2c 1b 4c ba f7 0b 6b e0 a1 ee 34 ab 10 6b 4f c8 61 70 ac 0b 4d 14 2f 4f c4 a6 d0 70 84 c6 3e c9 e5 fe 3c e9 e6 fb 77 97 0d 24 9b 90 30 b2 58 09 23 21 4c 15 48 36 2b 10 20 17 a6 32 03 0a 0e 96 0c ad 12 9c 38 ea 58 15 ac 16 b5 d6 1a d4 6a 6d ab 15 5a c7 6c c1 2e c1 ce 65 b5 ae aa b5 43 c5 f7 df 5f bf cf a6 4c a0 4b 76 8e 80 9f 2b 33 77 41 65 52 41 d1 bd 19 4c bf 2a f6 d7 3b ad fa 49 f6 41 b7 Data Ascii: wOF2j40i`d0i6$Hf * 36#fudVV%CTnHdPh@d,Lk4kOapM/Op><w$0X#!LH6+ 28XjmZl.eC_LKv+3wAeRAL*;IA
2024-04-26 12:23:57 UTC	1379	IN	Data Raw: d9 74 cd e0 cc 63 55 53 a2 ca 26 af ee ab 3f 4f 4c af 0f c8 bf 4e b5 de d7 bf 8f b9 de 0b 7e 1d e1 ae 4d f4 f7 0f f5 75 6d 4a de bb aa cf 1f 38 f5 e5 3d 64 97 33 c1 dd 2b ea f4 fe 94 30 a5 87 51 e1 4b dc e2 65 ac 9c f4 e3 d0 b4 1f 95 c8 52 8c 81 d0 4e 41 e6 0d f1 39 57 f7 c4 a1 18 a4 50 6c 05 dc 2e 11 51 18 32 82 c4 82 86 e4 85 91 10 18 84 d3 e0 67 bb a3 62 d8 91 ce 0e e5 34 a4 10 b2 9e 29 a6 5e 78 36 fa a9 27 65 cd d2 ba 2a 89 20 d2 62 22 3d bf ab aa 93 c0 1f fb 44 7b 01 d2 40 c0 49 2f 72 df 89 11 3d 37 a0 d6 1f 6b c0 79 27 66 90 09 4a e7 c0 ab ae ab ce 65 40 ea d9 c1 38 d9 9c 92 a6 81 7f 0d b7 b0 7e ba 3f 8a 37 32 81 e5 ae 96 b0 53 a8 22 35 ef 02 10 a8 4b 0d 0b 20 9e 6a 6c d5 44 40 16 2f 91 a0 42 02 83 1e 2a 64 08 d0 cb ea a0 53 5d 86 4a 00 55 2a 05 32 Data Ascii: tcUS&?OLN~MumJ8=d3+0QKeRNA9WPl.Q2gb4)^x6'e* b"=D{@I/r=7ky'fJe@8~?72S"5K jlD@/BdS]JU2
2024-04-26 12:23:57 UTC	1379	IN	Data Raw: 06 31 dd c3 7a c7 1f 2f 48 7b 7e c5 4e 7b 8a f7 2a 9e 1e c1 42 e8 95 e8 06 b4 9b 79 b7 9d c1 6e 30 59 44 67 69 7b 0c 4b a3 0f 8f d0 ad a7 4f 37 31 35 cb 86 29 ad 4e 89 62 35 5b 7f a0 e3 30 60 15 1d 54 f9 2b 4f b9 35 5d 33 fa 77 86 a7 3f a4 1b c8 05 3a d6 5f d1 3d db bb c5 06 21 92 0c 08 98 ac 06 10 11 77 5d 18 8c 98 df ae 30 17 9e e5 6e 68 44 53 db 4d e2 7d b2 10 f9 be d2 8e 80 70 df 03 4a 50 1a 5a 1c 89 30 4e 96 72 31 61 ab 63 a4 c4 88 25 4c da c4 c0 08 0d 77 dd 2b dd 1a 8d 9b 70 69 95 9a 40 43 82 4b 22 38 e7 63 cd 14 f2 92 8b 64 8c b8 90 5b 71 d1 9d 3b 45 5f 37 df 80 e7 31 96 27 86 dd bc 95 7a ee a7 81 7d 0c f0 2d 3d 09 39 09 e6 08 13 fa 4a 70 fc a3 a8 58 fd ba af b1 04 70 fd cd e1 67 5c 46 86 46 32 4c 40 c1 b2 e7 29 e6 8f 21 c9 25 7a 17 c7 90 fd 90 cc Data Ascii: 1z/H{~N{*Byn0YDgi{KO715)Nb5[0`T+O5]3w?:_=!w]0nhDSM}pJPZ0Nr1ac%Lw+pi@CK"8cd[q;E_71'z}-=9JpXpg\FF2L@)!%z
2024-04-26 12:23:57 UTC	1379	IN	Data Raw: 8d bf 74 8e 9f 0a 64 f7 a0 1f fd 16 a3 ce d8 84 97 fd f9 70 d0 a5 c5 cf ef e1 10 c5 23 11 37 62 98 98 6b ef b7 45 d5 29 9b 3a 50 04 13 cc 74 ee d1 09 de 1e 8b 2d c0 02 84 0d 2a 77 a4 a6 47 6b 9c 2f a7 e2 0f e7 4e d5 33 0b 4e 07 db 97 32 d7 4e ad ae d2 c1 31 05 f3 34 30 ec 88 6d 9a b7 17 76 51 b0 a1 89 56 2e 82 6d 5c f9 53 d7 33 5f 6d 56 ce 9c 87 a7 48 f9 cf 0e cd a0 87 fa 39 89 6a 74 fc 66 6e 44 0d d3 1f db 47 f8 33 a3 62 27 13 0b 78 73 aa 4f 9a 1b ac 5a d0 ac 13 ca cd 2e 9d 6d 5a 46 52 6d 38 87 88 1b cb 50 e5 c7 04 26 cc 6f be 63 5a 26 9e 5e 0c cd 9f d7 d8 1d 99 bc ed 96 63 b0 25 d0 9c 3d 7e 70 36 7e 3d 22 f1 2e c9 82 8e 30 5f ce e0 8a cd a7 7b 24 dc e9 f1 f3 88 2f 6b 97 48 21 04 c6 48 3d 6f bf ab 3c f0 78 77 92 0a 23 4f 3a bc ed dc f0 8d 75 28 f7 2c 03 Data Ascii: tdp#7bkE):Pt-*wGk/N3N2N140mvQV.m\S3_mVH9jtfnDG3b'xsOZ.mZFRm8P&ocZ&^c%=~p6~=".0_{$/kH!H=o<xw#O:u(,
2024-04-26 12:23:57 UTC	1379	IN	Data Raw: 37 44 09 9d 71 d3 7a 74 ab 0e c3 88 87 34 40 e4 4d 45 a0 9a f4 54 17 48 c1 6d 16 c2 4f 6e 0e 07 48 96 9b 7b 88 ef 53 4d 3b a5 e9 d0 7c 92 42 af ad 22 1e 4d d6 03 16 37 c8 07 6f 29 7a 3e 60 6f ba b4 8a 35 42 30 7d 36 3a 15 6b 3e 6c f2 f4 5b 5b 9d d5 08 48 96 b8 aa 8f 36 a5 98 86 48 43 23 1a cb 1f 9a 7c 27 b9 a1 a9 f5 93 e9 6d 15 31 17 14 cd d4 2b 8a 05 46 ec 56 b6 5c 39 71 2c 65 84 ae 2f cc bb 1e 71 e2 d4 94 e8 2c c4 76 2d f8 2e 8c 05 ed ed b6 de 20 9d 0d d1 59 7a 73 06 67 9a cf d2 d2 86 0d 8b 7d 8b c2 b3 c8 3f 87 01 6c 26 e5 47 31 2c c7 32 df a0 37 98 9b 81 f6 0c a5 cb 18 0d d0 39 10 62 3b 52 c5 56 91 07 cb 03 82 a7 01 11 71 40 55 3c 8a 42 3c cc 16 2a 5a 2f 1b 9d 74 50 e4 aa b9 99 89 5f 42 5e 0c 69 8c d1 4a 59 1f 8d 11 d9 73 6a 68 96 f8 aa 09 de 86 cf bb Data Ascii: 7Dqzt4@METHmOnH{SM;\|B"M7o)z>`o5B0}6:k>l[[H6HC#\|'m1+FV\9q,e/q,v-. Yzsg}?l&G1,279b;RVq@U<B<*Z/tP_B^iJYsjh
2024-04-26 12:23:57 UTC	1379	IN	Data Raw: 8c 40 64 14 60 5f 15 f1 21 6d b8 27 4b 02 d8 4b 1f f1 45 b6 84 84 75 6f 11 77 ea 59 ed b0 bd 7d a6 13 ea a9 a7 38 ef e4 13 2f 60 80 21 f6 75 3c a9 73 de 71 de d6 9d ce 3f 72 b4 3d 30 5e e2 27 03 fe 71 2e b5 1a 0e 06 ff b6 18 66 ba 4a 29 6e 5e bd e0 be c8 17 52 e6 2e bd dd 65 b1 53 65 70 ed 05 2d 96 7c c8 bc d4 2d 94 72 e5 72 b5 10 f9 7d db 5b 9a 77 3f 01 91 02 24 e8 05 42 6e fa e7 97 a1 6e c1 e5 13 fb 9e 3e de 55 d5 fe 4b 9e ca b9 89 7d 04 6a 4a 52 fd 99 8a 52 a7 34 d4 98 d8 50 51 52 2d 35 68 f3 0f b9 4d 2b 96 27 65 27 18 f8 ee 1e 44 ff 9c 45 df cd aa 26 9d e1 af 33 ed 18 81 92 87 e9 ab fc e2 40 17 a8 70 53 3f 89 9c 01 9d 9d 26 f4 1c 6f ef 2e 87 5b ae a6 16 87 e1 9a 4b 82 6d 40 e3 85 73 50 92 02 06 98 d5 80 7e 59 d7 0d 4f b5 cc b2 ed e5 08 06 84 65 7c 8e Data Ascii: @d`_!m'KKEuowY}8/`!u<sq?r=0^'q.fJ)n^R.eSep-\|-rr}[w?$Bnn>UK}jJRR4PQR-5hM+'e'DE&3@pS?&o.[Km@sP~YOe\|
2024-04-26 12:23:57 UTC	1379	IN	Data Raw: fb d8 3f af 0a 15 e5 3e 8d 4c 0b 64 e9 e1 b2 e0 59 4b 95 db 22 26 5f 0f 2b f0 57 c5 28 98 b5 a5 31 f1 74 6c 8f 3e 72 9e 78 26 ca 49 76 34 60 76 07 75 ac 17 04 19 d6 2f ae 40 47 eb 01 70 93 ef 90 e3 b4 76 86 1e cf 46 91 39 23 cf 5c 6f 98 66 ce cb 9d 01 80 32 3e 58 81 3f 37 dc 98 39 5e 38 9d bb 82 8f 0e 11 66 a3 b4 92 c9 f3 23 23 f8 cf 77 c0 33 b4 3b f6 c3 2c f7 96 da 74 3a 7c 87 80 6e c1 3a 22 73 04 6e d8 d4 26 04 7d d1 04 72 bc a9 55 be 63 fc 31 6c 56 e0 68 59 eb 65 e5 8d 34 d9 06 aa 34 9d 41 30 31 ca 2a 40 2d aa ae e9 70 aa 8a 5d 83 0b 94 77 c8 90 01 b9 8f cc 93 fa da 84 00 a8 94 00 59 8c d7 13 81 82 da 90 ac fe 4b 1e 26 9b 12 d0 8a c0 b0 52 4d 03 8c 07 f3 17 f1 0d 0f cf 41 a8 2f 60 0c 59 df 33 b9 a7 8f 19 63 33 64 f6 92 4b 93 ff 54 26 37 6c 0c 74 a0 94 Data Ascii: ?>LdYK"&_+W(1tl>rx&Iv4`vu/@GpvF9#\of2>X?79^8f##w3;,t:\|n:"sn&}rUc1lVhYe44A01*@-p]wYK&RMA/`Y3c3dKT&7lt
2024-04-26 12:23:57 UTC	1379	IN	Data Raw: 47 71 1e d5 d5 5f d1 a8 3c c8 77 91 8c c5 49 fc 00 04 eb 2f 55 67 b6 a6 3a d7 05 d3 4e 7a b1 00 91 7d a5 43 44 23 04 0e 82 d6 ed 6f 80 0c 68 0a 88 99 95 ad 82 82 83 bc 3d f8 e2 b3 61 9e 8f 2d 35 85 2c e4 43 9d 55 08 b1 2a 29 d1 78 bc 17 0e 72 01 ce 9e d1 4f ef a7 5f 56 fa 85 1b 1c 73 fe 92 19 5e 7d 9e 38 e1 7b 1e 74 59 01 a5 be 33 7f a6 2f 82 c1 91 79 be e0 3e 36 7d d1 cb d6 76 b2 e4 ea d5 a8 91 b9 6e de 0f 96 d2 05 16 1a b2 92 53 b5 69 67 bd 35 24 0c ab 49 4e 9e 37 f4 af 99 d5 31 3d 41 06 bb 8f 77 4d b8 75 fa b4 f3 09 ae 1f 79 01 92 99 5e 4a a1 db 10 8f 55 1e 2c 28 d3 7c 89 e9 46 ef 9e 5e 33 e9 56 c8 85 66 17 1f 8a 71 db e5 4c 82 2a 5d f3 07 7f 9d dc 36 72 ea 64 f4 2f 15 4d 11 70 7d b5 80 44 be c8 d1 f1 d4 12 0f 97 d8 8e e7 0a ea f4 f9 64 8f 4d 31 50 5a Data Ascii: Gq_<wI/Ug:Nz}CD#oh=a-5,CU)xrO_Vs^}8{tY3/y>6}vnSig5$IN71=AwMuy^JU,(\|F^3VfqL]6rd/Mp}DdM1PZ
2024-04-26 12:23:57 UTC	1379	IN	Data Raw: 97 aa d2 a8 50 0b f7 f8 c3 7c 87 60 98 e2 3b 37 87 4a 55 2c 1b 0c 61 f7 b2 03 4e f7 9a 69 b4 d9 6a 40 58 23 3b c4 b7 31 51 44 4d a4 77 30 98 26 90 82 cf 12 ba 9f 21 66 22 0c 45 47 c7 cc 9e 00 48 63 f2 38 6d 5c d3 d9 10 34 d5 04 65 13 85 e3 42 1b c9 2f 1b 0f 0c 91 58 35 f3 13 71 3d be 0b f0 5e 7f d0 e9 2f 93 6e 1b d2 89 d0 eb 6b 1a 57 52 29 0a 72 95 1a a8 a7 68 ab 68 a7 02 d3 af 47 1f 63 8d 87 3c cb b8 5c bf 24 fd 33 6b b4 68 55 b6 a3 c4 20 ca ab cc 9c e2 f6 f3 74 3b 97 67 ee 55 65 85 50 65 4b 2d a4 63 33 78 3e 65 ff ea cb 8a 8a 23 bb ed f6 dd 47 2a d8 f6 85 c5 97 88 48 c5 26 dd 76 2d e2 22 ed 0e 9c ce 27 45 6e ed 19 e9 4b f3 ba b3 a9 df af b1 a1 53 30 1b 1b bb 09 02 f0 2a 1a c1 e2 7a d1 cc d9 b1 eb 7b dc 3b d7 c7 ee 98 29 4a d8 1a 59 88 62 f2 c3 88 4c 7a Data Ascii: P\|`;7JU,aNij@X#;1QDMw0&!f"EGHc8m\4eB/X5q=^/nkWR)rhhGc<\$3khU t;gUePeK-c3x>e#GH&v-"'EnKS0z{;)JYbLz
2024-04-26 12:23:57 UTC	1379	IN	Data Raw: 42 08 10 b4 b1 8a 71 95 97 72 f0 a0 75 d9 b3 00 47 be 12 5d 62 54 46 9c e5 af 9f a2 a2 94 8e 07 c6 74 c3 0c cc 92 27 d9 ba 59 e2 32 a2 12 4b 75 83 08 43 55 ef ca 92 f5 d9 04 db bf 21 79 ba 6e df f1 29 b5 44 a7 8b ae 2c 2d c8 49 68 23 28 6d 0a 67 6e 96 ba 42 a7 53 ab a7 f6 be a9 9b de 90 ec 0f 66 e5 0b 0b 3b ab 25 69 33 73 14 d9 8a 39 d5 bf 5c 37 2a c0 b0 c1 6d 9a d7 28 9e 26 57 3f 7a d8 50 50 a0 56 3d d9 1e 5f 16 be 65 38 10 bc 8f 3c ef 06 d1 52 ff 8a 4a 37 e2 60 e1 89 e1 00 50 41 36 7b 56 2d 25 31 52 df 4e 21 da 15 9f 0f 37 f0 dc 0d 3c 4f 73 fd 89 e6 20 93 a7 28 be 28 6e 61 eb f3 29 b8 ba 7e 7a ab b6 f5 a7 c5 1d db 49 bf 4b 3b 30 f5 59 30 25 65 be f6 a2 c5 4a a6 8c b3 5e c5 22 48 99 35 59 4a 51 14 4e 9d 79 48 8c 02 7f 09 44 e2 b7 70 60 2a 8b 03 1b 71 7f Data Ascii: BqruG]bTFt'Y2KuCU!yn)D,-Ih#(mgnBSf;%i3s9\7m(&W?zPPV=_e8<RJ7`PA6{V-%1RN!7<Os ((na)~zIK;0Y0%eJ^"H5YJQNyHDp`q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	50000	151.101.129.35	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:57 UTC	1181	OUT	GET /ts?v=1.8.16&t=1714134236213&g=-120&tenant_name=venmo&bchn=venmohelp&comp=zendeskguide&ccpg=us&page_template=new_request_page&pgrp=venmo%3Ahelp%3Anew_request_page&rsta=English%20(US)&lgin=out&event_name=messaging-show-prompt&guid=1a5bd60618f0ad10349620c2fcfcf089&e=im&c_prefs=T%3D0%2CP%3D1%2CF%3D1%2Ctype%3Dinitial&ef_policy=ccpa&pt=Venmo%20Contact%20Us&ru=https%3A%2F%2Fhelp.venmo.com%2Fhc%2Fen-us%2Frequests%2Fnew&cd=24&sw=1280&sh=1024&dw=1280&dh=1024&bw=1280&bh=907&ce=1 HTTP/1.1 Host: t.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; l7_az=dcg16.slc; tsrce=smartchatnodeweb; x-pp-s=eyJ0IjoiMTcxNDEzNDIzNDExMyIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1808742237%26vteXpYrS%3D1714136037%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew
2024-04-26 12:23:58 UTC	1237	IN	HTTP/1.1 200 OK Connection: close CORRELATION-ID: b29509f68002a Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Fri, 26 Apr 2024 12:23:57 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: b29509f68002a Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1808742237%26vteXpYrS%3D1714136037%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew;Expires=Mon, 26 Apr 2027 12:23:57 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088;Expires=Mon, 26 Apr 2027 12:23:57 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-0000000000000000000b29509f68002a-5a91bf9dccc2bbd3-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Fri, 26 Apr 2024 12:23:57 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-dfw-kdal2120078-DFW, cache-pdk-kfty2130049-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1714134238.909342,VS0,VE66 vary: Accept-Encoding Server-Timing: content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-04-26 12:23:58 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-04-26 12:23:58 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-04-26 12:23:58 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	50001	151.101.129.35	443	2108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 12:23:57 UTC	968	OUT	GET /ts?v=1.8.16&t=1714134236199&g=-120&comp=smartchat&pgrp=main%3Ahelp%3Achat%3Avenmo%3A&page=main%3Ahelp%3Achat%3Avenmo%3Awidget%3A%3A%3A&tenant_name=venmo&tenant_id=3&event_source=web&lgin=out&event_product=chatBot&mobile_app=N&e=ac&event_name=chat_prompt_shown HTTP/1.1 Host: t.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088; l7_az=dcg16.slc; tsrce=smartchatnodeweb; ts=vreXpYrS%3D1808742237%26vteXpYrS%3D1714136037%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew; x-pp-s=eyJ0IjoiMTcxNDEzNDIzNzM5MCIsImwiOiIwIiwibSI6IjAifQ
2024-04-26 12:23:58 UTC	1237	IN	HTTP/1.1 200 OK Connection: close CORRELATION-ID: 05b512255c9fd Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Fri, 26 Apr 2024 12:23:58 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: 05b512255c9fd Pragma: no-cache Set-Cookie: ts=vreXpYrS%3D1808742238%26vteXpYrS%3D1714136038%26vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088%26vtyp%3Dnew;Expires=Mon, 26 Apr 2027 12:23:58 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None; Set-Cookie: ts_c=vr%3D1a5bd60618f0ad10349620c2fcfcf089%26vt%3D1a5bd60618f0ad10349620c2fcfcf088;Expires=Mon, 26 Apr 2027 12:23:58 GMT;domain=.paypal.com;path=/;secure;SameSite=None; Traceparent: 00-000000000000000000005b512255c9fd-193396a995258cf8-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Fri, 26 Apr 2024 12:23:58 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-dfw-kdfw8210131-DFW, cache-pdk-kfty2130021-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1714134238.106152,VS0,VE64 vary: Accept-Encoding Server-Timing: content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-04-26 12:23:58 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-04-26 12:23:58 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-04-26 12:23:58 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	14:22:30
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	14:22:35
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 --field-trial-handle=2244,i,16407618657791368267,11392074485942432583,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	14:22:38
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://us-west-2.protection.sophos.com/?d=venmo.com&u=aHR0cHM6Ly92ZW5tby5jb20vc2lnbnVwL3N0YXJ0P2VtYWlsPW5vcmVwbHkxMSU0MHdxZXJkZmQub25taWNyb3NvZnQuY29tJmludml0ZV9pZD02NjJhNzViZTNjYWMxN2E3MGE5OTA0ZmEmbnI9MSZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9zb3VyY2U9cG51&p=m&i=NjI3Mjc4OTk0MGU3YTAxM2U2ZWIxMDY3&t=RTdyMWVwN0ltVWFjZ3cvWmVHNTRWVkd1STQwUzVVNzEveWYyR0FYYXVhMD0=&h=4ce9b067fcbf486e8f27561ce3d3058e&s=AVNPUEhUT0NFTkNSWVBUSVaS8c9jSpZcrH9uvMBTWALM8OUVCaCMDIwUwmubUWsN9g"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://id.venmo.com/signin?country.x=US&locale.x=en&ctxId=AAGTMbXAr-_9hFOdMjFJeDIT2AVC4srohHO4prKJg35LG3f53du_Ei1CXj8jIlvNxkWTpu7ay42oUJl42vchI78=#/lgn	HTTP Parser: Iframe src: /auth/recaptcha/grcenterprise_v3.html
Source: https://id.venmo.com/signin?country.x=US&locale.x=en&ctxId=AAGTMbXAr-_9hFOdMjFJeDIT2AVC4srohHO4prKJg35LG3f53du_Ei1CXj8jIlvNxkWTpu7ay42oUJl42vchI78=#/lgn	HTTP Parser: Iframe src: https://c.paypal.com/v1/r/d/i?js_src=https://c.paypal.com/da/r/fb.js
Source: https://help.venmo.com/hc/en-us/requests/new?ticket_form_id=624807	HTTP Parser: Iframe src: https://www.paypal.com/smartchat/messaging-chat-loading/venmo
Source: https://help.venmo.com/hc/en-us/requests/new?ticket_form_id=624807	HTTP Parser: Iframe src: https://www.paypal.com/smartchat/open/messaging/venmo/window?entryPoint=new_request_page&token=undefined&page=/hc/en-us/requests/new&msgToken=null
Source: https://help.venmo.com/hc/en-us/requests/new?ticket_form_id=624807	HTTP Parser: Iframe src: https://www.paypal.com/smartchat/open/messaging/venmo/window?entryPoint=new_request_page&token=undefined&page=/hc/en-us/requests/new&msgToken=null

Source: https://id.venmo.com/auth/recaptcha/grcenterprise_v3.html	HTTP Parser: No favicon
Source: https://id.venmo.com/auth/recaptcha/grcenterprise_v3.html	HTTP Parser: No favicon
Source: https://id.venmo.com/auth/recaptcha/grcenterprise_v3.html	HTTP Parser: No favicon
Source: https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1&k=6LdCCOUUAAAAAHTE-Snr6hi4HJGtJk_d1_ce-gWB&co=aHR0cHM6Ly9pZC52ZW5tby5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=2kziszurh4cb	HTTP Parser: No favicon
Source: https://www.paypal.com/smartchat/open/messaging/venmo/window?entryPoint=new_request_page&token=undefined&page=/hc/en-us/requests/new&msgToken=null	HTTP Parser: No favicon
Source: https://www.paypal.com/smartchat/open/messaging/venmo/window?entryPoint=new_request_page&token=undefined&page=/hc/en-us/requests/new&msgToken=null	HTTP Parser: No favicon

Source: https://id.venmo.com/signin?country.x=US&locale.x=en&ctxId=AAGTMbXAr-_9hFOdMjFJeDIT2AVC4srohHO4prKJg35LG3f53du_Ei1CXj8jIlvNxkWTpu7ay42oUJl42vchI78=#/lgn	HTTP Parser: No <meta name="author".. found
Source: https://help.venmo.com/hc/en-us/requests/new?ticket_form_id=624807	HTTP Parser: No <meta name="author".. found
Source: https://help.venmo.com/hc/en-us/requests/new?ticket_form_id=624807	HTTP Parser: No <meta name="author".. found
Source: https://help.venmo.com/hc/en-us/requests/new?ticket_form_id=624807	HTTP Parser: No <meta name="author".. found

Source: https://id.venmo.com/signin?country.x=US&locale.x=en&ctxId=AAGTMbXAr-_9hFOdMjFJeDIT2AVC4srohHO4prKJg35LG3f53du_Ei1CXj8jIlvNxkWTpu7ay42oUJl42vchI78=#/lgn	HTTP Parser: No <meta name="copyright".. found
Source: https://help.venmo.com/hc/en-us/requests/new?ticket_form_id=624807	HTTP Parser: No <meta name="copyright".. found
Source: https://help.venmo.com/hc/en-us/requests/new?ticket_form_id=624807	HTTP Parser: No <meta name="copyright".. found
Source: https://help.venmo.com/hc/en-us/requests/new?ticket_form_id=624807	HTTP Parser: No <meta name="copyright".. found

Source: chromecache_213.2.dr, chromecache_251.2.dr	String found in binary or memory: <a href="https://www.facebook.com/venmo/" class="social-link" rel="noopener noreferrer" title="Facebook" aria-label="Facebook" aria-hidden="false" target="_blank"> equals www.facebook.com (Facebook)
Source: chromecache_264.2.dr	String found in binary or memory: // The working of observer is explained step by step in this talk: https://www.youtube.com/watch?v=cPF4iBedoF0&feature=youtu.be&t=1307 equals www.youtube.com (Youtube)
Source: chromecache_244.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Qj:function(){e=zb()},sd:function(){d()}}};var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)
Source: chromecache_244.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|h.length))return;var n={Xg:d,Vg:e,Wg:f,Ih:g,Jh:h,ye:m,Ab:b},p=D.YT,q=function(){IC(n)};if(p)return p.ready&&p.ready(q),b;var r=D.onYouTubeIframeAPIReady;D.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(LC(w,"iframe_api")\|\|LC(w,"player_api"))return b}for(var x=H.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!CC&&JC(x[A],n.ye))return tc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_190.2.dr, chromecache_170.2.dr, chromecache_240.2.dr, chromecache_263.2.dr	String found in binary or memory: return b}yC.J="internal.enableAutoEventOnTimer";var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.103.43
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.103.43
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: us-west-2.protection.sophos.com
Source: global traffic	DNS traffic detected: DNS query: venmo.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: account.venmo.com
Source: global traffic	DNS traffic detected: DNS query: jssdkcdns.mparticle.com
Source: global traffic	DNS traffic detected: DNS query: www.paypalobjects.com
Source: global traffic	DNS traffic detected: DNS query: identity.mparticle.com
Source: global traffic	DNS traffic detected: DNS query: cdn.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: c.paypal.com
Source: global traffic	DNS traffic detected: DNS query: c6.paypal.com
Source: global traffic	DNS traffic detected: DNS query: b.stats.paypal.com
Source: global traffic	DNS traffic detected: DNS query: www.paypal.com
Source: global traffic	DNS traffic detected: DNS query: lvs.stats.paypal.com
Source: global traffic	DNS traffic detected: DNS query: t.paypal.com
Source: global traffic	DNS traffic detected: DNS query: jssdks.mparticle.com
Source: global traffic	DNS traffic detected: DNS query: id.venmo.com
Source: global traffic	DNS traffic detected: DNS query: www.recaptcha.net
Source: global traffic	DNS traffic detected: DNS query: help.venmo.com
Source: global traffic	DNS traffic detected: DNS query: static.zdassets.com
Source: global traffic	DNS traffic detected: DNS query: p19.zdassets.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: theme.zdassets.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: images.ctfassets.net
Source: global traffic	DNS traffic detected: DNS query: www.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: venmo.zendesk.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189