Edit tour

Windows Analysis Report
http://document--1111011111.company.com/

Overview

General Information

Sample URL:	http://document--1111011111.company.com/
Analysis ID:	635117
Infos:

Detection

HTMLPhisher

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish20

Classification

Process Tree

System is start

chrome.exe (PID: 7668 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --enable-automation --single-argument http://document--1111011111.company.com/ MD5: 74859601FB4BEEA84B40D874CCB56CAB)

chrome.exe (PID: 7404 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1740,10588110985535776619,16488514565616499681,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 /prefetch:8 MD5: 74859601FB4BEEA84B40D874CCB56CAB)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
25855.0.pages.csv	JoeSecurity_HtmlPhish_20	Yara detected HtmlPhish_20	Joe Security

HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 27 May 2022 12:31:09 GMTContent-Type: text/htmlContent-Length: 3739Connection: keep-aliveETag: "61c39c46-e9b"X-Host: grn63.sf2p.intern.weebly.netX-W-DC: SFO

Source: History Provider Cache.1.dr	String found in binary or memory: http://document--1111011111.company.com/2
Source: 67268b83-2658-4083-928c-f181c95a7676.tmp.1.dr, a2acd1b4-60a6-4573-adf6-b0849a814490.tmp.1.dr	String found in binary or memory: http://document--1111011111.company.com:80
Source: pnacl_public_x86_64_pnacl_sz_nexe.1.dr, pnacl_public_x86_64_pnacl_llc_nexe.1.dr	String found in binary or memory: http://llvm.org/):
Source: 326a7714-6c2f-4802-b696-f5cb4eb8e13f.tmp.3.dr, 2cea7aa6-e8dc-403b-8fb0-13dc2cb9b77c.tmp.3.dr	String found in binary or memory: https://accounts.google.com
Source: craw_window.js.1.dr	String found in binary or memory: https://accounts.google.com/MergeSession
Source: 2cea7aa6-e8dc-403b-8fb0-13dc2cb9b77c.tmp.3.dr	String found in binary or memory: https://ajax.googleapis.com
Source: 326a7714-6c2f-4802-b696-f5cb4eb8e13f.tmp.3.dr, 2cea7aa6-e8dc-403b-8fb0-13dc2cb9b77c.tmp.3.dr	String found in binary or memory: https://apis.google.com
Source: pnacl_public_x86_64_libcrt_platform_a.1.dr, pnacl_public_x86_64_ld_nexe.1.dr	String found in binary or memory: https://chromium.googlesource.com/a/native_client/pnacl-clang.git
Source: pnacl_public_x86_64_libcrt_platform_a.1.dr, pnacl_public_x86_64_ld_nexe.1.dr	String found in binary or memory: https://chromium.googlesource.com/a/native_client/pnacl-llvm.git
Source: 326a7714-6c2f-4802-b696-f5cb4eb8e13f.tmp.3.dr, 2cea7aa6-e8dc-403b-8fb0-13dc2cb9b77c.tmp.3.dr	String found in binary or memory: https://clients2.google.com
Source: manifest.json.1.dr, manifest.json0.1.dr	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: 326a7714-6c2f-4802-b696-f5cb4eb8e13f.tmp.3.dr, 2cea7aa6-e8dc-403b-8fb0-13dc2cb9b77c.tmp.3.dr	String found in binary or memory: https://clients2.googleusercontent.com
Source: pnacl_public_x86_64_ld_nexe.1.dr	String found in binary or memory: https://code.google.com/p/nativeclient/issues/entry
Source: pnacl_public_x86_64_ld_nexe.1.dr	String found in binary or memory: https://code.google.com/p/nativeclient/issues/entry%s:
Source: 2cea7aa6-e8dc-403b-8fb0-13dc2cb9b77c.tmp.3.dr	String found in binary or memory: https://content-autofill.googleapis.com
Source: craw_background.js.1.dr, craw_window.js.1.dr	String found in binary or memory: https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p
Source: 326a7714-6c2f-4802-b696-f5cb4eb8e13f.tmp.3.dr, 2cea7aa6-e8dc-403b-8fb0-13dc2cb9b77c.tmp.3.dr	String found in binary or memory: https://ogs.google.com
Source: manifest.json.1.dr, craw_window.js.1.dr	String found in binary or memory: https://payments.google.com/payments/v4/js/integrator.js
Source: manifest.json.1.dr, craw_window.js.1.dr	String found in binary or memory: https://sandbox.google.com/payments/v4/js/integrator.js
Source: 326a7714-6c2f-4802-b696-f5cb4eb8e13f.tmp.3.dr, 2cea7aa6-e8dc-403b-8fb0-13dc2cb9b77c.tmp.3.dr	String found in binary or memory: https://ssl.gstatic.com
Source: 326a7714-6c2f-4802-b696-f5cb4eb8e13f.tmp.3.dr, 2cea7aa6-e8dc-403b-8fb0-13dc2cb9b77c.tmp.3.dr	String found in binary or memory: https://update.googleapis.com
Source: craw_background.js.1.dr, craw_window.js.1.dr	String found in binary or memory: https://www-googleapis-staging.sandbox.google.com
Source: 326a7714-6c2f-4802-b696-f5cb4eb8e13f.tmp.3.dr, 2cea7aa6-e8dc-403b-8fb0-13dc2cb9b77c.tmp.3.dr	String found in binary or memory: https://www.google.com
Source: manifest.json.1.dr	String found in binary or memory: https://www.google.com/
Source: craw_window.js.1.dr	String found in binary or memory: https://www.google.com/accounts/OAuthLogin?issueuberauth=1
Source: craw_window.js.1.dr	String found in binary or memory: https://www.google.com/images/cleardot.gif
Source: craw_window.js.1.dr	String found in binary or memory: https://www.google.com/images/dot2.gif
Source: craw_window.js.1.dr	String found in binary or memory: https://www.google.com/images/x2.gif
Source: craw_background.js.1.dr	String found in binary or memory: https://www.google.com/intl/en-US/chrome/blank.html
Source: 326a7714-6c2f-4802-b696-f5cb4eb8e13f.tmp.3.dr, craw_background.js.1.dr, craw_window.js.1.dr, 2cea7aa6-e8dc-403b-8fb0-13dc2cb9b77c.tmp.3.dr	String found in binary or memory: https://www.googleapis.com
Source: manifest.json.1.dr	String found in binary or memory: https://www.googleapis.com/
Source: manifest.json.1.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore
Source: manifest.json.1.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore.readonly
Source: manifest.json.1.dr	String found in binary or memory: https://www.googleapis.com/auth/sierra
Source: manifest.json.1.dr	String found in binary or memory: https://www.googleapis.com/auth/sierrasandbox
Source: 326a7714-6c2f-4802-b696-f5cb4eb8e13f.tmp.3.dr, 2cea7aa6-e8dc-403b-8fb0-13dc2cb9b77c.tmp.3.dr	String found in binary or memory: https://www.gstatic.com

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 27 May 2022 12:31:06 GMTServer: ApacheSet-Cookie: is_mobile=0; path=/; domain=document--1111011111.company.comVary: X-W-SSL,Accept-Encoding,User-AgentSet-Cookie: language=en; expires=Fri, 10-Jun-2022 12:31:06 GMT; Max-Age=1209600; path=/Cache-Control: privateETag: W/"9c914c4469a59d58104fecad7951b405-gzip"Content-Encoding: gzipX-Host: blu105.sf2p.intern.weebly.netX-UA-Compatible: IE=edge,chrome=1Content-Length: 5871Keep-Alive: timeout=10, max=72Connection: Keep-AliveContent-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 3c fd 77 db 46 8e 3f 5b ef ed ff 30 65 bb a5 dc 88 a2 64 4b fe d0 57 cf 71 dc 6e fa da c4 1b 3b d7 db 8b b3 7a 23 72 24 31 a6 48 86 a4 2c eb 5c fd ef 07 60 86 5f 12 e5 8f a6 e9 de de 8b db 48 e4 0c 80 c1 60 00 0c 06 04 d5 fb ea c5 eb d3 cb 7f 9c 9f b1 69 3c 73 07 95 1e 7e 31 97 7b 93 be 26 3c 6d 50 d9 e9 4d 05 b7 e1 7b a7 17 3b b1 2b 06 cf a1 f3 9a 5d e2 35 33 d8 df fc 99 e8 99 b2 a7 37 13 31 67 41 e8 07 22 8c 97 7d cd 9f 74 22 27 16 43 8f cf 84 c6 2c df 8b 85 17 f7 b5 1c 01 8d 99 30 e4 26 5a 2c 3b 9f 82 62 8b c8 0a 9d 20 76 7c ef 69 88 ce 8c 4f f2 63 4d e3 38 e8 98 a6 ed 5b f3 19 34 18 46 13 fe 1a f8 d1 ac 5b fe 2c e0 de 12 bf cd 79 e0 fa dc 8e cc a6 d9 82 7f 47 66 b3 d5 3c 6a 35 9a 47 07 66 13 38 11 c2 8b a6 7e 6c ec 35 f6 9a 46 a3 65 ec 1d 18 3c 36 9a c7 46 fb 18 da 0c 3f 74 26 d9 c7 10 3f ea 81 37 f9 f3 78 14 b6 13 fb a1 b9 f7 00 ab cd bd 8c 4b 64 f0 fb e6 41 7b af 75 d0 38 6a ec ff 79 bc ee 07 76 f0 04 61 cd 43 f7 77 0c 4f d4 2a 3d d7 01 7d 09 85 db d7 1c 0b 35 29 5e 06 02 ae 71 4e 26 8d 39 0d c5 b8 af 99 e6 62 b1 a8 2f 84 18 b9 45 ee 43 11 09 d7 15 a1 c9 a3 48 c4 91 b9 df 3e 38 3c 68 1d 1d b7 8d 31 bf 41 92 75 f8 90 63 55 14 f3 c8 a1 21 3e ce 9d 9b be 76 2a d9 36 2e 61 d8 dc 24 62 71 1b 9b 68 99 5d 66 4d 79 08 94 fb f3 78 6c 1c 11 21 c6 24 1d 34 b3 be 76 e3 88 45 e0 87 71 0e 7b e1 d8 f1 b4 6f 0b 18 5f 18 74 53 63 8e e7 c4 0e 77 8d c8 e2 ae e8 37 eb 0d c9 d3 ce 0e 1a 3a 09 c1 b1 01 13 ed d7 18 f1 48 18 51 bc 44 1b 22 d1 d0 75 34 15 22 4e 04 44 0c 5a 51 94 c9 c7 b2 bd bd 3a 6a d9 6c 89 44 48 48 00 60 e2 4d 54 87 ab ef 47 73 c7 b5 2f 1d 60 1a 94 0a d6 f9 e0 e8 48 29 55 b6 08 9f 32 92 ef da e6 98 7b d6 72 e4 df d2 80 9f 67 98 c8 b7 50 90 b8 b6 b9 79 c5 eb f3 9a 01 2a 87 91 c8 de 6a a0 b0 1f 84 25 9d d5 93 59 19 3b 00 61 ce b8 e3 0d 09 3a 99 1c 18 66 f3 a0 d1 02 3c f4 77 c9 ea c5 53 31 13 06 e1 a7 23 11 21 dd 34 c7 a0 22 51 7d e2 fb 13 57 f0 c0 89 92 49 7d 3f e6 33 c7 5d f6 7f c1 7e 11 86 3c ee b4 1a 8d da 61 a3 f1 6d 34 1f a1 fa b9 3c 76 bc 1a 7d 1a c0 9f 4e cc eb 19 f3 ba 64 5e 4f 98 d7 a5 79 11 c0 7a d7 Data Ascii: <wF?[0edKWqn;z#r$1H,\`_H`i<s~1{&<mPM{;+]5371gA"}t"'C,0&Z,;b v\|iOcM8[4F[,yGf<j5Gf8~l5Fe<6F?t&?7xKdA{u8jyvaCwO*=}
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxContent-Type: text/cssLast-Modified: Thu, 19 May 2022 17:44:26 GMTETag: W/"628681fa-347ac"Expires: Fri, 03 Jun 2022 19:57:18 GMTCache-Control: max-age=1209600X-Host: grn89.sf2p.intern.weebly.netContent-Encoding: gzipVia: 1.1 varnish, 1.1 varnishContent-Length: 29746Accept-Ranges: bytesDate: Fri, 27 May 2022 12:31:06 GMTAge: 578029Connection: keep-aliveX-Served-By: cache-sjc10034-SJC, cache-mxp6924-MXPX-Cache: HIT, HITX-Cache-Hits: 1, 75X-Timer: S1653654667.651470,VS0,VE0Vary: Accept-EncodingAccess-Control-Allow-Origin: Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 8b 92 e3 b8 91 28 fa 2b 3c 55 d1 31 5d b3 a2 9a e2 43 8f 52 78 8e 3d 63 cf ae 23 76 6d c7 f1 9e bd 27 ee b1 a3 83 92 a8 2a ba 29 51 4b 4a f5 b0 a2 fe fd e2 49 26 5e 24 48 51 35 33 77 ba 35 3d 2d 91 40 22 91 48 20 13 89 44 e6 6f bf 24 af db 22 de 25 a5 53 1e d2 fd d9 fb 70 3e 16 f1 be dc e6 c5 ee be c8 8f f1 31 f9 e8 6d 92 87 bb b7 89 a7 7b 17 4c e9 db b7 4f df fe 0f e7 7f 25 db 2c 79 71 9e 26 e3 68 ec 39 ae f3 78 3c 1e ca fb 4f 9f 1e d2 e3 e3 69 35 5e e7 bb 4f 59 92 fc 23 2f 36 f1 fe 53 41 0b 7f fb 69 fc 50 a4 9b f3 26 2d 0f 59 fc 7a 9f ee b3 74 9f b8 ab 2c 5f 7f 59 f2 87 ee ae 74 71 e9 55 fe 52 3d c3 bf 97 df 8a d5 96 ff cc f3 dd fd 64 c9 cb bb cf 45 7c b8 c7 ff 5b 4a 3f 0f f1 66 93 ee 1f ee bd e5 2e 2e 1e d2 3d fa 72 c8 cb f4 98 e6 fb fb 22 c9 e2 63 fa 94 2c 9f d3 cd f1 f1 1e 77 1c 95 42 b5 eb 9f 59 72 3c 26 85 5b 1e e2 35 86 e2 7a e3 60 92 ec 9c ff 91 ee 0e 79 71 8c f7 c7 e5 b7 52 91 3d 22 5a 9c c1 12 cf 88 0e 10 42 18 88 10 b2 b4 3c ba e5 f1 35 4b dc e3 eb 21 41 10 f6 c9 1b 21 d6 fd 2a 41 63 90 8c e8 8f 78 8b da 39 6b 9b 13 db e0 cf 1e d3 63 42 1e 26 fc 91 d8 3b da 88 f3 ad d0 0c fa 79 79 43 0c 32 1d 71 3e 48 f7 13 67 e2 c4 a7 63 be 14 7e 71 2c ce 68 d0 dd 32 fd 27 06 bc 42 ad a0 b6 d1 93 66 1c f5 55 fe ef 3a 8b cb f2 db df dc e0 b2 9f 3f af f3 cc bd f9 fb 95 18 6f 93 16 c9 9a 70 13 6a e6 b4 db 2f f5 4f 2f 1a b5 46 86 7d 4a 8a 63 ba 8e 33 37 ce d2 87 fd fd 31 af 79 7e e2 1d 18 fd 10 11 92 2c 3b ab 80 78 ef 28 35 da 46 8a 92 e9 94 65 e5 ba 48 92 bd 03 60 8f d0 42 91 1f e1 93 b3 cc 68 74 24 26 3e 78 b1 fc 96 7e 5f 2c c6 0b b1 d4 84 95 5a 4c c6 53 f4 67 56 17 45 8b 0e 79 20 14 f7 58 f1 79 30 0e f0 9f aa 38 7a e0 93 07 b0 f8 82 95 9e 45 55 b9 59 28 61 30 67 65 a6 53 09 01 f4 40 45 60 c6 4a 47 73 a9 7d f4 40 6d 7f ca 4b d7 14 08 65 0a 44 ac 4c 28 13 20 d4 11 20 64 a5 03 b9 ff 81 ae ff 01 2b ed d7 fd f7 e5 fe 57 c3 24 f7 7f a2 eb 3f 1f 2e b9 fb 55 ef 7f bb 4b 36 69 ec 7c dc a5 7b b6 02 39 e1 1c f1 e7 dd 19 40 79 29 2d d9 03 17 ec c6 21 b8 46 37 26 41 35 6c f8 04 15 eb c6 2a a8 42 37 6e 41 15 6c 18 06 15 eb c6 33 a8 42 37 b6 41 15 6c 38 07 15 eb c6 3c 78 6c da f8 47 cb 40 5e b2 13 f8 a7 dc 59 f2 0f 2e d8 8d 7f 70 8d 6e fc 83 6a d8 f0 0f 2a d6 8d 7f Data Ascii: (+<U1]CRx=c#vm')QKJI&^$HQ53w5=-@"H Do$"%Sp>1m{LO%,yq&h9x<O
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxContent-Type: text/cssLast-Modified: Thu, 19 May 2022 17:44:26 GMTETag: W/"628681fa-3319"Expires: Fri, 03 Jun 2022 19:57:20 GMTCache-Control: max-age=1209600X-Host: blu86.sf2p.intern.weebly.netContent-Encoding: gzipVia: 1.1 varnish, 1.1 varnishContent-Length: 1640Accept-Ranges: bytesDate: Fri, 27 May 2022 12:31:06 GMTAge: 578026Connection: keep-aliveX-Served-By: cache-sjc10031-SJC, cache-mxp6937-MXPX-Cache: HIT, HITX-Cache-Hits: 1, 1479X-Timer: S1653654667.652356,VS0,VE0Vary: Accept-EncodingAccess-Control-Allow-Origin: Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 5a cb 72 ea 38 10 dd cf 57 64 c8 e6 a6 2a 24 d8 10 02 a6 a6 66 fe 61 b6 b3 91 6d 01 2a 6c 8b b1 45 08 37 95 7f 1f c9 f2 83 47 4b 6a 1b d7 5d 4d 56 29 bb cf e9 a3 3e 46 ef bf d6 3c 13 e3 35 89 e8 57 f5 5f ca 92 53 30 3a 16 3c 62 24 19 ad 8a 3c 0a 0e 79 f2 e3 f5 35 8a 33 ff 85 c6 4c a4 a7 82 09 fa 12 f1 f4 55 61 8a d7 e3 df 65 f0 6b 05 7a a1 5c fc 29 8a 3f bc f9 9b bf 5c f8 fe 7c be 98 2f 9e 06 63 7a 64 74 cd 3e 9f 1e d6 3c 4f 89 f8 31 a2 69 48 e3 98 c6 63 be a7 99 38 ed e9 e8 e9 b9 6b 9e 23 5f af 6f 25 37 29 d4 eb 1e ac 42 d8 48 45 7e a0 3d e5 16 1f 9b db b2 54 2f db 04 32 6a f4 b4 2a 6d 3d 52 b6 d9 8a 20 53 6f 12 fd a8 10 a7 84 56 4f be 5f 8e 2a e3 58 33 8c e3 9c 85 61 28 df 86 54 72 d1 af 48 c6 cb d2 06 a3 7f e8 7c 12 8d ea 68 a9 6f bc cf 79 7c 88 44 47 64 15 1d f1 84 e7 0f 9d 72 af 4a 4c f0 b8 9e bc bf 93 c9 15 5f f1 ef 81 e4 d4 40 f8 0c c5 c2 a1 5f 21 89 76 9b 9c 1f b2 78 dc 3b 5f 40 d6 82 e6 1d b2 6a 80 b1 c1 e5 df 95 80 94 b0 04 2c d4 d4 66 12 02 65 31 c8 82 ae b5 4e e7 d3 70 4a 31 c5 52 64 88 12 a9 30 c0 94 6e 79 d0 86 b4 c1 a6 06 82 66 a8 4e 34 e4 7c 07 16 67 62 33 04 89 b4 98 e2 60 68 8c 09 df 96 cb 05 a6 60 35 21 a2 5c 75 28 64 50 e7 7c 68 93 2e 01 a6 06 c3 46 25 2c da e5 e3 84 ae 05 58 af d8 ea 15 1a 6c b3 cb 49 52 37 60 32 99 4f e3 08 55 c1 96 13 53 be 36 1a f0 ad 57 56 bc 75 d7 18 53 e3 6d ee e5 e5 80 06 15 8f 22 ec c3 a0 dd fe d9 58 da 36 4c 26 8b 59 87 52 96 a4 f8 2a 96 e1 d0 80 d5 2b 6f 57 0f cf 40 e6 02 18 4d 04 4b b7 70 db e7 c0 39 8d 33 e0 fb fe e6 d0 e5 1a e0 97 d6 d1 20 c8 9a 85 dd 9a 7d 72 28 c0 02 cd 6c c6 20 50 16 5b 2c e8 5a 6b 1c cf c2 e9 12 53 28 45 86 28 90 0a 03 0c e9 96 07 6d 47 1b 6c 6a 20 68 06 cb 0a 41 36 39 49 c1 ea bc db 1c c1 42 2d b6 b8 28 9a 69 c5 fa dd 5f 86 98 9a 35 8c 88 92 35 b1 d0 c4 a2 7b 46 b4 55 57 08 53 a3 41 bf 12 96 ed e4 0a 2e 03 0b e6 db ec 42 22 2d 6e 39 18 1a b3 16 0b 12 a2 26 cd 35 21 a2 66 75 28 64 55 e7 7c 68 a7 2e 01 a6 06 c3 bd 1c 93 b1 39 2d e0 e1 7b 69 ed ea 90 50 5b 7f e7 a0 a8 a5 47 91 ef f9 ef a8 ce a8 66 c4 f4 45 75 2c e0 56 8f 8c f8 3e f0 12 61 6a 34 e8 57 5e c0 03 c4 9b cd 29 37 c8 e2 91 19 dc 08 f5 e7 6f be 8f a9 95 e4 42 d4 47 46 41 13 b9 2e 59 d0 5e 34 b1 c6 c6 41 2e 88 43 1a 26 e0 Data Ascii: Zr8Wd$fam*lE7GKj]MV)>F<5W_S0:<b$<y53LUaekz\)?\\|/czdt><O1iH
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxContent-Type: application/javascriptLast-Modified: Thu, 19 May 2022 17:43:17 GMTETag: "628681b5-2c075"Expires: Fri, 03 Jun 2022 19:57:18 GMTCache-Control: max-age=1209600X-Host: grn87.sf2p.intern.weebly.netContent-Encoding: gzipVia: 1.1 varnish, 1.1 varnishContent-Length: 32604Accept-Ranges: bytesDate: Fri, 27 May 2022 12:31:06 GMTAge: 578028Connection: keep-aliveX-Served-By: cache-sjc10043-SJC, cache-mxp6932-MXPX-Cache: HIT, HITX-Cache-Hits: 1, 22X-Timer: S1653654667.652116,VS0,VE0Vary: Accept-EncodingAccess-Control-Allow-Origin: *Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd db 76 1b 49 92 20 f8 dc fd 15 51 d5 d5 25 e5 94 88 14 25 e5 4d 95 95 35 bc 49 a2 44 52 4c 82 94 5a 39 9a c1 71 00 0e 20 c4 40 04 32 2e a4 90 6a 9d d3 2f fb 05 bb 2f f3 38 67 1f f6 cc 43 bf cd 1f e4 9f f4 97 ac dd dc c3 03 f0 40 04 40 68 67 cf 51 26 23 02 e6 e6 e6 ee e6 e6 66 e6 e6 e6 ff 78 1b c6 c3 e4 b6 d3 7b 1b fc 2d 90 e7 b7 5a f7 a3 f9 d2 fb bf fe 6b f0 e9 f3 5f ff b1 f7 b6 33 d6 79 37 cc f5 89 8a c7 85 1a eb ab 8b 13 00 1e 15 f1 20 0f 93 f8 7e 04 9f bf fa f4 8f ff 90 ea bc 48 e3 e0 de d7 5f ab 2c d3 79 b6 93 e5 6a 1c c6 e3 ce 2d e1 eb c4 3a ff fa 43 f6 35 82 7f fd cf f8 ff 7f fe 3a cb a3 ce 87 ec ef fd 22 8c 86 97 e1 54 ff 6d f7 d1 e3 27 7f be d7 49 f5 2c 52 03 7d ff 1e c3 dd 7b 10 50 25 7f fd c7 cf 48 4e 1e 85 7f b3 b5 67 5f 7d 92 8a b3 bf d2 af 99 50 0a 24 de d3 f1 3d 6a c0 28 8f fe 86 3f c1 9f fb b6 e4 57 01 10 7d a3 d2 60 e4 b6 26 a3 cf f4 3d 87 ef 79 94 fd 97 ec bf 62 5f 64 7f 95 cf 0a 3e ef a5 a9 9a 77 66 69 92 27 f9 7c a6 3b 59 14 0e 74 67 a0 a2 e8 be 4a c7 c5 54 c7 79 f6 20 d8 fd 0a cb 8c 92 34 b8 8f 05 43 28 f8 f0 af f0 e7 c7 40 75 22 1d 8f f3 09 bc fd e5 2f 5c e3 3f 50 75 9d 6c 16 85 f9 fd 7b 9f 3e dd fb 4b f8 97 7b 9f 3f df fb aa f3 21 09 e3 fb ea bf 84 ff 95 d0 7d 86 ff e0 9f 34 3a 0f fe 0e 85 4c 7f 7d fd df de bf cf fe d3 fd ce 5f fe fe 15 3e fc e9 eb 07 c1 bd 3f ed de fb 2a 78 4a e4 7f 7e f0 8f ff 00 0d 82 7a 5e 76 5f 9f 75 66 2a cd a0 8f 3f bd ff 63 3e d1 53 dd 19 ea 5c 85 51 f6 fe 8f 4f df ff f1 d0 3c 3f 30 bf 66 45 1f 1a ab 22 fa b9 6b 5f ec ef 83 89 1e 5c 27 45 4e bf 1f d8 17 fb 7b aa d5 f0 2c b9 a5 9f 2f e0 39 a0 17 fb 73 5f 0d ae 2f 93 fd 28 19 13 c4 3e bc 06 79 12 f0 87 92 88 89 4a 35 53 c0 4f 0f 4a e2 b3 41 1a ce 70 0c a5 01 ce bb 85 fa 35 9f d3 af 3f e3 5f fc aa a7 d0 73 b9 ce 3a 3a d2 34 6a 9d 41 92 5c 87 7a 27 99 e5 3b d0 80 ce 30 cc 06 91 02 de 4c a9 e0 e5 24 cc 82 5b dd 47 2e 0b 8a 4c 67 c1 54 a5 d7 3a 07 3e 0f 54 3c 0c f2 14 08 c7 97 5c 0f 26 71 02 d4 87 80 3c 78 3d 23 08 40 18 24 a3 20 27 24 61 14 05 50 4b 30 4f 0a f3 03 f0 4f c0 f5 03 f7 e8 8f 03 0d 3f 23 fb e4 93 24 d3 41 ac f5 50 0f b1 57 d2 02 46 7e a2 0d 21 1d e8 4b 20 27 9f a8 3c c8 92 a9 0e 80 31 87 c5 20 47 e2 e6 41 9c Data Ascii: vI Q%%M5IDRLZ9q @2.j//8gC@@hgQ&#fx{-Zk_3y7 ~H_,y
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxContent-Type: application/javascriptLast-Modified: Thu, 19 May 2022 17:44:49 GMTETag: "62868211-8250f"Expires: Fri, 03 Jun 2022 19:57:19 GMTCache-Control: max-age=1209600X-Host: blu94.sf2p.intern.weebly.netContent-Encoding: gzipVia: 1.1 varnish, 1.1 varnishContent-Length: 158975Accept-Ranges: bytesDate: Fri, 27 May 2022 12:31:07 GMTAge: 578028Connection: keep-aliveX-Served-By: cache-sjc10033-SJC, cache-mxp6962-MXPX-Cache: HIT, HITX-Cache-Hits: 1, 5X-Timer: S1653654667.045205,VS0,VE0Vary: Accept-EncodingAccess-Control-Allow-Origin: Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 7b 77 db 46 f2 28 f8 ff 7e 0a 09 e3 91 01 13 a2 44 d9 71 62 d0 08 af fc 4a 3c 63 c5 1e 4b 1e 27 a1 18 2e 44 36 25 d8 14 c0 00 a0 65 45 e4 7e f6 ad 47 3f 01 50 b6 e7 37 77 cf 3d 67 f3 10 81 46 3f aa bb ab eb d5 d5 d5 fe 6c 99 4d aa 34 cf 7c 11 dc 7c 4a 8a ad 2a be 59 f7 55 e2 56 e6 17 c1 4d 3a f3 ab 61 31 0a 0a 51 2d 8b 6c 0b 9f bb e2 f3 22 2f aa b2 8f 45 d2 18 93 e2 1b 99 16 dd ac c3 74 1a 15 e1 3c 4f a6 62 1a cd 92 79 29 d6 7d 81 c5 26 c9 7c ee a7 aa 74 98 86 e6 39 0b fa 69 97 8b c4 55 b1 14 7d d9 9c ce b1 ce ba 97 b1 e8 67 dd 49 5c c1 df 45 ec 5d 54 d5 a2 8c f6 f6 26 d3 ec a0 2b a6 69 75 79 5d a6 95 e8 4e f2 cb bd 0f e5 9e e7 e6 f2 3a 57 69 36 cd af ba 87 c7 c7 cf 4f 8e c7 4f 0e 8f 9f 77 3c ca b8 5a 41 4e d5 60 e6 ef 07 eb c0 1f 9a 91 09 2b 80 ee 46 28 40 e2 cc bf 7f d0 0b d6 61 3d 07 0e 46 d1 df f6 8b 58 7f a1 d1 93 ed be 17 e2 6c 7e bd 1d c7 cb 6c 2a 66 69 26 a6 3b 3b ce a7 ee 87 7f 2d 45 e1 e4 08 6e 24 54 6d 19 d7 ee 37 99 c8 83 0c 00 01 50 22 08 0b b7 41 df 74 a3 08 36 f5 21 4c a9 17 c3 cc ef 05 a3 30 8d 6d 24 71 00 89 e5 db f8 bd 79 5a ad 00 83 f4 5b 77 59 cd 63 e7 6d b5 6a a9 0e 3e cd 92 74 2e a6 27 f3 32 6e 49 5b ad 86 a3 7e 4b 7a 77 b1 2c 2f a0 1e 35 79 c2 6e 7a e6 34 3d fb 52 d3 2f aa 96 b6 31 b1 b5 71 fc 50 6b dd f3 fe 07 1d 7f d7 d6 fa bb 4d ad bf fb 52 eb a5 d3 7a f9 a5 d6 8f db 5a 3f de d4 fa f1 17 5b 17 d5 d3 3c ff 98 8a b8 15 bf e2 4c 5c 6d 3d 4b 2a 58 e4 98 f5 24 bd 14 7e d1 3d 97 4f 41 27 bb 77 f0 e0 de c3 7d fc af 27 ee 07 92 ca 78 80 b8 69 21 ca d8 eb 14 dd 2a 7f 77 f2 f4 b8 2a d2 ec dc 0f fa d3 7c b2 bc 14 59 05 4b 9f 5a 15 1d 0f 72 55 1d af bf e5 75 52 1b b2 c9 5c 24 45 03 36 7b 40 34 ec 00 b2 e7 85 bb b0 d2 ad f2 e7 2d 3d 53 94 93 5a 25 60 b3 b8 06 51 b7 5c cc d3 ca f7 fa 5e d0 9f e5 85 cf c3 b0 df 2f 1e 67 dd b9 c8 ce ab 8b 7e d1 e9 70 45 69 9c 01 ad ec 5f 5d c0 50 03 b1 9c 5c 24 c5 61 05 44 29 8e bd 2d 2f 48 e3 b4 5b 2e cf 4a ee 7a 0f a8 e6 0c 32 01 7c e2 f3 6b 20 d4 90 6b 3f d0 a4 d3 64 ac 64 33 40 71 f9 21 58 b7 4d 1c d3 10 20 b3 26 e9 ed f3 a7 87 6f 4e 9e fe 7c 38 7e f3 ee c9 ab 97 4f c7 ff 7c fe 9b 44 95 a1 d7 f6 d1 1b c5 de c3 57 b3 07 af 1f bd 3b 3e c4 7f 5e 1f 27 8f 26 2f 1e 1c Data Ascii: {wF(~DqbJ<cK'.D6%eE~G?P7w=gF?lM4\|\|JYUVM:a1Q-l"/Et<Oby)}&\|t9iU}
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxContent-Type: application/javascriptLast-Modified: Wed, 25 May 2022 14:22:37 GMTETag: "628e3bad-124fe"Expires: Thu, 09 Jun 2022 08:38:41 GMTCache-Control: max-age=1209600X-Host: blu11.sf2p.intern.weebly.netContent-Encoding: gzipVia: 1.1 varnish, 1.1 varnishContent-Length: 25752Accept-Ranges: bytesDate: Fri, 27 May 2022 12:31:07 GMTAge: 100346Connection: keep-aliveX-Served-By: cache-sjc10069-SJC, cache-mxp6962-MXPX-Cache: HIT, HITX-Cache-Hits: 1, 1953X-Timer: S1653654668.533048,VS0,VE0Vary: Accept-EncodingAccess-Control-Allow-Origin: *Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c4 7d 6b 7b da c8 92 f0 e7 33 bf c2 d6 d9 f5 48 43 1b 03 be 06 ac 78 6d 27 76 ee c9 24 76 9c 84 30 7e 1a 10 20 0c 08 24 71 b3 61 7f fb 5b 55 7d 51 4b e0 24 73 ce ee be e7 64 8c d4 97 ea ee ea ea ba 75 a9 db 6e 8d 07 8d d8 0f 06 1b 9e 5d 67 6d d6 74 1e 74 4a c3 1e b0 ae f3 e0 b7 ec cd 76 75 50 13 4f 75 7a 9a f0 70 c3 77 e3 f9 d0 0b 5a 1b a1 37 1a fb a1 e7 ba 96 aa 6a 6d 6d c9 c4 0a d6 e9 6e 6d f9 ce 43 e8 c5 e3 70 b0 e1 03 d4 cd 82 b3 84 0c ae 13 b9 4c 44 b8 7d 77 e0 4d 37 9e 87 61 10 da d6 39 1f 0c 82 78 a3 e5 0f 9a 1b fd a0 39 ee 79 1b bf 5b b9 41 ce fa dd 72 2a 71 27 0c a6 1b fd 7c 23 68 7a ae f5 f6 fd b3 eb 37 cf 6f df bd bf ba bd 78 7f fd ee 99 c5 fa 04 af e3 62 ef dd 07 6f 36 0c c2 38 2a 3f 2c 97 15 1c 45 b5 50 cb 37 78 af 67 77 f2 32 8b a9 fe db 3d 31 c4 c0 a5 82 c5 5a b5 57 ab c8 ae 36 ec e0 24 28 f7 9c 25 eb b0 a4 a6 c7 04 f6 96 b2 14 36 a9 32 a9 17 fc 97 b0 d5 82 31 63 e9 96 5b a8 b4 8e 9b f9 9e 37 68 c7 9d 4a 2b 97 73 1e 1a 76 b3 da aa e9 16 1a 4b c7 7e 28 96 ab ba cf 12 06 13 68 62 b2 71 31 90 57 9f de bf a3 a9 c0 07 e7 01 ff ba 80 07 5b 57 16 c5 da bd a0 ce 7b ee 85 4a b5 64 5b 71 c7 8f 2c c7 76 18 55 14 a5 f2 8f c0 d4 e4 d3 b2 07 7a 7e 07 c7 c5 c2 89 55 80 99 2b 0f 70 e6 25 2e 9e f1 d8 cb 0f c3 20 0e 30 21 1f 07 08 64 d3 44 8d f3 b0 b6 8c ab 3b 7e e7 cd 13 d2 8a 2e fc 81 1f 7b 36 f6 37 3f e1 bd b1 f7 be 65 3b ce 09 bd b7 bd f8 fa ea fc 62 dc eb 7d f5 78 68 3b 39 6b db ca b5 6c 23 ef 6d 30 88 3b 90 51 5c 93 87 dd 00 50 39 eb 2a 93 f1 22 18 87 11 e5 94 b3 e0 fc c1 38 f6 d6 e7 7d f2 1a c1 a0 29 f2 be 59 e5 01 f4 ea b7 65 e5 53 1c fa 83 f6 ea 68 df 8d fb 75 2f 5c 4d 3f 0b 82 9e c7 07 bf 88 9e 34 56 96 44 96 8d 99 bb 53 fd 3e 2e c0 ff f0 2f 6f c2 df 83 42 61 9b 7e f6 e0 ef 61 a1 f5 7d 5c 3c ac ef d1 df fd ef e3 52 a1 d0 d8 a6 9f 16 fe 2d 1d d1 4b 89 5e 0e 0a f4 72 00 2f 2d af 85 7f 5b 2d 4c 82 9f 56 6d a7 cd bc a8 c1 87 bc de f3 b0 d1 ef df ad ef 33 6c 6a 56 6c 7d 9f 1d b6 e0 e1 49 eb ff a0 13 6d 3e 64 c0 4e bc 41 cc fa 5e cc dd 07 eb 7b 1d e6 e7 3b fc 65 d6 f7 98 1e 63 7c 1c d0 e3 00 1f 5b f4 d8 c2 c7 90 1e 43 8b fd 6e fd 5e fe 1d 06 f1 3b 24 7e a7 44 f8 59 b2 d0 1b 56 f4 1a 18 8d 03 20 9b 88 a6 d5 79 Data Ascii: }k{3HCxm'v$v0~ $qa[U}QK$sdun]gmttJvuPOuzpwZ7jmmnmCpLD}wM7a9x9

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54599
Source: unknown	Network traffic detected: HTTP traffic on port 54599 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57477 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57477

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?_=1653687066398 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Google Chrome";v="92"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://document--1111011111.company.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: document--1111011111.company.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/main_style.css?1652461604 HTTP/1.1Host: document--1111011111.company.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: text/css,/;q=0.1Referer: http://document--1111011111.company.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en
Source: global traffic	HTTP traffic detected: GET /css/sites.css?buildTime=1651866883 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: text/css,/;q=0.1Referer: http://document--1111011111.company.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/old/fancybox.css?1651866883 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: text/css,/;q=0.1Referer: http://document--1111011111.company.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/social-icons.css?buildtime=1651866883 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: text/css,/;q=0.1Referer: http://document--1111011111.company.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/lang/en/stl.js?buildTime=1651866883& HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: /Referer: http://document--1111011111.company.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/site/main.js?buildTime=1651866883 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: /Referer: http://document--1111011111.company.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/theme/plugins.js?1565969634 HTTP/1.1Host: document--1111011111.company.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: /Referer: http://document--1111011111.company.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en
Source: global traffic	HTTP traffic detected: GET /files/theme/custom.js?1565969634 HTTP/1.1Host: document--1111011111.company.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: /Referer: http://document--1111011111.company.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en
Source: global traffic	HTTP traffic detected: GET /js/site/main-customer-accounts-site.js?buildTime=1651866883 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: /Referer: http://document--1111011111.company.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploads/1/4/1/8/141840186/1screenshot-2021-04-26-at-19-59-20-orig-orig-orig_orig.png HTTP/1.1Host: document--1111011111.company.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://document--1111011111.company.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en
Source: global traffic	HTTP traffic detected: GET /uploads/1/4/1/8/141840186/editor/2screenshot-2021-04-26-at-19-59-12-orig-orig.png?1652460803 HTTP/1.1Host: document--1111011111.company.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://document--1111011111.company.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en
Source: global traffic	HTTP traffic detected: GET /uploads/1/4/1/8/141840186/3pdp-orig-orig_orig.png HTTP/1.1Host: document--1111011111.company.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://document--1111011111.company.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en
Source: global traffic	HTTP traffic detected: GET /files/theme/fonts/627fbb5a-3bae-4cd9-b617-2f923e29d55e.woff2?1652461604 HTTP/1.1Host: document--1111011111.company.comConnection: keep-aliveOrigin: http://document--1111011111.company.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: /Referer: http://document--1111011111.company.com/files/main_style.css?1652461604Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en
Source: global traffic	HTTP traffic detected: GET /files/theme/fonts/2cd55546-ec00-4af9-aeca-4a3cd186da53.woff2?1652461604 HTTP/1.1Host: document--1111011111.company.comConnection: keep-aliveOrigin: http://document--1111011111.company.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: /Referer: http://document--1111011111.company.com/files/main_style.css?1652461604Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en
Source: global traffic	HTTP traffic detected: GET /files/theme/fonts/2e3f5cb9-101f-46cf-a7b3-dfaa58261e03.woff2?1652461604 HTTP/1.1Host: document--1111011111.company.comConnection: keep-aliveOrigin: http://document--1111011111.company.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: /Referer: http://document--1111011111.company.com/files/main_style.css?1652461604Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en
Source: global traffic	HTTP traffic detected: GET /js/wsnbn/snowday262.js HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: /Referer: http://document--1111011111.company.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/theme/fonts/f26faddb-86cc-4477-a253-1e1287684336.woff?1652461604 HTTP/1.1Host: document--1111011111.company.comConnection: keep-aliveOrigin: http://document--1111011111.company.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: /Referer: http://document--1111011111.company.com/files/main_style.css?1652461604Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_id.8a80=cdee608d-345c-4729-a8ec-f49d163ae349.1653687067.1.1653687067.1653687067.284b84f9-1721-4504-87d0-8d672f14f019; _snow_ses.8a80=*
Source: global traffic	HTTP traffic detected: GET /files/theme/fonts/1e9892c0-6927-4412-9874-1b82801ba47a.woff?1652461604 HTTP/1.1Host: document--1111011111.company.comConnection: keep-aliveOrigin: http://document--1111011111.company.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: /Referer: http://document--1111011111.company.com/files/main_style.css?1652461604Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_id.8a80=cdee608d-345c-4729-a8ec-f49d163ae349.1653687067.1.1653687067.1653687067.284b84f9-1721-4504-87d0-8d672f14f019; _snow_ses.8a80=*
Source: global traffic	HTTP traffic detected: GET /files/theme/fonts/fa19948e-5e38-4909-b31e-41acd170d6f2.woff?1652461604 HTTP/1.1Host: document--1111011111.company.comConnection: keep-aliveOrigin: http://document--1111011111.company.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: /Referer: http://document--1111011111.company.com/files/main_style.css?1652461604Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_id.8a80=cdee608d-345c-4729-a8ec-f49d163ae349.1653687067.1.1653687067.1653687067.284b84f9-1721-4504-87d0-8d672f14f019; _snow_ses.8a80=*
Source: global traffic	HTTP traffic detected: GET /files/theme/fonts/63a74598-733c-4d0c-bd91-b01bffcd6e69.ttf?1652461604 HTTP/1.1Host: document--1111011111.company.comConnection: keep-aliveOrigin: http://document--1111011111.company.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: /Referer: http://document--1111011111.company.com/files/main_style.css?1652461604Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_id.8a80=cdee608d-345c-4729-a8ec-f49d163ae349.1653687067.1.1653687067.1653687067.284b84f9-1721-4504-87d0-8d672f14f019; _snow_ses.8a80=*
Source: global traffic	HTTP traffic detected: GET /files/theme/fonts/46cf1067-688d-4aab-b0f7-bd942af6efd8.ttf?1652461604 HTTP/1.1Host: document--1111011111.company.comConnection: keep-aliveOrigin: http://document--1111011111.company.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: /Referer: http://document--1111011111.company.com/files/main_style.css?1652461604Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_id.8a80=cdee608d-345c-4729-a8ec-f49d163ae349.1653687067.1.1653687067.1653687067.284b84f9-1721-4504-87d0-8d672f14f019; _snow_ses.8a80=*
Source: global traffic	HTTP traffic detected: GET /files/theme/fonts/6de0ce4d-9278-467b-b96f-c1f5f0a4c375.ttf?1652461604 HTTP/1.1Host: document--1111011111.company.comConnection: keep-aliveOrigin: http://document--1111011111.company.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: /Referer: http://document--1111011111.company.com/files/main_style.css?1652461604Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_id.8a80=cdee608d-345c-4729-a8ec-f49d163ae349.1653687067.1.1653687067.1653687067.284b84f9-1721-4504-87d0-8d672f14f019; _snow_ses.8a80=*
Source: global traffic	HTTP traffic detected: GET /uploads/reseller/assets/356764895-favicon.ico HTTP/1.1Host: www.weebly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://document--1111011111.company.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploads/1/4/1/8/141840186/1screenshot-2021-04-26-at-19-59-20-orig-orig-orig_orig.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: document--1111011111.company.com
Source: global traffic	HTTP traffic detected: GET /uploads/1/4/1/8/141840186/editor/2screenshot-2021-04-26-at-19-59-12-orig-orig.png?1652460803 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: document--1111011111.company.com
Source: global traffic	HTTP traffic detected: GET /uploads/1/4/1/8/141840186/3pdp-orig-orig_orig.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: document--1111011111.company.com

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --enable-automation --single-argument http://document--1111011111.company.com/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1740,10588110985535776619,16488514565616499681,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1740,10588110985535776619,16488514565616499681,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	5 Non-Application Layer Protocol	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	6 Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	4 Ingress Tool Transfer	SIM Card Swap		Carrier Billing Fraud

Source	Detection	Scanner	Label	Link
http://document--1111011111.company.com/	0%	Virustotal		Browse
http://document--1111011111.company.com/	0%	Avira URL Cloud	safe
http://document--1111011111.company.com/	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Link
C:\Users\user\AppData\Local\Temp\7668_1088337683\_platform_specific\x86_64\pnacl_public_x86_64_ld_nexe	0%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\7668_1088337683\_platform_specific\x86_64\pnacl_public_x86_64_ld_nexe	0%	Metadefender	Browse
C:\Users\user\AppData\Local\Temp\7668_1088337683\_platform_specific\x86_64\pnacl_public_x86_64_ld_nexe	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\7668_1088337683\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_llc_nexe	0%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\7668_1088337683\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_llc_nexe	0%	Metadefender	Browse
C:\Users\user\AppData\Local\Temp\7668_1088337683\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_llc_nexe	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\7668_1088337683\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_sz_nexe	0%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\7668_1088337683\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_sz_nexe	0%	Metadefender	Browse
C:\Users\user\AppData\Local\Temp\7668_1088337683\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_sz_nexe	0%	ReversingLabs

Name	IP	Active	Malicious	Antivirus Detection	Reputation
gstaticadssl.l.google.com	142.250.185.99	true	false		high
company.com	35.71.162.193	true	false		high
accounts.google.com	142.250.185.141	true	false		high
www-google-analytics.l.google.com	142.250.185.174	true	false		high
sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com	52.25.131.159	true	false		high
weebly.map.fastly.net	151.101.1.46	true	false	0%, Virustotal, Browse	unknown
www.google.com	142.251.37.100	true	false		high
clients.l.google.com	142.250.185.174	true	false		high
weebly.com	74.115.50.110	true	false		high
document--1111011111.company.com	199.34.228.55	true	false		high
www.company.com	unknown	unknown	false		high
ec.editmysite.com	unknown	unknown	false		high
clients2.google.com	unknown	unknown	false		high
cdn2.editmysite.com	unknown	unknown	false		high
www.weebly.com	unknown	unknown	false		high

Name	Source	Malicious	Reputation
https://www.google.com/images/cleardot.gif	craw_window.js.1.dr	false	high
https://sandbox.google.com/payments/v4/js/integrator.js	manifest.json.1.dr, craw_window.js.1.dr	false	high
https://accounts.google.com/MergeSession	craw_window.js.1.dr	false	high
https://www.google.com	326a7714-6c2f-4802-b696-f5cb4eb8e13f.tmp.3.dr, 2cea7aa6-e8dc-403b-8fb0-13dc2cb9b77c.tmp.3.dr	false	high
https://accounts.google.com	326a7714-6c2f-4802-b696-f5cb4eb8e13f.tmp.3.dr, 2cea7aa6-e8dc-403b-8fb0-13dc2cb9b77c.tmp.3.dr	false	high
https://apis.google.com	326a7714-6c2f-4802-b696-f5cb4eb8e13f.tmp.3.dr, 2cea7aa6-e8dc-403b-8fb0-13dc2cb9b77c.tmp.3.dr	false	high
https://www.google.com/accounts/OAuthLogin?issueuberauth=1	craw_window.js.1.dr	false	high
https://www-googleapis-staging.sandbox.google.com	craw_background.js.1.dr, craw_window.js.1.dr	false	high
https://clients2.google.com	326a7714-6c2f-4802-b696-f5cb4eb8e13f.tmp.3.dr, 2cea7aa6-e8dc-403b-8fb0-13dc2cb9b77c.tmp.3.dr	false	high
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p	craw_background.js.1.dr, craw_window.js.1.dr	false	high
https://www.google.com/intl/en-US/chrome/blank.html	craw_background.js.1.dr	false	high
https://ogs.google.com	326a7714-6c2f-4802-b696-f5cb4eb8e13f.tmp.3.dr, 2cea7aa6-e8dc-403b-8fb0-13dc2cb9b77c.tmp.3.dr	false	high
http://document--1111011111.company.com/2	History Provider Cache.1.dr	false	high
https://payments.google.com/payments/v4/js/integrator.js	manifest.json.1.dr, craw_window.js.1.dr	false	high
https://chromium.googlesource.com/a/native_client/pnacl-llvm.git	pnacl_public_x86_64_libcrt_platform_a.1.dr, pnacl_public_x86_64_ld_nexe.1.dr	false	high
https://www.google.com/images/x2.gif	craw_window.js.1.dr	false	high
http://llvm.org/):	pnacl_public_x86_64_pnacl_sz_nexe.1.dr, pnacl_public_x86_64_pnacl_llc_nexe.1.dr	false	high
https://www.google.com/images/dot2.gif	craw_window.js.1.dr	false	high
https://code.google.com/p/nativeclient/issues/entry%s:	pnacl_public_x86_64_ld_nexe.1.dr	false	high
https://code.google.com/p/nativeclient/issues/entry	pnacl_public_x86_64_ld_nexe.1.dr	false	high
https://clients2.googleusercontent.com	326a7714-6c2f-4802-b696-f5cb4eb8e13f.tmp.3.dr, 2cea7aa6-e8dc-403b-8fb0-13dc2cb9b77c.tmp.3.dr	false	high
http://document--1111011111.company.com:80	67268b83-2658-4083-928c-f181c95a7676.tmp.1.dr, a2acd1b4-60a6-4573-adf6-b0849a814490.tmp.1.dr	false	high
https://www.google.com/	manifest.json.1.dr	false	high
https://chromium.googlesource.com/a/native_client/pnacl-clang.git	pnacl_public_x86_64_libcrt_platform_a.1.dr, pnacl_public_x86_64_ld_nexe.1.dr	false	high
https://clients2.google.com/service/update2/crx	manifest.json.1.dr, manifest.json0.1.dr	false	high

IP	Domain	Country	ASN	ASN Name	Malicious
74.115.50.110	weebly.com	United States	27647	WEEBLYUS	false
151.101.1.46	weebly.map.fastly.net	United States	54113	FASTLYUS	false
199.34.228.55	document--1111011111.company.com	United States	27647	WEEBLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.141	accounts.google.com	United States	15169	GOOGLEUS	false
52.25.131.159	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
142.251.37.100	www.google.com	United States	15169	GOOGLEUS	false

IP
192.168.2.1
127.0.0.1

Joe Sandbox Version:	34.0.0 Boulder Opal
Analysis ID:	635117
Start date and time: 27/05/202214:30:25	2022-05-27 14:30:25 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 4m 23s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://document--1111011111.company.com/
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@26/127@10/9
EGA Information:	Failed
HDC Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Adjust boot time Enable AMSI

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	105175
Entropy (8bit):	6.035164642099087
Encrypted:	false
SSDEEP:	1536:IGqu0XGM1CCHq42oiVfqchXJlAL3VYhLoAwgJyvjwfzhCsjUtjOjXMWw:I7XTCCHq44gMY3VYhtyUfdRgyjXs
MD5:	0BA35633508CFBDF33CB751D882F8CD1
SHA1:	ECE810FC9214D2FFB14069F95F43CF444486709A
SHA-256:	0ED3A61FA1F92BFA7BF2833206E10C4AF495F8BDF7783E0C29FE64274CDEB63F
SHA-512:	6737D55EB32A48ED0A95FD6C2AED7EAC44EDEA0F1BB01A03B938EE71D969253ADB92707174C3C2083E948B0E9C8A13954FCE70411F768C6783A0C135B6C17DD6
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"91.0.4472.77"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.65368706422438e+12,"network":1.653654666e+12,"ticks":171137676.0,"uncertainty":3041156.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABBQ7WxpM2gT7fMNkY5iRxkAAAAAAIAAAAAABBmAAAAAQAAIAAAALDWDwoLRYqp0NkiPsTxUN2QcOPsitaJrdacpo+ULE2PAAAAAA6AAAAAAgAAIAAAAOIeKQBWbQSCqXv1OSNS2lIZGHfAdJRwvbkapN4/FWvwMAAAAPz8I/w07KQb4Ut8ObsBGVgFwbuU88R362cCGZpNEtOEILJDMaKWOA4Y9ejBRTt5kEAAAADq8RkIezfgqGPgEaEMkhoGd9qhyBeyucXcRUPEI7mgYIxaDt8C5FJrjkEhV5EOUcUmR2SCzqYelImLnfOlbhRQ"},"policy":{"last_statistics_update":"13298160661097806"},"profile":{"info_cache":{"Default":{"active_time":1653687062.997598,"avatar_icon":"chrome

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 27, 2022 14:31:05.883194923 CEST	65210	53	192.168.2.3	1.1.1.1
May 27, 2022 14:31:05.884046078 CEST	53720	53	192.168.2.3	1.1.1.1
May 27, 2022 14:31:05.884350061 CEST	61873	53	192.168.2.3	1.1.1.1
May 27, 2022 14:31:05.900770903 CEST	53	65210	1.1.1.1	192.168.2.3
May 27, 2022 14:31:05.901628971 CEST	53	61873	1.1.1.1	192.168.2.3
May 27, 2022 14:31:05.911932945 CEST	53	53720	1.1.1.1	192.168.2.3
May 27, 2022 14:31:06.577806950 CEST	57760	53	192.168.2.3	1.1.1.1
May 27, 2022 14:31:06.596599102 CEST	53	57760	1.1.1.1	192.168.2.3
May 27, 2022 14:31:07.268548012 CEST	49313	53	192.168.2.3	1.1.1.1
May 27, 2022 14:31:07.307064056 CEST	53	49313	1.1.1.1	192.168.2.3
May 27, 2022 14:31:07.551073074 CEST	64492	53	192.168.2.3	1.1.1.1
May 27, 2022 14:31:07.568718910 CEST	53	64492	1.1.1.1	192.168.2.3
May 27, 2022 14:31:07.782273054 CEST	53010	53	192.168.2.3	1.1.1.1
May 27, 2022 14:31:07.814630032 CEST	53	53010	1.1.1.1	192.168.2.3
May 27, 2022 14:31:09.287587881 CEST	54203	53	192.168.2.3	1.1.1.1
May 27, 2022 14:31:09.305732965 CEST	53	54203	1.1.1.1	192.168.2.3
May 27, 2022 14:31:10.628652096 CEST	64626	53	192.168.2.3	1.1.1.1
May 27, 2022 14:31:10.648143053 CEST	53	64626	1.1.1.1	192.168.2.3
May 27, 2022 14:31:10.704484940 CEST	57267	53	192.168.2.3	1.1.1.1
May 27, 2022 14:31:10.732525110 CEST	53	57267	1.1.1.1	192.168.2.3

Timestamp	kBytes transferred	Direction	Data
May 27, 2022 14:31:07.252418041 CEST	1087	OUT	GET /files/theme/fonts/627fbb5a-3bae-4cd9-b617-2f923e29d55e.woff2?1652461604 HTTP/1.1 Host: document--1111011111.company.com Connection: keep-alive Origin: http://document--1111011111.company.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept: / Referer: http://document--1111011111.company.com/files/main_style.css?1652461604 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en
May 27, 2022 14:31:07.424474955 CEST	1205	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 May 2022 12:31:07 GMT Content-Type: font/woff2 Content-Length: 18761 Connection: keep-alive Last-Modified: Fri, 30 Aug 2019 08:25:04 GMT x-rgw-object-type: Normal ETag: "88f6742055e6eecac07f296cbd45214b" x-amz-request-id: tx000000000000000b987de-0061a70616-a9f4046-sfo1 X-Storage-Bucket: z663f X-Storage-Object: 663f4c799beff8f8dfa2ac950ce27ed4fcf8acc11ac5ec04f2bc6574a304730e X-Host: blu40.sf2p.intern.weebly.net Accept-Ranges: bytes Data Raw: 77 4f 46 32 00 01 00 00 00 00 49 48 00 10 00 00 00 00 bf d0 00 00 48 e9 00 02 19 99 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b bd 54 06 60 16 8b 60 00 81 4c 08 83 64 09 92 50 11 08 0a 81 d9 60 81 b4 64 01 36 02 24 03 86 78 0b 86 7c 00 04 20 05 ae 07 07 20 0c 84 2f 1b c7 a8 15 6c 5b d6 b2 db 81 16 fd fc ef 1e 56 b0 5b d8 c0 79 0c 1e b8 ea ce 15 d3 6d c6 21 a8 9b 95 08 39 eb ed a3 64 ff 7f 83 28 43 54 76 02 bc bb 80 b6 20 64 b6 ce 2a 54 7b 3d 6b ff 6e 18 0e ce b9 80 09 90 00 1b 00 f0 b5 e0 05 68 00 c0 d3 ef 00 71 61 8c df 63 06 00 e0 31 06 e0 30 30 7e 53 68 80 84 cb 6a 82 49 96 32 cb 03 30 00 f1 b2 10 00 24 80 15 ea df 65 84 aa 41 83 62 7c 01 12 20 01 92 84 00 be 00 00 00 2b 6c 5c 03 84 59 8a 8e 9e 50 f4 fb 65 3d f3 36 f8 77 c3 ac 80 84 64 12 06 55 22 4c 84 4b 45 d8 28 7b 2c d4 69 20 7b fa a2 67 80 9f 5b 3f 36 a2 37 58 e5 5b 05 ab a0 d6 c4 a2 d8 46 4e 60 84 01 18 80 70 46 92 46 05 77 62 e4 3f 31 12 03 ab ee 04 1b 4f bf 9e 8a 91 e8 29 3e af 2e 95 42 e8 0b 3a d5 22 3f 95 5d c6 b3 e5 80 0b 47 7d cf 2a ca ad f3 0e a6 cc 45 50 60 98 3b 8c df 9d ee 3a 01 4d c0 73 b7 4e 44 87 6d 7e 1f 9f c4 81 26 f0 28 5a 95 f5 ef 7a 3f ac 09 53 ce 7d 4f 14 09 cb 2e 0b bb 90 15 cc a0 f2 10 e3 3d ef c3 8f b9 4e 6d ec 0a e7 06 de 8c 33 16 fd 65 8b ea 4a ab d2 8f 01 dd d6 53 98 7a 60 01 05 16 79 18 7a 9e 27 01 75 ff ab d3 24 c3 c1 ff f6 11 8d 37 02 ce 00 24 e9 27 56 b0 4e ab b6 6e df 21 d9 6b bc 16 80 6f 02 c0 8d 02 7c a2 4d 0d eb 0f ae 7b 55 55 48 99 89 7e b7 6f bc 66 68 89 b8 01 8b aa d6 30 dd 56 da 17 6c e9 8a 7d d7 bd 39 bd ce 10 09 49 48 28 42 01 41 29 f2 b7 6d fe 6d 6c 90 e6 01 77 24 b9 7e a4 a1 08 d2 0a 87 f1 ef dd ca f6 73 71 6d d3 a6 da a2 8c 69 d7 3f d8 08 70 c6 fe 08 70 ee 5c 5c 57 b9 cc 10 13 87 28 44 97 28 17 dd 4b bc 13 ef 44 db 14 9d 49 d1 a4 68 d3 96 a2 f0 bd bf f7 f7 fa 64 42 fc 36 1a 85 77 fb 1e ea ca d0 da 10 84 79 a0 70 3c 74 b5 12 84 44 7e 59 7d 69 ea 4b 3b 31 9b 10 e6 49 be 73 e4 95 5e c7 1c 80 79 e8 e4 a4 63 6d c0 0b 38 39 b3 1f 5a 56 ff ff 4d 4d 5b 60 25 d1 29 84 a2 4e b1 72 d1 b9 68 5d bd fb ff 9f c1 bf 33 e0 70 3e c2 ee 7c 70 03 86 d8 80 d9 5d cb 18 52 81 50 1c 80 b4 0f 48 2a 72 75 7c c8 75 0c 95 ac ca ee 08 e5 5c ba 29 5d ca 9d 8e 4b 97 ee 4a 51 ff 71 61 9c 8a c8 02 e1 8e f5 ab d0 b7 3b 78 f3 67 ff d2 06 c3 52 e6 f8 4f 47 3d 72 af 02 e9 f6 b6 85 50 d0 dd f0 3f 2f 11 d6 fd 64 0d ce fb 95 d2 fb 49 11 91 20 21 88 38 29 6f f2 88 9a c9 98 bd c7 5b 7c 88 48 91 d0 77 11 09 21 94 12 c4 e5 30 5b 68 6f fb 8f a0 ba a9 12 12 8e 31 b5 37 ab 33 4d fb 49 47 3a 35 2e 50 c6 31 4e 40 Data Ascii: wOF2IHHT``LdP`d6$x\| /l[V[ym!9d(CTv dT{=knhqac100~ShjI20$eAb\| +l\YPe=6wdU"LKE({,i {g[?67X[FN`pFFwb?1O)>.B:"?]G}EP`;:MsNDm~&(Zz?S}O.=Nm3eJSz`yz'u$7$'VNn!ko\|M{UUH~ofh0Vl}9IH(BA)mmlw$~sqmi?pp\\W(D(KDIhdB6wyp<tD~Y}iK;1Is^ycm89ZVMM[`%)Nrh]3p>\|p]RPH*ru\|u\)]KJQqa;xgROG=rP?/dI !8)o[\|Hw!0[ho173MIG:5.P1N@
May 27, 2022 14:31:07.424504042 CEST	1206	IN	Data Raw: e1 c7 4c fe b7 e1 f2 32 f1 9f 7b 85 ef af a3 0a 94 10 99 e8 4e 2c cd d3 7d 6f 76 78 47 16 32 13 8c 27 3c d5 08 a1 1a e3 ba cf 1f f9 6a 15 01 a2 9d 32 76 09 79 bc ae ab 01 45 42 25 6c 7d Data Ascii: L2{N,}ovxG2'<j2vyEB%l}
May 27, 2022 14:31:07.424541950 CEST	1207	IN	Data Raw: c7 42 41 dc 2d 93 d7 d7 96 9c 58 8d b5 35 17 0e 9b a8 bf 72 bf 97 99 0d 28 43 67 da 3c 91 2f 76 28 01 2e 01 29 11 da 67 18 e1 0f f7 e3 6a 40 4c cf 50 7c 49 a4 52 da bd 11 50 bc d7 c3 b4 89 02 94 e6 3e 9a c4 74 57 74 3d 8d 7f 67 32 ec 37 f4 53 ca Data Ascii: BA-X5r(Cg</v(.)gj@LP\|IRP>tWt=g27S$fhsM5A=t9t_)JTLvLn<\|umS}B[yq&d^g}4o3w';jy7#((rX^4
May 27, 2022 14:31:07.424567938 CEST	1207	IN	Data Raw: 31 95 20 55 12 e3 1a 0b 94 1c 6b 89 b0 15 18 97 a5 f2 06 4e 0e 18 01 11 e3 03 a3 44 46 a6 73 72 33 9b 52 8b a8 18 29 13 4b 11 a1 50 7e 83 99 b2 3b 54 70 51 02 61 0c 1a 8f a6 cd 4b 1d 27 Data Ascii: 1 UkNDFsr3R)KP~;TpQaK'
May 27, 2022 14:31:07.424606085 CEST	1208	IN	Data Raw: b5 79 f2 0a 29 a4 a2 1d 59 6f 89 67 1b 19 8a 24 cc 8d d9 9b 29 fb 4c c1 d8 6f a9 e0 82 b7 cf 11 c7 f3 9a b2 3b d6 b4 e1 34 59 64 84 14 1c f5 4c 96 73 6c a6 f8 8a 8c 90 0b 64 85 06 84 35 0e 85 36 46 76 45 09 08 9d 07 e6 29 81 50 b3 f4 49 94 af 40 Data Ascii: y)Yog$)Lo;4YdLsld56FvE)PI@~q. }e1?sXpxM4$.3{7>~GC_~e,^1_Si%NDa->}IG~\|@fV^g I_q>};>hFF)X<w}
May 27, 2022 14:31:07.424634933 CEST	1209	IN	Data Raw: 6a b7 27 11 49 7c 5c e0 20 f1 c1 b9 29 81 30 64 a5 04 42 98 3b fa 1e 73 dc e4 ba c2 a1 eb d8 df 91 7d 78 35 97 34 73 42 ea 51 67 f2 a3 ea 72 b2 28 4b 2a d3 57 d8 48 4a 75 8e e2 91 4e 2f Data Ascii: j'I\|\ )0dB;s}x54sBQgr(K*WHJuN/
May 27, 2022 14:31:07.424673080 CEST	1210	IN	Data Raw: ba 05 3c 9e e3 c0 63 c9 84 04 17 bd 9b 79 71 67 3f 33 88 91 76 95 e3 75 66 66 b5 2a de 65 b5 5a e2 00 dc c3 02 68 b3 2d 2c 8a 9e 40 a8 27 6b 59 7d 2c ad d5 99 46 62 7b 32 d1 cc 75 b4 b3 25 1c 97 4b 6b b8 3b 1c cf 61 ff cd 8e b1 dc 5f c7 30 38 c3 Data Ascii: <cyqg?3vuff*eZh-,@'kY},Fb{2u%Kk;a_08B7`L%Dh7b`Q,k>R5NF"dgON0nzsqaw<hKmP)mA<rLjD[k7$0ZbHL9h_lvI#s>,0
May 27, 2022 14:31:07.424701929 CEST	1210	IN	Data Raw: 0e b8 b1 15 c9 8b 12 d4 bb 74 d5 b1 49 8e ce aa 5c b1 da 37 8f 51 4c dc 38 d2 74 5d b8 4a 22 58 93 24 db 8c b7 3a 80 c2 b2 c7 4d 04 0d fb d3 87 8c 32 18 04 2d ae 55 ea b2 8e 19 be f8 c7 Data Ascii: tI\7QL8t]J"X$:M2-U
May 27, 2022 14:31:07.424741030 CEST	1212	IN	Data Raw: ca 34 0f 91 7f d2 d7 13 76 8b fe 32 c2 0c 61 f5 9f 7b 4e 8e c8 93 4a 9c a6 92 52 5c 9a aa 10 10 f0 88 a5 84 cb 85 b0 aa 82 48 3e 43 69 94 4e 92 59 8a 01 53 9a a4 a8 8c 5f 8d 1f a5 14 ca 26 18 36 a5 45 8b 9e 9f cc 04 57 28 c2 c5 1e 37 8f ae b3 0b Data Ascii: 4v2a{NJR\H>CiNYS_&6EW(7QbsT.7LpRv)H2tWP }F+jY]>WWNUb%PO oF#DBh'!K0\|R%84`iu
May 27, 2022 14:31:07.424767017 CEST	1212	IN	Data Raw: d1 52 94 bc 2e 01 09 ed ec 52 1a ab 12 c1 f8 3a ea 0d e4 ea 17 1d ac 99 71 d4 3d 9a 80 df 15 73 9e 3a 46 0b 0d c3 c9 db eb c4 f8 d0 49 4d 82 48 75 81 ce cd 55 a3 0e a6 da 66 b7 36 da 52 Data Ascii: R.R:q=s:FIMHuUf6R
May 27, 2022 14:31:07.424804926 CEST	1213	IN	Data Raw: 4b 79 09 3f d3 82 50 1c dd 1b ce d4 d2 e6 4c b9 d3 32 36 7f 51 71 6c 1e d8 d0 dd 0e c2 78 e9 38 5f fc 5f 60 6d c1 be 66 ab c1 f2 d3 73 71 87 da 41 93 65 6d 40 84 32 95 8a fd db 86 02 46 f0 57 1e d6 3e 66 1d 59 cf f5 58 c6 ce b1 ba 4f 2e 5e 5d 51 Data Ascii: Ky?PL26Qqlx8__`mfsqAem@2FW>fYXO.^]QKOG!Gv$i{O}@Ye5c0V_;!LnO t#%;$Y*Wi3zEsoKy&$^j{ROn2K{0lI)-e'
May 27, 2022 14:31:07.885855913 CEST	1379	OUT	GET /files/theme/fonts/fa19948e-5e38-4909-b31e-41acd170d6f2.woff?1652461604 HTTP/1.1 Host: document--1111011111.company.com Connection: keep-alive Origin: http://document--1111011111.company.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept: / Referer: http://document--1111011111.company.com/files/main_style.css?1652461604 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_id.8a80=cdee608d-345c-4729-a8ec-f49d163ae349.1653687067.1.1653687067.1653687067.284b84f9-1721-4504-87d0-8d672f14f019; _snow_ses.8a80=*
May 27, 2022 14:31:08.057981968 CEST	1456	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 May 2022 12:31:07 GMT Content-Type: font/woff Content-Length: 24664 Connection: keep-alive Last-Modified: Wed, 11 Dec 2019 02:22:43 GMT ETag: "921592aa07f703ed55036aed49590184" x-amz-request-id: tx00000000000000002c3a3-00615f8e31-1ff7556-las X-Storage-Bucket: z304f X-Storage-Object: 304fdd345e780b7dbb6c6e6bc39d24e906e40ac2a618bc78ff81abc769f9b4ae X-Host: blu46.sf2p.intern.weebly.net Accept-Ranges: bytes Data Raw: 77 4f 46 46 00 01 00 00 00 00 60 57 00 10 00 00 00 00 cc 2c 00 01 00 00 00 00 59 6c 00 00 06 eb 00 00 0d 7f 00 00 00 00 00 00 00 00 47 50 4f 53 00 00 01 6c 00 00 06 c3 00 00 1e bc fe b3 03 03 4f 53 2f 32 00 00 08 30 00 00 00 57 00 00 00 60 65 96 fd c3 56 44 4d 58 00 00 08 88 00 00 03 78 00 00 05 e0 6e 58 75 d4 63 6d 61 70 00 00 0c 00 00 00 00 98 00 00 00 cc 90 e6 b0 e3 63 76 74 20 00 00 0c 98 00 00 00 4b 00 00 01 e4 06 18 05 69 66 70 67 6d 00 00 0c e4 00 00 05 2b 00 00 09 50 a1 cc 85 0f 67 61 73 70 00 00 12 10 00 00 00 08 00 00 00 08 ff ff 00 04 67 6c 79 66 00 00 12 18 00 00 38 79 00 00 78 d8 90 20 03 06 68 65 61 64 00 00 4a 94 00 00 00 36 00 00 00 36 f3 a6 d3 c2 68 68 65 61 00 00 4a cc 00 00 00 1f 00 00 00 24 07 68 07 bb 68 6d 74 78 00 00 4a ec 00 00 01 fc 00 00 03 78 cc f6 37 96 6c 6f 63 61 00 00 4c e8 00 00 02 5a 00 00 03 7c 00 31 2c bc 6d 61 78 70 00 00 4f 44 00 00 00 20 00 00 00 20 02 6e 01 01 6e 61 6d 65 00 00 4f 64 00 00 08 27 00 00 17 81 64 76 02 a6 70 6f 73 74 00 00 57 8c 00 00 00 13 00 00 00 20 ff 9f 00 32 70 72 65 70 00 00 57 a0 00 00 01 ca 00 00 02 2f e3 0f 5b e5 78 9c c5 59 59 6c 54 55 18 fe ba d2 96 a1 d3 76 28 14 4a b1 b4 43 4b 5b ba 30 85 d2 42 25 62 ca 22 9b b1 ec 82 06 c1 e5 41 c1 c6 18 9f e4 01 5e 1c 8d be 98 3e 10 4c 80 18 53 91 20 89 95 87 09 26 20 52 04 79 b0 c3 62 63 a0 26 a6 4f 93 98 34 26 4e 4c ec cb f1 3b ff 3d b7 33 d3 59 19 da e1 7e b9 e7 de 39 cb bf 7d ff 3d 4b 8b 2c 00 45 78 1d 97 90 f5 ce 6b ef 1f 43 01 6a 90 b7 7e e3 d6 6a 34 f6 6c d8 5d 0d cf 8e 6d 3d d5 58 d3 fb e2 f6 6a 3c bf ab 97 f5 5b 00 a5 a0 c7 59 cf 2c f3 cc 36 cf 1c f3 cc 35 cf 3c e4 bf fd c6 7b c7 50 27 e5 72 29 3d 52 76 4a b9 4e ca 1e 8a 13 99 09 4b 2d b5 90 cf 6c da 5c 66 e9 44 89 79 de e3 b3 45 6b 65 cb 1e f4 e1 03 7c c8 fb 24 3e c5 e7 c4 29 9c c1 57 f4 f2 32 ae 60 88 e5 19 f6 2e 83 13 f5 68 80 07 ed 58 8d 4e 74 61 0d ba 71 1c c3 f0 e3 2e e5 dd c7 03 3c 42 3e 8e 2a 3f 86 95 0f 7e de f7 d4 45 dc e7 fd 90 75 59 f0 aa 11 29 bd 52 fa 69 87 7e bf a1 c6 e4 f7 9f 52 0e 49 79 95 a5 53 8d b2 87 53 0d f0 f7 80 fc d6 e5 7e 15 9c ac f5 4a ad 17 d9 15 5e ed c9 82 6d 95 6e 74 d0 2a 50 62 37 32 7c 3d 0d 9d a2 77 94 9a 33 7b b5 65 58 9f b9 d4 98 f2 ab 80 1a 57 81 8c ea 1c 52 23 d4 3a 94 51 9d a3 f4 32 f3 7e ea d8 8e f2 ab cb 80 b6 a7 f2 ad 64 3e 6f 1d 96 9f ca c7 cc 1d d5 39 c4 18 07 39 83 cd e0 c5 f9 d0 ba ca 2c 70 a6 84 b1 61 8c 99 3c 89 8c d8 30 93 3a fa cd cb d3 f4 d3 d6 e9 e7 d7 a3 d9 b5 ef 20 57 b7 e9 ba 2a c2 72 28 90 99 1c b2 2e ce 06 43 8c 65 d0 78 34 a1 26 a2 7b 18 df f5 3d a8 7e 8d ee 11 21 6d 5c f7 4f aa 55 64 58 fe c9 98 a0 35 4a d7 d8 f7 54 1b e2 ca 8a d1 3f a2 dd cc ea cc 93 Data Ascii: wOFF`W,YlGPOSlOS/20W`eVDMXxnXucmapcvt Kifpgm+Pgaspglyf8yx headJ66hheaJ$hhmtxJx7locaLZ\|1,maxpOD nnameOd'dvpostW 2prepW/[xYYlTUv(JCK[0B%b"A^>LS & Rybc&O4&NL;=3Y~9}=K,ExkCj~j4l]m=Xj<[Y,65<{P'r)=RvJNK-l\fDyEke\|$>)W2`.hXNtaq.<B>?~EuY)Ri~RIySS~J^mntPb72\|=w3{eXWR#:Q2~d>o99,pa<0: W*r(.Cex4&{=~!m\OUdX5JT?
May 27, 2022 14:31:08.575661898 CEST	1969	OUT	GET /files/theme/fonts/6de0ce4d-9278-467b-b96f-c1f5f0a4c375.ttf?1652461604 HTTP/1.1 Host: document--1111011111.company.com Connection: keep-alive Origin: http://document--1111011111.company.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept: / Referer: http://document--1111011111.company.com/files/main_style.css?1652461604 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_id.8a80=cdee608d-345c-4729-a8ec-f49d163ae349.1653687067.1.1653687067.1653687067.284b84f9-1721-4504-87d0-8d672f14f019; _snow_ses.8a80=*
May 27, 2022 14:31:08.747270107 CEST	1971	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 May 2022 12:31:08 GMT Content-Type: font/ttf Content-Length: 52269 Connection: keep-alive Last-Modified: Wed, 11 Dec 2019 02:22:44 GMT x-rgw-object-type: Normal ETag: "86cbf50e12da0b519ced148acd8ba2b4" x-amz-request-id: tx000000000000000b60ec5-0061a70324-a9f4046-sfo1 X-Storage-Bucket: z7118 X-Storage-Object: 7118fcc9995d78a79c6a13eca290b043acd29399680aae376df5e95bc537fbd3 X-Host: blu38.sf2p.intern.weebly.net Accept-Ranges: bytes Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 50 4f 53 fe b3 03 03 00 00 01 0c 00 00 1e bc 4f 53 2f 32 65 96 fd c3 00 00 1f c8 00 00 00 60 56 44 4d 58 6e 58 75 d4 00 00 20 28 00 00 05 e0 63 6d 61 70 90 e6 b0 e3 00 00 26 08 00 00 00 cc 63 76 74 20 06 18 05 69 00 00 26 d4 00 00 01 e4 66 70 67 6d a1 cc 85 0f 00 00 28 b8 00 00 09 50 67 61 73 70 ff ff 00 04 00 00 32 08 00 00 00 08 67 6c 79 66 90 20 03 06 00 00 32 10 00 00 78 d8 68 65 61 64 f3 a6 d3 c2 00 00 aa e8 00 00 00 36 68 68 65 61 07 68 07 bb 00 00 ab 20 00 00 00 24 68 6d 74 78 cc f6 37 96 00 00 ab 44 00 00 03 78 6c 6f 63 61 00 31 2c bc 00 00 ae bc 00 00 03 7c 6d 61 78 70 02 6e 01 01 00 00 b2 38 00 00 00 20 6e 61 6d 65 64 76 02 a6 00 00 b2 58 00 00 17 81 70 6f 73 74 ff 9f 00 32 00 00 c9 dc 00 00 00 20 70 72 65 70 e3 0f 5b e5 00 00 c9 fc 00 00 02 2f 00 01 00 00 00 0a 00 64 00 ae 00 01 6c 61 74 6e 00 08 00 22 00 05 41 46 4b 20 00 2a 44 45 55 20 00 32 4e 4c 44 20 00 3a 52 4f 4d 20 00 42 54 52 4b 20 00 4a 00 00 ff ff 00 01 00 00 00 00 ff ff 00 01 00 01 00 00 ff ff 00 01 00 02 00 00 ff ff 00 01 00 03 00 00 ff ff 00 01 00 04 00 00 ff ff 00 01 00 05 00 06 6b 65 72 6e 00 26 6b 65 72 6e 00 2c 6b 65 72 6e 00 32 6b 65 72 6e 00 38 6b 65 72 6e 00 3e 6b 65 72 6e 00 44 00 00 00 01 00 00 00 00 00 01 00 00 00 00 00 01 00 00 00 00 00 01 00 00 00 00 00 01 00 00 00 00 00 01 00 00 00 01 00 04 00 09 00 00 00 02 00 0a 00 12 00 01 00 02 00 00 00 10 00 01 00 02 00 00 00 d2 00 01 00 2e 00 04 00 00 00 12 00 56 00 70 00 76 00 7c 00 76 00 82 00 8c 00 92 00 92 00 98 00 9e 00 a4 00 ae 00 b4 00 ba 00 c4 00 b4 00 9e 00 01 00 12 00 0f 00 27 00 29 00 32 00 33 00 37 00 38 00 39 00 3a 00 3c 00 7d 00 cf 00 d0 00 d1 00 d2 00 d3 00 d4 00 db 00 06 00 6d ff d0 00 cf ff b8 00 d0 ff b8 00 d2 ff ac 00 d3 ff ac 00 da ff d0 00 01 00 88 ff d6 00 01 00 88 ff 88 00 01 00 88 ff d0 00 02 00 88 ff 88 00 c3 ff e2 00 01 00 88 ff e0 00 01 00 88 ff c4 00 01 00 88 ff be 00 01 00 0f ff dc 00 02 00 0f ff a6 00 88 ff a6 00 01 00 0f ff a6 00 01 00 59 ff f4 00 02 00 0f ff a6 00 88 ff 88 00 01 00 0f ff 88 00 02 18 88 00 04 00 00 19 4c 1b 24 00 36 00 3a 00 00 ff e2 00 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff e2 00 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: GPOSOS/2e`VDMXnXu (cmap&cvt i&fpgm(Pgasp2glyf 2xhead6hheah $hmtx7Dxloca1,\|maxpn8 namedvXpost2 prep[/dlatn"AFK *DEU 2NLD :ROM BTRK Jkern&kern,kern2kern8kern>kernD.Vpv\|v')23789:<}mYL$6:<<
May 27, 2022 14:31:54.274786949 CEST	2594	OUT	Data Raw: 00 Data Ascii:
May 27, 2022 14:32:39.448178053 CEST	17479	OUT	Data Raw: 00 Data Ascii:

Timestamp	kBytes transferred	Direction	Data
May 27, 2022 14:31:07.252933025 CEST	1088	OUT	GET /files/theme/fonts/2cd55546-ec00-4af9-aeca-4a3cd186da53.woff2?1652461604 HTTP/1.1 Host: document--1111011111.company.com Connection: keep-alive Origin: http://document--1111011111.company.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept: / Referer: http://document--1111011111.company.com/files/main_style.css?1652461604 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en
May 27, 2022 14:31:07.423345089 CEST	1193	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 May 2022 12:31:07 GMT Content-Type: font/woff2 Content-Length: 16561 Connection: keep-alive Last-Modified: Fri, 30 Aug 2019 08:25:03 GMT ETag: "27958408325380d903e67d87768563b8" x-amz-request-id: tx000000000000009274c06-005eaa58ef-10e2649-las X-Storage-Bucket: z83f8 X-Storage-Object: 83f8b8932766826c1dd3a228b48f4072586ca09f781d64e2950d9f0e235c00a0 X-Host: blu46.sf2p.intern.weebly.net Accept-Ranges: bytes Data Raw: 77 4f 46 32 00 01 00 00 00 00 40 b0 00 10 00 00 00 00 9a 08 00 00 40 4c 00 02 19 99 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b bd 32 3f 4c 49 4e 4f 12 06 60 00 81 4c 08 83 62 09 95 22 11 08 0a 81 b2 08 81 94 7f 01 36 02 24 03 86 78 0b 86 7c 00 04 20 05 93 14 07 20 0c 84 4c 1b ec 86 15 6c 9b 56 b3 db 01 71 d3 4e ef 4c 01 37 46 6e b7 83 a2 20 fd ab 8b 0e d8 ee 56 a5 62 63 ac 91 fd ff 05 b2 31 1c 68 f5 0b 44 0b a6 52 51 6a da 10 46 a9 3d 06 ae 73 d7 15 14 38 01 80 65 2b a6 12 20 86 08 81 6b 29 c2 0b cd 09 e0 23 71 02 d7 dd 23 bf 71 40 ad 45 03 58 00 00 37 f0 02 14 e0 13 0b 00 00 f6 86 19 00 d0 00 11 30 5f 81 09 18 b7 88 d1 1f 00 aa b2 c4 80 f8 01 8f f5 00 4a 60 81 6d c3 1e 8a 46 47 cf f9 72 da 3b 20 e0 19 8d 34 02 5b 92 81 14 db 1b 19 12 f6 c6 ca 6e b3 ff ef 07 a2 53 cb 27 00 72 6b b9 f9 2e f1 ed 03 41 53 38 d3 ad c7 f4 f5 70 e9 f3 00 bf b6 fa 61 88 1e 06 26 a2 98 4a 1e cc bc 09 a6 0a 98 00 25 4a 49 83 b2 51 41 6c 5c bd d5 5d b0 7a f7 ec ff ad c0 5d bd 13 5d d7 a8 03 03 3b b6 91 a0 1a 43 f7 ee 83 58 64 49 04 0e 55 ab 44 27 c2 15 8d a8 90 f5 8d 8a 2b 3b 62 9b 33 6d c3 4f 90 60 5a e3 c9 d1 1e 24 ad a1 4c ca 4d 18 3f 37 ff 15 66 03 7a 56 72 63 b3 1e a1 e9 61 8f bf 2c a5 03 17 54 f0 bf 6b 3b 34 13 52 84 d2 56 91 d7 97 96 2e 2d 61 96 cc 7e 42 4f f5 73 88 bd 9c 95 31 7b af 62 7c f7 d1 15 ea c6 9f 30 b4 21 0d 6d 17 32 40 9a bb ff 32 a7 49 c1 99 5d fb 08 e8 55 00 90 a5 24 0e b0 db fa 18 ec 6f f2 2d 01 1d c2 bb e7 7f ea 4a 3b 48 95 67 15 f8 3a 85 1d 46 9f 15 5a 22 69 37 85 3c e3 9b f1 ba bd 2e 50 a2 f6 aa 32 f0 74 d5 5e 17 e6 a2 4a 05 58 38 8c f0 bd ed 7d c5 ab d1 13 5f 66 c0 4d 98 29 9a b7 ae 47 e3 9e 7a 53 b1 4b 63 69 9d e2 18 1a b0 c0 0e 10 f8 00 26 2c 87 6b aa ab 36 ab 59 da 3f 48 d2 2b 67 63 e7 02 97 14 70 a0 40 cd 28 95 97 f5 ff df d4 b4 c5 68 97 ab 90 a2 53 28 4a ca b9 64 57 be fb ff 0c f0 ef cc 20 7c 80 20 e7 03 a4 17 43 2a 70 b8 2b 19 b3 e1 88 50 04 40 7a 05 92 bb 56 08 b9 73 48 25 b1 eb 40 48 b9 b3 73 d3 ba 55 eb e3 be f1 ff ed f7 ab ce 47 df 07 4f 1c 42 b2 44 88 44 6f fd e2 33 e8 fc 87 a8 a4 3f e0 c9 3d 12 f1 86 0f e6 f3 f1 4d 62 da 54 4a d8 12 36 6d de 1a 89 0b ff bf 16 bf 3c a1 b6 f3 af 8f 81 c3 65 31 98 c4 56 96 75 8a a2 bb 61 e4 4c 61 dd 27 ab 78 cf 5f 4a 91 22 12 42 08 41 82 78 5f 4c 0e ab 9b da 7b 7e a4 aa 16 25 95 70 0d 67 0d 15 b1 d3 18 81 64 21 8b d8 f5 c5 fb 77 89 33 1b 05 da ff bf e3 5c 9e 02 68 60 49 d6 0a 77 25 bb e5 4b 96 8b 0d 7e 3f 54 fa a5 98 8b b9 b8 8d db 74 cd e1 f3 a1 53 c1 2d f7 ad 00 82 00 4d 95 5d 62 1e dc 6a 69 82 24 a1 8b 3f 70 d4 49 85 f0 0f 5b 0a 6f 97 64 67 5d e6 25 dd 45 af bb 8c 97 03 47 27 0e 90 d5 ff ca da fd fc b8 Data Ascii: wOF2@@L2?LINO`Lb"6$x\| LlVqNL7Fn Vbc1hDRQjF=s8e+ k)#q#q@EX70_J`mFGr; 4[nS'rk.AS8pa&J%JIQAl\]z]];CXdIUD'+;b3mO`Z$LM?7fzVrca,Tk;4RV.-a~BOs1{b\|0!m2@2I]U$o-J;Hg:FZ"i7<.P2t^JX8}_fM)GzSKci&,k6Y?H+gcp@(hS(JdW \| C*p+P@zVsH%@HsUGOBDDo3?=MbTJ6m<e1VuaLa'x_J"BAx_L{~%pgd!w3\h`Iw%K~?TtS-M]bji$?pI[odg]%EG'
May 27, 2022 14:31:07.423388958 CEST	1193	IN	Data Raw: 1a 26 e8 14 3b c5 bd 1c 2f e1 fe bd 49 4d 10 f6 ad b2 25 93 46 79 8f cc 20 f5 3e 3d 8c 58 c9 20 6d 1e a5 c8 6a 77 07 d0 fb f6 ce 81 48 9c 0f af 16 99 a0 cd f4 ec d4 e7 98 7f fd 52 ff d2 67 b3 9d f6 38 72 eb 57 c4 94 7c bf 0c 1c 3c 32 72 6a 1a 5a Data Ascii: &;/IM%Fy >=X mjwHRg8rW\|<2rjZ:~q
May 27, 2022 14:31:07.423427105 CEST	1194	IN	Data Raw: b8 ea 9a ff 49 d0 58 97 f7 fb 55 5f e7 dc ae b4 ab dc 81 93 18 f3 0b 6e 45 d6 fe 49 d2 b8 75 2b a3 0e d8 0c b0 d7 62 23 3c 8d d4 a7 03 91 2d 02 87 f3 1e 62 bf 12 9e 26 30 87 0a 07 90 3a 7f 13 60 5b b8 76 ab 2d 39 ac 0b 14 fe bf 01 08 c9 cb 52 ad Data Ascii: IXU_nEIu+b#<-b&0:`[v-9R(//N;9FivbPz;,[$"-CFU6q9!4Djd951kq%H:Sl+ Q#XI++X.rib*^}^Q\|
May 27, 2022 14:31:07.423455000 CEST	1195	IN	Data Raw: 94 ae 79 cd 0f e0 4c 7e fd 74 ab ea c5 cc e2 38 c0 60 b6 4e 81 28 c6 9c 93 2b 20 5c fe 98 99 be a6 2c 82 51 1e 1d 31 33 96 e7 cf 39 60 88 90 54 a0 b5 34 46 1b 69 17 1d a1 db b5 31 17 3c 0a bd c2 fa d0 03 7e d9 34 63 39 82 02 5a 4d 34 1d fe 73 70 Data Ascii: yL~t8`N(+ \,Q139`T4Fi1<~4c9ZM4sp`Vr\
May 27, 2022 14:31:07.423494101 CEST	1196	IN	Data Raw: aa 2e 6f 39 4b 33 db f9 cf af 6e b6 a7 dd ed 6a b6 91 36 f6 fc 3c ea 8c 7f 11 ba e3 fa c1 3f 02 cf 9d da cd 3a be b7 b9 0d 67 ee e1 ef fc 94 7a fd 7e f6 8f 2f e8 1f 5c 4a db eb fd 7c e0 65 02 64 a5 8b c9 f7 31 04 fa 20 23 bc 8d 77 1d 66 2b db 38 Data Ascii: .o9K3nj6<?:gz~/\J\|ed1 #wf+82\RG#v9v5b6A+h8{n5ZQ]Xk"K}"'W2G8n`0b@w^!(`'r!V0Fw3X5Id
May 27, 2022 14:31:07.423520088 CEST	1196	IN	Data Raw: 0c 3a 6f 22 ed 9a 97 85 41 2a 10 19 d8 69 50 b5 62 c1 de 99 54 a8 aa 84 0d 16 25 65 b5 6c 06 2d 46 9d 37 a2 b8 23 bd b2 91 d1 b7 84 56 d9 1d 58 89 91 76 2f 8a e1 b5 ec 69 0b eb 59 f6 0a 15 43 46 cf b6 57 d9 d3 a9 5f 8d fb 01 37 26 9c 5a 14 9f 2f Data Ascii: :o"A*iPbT%el-F7#VXv/iYCFW_7&Z/0,4,
May 27, 2022 14:31:07.423561096 CEST	1198	IN	Data Raw: b7 c3 c8 80 13 1e 89 0e 4c 32 ad ec 97 62 4c d8 43 81 a8 c1 3a 87 62 3a f7 ea 62 76 d3 eb 9c cd 75 67 47 0a eb 4d 94 9e 9a f1 20 7a 8b 5a c2 e8 15 81 d2 06 d9 18 5a 25 14 f7 64 29 f2 9a ba a2 33 7b 8f 56 18 7e e1 33 6b 7a 88 9a 6d 5f d9 fe db 51 Data Ascii: L2bLC:b:bvugGM zZZ%d)3{V~3kzm_Q-<JRErk/lW\fm[\@.[x6TWEk_\|<9BYWju.+:2GFk}h[7%]w'c\|*Xc\$y
May 27, 2022 14:31:07.423592091 CEST	1198	IN	Data Raw: b1 ab fb 8e 0a c2 85 f7 58 70 4a 84 ac d8 ea 6c c4 14 e2 bc 0b a3 7f 05 dd 7f 6c ed e8 89 ad 4c 39 d1 c1 71 7a dc 99 c8 91 45 ab 5c 1f 45 c3 3c 28 95 19 d6 8e 0c cc fa c8 f6 90 f1 bf 59 ea b0 d6 8d a9 52 67 df 97 db d5 ae d7 ca d6 5a c1 f9 4a 23 Data Ascii: XpJllL9qzE\E<(YRgZJ#o9kM
May 27, 2022 14:31:07.423630953 CEST	1199	IN	Data Raw: 8f d4 7c 91 b1 a9 4c 54 e7 f7 cf 77 1e 41 9d 00 6a 30 88 e6 ae 5a f3 f4 48 54 dc 57 02 95 b6 4d 13 e9 5e 66 39 40 04 d2 c0 b9 17 e0 02 5a c0 ea c8 2d 7d 4d ed 6a 3d a8 9e 70 68 08 5b cf b6 b5 be ba 05 bf 99 47 16 02 0e a4 20 71 a3 2b 7d 95 cb 17 Data Ascii: \|LTwAj0ZHTWM^f9@Z-}Mj=ph[G q+}\7-Z@>~anu$R^U[82[Z;a0J'-)~VV3cZm*KHXzHUnTP4#NO"}B^
May 27, 2022 14:31:07.423660994 CEST	1199	IN	Data Raw: 04 30 09 56 bb 41 a5 b2 e4 03 d4 ae 80 21 10 54 9c 38 38 7e f5 f8 8b fd 97 20 d3 79 ee a4 2d ce 96 b9 02 75 19 8b bd 8c 12 30 62 32 2a 07 80 97 c0 b2 17 e5 3a f0 f9 d7 6b 80 26 d4 86 06 a0 95 78 35 d7 fb 75 ab 88 28 50 79 2d 50 0a d4 92 ae e7 6e Data Ascii: 0VA!T88~ y-u0b2*:k&x5u(Py-Pn[ETdv_n
May 27, 2022 14:31:07.423698902 CEST	1201	IN	Data Raw: 68 b7 32 61 95 d4 6a d6 aa 4c c0 4c 71 ad ef 4d e9 24 96 dc 6e 99 fd 17 ce 4c 6a a4 1b 44 02 b2 d9 60 c1 97 db 24 b6 09 bc d8 e3 b1 e3 cb f2 a9 12 44 89 8d da 49 37 49 f9 bc 65 99 9d b0 fe c4 a6 98 3a 6d 6e cf cf b3 b6 f4 c1 c1 6e 2a 6b f7 e8 9f Data Ascii: h2ajLLqM$nLjD`$DI7Ie:mnn*k,YxoapYW\c]w_vSUCI>x3qN6cw=#!~US+Oz9A%Ghr9EH/.='CQP#?$`a-IAse
May 27, 2022 14:31:07.671128035 CEST	1347	OUT	POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 Host: document--1111011111.company.com Connection: keep-alive Content-Length: 83 Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Content-Type: application/json; charset=UTF-8 Origin: http://document--1111011111.company.com Referer: http://document--1111011111.company.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 3a 3a 67 65 74 41 63 63 6f 75 6e 74 44 65 74 61 69 6c 73 22 2c 22 70 61 72 61 6d 73 22 3a 5b 5d 2c 22 69 64 22 3a 30 7d Data Ascii: {"jsonrpc":"2.0","method":"CustomerAccounts::getAccountDetails","params":[],"id":0}
May 27, 2022 14:31:08.053121090 CEST	1454	IN	HTTP/1.1 200 OK Date: Fri, 27 May 2022 12:31:07 GMT Server: Apache Vary: X-W-SSL,User-Agent X-Host: grn91.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 348 Keep-Alive: timeout=10, max=53 Connection: Keep-Alive Content-Type: application/json Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 69 64 22 3a 30 2c 22 6d 65 74 68 6f 64 22 3a 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 3a 3a 67 65 74 41 63 63 6f 75 6e 74 44 65 74 61 69 6c 73 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 2c 22 65 76 65 6e 74 22 3a 22 22 2c 22 64 61 74 61 22 3a 7b 22 63 6f 64 65 22 3a 22 64 6f 6e 74 53 68 6f 77 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 2c 22 6d 65 73 73 61 67 65 5f 74 6c 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 7d 2c 22 74 6f 74 61 6c 22 3a 6e 75 6c 6c 2c 22 68 74 74 70 5f 72 65 73 70 6f 6e 73 65 5f 63 6f 64 65 22 3a 34 30 31 7d 7d Data Ascii: {"jsonrpc":"2.0","id":0,"method":"CustomerAccounts::getAccountDetails","result":{"success":false,"message":"Customer accounts restricted or not enabled.","event":"","data":{"code":"dontShow","message":"Customer accounts restricted or not enabled.","message_tl":"Customer accounts restricted or not enabled."},"total":null,"http_response_code":401}}
May 27, 2022 14:31:08.127785921 CEST	1839	OUT	GET /files/theme/fonts/46cf1067-688d-4aab-b0f7-bd942af6efd8.ttf?1652461604 HTTP/1.1 Host: document--1111011111.company.com Connection: keep-alive Origin: http://document--1111011111.company.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept: / Referer: http://document--1111011111.company.com/files/main_style.css?1652461604 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_id.8a80=cdee608d-345c-4729-a8ec-f49d163ae349.1653687067.1.1653687067.1653687067.284b84f9-1721-4504-87d0-8d672f14f019; _snow_ses.8a80=*
May 27, 2022 14:31:08.300400972 CEST	1905	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 May 2022 12:31:08 GMT Content-Type: font/ttf Content-Length: 39185 Connection: keep-alive Last-Modified: Wed, 11 Dec 2019 02:22:44 GMT x-rgw-object-type: Normal ETag: "98f6dacde86ebbaac7cc62b34a6e54cf" x-amz-request-id: tx000000000000000d26573-0061a7031d-a9f3e81-sfo1 X-Storage-Bucket: z6503 X-Storage-Object: 65032d5699bf3d4deb4313aa4d1bb8375053ac7e93dfb4bf631ce9261da20c2b X-Host: grn67.sf2p.intern.weebly.net Accept-Ranges: bytes Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 50 4f 53 ec ec 14 b3 00 00 01 0c 00 00 1e b2 4c 49 4e 4f 93 af c8 c2 00 00 1f c0 00 00 00 12 4f 53 2f 32 65 f1 01 d7 00 00 1f d4 00 00 00 60 63 6d 61 70 90 e6 b0 e3 00 00 20 34 00 00 00 cc 63 76 74 20 07 7a 07 d7 00 00 21 00 00 00 01 e2 66 70 67 6d 63 0e 9d d9 00 00 22 e4 00 00 0a a2 67 61 73 70 ff ff 00 04 00 00 2d 88 00 00 00 08 67 6c 79 66 b3 67 b4 92 00 00 2d 90 00 00 58 10 68 65 61 64 f4 0f af ac 00 00 85 a0 00 00 00 36 68 68 65 61 07 59 07 8a 00 00 85 d8 00 00 00 24 68 6d 74 78 d7 00 2c e7 00 00 85 fc 00 00 03 78 6c 6f 63 61 00 27 77 bc 00 00 89 74 00 00 03 7c 6d 61 78 70 03 33 0b 90 00 00 8c f0 00 00 00 20 6e 61 6d 65 3c 21 96 46 00 00 8d 10 00 00 09 94 70 6f 73 74 ff 9f 00 32 00 00 96 a4 00 00 00 20 70 72 65 70 66 9a cf 76 00 00 96 c4 00 00 02 4c 00 01 00 00 00 0a 00 64 00 ae 00 01 6c 61 74 6e 00 08 00 22 00 05 41 46 4b 20 00 2a 44 45 55 20 00 32 4e 4c 44 20 00 3a 52 4f 4d 20 00 42 54 52 4b 20 00 4a 00 00 ff ff 00 01 00 00 00 00 ff ff 00 01 00 01 00 00 ff ff 00 01 00 02 00 00 ff ff 00 01 00 03 00 00 ff ff 00 01 00 04 00 00 ff ff 00 01 00 05 00 06 6b 65 72 6e 00 26 6b 65 72 6e 00 2c 6b 65 72 6e 00 32 6b 65 72 6e 00 38 6b 65 72 6e 00 3e 6b 65 72 6e 00 44 00 00 00 01 00 00 00 00 00 01 00 00 00 00 00 01 00 00 00 00 00 01 00 00 00 00 00 01 00 00 00 00 00 01 00 00 00 01 00 04 00 09 00 00 00 02 00 0a 00 12 00 01 00 02 00 00 00 10 00 01 00 02 00 00 00 c8 00 01 00 2e 00 04 00 00 00 12 00 56 00 70 00 76 00 7c 00 76 00 76 00 82 00 88 00 88 00 8e 00 94 00 9a 00 a4 00 aa 00 b0 00 ba 00 aa 00 94 00 01 00 12 00 0f 00 27 00 29 00 32 00 33 00 37 00 38 00 39 00 3a 00 3c 00 7d 00 cf 00 d0 00 d1 00 d2 00 d3 00 d4 00 db 00 06 00 6d ff d0 00 cf ff b8 00 d0 ff b8 00 d2 ff b8 00 d3 ff b8 00 da ff d0 00 01 00 88 ff d6 00 01 00 88 ff 88 00 01 00 88 ff d0 00 01 00 88 ff e2 00 01 00 88 ff c4 00 01 00 88 ff be 00 01 00 0f ff dc 00 02 00 0f ff a6 00 88 ff a6 00 01 00 0f ff a6 00 01 00 59 ff f4 00 02 00 0f ff a6 00 88 ff 88 00 01 00 0f ff 88 00 02 18 88 00 04 00 00 19 4c 1b 24 00 36 00 3a 00 00 ff e2 00 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff e2 00 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: GPOSLINOOS/2e`cmap 4cvt z!fpgmc"gasp-glyfg-Xhead6hheaY$hmtx,xloca'wt\|maxp3 name<!Fpost2 prepfvLdlatn"AFK *DEU 2NLD :ROM BTRK Jkern&kern,kern2kern8kern>kernD.Vpv\|vv')23789:<}mYL$6:<<
May 27, 2022 14:31:53.476208925 CEST	2594	OUT	Data Raw: 00 Data Ascii:
May 27, 2022 14:32:38.646157980 CEST	17479	OUT	Data Raw: 00 Data Ascii:

Timestamp	kBytes transferred	Direction	Data
May 27, 2022 14:31:07.433981895 CEST	1217	OUT	GET /files/theme/fonts/2e3f5cb9-101f-46cf-a7b3-dfaa58261e03.woff2?1652461604 HTTP/1.1 Host: document--1111011111.company.com Connection: keep-alive Origin: http://document--1111011111.company.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept: / Referer: http://document--1111011111.company.com/files/main_style.css?1652461604 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en
May 27, 2022 14:31:07.604341984 CEST	1314	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 May 2022 12:31:07 GMT Content-Type: font/woff2 Content-Length: 18637 Connection: keep-alive Last-Modified: Fri, 30 Aug 2019 08:25:04 GMT x-rgw-object-type: Normal ETag: "b3aa7e2126c418e820b06924717c2ce9" x-amz-request-id: tx000000000000000c79046-0061a707ba-a9f1ce7-sfo1 X-Storage-Bucket: zcace X-Storage-Object: cace42567eefa76edc8b069bb9cdf9fda7486243911fa88188efb2efca387a4a X-Host: grn78.sf2p.intern.weebly.net Accept-Ranges: bytes Data Raw: 77 4f 46 32 00 01 00 00 00 00 48 cc 00 10 00 00 00 00 c2 a4 00 00 48 6d 00 02 19 99 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b bd 3c 06 60 16 8b 60 00 81 4c 08 83 64 09 92 50 11 08 0a 81 de 50 81 ba 34 01 36 02 24 03 86 78 0b 86 7c 00 04 20 05 af 01 07 20 0c 84 2f 1b f9 ab 25 ca b6 5d a5 f4 66 55 41 2c 8c 9f a2 0a b6 cd a4 db ed c8 f6 9b 2b 4e 96 28 b7 4f c1 ed c0 a8 eb ff 97 ca fe ff 23 c4 31 b6 03 9a 59 02 a2 0a ad d5 4c 19 ab 76 1e 43 71 94 f3 ce 65 66 07 bb 1b d0 0b 5e 01 54 40 05 38 5d 40 05 54 12 3c 62 25 53 96 9c ba 04 9a 40 13 94 40 22 a4 f6 03 40 03 b8 5f 36 04 00 00 b6 53 6b ea f7 52 50 a2 51 17 8d 01 00 70 03 00 81 d0 28 00 00 7c c7 05 01 e0 5e 66 b8 01 0b c0 f8 01 5e 16 c8 00 d7 0b 14 f8 05 00 00 00 00 ac b0 71 0d 62 96 d4 1e 3d 45 43 1e ea c7 d2 b7 ff 8e ff 5d 98 55 54 84 63 05 68 6c 62 5c b8 2e b2 ce 75 aa cb e3 23 6c 59 ef 00 cd ad 41 8f 58 dd ad 6e db ed d6 4d 0c 59 34 2b 46 a4 44 19 8d 2f 60 00 16 02 da 18 d1 8f 62 a1 ef a3 2f 58 d1 1f a9 be cc 9b d3 2f d9 92 2c 83 4c b2 65 e0 c4 61 b7 4d 53 97 92 a6 3f 19 20 3c cd 6d 0f 17 00 f4 ee 68 20 4b c0 c7 1e f7 ed e5 b2 19 7a ea 0f b6 77 1f 9b 84 e3 12 cb a3 24 c1 c0 a9 de ff ea 4c c9 0e bc f7 7f 5c 76 92 bb 5b 09 a7 e2 32 d6 92 29 ec b0 cb 20 ad c9 7a 80 54 c6 91 7d 52 e7 2b 39 25 70 3e 90 0a f2 a9 ec 32 c6 96 0b 2e 84 7a 67 15 e5 7f fe 17 28 ce 48 fa 30 cd cf 7f 4a 3a 01 c0 dc ad 13 d1 ff ea 16 33 e7 f6 47 f0 16 b1 2d 98 24 ad 8f f7 82 59 ed 17 1d a7 db 46 1d 38 5d 1f 39 8d af 50 5e 62 d3 0e 45 a3 3e 8d fe ed dd 1f e0 ae 3c e0 76 3e d0 ae 92 8f 1e 26 c6 1b 70 53 e1 25 55 b3 5b cc cf 4e 8e 6f 7b 2b 0a 35 82 47 54 48 05 f1 7d a7 24 21 a3 03 89 75 fb f8 01 54 42 15 fb c7 51 cf b6 f2 24 39 69 d2 85 5a 38 8c fe ff 2f cb a4 dd 0a 09 39 a7 41 8e 00 4a f2 1e ee 84 0c 90 01 fc f7 ff 5f d5 ff 56 75 a8 d7 dd d2 d6 9f d8 a5 74 a6 14 bb 94 27 ac 4e 75 f5 ec 9e 09 1b 46 72 08 01 65 14 a7 25 a7 0d 11 ed 1e ee 04 98 a9 8d 7c 8c 8c cd e0 02 68 f8 ff ff fb ff f1 19 0b 68 03 06 78 dd d6 3d 7d e7 58 f4 b2 dd e7 67 67 44 d7 0a 2c c5 c2 30 c0 fc de 69 49 53 2a 65 a5 41 ea 3f 2a de 39 d9 b7 4f d7 7d 49 47 a5 02 28 59 63 79 8b 2f ad a3 a0 10 02 6d 96 63 09 0c f5 1f 17 c9 57 27 b2 40 b8 13 ea 57 a1 6f c9 ff 3f f7 6a 33 44 b5 09 b7 33 37 e1 98 84 dd 84 bf 29 be 24 85 40 21 29 e6 8f f0 ff 62 7e 89 3e 37 e9 96 0e 58 31 b9 94 33 ce 88 53 57 b9 b1 27 50 55 03 f4 44 42 d8 41 66 ab c4 8b 59 28 74 9c 56 4b 25 6b ee 81 6c f6 be 97 50 90 c7 98 0e db 3b 21 9a 35 e7 94 00 dd 89 55 ae 1d 98 dc 5d bf 09 e9 90 0e e9 90 9a 60 8c 50 55 21 84 30 Data Ascii: wOF2HHm<``LdPP46$x\| /%]fUA,+N(O#1YLvCqef^T@8]@T<b%S@@"@_6SkRPQp(\|^f^qb=EC]UTchlb\.u#lYAXnMY4+FD/`b/X/,LeaMS? <mh Kzw$L\v[2) zT}R+9%p>2.zg(H0J:3G-$YF8]9P^bE><v>&pS%U[No{+5GTH}$!uTBQ$9iZ8/9AJ_Vut'NuFre%\|hhx=}XggD,0iISeA?9O}IG(Ycy/mcW'@Wo?j3D37)$@!)b~>7X13SW'PUDBAfY(tVK%klP;!5U]`PU!0
May 27, 2022 14:31:07.604384899 CEST	1314	IN	Data Raw: c6 eb a6 cf eb 64 79 fe ef 13 73 ee 5b 74 d5 45 99 aa 59 8c 8a 8a ac a3 46 3c 51 15 f1 cd Data Ascii: dys[tEYF<Q
May 27, 2022 14:31:07.604407072 CEST	1315	IN	Data Raw: a5 8c 5c 86 2e 06 0c e2 d8 c1 c1 a1 48 08 e1 78 1c a4 88 de 21 9b d5 4e ed ee e8 3a 15 03 0f 78 4b 90 25 58 32 69 d7 f9 bf 1f d3 e8 5f da f6 6c ad 26 36 50 c0 19 ea a0 90 bd f2 8b b9 7b b1 02 4a 5f 95 1f 85 dd c6 b8 0e c4 62 8b da 0f 3a 40 c4 47 Data Ascii: \.Hx!N:xK%X2i_l&6P{J_b:@Gv=A}!::]4no+D[[;iYpf[?DF3icYc\|#`XKQ0H,Qu7mD:`Ny=L[z5A ]
May 27, 2022 14:31:07.604422092 CEST	1315	IN	Data Raw: 45 86 95 8e b7 94 7c 15 2e 33 1a be 0d c8 b6 80 86 4a 63 92 bb 68 93 32 da 35 27 bf d8 64 Data Ascii: E\|.3Jch25'd
May 27, 2022 14:31:07.604441881 CEST	1316	IN	Data Raw: 2d 86 e2 65 e8 04 03 13 fd e2 5b f8 dc 13 49 5c 08 11 32 94 d1 0b 38 1d 8e d3 d6 7b b2 8e 84 af 88 22 2a 2e b1 ef 5b 63 6c cf 60 01 5e 9c b2 b7 28 5d 5e 38 fb a2 21 2e c0 f7 fe 49 4f ad c9 3d 09 ee e2 44 46 e9 22 0a e8 64 a7 2c 24 fa 8a 6d 85 b3 Data Ascii: -e[I\28{".[cl`^(]^8!.IO=DF"d,$m"]h"P=!tCooUoOv7"fG\T~6emGht~S$UIpY%&8w~gUH,(* ?o(D)*3}ma
May 27, 2022 14:31:07.604456902 CEST	1317	IN	Data Raw: 08 5e 83 29 06 6a 16 a4 07 b7 cd 86 4d 16 ed 4e 48 44 12 1f 30 48 44 6c 3b 31 05 11 3c 59 Data Ascii: ^)jMNHD0HDl;1<Y
May 27, 2022 14:31:07.604476929 CEST	1318	IN	Data Raw: 2d 83 1e e6 f7 e9 31 c5 63 a6 ab 1c 79 1d fb 2b 32 c3 01 2e 69 a6 9a 8c 1a d4 97 2a ca 51 ab 34 a9 f6 5d 50 46 12 49 97 b0 1e d2 bc e8 3a eb de 18 d9 b6 60 07 de 85 a9 d6 cd a4 c4 53 9f 59 c6 c8 ae 1a c7 e7 d4 cc bc ee f8 75 51 cb 25 e2 e0 09 16 Data Ascii: -1cy+2.iQ4]PFI:`SYuQ%.'0>:tf=S9{nw<pW8api$Z4$7SSudFp\|A1"Y3(Wl\|UH$N$$;>u,'==T6)`/v*;19-y/pS
May 27, 2022 14:31:07.604491949 CEST	1318	IN	Data Raw: 4f f8 a8 92 08 2e c2 b5 d1 67 62 4c 2d 49 55 ac d0 e1 2c 04 2c 3b 4c e5 4a 6b b0 dc 17 0a Data Ascii: O.gbL-IU,,;LJk
May 27, 2022 14:31:07.604513884 CEST	1319	IN	Data Raw: 4b 00 aa 85 6c de 24 f6 b0 a4 1e b4 ee d6 29 68 5b a8 0e 52 00 d6 44 d8 be bf 47 22 39 8d fa fa 61 fe a7 f2 11 84 6f e1 69 5b ee 58 ef 9a 4d 06 7b 20 80 40 04 ae 8b 25 de 8a a5 a4 cc 66 52 91 06 bf 22 df ff 2a 76 8e 9d 3d 88 9c d0 51 de c6 8a a3 Data Ascii: Kl$)h[RDG"9aoi[XM{ @%fR"v=QR5n@_"B]%mTx`y<aLe.%hl'T0PjYq"g"(FUZgi%I2/a?:!`'S
May 27, 2022 14:31:07.604528904 CEST	1319	IN	Data Raw: c3 18 32 32 06 47 3b 43 5f 0b 49 ed f9 11 69 43 07 94 d8 0a 1b 47 db 4f 17 04 83 88 8e 14 Data Ascii: 22G;C_IiCGO
May 27, 2022 14:31:07.604549885 CEST	1321	IN	Data Raw: 3e b1 87 35 8b f1 1a e7 c1 db fe 1e 45 c3 5d bb 83 78 1c b1 1e 33 9e e4 32 75 15 af 98 34 d3 16 0e c8 a8 7d 67 d5 15 2d 65 8c 4b 13 84 96 52 af db a4 b2 b5 e7 55 dc 68 3e 36 99 6e 57 25 b9 1a 0f b1 1a b9 89 5d 6e e6 46 6a ca bc ad ea af d3 e6 ba Data Ascii: >5E]x32u4}g-eKRUh>6nW%]nFjy(Q hK[!XsM\dYj/mKq1!A'BC&~C^94NVz*(k>cu+~ZTT=)WOHXf{w2<eu1%j+ss"{I:c[?T
May 27, 2022 14:31:07.867021084 CEST	1378	OUT	GET /files/theme/fonts/f26faddb-86cc-4477-a253-1e1287684336.woff?1652461604 HTTP/1.1 Host: document--1111011111.company.com Connection: keep-alive Origin: http://document--1111011111.company.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept: / Referer: http://document--1111011111.company.com/files/main_style.css?1652461604 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_id.8a80=cdee608d-345c-4729-a8ec-f49d163ae349.1653687067.1.1653687067.1653687067.284b84f9-1721-4504-87d0-8d672f14f019; _snow_ses.8a80=*
May 27, 2022 14:31:08.037210941 CEST	1387	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 May 2022 12:31:07 GMT Content-Type: font/woff Content-Length: 24866 Connection: keep-alive Last-Modified: Wed, 11 Dec 2019 02:22:43 GMT x-rgw-object-type: Normal ETag: "0f12c575e08f164252dbddaf87f03c35" x-amz-request-id: tx000000000000000cb1182-0061a70896-a9f6a62-sfo1 X-Storage-Bucket: ze0bc X-Storage-Object: e0bc8743cf211c699ebb439c59780abf7b40b543b28bd198f6f355bb109a7424 X-Host: grn64.sf2p.intern.weebly.net Accept-Ranges: bytes Data Raw: 77 4f 46 46 00 01 00 00 00 00 61 21 00 10 00 00 00 00 c9 2c 00 01 00 00 00 00 5a 38 00 00 06 e9 00 00 0d 78 00 00 00 00 00 00 00 00 47 50 4f 53 00 00 01 6c 00 00 06 ed 00 00 1e d4 00 a8 07 d1 4f 53 2f 32 00 00 08 5c 00 00 00 58 00 00 00 60 66 5b 02 eb 56 44 4d 58 00 00 08 b4 00 00 03 85 00 00 05 e0 6f 0e 76 94 63 6d 61 70 00 00 0c 3c 00 00 00 98 00 00 00 cc 90 e6 b0 e3 63 76 74 20 00 00 0c d4 00 00 00 55 00 00 01 e4 07 cc 08 a4 66 70 67 6d 00 00 0d 2c 00 00 05 2b 00 00 09 50 a1 cc 85 0f 67 61 73 70 00 00 12 58 00 00 00 08 00 00 00 08 ff ff 00 04 67 6c 79 66 00 00 12 60 00 00 39 0b 00 00 76 3c 5a 77 39 c4 68 65 61 64 00 00 4b 6c 00 00 00 36 00 00 00 36 f3 b9 d4 b9 68 68 65 61 00 00 4b a4 00 00 00 20 00 00 00 24 07 81 07 b4 68 6d 74 78 00 00 4b c4 00 00 02 12 00 00 03 78 de 7c 27 99 6c 6f 63 61 00 00 4d d8 00 00 02 56 00 00 03 7c 00 30 08 30 6d 61 78 70 00 00 50 30 00 00 00 20 00 00 00 20 02 6e 00 f1 6e 61 6d 65 00 00 50 50 00 00 08 06 00 00 17 07 3e 89 4d 67 70 6f 73 74 00 00 58 58 00 00 00 13 00 00 00 20 ff 9f 00 32 70 72 65 70 00 00 58 6c 00 00 01 ca 00 00 02 2f e3 0f 5b e5 78 9c c5 59 5b 6c 54 45 18 fe b6 37 da d2 76 db 2e 0b 85 52 2c 6d 69 69 4b 2f 6c 4b 69 01 89 98 72 91 4b 8d 85 0a 08 1a 04 2f 0f 0a 12 e3 a3 3c c0 8b ab 89 3e 98 3e 18 4c 84 68 ac 95 20 c1 6a c8 06 0d 88 94 8b c6 d8 52 6a 63 60 4d cc 86 40 63 4d a3 a1 21 91 97 f1 9b ff 9c b3 dd ed 5e ba bd 2d f3 65 66 ce ce fc 67 fe cb f7 9f 99 73 5a d8 00 a4 e3 25 9c 81 ed f5 17 df 3a 84 54 14 21 79 dd 86 2d 85 a8 68 5e df 56 08 57 cb d6 e6 42 ac 6a 7d 7a 5b 21 9e dc d1 ca f1 cd 80 52 d0 f7 19 bd cd ec 13 cc 3e d1 ec 93 cc 3e 19 29 af bd fc e6 21 94 4a bb 4c 5a 97 b4 8d d2 ae 95 b6 99 cb c9 9a 51 5b bd 6a 1a fb 04 da 9c 6b e8 44 b6 d9 ff c5 be 5e 6b 85 13 fb f1 36 8e c1 cd 7a 0c 1f a0 9d 38 8e 93 38 85 b3 38 87 ef 71 15 bf a0 0f 5e b6 e7 78 8f 13 76 94 a1 1c 2e d4 61 25 1a d1 84 55 58 8d 35 68 41 1b 8e a0 07 bd b8 41 e9 9b e8 c7 6d a4 e0 a0 ea 45 8f f2 a0 97 b5 8f f5 26 eb 2d 8e d9 e0 56 03 d2 ba a5 35 46 fe 94 b6 9b ed 65 35 4c 2b dd ea 02 af 06 f9 bb 9b bf 6d e8 54 23 6c ed ca cb 39 bb ea e0 7c 87 fc d6 ed 6e ce 59 a3 6e 19 75 23 21 cf ad 3d 9c bf 35 bf 04 0d b4 13 ca 47 4b e3 5c 1e 85 4e d1 eb a5 e6 f8 96 da 38 eb 33 8b f2 a9 5e 35 a8 86 99 29 f1 d4 d9 ad 06 a8 b5 3b ae 3a bd f4 32 fe 7e ea d8 7a f9 d4 c5 41 db 23 79 56 e2 9f b7 19 86 9f ca c3 cc f5 ea 1c 62 8c 47 b8 83 cd 60 e1 7e 68 94 5c 03 dc 29 61 da e0 63 26 fb 11 17 1b 66 52 47 bb 79 f1 28 fd b4 74 f6 f2 e9 d1 ec 5a 75 84 27 dd 74 95 bc 80 1c 1a 8c 4f 0e 19 85 bb 41 37 63 Data Ascii: wOFFa!,Z8xGPOSlOS/2\X`f[VDMXovcmap<cvt Ufpgm,+PgaspXglyf`9v<Zw9headKl66hheaK $hmtxKx\|'locaMV\|00maxpP0 nnamePP>MgpostXX 2prepXl/[xY[lTE7v.R,miiK/lKirK/<>>Lh jRjc`M@cM!^-efgsZ%:T!y-h^VWBj}z[!R>>)!JLZQ[jkD^k6z888q^xv.a%UX5hAAmE&-V5Fe5L+mT#l9\|nYnu#!=5GK\N83^5);:2~zA#yVbG`~h\)ac&fRGy(tZu'tOA7c
May 27, 2022 14:31:53.042365074 CEST	2594	OUT	Data Raw: 00 Data Ascii:
May 27, 2022 14:32:38.212104082 CEST	17479	OUT	Data Raw: 00 Data Ascii:

Timestamp	kBytes transferred	Direction	Data
May 27, 2022 14:31:08.058433056 CEST	1461	OUT	OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: ec.editmysite.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: http://document--1111011111.company.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Sec-Fetch-Mode: cors Referer: http://document--1111011111.company.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 27, 2022 14:31:08.247374058 CEST	1904	IN	HTTP/1.1 200 OK Date: Fri, 27 May 2022 12:31:08 GMT Content-Length: 0 Connection: keep-alive Server: nginx Access-Control-Allow-Origin: http://document--1111011111.company.com Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, SP-Anonymous Access-Control-Max-Age: 5
May 27, 2022 14:31:53.285710096 CEST	2594	OUT	Data Raw: 00 Data Ascii:
May 27, 2022 14:32:53.251540899 CEST	17501	OUT	Data Raw: 00 Data Ascii:

Timestamp	kBytes transferred	Direction	Data
May 27, 2022 14:31:08.456121922 CEST	1953	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: ec.editmysite.com Connection: keep-alive Content-Length: 1957 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: http://document--1111011111.company.com Referer: http://document--1111011111.company.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 27, 2022 14:31:08.456166029 CEST	1955	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 33 22 2c 22 64 61 74 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-3","data":[{"e":"pv","url":"http://document--1111011111.company.com/","page":"141840186:335021575587750902","tv":"js-2.6.2","tna":"_wn","aid":"_wn","p":"web","tz":"Amer
May 27, 2022 14:31:08.644964933 CEST	1970	IN	HTTP/1.1 200 OK Date: Fri, 27 May 2022 12:31:08 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 2 Connection: keep-alive Server: nginx Set-Cookie: sp=6f09e634-3f7a-4428-a215-09325d168236; Expires=Sat, 27 May 2023 12:31:08 GMT; Domain=; Path=/; Secure; SameSite=None P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" Access-Control-Allow-Origin: http://document--1111011111.company.com Access-Control-Allow-Credentials: true Data Raw: 6f 6b Data Ascii: ok
May 27, 2022 14:31:53.684416056 CEST	2594	OUT	Data Raw: 00 Data Ascii:
May 27, 2022 14:32:53.650530100 CEST	17501	OUT	Data Raw: 00 Data Ascii:

Timestamp	kBytes transferred	Direction	Data
May 27, 2022 14:31:09.483129025 CEST	2029	OUT	GET /uploads/reseller/assets/356764895-favicon.ico HTTP/1.1 Host: www.weebly.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://document--1111011111.company.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 27, 2022 14:31:09.655073881 CEST	2029	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 27 May 2022 12:31:09 GMT Content-Type: text/html Content-Length: 3739 Connection: keep-alive ETag: "61c39c46-e9b" X-Host: grn63.sf2p.intern.weebly.net X-W-DC: SFO
May 27, 2022 14:31:09.655122042 CEST	2030	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en"><head><title>404 - Page Not Found</title><meta http-equiv="content-type
May 27, 2022 14:31:09.655159950 CEST	2032	IN	Data Raw: 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 75 69 2d 66 72 61 6d 65 77 6f 72 6b 2f 66 6f 6e 74 73 2f 70 72 6f 78 69 6d 61 2d 6e 6f 76 61 2d 72 65 67 75 6c 61 72 2f 33 31 41 43 39 36 5f 31 5f 30 2e 65 6f 74 22 29 3b 0a 09 09 09 73 72 63 3a 20 75 72 6c 28 Data Ascii: /components/ui-framework/fonts/proxima-nova-regular/31AC96_1_0.eot");src: url("//cdn2.editmysite.com/components/ui-framework/fonts/proxima-nova-regular/31AC96_1_0eot?#iefix") format("embedded-opentype"), url("//cdn2.editmysite.com/componen
May 27, 2022 14:31:09.655200958 CEST	2033	IN	Data Raw: 20 34 38 34 70 78 3b 0a 09 09 09 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 09 09 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 25 3b 0a 09 09 09 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 30 70 78 20 34 31 70 78 Data Ascii: 484px;margin: 0 auto;margin-top: 10%;-webkit-box-shadow: 0px 0px 41px -8px rgba(237,234,237,1);-moz-box-shadow: 0px 0px 41px -8px rgba(237,234,237,1);box-shadow: 0px 0px 41px -8px rgba(237,234,237,1);}.header {m

Timestamp	kBytes transferred	Direction	Data
May 27, 2022 14:31:10.910954952 CEST	2035	OUT	GET /uploads/1/4/1/8/141840186/1screenshot-2021-04-26-at-19-59-20-orig-orig-orig_orig.png HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36 Host: document--1111011111.company.com
May 27, 2022 14:31:11.080173969 CEST	2042	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 May 2022 12:31:10 GMT Content-Type: image/png Content-Length: 46476 Connection: keep-alive Last-Modified: Mon, 10 May 2021 13:49:51 GMT x-rgw-object-type: Normal ETag: "86023205c6da4584ac9ad959a7504d4c" x-amz-request-id: tx00000000000000281f026-00628523cc-b9fbc7f-sfo1 X-Storage-Bucket: ze542 X-Storage-Object: e542893276ee236968914d1271b54a4afd7df253d4bfb04ff8e5fcda5817e397 X-Host: grn63.sf2p.intern.weebly.net Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 4f 00 00 00 66 08 06 00 00 00 13 75 aa 79 00 00 b5 53 49 44 41 54 78 da ec 5d 0d 93 e4 a8 0d cd ff ff 9f 49 25 b9 ab 4b d2 36 08 77 cf ac d3 b0 e8 1e 96 60 64 af d7 db b3 7b a2 ea 15 fa 78 c8 18 bb 7b 2c 03 3d 7f 5b bd 78 f1 e2 c5 8b 17 2f 5e bc 78 f1 e2 c5 8b 59 3c 79 f2 e2 c5 8b 17 2f 5e bc 78 f1 e2 c5 8b 17 4f 9e bc 78 f1 e2 c5 8b 17 2f 5e bc 78 f1 e2 c5 93 27 2f 5e bc 78 f1 e2 c5 8b 17 2f 5e bc 78 f1 e4 c9 8b 17 2f 5e bc 78 f1 e2 c5 8b 17 2f 5e 3c 79 f2 e2 c5 8b 17 2f 5e bc 78 f1 e2 c5 8b 97 9f 2d 79 5a 52 5a 1d af 00 95 fa be 3c 71 5f d6 07 c0 7a 83 fb 90 73 07 a4 1f b2 a1 c3 ae fc 1a fa 98 fa d8 67 fa 88 da 38 07 33 8e 2d 9b 63 7a ff aa 2f e3 3e 68 d8 fd d4 9c 7b 01 ae f3 1d b6 0c 96 a5 ce 7d 7c 64 1d 72 06 cb b2 ad e6 54 b0 2c 21 38 6f 03 3e ec 90 33 7a f2 db bd 91 0b 1e b5 16 76 f8 35 67 e8 7f 68 bc 3d d6 47 d7 fe 36 92 b9 ce 6d cb d8 2e f9 73 3a c0 a2 60 73 c1 3b ce 5d 24 2f 31 c7 88 cf bc 34 6e 83 98 0d 8c 63 5c e1 e7 be 94 6b fa f6 b8 06 0f db 7f 3c e6 7d 80 87 02 da 30 04 bf 1f 87 6b 7c 0e 75 1b f6 01 b0 fd 50 5d db 0c 3f e4 93 c7 3c ee b7 fb 68 fb af d7 ad 3e bc b2 cf 47 af f5 67 bf 17 5e 7f ed ed 63 be fe fe b5 c7 d1 e6 9f ef 13 e4 d3 f7 c2 bd 2f 7f f9 f2 be 4d 9e e6 db ff d6 79 da 62 12 ba f2 df 7a ba cd 9f 58 3f 19 cf e6 d8 31 d1 17 f8 27 2b de ed c0 f1 8d f3 0c f3 6d 8d 61 5e 13 85 95 32 62 c1 53 8f 4f 3d d6 fa a9 67 c4 af a0 c0 72 e1 d5 ba 22 f3 e3 c8 3f d6 61 8b 19 42 e7 3e 15 7c cc e7 be 07 e8 3d 7f 12 e7 40 76 1f 01 dd c7 02 12 f1 48 c7 de da c3 cc 31 04 9f 6d 73 91 59 8f 51 f1 21 97 9a 65 d9 87 5a 17 5d f0 43 b7 6f e0 07 19 53 f0 03 db f9 5e 61 39 83 d6 58 64 ca 50 1c d8 21 a7 a6 6d 2a 89 7d d5 53 7c ca c5 56 f4 65 29 72 b5 47 c8 a5 ae 6d 33 98 2f 6c dc 3e d7 0b c1 76 af bc fb 52 50 ec f7 82 2a 2f 89 65 24 16 59 ae ba c6 f2 44 e5 dc a5 1d 72 fb 02 03 fe 22 e7 e4 b4 9c 5b 08 d3 1a e6 27 42 c6 ad d6 53 f9 fc c6 e2 83 1f 32 eb cc 07 57 61 2a 1c 85 79 be 15 ff 3c 95 ba 41 cb 9f 8b 3e 67 5e 45 68 f9 a1 ad 4b cc 12 8f db 04 cd c7 31 80 0d 27 ca 5a f5 b1 e8 5b de c4 7c f4 e3 a3 78 7c cc 44 b1 bd 7e 78 e1 b0 34 d7 ad a3 3f 7a fe 04 1b e2 f1 cb 2b d6 c1 67 c0 0f 5d f7 41 bc 10 3b 0c dc f7 4b ae ab 3d eb 83 36 db cf 16 b7 15 48 84 cf 31 7f 5f 40 17 48 52 d6 d0 31 6c 90 e5 37 fb 68 ea da 66 c4 80 7c 0c e8 63 f8 38 46 b4 63 80 73 cd 38 da f1 ed 71 a4 73 e3 78 fe 5a 9f b8 5f Data Ascii: PNGIHDROfuySIDATx]I%K6w`d{x{,=[x/^xY<y/^xOx/^x'/^x/^x/^x/^<y/^x-yZRZ<q_zsg83-cz/>h{}\|drT,!8o>3zv5gh=G6m.s:`s;]$/14nc\k<}0k\|uP]?<h>Gg^c/MybzX?1'+ma^2bSO=gr"?aB>\|=@vH1msYQ!eZ]CoS^a9XdP!m}S\|Ve)rGm3/l>vRP/e$YDr"['BS2Wa*y<A>g^EhK1'Z[\|x\|D~x4?z+g]A;K=6H1_@HR1l7hf\|c8Fcs8qsxZ_
May 27, 2022 14:31:11.080215931 CEST	2043	IN	Data Raw: cf f5 f1 f8 b5 b6 8f 71 5d 1f 71 ad 5f dd 47 eb 5e 1a c3 fe 6e 3a de 47 32 fd f6 fd b8 24 2a bc f7 f7 37 91 3c 4d b7 95 11 20 1b d8 c9 7f 6d bc d7 63 d6 e7 14 c3 54 1f 8a f7 7c 39 86 ad 1e b5 1d 20 c8 57 22 06 c3 0f 59 83 8c 73 00 e0 b7 f8 f5 21 Data Ascii: q]q_G^n:G2$7<M mcT\|9 W"Ys!(QQ1Hp/"jxi%S=En}Xjgs$Cxml?R-?l'H}-T)y38W~\l?>U;7}q#H7b&<k\1vb
May 27, 2022 14:31:11.080255985 CEST	2044	IN	Data Raw: dd 99 2a 24 2e 5d be 48 b4 c0 8f 3d cc 13 d0 39 37 fe ee 0b d5 cf 3a 38 53 d7 1f e0 07 44 b2 4a 71 1e 2f 67 d3 89 d1 10 1c c3 5e b2 d9 89 3f 86 dc 8f 77 62 e9 1d 62 00 b4 ed 7b 62 9e a8 99 df 8f 27 1f 3c 4e 01 7f cf a0 f7 79 c7 1e 4c b5 7e be 8f Data Ascii: *$.]H=97:8SDJq/g^?wbb{b'<NyL~6OCH12p~m?xp8c`a8_k$O #0]#F}lD{;qGs<9M,>I8yBLdx"arBBb?sv$F
May 27, 2022 14:31:11.080296040 CEST	2046	IN	Data Raw: 5a e7 3a 73 54 64 24 35 d5 77 cb 7e f8 50 4b 08 1e fa 62 cf 94 4d a3 a4 6c 98 3c d1 25 98 3e f5 be 27 20 41 5e 92 42 f1 eb 17 03 9d 99 34 65 db 95 2c e1 b8 4d 9b 74 e4 27 d0 7f d1 24 8a ae c2 5f fd a1 f3 fb cf 52 ac 5f de d6 b7 25 ad 7f fc f7 3f Data Ascii: Z:sTd$5w~PKbMl<%>' A^B4e,Mt'$_R_%??~mt[Y=D=B\|of,~w&QT 8:dpQTE@vH TA0BX!!@N]Ko^WcJW_}*Q5T
May 27, 2022 14:31:11.080333948 CEST	2047	IN	Data Raw: 86 bc 0b c7 d4 fe c0 82 b1 c0 b2 69 c0 fa 05 28 d9 bb 11 25 19 27 c5 eb 05 44 31 7c c9 92 dd 2d 6b 78 fa 53 81 93 fa 7b a5 ea 09 67 e8 dc f6 7c 44 0f ca c0 c1 fe 19 38 34 40 b4 55 11 ef a7 5f 06 e2 c6 9c 45 61 4a 91 70 b6 1c ca 25 fe 3d 1d ea ef Data Ascii: i(%'D1\|-kxS{g\|D84@U_EaJp%=$4E9B4UcyH]E@AbdrV3,pT^cdp*.V~sN20\|usi\|]D(uE{1M7Ot)w'QNn>M.ksGsu-$#A[q
May 27, 2022 14:31:11.080373049 CEST	2048	IN	Data Raw: 6b 80 22 5d 4d 2e d5 dc 9f b7 09 08 e3 f4 3d e9 18 fe 64 ef d3 e5 ff 3b a8 8a 67 5d 53 61 81 1d b3 bf 39 8f 11 1f 9d 41 08 01 d3 a8 89 2c da 16 e3 33 e6 65 21 2f 4f b8 4f 62 5d d4 89 e4 3c 4c 9a 7e 04 dd fb ef 43 cf 81 fb f0 c9 ac 44 a4 a6 16 c0 Data Ascii: k"]M.=d;g]Sa9A,3e!/OOb]<L~CD7@kEasv\|e\0HzsCz!5 FG)$w,N#(s!^:hsloB;\\}J1vX/.v?zeK2).?49UESFVVI
May 27, 2022 14:31:11.080413103 CEST	2050	IN	Data Raw: 26 0f 71 a9 39 38 42 8a 67 89 b1 c4 f4 5c ec 3d 7a 0e cf 4f 8a a4 3f b6 75 a8 de 6f 03 02 fa ae 27 51 db 7b 0d 59 b8 9b 70 cb ac 38 34 f8 36 03 f5 bf cb 44 fd 6f 49 d4 de 49 db 77 af 3a 8b 66 31 2a 5a 1f 2f 41 ab 63 6e b4 a1 f6 95 63 25 e8 93 e2 Data Ascii: &q98Bg\=zO?uo'Q{Yp846DoIIw:f1*Z/Acnc%FL'TNeX_ymjR$}& yZNFE!1bRj1ZLc`}y1@I<&oUB3\MK"hYc
May 27, 2022 14:31:11.080450058 CEST	2051	IN	Data Raw: c5 00 a5 cd 7f 39 02 25 29 71 70 96 94 78 be 47 e4 bf 03 6e bd e2 cf bc 95 e4 fd 99 df a9 ad 50 14 f3 47 4a fc 4d 97 c2 89 e3 db 4f e1 8b 36 3f 61 6a 93 35 98 f6 9c 47 d3 9f 5f 8b 69 a4 a9 4d d7 20 f8 be 85 18 da 60 1e 86 dd 35 1f c3 ef 9e 8f 61 Data Ascii: 9%)qpxGnPGJMO6?aj5G_iM `5aP19D,STS-t~/?8E5p6_'t-V}K.TmxEZu ]OU]~T{x#J^;z^
May 27, 2022 14:31:11.080488920 CEST	2053	IN	Data Raw: d2 45 7b 6b 44 3a ea 2d 39 8d a6 51 c5 78 39 d6 81 97 0e ab c2 85 7a fe b0 03 ef 27 a8 48 2e 54 51 a2 57 f9 b2 76 9c d8 89 30 ae d3 90 d3 19 0c 2e 8a c1 e1 e0 b6 f2 30 e6 15 ef 57 ca 4d 67 f1 bc 1c 2f cb 72 9f 0e c5 53 e4 e1 42 b1 0d eb 63 b2 d1 Data Ascii: E{kD:-9Qx9z'H.TQWv0.0WMg/rSBcmI:7G##0n9z(h'RuPcs\2p+dIE$N$Lp;q6<58mMChEqNt4:Ch
May 27, 2022 14:31:11.245488882 CEST	2066	IN	Data Raw: 81 a7 7f dd 46 f0 f4 37 d1 9e 9c 39 1e 2e 77 09 cd eb a0 ee 70 42 c9 39 8f ac 8d ab 44 4a df ae 26 77 96 03 a8 88 ca c1 13 a7 ef 4d ef 07 6c 5d 61 f8 7c cb e9 a8 42 0c 34 be 5a 86 a0 df 9a 7e 27 83 99 fc 7c b6 3f 0c 9e dc d8 ac c1 53 9d 08 01 4f Data Ascii: F79.wpB9DJ&wMl]a\|B4Z~'\|?SOo\9J#ub'W,BPexz#KxL4i+SR@j:8=8y:+"p])(@yn$jP\9xzMBQg"\Ot=H}k.@_zPxjFnR{
May 27, 2022 14:31:11.245543957 CEST	2068	IN	Data Raw: e0 6d 7e 1f 55 8e 93 4b 93 7b 63 78 db fa b9 55 7c ae 7c 95 2a e7 f3 c2 eb af a4 e7 41 79 d7 3c 8d 5d 92 20 d6 3c 3d 4d 05 22 8a 6c 2e 1c 20 98 b9 99 e0 e9 71 4a d7 cb c8 56 00 00 c9 67 8a 04 2c dd db f7 17 72 12 1d 88 8c cf 11 80 75 83 48 db 9b Data Ascii: m~UK{cxU\|\|*Ay<] <=M"l. qJVg,ruHw^\|I3<f'qo_^'%b;SR.%LZK#LaBfhbikHugmSK@r3S?Mp(i{OaH<3T>53m"n
May 27, 2022 14:31:11.413713932 CEST	2128	OUT	GET /uploads/1/4/1/8/141840186/3pdp-orig-orig_orig.png HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36 Host: document--1111011111.company.com
May 27, 2022 14:31:11.585231066 CEST	2146	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 May 2022 12:31:11 GMT Content-Type: image/png Content-Length: 15272 Connection: keep-alive Last-Modified: Thu, 10 Feb 2022 08:37:12 GMT x-rgw-object-type: Normal ETag: "72afce6a160fc291147021b6aac153c1" x-amz-request-id: tx00000000000000286f5ff-00628523cc-b9fbc64-sfo1 X-Storage-Bucket: z3e53 X-Storage-Object: 3e53901bb513d98511cdc10c3e14aa61e71d88728f1bfdc614c0caed4e10602c X-Host: blu78.sf2p.intern.weebly.net Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 a5 00 00 00 3e 08 06 00 00 00 d3 68 bd 5b 00 00 3b 6f 49 44 41 54 78 da ec dd 5b 6c 14 55 00 c6 71 5e f0 82 fa 66 e2 8b 09 46 01 25 6a e2 05 2f 54 28 2a 8f 3e 41 02 c1 48 8c 0f 90 80 80 42 34 a9 21 4d c0 87 86 06 62 28 ad 05 4a 4b 42 4a 8c bd f8 24 a0 d1 a5 5b a1 dc 0c c1 5e 82 35 05 5a da 52 48 ba 6d 22 ad bd c0 ee 9c f9 3c 67 ca a9 8d 68 45 9a 6e ab fd ff 92 2f 33 b3 b3 81 d9 79 98 ec d7 73 66 76 5a 18 4a 84 10 42 08 21 84 10 42 c8 18 72 d7 28 a5 84 10 42 08 21 84 10 42 26 ae 94 0a 00 00 00 00 80 31 a1 94 02 00 00 00 00 28 a5 00 00 00 00 00 50 4a 01 00 00 80 71 13 86 21 19 11 80 52 0a 00 00 00 a4 a9 8c 06 41 a0 54 2a a5 64 32 49 86 e2 ce 47 74 5e 8c 31 02 28 a5 00 00 00 c0 38 30 c6 50 ba ee ec 3c 31 7a 0a 4a 29 00 00 00 90 86 d1 52 f2 47 28 ec 98 8c a5 34 94 8c 91 82 e0 9f 63 6c 42 63 13 2a b4 4b 13 06 77 16 05 0a c5 5f 61 00 00 00 30 fe f7 8f 7a 9d 9d 9d 6a 6c 6c 54 6d 6d ad ea eb eb d5 d0 d0 e0 96 53 2e fe 73 d7 d5 d5 45 b9 7c f9 b2 06 07 07 75 0b f7 9b 62 92 8d 94 86 a3 e6 5f a3 87 4e 1d c6 18 a6 ca 00 00 80 09 fd 2e e2 f5 f7 f7 47 45 ac a2 a2 42 fb f6 ed 53 71 71 b1 4a 4a 4a a6 7c f6 ef df 1f 9d 8f 03 07 0e 28 16 8b a9 a3 a3 c3 97 51 4a 29 98 be 0b 00 00 00 8c 45 10 04 c3 e5 ea dc b9 73 2a 2a 2a d2 b6 6d db b4 6b d7 2e 5f c6 dc 6b 2e 6e 7d ca c4 7f 6e 5f ce dd 72 c7 8e 1d ca c9 c9 d1 e1 c3 87 95 48 24 74 0b 83 0b 98 c0 52 1a a4 a4 be 1e e9 7a b7 4d 97 d4 d3 fd d7 71 fb dc 7b fa 7a 15 24 07 34 98 ba ae df 92 09 f5 0d a7 4b 7d 37 6f 25 19 c5 ee ef 8c de 33 90 fa 55 29 73 53 00 00 00 c0 78 fd e4 8b 9f b2 5b 5a 5a aa dc dc 5c 1d 3a 74 28 9a be db da da aa 0b 17 2e a8 a9 a9 49 17 2f 5e 9c 92 71 9f df e5 ca 95 2b 3a 73 e6 8c 0a 0b 0b a3 c2 5e 53 53 13 dd 67 ea 8b 3d 90 be 52 1a 86 1a 96 b8 a6 f0 d8 d7 0a 2b 76 2b fc 32 5f aa dc 6b d7 6d ca f7 d8 e5 9e a1 ed 72 b7 ef 73 a9 cc ae 1f 3f a2 eb 1d 75 aa 4b 7c a3 58 fb 5e 55 b5 16 2a de b6 47 f1 f6 22 bb b4 db 36 f1 b6 a2 68 3b d6 ba 5b 47 6d ce 5e fb 4a 5d fd cd f2 42 85 cc ed 1d c3 85 d7 18 e3 e3 b6 27 f4 58 fc 05 ac a7 a7 47 5d 5d 5d 6e c9 05 0d 00 00 a4 8d 31 c6 7f f7 70 e5 2a 2a a1 79 79 79 ca cf cf 57 4b 4b 8b 70 bb de de de 68 94 74 fb f6 ed aa ac ac d4 c0 c0 c0 f0 f9 03 d2 53 4a 5d 91 30 81 86 35 fe a4 30 e7 7d 99 15 cf cb 2c 99 ab 70 c5 8b 76 7d 9e cc 32 bb bd fc 05 85 6f cf b3 cb e7 64 96 3e 2b 2d 7b 59 61 ee 46 b5 9f fd 42 a5 bf 7c a2 cd a7 33 95 7d fc 15 6d 39 91 a1 ad a7 17 69 cb c9 85 36 0b b4 f5 54 a6 3e 3d b5 48 9b 6b 32 94 5d f3 9a 8a 6b df 53 53 77 7c c4 21 18 4a e9 18 Data Ascii: PNGIHDR>h[;oIDATx[lUq^fF%j/T(>AHB4!Mb(JKBJ$[^5ZRHm"<ghEn/3ysfvZJB!Br(B!B&1(PJq!RATd2IGt^1(80P<1zJ)RG(4clBcKw_a0zjllTmmS.sE\|ub_N.GEBSqqJJJ\|(QJ)Es*mk._k.n}n_rH$tRzMq{z$4K}7o%3U)sSx[ZZ\:t(.I/^q+:s^SSg=R+v+2_kmrs?uK\|X^UG"6h;[Gm^J]B'XG]]]n1p**yyyWKKphtSJ]050},pv}2od>+-{YaFB\|3}m9i6T>=Hk2]kSSw\|!J

Timestamp	kBytes transferred	Direction	Data
May 27, 2022 14:31:10.911092997 CEST	2036	OUT	GET /uploads/1/4/1/8/141840186/editor/2screenshot-2021-04-26-at-19-59-12-orig-orig.png?1652460803 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36 Host: document--1111011111.company.com
May 27, 2022 14:31:11.083208084 CEST	2054	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 May 2022 12:31:10 GMT Content-Type: image/png Content-Length: 47588 Connection: keep-alive Last-Modified: Fri, 13 May 2022 16:54:01 GMT x-rgw-object-type: Normal ETag: "e9f5fab58c91223b66dbc7d8a8d064f2" x-amz-request-id: tx00000000000000734d4f7-00628b73bf-b9fbc77-sfo1 X-Storage-Bucket: z3b1f X-Storage-Object: 3b1f7691ebb9f6305b70a17a304ed4f6f84d9153ccf6ba7dafcf6e613ab19816 X-Host: grn64.sf2p.intern.weebly.net Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f5 00 00 01 0c 08 06 00 00 00 dd d5 2f c0 00 00 00 01 6f 72 4e 54 01 cf a2 77 9a 00 00 80 00 49 44 41 54 78 da ec fd f9 73 1c 49 96 e7 09 7e 54 d5 cc dd e1 8e fb 22 40 f0 be 19 f7 9d 11 99 19 79 54 1e 95 9d 59 95 d5 d7 4c cf c8 c8 8a 8c ac c8 8a ec 0f fb d7 ec 6f 2b bb 23 3d bb db 3b 3b 3d dd 5b 53 5d 9d d9 9d 95 95 57 45 64 46 c6 7d 91 41 32 78 13 bc 71 df 80 bb 99 ea db 1f d4 cc dc 1c 04 49 90 04 0f 80 f6 15 41 10 e1 70 37 57 33 35 d3 a7 ef bd ef fb 3e 25 22 42 81 02 05 0a 14 28 50 60 d3 43 3f ee 01 14 28 50 a0 40 81 02 05 36 06 85 51 2f 50 a0 40 81 02 05 b6 08 0a a3 5e a0 40 81 02 05 0a 6c 11 14 46 bd 40 81 02 05 0a 14 d8 22 28 8c 7a 81 02 05 0a 14 28 b0 45 50 18 f5 02 05 0a 14 28 50 60 8b a0 30 ea 05 0a 14 28 50 a0 c0 16 41 61 d4 0b 14 28 50 a0 40 81 2d 82 c2 a8 17 28 50 a0 40 81 02 5b 04 85 51 2f 50 a0 40 81 02 05 b6 08 0a a3 5e a0 40 81 02 05 0a 6c 11 14 46 bd 40 81 02 05 0a 14 d8 22 28 8c 7a 81 02 05 0a 14 28 b0 45 50 18 f5 02 05 0a 14 28 50 60 8b a0 30 ea 05 0a 14 28 50 a0 c0 16 41 61 d4 0b 14 28 50 a0 40 81 2d 82 c2 a8 17 28 50 a0 40 81 02 5b 04 85 51 2f 50 a0 40 81 02 05 b6 08 0a a3 5e a0 40 81 02 05 0a 6c 11 14 46 bd 40 81 02 05 0a 14 d8 22 28 8c 7a 81 02 05 0a 14 28 b0 45 50 18 f5 02 05 0a 14 28 50 60 8b a0 30 ea 8f 03 f2 b8 07 50 a0 40 81 02 05 b6 22 82 c7 3d 80 a7 06 22 ab fe 05 14 e9 7f 3c 94 ba c7 83 16 28 50 a0 40 81 02 4d 14 46 fd a1 42 bc f1 4e 0d b9 d6 6b 1b 6e e7 9a ef 47 15 c6 bd 40 81 02 05 0a dc 17 94 88 14 c1 e0 87 01 11 40 12 03 ad 9a af 2d 2f c2 e2 22 04 01 54 db a1 54 ba d5 88 4b 6a e4 0b 03 5f a0 40 81 02 05 d6 8f c2 a8 6f 18 a4 99 2b 5f 6d 88 57 96 90 a9 09 e4 c6 55 b8 f0 35 ee f2 05 a4 52 c3 ec 39 88 1a da 8e f4 f4 a1 bb fb bc 91 0f c3 35 0e 9d 9b a2 c2 c8 17 28 50 a0 40 81 db a0 30 ea 0f 0c 69 e6 c7 85 a6 d1 b5 31 cc cf 22 57 2e 61 cf 9d c2 5d f8 1a 77 ed 32 6e f2 26 6e 7e 0e 82 00 dd d5 83 ee ea 41 f5 0e a0 87 b6 63 b6 ef 46 6d df 0d 43 23 a8 8e 2e 30 81 0f d9 67 5f b5 6a aa 0a 03 5f a0 40 81 02 05 72 28 8c fa fd 40 92 b0 7a fa 6f 0a e7 a0 be 02 37 ae 60 47 cf e1 ce 9e f2 06 fd c6 15 dc e2 3c 12 45 a0 35 a2 35 88 a0 9c f5 ff 9a 00 55 2e a1 da 3b d1 03 c3 e8 91 3d e8 1d 7b d0 43 3b d0 43 23 d0 37 00 a5 0a 18 93 1f 44 6b 64 60 f5 58 0a 14 28 50 a0 c0 53 87 c2 a8 af 1b 6b 90 de 52 34 ea c8 e4 38 72 f5 22 72 e9 2c f6 fc d7 c4 17 cf e1 26 c7 90 46 1d 51 0a a5 74 52 40 b8 ca 00 a7 b9 77 91 ec d8 ca 04 a8 5a 27 7a 60 1b c1 c8 6e f4 c8 6e d4 d0 08 6a 70 18 d5 37 08 1d dd 3e 17 df 32 bc e4 38 a8 1c a1 be 30 Data Ascii: PNGIHDR/orNTwIDATxsI~T"@yTYLo+#=;;=[S]WEdF}A2xqIAp7W35>%"B(P`C?(P@6Q/P@^@lF@"(z(EP(P`0(PAa(P@-(P@[Q/P@^@lF@"(z(EP(P`0(PAa(P@-(P@[Q/P@^@lF@"(z(EP(P`0P@"="<(P@MFBNknG@@-/"TTKj_@o+_mWU5R95(P@0i1"W.a]w2n&n~AcFmC#.0g_j_@r(@zo7`G<E55U.;={C;C#7Dkd`X(PSkR48r"r,&FQtR@wZ'z`nnjp7>280
May 27, 2022 14:31:11.083240986 CEST	2054	IN	Data Raw: f2 05 0a 14 28 f0 34 a1 30 ea eb 85 73 a0 74 d3 4e d6 eb b0 30 83 4c 8c 61 2f 9c c1 7e fd 25 72 e9 3c 6e 72 0c b7 b2 84 8b 2d 4a 25 06 56 25 84 b7 8c e5 9e 43 fa 1e 49 0f 2c fe 7d 22 a0 15 da 84 50 aa 60 3a 3b d0 fd db 50 db 77 a1 77 1f 40 8f ec Data Ascii: (40stN0La/~%r<nr-J%V%CI,}"P`:;Pww@>h@jHXpY@F
May 27, 2022 14:31:11.083277941 CEST	2056	IN	Data Raw: 5e 20 02 51 03 c6 6f e0 ce 9d 24 3e 75 1c 77 e1 6b ec d8 55 64 7e 0e b1 16 41 a1 b4 f2 1b 00 54 8e c9 7e 0f 48 a3 00 4e fc e7 73 5e b8 0a 43 74 5b 15 dd d3 8f da 36 82 de b9 d7 1b f9 9d 7b 50 fd db a0 dc b6 2a 4c 5f a0 40 81 02 05 9e 16 14 46 7d Data Ascii: ^ Qo$>uwkUd~AT~HNs^Ct[6{P*L_@F}-xN+SD'>FUi~~#\|=,j>CzAar5UP@,"I8YA_A.!>7zy0Xo:3I9TRUTW7=4vmZ
May 27, 2022 14:31:11.083307028 CEST	2056	IN	Data Raw: 3e c2 5d 3e 4f 3c 33 ed 9b 05 b9 55 1b 21 ad 20 b6 a8 f9 79 cc 8b df 40 ed 3d 98 75 fc 13 a5 50 d7 2e 23 a7 8f e1 26 ae 83 68 74 6f 3f 72 f8 39 18 d9 8d 2e 34 ff 9f 3c 64 cd 99 e0 d6 67 e4 36 6d 93 25 ff b9 27 64 a3 d6 c2 67 ca 8f f7 0e ad 9f 45 Data Ascii: >]>O<3U! y@=uP.#&hto?r9.4<dg6m%'dgEGnx"='
May 27, 2022 14:31:11.083340883 CEST	2057	IN	Data Raw: be 20 be 79 0d 99 9f f5 e1 d0 7c 3e 73 23 91 4d a4 4e 08 4c 2e e9 98 e6 6f 62 1d 86 50 6e 43 75 76 a3 fb 07 51 03 c3 98 91 9d a8 be 6d a8 be 41 74 77 1f 74 76 43 5b db 2d cc 7a b1 89 a8 cd 2d 2b fe 26 45 16 ee 4d fe a3 54 e2 e1 46 b0 bc 04 cb 8b Data Ascii: y\|>s#MNL.obPnCuvQmAtwtvC[-z-+&EMTFh QJTaRUAeUwdCF_>xx7JcnQ<Xt9H?vDPHrkp34Z#8_h6epAe%{F~S?2
May 27, 2022 14:31:11.083379030 CEST	2058	IN	Data Raw: f3 8d 2b c4 bf fb 05 d1 67 7f 46 1a 0d cf 9c 87 8c 51 af ac 43 07 01 94 43 d0 06 25 82 e0 90 7a e4 8f 6d e3 6c 21 77 67 be 22 3e fe 29 f1 dc 9c 8f 70 68 ed 69 0a 46 63 97 97 89 be 3e 86 3e 7b 0a dd b7 ad 79 fd b6 c2 fd b7 d9 a0 f0 d5 39 13 63 b8 Data Ascii: +gFQCC%zml!wg">)phiFc>>{y9c:v7=,.AcQU9KF%Tyusfam12='a}L<z;3+H#i H2{4cC8wl%C/+5:'~5&y 7
May 27, 2022 14:31:11.083406925 CEST	2058	IN	Data Raw: 8b f4 b9 6a 34 70 c7 3f 25 fa cd df 11 1d ff 14 b7 b4 e8 c7 18 94 c8 2c b9 b3 e0 12 12 a7 73 88 d2 9e ff 81 27 05 ab c4 93 16 a3 7c a4 49 1b 40 79 83 69 f2 e6 e7 ee f7 a7 44 11 b2 bc 0c d6 b6 36 cd 4c d3 63 f9 a5 fa 7e 1d f8 6c 5d 62 d3 3e 33 9b Data Ascii: j4p?%,s'\|I@yiD6Lc~l]b>3ENo-Zo4J;
May 27, 2022 14:31:11.083444118 CEST	2060	IN	Data Raw: e3 b7 94 9d 3c 2d 48 1e 6e 89 1a c8 a9 2f 89 ff f0 4b ec 17 1f 61 67 a6 13 7e 43 7e f1 f0 1e 87 b2 31 88 0f c9 a9 52 c9 2f 00 a5 8a cf 41 a7 06 cb 3a a4 51 47 1a 2b de cb 8d 1a 7e f7 0e 49 7e d8 24 86 51 27 f5 dc 31 ee fc 19 dc d4 38 72 f3 1a c1 Data Ascii: <-Hn/Kag~C~1R/A:QG+~I~$Q'18ruYnaW(UqsdOR`-fd'7uUUXmfYOy0;c{fD;Ws&.^4qso\|ca_k/DAjJ:,!qI+/q
May 27, 2022 14:31:11.083472967 CEST	2060	IN	Data Raw: 8f e9 35 a9 54 51 3b f6 c2 8e bd fe e5 f4 cf 9b 92 e2 b3 c5 20 e2 49 90 af 7d 9b e0 2f 7e 8e da 77 18 fa 06 d7 16 59 02 5a 6b 21 13 e2 57 5b 0d d5 56 43 f5 6f 23 ec 1d 84 7f f8 5b 1a c7 3e f6 9b 61 65 32 3e 85 5b 59 21 3a f1 25 9c 3d 85 19 da 75 Data Ascii: 5TQ; I}/~wYZk!W[VCo#[>ae2>[Y!:%=uA#R@0
May 27, 2022 14:31:11.083512068 CEST	2061	IN	Data Raw: 1f a3 df fc 1e 7a 64 77 33 2d 94 6e 56 33 ac 3a 97 20 40 05 1d 3e 7a 34 b8 1d 0e 3d e7 d7 90 d2 3a fa 24 24 47 92 a8 e1 cf 5b 1c 60 9a 11 8b 72 9b df 78 1f 7d 71 63 a4 4b d8 dc d2 60 5b df a8 67 48 f3 a4 8f 7b 1c 4f 30 72 46 51 4e 1f a3 f1 9b bf Data Ascii: zdw3-nV3: @>z4=:$$G[`rx}qcK`[gH{O0rFQNqds7m]9&\|U7zeIYqHerp=n]]?'q7%/J>L0cEmR\~n_%BF-AzN$i_:L0cAQ
May 27, 2022 14:31:11.083540916 CEST	2062	IN	Data Raw: 5a fb fb 41 37 89 46 32 3b 8d fd f2 63 dc f9 d3 f9 93 5b 7d b2 ab 16 7c d7 fc 17 12 b5 90 3c 54 e2 65 e7 dc ec ec 33 77 f8 71 ae 69 d4 45 5a 3d f4 96 91 ad 3a ae bb cd b1 ef 36 7f 0f db 90 dd 6e 3c b7 0d 5d de e6 b3 1b 3a 96 5c 84 e3 6e e1 d3 8d Data Ascii: ZA7F2;c[}\|<Te3wqiEZ=:6n<]:\nBzJA4P Qr6F.\|

Timestamp	kBytes transferred	Direction	Data
May 27, 2022 14:31:53.284395933 CEST	2594	OUT	Data Raw: 00 Data Ascii:
May 27, 2022 14:32:53.416415930 CEST	17501	OUT	Data Raw: 00 Data Ascii:

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://document--1111011111.company.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Google\Chrome\User Data\499806a5-d09f-49ac-abc4-ab4becf5f9d4.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\4eb1b1cd-c449-40dc-9516-10535441562b.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\5e11aab8-c49c-4022-a59f-5e45fdc69027.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\727fce5a-1a3e-4378-b9b1-ddb83343e565.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\7e38bfa8-be9b-4562-a91f-0b9502d1d361.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\1c99278d-fcc2-4dcb-a5ed-5b75bc43e837.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\1d3b1e1c-593f-48c0-84a3-231da72d3e94.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\20b3f0bc-ad58-4855-bb18-1da675183ef2.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\2cea7aa6-e8dc-403b-8fb0-13dc2cb9b77c.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\326a7714-6c2f-4802-b696-f5cb4eb8e13f.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\67268b83-2658-4083-928c-f181c95a7676.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\85846f46-90c1-40dd-8abd-b654f55dc759.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_1\_metadata\computed_hashes.json

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Google Profile.ico (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\8a436e02-2cc8-482b-a1f3-19d163320340.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Network Persistent State (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\000001.dbtmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\CURRENT (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\MANIFEST-000001

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network Persistent State (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\000001.dbtmp

Windows Analysis Report
http://document--1111011111.company.com/

Timestamp	kBytes transferred	Direction	Data
May 27, 2022 14:31:06.196275949 CEST	96	OUT	GET / HTTP/1.1 Host: document--1111011111.company.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 27, 2022 14:31:06.395495892 CEST	170	IN	HTTP/1.1 200 OK Date: Fri, 27 May 2022 12:31:06 GMT Server: Apache Set-Cookie: is_mobile=0; path=/; domain=document--1111011111.company.com Vary: X-W-SSL,Accept-Encoding,User-Agent Set-Cookie: language=en; expires=Fri, 10-Jun-2022 12:31:06 GMT; Max-Age=1209600; path=/ Cache-Control: private ETag: W/"9c914c4469a59d58104fecad7951b405-gzip" Content-Encoding: gzip X-Host: blu105.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 5871 Keep-Alive: timeout=10, max=72 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 3c fd 77 db 46 8e 3f 5b ef ed ff 30 65 bb a5 dc 88 a2 64 4b fe d0 57 cf 71 dc 6e fa da c4 1b 3b d7 db 8b b3 7a 23 72 24 31 a6 48 86 a4 2c eb 5c fd ef 07 60 86 5f 12 e5 8f a6 e9 de de 8b db 48 e4 0c 80 c1 60 00 0c 06 04 d5 fb ea c5 eb d3 cb 7f 9c 9f b1 69 3c 73 07 95 1e 7e 31 97 7b 93 be 26 3c 6d 50 d9 e9 4d 05 b7 e1 7b a7 17 3b b1 2b 06 cf a1 f3 9a 5d e2 35 33 d8 df fc 99 e8 99 b2 a7 37 13 31 67 41 e8 07 22 8c 97 7d cd 9f 74 22 27 16 43 8f cf 84 c6 2c df 8b 85 17 f7 b5 1c 01 8d 99 30 e4 26 5a 2c 3b 9f 82 62 8b c8 0a 9d 20 76 7c ef 69 88 ce 8c 4f f2 63 4d e3 38 e8 98 a6 ed 5b f3 19 34 18 46 13 fe 1a f8 d1 ac 5b fe 2c e0 de 12 bf cd 79 e0 fa dc 8e cc a6 d9 82 7f 47 66 b3 d5 3c 6a 35 9a 47 07 66 13 38 11 c2 8b a6 7e 6c ec 35 f6 9a 46 a3 65 ec 1d 18 3c 36 9a c7 46 fb 18 da 0c 3f 74 26 d9 c7 10 3f ea 81 37 f9 f3 78 14 b6 13 fb a1 b9 f7 00 ab cd bd 8c 4b 64 f0 fb e6 41 7b af 75 d0 38 6a ec ff 79 bc ee 07 76 f0 04 61 cd 43 f7 77 0c 4f d4 2a 3d d7 01 7d 09 85 db d7 1c 0b 35 29 5e 06 02 ae 71 4e 26 8d 39 0d c5 b8 af 99 e6 62 b1 a8 2f 84 18 b9 45 ee 43 11 09 d7 15 a1 c9 a3 48 c4 91 b9 df 3e 38 3c 68 1d 1d b7 8d 31 bf 41 92 75 f8 90 63 55 14 f3 c8 a1 21 3e ce 9d 9b be 76 2a d9 36 2e 61 d8 dc 24 62 71 1b 9b 68 99 5d 66 4d 79 08 94 fb f3 78 6c 1c 11 21 c6 24 1d 34 b3 be 76 e3 88 45 e0 87 71 0e 7b e1 d8 f1 b4 6f 0b 18 5f 18 74 53 63 8e e7 c4 0e 77 8d c8 e2 ae e8 37 eb 0d c9 d3 ce 0e 1a 3a 09 c1 b1 01 13 ed d7 18 f1 48 18 51 bc 44 1b 22 d1 d0 75 34 15 22 4e 04 44 0c 5a 51 94 c9 c7 b2 bd bd 3a 6a d9 6c 89 44 48 48 00 60 e2 4d 54 87 ab ef 47 73 c7 b5 2f 1d 60 1a 94 0a d6 f9 e0 e8 48 29 55 b6 08 9f 32 92 ef da e6 98 7b d6 72 e4 df d2 80 9f 67 98 c8 b7 50 90 b8 b6 b9 79 c5 eb f3 9a 01 2a 87 91 c8 de 6a a0 b0 1f 84 25 9d d5 93 59 19 3b 00 61 ce b8 e3 0d 09 3a 99 1c 18 66 f3 a0 d1 02 3c f4 77 c9 ea c5 53 31 13 06 e1 a7 23 11 21 dd 34 c7 a0 22 51 7d e2 fb 13 57 f0 c0 89 92 49 7d 3f e6 33 c7 5d f6 7f c1 7e 11 86 3c ee b4 1a 8d da 61 a3 f1 6d 34 1f a1 fa b9 3c 76 bc 1a 7d 1a c0 9f 4e cc eb 19 f3 ba 64 5e 4f 98 d7 a5 79 11 c0 7a d7 Data Ascii: <wF?[0edKWqn;z#r$1H,\`_H`i<s~1{&<mPM{;+]5371gA"}t"'C,0&Z,;b v\|iOcM8[4F[,yGf<j5Gf8~l5Fe<6F?t&?7xKdA{u8jyvaCwO=}5)^qN&9b/ECH>8<h1AucU!>v6.a$bqh]fMyxl!$4vEq{o_tScw7:HQD"u4"NDZQ:jlDHH`MTGs/`H)U2{rgPy*j%Y;a:f<wS1#!4"Q}WI}?3]~<am4<v}Nd^Oyz
May 27, 2022 14:31:06.395543098 CEST	171	IN	Data Raw: a0 52 97 ac 0a 57 a0 8d 46 ea d6 03 a7 34 f6 fd 58 84 1d b8 ac aa 56 dc 8e 44 98 c2 ee 32 db b9 a9 07 3c e4 93 90 07 a0 d9 9f 44 2b f8 44 fc 3a 2c ac 3d b7 62 63 e4 fa d6 75 76 4b 2b f2 47 d1 ce 6d 75 9f 4a 52 b6 8f fd 70 66 8c 1d e1 da b0 f3 8f Data Ascii: RWF4XVD2<D+D:,=bcuvK+GmuJRpf~-;cZ_`n.kn21"#nb3Xox$-`nU"?Xz/uqFnu$w9uG8i~?V9=?L(O39YhG3Ji{+pLAV4^?]':Z
May 27, 2022 14:31:06.395581961 CEST	173	IN	Data Raw: ac e5 db d0 45 30 09 03 93 1b 5a 84 1c 5f 40 dc 81 1d fb fb ed c6 5e b3 7d d8 6e 1f 1d 1e b6 1b c7 8d bd 0c 74 1e 89 f0 e5 0b 84 4a 8b 93 b4 ee 63 a3 11 e0 27 29 0e 52 63 a1 f2 3d 05 1d c2 dc b1 33 79 e1 63 74 84 4c 14 4b 90 36 39 91 43 42 f8 fe Data Ascii: E0Z_@^}ntJc')Rc=3yctLK69CBqDSBCuw363;S9DA`GCAEMbc7Pm2W$p:c\|H-{~`TEP[G^{}^9v4,[d:-nXxUf't\|
May 27, 2022 14:31:06.395617962 CEST	174	IN	Data Raw: 40 10 e4 bd 4a de c8 92 97 70 e4 0f 22 82 bf 98 8f 66 4e 5c 0f a6 01 be 8c 13 4f 7d d8 be cf 5f 5f 5c 6a b4 91 13 c5 f6 61 e3 78 af 75 d8 d8 6f ed 1d b4 0f da fb 47 47 5a ea a2 11 68 b3 5f 96 6d 00 4f e8 a8 8b 32 a0 9e cc 3f d3 dc 8a 76 99 a9 a0 Data Ascii: @Jp"fN\O}__\jaxuoGGZh_mO2?v,@d:l;.A(#/<}>}o2"3`B}@\ \|Ou?b/_m =z6#_-bDL wva/=XD,dD%25q&h&a;g1yl[{
May 27, 2022 14:31:06.395654917 CEST	175	IN	Data Raw: 3f 93 f3 02 3f ea 7b 7a cc 46 82 8d 9d 30 8a 19 6c 4a 48 13 1f 27 2a d9 45 79 d1 81 83 54 72 8b 9e 2f 2f f9 04 97 29 93 20 70 d2 65 51 5d 26 b9 5e e1 f0 60 4e 22 8c 9f 0b 08 2a 45 75 c2 6b 2c c2 a5 94 95 7f 15 2c bc 3a 49 a6 49 45 62 b9 5b 2c 17 Data Ascii: ??{zF0lJH'EyTr//) peQ]&^`N"Euk,,:IIEb[,F8`v<H=/~<5C)?TDo&oJtw$3)oPsk~mQsj^m{_wAGq.^%=FfB1*6?YTHxz}w5!
May 27, 2022 14:31:06.395684958 CEST	175	IN	Data Raw: 2a bf ae f4 41 6f f9 48 96 e1 20 71 8e a7 3d 64 9a 1a be f9 e6 21 f3 29 ae 0e f4 a5 8a 8c 70 64 56 ea 4d 98 07 4c 4b b1 a5 d8 c3 81 4b 2d 69 5d 1d a8 39 1d 53 de d6 e5 cf 85 82 82 a7 36 a4 b7 30 89 5d 1c 64 a5 22 40 0b df 7f aa 0a fc 55 a1 15 b9 Data Ascii: *AoH q=d!)pdVMLKK-i]9S60]d"@U+cwI[);_JNt-ES!K23oT/'Z
May 27, 2022 14:31:06.590301037 CEST	194	OUT	GET /files/main_style.css?1652461604 HTTP/1.1 Host: document--1111011111.company.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://document--1111011111.company.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en
May 27, 2022 14:31:06.760210037 CEST	585	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 May 2022 12:31:06 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Origin: * X-Host: grn45.sf2p.intern.weebly.net Content-Encoding: gzip Data Raw: 31 63 65 38 0d 0a 1f 8b 08 00 00 00 00 00 00 03 e5 3d 6b 93 e4 b6 8d df fd 2b fa b2 b5 35 3b 57 ad 3e bd 1f b3 15 e7 1c db 97 6c 95 af 72 65 bb ce 1f 92 7c a0 24 6a 5a b7 dd ad 8e a4 de d9 b1 2b ff fd 40 ea 45 52 24 45 75 cf da 7b 75 71 cd 66 46 02 41 10 04 01 10 04 a1 cb 61 bb a9 e0 e7 50 6e 37 7b 07 7e 5c f8 f1 e0 c7 87 9f 00 7e c2 ed e6 5c e3 ed a6 a8 ea e3 76 93 56 f9 33 3c 6c 8f d0 24 2f 3f ec ce a8 46 8f 35 3a ef e1 d5 a1 ca de ff e3 52 b5 04 b8 c4 87 bc c1 ed 76 53 9e ce 97 76 f3 cb e6 88 ea c7 f2 f4 b0 b1 df 6e ce 28 cf cb d3 23 fd fd 9f 5f 5c ae 27 e0 7c 75 a7 9b dd 53 53 b6 d8 22 38 2d da ae 6b f3 d7 f6 f9 8c 7f 7f d7 e2 8f ed dd df b7 0b 50 f8 88 ca 83 1c 8c 20 40 35 46 b2 77 0d 3e e0 ac 5d 42 5e a3 bc ac 96 69 c8 f6 38 7b 9f 56 1f 19 c8 ac 3a 5a e7 ba ca 2f 59 6b 55 e7 b6 ac 4e d6 63 5d 5d ce 8d 6e 88 66 8d c4 11 ab 5b cd 18 a0 06 15 f8 61 46 89 c8 1e b3 56 13 b7 40 38 ac 27 9c be 2f 5b 0b fe b6 9a 3d ca ab a7 87 cd a9 3a e1 b7 1b eb 58 fd 2c 79 2c 01 ec 51 a0 f3 19 c3 42 38 65 98 43 31 7f 3c 7f 42 18 25 60 95 8a e7 0a 86 0e a0 30 c6 1a 37 e5 cf 98 41 fc ef 45 75 6a ad 02 65 18 de f6 bf 1f cb c3 f3 c3 e6 ee 8f 65 0d ab e7 19 df bd dd 34 75 f6 b0 b9 d4 87 37 77 ed 1e 1f f1 bf 11 c0 e6 df 9c 28 0b 82 d4 8d 2c 9c a0 d4 f2 bd 2c b7 d2 c4 8f ad dc 4f 8a 24 f2 63 3b 0f e3 1d ae da 3f bc 2a 71 51 7e fc 83 13 06 ae 1f 3a a1 ed df dd 7f 0a 9c 54 23 a0 f6 cd 1d bc bf bb df ce 91 bb d8 2b 82 2c 4d 2c c7 76 0a cb 0f b3 c2 42 51 ea 59 79 81 50 10 bb a1 83 6d 6f f7 54 15 85 2b c7 4b 5f 49 31 17 c8 49 80 4c 6c 05 d8 8b 2d 3f b1 13 2b f5 1c 6c f9 0e ca 72 27 02 aa 0b 97 62 56 23 96 e2 0d 73 6c 67 d8 cf ad c4 8d 00 6f 18 a5 c0 8e b0 b0 32 a7 08 0a 1b f9 99 17 05 bb b6 55 a0 6d eb 0b 26 82 2e 45 9d 14 b9 8f 91 9d 59 a9 93 20 cb 4f 5d c7 82 47 85 e5 45 b6 1f 44 76 94 e7 51 bc 6b 3e 3c be 32 01 94 f7 0f ad c9 4c 53 b1 7a c2 e5 e3 be 7d d8 38 b6 dd 3f 69 da e7 03 15 45 00 3e dc 2c 8c 71 ea 27 71 e6 25 d0 24 05 be 47 31 cc 40 1a 3b 64 42 a2 2c c1 59 9e e7 de 5a 61 bc 05 e7 a2 30 3a 59 98 39 31 60 73 bd 2c b1 fc 3c 44 16 b2 9d d8 8a 82 24 77 b2 24 c7 b9 13 5c 29 8c 20 6e 41 90 05 16 8a 63 98 b0 04 c1 1a 4a 5d 18 85 97 06 59 86 7c 27 f2 9c 6b 84 d1 43 41 e8 64 b1 67 f9 76 ee 5b 7e 1c c6 56 ec 06 81 85 63 3f 08 70 6a db 49 e6 5f 29 8c 5e 12 86 45 1c 84 56 92 c3 a2 84 85 14 59 31 f9 27 f2 6d bb 70 d2 28 0f 9d 84 0a a3 09 e0 0d c2 58 b6 e8 50 66 37 0b 23 4e 9c 30 72 41 13 78 a9 47 a8 74 3c 98 5b 1f 26 d8 8b 7d 2f f1 31 ce 7d 77 Data Ascii: 1ce8=k+5;W>lre\|$jZ+@ER$Eu{uqfFAaPn7{~\~\vV3<l$/?F5:RvSvn(#_\'\|uSS"8-kP @5Fw>]B^i8{V:Z/YkUNc]]nf[aFV@8'/[=:X,y,QB8eC1<B%`07AEujee4u7w(,,O$c;?*qQ~:T#+,M,vBQYyPmoT+K_I1ILl-?+lr'bV#slgo2Um&.EY O]GEDvQk><2LSz}8?iE>,q'q%$G1@;dB,YZa0:Y91`s,<D$w$\) nAcJ]Y\|'kCAdgv[~Vc?pjI_)^EVY1'mp(XPf7#N0rAxGt<[&}/1}w
May 27, 2022 14:31:06.760251045 CEST	588	IN	Data Raw: ad 30 de 82 73 59 33 66 79 10 04 7e 68 e1 cc b6 2d 1f 15 89 85 70 06 c2 83 40 03 3b 71 98 a3 e0 4a cd e8 e0 24 4e dc cc b6 42 50 61 96 ef 3b ae 95 c4 91 6f 39 69 ec c6 b6 93 22 3f 42 d7 08 23 d1 de 8e 1d 46 56 18 c7 39 d0 09 d6 22 b5 8b c8 4a f3 Data Ascii: 0sY3fy~h-p@;qJ$NBPa;o9i"?B#FV9"JwQ"mbGIV#*@D0H3Np,MloEYNc;CxEa(SZ0,Sv#LV)k;9s-z?"#5zK$PLvjc9
May 27, 2022 14:31:06.760288954 CEST	589	IN	Data Raw: 06 41 d6 ef b8 18 63 98 10 20 ae 9f 15 be 41 f7 07 40 b3 6b 65 90 02 9d be 0c 46 8d a5 51 94 3c 50 b3 08 b3 f4 5e 24 9f 75 86 78 9b b0 42 a1 c4 f6 4c a1 38 12 85 e2 30 86 dd 09 80 a3 44 83 cc 49 12 7d 1e 3d 75 26 ae 9a e3 1a b9 6a 84 be 03 6e 5b Data Ascii: Ac A@keFQ<P^$uxBL80DI}=u&jn[A.<%gN(q/Zkv9(C-HvN-/Up(vmVQu5)2^vA3kCF{$uw_J1lQ;f
May 27, 2022 14:31:06.760325909 CEST	592	IN	Data Raw: bf 2f e1 a0 69 c9 e1 a2 da e3 6c c4 81 18 38 5b 31 c2 25 8f 39 d0 48 8e dc 6f 3e ef a1 f7 59 ae 9c d1 3e d3 67 0e 67 38 55 1f 4e 1c ef 04 da 5d 41 96 22 fa 26 3b 25 5b c6 76 28 57 44 8d b8 7d b8 39 b1 2f e0 06 33 9d ac f0 47 94 68 17 fc 10 d3 de Data Ascii: /il8[1%9Ho>Y>gg8UN]A"&;%[v(WD}9/3Ghagjd#rV:{>6!X16TsbW#3a`LnDgx_\|5^q}Bm@}#>`XJ32~KUIPx
May 27, 2022 14:31:06.760363102 CEST	594	IN	Data Raw: 9b 4b 86 19 1e 83 b1 ca 7b 24 22 3b 54 e4 da ec f4 e0 44 04 ac 4b 96 9b 1e 9e 6b fc 81 3e 14 98 3d 1b 60 1f 7b e9 1c 69 de ad 9e 77 3b 66 d2 49 7a 97 bc 1b 89 60 eb ae 28 4d d9 5a 2e fa c1 8c 8b fe 4c cc 87 82 3a 9f 85 c9 12 98 49 95 92 82 a5 bd Data Ascii: K{$";TDKk>=`{iw;fIz`(MZ.L:I0vr-'Y3_0;(Ld\:fFmneUL,TKBe%s'td#\Jr7El+6IrU]m;oBVf
May 27, 2022 14:31:06.760406971 CEST	595	IN	Data Raw: 85 5c db cf 41 ac 58 16 9b a6 56 bb f7 f3 d9 51 64 81 74 5f 78 3c e2 bc 44 24 c2 86 f1 69 83 4e f9 e6 0d 73 85 38 49 48 5d 9b cd 2f 5f 50 5e fe 95 f0 f2 f7 bf 73 7e f7 77 b1 1a cc 6b 51 65 30 e0 ae 08 1e 05 3a 70 4f 04 77 5c 2d bc 3f 83 d7 93 13 Data Ascii: \AXVQdt_x<D$iNs8IH]/_P^s~wkQe0:pOw\-?"kkG3x=oL+jO{q8/2Q%z>&uG,#7fQ3Z;_i5$Y[E`LDeg%K9f(0,Nk:${UvE^QN_hz{
May 27, 2022 14:31:06.914134026 CEST	897	OUT	GET /files/theme/plugins.js?1565969634 HTTP/1.1 Host: document--1111011111.company.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept: / Referer: http://document--1111011111.company.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en
May 27, 2022 14:31:07.088587999 CEST	1065	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 May 2022 12:31:06 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Last-Modified: Tue, 26 Oct 2021 13:57:33 GMT x-rgw-object-type: Normal ETag: W/"2b8d85f1ea01d2c3e8b962eac8d76a5c" x-amz-request-id: tx000000000000000b88c06-0061a70540-a9f4046-sfo1 X-Storage-Bucket: zb635 X-Storage-Object: b6353ca52760aba4e7547ae9861db68158dc2af0f4febece55e5c775ee4449f5 X-Host: blu72.sf2p.intern.weebly.net Content-Encoding: gzip Data Raw: 33 64 36 39 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 7d 6b 77 1b c7 b1 e0 77 fd 8a d1 87 35 00 1b 02 45 c5 ce 71 c0 d0 0e 4d 41 36 73 c5 c7 11 29 47 bc 5c 1e 69 08 0c c9 b1 00 0c 32 33 20 89 98 fc ef 5b 8f 7e 54 3f 06 00 25 39 37 7b 76 9d 73 22 62 fa 55 5d 5d 5d 5d 55 5d 5d f5 64 e3 eb a7 c9 2f e9 64 92 95 bd bf 1f 27 cf 92 9b 17 bd e7 bd 6f e1 8f 17 cf 37 bf 7d f6 fc 2f cf 5e 7c ff 24 f9 3a b9 ae eb 59 7f 63 e3 9a 6a fe 56 f5 ae f2 fa 7a 7e d1 cb 8b 0d 28 c5 0a bb c5 6c 51 e6 57 d7 75 d2 1e 76 a8 71 f2 f7 a2 cc 3f 26 27 e9 f4 2a 1b 8f b2 72 0b ab bd ce 87 d9 b4 ca 46 c9 7c 0a 9f 92 fa 3a 4b f6 f7 4e 92 31 7f 4e be de 78 d2 be 9c 4f 87 75 5e 4c db b7 f9 74 54 dc 76 93 51 31 9c 4f b2 69 dd 4d b2 bb 59 51 d6 07 e9 24 eb 52 07 97 f9 34 1b 75 92 df 9f 24 49 6b 0e cd ab ba cc 87 75 6b eb c9 93 9b b4 4c 7e 1d 1c bc 3c 7c f3 fe e8 cd e0 d5 de bb c1 71 b2 9d 9c b5 5a dd a4 75 9b 5d 7c cc 6b fc 6b 52 fc 0b ff d9 3f a6 1f 15 fe 7f d1 3a df a2 d6 27 83 e3 93 f7 83 d7 83 fd c1 c1 09 34 d5 40 f4 86 65 96 d6 d9 60 9c e1 af 76 6b 94 df b4 3a 6a c0 93 d3 a3 c1 fb 57 6f 0f 76 4f f6 0e 0f a0 4d 4b 4f 45 43 54 16 00 35 14 ec a7 f5 75 8f 7e f0 58 e9 45 a5 bf c2 9f fc 6d 5a dc c2 b7 97 30 56 0f fe 84 0e 36 be 26 44 57 59 9d a4 49 9d 4f b2 62 5e 27 b7 b0 0e f0 f3 2a bf c9 a6 49 35 2c 66 19 d6 f9 db 2c 2d d3 49 f2 fb 2b 35 fe 43 72 39 95 df 0f e6 93 8b ac 7c d0 bd c8 a2 c3 8b df b2 61 fd 90 0c 8b 69 9d dd 71 51 99 d5 f3 72 5a 25 bf 4f b9 dd 13 5c 27 3d 37 04 e8 84 fb d9 e5 36 ed cb 69 57 77 dd d5 1d f1 2a 25 09 f7 25 1a b5 2f 60 99 5f 4d a9 91 ae 6b 9a 03 66 1f cc cc f3 4b a2 97 b4 bc a2 95 48 f2 2a 49 a7 f0 b3 4c 17 dd e4 36 4b 6e 53 f8 58 17 40 25 d9 70 5e 67 54 f9 72 9a 00 88 59 3a bc 4e a0 49 b9 50 fd e4 80 c3 1c 6a eb f6 d8 7c 04 eb 54 9b 4e 46 05 62 f9 3a 9f 5e f5 b0 0d fc 55 e1 80 73 a4 dd 8b 45 92 8e c7 d4 ff 24 ab af 8b 51 05 7f a7 d0 db 70 98 cd 70 75 2a 68 36 06 48 61 b1 b9 7b 0d 73 4f a2 fa eb fb 1d 2c 7c c0 52 f9 fd 18 a8 78 7a e5 af 99 5e 98 33 85 a4 73 77 69 7e 2a 8a 71 96 4e bd b5 c9 a7 37 c5 c7 8c 86 d9 29 af da 30 50 37 91 88 56 8b 02 18 Data Ascii: 3d69}kww5EqMA6s)G\i23 [~T?%97{vs"bU]]]]U]]d/d'o7}/^\|$:YcjVz~(lQWuvq?&'rF\|:KN1NxOu^LtTvQ1OiMYQ$R4u$IkukL~<\|qZu]\|kkR?:'4@e`vk:jWovOMKOECT5u~XEmZ0V6&DWYIOb^'I5,f,-I+5Cr9\|aiqQrZ%O\'=76iWw%%/`_MkfKHIL6KnSX@%p^gTrY:NIPj\|TNFb:^UsE$Qppuh6Ha{sO,\|Rxz^3swi~qN7)0P7V
May 27, 2022 14:31:07.100222111 CEST	1084	OUT	GET /uploads/1/4/1/8/141840186/1screenshot-2021-04-26-at-19-59-20-orig-orig-orig_orig.png HTTP/1.1 Host: document--1111011111.company.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://document--1111011111.company.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en
May 27, 2022 14:31:07.270840883 CEST	1103	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 May 2022 12:31:07 GMT Content-Type: image/png Content-Length: 46476 Connection: keep-alive Last-Modified: Mon, 10 May 2021 13:49:51 GMT x-rgw-object-type: Normal ETag: "86023205c6da4584ac9ad959a7504d4c" x-amz-request-id: tx000000000000002137be1-006284e178-b9fbc77-sfo1 X-Storage-Bucket: ze542 X-Storage-Object: e542893276ee236968914d1271b54a4afd7df253d4bfb04ff8e5fcda5817e397 X-Host: blu44.sf2p.intern.weebly.net Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 4f 00 00 00 66 08 06 00 00 00 13 75 aa 79 00 00 b5 53 49 44 41 54 78 da ec 5d 0d 93 e4 a8 0d cd ff ff 9f 49 25 b9 ab 4b d2 36 08 77 cf ac d3 b0 e8 1e 96 60 64 af d7 db b3 7b a2 ea 15 fa 78 c8 18 bb 7b 2c 03 3d 7f 5b bd 78 f1 e2 c5 8b 17 2f 5e bc 78 f1 e2 c5 8b 59 3c 79 f2 e2 c5 8b 17 2f 5e bc 78 f1 e2 c5 8b 17 4f 9e bc 78 f1 e2 c5 8b 17 2f 5e bc 78 f1 e2 c5 93 27 2f 5e bc 78 f1 e2 c5 8b 17 2f 5e bc 78 f1 e4 c9 8b 17 2f 5e bc 78 f1 e2 c5 8b 17 2f 5e 3c 79 f2 e2 c5 8b 17 2f 5e bc 78 f1 e2 c5 8b 97 9f 2d 79 5a 52 5a 1d af 00 95 fa be 3c 71 5f d6 07 c0 7a 83 fb 90 73 07 a4 1f b2 a1 c3 ae fc 1a fa 98 fa d8 67 fa 88 da 38 07 33 8e 2d 9b 63 7a ff aa 2f e3 3e 68 d8 fd d4 9c 7b 01 ae f3 1d b6 0c 96 a5 ce 7d 7c 64 1d 72 06 cb b2 ad e6 54 b0 2c 21 38 6f 03 3e ec 90 33 7a f2 db bd 91 0b 1e b5 16 76 f8 35 67 e8 7f 68 bc 3d d6 47 d7 fe 36 92 b9 ce 6d cb d8 2e f9 73 3a c0 a2 60 73 c1 3b ce 5d 24 2f 31 c7 88 cf bc 34 6e 83 98 0d 8c 63 5c e1 e7 be 94 6b fa f6 b8 06 0f db 7f 3c e6 7d 80 87 02 da 30 04 bf 1f 87 6b 7c 0e 75 1b f6 01 b0 fd 50 5d db 0c 3f e4 93 c7 3c ee b7 fb 68 fb af d7 ad 3e bc b2 cf 47 af f5 67 bf 17 5e 7f ed ed 63 be fe fe b5 c7 d1 e6 9f ef 13 e4 d3 f7 c2 bd 2f 7f f9 f2 be 4d 9e e6 db ff d6 79 da 62 12 ba f2 df 7a ba cd 9f 58 3f 19 cf e6 d8 31 d1 17 f8 27 2b de ed c0 f1 8d f3 0c f3 6d 8d 61 5e 13 85 95 32 62 c1 53 8f 4f 3d d6 fa a9 67 c4 af a0 c0 72 e1 d5 ba 22 f3 e3 c8 3f d6 61 8b 19 42 e7 3e 15 7c cc e7 be 07 e8 3d 7f 12 e7 40 76 1f 01 dd c7 02 12 f1 48 c7 de da c3 cc 31 04 9f 6d 73 91 59 8f 51 f1 21 97 9a 65 d9 87 5a 17 5d f0 43 b7 6f e0 07 19 53 f0 03 db f9 5e 61 39 83 d6 58 64 ca 50 1c d8 21 a7 a6 6d 2a 89 7d d5 53 7c ca c5 56 f4 65 29 72 b5 47 c8 a5 ae 6d 33 98 2f 6c dc 3e d7 0b c1 76 af bc fb 52 50 ec f7 82 2a 2f 89 65 24 16 59 ae ba c6 f2 44 e5 dc a5 1d 72 fb 02 03 fe 22 e7 e4 b4 9c 5b 08 d3 1a e6 27 42 c6 ad d6 53 f9 fc c6 e2 83 1f 32 eb cc 07 57 61 2a 1c 85 79 be 15 ff 3c 95 ba 41 cb 9f 8b 3e 67 5e 45 68 f9 a1 ad 4b cc 12 8f db 04 cd c7 31 80 0d 27 ca 5a f5 b1 e8 5b de c4 7c f4 e3 a3 78 7c cc 44 b1 bd 7e 78 e1 b0 34 d7 ad a3 3f 7a fe 04 1b e2 f1 cb 2b d6 c1 67 c0 0f 5d f7 41 bc 10 3b 0c dc f7 4b ae ab 3d eb 83 36 db cf 16 b7 15 48 84 cf 31 7f 5f 40 17 48 52 d6 d0 31 6c 90 e5 37 fb 68 ea da 66 c4 80 7c 0c e8 63 f8 38 46 b4 63 80 73 cd 38 da f1 ed 71 a4 73 e3 78 fe 5a 9f b8 5f cf f5 f1 f8 b5 b6 8f 71 5d 1f 71 ad 5f dd 47 eb 5e 1a c3 fe Data Ascii: PNGIHDROfuySIDATx]I%K6w`d{x{,=[x/^xY<y/^xOx/^x'/^x/^x/^x/^<y/^x-yZRZ<q_zsg83-cz/>h{}\|drT,!8o>3zv5gh=G6m.s:`s;]$/14nc\k<}0k\|uP]?<h>Gg^c/MybzX?1'+ma^2bSO=gr"?aB>\|=@vH1msYQ!eZ]CoS^a9XdP!m}S\|Ve)rGm3/l>vRP/e$YDr"['BS2Wa*y<A>g^EhK1'Z[\|x\|D~x4?z+g]A;K=6H1_@HR1l7hf\|c8Fcs8qsxZ_q]q_G^
May 27, 2022 14:31:52.444291115 CEST	2585	OUT	Data Raw: 00 Data Ascii:
May 27, 2022 14:32:37.615088940 CEST	17479	OUT	Data Raw: 00 Data Ascii:

Timestamp	kBytes transferred	Direction	Data
May 27, 2022 14:31:06.644011974 CEST	231	OUT	GET /css/sites.css?buildTime=1651866883 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://document--1111011111.company.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 27, 2022 14:31:06.659873009 CEST	235	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css Last-Modified: Thu, 19 May 2022 17:44:26 GMT ETag: W/"628681fa-347ac" Expires: Fri, 03 Jun 2022 19:57:18 GMT Cache-Control: max-age=1209600 X-Host: grn89.sf2p.intern.weebly.net Content-Encoding: gzip Via: 1.1 varnish, 1.1 varnish Content-Length: 29746 Accept-Ranges: bytes Date: Fri, 27 May 2022 12:31:06 GMT Age: 578029 Connection: keep-alive X-Served-By: cache-sjc10034-SJC, cache-mxp6924-MXP X-Cache: HIT, HIT X-Cache-Hits: 1, 75 X-Timer: S1653654667.651470,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 8b 92 e3 b8 91 28 fa 2b 3c 55 d1 31 5d b3 a2 9a e2 43 8f 52 78 8e 3d 63 cf ae 23 76 6d c7 f1 9e bd 27 ee b1 a3 83 92 a8 2a ba 29 51 4b 4a f5 b0 a2 fe fd e2 49 26 5e 24 48 51 35 33 77 ba 35 3d 2d 91 40 22 91 48 20 13 89 44 e6 6f bf 24 af db 22 de 25 a5 53 1e d2 fd d9 fb 70 3e 16 f1 be dc e6 c5 ee be c8 8f f1 31 f9 e8 6d 92 87 bb b7 89 a7 7b 17 4c e9 db b7 4f df fe 0f e7 7f 25 db 2c 79 71 9e 26 e3 68 ec 39 ae f3 78 3c 1e ca fb 4f 9f 1e d2 e3 e3 69 35 5e e7 bb 4f 59 92 fc 23 2f 36 f1 fe 53 41 0b 7f fb 69 fc 50 a4 9b f3 26 2d 0f 59 fc 7a 9f ee b3 74 9f b8 ab 2c 5f 7f 59 f2 87 ee ae 74 71 e9 55 fe 52 3d c3 bf 97 df 8a d5 96 ff cc f3 dd fd 64 c9 cb bb cf 45 7c b8 c7 ff 5b 4a 3f 0f f1 66 93 ee 1f ee bd e5 2e 2e 1e d2 3d fa 72 c8 cb f4 98 e6 fb fb 22 c9 e2 63 fa 94 2c 9f d3 cd f1 f1 1e 77 1c 95 42 b5 eb 9f 59 72 3c 26 85 5b 1e e2 35 86 e2 7a e3 60 92 ec 9c ff 91 ee 0e 79 71 8c f7 c7 e5 b7 52 91 3d 22 5a 9c c1 12 cf 88 0e 10 42 18 88 10 b2 b4 3c ba e5 f1 35 4b dc e3 eb 21 41 10 f6 c9 1b 21 d6 fd 2a 41 63 90 8c e8 8f 78 8b da 39 6b 9b 13 db e0 cf 1e d3 63 42 1e 26 fc 91 d8 3b da 88 f3 ad d0 0c fa 79 79 43 0c 32 1d 71 3e 48 f7 13 67 e2 c4 a7 63 be 14 7e 71 2c ce 68 d0 dd 32 fd 27 06 bc 42 ad a0 b6 d1 93 66 1c f5 55 fe ef 3a 8b cb f2 db df dc e0 b2 9f 3f af f3 cc bd f9 fb 95 18 6f 93 16 c9 9a 70 13 6a e6 b4 db 2f f5 4f 2f 1a b5 46 86 7d 4a 8a 63 ba 8e 33 37 ce d2 87 fd fd 31 af 79 7e e2 1d 18 fd 10 11 92 2c 3b ab 80 78 ef 28 35 da 46 8a 92 e9 94 65 e5 ba 48 92 bd 03 60 8f d0 42 91 1f e1 93 b3 cc 68 74 24 26 3e 78 b1 fc 96 7e 5f 2c c6 0b b1 d4 84 95 5a 4c c6 53 f4 67 56 17 45 8b 0e 79 20 14 f7 58 f1 79 30 0e f0 9f aa 38 7a e0 93 07 b0 f8 82 95 9e 45 55 b9 59 28 61 30 67 65 a6 53 09 01 f4 40 45 60 c6 4a 47 73 a9 7d f4 40 6d 7f ca 4b d7 14 08 65 0a 44 ac 4c 28 13 20 d4 11 20 64 a5 03 b9 ff 81 ae ff 01 2b ed d7 fd f7 e5 fe 57 c3 24 f7 7f a2 eb 3f 1f 2e b9 fb 55 ef 7f bb 4b 36 69 ec 7c dc a5 7b b6 02 39 e1 1c f1 e7 dd 19 40 79 29 2d d9 03 17 ec c6 21 b8 46 37 26 41 35 6c f8 04 15 eb c6 2a a8 42 37 6e 41 15 6c 18 06 15 eb c6 33 a8 42 37 b6 41 15 6c 38 07 15 eb c6 3c 78 6c da f8 47 cb 40 5e b2 13 f8 a7 dc 59 f2 0f 2e d8 8d 7f 70 8d 6e fc 83 6a d8 f0 0f 2a d6 8d 7f Data Ascii: (+<U1]CRx=c#vm')QKJI&^$HQ53w5=-@"H Do$"%Sp>1m{LO%,yq&h9x<Oi5^OY#/6SAiP&-Yzt,_YtqUR=dE\|[J?f..=r"c,wBYr<&[5z`yqR="ZB<5K!A!Acx9kcB&;yyC2q>Hgc~q,h2'BfU:?opj/O/F}Jc371y~,;x(5FeH`Bht$&>x~_,ZLSgVEy Xy08zEUY(a0geS@E`JGs}@mKeDL( d+W$?.UK6i\|{9@y)-!F7&A5lB7nAl3B7Al8<xlG@^Y.pnj
May 27, 2022 14:31:06.659914970 CEST	236	IN	Data Raw: 50 85 6e fc 83 2a d8 f0 0f 2a d6 8d 7f 50 85 6e fc 83 2a d8 f0 0f 2a d6 8d 7f f0 d8 f4 e1 9f 69 28 f1 cf 6e 63 c9 3f b8 60 37 fe c1 35 ba f1 0f aa 61 c3 3f a8 58 37 fe 41 15 ba f1 0f aa 60 c3 3f a8 58 37 fe 41 15 ba f1 0f aa 60 c3 3f a8 58 37 fe Data Ascii: PnPni(nc?`75a?X7A`?X7A`?X7c=X.pnjPnPn*/35tg<bD/3XKgFzI/^T3 mshw`tWmP\AjUf&`
May 27, 2022 14:31:06.659997940 CEST	237	IN	Data Raw: a3 da 0a 51 27 9c 2d c8 b1 d8 23 d2 13 92 bd fb f2 52 56 d8 e0 4b 01 e0 14 f6 cd 7c 5c cf 6c 3c 35 d4 60 41 4c 3c 1c 68 47 98 d8 3e a4 80 9c 06 10 24 62 9f 2e 20 89 dd 5c 01 39 17 b0 dc 6d 3a 81 64 86 52 56 39 7b 68 a8 bc 45 8b 97 bb 45 8b ce 99 Data Ascii: Q'-#RVK\|\l<5`AL<hG>$b. \9m:dRV9{hEE}7)t)YTdoO?\J?s'dbvs6z&ndJP6n~@?HU0N`GcqJ(Bv%o[FMv).2QTWJ'"`
May 27, 2022 14:31:06.660037994 CEST	239	IN	Data Raw: 26 d9 ee 6b 32 51 07 98 7f 18 6b cd e6 c2 bd e7 25 9c 7b 41 3d b5 a6 cc bc eb 07 0d e6 66 f1 04 69 da 5a 12 a8 fc fc cd c8 a6 06 19 15 fe 46 d3 49 d1 c8 06 ed 2d 1a 5b 10 13 1d 44 8e 68 0d 0d 55 43 5f 05 4a cf fd 7f 0f 0a f6 97 28 22 73 7c 3d 8a Data Ascii: &k2Qk%{A=fiZFI-[DhUC_J("s\|=1h}Ix\\|dFeFZ+yIJ8O>v& ZNdEd{[K8Hj=qYE4@_KT%\|VDfaD~4',Yc;
May 27, 2022 14:31:06.660077095 CEST	240	IN	Data Raw: 14 53 41 23 e4 94 b7 94 9d 43 84 1c 78 c3 8d 6e be 2f 3c 95 f6 72 b0 fb 2e dd b9 82 13 dc 4b fb 89 bd d8 eb 43 2d 44 41 4a 40 78 a7 32 c0 ee 66 c2 49 31 7e 20 a6 69 a4 e1 26 21 aa 4c 53 d5 ad b0 8c b6 01 f1 1d 52 eb 38 ba 2e 9b 3c f7 43 05 06 13 Data Ascii: SA#Cxn/<r.KC-DAJ@x2fI1~ i&!LSR8.<COJ]Zd hb?<fB#6B;\KB--(OB<FB0=IWw)kYTR+ic.XgzPvTbXs<x[7AZLJ"XA
May 27, 2022 14:31:06.660145044 CEST	242	IN	Data Raw: 77 5f 42 86 98 5c c6 44 05 ed 83 0b db a9 cc 22 60 8d 0e 28 57 29 f4 35 8e 0b 20 bc 3c 73 15 4c b9 df 3f 5f c5 01 e7 be 21 f5 86 d3 7d 52 eb 15 d2 9a cf 85 30 73 17 84 cb e0 bf 25 d9 53 82 ed 0f ce 9f 92 13 5e ef aa 07 23 87 f4 bc 9a 87 98 ee 5c Data Ascii: w_B\D"`(W)5 <sL?_!}R0s%S^#\{H-t>'83jNyuIc%*p[wh;IpR7)=#9V=+,KkRp6g[1\yGi~!.m
May 27, 2022 14:31:06.660187960 CEST	243	IN	Data Raw: 60 28 dc b0 1c 00 59 30 8d 35 8e 20 b0 2b d0 57 bb cf a4 22 f6 f3 5e 4b 85 c1 c2 dd 03 19 62 b0 05 5d ee d8 3f 66 34 55 0b d9 99 51 db c7 ac 8b f1 8f 6f 7d c3 20 f4 43 5f da 0f cf 62 fc d1 b4 d6 68 7a 69 c4 53 d9 22 76 2a 5d 29 50 79 11 ef 1f 74 Data Ascii: `(Y05 +W"^Kb]?f4UQo} C_bhziS"v*])PytmF[r'I"9m.~N:J~_^wu?R[:%-IDN\O7<uB0;ckU8x<[n-qvx?ywC{j@n&)\+R
May 27, 2022 14:31:06.660227060 CEST	244	IN	Data Raw: f1 d6 87 a7 de 2a aa 3b 1d 88 9d e6 b7 30 71 da d1 64 c3 69 1e c5 ab 78 8b c3 d8 f2 28 bc 2e b9 71 cd 03 66 41 0f fa 89 b4 1a 0a c9 fd f8 e0 41 28 d2 d5 6c 70 83 5a 1b 9e 0d 90 5b 6b 79 99 a9 a1 5d a8 cf 8c be d1 71 b2 3b 1c 5f 05 e7 4c a9 e4 01 Data Ascii: *;0qdix(.qfAA(lpZ[ky]q;_LDpSbuv\|OnOpltAm{PiHt1'jL9#Bb"!LchayjG8_){KqFIja\|?%K
May 27, 2022 14:31:06.660264015 CEST	246	IN	Data Raw: c8 e0 0e 2a 5e 3a 49 5c e2 56 47 32 74 e1 6d 3b 76 42 d0 99 f6 a4 af 5a 8a c1 67 ee e9 80 af 47 4a 14 10 8e 72 e7 ab f5 76 bb 31 9c 9f 2f bc d1 64 8e 28 13 f9 f4 f8 5c 80 a3 39 e3 80 5d 89 b5 36 b8 bf 2d 96 e2 e8 ff 6d 61 60 12 70 3c fc 46 cf b4 Data Ascii: ^:I\VG2tm;vBZgGJrv1/d(\9]6-ma`p<Fa18-0pzuud,w\|Lme}Y@ZnDAwgvn::GX5C5vV<4rFLhM[+A#MR8KZBe+-P&ZrGgHYLEcr$<sB[B.M]h.
May 27, 2022 14:31:06.660332918 CEST	247	IN	Data Raw: 72 64 55 05 4d bf 63 8f 1a 64 52 38 2c 99 b8 7e 98 35 79 82 7b f4 a2 0e 00 62 df 8f 4e 75 ea 9e a0 91 15 b7 4a 51 1f 7c eb 70 29 1d 10 ee 54 09 60 8c 58 56 56 dd e1 41 10 5d 46 7a 91 3d 4b ef b7 69 81 46 96 e8 b6 bd ba d4 13 80 d0 3d 08 43 48 ef Data Ascii: rdUMcdR8,~5y{bNuJQ\|p)T`XVVA]Fz=KiF=CHSY\|YzT8@:`R/Tj5>"Sf1:[oV3\|*q+]-2ZY8S!H)"<jY:VbALh;"csvL
May 27, 2022 14:31:06.660372019 CEST	249	IN	Data Raw: b3 5e 6b 95 d6 c2 43 ea 47 8a b3 00 58 81 e9 28 f1 04 21 d9 8c 5f f7 1e d9 ad b5 8c 94 42 b9 a5 2e 28 b6 c9 87 b4 c1 f7 b4 c9 bd 54 83 c3 d8 f8 c6 e5 27 98 ed fc 9a ee 9f d0 ae 28 c7 21 f2 2b df 5b b6 d5 19 35 16 17 dc 6a f9 e6 48 2b 30 de 8d 2e Data Ascii: ^kCGX(!_B.(T'(!+[5jH+0.Y{lDj+*Bq<stW$ 7U3YNxeWme$NN@:gcK)Ub"$Qg4h8\|F7d4/#u Ty%)7#&Kbau
May 27, 2022 14:31:51.671363115 CEST	2580	OUT	Data Raw: 00 Data Ascii:
May 27, 2022 14:32:36.696976900 CEST	17472	OUT	Data Raw: 00 Data Ascii:

Timestamp	kBytes transferred	Direction	Data
May 27, 2022 14:31:06.644438982 CEST	231	OUT	GET /css/old/fancybox.css?1651866883 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://document--1111011111.company.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 27, 2022 14:31:06.660440922 CEST	251	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css Last-Modified: Thu, 19 May 2022 17:44:32 GMT ETag: "62868200-f47" Expires: Fri, 03 Jun 2022 19:57:23 GMT Cache-Control: max-age=1209600 X-Host: blu108.sf2p.intern.weebly.net Content-Encoding: gzip Via: 1.1 varnish, 1.1 varnish Content-Length: 1218 Accept-Ranges: bytes Date: Fri, 27 May 2022 12:31:06 GMT Age: 578024 Connection: keep-alive X-Served-By: cache-sjc10044-SJC, cache-mxp6920-MXP X-Cache: HIT, HIT X-Cache-Hits: 1, 1960 X-Timer: S1653654667.651967,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: *
May 27, 2022 14:31:06.660485983 CEST	252	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 9d 57 dd 72 a3 36 14 be ef 53 b0 f1 74 66 b3 63 61 20 f6 6e 16 ae da 8b 4c af fa 0a 1d 01 c2 56 23 24 46 c8 8e 5d ea 77 ef 91 04 46 20 93 ec 36 9e d8 92 90 ce cf 77 be 73 74 d8 7c f9 14 54 98 17 97 df c5 39 38 25 61 Data Ascii: Wr6Stfca nLV#$F]wF 6wst\|T98%aFvQN3yb %M8,78m_)wt{Jh%qoR(gtv\(S\HqrrIv"R3T:5kDK<y+8&Hp$9J$+z"Y
May 27, 2022 14:31:51.664185047 CEST	2580	OUT	Data Raw: 00 Data Ascii:
May 27, 2022 14:32:36.683933973 CEST	17471	OUT	Data Raw: 00 Data Ascii:

Timestamp	kBytes transferred	Direction	Data
May 27, 2022 14:31:06.644629955 CEST	232	OUT	GET /css/social-icons.css?buildtime=1651866883 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://document--1111011111.company.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 27, 2022 14:31:06.660593033 CEST	253	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css Last-Modified: Thu, 19 May 2022 17:44:26 GMT ETag: W/"628681fa-3319" Expires: Fri, 03 Jun 2022 19:57:20 GMT Cache-Control: max-age=1209600 X-Host: blu86.sf2p.intern.weebly.net Content-Encoding: gzip Via: 1.1 varnish, 1.1 varnish Content-Length: 1640 Accept-Ranges: bytes Date: Fri, 27 May 2022 12:31:06 GMT Age: 578026 Connection: keep-alive X-Served-By: cache-sjc10031-SJC, cache-mxp6937-MXP X-Cache: HIT, HIT X-Cache-Hits: 1, 1479 X-Timer: S1653654667.652356,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 5a cb 72 ea 38 10 dd cf 57 64 c8 e6 a6 2a 24 d8 10 02 a6 a6 66 fe 61 b6 b3 91 6d 01 2a 6c 8b b1 45 08 37 95 7f 1f c9 f2 83 47 4b 6a 1b d7 5d 4d 56 29 bb cf e9 a3 3e 46 ef bf d6 3c 13 e3 35 89 e8 57 f5 5f ca 92 53 30 3a 16 3c 62 24 19 ad 8a 3c 0a 0e 79 f2 e3 f5 35 8a 33 ff 85 c6 4c a4 a7 82 09 fa 12 f1 f4 55 61 8a d7 e3 df 65 f0 6b 05 7a a1 5c fc 29 8a 3f bc f9 9b bf 5c f8 fe 7c be 98 2f 9e 06 63 7a 64 74 cd 3e 9f 1e d6 3c 4f 89 f8 31 a2 69 48 e3 98 c6 63 be a7 99 38 ed e9 e8 e9 b9 6b 9e 23 5f af 6f 25 37 29 d4 eb 1e ac 42 d8 48 45 7e a0 3d e5 16 1f 9b db b2 54 2f db 04 32 6a f4 b4 2a 6d 3d 52 b6 d9 8a 20 53 6f 12 fd a8 10 a7 84 56 4f be 5f 8e 2a e3 58 33 8c e3 9c 85 61 28 df 86 54 72 d1 af 48 c6 cb d2 06 a3 7f e8 7c 12 8d ea 68 a9 6f bc cf 79 7c 88 44 47 64 15 1d f1 84 e7 0f 9d 72 af 4a 4c f0 b8 9e bc bf 93 c9 15 5f f1 ef 81 e4 d4 40 f8 0c c5 c2 a1 5f 21 89 76 9b 9c 1f b2 78 dc 3b 5f 40 d6 82 e6 1d b2 6a 80 b1 c1 e5 df 95 80 94 b0 04 2c d4 d4 66 12 02 65 31 c8 82 ae b5 4e e7 d3 70 4a 31 c5 52 64 88 12 a9 30 c0 94 6e 79 d0 86 b4 c1 a6 06 82 66 a8 4e 34 e4 7c 07 16 67 62 33 04 89 b4 98 e2 60 68 8c 09 df 96 cb 05 a6 60 35 21 a2 5c 75 28 64 50 e7 7c 68 93 2e 01 a6 06 c3 46 25 2c da e5 e3 84 ae 05 58 af d8 ea 15 1a 6c b3 cb 49 52 37 60 32 99 4f e3 08 55 c1 96 13 53 be 36 1a f0 ad 57 56 bc 75 d7 18 53 e3 6d ee e5 e5 80 06 15 8f 22 ec c3 a0 dd fe d9 58 da 36 4c 26 8b 59 87 52 96 a4 f8 2a 96 e1 d0 80 d5 2b 6f 57 0f cf 40 e6 02 18 4d 04 4b b7 70 db e7 c0 39 8d 33 e0 fb fe e6 d0 e5 1a e0 97 d6 d1 20 c8 9a 85 dd 9a 7d 72 28 c0 02 cd 6c c6 20 50 16 5b 2c e8 5a 6b 1c cf c2 e9 12 53 28 45 86 28 90 0a 03 0c e9 96 07 6d 47 1b 6c 6a 20 68 06 cb 0a 41 36 39 49 c1 ea bc db 1c c1 42 2d b6 b8 28 9a 69 c5 fa dd 5f 86 98 9a 35 8c 88 92 35 b1 d0 c4 a2 7b 46 b4 55 57 08 53 a3 41 bf 12 96 ed e4 0a 2e 03 0b e6 db ec 42 22 2d 6e 39 18 1a b3 16 0b 12 a2 26 cd 35 21 a2 66 75 28 64 55 e7 7c 68 a7 2e 01 a6 06 c3 bd 1c 93 b1 39 2d e0 e1 7b 69 ed ea 90 50 5b 7f e7 a0 a8 a5 47 91 ef f9 ef a8 ce a8 66 c4 f4 45 75 2c e0 56 8f 8c f8 3e f0 12 61 6a 34 e8 57 5e c0 03 c4 9b cd 29 37 c8 e2 91 19 dc 08 f5 e7 6f be 8f a9 95 e4 42 d4 47 46 41 13 b9 2e 59 d0 5e 34 b1 c6 c6 41 2e 88 43 1a 26 e0 Data Ascii: Zr8Wd$famlE7GKj]MV)>F<5W_S0:<b$<y53LUaekz\)?\\|/czdt><O1iHc8k#_o%7)BHE~=T/2jm=R SoVO_X3a(TrH\|hoy\|DGdrJL_@_!vx;_@j,fe1NpJ1Rd0nyfN4\|gb3`h`5!\u(dP\|h.F%,XlIR7`2OUS6WVuSm"X6L&YR*+oW@MKp93 }r(l P[,ZkS(E(mGlj hA69IB-(i_55{FUWSA.B"-n9&5!fu(dU\|h.9-{iP[GfEu,V>aj4W^)7oBGFA.Y^4A.C&
May 27, 2022 14:31:06.660644054 CEST	254	IN	Data Raw: f4 c9 b3 2e 70 51 38 8b 17 56 7c ad d8 9f 4d fd d9 1c 53 28 4d 87 a8 92 0e 04 4c e9 9a 0b ed cb 79 b8 a9 a1 b0 35 47 26 24 06 fc 64 3d ab 37 28 a0 cd 1c 2b 41 3b a9 96 0b f6 18 55 31 cd 87 29 96 8e 04 a7 d5 1d b3 e1 0d 3a 8f 37 35 16 74 e8 83 a5 Data Ascii: .pQ8V\|MS(MLy5G&$d=7(+A;U1):75tU"600;6x-#;%jlq/3]965DNhxbrg05*O:fB{rmj$?C6_pjTaj#w:gsoj,P9a!VX.o]/MbVrX&Wt&
May 27, 2022 14:31:51.671289921 CEST	2580	OUT	Data Raw: 00 Data Ascii:
May 27, 2022 14:32:36.696917057 CEST	17472	OUT	Data Raw: 00 Data Ascii:

Timestamp	kBytes transferred	Direction	Data
May 27, 2022 14:31:06.645133018 CEST	232	OUT	GET /js/lang/en/stl.js?buildTime=1651866883& HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept: / Referer: http://document--1111011111.company.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 27, 2022 14:31:06.661313057 CEST	265	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/javascript Last-Modified: Thu, 19 May 2022 17:43:17 GMT ETag: "628681b5-2c075" Expires: Fri, 03 Jun 2022 19:57:18 GMT Cache-Control: max-age=1209600 X-Host: grn87.sf2p.intern.weebly.net Content-Encoding: gzip Via: 1.1 varnish, 1.1 varnish Content-Length: 32604 Accept-Ranges: bytes Date: Fri, 27 May 2022 12:31:06 GMT Age: 578028 Connection: keep-alive X-Served-By: cache-sjc10043-SJC, cache-mxp6932-MXP X-Cache: HIT, HIT X-Cache-Hits: 1, 22 X-Timer: S1653654667.652116,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd db 76 1b 49 92 20 f8 dc fd 15 51 d5 d5 25 e5 94 88 14 25 e5 4d 95 95 35 bc 49 a2 44 52 4c 82 94 5a 39 9a c1 71 00 0e 20 c4 40 04 32 2e a4 90 6a 9d d3 2f fb 05 bb 2f f3 38 67 1f f6 cc 43 bf cd 1f e4 9f f4 97 ac dd dc c3 03 f0 40 04 40 68 67 cf 51 26 23 02 e6 e6 e6 ee e6 e6 66 e6 e6 e6 ff 78 1b c6 c3 e4 b6 d3 7b 1b fc 2d 90 e7 b7 5a f7 a3 f9 d2 fb bf fe 6b f0 e9 f3 5f ff b1 f7 b6 33 d6 79 37 cc f5 89 8a c7 85 1a eb ab 8b 13 00 1e 15 f1 20 0f 93 f8 7e 04 9f bf fa f4 8f ff 90 ea bc 48 e3 e0 de d7 5f ab 2c d3 79 b6 93 e5 6a 1c c6 e3 ce 2d e1 eb c4 3a ff fa 43 f6 35 82 7f fd cf f8 ff 7f fe 3a cb a3 ce 87 ec ef fd 22 8c 86 97 e1 54 ff 6d f7 d1 e3 27 7f be d7 49 f5 2c 52 03 7d ff 1e c3 dd 7b 10 50 25 7f fd c7 cf 48 4e 1e 85 7f b3 b5 67 5f 7d 92 8a b3 bf d2 af 99 50 0a 24 de d3 f1 3d 6a c0 28 8f fe 86 3f c1 9f fb b6 e4 57 01 10 7d a3 d2 60 e4 b6 26 a3 cf f4 3d 87 ef 79 94 fd 97 ec bf 62 5f 64 7f 95 cf 0a 3e ef a5 a9 9a 77 66 69 92 27 f9 7c a6 3b 59 14 0e 74 67 a0 a2 e8 be 4a c7 c5 54 c7 79 f6 20 d8 fd 0a cb 8c 92 34 b8 8f 05 43 28 f8 f0 af f0 e7 c7 40 75 22 1d 8f f3 09 bc fd e5 2f 5c e3 3f 50 75 9d 6c 16 85 f9 fd 7b 9f 3e dd fb 4b f8 97 7b 9f 3f df fb aa f3 21 09 e3 fb ea bf 84 ff 95 d0 7d 86 ff e0 9f 34 3a 0f fe 0e 85 4c 7f 7d fd df de bf cf fe d3 fd ce 5f fe fe 15 3e fc e9 eb 07 c1 bd 3f ed de fb 2a 78 4a e4 7f 7e f0 8f ff 00 0d 82 7a 5e 76 5f 9f 75 66 2a cd a0 8f 3f bd ff 63 3e d1 53 dd 19 ea 5c 85 51 f6 fe 8f 4f df ff f1 d0 3c 3f 30 bf 66 45 1f 1a ab 22 fa b9 6b 5f ec ef 83 89 1e 5c 27 45 4e bf 1f d8 17 fb 7b aa d5 f0 2c b9 a5 9f 2f e0 39 a0 17 fb 73 5f 0d ae 2f 93 fd 28 19 13 c4 3e bc 06 79 12 f0 87 92 88 89 4a 35 53 c0 4f 0f 4a e2 b3 41 1a ce 70 0c a5 01 ce bb 85 fa 35 9f d3 af 3f e3 5f fc aa a7 d0 73 b9 ce 3a 3a d2 34 6a 9d 41 92 5c 87 7a 27 99 e5 3b d0 80 ce 30 cc 06 91 02 de 4c a9 e0 e5 24 cc 82 5b dd 47 2e 0b 8a 4c 67 c1 54 a5 d7 3a 07 3e 0f 54 3c 0c f2 14 08 c7 97 5c 0f 26 71 02 d4 87 80 3c 78 3d 23 08 40 18 24 a3 20 27 24 61 14 05 50 4b 30 4f 0a f3 03 f0 4f c0 f5 03 f7 e8 8f 03 0d 3f 23 fb e4 93 24 d3 41 ac f5 50 0f b1 57 d2 02 46 7e a2 0d 21 1d e8 4b 20 27 9f a8 3c c8 92 a9 0e 80 31 87 c5 20 47 e2 e6 41 9c Data Ascii: vI Q%%M5IDRLZ9q @2.j//8gC@@hgQ&#fx{-Zk_3y7 ~H_,yj-:C5:"Tm'I,R}{P%HNg_}P$=j(?W}`&=yb_d>wfi'\|;YtgJTy 4C(@u"/\?Pul{>K{?!}4:L}_>?xJ~z^v_uf?c>S\QO<?0fE"k_\'EN{,/9s_/(>yJ5SOJAp5?_s::4jA\z';0L$[G.LgT:>T<\&q<x=#@$ '$aPK0OO?#$APWF~!K '<1 GA
May 27, 2022 14:31:06.661354065 CEST	266	IN	Data Raw: e4 c1 6d 92 5e 07 0a 29 87 1a 6e 43 c0 07 15 5a 5a a5 ca 4e cb 2e e9 17 79 9e c4 3b b9 fe c8 83 0d 8d 0b 5e 73 03 0e 18 d3 02 a2 59 d1 87 f9 d1 19 69 05 3c ab b3 9d 51 02 e4 a6 3b 59 38 8e 8b 59 6f 97 c7 33 57 29 f5 45 1a 24 b7 71 30 4a b5 6d de Data Ascii: m^)nCZZN.y;^sYi<Q;Y8Yo3W)E$q0JmZ +Yf<eZe`qg5Y@C8txLu<+/t=P)}CAX*-w0Wx6i^h'QxQ{#S"8NADy`pE0Pq1" yir
May 27, 2022 14:31:06.661391020 CEST	268	IN	Data Raw: 4e d2 79 07 87 61 87 3d fd 46 27 4f 46 1b 20 94 ad 88 0e 39 ef 8c 72 9f 44 43 dc 31 b8 33 3a ee 11 30 3e 82 bd 1b e8 3d d5 8f da b0 65 1d ce 5f c5 03 29 54 1a 87 64 0b 8c cc ad 1d f8 9f 02 ab 43 2b b0 92 4d 53 e9 a5 3d 0a 4b d4 30 1f 48 f7 7b 36 Data Ascii: Nya=F'OF 9rDC13:0>=e_)TdC+MS=K0H{6N@'B9/w_q=h0<3>Jy0vK,@P{GrD}9k<`#?0&~AdG,x5rAacTm.$By5Be6ZtFDK
May 27, 2022 14:31:06.661429882 CEST	269	IN	Data Raw: d8 7a 75 24 b3 bc 67 8e 48 1c b2 fc ca 74 8c e8 99 70 05 bd 9c 67 6b e3 04 98 30 86 7f 61 0e f2 dc 8e ca fb 7b b0 02 12 7a 6f 6f d1 16 c5 43 09 16 5d b7 32 bb 01 42 5e be 38 b9 b5 23 e3 0e 80 54 2c 35 ae d7 2c f2 bc f4 58 56 11 17 b8 72 66 c1 3b Data Ascii: zu$gHtpgk0a{zooC]2B^8#T,5,XVrf;RP)A3 7#_G;lh^0S@'^J%rHCaI81Aa1-KqP}Aex7a2CV=2#@('__]gW
May 27, 2022 14:31:06.661468029 CEST	270	IN	Data Raw: 09 88 e0 69 87 ad c0 4c 4f b8 fd 9c 91 b6 87 3a 23 28 9c 44 c0 0c 0a 37 6f 5f 2c 36 6f 00 0c b2 c5 e6 19 74 0d cd 3b 10 b0 ad 37 4f df b8 8d e3 b7 0c 93 36 95 aa c1 11 7e 0c e8 63 2b 05 c1 87 12 4c e4 45 84 b8 85 b5 29 ba 30 06 3d 6b 88 83 00 08 Data Ascii: iLO:#(D7o_,6ot;7O6~c+LE)0=kJOk,CN,rZyiu4Cy^89P*%PU<6Tde%<&Rr7Am&CT2@+.g`k7Hs6aceH"(<<F
May 27, 2022 14:31:06.661508083 CEST	272	IN	Data Raw: fa eb 10 bc 34 1a 7a 69 28 38 03 42 6f 9a 0c 61 02 61 ee b7 4c 47 5c da 9e a8 9a aa 8f e1 b4 98 a2 bb e8 63 0f 0f 0a a8 01 70 55 26 cc 48 bf e1 ea c6 fa 93 fb fb fa f8 77 57 e0 df 2d 71 b7 46 cd 5f 7a 1f a5 f9 f8 e2 3a 53 5b 60 40 4f 8d c6 d0 94 Data Ascii: 4zi(8BoaaLG\cpU&HwW-qF_z:S[`@O3&oanQ~(E=<<U0K?$+r%%3!h%A:,'D2uu$dux%0r=--34\'xqe
May 27, 2022 14:31:06.661818027 CEST	282	IN	Data Raw: b6 9e 16 29 50 29 5c 4b 49 2d 1e 43 89 fe 18 0e 92 83 50 6e 16 e7 d7 00 df db 22 40 9b 03 14 01 29 6f de 9a 4a 33 95 5d e4 31 90 5d b0 d6 89 da e8 7c 68 49 c0 7e 32 4e c4 b5 fc 73 11 82 72 cb c5 be a9 ef c0 23 da 90 90 85 8d 9f eb 3b b0 01 0f 3a Data Ascii: )P)\KI-CPn"@)oJ3]1]\|hI~2Nsr#;:sph,oM862Ll.^M"-i"+[d+s.646[AAP<nsUD\~Vg[v5{j:?EyJpZny21ea)O2~.
May 27, 2022 14:31:06.661923885 CEST	283	IN	Data Raw: b6 d6 78 e1 9a cb be ba 55 1f c0 f4 08 4d be 19 74 7f 2b 09 c9 c4 44 fe c1 09 c6 e3 bf b5 56 5b 3d 42 5e d1 a7 60 e3 e5 b2 cc da b7 36 45 4f d5 58 0d 8d df 3f 89 92 29 34 bf 7d 33 2e 61 ed 00 b9 36 63 5d e2 ac 00 a5 f2 9e 8a 92 91 a9 7a 41 db e5 Data Ascii: xUMt+DV[=B^`6EOX?)4}3.a6c]zA`AHt;aEJb.JhTG`KstKgA7'w[;{R-+>s/N3}WVYY{fY@{^JasHn,r%W)1z_9"A}~r0nD-u
May 27, 2022 14:31:06.661962986 CEST	284	IN	Data Raw: 9a 64 59 0d 58 77 11 0c 73 4a 76 0b 7f 33 4e 9f 1b dd 43 65 c1 73 68 ad 4f 1f 04 38 b3 48 d4 f6 dd f9 be 01 50 bf ff bb 6f fe 22 cc 85 85 89 eb d0 08 cf a3 97 6e da 2f 7c 6b 0c 42 b1 0c 3b 0f 55 f1 fb bf 7b 21 2e 58 a3 b8 08 a1 f5 3a 78 a9 62 4d Data Ascii: dYXwsJv3NCeshO8HPo"n/\|kB;U{!.X:xbM>3h.~~zz9C]oX)X,QfK.(_ga[z_&=\|wK`uZ[$,vhMA29z5K1/U6+D'f<P
May 27, 2022 14:31:06.662003040 CEST	286	IN	Data Raw: 48 2a fb 5c 13 2e 6e e9 c2 b4 88 75 18 1c e2 98 67 b8 2c f9 b9 4c 78 a3 88 28 2e c8 0b f3 4c 88 c5 70 94 58 05 cf 54 25 2c a6 84 3b 3c 36 70 05 50 eb 03 79 f5 c2 e8 43 d3 7e 32 f4 57 77 70 7a 61 60 74 9a 24 5e 26 38 10 e5 af 3c 2c ec 85 7a 67 6a Data Ascii: H*\.nug,Lx(.LpXT%,;<6pPyC~2Wwpza`t$^&8<,zgjJn=#2\|e.W1>xqbgN"=1IamQx $YpFL^#]"x9x\+sfkC=Mx6wQ43^6]XqcaW{7Ixq!
May 27, 2022 14:31:06.662041903 CEST	287	IN	Data Raw: 6b c9 e7 17 ef 04 96 38 c2 5f a3 b0 c4 b9 f6 f3 fb b9 08 d9 f2 44 9c b7 c3 cf 65 7b f5 3c cc 07 2a 4c fd dd 25 ae 26 30 fd 6a 39 e2 52 20 30 17 b0 7f 7e 9d 8b 7d ee 0d 8b 2f c1 7e 16 c5 fb 67 55 63 5d 5d 88 19 77 f1 fb ff 2c e2 d0 af 53 5c bc 16 Data Ascii: k8_De{<*L%&0j9R 0~}/~gUc]]w,S\dZ\b`9:?YOXFuUoO~z+C~#q^9p<97_#;pA<ksQ!pez7&pl\|HAfmTXgUX^&^:I{<Vr
May 27, 2022 14:31:51.671353102 CEST	2580	OUT	Data Raw: 00 Data Ascii:
May 27, 2022 14:32:36.694885969 CEST	17472	OUT	Data Raw: 00 Data Ascii:

Timestamp	kBytes transferred	Direction	Data
May 27, 2022 14:31:06.645284891 CEST	233	OUT	GET /js/site/main.js?buildTime=1651866883 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept: / Referer: http://document--1111011111.company.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 27, 2022 14:31:06.661016941 CEST	259	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/javascript Last-Modified: Mon, 23 May 2022 16:19:09 GMT ETag: "628bb3fd-74804" Expires: Tue, 07 Jun 2022 10:01:47 GMT Cache-Control: max-age=1209600 X-Host: blu85.sf2p.intern.weebly.net Content-Encoding: gzip Via: 1.1 varnish, 1.1 varnish Content-Length: 146400 Accept-Ranges: bytes Date: Fri, 27 May 2022 12:31:06 GMT Age: 268159 Connection: keep-alive X-Served-By: cache-sjc10042-SJC, cache-mxp6962-MXP X-Cache: HIT, HIT X-Cache-Hits: 1, 605 X-Timer: S1653654667.652785,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: *
May 27, 2022 14:31:06.661159992 CEST	261	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bc bd 7b 7f db 36 b2 00 fa ff fd 14 32 db 3a a4 45 bd ec 24 4d 28 33 fa a5 71 d2 64 b7 69 b2 b1 bb d9 56 d6 fa d2 12 64 b3 a1 49 95 a4 e2 b8 92 ce 67 bf f3 00 40 80 a2 92 f4 ec 9e bb dd c8 24 88 c7 00 18 0c e6 85 81 Data Ascii: {62:E$M(3qdiVdIg@$;_2RWxQ*8ecgLZd#=T52#%4p<Nn"z8m2,0x9fFEr\|Jo`-]L"[uTMB]w%8l6P
May 27, 2022 14:31:06.661201954 CEST	262	IN	Data Raw: 84 d2 dc 32 ca b1 73 01 60 c5 ee d1 7d d8 5e 14 81 36 36 09 09 45 79 1d 17 1b 17 ab 7e b0 93 2c 57 4d 64 7e 41 db 0b f2 06 de 4a 92 eb 23 cf 47 9a ed 97 36 d5 e6 3a b2 ee 0f d1 f4 c3 65 96 8a b0 80 e2 b1 0f e9 de 5f e8 31 32 47 2d 6c 11 d8 97 6c Data Ascii: 2s`}^66Ey~,WMd~AJ#G6:e_12G-ll!s;c%R>42=`sX5HKoEZ[`<;e#tu+,#j5dnS^?;}tCRSMgY:LWB(!nggoCbzB,
May 27, 2022 14:31:06.661242008 CEST	264	IN	Data Raw: 52 f1 60 8b 5c 7c 8c b3 65 f1 b4 5a 12 bb a6 b4 8e 9f 9b 59 58 cb e2 4f c3 5d b5 d2 a0 10 3e 57 38 87 9b 64 e6 c9 d4 30 1b d7 bf b3 31 23 e7 6c ab 12 72 e4 c4 f9 ed d1 9e ff c7 32 4a dc 19 24 21 ab 14 31 37 c7 9a 74 e3 fb 54 7e 5f 99 b0 43 9a 9a Data Ascii: R`\\|eZYXO]>W8d01#lr2J$!17tT~_CQno,5'(n-z[un_2y@iGH?loXM{+Zw]log8b&+Y5B,1!@Il+j"C1Kldj[mQx&
May 27, 2022 14:31:06.661547899 CEST	273	IN	Data Raw: c6 4c f0 fe 3e 0c 4d 96 a3 b5 a9 12 bf 6e 42 84 43 ba 7d d4 4a 7a a3 5a 02 a9 df 24 ed 19 4f fc 3b fc b9 54 fe 8d b7 08 d4 6c e6 9f 21 6d 41 bc f4 4f e1 89 87 95 32 5c 84 7b d7 fb fb b7 fb fb a7 23 e8 24 83 f0 39 d4 4a 08 b5 48 3b 09 e3 89 ce 9d Data Ascii: L>MnBC}JzZ$O;Tl!mAO2\{#$9JH;EV3EK Y!iv]pZt&5F AbNi.\|&8KZd{)JMlh,^@(AFs%}dZ05za}7Rll<BW"6U5#Iisf
May 27, 2022 14:31:06.661586046 CEST	275	IN	Data Raw: bc 38 70 bb 07 de b7 3d a9 40 19 3b d4 b5 6a 31 c5 e8 79 e7 50 0a 52 6e a7 52 59 60 1e c0 a7 02 cf 54 12 6a 5e c9 27 76 36 e5 d9 e1 7e 9d d9 ca 51 99 35 00 7c fd e8 f8 df ee e4 5b bf 15 49 17 57 a6 4b b6 88 1d 9a d4 9c 8e 1b 34 a9 41 89 5f ab 2b Data Ascii: 8p=@;j1yPRnRY`Tj^'v6~Q5\|[IWK4A_++`)o3s6#!cG(oG"_RbTgS{V4q.m[V}<zWWRJQEeUIO1~H+KhOSe?r$^y6gKrK=X1t&5
May 27, 2022 14:31:06.661624908 CEST	276	IN	Data Raw: 9b 22 16 ad f1 f9 6d 77 22 0f 16 be 03 0a d7 93 f2 e7 0f 61 ef 9b ee 01 bc bc 02 26 27 ca 4b 31 93 8e 04 9a b4 bd aa 93 36 98 b4 8f 51 12 3c e8 fb 51 89 5e 7c 3b 04 41 dd 1b f4 e5 bc 4e 61 b6 2b 27 3d f2 d1 23 17 bd fd 9e e3 85 ac 2b 03 2c cf 4a Data Ascii: "mw"a&'K16Q<Q^\|;ANa+'=#+,JC[qH*\3oX@ytU&K%x,OK76!cF'm;Q>3k=2\|QS&@tUVgkmm:ZB-Y
May 27, 2022 14:31:06.661664009 CEST	277	IN	Data Raw: c6 61 6f d8 9a 65 37 51 9c 86 3a ea 6c 25 d2 67 45 89 92 f3 c6 08 ab bc 74 b7 c7 c7 d2 56 81 5c 5c 94 09 05 d7 d8 70 1c a5 d5 e5 32 4e 66 18 2a 33 b0 14 31 5d 9d 6e ab 64 46 f5 cf 1c 97 c4 08 86 5b ab c7 f8 d2 5c 93 59 94 59 e6 a4 41 55 b2 b3 3f Data Ascii: aoe7Q:l%gEtV\\p2Nf*31]ndF[\YYAU?KX(h\|MHbUM\|V7f$7fU_1'-\-~\p\Z{yuKYP0@;J;?t@_=W~/_E;''^,+jr}-yRs
May 27, 2022 14:31:06.661734104 CEST	279	IN	Data Raw: 3a 83 21 3a aa d5 98 4e 60 ce 90 d5 74 2e 80 d9 1e d2 ad 4a 0b 8c d8 0c 24 33 a4 e1 39 aa 0d 0f f4 76 0e 9d c6 03 c4 4a 2a 9f db d7 55 44 e3 92 dc ef f4 f1 7e 6d 58 57 7b 26 da d2 d1 91 74 84 c9 01 3d 6e 50 37 46 e3 36 fa 9f ff 11 01 a1 d6 8b 24 Data Ascii: :!:N`t.J$39vJUD~mXW{&t=nP7F6$JTLr-b)Y]nO@RXo 64x+Y[3Q9kh?$`.g" ;xB&onE0:d>Eun\
May 27, 2022 14:31:06.661772013 CEST	280	IN	Data Raw: c4 20 d1 c4 e4 4a 16 de dc 95 a2 8a a1 94 5a 4b 83 f9 9e 86 79 c5 16 c3 e6 6d 70 b4 a3 38 a8 6e 17 e2 10 76 46 5d 0d 32 29 d3 3a d8 27 cd 4a f0 c0 2e f1 41 0c 9c e2 94 ae 25 7b b4 b9 36 58 4b 66 b2 11 01 31 0a 7d e6 2e dd 6b 3c 9d 85 1d bd ae 2c Data Ascii: JZKymp8nvF]2):'J.A%{6XKf1}.k<,L96.ry^kDGKd4BXbd'HyX@GfmeZzCH<A(lAUei$mSX!@.Bb7a6D\]_gS-"HQ\|
May 27, 2022 14:31:06.662282944 CEST	294	IN	Data Raw: f5 4b 15 78 32 98 d2 5f 07 49 d7 29 49 e6 93 c1 57 c0 28 23 37 7d 35 98 06 70 9e cf 1b f2 57 43 aa 2e e6 36 dc 5a 2e b3 2c 11 51 0a fc 32 be 6a 01 88 49 65 6e 58 00 9b 81 32 e5 ba 2f f6 35 1d c9 19 09 8c 5e 33 58 9b bf 56 d3 8a 3b 5e 8d da 46 0d Data Ascii: Kx2_I)IW(#7}5pWC.6Z.,Q2jIenX2/5^3XV;^F1"@jyJDw'T.6_?Wg;t;[70kWqBkQ0$1nT*Jw`8jt5<da^5!$[)yAM(QOyq!^$eF31F\|";d
May 27, 2022 14:31:07.037585020 CEST	898	OUT	GET /js/site/main-customer-accounts-site.js?buildTime=1651866883 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept: / Referer: http://document--1111011111.company.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 27, 2022 14:31:07.053304911 CEST	900	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/javascript Last-Modified: Thu, 19 May 2022 17:44:49 GMT ETag: "62868211-8250f" Expires: Fri, 03 Jun 2022 19:57:19 GMT Cache-Control: max-age=1209600 X-Host: blu94.sf2p.intern.weebly.net Content-Encoding: gzip Via: 1.1 varnish, 1.1 varnish Content-Length: 158975 Accept-Ranges: bytes Date: Fri, 27 May 2022 12:31:07 GMT Age: 578028 Connection: keep-alive X-Served-By: cache-sjc10033-SJC, cache-mxp6962-MXP X-Cache: HIT, HIT X-Cache-Hits: 1, 5 X-Timer: S1653654667.045205,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 7b 77 db 46 f2 28 f8 ff 7e 0a 09 e3 91 01 13 a2 44 d9 71 62 d0 08 af fc 4a 3c 63 c5 1e 4b 1e 27 a1 18 2e 44 36 25 d8 14 c0 00 a0 65 45 e4 7e f6 ad 47 3f 01 50 b6 e7 37 77 cf 3d 67 f3 10 81 46 3f aa bb ab eb d5 d5 d5 fe 6c 99 4d aa 34 cf 7c 11 dc 7c 4a 8a ad 2a be 59 f7 55 e2 56 e6 17 c1 4d 3a f3 ab 61 31 0a 0a 51 2d 8b 6c 0b 9f bb e2 f3 22 2f aa b2 8f 45 d2 18 93 e2 1b 99 16 dd ac c3 74 1a 15 e1 3c 4f a6 62 1a cd 92 79 29 d6 7d 81 c5 26 c9 7c ee a7 aa 74 98 86 e6 39 0b fa 69 97 8b c4 55 b1 14 7d d9 9c ce b1 ce ba 97 b1 e8 67 dd 49 5c c1 df 45 ec 5d 54 d5 a2 8c f6 f6 26 d3 ec a0 2b a6 69 75 79 5d a6 95 e8 4e f2 cb bd 0f e5 9e e7 e6 f2 3a 57 69 36 cd af ba 87 c7 c7 cf 4f 8e c7 4f 0e 8f 9f 77 3c ca b8 5a 41 4e d5 60 e6 ef 07 eb c0 1f 9a 91 09 2b 80 ee 46 28 40 e2 cc bf 7f d0 0b d6 61 3d 07 0e 46 d1 df f6 8b 58 7f a1 d1 93 ed be 17 e2 6c 7e bd 1d c7 cb 6c 2a 66 69 26 a6 3b 3b ce a7 ee 87 7f 2d 45 e1 e4 08 6e 24 54 6d 19 d7 ee 37 99 c8 83 0c 00 01 50 22 08 0b b7 41 df 74 a3 08 36 f5 21 4c a9 17 c3 cc ef 05 a3 30 8d 6d 24 71 00 89 e5 db f8 bd 79 5a ad 00 83 f4 5b 77 59 cd 63 e7 6d b5 6a a9 0e 3e cd 92 74 2e a6 27 f3 32 6e 49 5b ad 86 a3 7e 4b 7a 77 b1 2c 2f a0 1e 35 79 c2 6e 7a e6 34 3d fb 52 d3 2f aa 96 b6 31 b1 b5 71 fc 50 6b dd f3 fe 07 1d 7f d7 d6 fa bb 4d ad bf fb 52 eb a5 d3 7a f9 a5 d6 8f db 5a 3f de d4 fa f1 17 5b 17 d5 d3 3c ff 98 8a b8 15 bf e2 4c 5c 6d 3d 4b 2a 58 e4 98 f5 24 bd 14 7e d1 3d 97 4f 41 27 bb 77 f0 e0 de c3 7d fc af 27 ee 07 92 ca 78 80 b8 69 21 ca d8 eb 14 dd 2a 7f 77 f2 f4 b8 2a d2 ec dc 0f fa d3 7c b2 bc 14 59 05 4b 9f 5a 15 1d 0f 72 55 1d af bf e5 75 52 1b b2 c9 5c 24 45 03 36 7b 40 34 ec 00 b2 e7 85 bb b0 d2 ad f2 e7 2d 3d 53 94 93 5a 25 60 b3 b8 06 51 b7 5c cc d3 ca f7 fa 5e d0 9f e5 85 cf c3 b0 df 2f 1e 67 dd b9 c8 ce ab 8b 7e d1 e9 70 45 69 9c 01 ad ec 5f 5d c0 50 03 b1 9c 5c 24 c5 61 05 44 29 8e bd 2d 2f 48 e3 b4 5b 2e cf 4a ee 7a 0f a8 e6 0c 32 01 7c e2 f3 6b 20 d4 90 6b 3f d0 a4 d3 64 ac 64 33 40 71 f9 21 58 b7 4d 1c d3 10 20 b3 26 e9 ed f3 a7 87 6f 4e 9e fe 7c 38 7e f3 ee c9 ab 97 4f c7 ff 7c fe 9b 44 95 a1 d7 f6 d1 1b c5 de c3 57 b3 07 af 1f bd 3b 3e c4 7f 5e 1f 27 8f 26 2f 1e 1c Data Ascii: {wF(~DqbJ<cK'.D6%eE~G?P7w=gF?lM4\|\|JYUVM:a1Q-l"/Et<Oby)}&\|t9iU}gI\E]T&+iuy]N:Wi6OOw<ZAN`+F(@a=FXl~lfi&;;-En$Tm7P"At6!L0m$qyZ[wYcmj>t.'2nI[~Kzw,/5ynz4=R/1qPkMRzZ?[<L\m=KX$~=OA'w}'xi!w*\|YKZrUuR\$E6{@4-=SZ%`Q\^/g~pEi_]P\$aD)-/H[.Jz2\|k k?dd3@q!XM &oN\|8~O\|DW;>^'&/
May 27, 2022 14:31:07.525486946 CEST	1247	OUT	GET /js/wsnbn/snowday262.js HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept: / Referer: http://document--1111011111.company.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 27, 2022 14:31:07.541167021 CEST	1249	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/javascript Last-Modified: Wed, 25 May 2022 14:22:37 GMT ETag: "628e3bad-124fe" Expires: Thu, 09 Jun 2022 08:38:41 GMT Cache-Control: max-age=1209600 X-Host: blu11.sf2p.intern.weebly.net Content-Encoding: gzip Via: 1.1 varnish, 1.1 varnish Content-Length: 25752 Accept-Ranges: bytes Date: Fri, 27 May 2022 12:31:07 GMT Age: 100346 Connection: keep-alive X-Served-By: cache-sjc10069-SJC, cache-mxp6962-MXP X-Cache: HIT, HIT X-Cache-Hits: 1, 1953 X-Timer: S1653654668.533048,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c4 7d 6b 7b da c8 92 f0 e7 33 bf c2 d6 d9 f5 48 43 1b 03 be 06 ac 78 6d 27 76 ee c9 24 76 9c 84 30 7e 1a 10 20 0c 08 24 71 b3 61 7f fb 5b 55 7d 51 4b e0 24 73 ce ee be e7 64 8c d4 97 ea ee ea ea ba 75 a9 db 6e 8d 07 8d d8 0f 06 1b 9e 5d 67 6d d6 74 1e 74 4a c3 1e b0 ae f3 e0 b7 ec cd 76 75 50 13 4f 75 7a 9a f0 70 c3 77 e3 f9 d0 0b 5a 1b a1 37 1a fb a1 e7 ba 96 aa 6a 6d 6d c9 c4 0a d6 e9 6e 6d f9 ce 43 e8 c5 e3 70 b0 e1 03 d4 cd 82 b3 84 0c ae 13 b9 4c 44 b8 7d 77 e0 4d 37 9e 87 61 10 da d6 39 1f 0c 82 78 a3 e5 0f 9a 1b fd a0 39 ee 79 1b bf 5b b9 41 ce fa dd 72 2a 71 27 0c a6 1b fd 7c 23 68 7a ae f5 f6 fd b3 eb 37 cf 6f df bd bf ba bd 78 7f fd ee 99 c5 fa 04 af e3 62 ef dd 07 6f 36 0c c2 38 2a 3f 2c 97 15 1c 45 b5 50 cb 37 78 af 67 77 f2 32 8b a9 fe db 3d 31 c4 c0 a5 82 c5 5a b5 57 ab c8 ae 36 ec e0 24 28 f7 9c 25 eb b0 a4 a6 c7 04 f6 96 b2 14 36 a9 32 a9 17 fc 97 b0 d5 82 31 63 e9 96 5b a8 b4 8e 9b f9 9e 37 68 c7 9d 4a 2b 97 73 1e 1a 76 b3 da aa e9 16 1a 4b c7 7e 28 96 ab ba cf 12 06 13 68 62 b2 71 31 90 57 9f de bf a3 a9 c0 07 e7 01 ff ba 80 07 5b 57 16 c5 da bd a0 ce 7b ee 85 4a b5 64 5b 71 c7 8f 2c c7 76 18 55 14 a5 f2 8f c0 d4 e4 d3 b2 07 7a 7e 07 c7 c5 c2 89 55 80 99 2b 0f 70 e6 25 2e 9e f1 d8 cb 0f c3 20 0e 30 21 1f 07 08 64 d3 44 8d f3 b0 b6 8c ab 3b 7e e7 cd 13 d2 8a 2e fc 81 1f 7b 36 f6 37 3f e1 bd b1 f7 be 65 3b ce 09 bd b7 bd f8 fa ea fc 62 dc eb 7d f5 78 68 3b 39 6b db ca b5 6c 23 ef 6d 30 88 3b 90 51 5c 93 87 dd 00 50 39 eb 2a 93 f1 22 18 87 11 e5 94 b3 e0 fc c1 38 f6 d6 e7 7d f2 1a c1 a0 29 f2 be 59 e5 01 f4 ea b7 65 e5 53 1c fa 83 f6 ea 68 df 8d fb 75 2f 5c 4d 3f 0b 82 9e c7 07 bf 88 9e 34 56 96 44 96 8d 99 bb 53 fd 3e 2e c0 ff f0 2f 6f c2 df 83 42 61 9b 7e f6 e0 ef 61 a1 f5 7d 5c 3c ac ef d1 df fd ef e3 52 a1 d0 d8 a6 9f 16 fe 2d 1d d1 4b 89 5e 0e 0a f4 72 00 2f 2d af 85 7f 5b 2d 4c 82 9f 56 6d a7 cd bc a8 c1 87 bc de f3 b0 d1 ef df ad ef 33 6c 6a 56 6c 7d 9f 1d b6 e0 e1 49 eb ff a0 13 6d 3e 64 c0 4e bc 41 cc fa 5e cc dd 07 eb 7b 1d e6 e7 3b fc 65 d6 f7 98 1e 63 7c 1c d0 e3 00 1f 5b f4 d8 c2 c7 90 1e 43 8b fd 6e fd 5e fe 1d 06 f1 3b 24 7e a7 44 f8 59 b2 d0 1b 56 f4 1a 18 8d 03 20 9b 88 a6 d5 79 Data Ascii: }k{3HCxm'v$v0~ $qa[U}QK$sdun]gmttJvuPOuzpwZ7jmmnmCpLD}wM7a9x9y[Arq'\|#hz7oxbo68?,EP7xgw2=1ZW6$(%621c[7hJ+svK~(hbq1W[W{Jd[q,vUz~U+p%. 0!dD;~.{67?e;b}xh;9kl#m0;Q\P9*"8})YeShu/\M?4VDS>./oBa~a}\<R-K^r/-[-LVm3ljVl}Im>dNA^{;ec\|[Cn^;$~DYV y
May 27, 2022 14:31:52.546253920 CEST	2586	OUT	Data Raw: 00 Data Ascii:
May 27, 2022 14:32:37.565988064 CEST	17479	OUT	Data Raw: 00 Data Ascii:

Timestamp	kBytes transferred	Direction	Data
May 27, 2022 14:31:06.916435957 CEST	897	OUT	GET /files/theme/custom.js?1565969634 HTTP/1.1 Host: document--1111011111.company.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept: / Referer: http://document--1111011111.company.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en
May 27, 2022 14:31:07.093554974 CEST	1083	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 May 2022 12:31:07 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Last-Modified: Thu, 14 Oct 2021 18:47:17 GMT x-rgw-object-type: Normal ETag: W/"48e887857aec23f184b0aa49c18d2445" x-amz-request-id: tx000000000000000d1c66f-0061a70293-a9f3e81-sfo1 X-Storage-Bucket: z0567 X-Storage-Object: 0567021bc3973d113c6b0b6e68d0e9a8b53f38a7f60716c83214a133cc00139a X-Host: blu78.sf2p.intern.weebly.net Content-Encoding: gzip Data Raw: 37 31 38 0d 0a 1f 8b 08 00 00 00 00 00 00 03 e5 58 5b 6f db 36 14 7e cf af e0 dc 60 92 51 5b 71 b7 15 28 9a 3a 40 d7 a5 6b b0 76 d8 90 02 7b 28 8a 81 96 68 8b 2b 25 0a 14 e5 0b d6 fc f7 9d 43 52 12 25 4b 4e da 61 4f 0b 10 d8 16 c5 73 f9 ce 77 2e e4 5f bf 57 4c 1d c2 75 95 c7 9a cb 3c 3c 9f 92 bf cf ce 08 fc 5d 5c 90 d7 7c cf 12 92 d3 ad 79 70 1e ad f3 28 4e 59 fc e9 0d a3 09 53 bf c9 92 e3 1e 9e 6f c8 92 34 12 ca 58 49 21 ae c5 8c d8 6f af 04 2d 4b 94 4a dc df 96 2a 72 9e 31 d8 73 1e ea 94 97 d3 cb b3 66 8d af 49 f8 0d 2c 46 82 e5 1b 9d fa db 08 51 4c 57 2a bf 6c 9e dc f9 fb c2 f3 46 f3 34 b2 df de cb 22 9c 92 2b f2 74 d1 95 43 50 7d 44 93 c4 98 16 fa 66 7a c2 09 13 25 3b 25 78 b9 5c 92 41 c9 8a 65 72 cb 4e 0a 37 df ee 8c e3 80 f3 3b b9 e2 82 91 92 27 6c 45 55 79 e6 b0 66 fb 82 e6 09 5d 09 76 6b 57 7c 98 ed 22 4b 3a f0 b6 d0 22 b0 0e 57 34 09 36 04 b1 e0 f1 a7 60 d6 8a 68 6d 07 2f 0d ea 29 2d ad d9 5d e9 be 93 1d e8 ba af d5 fe 39 e8 ba 7b 7c 50 46 b6 59 50 cc ef 3b 87 cc 4d ae 99 da 52 41 84 94 45 8d 0b 77 0f df c2 33 1f 92 58 e6 89 61 e4 8c d0 d8 7e 26 95 a2 f6 9b e0 19 d7 3e 4e b1 ac 50 0e 08 58 5c 36 0f 51 8d 79 56 32 5d eb 6e 93 63 da e2 45 c2 7a ff d5 d2 ca 26 9f 3f 7b 29 72 b3 be 16 2c 63 b9 be de f3 52 97 ad 6d 1d 30 63 c1 a8 6a f4 58 e5 e3 30 52 67 45 cb 23 67 c3 e3 c7 3d 0c 5b c7 3b 68 be 42 cb d0 78 66 6d 23 cc 18 77 46 c6 0d ef 64 36 6c 8b b5 54 b5 07 36 1f 21 8b 9b 05 97 b6 8d 4e 84 74 c5 55 52 b2 03 7b 25 73 8d b9 60 e0 b5 02 78 ce f5 f3 56 be 2c b4 57 28 cc 5e 5a f6 c8 0c a6 86 c1 4a 26 87 60 3a 52 8b c2 1d cf 13 b9 9b 91 80 ae d7 7c 1f b4 e5 05 10 78 99 24 00 3a b0 8e 95 44 cb 1a 87 d2 bd 80 ea a2 3f 6b 76 b3 32 6c f7 9a 0c 69 34 37 79 12 ec 40 2f 9b 33 88 ad 54 c1 94 7c fb 2d da f7 c8 3e 85 c2 39 8f a9 d2 73 1a 4c 07 0a da c8 8b a9 ce 44 78 6a 6d 0a b9 54 08 1a b3 f0 e2 43 38 fd 78 b1 01 57 83 a9 97 46 ee 0b 50 f8 3d cf 98 ac f4 00 83 6b 67 0d 86 af 40 fe 8d 66 59 e9 73 cb 81 a1 35 8d d3 eb 2d a2 e4 af 9a ba f8 40 47 ff 33 57 6b be 3b 15 d1 8a e6 39 53 f3 9d a2 05 89 20 e3 34 e5 f0 1b 99 02 a1 9a 14 10 58 e0 c7 5c cb 62 32 b3 ef 3b 6a ce 53 43 22 78 11 c0 62 ea 0d e3 9b 54 43 79 7c 4c 26 c5 7e d2 22 3b 23 4f 9e 2e 16 ee f7 dd cc 02 ed f1 e5 f9 50 6d 1d e3 b1 63 e3 1a 34 43 22 58 56 22 27 01 05 50 2c e4 46 c2 87 f5 c8 77 d2 31 b0 29 c1 01 0a 98 f3 7c 84 e7 b5 44 8e e1 25 3b ae 53 52 56 ab ba a5 5b d8 2c fa 90 08 d5 3c 61 6b 5a 09 0d 0a d6 Data Ascii: 718X[o6~`Q[q(:@kv{(h+%CR%KNaOsw._WLu<<]\\|yp(NYSo4XI!o-KJr1sfI,FQLWlF4"+tCP}Dfz%;%x\AerN7;'lEUyf]vkW\|"K:"W46`hm/)-]9{\|PFYP;MRAEw3Xa~&>NPX\6QyV2]ncEz&?{)r,cRm0cjX0RgE#g=[;hBxfm#wFd6lT6!NtUR{%s`xV,W(^ZJ&`:R\|x$:D?kv2li47y@/3T\|->9sLDxjmTC8xWFP=kg@fYs5-@G3Wk;9S 4X\b2;jSC"xbTCy\|L&~";#O.Pmc4C"XV"'P,Fw1)\|D%;SRV[,<akZ
May 27, 2022 14:31:07.093581915 CEST	1083	IN	Data Raw: 90 45 61 20 b8 bf 8a 42 0c ba b0 ce 80 16 83 bc 3a dd de 43 ec 05 71 ca 45 a2 58 de d5 ed Data Ascii: Ea B:CqEX
May 27, 2022 14:31:07.093619108 CEST	1084	IN	Data Raw: 04 5b fe 40 db ee f5 d6 4e e3 09 20 03 e7 e0 08 6e 0c 3c 3e 18 87 5e 94 d0 5e ac fb cb 09 07 1e 20 ab 98 9e 5c bd b8 c0 95 2b 50 c2 f3 92 29 fd 72 0d d1 ee 59 44 fb 0e 0f f2 ed 6e 1c 6d 0b ef 03 01 1f 01 1a 76 fc ef b0 76 3e df 07 b7 01 fc 17 c6 Data Ascii: [@N n<>^^ \+P)rYDnmvv>h94gt-L7LOtI<Y\|QFJ+U>A1TDDF2tOAo*C]1q?5w["EhA6i]eNVk'0o;\| .j5=4VsP2
May 27, 2022 14:31:07.150634050 CEST	1085	OUT	GET /uploads/1/4/1/8/141840186/editor/2screenshot-2021-04-26-at-19-59-12-orig-orig.png?1652460803 HTTP/1.1 Host: document--1111011111.company.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://document--1111011111.company.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en
May 27, 2022 14:31:07.327341080 CEST	1165	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 May 2022 12:31:07 GMT Content-Type: image/png Content-Length: 47588 Connection: keep-alive Last-Modified: Fri, 13 May 2022 16:54:01 GMT x-rgw-object-type: Normal ETag: "e9f5fab58c91223b66dbc7d8a8d064f2" x-amz-request-id: tx000000000000005faddd7-006289556d-b9fbc63-sfo1 X-Storage-Bucket: z3b1f X-Storage-Object: 3b1f7691ebb9f6305b70a17a304ed4f6f84d9153ccf6ba7dafcf6e613ab19816 X-Host: blu78.sf2p.intern.weebly.net Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f5 00 00 01 0c 08 06 00 00 00 dd d5 2f c0 00 00 00 01 6f 72 4e 54 01 cf a2 77 9a 00 00 80 00 49 44 41 54 78 da ec fd f9 73 1c 49 96 e7 09 7e 54 d5 cc dd e1 8e fb 22 40 f0 be 19 f7 9d 11 99 19 79 54 1e 95 9d 59 95 d5 d7 4c cf c8 c8 8a 8c ac c8 8a ec 0f fb d7 ec 6f 2b bb 23 3d bb db 3b 3b 3d dd 5b 53 5d 9d d9 9d 95 95 57 45 64 46 c6 7d 91 41 32 78 13 bc 71 df 80 bb 99 ea db 1f d4 cc dc 1c 04 49 90 04 0f 80 f6 15 41 10 e1 70 37 57 33 35 d3 a7 ef bd ef fb 3e 25 22 42 81 02 05 0a 14 28 50 60 d3 43 3f ee 01 14 28 50 a0 40 81 02 05 36 06 85 51 2f 50 a0 40 81 02 05 b6 08 0a a3 5e a0 40 81 02 05 0a 6c 11 14 46 bd 40 81 02 05 0a 14 d8 22 28 8c 7a 81 02 05 0a 14 28 b0 45 50 18 f5 02 05 0a 14 28 50 60 8b a0 30 ea 05 0a 14 28 50 a0 c0 16 41 61 d4 0b 14 28 50 a0 40 81 2d 82 c2 a8 17 28 50 a0 40 81 02 5b 04 85 51 2f 50 a0 40 81 02 05 b6 08 0a a3 5e a0 40 81 02 05 0a 6c 11 14 46 bd 40 81 02 05 0a 14 d8 22 28 8c 7a 81 02 05 0a 14 28 b0 45 50 18 f5 02 05 0a 14 28 50 60 8b a0 30 ea 05 0a 14 28 50 a0 c0 16 41 61 d4 0b 14 28 50 a0 40 81 2d 82 c2 a8 17 28 50 a0 40 81 02 5b 04 85 51 2f 50 a0 40 81 02 05 b6 08 0a a3 5e a0 40 81 02 05 0a 6c 11 14 46 bd 40 81 02 05 0a 14 d8 22 28 8c 7a 81 02 05 0a 14 28 b0 45 50 18 f5 02 05 0a 14 28 50 60 8b a0 30 ea 8f 03 f2 b8 07 50 a0 40 81 02 05 b6 22 82 c7 3d 80 a7 06 22 ab fe 05 14 e9 7f 3c 94 ba c7 83 16 28 50 a0 40 81 02 4d 14 46 fd a1 42 bc f1 4e 0d b9 d6 6b 1b 6e e7 9a ef 47 15 c6 bd 40 81 02 05 0a dc 17 94 88 14 c1 e0 87 01 11 40 12 03 ad 9a af 2d 2f c2 e2 22 04 01 54 db a1 54 ba d5 88 4b 6a e4 0b 03 5f a0 40 81 02 05 d6 8f c2 a8 6f 18 a4 99 2b 5f 6d 88 57 96 90 a9 09 e4 c6 55 b8 f0 35 ee f2 05 a4 52 c3 ec 39 88 1a da 8e f4 f4 a1 bb fb bc 91 0f c3 35 0e 9d 9b a2 c2 c8 17 28 50 a0 40 81 db a0 30 ea 0f 0c 69 e6 c7 85 a6 d1 b5 31 cc cf 22 57 2e 61 cf 9d c2 5d f8 1a 77 ed 32 6e f2 26 6e 7e 0e 82 00 dd d5 83 ee ea 41 f5 0e a0 87 b6 63 b6 ef 46 6d df 0d 43 23 a8 8e 2e 30 81 0f d9 67 5f b5 6a aa 0a 03 5f a0 40 81 02 05 72 28 8c fa fd 40 92 b0 7a fa 6f 0a e7 a0 be 02 37 ae 60 47 cf e1 ce 9e f2 06 fd c6 15 dc e2 3c 12 45 a0 35 a2 35 88 a0 9c f5 ff 9a 00 55 2e a1 da 3b d1 03 c3 e8 91 3d e8 1d 7b d0 43 3b d0 43 23 d0 37 00 a5 0a 18 93 1f 44 6b 64 60 f5 58 0a 14 28 50 a0 c0 53 87 c2 a8 af 1b 6b 90 de 52 34 ea c8 e4 38 72 f5 22 72 e9 2c f6 fc d7 c4 17 cf e1 26 c7 90 46 1d 51 0a a5 74 52 40 b8 ca 00 a7 b9 77 91 ec d8 ca 04 a8 5a 27 7a 60 1b c1 c8 6e f4 c8 6e d4 d0 08 6a 70 18 d5 37 08 1d dd 3e 17 df 32 bc e4 38 a8 1c a1 be 30 Data Ascii: PNGIHDR/orNTwIDATxsI~T"@yTYLo+#=;;=[S]WEdF}A2xqIAp7W35>%"B(P`C?(P@6Q/P@^@lF@"(z(EP(P`0(PAa(P@-(P@[Q/P@^@lF@"(z(EP(P`0(PAa(P@-(P@[Q/P@^@lF@"(z(EP(P`0P@"="<(P@MFBNknG@@-/"TTKj_@o+_mWU5R95(P@0i1"W.a]w2n&n~AcFmC#.0g_j_@r(@zo7`G<E55U.;={C;C#7Dkd`X(PSkR48r"r,&FQtR@wZ'z`nnjp7>280
May 27, 2022 14:31:07.327383995 CEST	1165	IN	Data Raw: f2 05 0a 14 28 f0 34 a1 30 ea eb 85 73 a0 74 d3 4e d6 eb b0 30 83 4c 8c 61 2f 9c c1 7e fd Data Ascii: (40stN0La/~
May 27, 2022 14:31:07.327414989 CEST	1166	IN	Data Raw: 25 72 e9 3c 6e 72 0c b7 b2 84 8b 2d 4a 25 06 56 25 84 b7 8c e5 9e 43 fa 1e 49 0f 2c fe 7d 22 a0 15 da 84 50 aa 60 3a 3b d0 fd db 50 db 77 a1 77 1f 40 8f ec 81 ee 3e 68 ef 40 d5 6a 48 58 ce 99 70 59 e5 b9 17 c6 bd 40 81 02 05 9e 06 14 46 fd 5e 20 Data Ascii: %r<nr-J%V%CI,}"P`:;Pww@>h@jHXpY@F^ Qo$>uwkUd~AT~HNs^Ct[6{P*L_@F}-xN+SD'>FUi~~#\|=,j>CzAar5UP@,
May 27, 2022 14:31:07.327444077 CEST	1166	IN	Data Raw: 10 3e ee cb ba b1 c8 2a 0e 72 0f f2 ea 85 48 25 84 c4 5b 1e 6e b9 35 ad f2 38 17 b1 d4 20 Data Ascii: >*rH%[n58
May 27, 2022 14:31:07.327483892 CEST	1168	IN	Data Raw: 8e 5f 43 3e fb 80 e8 8b 0f b1 17 4f e3 66 a6 90 a8 81 88 a4 4a 00 fe ed 4a 83 8d 09 66 a7 bd 41 7f e6 e5 ec b4 5a 4f 33 c7 ff b8 7e 19 f7 c9 7b 44 c7 3e c2 5d 3e 4f 3c 33 ed 9b 05 b9 55 1b 21 ad 20 b6 a8 f9 79 cc 8b df 40 ed 3d 98 75 fc 13 a5 50 Data Ascii: _C>OfJJfAZO3~{D>]>O<3U! y@=uP.#&hto?r9.4<dg6m%'dgEGnx"=' y\|>s#MNL.obPnCuvQmAtwtvC[-z-+&EMTF
May 27, 2022 14:31:07.327511072 CEST	1168	IN	Data Raw: 1c 4c dc c4 5e b9 88 3a f7 15 e6 8b 3f 63 f6 1c c2 3c f3 32 ea d0 73 a8 6d c3 de 6b 7d 18 Data Ascii: L^:?c<2smk}
May 27, 2022 14:31:07.327548027 CEST	1169	IN	Data Raw: 0b 58 ba 61 68 ac 20 9f bf 4f fc f1 7b d8 f9 39 bf d9 48 f3 99 4a a1 4a 21 41 ff 36 cc ce bd e8 fe 21 a4 5a f3 46 76 71 01 37 76 15 b7 b8 00 61 9e 2b 91 4b b1 cc 4c 11 bf fb 6b 1a 1f ff 11 57 5f 01 1d 80 8b b3 ef 37 a5 32 7a 70 3b 66 e7 5e 54 ff Data Ascii: Xah O{9HJJ!A6!ZFvq7va+KLkW_72zp;f^TRE-a_(nFlh@7E8B\{sY\Y>G,H4V1y}uqcb}>\|E8=};9/THs>t3
May 27, 2022 14:31:07.327574968 CEST	1169	IN	Data Raw: 74 fd 32 f2 9b ff 4c 58 aa 60 be f7 53 ef a0 38 b9 7f 86 79 7a af 2c 2f e1 be f8 80 e8 57 Data Ascii: t2LX`S8yz,/W
May 27, 2022 14:31:07.327613115 CEST	1171	IN	Data Raw: 7f 4b 74 ea 18 2e 6a e4 ee 6f e5 53 47 62 d1 41 09 3a ba 30 3d 7d 3e 7a d5 56 45 97 2b 80 f2 3d 36 ea cb c8 8a 0f bb cb fc 2c b2 b2 ec ef d5 38 6e 25 0f af e3 fe 54 d6 a1 e2 46 33 0d 98 7a e9 ce 57 87 88 13 54 96 d1 bf 4f 68 8d 8a 22 68 34 50 71 Data Ascii: Kt.joSGbA:0=}>zVE+=6,8n%TF3zWTOh"h4Pq&3AJx-h.rA_^D>Fy68LW/AzNB<nq3'n&faniNnnL/K;IjY%>OR
May 27, 2022 14:31:07.874495983 CEST	1379	OUT	GET /files/theme/fonts/1e9892c0-6927-4412-9874-1b82801ba47a.woff?1652461604 HTTP/1.1 Host: document--1111011111.company.com Connection: keep-alive Origin: http://document--1111011111.company.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept: / Referer: http://document--1111011111.company.com/files/main_style.css?1652461604 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_id.8a80=cdee608d-345c-4729-a8ec-f49d163ae349.1653687067.1.1653687067.1653687067.284b84f9-1721-4504-87d0-8d672f14f019; _snow_ses.8a80=*
May 27, 2022 14:31:08.047967911 CEST	1432	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 May 2022 12:31:07 GMT Content-Type: font/woff Content-Length: 20710 Connection: keep-alive Last-Modified: Wed, 11 Dec 2019 02:22:43 GMT ETag: "9df5efadcd24b83511f3c339178210d8" x-amz-request-id: tx0000000000000092316f9-005eaa5727-10e2649-las X-Storage-Bucket: z0d88 X-Storage-Object: 0d887fc553f2b9a6488c8bbdeb38d0e70e2da58d5bb34161d32f683af096fdb8 X-Host: grn45.sf2p.intern.weebly.net Accept-Ranges: bytes Data Raw: 77 4f 46 46 00 01 00 00 00 00 50 e5 00 10 00 00 00 00 99 10 00 01 00 00 00 00 4d 58 00 00 03 8d 00 00 07 c8 00 00 00 00 00 00 00 00 47 50 4f 53 00 00 01 6c 00 00 06 b6 00 00 1e b2 ec ec 14 b3 4c 49 4e 4f 00 00 08 24 00 00 00 12 00 00 00 12 93 af c8 c2 4f 53 2f 32 00 00 08 38 00 00 00 58 00 00 00 60 65 f1 01 d7 63 6d 61 70 00 00 08 90 00 00 00 98 00 00 00 cc 90 e6 b0 e3 63 76 74 20 00 00 09 28 00 00 00 4e 00 00 01 e2 07 7a 07 d7 66 70 67 6d 00 00 09 78 00 00 05 ed 00 00 0a a2 63 0e 9d d9 67 61 73 70 00 00 0f 68 00 00 00 08 00 00 00 08 ff ff 00 04 67 6c 79 66 00 00 0f 70 00 00 33 2a 00 00 58 10 b3 67 b4 92 68 65 61 64 00 00 42 9c 00 00 00 36 00 00 00 36 f4 0f af ac 68 68 65 61 00 00 42 d4 00 00 00 1f 00 00 00 24 07 59 07 8a 68 6d 74 78 00 00 42 f4 00 00 02 05 00 00 03 78 d7 00 2c e7 6c 6f 63 61 00 00 44 fc 00 00 02 45 00 00 03 7c 00 27 77 bc 6d 61 78 70 00 00 47 44 00 00 00 20 00 00 00 20 03 33 0b 90 6e 61 6d 65 00 00 47 64 00 00 03 f9 00 00 09 94 3c 21 96 46 70 6f 73 74 00 00 4b 60 00 00 00 13 00 00 00 20 ff 9f 00 32 70 72 65 70 00 00 4b 74 00 00 01 e4 00 00 02 4c 66 9a cf 76 78 9c c5 59 4b 6c 54 55 18 fe fa a4 2d d3 0e ed 50 28 94 e2 50 86 96 96 be 0b a5 85 4a c4 b4 80 bc 8c e5 2d 68 10 7c 2c 14 6c 8c 61 25 0b d8 38 9a e8 c2 74 61 30 11 42 4c 45 82 44 ab 8b 09 26 20 52 04 5d d8 e1 61 63 60 dc cc 6a 56 b3 9a b8 e8 e6 fa 9d ff 9e 3b 8f ce a3 43 99 5e ce 97 73 ee dc 73 ce 3d ff e3 fb cf 2b 83 3c 00 65 78 13 57 91 f7 de 1b 1f 9e 44 09 ea 51 b4 79 cb 0e 37 9a 07 06 f7 b9 d1 b5 7b e7 80 1b 1b 86 5e de e5 c6 8b 7b 87 58 bf 1d 30 0c a8 ef cc 67 9e 7e e6 eb 67 81 7e 16 ea 67 11 8a df 7d eb 83 93 68 90 b2 45 ca 2e 29 7b a5 dc 24 e5 00 87 93 31 33 96 6a d4 52 3e f3 a9 73 95 29 13 0b f4 f3 2e 9f 6d 4a 2a 5b f6 63 18 a7 f0 11 f3 29 9c 85 97 f8 1c 23 38 87 6f 70 19 3f e0 1a cb 11 f6 ae 82 13 8d 68 42 17 ba b1 1e bd e8 c3 06 f4 e3 34 26 e0 c7 3d dc c7 03 3c c4 63 14 e3 84 e1 c7 84 e1 83 9f f9 3e f3 03 e6 47 ac cb 83 d7 98 94 d2 2b a5 59 13 94 72 5c ca eb 2c 9d 46 80 fa 39 8d 51 be 8f ca bb 2a 0f 19 91 68 ad 57 6a bd c8 af f1 2a fd 97 ec ac f5 a0 87 ba 80 63 f5 c3 e6 f4 2c 64 8a dc 00 25 db 9b 3a 6c 96 a7 93 11 34 fc 46 c8 08 1b 21 5b 65 8e 1b 93 94 3a 6e ab cc 00 ad b4 df 4e e5 db 00 67 9d 0d d2 9e c9 5c b1 3f 6e 1d a6 9d 86 8f 91 1b 50 31 44 1f 47 b8 82 cd 61 e2 7a 68 a6 2a 13 5c 29 a1 75 08 32 92 a3 b0 45 87 b9 94 31 a2 7f 3c 4b 3b 2d 99 7e ce 1e c5 ae 95 23 dc d3 72 95 6a e2 62 28 64 4f 0c 99 89 ab c1 38 7d 19 d1 16 4d 19 53 c9 3d b4 ed 2a 8f 19 7f 25 f7 48 18 2d ac fa cf 28 55 c6 30 ed 93 6f 22 e6 57 aa c6 ca d3 75 48 3b 56 8a fe 09 ed 7a 55 57 56 ca 4e aa 59 9b 79 e5 9d 89 5f a5 Data Ascii: wOFFPMXGPOSlLINO$OS/28X`ecmapcvt (Nzfpgmxcgasphglyfp3XgheadB66hheaB$YhmtxBx,locaDE\|'wmaxpGD 3nameGd<!FpostK` 2prepKtLfvxYKlTU-P(PJ-h\|,la%8ta0BLED& R]ac`jV;C^ss=+<exWDQy7{^{X0g~g~g}hE.){$13jR>s).mJ[c)#8op?hB4&=<c>G+Yr\,F9QhWjc,d%:l4F![e:nNg\?nP1DGazh\)u2E1<K;-~#rjb(dO8}MS=%H-(U0o"WuH;VzUWVNYy_
May 27, 2022 14:31:08.062218904 CEST	1471	OUT	GET /files/theme/fonts/63a74598-733c-4d0c-bd91-b01bffcd6e69.ttf?1652461604 HTTP/1.1 Host: document--1111011111.company.com Connection: keep-alive Origin: http://document--1111011111.company.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept: / Referer: http://document--1111011111.company.com/files/main_style.css?1652461604 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_id.8a80=cdee608d-345c-4729-a8ec-f49d163ae349.1653687067.1.1653687067.1653687067.284b84f9-1721-4504-87d0-8d672f14f019; _snow_ses.8a80=*
May 27, 2022 14:31:08.236088037 CEST	1851	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 May 2022 12:31:08 GMT Content-Type: font/ttf Content-Length: 51501 Connection: keep-alive Last-Modified: Wed, 11 Dec 2019 02:22:43 GMT x-rgw-object-type: Normal ETag: "53427fd099b7a52f111705d7c7558f14" x-amz-request-id: tx000000000000000d17512-0061a7024d-a9f3e81-sfo1 X-Storage-Bucket: z56e2 X-Storage-Object: 56e2dd12548082d7acc7cc3762be313b6d43809588e973cf9338f513159904b5 X-Host: grn78.sf2p.intern.weebly.net Accept-Ranges: bytes Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 50 4f 53 00 a8 07 d1 00 00 01 0c 00 00 1e d4 4f 53 2f 32 66 5b 02 eb 00 00 1f e0 00 00 00 60 56 44 4d 58 6f 0e 76 94 00 00 20 40 00 00 05 e0 63 6d 61 70 90 e6 b0 e3 00 00 26 20 00 00 00 cc 63 76 74 20 07 cc 08 a4 00 00 26 ec 00 00 01 e4 66 70 67 6d a1 cc 85 0f 00 00 28 d0 00 00 09 50 67 61 73 70 ff ff 00 04 00 00 32 20 00 00 00 08 67 6c 79 66 5a 77 39 c4 00 00 32 28 00 00 76 3c 68 65 61 64 f3 b9 d4 b9 00 00 a8 64 00 00 00 36 68 68 65 61 07 81 07 b4 00 00 a8 9c 00 00 00 24 68 6d 74 78 de 7c 27 99 00 00 a8 c0 00 00 03 78 6c 6f 63 61 00 30 08 30 00 00 ac 38 00 00 03 7c 6d 61 78 70 02 6e 00 f1 00 00 af b4 00 00 00 20 6e 61 6d 65 3e 89 4d 67 00 00 af d4 00 00 17 07 70 6f 73 74 ff 9f 00 32 00 00 c6 dc 00 00 00 20 70 72 65 70 e3 0f 5b e5 00 00 c6 fc 00 00 02 2f 00 01 00 00 00 0a 00 64 00 ae 00 01 6c 61 74 6e 00 08 00 22 00 05 41 46 4b 20 00 2a 44 45 55 20 00 32 4e 4c 44 20 00 3a 52 4f 4d 20 00 42 54 52 4b 20 00 4a 00 00 ff ff 00 01 00 00 00 00 ff ff 00 01 00 01 00 00 ff ff 00 01 00 02 00 00 ff ff 00 01 00 03 00 00 ff ff 00 01 00 04 00 00 ff ff 00 01 00 05 00 06 6b 65 72 6e 00 26 6b 65 72 6e 00 2c 6b 65 72 6e 00 32 6b 65 72 6e 00 38 6b 65 72 6e 00 3e 6b 65 72 6e 00 44 00 00 00 01 00 00 00 00 00 01 00 00 00 00 00 01 00 00 00 00 00 01 00 00 00 00 00 01 00 00 00 00 00 01 00 00 00 01 00 04 00 09 00 00 00 02 00 0a 00 12 00 01 00 02 00 00 00 10 00 01 00 02 00 00 00 ea 00 01 00 34 00 04 00 00 00 15 00 62 00 7c 00 82 00 88 00 82 00 82 00 8e 00 94 00 94 00 9a 00 a0 00 aa 00 b0 00 b6 00 bc 00 c6 00 cc 00 d2 00 dc 00 cc 00 b6 00 01 00 15 00 0f 00 27 00 29 00 32 00 33 00 37 00 38 00 39 00 3a 00 3b 00 3c 00 4e 00 55 00 7d 00 cf 00 d0 00 d1 00 d2 00 d3 00 d4 00 db 00 06 00 6d ff d0 00 cf ff b8 00 d0 ff b8 00 d2 ff b8 00 d3 ff b8 00 da ff d0 00 01 00 88 ff d6 00 01 00 88 ff 88 00 01 00 88 ff d0 00 01 00 88 ff e0 00 01 00 88 ff c4 00 01 00 c3 ff ee 00 02 00 88 ff be 00 c3 ff e8 00 01 00 c4 ff ee 00 01 00 a8 ff f4 00 01 00 0f ff dc 00 02 00 0f ff a6 00 88 ff a6 00 01 00 0f ff a6 00 01 00 59 ff f4 00 02 00 0f ff a6 00 88 ff 88 00 01 00 0f ff 88 00 02 18 88 00 04 00 00 19 4c 1b 24 00 36 00 3a 00 00 ff e2 00 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: GPOSOS/2f[`VDMXov @cmap& cvt &fpgm(Pgasp2 glyfZw92(v<headd6hhea$hmtx\|'xloca008\|maxpn name>Mgpost2 prep[/dlatn"AFK *DEU 2NLD :ROM BTRK Jkern&kern,kern2kern8kern>kernD4b\|')23789:;<NU}mYL$6:<
May 27, 2022 14:31:53.273415089 CEST	2594	OUT	Data Raw: 00 Data Ascii:
May 27, 2022 14:32:38.449489117 CEST	17479	OUT	Data Raw: 00 Data Ascii:

Timestamp	kBytes transferred	Direction	Data
May 27, 2022 14:31:07.215816021 CEST	1086	OUT	GET /uploads/1/4/1/8/141840186/3pdp-orig-orig_orig.png HTTP/1.1 Host: document--1111011111.company.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://document--1111011111.company.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en
May 27, 2022 14:31:07.385917902 CEST	1180	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 27 May 2022 12:31:07 GMT Content-Type: image/png Content-Length: 15272 Connection: keep-alive Last-Modified: Thu, 10 Feb 2022 08:37:12 GMT x-rgw-object-type: Normal ETag: "72afce6a160fc291147021b6aac153c1" x-amz-request-id: tx0000000000000029fff2f-0062853908-b9fbc20-sfo1 X-Storage-Bucket: z3e53 X-Storage-Object: 3e53901bb513d98511cdc10c3e14aa61e71d88728f1bfdc614c0caed4e10602c X-Host: grn67.sf2p.intern.weebly.net Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 a5 00 00 00 3e 08 06 00 00 00 d3 68 bd 5b 00 00 3b 6f 49 44 41 54 78 da ec dd 5b 6c 14 55 00 c6 71 5e f0 82 fa 66 e2 8b 09 46 01 25 6a e2 05 2f 54 28 2a 8f 3e 41 02 c1 48 8c 0f 90 80 80 42 34 a9 21 4d c0 87 86 06 62 28 ad 05 4a 4b 42 4a 8c bd f8 24 a0 d1 a5 5b a1 dc 0c c1 5e 82 35 05 5a da 52 48 ba 6d 22 ad bd c0 ee 9c f9 3c 67 ca a9 8d 68 45 9a 6e ab fd ff 92 2f 33 b3 b3 81 d9 79 98 ec d7 73 66 76 5a 18 4a 84 10 42 08 21 84 10 42 c8 18 72 d7 28 a5 84 10 42 08 21 84 10 42 26 ae 94 0a 00 00 00 00 80 31 a1 94 02 00 00 00 00 28 a5 00 00 00 00 00 50 4a 01 00 00 80 71 13 86 21 19 11 80 52 0a 00 00 00 a4 a9 8c 06 41 a0 54 2a a5 64 32 49 86 e2 ce 47 74 5e 8c 31 02 28 a5 00 00 00 c0 38 30 c6 50 ba ee ec 3c 31 7a 0a 4a 29 00 00 00 90 86 d1 52 f2 47 28 ec 98 8c a5 34 94 8c 91 82 e0 9f 63 6c 42 63 13 2a b4 4b 13 06 77 16 05 0a c5 5f 61 00 00 00 30 fe f7 8f 7a 9d 9d 9d 6a 6c 6c 54 6d 6d ad ea eb eb d5 d0 d0 e0 96 53 2e fe 73 d7 d5 d5 45 b9 7c f9 b2 06 07 07 75 0b f7 9b 62 92 8d 94 86 a3 e6 5f a3 87 4e 1d c6 18 a6 ca 00 00 80 09 fd 2e e2 f5 f7 f7 47 45 ac a2 a2 42 fb f6 ed 53 71 71 b1 4a 4a 4a a6 7c f6 ef df 1f 9d 8f 03 07 0e 28 16 8b a9 a3 a3 c3 97 51 4a 29 98 be 0b 00 00 00 8c 45 10 04 c3 e5 ea dc b9 73 2a 2a 2a d2 b6 6d db b4 6b d7 2e 5f c6 dc 6b 2e 6e 7d ca c4 7f 6e 5f ce dd 72 c7 8e 1d ca c9 c9 d1 e1 c3 87 95 48 24 74 0b 83 0b 98 c0 52 1a a4 a4 be 1e e9 7a b7 4d 97 d4 d3 fd d7 71 fb dc 7b fa 7a 15 24 07 34 98 ba ae df 92 09 f5 0d a7 4b 7d 37 6f 25 19 c5 ee ef 8c de 33 90 fa 55 29 73 53 00 00 00 c0 78 fd e4 8b 9f b2 5b 5a 5a aa dc dc 5c 1d 3a 74 28 9a be db da da aa 0b 17 2e a8 a9 a9 49 17 2f 5e 9c 92 71 9f df e5 ca 95 2b 3a 73 e6 8c 0a 0b 0b a3 c2 5e 53 53 13 dd 67 ea 8b 3d 90 be 52 1a 86 1a 96 b8 a6 f0 d8 d7 0a 2b 76 2b fc 32 5f aa dc 6b d7 6d ca f7 d8 e5 9e a1 ed 72 b7 ef 73 a9 cc ae 1f 3f a2 eb 1d 75 aa 4b 7c a3 58 fb 5e 55 b5 16 2a de b6 47 f1 f6 22 bb b4 db 36 f1 b6 a2 68 3b d6 ba 5b 47 6d ce 5e fb 4a 5d fd cd f2 42 85 cc ed 1d c3 85 d7 18 e3 e3 b6 27 f4 58 fc 05 ac a7 a7 47 5d 5d 5d 6e c9 05 0d 00 00 a4 8d 31 c6 7f f7 70 e5 2a 2a a1 79 79 79 ca cf cf 57 4b 4b 8b 70 bb de de de 68 94 74 fb f6 ed aa ac ac d4 c0 c0 c0 f0 f9 03 d2 53 4a 5d 91 30 81 86 35 fe a4 30 e7 7d 99 15 cf cb 2c 99 ab 70 c5 8b 76 7d 9e cc 32 bb bd fc 05 85 6f cf b3 cb e7 64 96 3e 2b 2d 7b 59 61 ee 46 b5 9f fd 42 a5 bf 7c a2 cd a7 33 95 7d fc 15 6d 39 91 a1 ad a7 17 69 cb c9 85 36 0b b4 f5 54 a6 3e 3d b5 48 9b 6b 32 94 5d f3 9a 8a 6b df 53 53 77 7c c4 21 18 4a e9 18 Data Ascii: PNGIHDR>h[;oIDATx[lUq^fF%j/T(>AHB4!Mb(JKBJ$[^5ZRHm"<ghEn/3ysfvZJB!Br(B!B&1(PJq!RATd2IGt^1(80P<1zJ)RG(4clBcKw_a0zjllTmmS.sE\|ub_N.GEBSqqJJJ\|(QJ)Es*mk._k.n}n_rH$tRzMq{z$4K}7o%3U)sSx[ZZ\:t(.I/^q+:s^SSg=R+v+2_kmrs?uK\|X^UG"6h;[Gm^J]B'XG]]]n1p**yyyWKKphtSJ]050},pv}2od>+-{YaFB\|3}m9i6T>=Hk2]kSSw\|!J
May 27, 2022 14:31:07.386006117 CEST	1180	IN	Data Raw: 8a e0 64 2a c7 8e 2b a2 d5 d5 d5 3a 78 f0 a0 aa aa aa dc 85 8e 7b 13 00 00 40 da 4b e9 8d Data Ascii: d*+:x{@K
May 27, 2022 14:31:07.386048079 CEST	1181	IN	Data Raw: 1b 37 a2 07 f9 14 14 14 44 53 76 af 5e bd ea bf 93 4c f9 f8 01 0d 5f 4a e3 f1 78 54 de cb ca ca dc 36 23 a5 98 e0 52 5a 7f 4a fa 68 a9 cc 82 07 64 e6 4d 93 59 38 c3 c6 ae cf bf 4f 26 c3 26 f3 41 05 19 f7 2a 78 69 ba 34 ff 61 99 8f df 51 cb 89 22 Data Ascii: 7DSv^L_JxT6#RZJhdMY8O&&A*xi4aQ"4hwji}\|WOh]~P5[kb#/w17_)jkkSvv/^,7-_qXxl#?itJ{+vYKi4sNSJ1Jii)k
May 27, 2022 14:31:07.386074066 CEST	1181	IN	Data Raw: 32 7c 83 ec e6 9b 6f ae 5b 6e b9 a5 be fb dd ef 32 b0 79 a4 53 3e 30 6a 84 d9 77 b9 80 7a Data Ascii: 2\|o[n2yS>0jwz
May 27, 2022 14:31:07.386110067 CEST	1182	IN	Data Raw: 9b 1f c4 51 e9 cc d0 29 f2 8e 77 bc a3 de f7 be f7 d5 f5 d7 5f af a3 83 5c 01 fd 9d a9 3f ad 20 77 a2 9d 0d ab 2f 68 1b 2c d3 53 6b ad f4 d4 5f fb 3d 5a 97 bc f6 f0 c3 31 d5 ea 3d aa df 54 b5 35 5d 1f 3f ea c0 6a f1 60 35 83 52 9f 82 19 54 87 f0 Data Ascii: Q)w_\? w/h,Sk_=Z1=T5]?j`5RTaU#P:JzA4GLXFMxWvtWft5fDtN4kIijn=hw,DTOoO;RIF\|_ox\|oZ+r`qEhmp2xnXyvQR#
May 27, 2022 14:31:07.386157036 CEST	1184	IN	Data Raw: 2f 6a 66 73 1c b3 e0 b9 75 dc 82 e7 d7 87 17 ef 57 4b ef bf ac 03 4a 25 a0 d4 34 54 d3 77 4d ab 34 2d 17 d0 b4 76 12 98 8b 92 67 2d 29 00 0b 98 bd fd ed 6f 2f cf cf 99 33 a7 be fe f5 af 03 74 1c be 91 42 d3 39 4d d7 58 09 9c b9 0f b0 5d 7e f9 e5 Data Ascii: /jfsuWKJ%4TwM4-vg-)o/3tB9MX]~)hG1">l,hE:V#iS<RnW@37"l_a0:P,m6O]QG{{Sun?7BlE/zQ4@//_p2
May 27, 2022 14:31:07.386183023 CEST	1184	IN	Data Raw: 91 af 29 c5 94 1b 30 11 f4 28 07 50 f3 ac 76 78 56 3d 19 4a bd f4 7a 4f 01 06 a0 1a c0 64 Data Ascii: )0(PvxV=JzOd
May 27, 2022 14:31:07.386225939 CEST	1185	IN	Data Raw: 38 39 75 00 5d 5d 4d 4f f6 ae de 75 81 3f 00 a0 5e 8c 26 1a a8 9b 76 78 cf e6 4e ea c0 98 0a 10 8c ce 66 04 6b 4a 8e 94 e6 9d 8c f4 72 28 e8 bb e5 96 5b 96 b5 9f 46 3e fb 25 a3 10 46 44 37 da 68 a3 42 53 40 50 af 27 30 bf fd f6 db 97 51 d6 57 bd Data Ascii: 89u]]MOu?^&vxNfkJr([F>%FD7hBS@P'0QWU\|3)ATx7w~tq< gdc-ou LVN9@d>F:?4Nh}@(A[v_Mrl iFtDPYxA#7iNjj"-Ag
May 27, 2022 14:31:07.386255980 CEST	1185	IN	Data Raw: b1 21 ec 27 b9 d6 ce e8 5e 40 bb b6 91 11 32 94 cf 94 91 71 f2 45 66 d9 02 b4 23 cf 0e f4 Data Ascii: !'^@2qEf#
May 27, 2022 14:31:07.386293888 CEST	1187	IN	Data Raw: d2 2e b2 88 9e da a4 7d 68 c9 9f 19 65 74 df 39 3a a4 3e f8 87 3f 64 d7 7d f4 61 3b b4 9d cc cb 0f 3d bc 87 cf e9 a0 d0 11 8c 1f ea d9 e9 24 19 22 28 65 e3 00 77 b3 70 cc 5c c1 7b 6d 8b 5d 56 1f 1d 9b ec 1f bd f6 3c ba e1 79 00 ba 3a a2 1b 1b 88 Data Ascii: .}het9:>?d}a;=$"(ewp\{m]V<y:m%<xOt@&'1(a[9Z++_P/5As#C]jkF:uE&>@cm'feA'4qNr6Z`kr[O>HoA~x7
May 27, 2022 14:31:07.386323929 CEST	1187	IN	Data Raw: 10 30 73 64 8c 33 a3 ee 19 4e 81 13 4f ca 2e aa 39 d7 0b 26 a8 30 aa 46 d1 a3 9c 14 5e 70 Data Ascii: 0sd3NO.9&0F^p
May 27, 2022 14:31:52.555890083 CEST	2586	OUT	Data Raw: 00 Data Ascii:
May 27, 2022 14:32:37.725081921 CEST	17479	OUT	Data Raw: 00 Data Ascii:

Timestamp	kBytes transferred	Direction	Data
2022-05-27 12:31:06 UTC	0	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+620
2022-05-27 12:31:06 UTC	0	OUT	Data Raw: 20 Data Ascii:
2022-05-27 12:31:06 UTC	0	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 27 May 2022 12:31:06 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-UUYyBCvy5OkbMQpO1oVG3w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'nonce-UUYyBCvy5OkbMQpO1oVG3w' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Cross-Origin-Opener-Policy: same-origin Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-05-27 12:31:06 UTC	2	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2022-05-27 12:31:06 UTC	2	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2022-05-27 12:31:07 UTC	2	OUT	GET /recaptcha/api.js?_=1653687066398 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Google Chrome";v="92" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://document--1111011111.company.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-05-27 12:31:07 UTC	2	IN	HTTP/1.1 200 OK Expires: Fri, 27 May 2022 12:31:07 GMT Date: Fri, 27 May 2022 12:31:07 GMT Cache-Control: private, max-age=300 Content-Type: text/javascript; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-05-27 12:31:07 UTC	3	IN	Data Raw: 33 35 32 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 352/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2022-05-27 12:31:07 UTC	3	IN	Data Raw: 61 72 20 65 3d 64 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 73 63 72 69 70 74 5b 6e 6f 6e 63 65 5d 27 29 2c 6e 3d 65 26 26 28 65 5b 27 6e 6f 6e 63 65 27 5d 7c 7c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 6e 6f 6e 63 65 27 29 29 3b 69 66 28 6e 29 7b 70 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 6e 6f 6e 63 65 27 2c 6e 29 3b 7d 76 61 72 20 73 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 73 63 72 69 70 74 27 29 5b 30 5d 3b 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 70 6f 2c 20 73 29 3b 7d 29 28 29 3b 0d 0a Data Ascii: ar e=d.querySelector('script[nonce]'),n=e&&(e['nonce']\|\|e.getAttribute('nonce'));if(n){po.setAttribute('nonce',n);}var s=d.getElementsByTagName('script')[0];s.parentNode.insertBefore(po, s);})();
2022-05-27 12:31:07 UTC	4	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0