Windows Analysis Report
FAX-ET_REMIT103INV364783-PDF.htm

AV Detection

Source: https://mwanzompyavision.co.ke//?e=writetous@herbalife.com

SlashNext: Label: Fake Login Page type: Phishing & Social Engineering

Phishing

Source: Yara match

File source: FAX-ET_REMIT103INV364783-PDF.htm, type: SAMPLE

Compliance

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Local\Temp\6704_1753037400\LICENSE.txt

Jump to behavior

Source: unknown	HTTPS traffic detected: 209.99.16.58:443 -> 192.168.2.4:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 209.99.16.58:443 -> 192.168.2.4:49810 version: TLS 1.2

Networking

Source: Joe Sandbox View

JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: Joe Sandbox View

IP Address: 239.255.255.250 239.255.255.250

Source: unknown

DNS traffic detected: queries for: accounts.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-GB&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda,pkedcjkdefgpdelpbcmbmeomcjbeemfmX-Goog-Update-Updater: chromecrx-85.0.4183.121Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET //?e=writetous@herbalife.com HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /cache/widgetkit/widgetkit-39fe0865.css HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /crx/blobs/Acy1k0bLIjHsvnKaKN_oRpVaYYvFs25d7GKYF1WXrT6yizCMksBO0c_ggE0B6tx6HPRHe6q1GOEe3_NcIbSiGG8kXeLMUY0sAKVvC6R89zvKM13s5VqoAMZSmuUgjQL5vlygJuArQghXXE_qTL7NlQ/extension_8520_615_0_5.crx HTTP/1.1Host: clients2.googleusercontent.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /media/com_uniterevolution2/assets/rs-plugin/css/settings.css HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /media/com_uniterevolution2/assets/rs-plugin/css/dynamic-captions.css HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /media/com_uniterevolution2/assets/rs-plugin/css/static-captions.css HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /templates/politica/css/bootstrap.css HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /templates/politica/css/theme.css HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /templates/politica/css/custom.css HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /templates/politica/css/animate.css HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /templates/politica/css/effect.css HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /media/jui/js/jquery.min.js?2b423f5337cc15e31a94596d8ca1aa1e HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /media/jui/js/jquery-noconflict.js?2b423f5337cc15e31a94596d8ca1aa1e HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /media/jui/js/jquery-migrate.min.js?2b423f5337cc15e31a94596d8ca1aa1e HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /cache/widgetkit/widgetkit-79f0ff34.js HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /media/com_uniterevolution2/assets/rs-plugin/js/jquery.themepunch.tools.min.js HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /media/com_uniterevolution2/assets/rs-plugin/js/jquery.themepunch.revolution.min.js HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /templates/politica/warp/vendor/uikit/js/uikit.js HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /templates/politica/warp/vendor/uikit/js/components/autocomplete.js HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /templates/politica/warp/vendor/uikit/js/components/search.js HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /templates/politica/warp/js/social.js HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /templates/politica/js/theme.js HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /templates/politica/js/modernizr.custom.js HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /templates/politica/js/caption-toucheffects.js HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /templates/politica/js/wow.min.js HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /templates/politica/js/sticky-header.js HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /templates/politica/js/parallax-plugin.js HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/js/lightbox.js?wkv=1.4.9 HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveAccept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36X-Requested-With: XMLHttpRequestSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/mediaplayer/mediaelement/mediaelement-and-player.js?wkv=1.4.9 HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveAccept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36X-Requested-With: XMLHttpRequestSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/spotlight/js/spotlight.js?wkv=1.4.9 HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveAccept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36X-Requested-With: XMLHttpRequestSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /s/roboto/v29/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1Host: fonts.gstatic.comConnection: keep-aliveOrigin: https://mwanzompyavision.co.keUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://fonts.googleapis.com/css?family=RobotoAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /images/logo/logo.png HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/1/bg.jpg HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/1/man.png HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/3/bg.jpg HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/3/vote2.png HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/2/bg.jpg HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /templates/politica/warp/vendor/uikit/fonts/fontawesome-webfont.woff HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveOrigin: https://mwanzompyavision.co.keUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://mwanzompyavision.co.ke/templates/politica/css/theme.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/2/logo.png HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /media/com_uniterevolution2/assets/rs-plugin/font/revicons.woff?5510888 HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveOrigin: https://mwanzompyavision.co.keUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://mwanzompyavision.co.ke/media/com_uniterevolution2/assets/rs-plugin/css/settings.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/2/icon.png HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /media/com_uniterevolution2/assets/rs-plugin/assets/loader.gif HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mwanzompyavision.co.ke/media/com_uniterevolution2/assets/rs-plugin/css/settings.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /images/highlights/1.jpg HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /images/highlights/2.jpg HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /images/highlights/3.jpg HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /images/candidate/3.jpg HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /images/donate-buttonr.jpg HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /images/2.jpg HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /images/politica-bg.png HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mwanzompyavision.co.ke/templates/politica/css/custom.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /templates/politica/favicon.ico HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mwanzompyavision.co.ke//?e=writetous@herbalife.comAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /templates/politica/favicon.ico HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.ke
Source: global traffic	HTTP traffic detected: GET /images/logo/logo.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.ke
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/1/man.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.ke
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/3/vote2.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.ke
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/2/logo.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.ke
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/2/icon.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.ke
Source: global traffic	HTTP traffic detected: GET /images/highlights/1.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.ke
Source: global traffic	HTTP traffic detected: GET /images/highlights/2.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.ke
Source: global traffic	HTTP traffic detected: GET /images/highlights/3.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.ke
Source: global traffic	HTTP traffic detected: GET /images/candidate/3.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.ke
Source: global traffic	HTTP traffic detected: GET /images/donate-buttonr.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.ke
Source: global traffic	HTTP traffic detected: GET /images/2.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.ke
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/1/bg.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.ke
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/3/bg.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.ke
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/2/bg.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.ke
Source: global traffic	HTTP traffic detected: GET /media/com_uniterevolution2/assets/rs-plugin/assets/loader.gif HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.ke
Source: global traffic	HTTP traffic detected: GET /images/politica-bg.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.ke
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/loading.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.ke
Source: global traffic	HTTP traffic detected: GET /index.php HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/close.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.ke
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/blank.gif HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.ke
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/buttons.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.ke
Source: global traffic	HTTP traffic detected: GET /images/logo/logo.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Fri, 29 Nov 2019 09:48:20 GMT
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/3/vote2.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Fri, 29 Nov 2019 10:04:21 GMT
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/1/man.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Fri, 29 Nov 2019 10:08:11 GMT
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/2/logo.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Fri, 29 Nov 2019 10:06:48 GMT
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/2/icon.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Tue, 03 Mar 2015 03:00:54 GMT
Source: global traffic	HTTP traffic detected: GET /images/highlights/1.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 25 Sep 2019 11:55:06 GMT
Source: global traffic	HTTP traffic detected: GET /images/highlights/2.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 25 Sep 2019 11:35:49 GMT
Source: global traffic	HTTP traffic detected: GET /images/highlights/3.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 25 Sep 2019 11:24:01 GMT
Source: global traffic	HTTP traffic detected: GET /images/candidate/3.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Fri, 29 Nov 2019 09:50:53 GMT
Source: global traffic	HTTP traffic detected: GET /index.php/abt/vision-mission HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /images/donate-buttonr.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Thu, 03 Oct 2019 09:48:46 GMT
Source: global traffic	HTTP traffic detected: GET /images/2.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Thu, 03 Oct 2019 09:53:23 GMT
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/3/bg.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 25 Sep 2019 10:56:45 GMT
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/1/bg.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 25 Sep 2019 10:58:02 GMT
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/2/bg.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 25 Sep 2019 10:57:43 GMT
Source: global traffic	HTTP traffic detected: GET /images/breadcrumbs-bg.jpg HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mwanzompyavision.co.ke/templates/politica/css/custom.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /media/com_uniterevolution2/assets/rs-plugin/assets/loader.gif HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Tue, 10 Aug 2021 07:07:28 GMT
Source: global traffic	HTTP traffic detected: GET /images/politica-bg.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.ke
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/loading.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.ke
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/close.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.ke
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/blank.gif HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.ke
Source: global traffic	HTTP traffic detected: GET /index.php/abt/background-information HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/buttons.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.ke
Source: global traffic	HTTP traffic detected: GET /images/logo/logo.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Fri, 29 Nov 2019 09:48:20 GMT
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/1/bg.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 25 Sep 2019 10:58:02 GMT
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/1/man.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Fri, 29 Nov 2019 10:08:11 GMT
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/3/vote2.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Fri, 29 Nov 2019 10:04:21 GMT
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/2/logo.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Fri, 29 Nov 2019 10:06:48 GMT
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/2/icon.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Tue, 03 Mar 2015 03:00:54 GMT
Source: global traffic	HTTP traffic detected: GET /images/highlights/1.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 25 Sep 2019 11:55:06 GMT
Source: global traffic	HTTP traffic detected: GET /images/highlights/3.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 25 Sep 2019 11:24:01 GMT
Source: global traffic	HTTP traffic detected: GET /images/highlights/2.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 25 Sep 2019 11:35:49 GMT
Source: global traffic	HTTP traffic detected: GET /index.php/abt/objectives HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /images/candidate/3.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Fri, 29 Nov 2019 09:50:53 GMT
Source: global traffic	HTTP traffic detected: GET /images/donate-buttonr.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Thu, 03 Oct 2019 09:48:46 GMT
Source: global traffic	HTTP traffic detected: GET /images/2.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Thu, 03 Oct 2019 09:53:23 GMT
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/3/bg.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 25 Sep 2019 10:56:45 GMT
Source: global traffic	HTTP traffic detected: GET /media/com_uniterevolution2/assets/rs-plugin/assets/loader.gif HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Tue, 10 Aug 2021 07:07:28 GMT
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/2/bg.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 25 Sep 2019 10:57:43 GMT
Source: global traffic	HTTP traffic detected: GET /images/politica-bg.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Fri, 29 Nov 2019 09:56:50 GMT
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/loading.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 24 Dec 2014 17:33:26 GMT
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/close.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 24 Dec 2014 17:33:26 GMT
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/blank.gif HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 24 Dec 2014 17:33:26 GMT
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/buttons.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 24 Dec 2014 17:33:26 GMT
Source: global traffic	HTTP traffic detected: GET /images/logo/logo.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Fri, 29 Nov 2019 09:48:20 GMT
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/3/vote2.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Fri, 29 Nov 2019 10:04:21 GMT
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/1/man.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Fri, 29 Nov 2019 10:08:11 GMT
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/2/logo.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Fri, 29 Nov 2019 10:06:48 GMT
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/2/icon.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Tue, 03 Mar 2015 03:00:54 GMT
Source: global traffic	HTTP traffic detected: GET /images/highlights/2.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 25 Sep 2019 11:35:49 GMT
Source: global traffic	HTTP traffic detected: GET /images/highlights/1.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 25 Sep 2019 11:55:06 GMT
Source: global traffic	HTTP traffic detected: GET /images/highlights/3.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 25 Sep 2019 11:24:01 GMT
Source: global traffic	HTTP traffic detected: GET /images/candidate/3.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Fri, 29 Nov 2019 09:50:53 GMT
Source: global traffic	HTTP traffic detected: GET /images/donate-buttonr.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Thu, 03 Oct 2019 09:48:46 GMT
Source: global traffic	HTTP traffic detected: GET /images/2.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Thu, 03 Oct 2019 09:53:23 GMT
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/1/bg.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 25 Sep 2019 10:58:02 GMT
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/3/bg.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 25 Sep 2019 10:56:45 GMT
Source: global traffic	HTTP traffic detected: GET /media/com_uniterevolution2/assets/rs-plugin/assets/loader.gif HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Tue, 10 Aug 2021 07:07:28 GMT
Source: global traffic	HTTP traffic detected: GET /images/slider-revolution/2/bg.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 25 Sep 2019 10:57:43 GMT
Source: global traffic	HTTP traffic detected: GET /images/politica-bg.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Fri, 29 Nov 2019 09:56:50 GMT
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/loading.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 24 Dec 2014 17:33:26 GMT
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/close.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 24 Dec 2014 17:33:26 GMT
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/blank.gif HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 24 Dec 2014 17:33:26 GMT
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/buttons.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 24 Dec 2014 17:33:26 GMT
Source: global traffic	HTTP traffic detected: GET /images/logo/logo.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Fri, 29 Nov 2019 09:48:20 GMT
Source: global traffic	HTTP traffic detected: GET /images/donate-buttonr.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Thu, 03 Oct 2019 09:48:46 GMT
Source: global traffic	HTTP traffic detected: GET /images/2.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Thu, 03 Oct 2019 09:53:23 GMT
Source: global traffic	HTTP traffic detected: GET /images/breadcrumbs-bg.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.ke
Source: global traffic	HTTP traffic detected: GET /images/politica-bg.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Fri, 29 Nov 2019 09:56:50 GMT
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/loading.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 24 Dec 2014 17:33:26 GMT
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/close.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 24 Dec 2014 17:33:26 GMT
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/blank.gif HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 24 Dec 2014 17:33:26 GMT
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/buttons.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 24 Dec 2014 17:33:26 GMT
Source: global traffic	HTTP traffic detected: GET /images/logo/logo.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Fri, 29 Nov 2019 09:48:20 GMT
Source: global traffic	HTTP traffic detected: GET /images/donate-buttonr.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Thu, 03 Oct 2019 09:48:46 GMT
Source: global traffic	HTTP traffic detected: GET /images/2.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Thu, 03 Oct 2019 09:53:23 GMT
Source: global traffic	HTTP traffic detected: GET /images/breadcrumbs-bg.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.ke
Source: global traffic	HTTP traffic detected: GET /images/politica-bg.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Fri, 29 Nov 2019 09:56:50 GMT
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/loading.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 24 Dec 2014 17:33:26 GMT
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/close.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 24 Dec 2014 17:33:26 GMT
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/blank.gif HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 24 Dec 2014 17:33:26 GMT
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/buttons.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 24 Dec 2014 17:33:26 GMT
Source: global traffic	HTTP traffic detected: GET /images/logo/logo.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Fri, 29 Nov 2019 09:48:20 GMT
Source: global traffic	HTTP traffic detected: GET /images/donate-buttonr.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Thu, 03 Oct 2019 09:48:46 GMT
Source: global traffic	HTTP traffic detected: GET /images/2.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Thu, 03 Oct 2019 09:53:23 GMT
Source: global traffic	HTTP traffic detected: GET /images/breadcrumbs-bg.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.ke
Source: global traffic	HTTP traffic detected: GET /images/politica-bg.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Fri, 29 Nov 2019 09:56:50 GMT
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/loading.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 24 Dec 2014 17:33:26 GMT
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/close.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 24 Dec 2014 17:33:26 GMT
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/buttons.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 24 Dec 2014 17:33:26 GMT
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/blank.gif HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 24 Dec 2014 17:33:26 GMT
Source: global traffic	HTTP traffic detected: GET /index.php/abt/core-activities HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /images/logo/logo.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Fri, 29 Nov 2019 09:48:20 GMT
Source: global traffic	HTTP traffic detected: GET /images/donate-buttonr.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Thu, 03 Oct 2019 09:48:46 GMT
Source: global traffic	HTTP traffic detected: GET /index.php/leadership-structure HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /images/2.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Thu, 03 Oct 2019 09:53:23 GMT
Source: global traffic	HTTP traffic detected: GET /images/breadcrumbs-bg.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Fri, 29 Nov 2019 09:15:11 GMT
Source: global traffic	HTTP traffic detected: GET /images/politica-bg.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Fri, 29 Nov 2019 09:56:50 GMT
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/loading.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 24 Dec 2014 17:33:26 GMT
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/close.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 24 Dec 2014 17:33:26 GMT
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/blank.gif HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 24 Dec 2014 17:33:26 GMT
Source: global traffic	HTTP traffic detected: GET /images/meet-with-us/chair.jpg HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mwanzompyavision.co.ke/index.php/leadership-structureAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /images/meet-with-us/Treasurer.jpg HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mwanzompyavision.co.ke/index.php/leadership-structureAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /images/meet-with-us/9.jpg HTTP/1.1Host: mwanzompyavision.co.keConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mwanzompyavision.co.ke/index.php/leadership-structureAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: e99d78c7899cb570447431d4e052dd5a=7596edc390c2381b5dc07519013b90a4
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/buttons.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.ke
Source: global traffic	HTTP traffic detected: GET /images/logo/logo.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Fri, 29 Nov 2019 09:48:20 GMT
Source: global traffic	HTTP traffic detected: GET /images/meet-with-us/chair.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.ke
Source: global traffic	HTTP traffic detected: GET /images/meet-with-us/Treasurer.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.ke
Source: global traffic	HTTP traffic detected: GET /images/meet-with-us/9.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.ke
Source: global traffic	HTTP traffic detected: GET /images/donate-buttonr.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Thu, 03 Oct 2019 09:48:46 GMT
Source: global traffic	HTTP traffic detected: GET /images/2.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Thu, 03 Oct 2019 09:53:23 GMT
Source: global traffic	HTTP traffic detected: GET /images/breadcrumbs-bg.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Fri, 29 Nov 2019 09:15:11 GMT
Source: global traffic	HTTP traffic detected: GET /images/politica-bg.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Fri, 29 Nov 2019 09:56:50 GMT
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/loading.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 24 Dec 2014 17:33:26 GMT
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/close.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 24 Dec 2014 17:33:26 GMT
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/blank.gif HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 24 Dec 2014 17:33:26 GMT
Source: global traffic	HTTP traffic detected: GET /media/widgetkit/widgets/lightbox/images/buttons.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: mwanzompyavision.co.keIf-Modified-Since: Wed, 24 Dec 2014 17:33:26 GMT

Source: Filtering Rules.0.dr	String found in binary or memory: www.facebook.com/ajax/ads/ equals www.facebook.com (Facebook)
Source: Filtering Rules.0.dr	String found in binary or memory: www.facebook.com0 equals www.facebook.com (Facebook)

Source: pnacl_public_x86_64_pnacl_sz_nexe.0.dr	String found in binary or memory: http://llvm.org/):
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01
Source: 59a64a6b-2217-429e-b67b-2c87eeedfe2f.tmp.2.dr, 8a883a08-d119-4e1f-bd1c-a9de99bc94a7.tmp.2.dr, 697af0d6-36f1-400b-99c0-41e7876e4559.tmp.2.dr, 3e8036d8-9540-4340-948a-53f133e9a71e.tmp.2.dr, manifest.json4.0.dr	String found in binary or memory: https://accounts.google.com
Source: craw_window.js.0.dr	String found in binary or memory: https://accounts.google.com/MergeSession
Source: 59a64a6b-2217-429e-b67b-2c87eeedfe2f.tmp.2.dr, 8a883a08-d119-4e1f-bd1c-a9de99bc94a7.tmp.2.dr, 697af0d6-36f1-400b-99c0-41e7876e4559.tmp.2.dr, 3e8036d8-9540-4340-948a-53f133e9a71e.tmp.2.dr, manifest.json4.0.dr	String found in binary or memory: https://apis.google.com
Source: pnacl_public_x86_64_crtend_o.0.dr	String found in binary or memory: https://chromium.googlesource.com/a/native_client/pnacl-clang.git
Source: pnacl_public_x86_64_crtend_o.0.dr	String found in binary or memory: https://chromium.googlesource.com/a/native_client/pnacl-llvm.git
Source: 59a64a6b-2217-429e-b67b-2c87eeedfe2f.tmp.2.dr, 8a883a08-d119-4e1f-bd1c-a9de99bc94a7.tmp.2.dr, 697af0d6-36f1-400b-99c0-41e7876e4559.tmp.2.dr, 3e8036d8-9540-4340-948a-53f133e9a71e.tmp.2.dr	String found in binary or memory: https://clients2.google.com
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: https://clients2.google.com/cr/report
Source: manifest.json4.0.dr, manifest.json6.0.dr	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: 59a64a6b-2217-429e-b67b-2c87eeedfe2f.tmp.2.dr, 8a883a08-d119-4e1f-bd1c-a9de99bc94a7.tmp.2.dr, 697af0d6-36f1-400b-99c0-41e7876e4559.tmp.2.dr, 3e8036d8-9540-4340-948a-53f133e9a71e.tmp.2.dr	String found in binary or memory: https://clients2.googleusercontent.com
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: https://clients6.google.com
Source: manifest.json4.0.dr	String found in binary or memory: https://content.googleapis.com
Source: LICENSE.txt.0.dr	String found in binary or memory: https://creativecommons.org/.
Source: LICENSE.txt.0.dr	String found in binary or memory: https://creativecommons.org/compatiblelicenses
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: https://creativecommons.org/publicdomain/zero/1.0/.
Source: 59a64a6b-2217-429e-b67b-2c87eeedfe2f.tmp.2.dr, 8a883a08-d119-4e1f-bd1c-a9de99bc94a7.tmp.2.dr, 752cdee0-15a7-45e8-ad43-8924cb7688eb.tmp.2.dr, 697af0d6-36f1-400b-99c0-41e7876e4559.tmp.2.dr, 3e8036d8-9540-4340-948a-53f133e9a71e.tmp.2.dr	String found in binary or memory: https://dns.google
Source: LICENSE.txt.0.dr	String found in binary or memory: https://easylist.to/)
Source: manifest.json4.0.dr	String found in binary or memory: https://feedback.googleusercontent.com
Source: 59a64a6b-2217-429e-b67b-2c87eeedfe2f.tmp.2.dr, 8a883a08-d119-4e1f-bd1c-a9de99bc94a7.tmp.2.dr, 697af0d6-36f1-400b-99c0-41e7876e4559.tmp.2.dr, 3e8036d8-9540-4340-948a-53f133e9a71e.tmp.2.dr	String found in binary or memory: https://fonts.googleapis.com
Source: Network Action Predictor.0.dr	String found in binary or memory: https://fonts.googleapis.com/
Source: data_1.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto
Source: manifest.json4.0.dr	String found in binary or memory: https://fonts.googleapis.com;
Source: data_3.2.dr, 697af0d6-36f1-400b-99c0-41e7876e4559.tmp.2.dr, 3e8036d8-9540-4340-948a-53f133e9a71e.tmp.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: Network Action Predictor.0.dr	String found in binary or memory: https://fonts.gstatic.com/
Source: data_1.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v29/KFOmCnqEu92Fr1Mu4mxK.woff2
Source: manifest.json4.0.dr	String found in binary or memory: https://fonts.gstatic.com;
Source: material_css_min.css.0.dr	String found in binary or memory: https://github.com/angular/material
Source: LICENSE.txt.0.dr	String found in binary or memory: https://github.com/easylist)
Source: craw_window.js.0.dr, craw_background.js.0.dr	String found in binary or memory: https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: https://hangouts.clients6.google.com
Source: manifest.json4.0.dr	String found in binary or memory: https://hangouts.google.com/
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: https://hangouts.google.com/hangouts/_/logpref
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: https://meetings.clients6.google.com
Source: Network Action Predictor.0.dr, Current Session.0.dr	String found in binary or memory: https://mwanzompyavision.co.ke/
Source: Current Session.0.dr	String found in binary or memory: https://mwanzompyavision.co.ke//?e=writetous
Source: Current Session.0.dr	String found in binary or memory: https://mwanzompyavision.co.ke/W
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/cache/widgetkit/widgetkit-39fe0865.css
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/cache/widgetkit/widgetkit-79f0ff34.js
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/images/2.jpg
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/images/breadcrumbs-bg.jpg
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/images/breadcrumbs-bg.jpgV
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/images/candidate/3.jpg
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/images/candidate/3.jpgQ
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/images/donate-buttonr.jpg
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/images/highlights/1.jpg
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/images/highlights/1.jpgb#
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/images/highlights/2.jpg
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/images/highlights/3.jpg
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/images/highlights/3.jpgj
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/images/logo/logo.png
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/images/meet-with-us/9.jpg
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/images/meet-with-us/9.jpgD
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/images/meet-with-us/Treasurer.jpg
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/images/meet-with-us/chair.jpg
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/images/politica-bg.png
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/images/slider-revolution/1/bg.jpg
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/images/slider-revolution/1/man.png
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/images/slider-revolution/2/bg.jpg
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/images/slider-revolution/2/icon.png
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/images/slider-revolution/2/logo.png
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/images/slider-revolution/2/logo.png:t
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/images/slider-revolution/3/bg.jpg
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/images/slider-revolution/3/vote2.png
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/images/slider-revolution/3/vote2.pngh
Source: Current Session.0.dr	String found in binary or memory: https://mwanzompyavision.co.ke/index.php
Source: Current Session.0.dr	String found in binary or memory: https://mwanzompyavision.co.ke/index.php/abt/background-information
Source: Current Session.0.dr	String found in binary or memory: https://mwanzompyavision.co.ke/index.php/abt/background-information0
Source: Current Session.0.dr	String found in binary or memory: https://mwanzompyavision.co.ke/index.php/abt/core-activities
Source: Current Session.0.dr	String found in binary or memory: https://mwanzompyavision.co.ke/index.php/abt/objectives
Source: Current Session.0.dr	String found in binary or memory: https://mwanzompyavision.co.ke/index.php/abt/vision-mission
Source: Current Session.0.dr	String found in binary or memory: https://mwanzompyavision.co.ke/index.php/leadership-structure
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/media/com_uniterevolution2/assets/rs-plugin/assets/loader.gif
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/media/com_uniterevolution2/assets/rs-plugin/assets/loader.gifwb
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/media/com_uniterevolution2/assets/rs-plugin/css/dynamic-captions.css
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/media/com_uniterevolution2/assets/rs-plugin/css/settings.css
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/media/com_uniterevolution2/assets/rs-plugin/css/static-captions.css
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/media/com_uniterevolution2/assets/rs-plugin/css/static-captions.cssR6
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/media/com_uniterevolution2/assets/rs-plugin/font/revicons.woff?551088
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/media/com_uniterevolution2/assets/rs-plugin/js/jquery.themepunch.revo
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/media/com_uniterevolution2/assets/rs-plugin/js/jquery.themepunch.tool
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/media/jui/js/jquery-migrate.min.js?2b423f5337cc15e31a94596d8ca1aa1e
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/media/jui/js/jquery-noconflict.js?2b423f5337cc15e31a94596d8ca1aa1e
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/media/jui/js/jquery-noconflict.js?2b423f5337cc15e31a94596d8ca1aa1ec
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/media/jui/js/jquery.min.js?2b423f5337cc15e31a94596d8ca1aa1e
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/media/jui/js/jquery.min.js?2b423f5337cc15e31a94596d8ca1aa1eEa
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/media/widgetkit/widgets/lightbox/js/lightbox.js?wkv=1.4.9
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/media/widgetkit/widgets/mediaplayer/mediaelement/mediaelement-and-pla
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/media/widgetkit/widgets/spotlight/js/spotlight.js?wkv=1.4.9
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/templates/politica/css/animate.css
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/templates/politica/css/bootstrap.css
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/templates/politica/css/bootstrap.css7V
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/templates/politica/css/custom.css
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/templates/politica/css/effect.css
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/templates/politica/css/effect.css4
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/templates/politica/css/theme.css
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/templates/politica/css/theme.cssfj
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/templates/politica/favicon.ico
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/templates/politica/favicon.iconot
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/templates/politica/js/caption-toucheffects.js
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/templates/politica/js/caption-toucheffects.jsr
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/templates/politica/js/modernizr.custom.js
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/templates/politica/js/modernizr.custom.js(
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/templates/politica/js/parallax-plugin.js
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/templates/politica/js/sticky-header.js
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/templates/politica/js/theme.js
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/templates/politica/js/theme.js0fxL
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/templates/politica/js/wow.min.js
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/templates/politica/warp/js/social.js
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/templates/politica/warp/js/social.js~
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/templates/politica/warp/vendor/uikit/fonts/fontawesome-webfont.woff
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/templates/politica/warp/vendor/uikit/js/components/autocomplete.js
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/templates/politica/warp/vendor/uikit/js/components/autocomplete.jsKi
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/templates/politica/warp/vendor/uikit/js/components/search.js
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/templates/politica/warp/vendor/uikit/js/components/search.js3
Source: data_1.2.dr	String found in binary or memory: https://mwanzompyavision.co.ke/templates/politica/warp/vendor/uikit/js/uikit.js
Source: 59a64a6b-2217-429e-b67b-2c87eeedfe2f.tmp.2.dr, 8a883a08-d119-4e1f-bd1c-a9de99bc94a7.tmp.2.dr, 697af0d6-36f1-400b-99c0-41e7876e4559.tmp.2.dr, 3e8036d8-9540-4340-948a-53f133e9a71e.tmp.2.dr	String found in binary or memory: https://ogs.google.com
Source: craw_window.js.0.dr	String found in binary or memory: https://payments.google.com/payments/v4/js/integrator.js
Source: 59a64a6b-2217-429e-b67b-2c87eeedfe2f.tmp.2.dr, 8a883a08-d119-4e1f-bd1c-a9de99bc94a7.tmp.2.dr, 697af0d6-36f1-400b-99c0-41e7876e4559.tmp.2.dr, 3e8036d8-9540-4340-948a-53f133e9a71e.tmp.2.dr	String found in binary or memory: https://play.google.com
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: https://preprod-hangouts-googleapis.sandbox.google.com
Source: 8a883a08-d119-4e1f-bd1c-a9de99bc94a7.tmp.2.dr	String found in binary or memory: https://r5---sn-h0jeln7l.gvt1.com
Source: 59a64a6b-2217-429e-b67b-2c87eeedfe2f.tmp.2.dr, 8a883a08-d119-4e1f-bd1c-a9de99bc94a7.tmp.2.dr, 697af0d6-36f1-400b-99c0-41e7876e4559.tmp.2.dr, 3e8036d8-9540-4340-948a-53f133e9a71e.tmp.2.dr	String found in binary or memory: https://redirector.gvt1.com
Source: craw_window.js.0.dr	String found in binary or memory: https://sandbox.google.com/payments/v4/js/integrator.js
Source: 59a64a6b-2217-429e-b67b-2c87eeedfe2f.tmp.2.dr, 8a883a08-d119-4e1f-bd1c-a9de99bc94a7.tmp.2.dr, 697af0d6-36f1-400b-99c0-41e7876e4559.tmp.2.dr, 3e8036d8-9540-4340-948a-53f133e9a71e.tmp.2.dr	String found in binary or memory: https://ssl.gstatic.com
Source: messages.json41.0.dr, messages.json15.0.dr, messages.json37.0.dr, feedback.html.0.dr, messages.json61.0.dr, messages.json75.0.dr, messages.json71.0.dr, messages.json73.0.dr, messages.json59.0.dr, messages.json27.0.dr, messages.json83.0.dr, messages.json79.0.dr, messages.json25.0.dr, messages.json82.0.dr, messages.json54.0.dr, messages.json70.0.dr, messages.json74.0.dr, messages.json39.0.dr, messages.json0.0.dr, messages.json85.0.dr, messages.json88.0.dr	String found in binary or memory: https://support.google.com/chromecast/answer/2998456
Source: messages.json41.0.dr, messages.json15.0.dr, messages.json37.0.dr, feedback.html.0.dr, messages.json61.0.dr, messages.json75.0.dr, messages.json71.0.dr, messages.json73.0.dr, messages.json59.0.dr, messages.json27.0.dr, messages.json83.0.dr, messages.json79.0.dr, messages.json25.0.dr, messages.json82.0.dr, messages.json54.0.dr, messages.json70.0.dr, messages.json74.0.dr, messages.json39.0.dr, messages.json0.0.dr, messages.json85.0.dr, messages.json88.0.dr	String found in binary or memory: https://support.google.com/chromecast/troubleshooter/2995236
Source: data_1.2.dr	String found in binary or memory: https://use.typekit.net/vue1oix.js
Source: craw_window.js.0.dr, craw_background.js.0.dr	String found in binary or memory: https://www-googleapis-staging.sandbox.google.com
Source: 59a64a6b-2217-429e-b67b-2c87eeedfe2f.tmp.2.dr, 8a883a08-d119-4e1f-bd1c-a9de99bc94a7.tmp.2.dr, 697af0d6-36f1-400b-99c0-41e7876e4559.tmp.2.dr, 3e8036d8-9540-4340-948a-53f133e9a71e.tmp.2.dr, manifest.json4.0.dr	String found in binary or memory: https://www.google.com
Source: craw_window.js.0.dr	String found in binary or memory: https://www.google.com/accounts/OAuthLogin?issueuberauth=1
Source: craw_window.js.0.dr	String found in binary or memory: https://www.google.com/images/cleardot.gif
Source: craw_window.js.0.dr	String found in binary or memory: https://www.google.com/images/dot2.gif
Source: craw_window.js.0.dr	String found in binary or memory: https://www.google.com/images/x2.gif
Source: craw_background.js.0.dr	String found in binary or memory: https://www.google.com/intl/en-US/chrome/blank.html
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: manifest.json4.0.dr	String found in binary or memory: https://www.google.com;
Source: 59a64a6b-2217-429e-b67b-2c87eeedfe2f.tmp.2.dr, 8a883a08-d119-4e1f-bd1c-a9de99bc94a7.tmp.2.dr, craw_window.js.0.dr, craw_background.js.0.dr, 697af0d6-36f1-400b-99c0-41e7876e4559.tmp.2.dr, 3e8036d8-9540-4340-948a-53f133e9a71e.tmp.2.dr	String found in binary or memory: https://www.googleapis.com
Source: manifest.json4.0.dr	String found in binary or memory: https://www.googleapis.com/auth/calendar.readonly
Source: manifest.json4.0.dr	String found in binary or memory: https://www.googleapis.com/auth/cast-edu-messaging
Source: manifest.json4.0.dr	String found in binary or memory: https://www.googleapis.com/auth/clouddevices
Source: manifest.json4.0.dr	String found in binary or memory: https://www.googleapis.com/auth/hangouts
Source: manifest.json4.0.dr	String found in binary or memory: https://www.googleapis.com/auth/hangouts.readonly
Source: manifest.json4.0.dr	String found in binary or memory: https://www.googleapis.com/auth/meetings
Source: manifest.json4.0.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.peopleapi.readwrite
Source: manifest.json4.0.dr	String found in binary or memory: https://www.googleapis.com/auth/userinfo.email
Source: 59a64a6b-2217-429e-b67b-2c87eeedfe2f.tmp.2.dr, 8a883a08-d119-4e1f-bd1c-a9de99bc94a7.tmp.2.dr, 697af0d6-36f1-400b-99c0-41e7876e4559.tmp.2.dr, 3e8036d8-9540-4340-948a-53f133e9a71e.tmp.2.dr	String found in binary or memory: https://www.gstatic.com
Source: manifest.json4.0.dr	String found in binary or memory: https://www.gstatic.com;

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8

Source: unknown	HTTPS traffic detected: 209.99.16.58:443 -> 192.168.2.4:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 209.99.16.58:443 -> 192.168.2.4:49810 version: TLS 1.2

System Summary

Source: Name includes: FAX-ET_REMIT103INV364783-PDF.htm

Initial sample: remit

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Local\Temp\dcc2eede-43a4-428c-b4ff-2e1340757a3b.tmp

Jump to behavior

Source: classification engine

Classification label: mal60.phis.winHTM@45/296@8/8

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --enable-automation "C:\Users\user\Desktop\FAX-ET_REMIT103INV364783-PDF.htm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1508,8932363896453594699,17465364084760823010,131072 --lang=en-GB --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1928 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1508,8932363896453594699,17465364084760823010,131072 --lang=en-GB --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1928 /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Local\Google\Chrome\User Data\BrowserMetrics\BrowserMetrics-61F41B03-1A30.pma

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Data Obfuscation

Source: widevinecdm.dll.0.dr	Static PE information: section name: .00cfg
Source: widevinecdm.dll.0.dr	Static PE information: section name: .rodata
Source: widevinecdm.dll.0.dr	Static PE information: section name: _RDATA

Persistence and Installation Behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Local\Temp\6704_1407363317\_platform_specific\win_x64\widevinecdm.dll

Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Local\Temp\6704_1753037400\LICENSE.txt

Jump to behavior