Edit tour

Windows Analysis Report
https://rmshg.amplified.training/

Overview

General Information

Sample URL:	https://rmshg.amplified.training/
Analysis ID:	1436915
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML page contains hidden URLs or javascript code

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2768 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 2812 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2492 --field-trial-handle=2460,i,14899353169943493930,12871650326961900512,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 6780 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://rmshg.amplified.training/" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

HTTP traffic detected: POST /api/tunings/D0JSP1avgg HTTP/1.1Host: api.userway.orgConnection: keep-aliveContent-Length: 1557sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://www.rmshg.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.rmshg.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_267.2.dr, chromecache_237.2.dr	String found in binary or memory: http://creativecommons.org/ns#
Source: chromecache_373.2.dr, chromecache_423.2.dr	String found in binary or memory: http://daneden.me/animate
Source: chromecache_310.2.dr	String found in binary or memory: http://digitalbush.com/projects/masked-input-plugin/#license)
Source: chromecache_326.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_326.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_295.2.dr	String found in binary or memory: http://greensock.com
Source: chromecache_295.2.dr	String found in binary or memory: http://greensock.com/club/
Source: chromecache_295.2.dr	String found in binary or memory: http://greensock.com/standard-license
Source: chromecache_295.2.dr	String found in binary or memory: http://labs.skinkers.com/touchSwipe/
Source: chromecache_227.2.dr	String found in binary or memory: http://materializecss.com)
Source: chromecache_423.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_353.2.dr	String found in binary or memory: http://player.vimeo.com/video/
Source: chromecache_295.2.dr	String found in binary or memory: http://plugins.jquery.com/project/touchSwipe
Source: chromecache_295.2.dr	String found in binary or memory: http://www.github.com/mattbryson
Source: chromecache_347.2.dr, chromecache_276.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_406.2.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_327.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_390.2.dr	String found in binary or memory: https://cdn.stratospherewebsites.com/source/loader-circle.gif
Source: chromecache_390.2.dr	String found in binary or memory: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/css/bootstrap
Source: chromecache_390.2.dr	String found in binary or memory: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/css/header.cs
Source: chromecache_390.2.dr	String found in binary or memory: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/css/home.css?
Source: chromecache_390.2.dr	String found in binary or memory: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/css/owl.carou
Source: chromecache_390.2.dr	String found in binary or memory: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/favicon.ico?v
Source: chromecache_380.2.dr, chromecache_254.2.dr	String found in binary or memory: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/a581c3
Source: chromecache_364.2.dr, chromecache_352.2.dr, chromecache_331.2.dr, chromecache_219.2.dr, chromecache_390.2.dr	String found in binary or memory: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/about-
Source: chromecache_380.2.dr, chromecache_254.2.dr	String found in binary or memory: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/ac740f
Source: chromecache_390.2.dr	String found in binary or memory: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/adult-
Source: chromecache_386.2.dr	String found in binary or memory: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/covid-
Source: chromecache_380.2.dr, chromecache_254.2.dr	String found in binary or memory: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/e0de52
Source: chromecache_390.2.dr	String found in binary or memory: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/google
Source: chromecache_390.2.dr	String found in binary or memory: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/home-b
Source: chromecache_254.2.dr	String found in binary or memory: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/istock
Source: chromecache_390.2.dr	String found in binary or memory: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/live-m
Source: chromecache_254.2.dr	String found in binary or memory: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/logo-f
Source: chromecache_390.2.dr	String found in binary or memory: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/logo-w
Source: chromecache_390.2.dr, chromecache_371.2.dr	String found in binary or memory: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/logo.w
Source: chromecache_390.2.dr	String found in binary or memory: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/night-
Source: chromecache_333.2.dr	String found in binary or memory: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/party-
Source: chromecache_333.2.dr	String found in binary or memory: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/progra
Source: chromecache_390.2.dr, chromecache_361.2.dr, chromecache_404.2.dr	String found in binary or memory: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/servic
Source: chromecache_390.2.dr	String found in binary or memory: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/testim
Source: chromecache_390.2.dr	String found in binary or memory: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/xs-hom
Source: chromecache_390.2.dr	String found in binary or memory: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/js/bootstrap.
Source: chromecache_390.2.dr	String found in binary or memory: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/js/common.js?
Source: chromecache_390.2.dr	String found in binary or memory: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/js/form-valid
Source: chromecache_390.2.dr	String found in binary or memory: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/js/jquery-3.7
Source: chromecache_390.2.dr	String found in binary or memory: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/js/owl.carous
Source: chromecache_390.2.dr	String found in binary or memory: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/js/recent-blo
Source: chromecache_390.2.dr	String found in binary or memory: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/js/webp.js?v=
Source: chromecache_216.2.dr	String found in binary or memory: https://cdn.userway.org/
Source: chromecache_390.2.dr	String found in binary or memory: https://cdn.userway.org/widget.js
Source: chromecache_390.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery-validate/1.19.3/jquery.validate.min.js
Source: chromecache_390.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery-validation-unobtrusive/3.2.12/jquery.validate.unobtrus
Source: chromecache_390.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery.maskedinput/1.4.1/jquery.maskedinput.min.js
Source: chromecache_418.2.dr	String found in binary or memory: https://cdnjs.com/libraries/toastr.js
Source: chromecache_403.2.dr, chromecache_379.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_403.2.dr, chromecache_379.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_406.2.dr	String found in binary or memory: https://developers.google.com/analytics/devguides/collection/analyticsjs/
Source: chromecache_403.2.dr, chromecache_379.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_403.2.dr, chromecache_379.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_403.2.dr, chromecache_379.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_390.2.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_390.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Josefin
Source: chromecache_390.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Montserrat:wght
Source: chromecache_390.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_288.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/josefinsans/v32/Qw3aZQNVED7rKGKxtqIqX5EUA3x4RHw.woff2)
Source: chromecache_288.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/josefinsans/v32/Qw3aZQNVED7rKGKxtqIqX5EUAnx4RHw.woff2)
Source: chromecache_288.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/josefinsans/v32/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2)
Source: chromecache_396.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHjxsAUi-qJCY.woff2)
Source: chromecache_396.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHjxsAXC-q.woff2)
Source: chromecache_396.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwaPGR_p.woff2)
Source: chromecache_396.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2)
Source: chromecache_396.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwaPGR_p.woff2)
Source: chromecache_396.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwiPGQ.woff2)
Source: chromecache_396.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2)
Source: chromecache_396.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2)
Source: chromecache_396.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUQjIg1_i6t8kCHKm459WxRxC7mw9c.woff2)
Source: chromecache_396.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUQjIg1_i6t8kCHKm459WxRxi7mw9c.woff2)
Source: chromecache_396.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUQjIg1_i6t8kCHKm459WxRxy7mw9c.woff2)
Source: chromecache_396.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2)
Source: chromecache_396.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUQjIg1_i6t8kCHKm459WxRzS7mw9c.woff2)
Source: chromecache_396.2.dr, chromecache_235.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)
Source: chromecache_396.2.dr, chromecache_235.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)
Source: chromecache_396.2.dr, chromecache_235.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)
Source: chromecache_396.2.dr, chromecache_235.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)
Source: chromecache_396.2.dr, chromecache_235.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)
Source: chromecache_396.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqW106F15M.woff2)
Source: chromecache_396.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWt06F15M.woff2)
Source: chromecache_396.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6F15M.woff2)
Source: chromecache_396.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtU6F15M.woff2)
Source: chromecache_396.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtk6F15M.woff2)
Source: chromecache_396.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWu06F15M.woff2)
Source: chromecache_396.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2)
Source: chromecache_396.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuk6F15M.woff2)
Source: chromecache_396.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2)
Source: chromecache_396.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWxU6F15M.woff2)
Source: chromecache_396.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_396.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_396.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_396.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_396.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_396.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_396.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_396.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_396.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_396.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_406.2.dr	String found in binary or memory: https://fortis-site.com/
Source: chromecache_406.2.dr	String found in binary or memory: https://fortis-site.com/#breadcrumb
Source: chromecache_406.2.dr	String found in binary or memory: https://fortis-site.com/#primaryimage
Source: chromecache_406.2.dr	String found in binary or memory: https://fortis-site.com/#webpage
Source: chromecache_406.2.dr	String found in binary or memory: https://fortis-site.com/#website
Source: chromecache_406.2.dr	String found in binary or memory: https://fortis-site.com/?s=
Source: chromecache_406.2.dr	String found in binary or memory: https://fortis-site.com/commercial-umbrella-insurance-small-business/
Source: chromecache_406.2.dr	String found in binary or memory: https://fortis-site.com/refer-friend-help-us-support-charity-cc4c/
Source: chromecache_406.2.dr	String found in binary or memory: https://fortis-site.com/take-steps-get-boat-ready-summer/
Source: chromecache_406.2.dr	String found in binary or memory: https://fortis-site.com/wp-content/plugins/gravityforms/images/spinner.gif
Source: chromecache_406.2.dr	String found in binary or memory: https://fortis-site.com/wp-content/uploads/2018/10/about2.jpg)
Source: chromecache_406.2.dr	String found in binary or memory: https://fortis-site.com/wp-content/uploads/2018/10/cropped-identity-270x270.png
Source: chromecache_406.2.dr	String found in binary or memory: https://fortis-site.com/wp-content/uploads/2018/10/home2.jpg
Source: chromecache_406.2.dr	String found in binary or memory: https://fortissite.wpengine.com/wp-content/uploads/2018/10/about.jpg?id=6186)
Source: chromecache_359.2.dr, chromecache_275.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_295.2.dr	String found in binary or memory: https://github.com/mattbryson/TouchSwipe-Jquery-Plugin
Source: chromecache_359.2.dr, chromecache_275.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_275.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_406.2.dr	String found in binary or memory: https://goo.gl/maps/whR4WcLdR422
Source: chromecache_390.2.dr	String found in binary or memory: https://goo.gl/maps/zA2qq3eMbcC8uANu6
Source: chromecache_346.2.dr	String found in binary or memory: https://inspect.userway.org
Source: chromecache_378.2.dr	String found in binary or memory: https://jqueryvalidation.org/
Source: chromecache_252.2.dr	String found in binary or memory: https://ka-p.fontawesome.com/assets/00bf593261/112787936/kit.css?token=00bf593261);
Source: chromecache_390.2.dr	String found in binary or memory: https://kit.fontawesome.com/00bf593261.css
Source: chromecache_297.2.dr	String found in binary or memory: https://modernizr.com/download/?-webp-setclasses
Source: chromecache_390.2.dr	String found in binary or memory: https://oss.maxcdn.com/libs/html5shiv/3.7.0/html5shiv.js
Source: chromecache_390.2.dr	String found in binary or memory: https://oss.maxcdn.com/libs/respond.js/1.4.2/respond.min.js
Source: chromecache_327.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_327.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_379.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_390.2.dr	String found in binary or memory: https://portal2018.nexsure.com/Login?key=9AB803F47DE99C25A3EDCC67
Source: chromecache_227.2.dr	String found in binary or memory: https://raw.githubusercontent.com/Dogfalo/materialize/master/LICENSE)
Source: chromecache_379.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_406.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_390.2.dr	String found in binary or memory: https://search.google.com/local/writereview?placeid=ChIJJ8qJHn19wokR6lUxh4-0Z_o
Source: chromecache_406.2.dr	String found in binary or memory: https://snazzymaps.com/embed/103450
Source: chromecache_276.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_379.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_403.2.dr, chromecache_379.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_403.2.dr, chromecache_379.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_403.2.dr, chromecache_379.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_347.2.dr, chromecache_276.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_327.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_390.2.dr	String found in binary or memory: https://twitter.com/RMS_HG
Source: chromecache_390.2.dr	String found in binary or memory: https://userway.org
Source: chromecache_403.2.dr, chromecache_379.2.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_327.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_347.2.dr, chromecache_276.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_347.2.dr, chromecache_276.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_347.2.dr, chromecache_276.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_327.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_347.2.dr, chromecache_276.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_403.2.dr, chromecache_215.2.dr, chromecache_379.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_327.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_327.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_347.2.dr, chromecache_276.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_403.2.dr, chromecache_379.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.
Source: chromecache_225.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Source: chromecache_292.2.dr, chromecache_370.2.dr	String found in binary or memory: https://www.istockphoto.com/photo/license-gm1350660376-?utm_medium=organic&utm_source=google&amp
Source: chromecache_284.2.dr, chromecache_420.2.dr	String found in binary or memory: https://www.istockphoto.com/photo/license-gm182417552-?utm_medium=organic&utm_source=google&
Source: chromecache_392.2.dr, chromecache_349.2.dr	String found in binary or memory: https://www.istockphoto.com/photo/license-gm597639502-?utm_medium=organic&utm_source=google&
Source: chromecache_390.2.dr	String found in binary or memory: https://www.joinstratosphere.com/
Source: chromecache_406.2.dr	String found in binary or memory: https://www.joinstratosphere.com/insurance-agency-website
Source: chromecache_390.2.dr	String found in binary or memory: https://www.linkedin.com/company/9205751?trk=tyah&trkInfo=idx%3A2-2-3%2CtarId%3A1424725448600%2C
Source: chromecache_390.2.dr	String found in binary or memory: https://www.rmshg.com/
Source: chromecache_390.2.dr	String found in binary or memory: https://www.youtube.com/channel/UCRgLZ5OmT9gI7sGPSEUnckA/feed?view_as=public

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 23.196.177.159:443 -> 192.168.2.11:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.196.177.159:443 -> 192.168.2.11:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.11:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.11:49961 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@26/386@58/20

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2492 --field-trial-handle=2460,i,14899353169943493930,12871650326961900512,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://rmshg.amplified.training/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2492 --field-trial-handle=2460,i,14899353169943493930,12871650326961900512,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://rmshg.amplified.training/	0%	Avira URL Cloud	safe
https://rmshg.amplified.training/	0%	Virustotal		Browse

Source	Detection	Scanner	Link
jsdelivr.map.fastly.net	0%	Virustotal	Browse
1667503734.rsc.cdn77.org	0%	Virustotal	Browse
part-0013.t-0009.t-msedge.net	0%	Virustotal	Browse
1784939676.rsc.cdn77.org	0%	Virustotal	Browse
rmshg.amplified.training	0%	Virustotal	Browse
www.rmshg.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.	0%	URL Reputation	safe
http://labs.skinkers.com/touchSwipe/	0%	URL Reputation	safe
http://daneden.me/animate	0%	URL Reputation	safe
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/google-review.webp	0%	Avira URL Cloud	safe
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/logo-white.webp	0%	Avira URL Cloud	safe
https://fortis-site.com/wp-content/uploads/2018/04/trusted-choice-logo-234x62.png	0%	Avira URL Cloud	safe
https://fortis-site.com/wp-content/cache/min/1/wp-content/plugins/parallax_video_backgrounds_vc/assets/css/animate-7490004261602226c037e62260c39c8e.css	0%	Avira URL Cloud	safe
https://rmshg.amplified.training/pages/themes/default/css/toastr.min.css?v=558	0%	Avira URL Cloud	safe
https://rmshg.amplified.training/pages/themes/default/css/font/Open_Sans_700.woff	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://fortis-site.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.6.4	0%	Avira URL Cloud	safe
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/favicon.ico?v=014020240840136914499	0%	Avira URL Cloud	safe
https://rmshg.amplified.training/pages/themes/default/css/font/Open_Sans_300.woff	0%	Avira URL Cloud	safe
https://fortis-site.com/wp-content/cache/min/1/wp-content/themes/fortuna/stylesheets/grid-896199530817a6736ba181d5858c9463.css	0%	Avira URL Cloud	safe
https://fortis-site.com/wp-content/plugins/gravityforms/js/jquery.maskedinput.min.js?ver=2.3.4	0%	Avira URL Cloud	safe
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/google	0%	Avira URL Cloud	safe
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/js/recent-blo	0%	Avira URL Cloud	safe
https://fortis-site.com/#breadcrumb	0%	Avira URL Cloud	safe
https://fortis-site.com/wp-content/cache/min/1/wp-content/plugins/parallax_video_backgrounds_vc/assets/js/jparallax-7d021341b99ed81aaf7377dd90a3097a.js	0%	Avira URL Cloud	safe
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/js/form-validation.js?v=145820231158259990808	0%	Avira URL Cloud	safe
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/logo-f	0%	Avira URL Cloud	safe
https://fortis-site.com/wp-content/uploads/hm_custom_css_js/custom.css?ver=1522749326	0%	Avira URL Cloud	safe
https://fortis-site.com/wp-content/cache/min/1/wp-content/plugins/parallax_video_backgrounds_vc/assets/css/background-style-0f44168bd3d23e9e7fdbf608efe91d3c.css	0%	Avira URL Cloud	safe
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/css/header.cs	0%	Avira URL Cloud	safe
https://fortis-site.com/wp-content/uploads/2018/10/consulting2.jpg	0%	Avira URL Cloud	safe
https://fortis-site.com/#webpage	0%	Avira URL Cloud	safe
https://fortis-site.com/wp-content/cache/min/1/wp-content/plugins/parallax_video_backgrounds_vc/assets/css/style-b40bed06cbf66bb43c63a21c111befe2.css	0%	Avira URL Cloud	safe
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/logo-w	0%	Avira URL Cloud	safe
https://fortis-site.com/commercial-umbrella-insurance-small-business/	0%	Avira URL Cloud	safe
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/js/common.js?v=082720230227518133675	0%	Avira URL Cloud	safe
https://fortis-site.com/wp-content/cache/min/1/font-awesome/4.7.0/css/font-awesome.min-f3c95ec7959d6de503c73e1f51f186af.css	0%	Avira URL Cloud	safe
https://fortis-site.com/wp-content/plugins/gravityforms/images/spinner.gif	0%	Avira URL Cloud	safe
https://fortis-site.com/wp-content/plugins/gravityforms/css/browsers.min.css?ver=2.3.4	0%	Avira URL Cloud	safe
https://fortis-site.com/wp-content/plugins/gravityforms/css/formsmain.min.css?ver=2.3.4	0%	Avira URL Cloud	safe
https://rmshg.amplified.training/pages/images/rating/star-solid.svg	0%	Avira URL Cloud	safe
https://fortis-site.com/refer-friend-help-us-support-charity-cc4c/	0%	Avira URL Cloud	safe
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/js/jquery-3.7.0.min.js?v=081420231114354913937	0%	Avira URL Cloud	safe
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/logo.w	0%	Avira URL Cloud	safe
https://fortis-site.com/wp-content/cache/min/1/ajax/libs/jquery-easing/1.4.1/jquery.easing.min-5fbd6a69fa350237d507240b81a6abed.js	0%	Avira URL Cloud	safe
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/servic	0%	Avira URL Cloud	safe
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/css/owl.carousel.min.css?v=082020231220461627960	0%	Avira URL Cloud	safe
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/js/owl.carousel.min.js?v=081420231114354913921	0%	Avira URL Cloud	safe
https://rmshg.amplified.training/pages/scripts/lib/formenhancements-558.min.js	0%	Avira URL Cloud	safe
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/css/home.css?v=015820240858469386724	0%	Avira URL Cloud	safe
https://fortis-site.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=7.18.0	0%	Avira URL Cloud	safe
https://fortis-site.com/wp-content/uploads/2018/10/home2.jpg	0%	Avira URL Cloud	safe
https://fortis-site.com/wp-content/uploads/2017/12/Logo-179x64.png	0%	Avira URL Cloud	safe
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/testim	0%	Avira URL Cloud	safe
https://rmshg.amplified.training/pages/scripts/lib/main-558.min.js	0%	Avira URL Cloud	safe
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/css/home.css?	0%	Avira URL Cloud	safe
https://rmshg.amplified.training/pages/scripts/lib/login-558.min.js	0%	Avira URL Cloud	safe
https://fortis-site.com/wp-content/cache/min/1/wp-content/plugins/parallax_video_backgrounds_vc/assets/js/jquery.appear-01c0b6095409fd502bc0f13168cfdd74.js	0%	Avira URL Cloud	safe
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/logo.webp	0%	Avira URL Cloud	safe
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/istock-1350660376.jpg	0%	Avira URL Cloud	safe
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/night-	0%	Avira URL Cloud	safe
https://fortis-site.com/wp-content/uploads/2017/12/slider3.jpg	0%	Avira URL Cloud	safe
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/covid-bg.svg	0%	Avira URL Cloud	safe
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/program-bg.jpg	0%	Avira URL Cloud	safe
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/e0de52	0%	Avira URL Cloud	safe
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/a581c3	0%	Avira URL Cloud	safe
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/adult-	0%	Avira URL Cloud	safe
https://fortis-site.com/wp-content/cache/min/1/wp-content/plugins/parallax_video_backgrounds_vc/assets/js/custom-d568b807ee8bd8c276f949ed58c0dcee.js	0%	Avira URL Cloud	safe
https://fortis-site.com/wp-content/uploads/2018/10/about2.jpg	0%	Avira URL Cloud	safe
https://rmshg.amplified.training/pages/themes/default/css/images/icons.gif	0%	Avira URL Cloud	safe
http://materializecss.com)	0%	Avira URL Cloud	safe
https://rmshg.amplified.training/pages/images/rating/star-solid-grey.svg	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
jsdelivr.map.fastly.net	151.101.65.229	true	false	0%, Virustotal, Browse	unknown
1667503734.rsc.cdn77.org	89.187.173.23	true	false	0%, Virustotal, Browse	unknown
1784939676.rsc.cdn77.org	89.187.173.22	true	false	0%, Virustotal, Browse	unknown
maxcdn.bootstrapcdn.com	104.18.11.207	true	false		high
googletagmanager.com	142.250.189.136	true	false		high
rmshg.talentlms.com	3.217.205.239	true	false		high
api.userway.org	44.234.218.238	true	false		high
d3j0t7vrtr92dk.cloudfront.net	18.173.145.206	true	false		high
part-0013.t-0009.t-msedge.net	13.107.246.41	true	false	0%, Virustotal, Browse	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false		high
www.google.com	142.250.217.196	true	false		high
fortis-site.com	104.21.49.115	true	false		unknown
fortissite.wpengine.com	35.188.55.83	true	false		high
cdn.jsdelivr.net	unknown	unknown	false		high
kit.fontawesome.com	unknown	unknown	false		high
www.rmshg.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
cdn77.api.userway.org	unknown	unknown	false		high
cdn.userway.org	unknown	unknown	false		high
rmshg.amplified.training	unknown	unknown	false	0%, Virustotal, Browse	unknown
cdn.stratospherewebsites.com	unknown	unknown	false		unknown
ka-p.fontawesome.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/google-review.webp	false	Avira URL Cloud: safe	unknown
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/logo-white.webp	false	Avira URL Cloud: safe	unknown
https://d3j0t7vrtr92dk.cloudfront.net/images/loading-small.gif	false		high
https://fortis-site.com/wp-content/uploads/2018/04/trusted-choice-logo-234x62.png	false	Avira URL Cloud: safe	unknown
https://fortis-site.com/wp-content/cache/min/1/wp-content/plugins/parallax_video_backgrounds_vc/assets/css/animate-7490004261602226c037e62260c39c8e.css	false	Avira URL Cloud: safe	unknown
https://rmshg.amplified.training/pages/themes/default/css/toastr.min.css?v=558	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	low
https://rmshg.amplified.training/pages/themes/default/css/font/Open_Sans_700.woff	false	Avira URL Cloud: safe	unknown
https://fortis-site.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.6.4	false	Avira URL Cloud: safe	unknown
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/favicon.ico?v=014020240840136914499	false	Avira URL Cloud: safe	unknown
https://rmshg.amplified.training/pages/themes/default/css/font/Open_Sans_300.woff	false	Avira URL Cloud: safe	unknown
https://fortis-site.com/wp-content/cache/min/1/wp-content/themes/fortuna/stylesheets/grid-896199530817a6736ba181d5858c9463.css	false	Avira URL Cloud: safe	unknown
https://fortis-site.com/wp-content/plugins/gravityforms/js/jquery.maskedinput.min.js?ver=2.3.4	false	Avira URL Cloud: safe	unknown
https://rmshg.amplified.training/	false		unknown
https://fortis-site.com/wp-content/cache/min/1/wp-content/plugins/parallax_video_backgrounds_vc/assets/js/jparallax-7d021341b99ed81aaf7377dd90a3097a.js	false	Avira URL Cloud: safe	unknown
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/js/form-validation.js?v=145820231158259990808	false	Avira URL Cloud: safe	unknown
https://fortis-site.com/wp-content/cache/min/1/wp-content/plugins/parallax_video_backgrounds_vc/assets/css/background-style-0f44168bd3d23e9e7fdbf608efe91d3c.css	false	Avira URL Cloud: safe	unknown
https://fortis-site.com/wp-content/uploads/hm_custom_css_js/custom.css?ver=1522749326	false	Avira URL Cloud: safe	unknown
https://d3j0t7vrtr92dk.cloudfront.net/images/empty_states/noCatalog.svg	false		high
https://d3j0t7vrtr92dk.cloudfront.net/rmshg/1576790499_slicertraining.png	false		high
https://fortis-site.com/wp-content/uploads/2018/10/consulting2.jpg	false	Avira URL Cloud: safe	unknown
https://fortis-site.com/wp-content/cache/min/1/wp-content/plugins/parallax_video_backgrounds_vc/assets/css/style-b40bed06cbf66bb43c63a21c111befe2.css	false	Avira URL Cloud: safe	unknown
https://api.userway.org/api/tunings/D0JSP1avgg	false		high
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/js/common.js?v=082720230227518133675	false	Avira URL Cloud: safe	unknown
https://fortis-site.com/wp-content/cache/min/1/font-awesome/4.7.0/css/font-awesome.min-f3c95ec7959d6de503c73e1f51f186af.css	false	Avira URL Cloud: safe	unknown
https://fortis-site.com/wp-content/plugins/gravityforms/css/browsers.min.css?ver=2.3.4	false	Avira URL Cloud: safe	unknown
https://rmshg.amplified.training/index	false		unknown
https://fortis-site.com/wp-content/plugins/gravityforms/css/formsmain.min.css?ver=2.3.4	false	Avira URL Cloud: safe	unknown
https://rmshg.amplified.training/pages/images/rating/star-solid.svg	false	Avira URL Cloud: safe	unknown
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/js/jquery-3.7.0.min.js?v=081420231114354913937	false	Avira URL Cloud: safe	unknown
https://fortis-site.com/wp-content/cache/min/1/ajax/libs/jquery-easing/1.4.1/jquery.easing.min-5fbd6a69fa350237d507240b81a6abed.js	false	Avira URL Cloud: safe	unknown
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/css/owl.carousel.min.css?v=082020231220461627960	false	Avira URL Cloud: safe	unknown
https://cdn.userway.org/remediation/2024-04-30-12-14-34/free/remediation-tool-free.js?ts=1714479274721	false		high
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/js/owl.carousel.min.js?v=081420231114354913921	false	Avira URL Cloud: safe	unknown
https://rmshg.amplified.training/pages/scripts/lib/formenhancements-558.min.js	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/jquery-validation-unobtrusive/3.2.12/jquery.validate.unobtrusive.min.js	false		high
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/css/home.css?v=015820240858469386724	false	Avira URL Cloud: safe	unknown
https://fortis-site.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=7.18.0	false	Avira URL Cloud: safe	unknown
https://fortis-site.com/wp-content/uploads/2017/12/Logo-179x64.png	false	Avira URL Cloud: safe	unknown
https://rmshg.amplified.training/pages/scripts/lib/main-558.min.js	false	Avira URL Cloud: safe	unknown
https://d3j0t7vrtr92dk.cloudfront.net/amplifiedhr/1563760228_ProtectYourAssets.png	false		high
https://rmshg.amplified.training/pages/scripts/lib/login-558.min.js	false	Avira URL Cloud: safe	unknown
https://fortis-site.com/wp-content/cache/min/1/wp-content/plugins/parallax_video_backgrounds_vc/assets/js/jquery.appear-01c0b6095409fd502bc0f13168cfdd74.js	false	Avira URL Cloud: safe	unknown
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/istock-1350660376.jpg	false	Avira URL Cloud: safe	unknown
https://cdn77.api.userway.org/api/img-dscr/v2/D0JSP1avgg/3527403/RLqwMG7OTpTSzPtD/alts.json?dto=%7B%22sorted%22%3A%5B%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Flogo.webp%22%2C%22alt%22%3A%22RMS%20Hospitality%20Group%22%2C%22dir%22%3A%22RO%22%7D%5D%2C%22tier%22%3A%22FREE_QUOTA_TIER%22%7D	false		high
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/logo.webp	false	Avira URL Cloud: safe	unknown
https://fortis-site.com/wp-content/uploads/2017/12/slider3.jpg	false	Avira URL Cloud: safe	unknown
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/covid-bg.svg	false	Avira URL Cloud: safe	unknown
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/program-bg.jpg	false	Avira URL Cloud: safe	unknown
https://d3j0t7vrtr92dk.cloudfront.net/rmshg/1576789110_slipstripsfallsmall.png	false		high
https://fortis-site.com/wp-content/cache/min/1/wp-content/plugins/parallax_video_backgrounds_vc/assets/js/custom-d568b807ee8bd8c276f949ed58c0dcee.js	false	Avira URL Cloud: safe	unknown
https://d3j0t7vrtr92dk.cloudfront.net/rmshg/1576583896_newRMSbanner.png	false		high
https://fortis-site.com/wp-content/uploads/2018/10/about2.jpg	false	Avira URL Cloud: safe	unknown
https://rmshg.amplified.training/pages/themes/default/css/images/icons.gif	false	Avira URL Cloud: safe	unknown
https://cdn.userway.org/widgetapp/2024-04-30-12-14-34/widget_app_base_1714479274721.js	false		high
https://rmshg.amplified.training/pages/images/rating/star-solid-grey.svg	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://greensock.com/club/	chromecache_295.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_403.2.dr, chromecache_379.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_347.2.dr, chromecache_276.2.dr	false		high
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/google	chromecache_390.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_275.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_403.2.dr, chromecache_379.2.dr	false		high
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/js/recent-blo	chromecache_390.2.dr	false	Avira URL Cloud: safe	unknown
https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.	chromecache_403.2.dr, chromecache_379.2.dr	false	URL Reputation: safe	low
https://fortis-site.com/#breadcrumb	chromecache_406.2.dr	false	Avira URL Cloud: safe	unknown
https://search.google.com/local/writereview?placeid=ChIJJ8qJHn19wokR6lUxh4-0Z_o	chromecache_390.2.dr	false		high
https://stats.g.doubleclick.net/j/collect	chromecache_276.2.dr	false		high
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/logo-f	chromecache_254.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/css/header.cs	chromecache_390.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha	chromecache_379.2.dr	false		high
https://fortis-site.com/#webpage	chromecache_406.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/logo-w	chromecache_390.2.dr	false	Avira URL Cloud: safe	unknown
https://ka-p.fontawesome.com/assets/00bf593261/112787936/kit.css?token=00bf593261);	chromecache_252.2.dr	false		high
https://fortis-site.com/commercial-umbrella-insurance-small-business/	chromecache_406.2.dr	false	Avira URL Cloud: safe	unknown
http://labs.skinkers.com/touchSwipe/	chromecache_295.2.dr	false	URL Reputation: safe	unknown
https://fortis-site.com/wp-content/plugins/gravityforms/images/spinner.gif	chromecache_406.2.dr	false	Avira URL Cloud: safe	unknown
https://www.apache.org/licenses/	chromecache_403.2.dr, chromecache_379.2.dr	false		high
https://schema.org	chromecache_406.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_403.2.dr, chromecache_379.2.dr	false		high
https://fortis-site.com/refer-friend-help-us-support-charity-cc4c/	chromecache_406.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/logo.w	chromecache_390.2.dr, chromecache_371.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/servic	chromecache_390.2.dr, chromecache_361.2.dr, chromecache_404.2.dr	false	Avira URL Cloud: safe	unknown
https://oss.maxcdn.com/libs/respond.js/1.4.2/respond.min.js	chromecache_390.2.dr	false		high
https://goo.gl/maps/whR4WcLdR422	chromecache_406.2.dr	false		high
https://cdn.userway.org/	chromecache_216.2.dr	false		high
https://fortis-site.com/wp-content/uploads/2018/10/home2.jpg	chromecache_406.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/testim	chromecache_390.2.dr	false	Avira URL Cloud: safe	unknown
https://www.istockphoto.com/photo/license-gm1350660376-?utm_medium=organic&utm_source=google&amp	chromecache_292.2.dr, chromecache_370.2.dr	false		high
https://www.youtube.com/channel/UCRgLZ5OmT9gI7sGPSEUnckA/feed?view_as=public	chromecache_390.2.dr	false		high
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/css/home.css?	chromecache_390.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/night-	chromecache_390.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/contact	chromecache_403.2.dr, chromecache_379.2.dr	false		high
http://daneden.me/animate	chromecache_373.2.dr, chromecache_423.2.dr	false	URL Reputation: safe	unknown
https://userway.org	chromecache_390.2.dr	false		high
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/e0de52	chromecache_380.2.dr, chromecache_254.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/a581c3	chromecache_380.2.dr, chromecache_254.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/adult-	chromecache_390.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/	chromecache_403.2.dr, chromecache_215.2.dr, chromecache_379.2.dr	false		high
https://www.linkedin.com/company/9205751?trk=tyah&trkInfo=idx%3A2-2-3%2CtarId%3A1424725448600%2C	chromecache_390.2.dr	false		high
http://materializecss.com)	chromecache_227.2.dr	false	Avira URL Cloud: safe	low

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.41	part-0013.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
44.234.218.238	api.userway.org	United States	16509	AMAZON-02US	false
142.250.64.164	unknown	United States	15169	GOOGLEUS	false
104.21.49.115	fortis-site.com	United States	13335	CLOUDFLARENETUS	false
3.217.205.239	rmshg.talentlms.com	United States	14618	AMAZON-AESUS	false
89.187.173.23	1667503734.rsc.cdn77.org	Czech Republic	60068	CDN77GB	false
89.187.173.22	1784939676.rsc.cdn77.org	Czech Republic	60068	CDN77GB	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
192.178.50.68	unknown	United States	15169	GOOGLEUS	false
18.173.145.206	d3j0t7vrtr92dk.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
151.101.65.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
35.188.55.83	fortissite.wpengine.com	United States	15169	GOOGLEUS	false
142.250.189.136	googletagmanager.com	United States	15169	GOOGLEUS	false
104.18.11.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
34.208.13.132	unknown	United States	16509	AMAZON-02US	false
142.250.217.196	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
18.173.145.84	unknown	United States	3	MIT-GATEWAYSUS	false
89.187.173.14	unknown	Czech Republic	60068	CDN77GB	false

Private

IP
192.168.2.11

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1436915
Start date and time:	2024-05-06 18:40:46 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 47s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://rmshg.amplified.training/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@26/386@58/20
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://rmshg.amplified.training/index Browse: https://rmshg.amplified.training/catalog Browse: http://www.rmshg.com/ Browse: https://fortis-site.com/ Browse: https://rmshg.amplified.training/catalog Browse: http://www.rmshg.com/ Browse: https://fortis-site.com/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.165.195, 172.217.165.206, 173.194.212.84, 34.104.35.123, 142.250.189.138, 172.217.15.202, 142.251.35.234, 192.178.50.42, 172.217.2.202, 142.250.217.202, 172.217.165.202, 192.178.50.74, 142.250.64.138, 142.250.217.234, 142.250.64.202, 142.250.64.170, 142.250.217.170, 199.232.214.172, 192.229.211.108, 199.232.210.172, 20.242.39.171, 52.173.139.99, 13.85.23.206, 142.250.64.131, 172.64.147.188, 104.18.40.68, 172.217.3.74, 142.250.64.234, 142.250.217.206, 172.217.3.72, 142.250.217.195, 142.250.64.174, 142.250.64.227, 142.250.217.227, 142.250.64.195
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, waws-prod-dm1-087.centralus.cloudapp.azure.com, ka-p.fontawesome.com.cdn.cloudflare.net, clientservices.googleapis.com, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, glb.cws.prod.dcat.dsp.trafficmanager.net, update.googleapis.com, www.gstatic.com, www.google-analytics.com, kit.fontawesome.com.cdn.cloudflare.net, clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com, cdnstratospherebuilder.azureedge.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, cdnstratospherebuilder.afd.azureedge.net, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon May 6 15:41:50 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9893094046931625
Encrypted:	false
SSDEEP:	48:8c6ddTU0MXHPidAKZdA1nehwiZUklqehQy+3:8cQknvy
MD5:	8BAA0075350431217E3ECE4C191E6625
SHA1:	532F25B86AA85D6B8965D8B022E0FB1BCBDEA73B
SHA-256:	31F6CC26120C656476AD6189A30575662D602FBCE61ECAD31E44B4924E6A1779
SHA-512:	AB9E622DD0DA4F71918E5688B4F980E787715B040495D21BE76F02E16B102C01EC6349B856B5A9D88499016F9430E3790D0817D2B683E7380C5E106EFAEF210B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....ZK.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.I.X7.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X7.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.V.X7.....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.V.X7...........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X:.............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............[......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon May 6 15:41:50 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.002081120591589
Encrypted:	false
SSDEEP:	48:8d6ddTU0MXHPidAKZdA1geh/iZUkAQkqehfy+2:8dQkD9QWy
MD5:	A2D52911F87360E5538B0BD8E7E38156
SHA1:	A50BE08809E4E71E65FE5D13C2FF8A180A239576
SHA-256:	C9762F8D933C20818035BB48AB09639F4FBEF8BCA46ED59BB08CA3885E9C3E6F
SHA-512:	BEF37ED9EA1EDAF33E230FCBABACE16E2AE098A84B320307D078A03B04CF18BD44FA79ADE77AB99BCD2E5B585767AC982E95E132AC4F62CD1D1B4E05FE6DFFD3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....9.IK.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.I.X7.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X7.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.V.X7.....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.V.X7...........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X:.............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............[......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 09:52:18 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2691
Entropy (8bit):	4.010644797174368
Encrypted:	false
SSDEEP:	48:876ddTU0MCHPidAKZdA148eh7sFiZUkmgqeh7sVy+BX:87Qkmnjy
MD5:	8F08D42DA5401C0D7283AC1831328E10
SHA1:	A16E7C1ECFB22FF5A0BE4EDC4CA639F7B4D84A3B
SHA-256:	F5643EDE732EB52900D0C89CBB268905043966952A2840D1DFC1E0B390CAA537
SHA-512:	7328767B7465C06803D96D64EA28B35524940EE8EE35B8E779928D319F0253B2547D4A9F38097C82F93018676970F56752907A3A8F070C7A41E7FAE2EF450D63
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....s4..z.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.I.X7.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X7.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.V.X7.....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.V.X7...........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VEW.V............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............[......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon May 6 15:41:50 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.000041436470717
Encrypted:	false
SSDEEP:	48:8o6ddTU0MXHPidAKZdA1lehDiZUkwqehLy+R:8oQkedy
MD5:	181F4F159B4BEB0B47F2B7A32A13A833
SHA1:	40105EF91BF742E0472E006934541D3C0AF6280A
SHA-256:	ACEDF806E6DDDC4C22DFB5358BC184D2DCEE828AAE3058CD05D33C52D71A49EF
SHA-512:	32A77605104D65279C2FA246D8F4BBC1A8EBA1792947D07DAC68D1663A63A2DA81C42295518AAB4C9BE3B08DEE2C380B37C4DAA6656902A7FBCE6A7CBAB6F3BE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......DK.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.I.X7.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X7.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.V.X7.....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.V.X7...........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X:.............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............[......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon May 6 15:41:50 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.988702625690346
Encrypted:	false
SSDEEP:	48:8i6ddTU0MXHPidAKZdA17ehBiZUk1W1qehJy+C:8iQk+9py
MD5:	CD4E1D68A9AE2E8CF2252F005A68443D
SHA1:	C7E6DDE07DDA8EA14D518DA3825B1FAC05C8D37E
SHA-256:	8ADE35DBB91C82892C9832558029E92AFA675B263A7885E46CD7753646161B97
SHA-512:	05AA9DA3E83D98008A9DB760CB7878F9C5E94D103CD5A81AC02D0736D5C49427014A087852EB99D06A08602730CE046F33920D3F8B8DB4FB8F310F2B6B212669
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....Y.RK.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.I.X7.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X7.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.V.X7.....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.V.X7...........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X:.............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............[......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon May 6 15:41:50 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9990183633203977
Encrypted:	false
SSDEEP:	48:8x6ddTU0MXHPidAKZdA1duTiehOuTbbiZUk5OjqehOuTbjy+yT+:8xQkeTLTbxWOvTbjy7T
MD5:	30BF27ECE07902D363D79A4412BA7A21
SHA1:	45464766168313B10B338FD5F7EBF1122E11ABD1
SHA-256:	495043BE78FC7AE3F266BBC66702A2849B6652B05CC8C7F82BC1323D76E82F93
SHA-512:	AF0C7E40E58610C58CAEEC8D85DA99D2612D16C01DF7BB0985A01F8BA79172B6B0FDAB9F765C78FB4029BDB6706BD4219046DE6404E1F2AE3431DA3E0341B559
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....\.<K.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.I.X7.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X7.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.V.X7.....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.V.X7...........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X:.............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............[......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x332, components 3
Category:	dropped
Size (bytes):	92660
Entropy (8bit):	7.99073508360426
Encrypted:	true
SSDEEP:	1536:83QZhFwkWe+/6woeWrGzuvw/Nhu5TDaL8i76zBj2CEM6cDhBvAzqF:8QpwHe+/6IWmjNcde6zBicBhBozqF
MD5:	97A573CE121C35989428D2EE2E14ACE8
SHA1:	25952A5D3BEE9ED2A5A3CA70D078966D236B5B02
SHA-256:	09A9F3D5519D7293730C20851C1A3FB13AABD63430D1D56073CBB0B97A5DBF14
SHA-512:	D8E4B5746047609913514D31B3BAFF5062EF2DB2EE75D93B7B976C99BF80D10625A0E4E40FD78F0CA600ADEC55C20D452A6C29DA7D90B046BD78CCD300FDAAA9
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................L..........................................................................................Kc.........0...}....&.F..B\|...,.x...`..3JpDy-.....iE.O.0....@.0.!.0....J:.ph....b.e.6.1.5.r.j...R.;.MN.r2.GB.P...i.i.*......l.....!...@./.K.5e.....%.A..u>..0.!.7A..t..5.g...q..Z\|.S...0...1#..0....6e.z..........w.....B..`.\...W.B.!"$_..q..t...H...`....P...-,d/..........u.R....Y..:.6DDi...<....!...u.P&...0......j..`....`....`...j(....P...S..72.<..f`=g?X.`.pV_.f`.n;..Z6.).Y(.~...0...B..";.....+$.-.R>k.H..E..-.w..l...6..}.\|2.3.x...`..[aa.OX.d.A.(3Hj=..X...z..-Ax...z.}.Mg...5:..O9...5.\|..f`.w;Y..tV].Nbd.fKZ.<..I...[8...Bt..b$.g....}CYUp.......T.u.......+f..q.{.@.....@..`2....5.....4X.M.mZ...xI........Z.....2.X.....pW..Qt..W.~.g.^... ..r$...G....w.:...)...I...,&?C...1..T..C!.79...T.2Y....4.....Q.o....d..

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 1024x1024, components 3
Category:	downloaded
Size (bytes):	191976
Entropy (8bit):	7.9895525481179455
Encrypted:	false
SSDEEP:	3072:0tXO/vMgxhM8gcZqh/cTxERr6rfKybuTS1jzwXFCrMEoMcMjZiTq6UM8cfwAbruG:0te/3A8gcQh/seeu8jzwXFCrMFvsijUC
MD5:	85B92CE90D5C6E759ECA08E70DDADF07
SHA1:	6E338916405E5A2111C8A5D319F59F05AA3C3E60
SHA-256:	C62865C877F3C8D82201A88157D787364C11630554F995A4B9F53079462E7AE7
SHA-512:	C83452DD5D2875BBC10B95125F6AECBFECD032ED44126292110EECC301EF6F22146B0E9D8E49EFF2FEC970BC9BF897D292C1E1EB4161317F75FFB2E906E4A319
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/uploads/2018/10/insurance-inspections2.jpg
Preview:	......JFIF..............Compressed by jpeg-recompress......................................................"..."%%424DD\.................................................."..."%%424DD\..........."................................................R0./0...\|.Kiy...3..Ga".OUY.,..V....T\|.)%Q.R9y..;..v..../5..{.U..q.w<./.?[.a..H.2.9.&)\|(&..mr.0.@A)..4.4..v..<...Yo.Z......q2"..m}.Dh:.....<..*/H....U{.HR...)Z\...a..G#....G.....%.....x/!d...$.~......cWD.....\|.2\|.cY.?].......A...3.-..U.^..U.w9.3...!.b.2U.&.\TU:...?.....+.:.:.).1..t....RA.......w...I2.6...e..{.3......q.bc@.....s.Cd...:m.).....eN;.........q........M.[..1#.....&H..4..N..y.S...W]!..z.x..Kr....d?9.e#)U...![c:T8...5J.tV.0S..'.]..{J"sd....-.t.`.E. .t.b.%.{.._...0.W.z<.+ZE.0..Y...;.:....#)..b..'...e.I..X.cG...!....#.....#.,.<=...(.yZ .h..kq@.....a9.AVf..~.Pq..P..5)..%=.sZ..c...Dy.yl..U.ys...g...5"/w=.z.x....y....J.G..c..qQ.=3.4..S{.E.x.5.r.] L79.A9....5..5.....?..%.E[....gH:.X$...{.U..#....

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29149), with CRLF line terminators
Category:	downloaded
Size (bytes):	29403
Entropy (8bit):	5.423183852522626
Encrypted:	false
SSDEEP:	384:Ay1KpMxWR1zy40Islk/4EfoXdOM8w706DvCQ41b0zouFwhq1Tdo+2sb3AB8kNv1A:AsIslkQEfoXdOM8w7HvfzoiHRBm4
MD5:	3ECF64623A5FBE3A5E14A492EBA63F3F
SHA1:	E1CEFDCAD1E9B0492453C90634E3136E1CC8E025
SHA-256:	F755D1B33621F2A2D5D9889DFFA5F3E379651763B74C0070339DDC04969DC6E7
SHA-512:	0C6677EC8480035F31E265949983D1E467778F8FF4943E67CB1628FD3DE5BCE862A783733D6911A1F5188D2C2DF904B3FB129FFBA694232A2BB4E3E02FD69915
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.slideanims.min.js?version=5.4.6.4
Preview:	/***********************************************.. REVOLUTION 5.4.6.4 EXTENSION - SLIDE ANIMATIONS.. * @version: 1.8 (17.05.2017).. * @requires jquery.themepunch.revolution.js.. * @author ThemePunch..***********************************************/..!function(a){"use strict";var b=jQuery.fn.revolution,c={alias:"SlideAnimations Min JS",name:"revolution.extensions.slideanims.min.js",min_core:"5.4.5",version:"1.8"};jQuery.extend(!0,b,{animateSlide:function(a,d,e,f,h,i,j,k){return"stop"===b.compare_version(c).check?k:g(a,d,e,f,h,i,j,k)}});var d=function(a,c,d,e){var f=a,g=f.find(".defaultimg"),h=g.data("mediafilter"),i=f.data("zoomstart"),j=f.data("rotationstart");void 0!=g.data("currotate")&&(j=g.data("currotate")),void 0!=g.data("curscale")&&"box"==e?i=100g.data("curscale"):void 0!=g.data("curscale")&&(i=g.data("curscale")),b.slotSize(g,c);var k=g.attr("src"),l=g.data("bgcolor"),m=c.width,n=c.height,o=g.data("fxof"),p=0;void 0===l&&(l=g.css("backgroundColor")),"on"==c.autoHeight&&(n

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1224), with no line terminators
Category:	downloaded
Size (bytes):	1224
Entropy (8bit):	5.8189161510866025
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAjZy+KVCLTLv138EgFB5vtTGJTlWtRcw1MuhtsLqo40RWUnYN:VKEcixKonR3evtTA87b1Muh6LrwUnG
MD5:	5C1B30CF28C281A9C30A11D5418E6546
SHA1:	70149D59E8204ED9DDBC6C090B4AB98A10833385
SHA-256:	5D1B6A526FFD1A9E7782FDCF62589A8BC365956A59FED61DCC1B69B9FDC46B73
SHA-512:	7ED7D4269C44C111C570939EE8F992BFBEB2A6311B6A344DF7078EBEA6DEEAEF25AAE8237DBAF2FF11612A29A862D4447CF6D7244604A73A164CA4CE39CEB3A2
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?hl=en&render=explicit&ver=6.4.3
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-0lJkOVHDy3ItYlCbUoEzThjP3hLhLYfEFPAkVO

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1787), with no line terminators
Category:	downloaded
Size (bytes):	1787
Entropy (8bit):	5.455972201122987
Encrypted:	false
SSDEEP:	48:4liqHcr0OpfNQi43KNaaZG/rbRhq2Dld8dVGQtVQNIV:4YqpOp6iJe/rjxd8XGgqN+
MD5:	2DE2D3A4FA8CC3535CA51BF797159FD8
SHA1:	1815C99EDD4FA45310BA5DBCAFF5625033471DC5
SHA-256:	66A9737875A0F5A00048FB2ED685946F0ABD0649D44735B8460BF99821664C54
SHA-512:	8AE52F570B6D2FE32D63DF3EF4700CC0C9D0A42C2F7864415FEE6CD1719D08ADCD3DE28D05CC41507D6CCB2E80FED0C8A3563487A4BFB93F8013C6AB3ABA24D0
Malicious:	false
Reputation:	low
URL:	https://cdn.userway.org/widget.js
Preview:	!function(){function t(t,e){var n=document.body\|\|document.head,i=document.createElement("script");i.src=t,i.async=!0,i.id="a11yWidgetSrc",e&&(i.crossOrigin="anonymous",i.integrity=e),n.appendChild(i)}function e(){var t=document.createElement("iframe");t.title="Online scanning alert",t.setAttribute("style","width:100%!important;height:100%!important;position:fixed!important;left:0!important;right:0!important;top:0!important;bottom:0!important;z-index:999999"),document.body.appendChild(t),t.src=o+"scan_error.html",window.addEventListener("message",function(e){e.data&&"scan-alert-dismiss"===e.data.action&&a.indexOf(e.origin)>=0&&t.remove()})}try{var n=document.querySelector("html"),i="data-uw-w-loader";if(n&&n.hasAttribute(i))return;n.setAttribute(i,"")}catch(t){}var a="https://cdn.userway.org/",o=a+"widgetapp/",r=o+"2024-04-30-12-14-34/widget_app_base_1714479274721.js",d=o+"2024-04-30-12-14-34/widget_app_1714479274721.js",c="sha256-e0zc5X+P3dNL/amR6gBzso5UQMhAYUmnIdtlQhNcMZw=";if(locatio

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2531), with no line terminators
Category:	downloaded
Size (bytes):	2531
Entropy (8bit):	5.258955838345915
Encrypted:	false
SSDEEP:	48:+ZnIBwSXRXn9DcxuAzAqiS/D1fJ/BfVUarU/HrU0FNxTmSzNjJ1900dXJUJ/MJi+:+m7nVEnTXinRzNFbc/0iib
MD5:	075F0E6C2695F0030F75E2A14B8F7316
SHA1:	5724CFE1C6FC1B0C50711368D55282321862FCA8
SHA-256:	3E79AD1830D57D90E3C21671F54F4A6AF07048EFD2C4F20C71B1A39DEE930815
SHA-512:	A74C44E0145C4464A5535E226894A053F097837BA94E0A5D6B467BC1DA2736F4EA77B31246D4CB8F9220A2E51D3C2741562A753DE8F9FCF794947F6499993600
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/cache/min/1/ajax/libs/jquery-easing/1.4.1/jquery.easing.min-5fbd6a69fa350237d507240b81a6abed.js
Preview:	(function(factory){if(typeof define==="function"&&define.amd){define(["jquery"],function($){return factory($)})}else if(typeof module==="object"&&typeof module.exports==="object"){exports=factory(require("jquery"))}else{factory(jQuery)}})(function($){$.easing.jswing=$.easing.swing;var pow=Math.pow,sqrt=Math.sqrt,sin=Math.sin,cos=Math.cos,PI=Math.PI,c1=1.70158,c2=c11.525,c3=c1+1,c4=2PI/3,c5=2PI/4.5;function bounceOut(x){var n1=7.5625,d1=2.75;if(x<1/d1){return n1xx}else if(x<2/d1){return n1(x-=1.5/d1)x+.75}else if(x<2.5/d1){return n1(x-=2.25/d1)x+.9375}else{return n1(x-=2.625/d1)x+.984375}}$.extend($.easing,{def:"easeOutQuad",swing:function(x){return $.easing[$.easing.def](x)},easeInQuad:function(x){return xx},easeOutQuad:function(x){return 1-(1-x)(1-x)},easeInOutQuad:function(x){return x<.5?2xx:1-pow(-2x+2,2)/2},easeInCubic:function(x){return xxx},easeOutCubic:function(x){return 1-pow(1-x,3)},easeInOutCubic:function(x){return x<.5?4xxx:1-pow(-2x+2,3)/2},easeInQuart

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29149), with CRLF line terminators
Category:	dropped
Size (bytes):	29403
Entropy (8bit):	5.423183852522626
Encrypted:	false
SSDEEP:	384:Ay1KpMxWR1zy40Islk/4EfoXdOM8w706DvCQ41b0zouFwhq1Tdo+2sb3AB8kNv1A:AsIslkQEfoXdOM8w7HvfzoiHRBm4
MD5:	3ECF64623A5FBE3A5E14A492EBA63F3F
SHA1:	E1CEFDCAD1E9B0492453C90634E3136E1CC8E025
SHA-256:	F755D1B33621F2A2D5D9889DFFA5F3E379651763B74C0070339DDC04969DC6E7
SHA-512:	0C6677EC8480035F31E265949983D1E467778F8FF4943E67CB1628FD3DE5BCE862A783733D6911A1F5188D2C2DF904B3FB129FFBA694232A2BB4E3E02FD69915
Malicious:	false
Reputation:	low
Preview:	/***********************************************.. REVOLUTION 5.4.6.4 EXTENSION - SLIDE ANIMATIONS.. * @version: 1.8 (17.05.2017).. * @requires jquery.themepunch.revolution.js.. * @author ThemePunch..***********************************************/..!function(a){"use strict";var b=jQuery.fn.revolution,c={alias:"SlideAnimations Min JS",name:"revolution.extensions.slideanims.min.js",min_core:"5.4.5",version:"1.8"};jQuery.extend(!0,b,{animateSlide:function(a,d,e,f,h,i,j,k){return"stop"===b.compare_version(c).check?k:g(a,d,e,f,h,i,j,k)}});var d=function(a,c,d,e){var f=a,g=f.find(".defaultimg"),h=g.data("mediafilter"),i=f.data("zoomstart"),j=f.data("rotationstart");void 0!=g.data("currotate")&&(j=g.data("currotate")),void 0!=g.data("curscale")&&"box"==e?i=100g.data("curscale"):void 0!=g.data("curscale")&&(i=g.data("curscale")),b.slotSize(g,c);var k=g.attr("src"),l=g.data("bgcolor"),m=c.width,n=c.height,o=g.data("fxof"),p=0;void 0===l&&(l=g.css("backgroundColor")),"on"==c.autoHeight&&(n

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1942
Entropy (8bit):	4.94146989170583
Encrypted:	false
SSDEEP:	48:YxOt50ix5P50ixP50izP50ipP50iGP50imP50iOP50i0Oey:Z5v3P5vxP5vzP5vpP5vGP5vmP5vOP5vZ
MD5:	D40FB332D7AFD523501BCBDE752D9F09
SHA1:	1A88AE73C0F72617A9770252F6AA05761F0593B7
SHA-256:	54FBDE215E5D67CB9F3B8BCCC84999E3D8CE365A4BBB15F0DDE87CA5B6CCDCBC
SHA-512:	AF345BB17E94A1C7546B18DC8A240F250112276784DABD0C59F6FF4EA968F8270CF216B33F574B41DDE4C1423F52FD9C09752297544036D0269BD3BCCAE4D628
Malicious:	false
Reputation:	low
URL:	https://cdn77.api.userway.org/api/img-dscr/v2/D0JSP1avgg/3527403/RLqwMG7OTpTSzPtD/alts.json?dto=%7B%22sorted%22%3A%5B%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fabout-thumb.webp%22%2C%22alt%22%3A%22RMS%20Hospitality%20Group%20Let%20Us%20Take%20Risk%20off%20Your%20Table%22%2C%22dir%22%3A%22RO%22%7D%2C%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fgoogle-review.webp%22%2C%22alt%22%3A%22Leave%20a%20review%20on%20Google%22%2C%22dir%22%3A%22RO%22%7D%2C%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fistock-1350660376.jpg%22%2C%22alt%22%3A%22How%20Can%20Pubs%20Improve%20Safety%3F%20A%20Primer%20for%20Insurance%20Professionals%22%2C%22dir%22%3A%22RO%22%7D%2C%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fistock-182417552.jpg%22%2C%22alt%22%3A%22The%20Growing%20Problem%20of%20Alcohol-Related%20Incidents%20in%20Music%20Venues%22%2C%22dir%22%3A%22RO%22%7D%2C%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fistock-597639502.jpg%22%2C%22alt%22%3A%22Top%205%20Safety%20Tips%20for%20Entertaining%20at%20a%20Comedy%20Club%22%2C%22dir%22%3A%22RO%22%7D%2C%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Flogo-white.webp%22%2C%22alt%22%3A%22RMS%20Hospitality%20Group%22%2C%22dir%22%3A%22RO%22%7D%2C%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fservice-1.webp%22%2C%22alt%22%3A%22Specialty%20Programs%22%2C%22dir%22%3A%22RO%22%7D%2C%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fservice-3.webp%22%2C%22alt%22%3A%22Work%20With%20RMS%22%2C%22dir%22%3A%22RO%22%7D%5D%2C%22tier%22%3A%22FREE_QUOTA_TIER%22%7D
Preview:	{"payload":{"missingAlts":[{"src":"https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/about-thumb.webp","alt":null,"approved":false,"decorative":false,"metadata":{"skippedForReadOnly":true,"foundCachedResponse":true}},{"src":"https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/google-review.webp","alt":null,"approved":false,"decorative":false,"metadata":{"skippedForReadOnly":true,"foundCachedResponse":true}},{"src":"https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/istock-1350660376.jpg","alt":null,"approved":false,"decorative":false,"metadata":{"skippedForReadOnly":true,"foundCachedResponse":true}},{"src":"https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/istock-182417552.jpg","alt":null,"approved":false,"decorative":false,"metadata":{"skippedForReadOnly":true,"foundCachedResponse":true}},{"src":"https://cdn.strato

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2970)
Category:	downloaded
Size (bytes):	27612
Entropy (8bit):	5.170464858555972
Encrypted:	false
SSDEEP:	384:6DaGDl9+W0hTQ1awRgPo+C6u7A6FG0m9GOq6hjFODT62AWw+S0I+aaV1hh6Hye01:V+9tn2o+ifOq6hjFODT62AWw+SHHK
MD5:	6FD3D6B953CD1EF299B6B71BF085B60F
SHA1:	5818670566E044F2EB9FB8CA6E45075C398C811C
SHA-256:	FB5625030F4C0E7BDB5E1298CE5470E3CE72832C3827AE8EB37E95A837C0ACE0
SHA-512:	8976EC2FFD5CFCA6E062346732040614B009F9470141C4405E66FCC2CFF11715B3B84D9CB16D8A10429B697FBCE5DEECBA0B0D046771814BC28C69C42563800D
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/cache/min/1/wp-content/plugins/parallax_video_backgrounds_vc/assets/js/custom-d568b807ee8bd8c276f949ed58c0dcee.js
Preview:	(function($){"use strict";$.fn.vc_translate_row=function(){var window_scroll=$(window).scrollTop();var window_height=$(window).height();$(this).each(function(index,element){var mobile_disable=$(element).attr('data-row-effect-mobile-disable');if(typeof mobile_disable=="undefined").mobile_disable='false';else mobile_disable=mobile_disable.toString();if(!/Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(navigator.userAgent)).var is_mobile='false';else var is_mobile='true';if(is_mobile=='true'&&mobile_disable=='true').var disable_row_effect='true';else var disable_row_effect='false';if(disable_row_effect=='false'){var percentage=0.var row_height=$(element).outerHeight();var row_top=$(element).offset().top;var position=row_top-window_scroll;var row_visible=position+row_height;var pcsense=$(element).attr('data-parallax-content-sense');var sense=(pcsense/100);var translate=0;var cut=window_height-(window_height*(percentage/100));if(row_visible<=cut&&position<=0){if(row_hei

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (400), with no line terminators
Category:	downloaded
Size (bytes):	400
Entropy (8bit):	4.855133015913845
Encrypted:	false
SSDEEP:	6:jLVeDMJMGeUfPVblsFLs9cVNKVFAVg4xEQrTxXdF0fmBHLtAVIEQrTxXimmBHADY:j5eDMS0Rls/NoWg4tTbGuHLtWqT+HAE
MD5:	5913AE8FB2D192AEBD8238A1486CCB02
SHA1:	96D2171B9013222E6AA2FF8D06575B425D7A3381
SHA-256:	9EC71D63EB4CA47CA2419F477959A5DB4EBDBED4F2EFCF5816217F132AC9ACF5
SHA-512:	EF419017EC7DCDA0ABAAE44FBAB3977EED473EB52F28EB65B4BD353EA6F3E01613D7219CF13475B7E697081E6AE097C1D71BA128927961C573359FC70C4D7089
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/plugins/gravity-forms-wcag-20-form-fields/css/gf_wcag20_form_fields.min.css?ver=6.4.3
Preview:	.gfieldset{border:none;margin:0;padding:0}.sr-only{border:0 none;clip:rect(0,0,0,0);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px}.gform_wrapper .left_label .gfieldset .gfield_label{float:left;margin:.75em 15px 0 0;width:29%;font-weight:700}.gform_wrapper .right_label .gfieldset .gfield_label{float:left;margin:.75em 1em 0 0;width:29%;font-weight:700;text-align:right}

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 479 x 320, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	179154
Entropy (8bit):	7.996891363868708
Encrypted:	true
SSDEEP:	3072:/Uuj9arjIQ1Fh++QIgWRvAHc0/iE7NDLrfsYNuP94U9sw5DXoZaftd8rxIJjKvcy:/bUrjz1qdzgvic0V7NDLrfLul48DXorj
MD5:	113A83EF1D3F5834B51D65263B5CDAD9
SHA1:	BB0941125CABB6D04595BF99494FC11DAF87B399
SHA-256:	0B38FC0FCE48485353BDC13BC1ED6B2EAC2AC6C6809DEA53FDA59813A121248A
SHA-512:	CA3FC3A2C9FECC6356513273E6E9C9EAA79AA2907560BE860EC8E2F9D7A3BEBBA37F2E27B14A2EF8DFF66381A03B429B6496DD87DA07FDCEE1B3DECF5FFD8657
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......@.....rR... .IDATx.T..$.$&"j..F.=...>..y.....?...C.p..!g.3@...pS.>.yd!..;+2.........._....6. m.2.c .....Q.i. !.58DJ...HR....[...A..D.0L(..)..(I..a...$.0.....0.....%.....1q...&...e.<....^x..P@..~2..(.....,....\|.5.=...(.....]......P@4\...@..@...@.`Q..0.5H.0`.U.:f]o.....:.n..\|c..3.t.%......!.~ .........F...@=.....rV.p...y%... D...e...W>..\|./.....n...j..........0.......Q...s.p.7.b...@.P...M.qE...SeN..cG\0.w=.x~.fEa;p.{......n..w.N....n..p.Y...^...V.z;.~w\|...u...._.....U>.A..$.4.....kb~=\|KM3...d..2.4`o..F]F..Q...@....X\|,.<.I.r.Z......l.(...J.).ye..;......../?\|.W\6... .....U..J............../......:.=<... C.@y<.m..A...O!Q.m.YI0g.. $.<F0..=.sVM..q..=+...$g...#.C.....l.6......r.B.(...4PG.}...q.#.->].c..p..~./......R..q0i.4L.."zN...QC1P....10..(. ..m.I.R.j0.iJ` ......e.P..."...I.E.&.BJbP........!J..c...z..$.B.....L..c..m^o..y(..@.6l....E@..$M..M..B..\.k5...D...........yKo.f_Pi.....T..X.{'....j.M..hP.\. .w..v...N!.R.

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 419 x 320, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	171251
Entropy (8bit):	7.990972527039752
Encrypted:	true
SSDEEP:	3072:Hjr24Hcdl2fHuq4VoXs70UstvyzztpcsNpmnPhUkQylcngXtEq5Xxsa/TxpEL7R8:HjL8b2fubobvUt1NpUPhUZn6xXFrxpEy
MD5:	9B3B6E8CEB323CC39786E6C41AD361DB
SHA1:	6E71D2B059C96DDC5E63890E6211FC4AA6EFA158
SHA-256:	4FA8B82E041C28FCB537014DC2092CDACF40EA00C3CB86E82AFA41D4A272DA8B
SHA-512:	82714FC56290937D467A3DC544C5E62518F71BF42B403DA6F303F78C4B14414349956E1BDBF35F80C201FBE6DE21A35711EB29495C575D59B4BD48D6C92E7210
Malicious:	false
Reputation:	low
URL:	https://d3j0t7vrtr92dk.cloudfront.net/rmshg/1576089489_bikertraining.png
Preview:	.PNG........IHDR.......@......'.... .IDATx.\..$I.$..0.....[.x.....wOs..7.o..........7..?`......./w...P .....Np..I..D.6.$@.....\.).D...D.I\|..............?.. ..J..~..?.......E........>g.... i..@..}...$h.(X4IB.{.i.&a.......s..../.....<......x...>..u^.............{~.MN..s].o.J.@...x.?..G........^C...o.......?Q...t..)./..B..........x{..Z..:.)"...!.#...E.m0............r.[pV............;...O... ..]UYk..u].>>.....1gf.\.\D..a..q\|...~...8.....%..t.....s.L^.~}...]..K........?.........4E.e.&.Z.5?.........._........6..h..d..~.......,_..............O._......f............Y.\....]..r...-"\.6....GDJ.4.1F.v..#......#B.c...V.k.r...............>..b.i.....=...."....s...8.....).&.I.>S`.....J.g~<.o..9g.3...q>..<.f.P.3...UY....q]...$.....E.....{.a......r.E..+. ,@d.....o.O.....?..?....?........1 .$d.`......0..rg......i......@..NV."w.1..A....g...d.......:..X..}.l.$d.X4...i....E.;.....NH..O..t.-.b..8.~...P$..#....s..W.+g.~...-....x.8C.TU..G..Ft,..

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x500, components 3
Category:	dropped
Size (bytes):	195902
Entropy (8bit):	7.993612443116998
Encrypted:	true
SSDEEP:	3072:eEpyOW80GQgascPg/2FORAMgk+njZ9R+ricMsXbZZsrbxncW2gvXkol9rAim5dBE:PoBGQtssg/2oGF9Yras7AxXvbfAimrBE
MD5:	27FA64C049846691F9FE645A71D7042B
SHA1:	AF5FF3E251FEFD7CFFD080DCEC700B6BB337A5DF
SHA-256:	19C1FD8BD778DC36589CD654B70A2972B6A9A49DD92714A141ECC5B5E2EB86B1
SHA-512:	5183823B08BE4E34E29B2D980575EBD077FD465A05A93A6ED74B596EF62DE74CEA519956DA788BB8FB85C54FA28566C59DD7248F3DE58E1210D3C72C01D6A1D0
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C......................................................................... ........................................................................................sj.Pb%F.Q..!.i....u..2..#..7b1...;l..Q......g!....7v.....nY7..I...@....J2.F.x...2......2.@..d..!...x.......`.[ ...H.....Rk.M...<C `.... x. nF;K6..y...z...<..C.V....b.[....`..`.-Lj......`...\.!....l.....HY}..u.+l....G.N..~...lY.......n.#Py..../ jj.I...nDe..K(.x......2..... `...<c.2c.6..<.@.6.,.Yl.(sv..(..I.XN}.(`.@..!..!.....J.#.i.6%.#8...\|D...5-j........W>.Ne......fZ.ji.G..P<..`..;k..........rU_.nG..."I:ez$..CM...\)s%.:g.........V.&1.A..>.83....A.j(..'.d......x...<.@....x.....x b#.2..(.#./)..U...........!.2.......m.H...%F<.-u.K2.Fl.Q.miR...'...~.l...W"...t.V.XjIg[..`,....P...Y..a+...T...$..:..e..E.. @..].NF}.mD.>.Bq..u...p.\...n...u..w[.%..............{..<.....Y..`...<......?.0....Zt2...y@...G.4.......

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.8013557344442175
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKVnIwN4wECWaee:PLKdXNQKVnDoCL
MD5:	284B36421A1CF446F32CB8F7987B1091
SHA1:	EB14D6298C9DA3FB26D75B54C087EA2DF9F3F05F
SHA-256:	94AB2BE973685680D0BE9C08D4E1A7465F3C09053CF631126BD33F49CC2F939B
SHA-512:	093F3F5624DE2E43E43EB06036107FF3260237F9E47E1F86FDFBA7C7036522187A9B47B291F5443C566658A8EF555E5033C7F2AC0C9F4FA8EB69EB8E2540B372
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js');

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4269), with no line terminators
Category:	downloaded
Size (bytes):	4269
Entropy (8bit):	5.299686972600812
Encrypted:	false
SSDEEP:	96:GYakbFaeZqygB+fPURs4gb6Vi1NNJQOPG:FaFeZqCPU9gb6VgNn4
MD5:	286621A9A40D8B99AD72292826BD9B32
SHA1:	66486BFDDE28EC84FD6F7089C9FA14D3E6539415
SHA-256:	DFA7716D84315FE2503122A39A2407962444D5CAF5B1668F9E769C3AE3BEB987
SHA-512:	D43D8E7A938EB1DCE5626E0D3490DD8D50DCB625B14D8E9853EBC1078B8034C088EEF7A7D0E0986DF378F91E9EAC970A63C79A0E603B4086B688FBCA6149109B
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/plugins/gravityforms/js/jquery.maskedinput.min.js?ver=2.3.4
Preview:	!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):a("object"==typeof exports?require("jquery"):jQuery)}(function(a){var b,c=navigator.userAgent,d=/iphone/i.test(c),e=/chrome/i.test(c),f=/android/i.test(c);a.mask={definitions:{9:"[0-9]",a:"[A-Za-z]","*":"[A-Za-z0-9]"},autoclear:!0,dataName:"rawMaskFn",placeholder:"_"},a.fn.extend({caret:function(a,b){var c;if(0!==this.length&&!this.is(":hidden")&&this.get(0)===document.activeElement)return"number"==typeof a?(b="number"==typeof b?b:a,this.each(function(){this.setSelectionRange?this.setSelectionRange(a,b):this.createTextRange&&(c=this.createTextRange(),c.collapse(!0),c.moveEnd("character",b),c.moveStart("character",a),c.select())})):(this[0].setSelectionRange?(a=this[0].selectionStart,b=this[0].selectionEnd):document.selection&&document.selection.createRange&&(c=document.selection.createRange(),a=0-c.duplicate().moveStart("character",-1e5),b=a+c.text.length),{begin:a,end:b})},unmask:function(){return this.trigger("un

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65356)
Category:	downloaded
Size (bytes):	148763
Entropy (8bit):	5.37047313156308
Encrypted:	false
SSDEEP:	3072:L+lF+FdU8M7vzivxvqFwjKQHERddiD/uJ6HCcPtVa4HLzVQ17DOO0wP:LpU8MhijoOO0wP
MD5:	FC66D897D95D2973392611C6230330C1
SHA1:	F2379AC390ECFAC8E7E2A4977502C67D3F273570
SHA-256:	963DFD11079E0AB2BF39388F8318A779A497DEA57AC962824C7BC3FE9D86E128
SHA-512:	2F6D962A77B128B384E32EACFE6438494E33D5A6796D253D72D927B6FD691695582958FF981F782BF2D6FBA1F5B8F1FD3685F50DD8D9A46A86BDD5CCA8D8C317
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/cache/min/1/ajax/libs/materialize/0.98.2/js/materialize.min-66862af14e29789fa446a8c55fcdd255.js
Preview:	/!. Materialize v0.98.2 (http://materializecss.com). * Copyright 2014-2015 Materialize. * MIT License (https://raw.githubusercontent.com/Dogfalo/materialize/master/LICENSE). /.if("undefined"==typeof jQuery){var jQuery;jQuery="function"==typeof require?$=require("jquery"):$}jQuery.easing.jswing=jQuery.easing.swing,jQuery.extend(jQuery.easing,{def:"easeOutQuad",swing:function(a,b,c,d,e){return jQuery.easing[jQuery.easing.def](a,b,c,d,e)},easeInQuad:function(a,b,c,d,e){return d(b/=e)b+c},easeOutQuad:function(a,b,c,d,e){return-d(b/=e)(b-2)+c},easeInOutQuad:function(a,b,c,d,e){return(b/=e/2)<1?d/2bb+c:-d/2(--b(b-2)-1)+c},easeInCubic:function(a,b,c,d,e){return d(b/=e)bb+c},easeOutCubic:function(a,b,c,d,e){return d((b=b/e-1)bb+1)+c},easeInOutCubic:function(a,b,c,d,e){return(b/=e/2)<1?d/2bbb+c:d/2((b-=2)bb+2)+c},easeInQuart:function(a,b,c,d,e){return d(b/=e)bbb+c},easeOutQuart:function(a,b,c,d,e){return-d((b=b/e-1)bb*b-1)+c},easeInOutQuart:function(a,b,c,d,e){ret

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19781), with no line terminators
Category:	downloaded
Size (bytes):	19781
Entropy (8bit):	5.2596119377074615
Encrypted:	false
SSDEEP:	384:MRSaBIwhWtq0eJhhpuDqPtWiMFYaTOGSEApylFWFCDT5Yhc:MMaBDhWtqphhpuDqVWiDaTSEWylUFCDR
MD5:	30622517C8B4946885050BEE2336DE40
SHA1:	881238965250CC74E9235B449E2874E8226574D5
SHA-256:	B51182DE5D3E0E5CFA0A4ED9552DC82BE393D7F7A08330F6299E08CDB2665F7F
SHA-512:	028D86357C91A416902058FF2B6A1DB4233386322DC83CE900C4A10000AD18BFAB793EAEADFD33C3D9AD1D56265E3D97504FC0E0F19E594421BB935061E1A43C
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=5.4.5
Preview:	function vc_js(){vc_toggleBehaviour(),vc_tabsBehaviour(),vc_accordionBehaviour(),vc_teaserGrid(),vc_carouselBehaviour(),vc_slidersBehaviour(),vc_prettyPhoto(),vc_googleplus(),vc_pinterest(),vc_progress_bar(),vc_plugin_flexslider(),vc_google_fonts(),vc_gridBehaviour(),vc_rowBehaviour(),vc_prepareHoverBox(),vc_googleMapsPointer(),vc_ttaActivation(),jQuery(document).trigger("vc_js"),window.setTimeout(vc_waypoints,500)}function getSizeName(){var screen_w=jQuery(window).width();return 1170<screen_w?"desktop_wide":960<screen_w&&1169>screen_w?"desktop":768<screen_w&&959>screen_w?"tablet":300<screen_w&&767>screen_w?"mobile":300>screen_w?"mobile_portrait":""}function loadScript(url,$obj,callback){var script=document.createElement("script");script.type="text/javascript",script.readyState&&(script.onreadystatechange=function(){"loaded"!==script.readyState&&"complete"!==script.readyState\|\|(script.onreadystatechange=null,callback())}),script.src=url,$obj.get(0).appendChild(script)}function vc_ttaAc

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (593), with no line terminators
Category:	downloaded
Size (bytes):	593
Entropy (8bit):	4.828822392664675
Encrypted:	false
SSDEEP:	12:FdXtr+QHfdMLYbWY7+iSBJqShH/nioNoNQkaN1UeqpDLlpDLnENn:vlhEYbLAqShH/idNQkG1UeqbuNn
MD5:	9D37AA451553710EEFE9C3A29B5566A7
SHA1:	AF61772284451A80DFE9833F8869A3D8C76F825C
SHA-256:	13E7C099E9FA81E13F081036B4B964E53548AA7B7DCC96E87C8F95565149F42B
SHA-512:	67FB5DBE46DDB44CF84A6C42126D8AD4D8DBCA961190DB0486C14D2C2B5E57F3868BCCB13B79B5EEC1F129EEE59C222281E144580CBBCFB63A6C55E0382A8ECD
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/plugins/gravity-forms-wcag-20-form-fields/js/gf_wcag20_form_fields.min.js?ver=6.4.3
Preview:	!function(t){"use strict";t(document).bind("gform_post_render",function(){gf_wcag20_form_fields_settings.failed_validation&&(window.location.hash="#error",t(this).find(".validation_error").focus(),t(this).scrollTop(t(".validation_error").offset().top))});var i=gf_wcag20_form_fields_settings.new_window_text;t(function(){t(".gform_body .gfield_description a, .gform_heading .gform_description a").not(".target-self").each(function(){var r=t(this).attr("title");null==r\|\|""==r?t(this).attr("target","_blank").attr("title",i):t(this).attr("target","_blank").attr("title",r+" - "+i)})})}(jQuery);

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Category:	downloaded
Size (bytes):	48236
Entropy (8bit):	7.994912604882335
Encrypted:	true
SSDEEP:	768:uj6JxavgLx5rjTH3CdZ3y11o4uMb2IVEhiB6z6GAAHJApICtBgso6HaOjTXHRWK:ujoa4LxZPCdm3B2IVEhiB62apApISxos
MD5:	015C126A3520C9A8F6A27979D0266E96
SHA1:	2ACF956561D44434A6D84204670CF849D3215D5F
SHA-256:	3C4D6A1421C7DDB7E404521FE8C4CD5BE5AF446D7689CD880BE26612EAAD3CFA
SHA-512:	02A20F2788BB1C3B2C7D3142C664CDEC306B6BA5366E57E33C008EDB3EB78638B98DC03CDF932A9DC440DED7827956F99117E7A3A4D55ACADD29B006032D9C5C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
Preview:	wOF2.......l......D...............................O..B..h?HVAR.x.`?STAT.$'...0+...\|.../V........+..2.0..6.6.$..`. ..~......[B4q.....t..P.M_.z...1..R.S...u.#..R....fR.1.N.v.N.P...;.2........!Z......Qs...5f.G.K.an2&....2.........C.H.t..N!.....nh.<(.vN.....j.._.L.P.t..Ai.%.............._I.i,..o,C.].H.X9.....a.=N....k.....n.L..k.f.u..{...:.}^\[..~5...Z`...........`!...%4..,...K0..&.a/....P....S....m.Z......u...D.j.F...f.0`I.`.`.h#..)(FQ.F!o$........S.).MV8%Rh...r...x...T]$.=......Y...!.3.&U..."....Q....{.l/0..d..4iJ/..}...3....i[Z..NG.WD...>.[U..Q.h..@m.=..S...1C2...d...<..v.?.q.f..n...OUz.....&Z......Z."..N.....n...9.B..C..W....}...W..6Zs.i.+Z........jB.n..x.8M.....q..@I....-.%..,C,..K..#.2...4)/.v_..x.<....t.....%[.4?.=j.V..jj''..W.u..q....I.L.=......E...\.M.7{.>......W........C.`...,9$......\..o........y...4A..m.P.,X..=?.:................wF`..+.P..........M!.4.......l.>M..t.ff5r..^..Z.g...!fA,hIIQ...e.R>B.AH.VuX..>..\.=.ky...1>C....>C.c.;...6D.

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 319, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	224354
Entropy (8bit):	7.991816803943617
Encrypted:	true
SSDEEP:	3072:u3Cmi671H/2rjCGe696eraVqyWW+HsO267CiDi1lO/HcGZrd3ajaeRTEOJtCGZKp:qSe89Xal+i6MccGZIAO6MK/S5/oYat
MD5:	0CC7AB391F7504B777AE1AEEAF66B3F2
SHA1:	68E2647C5FA2ECBB80EE2216299B216BA53565B4
SHA-256:	04185AB69036724A3235578C7B279478B54966CCDB81F0105F812740609F7B2A
SHA-512:	91BF19E9B7913E41A94797E695C43BC25753C54893946773E85E7FAE7768A27502BBF66D9796E8190AF52C5A9BBE143F58ED4438BDB396F25F9A00CE6B8456A8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......?.......8.. .IDATx.L.Y.m.Y%6....s.m2.U..T..);.&..F...).1D.W../..~v8.Z.v8.2..]e.S.l.....D..(.....(..ow...Z....s_..p.{.9g....h'?.c?.-.C$QS.]r.6h.....4..E...... .. Y....!.......K./.P....<..z... ...2.........:JU..Wu...$#".EFDdL..2.I Z...6.h..].!82.....4....p..0....H._.D...:"....H@"'..! D....d.6...%.6a.xty.....)F2L..."@..... ....o..@.2.t..5.......A.3(...........@......E.$s.............Z..f5.O...z.]o.g..j..Uk.rj-b....<.vp.^............uk."H...JD..}../..^..W..DA0,.%.P..T....z...V.)T..^.....R/...z.........C..........9......M..l&1>'...`.z0M..@...<n\| z. m2......-DR...J.HY...nL.HZ...y\..,.#.Uru.......a^j>..2../}..Vg..'.p.~~...z.....[o.?.{q..~y...v..z..}.m.9]..n....wn.....m^...'...7...&....cy..'.e.P...\|...Xf,.....z.7.x..\|.;...U..[..b..~.uy.....\{p......."Hi.b:.v...../..w..g...?.O...5[....f.).'...Sgq.^Rgx.V...y...?..s....^x..W_../......w...r.e.......z.......a.6.Y...w.\|.K.u....0`f...........F.c]..U......e(. ]6.NF-...S.!.....JG..

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 479 x 320, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	144807
Entropy (8bit):	7.996156321584729
Encrypted:	true
SSDEEP:	3072:jdIBsn4llrzWtdV+/GeuOxBH93OiqSSlOkpoTfLTCO3VRkT:OVz/GWBH93OiGaTjTC8sT
MD5:	E666D7A26E083A0412154D83AC7B16B0
SHA1:	F050C30E8C32456B36EE56303D4AA505210F21DE
SHA-256:	CDE0782AF403B2E381ED928176FF4042C073AB4B17FE1D78D92BA88311553D66
SHA-512:	DFCDC6CA769C7B572A29EF6DCDFD84771C2C349B8D872E68B89FB6A1796B10D349BFC7E0265522F738B98B52FF3CC4F7B424E8C06E7EC6AA0AB92B4A5D3FDCCE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......@.....rR... .IDATx...K.,Yv...>.y?.WU]......dS....h..%.0,x.G.x...'.............X..."$..!..E..I.l.#~....Y........<8...{.$ge..q.\|..{.}.9AI..H"Y......s...)..S..A.V..@P.@J.DB..........u$j}.!.........T...l*.T.#.P.....&@...C=.D..H...Z9...hj.....Tjm....j..l......~.@8"@ ..8..m&[....f..N.....Q[1j...20A!.H.E.$..vc@....Po.h... .E........o.._.L.f......._./...B.......1...f....9.7ZK...$B.8~$.Hv...J.)...$!.....i..6..C. @0..\|!.%.vdk9$. .<[...6.._!...p.mu....('.D...d.2UE.M...8..P..."I.E.T....('.!.b...)..v..]P[Om......gUW...Z..!]......9SZ............e..........)...<....j.O.p.........../..V...G...1\..2.k.b.W...1P@I....1?'...9.<S....gk..}.r.....$........~.s@!....$...i&..1..8..7B...`B..UPA..lFg3B.:..C.7.S..j..<.jl.b...Z...&...2+MdRd.0]@.[.Dd...`.84.Z+..Z.....'7....?..O.i.(v)!.....3{....,}6..2..".l.p...r..l....i..'..(......h.F.i....8,.VKn:...L......^.N3E..Fc.g.L.6.U..m$...2.lTq3.COu.W.8......G9..;....p.,J.fF.#.....A..i...U.J....a

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 219, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	114176
Entropy (8bit):	7.977310036405056
Encrypted:	false
SSDEEP:	3072:tgAK82e1ChayXtBZ+pUSHLEaxLyAK7IJ06NDbfq8TnDqNFbSI:KAgjtaUSHLEax+J16ZbnjDqvSI
MD5:	67D07B630C99BE0ABA697EE8B22CE232
SHA1:	218CC5164431A7980BF711084F063FD7424840C7
SHA-256:	98A24B364C6FB898134A6C71BD6BC98959CE3F40296CC753444870BECB5D2EA9
SHA-512:	7252899309D7C79DCD302A5A88D23F3F03D55B7546B6FC3E6A89E8AC31DEACD89E970A9F2D2AC724C12E75E191ED58119FCDEB658A6D60E52A4DC581DC0C4595
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............:\|.... .IDATx..g.TE.?\...z.....d...".(.(.I.....aA.. ADT.....PQP.$.....U.,...40L.....yqw....=...}8/.S..S.NU}.T..nX.zup.n..;.!.........a..?...,.Y.T...X.=3zS....b...Yf.%.B..[.w..1t.u.E....ip.k.kW.Rf.v....;7.......i....M...Ne..v..U.CQ..Q.y.....wx.o.....K..c........&..{...l..R,...._..b.M.>...l..(].\...E......f.@;3,q.\.,i.j...~...i.8K..n":.\.w..09.}d..!....=4Gd.-...<.......{.w.....b.F;f...A..utFF.Uco.-...S.h...9.}..-`..8.....2\...Q..,c.Z9;.n.v(..!.5K:...:-A. ..N....A..iw .}..w.....V;.s-.UD#\|}.;.q...=.....M.Q.S).q.....~.e3..h.t..l'`...."+.F.U...Yg.....P1\.\.\ox..`$.l.sAsC.j.h...N...3.z.:-.h.x.".[...9L..T...u......:......3-s-..7.,w....CV4....}.g..rv..[..J...."afF.%...48...1.+n....>... .9..(..u.H...N.9V5.5Xhi.Y.c...R.&....6K...fgY.E..7.1\|Z6 b.v.........f.U.5X.......i6{.X./...;.p...@.R..e....C.....4.........p$2..r<[ZeI...2....q..Og.7$...).... 2.s`E..L....`0L.pN..8....[t..8.=J..=:.G#o)fWJL..N4.v.G..F..Q..&...+..D

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	891
Entropy (8bit):	7.743486735962578
Encrypted:	false
SSDEEP:	24:NisWJfCVlB3z5kFZGkaKUuRcul3vvHIvaZaInBmmC:NiZ0R3NuZGeUuGu1vgaQIU
MD5:	75C459747C5170860EA16E7580989668
SHA1:	8C78CD3CFAC156E2AE4465D8E40E9F93C4F4D2A2
SHA-256:	5A1C29814CE9D1692ECC010E3F5BCD6DBF7E57C265EC5BA2888FFAFF8517E966
SHA-512:	969EBDA281B2A2C4FF4142B85030F0FBF9A46A9BFA1C601E4E8160B17C10C02AAC47BA1B7D714C8495B084FE050277129ECD9D69D53C20EF8D571554B7C062A7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz....BIDATX..]h.W....}.6....66S.A..u. ..j.!c.WW.y.......n......Y..1*.....6..c.......qM.m.6o.g..)..;..7}.........s.GH)%..&...z.!.',%.Lj.`.a...r..e...3...y.......N...^.....l.%.T,...$...w1........8~.gB...x....,........P.."..qPQ...i9....?...W\.!.D.(......vG%.x.UU.._K42.X.).X..T...H.&9..F......8y...E ..j.......53....66m.0=..vx.....l..8.!.znI..i.g.&.~c..3....b.k..G.tw_c.....@..ky0..G...f..........={.d.....f3.mX...FFb.\|0..5oRSS.a.,[VE4..@.s\.p..]Ghl\|......^.@(....ho.......Z......l.....;..(.:........\|{t..Q...HC..........=<.zzn.^.:.6......J&.a..7....s...~.Ng...L....m......[P.p:+YZm'........F.BR].z..\..W_~B......Ph.tZ+.#....`...pa ...&R.X-f$..?....^..I..+."x.{...hZ.............@...a..[d2:^...~......f)....F..6...O..O.f.QQH&.$..Bn\|<M0._..3{...%.".".......w5......m........................;@..`..u=GK.V....&...T.....IEND.B`.

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	7320
Entropy (8bit):	5.43656167218766
Encrypted:	false
SSDEEP:	192:YloQTEtmSblvQMrtFS+lSQ1OtcS9lBQWNtjST:QHaoOR2aV
MD5:	E7DB06B55784B96BFEDF12B53B61CE68
SHA1:	2CE6F8894295E6F7E1F5EB6AF6DAFA62C331A662
SHA-256:	156D6126D329168667F3FC9FD67A12202EAE1AC3619318E0FFF058FB74944C1D
SHA-512:	2730621CF437CC319AE504EC88C22BF5D9DB616157FB90DCFE249AABCB741E15C0F822D76D1C1B88A146266F4F75E176F8F8F81A9686B938726BC13DCEB3CDEB
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Montserrat:wght@400;500;600;700&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese */.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	4288
Entropy (8bit):	7.7080096414006425
Encrypted:	false
SSDEEP:	96:mElbw+iXTkpJup/4L1L/loBQ0B97Sa3NRyBpsmz:jwTTkpJupAL1/knZSa3k7z
MD5:	DD24D9CFB8369D597E04C6E652BB81C9
SHA1:	6AF2402292EB9D4FAFAF23A9AB8991FB257DE564
SHA-256:	EE1D1316169A7C159C0B37FEF557CFE58D1B4BE8CD4D5CECDEF72180BBA93435
SHA-512:	75B0C58394FD53F646C5C7E0C4F2CA77FDE2BF19857DA57DDBD5F8748468668627546DF887197CD042AC9BCAB1783BD8D05A9D1941D9126CFBC6731FF636CB32
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X....0......\..ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH.......m{\Y.o....(u....!.kF{.N.A..^..C8b....ZU$.............$Im..l_X.....\|.......O......~......y....7.....D.K.,?1....>...m......j.lK..`_....pF...m...E.;f..u.....2..k.z.......[.o.....U.?.-C37....`.....~..v......8..='hB.a$....3.k.O..'.z...C(..Q...$..RF..,.%.i..Tt..!..d..'.Z.ST..Hca....9..vn..%....;...7q'.....=AG.v.:..{.........K.f..Q5[s...0+L..oq.'+#.d.}...f`J.........E.......<T.p.Nx.....8..T....1nkcI.....'..YQ........ut..........~...!>...,....L....%....U..^..`.%I..\.*..C.S..c.

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1977
Entropy (8bit):	5.029287305059752
Encrypted:	false
SSDEEP:	24:2dtdWroTFAhk0KtntHMh87mrMa5gn879tHMwBy87ArMphn87VptHMvQ187irMcX0:cay4k0AIFtPSvkQVru3Q/JTNy
MD5:	8E0A35946BF39D10F46A1F1653366A0A
SHA1:	02B5788AFA6BDD2E146673CC09965750A81BF27C
SHA-256:	C45F637F905E1EA01BA81AA39E8DA62EE7E7F8703C3DA4C3BBA55F6192E5834C
SHA-512:	39EC3E8990B7BEEF84786C1FE8AA8DB98E514FA87DFCB30DB9C7996F99AC21D75C7F77FBE52F9D19823F35246DBBCCAE96A1AE95E594169360F62A3CFC4D1F1F
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns="http://www.w3.org/2000/svg" height="40" width="40". version="1.1" xmlns:cc="http://creativecommons.org/ns#" xmlns:dc="http://purl.org/dc/elements/1.1/". viewBox="0 0 40.000001 40.000001">. <g>. <circle stroke-width="0" fill-rule="evenodd" transform="scale(-1,1)" cy="5.2227" cx="-20.033" r="3.5391" fill="#ffffff"/>. </g>. <g opacity=".9">. <circle fill-rule="evenodd" cx="-2.5033" transform="matrix(-.76604 .64279 .64279 .76604 0 0)" cy="13.387" r="3.5391" stroke-width="0" fill="#ffffff"/>. </g>. <g opacity=".8">. <circle stroke-width="0" fill-rule="evenodd" transform="matrix(-.17365 .98481 .98481 .17365 0 0)" cy="8.3722" cx="16.173" r="3.5391" fill="#ffffff"/>. </g>. <g opacity=".7">. <circle fill-rule="evenodd" cx="27.257" transform="matrix(.5 .86603 .86603 -.5 0 0)" cy="-7.474" r="3.5391" stroke-width="0" fil

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 2200x945, components 3
Category:	dropped
Size (bytes):	43272
Entropy (8bit):	7.919683412988608
Encrypted:	false
SSDEEP:	768:XaKq/v11SYDQHcasmyL7oyZhcn7GGCUMWextD3dhxNXxlJ673Q5vZOKhhK8K:Xq1cYDQHcfNL7pZhu7nCUrexlfxNXxYd
MD5:	5FBAAAE56A17933EED5020B2540CC33C
SHA1:	90494E53F63E4ABF6035967B769633610C88C3B2
SHA-256:	2C2AAF3AD8890377472B538F3A1777155CF27095D6680E5DF7140728C9134D6A
SHA-512:	A16E53E108025BE6115CD1AED52B493C35C493829EC92CADB0F0607B8F72684E0476235261BEEC40F83A835828428DF7F3FBE37992B4943DC1C82252E7DC64E7
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Compressed by jpeg-recompress..........................+.!.!.+A(/((/(A9E848E9gQGGQgwd^dw................................+.!.!.+A(/((/(A9E848E9gQGGQgwd^dw....................."..............................................L.#y.........,.(........X..A...@.... X.u.!@..PX"5..5....P.P..`.....@....E P...........gM..R.E. ...p].4.J.................,..........#..`..-..D(O8.{Z..........Y@..B.....T..........9.4...@...a.'.BR..3.v..@..............P.... .@,...j...P..bU@.I`..8J.E.h...,...........%..........J..A`!@A@@.l....Qc+JAA.QBp.$.F..k.;4...........A@...R.....P,....s.U.....3....D....-t.. ..wQ].c.....................j.....!yL.i.i..%3.;.....P.......;.=.8s..h..@.....@......3.4......q...Kj........R..4..2....Z..~...\|.w...................X......0...E.Ls..Fz..,E....VQD.........c.n.S[. ....eT.......g".{..".....W.V....W.j%YPE(g..2SP...]...+.%..N..................6.T....99..WT.NqR.......p....+T.9p...Hs.P.]...Ab....-.........!.1.@......e.z....*G}.P9.:$.8B.2...g.m...9

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	20522
Entropy (8bit):	7.971389394467841
Encrypted:	false
SSDEEP:	384:gwB1BQXE+7mdSL3b4tPi+E4ULbcm2bF6NC4coQ49j06oPcnQCFhHX:1LBW7mADaP+DwbFIC8D9j0inF
MD5:	06D0CF446041B4F3D8965EF97798B7D7
SHA1:	2283734132FAACA1EB41232F4E38A3F8C5112F42
SHA-256:	1D7E0A350801878487097478EBF10D9AC518CBE098340717B04724C9850EAAA8
SHA-512:	95A1D7598080059800A7AC5921F61F9FF0269A4571AEBAB364D82571AD5CE1411FAEA6DECA9FA1216DB5D9ACBA9293A3E09D088624344B2904E12E81C3FC2B57
Malicious:	false
Reputation:	low
URL:	https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/service-3.webp
Preview:	RIFF"P..WEBPVP8X.... .........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6VP8 4N...4.......>m0.F."..&......c.@.X2.....bQ..>My......._...=Cy..]...s~..W.g...._...?./.........P.o..3..~C.W..M?f<........?.p....~.z....'..'......o.S...?....._..'..=.]..+.b5...?..6V....Ig.......<.q...2$y....JOP.Z....^.....(K.N....A....y.R...s..T,..Q'IW..H...(..)O.....R...u.H.{g..$..EWuhXn^eX.: .!E..<.W...f......kF.Y.......R..-.4...+.....MoZ~..{nl...Z..!.r.....\q....3.s.&......J.at.)...H-]sm..$..1tO.i.....Y...$+W..z...#..Nt.P..u."...\|n+.G<I..:...\..P..B.&l.eA\|3..v!......+..x..BE

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 179 x 64, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2939
Entropy (8bit):	7.590346049978265
Encrypted:	false
SSDEEP:	48:ZjAvnLZsY1J3KlVGeD0eZNeiMpVkvrTBmkvxlC6WUpbxJN2mN6E5vTedl:Zc9GaeiVkjTBm+xNbxXplBsl
MD5:	9210FF000A02877EACE87DBB7EF2D1C4
SHA1:	D7562FA7F10321B824E630FFD7D10813A98F9024
SHA-256:	507A2C7A22B0AC65FEAE3EBA76DEE6C6D182106D800EF2BBE8491F8429ACBAB9
SHA-512:	80B13C9461F806A28F8696BB3D2394504297261C6039DE182F43CBC9CEE6D7DD06D9F3161BEBE2A1AB4E1519B73F6B748BE7CE192C232C967C51545862E3805D
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/uploads/2017/12/Logo-179x64.png
Preview:	.PNG........IHDR.......@.....f.v...xiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:5e315b12-8964-4b25-b7db-d4e5e261732c" xmpMM:DocumentID="xmp.did:6455D3BD0C1511E882D7E997583E90EE" xmpMM:InstanceID="xmp.iid:6455D3BC0C1511E882D7E997583E90EE" xmp:CreatorTool="Adobe Photoshop CC 2017 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5e315b12-8964-4b25-b7db-d4e5e261732c" stRef:documentID="xmp.did:5e315b12-8964-4b25-b7db-d4e5e261732c"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>\..Z....PLTE.....................GpL...................................

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	479
Entropy (8bit):	4.975296234585172
Encrypted:	false
SSDEEP:	12:tHG7bsjJDJA3P41z2uMlvujYZl86bcJ2t7qIkOJd+x:txiP41z2uMrE6E8WFUd+x
MD5:	E07862D9CB08AD1347AF2F2DA406AF3F
SHA1:	F2EBE06EEA2F3F3AAB14712B7756899EC6EDD5BF
SHA-256:	3DDD36AAD3051AFBF3F66CB73CDE85AD1F27538ED011D086AB1A499027695754
SHA-512:	DDA59F5A5268D9FF6E63656571EBDDC3B1494EF04CAB67FBE69F8CE3D5F00AC34C454A3D1F91BCAE6AB0F6BD2BA2F891E2D9D3B5F4F24D9E60F91F61F72DEC5D
Malicious:	false
Reputation:	low
URL:	https://rmshg.amplified.training/pages/images/rating/star-solid-grey.svg
Preview:	<svg aria-hidden="true" focusable="false" data-prefix="fas" data-icon="star" class="svg-inline--fa fa-star fa-w-18" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 576 512"><path fill="#C9C9C9" d="M259.3 17.8L194 150.2 47.9 171.5c-26.2 3.8-36.7 36.1-17.7 54.6l105.7 103-25 145.5c-4.5 26.3 23.2 46 46.4 33.7L288 439.6l130.7 68.7c23.2 12.2 50.9-7.4 46.4-33.7l-25-145.5 105.7-103c19-18.5 8.5-50.8-17.7-54.6L382 150.2 316.7 17.8c-11.7-23.6-45.6-23.9-57.4 0z"></path></svg>

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30175), with no line terminators
Category:	downloaded
Size (bytes):	30175
Entropy (8bit):	4.888704624837673
Encrypted:	false
SSDEEP:	768:V3P5jAUUQEkkAYqSCosSCtrqFBVuKBGIl0O8kjtybVjXRSqGkj+8EplpS9eleSqy:g
MD5:	686C924878C7544F5A9D68E9A6FE7E12
SHA1:	CB8BF815000BCD344BE8B83E26899B5CBB23C108
SHA-256:	B36C610ADF667F8F1F228E6D2390947A81257CDAE72B98C1C07CBE50F9FF06D3
SHA-512:	FB22FF81B42C00C0CD403824A223184FC838AE46C683D7908C7B24ACBBF1935148BB0813A158A2EE436261DD5B7CFFD4A0B46F35F9159DE4EFA42E9D68502CC6
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/plugins/gravityforms/css/readyclass.min.css?ver=2.3.4
Preview:	@media only screen and (min-width:641px){.gform_wrapper .top_label li.gfield.gf_inline{vertical-align:top;width:auto!important;margin:0;padding-right:16px;float:none!important;display:-moz-inline-stack;display:inline-block}.gform_wrapper .top_label li.gfield.gf_inline input[type=email].large,.gform_wrapper .top_label li.gfield.gf_inline input[type=email].medium,.gform_wrapper .top_label li.gfield.gf_inline input[type=email].small,.gform_wrapper .top_label li.gfield.gf_inline input[type=number].large,.gform_wrapper .top_label li.gfield.gf_inline input[type=number].medium,.gform_wrapper .top_label li.gfield.gf_inline input[type=number].small,.gform_wrapper .top_label li.gfield.gf_inline input[type=password].large,.gform_wrapper .top_label li.gfield.gf_inline input[type=password].medium,.gform_wrapper .top_label li.gfield.gf_inline input[type=password].small,.gform_wrapper .top_label li.gfield.gf_inline input[type=tel].large,.gform_wrapper .top_label li.gfield.gf_inline input[type=tel].me

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	65712
Entropy (8bit):	7.994476643903662
Encrypted:	true
SSDEEP:	1536:Qhp4qzn9F/Bp0oMNE5ry6iUyfyryHU0ic:QhKqr/BOwhy6hyfHL
MD5:	1580771299004B07BFC4073F016A4577
SHA1:	F920A40763B48A62335E181B651894670CFE20EC
SHA-256:	9C582E1117D5FEBF6FE3E72729292CC1AE57F1D1519CB33B9E051EFFCB90BBDB
SHA-512:	EA323DE3EB1731BB74B894A9425F1047FAEE1F3C19DC8C35E368AB8649FCCC24D2D80C07A89A0B3C262501108E6B7E83408581DB704734B1CCDB9A3424ECA5B1
Malicious:	false
Reputation:	low
URL:	https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/xs-home-banner-two.webp
Preview:	RIFF....WEBPVP8X.... .........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6VP8 ....p........>m..G."$..1....M.f..o5.-...?..?S.i....fq.'G/............?..........~s.......w..^t}=...G.......}..[...=.?........>....6.....s......O...._$_.?............g..s..?....L.........s.{...L...._?_i.7..l.....j.>.....>......O....l=.._.......+.?b/................=..-...i..\..>...".`N.z..TW\|.(.+.t.h<..eBM....l....-].f.x........0!.[!.)..A.`.h...V...d&..s.M,..3:n".J!.5.\.b...t.e.........M...>......GS..y..[U."..a..N........T"ku...W..J.2..Zk.\...`...m...=........9.~J....M.

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1848), with no line terminators
Category:	downloaded
Size (bytes):	1848
Entropy (8bit):	5.4775342139601655
Encrypted:	false
SSDEEP:	48:dtqPLCNrdtrThL1wJiKppVJxvmqPz9SqPz9RYf4JQvdEnt:dcP+5dZVLOJ9ppLxvzPx/PxRpJQYt
MD5:	C087CD0E61B0ECA99F78B6F76FC99D03
SHA1:	A37DB7E8A83E2BFC305C233FC861DC4D0E4CD579
SHA-256:	A9F6C03CE6F4D1654F29F2136651E883198D509CB2E26AF1C24B1F87B6CCAE13
SHA-512:	E73576A90E8605B18618D1D4386486F49DB8D74B6CEC3F41F24C39BE6975C876E1C322889B9DE80441D297A9273D23239F26B98DDBC690E2C07D1AEC683ADA1F
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/plugins/gravityforms/js/jquery.json.min.js?ver=2.3.4
Preview:	!function($){"use strict";var escape=/["\\\x00-\x1f\x7f-\x9f]/g,meta={"\b":"\\b","\t":"\\t","\n":"\\n","\f":"\\f","\r":"\\r",'"':'\\"',"\\":"\\\\"},hasOwn=Object.prototype.hasOwnProperty;$.toJSON="object"==typeof JSON&&JSON.stringify?JSON.stringify:function(a){if(null===a)return"null";var b,c,d,e,f=$.type(a);if("undefined"!==f){if("number"===f\|\|"boolean"===f)return String(a);if("string"===f)return $.quoteString(a);if("function"==typeof a.toJSON)return $.toJSON(a.toJSON());if("date"===f){var g=a.getUTCMonth()+1,h=a.getUTCDate(),i=a.getUTCFullYear(),j=a.getUTCHours(),k=a.getUTCMinutes(),l=a.getUTCSeconds(),m=a.getUTCMilliseconds();return g<10&&(g="0"+g),h<10&&(h="0"+h),j<10&&(j="0"+j),k<10&&(k="0"+k),l<10&&(l="0"+l),m<100&&(m="0"+m),m<10&&(m="0"+m),'"'+i+"-"+g+"-"+h+"T"+j+":"+k+":"+l+"."+m+'Z"'}if(b=[],$.isArray(a)){for(c=0;c<a.length;c++)b.push($.toJSON(a[c])\|\|"null");return"["+b.join(",")+"]"}if("object"==typeof a){for(c in a)if(hasOwn.call(a,c)){if("number"===(f=typeof c))d='"'+c+'"';

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	368
Entropy (8bit):	6.494138511115667
Encrypted:	false
SSDEEP:	6:6v/lhPk6nMRJNnDTI/+euAlBTs2l/+sFm1a/4LFecPCFl057HCbp:6v/7s6nM3m/lR5Z+Ba/GFeE5e1
MD5:	D99E602DCD2358729183028E2687F404
SHA1:	0843F1FE963E40D95736F8BF8F0B055C3F8EF1F7
SHA-256:	A538A0F474E35C6213F1D69B8FE18206EA63F10168FA2B8E86013F36692CF062
SHA-512:	FF3005C33A72593EB31C2CE3531EAE646F9673239493D71A91B29B0630C073D301551DDF5661DC6CC2D271F6C2141579B33209E2C745256E1CB583D591D9EF0D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....D.......gAMA......a.....sRGB........EPLTEGpLv..v..v..v..v..v..v..v..v..v..v..v..v..v..v..v..v..v..v..v..v..v..r..p....tRNS.;.f..I..b.%..@o.W.....-.....IDAT8..I.. .EA ......a(b+.........*..)VK/ ^.b9.x.c...K......$...`..G.\s.xB$`m..%_>.........ry3........@.}Al.Dn..S...)r..~......7I.\|!w.... ....'... L"<..U'.....B..~).".....IEND.B`.

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 2200x945, components 3
Category:	downloaded
Size (bytes):	43272
Entropy (8bit):	7.919683412988608
Encrypted:	false
SSDEEP:	768:XaKq/v11SYDQHcasmyL7oyZhcn7GGCUMWextD3dhxNXxlJ673Q5vZOKhhK8K:Xq1cYDQHcfNL7pZhu7nCUrexlfxNXxYd
MD5:	5FBAAAE56A17933EED5020B2540CC33C
SHA1:	90494E53F63E4ABF6035967B769633610C88C3B2
SHA-256:	2C2AAF3AD8890377472B538F3A1777155CF27095D6680E5DF7140728C9134D6A
SHA-512:	A16E53E108025BE6115CD1AED52B493C35C493829EC92CADB0F0607B8F72684E0476235261BEEC40F83A835828428DF7F3FBE37992B4943DC1C82252E7DC64E7
Malicious:	false
Reputation:	low
URL:	https://fortissite.wpengine.com/wp-content/uploads/2018/10/about.jpg?id=6186
Preview:	......JFIF..............Compressed by jpeg-recompress..........................+.!.!.+A(/((/(A9E848E9gQGGQgwd^dw................................+.!.!.+A(/((/(A9E848E9gQGGQgwd^dw....................."..............................................L.#y.........,.(........X..A...@.... X.u.!@..PX"5..5....P.P..`.....@....E P...........gM..R.E. ...p].4.J.................,..........#..`..-..D(O8.{Z..........Y@..B.....T..........9.4...@...a.'.BR..3.v..@..............P.... .@,...j...P..bU@.I`..8J.E.h...,...........%..........J..A`!@A@@.l....Qc+JAA.QBp.$.F..k.;4...........A@...R.....P,....s.U.....3....D....-t.. ..wQ].c.....................j.....!yL.i.i..%3.;.....P.......;.=.8s..h..@.....@......3.4......q...Kj........R..4..2....Z..~...\|.w...................X......0...E.Ls..Fz..,E....VQD.........c.n.S[. ....eT.......g".{..".....W.V....W.j%YPE(g..2SP...]...+.%..N..................6.T....99..WT.NqR.......p....+T.9p...Hs.P.]...Ab....-.........!.1.@......e.z....*G}.P9.:$.8B.2...g.m...9

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	76
Entropy (8bit):	4.632006461463657
Encrypted:	false
SSDEEP:	3:xPXL2hyCnSAknSHinPHcU9unSHyoSoICkY:xPb2h42IHccunSIckY
MD5:	951598FE065708DF807F316C6B5A4DCE
SHA1:	370047B7A63C381B0CB499AA6BC000293CD23C4A
SHA-256:	968D7C8AF289A9DC9E5861DF991CA0386DF53006FEED7A1025C2190437843227
SHA-512:	6DC8ED94736B634DFA64940751270E6DA9E80459BD6040F500F3E17EFE33B0725F64ECF6CEDBD8E9B25D8FD761EDB9D02198525CC3FAE894767D299F64EBFDAB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSMwmJjp5kVdubPhIFDadKT6sSBQ0OeUGrEgUNqHok7BIFDbb2qc4SBQ2L5XmfEgUNU1pHxQ==?alt=proto
Preview:	CjYKBw2nSk+rGgAKBw0OeUGrGgAKBw2oeiTsGgAKBw229qnOGgAKBw2L5XmfGgAKBw1TWkfFGgA=

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (789)
Category:	downloaded
Size (bytes):	1611
Entropy (8bit):	5.12079460829451
Encrypted:	false
SSDEEP:	24:2ih2LanC8XRkXC3BqQO+SRIQb10QHrvReg7fSBDInxqoUIO9R/Xf7gC/Yv5ay:nh2LaCxXC3bQ3wgT0GBUNRfBMz
MD5:	8D94DEF0C0A79B90E9B68CD56027A5CA
SHA1:	0F7AF61F56578DA90301792F2F6CD25944AEC389
SHA-256:	2702D282F1BD6BE26E3A76DAD6F911FD080FDAB55C1BB8C34685795D4C9BAAF9
SHA-512:	B5B3DE4D37057DB3CE408ABEA8BD74695A930ED599A3503111529BB0B5C79A7E5A12DB060F1BE38C17ECD3F63C30E38241555E06B69356C023D50423CB494942
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/cache/min/1/wp-content/plugins/parallax_video_backgrounds_vc/assets/js/jquery.appear-01c0b6095409fd502bc0f13168cfdd74.js
Preview:	(function($){$.fn.bsf_appear=function(fn,options){var settings=$.extend({data:undefined,one:!0,accX:0,accY:0},options);return this.each(function(){var t=$(this);t.bsf_appeared=!1;if(!fn){t.trigger('bsf_appear',settings.data);return}.var w=$(window);var check=function(){if(!t.is(':visible')){t.bsf_appeared=!1;return}.var a=w.scrollLeft();var b=w.scrollTop();var o=t.offset();var x=o.left;var y=o.top;var ax=settings.accX;var ay=settings.accY;var th=t.height();var wh=w.height();var tw=t.width();var ww=w.width();if(y+th+ay>=b&&y<=b+wh+ay&&x+tw+ax>=a&&x<=a+ww+ax){if(!t.bsf_appeared)t.trigger('bsf_appear',settings.data)}else{t.bsf_appeared=!1}};var modifiedFn=function(){t.bsf_appeared=!0;if(settings.one){w.unbind('scroll',check);var i=$.inArray(check,$.fn.bsf_appear.checks);if(i>=0)$.fn.bsf_appear.checks.splice(i,1)}.fn.apply(this,arguments)};if(settings.one)t.one('bsf_appear',settings.data,modifiedFn);else t.bind('bsf_appear',settings.data,modifiedFn);w.scroll(check);$.fn.bsf_appear.checks.p

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HSY:b
MD5:	DEDC5385846C30FC3E7675866BA5FE1A
SHA1:	2CC24CA44C78C9693F4C3EF82B24FEB1CD867DDD
SHA-256:	C74F957C2493F2939D1C567627368ED8F200B60AD7D15A58B81DF2611AEC866A
SHA-512:	3ED3BE8C3D8C7143307086017BDB3F7C683591E8A490C5098282DFE3D47968ACA9B4B69C643FC2D0B38B62F2B21434541F374A60F35F511B56D080796C225D6A
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSEAnKQ9k9kgSJQhIFDd3o76E=?alt=proto
Preview:	CgkKBw3d6O+hGgA=

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 1024x1024, components 3
Category:	dropped
Size (bytes):	191976
Entropy (8bit):	7.9895525481179455
Encrypted:	false
SSDEEP:	3072:0tXO/vMgxhM8gcZqh/cTxERr6rfKybuTS1jzwXFCrMEoMcMjZiTq6UM8cfwAbruG:0te/3A8gcQh/seeu8jzwXFCrMFvsijUC
MD5:	85B92CE90D5C6E759ECA08E70DDADF07
SHA1:	6E338916405E5A2111C8A5D319F59F05AA3C3E60
SHA-256:	C62865C877F3C8D82201A88157D787364C11630554F995A4B9F53079462E7AE7
SHA-512:	C83452DD5D2875BBC10B95125F6AECBFECD032ED44126292110EECC301EF6F22146B0E9D8E49EFF2FEC970BC9BF897D292C1E1EB4161317F75FFB2E906E4A319
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Compressed by jpeg-recompress......................................................"..."%%424DD\.................................................."..."%%424DD\..........."................................................R0./0...\|.Kiy...3..Ga".OUY.,..V....T\|.)%Q.R9y..;..v..../5..{.U..q.w<./.?[.a..H.2.9.&)\|(&..mr.0.@A)..4.4..v..<...Yo.Z......q2"..m}.Dh:.....<..*/H....U{.HR...)Z\...a..G#....G.....%.....x/!d...$.~......cWD.....\|.2\|.cY.?].......A...3.-..U.^..U.w9.3...!.b.2U.&.\TU:...?.....+.:.:.).1..t....RA.......w...I2.6...e..{.3......q.bc@.....s.Cd...:m.).....eN;.........q........M.[..1#.....&H..4..N..y.S...W]!..z.x..Kr....d?9.e#)U...![c:T8...5J.tV.0S..'.]..{J"sd....-.t.`.E. .t.b.%.{.._...0.W.z<.+ZE.0..Y...;.:....#)..b..'...e.I..X.cG...!....#.....#.,.<=...(.yZ .h..kq@.....a9.AVf..~.Pq..P..5)..%=.sZ..c...Dy.yl..U.ys...g...5"/w=.z.x....y....J.G..c..qQ.=3.4..S{.E.x.5.r.] L79.A9....5..5.....?..%.E[....gH:.X$...{.U..#....

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64800), with no line terminators
Category:	downloaded
Size (bytes):	115772
Entropy (8bit):	6.123912481012303
Encrypted:	false
SSDEEP:	1536:fM2MCMkM2MCMPM2MCMAM2MCMSM2MCMaM2MCMEM2MCM3MPsTwkKW6/R09+tiwG+6g:FHQR04tiwG+6h/iv2yCZKlC3nQum
MD5:	289D09D23F90848B7ADFD2CC3C018ABB
SHA1:	A0D8B870B52AB48E1010603025BABA674E776C32
SHA-256:	634193FF191EE50191057B4C458F0A35B0435DA21E8125E7B6E1DC7786184E78
SHA-512:	B6E30393A43A52807C8887B102351880DDF793C9B54CAF81C15103D1AE455CF1C771689121E81E54146FBA8D7B4A4E199F793B6D8D19EE56812FB0A8A47F49B8
Malicious:	false
Reputation:	low
URL:	https://ka-p.fontawesome.com/assets/00bf593261/112787936/kit.css?token=00bf593261
Preview:	@charset "utf-8";.fa{font-family:var(--fa-style-family,"Font Awesome 6 Pro");font-weight:var(--fa-style,900)}.fa,.fa-classic,.fa-sharp,.fas,.fa-solid,.far,.fa-regular,.fasr,.fal,.fa-light,.fasl,.fat,.fa-thin,.fad,.fa-duotone,.fass,.fa-sharp-solid,.fab,.fa-brands{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:var(--fa-display,inline-block);font-variant:normal;text-rendering:auto;font-style:normal;line-height:1}.fab,.fa-brands{font-family:"Font Awesome 6 Brands"}.fad,.fa-classic.fa-duotone,.fa-duotone{font-family:"Font Awesome 6 Duotone"}.fass,.fasr,.fasl,.fa-sharp{font-family:"Font Awesome 6 Sharp"}.fass,.fa-sharp{font-weight:900}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-2xs{vertical-align:.225em;font-size:.625em;line-height:.1em}.fa-xs{vertical-align:.125em;font-size:.75em;line-height:

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.970158140865632
Encrypted:	false
SSDEEP:	3:SoLWeSANIhfhsDYVuOTVMtBGvLqDQnY:RVNYfhsDN8mtBGvLa
MD5:	A6958F24C73840B0FB213AE0EFB8E1D5
SHA1:	36DE028677A36A5B2A0849AF321D895BA6624380
SHA-256:	4D313EC42EE8450252422AD93EB69BDCD2D7A265CE66B6A3BD207B4F58B58AD0
SHA-512:	638543842C4DA69266D3B602DF2FE0EE91EDA12FD29B85E627D23C33238F45C934817974C8B1AB8D18FA2901F5789EF5CE76DAA0E088598D06767CC3B7D6E2A5
Malicious:	false
Reputation:	low
URL:	https://kit.fontawesome.com/00bf593261.css
Preview:	@import url(https://ka-p.fontawesome.com/assets/00bf593261/112787936/kit.css?token=00bf593261);

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 160 x 78
Category:	downloaded
Size (bytes):	35215
Entropy (8bit):	7.809228844635438
Encrypted:	false
SSDEEP:	768:7Z/1x19vQRKLbuEx/NiMIa4ZzbALri4suSVfJdmD:VPiK2Ex1iMIaoSri4PSVfJdmD
MD5:	AECDE3C3E0227B14798485942C61B819
SHA1:	8BF1E10D1151A9B96AA0B55C5D8004502E4A83BB
SHA-256:	9CBD8F8A918FB74994193785913646A089D8A7948A49F0774C94EE1D76D840CB
SHA-512:	514422695273EC972DDE306EFBD693CB62600E5BC8B11FD6DCE5D0222E6DF361813F0C7CB66C21AB68025E2092D59CDFAF498CA822190C9D910922FD3B34076B
Malicious:	false
Reputation:	low
URL:	https://d3j0t7vrtr92dk.cloudfront.net/images/loading-small.gif
Preview:	GIF89a..N..p.......xxz......``b......eef...ttv.................\|\|}......................................................................AAC...................VVX...JJLXXZLLN...TTU......\\^llnEEG...........pprPPRzz{FFH...HHJrrt.........ZZ\jjl...NNPccdwwx}}~...__`...ffg......nnoBBD...CCE..........................~~..............................hhiRRT.....................................!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:0C8903A8744CE311B988D321BF0FF704" xmpMM:DocumentID="xmp.did:AD869A6642D011E7AE4086DB0FD61A95" xmpMM:InstanceID="xmp.iid:AD869A65

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4539
Entropy (8bit):	5.217543310321057
Encrypted:	false
SSDEEP:	96:Zfcdiq+yH5vi5vGL5v51Yi6nE86H5vF5v9L5v9SqJnL7jXxH5vw5vYL5vbh:hc6agWCnE8S/vGqB7jX9uM/
MD5:	2C120493C068A07C839C16AC706177B9
SHA1:	1FE690AB60E16D5FCB8C7F6603BED58A592B1CFF
SHA-256:	C4A636F30EC5754A985C1DE5DF04A996B4BE2C5C1FD424A4AA604D3270F7E9B1
SHA-512:	FE8E96C19EC97172F41EBA28034259D4F241D6456C08F3F315948324B18DF8EFC978A247F2782DFB04D1BE91BDF377EBD18CFA134DC4A36108AB7F9EEB622EC4
Malicious:	false
Reputation:	low
Preview:	{"success":true,"msg":"","posts":[{"id":15760,"title":"The Growing Problem of Alcohol-Related Incidents in Music Venues","slug":"/blog/the-growing-problem-of-alcohol-related-incidents-in-music-venues","description":"For many people, alcohol and live music are an inseparable pair. Over 93% of people who use substances at live music events report drinking alcohol. With alcohol contributing to 140,000 deaths per year, the risks are higher than ever. Bar insurance can help owners mitigate the risks of dangerous alcohol-induced...","featureImage":"https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/istock-182417552.jpg","featureImageWebp":"https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/a581c3f5-d1d9-4bbd-8a7c-1917c5ab1301_istock-182417552.jpg","categoryId":819,"categoryName":"Music Venue Insurance","categorySlug":"/blog/category/music-venue-insurance","authorId":98,"authorName":"RMS Hospitality Group","

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	21960
Entropy (8bit):	7.972072335513554
Encrypted:	false
SSDEEP:	384:5wImVUO9NLF0J13gyS8bmmGgqWJfK6q7fT3NVfOSH861fFipW2uq18+GdaW:mt3LKJ13gpb7Jh9nc61Ns9uqy+xW
MD5:	A396C3969118CEFFECBF6542B70D3BB6
SHA1:	C467BC5C6C86466E618F3891D1A2401F6EB637E2
SHA-256:	F4D598F9241E6A5B2D07DAB07CA009F3537614EEE1FF6C4C2C85378EE85628FC
SHA-512:	3D0229132ECD026D0BEACD37670D5DC03A5D6524E1D154E5A90DE86DC4461E72B12C9B14E5438CAAECF562C25434C0DEC79DF7312E2F55B26B97CC2B03471F9F
Malicious:	false
Reputation:	low
URL:	https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/xs-home-banner.webp
Preview:	RIFF.U..WEBPVP8X.... .........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6VP8 .S..p....*....>m6.I$".....j...e.z,..^.V9.......g..........=".4....b...G......<..O<......._....?..7....^...z..A...)....g..q.._..f.....=.t........Le.?..w..x...v.Y.G\|.,r..nh.a=p$.&F....NM!k..Q.........~e"{>A.k.......[..4$...pQ...2..&.P...N.z<..].J.@.B\|.cs .........{..2[...V..]m..u=1..OH.N.P..i...[............&L......g.9...oV.g.k.N..pj......qB.....'...E.+."u.[..XL-..q..]...........LhBA2i.X......P..B.C.Y........`S41.Wu.w'U.9./.NP.`...U..o...P?..^l...x!.....-...$5...> o..`.......

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15406
Entropy (8bit):	4.708550771089196
Encrypted:	false
SSDEEP:	192:o6uNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNLwKdVlXF:oXwKlX
MD5:	460EB42C3FE958E5F95549DDC89F22FA
SHA1:	9E18000A7AA1E5F668B23E11E6A9FF8DA68DBC67
SHA-256:	3847BEE4EA94797E9AF36A4325F6907DE294939F776D2A23AA50EF4CF659507B
SHA-512:	3CE5CC1450DB833EE763DDAB60D5822215881DEA14E0A3A57C12D9B61BCFC9FFD245EC9B61DF05BFEDB45C39E74EBBCE7801F43648B171D66D3224DFC54CA38C
Malicious:	false
Reputation:	low
Preview:	............ .h...6... .... .(.......00.... .h&......(....... ..... ...............................................................................................................................................................c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.................c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.................c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.................~MH.{ID.m50..RM..UP.h/).j0+..VQ.t?:.u@;.~LG.f+&..................gc..ZU.....p93..^Z..mi..qm.....n71..c_.l4/......................d`.........c'!..ZU......XT.....l4/..XT.....NJ..................ea..UP.....i0......d`.f,&....m5/.....i0.{ID..................WR..^Y..RM.g-'..kg.d)#.c'!..VQ.wC=.yE@..QL.q;5.................c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.................c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.................c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.................c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!...................

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 20792, version 1.1
Category:	downloaded
Size (bytes):	20792
Entropy (8bit):	7.971158764429695
Encrypted:	false
SSDEEP:	384:8Vvc1gzv/xFd5QZfPnFfbpKU+SS0zDPvzabn/qZOSO7O7RWfK5IW:qYs/cFfbpyiP7AnSsSSSRWSB
MD5:	4691B98883F93639CCB6F3CCBB80DADA
SHA1:	BC707F8300B4B32F706E8A66B8F8AF044D8D1A4A
SHA-256:	E7DBA3AA0F98EDE7A500A1890B229671735B8DDC2F29552254DD7DD12673D931
SHA-512:	FA6A1B10B4F4EAED6BCBB56EBA5EFA2E8BD3BF6A9E76E2BEEBE234B544C7F6AF4A70167C9CC41BC020B02BF0E7C4902DA7603E7F7A51BA736A51AF6F7D160497
Malicious:	false
Reputation:	low
URL:	https://rmshg.amplified.training/pages/themes/default/css/font/Open_Sans_600.woff
Preview:	wOFF......Q8................................GDEF................GPOS................GSUB.......Y...t...OS/2.......^...`....cmap...t.........r$cvt .......[.......4fpgm...d........~a..gasp................glyf......7...T.rn..head..?....6...6....hhea..?........$....hmtx..?........h.4R.kern..A............loca..L.........]~F_maxp..M.... ... .j..name..M........h..52post..N........&j..prep..P4........x..n....................................x...5.A...../0.E....-..A.q....2..mz.....)@.]-R...X...@..DN^Q].Md`....]h.,4s...../......x.c`fy.......:....Q.B3_dHc.................B4.......:.;.).......0.p.2E(00.....n..10........x.c```d`.b.......@Z.A...b.`.d.c8.p..?.!c0.1.[Lw.D.........\.J..(......T......... .Za.....ZK.......?........=.s..........}.......t=...\|o..ED....5.x.c.a.g.c..$KY...e@.,A.".m....x.......3......?.[.o...2...:...a..b.)@.Y.....v1.b4d...36 ..x.uTGw...........)..)7.W..`*.....G..Kz.)e.\|..}.\|.1.3...suf...3.....w...H.-.....LOMN.1...~...w....W._.x...S'O..V...+....WG...

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4561
Entropy (8bit):	4.330851660596213
Encrypted:	false
SSDEEP:	96:cpsJ+34VHBRbFcfvHmDbzjO8szjlJXmwweIhv3pNMjNW:+4VHwmDrTszmwwHRQpW
MD5:	1D8B1582FE82BD329041CC1982AD42E4
SHA1:	AC2A44EBB20CFA5D6998D5D7D3F4E895EEE21DE2
SHA-256:	21EB1E487C899C6192C31800445BFB81CAA7FF1FCA550EA3FDB3444834D85710
SHA-512:	FAAC79ED68DC3E7E6A2EB05CFFCC4500238AD28784DBD145EEB5DE0E0EB2CA6E7EA505A9540EBEEB1766D29F9BAF3D21F8BCC706DD20A0CA5F330B139A01A08C
Malicious:	false
Reputation:	low
URL:	https://cdn.userway.org/widgetapp/images/body_wh.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="60px" height="60px" viewBox="0 0 60 60" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>man</title>. <g id="Drawer" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="man" transform="translate(-30.000000, -30.000000)">. <g transform="translate(30.000000, 30.000000)" id="Group-12">. <circle id="Oval" cx="30" cy="30" r="30"></circle>. <path d="M30,4.42857143 C44.12271,4.42857143 55.5714286,15.87729 55.5714286,30 C55.5714286,44.12271 44.12271,55.5714286 30,55.5714286 C15.87729,55.5714286 4.42857143,44.12271 4.42857143,30 C4.42857143,15.87729 15.87729,4.42857143 30,4.42857143 Z M30,6.42857143 C16.9818595,6.42857143 6.42857143,16.9818595 6.42857143,30 C6.42857143,43.0181405 16.9818595,53.5714286 30,53.5714286 C43.0181405,53.5714286 53.5714286,43.0181405 53.5714286,30 C53.5714286,16.9818595 43.0181405,6.42857143 30,

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4553), with no line terminators
Category:	downloaded
Size (bytes):	4553
Entropy (8bit):	4.703570616353898
Encrypted:	false
SSDEEP:	48:M5+wOAknfcIbby3Aah3iSASLU9d48plWbBxlvh+dxAxK9xpsO7+o:WWEI/y1i/S4TlE35wxJxiOR
MD5:	9790B860B9522F8F1E31CF101DB0704A
SHA1:	E4F736920610FA33CAC2067874A443B8ED624F0A
SHA-256:	F44DFD235C381EBA6055D89383D46C157F30957E87445F191B41F5816A0D4E24
SHA-512:	B274EAB7C0B20A2CF20B3280886C95A0C10752C1D85F118650B0FB75402E1C1070BDF03A8CE0E6E55B28917C7B07CD17C129E8A7389EDDA38C677FA6935630F9
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/cache/min/1/wp-content/plugins/simple-sitemap/lib/assets/css/simple-sitemap-0fcff4a6bcb5f8882c1edb6fbe9287d1.css
Preview:	body .simple-sitemap-menu li{float:initial}.simple-sitemap-container ul{margin:0 0 0 1.2em;padding:0}.editor-styles-wrapper .simple-sitemap-container ul,.editor-styles-wrapper .simple-sitemap-container ol{margin:0 0 0 1.2em;padding:0}.simple-sitemap-wrap:not(:first-of-type){margin-top:1.5em}.simple-sitemap-container .excerpt{font-size:.85em}.simple-sitemap-container span.excerpt{position:relative;left:8px}.simple-sitemap-container .separator{border-bottom:1px #eee solid;margin-bottom:-5px;margin-top:18px;padding:0}.simple-sitemap-container ul.main>li:last-child .separator{border-bottom:0}.simple-sitemap-fi{position:relative;top:6px;left:-5px;margin-left:5px}.simple-sitemap-container.col{padding:0;margin:0;display:flex;flex-wrap:wrap}.simple-sitemap-wrap.col{width:260px;margin-right:20px;margin-top:10px}.simple-sitemap-wrap.col ul.main{margin-left:20px}.simple-sitemap-container.hide-icon ul.main{margin-left:0;list-style-type:none}.simple-sitemap-container.hide-icon ul.main ul.children{l

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 479 x 319, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	389934
Entropy (8bit):	7.985251210901067
Encrypted:	false
SSDEEP:	6144:OSVSJ/DNRdzgQA+33QihHb2JV4CWj4rdwsKzi0IEE+H79KQSce1bibONnx3Ui7WO:OSVSJbNRdk/G72JyP+dfKRE+b9KSeJic
MD5:	95FD2CB545BDE71284FD52423E7DE389
SHA1:	2C3EC685CBB3B99615FE05CB139C975841FA8355
SHA-256:	71D8905DE1B464BFF3ABDA9F5414B56A526A80132C2EC59005A0FA001E3D6EEA
SHA-512:	38461E8F6036BBC459747FED8ACC6BEE00F156359074C68A0AE7B0087149B912E32DB7B271BFA880F49D2761B882DB5A72521FBB84139F122357050998AA455B
Malicious:	false
Reputation:	low
URL:	https://d3j0t7vrtr92dk.cloudfront.net/amplifiedhr/1582601262_mgrshcourse2.png
Preview:	.PNG........IHDR.......?......D.... .IDATx.d...e.u..;..s..7...r]U]m.h. . 9N....u.(..lP...@.$.a.w.3......hj.#}...Xk/....6.l...ps..UK..)\\....d..o.%]...@&..\........H.".=yF,.px..........\&F6.`.4....=.E.\|\.....X...~F.....]$1.U...u)dtbJ.7...&lm.2.tY...2...G8.%..CT..3.5.$.'.^>g>.!.. (...3.y..K6..!8....\|FR.3..p..{..q.B.@Mf...#....w$.q$A .T.v.!E......5l.{..\..z..w.Qb.4U.]v..-)U.I..........cI.5)U..9RZ.\|..+....Jo8..z.$.....1..H...:.g..........~E,........7...".W..D2....c....g=..f....jJ...L.Ld..D..e.+....G8....16..I.3.Yo..1M.....}.669}..?...dt..h..O.."..u..4...L..v..t2%.J........H'.f.)..-..N..'..N.D....9.@....A.".u.,.~..''..u..wy..).l.O?x._....D..F.I.Ie.8.O.....q...._c...?x....+?.T...n.....l6.xnp..-.._.....Y.......dM.."A.........:.77.....~.N...5y..a..,.Cv.>..z..GG...Z.;..g....."..j..._..K.s.z........l6 .O...1.........7.&K.{Du........m#...).lm....._...C.....#n.9`6[..i..IN.y...Ks......c\|7..L.S2.<".sc.e..\|...8>...X.\|..L.H.Z........lo..X&..q..-..)....^..

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 2200x945, components 3
Category:	dropped
Size (bytes):	18480
Entropy (8bit):	7.404371836151916
Encrypted:	false
SSDEEP:	384:xE778VicLmkOyApN8LBTQbSlAeUq7OXLBeBJQODkp7DwYohgswForgHVlKLzww+:S8s+lOy+aQPeUqiXLBe7QNkloFoEHW+
MD5:	E0A9059044CC4B077B421097BF909AFA
SHA1:	85A3281E2F5A829228FF41F008D2F903B90EFAC3
SHA-256:	5F29AC23BD5D88EF8CF8207264E972E6F65EB38E78B4A37803B28F47125888C0
SHA-512:	7007C2CE432FEA7F7C0DBA7F4D5A6D40FBE86052DBD9BD4C9C7B98FAD42E46AFC6C6801AE9A781F4A5E061828D5B8FC89A20CB40E7D79E73BF8EA46B0DEE9BC6
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Compressed by jpeg-recompress....................)&""&)>,0,0,>^;E;;E;^SeRMReS.vhhv...............................)&""&)>,0,0,>^;E;;E;^SeRMReS.vhhv.........................."..............................................`..@..........................-......0.J..........................$j.................................."5@........@..........................Z......`.l.R........................%IK@.........f.f.@.................................K.&E..E.......................e.Z..D......".3..;.h.........................J...D......P..`6.................E......PZP.d....... ..s...%.m...............(......4......@....@.W......)h...............#@....e%[@.B.....0.E.u..l&@........P....... ).......i@..A4.....%..B.............B........!.I.....I.....Dl.$.M....-.:......t......`..........h....",R..@M...F.`...4T6...........@........Y......EJ..E.....I6..BT.T...%.@.........]...@......h......P.$Z.h..H...@HP.............E...d.@.....B4..............M.r.r..P.....AJ.......L.i2

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 178 x 72, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	9838
Entropy (8bit):	7.962527425639502
Encrypted:	false
SSDEEP:	192:JKYGQfIZZ7tLS/LevCp0/Gp7PpgeQW0t2QCLrEXAUFpIjA/T3PuaZrL:AkIZZ7tChU87+W0arEXxpWyTPDZrL
MD5:	0EC5DFC44A443BC30123721FEFB83048
SHA1:	B81E121F87EBB94D6E2664FA0018F43B8234FB20
SHA-256:	A3C289CD18AAC85BA68FB04D49DBFCC491C9EFEC846C0CBCF2B5E7B6A9AB9C83
SHA-512:	36B10813CDDDD027AA307A82B115D995954C400B3287E87746D1859E4D7171FDBFEF70FA0C20554D843396C7D9E0036342C8DB4151D2E8CE04E499F6FBB18580
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......H.....R..... .IDATx..}{\|.E...=3._!!..... !B`Q........(.7VVE.u...+.....z.T..Oea..E.;...]... @.B........TU..........]u.S.N.z.f.Q.!...!P....X.2.^3...?G.....Bu.O..yym........0.........`...u..."[y.e...&3.....7.\....<.e>.]y.....W.wV..=l...@xZ.t...B.Lv /..l&.....s....s..![.4..B.K.q.....O... ....6...].%Y.\..s$..N.D...[..(.^l_....f.p..8W.....O...7..=.U..BU..s.2....<...@W.Q..t.".....d.'.cf..k..(0...1j.`.qV66...'....,f..v..YS......u..sXY...:^..l......._[.e.nQ;......]TG.12.Y.2...L..."CD....k....Xf..eY^...Y.....M.d.zY{+.m%;.......8.MLEQ\|..4......V..lf...b...f...@H.c.rY.[..7...P.l..(...z{+..o.y....Q 8..O....HV.....[.d".y.y.mf..G.'...=./dP..E.2b...7.c..l;....?G..yA!....:W....,.y....c6(..Q..d...+.H.:Y...@?[.#[..<^.$.Mv^{.f.....b.....X.v......')55.7.p...v..k.&...Y..l.,.D...:. .......F.~Qp.:e."..Y?x>...........J..F....!.#G.....b3..f...............,.....f...<...Y...!.......)F...[.S..c...Y}......2...D.+P~Q.@.e.$[=d."....J2ha..G..P.!P.

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1770
Entropy (8bit):	7.1281122649311355
Encrypted:	false
SSDEEP:	48:NElbQ1f+Bo/LfAuiEpXj5TwVd0Qa0In6hHuGEblzqX:NElbw+iX5j5sVdq0Puzbk
MD5:	CFF4519DD1D22B8E77D836191D2318C1
SHA1:	218D781A84C18AD8F157EFB76DAFF937A76F5FEB
SHA-256:	2CFA739AEFE128EC7A6AA767F0EB7B6243156B903BCAA99C8624DFA666D44E9D
SHA-512:	73C883A372DF1D816335D0819FE92E2926C7277F543F9BDE2DC278EC6601848E85E95B84244E71E02F2CAA5061903561D970CFAB20C5C226BD38F5FAD087206A
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X....0.........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH......t[.=.c.b.2.3...a...g...7. kUlT.....m.....G...m#I../.I;..P..].7Ni.Y?...+"~tr\|....``...9.8.i.m....g6/...<n.S._....JvY.%z_.RI...T:.\I....Qz.\.....!bTP.....@k..y.0._..E..2Zth.G..R.q.....y.z.`Cn...)C8:....b....G..p.....@4.....a..y.C...H.{.Z.. .u...8.....}.._.L..,....9.).3.......\.....F.0.\|.......@.V.d-y...2.m..C......... DBf..x.sG!V.1vP.q.....o.6.$/_2.......G?m.R.~.A....H..E...'...;H....3.z....2.l..9.KO:....F... ,Pl.<$...Yy.R.7$Lb..../.v...9.........W.......J6.u..V

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7543), with no line terminators
Category:	downloaded
Size (bytes):	7543
Entropy (8bit):	4.881058905864302
Encrypted:	false
SSDEEP:	96:dqxz+UcODWMjzeX46shUc7RUcRCBfz/Yv:dqxz1jXpGfEv
MD5:	6F3C6C65602C1666F30CA550AD50D513
SHA1:	A9EFB2063A7A91170020FED684B93B81FF1A55EE
SHA-256:	B4229221C15AB5510A33F4CED03AAB181754DF5B95CA49D39DEB012658C2A26F
SHA-512:	728F89891AAE2C0ACB2D1D1388DAC4901A01C623325A5E4B7B15DD17E09FEDFB3E34E48155B379B2F1EA3384C7FB53584BCB60932C169F2CD24006951A5F9CB4
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/cache/min/1/wp-content/plugins/parallax_video_backgrounds_vc/assets/css/style-b40bed06cbf66bb43c63a21c111befe2.css
Preview:	.smile_icon_list_wrap,.smile_icon_list_wrap ,.aio-icon-component,.aio-icon-component ,.ult_pricing_table_wrap,.ult_pricing_table_wrap ,.ult-new-ib,.ult-new-ib ,.align-icon,.align-icon ,.flip-box-wrap,.flip-box-wrap ,.banner-block,.banner-block ,.uvc-heading,.uvc-heading ,.ult-animation,.ult-animation ,.ubtn,.ubtn ,.stats-block,.stats-block ,.smile-icon-timeline-wrap,.smile-icon-timeline-wrap ,.ult-overlay,.ult-overlay ,.ultimate-map-wrapper,.ultimate-map-wrapper ,.ultimate-google-trends,.ultimate-google-trends ,.ult_countdown,.ult_countdown ,.info-circle-wrapper,.info-circle-wrapper ,.uavc-icons,.uavc-icons ,.uavc-list-icon,.uavc-list-icon *{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}.aio-icon,.vc_row .aio-icon{display:inline-block;font-size:32px;height:2em;width:2em;text-align:center;line-height:2em;-moz-box-sizing:content-box!important;-webkit-box-sizing:content-box!important;box-sizing:content-box!important}.aio-icon.none{display

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 320, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5929
Entropy (8bit):	7.9369244032176605
Encrypted:	false
SSDEEP:	96:Bbl0PkuOfI3kxxAEkT/fPhZmkAd8DmU4QoQ+eEJmoIrCLboQqWZ+P242uYGs4WjR:B+PzOfckxxAEkT/fPhZ8GDmU4hcCXoQJ
MD5:	AD10BCD93D7D2758172B109E2070B519
SHA1:	E50354EDD217EA052692ED58A590A9558E533FD5
SHA-256:	2936345466FD6465C43EF08A25652DDBE1FA7B52041944BCD89B9F9BD4E1A28F
SHA-512:	69B3217F11A290209E19941B143140C2FEB87144CC32383F7A57A9F40F84B472E6732EF639F8933C37DC97EBDBD0D6A4F9D0E86BC3118CD5726A4F0E7BEF2B8F
Malicious:	false
Reputation:	low
URL:	https://rmshg.amplified.training/pages/images/unknown_x4.png
Preview:	.PNG........IHDR.......@.....S._I....PLTE....g..g..g..h..h..g..g..h..g..g..g..h..i..i..g..g..g..h..g..h..h..n..p..g..g..g..g..h..g..h..g..g..h..l..k..j..h..h..h..g..h..g..h..h..h..g..g..j..g..k..i..v..x..x..y..x..z..y..y..y..y..y..{..v..w..x..{..z..y..~.....y..y..y..y..x..\|..y..\|..{..w..y.....y..x..z..x..w..y..x..y......\tRNS...4Pag..}\J;..o.............)t.........V...".w.A...!7d}....J...>.......o.....ER....u'.[.i.5>...hIDATx...1.....0..e%...................CV...;w..(..p....T.a..D..UA........V}..+. b.w....F.)........h....T3.'kn/.....w..\...a...Z......\..."..HD.'"B)......WC..=X..._.D.z.....-}....M...\|9......].K.M..I.Y$......Id{B....d.e@.cfz.@n..}..@.;......`.3.uC<....(..=.w{Z.$..q$.`.B...gA\|.$..m.....L.\|$.w+..+....qi@.....W....^:......7.Z.+l..5.h..^.9.."Dg.@Kz.}..2..5hC.4W..:D.,.wu..!.<.1.....o...A.....o..O...f6.?.....r.,s.]..:.'.2g.;..a...?.8.@.*...m.%.c[..A.....TU..>.}/I../C......D..../....L.k.RI..9....IFo.\|.._V..[.\|.@.%]..]....zM.......5)ia....J

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	59602
Entropy (8bit):	7.9914317777974855
Encrypted:	true
SSDEEP:	1536:anec+j1ZTqtivkvJKXdt8pXw63NClQrXkrQEffcqIw7YeL:akTqti0ANt8pXwCYurLJqIwEeL
MD5:	20E0904C21BEF7F09D9D91C92E40A22E
SHA1:	9EE722516D3ABB8085618E8D6443A7314A6D5D1B
SHA-256:	1012E8B9CA6395E94DF91107508F9B92EFF62A93B9A6310528F6E87CBD4DDEB9
SHA-512:	972055BD4A2AC013C8B7F6E23C2ADA85AA5F420152D4F1FF2838E92FB0354725F6FF8351431924D4163737ED2E851FB4B899A6144939A7618FA581696B7610B7
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X.... .........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6VP8 ............>m4.I.+./!pX....gn..fM.k^...H....f......v..../..oi?...\............'r'...J.5...h....<..?;..={.Y...........}..}.~...{.........._.._...................o._......>.....[.o...............?..o.c........L.....8...m......5.n?......=.ZN.....G......U.64.i.~..sG....E..KRr!.9...d.....6..",.\|%....~ivi..q.....Q?J....<...X.x..N..!..;.4.-...<..dSQB.d..,Z.x..c#.......=.\|Q...."...X.....+#U...........v.-]-..;.P".{qG.......0...U..Py..y(Ex.....Fy....80..`A.....XD.._/..F.{3....Pj

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1977
Entropy (8bit):	5.029287305059752
Encrypted:	false
SSDEEP:	24:2dtdWroTFAhk0KtntHMh87mrMa5gn879tHMwBy87ArMphn87VptHMvQ187irMcX0:cay4k0AIFtPSvkQVru3Q/JTNy
MD5:	8E0A35946BF39D10F46A1F1653366A0A
SHA1:	02B5788AFA6BDD2E146673CC09965750A81BF27C
SHA-256:	C45F637F905E1EA01BA81AA39E8DA62EE7E7F8703C3DA4C3BBA55F6192E5834C
SHA-512:	39EC3E8990B7BEEF84786C1FE8AA8DB98E514FA87DFCB30DB9C7996F99AC21D75C7F77FBE52F9D19823F35246DBBCCAE96A1AE95E594169360F62A3CFC4D1F1F
Malicious:	false
Reputation:	low
URL:	https://cdn.userway.org/widgetapp/images/spin_wh.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns="http://www.w3.org/2000/svg" height="40" width="40". version="1.1" xmlns:cc="http://creativecommons.org/ns#" xmlns:dc="http://purl.org/dc/elements/1.1/". viewBox="0 0 40.000001 40.000001">. <g>. <circle stroke-width="0" fill-rule="evenodd" transform="scale(-1,1)" cy="5.2227" cx="-20.033" r="3.5391" fill="#ffffff"/>. </g>. <g opacity=".9">. <circle fill-rule="evenodd" cx="-2.5033" transform="matrix(-.76604 .64279 .64279 .76604 0 0)" cy="13.387" r="3.5391" stroke-width="0" fill="#ffffff"/>. </g>. <g opacity=".8">. <circle stroke-width="0" fill-rule="evenodd" transform="matrix(-.17365 .98481 .98481 .17365 0 0)" cy="8.3722" cx="16.173" r="3.5391" fill="#ffffff"/>. </g>. <g opacity=".7">. <circle fill-rule="evenodd" cx="27.257" transform="matrix(.5 .86603 .86603 -.5 0 0)" cy="-7.474" r="3.5391" stroke-width="0" fil

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32026), with CRLF line terminators
Category:	downloaded
Size (bytes):	189420
Entropy (8bit):	5.1737114281140615
Encrypted:	false
SSDEEP:	3072:FMmicnND62D6cU+++IzcVY9Ex5wkIElgyVg0iB:Fqcnna93fElgyVg0G
MD5:	48EBD4AF24EBECF37231716358514D21
SHA1:	0C872DA0969E428613D7DB1563BC8F8AC70C75DC
SHA-256:	31F0DAA3BBD9247C7FA1DFD91D455526EE1960649320D8EFBEBEF85CE2910469
SHA-512:	AF4156BE69DB8DE773125A7F85AC2C5DDABE720E29FC6A9F62FE16F6CC7C052C380B09D398339DC490089751FF71DF8EC8C4C75E8D54AF98D49CA3B093F39ABB
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/themes/fortuna/js/libs.min.js?ver=6.4.3
Preview:	function hexToRgb(t){var e=/^#?([a-f\d])([a-f\d])([a-f\d])$/i;t=t.replace(e,function(t,e,i,n){return e+e+i+i+n+n});var i=/^#?([a-f\d]{2})([a-f\d]{2})([a-f\d]{2})$/i.exec(t);return i?{r:parseInt(i[1],16),g:parseInt(i[2],16),b:parseInt(i[3],16)}:null}function clamp(t,e,i){return Math.min(Math.max(t,e),i)}function isInArray(t,e){return e.indexOf(t)>-1}jQuery.easing.jswing=jQuery.easing.swing,jQuery.extend(jQuery.easing,{def:"easeOutQuad",swing:function(t,e,i,n,o){return jQuery.easing[jQuery.easing.def](t,e,i,n,o)},easeInQuad:function(t,e,i,n,o){return n(e/=o)e+i},easeOutQuad:function(t,e,i,n,o){return-n(e/=o)(e-2)+i},easeInOutQuad:function(t,e,i,n,o){return(e/=o/2)<1?n/2ee+i:-n/2(--e(e-2)-1)+i},easeInCubic:function(t,e,i,n,o){return n(e/=o)ee+i},easeOutCubic:function(t,e,i,n,o){return n((e=e/o-1)ee+1)+i},easeInOutCubic:function(t,e,i,n,o){return(e/=o/2)<1?n/2eee+i:n/2((e-=2)ee+2)+i},easeInQuart:function(t,e,i,n,o){return n(e/=o)eee+i},easeOutQuart:function(t,e,i,n,

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28600, version 1.0
Category:	downloaded
Size (bytes):	28600
Entropy (8bit):	7.9924738417279935
Encrypted:	true
SSDEEP:	768:ghn4BbkaiWnFKO3QFUB1ECEDGtqOGVA9wk1auZ:O4rcOAUL7UOGW2r2
MD5:	DE104AB8ACB1088AEBEA1AAE24724A91
SHA1:	B613F95C303C539EF3FE4FE65DB0FBC5E5A55FE1
SHA-256:	C94F080A550A1F2D4FE07D371969B7A40C01606BD5624E8C03C976CBF5E06058
SHA-512:	344C715EB0C1B94E5B21C42FB5F985780A82B46CF060176FAC3FDD0044BBF692C304C41DFE2BA87603C0B9E5877FD91DCBF14D070FB2689235EF5F1549FF5EA0
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/josefinsans/v32/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2
Preview:	wOF2......o........H..oE..........................m..@...?HVAR.+.`?STAT..'.../j....d.c..n.0..P.6.$..X. ..Z..\|.....%.^w...M@.^.M..<.7...^O...6.P..%..=A.1\|..#..6.....8j.n.9U.\|...4...0h.._F.Zh.Y.o..+..Z....T.^.8..Y.!.....L'UNJ.F.TB.bE....`[....EB...H.9.z..WX...U.>c....b..!...8TH.tH@...........:....0..G.5jXI.~>.B"ED.....(.....,.h.?.g..T.%...(....{.. .....O..g.w .R..wG...6..:kUNW....Gm..V.f,..l.U]U..8,...>xF.u.=B..G.}x@l{e.E3.C...NodN53.&`......F]N?o......>..l.v..d.q.@.K...;.Kp.u..a0..3;.....K.....vQ,T.4.-.......t.3!..@.c..D.g.. .....5\|n./H.v"&'U>..v."..a..B.........\.s...MnD..I...Q*N..UO...{.KD;kj....ZZ.40..(.......^}......d..$<...W....~./..P.nQ....p.,..^7....c...0.T."b..........7....4.%(...Y.3....#...!..(.ti.t.\|.<.......#.....>...wC.U..K...I..IQ6...t....u'[.O...GM\|.._..u..@B.....2u....=..J=..wwDa...D.K.z\...n..d....n..Ki..eD..!1.....j..../.S.~9........~..^.. .xC<.l.X.R.....s...M..(.....&.HbhEs.d..R.Dd..... ..v..{}..jrw..c.~..a}......

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 429 x 286, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	308553
Entropy (8bit):	7.994675142128173
Encrypted:	true
SSDEEP:	6144:QLIA2fpx86UzmMv4J5g2rRgHMMNJIJMqrEipv:r31bfJMqdt
MD5:	34F72C173E9341380E317DB3FF39E0CB
SHA1:	C090AF1ABCC400CC07ED6E881AB126583684F641
SHA-256:	B3A4A4417EF8C5BCDFC910D5FA67080A22FEAB26D63705DBE29CD1A9C66B4502
SHA-512:	407A93184E4194C06B4FE95256AAF873B7CCBEE70AAA1572D0AE187B8520DC2F4650EA5D7CD9FE3BA5F3BDE9148EF502C8B6BC0CBF8692E6A08B91AEDDFB9136
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............9.J... .IDATx...wt.....3s{/..,.$Kr.......cc.^B'.H... .I $!.H...Bu..n\.m..d......\|..;.l...].Y.....<g..s......}.Y...\>...@ ...+.E..C..{w..E../.D.$....8p ..h."dY&77..#Gj.e....p..L.4I..[.....L&.7.p...m.555....s.....8s...7.\|..?~.8%%%(..9s0.L..?...;w..._.=iii.466.f..DQd.........X.d.. ._?z..]c..(.B.n..1b.._.d..d........W.\I8..j.2}.t-.y.f.....t.3G........A..?...?z.(...(...s....TTT.g...Ea..8.N....Y.~=. p.....@4.e.%......)*.1..\|t.+9]...C.x..\.........7.EN...#._.O....U.V...o.zb._O[H].T.Y6.JJq<..z.c..c45...9...'.......`.......?x[...K~.~.?.C.d.}.......q.x...H.....-..=P...-x....&}....0..?...T......a....z.0..p.e..q....].._.k...X{.....z9q...K.<...\|..+.{.-V.[.[.z...:....\|...54.v.:.V37.yWw.9@..2.x.[.x/:.On.".A,.".....\|^.....M...;.d..w.....XUK..O.b.M..?G.....z..]....B....:..QI...~..b%..........V........k.....0..(..5k(.r....e..o....+.G....h...z....=...h4........9v...%/.[.+...Ja....&@.....#..E(.g.z....].@..s...e.....M...h..I...Cm.%.r...

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	55861
Entropy (8bit):	3.972793742667083
Encrypted:	false
SSDEEP:	768:3HzJTZqSvvrSNj0jzC2euj5X7xktLL4oiqVI2VUXFwjB0UrRu8ze7GUKA/snPrZk:jJTxri0jzP1xYXJVp6CaGSIrZdm4Q
MD5:	DF611BA5C50D2DF9303A5E5EFA598218
SHA1:	CB5D7F7AABF716A5F6CB00CB55AC094AF8E53493
SHA-256:	1FFDA4718351478F61C76BEEE75F57A14867DD1725FB35E59B10AA44BE512179
SHA-512:	A594199F0D4844E4743CE84A9E3847B797A594E05B3D8C0F363E11009F3307A47E4A6182617B28F7B5330827B0DB4DEEB02CDA9FFD39A67EF4B047B715C47FA7
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 24.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 3966 1217.8" style="enable-background:new 0 0 3966 1217.8;" xml:space="preserve">..<style type="text/css">....st0{fill-rule:evenodd;clip-rule:evenodd;fill:#FFFFFF;}..</style>..<g id="Backkground">..</g>..<g id="Object">...<path class="st0" d="M48,766.4c3.1-1.8,5.2-3.9,4.7-4.8c-0.5-0.8-3.4-0.1-6.5,1.7c-3.1,1.8-5.2,3.9-4.7,4.8....C41.9,768.9,44.9,768.1,48,766.4 M74.1,734.8c1.8-3.1,2.6-6,1.7-6.5c-0.8-0.5-3,1.6-4.8,4.7c-1.8,3.1-2.6,6-1.7,6.5....C70.1,740,72.3,737.9,74.1,734.8z M88,694.5c0-3.6-0.8-6.5-1.8-6.5c-1,0-1.8,2.9-1.8,6.5s0.8,6.5,1.8,6.5....C87.2,701,88,698.1,88,694.5z M81.2,659.1c-1.2-3.4-3-5.8-3.9-5.5c-0.9,0.3-0.7,3.3,0.6,6.7c1.2,3.4,3,5.8,3.9,5.5....C82.7,665.4,82.5,662.4,81.2,659.1z M91.5,637c-1.8-3.1-3.9-5.2-4.8-4.7c-

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 20216, version 1.1
Category:	downloaded
Size (bytes):	20216
Entropy (8bit):	7.96556743291365
Encrypted:	false
SSDEEP:	384:MOs0VuUK9NAZhQ/GLh1tk7kBDnNlOxJn/qZOSO7O7RWf74A3k:MgVbIN1Gl7k7kBDnuxJnSsSSSRWs8k
MD5:	CB721D9FB2F39C4C5FA9D75DD46CE78D
SHA1:	1AE6EAB90118F90E61BD2A03FE7462B043756CCF
SHA-256:	615494A93F61434C21C6A35E51B508950D66D7784B2F4DEB10B7A904B4CCA17C
SHA-512:	91947175684518678DD6FDFE1C6E50B8724D98BEFB794FC00CD1782CEED92F5F306CE1D8AE823D6FE736CEE76507FDD0838B8337CBF77BCD93EEDBC7EA56A38D
Malicious:	false
Reputation:	low
URL:	https://rmshg.amplified.training/pages/themes/default/css/font/Open_Sans_400.woff
Preview:	wOFF......N........@........................GDEF................GPOS................GSUB.......Y...t...OS/2......._...`.>..cmap...t.........r$cvt .......Y.....M..fpgm...d........~a..gasp...............#glyf......5o..QX._..head..=....6...6.v.hhea..=........$....hmtx..=........h..X.kern..?............loca..I............maxp..K.... ... .u..name..K........2../Jpost..L\|.......&j..prep..N.........C.......................................x...5.A...../0.E....-..A.q....2..mz.....)@.]-R...X...@..DN^Q].Md`....]h.,4s...../......x.c`f..8.....u..1...<.f....................{...h..... 0t.vf.....&.O.....)B..q>H..u..R``.....9.x.c```d`.b.......@Z.A...b.`.d.c8.p..?.!c0.1.[Lw.D.........\.J..(......T......... .Za.....ZK.......?........=.s..........}.......t=...\|o..ED....5.x.c.a.g.c..$KY...e@.,.."..........?....%.g....Z.....(".o..Y..Bu342.e......0..........M=.....x.uTGw...........)..)7.W..`.....G..Kz.)e.\|..}.\|.1.3...suf...3.....w...H.-.....LOMN.1...~...w....W._.x...S'O..V...+....WG...

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 320, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5929
Entropy (8bit):	7.9369244032176605
Encrypted:	false
SSDEEP:	96:Bbl0PkuOfI3kxxAEkT/fPhZmkAd8DmU4QoQ+eEJmoIrCLboQqWZ+P242uYGs4WjR:B+PzOfckxxAEkT/fPhZ8GDmU4hcCXoQJ
MD5:	AD10BCD93D7D2758172B109E2070B519
SHA1:	E50354EDD217EA052692ED58A590A9558E533FD5
SHA-256:	2936345466FD6465C43EF08A25652DDBE1FA7B52041944BCD89B9F9BD4E1A28F
SHA-512:	69B3217F11A290209E19941B143140C2FEB87144CC32383F7A57A9F40F84B472E6732EF639F8933C37DC97EBDBD0D6A4F9D0E86BC3118CD5726A4F0E7BEF2B8F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......@.....S._I....PLTE....g..g..g..h..h..g..g..h..g..g..g..h..i..i..g..g..g..h..g..h..h..n..p..g..g..g..g..h..g..h..g..g..h..l..k..j..h..h..h..g..h..g..h..h..h..g..g..j..g..k..i..v..x..x..y..x..z..y..y..y..y..y..{..v..w..x..{..z..y..~.....y..y..y..y..x..\|..y..\|..{..w..y.....y..x..z..x..w..y..x..y......\tRNS...4Pag..}\J;..o.............)t.........V...".w.A...!7d}....J...>.......o.....ER....u'.[.i.5>...hIDATx...1.....0..e%...................CV...;w..(..p....T.a..D..UA........V}..+. b.w....F.)........h....T3.'kn/.....w..\...a...Z......\..."..HD.'"B)......WC..=X..._.D.z.....-}....M...\|9......].K.M..I.Y$......Id{B....d.e@.cfz.@n..}..@.;......`.3.uC<....(..=.w{Z.$..q$.`.B...gA\|.$..m.....L.\|$.w+..+....qi@.....W....^:......7.Z.+l..5.h..^.9.."Dg.@Kz.}..2..5hC.4W..:D.,.wu..!.<.1.....o...A.....o..O...f6.?.....r.,s.]..:.'.2g.;..a...?.8.@.*...m.%.c[..A.....TU..>.}/I../C......D..../....L.k.RI..9....IFo.\|.._V..[.\|.@.%]..]....zM.......5)ia....J

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	10652
Entropy (8bit):	5.0767899120729885
Encrypted:	false
SSDEEP:	96:+S7iDM3bIMSJoeUiovnFZXtcRNB4CB6Vd6C34wqNMKOs26nh/m1PrWvHy0vapa5x:57PbYST9cH/WIwNGe6HEH2WLQj
MD5:	73F66B9CB7C2FB35FD6E29E5116FAA00
SHA1:	98FD9C6AD69D137E786779EE45C5B01E41FD202B
SHA-256:	67779D7937FEBB24238FC2E75FEDFFA6D40A61DBEBEB5BD434F7DE6F4D27F9B4
SHA-512:	3ADAB16FAF5276E8E9AD8BDC4140E2A9CF3AB90E0146B645007CD8F753241A23D58617B337F01F1F648AD91E0A5769381FAEDFCA3A9CCA21CA0371A0D816DBB7
Malicious:	false
Reputation:	low
URL:	https://d3j0t7vrtr92dk.cloudfront.net/images/empty_states/noCatalog.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="257.124" height="219.068" viewBox="0 0 257.124 219.068">.. <defs>.. <linearGradient id="linear-gradient" y1="0.5" x2="1" y2="0.5" gradientUnits="objectBoundingBox">.. <stop offset="0" stop-color="#d48a2a"/>.. <stop offset="0.573" stop-color="#f5cf38"/>.. <stop offset="1" stop-color="#ffcd77"/>.. </linearGradient>.. <linearGradient id="linear-gradient-2" x1="108.602" y1="23.721" x2="108.714" y2="23.418" gradientUnits="objectBoundingBox">.. <stop offset="0" stop-color="#cfeaf9"/>.. <stop offset="1" stop-color="#e5e8ec"/>.. </linearGradient>.. </defs>.. <g id="noCatalog" transform="translate(-1191.297 -1335.722)">.. <path id="Path_2053" data-name="Path 2053" d="M176.237,212.633c-6.025,6.025-17.613,9.115-25.878,6.952L67.471,197.337c-8.188-2.163-16.686-10.738-18.926-18.926L26.3,95.446c-2.163-8.188.927-19.853,6.952-25.878L93.967,8.849C99.993,2.824,111.58-.266,1

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58940), with CRLF line terminators
Category:	downloaded
Size (bytes):	59182
Entropy (8bit):	5.157503337200647
Encrypted:	false
SSDEEP:	768:P4TlSOLQenVa+Shd413pjWxkRfFdAZTVUzRWQHWxBVm7MT09XAPtThvBEwU8TtLf:PAfkVf5Lw9eEZeql0
MD5:	A7ADC3CC7055684DC4D1229A6463E2C4
SHA1:	68CE18772F2361BDA0C5E28F24C03D63935CE367
SHA-256:	EA4CBD2ECFD6DFC30B60B080801CB9E5A7F2D5DE1A5B7F22F9DE9DD8816E723E
SHA-512:	1BAA3B7E2D7546390EF112AAFB69711A4E6D610CAA6B312134D2EA88A8A1E28DE80519BBB0C8809E47FC40E1A9689B93D26418C499AADFA382F4E32AC1B2C8E6
Malicious:	false
Reputation:	low
URL:	https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/js/bootstrap.min.js?v=081420231114354913928
Preview:	/!.. Bootstrap v5.1.3 (https://getbootstrap.com/).. * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors).. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE).. */..!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e(require("@popperjs/core")):"function"==typeof define&&define.amd?define(["@popperjs/core"],e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e(t.Popper)}(this,(function(t){"use strict";function e(t){if(t&&t.__esModule)return t;const e=Object.create(null);if(t)for(const i in t)if("default"!==i){const s=Object.getOwnPropertyDescriptor(t,i);Object.defineProperty(e,i,s.get?s:{enumerable:!0,get:()=>t[i]})}return e.default=t,Object.freeze(e)}const i=e(t),s="transitionend",n=t=>{let e=t.getAttribute("data-bs-target");if(!e\|\|"#"===e){let i=t.getAttribute("href");if(!i\|\|!i.includes("#")&&!i.startsWith("."))return null;i.includes("#")&&!i.startsWith("#")&&(i

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 96 x 200
Category:	dropped
Size (bytes):	5512
Entropy (8bit):	7.88448147196049
Encrypted:	false
SSDEEP:	96:qdZf2nVOKzBafsPFbHeNtJsn0hni1Uadnp4DPozh9fnW+qb5Ro2cQcqCoZVeWFFU:znVf1af4F7eNHC0hi1UalQozh9fnWRNA
MD5:	5D82BDF98E1C89E1E24867257E308350
SHA1:	88AA4B1E593AAC21A9D30BB75D0CA5BE8B7780DA
SHA-256:	60DDEC41A1D4F2FC996998B34F4636E8A3D825B1E065C2CCABDD15751DFCA577
SHA-512:	9209301770964ECC9FAE10BD89A7E3192E58F2AB2A9EE4390C844D98A2EBFCC4C884F9C05D387DC974E45C6C45D93B1CBF6B781C615307BE45DB93A69DAD0C40
Malicious:	false
Reputation:	low
Preview:	GIF89a`...........j..t..z....).1B.0..9........B.AHZ.R........Z..#'JUl.b.Y[X.k.Qa}.t..>D...@s....Uq..HL...I{.Uz.Vz..QT...D......YW...T.._..z{.L....~...y...b`...&.#h..l..k..O......jhO..V.....k..o..u..v........n...y{U..q.-...E.Eq..:.0......y..X..p....._..a..y..~.7....>.Ek.ei.k.........r.m{.....B.ax.t.Bt...J..._.. .....y...._...v....B...p.g.T...r.s...L.SL.h.......0....K.Y...~._..._.F..I.........................R.Y.l.........M.t..........z..\.......X.....L..S.....Z..z.....a..h.......p................v....g.......a.....{.......i..w..p...........n.............w..................\|...................................................................................................................................................!..Created with GIMP.!.......,....`..........D..A....\.P.B.....(.`C../j...G..S=...#H."Iv..rd.+=.Tir..,Q.D.........3..C{.<.eQ.(..\|j...Q.>.G..@.vn...kX.c....U-X.d.mkT...d.M..w.\.&..]*.o..F.....d .d.=^.....x#_.l.r

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9179), with no line terminators
Category:	downloaded
Size (bytes):	9179
Entropy (8bit):	4.996986437313255
Encrypted:	false
SSDEEP:	96:/FTpOQlfti4iBPPBaJy3sP/gMBiwxyZakRO62oh:/FTppti4iBPZaTxyZM62oh
MD5:	F801DAE7A91481BB3E3A9491105FC964
SHA1:	2E9B1CD2B9B24A8274364BA716E6F67145430E54
SHA-256:	99895AEE5D80D6AB4E1D88B7C9EEF727D47869AD5BDB9ECD9430ABC73F587A7B
SHA-512:	A8AB530A9D96C4BA17E45127B7722D1E02B2F17BF70B19D35E3710950766904599E058B24B962012903D400C4516648695D0854F7EC7950524DABCFCA9BDE8E3
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/cache/min/1/wp-content/plugins/parallax_video_backgrounds_vc/assets/css/background-style-0f44168bd3d23e9e7fdbf608efe91d3c.css
Preview:	.upb_row_bg,.upb_video-bg,.vcpb-fs-jquery{overflow:hidden}.vc-row-translate-wrapper{margin:0!important}.upb_bg_overlay,.upb_bg_overlay_pattern{color:inherit;position:absolute;width:100%;height:100%!important;left:0;top:0}.upb_bg_overlay_pattern{background-attachment:fixed}.ult-vc-seperator{position:absolute;width:100%;height:0;left:0;z-index:1}.ult-main-seperator-inner{position:relative;height:100%;width:100%}.ult-vc-seperator.top_seperator{top:-1px;bottom:auto}.ult-vc-seperator.bottom_seperator{top:auto;bottom:-1px}.ult-vc-seperator svg{width:100%;height:auto}.uvc-svg-circle,.uvc-svg-triangle{position:absolute;top:-1px;bottom:auto;z-index:1}.bottom_seperator .uvc-svg-circle,.bottom_seperator .uvc-svg-triangle{top:auto;bottom:-1px;-moz-transform:scaleY(-1);-webkit-transform:scaleY(-1);-o-transform:scaleY(-1);-ms-transform:scaleY(-1);transform:scaleY(-1)}.uvc-x-large-triangle{position:absolute;top:-1px;bottom:auto;z-index:1}.bottom_seperator .uvc-x-large-triangle{top:auto;bottom:-1px;tr

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 33092, version 1.0
Category:	downloaded
Size (bytes):	33092
Entropy (8bit):	7.993894754675653
Encrypted:	true
SSDEEP:	768:c+2lFKscxQAuDJ5m/xiYEQNMJjFaf0TteqKt:cZlhcxJuDa/xiMMJhaItzKt
MD5:	057478083C1D55EA0C2182B24F6DD72F
SHA1:	CAF557CD276A76992084EFC4C8857B66791A6B7F
SHA-256:	BB2F90081933C0F2475883CA2C5CFEE94E96D7314A09433FFFC42E37F4CFFD3B
SHA-512:	98FF4416DB333E5A5A8F8F299C393DD1A50F574A2C1C601A0724A8EA7FB652F6EC0BA2267390327185EBEA55F5C5049AB486D88B4C5FC1585A6A975238507A15
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
Preview:	wOF2.......D......6...............................a......Z?HVAR...`?STAT.8'2..F/~.....\|.M....0....6.$.... ..x..<..[.%Q.i.<.N..t.Yx..5.A...\|..g#l....5.....D.Bt.......l.Y].)..(..H.s..V..ruM....[.....I.0h.v.Hc.R..]....`$.I)G.+.}....E%.H..\|..%nEE.....+.x..7\|........[..V....[.......0...CA.._....)2.$.....s_fw....+.V.H.B.<?.?..mloc..1.Q....a.r#...)......\|.F>..../6-.......t......>......tO.:f@b....u.I(.Bc..b....7.?A.....vE.}...kb]W7.h..$@......T1t.8.._?...~..,..I..."Y...1..s.V........R.Bf2..I....s.........u.P.&..D./"2qf....p.sv..)b5.yR.$MR3.@.E../>{w.....f...cN...2.v.....]>..Ow...9/!v...r..1.4.n.w...T......=...hRH!.....2`...u..82L...S.v.ik^.V.....@..N....d{..{...NN"'.H...H$..H.<..{?..x.....zv.}.~.N)4.g...X.....8\|}...e,%.:..;.Q..88...@..=UVHe....g..zD?..U...~.J...oMoP..6B"Y.{BN...vY<.o..r.7.7j%.Z%.'...]...........YK...,.a-;.M....>\.......%'+8Z.1K.y...9.(;.5 ..M..L.(..9...T)........hx..i2Y...m..{ulY...d......")^.,.n.~..r..S.o.$.....6=.i...N.....q0 ....

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43395), with no line terminators
Category:	downloaded
Size (bytes):	43395
Entropy (8bit):	4.606107058015658
Encrypted:	false
SSDEEP:	384:WEs/huZUaw4KM/Xj1UrPkwPcVCip3cPuelOCmeDrWD86vkv+cK3GG+:MpUHwGSkDMipEo3oWD8l+cL
MD5:	C6BC74948F49AC442BDDA5C0D62C58DC
SHA1:	1CBC8154387089EC03AF5DF397A22D3395A51DD2
SHA-256:	8191B58D0EBCD1C4D0C092D82E9094A46B2776E38D72DCEB2ADDF4CA2BB43FA4
SHA-512:	C0BB13F45FAB5C2713C805265A8B47C96EB97A046C76F3DB9AAF309BB9912DCACAF9188389064B27BDE290C323A11749064DE9D2C80E06C2933D4F773356C480
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/cache/min/1/wp-content/themes/fortuna/stylesheets/icons-1dc822960f4092c5373ece9212ad5a49.css
Preview:	@font-face{font-display:swap;font-family:'icomoon';src:url(../../../../../../../themes/fortuna/stylesheets/fonts/icomoon.eot?mb3b1k);src:url('../../../../../../../themes/fortuna/stylesheets/fonts/icomoon.eot?#iefixmb3b1k') format('embedded-opentype'),url(../../../../../../../themes/fortuna/stylesheets/fonts/icomoon.woff?mb3b1k) format('woff'),url(../../../../../../../themes/fortuna/stylesheets/fonts/icomoon.ttf?mb3b1k) format('truetype'),url('../../../../../../../themes/fortuna/stylesheets/fonts/icomoon.svg?mb3b1k#icomoon') format('svg');font-weight:400;font-style:normal}@media screen and (-webkit-min-device-pixel-ratio:0){@font-face{font-display:swap;font-family:'icomoon';src:url('../../../../../../../themes/fortuna/stylesheets/fonts/icomoon.svg?mb3b1k#icomoon') format('svg')}}.icon{font-family:'icomoon';speak:none;font-size:1em;font-style:normal;font-weight:400;font-variant:normal;text-transform:none;line-height:0;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}i

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	337607
Entropy (8bit):	3.901800719728292
Encrypted:	false
SSDEEP:	1536:lbzUp+YovtF0DDHnY/Yv7W01cuMn+ZZxVzV8laKxWHFaGU2ZevzrgChUEDdgiBPI:lbzUp0tFmDFhceFz29xOA52ZWrbzd4f
MD5:	C524BE2B5DBE703453D9F31795C8FD5E
SHA1:	46D065763FCA7B9927273B894E215BC9929DDA97
SHA-256:	CB23B65D798FE37B4AE4F9A7569C024435CE3E8811E09620F69AEBEEBFBD1AEB
SHA-512:	B087BAB59914AC7E75A608B80B0A1CF07CC8353743A7D7835FC37F02938FEC648728DCE3DFAE56FF9CC5B3CB6E1D3A5CB1193BB513F01279EEE749A60D5FA596
Malicious:	false
Reputation:	low
URL:	https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/party-mood.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 24.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 1920 250.2" style="enable-background:new 0 0 1920 250.2;" xml:space="preserve">..<style type="text/css">....st0{clip-path:url(#SVGID_2_);}....st1{opacity:0.5;}....st2{fill:#FFFFFF;}..</style>..<g>...<defs>....<rect id="SVGID_1_" x="-0.2" y="75.7" width="1920.3" height="174.5"/>...</defs>...<clipPath id="SVGID_2_">....<use xlink:href="#SVGID_1_" style="overflow:visible;"/>...</clipPath>...<g class="st0">....<g class="st1">.....<g>......<path class="st2" d="M641.7,188.4c-0.9,0.8-2.1,0.9-3.1,1.4l0.1,0.8c-1,1.1-2-1.6-2.4,0.1l1.1,1.2c-0.5,1.5-2.7,0-3,1.6.......c0.4,0.3,0.8,0.6,1.2,1c-2.6,1.7-3.1,6.5-6.1,6.8c-0.1,1.2,1,0.8,1.4,1.3c-0.2,1.3-1.3,1.6-1.9,2.8c0.2,0.1,0.2,0.3,0.2,0.5.......l1.3,0.1c-0.2,1.5-0.3,3.4,0.1,4.8

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	23182
Entropy (8bit):	7.97707300105975
Encrypted:	false
SSDEEP:	384:uw4oBz+vea16rknhxa3RJypDHkcW3fZg6XYRv3vsw6fM22pTIXKiD:X4oV+Wbkhxa3LypDHk1ORv3vspZo8XD
MD5:	2527B6E40512EFA56BFE77597E4A5F57
SHA1:	AAB915E1452BAA943FD043AB88993FAE23771A5F
SHA-256:	8207C3800FE4918050CBA658445EA6066B5EEB68A99CDCC8341E8D11F33284FD
SHA-512:	0918EB93F43CB3369E50FBA70A845498C4D4755D4BA0A06F3191A9D1316C8119DA374C772928B48A00681E2E74335B920CF13AB7F327817418C10D8C696320B2
Malicious:	false
Reputation:	low
Preview:	RIFF.Z..WEBPVP8X.... .........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6VP8 .X...B.......>m0.G$"./)..i...bl.m.A. ..........r...y-.<.y..?.}../t}....~w.....`.....w...OA..~....p}..I..........k_U..~................K.W.W....P...3................{...?\..._.....?..._....._.....@/...<.?............7.......{..J...]..../..n~...........t[BZ...j....bq.97...4U...\.>.gfq.._..~.y...N...#.&....g..l...X.M...A.}Wo.z...][.....J..9^.x..8...0..l..U.M...4O...[.M.Q.ZYP...5.~....f..........\|...S.C(mBJ$.m.2..=5E[../...:Q..........].!..^....E....q...8.;...vM.K._`.M....J'.fu'.

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4561
Entropy (8bit):	4.330851660596213
Encrypted:	false
SSDEEP:	96:cpsJ+34VHBRbFcfvHmDbzjO8szjlJXmwweIhv3pNMjNW:+4VHwmDrTszmwwHRQpW
MD5:	1D8B1582FE82BD329041CC1982AD42E4
SHA1:	AC2A44EBB20CFA5D6998D5D7D3F4E895EEE21DE2
SHA-256:	21EB1E487C899C6192C31800445BFB81CAA7FF1FCA550EA3FDB3444834D85710
SHA-512:	FAAC79ED68DC3E7E6A2EB05CFFCC4500238AD28784DBD145EEB5DE0E0EB2CA6E7EA505A9540EBEEB1766D29F9BAF3D21F8BCC706DD20A0CA5F330B139A01A08C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="60px" height="60px" viewBox="0 0 60 60" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>man</title>. <g id="Drawer" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="man" transform="translate(-30.000000, -30.000000)">. <g transform="translate(30.000000, 30.000000)" id="Group-12">. <circle id="Oval" cx="30" cy="30" r="30"></circle>. <path d="M30,4.42857143 C44.12271,4.42857143 55.5714286,15.87729 55.5714286,30 C55.5714286,44.12271 44.12271,55.5714286 30,55.5714286 C15.87729,55.5714286 4.42857143,44.12271 4.42857143,30 C4.42857143,15.87729 15.87729,4.42857143 30,4.42857143 Z M30,6.42857143 C16.9818595,6.42857143 6.42857143,16.9818595 6.42857143,30 C6.42857143,43.0181405 16.9818595,53.5714286 30,53.5714286 C43.0181405,53.5714286 53.5714286,43.0181405 53.5714286,30 C53.5714286,16.9818595 43.0181405,6.42857143 30,

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=18, height=2336, bps=230, compression=none, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS 20D, orientation=upper-left, width=3504], baseline, precision 8, 1254x836, components 3
Category:	downloaded
Size (bytes):	519218
Entropy (8bit):	7.974488405179852
Encrypted:	false
SSDEEP:	12288:bAgY97s/OfwCtclLsUofdTiDE7bkK5OUmVNSm4R:bAgYps/kclYzdflmER
MD5:	577BB6E13E8B959DC95AB9BE495DCC34
SHA1:	91004C3AF8C1CF6CD94BD365867A8A1D9957A48E
SHA-256:	1BF073700EBF9DF95293E03FC7F474F4196BA79DDF5F56BA942210D246416C49
SHA-512:	DD4D8C9D81B5F7C6DEE1CB3817BB4F6A68E8251818D8F7ACD93E0CED1B68C10D4D969F82E6FDECEC37DDF6AA6942CBA47E3C3FF88917022542ECFF7AB85F48D0
Malicious:	false
Reputation:	low
URL:	https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/istock-182417552.jpg
Preview:	......JFIF.....,.,......Exif..II*........................... ...........................................................................................................................(...........1...........2...........;.......B...........P...i.......l.............Canon.Canon EOS 20D...$..'....$..'..Adobe Photoshop CS4 Macintosh.2010:01:18 20:52:55.Ivo Gretener..COPYRIGHT 2010 IVO GRETENER..........................."...........'.......d...........0221....................................................................................................................0100................................D...........................................................................................................2010:01:16 00:20:04.2010:01:16 00:20:04..>..@B...................................w5.u.....#.N.........................\...........d...(...................l...........h.......H.......H.............JFIF.....H.H......Adobe_CM......Adobe.d.................................................

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1238)
Category:	downloaded
Size (bytes):	1239
Entropy (8bit):	5.068464054671174
Encrypted:	false
SSDEEP:	24:ch63Cf5W8QPIHRZ3hwVFS39bYGwNef1yTZsNUkQ1sZmSuLqNWRco5Jcn5IKM6cuY:C6SQnw/x+SR8ZZkQbp1RZ5JwiKMm7Zc
MD5:	9E8F56E8E1806253BA01A95CFC3D392C
SHA1:	A8AF90D7482E1E99D03DE6BF88FED2315C5DD728
SHA-256:	2595496FE48DF6FCF9B1BC57C29A744C121EB4DD11566466BC13D2E52E6BBCC8
SHA-512:	63F0F6F94FBABADC3F774CCAA6A401696E8A7651A074BC077D214F91DA080B36714FD799EB40FED64154972008E34FC733D6EE314AC675727B37B58FFBEBEBEE
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
Preview:	!function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href")\|\|""}function r(e,t){var r=e.substr(t,2);return parseInt(r,16)}function n(n,c){for(var o="",a=r(n,c),i=c+2;i<n.length;i+=2){var l=r(n,i)^a;o+=String.fromCharCode(l)}try{o=decodeURIComponent(escape(o))}catch(u){e(u)}return t(o)}function c(t){for(var r=t.querySelectorAll("a"),c=0;c<r.length;c++)try{var o=r[c],a=o.href.indexOf(l);a>-1&&(o.href="mailto:"+n(o.href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var r=t.querySelectorAll("template"),n=0;n<r.length;n++)try{i(r[n].content)}catch(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "login-558.min.js", last modified: Tue Mar 12 10:12:06 2024, from Unix, original size modulo 2^32 418677
Category:	downloaded
Size (bytes):	105474
Entropy (8bit):	7.9971585889028045
Encrypted:	true
SSDEEP:	3072:gZcKvU7uzH10R07LNfuARuLUHUcV3hNIm5hFMRh2PcFhud:ClMKzV007RfuAgo06ISPcY2Q
MD5:	2900CC6229F9601F97B41370018CF835
SHA1:	C001553B6885FF193BFC3C666406DB7287D5D435
SHA-256:	E3ED8740CA96EAD4269A326BFB621F090EAFDAA7C44AD37ACB5CA0FA1B7AACB6
SHA-512:	EFBE0ADEAFC3E121F13D39AF65F8892C5CA421B25362863D81D21510631A1197A5D4A5B33BE33C026D8AF510B205937C209B1485FD772C107FE837B91FE1CE1A
Malicious:	false
Reputation:	low
URL:	https://rmshg.amplified.training/pages/scripts/lib/login-558.min.js
Preview:	....v.e..login-558.min.js..[.w.6..+.....LKI.{B..Ie..n^....JJ.-A6..TH.b...~..-..{.S..`03.\|..ut.n}..FF...c..c+i.s.z.......&Xx.....,Z...Qk....7.bt..;atq...2.e....s.gK..........X..'..!.v-.e.\lV.......u..xX}..Y.....Pa.v....._...S.Qx...M.4...R.#.e.G2ny..?X....... .j..-...]............f..\\u..<gh.eM..^.Rb2.x..v..z..$r.<..I...w...e.2.t.3.V+.^c.,.....z..1%:....7.%.q...-....=.E.p.>...........ZFj.=.-.W.3..!..&.Wb..+{U,0-z..:.Q.E...B......R....=.m...lV...@)....=?.....\..)...q4.K..Hs.F........9.0....X.}...D.$..G.S.t%..m..._....BG.[%.........9...I4K.....I..lG.u:..W.q.....[.R.`1..W.;d....[(..Ux-...\........Z....d.4..0....A.l....~...8b.b@65v..Y.09_.......6..J.....hQ...+%a.m..}........mZ......6..:..1...>-....$..:.........<..9...s...\|N3....16Z"..>.6m.l..]y....Dv..;s..=..;V..s...........6..0.(..^....=......C-....+o]t..\|..s.l....U, 5"l*.e..Q.A.5.q.`...]........j........f..>..k.\|...s..oHh.n...#-Z.X....TJM~iX...`gte..f...E.N.;.A.....D.V0.......3.[

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4884
Entropy (8bit):	5.398115555900527
Encrypted:	false
SSDEEP:	96:cEOEaxMOEaxNVc+uwOEaxFNcEOXaxMOXaxNVc+uwOXaxFNcEOxMaxMOxMaxNVc+5:cr5D+SEKD9SNnD0SOADbp
MD5:	2F436F626EAE7BF1DB90EA4C979FBA42
SHA1:	B4BF1021FEDEC2644C88F6741984ACF785BDABB9
SHA-256:	231D2796CEF5647C76202B83B92CCF2F32D28FD3127AF23E15DC7C52D2B8A3D0
SHA-512:	BCA5ED4EA59B9F7DEABBC310ED392DB2224A7463AFD82BF7654BCF2BEE2DE88F6E1C151A24825C30376238FF34073B4FD093FF3FE59CEBCA4E90EDD0008ADCEA
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Josefin+Sans:wght@400;500;600;700&display=swap
Preview:	/* vietnamese /.@font-face {. font-family: 'Josefin Sans';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/josefinsans/v32/Qw3aZQNVED7rKGKxtqIqX5EUAnx4RHw.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext /.@font-face {. font-family: 'Josefin Sans';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/josefinsans/v32/Qw3aZQNVED7rKGKxtqIqX5EUA3x4RHw.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Josefin Sans';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/josefinsans/v32/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.wo

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "main-558.min.js", last modified: Tue Mar 12 10:12:06 2024, from Unix, original size modulo 2^32 990709
Category:	downloaded
Size (bytes):	252432
Entropy (8bit):	7.998546891717012
Encrypted:	true
SSDEEP:	6144:BtMWQqbMRnypGDdggZMyKodq5DiK3/spO6zgFRvzkfH65hxT5lXWE44kH:BtjZMRnypGDTnK7Di0apMLzkfa3TPs
MD5:	2A42DB0B6723738E3F962E8DE63880AF
SHA1:	7FCA7EE8A69FDC78C29FA6CA2BC78166F86E9FB5
SHA-256:	4B546BC265343A8FFD7F0716FD5F1A99EFA8E576DF6A5695E1157810E4CE13D1
SHA-512:	0E29230534441A77C01020265DA30913890CA72C0639759F21F5E90687793DF13CE63A4679936AB6A505ABA8DBFBBB0484D349F85C817C74EB8CEADC5BAD9348
Malicious:	false
Reputation:	low
URL:	https://rmshg.amplified.training/pages/scripts/lib/main-558.min.js
Preview:	....v.e..main-558.min.js..[.w.6..+.....LKI.{B..Ie..n^....JJ.-A6..TH.b...~..-..{.S..`03.\|..ut.n}..FF...c..c+i.s.z.......&Xx.....,Z...Qk....7.bt..;atq...2.e....s.gK..........X..'..!.v-.e.\lV.......u..xX}..Y.....Pa.v....._...S.Qx...M.4...R.#.e.G2ny..?X....... .j..-...]............f..\\u..<gh.eM..^.Rb2.x..v..z..$r.<..I...w...e.2.t.3.V+.^c.,.....z..1%:....7.%.q...-....=.E.p.>...........ZFj.=.-.W.3..!..&.Wb..+{U,0-z..:.Q.E...B......R....=.m...lV...@)....=?.....\..)...q4.K..Hs.F........9.0....X.}...D.$..G.S.t%..m..._....BG.[%.........9...I4K.....I..lG.u:..W.q.....[.R.`1..W.;d....[(..Ux-...\........Z....d.4..0....A.l....~...8b.b@65v..Y.09_.......6..J.....hQ...+%a.m..}........mZ......6..:..1...>-....$..:.........<..9...s...\|N3....16Z"..>.6m.l..]y....Dv..;s..=..;V..s...........6..0.(..^....=......C-....+o]t..\|..s.l....U, 5"l*.e..Q.A.5.q.`...]........j........f..>..k.\|...s..oHh.n...#-Z.X....TJM~iX...`gte..f...E.N.;.A.....D.V0.......3.[.

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	23656
Entropy (8bit):	7.976050512831896
Encrypted:	false
SSDEEP:	384:Kw2UBPA4D1kKuoqNm3WbkGgkp5uCQMQdzktjlhSyZqiwp8xSjGezcboZyAREiKs+:rTA4DyFI32kGgQuCdQdIt5VqRJZh+s+
MD5:	6A3F495998C0A8A7DCE59E704FF24334
SHA1:	A00042847E297CC7055AE7150BD1FB491E9F99A6
SHA-256:	403F3C5A10DB48CCA76428137990F9BBA1AA2A75B1EBB2004806BB45C13C6225
SHA-512:	5D4B8C44FD4EA4AB9AC926AD3F1D9D514ADAF5D2A3DBEA912C73C0870CC3770FEEE70C298B13F8B5857A9FB8331DB81FA0489F58A574084543683012256BD4D3
Malicious:	false
Reputation:	low
Preview:	RIFF`\..WEBPVP8X.... .........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6VP8 rZ..0<.......>m..F.".........f;.X..I.'......d..b....r.s.'.......{...6......w...>.?.?.y......-.q.....o.C...P.....r...-.....W...%......./L_.......:-....xK.O.....k....r\|...._.?......G._.\|!............_v.....S.o..../.A............7.O.~....].O`..?......l.....O..m>..`..z]...0.\|.kF.D#..J.......i+Bm=2o.P.-.\..[.-.>....J..N.Q}$.v...9BYHcjJr.7$....\|..za.Px.....>t$Of..]..zU...&^...'.y...d.wy.F.o].....X&lb....`..^...$...y ..<....i.M1.7]....7uz........?.......{....8...x..>..9..p......K./.9s..

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1170 x 450, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	83741
Entropy (8bit):	7.9809547677710615
Encrypted:	false
SSDEEP:	1536:FmBAUW/Mn0SS4Plx8ekMSoo+ZEHL/TgjG+QWlI684f35UaEd:MAUaSS47lkM7ZErbaQWr84f9Ed
MD5:	F4AB68C1906E983EB48DD191A5556DC9
SHA1:	510787BE0AE8800F0BEF4D2C43E1D5F25F658398
SHA-256:	C038851BC554369E6444DF27187AF827F84FADB38D659501E2D412F7E628B5AB
SHA-512:	B0F26D0784D52FF45DFB9EA8021335F74D153D86A1668653DFFF19ED251F90C2B09E2B7D67FBBB55D7F7F0E12478E6EF9AAB505BA9A5AC1D310E9A3CD0912893
Malicious:	false
Reputation:	low
URL:	https://d3j0t7vrtr92dk.cloudfront.net/rmshg/1576583896_newRMSbanner.png
Preview:	.PNG........IHDR..............[.O.. .IDATx...{\|\u........L&Mz..[..R...]."...^.]wu...xaA..\D.DD... ....su...?WP.bK)....M.&.u&.9.....$...d.&....Gh2s..9M.w>... """"""'....\|.?'..........8....'.k........N...$.N.J.I.R...4.t.t.<.Je....~.Je..y.K..Jwo.Je.......LWvvu......k-r"...............%...G{.e......1...$.!...........g..x..v..<.`a.?..MA...........P.`5...,..!. IDDDDDDDD. IDDDDDDDD. IDDDDDD.k.h.@.$. IDDDDDD.k.....IDA..........=.....$......9..=.....$........)..$........)..$........)..$......9.t'r..?_......9..#p...xE...Y........pd.+....$.......6Cv..W.c..).......... U.....$.......G=.D...Y.......G=.D...$......9."IdX........xT.$2,.$........HY.$.......GS.D...Y.......GS.D...$........)..$.......R.................!uL.(..6.a. IDDDDDDDD. IDDDDDDNH.h.@... IDDDDDDN<.\|...9............G=.D...$......9!.=.....$......9.t'*r..?_......9.4.L. IDDDDDD..n4EN\..-""""""CJ.G"'..I""""""2,...S.c.Yt.+2.BG{.""""""r.0...a...F."J.O..>ik.....A:.....g8.%.J.D...$......9,........r..~....

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=10, description=Happy people drinking beer at brewery bar out doors - Multicultural life style concept with genuine friends enjoying time toget, manufacturer=SONY, model=ILCE-7M3, orientation=upper-left, xresolution=344, yresolution=352, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 11.0 (Windows), datetime=2021:10:27 15:41:59], baseline, precision 8, 1254x836, components 3
Category:	dropped
Size (bytes):	766208
Entropy (8bit):	7.96349662657859
Encrypted:	false
SSDEEP:	12288:QKuC7BoxtDsY/r/TxOcZndgmn9l9TPrE7Rfyz6rTIodTo/9qpA003LKj:QKujtDjDbTndv9lxPo99TIod+h0J
MD5:	46371CF1AE16FEFACEB2F475D8D223AE
SHA1:	F5848557C47B4C7C09260566BA0C31A1A88CDC3E
SHA-256:	CE7621552F759BE55BCE13061D61E8EA143AC8BFFAD45EA07E9E106D304526D2
SHA-512:	4F1D5DB5C7AC8BCC8C50DAAD815EB6C9BD27495ADFF22D6B23235EAC7D36A2E2E1C080739A66BD0BD72375CA5C7C0EBF8071623B51F4F21E9DEE09C992C89E36
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,....W?Exif..II*...........................H...........N.......................X...........`...(...........1...1...h...2...........i...........h...Happy people drinking beer at brewery bar out doors - Multicultural life style concept with genuine friends enjoying time together at open air restaurant patio - Vivid filter with focus on guy..SONY..ILCE-7M3..,.......,.......Adobe Photoshop Lightroom Classic 11.0 (Windows)..2021:10:27 15:41:59.)........................."...........'...........0...........2...................0231................................................................................................................................................................................0100................................D........... ...........(...................................................................................0...........2...................................................2.......8...4.......X.......................2020:09:09 20:09:31.2020:0

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 220 x 38, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1535
Entropy (8bit):	7.794603863396421
Encrypted:	false
SSDEEP:	24:rm6eo2jLsXL4DXRqgbIdT55bvy+WNkMlp6rFQqshVQf/iFHLe/iCfX0AqhxowQaS:GohL4bMmIdrbvy+kDQ8HLKiAixxlkRX
MD5:	3209420447128E1788B9EBECBAC83944
SHA1:	1DDEE56473F8C80A214E780CD927025AA7DB9CD7
SHA-256:	E99C8540A1B562EF0A88A66FCCCD9DAF23AC8C81B98AE2C65435E0E7F00211CC
SHA-512:	B353BA9B79A658C228B9FB2F5C24587F50A671AD3B00AEAC9D7B46AF46EACD8C3578FAD548D9B4662A94E1AB8C66E47DD0D85018AE77B2ECF86B79FE0E47CFA2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......&.............PLTEGpLUUU...... ../..&&&......aaa...===......D..111O..MMM......#..k..,++999AAAIII[[[v..666:.....]]]@..L..Y..d..r..]]]q..r..v..eeeiii~..{...........(tRNS....K\]...v.r6.~...&T.j......y?.......[..]....IDATh..Xiw.:...&.1e_...........H..6.i?....x......Z.!..<.[...r....MU..u)....r..........6..k!.\|..m..\|.......;#.L..$9g.m..r.(.M..b......d.^./....t)3.".Fn...y2..r.....&...<k.>.....9H`.Z[u...zg.{ w..#......%..O?[jdVC.b....D.C.j...j..N'.r;..W..g..r....\|./..&.k.i..r2D}.....{.yc.W...W#D.O../.m.8....7r^>....u..p"s.{.#G..j.e..mg..<......).......r/.^..,.....\|.,..g.W..8.'.:??.JnWo.s.4o_2.N..9..-.o.5..r....!.......Y+.M.....?y.#..\|...~h?...\.x`.W.?.oz.o.5....Fe.m....&.3PM........e.6(].~..e.. )...'..w...i.....a.M.T..../\...@..D..A.]o#.b..1!..~?..(..J..9.e.0.^&.2.R1...........e.....r.T...r.c.-2R..lJ..x..eAR~:.z).D ..t.Ub.}AS. .w..%Cl1.R.xt(<...%...)k.K.....O.9q....g.vY..&..:68...,N...............C("..9./n...0`.../a....

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 33092, version 1.0
Category:	downloaded
Size (bytes):	33092
Entropy (8bit):	7.993894754675653
Encrypted:	true
SSDEEP:	768:c+2lFKscxQAuDJ5m/xiYEQNMJjFaf0TteqKt:cZlhcxJuDa/xiMMJhaItzKt
MD5:	057478083C1D55EA0C2182B24F6DD72F
SHA1:	CAF557CD276A76992084EFC4C8857B66791A6B7F
SHA-256:	BB2F90081933C0F2475883CA2C5CFEE94E96D7314A09433FFFC42E37F4CFFD3B
SHA-512:	98FF4416DB333E5A5A8F8F299C393DD1A50F574A2C1C601A0724A8EA7FB652F6EC0BA2267390327185EBEA55F5C5049AB486D88B4C5FC1585A6A975238507A15
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
Preview:	wOF2.......D......6...............................a......Z?HVAR...`?STAT.8'2..F/~.....\|.M....0....6.$.... ..x..<..[.%Q.i.<.N..t.Yx..5.A...\|..g#l....5.....D.Bt.......l.Y].)..(..H.s..V..ruM....[.....I.0h.v.Hc.R..]....`$.I)G.+.}....E%.H..\|..%nEE.....+.x..7\|........[..V....[.......0...CA.._....)2.$.....s_fw....+.V.H.B.<?.?..mloc..1.Q....a.r#...)......\|.F>..../6-.......t......>......tO.:f@b....u.I(.Bc..b....7.?A.....vE.}...kb]W7.h..$@......T1t.8.._?...~..,..I..."Y...1..s.V........R.Bf2..I....s.........u.P.&..D./"2qf....p.sv..)b5.yR.$MR3.@.E../>{w.....f...cN...2.v.....]>..Ow...9/!v...r..1.4.n.w...T......=...hRH!.....2`...u..82L...S.v.ik^.V.....@..N....d{..{...NN"'.H...H$..H.<..{?..x.....zv.}.~.N)4.g...X.....8\|}...e,%.:..;.Q..88...@..=UVHe....g..zD?..U...~.J...oMoP..6B"Y.{BN...vY<.o..r.7.7j%.Z%.'...]...........YK...,.a-;.M....>\.......%'+8Z.1K.y...9.(;.5 ..M..L.(..9...T)........hx..i2Y...m..{ulY...d......")^.,.n.~..r..S.o.$.....6=.i...N.....q0 ....

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27287), with CRLF line terminators
Category:	downloaded
Size (bytes):	110563
Entropy (8bit):	5.524277155620537
Encrypted:	false
SSDEEP:	1536:iQpnayKBPfF5aknBDU0KsIu5XOKvITONqvUejr3P99cN7H98rYx5s14/gCsBMXw7:iJfFYoDU0xVqvUejbs7dCYdInBwD0a+
MD5:	A748A9E56B2C639013C770506F1FD529
SHA1:	537EDD9B364AC005DF2D1C57BE873945B2FECDF6
SHA-256:	6EABB193731278713F4208EA84B8C7334C3DFC98F01CB074778280E1DF536E62
SHA-512:	ADE8062894443994D5DC96497426DDE1E238ADFB9600AAB7B3713CE804934ACA5E12AE3267D961268AC8A146BD06754AA110006964AF95E9394DFB1EA5B825B8
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.6.4
Preview:	/******************************************...-.THEMEPUNCH TOOLS Ver. 1.0 -... Last Update of Tools 27.02.2015..******************************************/....../..* @fileOverview TouchSwipe - jQuery Plugin..* @version 1.6.9.... @author Matt Bryson http://www.github.com/mattbryson..* @see https://github.com/mattbryson/TouchSwipe-Jquery-Plugin..* @see http://labs.skinkers.com/touchSwipe/..* @see http://plugins.jquery.com/project/touchSwipe.... Copyright (c) 2010 Matt Bryson..* Dual licensed under the MIT or GPL Version 2 licenses...../........(function(a){if(typeof define==="function"&&define.amd&&define.amd.jQuery){define(["jquery"],a)}else{a(jQuery)}}(function(f){var y="1.6.9",p="left",o="right",e="up",x="down",c="in",A="out",m="none",s="auto",l="swipe",t="pinch",B="tap",j="doubletap",b="longtap",z="hold",E="horizontal",u="vertical",i="all",r=10,g="start",k="move",h="end",q="cancel",a="ontouchstart" in window,v=window.navigator.msPointerEnabled&&!window.navigator.point

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 27376, version 1.1
Category:	downloaded
Size (bytes):	27376
Entropy (8bit):	7.978805348512719
Encrypted:	false
SSDEEP:	768:nkqwNOCDXC/zATFHbXLsYDySJH/Mr4FCN4ZQgbK:6NOCTyz2hbJyAHkr4MKQz
MD5:	CF3AE6814613791AB99FC4ADC2883D26
SHA1:	74C7A3C881192C5E35479E7F6E0091201DCCBA68
SHA-256:	9C6DE10A74B7E08BB1B1135ECCB230FFB16F29B1B5A3B62EE0B581FD3AF93B7C
SHA-512:	7E7E83390A431F00BBE03258200395D195BDB013A39DAD27091FEC54B6A1CA4A0F2567A208C926CDA3C4E2C8FE8C6B8188ACCE9E8CC8DCB46B21E165327D55A4
Malicious:	false
Reputation:	low
URL:	https://rmshg.amplified.training/pages/themes/default/css/font/Open_Sans_300.woff
Preview:	wOFF......j.................................GDEF......."...".?..GPOS................GSUB.......[...t....OS/2... ...]...`..Qcmap...........$..cvt ...T...]........fpgm............~a..gasp...P...........#glyf...`..H...pn..-.head..Q0...6...6.;.hhea..Qh... ...$....hmtx..Q...........\|.kern..T<...H..+>'...loca..c....Q...V...)maxp..e.... ... ....name..e........V..2.post..f..........!.prep..i........:..]...............................)................x...5..A.D......s..;L..E{..~.]....N(qyF.....l...m @T.A..s..z...2W.Z..hM..&.o.M..q-.~!...x.c`fig.a`e.`..j...(.../2.1..`b.ffcfeabby....A!...A............l..D.Z8z.".....X.Y.........U...x...3XGQ....8.d.{[...>..5.c..O.m........?.....DN..;\!../...1L.q6\0?...B..-..EB.P-4.-.0+,.-b@L.9.&...6s......G..1..A?F...%B.b..3..I..a.o.=..].p..rY.}....r.L.h.u..4.......}.}.}.}...=....%.....1.V..x.c.a.g.c..$K..$..`.g.e........ .......R.g......?......x.)d...........$...."....0.#.A@X..0......x.uTGw...........)..)7.W..`.....G..Kz.)e.\|..}.\|

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3302), with CRLF line terminators
Category:	downloaded
Size (bytes):	3443
Entropy (8bit):	5.4991893578262685
Encrypted:	false
SSDEEP:	96:hoFCy21LBZb2gR3/n2ZYMUI7vZaJ3K8NkJ:EL2FBZq4aYMLJ
MD5:	3078A37ADF3515809CF2ACBC951918C4
SHA1:	B59F27510576BB35195DA6502A766C84AF2E0DBF
SHA-256:	05E3D14EE8AD724D460BECBA38A0F8991D7F9282AC5E0987B4614313426339F8
SHA-512:	63F3240577112716A13C87B4966EEC3D38CBFA01F54AE5CB0707B659ADE93D81EA4425689777C0E3FF69A0B0844890467A63B04C15E80AF46A9161526284B681
Malicious:	false
Reputation:	low
URL:	https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/js/webp.js?v=081420231114354913925
Preview:	/! modernizr 3.6.0 (Custom Build) \| MIT .. * https://modernizr.com/download/?-webp-setclasses !*/..!function(e,n,A){function o(e,n){return typeof e===n}function t(){var e,n,A,t,a,i,l;for(var f in r)if(r.hasOwnProperty(f)){if(e=[],n=r[f],n.name&&(e.push(n.name.toLowerCase()),n.options&&n.options.aliases&&n.options.aliases.length))for(A=0;A<n.options.aliases.length;A++)e.push(n.options.aliases[A].toLowerCase());for(t=o(n.fn,"function")?n.fn():n.fn,a=0;a<e.length;a++)i=e[a],l=i.split("."),1===l.length?Modernizr[l[0]]=t:(!Modernizr[l[0]]\|\|Modernizr[l[0]]instanceof Boolean\|\|(Modernizr[l[0]]=new Boolean(Modernizr[l[0]])),Modernizr[l[0]][l[1]]=t),s.push((t?"":"no-")+l.join("-"))}}function a(e){var n=u.className,A=Modernizr._config.classPrefix\|\|"";if(c&&(n=n.baseVal),Modernizr._config.enableJSClass){var o=new RegExp("(^\|\\s)"+A+"no-js(\\s\|$)");n=n.replace(o,"$1"+A+"js$2")}Modernizr._config.enableClasses&&(n+=" "+A+e.join(" "+A),c?u.className.baseVal=n:u.className=n)}function i(e,n){if("objec

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	69654
Entropy (8bit):	5.051903093056633
Encrypted:	false
SSDEEP:	1536:+/4IaD5j+wyTmIV+g1Qyr6gbl3Ye0/+M3IOhqk4Jt:+/4IaD5j+wyTmIV+g1Qyr6gbl3Ye0/+V
MD5:	AF40CD3C52FA327F8C748D320126D5FA
SHA1:	176FEFD019541F1DAB52A84A5DF042D3D6AD66FB
SHA-256:	8E76D5399E47238941B7AB775059301E41772BA81631F26716ECE7B70586D1BA
SHA-512:	5011F2009B13F79551D06742BD0F8CBB47D435D537A7DBB77B2AE3684F9E17798433D6A4960A041201BFACCF4681E33E6D0D8A4009EB8BE91CA64CF30AE08A98
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/plugins/gravityforms/css/formsmain.min.css?ver=2.3.4
Preview:	.gform_wrapper select,.gform_wrapper textarea{font-family:inherit;letter-spacing:normal;font-size:inherit}.gform_wrapper .gf_progressbar:after,.gform_wrapper ol.validation_list:after{content:""}.gform_wrapper{margin:16px 0;max-width:100%}.gform_wrapper form{text-align:left;max-width:100%;margin:0 auto}.gform_wrapper *,.gform_wrapper :after,.gform_wrapper :before{box-sizing:border-box!important}.gform_wrapper h1,.gform_wrapper h2,.gform_wrapper h3{font-weight:400;border:none;background:0 0}.gform_wrapper input:not([type=radio]):not([type=checkbox]):not([type=submit]):not([type=button]):not([type=image]):not([type=file]){font-size:inherit;font-family:inherit;padding:5px 4px;letter-spacing:normal}.gform_wrapper input[type=image]{border:none!important;padding:0!important;width:auto!important}.gform_wrapper textarea{padding:6px 8px;line-height:1.5;resize:none}.gform_wrapper select{line-height:1.5}.gform_wrapper .ginput_container_multiselect select{background-image:none!important;-webkit-app

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:Hn8ohkYn:H8ohkY
MD5:	900914BC560773CAF9E095A8F17F6E37
SHA1:	51E0C4C0C0902C50F0D7E7581E0EDB0DCC191D7D
SHA-256:	08E437A7674E58F221D4EE6D5742EF2643929FB566511709F988B5EBE4FE4C1E
SHA-512:	2B48B170CEEBD6DB978D4DC79710A746903473B7C378FA25D6564AD6F6D2141A080E83C66D79688C35D3146F6DBFE996D3232C7A643F7767B8124C18065DB1C2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSEAlbFynDO7n1JhIFDb2Fgw8=?alt=proto
Preview:	CgkKBw29hYMPGgA=

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 2200x945, components 3
Category:	downloaded
Size (bytes):	18480
Entropy (8bit):	7.404371836151916
Encrypted:	false
SSDEEP:	384:xE778VicLmkOyApN8LBTQbSlAeUq7OXLBeBJQODkp7DwYohgswForgHVlKLzww+:S8s+lOy+aQPeUqiXLBe7QNkloFoEHW+
MD5:	E0A9059044CC4B077B421097BF909AFA
SHA1:	85A3281E2F5A829228FF41F008D2F903B90EFAC3
SHA-256:	5F29AC23BD5D88EF8CF8207264E972E6F65EB38E78B4A37803B28F47125888C0
SHA-512:	7007C2CE432FEA7F7C0DBA7F4D5A6D40FBE86052DBD9BD4C9C7B98FAD42E46AFC6C6801AE9A781F4A5E061828D5B8FC89A20CB40E7D79E73BF8EA46B0DEE9BC6
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/uploads/2018/10/about2.jpg
Preview:	......JFIF..............Compressed by jpeg-recompress....................)&""&)>,0,0,>^;E;;E;^SeRMReS.vhhv...............................)&""&)>,0,0,>^;E;;E;^SeRMReS.vhhv.........................."..............................................`..@..........................-......0.J..........................$j.................................."5@........@..........................Z......`.l.R........................%IK@.........f.f.@.................................K.&E..E.......................e.Z..D......".3..;.h.........................J...D......P..`6.................E......PZP.d....... ..s...%.m...............(......4......@....@.W......)h...............#@....e%[@.B.....0.E.u..l&@........P....... ).......i@..A4.....%..B.............B........!.I.....I.....Dl.$.M....-.:......t......`..........h....",R..@M...F.`...4T6...........@........Y......EJ..E.....I6..BT.T...%.@.........]...@......h......P.$Z.h..H...@HP.............E...d.@.....B4..............M.r.r..P.....AJ.......L.i2

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 160 x 78
Category:	dropped
Size (bytes):	35215
Entropy (8bit):	7.809228844635438
Encrypted:	false
SSDEEP:	768:7Z/1x19vQRKLbuEx/NiMIa4ZzbALri4suSVfJdmD:VPiK2Ex1iMIaoSri4PSVfJdmD
MD5:	AECDE3C3E0227B14798485942C61B819
SHA1:	8BF1E10D1151A9B96AA0B55C5D8004502E4A83BB
SHA-256:	9CBD8F8A918FB74994193785913646A089D8A7948A49F0774C94EE1D76D840CB
SHA-512:	514422695273EC972DDE306EFBD693CB62600E5BC8B11FD6DCE5D0222E6DF361813F0C7CB66C21AB68025E2092D59CDFAF498CA822190C9D910922FD3B34076B
Malicious:	false
Reputation:	low
Preview:	GIF89a..N..p.......xxz......``b......eef...ttv.................\|\|}......................................................................AAC...................VVX...JJLXXZLLN...TTU......\\^llnEEG...........pprPPRzz{FFH...HHJrrt.........ZZ\jjl...NNPccdwwx}}~...__`...ffg......nnoBBD...CCE..........................~~..............................hhiRRT.....................................!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:0C8903A8744CE311B988D321BF0FF704" xmpMM:DocumentID="xmp.did:AD869A6642D011E7AE4086DB0FD61A95" xmpMM:InstanceID="xmp.iid:AD869A65

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3840), with no line terminators
Category:	downloaded
Size (bytes):	3840
Entropy (8bit):	4.372838973312529
Encrypted:	false
SSDEEP:	24:9G32OQsRJRIAXBz3EQsRJRIAXBAVWWK3BcJy:9ZaRb/xIRb/xZjt
MD5:	B91B0939A92C34946238D50B1D752451
SHA1:	CED01EF28A297AB45D494018F232DBE88A6E9F9A
SHA-256:	784A99D40268AFC0EAB1BD5C2CD3F4C46E80748DD5D511B5FB53C1ABF027EB24
SHA-512:	71037E62EB121B03D783A25CFB32C41415DE2138731B59A7D95064CBB81BF793E7DEC2840F2FC83C90194FC97C82017EF73BE39A886A571E4FDC372B5773DC39
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/plugins/gravityforms/css/formreset.min.css?ver=2.3.4
Preview:	body .gform_wrapper.gf_reset_wrapper,body .gform_wrapper.gf_reset_wrapper button,body .gform_wrapper.gf_reset_wrapper caption,body .gform_wrapper.gf_reset_wrapper div,body .gform_wrapper.gf_reset_wrapper fieldset,body .gform_wrapper.gf_reset_wrapper form,body .gform_wrapper.gf_reset_wrapper h1,body .gform_wrapper.gf_reset_wrapper h2,body .gform_wrapper.gf_reset_wrapper h3,body .gform_wrapper.gf_reset_wrapper h4,body .gform_wrapper.gf_reset_wrapper h5,body .gform_wrapper.gf_reset_wrapper h6,body .gform_wrapper.gf_reset_wrapper iframe,body .gform_wrapper.gf_reset_wrapper img,body .gform_wrapper.gf_reset_wrapper input[type=button],body .gform_wrapper.gf_reset_wrapper input[type=email],body .gform_wrapper.gf_reset_wrapper input[type=image],body .gform_wrapper.gf_reset_wrapper input[type=number],body .gform_wrapper.gf_reset_wrapper input[type=password],body .gform_wrapper.gf_reset_wrapper input[type=submit],body .gform_wrapper.gf_reset_wrapper input[type=tel],body .gform_wrapper.gf_reset_wr

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1900x700, components 3
Category:	downloaded
Size (bytes):	538032
Entropy (8bit):	7.990560524637903
Encrypted:	true
SSDEEP:	12288:x7whnUylaBornU2VpQ+TNav9dbz3PoNaIflkmldewxa7QFiQn:kU9Borno+ujbz3PoPfZl4wxaEwQn
MD5:	FD86404CEA8A6E3EEFE837CE6E27EA0C
SHA1:	25A8BE6444A802F022EB2EDE9ABBE7F434A03F43
SHA-256:	F9B57A3C9D6AF6EFCD7330A2DABED1FC2DE8615C4177971C987F654D06C75957
SHA-512:	C1087BC4A95B90A50550BFD6BF555F8560156D82574E5A8641EC5A043863ADAE0C9A327F15CC1BA8DA4DD229EDF75C227AEDC488FA0FDDEBFA078BA583A9D2C0
Malicious:	false
Reputation:	low
URL:	https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/testimonial-bg.jpg
Preview:	......JFIF.............C....................................................................C.........................................................................l........................................................................................!.p#....o........[.Z.....2.k<.37-..D....,..Hlo.~C.\|..r4_S........"J..l..02.....Gt.(.Z.,...I...........&....@V.J.um.D...j..S.Fu..t..o.if..e..v.SB..n.W..=A..X.....u.;.F.%............I.V=.....Z@hY..AH3."....aX.2"......r"..).%..F.C.#.$.%.}!!a.E...zi.6.5>.D....0u..0GH.:G.zB.C2./.O....&m...v+s..q.w..~...$..._S.v..nq.#.g.\v..n=..aj.N.1.S..#}.l.f.YX_n.....>..8......3.....9:n0.j.=..vIeq]....zq...'.`.UbsF..[...>~#.....f.c..ZN..^.{.K.......:.-u.......y......^)...../u.fc_.E.M..r.j.....>`.i..u..\|.{g.[....[._....!!h7V..rU.b.J.......'....bZ.M.e..w.v?6.G..i...l[.3....?..X.....G.B.dDb..K.....F...0.H.Gh......d.:..EDt.oA..!...v...,. ....20#+.L.9+....88:..3j.k.`.XZ.k.].g.f.uM./h....W..+.C".@...Y8<.2..oW~.

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	52
Entropy (8bit):	3.760812721256521
Encrypted:	false
SSDEEP:	3:WLKLZCCChX2eRNsH:W+L0X2OU
MD5:	80573DAEF4B5C552F6677E6AB9DFC2A3
SHA1:	BC5FE46842C76E63507D8CDB435EF63B723D0907
SHA-256:	C5BB89E54B205320F9DF945F8F765C71D1A9B337B2F9F67C291EFB6EFDDA711F
SHA-512:	782F8D94598C11A9D7743AC73D6D2042E327098C1118B210AC16A227E9F565C11A1EF13F428F0B121A6270A075CCC5B4F875A347AAA846DA31CA81A74D442996
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/cache/min/1/wp-content/themes/fortuna-child/style-de4eeabd10fd7e5c34310e1183bfc60c.css
Preview:	@import "../../../../../../themes/fortuna/style.css"

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "formenhancements-558.min.js", last modified: Tue Mar 12 10:12:08 2024, from Unix, original size modulo 2^32 646
Category:	downloaded
Size (bytes):	289
Entropy (8bit):	7.122785956145463
Encrypted:	false
SSDEEP:	6:XJWBxMEPnbA5hPD+lO1nwdRlmUuDYT3z94otfbW+msWXvhZFBl:XYDPnUiZR2DzopbW+aXvzB
MD5:	BD66D526005BB3E24692DD48229E135B
SHA1:	6BC150AA0FC8D9722A6A87E74C60728B4A5367A4
SHA-256:	70AFEEAB881018AC4C2C6CB7787FBF34A19ECE61B388182B010D10EED0D88462
SHA-512:	0B589C7D06B933381B4669F29FB2150E4A626867579DCF624108AFC09989DD449A6F84684373986F782F6E501EC35DAD7A583557D25A02CA57FDCE37FDEC6A2C
Malicious:	false
Reputation:	low
URL:	https://rmshg.amplified.training/pages/scripts/lib/formenhancements-558.min.js
Preview:	....x.e..formenhancements-558.min.js...Mj.0...=E.&..-.EW...t.])ej...I...5.w.h.qBJwBo.{O3@.m4d...P..E..5X........g2..Q....$......Y...W...j."8e.o.....=9..~....3h#j=.{.=...Le%}>w...o..a.s..n..........}....?j.......Z.%.iZ......[..zy.l..YB...tya.XI.\...).(CC...3...c]g.....h....

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	479
Entropy (8bit):	4.975296234585172
Encrypted:	false
SSDEEP:	12:tHG7bsjJDJA3P41z2uMlvujYZl86bcJ2t7qIkOJd+x:txiP41z2uMrE6E8WFUd+x
MD5:	E07862D9CB08AD1347AF2F2DA406AF3F
SHA1:	F2EBE06EEA2F3F3AAB14712B7756899EC6EDD5BF
SHA-256:	3DDD36AAD3051AFBF3F66CB73CDE85AD1F27538ED011D086AB1A499027695754
SHA-512:	DDA59F5A5268D9FF6E63656571EBDDC3B1494EF04CAB67FBE69F8CE3D5F00AC34C454A3D1F91BCAE6AB0F6BD2BA2F891E2D9D3B5F4F24D9E60F91F61F72DEC5D
Malicious:	false
Reputation:	low
Preview:	<svg aria-hidden="true" focusable="false" data-prefix="fas" data-icon="star" class="svg-inline--fa fa-star fa-w-18" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 576 512"><path fill="#C9C9C9" d="M259.3 17.8L194 150.2 47.9 171.5c-26.2 3.8-36.7 36.1-17.7 54.6l105.7 103-25 145.5c-4.5 26.3 23.2 46 46.4 33.7L288 439.6l130.7 68.7c23.2 12.2 50.9-7.4 46.4-33.7l-25-145.5 105.7-103c19-18.5 8.5-50.8-17.7-54.6L382 150.2 316.7 17.8c-11.7-23.6-45.6-23.9-57.4 0z"></path></svg>

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1900x700, components 3
Category:	dropped
Size (bytes):	538032
Entropy (8bit):	7.990560524637903
Encrypted:	true
SSDEEP:	12288:x7whnUylaBornU2VpQ+TNav9dbz3PoNaIflkmldewxa7QFiQn:kU9Borno+ujbz3PoPfZl4wxaEwQn
MD5:	FD86404CEA8A6E3EEFE837CE6E27EA0C
SHA1:	25A8BE6444A802F022EB2EDE9ABBE7F434A03F43
SHA-256:	F9B57A3C9D6AF6EFCD7330A2DABED1FC2DE8615C4177971C987F654D06C75957
SHA-512:	C1087BC4A95B90A50550BFD6BF555F8560156D82574E5A8641EC5A043863ADAE0C9A327F15CC1BA8DA4DD229EDF75C227AEDC488FA0FDDEBFA078BA583A9D2C0
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................l........................................................................................!.p#....o........[.Z.....2.k<.37-..D....,..Hlo.~C.\|..r4_S........"J..l..02.....Gt.(.Z.,...I...........&....@V.J.um.D...j..S.Fu..t..o.if..e..v.SB..n.W..=A..X.....u.;.F.%............I.V=.....Z@hY..AH3."....aX.2"......r"..).%..F.C.#.$.%.}!!a.E...zi.6.5>.D....0u..0GH.:G.zB.C2./.O....&m...v+s..q.w..~...$..._S.v..nq.#.g.\v..n=..aj.N.1.S..#}.l.f.YX_n.....>..8......3.....9:n0.j.=..vIeq]....zq...'.`.UbsF..[...>~#.....f.c..ZN..^.{.K.......:.-u.......y......^)...../u.fc_.E.M..r.j.....>`.i..u..\|.{g.[....[._....!!h7V..rU.b.J.......'....bZ.M.e..w.v?6.G..i...l[.3....?..X.....G.B.dDb..K.....F...0.H.Gh......d.:..EDt.oA..!...v...,. ....20#+.L.9+....88:..3j.k.`.XZ.k.].g.f.uM./h....W..+.C".@...Y8<.2..oW~.

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30406)
Category:	downloaded
Size (bytes):	30407
Entropy (8bit):	5.4723085003930985
Encrypted:	false
SSDEEP:	768:QWTO6WTXQs5nqx+cDyTe3fFI4jvNIy35htn9OEoB9Bflo1ggal3FWjnRd0s9Lff3:QfXzqx+se657mlhUFflNPcYZ53kB0qXW
MD5:	53768DC930D588EA5455C29121ACDB29
SHA1:	E2F63703EE168395B4E505F98D53E4AB1C351872
SHA-256:	3B454E3907EBD9A12D1678924B060B448B0AD3AD32AF26FFA8C832FA347FE6A9
SHA-512:	94E80B33DFFF0EC8437849C31C8CB23874B048AACF2148471E3CEE78EF87CAF8DCA4265EFA3A009B4BF0CAD68A702BC8AC1DD3A1A767A7B927B3E87E8195E1F6
Malicious:	false
Reputation:	low
URL:	https://cdn.userway.org/remediation/2024-04-30-12-14-34/free/remediation-tool-free.js?ts=1714479274721
Preview:	var __defProp=Object.defineProperty,__defProps=Object.defineProperties,__getOwnPropDescs=Object.getOwnPropertyDescriptors,__getOwnPropSymbols=Object.getOwnPropertySymbols,__hasOwnProp=Object.prototype.hasOwnProperty,__propIsEnum=Object.prototype.propertyIsEnumerable,__defNormalProp=(e,t,r)=>t in e?__defProp(e,t,{enumerable:!0,configurable:!0,writable:!0,value:r}):e[t]=r,__spreadValues=(e,t)=>{for(var r in t\|\|(t={}))__hasOwnProp.call(t,r)&&__defNormalProp(e,r,t[r]);if(__getOwnPropSymbols)for(var r of __getOwnPropSymbols(t))__propIsEnum.call(t,r)&&__defNormalProp(e,r,t[r]);return e},__spreadProps=(e,t)=>__defProps(e,__getOwnPropDescs(t)),__objRest=(e,t)=>{var r={};for(var n in e)__hasOwnProp.call(e,n)&&t.indexOf(n)<0&&(r[n]=e[n]);if(null!=e&&__getOwnPropSymbols)for(var n of __getOwnPropSymbols(e))t.indexOf(n)<0&&__propIsEnum.call(e,n)&&(r[n]=e[n]);return r},__async=(e,t,r)=>new Promise(((n,o)=>{var a=e=>{try{s(r.next(e))}catch(t){o(t)}},i=e=>{try{s(r.throw(e))}catch(t){o(t)}},s=e=>e.done

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	55861
Entropy (8bit):	3.972793742667083
Encrypted:	false
SSDEEP:	768:3HzJTZqSvvrSNj0jzC2euj5X7xktLL4oiqVI2VUXFwjB0UrRu8ze7GUKA/snPrZk:jJTxri0jzP1xYXJVp6CaGSIrZdm4Q
MD5:	DF611BA5C50D2DF9303A5E5EFA598218
SHA1:	CB5D7F7AABF716A5F6CB00CB55AC094AF8E53493
SHA-256:	1FFDA4718351478F61C76BEEE75F57A14867DD1725FB35E59B10AA44BE512179
SHA-512:	A594199F0D4844E4743CE84A9E3847B797A594E05B3D8C0F363E11009F3307A47E4A6182617B28F7B5330827B0DB4DEEB02CDA9FFD39A67EF4B047B715C47FA7
Malicious:	false
Reputation:	low
URL:	https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/covid-bg.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 24.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 3966 1217.8" style="enable-background:new 0 0 3966 1217.8;" xml:space="preserve">..<style type="text/css">....st0{fill-rule:evenodd;clip-rule:evenodd;fill:#FFFFFF;}..</style>..<g id="Backkground">..</g>..<g id="Object">...<path class="st0" d="M48,766.4c3.1-1.8,5.2-3.9,4.7-4.8c-0.5-0.8-3.4-0.1-6.5,1.7c-3.1,1.8-5.2,3.9-4.7,4.8....C41.9,768.9,44.9,768.1,48,766.4 M74.1,734.8c1.8-3.1,2.6-6,1.7-6.5c-0.8-0.5-3,1.6-4.8,4.7c-1.8,3.1-2.6,6-1.7,6.5....C70.1,740,72.3,737.9,74.1,734.8z M88,694.5c0-3.6-0.8-6.5-1.8-6.5c-1,0-1.8,2.9-1.8,6.5s0.8,6.5,1.8,6.5....C87.2,701,88,698.1,88,694.5z M81.2,659.1c-1.2-3.4-3-5.8-3.9-5.5c-0.9,0.3-0.7,3.3,0.6,6.7c1.2,3.4,3,5.8,3.9,5.5....C82.7,665.4,82.5,662.4,81.2,659.1z M91.5,637c-1.8-3.1-3.9-5.2-4.8-4.7c-

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4112)
Category:	downloaded
Size (bytes):	4324
Entropy (8bit):	5.353636234952773
Encrypted:	false
SSDEEP:	96:rNYaTbFaRZqD1B7sfha1s+Gib2V81qJQOPG:KaQRZqKhadGib2VyO4
MD5:	BB2A5846DF151C66877E0C198B61B684
SHA1:	95A26D7D09BFF3CF0C3A8A3B75056C73410E90FC
SHA-256:	FB82877818FA23C8C028053CC5744C5D7947FACA82BD50A82B918016499BFB62
SHA-512:	7782A4428864F87B301ACE80D5DE866A4E816FDACC5ADC6339AD08898E3D4374DE15DE710338D65C30815BD452EE6F3A150E11CCCD8174799D2679CA458927C7
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery.maskedinput/1.4.1/jquery.maskedinput.min.js
Preview:	/. jQuery Masked Input Plugin. Copyright (c) 2007 - 2015 Josh Bush (digitalbush.com). Licensed under the MIT license (http://digitalbush.com/projects/masked-input-plugin/#license). Version: 1.4.1./.!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):a("object"==typeof exports?require("jquery"):jQuery)}(function(a){var b,c=navigator.userAgent,d=/iphone/i.test(c),e=/chrome/i.test(c),f=/android/i.test(c);a.mask={definitions:{9:"[0-9]",a:"[A-Za-z]","*":"[A-Za-z0-9]"},autoclear:!0,dataName:"rawMaskFn",placeholder:"_"},a.fn.extend({caret:function(a,b){var c;if(0!==this.length&&!this.is(":hidden"))return"number"==typeof a?(b="number"==typeof b?b:a,this.each(function(){this.setSelectionRange?this.setSelectionRange(a,b):this.createTextRange&&(c=this.createTextRange(),c.collapse(!0),c.moveEnd("character",b),c.moveStart("character",a),c.select())})):(this[0].setSelectionRange?(a=this[0].selectionStart,b=this[0].selectionEnd):document.selection&&document.selection

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	260
Entropy (8bit):	4.942501294285798
Encrypted:	false
SSDEEP:	6:YxZo3tfh3mj+mB+F73AkKZ3orcuG/oRugWtVtevdY:YxZo3t50XK73z7YteVY
MD5:	E9ED02B6DC795269A8A5B452B92B574C
SHA1:	59E41CC71C00E988AE6B2E39B5253290AA0ABFFA
SHA-256:	4F720DD095196FBF3FD9B59BCEB9F2970AD55E078DB73A2115D538892AF1848D
SHA-512:	E71974367D8228908EDA748235918E0AF334F94DB6EF4F257E89EE5D2BE600A4F400F0E4696BCF08396F687BC51F8FBEA4DB8C11B8C1AB126ACE163C58D62063
Malicious:	false
Reputation:	low
URL:	https://cdn77.api.userway.org/api/img-dscr/v2/D0JSP1avgg/3527403/RLqwMG7OTpTSzPtD/alts.json?dto=%7B%22sorted%22%3A%5B%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Flogo.webp%22%2C%22alt%22%3A%22RMS%20Hospitality%20Group%22%2C%22dir%22%3A%22RO%22%7D%5D%2C%22tier%22%3A%22FREE_QUOTA_TIER%22%7D
Preview:	{"payload":{"missingAlts":[{"src":"https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/logo.webp","alt":null,"approved":false,"decorative":false,"metadata":{"skippedForReadOnly":true}}]},"payloadType":"MissingAltsDto"}

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	23182
Entropy (8bit):	7.97707300105975
Encrypted:	false
SSDEEP:	384:uw4oBz+vea16rknhxa3RJypDHkcW3fZg6XYRv3vsw6fM22pTIXKiD:X4oV+Wbkhxa3LypDHk1ORv3vspZo8XD
MD5:	2527B6E40512EFA56BFE77597E4A5F57
SHA1:	AAB915E1452BAA943FD043AB88993FAE23771A5F
SHA-256:	8207C3800FE4918050CBA658445EA6066B5EEB68A99CDCC8341E8D11F33284FD
SHA-512:	0918EB93F43CB3369E50FBA70A845498C4D4755D4BA0A06F3191A9D1316C8119DA374C772928B48A00681E2E74335B920CF13AB7F327817418C10D8C696320B2
Malicious:	false
Reputation:	low
URL:	https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/service-1.webp
Preview:	RIFF.Z..WEBPVP8X.... .........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6VP8 .X...B.......>m0.G$"./)..i...bl.m.A. ..........r...y-.<.y..?.}../t}....~w.....`.....w...OA..~....p}..I..........k_U..~................K.W.W....P...3................{...?\..._.....?..._....._.....@/...<.?............7.......{..J...]..../..n~...........t[BZ...j....bq.97...4U...\.>.gfq.._..~.y...N...#.&....g..l...X.M...A.}Wo.z...][.....J..9^.x..8...0..l..U.M...4O...[.M.Q.ZYP...5.~....f..........\|...S.C(mBJ$.m.2..=5E[../...:Q..........].!..^....E....q...8.;...vM.K._`.M....J'.fu'.

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 479 x 319, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	68007
Entropy (8bit):	7.987847651920911
Encrypted:	false
SSDEEP:	1536:GMVWlnHRjBgodyT0VsNGakMIUhudaj30yyq1eaETkn:6ooA0uGakMIUhZ30yyqbp
MD5:	10B406B249271D05A45AA592835EEEE9
SHA1:	575443B8BEEB7BD402C18B09062AE69E535886D2
SHA-256:	52874B78598A36E6ED23B356DD14FB11C81544BF7F06D465FC8C4C52E4660E6C
SHA-512:	3C8A0D2C3302F7E9B1A70CBE87464EAD67A037869DC5F6A22908052F10966FC23CBA48F72181B33DB7342989ABD7ACCF1F14D2E824D98B3AFB497D48F83153D0
Malicious:	false
Reputation:	low
URL:	https://d3j0t7vrtr92dk.cloudfront.net/rmshg/1576785467_knifetraining.png
Preview:	.PNG........IHDR.......?......&^... .IDATx..].eWu-..\.....l...>..N...y.B.....sun..HD...E.....y>I$.D.(JB8.M...+".` .....eW..^k..0k.j.....U.s..m.5f.}..z.}L.Z{..{.."""z.....X.\.O...6B...:...7.`.b...m.;7...,m.g........0..m.r...E..:.y..tR..z..s.H.}..Y...p.H6c..h...-.e.A..y.u...u..u....MS..6w.....".{J......C..(..<nv../;...j...,..&;.t.M......[ltOg.=-Qm.+.....d........-.MZ2KZr..}.....v....t.>.k:..=.6v^q.w1.`...Et.&..N.y.]w.n5m.[0....x.x.0.....}.XVr...;.....@....%ape.i....7t..1.D...z...-c>..u...mP..b...Xhv.R.......W........M.i..mH........e.....C.9,k.......TZ.2i#L.J....p2.)..A...[....p...xid.....;.p..X.HU...bV..\kG....rH..R=X.6RZb...e.s.S...f.o.....^S..%...V9X23yd{. .T.m.g.......".z.Wv.lw...=CU.$u".V<......-.j....x.._!e.TZ...\|!..a..L..IMB&..1B..a......n7.etY.E...kO.(.v...".K..C......X<6(........v.k<^.H...'Y.Cr;.R..d@0l..........@..."........RW.@.An)\|....3..,.+......y.2.~..u/J..R.k.a]oV......N/"!.uE....q....'......V'Z....gI.....H...`.{..

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	21960
Entropy (8bit):	7.972072335513554
Encrypted:	false
SSDEEP:	384:5wImVUO9NLF0J13gyS8bmmGgqWJfK6q7fT3NVfOSH861fFipW2uq18+GdaW:mt3LKJ13gpb7Jh9nc61Ns9uqy+xW
MD5:	A396C3969118CEFFECBF6542B70D3BB6
SHA1:	C467BC5C6C86466E618F3891D1A2401F6EB637E2
SHA-256:	F4D598F9241E6A5B2D07DAB07CA009F3537614EEE1FF6C4C2C85378EE85628FC
SHA-512:	3D0229132ECD026D0BEACD37670D5DC03A5D6524E1D154E5A90DE86DC4461E72B12C9B14E5438CAAECF562C25434C0DEC79DF7312E2F55B26B97CC2B03471F9F
Malicious:	false
Reputation:	low
Preview:	RIFF.U..WEBPVP8X.... .........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6VP8 .S..p....*....>m6.I$".....j...e.z,..^.V9.......g..........=".4....b...G......<..O<......._....?..7....^...z..A...)....g..q.._..f.....=.t........Le.?..w..x...v.Y.G\|.,r..nh.a=p$.&F....NM!k..Q.........~e"{>A.k.......[..4$...pQ...2..&.P...N.z<..].J.@.B\|.cs .........{..2[...V..]m..u=1..OH.N.P..i...[............&L......g.9...oV.g.k.N..pj......qB.....'...E.+."u.[..XL-..q..]...........LhBA2i.X......P..B.C.Y........`S41.Wu.w'U.9./.NP.`...U..o...P?..^l...x!.....-...$5...> o..`.......

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1202)
Category:	downloaded
Size (bytes):	8184
Entropy (8bit):	5.292970891310538
Encrypted:	false
SSDEEP:	192:9i/FL9pWZzcNAgQBBWC0J1etDGNUJyutYtR3WqY1X1/:96FjOAeHBiJYVGWgyYfmpF1
MD5:	A3CCD6020DBE2F6A2E1F172580FBE24A
SHA1:	E6D4FA3ED0C178F739F7347DCD47E54C178EE7F2
SHA-256:	FAF6D5EBD065FAD2C78FCDEB28AE7823FC996F21FFDE7BC9A5A415EA4191567F
SHA-512:	61567633F2326F02877DEBB5E2F772E635A8FDC57212B84BB51B7177A104CC6CF37FCF15CAC969D88E992997DB8E1AAC887FBD1231A7418F3358C4D2B640AC73
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/cache/min/1/wp-content/uploads/hm_custom_css_js/custom-fbb9c72e087199ef0302a0e006af0db2.js
Preview:	jQuery(document).ready(function($){var container2=jQuery('body,html');var query=window.location.search.substring(1);var myHeader=$("#header");var fieldTarget=jQuery(".your-name input");var thisLogo=jQuery("#logo");var mapOverlay=jQuery(".mapoverlay");var backToTop=jQuery(".back-to-top");var currentYear=function(){var d=new Date();var n=d.getFullYear();document.querySelector(".copyright-text").innerHTML='. Copyright '+n+' Fortis Site Inspections'}.currentYear();$(".fade-this-now").addClass("scale-up");mapOverlay.on("click",function(){jQuery(this).addClass("removeoverlay")});if(jQuery(window).height()!==jQuery(document).height()){jQuery(window).on('scroll',function(){var scrollWin=jQuery(this).scrollTop();if(scrollWin>275){backToTop.addClass("show-top")}else{backToTop.removeClass("show-top")}})}else{backToTop.addClass("show-top")}.if(jQuery(window).height()!==jQuery(document).height()){var elementExists=document.querySelector(".cp-container");var element5Exists=document.querySelector(".

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7288), with no line terminators
Category:	downloaded
Size (bytes):	7288
Entropy (8bit):	4.7235383429799125
Encrypted:	false
SSDEEP:	192:d6Odf1Jbn6jAUNd1XQGTbF1KNvPjjpqwgFdZDxl1ekg2E8:d6Odf1JbngbL1X7nD9J
MD5:	DD1AB0F6FC9AADB5B9B5394CF2BC9C14
SHA1:	FC18B9587B7B2D0628613139354CAEB2D75D4B73
SHA-256:	2E84EB055418B1D5B659BBC2E6022FE0AE37548287E6717E80CC13A2251E5ABF
SHA-512:	A8976B1E2DE7BF941632DBEDE368962C9D0672B1B13E5CAF29F13729FC9DCF29044DAB2514E59C43AACA7C478ED58C70DF0F7F0250D043F4BF130BC061D70EFC
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/plugins/gravityforms/css/browsers.min.css?ver=2.3.4
Preview:	.gform_wrapper.gf_browser_chrome .left_label #recaptcha_area #recaptcha_table,.gform_wrapper.gf_browser_chrome .right_label #recaptcha_area #recaptcha_table,.gform_wrapper.gf_browser_safari .left_label #recaptcha_area #recaptcha_table,.gform_wrapper.gf_browser_safari .right_label #recaptcha_area #recaptcha_table{margin-left:32%}.gform_wrapper.gf_browser_chrome select[multiple=multiple],.gform_wrapper.gf_browser_safari select[multiple=multiple]{height:auto!important}.entry .gform_wrapper.gf_browser_safari ul li:after,.entry .gform_wrapper.gf_browser_safari ul li:before{content:""}.entry .gform_wrapper.gf_browser_chrome ul li:after,.entry .gform_wrapper.gf_browser_chrome ul li:before,.entry .gform_wrapper.gf_browser_gecko ul li:after,.entry .gform_wrapper.gf_browser_gecko ul li:before,.entry .gform_wrapper.gf_browser_ie ul li:after,.entry .gform_wrapper.gf_browser_ie ul li:before,.entry .gform_wrapper.gf_browser_iphone ul li:after,.entry .gform_wrapper.gf_browser_iphone ul li:before,.ent

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13479)
Category:	downloaded
Size (bytes):	13577
Entropy (8bit):	5.272065782731947
Encrypted:	false
SSDEEP:	192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp
MD5:	9FFEB32E2D9EFBF8F70CAABDED242267
SHA1:	3AD0C10E501AC2A9BFA18F9CD7E700219B378738
SHA-256:	5274F11E6FB32AE0CF2DFB9F8043272865C397A7C4223B4CFA7D50EA52FBDE89
SHA-512:	8D6BE545508A1C38278B8AD780C3758AE48A25E4E12EEE443375AA56031D9B356F8C90F22D4F251140FA3F65603AF40523165E33CAE2E2D62FC78EC106E3D731
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Preview:	/! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],a=1;a<=3;a++){if(+o[a]<+n[a])return 1;if(+n[a]<+o[a])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.4.1";var t=Object.create(null);s.migrateDisablePatches=function(){for(var e=0;e<arguments.length;e++)t[arguments[e]]=!0},s.migrateEnablePatches=function(){for(var e=0;e<arguments.length;e++)delete t[arguments[e]]},s.migrateIsPatchEnabled=function(e){return!t[e]},n.console&&n.console.log&&(s&&e("3.0.0")&&!e("5.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.x-4.x REQUIRED"),s.migrateWarnings

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87553
Entropy (8bit):	5.262620498676155
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO
MD5:	826EB77E86B02AB7724FE3D0141FF87C
SHA1:	79CD3587D565AFE290076A8D36C31C305A573D18
SHA-256:	CB6F2D32C49D1C2B25E9FFC9AAAFA3F83075346C01BCD4AE6EB187392A4292CF
SHA-512:	FC79FDB76763025DC39FAC045A215FF155EF2F492A0E9640079D6F089FA6218AF2B3AB7C6EAF636827DEE9294E6939A95AB24554E870C976679C25567AD6374C
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	20522
Entropy (8bit):	7.971389394467841
Encrypted:	false
SSDEEP:	384:gwB1BQXE+7mdSL3b4tPi+E4ULbcm2bF6NC4coQ49j06oPcnQCFhHX:1LBW7mADaP+DwbFIC8D9j0inF
MD5:	06D0CF446041B4F3D8965EF97798B7D7
SHA1:	2283734132FAACA1EB41232F4E38A3F8C5112F42
SHA-256:	1D7E0A350801878487097478EBF10D9AC518CBE098340717B04724C9850EAAA8
SHA-512:	95A1D7598080059800A7AC5921F61F9FF0269A4571AEBAB364D82571AD5CE1411FAEA6DECA9FA1216DB5D9ACBA9293A3E09D088624344B2904E12E81C3FC2B57
Malicious:	false
Reputation:	low
Preview:	RIFF"P..WEBPVP8X.... .........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6VP8 4N...4.......>m0.F."..&......c.@.X2.....bQ..>My......._...=Cy..]...s~..W.g...._...?./.........P.o..3..~C.W..M?f<........?.p....~.z....'..'......o.S...?....._..'..=.]..+.b5...?..6V....Ig.......<.q...2$y....JOP.Z....^.....(K.N....A....y.R...s..T,..Q'IW..H...(..)O.....R...u.H.{g..$..EWuhXn^eX.: .!E..<.W...f......kF.Y.......R..-.4...+.....MoZ~..{nl...Z..!.r.....\q....3.s.&......J.at.)...H-]sm..$..1tO.i.....Y...$+W..z...#..Nt.P..u."...\|n+.G<I..:...\..P..B.&l.eA\|3..v!......+..x..BE

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 479 x 320, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	144807
Entropy (8bit):	7.996156321584729
Encrypted:	true
SSDEEP:	3072:jdIBsn4llrzWtdV+/GeuOxBH93OiqSSlOkpoTfLTCO3VRkT:OVz/GWBH93OiGaTjTC8sT
MD5:	E666D7A26E083A0412154D83AC7B16B0
SHA1:	F050C30E8C32456B36EE56303D4AA505210F21DE
SHA-256:	CDE0782AF403B2E381ED928176FF4042C073AB4B17FE1D78D92BA88311553D66
SHA-512:	DFCDC6CA769C7B572A29EF6DCDFD84771C2C349B8D872E68B89FB6A1796B10D349BFC7E0265522F738B98B52FF3CC4F7B424E8C06E7EC6AA0AB92B4A5D3FDCCE
Malicious:	false
Reputation:	low
URL:	https://d3j0t7vrtr92dk.cloudfront.net/rmshg/1576789110_slipstripsfallsmall.png
Preview:	.PNG........IHDR.......@.....rR... .IDATx...K.,Yv...>.y?.WU]......dS....h..%.0,x.G.x...'.............X..."$..!..E..I.l.#~....Y........<8...{.$ge..q.\|..{.}.9AI..H"Y......s...)..S..A.V..@P.@J.DB..........u$j}.!.........T...l*.T.#.P.....&@...C=.D..H...Z9...hj.....Tjm....j..l......~.@8"@ ..8..m&[....f..N.....Q[1j...20A!.H.E.$..vc@....Po.h... .E........o.._.L.f......._./...B.......1...f....9.7ZK...$B.8~$.Hv...J.)...$!.....i..6..C. @0..\|!.%.vdk9$. .<[...6.._!...p.mu....('.D...d.2UE.M...8..P..."I.E.T....('.!.b...)..v..]P[Om......gUW...Z..!]......9SZ............e..........)...<....j.O.p.........../..V...G...1\..2.k.b.W...1P@I....1?'...9.<S....gk..}.r.....$........~.s@!....$...i&..1..8..7B...`B..UPA..lFg3B.:..C.7.S..j..<.jl.b...Z...&...2+MdRd.0]@.[.Dd...`.84.Z+..Z.....'7....?..O.i.(v)!.....3{....,}6..2..".l.p...r..l....i..'..(......h.F.i....8,.VKn:...L......^.N3E..Fc.g.L.6.U..m$...2.lTq3.COu.W.8......G9..;....p.,J.fF.#.....A..i...U.J....a

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	64
Entropy (8bit):	4.4817559710789405
Encrypted:	false
SSDEEP:	3:InnyCnSAknSHinPHcU9unSHyY:W42IHccunSr
MD5:	338002C2AC66024E0C4ECD1141D05F55
SHA1:	FEDE43258C7BE500E507C4BCA8740B62966AB2BB
SHA-256:	BC09304E3C52B6C44521C0D0F5700027DD20FB899B56308EF647BB4A3A9219B9
SHA-512:	A9BB2CC3CB768F98A284AC9278FF667DCAD440B266F79D0C13440526BEA8203E953295784EA766AE05BA2727CC6E25DC50170DCDE3FD86511555E3243F3FEFF6
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSLAkZOdwe4bcXhhIFDadKT6sSBQ0OeUGrEgUNqHok7BIFDbb2qc4SBQ2L5Xmf?alt=proto
Preview:	Ci0KBw2nSk+rGgAKBw0OeUGrGgAKBw2oeiTsGgAKBw229qnOGgAKBw2L5XmfGgA=

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1071)
Category:	downloaded
Size (bytes):	9170
Entropy (8bit):	5.176570904077199
Encrypted:	false
SSDEEP:	96:LkgXX6X4w8d+avLmrbpn1Suu/nA+w1rdNYa8BWVxKMV0kqo6KT6jNUDoKW5Rfkgk:LkgXX6X4w8d+a0UkqIV1qDeU2
MD5:	2E33CEEFBB78E2483ED888785C8C870E
SHA1:	C178A377AC2550F11CFE7455E5E7114803E03142
SHA-256:	A98E42B2D4AB1AE36F3B270A0DFF6AD2F158100833978FF0A549674A2543E78A
SHA-512:	A9BC525D0F234DE510206BF0A50A3903A05CC00289202F4FDC0EDC762504F4CF53AF731F34D2C3DE476C6009B91526A49D62737CCBBF67BDBDAA816C53A264A5
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=7.18.0
Preview:	;var MonsterInsights=function(){var e=[],a='',o=!1;this.setLastClicked=function(t,n,i){t=typeof t!=='undefined'?t:[];n=typeof n!=='undefined'?n:[];i=typeof i!=='undefined'?i:!1;e.valuesArray=t;e.fieldsArray=n};this.getLastClicked=function(){return e};this.setInternalAsOutboundCategory=function(e){a=e};this.getInternalAsOutboundCategory=function(){return a};this.sendEvent=function(e,n,i){t(e,n,i,[])};function u(){if(window.monsterinsights_debug_mode){return!0}.else{return!1}};function t(t,n,a,r){t=typeof t!=='undefined'?t:'event';n=typeof n!=='undefined'?n:'';r=typeof r!=='undefined'?r:[];a=typeof a!=='undefined'?a:{};__gtagTracker(t,n,a);e.valuesArray=r;e.fieldsArray=a;e.fieldsArray.event_action=n;e.tracked=!0;i('Tracked: '+r.type);i(e)};function n(t){t=typeof t!=='undefined'?t:[];e.valuesArray=t;e.fieldsArray=[];e.tracked=!1;i('Not Tracked: '+t.exit);i(e)};function i(e){if(u()){console.dir(e)}};function l(e){return e.replace(/^\s+\|\s+$/gm,'')};function c(){var n=0,e=document.domain,i=

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	198018
Entropy (8bit):	7.998498624595806
Encrypted:	true
SSDEEP:	6144:bQBt/ppKwP9kuy3KpvYQV3vZTQ/5C/wz0dN+3dIXZLR:sh7kjK2QfwToOtG
MD5:	73B43C8E33C2514F5A8FE6093D47BD1F
SHA1:	5729106769FE527C30D7D073D984710D109B36DA
SHA-256:	9D427DE7C003EFE53B3F71A3090E486E265899831902E61161562FC25B7532A4
SHA-512:	FBB7B81DEEFD67B1DE81703BDBBA277296B7AA3D944D2A5C51D4A8087E4A0DDACB5474267882D3B965793E4DE3B7844552FC1496F3AB37A890CAF7E43EB290E9
Malicious:	false
Reputation:	low
URL:	https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/home-banner-two.webp
Preview:	RIFFz...WEBPVP8X.... .........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6VP8 .....5...*....>m0.H."..$..b@..cns `.1........zH.Z.....s.o.)..n.....3..._....0s_...U...7..............G..\|..............G................x....._....Vh....e.W........C./.>?.;..........kz..W.....~i.......'...?.......?j=....3.....7.O..........u}..o.......s...O.....?............o...............;.{..._.............T.3..../....o.x.c.sI..........e.....n.x.~....#.?n?...s...l...9.M.y.?.?..G...O...=....#...................?..;~.}e.....?........63.0....w..8...-g..?.<...b.h..9....~.._...!...F!S..

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4610)
Category:	downloaded
Size (bytes):	4639
Entropy (8bit):	5.201091262542577
Encrypted:	false
SSDEEP:	96:J0nkQGgI/0l+Z6t8wRQs90sS29rKklRR7wW05W0Y/G:G3ZsDwkHAlRVwZ4u
MD5:	A39E45502BAB7E9E26723E6AB243E8F8
SHA1:	AC62AACD5EE3E7B64CE6A92B5D8E3FB523E34D16
SHA-256:	D62A7B7EC5313469EBFF5C006B9068DC44D6D1C122CF787FFA29A10113B34060
SHA-512:	79CDE67B82BCDD7EF5FD09298A967E7F6EC1A5A82F7211B822C2926513290F2FE564D9F70D814AD3918998B2A637CCF0A03670114D3EA8E3B4A0108CF9ECAE7F
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/plugins/gravityforms/js/placeholders.jquery.min.js?ver=2.3.4
Preview:	/* Placeholders.js v3.0.2 */.(function(t){"use strict";function e(t,e,r){return t.addEventListener?t.addEventListener(e,r,!1):t.attachEvent?t.attachEvent("on"+e,r):void 0}function r(t,e){var r,n;for(r=0,n=t.length;n>r;r++)if(t[r]===e)return!0;return!1}function n(t,e){var r;t.createTextRange?(r=t.createTextRange(),r.move("character",e),r.select()):t.selectionStart&&(t.focus(),t.setSelectionRange(e,e))}function a(t,e){try{return t.type=e,!0}catch(r){return!1}}t.Placeholders={Utils:{addEventListener:e,inArray:r,moveCaret:n,changeType:a}}})(this),function(t){"use strict";function e(){}function r(){try{return document.activeElement}catch(t){}}function n(t,e){var r,n,a=!!e&&t.value!==e,u=t.value===t.getAttribute(V);return(a\|\|u)&&"true"===t.getAttribute(P)?(t.removeAttribute(P),t.value=t.value.replace(t.getAttribute(V),""),t.className=t.className.replace(R,""),n=t.getAttribute(z),parseInt(n,10)>=0&&(t.setAttribute("maxLength",n),t.removeAttribute(z)),r=t.getAttribute(D),r&&(t.type=r),!0):!1}f

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 320, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	153332
Entropy (8bit):	7.989238504997115
Encrypted:	false
SSDEEP:	3072:xvm06kEIK52CufuDGXjcuQ69TcI3kkWBxk0/jKX2YvwMIeTA4MKPzTB8wF:MzECufPjcucGWUl2kieTDPzd86
MD5:	361227C756AE1A1B5C10B198A1C13949
SHA1:	F15B6C2CB0827C8C5B332C4E99F8830CF27673C4
SHA-256:	5B4EE37AC1FFA8BF0B7F508989CAF1FCE2CBFA3A1AA4C794D626593A4CE7D3E2
SHA-512:	FC4902AAFF5E327004DE58A3C4F48E819D53CF5F164D7C5433051D01CEBAFC560C0C75C02D803990F719443049811613E36B99BB9C0B8807005785BCCE49A02F
Malicious:	false
Reputation:	low
URL:	https://d3j0t7vrtr92dk.cloudfront.net/amplifiedhr/1563764025_absencessmall.png
Preview:	.PNG........IHDR.......@......8,.. .IDATx....%Iv.vND..^..~.wvf........AC"l..l.. .lP....0...b....Y.@X.lB.aA....Er......L.L..........}.+..Cd.=..y.zv...'+of.....'"........D..&".@D"B...".... ..B b.Ey./.K"..Pk..B.0........R.,K"25X.l..y^....}.6..)N..k.,...T......RB[i%..$R.q.B...i.>....r...9sLAD..i@$.rN.....T...(..y...F.A..!....9oiv......a.M....b.a..Y.)..(.R..%...6].@H.9.!t_p.aDT..u.+.MS.....EQ(.0.Q..Y...:.".%.?..R..Q..".gLmZ..e.....^.!..VEA....?.."R@B.)B!..""$.z.:Sa..EQ....;e_.?......P.B.QI.TP.....RZ..gd.bD`..,..vKfG.....[.J...ze.0:....,. ..8..\J).Y.Ok D....<c..P.88....fh.{.....n[..?-kx.-.@Se.!..Nq.q^..r..`=....b."..z7;_..{......Ll0x..l....\..!.Q..8.2KM.,..RJs......./...'q...+.+.w4.!..._.#z.....<.........,k.Z..7^.PD..+.Q.d....3z.m.Es...._`...'....b}e.....[...."..8.m.@D.jc.m.....:...i4.T....k.(V.Z.j..k.......>...w$sL.......0....<..$9T..RFw.^.U,....\...K.U...oAU..0....9.\|..oq..2Z..Sk..>.3C........m.....r(wz..z..!...:..D.0s..'yC...0.<...(Z...

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31165)
Category:	downloaded
Size (bytes):	31327
Entropy (8bit):	4.753426914891799
Encrypted:	false
SSDEEP:	768:nrNPPGh7lr+Klk3Yi+fwYUf2l8yQ/e9vX:a7lrniSUf2l7f9vX
MD5:	1F8879641D9BF6ADC0D07FE2FC30B7DB
SHA1:	80A4C3A995F8E9E81A89E89D10F21B76DFF04879
SHA-256:	70B6BF5A0C9C29B727BB77C5855835012C808DC3BAA04B42050FA2205FC3BC00
SHA-512:	60BD4FCB82818F057BD51887ED6BF146718656A14C21BC5657D3BC5BF8A8F70A9B41284CC3898FF69D7C5197C510784779FACD73FD8BB5A5953B21B0A22F8A59
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/cache/min/1/font-awesome/4.7.0/css/font-awesome.min-f3c95ec7959d6de503c73e1f51f186af.css
Preview:	/!. Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-display:swap;font-family:'FontAwesome';src:url(https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/../fonts/fontawesome-webfont.eot?v=4.7.0);src:url('https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/../fonts/fontawesome-webfont.eot?#iefix&v=4.7.0') format('embedded-opentype'),url(https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/../fonts/fontawesome-webfont.woff2?v=4.7.0) format('woff2'),url(https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/../fonts/fontawesome-webfont.woff?v=4.7.0) format('woff'),url(https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/../fonts/fontawesome-webfont.ttf?v=4.7.0) format('truetype'),url('https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:400;font-style:normal}.fa{dis

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1822)
Category:	downloaded
Size (bytes):	194770
Entropy (8bit):	5.526053015586739
Encrypted:	false
SSDEEP:	3072:LFFn0/VPLu0h2fWk8HDth1FytS5Fx0Z6yjRAO5GbuwlY2BvwoC:JF6rgslGhZ6yjRV5cJvwL
MD5:	09D0DF73753D84F0CE523C424C47DA7E
SHA1:	AEBBC76C032CA9295E38C4BFFBBD5F332EFBD65F
SHA-256:	B6C4466AD02B57721BCE5AEE802B6F134A158D519DC1200750949D8B1B1B51AF
SHA-512:	7627D9D3636E550B2A11295DBA56FFF30C86C2E3F7E9C1160C15143FBD918D3D2B2934BB0AFEDC49646A01110DEEE9CC386F615DD4FD940C4C9306F661035C92
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-127514612-1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};...var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{do

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2504
Entropy (8bit):	4.731521354072405
Encrypted:	false
SSDEEP:	48:5XMIKAIT7he3JP27n+wLzsV8sGano95/ntcRSewN7qmPM76:ZMrNfI3Ju7n+asCsGano9xtbyml
MD5:	2D0356D97F4938AC44540F5068F82D38
SHA1:	3B85A22F98AED42C18656832C03D7CA9BA0F4AB9
SHA-256:	4164CF6D797FF2DD4CE58A72836256F1E4F04D731E425A4921619D8992262251
SHA-512:	67E783D6DE6823397D7772C1CB841281BFFC2F2358A2A4C067B352D12F236E57180080D034E41626D984155F0C392B3B86AFB5813A5F4087FBC171C4DDB15015
Malicious:	false
Reputation:	low
URL:	https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/js/recent-blog-post.js?v=014420240744232137143
Preview:	....//call this function after page load..$(window).on('load', function () {.. loadrecentBlogPost(3);..});....function convertDate(dateTime) {.... var monthNames = ["Jan", "Feb", "Mar", "Apr", "May", "Jun", "Jul", "Aug", "Sep", "Oct", "Nov", "Dec"];.... try {.. var dt = new Date(dateTime);.. var day = dt.getDate(),.. month = dt.getMonth(),.. year = dt.getFullYear(),.. hours = dt.getHours(),.. minutes = dt.getMinutes(),.. seconds = dt.getSeconds();.. return (monthNames[month] + " " + day + ', ' + year);.. }.. catch (e) {.. return "";.. }..}....//this function will take of calling the API..function loadrecentBlogPost(numberOfPost) {.. $.ajax({.. type: 'GET',.. url: '/blog/latest-post?numberOfPost=' + numberOfPost,.. data: '',.. success: function (data) {.. if (data.success) {.... var postHtml = '';.. var posts = data.posts \|\| [];.. if (posts && posts.length > 0) {.. for (var i = 0; i < posts.length

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	202951
Entropy (8bit):	5.114525516803774
Encrypted:	false
SSDEEP:	1536:EicO5m20r064ywa4a4jNXHqehQTdYRvHCpYJMiw/U:njm20r064P3RvHUJU
MD5:	0A437D0E65C9A9ED72AE0CC8AAC8DC89
SHA1:	A708D0B0A100D44F2B3BD7F7AFD531C41B7C64C8
SHA-256:	3E87616758483324624E88F8FC0DE1DB5CC02F35F1EE18AE8F6F68C1A79D6ADE
SHA-512:	599F59D6BE8501DB0B4BF1071340B036A3268099B602698C0AD442CF1A7764DF7C1B29F190108BF384B9DC12FE5DA3EB34F60A3F13054878051C86E75444C4B2
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/themes/fortuna/style.css
Preview:	html,body,div,span,applet,object,iframe,h1,h2,h3,h4,h5,h6,p,blockquote,pre,a,abbr,acronym,address,big,cite,code,del,dfn,em,img,ins,kbd,q,s,samp,small,strike,strong,sub,sup,tt,var,b,u,i,center,dl,dt,dd,ol,ul,li,fieldset,form,label,legend,table,caption,tbody,tfoot,thead,tr,th,td,article,aside,canvas,details,embed,figure,figcaption,footer,header,hgroup,menu,nav,output,ruby,section,summary,time,mark,audio,video{border:0;font-size:100%;font:inherit;vertical-align:baseline;margin:0;padding:0}article,aside,details,figcaption,figure,footer,header,hgroup,menu,nav,section{display:block}body{line-height:1}blockquote,q{quotes:none}blockquote:before,blockquote:after,q:before,q:after{content:none}table{border-collapse:collapse;border-spacing:0},:before,*:after{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}body{font:16px/1.7em 'Lato',arial,sans-serif;color:#444;-webkit-font-smoothing:antialiased;-webkit-text-size-adjust:100%;font-weight:400;background:#fff}h1,h2,h3,

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	3564
Entropy (8bit):	7.646428607254614
Encrypted:	false
SSDEEP:	96:bElbw+iXTkpJup/4L1L/loBQwqVjUTsCuq/6zrnp:mwTTkpJupAL1/kfejUTsCuqep
MD5:	C4DADB2B03470FD947FADCAC2A6981FF
SHA1:	A1198568740DD381B9D877CFA6EFAE7CE3A51DA3
SHA-256:	FF72523FF32288FC56A8E8B5EED51B17E245C1BF3B1D68D0F52A5FFB30188660
SHA-512:	4912EB00802D0D09409D9545E673BC632A5C990B614D13191B01D8B55DF20296CC5F7FF80998D4A366464E1A3410BBAE348F94C51289E77C9CE334032FF2A835
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X....0......\..ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH.......m{\Y.o....(u....!.kF{.N.A..^..C8b....ZU$.............$Im..l_X.....\|.......O......~......y....7.....D.K.,?1....>...m......j.lK..`_....pF...m...E.;f..u.....2..k.z.......[.o.....U.?.-C37....`.....~..v......8..='hB.a$....3.k.O..'.z...C(..Q...$..RF..,.%.i..Tt..!..d..'.Z.ST..Hca....9..vn..%....;...7q'.....=AG.v.:..{.........K.f..Q5[s...0+L..oq.'+#.d.}...f`J.........E.......<T.p.Nx.....8..T....1nkcI.....'..YQ........ut..........~...!>...,....L....%....U..^..`.%I..\.*..C.S..c.

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2174
Entropy (8bit):	4.934902304657191
Encrypted:	false
SSDEEP:	48:YxOt50ix5P50ixP50izP50ipP50iGP50imP50iOP50iTP50i0Oey:Z5v3P5vxP5vzP5vpP5vGP5vmP5vOP5vT
MD5:	38B097981CF35A7EFEA55346C519B6CA
SHA1:	B945F6AF5C129502C3E1AFD4D8910CBDB447BE2B
SHA-256:	E33F8FA309639A3DBE867D800E2043C6A3D290B8BB2C50D5AFC2E9FE49C9BF08
SHA-512:	EF91E399D06850960A451F2C9463B92E6F6C9F0F11249ECF22BD46927BCA36B86E058298B14F73F0A168CF1EB4163D8C3BB0ED0D46D352636832B1750250A5B7
Malicious:	false
Reputation:	low
URL:	https://cdn77.api.userway.org/api/img-dscr/v2/D0JSP1avgg/3527403/RLqwMG7OTpTSzPtD/alts.json?dto=%7B%22sorted%22%3A%5B%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fabout-thumb.webp%22%2C%22alt%22%3A%22RMS%20Hospitality%20Group%20Let%20Us%20Take%20Risk%20off%20Your%20Table%22%2C%22dir%22%3A%22RO%22%7D%2C%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fgoogle-review.webp%22%2C%22alt%22%3A%22Leave%20a%20review%20on%20Google%22%2C%22dir%22%3A%22RO%22%7D%2C%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fistock-1350660376.jpg%22%2C%22alt%22%3A%22How%20Can%20Pubs%20Improve%20Safety%3F%20A%20Primer%20for%20Insurance%20Professionals%22%2C%22dir%22%3A%22RO%22%7D%2C%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fistock-182417552.jpg%22%2C%22alt%22%3A%22The%20Growing%20Problem%20of%20Alcohol-Related%20Incidents%20in%20Music%20Venues%22%2C%22dir%22%3A%22RO%22%7D%2C%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fistock-597639502.jpg%22%2C%22alt%22%3A%22Top%205%20Safety%20Tips%20for%20Entertaining%20at%20a%20Comedy%20Club%22%2C%22dir%22%3A%22RO%22%7D%2C%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Flogo-white.webp%22%2C%22alt%22%3A%22RMS%20Hospitality%20Group%22%2C%22dir%22%3A%22RO%22%7D%2C%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fservice-1.webp%22%2C%22alt%22%3A%22Specialty%20Programs%22%2C%22dir%22%3A%22RO%22%7D%2C%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fservice-2.webp%22%2C%22alt%22%3A%22Insurance%20Coverages%22%2C%22dir%22%3A%22RO%22%7D%2C%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fservice-3.webp%22%2C%22alt%22%3A%22Work%20With%20RMS%22%2C%22dir%22%3A%22RO%22%7D%5D%2C%22tier%22%3A%22FREE_QUOTA_TIER%22%7D
Preview:	{"payload":{"missingAlts":[{"src":"https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/about-thumb.webp","alt":null,"approved":false,"decorative":false,"metadata":{"skippedForReadOnly":true,"foundCachedResponse":true}},{"src":"https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/google-review.webp","alt":null,"approved":false,"decorative":false,"metadata":{"skippedForReadOnly":true,"foundCachedResponse":true}},{"src":"https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/istock-1350660376.jpg","alt":null,"approved":false,"decorative":false,"metadata":{"skippedForReadOnly":true,"foundCachedResponse":true}},{"src":"https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/istock-182417552.jpg","alt":null,"approved":false,"decorative":false,"metadata":{"skippedForReadOnly":true,"foundCachedResponse":true}},{"src":"https://cdn.strato

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65446), with CRLF line terminators
Category:	downloaded
Size (bytes):	87464
Entropy (8bit):	5.262413292226406
Encrypted:	false
SSDEEP:	1536:6KRUXRa8Dgwxcy2jpBNwch96SLk8Ek2BSrBGS1ia/eEk4aV2EXi8SMpQ47GKc:6u1zNwcv9qBy1HOg8SMpQ47GKc
MD5:	6DC493EC57A3D5E3CB254C8BB8F4AE8C
SHA1:	2D16D2E09692C493CDF3403912BA0219BE463AC6
SHA-256:	646BE94D8C530951D009C8553231592B098E8708DA86FBF13019CDE550148742
SHA-512:	DDC1D7B178DA4F86DF8925851549895A2CEBDE0AF3EBE0E5DC683AA8B0F7EC56EAF91827B57F40C7F9BFF857C07E9A32F92EBC7F12155142D77D19DE82280F62
Malicious:	false
Reputation:	low
URL:	https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/js/jquery-3.7.0.min.js?v=081420231114354913937
Preview:	/! jQuery v3.7.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remov

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	9229
Entropy (8bit):	4.911205335435291
Encrypted:	false
SSDEEP:	96:PLjUXtpnkqjC8/OaVwFTu13ySvzPvqQLpM+l2o05vZU05v49+wFG4zBMQ0bVRCOz:zg/hmtaid+qHM+z4lWCSRX
MD5:	B241B8AB7949CD163198B5FEF88B2018
SHA1:	4A2FEFA9A9CF94CE0EBF205A9501F9921B3FDFF4
SHA-256:	FD6B76081B2484F6F0C021CF5BA7AB7DDCDFA0BD9157010A93368F9A12310DCB
SHA-512:	8BBFEB62239469BFEA1D45506AA1053D598EE5F22837114AD6C6D7E1419A4D3B6D0D847A5D8FF59EC8EEA2E172A2ED219F2ED44DFA2133D3A77B013DA89FE746
Malicious:	false
Reputation:	low
URL:	https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/css/home.css?v=015820240858469386724
Preview:	.home-slider {.. position: relative;..}...home-slider .carousel-item {.. background-repeat: no-repeat;.. background-size: cover;.. background-position: center center;..}...home-slider .mobile-banner {.. background-repeat: no-repeat;.. background-size: 0;.. background-position: center center;..}...home-slider .carousel-caption {.. position: relative;.. bottom: auto;.. top: auto;.. left: 0;.. margin: 230px 0 290px;.. z-index: 1;..}...home-slider .carousel-caption .banner-details {.. background-color: rgba(255, 255, 255, 0.8);.. text-align: center;.. padding: 50px 40px;.. border-radius: 6px;..}...home-slider .carousel-caption .banner-details .banner-heading {.. font-size: 4.5rem;.. line-height: 5rem;.. font-weight: 700;.. color: #212763;.. position: relative;.. text-transform: uppercase;.. animation-name: fadeInUp;..}...home-slider .carousel-caption .banner-details .banner-heading i {.. font-size: 3.2rem;.. line-height: 4.2rem;.. font-style: normal;.. font-weig

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 220 x 38, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1535
Entropy (8bit):	7.794603863396421
Encrypted:	false
SSDEEP:	24:rm6eo2jLsXL4DXRqgbIdT55bvy+WNkMlp6rFQqshVQf/iFHLe/iCfX0AqhxowQaS:GohL4bMmIdrbvy+kDQ8HLKiAixxlkRX
MD5:	3209420447128E1788B9EBECBAC83944
SHA1:	1DDEE56473F8C80A214E780CD927025AA7DB9CD7
SHA-256:	E99C8540A1B562EF0A88A66FCCCD9DAF23AC8C81B98AE2C65435E0E7F00211CC
SHA-512:	B353BA9B79A658C228B9FB2F5C24587F50A671AD3B00AEAC9D7B46AF46EACD8C3578FAD548D9B4662A94E1AB8C66E47DD0D85018AE77B2ECF86B79FE0E47CFA2
Malicious:	false
Reputation:	low
URL:	https://fortissite.wpengine.com/wp-content/uploads/2017/12/logo-220x38.png
Preview:	.PNG........IHDR.......&.............PLTEGpLUUU...... ../..&&&......aaa...===......D..111O..MMM......#..k..,++999AAAIII[[[v..666:.....]]]@..L..Y..d..r..]]]q..r..v..eeeiii~..{...........(tRNS....K\]...v.r6.~...&T.j......y?.......[..]....IDATh..Xiw.:...&.1e_...........H..6.i?....x......Z.!..<.[...r....MU..u)....r..........6..k!.\|..m..\|.......;#.L..$9g.m..r.(.M..b......d.^./....t)3.".Fn...y2..r.....&...<k.>.....9H`.Z[u...zg.{ w..#......%..O?[jdVC.b....D.C.j...j..N'.r;..W..g..r....\|./..&.k.i..r2D}.....{.yc.W...W#D.O../.m.8....7r^>....u..p"s.{.#G..j.e..mg..<......).......r/.^..,.....\|.,..g.W..8.'.:??.JnWo.s.4o_2.N..9..-.o.5..r....!.......Y+.M.....?y.#..\|...~h?...\.x`.W.?.oz.o.5....Fe.m....&.3PM........e.6(].~..e.. )...'..w...i.....a.M.T..../\...@..D..A.]o#.b..1!..~?..(..J..9.e.0.^&.2.R1...........e.....r.T...r.c.-2R..lJ..x..eAR~:.z).D ..t.Ub.}AS. .w..%Cl1.R.xt(<...%...)k.K.....O.9q....g.vY..&..:68...,N...............C("..9./n...0`.../a....

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (884)
Category:	downloaded
Size (bytes):	5013
Entropy (8bit):	5.205784334922848
Encrypted:	false
SSDEEP:	96:FAIiRQqxplSGfQWYj9nRQqvCrSGf5Y4HgxJWlfKyYqPlPS5IGY4H9ElSrgY4HgJn:FAP2qXsed052qXe1kEZla5BxIW
MD5:	D9921E93CE0B7E9FDCF08D75810E724B
SHA1:	0E68DE1695DD2F06D05A8D61CCE76DA5B164E148
SHA-256:	7B39BAAF1CF39FC2A06B5BB179165F19767DF38A28464C1C9E710703C969CCE0
SHA-512:	DDC17DAEDC59837ED95BB754CA235D1DE1402348D5C2DD07B5DAEAE8398B12D290BC4CD1DA9B13F4124518E4E7B0B564172D1CBCCA6006B4E9E7C1D9E8F29554
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/cache/min/1/wp-content/plugins/parallax_video_backgrounds_vc/assets/js/jquery.vhparallax-bfc9ef7c09a950ff0c31faba03ea8408.js
Preview:	(function($){var $window=jQuery(window);var windowHeight=$window.height();$window.resize(function(){windowHeight=$window.height()});jQuery.fn.vparallax=function(xpos,speedFactor,outerHeight){var $this=jQuery(this);var getHeight;var firstTop;var paddingTop=0;if(outerHeight){getHeight=function(jqo){return jqo.outerHeight(!0)}}else{getHeight=function(jqo){return jqo.height()}}.if(arguments.length<1\|\|xpos===null)xpos="50%";if(arguments.length<2\|\|speedFactor===null)speedFactor=0.5;if(arguments.length<3\|\|outerHeight===null)outerHeight=!0;function update(){var pos=$window.scrollTop();$this.each(function(){firstTop=jQuery(this).offset().top;var $element=jQuery(this);var top=$element.offset().top;var height=getHeight($element);if(top+height<pos\|\|top>pos+windowHeight){return}.var f=Math.round((firstTop-pos)*speedFactor);f=-f;if(jQuery(this).parent().hasClass('vcpb-mlvp-jquery')).var is_img_parallax_disable_on_mobile=jQuery(this).parent().parent().data('img-parallax-mobile-disable').toString();el

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4847)
Category:	downloaded
Size (bytes):	7278
Entropy (8bit):	5.318461601061191
Encrypted:	false
SSDEEP:	96:60fJjdjLyi5jrKHz78fSrDUF8B4Jv91YZP2WpsbG091cpBuELd8dPDY+hGw4fQS7:Nbiy+UF8SEZP2P+xdIDYMGwkHn7
MD5:	99D24320FB630EFB46B25522BE2B0009
SHA1:	6804717111BC9F2CA19E5247D1A350AF6E205DD2
SHA-256:	7BC9E99C82B8348396D759A99E8220B479C06FAB3A91FD1065D812D27BB73D5A
SHA-512:	70A8929A0F30C5F747A5A3624B6277E94C7E6431C78D62856134AC2B7CEDD0CE3CFCFF5D5D258617ED44730F8D715995F73D17EB1677CE55019412C75D97D3A9
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/cache/min/1/wp-content/plugins/parallax_video_backgrounds_vc/assets/js/jparallax-7d021341b99ed81aaf7377dd90a3097a.js
Preview:	var resiz=function(){jQuery('.vcpb-fs-jquery').each(function(){var selector=jQuery(this);var sense=selector.data('parallax_sense');var incr=(selector.outerWidth()*(sense/100));var hp=jQuery(selector).find('.ultimate_h_parallax');if(hp.parent().outerHeight()>hp.outerHeight()){hp.css('min-height',(hp.parent().outerHeight())+incr+'px')}.if(hp.outerHeight()>hp.outerWidth()){hp.css('width','auto')}.jQuery(selector).css('background-image','')})}.jQuery(document).ready(function(){jQuery('.upb_row_bg').each(function(index,urow){var row=jQuery(urow).parent();row[0].style.setProperty('background-image','none','important')});setTimeout(function(){if(jQuery('.vcpb-fs-jquery').length>0){if(!jQuery.event.special.frame){(function(d,h){function i(a,b){function e(){f.frameCount++;a.call(f)}var f=this,g;this.frameDuration=b\|\|25;this.frameCount=-1;this.start=function(){e();g=setInterval(e,this.frameDuration)};this.stop=function(){clearInterval(g);g=null}}function j(){var a=d.event.special.frame.handler,b

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 178 x 72, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	9838
Entropy (8bit):	7.962527425639502
Encrypted:	false
SSDEEP:	192:JKYGQfIZZ7tLS/LevCp0/Gp7PpgeQW0t2QCLrEXAUFpIjA/T3PuaZrL:AkIZZ7tChU87+W0arEXxpWyTPDZrL
MD5:	0EC5DFC44A443BC30123721FEFB83048
SHA1:	B81E121F87EBB94D6E2664FA0018F43B8234FB20
SHA-256:	A3C289CD18AAC85BA68FB04D49DBFCC491C9EFEC846C0CBCF2B5E7B6A9AB9C83
SHA-512:	36B10813CDDDD027AA307A82B115D995954C400B3287E87746D1859E4D7171FDBFEF70FA0C20554D843396C7D9E0036342C8DB4151D2E8CE04E499F6FBB18580
Malicious:	false
Reputation:	low
URL:	https://d3j0t7vrtr92dk.cloudfront.net/rmshg/1576085320_RMS%20Site%20Logo.png
Preview:	.PNG........IHDR.......H.....R..... .IDATx..}{\|.E...=3._!!..... !B`Q........(.7VVE.u...+.....z.T..Oea..E.;...]... @.B........TU..........]u.S.N.z.f.Q.!...!P....X.2.^3...?G.....Bu.O..yym........0.........`...u..."[y.e...&3.....7.\....<.e>.]y.....W.wV..=l...@xZ.t...B.Lv /..l&.....s....s..![.4..B.K.q.....O... ....6...].%Y.\..s$..N.D...[..(.^l_....f.p..8W.....O...7..=.U..BU..s.2....<...@W.Q..t.".....d.'.cf..k..(0...1j.`.qV66...'....,f..v..YS......u..sXY...:^..l......._[.e.nQ;......]TG.12.Y.2...L..."CD....k....Xf..eY^...Y.....M.d.zY{+.m%;.......8.MLEQ\|..4......V..lf...b...f...@H.c.rY.[..7...P.l..(...z{+..o.y....Q 8..O....HV.....[.d".y.y.mf..G.'...=./dP..E.2b...7.c..l;....?G..yA!....:W....,.y....c6(..Q..d...+.H.:Y...@?[.#[..<^.$.Mv^{.f.....b.....X.v......')55.7.p...v..k.&...Y..l.,.D...:. .......F.~Qp.:e."..Y?x>...........J..F....!.#G.....b3..f...............,.....f...<...Y...!.......)F...[.S..c...Y}......2...D.+P~Q.@.e.$[=d."....J2ha..G..P.!P.

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x332, components 3
Category:	dropped
Size (bytes):	125601
Entropy (8bit):	7.990152410743653
Encrypted:	true
SSDEEP:	3072:qspT0jVKHBHTGsJK17Ks6FS+gbxYDJXvYUzB9dxHK5+z9s8eWv:7TAeqsM1UgqDlvPB9dxHK8Bs4v
MD5:	95AD906242C9EF2B3DB9B57243AA8BC4
SHA1:	340B6313ECAA4052DE8E51442081BAAC05A22270
SHA-256:	D043373DAC78BF62103C9774D73B8595EB5E38619271919D89C336432A6533B8
SHA-512:	5DDE1C5F22B0084DEA97636449D21954E14D62A4F589F98A6E76B5E1C133F4D42D4339B14FE06B7D855843DDF64D530319E011AE3E6DC0CEA2B95BB358F09A30
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................L.........................................................................................O..w.>+rR.d.H0.>.4.....N_..P..y..$1..c..`.8.< ..0....n.?...ZM=3...A...},M3=b.Y)..m,..v>...~Lb.....J.3..q..........Q.].....%i.[>.._......%.z.`.uI........._...k...q..Z>'...:-.....I\l.......VJ.H~jw.;..;M.."f...,}...O....D..l........k`...............j.zg.].uy...P[..4..^4..g..gh....!kzM.....2.ER..;.,&A...Z.(j<...d.f..+.....8..l..ht.2>g..`Y..:...0.%u..../D..n.Hqd-..K.....%..8..v...<o.e2>y.`......F.......(.?.m/.k..2.......-.;...fz.a...x.y....5.....[..##.[a.`9....X..f..0`.........pw..P......Le..9:L..$g........w+1.....*....v.2..../YV.WW.5j6.XE.ey..=.....\|.[Bk.E.Y-DYJ....g..<.....P.H.-.+.\e.e.fM..2..6.Q..u..B./..?\?<..u7y...+..D..#:.K..h.....l".O.H...M...Z.:..G..ST.F...2)+..>...Wy3.h.X...z]

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 234 x 82, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4204
Entropy (8bit):	7.73095226341542
Encrypted:	false
SSDEEP:	48:VIANn2e3aFJ3pDLzWpDOoIv8T3YIJi4wUlX0yEhneIf6ukPoG6/uV+QQOdKGRAHF:Vx2Oa9DLzODOo0ei4wUN0NNyRtIQMGrk
MD5:	FFB636C77D19FC13C417DB76074D1BC8
SHA1:	CCDECD594553B85B11E25422CAEED1721E38D5A5
SHA-256:	E357C44E28A7C2C2CD4F0F24B7E74953CCF14ACF982E4F6DAA467F5B035D603E
SHA-512:	38C287DA61782BE59DE97E33529240B1B48DF7B062BAA7B20EDF2AAB008DC50C11A122E41150AE2F3BA4996E4D53F485E18EF6E6C3B45B5C5168DD0377770C2B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......R.....m.d...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Macintosh)" xmpMM:InstanceID="xmp.iid:CEAC96C42D2A11E8A805CAA02DBAC39C" xmpMM:DocumentID="xmp.did:CEAC96C52D2A11E8A805CAA02DBAC39C"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:CEAC96C22D2A11E8A805CAA02DBAC39C" stRef:documentID="xmp.did:CEAC96C32D2A11E8A805CAA02DBAC39C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>p..>....PLTEGpL........................................................................................................................................

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1197), with no line terminators
Category:	downloaded
Size (bytes):	1197
Entropy (8bit):	5.108388566572975
Encrypted:	false
SSDEEP:	24:1RVryVUc8IAEAWQRge+4UcGW+nXoXspqXgctX8hGX4Y7Z:1YUcrr8gN4UcGBY8YQEsMjZ
MD5:	F23BF516C935170F852DE8C0505829FC
SHA1:	C4BE426AC458792FECA2D7BF783A3CFFAF01EEE4
SHA-256:	FE6863C2EE725CD4B78A8282D80F657E7539242BD60294612DF5B6BD81EB0BB8
SHA-512:	01FE7993E0868E0B8184A18424703232C2859560A1C11E8781442A94BCC1E1C9CF9994290EAD9BB1654166F5F33DC81F395AF928D0089FB3F8467D0CC71438D0
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/cache/min/1/wp-content/themes/fortuna/stylesheets/grid-896199530817a6736ba181d5858c9463.css
Preview:	.container{width:1200px;margin:0 auto;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}.boxed_wrapper,.boxed_wrapper #header,.boxed_wrapper #footer{width:1260px}.boxed_wrapper .vc_row:not(.vc_inner){margin-left:-30px;margin-right:-30px;padding-left:30px;padding-right:30px}.section{clear:both;padding:0;margin:0}.section:before,.section:after{content:"";display:table}.section:after{clear:both}.section{zoom:1}.col{display:block;float:left;margin:0 0 30px 3%;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}.col:first-child{margin-left:0}.span_2_of_2{width:100%}.span_1_of_2{width:48.5%}.span_3_of_3{width:100%}.span_2_of_3{width:65.66%}.span_1_of_3{width:31.33%}.span_4_of_4{width:100%}.span_3_of_4{width:74.25%}.span_2_of_4{width:48.5%}.span_1_of_4{width:22.75%}.span_5_of_5{width:100%}.span_4_of_5{width:79.4%}.span_3_of_5{width:58.8%}.span_2_of_5{width:38.2%}.span_1_of_5{width:17.6%}.span_6_of_6{width:100%}.span_5_of_6{width:82.83%}.

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64569), with CRLF line terminators
Category:	downloaded
Size (bytes):	64908
Entropy (8bit):	5.26176894194636
Encrypted:	false
SSDEEP:	1536:8Cnzw4t1elZeYpkDE6+3YZdpEaUH/qj6rSPKi1Od00jIX7D6QIA7H8u5TXpMp:8CnzXCnkDRPKaX7uQpHHpMp
MD5:	2A628C43C48E95FAFA154FEE36C835E8
SHA1:	73597095446B1A4A43DE433F90C8AC23B3753F51
SHA-256:	334349229C3564240DD0ED05E0C747DB3D9E978B6CD447F19B6891B0D32A94CB
SHA-512:	770B8EC67E9F7A4311C7D8F176DD0AA5B187EDAEDBF46133087DDB59993ED5B0FFD03E937CCCF6150B4B34611BC7308167F993386ACAFFBADD181D3D056F3943
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.4.6.4
Preview:	/*************************************************************************.. jquery.themepunch.revolution.js - jQuery Plugin for Revolution Slider.. * @version: 5.4.6.4 (28.11.2017).. * @requires jQuery v1.7 or later (tested on 1.9).. * @author ThemePunch..**************************************************************************/....!function(jQuery,undefined){"use strict";var version={core:"5.4.6.4","revolution.extensions.actions.min.js":"2.1.0","revolution.extensions.carousel.min.js":"1.2.1","revolution.extensions.kenburn.min.js":"1.3.1","revolution.extensions.layeranimation.min.js":"3.6.4","revolution.extensions.navigation.min.js":"1.3.3","revolution.extensions.parallax.min.js":"2.2.0","revolution.extensions.slideanims.min.js":"1.7","revolution.extensions.video.min.js":"2.2.0"};jQuery.fn.extend({revolution:function(e){var i={delay:9e3,responsiveLevels:4064,visibilityLevels:[2048,1024,778,480],gridwidth:960,gridheight:500,minHeight:0,autoHeight:"off",sliderType:"standard",sliderL

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	198018
Entropy (8bit):	7.998498624595806
Encrypted:	true
SSDEEP:	6144:bQBt/ppKwP9kuy3KpvYQV3vZTQ/5C/wz0dN+3dIXZLR:sh7kjK2QfwToOtG
MD5:	73B43C8E33C2514F5A8FE6093D47BD1F
SHA1:	5729106769FE527C30D7D073D984710D109B36DA
SHA-256:	9D427DE7C003EFE53B3F71A3090E486E265899831902E61161562FC25B7532A4
SHA-512:	FBB7B81DEEFD67B1DE81703BDBBA277296B7AA3D944D2A5C51D4A8087E4A0DDACB5474267882D3B965793E4DE3B7844552FC1496F3AB37A890CAF7E43EB290E9
Malicious:	false
Reputation:	low
Preview:	RIFFz...WEBPVP8X.... .........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6VP8 .....5...*....>m0.H."..$..b@..cns `.1........zH.Z.....s.o.)..n.....3..._....0s_...U...7..............G..\|..............G................x....._....Vh....e.W........C./.>?.;..........kz..W.....~i.......'...?.......?j=....3.....7.O..........u}..o.......s...O.....?............o...............;.{..._.............T.3..../....o.x.c.sI..........e.....n.x.~....#.?n?...s...l...9.M.y.?.?..G...O...=....#...................?..;~.}e.....?........63.0....w..8...-g..?.<...b.h..9....~.._...!...F!S..

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	4288
Entropy (8bit):	7.7080096414006425
Encrypted:	false
SSDEEP:	96:mElbw+iXTkpJup/4L1L/loBQ0B97Sa3NRyBpsmz:jwTTkpJupAL1/knZSa3k7z
MD5:	DD24D9CFB8369D597E04C6E652BB81C9
SHA1:	6AF2402292EB9D4FAFAF23A9AB8991FB257DE564
SHA-256:	EE1D1316169A7C159C0B37FEF557CFE58D1B4BE8CD4D5CECDEF72180BBA93435
SHA-512:	75B0C58394FD53F646C5C7E0C4F2CA77FDE2BF19857DA57DDBD5F8748468668627546DF887197CD042AC9BCAB1783BD8D05A9D1941D9126CFBC6731FF636CB32
Malicious:	false
Reputation:	low
URL:	https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/logo.webp
Preview:	RIFF....WEBPVP8X....0......\..ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH.......m{\Y.o....(u....!.kF{.N.A..^..C8b....ZU$.............$Im..l_X.....\|.......O......~......y....7.....D.K.,?1....>...m......j.lK..`_....pF...m...E.;f..u.....2..k.z.......[.o.....U.?.-C37....`.....~..v......8..='hB.a$....3.k.O..'.z...C(..Q...$..RF..,.%.i..Tt..!..d..'.Z.ST..Hca....9..vn..%....;...7q'.....=AG.v.:..{.........K.f..Q5[s...0+L..oq.'+#.d.}...f`J.........E.......<T.p.Nx.....8..T....1nkcI.....'..YQ........ut..........~...!>...,....L....%....U..^..`.%I..\.*..C.S..c.

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2719
Entropy (8bit):	5.312387964574424
Encrypted:	false
SSDEEP:	48:4Hh5B58CCa5radPmkags0HaH2MHSQsa8SY9FobkKNwyg9pcPbZCy791D:+n8CCYYmisR2yTsLSY9FoYKNwyg9p6bx
MD5:	C7719BD9A8C3DBE1AF79682F1B4CDD8E
SHA1:	91DCCE4876388F48121DE5FFCF4B5CCD478FAD4A
SHA-256:	D3CB03823CE58AA3F20F41C16C2A4D472CF672704FEED4289B0BE4032EC4F024
SHA-512:	483ADA18A96AD112AA649B5C47DDF0B9BF2B372EFDC50DA00FAAF75715E3E1C684C9F4F5923D494F166F2F7217781B824EDF47E44C75071E255B104E9097EE0E
Malicious:	false
Reputation:	low
URL:	https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/js/common.js?v=082720230227518133675
Preview:	//Dropdown..$('.dropdown-menu').click(function (e) {...e.stopPropagation();..});..$(".drp-arrow").click(function () {...$(this).parent().toggleClass("show-drop");..})..//Dropdown END....//webp-finder..$(window).on('load', function () {...$("html.no-webp .webp-img-cont").each(function () {....var isBackgroundImage = $(this).attr('data-background-image');....isBackgroundImage = (isBackgroundImage == undefined \|\| isBackgroundImage ==.....'undefined' \|\|.....isBackgroundImage == null \|\| isBackgroundImage == 'null') ? '' :.....isBackgroundImage;....if (isBackgroundImage != '') {.....$(this).css('background-image', 'url(' + isBackgroundImage + ')');....}...});..});..//webp-finder END....//Scroll to Top..$(window).scroll(function () {...if ($(this).scrollTop() >= 50) {....$('.scroll-to-top').addClass("in");...} else {....$('.scroll-to-top').removeClass("in");...}..});..$('.scroll-to-top').click(function () {...$('body,html').animate({....scrollTop: 0...}, 500);..});..//Scroll to Top END....//m

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31996)
Category:	downloaded
Size (bytes):	156166
Entropy (8bit):	5.44861002066535
Encrypted:	false
SSDEEP:	1536:gFSXugrgBAtUC5IiF2RnGeI+bLVlzozE1N87oXOgTL3B8DVoWQlyeC4shHOdGrDn:gFSxwdCVfjrfsFMLILK
MD5:	DE02DA26B05523FEA66308B0C5DCCF8E
SHA1:	4B55E5D3C98021EBBFA2981077E8D9BAC3E4AB39
SHA-256:	7B4CDCE57F8FDDD34BFDA991EA0073B28E5440C8406149A721DB6542135C319C
SHA-512:	C08970E05AB1B05EE7705EFB3F3371AEDAF1D3DABA2F6A581AAA8EA457A97C902D4E0FE502DE613093A0510C199D7FD2FE7B28B62E9C2AC1742628D63619B1B5
Malicious:	false
Reputation:	low
URL:	https://cdn.userway.org/widgetapp/2024-04-30-12-14-34/widget_app_base_1714479274721.js
Preview:	!function(e){function t(e){return"[object Array]"===Object.prototype.toString.call(e)}function i(){for(var e=0;e<E.length;e++)E[e][0](E[e][1]);E=[],w=!1}function n(e,t){E.push([e,t]),w\|\|(w=!0,x(i,0))}function r(e,t){function i(e){s(t,e)}function n(e){l(t,e)}try{e(i,n)}catch(e){n(e)}}function a(e){var t=e.owner,i=t.state_,n=t.data_,r=e[i],a=e.then;if("function"==typeof r){i=_;try{n=r(n)}catch(e){l(a,e)}}o(a,n)\|\|(i===_&&s(a,n),i===h&&l(a,n))}function o(e,t){var i;try{if(e===t)throw new TypeError("A promises callback cannot return that same promise.");if(t&&("function"==typeof t\|\|"object"==typeof t)){var n=t.then;if("function"==typeof n)return n.call(t,function(n){i\|\|(i=!0,t!==n?s(e,n):u(e,n))},function(t){i\|\|(i=!0,l(e,t))}),!0}}catch(t){return i\|\|l(e,t),!0}return!1}function s(e,t){e!==t&&o(e,t)\|\|u(e,t)}function u(e,t){e.state_===m&&(e.state_=b,e.data_=t,n(c,e))}function l(e,t){e.state_===m&&(e.state_=b,e.data_=t,n(p,e))}function d(e){var t=e.then_;e.then_=void 0;for(var i=0;i<t.length;i+

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9949), with no line terminators
Category:	downloaded
Size (bytes):	9949
Entropy (8bit):	5.031664892401148
Encrypted:	false
SSDEEP:	192:1rZr+i2+orGVPhWGWRB4z3bOEZ2+eXwu+ECiA+sejFAqav:Bb3hWGWRkbOEZbdgiqav
MD5:	CB70B3C85107520804C6693CE0712500
SHA1:	811E8F6DEE8596EC635C01FC6EC8DB46AADE27E1
SHA-256:	E8DEDCFB306132FCFA70D16BE35213063663381E2044F7714904274876750E24
SHA-512:	5E351A1F0833952D9C3F1D40F9752D9B7499576F4E811FE86DD11E480C10E230BBB66307BA109E955CD6D3F5B21913B6937BCA5BA64455AA06C7CCDED9EB8DA9
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/cache/min/1/wp-content/themes/fortuna/stylesheets/grid_responsive-48bd67224ddeecbaf91ae5289d134224.css
Preview:	@media only screen and (min-width:1018px) and (max-width:1280px){.container{width:940px}.boxed_wrapper,.boxed_wrapper #header,.boxed_wrapper #footer{width:1000px}#menu>ul>li>a{padding-left:9px;padding-right:9px}#menu>ul>li.boc_nav_button a{padding:0 9px;margin:2px 8px 0}#menu>ul>li>a>span{padding:0 0 0 4px}#menu>ul>li.boc_search_toggle_li{margin-left:2px}.info_overlay h3{font-size:14px;line-height:18px}.grid_holder.no_spacing .col.span_1_of_4,.grid_holder.no_spacing .col.span_1_of_5{margin:0;width:50%}.grid_holder.small_spacing .col.span_1_of_4,.grid_holder.small_spacing .col.span_1_of_5{width:calc(50% - 8px)}}@media only screen and (min-width:769px) and (max-width:1017px){.container{width:720px}.boxed_wrapper,.boxed_wrapper #header,.boxed_wrapper #footer{width:100%}#header{position:relative;background:#fff;min-height:auto}.full_header{border-bottom:none;background:none}#subheader_menu{display:none}#logo{width:80%}#logo .logo_img{height:62px}#transparent_logo{display:none}#menu{display

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=11, manufacturer=Canon, model=Canon EOS 5DS, orientation=upper-left, xresolution=166, yresolution=174, resolutionunit=2, software=Adobe Photoshop CS6 (Macintosh), datetime=2016:06:25 13:39:44], baseline, precision 8, 1254x836, components 3
Category:	dropped
Size (bytes):	599228
Entropy (8bit):	7.963660483874493
Encrypted:	false
SSDEEP:	12288:WASiwpQfydiwkS7jPWNs/neGY50/lw5hDWLPpLFLgSpq1h/QncHEf+IN5+g/cLZt:qaa7jPWNs/n/Y5ulOhaLPpLFLFpS//ia
MD5:	0049065F6B3A47D97DB8B15571568A0E
SHA1:	13776489F8F45AE9FC155FAA5396DA00CF3CE3C7
SHA-256:	DA8CF0F8B76BE6F91E6A31195D6E8AF3DE4AA1A8AC63A1ED688F0796268D1938
SHA-512:	4F15A4F4207CA62C9C03781995961FA575B4394791AF13F19E4F4CA72377E92D93E5430CEB213FCD68265565C8C654E87DDC36D96302A4A370BEB28230EC12A5
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,.... BExif..II*...................................................................(...........1... .......2...........;.......................i...........L...Canon.Canon EOS 5DS...-..'....-..'..Adobe Photoshop CS6 (Macintosh).2016:06:25 13:39:44.Iza Habur.Iza Habur.!........................."...........'...........0...........2...................0230....................................................................................................................48..........48..........0100................................D.......................................................................................1...........2...........4...........5.......@...........}...........2016:05:12 13:53:19.2016:05:12 13:53:19..Jj.@B......@B..............d...U.......................043021001109..U.......U.......................EF85mm f/1.8 USM..00000430bc........................................(.......................................H.......H.............Adobe_CM......Adobe.d.....

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	10652
Entropy (8bit):	5.0767899120729885
Encrypted:	false
SSDEEP:	96:+S7iDM3bIMSJoeUiovnFZXtcRNB4CB6Vd6C34wqNMKOs26nh/m1PrWvHy0vapa5x:57PbYST9cH/WIwNGe6HEH2WLQj
MD5:	73F66B9CB7C2FB35FD6E29E5116FAA00
SHA1:	98FD9C6AD69D137E786779EE45C5B01E41FD202B
SHA-256:	67779D7937FEBB24238FC2E75FEDFFA6D40A61DBEBEB5BD434F7DE6F4D27F9B4
SHA-512:	3ADAB16FAF5276E8E9AD8BDC4140E2A9CF3AB90E0146B645007CD8F753241A23D58617B337F01F1F648AD91E0A5769381FAEDFCA3A9CCA21CA0371A0D816DBB7
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="257.124" height="219.068" viewBox="0 0 257.124 219.068">.. <defs>.. <linearGradient id="linear-gradient" y1="0.5" x2="1" y2="0.5" gradientUnits="objectBoundingBox">.. <stop offset="0" stop-color="#d48a2a"/>.. <stop offset="0.573" stop-color="#f5cf38"/>.. <stop offset="1" stop-color="#ffcd77"/>.. </linearGradient>.. <linearGradient id="linear-gradient-2" x1="108.602" y1="23.721" x2="108.714" y2="23.418" gradientUnits="objectBoundingBox">.. <stop offset="0" stop-color="#cfeaf9"/>.. <stop offset="1" stop-color="#e5e8ec"/>.. </linearGradient>.. </defs>.. <g id="noCatalog" transform="translate(-1191.297 -1335.722)">.. <path id="Path_2053" data-name="Path 2053" d="M176.237,212.633c-6.025,6.025-17.613,9.115-25.878,6.952L67.471,197.337c-8.188-2.163-16.686-10.738-18.926-18.926L26.3,95.446c-2.163-8.188.927-19.853,6.952-25.878L93.967,8.849C99.993,2.824,111.58-.266,1

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 306868, version 1.0
Category:	downloaded
Size (bytes):	306868
Entropy (8bit):	6.438389646851757
Encrypted:	false
SSDEEP:	6144:BRreS4JwspqQGa8RKsHirByT4rLg7vKGILZ6vPXnFwREY7QIIDZ6uEFIdjC9ILWR:ydLmyePXFSQH09yM/N6wEg+vOsh
MD5:	DE57F99E01BA716CBCE7715128338558
SHA1:	0548C9D6EE346DBDFB289061B7998EECC0DB3ADE
SHA-256:	2205E40554A93481AF708F34D23309EA2768243487BEAEB6333DF945ED1C1F69
SHA-512:	A6962C57AE6CA595744DC9DFE45689EAB9F0AE2A31F6B0B28379D285E5F6624AA70E915B2A7668F3CAEEB6D50DEC6A439BE6C4C1DDFDE7A5B4A9605BF2F15280
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/themes/fortuna/stylesheets/fonts/icomoon.woff?mb3b1k
Preview:	wOFF...............h........................OS/2.......`...`....cmap...h...d...dI]..gasp................glyf.............hhead.......6...6..@.hhea.......$...$....hmtx.......x...x..aloca...p...\|...\|...maxp....... ... .x..name.............J..post....... ... ...............................3...................................@.........@...@............... .................................H...N.@....... .c.......>.N.^.n.~......................>.N.^.n.~....................... .........!.@.P.`.p.................... .0.@.P.`.p...................... ..h...~.\|.{.z.y.x.w.v.u.t.g.f.e.d.c.b.`._.^.].\.[.Z.Y.X.W.V.U.T.S.R.Q........................................................................................................79..................79..................79...............%.5.E.Q.]...!2654&#!"&5.463!2.....326=.4&#!".........3!265.4&#!".....#!"&5.463!2....32654&#"....32654&#".0.......@...............`....$...`...................`......................@.......................

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2174
Entropy (8bit):	4.934902304657191
Encrypted:	false
SSDEEP:	48:YxOt50ix5P50ixP50izP50ipP50iGP50imP50iOP50iTP50i0Oey:Z5v3P5vxP5vzP5vpP5vGP5vmP5vOP5vT
MD5:	38B097981CF35A7EFEA55346C519B6CA
SHA1:	B945F6AF5C129502C3E1AFD4D8910CBDB447BE2B
SHA-256:	E33F8FA309639A3DBE867D800E2043C6A3D290B8BB2C50D5AFC2E9FE49C9BF08
SHA-512:	EF91E399D06850960A451F2C9463B92E6F6C9F0F11249ECF22BD46927BCA36B86E058298B14F73F0A168CF1EB4163D8C3BB0ED0D46D352636832B1750250A5B7
Malicious:	false
Reputation:	low
Preview:	{"payload":{"missingAlts":[{"src":"https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/about-thumb.webp","alt":null,"approved":false,"decorative":false,"metadata":{"skippedForReadOnly":true,"foundCachedResponse":true}},{"src":"https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/google-review.webp","alt":null,"approved":false,"decorative":false,"metadata":{"skippedForReadOnly":true,"foundCachedResponse":true}},{"src":"https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/istock-1350660376.jpg","alt":null,"approved":false,"decorative":false,"metadata":{"skippedForReadOnly":true,"foundCachedResponse":true}},{"src":"https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/istock-182417552.jpg","alt":null,"approved":false,"decorative":false,"metadata":{"skippedForReadOnly":true,"foundCachedResponse":true}},{"src":"https://cdn.strato

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10917)
Category:	downloaded
Size (bytes):	61434
Entropy (8bit):	5.315746269103077
Encrypted:	false
SSDEEP:	1536:TaCIsIsIsIsIRYEEEnWIsIsIsIskYZ5RxOYsY9YnqSDX:mtYdxOYsY9Yn3
MD5:	10D427490E9A220BDDCD175DE55D1725
SHA1:	577CE6B2625296935C0639CCBD0BC5F0B0881455
SHA-256:	7A417493796A6A1979E5244E86CC4567BA114B088212C0072DAAB91D58B79613
SHA-512:	55B8CC7CC8BABB617E40D218680114C82D7A0F28D354BA1FF97C7D8CFB0F859E5BA4326478A8BFD80E1C84B30179FD912278585CA7B8D34F937219F28128AB3B
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/cache/min/1/wp-content/plugins/parallax_video_backgrounds_vc/assets/js/ultimate_bg-6bd23221ddeccc28e806dea9e7e1cccc.js
Preview:	(function($){jQuery(document).ready(function(){function version_compare(strVersionA,strVersionB){var arrVersionA=strVersionA.split('.');var arrVersionB=strVersionB.split('.');var intVersionA=(100000000parseInt(arrVersionA[0]))+(1000000parseInt(arrVersionA[1]))+(10000parseInt(arrVersionA[2]));var intVersionB=(100000000parseInt(arrVersionB[0]))+(1000000parseInt(arrVersionB[1]))+(10000parseInt(arrVersionB[2]));if(intVersionA>intVersionB){return 1}else if(intVersionA<intVersionB){return-1}else{return 0}.return!1}.if(/Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(navigator.userAgent)){$('html').addClass('ult-remove-fixed-background')}.jQuery(window).scroll(function(){vc_viewport_video()});jQuery(window).load(function(){vc_viewport_video()});function vc_viewport_video(){if(/Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(navigator.userAgent)).return!1;jQuery('.enable-on-viewport').each(function(index,element){var is_on_viewport=jQuery(this).i

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 419 x 320, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	171251
Entropy (8bit):	7.990972527039752
Encrypted:	true
SSDEEP:	3072:Hjr24Hcdl2fHuq4VoXs70UstvyzztpcsNpmnPhUkQylcngXtEq5Xxsa/TxpEL7R8:HjL8b2fubobvUt1NpUPhUZn6xXFrxpEy
MD5:	9B3B6E8CEB323CC39786E6C41AD361DB
SHA1:	6E71D2B059C96DDC5E63890E6211FC4AA6EFA158
SHA-256:	4FA8B82E041C28FCB537014DC2092CDACF40EA00C3CB86E82AFA41D4A272DA8B
SHA-512:	82714FC56290937D467A3DC544C5E62518F71BF42B403DA6F303F78C4B14414349956E1BDBF35F80C201FBE6DE21A35711EB29495C575D59B4BD48D6C92E7210
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......@......'.... .IDATx.\..$I.$..0.....[.x.....wOs..7.o..........7..?`......./w...P .....Np..I..D.6.$@.....\.).D...D.I\|..............?.. ..J..~..?.......E........>g.... i..@..}...$h.(X4IB.{.i.&a.......s..../.....<......x...>..u^.............{~.MN..s].o.J.@...x.?..G........^C...o.......?Q...t..)./..B..........x{..Z..:.)"...!.#...E.m0............r.[pV............;...O... ..]UYk..u].>>.....1gf.\.\D..a..q\|...~...8.....%..t.....s.L^.~}...]..K........?.........4E.e.&.Z.5?.........._........6..h..d..~.......,_..............O._......f............Y.\....]..r...-"\.6....GDJ.4.1F.v..#......#B.c...V.k.r...............>..b.i.....=...."....s...8.....).&.I.>S`.....J.g~<.o..9g.3...q>..<.f.P.3...UY....q]...$.....E.....{.a......r.E..+. ,@d.....o.O.....?..?....?........1 .$d.`......0..rg......i......@..NV."w.1..A....g...d.......:..X..}.l.$d.X4...i....E.;.....NH..O..t.-.b..8.~...P$..#....s..W.+g.~...-....x.8C.TU..G..Ft,..

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	479
Entropy (8bit):	4.983276693631104
Encrypted:	false
SSDEEP:	12:tHG7bsjJDJA3P41z25frlvujYZl86bcJ2t7qIkOJd+x:txiP41z2frE6E8WFUd+x
MD5:	4F320D5999A47960DA78DA36885C1B07
SHA1:	4461FC9AC0E66A7CB172A53E0F7B03344B387FDB
SHA-256:	4BB37EE8DF87D8BA7F22D02EA39D4AA595223EC5792BBB7F70558CFA51AF1E92
SHA-512:	7A03D7D1673EB0502C209DEAA985E8986AA640914455DD5CE1E4F87D346D14488528A1E519CF86ACBD67F55A1FBD475F3758BBEC5DD49C6F3FA9B0C5CA6021C7
Malicious:	false
Reputation:	low
URL:	https://rmshg.amplified.training/pages/images/rating/star-solid.svg
Preview:	<svg aria-hidden="true" focusable="false" data-prefix="fas" data-icon="star" class="svg-inline--fa fa-star fa-w-18" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 576 512"><path fill="#FF9F0E" d="M259.3 17.8L194 150.2 47.9 171.5c-26.2 3.8-36.7 36.1-17.7 54.6l105.7 103-25 145.5c-4.5 26.3 23.2 46 46.4 33.7L288 439.6l130.7 68.7c23.2 12.2 50.9-7.4 46.4-33.7l-25-145.5 105.7-103c19-18.5 8.5-50.8-17.7-54.6L382 150.2 316.7 17.8c-11.7-23.6-45.6-23.9-57.4 0z"></path></svg>

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x500, components 3
Category:	downloaded
Size (bytes):	195902
Entropy (8bit):	7.993612443116998
Encrypted:	true
SSDEEP:	3072:eEpyOW80GQgascPg/2FORAMgk+njZ9R+ricMsXbZZsrbxncW2gvXkol9rAim5dBE:PoBGQtssg/2oGF9Yras7AxXvbfAimrBE
MD5:	27FA64C049846691F9FE645A71D7042B
SHA1:	AF5FF3E251FEFD7CFFD080DCEC700B6BB337A5DF
SHA-256:	19C1FD8BD778DC36589CD654B70A2972B6A9A49DD92714A141ECC5B5E2EB86B1
SHA-512:	5183823B08BE4E34E29B2D980575EBD077FD465A05A93A6ED74B596EF62DE74CEA519956DA788BB8FB85C54FA28566C59DD7248F3DE58E1210D3C72C01D6A1D0
Malicious:	false
Reputation:	low
URL:	https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/program-bg.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... ........................................................................................sj.Pb%F.Q..!.i....u..2..#..7b1...;l..Q......g!....7v.....nY7..I...@....J2.F.x...2......2.@..d..!...x.......`.[ ...H.....Rk.M...<C `.... x. nF;K6..y...z...<..C.V....b.[....`..`.-Lj......`...\.!....l.....HY}..u.+l....G.N..~...lY.......n.#Py..../ jj.I...nDe..K(.x......2..... `...<c.2c.6..<.@.6.,.Yl.(sv..(..I.XN}.(`.@..!..!.....J.#.i.6%.#8...\|D...5-j........W>.Ne......fZ.ji.G..P<..`..;k..........rU_.nG..."I:ez$..CM...\)s%.:g.........V.&1.A..>.83....A.j(..'.d......x...<.@....x.....x b#.2..(.#./)..U...........!.2.......m.H...%F<.-u.K2.Fl.Q.miR...'...~.l...W"...t.V.XjIg[..`,....P...Y..a+...T...$..:..e..E.. @..].NF}.mD.>.Bq..u...p.\...n...u..w[.%..............{..<.....Y..`...<......?.0....Zt2...y@...G.4.......

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8089), with CRLF line terminators
Category:	downloaded
Size (bytes):	8331
Entropy (8bit):	5.184901696432316
Encrypted:	false
SSDEEP:	192:eHe3syiqiihWp2xgyhK1/l+zWJc2VJS/gkBVl1p:CMS/2f7R
MD5:	37B37940AC6CF4C7CBD47103BAD5CCB5
SHA1:	AD851D07C005BF59206A1C036458984930D8E845
SHA-256:	748F3E447F2F7475A4BA75F6F2E2E9F468A3AC443EAE879E2104EC562B2158BC
SHA-512:	BA300130E18098219A467F506CE8FC973C20A8794C77665636C7847A2A40E53E57C2FD5B31EF26886FA81A9B2C613C70C4E19CE6035E4E0F2AF89443259B02ED
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.actions.min.js?version=5.4.6.4
Preview:	/*******************************************.. REVOLUTION 5.4.6.4 EXTENSION - ACTIONS.. * @version: 2.1.0 (22.11.2017).. * @requires jquery.themepunch.revolution.js.. * @author ThemePunch..*********************************************/....!function($){"use strict";function getScrollRoot(){var e,t=document.documentElement,o=document.body,a=(void 0!==window.pageYOffset?window.pageYOffset:null)\|\|o.scrollTop\|\|t.scrollTop;return t.scrollTop=o.scrollTop=a+(a>0)?-1:1,e=t.scrollTop!==a?t:o,e.scrollTop=a,e}var _R=jQuery.fn.revolution,_ISM=_R.is_mobile(),extension={alias:"Actions Min JS",name:"revolution.extensions.actions.min.js",min_core:"5.4.5",version:"2.1.0"};jQuery.extend(!0,_R,{checkActions:function(e,t,o){if("stop"===_R.compare_version(extension).check)return!1;checkActions_intern(e,t,o)}});var checkActions_intern=function(e,t,o){o&&jQuery.each(o,function(o,a){a.delay=parseInt(a.delay,0)/1e3,e.addClass("tp-withaction"),t.fullscreen_esclistener\|\|"exitfullscreen"!=a.action&&"togglefulls

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	42732
Entropy (8bit):	7.990091085187101
Encrypted:	true
SSDEEP:	768:OigcwvuKwAhRX2QRlxjqQikARgSwaT4Uf92IV5AxYdooSIjH2l94r:n6hEQFryRb4Uf92kAxkooSH+
MD5:	6442D4E83BBFA20D7E2FCA743411CB4E
SHA1:	E9AF3DF4C65C65FB7CA716BCADB5476606B452AD
SHA-256:	FD6A1102A401B89534318ABCD6703652AA9EDF004B55F2BF3AA15E91A45BCC5D
SHA-512:	149E36B3BEC98C6AF89020955670F26EE80D691EA7F771E90378EE7D10209472B663808D991C5DAC205BCC8AAFF407F47189FB298FFC5674AD9EF2D2BF088F85
Malicious:	false
Reputation:	low
URL:	https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/about-thumb.webp
Preview:	RIFF...WEBPVP8X.... ......h..ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6VP8 ...........i.>m2.H.".&%R....cl..#Y.s...x^L.@q.Rr.4.[o.{}....q..O...]..?..5..G..y7.'....3..>.>r...............{....Y.s..........~.......%.......o[.[...=............#.......g....y.(........k...k.....T...._.~.~....K.~......k........3/..........G..5.z..v{A..$...... .<.^.Tm./...4V3.P9.".$.!..Or".{D..O......vTt..,..M..h.b..<F{.....h_,}...%..e.....\|....J...:O....K.]M._..}K.{....;.~~.8...../......H.Dke....4.wK.]...y.~?YO...A:9..y........q......s...."..w.W...s...~..5=.Ss

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65302), with CRLF line terminators
Category:	downloaded
Size (bytes):	140100
Entropy (8bit):	5.022023748672164
Encrypted:	false
SSDEEP:	1536:qwM5PPTEBg+pcukdRlsTJ2x6VpjShlz600I47sQP/:xmKAUVpjMlz600I4n
MD5:	4A8DFFAF745FE4A59EB348E155687EF0
SHA1:	685E786F77E9025844B7901BAE414220F278E5AD
SHA-256:	4C6650354F9AB3C1B87E500214BA7B48BC9F98DF0EF060FC5CF6AB9CF083FF7E
SHA-512:	E259CA67B043F3DBAE87538F4ADD519412CE2D9AE1FFF2348BCAC69DED8B4581CD4679684C5C7403D3FDD6B2683FF074A14A31C289CE5F1B36BB08AAC64EA2A0
Malicious:	false
Reputation:	low
URL:	https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/css/bootstrap.min.css?v=173520240735289729204
Preview:	@charset "UTF-8";/!.. Bootstrap v5.1.3 (https://getbootstrap.com/).. * Copyright 2011-2021 The Bootstrap Authors.. * Copyright 2011-2021 Twitter, Inc... * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE).. */dd,legend{margin-bottom:.5rem}progress,sub,sup{vertical-align:baseline}.img-fluid,.img-thumbnail{max-width:100%;height:auto}.g-0,.gy-0,.row{--bs-gutter-y:0}.btn-check,.form-floating>label{position:absolute;pointer-events:none}.dropdown-header,.dropdown-item,.dropdown-toggle,.input-group-text,.navbar-brand{white-space:nowrap}.card,code{word-wrap:break-word}.breadcrumb,.carousel-indicators,.dropdown-menu,.nav,.navbar-nav,.pagination{list-style:none}.hstack,.vr,.vstack{align-self:stretch}.text-black,.text-black-50,.text-body,.text-danger,.text-dark,.text-info,.text-light,.text-muted,.text-primary,.text-reset,.text-secondary,.text-success,.text-warning,.text-white,.text-white-50{--bs-text-opacity:1}.bg-black,.bg-body,.bg-danger,.bg-dark,.bg-info,.bg-light,.bg

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31591), with no line terminators
Category:	downloaded
Size (bytes):	31591
Entropy (8bit):	5.102408837881332
Encrypted:	false
SSDEEP:	384:JdTqO/MYJVmhT5kpwVXZKYSQkNEH9q8RS7W5+TU1Zz80id48fh:nmoMoshT5TXMYSQ59q8Y7UmU1h8D28Z
MD5:	8702BD70B62F72BD836CB317752F4BCE
SHA1:	F32B55722CA8429BAD7DF774621EC59E3EAB639D
SHA-256:	F63E4482468B74C983BFCEDD665E3E7BC77CF296F032A7FA3BA3916236AF9A76
SHA-512:	B95EA8340ACB69C6F7C16EF6BB1FECAA3C5AA6F02DFE8CFB98C0DE00D3139D08E8CFF3DE8F2578F154FE83B32004D1F4B61119D089D6596752C758271B9946C9
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/cache/min/1/wp-content/plugins/revslider/public/assets/css/settings-36ca63d9d38924f69a128c3b249182a0.css
Preview:	#debungcontrolls{z-index:100000;position:fixed;bottom:0;width:100%;height:auto;background:rgba(0,0,0,.6);padding:10px;box-sizing:border-box}.debugtimeline{width:100%;height:10px;position:relative;display:block;margin-bottom:3px;display:none;white-space:nowrap;box-sizing:border-box}.debugtimeline:hover{height:15px}.the_timeline_tester{background:#e74c3c;position:absolute;top:0;left:0;height:100%;width:0}.rs-go-fullscreen{position:fixed!important;width:100%!important;height:100%!important;top:0px!important;left:0px!important;z-index:9999999!important;background:#ffffff!important}.debugtimeline.tl_slide .the_timeline_tester{background:#f39c12}.debugtimeline.tl_frame .the_timeline_tester{background:#3498db}.debugtimline_txt{color:#fff;font-weight:400;font-size:7px;position:absolute;left:10px;top:0;white-space:nowrap;line-height:10px}.rtl{direction:rtl}@font-face{font-display:swap;font-family:'revicons';src:url(../../../../../../../../../plugins/revslider/public/assets/fonts/revicons/revico

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	265
Entropy (8bit):	4.952975721072694
Encrypted:	false
SSDEEP:	6:YxZo3tfh3mj+mB+F73AkKZimrcuG/oRugWtVtevdY:YxZo3t50XK73Do7YteVY
MD5:	2B637A695E85E2732763A467AC2BCD24
SHA1:	3C4AE218928FB1C1BC576A7BD06564EE27358D9B
SHA-256:	C97BEF4EAA0D695EB80678E9706CA496AFDA661124F074FFAD6D3FEB6F72603E
SHA-512:	2391F6F68B1AECEA3E00B131B0EA88DF791774667F238EA9864B15A76D2A26DE2765726B4D2CA6A54D0F8BD7BF6BEF206B1962E80999842BE31422DA6D0E98B5
Malicious:	false
Reputation:	low
URL:	https://cdn77.api.userway.org/api/img-dscr/v2/D0JSP1avgg/3527403/RLqwMG7OTpTSzPtD/alts.json?dto=%7B%22sorted%22%3A%5B%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fservice-2.webp%22%2C%22alt%22%3A%22Insurance%20Coverages%22%2C%22dir%22%3A%22RO%22%7D%5D%2C%22tier%22%3A%22FREE_QUOTA_TIER%22%7D
Preview:	{"payload":{"missingAlts":[{"src":"https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/service-2.webp","alt":null,"approved":false,"decorative":false,"metadata":{"skippedForReadOnly":true}}]},"payloadType":"MissingAltsDto"}

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 479 x 320, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	179154
Entropy (8bit):	7.996891363868708
Encrypted:	true
SSDEEP:	3072:/Uuj9arjIQ1Fh++QIgWRvAHc0/iE7NDLrfsYNuP94U9sw5DXoZaftd8rxIJjKvcy:/bUrjz1qdzgvic0V7NDLrfLul48DXorj
MD5:	113A83EF1D3F5834B51D65263B5CDAD9
SHA1:	BB0941125CABB6D04595BF99494FC11DAF87B399
SHA-256:	0B38FC0FCE48485353BDC13BC1ED6B2EAC2AC6C6809DEA53FDA59813A121248A
SHA-512:	CA3FC3A2C9FECC6356513273E6E9C9EAA79AA2907560BE860EC8E2F9D7A3BEBBA37F2E27B14A2EF8DFF66381A03B429B6496DD87DA07FDCEE1B3DECF5FFD8657
Malicious:	false
Reputation:	low
URL:	https://d3j0t7vrtr92dk.cloudfront.net/rmshg/1576785996_AdobeStock_292938399%20%281%29.png
Preview:	.PNG........IHDR.......@.....rR... .IDATx.T..$.$&"j..F.=...>..y.....?...C.p..!g.3@...pS.>.yd!..;+2.........._....6. m.2.c .....Q.i. !.58DJ...HR....[...A..D.0L(..)..(I..a...$.0.....0.....%.....1q...&...e.<....^x..P@..~2..(.....,....\|.5.=...(.....]......P@4\...@..@...@.`Q..0.5H.0`.U.:f]o.....:.n..\|c..3.t.%......!.~ .........F...@=.....rV.p...y%... D...e...W>..\|./.....n...j..........0.......Q...s.p.7.b...@.P...M.qE...SeN..cG\0.w=.x~.fEa;p.{......n..w.N....n..p.Y...^...V.z;.~w\|...u...._.....U>.A..$.4.....kb~=\|KM3...d..2.4`o..F]F..Q...@....X\|,.<.I.r.Z......l.(...J.).ye..;......../?\|.W\6... .....U..J............../......:.=<... C.@y<.m..A...O!Q.m.YI0g.. $.<F0..=.sVM..q..=+...$g...#.C.....l.6......r.B.(...4PG.}...q.#.->].c..p..~./......R..q0i.4L.."zN...QC1P....10..(. ..m.I.R.j0.iJ` ......e.P..."...I.E.&.BJbP........!J..c...z..$.B.....L..c..m^o..y(..@.6l....E@..$M..M..B..\.k5...D...........yKo.f_Pi.....T..X.{'....j.M..hP.\. .w..v...N!.R.

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 2200x945, components 3
Category:	dropped
Size (bytes):	68363
Entropy (8bit):	7.971441207518118
Encrypted:	false
SSDEEP:	1536:+FQFF2TtZQfckzfNfqv1jxvocaH+M4dQ4a4QdspZVhH:+aFFdEvtxHa8BQsVhH
MD5:	C817AF5ABC60DA4B41896880570374B6
SHA1:	CD8E319EB3F5E7ECDD061E5CE43CA70FA83EC92B
SHA-256:	1C63F075C5BFB81D915AAADFC46A27FA20239C1CE06147C9834E34735016C1E5
SHA-512:	9C3D47D901C84D4CCB5B052382674ED4D0FB318876F853EE7423810330162847B3262508889ADD3ADB0C3D336DA515E70089E7045B973AEF822EBC12B7A04D92
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Compressed by jpeg-recompress.................................)......)$,$!$,$A3--3AK?<?K[QQ[rlr................................)......)$,$!$,$A3--3AK?<?K[QQ[rlr.............."...............................................E.(U.<....x.B.<.y.o...B..''...#g7B.'...._;.........]....j..5e..~.?...D>S........H.DDB...DD.B""..D..DD........^Z..i.. .m........=.......x..K..QY._..9..r..N~^.n.y.............]..^\..v.i!......<oCwN...D!!..D.DB""....H....A...j....tm"$[o....-c..~.~)R..{...z..!j....}...S..c..\|~...2....u\|v.g.n..=KM9n.XN..y..\|......u.....B!.....H.$........B.....GW5..b...qTHB.......e.Xs......:3....7.}Oh.~..g..^~;{.:r.Ry...)~.gDpz4i.rk........)..(k.......$BB...DH.D"B..K! HB .BA.....=.u"K...Z..DJ..7...bAp....{.F.UKZ.O.}a\|....y8{........_...w~cM.._..h....).z).....tDHD.".....D."$.!!.. HD"J._..=....D.mU.QUBD.u....w..{....[..S".X..........5.ss...3..\~......i....?.t\|...H..<.w....!..DB"""!...$.DA .A..E9..3..e...D.j..AJQ ...\|..[.j.<~.[,..R...c.

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1942
Entropy (8bit):	4.94146989170583
Encrypted:	false
SSDEEP:	48:YxOt50ix5P50ixP50izP50ipP50iGP50imP50iOP50i0Oey:Z5v3P5vxP5vzP5vpP5vGP5vmP5vOP5vZ
MD5:	D40FB332D7AFD523501BCBDE752D9F09
SHA1:	1A88AE73C0F72617A9770252F6AA05761F0593B7
SHA-256:	54FBDE215E5D67CB9F3B8BCCC84999E3D8CE365A4BBB15F0DDE87CA5B6CCDCBC
SHA-512:	AF345BB17E94A1C7546B18DC8A240F250112276784DABD0C59F6FF4EA968F8270CF216B33F574B41DDE4C1423F52FD9C09752297544036D0269BD3BCCAE4D628
Malicious:	false
Reputation:	low
Preview:	{"payload":{"missingAlts":[{"src":"https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/about-thumb.webp","alt":null,"approved":false,"decorative":false,"metadata":{"skippedForReadOnly":true,"foundCachedResponse":true}},{"src":"https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/google-review.webp","alt":null,"approved":false,"decorative":false,"metadata":{"skippedForReadOnly":true,"foundCachedResponse":true}},{"src":"https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/istock-1350660376.jpg","alt":null,"approved":false,"decorative":false,"metadata":{"skippedForReadOnly":true,"foundCachedResponse":true}},{"src":"https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/istock-182417552.jpg","alt":null,"approved":false,"decorative":false,"metadata":{"skippedForReadOnly":true,"foundCachedResponse":true}},{"src":"https://cdn.strato

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 429 x 286, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	308553
Entropy (8bit):	7.994675142128173
Encrypted:	true
SSDEEP:	6144:QLIA2fpx86UzmMv4J5g2rRgHMMNJIJMqrEipv:r31bfJMqdt
MD5:	34F72C173E9341380E317DB3FF39E0CB
SHA1:	C090AF1ABCC400CC07ED6E881AB126583684F641
SHA-256:	B3A4A4417EF8C5BCDFC910D5FA67080A22FEAB26D63705DBE29CD1A9C66B4502
SHA-512:	407A93184E4194C06B4FE95256AAF873B7CCBEE70AAA1572D0AE187B8520DC2F4650EA5D7CD9FE3BA5F3BDE9148EF502C8B6BC0CBF8692E6A08B91AEDDFB9136
Malicious:	false
Reputation:	low
URL:	https://d3j0t7vrtr92dk.cloudfront.net/amplifiedhr/1563760228_ProtectYourAssets.png
Preview:	.PNG........IHDR.............9.J... .IDATx...wt.....3s{/..,.$Kr.......cc.^B'.H... .I $!.H...Bu..n\.m..d......\|..;.l...].Y.....<g..s......}.Y...\>...@ ...+.E..C..{w..E../.D.$....8p ..h."dY&77..#Gj.e....p..L.4I..[.....L&.7.p...m.555....s.....8s...7.\|..?~.8%%%(..9s0.L..?...;w..._.=iii.466.f..DQd.........X.d.. ._?z..]c..(.B.n..1b.._.d..d........W.\I8..j.2}.t-.y.f.....t.3G........A..?...?z.(...(...s....TTT.g...Ea..8.N....Y.~=. p.....@4.e.%......)*.1..\|t.+9]...C.x..\.........7.EN...#._.O....U.V...o.zb._O[H].T.Y6.JJq<..z.c..c45...9...'.......`.......?x[...K~.~.?.C.d.}.......q.x...H.....-..=P...-x....&}....0..?...T......a....z.0..p.e..q....].._.k...X{.....z9q...K.<...\|..+.{.-V.[.[.z...:....\|...54.v.:.V37.yWw.9@..2.x.[.x/:.On.".A,.".....\|^.....M...;.d..w.....XUK..O.b.M..?G.....z..]....B....:..QI...~..b%..........V........k.....0..(..5k(.r....e..o....+.G....h...z....=...h4........9v...%/.[.+...Ja....&@.....#..E(.g.z....].@..s...e.....M...h..I...Cm.%.r...

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 479 x 319, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	389934
Entropy (8bit):	7.985251210901067
Encrypted:	false
SSDEEP:	6144:OSVSJ/DNRdzgQA+33QihHb2JV4CWj4rdwsKzi0IEE+H79KQSce1bibONnx3Ui7WO:OSVSJbNRdk/G72JyP+dfKRE+b9KSeJic
MD5:	95FD2CB545BDE71284FD52423E7DE389
SHA1:	2C3EC685CBB3B99615FE05CB139C975841FA8355
SHA-256:	71D8905DE1B464BFF3ABDA9F5414B56A526A80132C2EC59005A0FA001E3D6EEA
SHA-512:	38461E8F6036BBC459747FED8ACC6BEE00F156359074C68A0AE7B0087149B912E32DB7B271BFA880F49D2761B882DB5A72521FBB84139F122357050998AA455B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......?......D.... .IDATx.d...e.u..;..s..7...r]U]m.h. . 9N....u.(..lP...@.$.a.w.3......hj.#}...Xk/....6.l...ps..UK..)\\....d..o.%]...@&..\........H.".=yF,.px..........\&F6.`.4....=.E.\|\.....X...~F.....]$1.U...u)dtbJ.7...&lm.2.tY...2...G8.%..CT..3.5.$.'.^>g>.!.. (...3.y..K6..!8....\|FR.3..p..{..q.B.@Mf...#....w$.q$A .T.v.!E......5l.{..\..z..w.Qb.4U.]v..-)U.I..........cI.5)U..9RZ.\|..+....Jo8..z.$.....1..H...:.g..........~E,........7...".W..D2....c....g=..f....jJ...L.Ld..D..e.+....G8....16..I.3.Yo..1M.....}.669}..?...dt..h..O.."..u..4...L..v..t2%.J........H'.f.)..-..N..'..N.D....9.@....A.".u.,.~..''..u..wy..).l.O?x._....D..F.I.Ie.8.O.....q...._c...?x....+?.T...n.....l6.xnp..-.._.....Y.......dM.."A.........:.77.....~.N...5y..a..,.Cv.>..z..GG...Z.;..g....."..j..._..K.s.z........l6 .O...1.........7.&K.{Du........m#...).lm....._...C.....#n.9`6[..i..IN.y...Ks......c\|7..L.S2.<".sc.e..\|...8>...X.\|..L.H.Z........lo..X&..q..-..)....^..

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (55687), with CRLF line terminators
Category:	dropped
Size (bytes):	55942
Entropy (8bit):	5.2643522634673525
Encrypted:	false
SSDEEP:	768:Nlmq9+ENHFJfpp5EA3mVQQf8V9xWnOJYf+:Xmq9+ENHFFpp5EA3meQf8ZWO6W
MD5:	41E0F6002DF30C53085F73D10B26D65D
SHA1:	1B0B0666D190789A8F4F8273296BD21DBD1A6CA9
SHA-256:	84CF55BE6DD4649960F1BDFD5E2A0EB14D6A7BF712D7830BD4A0475DEA8509BB
SHA-512:	651BDA920CF5CD11107EA168ED9408EC11271044AADAD8199F0C78D4B6CAA7C0D689FC47757259D0AA36E74EF415CEB03C7ADC723744DB292958316EBDDB3405
Malicious:	false
Reputation:	low
Preview:	/***********************************************.. REVOLUTION 5.4.6.4 EXTENSION - LAYER ANIMATION.. * @version: 3.6.4 (28.11.2017).. * @requires jquery.themepunch.revolution.js.. * @author ThemePunch..************************************************/..!function(e){"use strict";function i(e,i,t,a,o,r,n){var s=e.find(i);s.css("borderWidth",r+"px"),s.css(t,0-r+"px"),s.css(a,"0px solid transparent"),s.css(o,n)}var t=jQuery.fn.revolution,a=(t.is_mobile(),t.is_android(),{alias:"LayerAnimation Min JS",name:"revolution.extensions.layeranimation.min.js",min_core:"5.4.6.4",version:"3.6.4"});jQuery.extend(!0,t,{updateMarkup:function(e,i){var t=jQuery(e).data();if(void 0!==t.start&&!t.frames_added&&void 0===t.frames){var a=new Array,o=_(c(),t.transform_in,void 0,!1),r=_(c(),t.transform_out,void 0,!1),n=_(c(),t.transform_hover,void 0,!1);jQuery.isNumeric(t.end)&&jQuery.isNumeric(t.start)&&jQuery.isNumeric(o.speed)&&(t.end=parseInt(t.end,0)-(parseInt(t.start,0)+parseFloat(o.speed,0))),a.push({fra

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	4.592065763513686
Encrypted:	false
SSDEEP:	12:YSAooWKNWwfPXNEHnGXcwe6LRtcO4wGPCvwdlYJbWUmbWU3EVSJ:YSsWKNWwHWmXcwe6LRt38m8UZUYw
MD5:	85D8C40AAC9C25BB0B993D4AA039A56F
SHA1:	BA069C6FDF553B112EBA1E5D50E2C930CC557111
SHA-256:	4AD9A5493AAFC1F43E8882AEB9D07B945139AD6326D82A04B5237EE1A3283538
SHA-512:	CFA02D21870446FE704010B399A97943B03E9A56D9C50CA024A801F4C8475DD17B4944E3D7F3D678EBE7F7644075C69B109E5259FD4C9D6BA1F661CA46986CE3
Malicious:	false
Reputation:	low
URL:	https://cdn.userway.org/widgetapp/2024-04-30-12-14-34/locales/en-US.json
Preview:	{"widget":{"html_lst_title":"Translations Menu","html_title":"Accessibility Menu","text_icon_small":"Accessibility","text_icon_large":"Accessibility</br>Menu","new_tab":"open in a new tab","broken_links":{"target_site_not_available":"target website may not be available"}},"skip_links":{"open_accessibility_nav":"Open the Accessible Navigation Menu","open_accessibility_menu":"Open the accessibility menu","skip":"Skip to main content","enable_visually_impaired":"Enable accessibility for visually impaired","disable_visually_impaired":"Disable accessibility for visually impaired","title":"Quick Accessibility Options"}}

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 1024x1024, components 3
Category:	dropped
Size (bytes):	85608
Entropy (8bit):	7.982456671351401
Encrypted:	false
SSDEEP:	1536:OfSu2ZyCR5saEM3OIGh9l13qmwvqXfdPCAdt0zXCZXoJrcCjJmtGofaKP7o:S2Z/R5s0o9l1uqXtt0jiYcCMCKPU
MD5:	9F0D462FBFA80BDBADCF7D0E14CB206B
SHA1:	66AAAD3BF5EE629F65D09EE1469A00CE36B97515
SHA-256:	C20CF76C892E1C6BCDE32E94A031B2E785ABA652309D234B29AEBF12123215E2
SHA-512:	D9904025B463565541B712B78043935E1C7F721CFCC8B9EB7FD3C44BE39C009B3EED6E054A88B538C8F2F73D924E7D0ED4A9DF4C28376FB4CC01EAF8B73249A8
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Compressed by jpeg-recompress................................................#....#)" ")1,,1>;>QQm............................................#....#)" ")1,,1>;>QQm...........".................................................y.........vR.S.6T<.3......w..k.--...\|.2.d..#..=W.]...].#..H.t.z9.=...t..{..U..N..^.j'19.....j.NdZ.l.....#....l.Y.f..Dm..k....ZZ..$.l...{.G8.s....Xp...D.[..._y..Z.1..{.yS.{.....o#y..%~.{..+..^E.k!.&L.38.F&.....Y......,Z.I=.../s...{..w+c._.;.:-u.[.O..^.ogH!..y^.W";.........F.].^.6%}>[.<R=....eM..3..b...w..V.....y#VG.e..=.W9.!..9.....(.-........O...R+.....U...1.....g.1+.k....1.>...IHY2...1..b..7Z.~.....{.UV.....a....<.!...4...9$...'..?]..i....S..r.9\..`..W=.......T...7.~.]i%Li....1..c.f.........jF...].....'r.<.9HW.(#..D;+...l.m..M...3..I')..s...q+.B..Dha...P.j3.a.t...CJ.9.9\|f'..v.w..i..m%...0.u{2.a....y.S...lh...z.V......j.:......).r..G.Z ...*A.G/0q.h....UY.6.......u.[.........k.++.!....v..2'.z.{..1.s..@E

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=10, description=Happy people drinking beer at brewery bar out doors - Multicultural life style concept with genuine friends enjoying time toget, manufacturer=SONY, model=ILCE-7M3, orientation=upper-left, xresolution=344, yresolution=352, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 11.0 (Windows), datetime=2021:10:27 15:41:59], baseline, precision 8, 1254x836, components 3
Category:	downloaded
Size (bytes):	766208
Entropy (8bit):	7.96349662657859
Encrypted:	false
SSDEEP:	12288:QKuC7BoxtDsY/r/TxOcZndgmn9l9TPrE7Rfyz6rTIodTo/9qpA003LKj:QKujtDjDbTndv9lxPo99TIod+h0J
MD5:	46371CF1AE16FEFACEB2F475D8D223AE
SHA1:	F5848557C47B4C7C09260566BA0C31A1A88CDC3E
SHA-256:	CE7621552F759BE55BCE13061D61E8EA143AC8BFFAD45EA07E9E106D304526D2
SHA-512:	4F1D5DB5C7AC8BCC8C50DAAD815EB6C9BD27495ADFF22D6B23235EAC7D36A2E2E1C080739A66BD0BD72375CA5C7C0EBF8071623B51F4F21E9DEE09C992C89E36
Malicious:	false
Reputation:	low
URL:	https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/istock-1350660376.jpg
Preview:	......JFIF.....,.,....W?Exif..II*...........................H...........N.......................X...........`...(...........1...1...h...2...........i...........h...Happy people drinking beer at brewery bar out doors - Multicultural life style concept with genuine friends enjoying time together at open air restaurant patio - Vivid filter with focus on guy..SONY..ILCE-7M3..,.......,.......Adobe Photoshop Lightroom Classic 11.0 (Windows)..2021:10:27 15:41:59.)........................."...........'...........0...........2...................0231................................................................................................................................................................................0100................................D........... ...........(...................................................................................0...........2...................................................2.......8...4.......X.......................2020:09:09 20:09:31.2020:0

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	260
Entropy (8bit):	4.942501294285798
Encrypted:	false
SSDEEP:	6:YxZo3tfh3mj+mB+F73AkKZ3orcuG/oRugWtVtevdY:YxZo3t50XK73z7YteVY
MD5:	E9ED02B6DC795269A8A5B452B92B574C
SHA1:	59E41CC71C00E988AE6B2E39B5253290AA0ABFFA
SHA-256:	4F720DD095196FBF3FD9B59BCEB9F2970AD55E078DB73A2115D538892AF1848D
SHA-512:	E71974367D8228908EDA748235918E0AF334F94DB6EF4F257E89EE5D2BE600A4F400F0E4696BCF08396F687BC51F8FBEA4DB8C11B8C1AB126ACE163C58D62063
Malicious:	false
Reputation:	low
Preview:	{"payload":{"missingAlts":[{"src":"https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/logo.webp","alt":null,"approved":false,"decorative":false,"metadata":{"skippedForReadOnly":true}}]},"payloadType":"MissingAltsDto"}

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41626), with no line terminators
Category:	downloaded
Size (bytes):	41626
Entropy (8bit):	4.904716969735794
Encrypted:	false
SSDEEP:	192:1bcxbwdOslxFG5wQ1oASkND/3fyx5PrYee0nTv:/OqG5wQ1oASkND/3fyx5PrYee0nTv
MD5:	90DFDC0D2B77DABAC8CD9AFDB19E4385
SHA1:	71200FAE11E960FC37E95AD961384E91DA162DEC
SHA-256:	ACD4DCF96C8B5F8B2FF506897CBC8F07BA0D30248B6F19B58C66D5A70F132821
SHA-512:	C327D4C4A089AA54C53DCF6A272DF6F00C91DE0D1C63C9BFCD0E9240974303540C57E656447291B6686FF78EA28E9799504C85A73A387482D95ED928693FB4B2
Malicious:	false
Reputation:	low
URL:	https://rmshg.amplified.training/pages/themes/default/css/animate.min.css?v=558
Preview:	@charset "UTF-8";.animated{-webkit-animation-duration:1s;animation-duration:1s;-webkit-animation-fill-mode:both;animation-fill-mode:both}.animated.hinge{-webkit-animation-duration:2s;animation-duration:2s}@-webkit-keyframes bounce{0%,20%,50%,80%,100%{-webkit-transform:translateY(0);transform:translateY(0)}40%{-webkit-transform:translateY(-30px);transform:translateY(-30px)}60%{-webkit-transform:translateY(-15px);transform:translateY(-15px)}}@keyframes bounce{0%,20%,50%,80%,100%{-webkit-transform:translateY(0);-ms-transform:translateY(0);transform:translateY(0)}40%{-webkit-transform:translateY(-30px);-ms-transform:translateY(-30px);transform:translateY(-30px)}60%{-webkit-transform:translateY(-15px);-ms-transform:translateY(-15px);transform:translateY(-15px)}}.bounce{-webkit-animation-name:bounce;animation-name:bounce}@-webkit-keyframes flash{0%,50%,100%{opacity:1}25%,75%{opacity:0}}@keyframes flash{0%,50%,100%{opacity:1}25%,75%{opacity:0}}.flash{-webkit-animation-name:flash;animation-nam

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64381)
Category:	downloaded
Size (bytes):	70328
Entropy (8bit):	4.988320302474363
Encrypted:	false
SSDEEP:	768:/dkZDIS30UBgDjvwG1ZAIkKDJ3bys5XrHeu05T/V30UxgDjF5uAylWty:/dkZcwG1ZAIkKDJ3bys5XrHeu05T/X
MD5:	0B5BF71397DA0805DF2056ADF42EC7DE
SHA1:	BF25407DE46CDEFE3B40E44CEC801DA6B4716258
SHA-256:	506CF9783DB5844B97168BAF7647D4267FE6232DF1B8BF7C4289D8DA606AFF23
SHA-512:	AD027AA32449D165CFFD84BDB10E6374F20C66B19630A935541C6E366575F842AEB95BAA2B01E2D3481B0F4C6339DBBB675985F0ED9F821B4A5C9EC02FA97AFB
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/cache/min/1/wp-content/plugins/parallax_video_backgrounds_vc/assets/css/animate-7490004261602226c037e62260c39c8e.css
Preview:	@charset "UTF-8";./*!..Animate.css - http://daneden.me/animate..Licensed under the MIT license..Copyright (c) 2013 Daniel Eden..Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:..The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software...THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHET

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x332, components 3
Category:	downloaded
Size (bytes):	92660
Entropy (8bit):	7.99073508360426
Encrypted:	true
SSDEEP:	1536:83QZhFwkWe+/6woeWrGzuvw/Nhu5TDaL8i76zBj2CEM6cDhBvAzqF:8QpwHe+/6IWmjNcde6zBicBhBozqF
MD5:	97A573CE121C35989428D2EE2E14ACE8
SHA1:	25952A5D3BEE9ED2A5A3CA70D078966D236B5B02
SHA-256:	09A9F3D5519D7293730C20851C1A3FB13AABD63430D1D56073CBB0B97A5DBF14
SHA-512:	D8E4B5746047609913514D31B3BAFF5062EF2DB2EE75D93B7B976C99BF80D10625A0E4E40FD78F0CA600ADEC55C20D452A6C29DA7D90B046BD78CCD300FDAAA9
Malicious:	false
Reputation:	low
URL:	https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/adult-night-club.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L..........................................................................................Kc.........0...}....&.F..B\|...,.x...`..3JpDy-.....iE.O.0....@.0.!.0....J:.ph....b.e.6.1.5.r.j...R.;.MN.r2.GB.P...i.i.*......l.....!...@./.K.5e.....%.A..u>..0.!.7A..t..5.g...q..Z\|.S...0...1#..0....6e.z..........w.....B..`.\...W.B.!"$_..q..t...H...`....P...-,d/..........u.R....Y..:.6DDi...<....!...u.P&...0......j..`....`....`...j(....P...S..72.<..f`=g?X.`.pV_.f`.n;..Z6.).Y(.~...0...B..";.....+$.-.R>k.H..E..-.w..l...6..}.\|2.3.x...`..[aa.OX.d.A.(3Hj=..X...z..-Ax...z.}.Mg...5:..O9...5.\|..f`.w;Y..tV].Nbd.fKZ.<..I...[8...Bt..b$.g....}CYUp.......T.u.......+f..q.{.@.....@..`2....5.....4X.M.mZ...xI........Z.....2.X.....pW..Qt..W.~.g.^... ..r$...G....w.:...)...I...,&?C...1..T..C!.79...T.2Y....4.....Q.o....d..

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	368
Entropy (8bit):	6.494138511115667
Encrypted:	false
SSDEEP:	6:6v/lhPk6nMRJNnDTI/+euAlBTs2l/+sFm1a/4LFecPCFl057HCbp:6v/7s6nM3m/lR5Z+Ba/GFeE5e1
MD5:	D99E602DCD2358729183028E2687F404
SHA1:	0843F1FE963E40D95736F8BF8F0B055C3F8EF1F7
SHA-256:	A538A0F474E35C6213F1D69B8FE18206EA63F10168FA2B8E86013F36692CF062
SHA-512:	FF3005C33A72593EB31C2CE3531EAE646F9673239493D71A91B29B0630C073D301551DDF5661DC6CC2D271F6C2141579B33209E2C745256E1CB583D591D9EF0D
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/uploads/2018/10/cropped-identity-32x32.png
Preview:	.PNG........IHDR... ... .....D.......gAMA......a.....sRGB........EPLTEGpLv..v..v..v..v..v..v..v..v..v..v..v..v..v..v..v..v..v..v..v..v..v..r..p....tRNS.;.f..I..b.%..@o.W.....-.....IDAT8..I.. .EA ......a(b+.........*..)VK/ ^.b9.x.c...K......$...`..G.\s.xB$`m..%_>.........ry3........@.}Al.Dn..S...)r..~......7I.\|!w.... ....'... L"<..U'.....B..~).".....IEND.B`.

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	3564
Entropy (8bit):	7.646428607254614
Encrypted:	false
SSDEEP:	96:bElbw+iXTkpJup/4L1L/loBQwqVjUTsCuq/6zrnp:mwTTkpJupAL1/kfejUTsCuqep
MD5:	C4DADB2B03470FD947FADCAC2A6981FF
SHA1:	A1198568740DD381B9D877CFA6EFAE7CE3A51DA3
SHA-256:	FF72523FF32288FC56A8E8B5EED51B17E245C1BF3B1D68D0F52A5FFB30188660
SHA-512:	4912EB00802D0D09409D9545E673BC632A5C990B614D13191B01D8B55DF20296CC5F7FF80998D4A366464E1A3410BBAE348F94C51289E77C9CE334032FF2A835
Malicious:	false
Reputation:	low
URL:	https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/logo-white.webp
Preview:	RIFF....WEBPVP8X....0......\..ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH.......m{\Y.o....(u....!.kF{.N.A..^..C8b....ZU$.............$Im..l_X.....\|.......O......~......y....7.....D.K.,?1....>...m......j.lK..`_....pF...m...E.;f..u.....2..k.z.......[.o.....U.?.-C37....`.....~..v......8..='hB.a$....3.k.O..'.z...C(..Q...$..RF..,.%.i..Tt..!..d..'.Z.ST..Hca....9..vn..%....;...7q'.....=AG.v.:..{.........K.f..Q5[s...0+L..oq.'+#.d.}...f`J.........E.......<T.p.Nx.....8..T....1nkcI.....'..YQ........ut..........~...!>...,....L....%....U..^..`.%I..\.*..C.S..c.

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 31972, version 1.0
Category:	downloaded
Size (bytes):	31972
Entropy (8bit):	7.9930662144654745
Encrypted:	true
SSDEEP:	768:5yxBR6vUiUfV6DvzDJYlu2ulRyMPiRZ0Ze3H+YcUf6hN:5KBR6vU1k/lll2yZoH+Yo
MD5:	770D5EDC858D7F4EC5C7FFF6CCACB25E
SHA1:	8248C80ACAD6943104901C445EE329338BE37F91
SHA-256:	21B25BB46F26604EA46359806C1522197FF4A55B20D1D25E53186A814218B595
SHA-512:	AB44E16F5E90F64AAD10278F86793E15372E2C3F5467438BA73B08D2A9462286CB912B29087F0B0AD585A10842F822E052650F802A2560B8823C12F620FAF9C9
Malicious:	false
Reputation:	low
URL:	https://rmshg.amplified.training/pages/themes/default/css/font/fontello.woff2?72081712
Preview:	wOF2......\|...........\|..........................T.`..j...(.....j..6.$..P. ..M.......d^K.....q.g.....)..,.n.AnGR.....OMP"c&.z..P@.:u....PX.IE...sd.=.....H....u.......pa?...8F[...W...Cay..,y.^.[..........o=.r.o....{.....^............V.._..V./...1.....x..C.&E..o.'.6'...D......y...hU...4[.i<...y@....x@.ZD.5<?...1.1X..g.....`#..cR. !9Z....b$.u.`.}.=.;...y.Q'\.w.w.rK....F).U..o....kJ8..P...0.......\|sz..2.bJ...]......o.i.E.m..`...l.....n.............C....m...)..`...C..Pf.:/...^.(..Vw..d.\|.j.kQ-j:..1.....J.4i{.3...=....z.~..)?..>.P....X...%.Pg%....h...s....r...&."2..f..1...I......a.s../&.u.<.}.d[W.9A..h2.....^c..fd.B....W@Y..C.Y....:.&ua.?0..C...g~.7.A.B.6n..PoD.J...2v[1....:0..[.5\|kc5I........k...k.>&L7...T....$pf...4sN:.=;.].........~.~......FC..&9.$.&@..tC.#-...$.k=.9.9.@..@..@r..u..s.E......E.._.o..%....*......n.E @.p..u..j...^q,az\h..'.@:...p0......I..4.kI...ic".."....{f..7.}.1]..t...."".....c......naKMq.>.......E...N.q(...A`.2.O..{..W...

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (24292)
Category:	downloaded
Size (bytes):	24430
Entropy (8bit):	5.228104053890698
Encrypted:	false
SSDEEP:	384:Q6CrHpFLFWZ6/tX2lHJdkMiYnFpg5SLwaE2fSNAc0Eny+RWuK7NeB2wV/vtrx+Ow:SWZ6/8lHJdkMioFpg5SUB2yQEny+NNxa
MD5:	08EA8682652B05BEEA01DDA05766D2E1
SHA1:	A88370395F5758361F27803C429286AA12C3F7EE
SHA-256:	4C0CC637858D6503CBA9262F8BE75740C29E853605A153A7BDE46A6E2E367EB0
SHA-512:	DFB4FB95EA0D4B4E91F3473C525ABB71D08353930D401C25628CB54D7FD652C2C50B679836AB4A955D108C7EEBF09A46FD2D0650C67079B9D514B3DDE92539CA
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery-validate/1.19.3/jquery.validate.min.js
Preview:	/! jQuery Validation Plugin - v1.19.3 - 1/9/2021. https://jqueryvalidation.org/. * Copyright (c) 2021 J.rn Zaefferer; Licensed MIT */.!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof module&&module.exports?module.exports=a(require("jquery")):a(jQuery)}(function(a){a.extend(a.fn,{validate:function(b){if(!this.length)return void(b&&b.debug&&window.console&&console.warn("Nothing selected, can't validate, returning nothing."));var c=a.data(this[0],"validator");return c?c:(this.attr("novalidate","novalidate"),c=new a.validator(b,this[0]),a.data(this[0],"validator",c),c.settings.onsubmit&&(this.on("click.validate",":submit",function(b){c.submitButton=b.currentTarget,a(this).hasClass("cancel")&&(c.cancelSubmit=!0),void 0!==a(this).attr("formnovalidate")&&(c.cancelSubmit=!0)}),this.on("submit.validate",function(b){function d(){var d,e;return c.submitButton&&(c.settings.submitHandler\|\|c.formSubmitted)&&(d=a("<input type='hidden'/>").attr("name",c.subm

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (631)
Category:	downloaded
Size (bytes):	517649
Entropy (8bit):	5.713376874006511
Encrypted:	false
SSDEEP:	6144:m1K1Z7NMxjW6eJoWvAlUjWwuMSYCVvLk8DSWd1Ps8Jz38iZc:m6eWTAujfuPY0JGgkt
MD5:	E2E79D6B927169D9E0E57E3BAECC0993
SHA1:	1299473950B2999BA0B7F39BD5E4A60EAFD1819D
SHA-256:	231336ED913A5EBD4445B85486E053CAF2B81CAB91318241375F3F7A245B6C6B
SHA-512:	D6A2ED7B19E54D1447EE9BBC684AF7101B48086945A938A5F9B6AE74ACE30B9A98CA83D3183814DD3CC40F251AB6433DC7F8B425F313EA9557B83E1C2E035DFF
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4539
Entropy (8bit):	5.217543310321057
Encrypted:	false
SSDEEP:	96:Zfcdiq+yH5vi5vGL5v51Yi6nE86H5vF5v9L5v9SqJnL7jXxH5vw5vYL5vbh:hc6agWCnE8S/vGqB7jX9uM/
MD5:	2C120493C068A07C839C16AC706177B9
SHA1:	1FE690AB60E16D5FCB8C7F6603BED58A592B1CFF
SHA-256:	C4A636F30EC5754A985C1DE5DF04A996B4BE2C5C1FD424A4AA604D3270F7E9B1
SHA-512:	FE8E96C19EC97172F41EBA28034259D4F241D6456C08F3F315948324B18DF8EFC978A247F2782DFB04D1BE91BDF377EBD18CFA134DC4A36108AB7F9EEB622EC4
Malicious:	false
Reputation:	low
URL:	https://www.rmshg.com/blog/latest-post?numberOfPost=3
Preview:	{"success":true,"msg":"","posts":[{"id":15760,"title":"The Growing Problem of Alcohol-Related Incidents in Music Venues","slug":"/blog/the-growing-problem-of-alcohol-related-incidents-in-music-venues","description":"For many people, alcohol and live music are an inseparable pair. Over 93% of people who use substances at live music events report drinking alcohol. With alcohol contributing to 140,000 deaths per year, the risks are higher than ever. Bar insurance can help owners mitigate the risks of dangerous alcohol-induced...","featureImage":"https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/istock-182417552.jpg","featureImageWebp":"https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/a581c3f5-d1d9-4bbd-8a7c-1917c5ab1301_istock-182417552.jpg","categoryId":819,"categoryName":"Music Venue Insurance","categorySlug":"/blog/category/music-venue-insurance","authorId":98,"authorName":"RMS Hospitality Group","

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 20964, version 1.1
Category:	downloaded
Size (bytes):	20964
Entropy (8bit):	7.967530511389482
Encrypted:	false
SSDEEP:	384:kjs7D0xz38TZ3tzGbjGerYQmzW2NsE9LR3uO+M62Gzw4W7M220n/qZOSO7O7RWfk:HUxD++xrYQiWdE33Z+uGbWo0nSsSSSRD
MD5:	107BC2E1387828D8595EF4452C3FC666
SHA1:	4E630A4F834886AB65248B9DFB679659D079A764
SHA-256:	2944ACFDFF85DC6308CF8A2766B6EFCE9EC63FC8356FD5118A98001B936E50DC
SHA-512:	F993C093B0FB472745539F8F636EA1187E14FBE869A82F2C3D31FD29E2FD43BC2EE640FE9329E35CA04E4DF33E226A24EC46091533748D94930861DC7A5CE84F
Malicious:	false
Reputation:	low
URL:	https://rmshg.amplified.training/pages/themes/default/css/font/Open_Sans_700.woff
Preview:	wOFF......Q.................................GDEF................GPOS................GSUB.......Y...t...OS/2.......`...`.u..cmap...t.........r$cvt .......].....-..fpgm...h........s.ugasp................glyf......8W..W..}+.head..@p...6...6....hhea..@........$.)..hmtx..@........h.M0kern..B............loca..L............;maxp..N.... ... .g..name..N........\..3Xpost..Ot.......&j..prep..P............k....................................x...5.A...../0.E....-..A.q....2..mz.....)@.]-R...X...@..DN^Q].Md`....]h.,4s...../...................3.......3.....f..................@. [...(....1ASC. . ...........X ........^..... ..x.c```d`.b.......@Z.A...b.`.d.c8.p..?.!c0.1.[Lw.D.........\.J..(......T......... .Za.....ZK.......?........=.s..........}.......t=...\|o..ED....5.x.c.a.g``..$KY...e@.,q@.j...o@<..O.H.t.................c .p@..........3lbd.....-.}.M...!...!....x..TGw.F........)..)7.W..`.\|o.4@.Q9...K.../..B..c.oH.EG...,H..U...M.y..>.........[7o\...t.j.......^8......=r.^.o..W>.

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 320, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	192842
Entropy (8bit):	7.981671479265058
Encrypted:	false
SSDEEP:	3072:3kNL+biBKe8WRhpm7TAj7dR7jrUYkuFSjCkiHPncqkcsT7HlIEorOKb8QD:s+b+8CTmC7dR5ke2iHPcqVQIjOKb8u
MD5:	B499DC97EEB6069EF017209B969F695B
SHA1:	0DEF30FF3963EF68E3D0AE57721AE9D6CB40CA62
SHA-256:	903364B1835785220B3EE89646ED7BD54DE0C80891C377A86A2FC2243075D0BB
SHA-512:	55BB1C963ABB051E2530933A84B057706C13E1B8C364ACCD59AA341E327EED57DF4CBC5094CA7B2F2DABB5235EE7BCFCB1E0301420D791E757E1DDA93B5B85F0
Malicious:	false
Reputation:	low
URL:	https://d3j0t7vrtr92dk.cloudfront.net/rmshg/1576790499_slicertraining.png
Preview:	.PNG........IHDR.......@......8,.. .IDATx...Y.%Ir&ff..g.[n.Y...j..5I.G..H?S...^.. .. =hF......Wvwuwee.v.D....[Xx.,P.:....ws...77......QD._"....z!...w..._.}...-3.....N....D...tC..\|..m.....M....}.!..c.c.H1F..9.S.2.@.......,..K.izh.....Z.....'.@.......]..yv..0.~...+`.{F.{\.#..)t1...dNiL9.a.3.fZ...q...K/....J.D@$.... J..O...6.?\|.B.)... .......9.P_.2Uo.:.~..B....Q`...Q.....B....r.T..pJ)....J.J@....".....0..aZ.p.4.VE-.....D.....:...q$.]......$...%C..<I..a.:Y.."P...a......{w..f^.ob@'c.h.O6...........d..7h...u.R....F.?t...$..D...S .].u.ty1....I..'..........\|..h......_.u..%....9.Q.OD.....WK.Y;.z.e.2.L......u......j...q?4t..eJ....t.!"...".`...[...A@.:... .u.S...n8...7....A..7.:q..l..\D8.7.......3+?... ..".{p..]y..l..q.xm...7m..I......A.c.#..S..=...W.(.....F.8..A...@.........Ye.A.F~..M- ..4.i....M.......l.. .........;..y..Y....M......S....Gj..H.\.......M\.....S.d.X.:.N.......*..'[.......:~I(.:K.l:.u....T+.........:5..5....k38....

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9156), with no line terminators
Category:	downloaded
Size (bytes):	9156
Entropy (8bit):	5.098652045063764
Encrypted:	false
SSDEEP:	192:MnB/dVfhc9fCpzn/zA/9z4a2lR87Y2iGEz5cFhc9fiuohc9fKZ:YB/ddhc9fYnMFs87Y2UOhc9f+hc9fU
MD5:	3D1D463AC5202E3B6524737D3A1C8066
SHA1:	DB6B879342B03B7E64C46CB9DDED8E6DFEAE5E3E
SHA-256:	54282B91DFF4B67B018ADE5B5A8A566C864CE5A33E5B7D7C652DF409976875F7
SHA-512:	20892C8F16AB33A17F4C6E8033E485E6A37B67D5C14E0D63B19D5A9F5D10FCB964AEA42521F6099484A8E32F84DF2A8268958E553B61A553AB47B1F536D98027
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/cache/min/1/wp-content/themes/fortuna/stylesheets/animations-bc60c9de0e91faa1d9bd8ff70f604f89.css
Preview:	@media only screen and (min-width:769px){.boc_animate_when_almost_visible{opacity:0}.boc_anim_hidden{opacity:0}.boc_start_animation,.wpb_start_animation{opacity:1;-webkit-transition:transform .7s cubic-bezier(.26,.87,.44,1) .25s,opacity .6s ease .25s;-moz-transition:transform .7s cubic-bezier(.26,.87,.44,1) .25s,opacity .6s ease .25s;-o-transition:transform .7s cubic-bezier(.26,.87,.44,1) .25s,opacity .6s ease .25s;-ms-transition:transform .7s cubic-bezier(.26,.87,.44,1) .25s,opacity .6s ease .25s;transition:transform .7s cubic-bezier(.26,.87,.44,1) .25s,opacity .6s ease .25s}.boc_start_animation.button{-webkit-transition:all .15s linear,transform .9s cubic-bezier(.26,.87,.44,1) .25s,opacity .6s ease .25s;-moz-transition:all .15s linear,transform .9s cubic-bezier(.26,.87,.44,1) .25s,opacity .6s ease .25s;-ms-transition:all .15s linear,transform .9s cubic-bezier(.26,.87,.44,1) .25s,opacity .6s ease .25s;-o-transition:all .15s linear,transform .9s cubic-bezier(.26,.87,.44,1) .25s,opacity

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 96 x 200
Category:	downloaded
Size (bytes):	5512
Entropy (8bit):	7.88448147196049
Encrypted:	false
SSDEEP:	96:qdZf2nVOKzBafsPFbHeNtJsn0hni1Uadnp4DPozh9fnW+qb5Ro2cQcqCoZVeWFFU:znVf1af4F7eNHC0hi1UalQozh9fnWRNA
MD5:	5D82BDF98E1C89E1E24867257E308350
SHA1:	88AA4B1E593AAC21A9D30BB75D0CA5BE8B7780DA
SHA-256:	60DDEC41A1D4F2FC996998B34F4636E8A3D825B1E065C2CCABDD15751DFCA577
SHA-512:	9209301770964ECC9FAE10BD89A7E3192E58F2AB2A9EE4390C844D98A2EBFCC4C884F9C05D387DC974E45C6C45D93B1CBF6B781C615307BE45DB93A69DAD0C40
Malicious:	false
Reputation:	low
URL:	https://rmshg.amplified.training/pages/themes/default/css/images/icons.gif
Preview:	GIF89a`...........j..t..z....).1B.0..9........B.AHZ.R........Z..#'JUl.b.Y[X.k.Qa}.t..>D...@s....Uq..HL...I{.Uz.Vz..QT...D......YW...T.._..z{.L....~...y...b`...&.#h..l..k..O......jhO..V.....k..o..u..v........n...y{U..q.-...E.Eq..:.0......y..X..p....._..a..y..~.7....>.Ek.ei.k.........r.m{.....B.ax.t.Bt...J..._.. .....y...._...v....B...p.g.T...r.s...L.SL.h.......0....K.Y...~._..._.F..I.........................R.Y.l.........M.t..........z..\.......X.....L..S.....Z..z.....a..h.......p................v....g.......a.....{.......i..w..p...........n.............w..................\|...................................................................................................................................................!..Created with GIMP.!.......,....`..........D..A....\.P.B.....(.`C../j...G..S=...#H."Iv..rd.+=.Tir..,Q.D.........3..C{.<.eQ.(..\|j...Q.>.G..@.vn...kX.c....U-X.d.mkT...d.M..w.\.&..]*.o..F.....d .d.=^.....x#_.l.r

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	23313
Entropy (8bit):	4.934695175902229
Encrypted:	false
SSDEEP:	192:x77SqA8+4a9xm9bhzw/mcJPwWKvHTZWK9WbayMfj2mmoakQhWr1QfX3HkPCZnFfe:xgIa/QTZWiWiBauKmzQWyxQHaJfakRE
MD5:	389D440A483E3653209BE68DD7E20EE4
SHA1:	FA6DCF27D67A4DC0D9EDFE37FC9DF6BC360268F2
SHA-256:	8AAB8133DC968F6FE934525F342FC05249038FD7F7896196893DCC83C217F016
SHA-512:	4B7D2177649BFC008EFF697C485F785257806A497FFB5E1C51CF0ECBF4DA94332F55704693C3E66FA369CB1CD8F80ED3ECC697B50EAAE3FF9F93B223045B661B
Malicious:	false
Reputation:	low
URL:	https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/css/header.css?v=080020230200248353247
Preview:	* {.. margin: 0;.. padding: 0;.. outline: 0 !important;.. box-sizing: border-box;..}....html {.. font-size: 62.5%;..}....html,..body {.. overflow-x: clip !important;..}....body {.. font-family: "Montserrat", sans-serif;.. margin: 0.01rem auto 0;.. padding: 0;.. color: #102037;.. font-size: 16px;.. width: 100%;.. font-weight: 400;.. background-color: #fff;..}....b,..strong {.. font-weight: 700;..}....p {.. margin: 0 0 0.8rem;..}....p,..ul li {.. font-size: 1.4rem;.. line-height: 2.4rem;.. color: #102037;.. font-weight: 400;..}....ol,..ul {.. padding-left: 0;..}....h1,..h2,..h3,..h4,..h5,..h6 {.. color: #102037;.. font-weight: 700;.. font-family: "Josefin Sans", sans-serif;..}....a,..button,..input[type=submit] {.. color: #212763;.. text-decoration: none;.. cursor: pointer;.. display: inline-block;.. transition: 0.3s all ease-in-out;..}....a:focus,..a:hover,..button:focus,..button:hover {.. color: #212763;.. text-decoration: none;.. outline: 0 !important;.

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 320, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	153332
Entropy (8bit):	7.989238504997115
Encrypted:	false
SSDEEP:	3072:xvm06kEIK52CufuDGXjcuQ69TcI3kkWBxk0/jKX2YvwMIeTA4MKPzTB8wF:MzECufPjcucGWUl2kieTDPzd86
MD5:	361227C756AE1A1B5C10B198A1C13949
SHA1:	F15B6C2CB0827C8C5B332C4E99F8830CF27673C4
SHA-256:	5B4EE37AC1FFA8BF0B7F508989CAF1FCE2CBFA3A1AA4C794D626593A4CE7D3E2
SHA-512:	FC4902AAFF5E327004DE58A3C4F48E819D53CF5F164D7C5433051D01CEBAFC560C0C75C02D803990F719443049811613E36B99BB9C0B8807005785BCCE49A02F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......@......8,.. .IDATx....%Iv.vND..^..~.wvf........AC"l..l.. .lP....0...b....Y.@X.lB.aA....Er......L.L..........}.+..Cd.=..y.zv...'+of.....'"........D..&".@D"B...".... ..B b.Ey./.K"..Pk..B.0........R.,K"25X.l..y^....}.6..)N..k.,...T......RB[i%..$R.q.B...i.>....r...9sLAD..i@$.rN.....T...(..y...F.A..!....9oiv......a.M....b.a..Y.)..(.R..%...6].@H.9.!t_p.aDT..u.+.MS.....EQ(.0.Q..Y...:.".%.?..R..Q..".gLmZ..e.....^.!..VEA....?.."R@B.)B!..""$.z.:Sa..EQ....;e_.?......P.B.QI.TP.....RZ..gd.bD`..,..vKfG.....[.J...ze.0:....,. ..8..\J).Y.Ok D....<c..P.88....fh.{.....n[..?-kx.-.@Se.!..Nq.q^..r..`=....b."..z7;_..{......Ll0x..l....\..!.Q..8.2KM.,..RJs......./...'q...+.+.w4.!..._.#z.....<.........,k.Z..7^.PD..+.Q.d....3z.m.Es...._`...'....b}e.....[...."..8.m.@D.jc.m.....:...i4.T....k.(V.Z.j..k.......>...w$sL.......0....<..$9T..RFw.^.U,....\...K.U...oAU..0....9.\|..oq..2Z..Sk..>.3C........m.....r(wz..z..!...:..D.0s..'yC...0.<...(Z...

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (55687), with CRLF line terminators
Category:	downloaded
Size (bytes):	55942
Entropy (8bit):	5.2643522634673525
Encrypted:	false
SSDEEP:	768:Nlmq9+ENHFJfpp5EA3mVQQf8V9xWnOJYf+:Xmq9+ENHFFpp5EA3meQf8ZWO6W
MD5:	41E0F6002DF30C53085F73D10B26D65D
SHA1:	1B0B0666D190789A8F4F8273296BD21DBD1A6CA9
SHA-256:	84CF55BE6DD4649960F1BDFD5E2A0EB14D6A7BF712D7830BD4A0475DEA8509BB
SHA-512:	651BDA920CF5CD11107EA168ED9408EC11271044AADAD8199F0C78D4B6CAA7C0D689FC47757259D0AA36E74EF415CEB03C7ADC723744DB292958316EBDDB3405
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.layeranimation.min.js?version=5.4.6.4
Preview:	/***********************************************.. REVOLUTION 5.4.6.4 EXTENSION - LAYER ANIMATION.. * @version: 3.6.4 (28.11.2017).. * @requires jquery.themepunch.revolution.js.. * @author ThemePunch..************************************************/..!function(e){"use strict";function i(e,i,t,a,o,r,n){var s=e.find(i);s.css("borderWidth",r+"px"),s.css(t,0-r+"px"),s.css(a,"0px solid transparent"),s.css(o,n)}var t=jQuery.fn.revolution,a=(t.is_mobile(),t.is_android(),{alias:"LayerAnimation Min JS",name:"revolution.extensions.layeranimation.min.js",min_core:"5.4.6.4",version:"3.6.4"});jQuery.extend(!0,t,{updateMarkup:function(e,i){var t=jQuery(e).data();if(void 0!==t.start&&!t.frames_added&&void 0===t.frames){var a=new Array,o=_(c(),t.transform_in,void 0,!1),r=_(c(),t.transform_out,void 0,!1),n=_(c(),t.transform_hover,void 0,!1);jQuery.isNumeric(t.end)&&jQuery.isNumeric(t.start)&&jQuery.isNumeric(o.speed)&&(t.end=parseInt(t.end,0)-(parseInt(t.start,0)+parseFloat(o.speed,0))),a.push({fra

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 319, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	224354
Entropy (8bit):	7.991816803943617
Encrypted:	true
SSDEEP:	3072:u3Cmi671H/2rjCGe696eraVqyWW+HsO267CiDi1lO/HcGZrd3ajaeRTEOJtCGZKp:qSe89Xal+i6MccGZIAO6MK/S5/oYat
MD5:	0CC7AB391F7504B777AE1AEEAF66B3F2
SHA1:	68E2647C5FA2ECBB80EE2216299B216BA53565B4
SHA-256:	04185AB69036724A3235578C7B279478B54966CCDB81F0105F812740609F7B2A
SHA-512:	91BF19E9B7913E41A94797E695C43BC25753C54893946773E85E7FAE7768A27502BBF66D9796E8190AF52C5A9BBE143F58ED4438BDB396F25F9A00CE6B8456A8
Malicious:	false
Reputation:	low
URL:	https://d3j0t7vrtr92dk.cloudfront.net/rmshg/1576785827_drivertraining.png
Preview:	.PNG........IHDR.......?.......8.. .IDATx.L.Y.m.Y%6....s.m2.U..T..);.&..F...).1D.W../..~v8.Z.v8.2..]e.S.l.....D..(.....(..ow...Z....s_..p.{.9g....h'?.c?.-.C$QS.]r.6h.....4..E...... .. Y....!.......K./.P....<..z... ...2.........:JU..Wu...$#".EFDdL..2.I Z...6.h..].!82.....4....p..0....H._.D...:"....H@"'..! D....d.6...%.6a.xty.....)F2L..."@..... ....o..@.2.t..5.......A.3(...........@......E.$s.............Z..f5.O...z.]o.g..j..Uk.rj-b....<.vp.^............uk."H...JD..}../..^..W..DA0,.%.P..T....z...V.)T..^.....R/...z.........C..........9......M..l&1>'...`.z0M..@...<n\| z. m2......-DR...J.HY...nL.HZ...y\..,.#.Uru.......a^j>..2../}..Vg..'.p.~~...z.....[o.?.{q..~y...v..z..}.m.9]..n....wn.....m^...'...7...&....cy..'.e.P...\|...Xf,.....z.7.x..\|.;...U..[..b..~.uy.....\{p......."Hi.b:.v...../..w..g...?.O...5[....f.).'...Sgq.^Rgx.V...y...?..s....^x..W_../......w...r.e.......z.......a.6.Y...w.\|.K.u....0`f...........F.c]..U......e(. ]6.NF-...S.!.....JG..

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (5737), with CRLF line terminators
Category:	downloaded
Size (bytes):	67125
Entropy (8bit):	4.692294970926567
Encrypted:	false
SSDEEP:	768:IhdcwdVz+QXbiHcNUBS/QFc4l8F/Sbg4TnTP5GP+PwPV36o5rvrklChS3CVC1h6+:Ux4l8JizL3IVtkxmvSj
MD5:	D6475E09A4A0B6D3DF7ADDE429907A02
SHA1:	20CB370C5F31BCB674628CFAF7BA260EFE4E5C9A
SHA-256:	66C76B8685AFBCD6561762C9A8B4456F37AE6E5C50483D8B641A4C9E2757E559
SHA-512:	E4567025C6D0E3030375ECCEB28ECCE8305A6855744BC03C4633F84433E620CBE58492816B9E68DE4738F0B9E8ADB542DDC12DCC41562367BDE910A34E20695F
Malicious:	false
Reputation:	low
URL:	https://www.rmshg.com/
Preview:	..<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="utf-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <meta name="SKYPE_TOOLBAR" content="SKYPE_TOOLBAR_PARSER_COMPATIBLE">.... <title>RMS Hospitality Group \| Your Hospitality Insurance Specialists</title>.... <link rel="shortcut icon" href="https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/favicon.ico?v=014020240840136914499" type="image/x-icon">.. <link rel="icon" href="https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/favicon.ico?v=014020240840136914499" type="image/x-icon">.... <link rel="canonical" href="https://www.rmshg.com/">.... <meta property="og:title" content="RMS Hospitality Group \| Your Hospitality Insurance Specialists">.... <meta property="og:url" content="https://www.rmshg.com/">...... <meta property="og:type" content="website">........ .. <link rel="precon

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56412), with no line terminators
Category:	downloaded
Size (bytes):	56412
Entropy (8bit):	5.907540404138125
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyBblxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0BbchXwW49z2
MD5:	2C00B9F417B688224937053CD0C284A5
SHA1:	17B4C18EBC129055DD25F214C3F11E03E9DF2D82
SHA-256:	1E754B107428162C65A26D399B66DB3DAAEA09616BF8620D9DE4BC689CE48EED
SHA-512:	8DC644D4C8E6DA600C751975AC4A9E620E26179167A4021DDB1DA81B452ECF420E459DD1C23D1F2E177685B4E1006DBC5C8736024C447D0FF65F75838A785F57
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=11, manufacturer=Canon, model=Canon EOS 5DS, orientation=upper-left, xresolution=166, yresolution=174, resolutionunit=2, software=Adobe Photoshop CS6 (Macintosh), datetime=2016:06:25 13:39:44], baseline, precision 8, 1254x836, components 3
Category:	downloaded
Size (bytes):	599228
Entropy (8bit):	7.963660483874493
Encrypted:	false
SSDEEP:	12288:WASiwpQfydiwkS7jPWNs/neGY50/lw5hDWLPpLFLgSpq1h/QncHEf+IN5+g/cLZt:qaa7jPWNs/n/Y5ulOhaLPpLFLFpS//ia
MD5:	0049065F6B3A47D97DB8B15571568A0E
SHA1:	13776489F8F45AE9FC155FAA5396DA00CF3CE3C7
SHA-256:	DA8CF0F8B76BE6F91E6A31195D6E8AF3DE4AA1A8AC63A1ED688F0796268D1938
SHA-512:	4F15A4F4207CA62C9C03781995961FA575B4394791AF13F19E4F4CA72377E92D93E5430CEB213FCD68265565C8C654E87DDC36D96302A4A370BEB28230EC12A5
Malicious:	false
Reputation:	low
URL:	https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/istock-597639502.jpg
Preview:	......JFIF.....,.,.... BExif..II*...................................................................(...........1... .......2...........;.......................i...........L...Canon.Canon EOS 5DS...-..'....-..'..Adobe Photoshop CS6 (Macintosh).2016:06:25 13:39:44.Iza Habur.Iza Habur.!........................."...........'...........0...........2...................0230....................................................................................................................48..........48..........0100................................D.......................................................................................1...........2...........4...........5.......@...........}...........2016:05:12 13:53:19.2016:05:12 13:53:19..Jj.@B......@B..............d...U.......................043021001109..U.......U.......................EF85mm f/1.8 USM..00000430bc........................................(.......................................H.......H.............Adobe_CM......Adobe.d.....

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8089), with CRLF line terminators
Category:	dropped
Size (bytes):	8331
Entropy (8bit):	5.184901696432316
Encrypted:	false
SSDEEP:	192:eHe3syiqiihWp2xgyhK1/l+zWJc2VJS/gkBVl1p:CMS/2f7R
MD5:	37B37940AC6CF4C7CBD47103BAD5CCB5
SHA1:	AD851D07C005BF59206A1C036458984930D8E845
SHA-256:	748F3E447F2F7475A4BA75F6F2E2E9F468A3AC443EAE879E2104EC562B2158BC
SHA-512:	BA300130E18098219A467F506CE8FC973C20A8794C77665636C7847A2A40E53E57C2FD5B31EF26886FA81A9B2C613C70C4E19CE6035E4E0F2AF89443259B02ED
Malicious:	false
Reputation:	low
Preview:	/*******************************************.. REVOLUTION 5.4.6.4 EXTENSION - ACTIONS.. * @version: 2.1.0 (22.11.2017).. * @requires jquery.themepunch.revolution.js.. * @author ThemePunch..*********************************************/....!function($){"use strict";function getScrollRoot(){var e,t=document.documentElement,o=document.body,a=(void 0!==window.pageYOffset?window.pageYOffset:null)\|\|o.scrollTop\|\|t.scrollTop;return t.scrollTop=o.scrollTop=a+(a>0)?-1:1,e=t.scrollTop!==a?t:o,e.scrollTop=a,e}var _R=jQuery.fn.revolution,_ISM=_R.is_mobile(),extension={alias:"Actions Min JS",name:"revolution.extensions.actions.min.js",min_core:"5.4.5",version:"2.1.0"};jQuery.extend(!0,_R,{checkActions:function(e,t,o){if("stop"===_R.compare_version(extension).check)return!1;checkActions_intern(e,t,o)}});var checkActions_intern=function(e,t,o){o&&jQuery.each(o,function(o,a){a.delay=parseInt(a.delay,0)/1e3,e.addClass("tp-withaction"),t.fullscreen_esclistener\|\|"exitfullscreen"!=a.action&&"togglefulls

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32000), with CRLF line terminators
Category:	downloaded
Size (bytes):	42772
Entropy (8bit):	5.084034699362911
Encrypted:	false
SSDEEP:	768:8BA7PMMFA0tdlXKNSR4vlGRep2lcwJeL+C2jQdc7YCORUQuFBt33:gAIMFFdYMxAcEQDV
MD5:	56B28AD35F1816C6894B14190A0A006D
SHA1:	967CEAA9E6F67E636D818F42B4D5D15C7A4A254E
SHA-256:	B5757AA153F991C82C949E638C56B4913042196240F3A41CEC5A40C3366D1BDD
SHA-512:	78AA17CA7C163B0CBE846EFCD2EBC78AA55B760B737FAF5A837A6FD7971604A0829C6B4A35915A02CEFFC6173408A67B06885D68013E21059D2C105FA1AD5569
Malicious:	false
Reputation:	low
URL:	https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/js/owl.carousel.min.js?v=081420231114354913921
Preview:	/*.. Owl Carousel v2.2.1.. * Copyright 2013-2017 David Deutsch.. * Licensed under ().. */..!function(a,b,c,d){function e(b,c){this.settings=null,this.options=a.extend({},e.Defaults,c),this.$element=a(b),this._handlers={},this._plugins={},this._supress={},this._current=null,this._speed=null,this._coordinates=[],this._breakpoint=null,this._width=null,this._items=[],this._clones=[],this._mergers=[],this._widths=[],this._invalidated={},this._pipe=[],this._drag={time:null,target:null,pointer:null,stage:{start:null,current:null},direction:null},this._states={current:{},tags:{initializing:["busy"],animating:["busy"],dragging:["interacting"]}},a.each(["onResize","onThrottledResize"],a.proxy(function(b,c){this._handlers[c]=a.proxy(this[c],this)},this)),a.each(e.Plugins,a.proxy(function(a,b){this._plugins[a.charAt(0).toLowerCase()+a.slice(1)]=new b(this)},this)),a.each(e.Workers,a.proxy(function(b,c){this._pipe.push({filter:c.filter,run:a.proxy(c.run,this)})},this)),this.setup(),this.initial

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6576)
Category:	downloaded
Size (bytes):	24558
Entropy (8bit):	5.226519351707308
Encrypted:	false
SSDEEP:	384:mC4bjA0uGG4PNztoNegnWWW61+3+7KBFwjHY:mC47dG4YNegnW8+jwjHY
MD5:	C04242FC4F4F55206AD030160445633C
SHA1:	B310FB05E08EDA918CD1173DEEFE8635AB9588BE
SHA-256:	9F9AFEFA23EE20F2C9020A4C24B9481C9C3C88D89FD1084F8007F2DED7F67E1C
SHA-512:	0D33C07348A70AA23234D6A648FE0C45D40919789E8C0E3245A61574264AFAEF8F4BD959112CE9FAC737B960947F20C6E0DAF99DD45CACC5BC9BB7B96285DE76
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/cache/min/1/wp-content/themes/fortuna/js/common-156789e0351d24a22549032aa8f52ad9.js
Preview:	var boc_is_mobile=(bocJSParams.boc_is_mobile_device)?!0:!1;var boc_theme_url=bocJSParams.boc_theme_url;var boc_default_empty_image=boc_theme_url+"/images/no_img.jpg";var sticky_header=(bocJSParams.sticky_header=='0')?false:!0;var transparent_header=(bocJSParams.transparent_header=='0')?false:!0;var fixed_footer=(bocJSParams.fixed_footer=='0')?false:!0;var submenu_arrow_effect=(bocJSParams.submenu_arrow_effect=='0')?false:!0;var mm_bordered_columns=(bocJSParams.mm_bordered_columns=='0')?false:!0;var boc_woo_lightbox_enabled=(bocJSParams.boc_woo_lightbox_enabled=='0')?false:!0;var boc_submenu_animation_effect=bocJSParams.boc_submenu_animation_effect;jQuery(document).ready(function($){var header_h=$('#header').height();var win_width=getWindowWidth();var img=$('img');img.error(function(){$(this).attr('src',boc_default_empty_image)});if(boc_is_mobile){if((jQuery('#header').boc_doesExist())&&($('#header').hasClass('transparent_header'))){$('#header').removeClass('transparent_header')}.$('#he

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	52693
Entropy (8bit):	5.433724771936141
Encrypted:	false
SSDEEP:	384:4gt9whFKA1QwSFffTOaHaoOR2anU6gOFuGtFjZoq997nO2BOEzFtW2ZVq99mnn47:gBjvOcsUK
MD5:	187BEB7C5741BD95550E7825B46622DC
SHA1:	1FE5C7648FAE3B04AE1DDEE0AE633BACEC137ACA
SHA-256:	AD7D11C3E67978A9AD081C4864B512D355E16147F73ABCD9A74407CCC5F1E174
SHA-512:	EC86EBB8905F27519B815E7F9870B6C77E6CD6E9E5CC98C1E82639ED9EF4D51BE6060820F4A4C55F1698450445DC8379F92D2F96474FF5A7912367737B27C0E9
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Open%20Sans%3A300%2Cregular%2Citalic%2C600%2C700%2C700italic%7CMontserrat%3A300%2C300italic%2Cregular%2Citalic%2C600%7CLato%3A300%2C400%2C700%2C400italic%7CMontserrat%3A400%2C500%2C600%2C700%7CMontserrat%3A700%2C900%2C600%2C400%7COpen%20Sans%3A400%2C600%2C300&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Lato';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHjxsAUi-qJCY.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Lato';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHjxsAXC-q.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwaPGR_p.woff2) format('woff2');. unicode-range: U+01

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 234 x 82, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4204
Entropy (8bit):	7.73095226341542
Encrypted:	false
SSDEEP:	48:VIANn2e3aFJ3pDLzWpDOoIv8T3YIJi4wUlX0yEhneIf6ukPoG6/uV+QQOdKGRAHF:Vx2Oa9DLzODOo0ei4wUN0NNyRtIQMGrk
MD5:	FFB636C77D19FC13C417DB76074D1BC8
SHA1:	CCDECD594553B85B11E25422CAEED1721E38D5A5
SHA-256:	E357C44E28A7C2C2CD4F0F24B7E74953CCF14ACF982E4F6DAA467F5B035D603E
SHA-512:	38C287DA61782BE59DE97E33529240B1B48DF7B062BAA7B20EDF2AAB008DC50C11A122E41150AE2F3BA4996E4D53F485E18EF6E6C3B45B5C5168DD0377770C2B
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/uploads/2018/04/trusted-choice-logo-234x62.png
Preview:	.PNG........IHDR.......R.....m.d...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Macintosh)" xmpMM:InstanceID="xmp.iid:CEAC96C42D2A11E8A805CAA02DBAC39C" xmpMM:DocumentID="xmp.did:CEAC96C52D2A11E8A805CAA02DBAC39C"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:CEAC96C22D2A11E8A805CAA02DBAC39C" stRef:documentID="xmp.did:CEAC96C32D2A11E8A805CAA02DBAC39C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>p..>....PLTEGpL........................................................................................................................................

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 479 x 319, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	68007
Entropy (8bit):	7.987847651920911
Encrypted:	false
SSDEEP:	1536:GMVWlnHRjBgodyT0VsNGakMIUhudaj30yyq1eaETkn:6ooA0uGakMIUhZ30yyqbp
MD5:	10B406B249271D05A45AA592835EEEE9
SHA1:	575443B8BEEB7BD402C18B09062AE69E535886D2
SHA-256:	52874B78598A36E6ED23B356DD14FB11C81544BF7F06D465FC8C4C52E4660E6C
SHA-512:	3C8A0D2C3302F7E9B1A70CBE87464EAD67A037869DC5F6A22908052F10966FC23CBA48F72181B33DB7342989ABD7ACCF1F14D2E824D98B3AFB497D48F83153D0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......?......&^... .IDATx..].eWu-..\.....l...>..N...y.B.....sun..HD...E.....y>I$.D.(JB8.M...+".` .....eW..^k..0k.j.....U.s..m.5f.}..z.}L.Z{..{.."""z.....X.\.O...6B...:...7.`.b...m.;7...,m.g........0..m.r...E..:.y..tR..z..s.H.}..Y...p.H6c..h...-.e.A..y.u...u..u....MS..6w.....".{J......C..(..<nv../;...j...,..&;.t.M......[ltOg.=-Qm.+.....d........-.MZ2KZr..}.....v....t.>.k:..=.6v^q.w1.`...Et.&..N.y.]w.n5m.[0....x.x.0.....}.XVr...;.....@....%ape.i....7t..1.D...z...-c>..u...mP..b...Xhv.R.......W........M.i..mH........e.....C.9,k.......TZ.2i#L.J....p2.)..A...[....p...xid.....;.p..X.HU...bV..\kG....rH..R=X.6RZb...e.s.S...f.o.....^S..%...V9X23yd{. .T.m.g.......".z.Wv.lw...=CU.$u".V<......-.j....x.._!e.TZ...\|!..a..L..IMB&..1B..a......n7.etY.E...kO.(.v...".K..C......X<6(........v.k<^.H...'Y.Cr;.R..d@0l..........@..."........RW.@.An)\|....3..,.+......y.2.~..u/J..R.k.a]oV......N/"!.uE....q....'......V'Z....gI.....H...`.{..

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	621
Entropy (8bit):	4.592065763513686
Encrypted:	false
SSDEEP:	12:YSAooWKNWwfPXNEHnGXcwe6LRtcO4wGPCvwdlYJbWUmbWU3EVSJ:YSsWKNWwHWmXcwe6LRt38m8UZUYw
MD5:	85D8C40AAC9C25BB0B993D4AA039A56F
SHA1:	BA069C6FDF553B112EBA1E5D50E2C930CC557111
SHA-256:	4AD9A5493AAFC1F43E8882AEB9D07B945139AD6326D82A04B5237EE1A3283538
SHA-512:	CFA02D21870446FE704010B399A97943B03E9A56D9C50CA024A801F4C8475DD17B4944E3D7F3D678EBE7F7644075C69B109E5259FD4C9D6BA1F661CA46986CE3
Malicious:	false
Reputation:	low
Preview:	{"widget":{"html_lst_title":"Translations Menu","html_title":"Accessibility Menu","text_icon_small":"Accessibility","text_icon_large":"Accessibility</br>Menu","new_tab":"open in a new tab","broken_links":{"target_site_not_available":"target website may not be available"}},"skip_links":{"open_accessibility_nav":"Open the Accessible Navigation Menu","open_accessibility_menu":"Open the accessibility menu","skip":"Skip to main content","enable_visually_impaired":"Enable accessibility for visually impaired","disable_visually_impaired":"Disable accessibility for visually impaired","title":"Quick Accessibility Options"}}

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	23656
Entropy (8bit):	7.976050512831896
Encrypted:	false
SSDEEP:	384:Kw2UBPA4D1kKuoqNm3WbkGgkp5uCQMQdzktjlhSyZqiwp8xSjGezcboZyAREiKs+:rTA4DyFI32kGgQuCdQdIt5VqRJZh+s+
MD5:	6A3F495998C0A8A7DCE59E704FF24334
SHA1:	A00042847E297CC7055AE7150BD1FB491E9F99A6
SHA-256:	403F3C5A10DB48CCA76428137990F9BBA1AA2A75B1EBB2004806BB45C13C6225
SHA-512:	5D4B8C44FD4EA4AB9AC926AD3F1D9D514ADAF5D2A3DBEA912C73C0870CC3770FEEE70C298B13F8B5857A9FB8331DB81FA0489F58A574084543683012256BD4D3
Malicious:	false
Reputation:	low
URL:	https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/service-2.webp
Preview:	RIFF`\..WEBPVP8X.... .........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6VP8 rZ..0<.......>m..F.".........f;.X..I.'......d..b....r.s.'.......{...6......w...>.?.?.y......-.q.....o.C...P.....r...-.....W...%......./L_.......:-....xK.O.....k....r\|...._.?......G._.\|!............_v.....S.o..../.A............7.O.~....].O`..?......l.....O..m>..`..z]...0.\|.kF.D#..J.......i+Bm=2o.P.-.\..[.-.>....J..N.Q}$.v...9BYHcjJr.7$....\|..za.Px.....>t$Of..]..zU...&^...'.y...d.wy.F.o].....X&lb....`..^...$...y ..<....i.M1.7]....7uz........?.......{....8...x..>..9..p......K./.9s..

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17691)
Category:	downloaded
Size (bytes):	18286
Entropy (8bit):	5.657053952613787
Encrypted:	false
SSDEEP:	384:G6xtuO2dsg6Phba/d+WZKVfefg9TbDy2A1U41HHWeaeoCwGxJRJ/LrD:GrP6od+ZNJY/aep3z/
MD5:	040162F6DA25C64FEAAED69ABC0AC96B
SHA1:	818D0D73C7EFDEAFE6898255D407C519173A5131
SHA-256:	7F2085DE59A8FCE6270BFF6B196505F82790BED38428AAD350AFD75D2D45775B
SHA-512:	A1F8DA6A8B86BA58FB172C0C23FFFEBDA940FA52219C5E21A64C694FEEEA66E5E536A266433CA8A1AF6776E9A90AFB1A8E285CD070FCF1951130E2B798EBC7E9
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/fyCF3lmo_OYnC_9rGWUF-CeQvtOEKKrTUK_XXS1Fd1s.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var S=function(a,N){if(!(a=(N=U.trustedTypes,null),N)\|\|!N.createPolicy)return a;try{a=N.createPolicy("bg",{createHTML:m,createScript:m,createScriptURL:m})}catch(y){U.console&&U.console.error(y.message)}return a},U=this\|\|self,m=function(a){return a};(0,eval)(function(a,N){return(N=S())&&1===a.eval(N.createScript("1"))?function(y){return N.createScript(y)}:function(y){return""+y}}(U)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var V=this\|\|self,ah=function(a,N,y){return N.tf(function(m){y=m},false,a),y},yU=function(a,N,y,m,Q,w){return(w=H[a.substring(0,3)+"_"])?w(a.substring(3),N,y,m,Q):N_(a,N)},mi=function(a,N,y,m){for(;N.S.length;){m=(N.W=null,N).S.pop();try{y=Up(N,m)}catch(Q){z(Q,N)}if(a&&N.W){(a=N.W,a)(function(){I(N,true,true)});break}}return y},Z=function(a,N){if((a=a.v[N],void 0)===a)throw[G,30,N];if(a.value)return a.

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	479
Entropy (8bit):	4.983276693631104
Encrypted:	false
SSDEEP:	12:tHG7bsjJDJA3P41z25frlvujYZl86bcJ2t7qIkOJd+x:txiP41z2frE6E8WFUd+x
MD5:	4F320D5999A47960DA78DA36885C1B07
SHA1:	4461FC9AC0E66A7CB172A53E0F7B03344B387FDB
SHA-256:	4BB37EE8DF87D8BA7F22D02EA39D4AA595223EC5792BBB7F70558CFA51AF1E92
SHA-512:	7A03D7D1673EB0502C209DEAA985E8986AA640914455DD5CE1E4F87D346D14488528A1E519CF86ACBD67F55A1FBD475F3758BBEC5DD49C6F3FA9B0C5CA6021C7
Malicious:	false
Reputation:	low
Preview:	<svg aria-hidden="true" focusable="false" data-prefix="fas" data-icon="star" class="svg-inline--fa fa-star fa-w-18" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 576 512"><path fill="#FF9F0E" d="M259.3 17.8L194 150.2 47.9 171.5c-26.2 3.8-36.7 36.1-17.7 54.6l105.7 103-25 145.5c-4.5 26.3 23.2 46 46.4 33.7L288 439.6l130.7 68.7c23.2 12.2 50.9-7.4 46.4-33.7l-25-145.5 105.7-103c19-18.5 8.5-50.8-17.7-54.6L382 150.2 316.7 17.8c-11.7-23.6-45.6-23.9-57.4 0z"></path></svg>

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (631)
Category:	downloaded
Size (bytes):	517649
Entropy (8bit):	5.713376874006511
Encrypted:	false
SSDEEP:	6144:m1K1Z7NMxjW6eJoWvAlUjWwuMSYCVvLk8DSWd1Ps8Jz38iZc:m6eWTAujfuPY0JGgkt
MD5:	E2E79D6B927169D9E0E57E3BAECC0993
SHA1:	1299473950B2999BA0B7F39BD5E4A60EAFD1819D
SHA-256:	231336ED913A5EBD4445B85486E053CAF2B81CAB91318241375F3F7A245B6C6B
SHA-512:	D6A2ED7B19E54D1447EE9BBC684AF7101B48086945A938A5F9B6AE74ACE30B9A98CA83D3183814DD3CC40F251AB6433DC7F8B425F313EA9557B83E1C2E035DFF
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	265
Entropy (8bit):	4.952975721072694
Encrypted:	false
SSDEEP:	6:YxZo3tfh3mj+mB+F73AkKZimrcuG/oRugWtVtevdY:YxZo3t50XK73Do7YteVY
MD5:	2B637A695E85E2732763A467AC2BCD24
SHA1:	3C4AE218928FB1C1BC576A7BD06564EE27358D9B
SHA-256:	C97BEF4EAA0D695EB80678E9706CA496AFDA661124F074FFAD6D3FEB6F72603E
SHA-512:	2391F6F68B1AECEA3E00B131B0EA88DF791774667F238EA9864B15A76D2A26DE2765726B4D2CA6A54D0F8BD7BF6BEF206B1962E80999842BE31422DA6D0E98B5
Malicious:	false
Reputation:	low
Preview:	{"payload":{"missingAlts":[{"src":"https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/service-2.webp","alt":null,"approved":false,"decorative":false,"metadata":{"skippedForReadOnly":true}}]},"payloadType":"MissingAltsDto"}

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	337607
Entropy (8bit):	3.901800719728292
Encrypted:	false
SSDEEP:	1536:lbzUp+YovtF0DDHnY/Yv7W01cuMn+ZZxVzV8laKxWHFaGU2ZevzrgChUEDdgiBPI:lbzUp0tFmDFhceFz29xOA52ZWrbzd4f
MD5:	C524BE2B5DBE703453D9F31795C8FD5E
SHA1:	46D065763FCA7B9927273B894E215BC9929DDA97
SHA-256:	CB23B65D798FE37B4AE4F9A7569C024435CE3E8811E09620F69AEBEEBFBD1AEB
SHA-512:	B087BAB59914AC7E75A608B80B0A1CF07CC8353743A7D7835FC37F02938FEC648728DCE3DFAE56FF9CC5B3CB6E1D3A5CB1193BB513F01279EEE749A60D5FA596
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 24.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 1920 250.2" style="enable-background:new 0 0 1920 250.2;" xml:space="preserve">..<style type="text/css">....st0{clip-path:url(#SVGID_2_);}....st1{opacity:0.5;}....st2{fill:#FFFFFF;}..</style>..<g>...<defs>....<rect id="SVGID_1_" x="-0.2" y="75.7" width="1920.3" height="174.5"/>...</defs>...<clipPath id="SVGID_2_">....<use xlink:href="#SVGID_1_" style="overflow:visible;"/>...</clipPath>...<g class="st0">....<g class="st1">.....<g>......<path class="st2" d="M641.7,188.4c-0.9,0.8-2.1,0.9-3.1,1.4l0.1,0.8c-1,1.1-2-1.6-2.4,0.1l1.1,1.2c-0.5,1.5-2.7,0-3,1.6.......c0.4,0.3,0.8,0.6,1.2,1c-2.6,1.7-3.1,6.5-6.1,6.8c-0.1,1.2,1,0.8,1.4,1.3c-0.2,1.3-1.3,1.6-1.9,2.8c0.2,0.1,0.2,0.3,0.2,0.5.......l1.3,0.1c-0.2,1.5-0.3,3.4,0.1,4.8

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	155661
Entropy (8bit):	5.39003871975216
Encrypted:	false
SSDEEP:	3072:t32sjyniGbHUmhK88BzYeC8ardHZKfvPDqdt9Jqf4lWxyhONf6OqXAG2yijdRjXk:tpardIchOdpqWXlCP
MD5:	850418C02475A786091B4C2D2F873045
SHA1:	704F2310F4AE6C98A16180B9ED9E48BAA4D40790
SHA-256:	DA0A071DF1C493BCE8BB8A6D510BAB6D7659B08CE3F330253DA98030BC3B6486
SHA-512:	238654E2393A915AD592FDB75BDCFA11EDA39D2B745A95EEC8C96D38814F2597814C0975C1B3E63B6BBD8CCC7F39242E99B6F43E2644CE77F18DA3FA7B5CCC2E
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/
Preview:	<!DOCTYPE html>. [if IE 7]>.<html class="ie ie7" lang="en-US">.<![endif]-->. [if IE 8]>.<html class="ie ie8" lang="en-US">.<![endif]-->. [if !(IE 7) \| !(IE 8) ]> >.<html lang="en-US">. <![endif]-->.<head>..<meta charset="UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">.<meta name="robots" content="index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1" />..<title>Fortis Site Inspections - Loss Control & Risk Management Consulting</title><link rel="stylesheet" href="//fonts.googleapis.com/css?family=Open%20Sans%3A300%2Cregular%2Citalic%2C600%2C700%2C700italic%7CMontserrat%3A300%2C300italic%2Cregular%2Citalic%2C600%7CLato%3A300%2C400%2C700%2C400italic%7CMontserrat%3A400%2C500%2C600%2C700%7CMontserrat%3A700%2C900%2C600%2C400%7COpen%20Sans%3A400%2C600%2C300&display=swap" />.<meta name="description" content="Fortis Site Inspections provides loss control and risk management consulting solutions for i

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15406
Entropy (8bit):	4.708550771089196
Encrypted:	false
SSDEEP:	192:o6uNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNLwKdVlXF:oXwKlX
MD5:	460EB42C3FE958E5F95549DDC89F22FA
SHA1:	9E18000A7AA1E5F668B23E11E6A9FF8DA68DBC67
SHA-256:	3847BEE4EA94797E9AF36A4325F6907DE294939F776D2A23AA50EF4CF659507B
SHA-512:	3CE5CC1450DB833EE763DDAB60D5822215881DEA14E0A3A57C12D9B61BCFC9FFD245EC9B61DF05BFEDB45C39E74EBBCE7801F43648B171D66D3224DFC54CA38C
Malicious:	false
Reputation:	low
URL:	https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/favicon.ico?v=014020240840136914499
Preview:	............ .h...6... .... .(.......00.... .h&......(....... ..... ...............................................................................................................................................................c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.................c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.................c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.................~MH.{ID.m50..RM..UP.h/).j0+..VQ.t?:.u@;.~LG.f+&..................gc..ZU.....p93..^Z..mi..qm.....n71..c_.l4/......................d`.........c'!..ZU......XT.....l4/..XT.....NJ..................ea..UP.....i0......d`.f,&....m5/.....i0.{ID..................WR..^Y..RM.g-'..kg.d)#.c'!..VQ.wC=.yE@..QL.q;5.................c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.................c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.................c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.................c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!.c'!...................

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	466156
Entropy (8bit):	4.980770694445087
Encrypted:	false
SSDEEP:	3072:Jsk8qYxfGPF3TkjgPGcHCWJ7yIfeB1u6e+5LRXuNqpAx5fR46wuzEaCeVGNz+Cox:Js6OIN7T
MD5:	8562F08A258E72B910607617531E71E7
SHA1:	E67FBD8EA7C5B3605C46BA400150680C450E9805
SHA-256:	D4D1531B384EE97ACE6B832ADFB864E3A9E8D8462F773BA3DCD41DAA356C5D67
SHA-512:	556CCFAB2126F6A7DFD61458CD170818D6A44577AF362AEF8D32E832DC203CE28B152EEAD140E11B6B0A485CFDF6FECB281B1175DA886937040ED3FB15BF8172
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/cache/min/1/wp-content/plugins/js_composer/assets/css/js_composer.min-c4495c7268876157b19ecbb3bfe2431e.css
Preview:	.vc_non_responsive .vc_row .vc_col-sm-1,.vc_non_responsive .vc_row .vc_col-sm-10,.vc_non_responsive .vc_row .vc_col-sm-11,.vc_non_responsive .vc_row .vc_col-sm-12,.vc_non_responsive .vc_row .vc_col-sm-2,.vc_non_responsive .vc_row .vc_col-sm-3,.vc_non_responsive .vc_row .vc_col-sm-4,.vc_non_responsive .vc_row .vc_col-sm-5,.vc_non_responsive .vc_row .vc_col-sm-7,.vc_non_responsive .vc_row .vc_col-sm-8,.vc_non_responsive .vc_row .vc_col-sm-9{padding-left:15px;padding-right:15px;float:left}.vc_parallax-inner iframe,.vc_video-bg iframe{max-width:1000%}.vc_clearfix:after,.vc_column-inner::after,.vc_el-clearfix,.vc_row:after{clear:both}.vc-composer-icon,[class*=" vc_arrow-icon-"],[class^=vc_arrow-icon-]{speak:none;font-variant:normal;text-transform:none;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.vc_row:after,.vc_row:before{content:" ";display:table}@media (max-width:767px){.vc_hidden-xs{display:none!important}.vc_el-clearfix-xs{clear:both}}@media (min-width:768px) a

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	59602
Entropy (8bit):	7.9914317777974855
Encrypted:	true
SSDEEP:	1536:anec+j1ZTqtivkvJKXdt8pXw63NClQrXkrQEffcqIw7YeL:akTqti0ANt8pXwCYurLJqIwEeL
MD5:	20E0904C21BEF7F09D9D91C92E40A22E
SHA1:	9EE722516D3ABB8085618E8D6443A7314A6D5D1B
SHA-256:	1012E8B9CA6395E94DF91107508F9B92EFF62A93B9A6310528F6E87CBD4DDEB9
SHA-512:	972055BD4A2AC013C8B7F6E23C2ADA85AA5F420152D4F1FF2838E92FB0354725F6FF8351431924D4163737ED2E851FB4B899A6144939A7618FA581696B7610B7
Malicious:	false
Reputation:	low
URL:	https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/home-banner.webp
Preview:	RIFF....WEBPVP8X.... .........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6VP8 ............>m4.I.+./!pX....gn..fM.k^...H....f......v..../..oi?...\............'r'...J.5...h....<..?;..={.Y...........}..}.~...{.........._.._...................o._......>.....[.o...............?..o.c........L.....8...m......5.n?......=.ZN.....G......U.64.i.~..sG....E..KRr!.9...d.....6..",.\|%....~ivi..q.....Q?J....<...X.x..N..!..;.4.-...<..dSQB.d..,Z.x..c#.......=.\|Q...."...X.....+#U...........v.-]-..;.P".{qG.......0...U..Py..y(Ex.....Fy....80..`A.....XD.._/..F.{3....Pj

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 219, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	114176
Entropy (8bit):	7.977310036405056
Encrypted:	false
SSDEEP:	3072:tgAK82e1ChayXtBZ+pUSHLEaxLyAK7IJ06NDbfq8TnDqNFbSI:KAgjtaUSHLEax+J16ZbnjDqvSI
MD5:	67D07B630C99BE0ABA697EE8B22CE232
SHA1:	218CC5164431A7980BF711084F063FD7424840C7
SHA-256:	98A24B364C6FB898134A6C71BD6BC98959CE3F40296CC753444870BECB5D2EA9
SHA-512:	7252899309D7C79DCD302A5A88D23F3F03D55B7546B6FC3E6A89E8AC31DEACD89E970A9F2D2AC724C12E75E191ED58119FCDEB658A6D60E52A4DC581DC0C4595
Malicious:	false
Reputation:	low
URL:	https://d3j0t7vrtr92dk.cloudfront.net/amplifiedhr/1561165002_AdobeStock_106126834%20%281%29.png
Preview:	.PNG........IHDR.............:\|.... .IDATx..g.TE.?\...z.....d...".(.(.I.....aA.. ADT.....PQP.$.....U.,...40L.....yqw....=...}8/.S..S.NU}.T..nX.zup.n..;.!.........a..?...,.Y.T...X.=3zS....b...Yf.%.B..[.w..1t.u.E....ip.k.kW.Rf.v....;7.......i....M...Ne..v..U.CQ..Q.y.....wx.o.....K..c........&..{...l..R,...._..b.M.>...l..(].\...E......f.@;3,q.\.,i.j...~...i.8K..n":.\.w..09.}d..!....=4Gd.-...<.......{.w.....b.F;f...A..utFF.Uco.-...S.h...9.}..-`..8.....2\...Q..,c.Z9;.n.v(..!.5K:...:-A. ..N....A..iw .}..w.....V;.s-.UD#\|}.;.q...=.....M.Q.S).q.....~.e3..h.t..l'`...."+.F.U...Yg.....P1\.\.\ox..`$.l.sAsC.j.h...N...3.z.:-.h.x.".[...9L..T...u......:......3-s-..7.,w....CV4....}.g..rv..[..J...."afF.%...48...1.+n....>... .9..(..u.H...N.9V5.5Xhi.Y.c...R.&....6K...fgY.E..7.1\|Z6 b.v.........f.U.5X.......i6{.X./...;.p...@.R..e....C.....4.........p$2..r<[ZeI...2....q..Og.7$...).... 2.s`E..L....`0L.pN..8....[t..8.=J..=:.G#o)fWJL..N4.v.G..F..Q..&...+..D

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57196)
Category:	downloaded
Size (bytes):	110147
Entropy (8bit):	4.920389651812489
Encrypted:	false
SSDEEP:	1536:iLeJqf9Zk2u5SOV+UQ3Zo/0kxhdRVrkQzE:iLeJEk2u5SOV+UQ3Zo/0kPdvQQzE
MD5:	0234D0A7685AEFA6FD06041FBD602928
SHA1:	CBCBA60AA82286DD1F877CB8BD5B5CC047F82CE0
SHA-256:	0085ADFD2D08A45F62A06D8F3F969DDC4A94EBE8D226511DB90AA038F11ED180
SHA-512:	298B4324851F0D9662A48EF2FA74E65CD78FB4BC69191B05E70C254B6CC196719E7F35FE3E882857026FCFA260F0A5B1208E964EE9F42A9DD2E2FED0ACB070D1
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-includes/css/dist/block-library/style.min.css?ver=6.4.3
Preview:	@charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{box-sizing:border-box}.wp-block-audio figcaption{margin-bottom:1em;margin-top:.5em}.wp-block-audio audio{min-width:300px;width:100%}.wp-block-button__link{box-sizing:border-box;cursor:pointer;display:inline-block;text-align:center;word-break:break-word}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}:where(.wp-block-button__link){border-radius:9999px;box-shadow:none;padding:calc(.667em + 2px) calc(1.333em + 2px);text-decoration:none}.wp-block-button[style*=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100%}.wp-bl

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1770
Entropy (8bit):	7.1281122649311355
Encrypted:	false
SSDEEP:	48:NElbQ1f+Bo/LfAuiEpXj5TwVd0Qa0In6hHuGEblzqX:NElbw+iX5j5sVdq0Puzbk
MD5:	CFF4519DD1D22B8E77D836191D2318C1
SHA1:	218D781A84C18AD8F157EFB76DAFF937A76F5FEB
SHA-256:	2CFA739AEFE128EC7A6AA767F0EB7B6243156B903BCAA99C8624DFA666D44E9D
SHA-512:	73C883A372DF1D816335D0819FE92E2926C7277F543F9BDE2DC278EC6601848E85E95B84244E71E02F2CAA5061903561D970CFAB20C5C226BD38F5FAD087206A
Malicious:	false
Reputation:	low
URL:	https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/google-review.webp
Preview:	RIFF....WEBPVP8X....0.........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH......t[.=.c.b.2.3...a...g...7. kUlT.....m.....G...m#I../.I;..P..].7Ni.Y?...+"~tr\|....``...9.8.i.m....g6/...<n.S._....JvY.%z_.RI...T:.\I....Qz.\.....!bTP.....@k..y.0._..E..2Zth.G..R.q.....y.z.`Cn...)C8:....b....G..p.....@4.....a..y.C...H.{.Z.. .u...8.....}.._.L..,....9.).3.......\.....F.0.\|.......@.V.d-y...2.m..C......... DBf..x.sG!V.1vP.q.....o.6.$/_2.......G?m.R.~.A....H..E...'...;H....3.z....2.l..9.KO:....F... ,Pl.<$...Yy.R.7$Lb..../.v...9.........W.......J6.u..V

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	891
Entropy (8bit):	7.743486735962578
Encrypted:	false
SSDEEP:	24:NisWJfCVlB3z5kFZGkaKUuRcul3vvHIvaZaInBmmC:NiZ0R3NuZGeUuGu1vgaQIU
MD5:	75C459747C5170860EA16E7580989668
SHA1:	8C78CD3CFAC156E2AE4465D8E40E9F93C4F4D2A2
SHA-256:	5A1C29814CE9D1692ECC010E3F5BCD6DBF7E57C265EC5BA2888FFAFF8517E966
SHA-512:	969EBDA281B2A2C4FF4142B85030F0FBF9A46A9BFA1C601E4E8160B17C10C02AAC47BA1B7D714C8495B084FE050277129ECD9D69D53C20EF8D571554B7C062A7
Malicious:	false
Reputation:	low
URL:	https://d3j0t7vrtr92dk.cloudfront.net/rmshg/1576085319_RMS%20Site%20Logo.png
Preview:	.PNG........IHDR... ... .....szz....BIDATX..]h.W....}.6....66S.A..u. ..j.!c.WW.y.......n......Y..1*.....6..c.......qM.m.6o.g..)..;..7}.........s.GH)%..&...z.!.',%.Lj.`.a...r..e...3...y.......N...^.....l.%.T,...$...w1........8~.gB...x....,........P.."..qPQ...i9....?...W\.!.D.(......vG%.x.UU.._K42.X.).X..T...H.&9..F......8y...E ..j.......53....66m.0=..vx.....l..8.!.znI..i.g.&.~c..3....b.k..G.tw_c.....@..ky0..G...f..........={.d.....f3.mX...FFb.\|0..5oRSS.a.,[VE4..@.s\.p..]Ghl\|......^.@(....ho.......Z......l.....;..(.:........\|{t..Q...HC..........=<.zzn.^.:.6......J&.a..7....s...~.Ng...L....m......[P.p:+YZm'........F.BR].z..\..W_~B......Ph.tZ+.#....`...pa ...&R.X-f$..?....^..I..+."x.{...hZ.............@...a..[d2:^...~......f)....F..6...O..O.f.QQH&.$..Bn\|<M0._..3{...%.".".......w5......m........................;@..`..u=GK.V....&...T.....IEND.B`.

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x332, components 3
Category:	dropped
Size (bytes):	122865
Entropy (8bit):	7.991513330224815
Encrypted:	true
SSDEEP:	3072:qRv6ae9MkRRv5ruzh6tr81rC1HEgtOtOuqStxkF84xwYN5tGho:qNhQRworA21kg6qHF8kGG
MD5:	BAFEDE4493983155120FD440388E1140
SHA1:	8621F772D0ECA6A1884B91E771EFE7F99E5136E3
SHA-256:	5A95815A5AC5FBCD896B70E2968089CFA879067D8A0950DC8BE155A5A4A761F2
SHA-512:	61647BEDB69DE2686D8741A00A00501C19F78270DBCCBC26A94460A471AC0F640C6E042FDFC21F6554D604E2674EF2778FF960C9FF3A7CFAC0FDCB328C8C9F72
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................L..........................................................................................'...f)s..}$.M=]k,.N....fy...k=..x.o#....3v.E..r.k.=.o5MY........(.qnDcg.{.p...n.....=.8y./.J.J..N.7.]l.=..f.....25..I.n.q..'........=qXB.U.F.'.....R..-XB..H.".G.^fy..7.;\S.vI.....5...O.\|c.}..{.y.k>s,..f%..[q.r..v...nBa,..(.q.drg)!v..F....J....s.sk...=..C...........m.....cdU....[.Y..D.o.....y.b...3...k..o$......w.P.,....&.bL....z.Gh....o=.z..ypw..v...^XNUcJ8v....g..-u!.i.1...~..).Lg"..M...'l.O..NY...3k.D.=...G...7c>m...G.......h............m+...%e.....2.H.eP..5.2/b.(.1P.. .#:.....$Q...u><B{$%.}+....=.q...3^...}..d..^.b...Un9..H......[...I...v'....kh<O..2.....cb.F.,.e...5.]W....Q.. ['yh. .pL..%..9...l0...(.......2t.5....^./..5....=h..Y.Z..W,&N[ {u.0?..t....+.zN"...sHP....f../...].:...y..r.e

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 2200x945, components 3
Category:	downloaded
Size (bytes):	68363
Entropy (8bit):	7.971441207518118
Encrypted:	false
SSDEEP:	1536:+FQFF2TtZQfckzfNfqv1jxvocaH+M4dQ4a4QdspZVhH:+aFFdEvtxHa8BQsVhH
MD5:	C817AF5ABC60DA4B41896880570374B6
SHA1:	CD8E319EB3F5E7ECDD061E5CE43CA70FA83EC92B
SHA-256:	1C63F075C5BFB81D915AAADFC46A27FA20239C1CE06147C9834E34735016C1E5
SHA-512:	9C3D47D901C84D4CCB5B052382674ED4D0FB318876F853EE7423810330162847B3262508889ADD3ADB0C3D336DA515E70089E7045B973AEF822EBC12B7A04D92
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/uploads/2017/12/slider3.jpg
Preview:	......JFIF..............Compressed by jpeg-recompress.................................)......)$,$!$,$A3--3AK?<?K[QQ[rlr................................)......)$,$!$,$A3--3AK?<?K[QQ[rlr.............."...............................................E.(U.<....x.B.<.y.o...B..''...#g7B.'...._;.........]....j..5e..~.?...D>S........H.DDB...DD.B""..D..DD........^Z..i.. .m........=.......x..K..QY._..9..r..N~^.n.y.............]..^\..v.i!......<oCwN...D!!..D.DB""....H....A...j....tm"$[o....-c..~.~)R..{...z..!j....}...S..c..\|~...2....u\|v.g.n..=KM9n.XN..y..\|......u.....B!.....H.$........B.....GW5..b...qTHB.......e.Xs......:3....7.}Oh.~..g..^~;{.:r.Ry...)~.gDpz4i.rk........)..(k.......$BB...DH.D"B..K! HB .BA.....=.u"K...Z..DJ..7...bAp....{.F.UKZ.O.}a\|....y8{........_...w~cM.._..h....).z).....tDHD.".....D."$.!!.. HD"J._..=....D.mU.QUBD.u....w..{....[..S".X..........5.ss...3..\~......i....?.t\|...H..<.w....!..DB"""!...$.DA .A..E9..3..e...D.j..AJQ ...\|..[.j.<~.[,..R...c.

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	42732
Entropy (8bit):	7.990091085187101
Encrypted:	true
SSDEEP:	768:OigcwvuKwAhRX2QRlxjqQikARgSwaT4Uf92IV5AxYdooSIjH2l94r:n6hEQFryRb4Uf92kAxkooSH+
MD5:	6442D4E83BBFA20D7E2FCA743411CB4E
SHA1:	E9AF3DF4C65C65FB7CA716BCADB5476606B452AD
SHA-256:	FD6A1102A401B89534318ABCD6703652AA9EDF004B55F2BF3AA15E91A45BCC5D
SHA-512:	149E36B3BEC98C6AF89020955670F26EE80D691EA7F771E90378EE7D10209472B663808D991C5DAC205BCC8AAFF407F47189FB298FFC5674AD9EF2D2BF088F85
Malicious:	false
Reputation:	low
Preview:	RIFF...WEBPVP8X.... ......h..ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6VP8 ...........i.>m2.H.".&%R....cl..#Y.s...x^L.@q.Rr.4.[o.{}....q..O...]..?..5..G..y7.'....3..>.>r...............{....Y.s..........~.......%.......o[.[...=............#.......g....y.(........k...k.....T...._.~.~....K.~......k........3/..........G..5.z..v{A..$...... .<.^.Tm./...4V3.P9.".$.!..Or".{D..O......vTt..,..M..h.b..<F{.....h_,}...%..e.....\|....J...:O....K.]M._..}K.{....;.~~.8...../......H.Dke....4.wK.]...y.~?YO...A:9..y........q......s...."..w.W...s...~..5=.Ss

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 179 x 64, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2939
Entropy (8bit):	7.590346049978265
Encrypted:	false
SSDEEP:	48:ZjAvnLZsY1J3KlVGeD0eZNeiMpVkvrTBmkvxlC6WUpbxJN2mN6E5vTedl:Zc9GaeiVkjTBm+xNbxXplBsl
MD5:	9210FF000A02877EACE87DBB7EF2D1C4
SHA1:	D7562FA7F10321B824E630FFD7D10813A98F9024
SHA-256:	507A2C7A22B0AC65FEAE3EBA76DEE6C6D182106D800EF2BBE8491F8429ACBAB9
SHA-512:	80B13C9461F806A28F8696BB3D2394504297261C6039DE182F43CBC9CEE6D7DD06D9F3161BEBE2A1AB4E1519B73F6B748BE7CE192C232C967C51545862E3805D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......@.....f.v...xiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:5e315b12-8964-4b25-b7db-d4e5e261732c" xmpMM:DocumentID="xmp.did:6455D3BD0C1511E882D7E997583E90EE" xmpMM:InstanceID="xmp.iid:6455D3BC0C1511E882D7E997583E90EE" xmp:CreatorTool="Adobe Photoshop CC 2017 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5e315b12-8964-4b25-b7db-d4e5e261732c" stRef:documentID="xmp.did:5e315b12-8964-4b25-b7db-d4e5e261732c"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>\..Z....PLTE.....................GpL...................................

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6454), with CR line terminators
Category:	downloaded
Size (bytes):	6741
Entropy (8bit):	5.84485189917407
Encrypted:	false
SSDEEP:	192:u0sKZ6yjY1SqvKbBY8syRttzGjVMSbO68:u0s4pYH8PtMMSb78
MD5:	BC96861D9899E4E68FB2E59C363D8C60
SHA1:	573B1F76E7A9DB37E4E0D1A59DA78714E46BC2A2
SHA-256:	10D159ADB573CA535B8275F1D27DC8D60FFFD9678EE3B5F1A0F7B4BE4A77342F
SHA-512:	BCA331F149D793AD33530C949D43CCDC76D0A3C41F98DC7BFA5B70F0F9B9CCBBAC9755C87F0731A3C0DB582A8C18A69678DC5603CCABC79BF749A56932F47708
Malicious:	false
Reputation:	low
URL:	https://rmshg.amplified.training/pages/themes/default/css/toastr.min.css?v=558
Preview:	/. Note that this is toastr v2.1.3, the "latest" version in url has no more maintenance,. * please go to https://cdnjs.com/libraries/toastr.js and pick a certain version you want to use,. * make sure you copy the url from the website since the url may change between versions.. * */..toast-title{font-weight:700}.toast-message{-ms-word-wrap:break-word;word-wrap:break-word}.toast-message a,.toast-message label{color:#FFF}.toast-message a:hover{color:#CCC;text-decoration:none}.toast-close-button{position:relative;right:-.3em;top:-.3em;float:right;font-size:20px;font-weight:700;color:#FFF;-webkit-text-shadow:0 1px 0 #fff;text-shadow:0 1px 0 #fff;opacity:.8;-ms-filter:progid:DXImageTransform.Microsoft.Alpha(Opacity=80);filter:alpha(opacity=80);line-height:1}.toast-close-button:focus,.toast-close-button:hover{color:#000;text-decoration:none;cursor:pointer;opacity:.4;-ms-filter:progid:DXImageTransform.Microsoft.Alpha(Opacity=40);filter:alpha(opacity=40)}.rtl .toast-close-button{left:-.3em;f

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 1024x1024, components 3
Category:	downloaded
Size (bytes):	85608
Entropy (8bit):	7.982456671351401
Encrypted:	false
SSDEEP:	1536:OfSu2ZyCR5saEM3OIGh9l13qmwvqXfdPCAdt0zXCZXoJrcCjJmtGofaKP7o:S2Z/R5s0o9l1uqXtt0jiYcCMCKPU
MD5:	9F0D462FBFA80BDBADCF7D0E14CB206B
SHA1:	66AAAD3BF5EE629F65D09EE1469A00CE36B97515
SHA-256:	C20CF76C892E1C6BCDE32E94A031B2E785ABA652309D234B29AEBF12123215E2
SHA-512:	D9904025B463565541B712B78043935E1C7F721CFCC8B9EB7FD3C44BE39C009B3EED6E054A88B538C8F2F73D924E7D0ED4A9DF4C28376FB4CC01EAF8B73249A8
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/uploads/2018/10/consulting2.jpg
Preview:	......JFIF..............Compressed by jpeg-recompress................................................#....#)" ")1,,1>;>QQm............................................#....#)" ")1,,1>;>QQm...........".................................................y.........vR.S.6T<.3......w..k.--...\|.2.d..#..=W.]...].#..H.t.z9.=...t..{..U..N..^.j'19.....j.NdZ.l.....#....l.Y.f..Dm..k....ZZ..$.l...{.G8.s....Xp...D.[..._y..Z.1..{.yS.{.....o#y..%~.{..+..^E.k!.&L.38.F&.....Y......,Z.I=.../s...{..w+c._.;.:-u.[.O..^.ogH!..y^.W";.........F.].^.6%}>[.<R=....eM..3..b...w..V.....y#VG.e..=.W9.!..9.....(.-........O...R+.....U...1.....g.1+.k....1.>...IHY2...1..b..7Z.~.....{.UV.....a....<.!...4...9$...'..?]..i....S..r.9\..`..W=.......T...7.~.]i%Li....1..c.f.........jF...].....'r.<.9HW.(#..D;+...l.m..M...3..I')..s...q+.B..Dha...P.j3.a.t...CJ.9.9\|f'..v.w..i..m%...0.u{2.a....y.S...lh...z.V......j.:......).r..G.Z ...*A.G/0q.h....UY.6.......u.[.........k.++.!....v..2'.z.{..1.s..@E

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=18, height=2336, bps=230, compression=none, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS 20D, orientation=upper-left, width=3504], baseline, precision 8, 1254x836, components 3
Category:	dropped
Size (bytes):	519218
Entropy (8bit):	7.974488405179852
Encrypted:	false
SSDEEP:	12288:bAgY97s/OfwCtclLsUofdTiDE7bkK5OUmVNSm4R:bAgYps/kclYzdflmER
MD5:	577BB6E13E8B959DC95AB9BE495DCC34
SHA1:	91004C3AF8C1CF6CD94BD365867A8A1D9957A48E
SHA-256:	1BF073700EBF9DF95293E03FC7F474F4196BA79DDF5F56BA942210D246416C49
SHA-512:	DD4D8C9D81B5F7C6DEE1CB3817BB4F6A68E8251818D8F7ACD93E0CED1B68C10D4D969F82E6FDECEC37DDF6AA6942CBA47E3C3FF88917022542ECFF7AB85F48D0
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,......Exif..II*........................... ...........................................................................................................................(...........1...........2...........;.......B...........P...i.......l.............Canon.Canon EOS 20D...$..'....$..'..Adobe Photoshop CS4 Macintosh.2010:01:18 20:52:55.Ivo Gretener..COPYRIGHT 2010 IVO GRETENER..........................."...........'.......d...........0221....................................................................................................................0100................................D...........................................................................................................2010:01:16 00:20:04.2010:01:16 00:20:04..>..@B...................................w5.u.....#.N.........................\...........d...(...................l...........h.......H.......H.............JFIF.....H.H......Adobe_CM......Adobe.d.................................................

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	65712
Entropy (8bit):	7.994476643903662
Encrypted:	true
SSDEEP:	1536:Qhp4qzn9F/Bp0oMNE5ry6iUyfyryHU0ic:QhKqr/BOwhy6hyfHL
MD5:	1580771299004B07BFC4073F016A4577
SHA1:	F920A40763B48A62335E181B651894670CFE20EC
SHA-256:	9C582E1117D5FEBF6FE3E72729292CC1AE57F1D1519CB33B9E051EFFCB90BBDB
SHA-512:	EA323DE3EB1731BB74B894A9425F1047FAEE1F3C19DC8C35E368AB8649FCCC24D2D80C07A89A0B3C262501108E6B7E83408581DB704734B1CCDB9A3424ECA5B1
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X.... .........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6VP8 ....p........>m..G."$..1....M.f..o5.-...?..?S.i....fq.'G/............?..........~s.......w..^t}=...G.......}..[...=.?........>....6.....s......O...._$_.?............g..s..?....L.........s.{...L...._?_i.7..l.....j.>.....>......O....l=.._.......+.?b/................=..-...i..\..>...".`N.z..TW\|.(.+.t.h<..eBM....l....-].f.x........0!.[!.)..A.`.h...V...d&..s.M,..3:n".J!.5.\.b...t.e.........M...>......GS..y..[U."..a..N........T"ku...W..J.2..Zk.\...`...m...=........9.~J....M.

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	4.615808539574485
Encrypted:	false
SSDEEP:	3:bPuGDKthxTNkYYn:juGqNk1n
MD5:	4059E66E3B315A45E4F4E472607D2038
SHA1:	E7CEBC7559A57484383A25517FFB1202705CD995
SHA-256:	7D365003B0814423823B1FD4F15E4C83EF8F8CF5B51A06F8F0E89BAAB93CBFB5
SHA-512:	B2922DBF5182A617134F99BABB5716DA9ED5EA6DDF16985060FB6ADF558D398073E740DC87A4E422317F14C0D876D2A12139FBAAFCD02A743DFC819C57E924BA
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSFwmtwYSZ-QPIeRIFDShLLYkSBQ3OQUx6EhAJ1iUe_1bwK4ASBQ3njUAO?alt=proto
Preview:	ChIKBw0oSy2JGgAKBw3OQUx6GgAKCQoHDeeNQA4aAA==

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51324)
Category:	downloaded
Size (bytes):	51485
Entropy (8bit):	5.087336392814623
Encrypted:	false
SSDEEP:	768:pkZlIbIgx8IMIgIHwO1CA5kiDb3CyQ5xrQe/0STbsysb:pkZ1IHwO1CA5kiDb3CyQ5xrQe/0ST4
MD5:	81C90D6E6F4B3030A6B6DE88273799F4
SHA1:	5D3EDAF7CF0E1E9B8FA1FC32C8015C35C4B6C5E8
SHA-256:	6DCAB98E09788384B163B9F72475E1EEE33449F69327362C47F942F2D2EB34C2
SHA-512:	C178F9CAFDDC2EAE9CC787936D230D483D016DA72A1EAE8A1086C33B6F0B5AFEFC83EB894C8EAB2CC7CB59E7A23814E3BED150320DF0E67809C7A0482A6D690E
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/plugins/js_composer/assets/lib/bower/animate-css/animate.min.css?ver=5.4.5
Preview:	@charset "UTF-8";/!.Animate.css - http://daneden.me/animate.Licensed under the MIT license - http://opensource.org/licenses/MIT..Copyright (c) 2014 Daniel Eden./.animated{-webkit-animation-duration:1s;animation-duration:1s;-webkit-animation-fill-mode:both;animation-fill-mode:both}.animated.infinite{-webkit-animation-iteration-count:infinite;animation-iteration-count:infinite}.animated.hinge{-webkit-animation-duration:2s;animation-duration:2s}@-webkit-keyframes bounce{0%,100%,20%,53%,80%{transition-timing-function:cubic-bezier(.215,.61,.355,1);-webkit-transform:translate3d(0,0,0);transform:translate3d(0,0,0)}40%,43%{transition-timing-function:cubic-bezier(.755,.050,.855,.060);-webkit-transform:translate3d(0,-30px,0);transform:translate3d(0,-30px,0)}70%{transition-timing-function:cubic-bezier(.755,.050,.855,.060);-webkit-transform:translate3d(0,-15px,0);transform:translate3d(0,-15px,0)}90%{-webkit-transform:translate3d(0,-4px,0);transform:translate3d(0,-4px,0)}}@keyframes bounce{0%,100

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x332, components 3
Category:	downloaded
Size (bytes):	122865
Entropy (8bit):	7.991513330224815
Encrypted:	true
SSDEEP:	3072:qRv6ae9MkRRv5ruzh6tr81rC1HEgtOtOuqStxkF84xwYN5tGho:qNhQRworA21kg6qHF8kGG
MD5:	BAFEDE4493983155120FD440388E1140
SHA1:	8621F772D0ECA6A1884B91E771EFE7F99E5136E3
SHA-256:	5A95815A5AC5FBCD896B70E2968089CFA879067D8A0950DC8BE155A5A4A761F2
SHA-512:	61647BEDB69DE2686D8741A00A00501C19F78270DBCCBC26A94460A471AC0F640C6E042FDFC21F6554D604E2674EF2778FF960C9FF3A7CFAC0FDCB328C8C9F72
Malicious:	false
Reputation:	low
URL:	https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/live-music.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L..........................................................................................'...f)s..}$.M=]k,.N....fy...k=..x.o#....3v.E..r.k.=.o5MY........(.qnDcg.{.p...n.....=.8y./.J.J..N.7.]l.=..f.....25..I.n.q..'........=qXB.U.F.'.....R..-XB..H.".G.^fy..7.;\S.vI.....5...O.\|c.}..{.y.k>s,..f%..[q.r..v...nBa,..(.q.drg)!v..F....J....s.sk...=..C...........m.....cdU....[.Y..D.o.....y.b...3...k..o$......w.P.,....&.bL....z.Gh....o=.z..ypw..v...^XNUcJ8v....g..-u!.i.1...~..).Lg"..M...'l.O..NY...3k.D.=...G...7c>m...G.......h............m+...%e.....2.H.eP..5.2/b.(.1P.. .#:.....$Q...u><B{$%.}+....=.q...3^...}..d..^.b...Un9..H......[...I...v'....kh<O..2.....cb.F.,.e...5.]W....Q.. ['yh. .pL..%..9...l0...(.......2t.5....^./..5....=h..Y.Z..W,&N[ {u.0?..t....+.zN"...sHP....f../...].:...y..r.e

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 320, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	192842
Entropy (8bit):	7.981671479265058
Encrypted:	false
SSDEEP:	3072:3kNL+biBKe8WRhpm7TAj7dR7jrUYkuFSjCkiHPncqkcsT7HlIEorOKb8QD:s+b+8CTmC7dR5ke2iHPcqVQIjOKb8u
MD5:	B499DC97EEB6069EF017209B969F695B
SHA1:	0DEF30FF3963EF68E3D0AE57721AE9D6CB40CA62
SHA-256:	903364B1835785220B3EE89646ED7BD54DE0C80891C377A86A2FC2243075D0BB
SHA-512:	55BB1C963ABB051E2530933A84B057706C13E1B8C364ACCD59AA341E327EED57DF4CBC5094CA7B2F2DABB5235EE7BCFCB1E0301420D791E757E1DDA93B5B85F0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......@......8,.. .IDATx...Y.%Ir&ff..g.[n.Y...j..5I.G..H?S...^.. .. =hF......Wvwuwee.v.D....[Xx.,P.:....ws...77......QD._"....z!...w..._.}...-3.....N....D...tC..\|..m.....M....}.!..c.c.H1F..9.S.2.@.......,..K.izh.....Z.....'.@.......]..yv..0.~...+`.{F.{\.#..)t1...dNiL9.a.3.fZ...q...K/....J.D@$.... J..O...6.?\|.B.)... .......9.P_.2Uo.:.~..B....Q`...Q.....B....r.T..pJ)....J.J@....".....0..aZ.p.4.VE-.....D.....:...q$.]......$...%C..<I..a.:Y.."P...a......{w..f^.ob@'c.h.O6...........d..7h...u.R....F.?t...$..D...S .].u.ty1....I..'..........\|..h......_.u..%....9.Q.OD.....WK.Y;.z.e.2.L......u......j...q?4t..eJ....t.!"...".`...[...A@.:... .u.S...n8...7....A..7.:q..l..\D8.7.......3+?... ..".{p..]y..l..q.xm...7m..I......A.c.#..S..=...W.(.....F.8..A...@.........Ye.A.F~..M- ..4.i....M.......l.. .........;..y..Y....M......S....Gj..H.\.......M\.....S.d.X.:.N.......*..'[.......:~I(.:K.l:.u....T+.........:5..5....k38....

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	8578
Entropy (8bit):	4.619482407243834
Encrypted:	false
SSDEEP:	192:5gFkxyPZGmVcpEKQbsQlQ/Q2Q2Q0Q3QCQk:5gvcpEKQbsQlQ/Q2Q2Q0Q3QCQk
MD5:	2F2D358AE84F47920A18D9484736F957
SHA1:	6551F5FBE591C5E8A8987CA41DD3FA084453B04B
SHA-256:	C24E5F3A65B4CA022C5E6CA727D45E16FD6CA84E4FFCA65166ED94870BEFA72E
SHA-512:	41C2848CCC577D6A5F7533A9C55C598CE94F8B8CB7BBC61BF8D3A28AB345A0FF189D6D18FF437822F3EC1CAB684210F338395C794B9345BECC1E113E845146BB
Malicious:	false
Reputation:	low
URL:	https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/js/form-validation.js?v=145820231158259990808
Preview:	$('.phone-mask').mask("?(999) 999 9999", { autoclear: false },);....//Date Picker..var today = new Date().toISOString().split('T')[0];..$('.dob').attr('max', today);..//Date Picker END....//Regex Variables..var TypeARegex = /^(?!\s)[a-zA-Z0-9_\s-,]$/;..var TypeBRegex = /^(?!\s)[^<->]$/;..var TypeDRegex = /^(?:(https?\|ftp):\/\/)?([^\s/$.?#].[^\s])$/;..var TypeEmailRegex = /^(([^<>()[\]\\.,;:\s@+''"]+(\.[^<>()[\]\\.,;:\s@"]+)*)\|(".+"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\])\|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/;..//Regex Variables END....//Claim Form validation..$('#request-loss-runs-form').validate({.. rules: {.. "First Name": {.. required: true,.. maxlength: 50,.. regex: TypeARegex.. },.. "Last Name": {.. required: true,.. maxlength: 50,.. regex: TypeARegex.. },.. "Name of Insured": {.. maxlength: 100,.. regex: TypeARegex.. },.. "

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1170 x 450, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	83741
Entropy (8bit):	7.9809547677710615
Encrypted:	false
SSDEEP:	1536:FmBAUW/Mn0SS4Plx8ekMSoo+ZEHL/TgjG+QWlI684f35UaEd:MAUaSS47lkM7ZErbaQWr84f9Ed
MD5:	F4AB68C1906E983EB48DD191A5556DC9
SHA1:	510787BE0AE8800F0BEF4D2C43E1D5F25F658398
SHA-256:	C038851BC554369E6444DF27187AF827F84FADB38D659501E2D412F7E628B5AB
SHA-512:	B0F26D0784D52FF45DFB9EA8021335F74D153D86A1668653DFFF19ED251F90C2B09E2B7D67FBBB55D7F7F0E12478E6EF9AAB505BA9A5AC1D310E9A3CD0912893
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............[.O.. .IDATx...{\|\u........L&Mz..[..R...]."...^.]wu...xaA..\D.DD... ....su...?WP.bK)....M.&.u&.9.....$...d.&....Gh2s..9M.w>... """"""'....\|.?'..........8....'.k........N...$.N.J.I.R...4.t.t.<.Je....~.Je..y.K..Jwo.Je.......LWvvu......k-r"...............%...G{.e......1...$.!...........g..x..v..<.`a.?..MA...........P.`5...,..!. IDDDDDDDD. IDDDDDDDD. IDDDDDD.k.h.@.$. IDDDDDD.k.....IDA..........=.....$......9..=.....$........)..$........)..$........)..$......9.t'r..?_......9..#p...xE...Y........pd.+....$.......6Cv..W.c..).......... U.....$.......G=.D...Y.......G=.D...$......9."IdX........xT.$2,.$........HY.$.......GS.D...Y.......GS.D...$........)..$.......R.................!uL.(..6.a. IDDDDDDDD. IDDDDDDNH.h.@... IDDDDDDN<.\|...9............G=.D...$......9!.=.....$......9.t'*r..?_......9.4.L. IDDDDDD..n4EN\..-""""""CJ.G"'..I""""""2,...S.c.Yt.+2.BG{.""""""r.0...a...F."J.O..>ik.....A:.....g8.%.J.D...$......9,........r..~....

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x332, components 3
Category:	downloaded
Size (bytes):	125601
Entropy (8bit):	7.990152410743653
Encrypted:	true
SSDEEP:	3072:qspT0jVKHBHTGsJK17Ks6FS+gbxYDJXvYUzB9dxHK5+z9s8eWv:7TAeqsM1UgqDlvPB9dxHK8Bs4v
MD5:	95AD906242C9EF2B3DB9B57243AA8BC4
SHA1:	340B6313ECAA4052DE8E51442081BAAC05A22270
SHA-256:	D043373DAC78BF62103C9774D73B8595EB5E38619271919D89C336432A6533B8
SHA-512:	5DDE1C5F22B0084DEA97636449D21954E14D62A4F589F98A6E76B5E1C133F4D42D4339B14FE06B7D855843DDF64D530319E011AE3E6DC0CEA2B95BB358F09A30
Malicious:	false
Reputation:	low
URL:	https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/night-club.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L.........................................................................................O..w.>+rR.d.H0.>.4.....N_..P..y..$1..c..`.8.< ..0....n.?...ZM=3...A...},M3=b.Y)..m,..v>...~Lb.....J.3..q..........Q.].....%i.[>.._......%.z.`.uI........._...k...q..Z>'...:-.....I\l.......VJ.H~jw.;..;M.."f...,}...O....D..l........k`...............j.zg.].uy...P[..4..^4..g..gh....!kzM.....2.ER..;.,&A...Z.(j<...d.f..+.....8..l..ht.2>g..`Y..:...0.%u..../D..n.Hqd-..K.....%..8..v...<o.e2>y.`......F.......(.?.m/.k..2.......-.;...fz.a...x.y....5.....[..##.[a.`9....X..f..0`.........pw..P......Le..9:L..$g........w+1.....*....v.2..../YV.WW.5j6.XE.ey..=.....\|.[Bk.E.Y-DYJ....g..<.....P.H.-.+.\e.e.fM..2..6.Q..u..B./..?\?<..u7y...+..D..#:.K..h.....l".O.H...M...Z.:..G..ST.F...2)+..>...Wy3.h.X...z]

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28306), with no line terminators
Category:	downloaded
Size (bytes):	28306
Entropy (8bit):	5.2970613728855644
Encrypted:	false
SSDEEP:	768:tFIUT1wu2sQG6I4N7lkpNc8tEOrZUFRlrHL2GE5DOr2I:tFIMGuZC7mpNc8tEOrZUFRFHLEQ6I
MD5:	1A5E843759BEAB9454BB51A8B32451BA
SHA1:	3802F157A2389764CB629D61C7843951DA270153
SHA-256:	D3EB0D38F0074CCAF0AC1E339895B0AB84A2FB58D2A073740711496F465BA25E
SHA-512:	ABD3698AD4DAB151DAC6431C89F84D7414A47F1227F45925D1DF864630948A0200DF2EC52AA2DD240EE9F226582A85246C336C2F9B7A742D96495F214F2CFDDF
Malicious:	false
Reputation:	low
URL:	https://fortis-site.com/wp-content/plugins/gravityforms/js/gravityforms.min.js?ver=2.3.4
Preview:	function gformBindFormatPricingFields(){jQuery(".ginput_amount, .ginput_donation_amount").bind("change",function(){gformFormatPricingField(this)}),jQuery(".ginput_amount, .ginput_donation_amount").each(function(){gformFormatPricingField(this)})}function Currency(a){this.currency=a,this.toNumber=function(a){return this.isNumeric(a)?parseFloat(a):gformCleanNumber(a,this.currency.symbol_right,this.currency.symbol_left,this.currency.decimal_separator)},this.toMoney=function(a,b){if(b=b\|\|!1,b\|\|(a=gformCleanNumber(a,this.currency.symbol_right,this.currency.symbol_left,this.currency.decimal_separator)),!1===a)return"";a+="",negative="","-"==a[0]&&(a=parseFloat(a.substr(1)),negative="-"),money=this.numberFormat(a,this.currency.decimals,this.currency.decimal_separator,this.currency.thousand_separator),"0.00"==money&&(negative="");var c=this.currency.symbol_left?this.currency.symbol_left+this.currency.symbol_padding:"",d=this.currency.symbol_right?this.currency.symbol_padding+this.currency.symbo

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Category:	downloaded
Size (bytes):	77160
Entropy (8bit):	7.996509451516447
Encrypted:	true
SSDEEP:	1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2
MD5:	AF7AE505A9EED503F8B8E6982036873E
SHA1:	D6F48CBA7D076FB6F2FD6BA993A75B9DC1ECBF0C
SHA-256:	2ADEFCBC041E7D18FCF2D417879DC5A09997AA64D675B7A3C4B6CE33DA13F3FE
SHA-512:	838FEFDBC14901F41EDF995A78FDAC55764CD4912CCB734B8BEA4909194582904D8F2AFDF2B6C428667912CE4D65681A1044D045D1BC6DE2B14113F0315FC892
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
Preview:	wOF2......-h..........-.........................?FFTM.. .`..r.....(..X.6.$..p..... .....u[R.rGa......'.=.:..&..=r........].t..E.n.......1F...@....\|....f.m.`.$..@d[BQ.$([U<+(..@P.5..`....>.P..;.(..1..l..h...)..Yy..Ji......\|%..^..G..3..n........D..p\Yr .L.P.....t.)......6R.^"S.L~.YR.CXR...4...F.y\[..7n..\|.s.q..M..%K......,.....L.t.'....M.,..c..+b....O.s.^.$...z...m...h&gb...v.....'..6.:....s.m.b.1.m0"....*V.....c.$,0ATPT.1.....<..;...`..'.H.?.s.:..ND.....I..$..T..[..b4........,....bl6...IL.i}.&.4.m,'....#....Rw..bu..,K......v....m_-...\H....HH.......?...m..9P...)9.J..$.....8......~.;.r..n.=$.....Nddn.!'....;...8..'.N...!.-..J.........X.=.,......"`:....... {......K!'...-FH....#$~.Z_.......N5VU8F....%.P..........Cp..$.Q.......r.....k.k...3...:R.%....2{.....h%.)8..........ILK.6v.#......,;.6..N.2.hv...........OO..t#....xT..Bf....q^.#....?{.5b.I..%-WZ..b.A...^.1..n5.....NQ.Y'.........S.....!t" .`b3..%....35....fv;....l..9.:jgf?gr..p.x. ..\|.. $. e.

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2846), with CRLF line terminators
Category:	downloaded
Size (bytes):	2941
Entropy (8bit):	4.871124229711334
Encrypted:	false
SSDEEP:	48:3x5T4L+IJWfeQq+v+dDKopvu+ztL+F/+wI+weizsAvqeghXoHHy3VzoRvfdflHb5:3hgA6ei/bEK7pxaIJICNMM
MD5:	11F8F55299612003D16158106D01F2F0
SHA1:	78BEAD4CB5CE15F16B6554065404A01DF5F67325
SHA-256:	8608C63311F463ED5CB19FEBDA4AAEDC756EBA9516C345375E5A7E56EC67A46E
SHA-512:	412103BD30A0424AF55FC2C5C211D97F3A9DF9291354C9484052A724946FD3931343A25471DD0238FB443F3CC940368E74B7D60FEE939216473E6AB47F2FA4DD
Malicious:	false
Reputation:	low
URL:	https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/css/owl.carousel.min.css?v=082020231220461627960
Preview:	/*.. Owl Carousel v2.2.1.. * Copyright 2013-2017 David Deutsch.. * Licensed under ().. */...owl-carousel,.owl-carousel .owl-item{-webkit-tap-highlight-color:transparent;position:relative}.owl-carousel{display:none;width:100%;z-index:1}.owl-carousel .owl-stage{position:relative;-ms-touch-action:pan-Y;-moz-backface-visibility:hidden}.owl-carousel .owl-stage:after{content:".";display:block;clear:both;visibility:hidden;line-height:0;height:0}.owl-carousel .owl-stage-outer{position:relative;overflow:hidden;-webkit-transform:translate3d(0,0,0)}.owl-carousel .owl-item,.owl-carousel .owl-wrapper{-webkit-backface-visibility:hidden;-moz-backface-visibility:hidden;-ms-backface-visibility:hidden;-webkit-transform:translate3d(0,0,0);-moz-transform:translate3d(0,0,0);-ms-transform:translate3d(0,0,0)}.owl-carousel .owl-item{min-height:1px;float:left;-webkit-backface-visibility:hidden;-webkit-touch-callout:none}.owl-carousel .owl-item img{display:block;width:100%}.owl-carousel .owl-dots.disabled,.

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5607), with CRLF line terminators
Category:	downloaded
Size (bytes):	5871
Entropy (8bit):	5.087732213080919
Encrypted:	false
SSDEEP:	96:T+iTAxGcVxTrFaLHzQTsgtB2vTM7gXRiw0zUSt2SNGrR4k8QXno6e2+3g8izelZS:T+iTAxdxTrFaHQTsgtUvTM7gXRiw0zRC
MD5:	90E79833E382C486E0F1184F2ED8FCBD
SHA1:	344E699A1DDE7A4015B9E6CC626CE66091720D0A
SHA-256:	1FC39D86F356A710875DDF4EB30F11EF23AC5A3F4240A183325BA361506C60CC
SHA-512:	A3A5EAC60AD4B0A99C870CBD1B9551356492C534B852BAF89683BAFF48587695A61547C7A86CDAC06C5E406303A98CF18D8F6C6E4B4F6CD9642102566A055942
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery-validation-unobtrusive/3.2.12/jquery.validate.unobtrusive.min.js
Preview:	// Unobtrusive validation support library for jQuery and jQuery Validate..// Copyright (c) .NET Foundation. All rights reserved...// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information...// @version v3.2.12..!function(a){"function"==typeof define&&define.amd?define("jquery.validate.unobtrusive",["jquery-validation"],a):"object"==typeof module&&module.exports?module.exports=a(require("jquery-validation")):jQuery.validator.unobtrusive=a(jQuery)}(function(a){function e(a,e,n){a.rules[e]=n,a.message&&(a.messages[e]=a.message)}function n(a){return a.replace(/^\s+\|\s+$/g,"").split(/\s,\s/g)}function t(a){return a.replace(/([!"#$%&'()+,.\/:;<=>?@\[\\\]^`{\|}~])/g,"\\$1")}function r(a){return a.substr(0,a.lastIndexOf(".")+1)}function i(a,e){return 0===a.indexOf(".")&&(a=a.replace("*.",e)),a}function o(e,n){var r=a(this).find("[data-valmsg-for='"+t(n[0].name)+"']"),i=r.attr("data-valmsg-replace"),o=i?a.parseJSON(i)!==!1:null;r.removeCla

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 6, 2024 18:41:39.359206915 CEST	49676	443	192.168.2.11	20.189.173.3
May 6, 2024 18:41:39.671339035 CEST	49676	443	192.168.2.11	20.189.173.3
May 6, 2024 18:41:40.280699015 CEST	49676	443	192.168.2.11	20.189.173.3
May 6, 2024 18:41:40.327641964 CEST	49671	443	192.168.2.11	204.79.197.203
May 6, 2024 18:41:41.343209982 CEST	49674	443	192.168.2.11	173.222.162.42
May 6, 2024 18:41:41.436970949 CEST	49673	443	192.168.2.11	173.222.162.42
May 6, 2024 18:41:41.483804941 CEST	49676	443	192.168.2.11	20.189.173.3
May 6, 2024 18:41:43.890206099 CEST	49676	443	192.168.2.11	20.189.173.3
May 6, 2024 18:41:48.788853884 CEST	49676	443	192.168.2.11	20.189.173.3
May 6, 2024 18:41:49.991136074 CEST	49671	443	192.168.2.11	204.79.197.203
May 6, 2024 18:41:50.433111906 CEST	49710	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:50.433151960 CEST	443	49710	3.217.205.239	192.168.2.11
May 6, 2024 18:41:50.433368921 CEST	49710	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:50.433923006 CEST	49711	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:50.433959007 CEST	443	49711	3.217.205.239	192.168.2.11
May 6, 2024 18:41:50.434108019 CEST	49711	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:50.434396029 CEST	49710	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:50.434411049 CEST	443	49710	3.217.205.239	192.168.2.11
May 6, 2024 18:41:50.434559107 CEST	49711	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:50.434572935 CEST	443	49711	3.217.205.239	192.168.2.11
May 6, 2024 18:41:50.852149963 CEST	443	49711	3.217.205.239	192.168.2.11
May 6, 2024 18:41:50.852154016 CEST	443	49710	3.217.205.239	192.168.2.11
May 6, 2024 18:41:50.852516890 CEST	49710	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:50.852538109 CEST	443	49710	3.217.205.239	192.168.2.11
May 6, 2024 18:41:50.852667093 CEST	49711	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:50.852684975 CEST	443	49711	3.217.205.239	192.168.2.11
May 6, 2024 18:41:50.853658915 CEST	443	49710	3.217.205.239	192.168.2.11
May 6, 2024 18:41:50.853732109 CEST	49710	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:50.853785038 CEST	443	49711	3.217.205.239	192.168.2.11
May 6, 2024 18:41:50.853869915 CEST	49711	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:50.861625910 CEST	49711	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:50.861731052 CEST	443	49711	3.217.205.239	192.168.2.11
May 6, 2024 18:41:50.862334967 CEST	49710	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:50.862442017 CEST	443	49710	3.217.205.239	192.168.2.11
May 6, 2024 18:41:50.862660885 CEST	49711	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:50.862682104 CEST	443	49711	3.217.205.239	192.168.2.11
May 6, 2024 18:41:50.916044950 CEST	49710	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:50.916048050 CEST	49711	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:50.916060925 CEST	443	49710	3.217.205.239	192.168.2.11
May 6, 2024 18:41:50.945559978 CEST	49674	443	192.168.2.11	173.222.162.42
May 6, 2024 18:41:50.960939884 CEST	49710	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.046232939 CEST	49673	443	192.168.2.11	173.222.162.42
May 6, 2024 18:41:51.048167944 CEST	443	49711	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.048192024 CEST	443	49711	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.048202038 CEST	443	49711	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.048228979 CEST	443	49711	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.048264980 CEST	49711	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.048285961 CEST	443	49711	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.048296928 CEST	49711	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.091999054 CEST	49711	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.100719929 CEST	49710	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.101424932 CEST	49713	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.101459980 CEST	443	49713	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.101545095 CEST	49713	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.101789951 CEST	49713	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.101804972 CEST	443	49713	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.102600098 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.102624893 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.102674007 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.102960110 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.102977991 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.103579044 CEST	49715	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.103607893 CEST	443	49715	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.103661060 CEST	49715	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.104013920 CEST	49715	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.104034901 CEST	443	49715	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.148112059 CEST	443	49710	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.182440996 CEST	443	49711	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.182456017 CEST	443	49711	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.182470083 CEST	443	49711	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.182481050 CEST	443	49711	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.182487011 CEST	443	49711	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.182496071 CEST	443	49711	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.182512045 CEST	49711	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.182535887 CEST	443	49711	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.182573080 CEST	49711	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.182588100 CEST	443	49711	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.182598114 CEST	443	49711	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.182621002 CEST	49711	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.182653904 CEST	49711	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.182661057 CEST	443	49711	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.182691097 CEST	443	49711	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.182734013 CEST	49711	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.183046103 CEST	49711	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.183067083 CEST	443	49711	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.222513914 CEST	49716	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.222556114 CEST	443	49716	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.222611904 CEST	49716	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.222768068 CEST	49717	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.222799063 CEST	443	49717	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.222865105 CEST	49717	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.223052025 CEST	49716	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.223069906 CEST	443	49716	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.223200083 CEST	49717	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.223208904 CEST	443	49717	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.237123013 CEST	443	49710	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.237150908 CEST	443	49710	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.237159967 CEST	443	49710	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.237180948 CEST	443	49710	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.237287045 CEST	49710	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.237309933 CEST	443	49710	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.292287111 CEST	49710	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.371443033 CEST	443	49710	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.371464968 CEST	443	49710	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.371491909 CEST	443	49710	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.371501923 CEST	443	49710	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.371514082 CEST	443	49710	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.371525049 CEST	443	49710	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.371546030 CEST	443	49710	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.371562004 CEST	49710	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.371562958 CEST	443	49710	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.371577024 CEST	443	49710	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.371592999 CEST	443	49710	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.371593952 CEST	49710	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.371606112 CEST	443	49710	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.371618032 CEST	49710	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.371618032 CEST	49710	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.371646881 CEST	49710	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.371653080 CEST	443	49710	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.371695042 CEST	49710	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.373918056 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.374363899 CEST	443	49715	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.374567032 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.374588966 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.375086069 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.375109911 CEST	49715	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.375128031 CEST	443	49715	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.375580072 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.375674009 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.375844002 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.376209974 CEST	443	49715	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.376269102 CEST	49715	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.376588106 CEST	49715	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.376651049 CEST	443	49715	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.376745939 CEST	49715	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.376754045 CEST	443	49715	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.420114994 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.430903912 CEST	49715	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.452019930 CEST	443	49717	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.452402115 CEST	49717	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.452414036 CEST	443	49717	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.453165054 CEST	443	49716	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.453538895 CEST	443	49717	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.453589916 CEST	49717	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.453670979 CEST	49716	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.453685999 CEST	443	49716	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.454915047 CEST	443	49716	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.454972029 CEST	49716	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.456990957 CEST	49717	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.457066059 CEST	443	49717	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.457704067 CEST	49716	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.457802057 CEST	443	49716	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.457837105 CEST	49717	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.457843065 CEST	443	49717	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.458033085 CEST	49716	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.458040953 CEST	443	49716	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.505956888 CEST	443	49710	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.506058931 CEST	443	49710	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.506062031 CEST	49710	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.506117105 CEST	49710	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.507822037 CEST	49716	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.507841110 CEST	49717	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.511698961 CEST	49710	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.511725903 CEST	443	49710	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.524549007 CEST	443	49713	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.527328968 CEST	49713	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.527343035 CEST	443	49713	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.527719021 CEST	443	49713	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.528748989 CEST	49713	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.528836012 CEST	443	49713	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.529258966 CEST	49713	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.576121092 CEST	443	49713	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.666937113 CEST	443	49713	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.666958094 CEST	443	49713	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.667042017 CEST	49713	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.667063951 CEST	443	49713	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.685348034 CEST	443	49715	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.685374975 CEST	443	49715	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.685381889 CEST	443	49715	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.685431004 CEST	49715	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.685452938 CEST	443	49715	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.685467005 CEST	443	49715	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.685473919 CEST	49715	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.685487032 CEST	49715	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.685517073 CEST	49715	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.695744991 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.695769072 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.695826054 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.695841074 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.711097956 CEST	49713	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.713485956 CEST	49715	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.713507891 CEST	443	49715	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.742345095 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.800874949 CEST	443	49713	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.800889015 CEST	443	49713	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.800939083 CEST	443	49713	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.800966024 CEST	49713	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.800985098 CEST	443	49713	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.801001072 CEST	49713	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.801040888 CEST	49713	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.829863071 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.829873085 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.829910040 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.829947948 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.829960108 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.829983950 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.830003023 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.843095064 CEST	443	49716	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.843123913 CEST	443	49716	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.843168020 CEST	49716	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.843178034 CEST	443	49716	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.874857903 CEST	443	49716	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.874872923 CEST	443	49716	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.874917984 CEST	49716	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.874932051 CEST	443	49716	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.874964952 CEST	49716	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.876847029 CEST	443	49717	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.876877069 CEST	443	49717	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.876884937 CEST	443	49717	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.876909971 CEST	443	49717	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.876943111 CEST	49717	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.876951933 CEST	443	49717	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.876979113 CEST	443	49717	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.877000093 CEST	49717	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.877012968 CEST	49717	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.880531073 CEST	49717	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.880546093 CEST	443	49717	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.881020069 CEST	443	49716	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.881061077 CEST	443	49716	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.881092072 CEST	49716	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.881105900 CEST	443	49716	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.881170034 CEST	49716	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.884273052 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.889659882 CEST	49719	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.889691114 CEST	443	49719	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.889745951 CEST	49719	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.890225887 CEST	49719	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.890235901 CEST	443	49719	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.902398109 CEST	443	49716	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.902410030 CEST	443	49716	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.902436018 CEST	443	49716	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.902471066 CEST	443	49716	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.902471066 CEST	49716	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.902539015 CEST	49716	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.902548075 CEST	443	49716	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.902592897 CEST	49716	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.905375004 CEST	443	49716	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.905437946 CEST	49716	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.905451059 CEST	443	49716	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.905489922 CEST	443	49716	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.905556917 CEST	49716	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.905827999 CEST	49716	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.905844927 CEST	443	49716	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.905850887 CEST	49716	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.905903101 CEST	49716	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.912548065 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.912584066 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.912703037 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.913350105 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:51.913363934 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:51.934402943 CEST	443	49713	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.934427023 CEST	443	49713	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.934489012 CEST	443	49713	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.934505939 CEST	49713	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.934520006 CEST	443	49713	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.934535027 CEST	443	49713	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.934544086 CEST	49713	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.934572935 CEST	443	49713	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.934582949 CEST	49713	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.934588909 CEST	443	49713	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.934639931 CEST	49713	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.934741974 CEST	443	49713	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.934786081 CEST	443	49713	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.934791088 CEST	49713	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.934798002 CEST	443	49713	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.934834957 CEST	49713	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.934953928 CEST	443	49713	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.934976101 CEST	443	49713	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.935031891 CEST	49713	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.935038090 CEST	443	49713	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.935127974 CEST	49713	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.963872910 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.963887930 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.963908911 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.963929892 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.963958979 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.963985920 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.963999033 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.964037895 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.964047909 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.964076042 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.964091063 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.964108944 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.964137077 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.964195013 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.964237928 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.964242935 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.964251041 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.964274883 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.964297056 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.964309931 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.964359045 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:51.964365005 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:51.964395046 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.006342888 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.008492947 CEST	49721	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:52.008527040 CEST	443	49721	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.008613110 CEST	49721	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:52.008764029 CEST	49722	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:52.008795977 CEST	443	49722	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.008976936 CEST	49722	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:52.009754896 CEST	49722	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:52.009768009 CEST	443	49722	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.010360003 CEST	49721	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:52.010382891 CEST	443	49721	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.068387985 CEST	443	49713	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.068412066 CEST	443	49713	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.068449974 CEST	443	49713	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.068504095 CEST	49713	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.068519115 CEST	443	49713	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.068527937 CEST	49713	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.068536997 CEST	443	49713	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.068588018 CEST	49713	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.069152117 CEST	49713	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.069164991 CEST	443	49713	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.098073959 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.098088026 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.098169088 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.098181963 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.098218918 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.098220110 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.098242044 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.098273039 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.098274946 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.098300934 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.098306894 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.098330021 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.098370075 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.098526001 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.098540068 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.098567963 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.098575115 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.098601103 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.098622084 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.098728895 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.098743916 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.098777056 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.098783016 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.098823071 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.098841906 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.098910093 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.098925114 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.099005938 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.099020004 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.099065065 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.099124908 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.099139929 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.099174976 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.099183083 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.099214077 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.099236012 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.114801884 CEST	443	49719	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.115711927 CEST	49719	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.115725040 CEST	443	49719	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.116250038 CEST	443	49719	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.117008924 CEST	49719	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.117094994 CEST	443	49719	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.117551088 CEST	49719	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.137722015 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.138055086 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.138067961 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.138484001 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.139529943 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.139602900 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.140048981 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.164119005 CEST	443	49719	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.180124998 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.231930017 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.231962919 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.231997013 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.232012033 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.232036114 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.232053995 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.232194901 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.232211113 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.232238054 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.232244968 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.232271910 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.232290030 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.232408047 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.232426882 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.232465982 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.232472897 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.232510090 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.232528925 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.232646942 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.232662916 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.232701063 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.232707024 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.232737064 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.232769966 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.232975006 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.232990980 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.233020067 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.233026028 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.233059883 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.233071089 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.233079910 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.233103037 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.233128071 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.233134031 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.233159065 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.233175993 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.233311892 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.233328104 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.233386993 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.233393908 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.233424902 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.233444929 CEST	443	49721	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.233467102 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.233480930 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.233503103 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.233532906 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.233539104 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.233566999 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.233583927 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.233741045 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.233751059 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.233805895 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.233813047 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.233851910 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.233900070 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.233920097 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.233947039 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.233952045 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.233978987 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.234003067 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.234117031 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.234132051 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.234170914 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.234175920 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.234221935 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.234352112 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.234368086 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.234404087 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.234410048 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.234438896 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.234452963 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.234538078 CEST	49721	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:52.234555006 CEST	443	49721	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.234813929 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.235619068 CEST	443	49721	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.235692978 CEST	49721	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:52.235884905 CEST	443	49722	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.236325026 CEST	49721	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:52.236387968 CEST	443	49721	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.237560034 CEST	49722	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:52.237571001 CEST	443	49722	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.238020897 CEST	49721	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:52.238030910 CEST	443	49721	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.241029024 CEST	443	49722	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.241106987 CEST	49722	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:52.242508888 CEST	49722	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:52.242665052 CEST	49722	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:52.242789984 CEST	443	49722	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.288676023 CEST	49721	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:52.288683891 CEST	49722	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:52.288696051 CEST	443	49722	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.339489937 CEST	49722	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:52.365936995 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.365967989 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.366019964 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.366036892 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.366069078 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.366086006 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.366132021 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.366147995 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.366174936 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.366182089 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.366205931 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.366220951 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.366349936 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.366364956 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.366400003 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.366405964 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.366427898 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.366453886 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.366525888 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.366543055 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.366585016 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.366590977 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.366614103 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.366632938 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.366739988 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.366755009 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.366791964 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.366796970 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.366821051 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.366852999 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.367048979 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.367069960 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.367103100 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.367110014 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.367136955 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.367151976 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.367216110 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.367230892 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.367261887 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.367269039 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.367292881 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.367310047 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.367394924 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.367409945 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.367441893 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.367448092 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.367475986 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.367491961 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.367670059 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.367686987 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.367721081 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.367726088 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.367752075 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.367768049 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.367918015 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.367935896 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.367969036 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.367974997 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.367997885 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.368016958 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.368149996 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.368165970 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.368197918 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.368202925 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.368227959 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.368243933 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.368275881 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.368289948 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.368324041 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.368330956 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.368355036 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.368369102 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.368541002 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.368556023 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.368592978 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.368598938 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.368627071 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.368652105 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.368724108 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.368740082 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.368772984 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.368778944 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.368805885 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.368819952 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.368824005 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.368874073 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.374526024 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.495279074 CEST	443	49722	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.495292902 CEST	443	49722	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.495398998 CEST	49722	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:52.495409966 CEST	443	49722	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.502042055 CEST	443	49704	173.222.162.42	192.168.2.11
May 6, 2024 18:41:52.502571106 CEST	49704	443	192.168.2.11	173.222.162.42
May 6, 2024 18:41:52.504371881 CEST	443	49722	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.504381895 CEST	443	49722	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.504410982 CEST	443	49722	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.504462957 CEST	49722	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:52.504467964 CEST	443	49722	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.504551888 CEST	49722	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:52.513463020 CEST	443	49722	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.513472080 CEST	443	49722	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.513567924 CEST	49722	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:52.513575077 CEST	443	49722	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.513637066 CEST	49722	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:52.522659063 CEST	443	49722	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.522666931 CEST	443	49722	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.522758961 CEST	49722	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:52.528032064 CEST	443	49719	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.528062105 CEST	443	49719	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.528079033 CEST	443	49719	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.528124094 CEST	49719	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.528136015 CEST	443	49719	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.528197050 CEST	49719	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.528197050 CEST	49719	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.532586098 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.534861088 CEST	443	49722	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.534869909 CEST	443	49722	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.534933090 CEST	443	49722	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.534954071 CEST	49722	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:52.534974098 CEST	49722	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:52.535788059 CEST	443	49721	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.535805941 CEST	443	49721	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.535816908 CEST	443	49721	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.535841942 CEST	443	49721	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.535847902 CEST	443	49721	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.535866976 CEST	443	49721	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.535866022 CEST	49721	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:52.535900116 CEST	49721	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:52.535911083 CEST	49721	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:52.536748886 CEST	49714	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.536786079 CEST	443	49714	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.554585934 CEST	443	49719	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.554610968 CEST	443	49719	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.554666996 CEST	49719	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.554677010 CEST	443	49719	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.554742098 CEST	49719	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.596945047 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.596971035 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.597032070 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.597045898 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.598119020 CEST	49719	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.632636070 CEST	443	49719	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.632663965 CEST	443	49719	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.632708073 CEST	49719	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.632721901 CEST	443	49719	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.632745981 CEST	49719	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.632764101 CEST	49719	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.633016109 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.633045912 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.633111954 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.633111954 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.633138895 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.635687113 CEST	443	49719	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.635760069 CEST	49719	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.653974056 CEST	443	49719	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.653999090 CEST	443	49719	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.654068947 CEST	49719	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.654088020 CEST	443	49719	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.654102087 CEST	49719	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.654136896 CEST	49719	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.673791885 CEST	443	49719	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.673840046 CEST	443	49719	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.673877954 CEST	443	49719	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.673940897 CEST	49719	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.673955917 CEST	49719	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.680423975 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.700021029 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.700037003 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.700078011 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.700162888 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.700176001 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.700202942 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.700241089 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.701392889 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.701464891 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.736134052 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.736161947 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.736252069 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.736258984 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.736268044 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.736310959 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.736325979 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.755961895 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.755991936 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.756082058 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.756093025 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.756161928 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.774226904 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.774240971 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.774312019 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.774322987 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.774391890 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.774605989 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.774652958 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.774717093 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.775012016 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.775028944 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.776770115 CEST	49724	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.776801109 CEST	443	49724	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.776953936 CEST	49724	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.777229071 CEST	49724	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:52.777240992 CEST	443	49724	3.217.205.239	192.168.2.11
May 6, 2024 18:41:52.777729034 CEST	49725	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.777757883 CEST	443	49725	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.777812958 CEST	49725	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.778011084 CEST	49725	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.778036118 CEST	443	49725	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.778510094 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.778525114 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.778594971 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.778969049 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.778980970 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.779372931 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.779383898 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.779511929 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.779747009 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.779755116 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.781915903 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.782574892 CEST	49722	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:52.782588959 CEST	443	49722	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.783519983 CEST	49721	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:52.783538103 CEST	443	49721	18.173.145.84	192.168.2.11
May 6, 2024 18:41:52.794728041 CEST	49719	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.794753075 CEST	443	49719	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.800956964 CEST	49728	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.800985098 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.801039934 CEST	49728	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.801269054 CEST	49728	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.801282883 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.813677073 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.813699961 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.813750029 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.813760996 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.813815117 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.848351002 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.848378897 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.848423958 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.848444939 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.848470926 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.854860067 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.854952097 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.854962111 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.855051994 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.871722937 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.871750116 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.871808052 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.871825933 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.871848106 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.871879101 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.884560108 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.884583950 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.884633064 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.884644032 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.884685040 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.884702921 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.892142057 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.892235994 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.892244101 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.892898083 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.893904924 CEST	443	49720	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.894157887 CEST	49720	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.999428988 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:52.999706984 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:52.999726057 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.000137091 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.000473976 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.000547886 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.000617981 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.005752087 CEST	443	49725	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.006077051 CEST	49725	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.006103039 CEST	443	49725	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.006508112 CEST	443	49725	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.006860971 CEST	49725	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.006939888 CEST	443	49725	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.006983995 CEST	49725	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.007805109 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.008004904 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.008089066 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.008096933 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.008184910 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.008198977 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.009231091 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.009263039 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.009326935 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.009337902 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.009746075 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.009809971 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.010174036 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.010231018 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.010293007 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.010303020 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.010385036 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.010390043 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.026612997 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.027076960 CEST	49728	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.027091026 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.028354883 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.028424025 CEST	49728	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.029150009 CEST	49728	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.029223919 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.029563904 CEST	49728	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.029572964 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.048120975 CEST	443	49725	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.048130989 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.048319101 CEST	443	49724	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.048474073 CEST	49725	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.051434040 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.052356005 CEST	49724	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.052365065 CEST	443	49724	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.052714109 CEST	443	49724	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.053190947 CEST	49724	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.053251028 CEST	443	49724	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.053368092 CEST	49724	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.064780951 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.080871105 CEST	49728	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.096956968 CEST	49724	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.096968889 CEST	443	49724	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.301970005 CEST	443	49725	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.301995993 CEST	443	49725	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.302006960 CEST	443	49725	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.302020073 CEST	443	49725	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.302045107 CEST	443	49725	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.302089930 CEST	49725	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.302115917 CEST	443	49725	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.302139997 CEST	49725	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.302184105 CEST	49725	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.320597887 CEST	443	49725	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.320617914 CEST	443	49725	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.320667028 CEST	49725	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.320676088 CEST	443	49725	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.320694923 CEST	49725	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.320720911 CEST	49725	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.338251114 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.338269949 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.338279009 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.338330030 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.338346958 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.338397026 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.340431929 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.340480089 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.359675884 CEST	443	49724	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.359761000 CEST	443	49724	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.359806061 CEST	49724	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.376641035 CEST	49729	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.376666069 CEST	443	49729	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.376734972 CEST	49729	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.376964092 CEST	49730	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.376983881 CEST	443	49730	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.377319098 CEST	49730	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.377348900 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.377357960 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.377391100 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.377445936 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.377445936 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.377460957 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.377510071 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.377759933 CEST	49731	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.377779007 CEST	443	49731	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.377849102 CEST	49731	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.378163099 CEST	49732	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.378195047 CEST	443	49732	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.378241062 CEST	49732	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.380188942 CEST	49729	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.380202055 CEST	443	49729	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.380526066 CEST	49730	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.380534887 CEST	443	49730	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.380781889 CEST	49731	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.380793095 CEST	443	49731	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.381021023 CEST	49732	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.381036043 CEST	443	49732	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.383814096 CEST	49724	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.383836985 CEST	443	49724	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.405402899 CEST	443	49725	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.405424118 CEST	443	49725	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.405461073 CEST	49725	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.405473948 CEST	443	49725	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.405503988 CEST	49725	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.405520916 CEST	49725	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.421020985 CEST	443	49725	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.421075106 CEST	443	49725	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.421112061 CEST	49725	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.421122074 CEST	443	49725	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.421154976 CEST	49725	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.424108028 CEST	443	49725	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.424200058 CEST	49725	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.424207926 CEST	443	49725	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.430331945 CEST	443	49725	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.430393934 CEST	443	49725	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.430430889 CEST	49725	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.430430889 CEST	49725	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.443418026 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.443429947 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.443492889 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.443502903 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.443526983 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.443547964 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.443555117 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.443571091 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.443610907 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.443633080 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.443650961 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.443679094 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.444293976 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.444365978 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.444382906 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.444396973 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.444417953 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.446470022 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.446516037 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.452955008 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.470774889 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.470792055 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.470870972 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.470870972 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.470880985 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.471523046 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.471960068 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.471987963 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.472028971 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.472047091 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.472063065 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.479346991 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.479460001 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.482311010 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.482321978 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.482357025 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.482382059 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.482393026 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.482418060 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.482486010 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.482536077 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.484905005 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.484932899 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.484942913 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.484968901 CEST	49728	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.484991074 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.484994888 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.485034943 CEST	49728	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.485034943 CEST	49728	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.492253065 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.492275953 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.492351055 CEST	49728	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.501269102 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.501286983 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.501363039 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.501378059 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.504297972 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.504319906 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.504365921 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.504380941 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.504431963 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.512160063 CEST	49734	443	192.168.2.11	142.250.217.196
May 6, 2024 18:41:53.512193918 CEST	443	49734	142.250.217.196	192.168.2.11
May 6, 2024 18:41:53.512278080 CEST	49734	443	192.168.2.11	142.250.217.196
May 6, 2024 18:41:53.512645960 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.513933897 CEST	49734	443	192.168.2.11	142.250.217.196
May 6, 2024 18:41:53.513946056 CEST	443	49734	142.250.217.196	192.168.2.11
May 6, 2024 18:41:53.520730972 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.520756006 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.520793915 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.520809889 CEST	49728	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.520816088 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.520886898 CEST	49728	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.520886898 CEST	49728	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.523083925 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.523142099 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.523160934 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.523174047 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.523232937 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.523232937 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.551181078 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.551213980 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.551256895 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.551278114 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.551301956 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.551316977 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.553212881 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.567253113 CEST	49725	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.567276001 CEST	443	49725	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.569550991 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.569581032 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.569633007 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.569654942 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.569677114 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.569710016 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.580058098 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.580081940 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.580224037 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.580234051 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.580290079 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.580563068 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.585292101 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.585303068 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.585331917 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.585346937 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.585369110 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.585381985 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.585412025 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.585427046 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.589308023 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.589379072 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.591053009 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.591077089 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.591211081 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.591229916 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.591269016 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.594049931 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.594253063 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.596090078 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.596110106 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.596151114 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.596158981 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.596199036 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.600269079 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.600318909 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.600353003 CEST	49728	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.600364923 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.600435019 CEST	49728	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.608238935 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.608259916 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.608330011 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.608340025 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.608380079 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.608397007 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.610496044 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.610522032 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.610599041 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.610615015 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.610620975 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.610671997 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.612514973 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.621509075 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.621531010 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.621577978 CEST	49728	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.621586084 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.621624947 CEST	49728	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.623775005 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.623790026 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.623869896 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.623888016 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.623923063 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.628386974 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.628432989 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.628494024 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.628509998 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.628539085 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.628547907 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.635202885 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.635238886 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.635265112 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.635272980 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.635284901 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.635310888 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.635345936 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.637196064 CEST	49727	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.637208939 CEST	443	49727	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.641551971 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.641568899 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.641638041 CEST	49728	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.641648054 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.647365093 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.647386074 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.647423983 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.647444010 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.647459030 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.647479057 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.649137020 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.649184942 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.653441906 CEST	443	49732	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.655322075 CEST	443	49730	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.660043001 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.660069942 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.660114050 CEST	49728	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.660121918 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.660156965 CEST	49728	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.660546064 CEST	49732	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.660557985 CEST	443	49732	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.661048889 CEST	49730	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.661056042 CEST	443	49730	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.661242008 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.661279917 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.661298990 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.661313057 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.661333084 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.661350012 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.661830902 CEST	443	49730	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.661849022 CEST	443	49732	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.661909103 CEST	49732	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.662905931 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.662925959 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.662980080 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.662990093 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.663034916 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.664501905 CEST	49730	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.664519072 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.664570093 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.664624929 CEST	443	49730	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.664920092 CEST	49732	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.665004015 CEST	443	49732	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.665885925 CEST	49730	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.666333914 CEST	49732	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.666342020 CEST	443	49732	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.666816950 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.672207117 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.672241926 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.672266960 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.672286987 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.672331095 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.672339916 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.677424908 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.677481890 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.681483984 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.681535006 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.690459013 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.690498114 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.690527916 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.690538883 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.690565109 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.690581083 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.696131945 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.696193933 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.696204901 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.698777914 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.698872089 CEST	49728	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.698883057 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.698931932 CEST	49728	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.701232910 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.701268911 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.701291084 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.701303959 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.701344967 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.707933903 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.707997084 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.708035946 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.708050966 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.708177090 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.710971117 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.711035013 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.711097956 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.711113930 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.711133957 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.711155891 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.712107897 CEST	443	49730	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.712970018 CEST	49732	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.715600967 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.715610027 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.715637922 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.715691090 CEST	49728	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.715699911 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.715756893 CEST	49728	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.715756893 CEST	49728	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.721174002 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.721204042 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.721251965 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.721266031 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.721286058 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.721405029 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.724814892 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.724852085 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.724883080 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.724884987 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.724891901 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.724950075 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.730988026 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.731031895 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.731096983 CEST	49728	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.731096983 CEST	49728	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.731111050 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.731170893 CEST	49728	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.731909037 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.731945992 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.731976986 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.731988907 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.732016087 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.732031107 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.737943888 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.737981081 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.738025904 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.738034964 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.738074064 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.738091946 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.741754055 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.741792917 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.741820097 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.741832018 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.741854906 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.741868973 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.747601986 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.747667074 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.747688055 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.747703075 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.747744083 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.749672890 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.749722958 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.749744892 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.749759912 CEST	49728	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.749818087 CEST	49728	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.751679897 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.751769066 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.751797915 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.751852036 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.753654003 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.755264997 CEST	443	49734	142.250.217.196	192.168.2.11
May 6, 2024 18:41:53.755819082 CEST	49734	443	192.168.2.11	142.250.217.196
May 6, 2024 18:41:53.755826950 CEST	443	49734	142.250.217.196	192.168.2.11
May 6, 2024 18:41:53.757095098 CEST	443	49734	142.250.217.196	192.168.2.11
May 6, 2024 18:41:53.757169962 CEST	49734	443	192.168.2.11	142.250.217.196
May 6, 2024 18:41:53.763461113 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.763509035 CEST	49734	443	192.168.2.11	142.250.217.196
May 6, 2024 18:41:53.763521910 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.763613939 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.763613939 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.763624907 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.763633013 CEST	443	49734	142.250.217.196	192.168.2.11
May 6, 2024 18:41:53.763680935 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.763746023 CEST	49723	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.763761997 CEST	443	49723	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.764880896 CEST	49728	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.764904022 CEST	443	49728	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.765341043 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.765398979 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.765403032 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.765439987 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.784813881 CEST	49726	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:53.784837008 CEST	443	49726	18.173.145.206	192.168.2.11
May 6, 2024 18:41:53.791534901 CEST	443	49729	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.792756081 CEST	443	49731	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.798861027 CEST	49729	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.798871994 CEST	443	49729	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.799120903 CEST	49731	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.799130917 CEST	443	49731	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.799328089 CEST	443	49729	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.800228119 CEST	49729	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.800268888 CEST	443	49731	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.800306082 CEST	443	49729	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.800374031 CEST	49731	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.800741911 CEST	49729	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.801189899 CEST	49731	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.801264048 CEST	443	49731	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.801475048 CEST	49731	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.801480055 CEST	443	49731	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.804511070 CEST	49734	443	192.168.2.11	142.250.217.196
May 6, 2024 18:41:53.804528952 CEST	443	49734	142.250.217.196	192.168.2.11
May 6, 2024 18:41:53.844121933 CEST	443	49729	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.849770069 CEST	49731	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.849781036 CEST	49734	443	192.168.2.11	142.250.217.196
May 6, 2024 18:41:53.937377930 CEST	443	49729	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.937405109 CEST	443	49729	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.937473059 CEST	49729	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.937484026 CEST	443	49729	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.938286066 CEST	443	49731	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.938302994 CEST	443	49731	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.938309908 CEST	443	49731	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.938328028 CEST	443	49731	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.938370943 CEST	49731	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.938376904 CEST	443	49731	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.938406944 CEST	49731	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.964329004 CEST	443	49730	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.964354992 CEST	443	49730	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.964412928 CEST	49730	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.964426041 CEST	443	49730	3.217.205.239	192.168.2.11
May 6, 2024 18:41:53.977257967 CEST	49729	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:53.992960930 CEST	49731	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:54.006910086 CEST	49730	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:54.071573973 CEST	443	49729	3.217.205.239	192.168.2.11
May 6, 2024 18:41:54.071593046 CEST	443	49729	3.217.205.239	192.168.2.11
May 6, 2024 18:41:54.071636915 CEST	443	49729	3.217.205.239	192.168.2.11
May 6, 2024 18:41:54.071660995 CEST	49729	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:54.071671963 CEST	443	49729	3.217.205.239	192.168.2.11
May 6, 2024 18:41:54.071710110 CEST	49729	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:54.071728945 CEST	443	49729	3.217.205.239	192.168.2.11
May 6, 2024 18:41:54.071765900 CEST	49729	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:54.073635101 CEST	443	49731	3.217.205.239	192.168.2.11
May 6, 2024 18:41:54.073645115 CEST	443	49731	3.217.205.239	192.168.2.11
May 6, 2024 18:41:54.073657990 CEST	443	49731	3.217.205.239	192.168.2.11
May 6, 2024 18:41:54.073664904 CEST	443	49731	3.217.205.239	192.168.2.11
May 6, 2024 18:41:54.073689938 CEST	49731	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:54.073704958 CEST	443	49731	3.217.205.239	192.168.2.11
May 6, 2024 18:41:54.073735952 CEST	443	49731	3.217.205.239	192.168.2.11
May 6, 2024 18:41:54.073749065 CEST	49731	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:54.073781967 CEST	49731	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:54.074600935 CEST	49729	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:54.074618101 CEST	443	49729	3.217.205.239	192.168.2.11
May 6, 2024 18:41:54.097456932 CEST	443	49732	3.217.205.239	192.168.2.11
May 6, 2024 18:41:54.097477913 CEST	443	49732	3.217.205.239	192.168.2.11
May 6, 2024 18:41:54.097491026 CEST	443	49732	3.217.205.239	192.168.2.11
May 6, 2024 18:41:54.097498894 CEST	443	49732	3.217.205.239	192.168.2.11
May 6, 2024 18:41:54.097531080 CEST	443	49732	3.217.205.239	192.168.2.11
May 6, 2024 18:41:54.097533941 CEST	49732	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:54.097549915 CEST	443	49732	3.217.205.239	192.168.2.11
May 6, 2024 18:41:54.097563028 CEST	443	49732	3.217.205.239	192.168.2.11
May 6, 2024 18:41:54.097575903 CEST	49732	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:54.097599983 CEST	49732	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:54.097606897 CEST	443	49732	3.217.205.239	192.168.2.11
May 6, 2024 18:41:54.097618103 CEST	443	49732	3.217.205.239	192.168.2.11
May 6, 2024 18:41:54.097647905 CEST	443	49732	3.217.205.239	192.168.2.11
May 6, 2024 18:41:54.097666979 CEST	49732	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:54.097688913 CEST	443	49732	3.217.205.239	192.168.2.11
May 6, 2024 18:41:54.097722054 CEST	49732	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:54.097732067 CEST	443	49732	3.217.205.239	192.168.2.11
May 6, 2024 18:41:54.097747087 CEST	49732	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:54.097771883 CEST	49732	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:54.097784996 CEST	443	49732	3.217.205.239	192.168.2.11
May 6, 2024 18:41:54.097856045 CEST	49732	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:54.098028898 CEST	443	49730	3.217.205.239	192.168.2.11
May 6, 2024 18:41:54.098042011 CEST	443	49730	3.217.205.239	192.168.2.11
May 6, 2024 18:41:54.098079920 CEST	443	49730	3.217.205.239	192.168.2.11
May 6, 2024 18:41:54.098109961 CEST	49730	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:54.098123074 CEST	443	49730	3.217.205.239	192.168.2.11
May 6, 2024 18:41:54.098133087 CEST	49730	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:54.098140955 CEST	443	49730	3.217.205.239	192.168.2.11
May 6, 2024 18:41:54.098182917 CEST	49730	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:54.129348040 CEST	49731	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:54.129373074 CEST	443	49731	3.217.205.239	192.168.2.11
May 6, 2024 18:41:54.237066984 CEST	49730	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:54.237096071 CEST	443	49730	3.217.205.239	192.168.2.11
May 6, 2024 18:41:54.296094894 CEST	49732	443	192.168.2.11	3.217.205.239
May 6, 2024 18:41:54.296118975 CEST	443	49732	3.217.205.239	192.168.2.11
May 6, 2024 18:41:54.330363989 CEST	49735	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:54.330408096 CEST	443	49735	18.173.145.206	192.168.2.11
May 6, 2024 18:41:54.330533981 CEST	49735	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:54.331383944 CEST	49735	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:54.331403017 CEST	443	49735	18.173.145.206	192.168.2.11
May 6, 2024 18:41:54.399132013 CEST	49736	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.399168015 CEST	443	49736	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.399317980 CEST	49736	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.399713039 CEST	49736	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.399725914 CEST	443	49736	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.400676012 CEST	49737	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.400703907 CEST	443	49737	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.400790930 CEST	49737	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.401624918 CEST	49737	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.401634932 CEST	443	49737	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.402646065 CEST	49738	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.402673960 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.403002977 CEST	49738	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.403398991 CEST	49738	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.403410912 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.405553102 CEST	49739	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.405565977 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.405689001 CEST	49739	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.406153917 CEST	49739	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.406162024 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.408255100 CEST	49740	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.408273935 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.408441067 CEST	49740	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.408811092 CEST	49740	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.408823013 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.411245108 CEST	49741	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.411278963 CEST	443	49741	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.411350012 CEST	49741	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.411540985 CEST	49741	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.411555052 CEST	443	49741	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.467325926 CEST	49742	443	192.168.2.11	23.196.177.159
May 6, 2024 18:41:54.467363119 CEST	443	49742	23.196.177.159	192.168.2.11
May 6, 2024 18:41:54.467619896 CEST	49742	443	192.168.2.11	23.196.177.159
May 6, 2024 18:41:54.470552921 CEST	49742	443	192.168.2.11	23.196.177.159
May 6, 2024 18:41:54.470566034 CEST	443	49742	23.196.177.159	192.168.2.11
May 6, 2024 18:41:54.555298090 CEST	443	49735	18.173.145.206	192.168.2.11
May 6, 2024 18:41:54.564246893 CEST	49735	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:54.564269066 CEST	443	49735	18.173.145.206	192.168.2.11
May 6, 2024 18:41:54.564723015 CEST	443	49735	18.173.145.206	192.168.2.11
May 6, 2024 18:41:54.621562004 CEST	49735	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:54.623378992 CEST	443	49736	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.625185966 CEST	443	49737	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.626998901 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.629831076 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.632508039 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.635051966 CEST	443	49741	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.656862020 CEST	49741	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.656888008 CEST	443	49741	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.657022953 CEST	49740	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.657049894 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.657850027 CEST	49739	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.657860994 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.657948017 CEST	49738	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.657959938 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.658025980 CEST	443	49741	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.658118010 CEST	49741	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.658129930 CEST	49737	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.658138037 CEST	443	49737	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.658205032 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.658257008 CEST	49740	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.658381939 CEST	49736	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.658394098 CEST	443	49736	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.658546925 CEST	443	49737	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.658685923 CEST	49735	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:54.658807993 CEST	443	49735	18.173.145.206	192.168.2.11
May 6, 2024 18:41:54.658884048 CEST	443	49736	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.658977985 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.659045935 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.659051895 CEST	49739	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.659131050 CEST	49741	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.659137011 CEST	49738	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.659198999 CEST	443	49741	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.659399986 CEST	49740	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.659461021 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.659672976 CEST	49737	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.659734964 CEST	443	49737	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.659934044 CEST	49736	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.660052061 CEST	443	49736	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.660340071 CEST	49739	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.660408020 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.660465956 CEST	49738	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.660537004 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.660662889 CEST	49735	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:54.660846949 CEST	49741	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.660855055 CEST	443	49741	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.661082983 CEST	49740	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.661091089 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.661159039 CEST	49737	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.661197901 CEST	49736	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.661264896 CEST	49739	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.661273956 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.661277056 CEST	49738	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.661283016 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.701015949 CEST	443	49742	23.196.177.159	192.168.2.11
May 6, 2024 18:41:54.701100111 CEST	49742	443	192.168.2.11	23.196.177.159
May 6, 2024 18:41:54.703710079 CEST	49742	443	192.168.2.11	23.196.177.159
May 6, 2024 18:41:54.703722000 CEST	443	49742	23.196.177.159	192.168.2.11
May 6, 2024 18:41:54.703989983 CEST	443	49742	23.196.177.159	192.168.2.11
May 6, 2024 18:41:54.704123020 CEST	443	49737	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.704123974 CEST	443	49735	18.173.145.206	192.168.2.11
May 6, 2024 18:41:54.708074093 CEST	49738	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.708106995 CEST	443	49736	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.708147049 CEST	49741	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.712038040 CEST	49739	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.712042093 CEST	49740	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.746476889 CEST	49742	443	192.168.2.11	23.196.177.159
May 6, 2024 18:41:54.910924911 CEST	49742	443	192.168.2.11	23.196.177.159
May 6, 2024 18:41:54.926181078 CEST	443	49735	18.173.145.206	192.168.2.11
May 6, 2024 18:41:54.926454067 CEST	443	49735	18.173.145.206	192.168.2.11
May 6, 2024 18:41:54.926517010 CEST	49735	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:54.927095890 CEST	49735	443	192.168.2.11	18.173.145.206
May 6, 2024 18:41:54.927113056 CEST	443	49735	18.173.145.206	192.168.2.11
May 6, 2024 18:41:54.952125072 CEST	443	49742	23.196.177.159	192.168.2.11
May 6, 2024 18:41:54.998488903 CEST	443	49737	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.998506069 CEST	443	49737	18.173.145.84	192.168.2.11
May 6, 2024 18:41:54.998603106 CEST	49737	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:54.998621941 CEST	443	49737	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.003180981 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.003209114 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.003269911 CEST	49739	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.003278971 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.008929014 CEST	443	49737	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.008960009 CEST	443	49737	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.009013891 CEST	49737	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.009021997 CEST	443	49737	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.009109974 CEST	49737	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.017044067 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.017061949 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.017071009 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.017093897 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.017096996 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.017103910 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.017137051 CEST	49740	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.017158985 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.017180920 CEST	49740	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.017211914 CEST	49740	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.025353909 CEST	443	49736	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.027126074 CEST	443	49742	23.196.177.159	192.168.2.11
May 6, 2024 18:41:55.027204037 CEST	443	49742	23.196.177.159	192.168.2.11
May 6, 2024 18:41:55.027266979 CEST	49742	443	192.168.2.11	23.196.177.159
May 6, 2024 18:41:55.027360916 CEST	49742	443	192.168.2.11	23.196.177.159
May 6, 2024 18:41:55.027388096 CEST	443	49742	23.196.177.159	192.168.2.11
May 6, 2024 18:41:55.027398109 CEST	49742	443	192.168.2.11	23.196.177.159
May 6, 2024 18:41:55.027405024 CEST	443	49742	23.196.177.159	192.168.2.11
May 6, 2024 18:41:55.028976917 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.029006004 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.029012918 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.029037952 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.029048920 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.029081106 CEST	49738	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.029095888 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.029134035 CEST	49738	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.029134035 CEST	49738	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.034013987 CEST	443	49737	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.034041882 CEST	443	49737	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.034142017 CEST	49737	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.034142017 CEST	49737	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.034149885 CEST	443	49737	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.034230947 CEST	49737	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.035168886 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.035185099 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.035204887 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.035262108 CEST	49739	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.035274029 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.035291910 CEST	49739	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.038109064 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.038117886 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.038173914 CEST	49738	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.038183928 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.040657997 CEST	443	49736	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.040678978 CEST	443	49736	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.040731907 CEST	49736	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.040745020 CEST	443	49736	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.040765047 CEST	49736	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.040793896 CEST	49736	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.042531013 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.042550087 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.042592049 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.042598009 CEST	49740	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.042610884 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.042634010 CEST	49740	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.044300079 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.044313908 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.044334888 CEST	443	49741	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.044336081 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.044347048 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.044357061 CEST	443	49741	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.044365883 CEST	443	49741	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.044375896 CEST	49739	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.044387102 CEST	443	49741	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.044395924 CEST	443	49741	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.044395924 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.044413090 CEST	49739	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.044413090 CEST	443	49741	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.044423103 CEST	49741	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.044440031 CEST	443	49741	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.044450045 CEST	49741	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.044459105 CEST	49741	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.044461966 CEST	49739	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.044486046 CEST	49741	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.050384045 CEST	443	49741	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.050446033 CEST	49741	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.054768085 CEST	443	49736	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.054826975 CEST	49736	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.063097000 CEST	49744	443	192.168.2.11	23.196.177.159
May 6, 2024 18:41:55.063129902 CEST	443	49744	23.196.177.159	192.168.2.11
May 6, 2024 18:41:55.063242912 CEST	49744	443	192.168.2.11	23.196.177.159
May 6, 2024 18:41:55.063534975 CEST	49744	443	192.168.2.11	23.196.177.159
May 6, 2024 18:41:55.063549995 CEST	443	49744	23.196.177.159	192.168.2.11
May 6, 2024 18:41:55.063960075 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.063997030 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.064007044 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.064043999 CEST	49738	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.064054966 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.064093113 CEST	49738	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.065762997 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.065778017 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.065808058 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.065836906 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.065844059 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.065860033 CEST	49739	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.065869093 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.065877914 CEST	49739	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.065901041 CEST	49739	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.066987038 CEST	443	49736	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.067023993 CEST	443	49736	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.067049026 CEST	49736	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.067063093 CEST	443	49736	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.067116976 CEST	49736	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.073165894 CEST	443	49741	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.073188066 CEST	443	49741	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.073221922 CEST	443	49741	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.073226929 CEST	49741	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.073247910 CEST	443	49741	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.073276043 CEST	49741	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.090199947 CEST	49740	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.106347084 CEST	49739	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.106556892 CEST	49738	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.112375021 CEST	443	49737	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.112397909 CEST	443	49737	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.112488985 CEST	49737	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.112495899 CEST	443	49737	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.112549067 CEST	49737	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.115392923 CEST	443	49737	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.115477085 CEST	49737	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.121565104 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.121579885 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.121624947 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.121679068 CEST	49740	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.121689081 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.121721983 CEST	49740	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.122308016 CEST	49741	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.127703905 CEST	443	49737	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.127763987 CEST	443	49737	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.127801895 CEST	49737	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.127808094 CEST	443	49737	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.128289938 CEST	49737	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.133783102 CEST	443	49737	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.133846998 CEST	49737	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.133860111 CEST	443	49737	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.133902073 CEST	49737	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.134164095 CEST	49737	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.134187937 CEST	443	49737	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.134545088 CEST	49745	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.134586096 CEST	443	49745	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.134644985 CEST	49745	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.135433912 CEST	49745	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.135449886 CEST	443	49745	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.142728090 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.142740965 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.142771006 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.142793894 CEST	49738	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.142805099 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.142813921 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.142844915 CEST	49738	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.142909050 CEST	49738	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.142996073 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.143013954 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.143054008 CEST	49740	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.143063068 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.143083096 CEST	49740	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.145109892 CEST	443	49736	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.145152092 CEST	443	49736	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.145180941 CEST	49736	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.145190001 CEST	443	49736	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.145211935 CEST	49736	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.145231962 CEST	49736	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.147342920 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.147360086 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.147392988 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.147419930 CEST	49739	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.147424936 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.147453070 CEST	49739	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.147460938 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.147470951 CEST	49739	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.148089886 CEST	443	49736	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.148137093 CEST	49736	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.155209064 CEST	443	49741	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.155232906 CEST	443	49741	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.155282974 CEST	49741	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.155301094 CEST	443	49741	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.155316114 CEST	49741	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.155400038 CEST	49741	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.158220053 CEST	443	49741	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.158298969 CEST	49741	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.158312082 CEST	443	49741	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.161031008 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.161053896 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.161123991 CEST	49738	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.161132097 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.161218882 CEST	49738	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.162786961 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.162820101 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.162847996 CEST	49740	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.162856102 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.162887096 CEST	49740	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.164820910 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.164850950 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.164880037 CEST	49739	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.164889097 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.164928913 CEST	49739	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.165652037 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.165699959 CEST	49738	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.169498920 CEST	443	49736	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.169526100 CEST	443	49736	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.169559956 CEST	443	49736	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.169569969 CEST	49736	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.169579983 CEST	443	49736	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.169599056 CEST	49736	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.177944899 CEST	443	49741	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.177953005 CEST	443	49741	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.178049088 CEST	49741	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.178073883 CEST	443	49741	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.183922052 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.183963060 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.183980942 CEST	49738	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.183989048 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.184020042 CEST	49738	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.184040070 CEST	49738	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.184043884 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.186275005 CEST	443	49736	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.186276913 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.186338902 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.186351061 CEST	49736	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.186352968 CEST	49739	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.186362982 CEST	443	49736	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.186363935 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.186418056 CEST	49739	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.186440945 CEST	49736	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.193624020 CEST	443	49741	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.193670988 CEST	443	49741	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.193684101 CEST	49741	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.193697929 CEST	443	49741	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.193712950 CEST	443	49741	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.193716049 CEST	49741	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.193764925 CEST	49741	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.193766117 CEST	49741	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.194142103 CEST	49741	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.194155931 CEST	443	49741	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.201575041 CEST	443	49736	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.201642036 CEST	443	49736	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.201670885 CEST	49736	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.201678991 CEST	443	49736	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.201698065 CEST	49736	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.202024937 CEST	49736	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.203309059 CEST	49740	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.203320980 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.220149994 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.220181942 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.220223904 CEST	49740	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.220244884 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.220282078 CEST	49740	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.220299959 CEST	49740	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.225296021 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.225344896 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.225398064 CEST	49739	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.225409031 CEST	443	49739	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.225465059 CEST	49739	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.234594107 CEST	49738	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.234765053 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.234787941 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.234834909 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.234844923 CEST	49740	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.234858990 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.234906912 CEST	49740	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.239721060 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.239742994 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.239778042 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.239814043 CEST	49738	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.239867926 CEST	49738	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.239875078 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.240128040 CEST	49738	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.250019073 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.250061035 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.250101089 CEST	49740	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.250108957 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.250118971 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.250137091 CEST	49740	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.250155926 CEST	49740	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.251283884 CEST	443	49736	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.251322031 CEST	443	49736	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.251367092 CEST	49736	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.251377106 CEST	443	49736	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.251390934 CEST	49736	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.251421928 CEST	49736	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.252233028 CEST	443	49740	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.255893946 CEST	443	49736	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.255954027 CEST	49736	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.257936001 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.257973909 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.258044004 CEST	49738	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.258052111 CEST	443	49738	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.258064985 CEST	49738	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.258101940 CEST	49738	443	192.168.2.11	18.173.145.84
May 6, 2024 18:41:55.260611057 CEST	443	49736	18.173.145.84	192.168.2.11
May 6, 2024 18:41:55.260679960 CEST	49736	443	192.168.2.11	18.173.145.84

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 6, 2024 18:41:50.120062113 CEST	192.168.2.11	1.1.1.1	0x8214	Standard query (0)	rmshg.amplified.training	A (IP address)	IN (0x0001)	false
May 6, 2024 18:41:50.120214939 CEST	192.168.2.11	1.1.1.1	0x58e1	Standard query (0)	rmshg.amplified.training	65	IN (0x0001)	false
May 6, 2024 18:41:51.108357906 CEST	192.168.2.11	1.1.1.1	0xf682	Standard query (0)	d3j0t7vrtr92dk.cloudfront.net	A (IP address)	IN (0x0001)	false
May 6, 2024 18:41:51.108480930 CEST	192.168.2.11	1.1.1.1	0x13c3	Standard query (0)	d3j0t7vrtr92dk.cloudfront.net	65	IN (0x0001)	false
May 6, 2024 18:41:51.894036055 CEST	192.168.2.11	1.1.1.1	0xcbe6	Standard query (0)	d3j0t7vrtr92dk.cloudfront.net	A (IP address)	IN (0x0001)	false
May 6, 2024 18:41:51.894412041 CEST	192.168.2.11	1.1.1.1	0x17a1	Standard query (0)	d3j0t7vrtr92dk.cloudfront.net	65	IN (0x0001)	false
May 6, 2024 18:41:53.295721054 CEST	192.168.2.11	1.1.1.1	0xd89b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 6, 2024 18:41:53.296535969 CEST	192.168.2.11	1.1.1.1	0xce50	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 6, 2024 18:42:08.679192066 CEST	192.168.2.11	1.1.1.1	0x1a53	Standard query (0)	rmshg.amplified.training	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:08.680038929 CEST	192.168.2.11	1.1.1.1	0x2fe1	Standard query (0)	rmshg.amplified.training	65	IN (0x0001)	false
May 6, 2024 18:42:15.597402096 CEST	192.168.2.11	1.1.1.1	0x823c	Standard query (0)	www.rmshg.com	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:15.597893000 CEST	192.168.2.11	1.1.1.1	0x4f5f	Standard query (0)	www.rmshg.com	65	IN (0x0001)	false
May 6, 2024 18:42:15.655910015 CEST	192.168.2.11	1.1.1.1	0xe9a5	Standard query (0)	www.rmshg.com	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:15.656312943 CEST	192.168.2.11	1.1.1.1	0x68cc	Standard query (0)	www.rmshg.com	65	IN (0x0001)	false
May 6, 2024 18:42:17.013963938 CEST	192.168.2.11	1.1.1.1	0x355d	Standard query (0)	cdn.stratospherewebsites.com	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:17.014269114 CEST	192.168.2.11	1.1.1.1	0x5f8	Standard query (0)	cdn.stratospherewebsites.com	65	IN (0x0001)	false
May 6, 2024 18:42:17.120588064 CEST	192.168.2.11	1.1.1.1	0xed9a	Standard query (0)	kit.fontawesome.com	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:17.120883942 CEST	192.168.2.11	1.1.1.1	0x1d70	Standard query (0)	kit.fontawesome.com	65	IN (0x0001)	false
May 6, 2024 18:42:17.255215883 CEST	192.168.2.11	1.1.1.1	0xbc83	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:17.255667925 CEST	192.168.2.11	1.1.1.1	0x4349	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
May 6, 2024 18:42:17.256712914 CEST	192.168.2.11	1.1.1.1	0x4b02	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:17.257261992 CEST	192.168.2.11	1.1.1.1	0x5814	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
May 6, 2024 18:42:17.260556936 CEST	192.168.2.11	1.1.1.1	0x9c7b	Standard query (0)	googletagmanager.com	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:17.260973930 CEST	192.168.2.11	1.1.1.1	0xff7b	Standard query (0)	googletagmanager.com	65	IN (0x0001)	false
May 6, 2024 18:42:17.373260021 CEST	192.168.2.11	1.1.1.1	0x29f8	Standard query (0)	cdn.userway.org	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:17.373260975 CEST	192.168.2.11	1.1.1.1	0xe1a7	Standard query (0)	cdn.userway.org	65	IN (0x0001)	false
May 6, 2024 18:42:18.205080032 CEST	192.168.2.11	1.1.1.1	0x2d2c	Standard query (0)	cdn.stratospherewebsites.com	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:18.205657959 CEST	192.168.2.11	1.1.1.1	0x9367	Standard query (0)	cdn.stratospherewebsites.com	65	IN (0x0001)	false
May 6, 2024 18:42:21.596096039 CEST	192.168.2.11	1.1.1.1	0xb322	Standard query (0)	ka-p.fontawesome.com	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:21.596565962 CEST	192.168.2.11	1.1.1.1	0xafe6	Standard query (0)	ka-p.fontawesome.com	65	IN (0x0001)	false
May 6, 2024 18:42:23.949424982 CEST	192.168.2.11	1.1.1.1	0x107e	Standard query (0)	api.userway.org	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:23.949763060 CEST	192.168.2.11	1.1.1.1	0xb889	Standard query (0)	api.userway.org	65	IN (0x0001)	false
May 6, 2024 18:42:25.033008099 CEST	192.168.2.11	1.1.1.1	0xf661	Standard query (0)	api.userway.org	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:25.033166885 CEST	192.168.2.11	1.1.1.1	0x2198	Standard query (0)	api.userway.org	65	IN (0x0001)	false
May 6, 2024 18:42:25.389806986 CEST	192.168.2.11	1.1.1.1	0x1865	Standard query (0)	cdn.userway.org	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:25.390096903 CEST	192.168.2.11	1.1.1.1	0x5f5a	Standard query (0)	cdn.userway.org	65	IN (0x0001)	false
May 6, 2024 18:42:25.566365957 CEST	192.168.2.11	1.1.1.1	0x40c5	Standard query (0)	www.rmshg.com	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:25.566612959 CEST	192.168.2.11	1.1.1.1	0x56e1	Standard query (0)	www.rmshg.com	65	IN (0x0001)	false
May 6, 2024 18:42:26.611613989 CEST	192.168.2.11	1.1.1.1	0x74d3	Standard query (0)	cdn77.api.userway.org	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:26.612291098 CEST	192.168.2.11	1.1.1.1	0xfd5f	Standard query (0)	cdn77.api.userway.org	65	IN (0x0001)	false
May 6, 2024 18:42:27.114797115 CEST	192.168.2.11	1.1.1.1	0x4b67	Standard query (0)	fortis-site.com	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:27.115185022 CEST	192.168.2.11	1.1.1.1	0x5ba	Standard query (0)	fortis-site.com	65	IN (0x0001)	false
May 6, 2024 18:42:27.901382923 CEST	192.168.2.11	1.1.1.1	0x8dc	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:27.901638985 CEST	192.168.2.11	1.1.1.1	0x7847	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
May 6, 2024 18:42:27.993072033 CEST	192.168.2.11	1.1.1.1	0xc701	Standard query (0)	cdn77.api.userway.org	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:27.993254900 CEST	192.168.2.11	1.1.1.1	0xd62c	Standard query (0)	cdn77.api.userway.org	65	IN (0x0001)	false
May 6, 2024 18:42:31.832748890 CEST	192.168.2.11	1.1.1.1	0x9af4	Standard query (0)	fortissite.wpengine.com	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:31.833472967 CEST	192.168.2.11	1.1.1.1	0xbee1	Standard query (0)	fortissite.wpengine.com	65	IN (0x0001)	false
May 6, 2024 18:42:32.450973988 CEST	192.168.2.11	1.1.1.1	0x8a6b	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:32.451505899 CEST	192.168.2.11	1.1.1.1	0x8c30	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
May 6, 2024 18:42:32.484530926 CEST	192.168.2.11	1.1.1.1	0xeb96	Standard query (0)	fortis-site.com	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:32.484703064 CEST	192.168.2.11	1.1.1.1	0x796	Standard query (0)	fortis-site.com	65	IN (0x0001)	false
May 6, 2024 18:42:33.002726078 CEST	192.168.2.11	1.1.1.1	0x4641	Standard query (0)	fortissite.wpengine.com	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:33.002901077 CEST	192.168.2.11	1.1.1.1	0x9698	Standard query (0)	fortissite.wpengine.com	65	IN (0x0001)	false
May 6, 2024 18:42:33.782980919 CEST	192.168.2.11	1.1.1.1	0x5440	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:33.783145905 CEST	192.168.2.11	1.1.1.1	0xb3fb	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 6, 2024 18:42:35.764563084 CEST	192.168.2.11	1.1.1.1	0x3a2f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:35.764811039 CEST	192.168.2.11	1.1.1.1	0xa5bc	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 6, 2024 18:41:50.283601046 CEST	1.1.1.1	192.168.2.11	0x58e1	No error (0)	rmshg.amplified.training	rmshg.talentlms.com		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:41:50.432122946 CEST	1.1.1.1	192.168.2.11	0x8214	No error (0)	rmshg.amplified.training	rmshg.talentlms.com		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:41:50.432122946 CEST	1.1.1.1	192.168.2.11	0x8214	No error (0)	rmshg.talentlms.com		3.217.205.239	A (IP address)	IN (0x0001)	false
May 6, 2024 18:41:50.432122946 CEST	1.1.1.1	192.168.2.11	0x8214	No error (0)	rmshg.talentlms.com		34.236.22.110	A (IP address)	IN (0x0001)	false
May 6, 2024 18:41:51.221848011 CEST	1.1.1.1	192.168.2.11	0xf682	No error (0)	d3j0t7vrtr92dk.cloudfront.net		18.173.145.206	A (IP address)	IN (0x0001)	false
May 6, 2024 18:41:51.221848011 CEST	1.1.1.1	192.168.2.11	0xf682	No error (0)	d3j0t7vrtr92dk.cloudfront.net		18.173.145.42	A (IP address)	IN (0x0001)	false
May 6, 2024 18:41:51.221848011 CEST	1.1.1.1	192.168.2.11	0xf682	No error (0)	d3j0t7vrtr92dk.cloudfront.net		18.173.145.19	A (IP address)	IN (0x0001)	false
May 6, 2024 18:41:51.221848011 CEST	1.1.1.1	192.168.2.11	0xf682	No error (0)	d3j0t7vrtr92dk.cloudfront.net		18.173.145.84	A (IP address)	IN (0x0001)	false
May 6, 2024 18:41:52.006414890 CEST	1.1.1.1	192.168.2.11	0xcbe6	No error (0)	d3j0t7vrtr92dk.cloudfront.net		18.173.145.84	A (IP address)	IN (0x0001)	false
May 6, 2024 18:41:52.006414890 CEST	1.1.1.1	192.168.2.11	0xcbe6	No error (0)	d3j0t7vrtr92dk.cloudfront.net		18.173.145.206	A (IP address)	IN (0x0001)	false
May 6, 2024 18:41:52.006414890 CEST	1.1.1.1	192.168.2.11	0xcbe6	No error (0)	d3j0t7vrtr92dk.cloudfront.net		18.173.145.42	A (IP address)	IN (0x0001)	false
May 6, 2024 18:41:52.006414890 CEST	1.1.1.1	192.168.2.11	0xcbe6	No error (0)	d3j0t7vrtr92dk.cloudfront.net		18.173.145.19	A (IP address)	IN (0x0001)	false
May 6, 2024 18:41:53.405886889 CEST	1.1.1.1	192.168.2.11	0xd89b	No error (0)	www.google.com		142.250.217.196	A (IP address)	IN (0x0001)	false
May 6, 2024 18:41:53.406608105 CEST	1.1.1.1	192.168.2.11	0xce50	No error (0)	www.google.com			65	IN (0x0001)	false
May 6, 2024 18:42:09.019138098 CEST	1.1.1.1	192.168.2.11	0x2fe1	No error (0)	rmshg.amplified.training	rmshg.talentlms.com		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:09.019227028 CEST	1.1.1.1	192.168.2.11	0x1a53	No error (0)	rmshg.amplified.training	rmshg.talentlms.com		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:09.019227028 CEST	1.1.1.1	192.168.2.11	0x1a53	No error (0)	rmshg.talentlms.com		3.217.205.239	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:09.019227028 CEST	1.1.1.1	192.168.2.11	0x1a53	No error (0)	rmshg.talentlms.com		34.236.22.110	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:15.885159016 CEST	1.1.1.1	192.168.2.11	0x4f5f	No error (0)	www.rmshg.com	stratospherewebsitebuilderui.azurewebsites.net		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:15.885159016 CEST	1.1.1.1	192.168.2.11	0x4f5f	No error (0)	stratospherewebsitebuilderui.azurewebsites.net	waws-prod-dm1-087.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:15.885159016 CEST	1.1.1.1	192.168.2.11	0x4f5f	No error (0)	waws-prod-dm1-087.sip.azurewebsites.windows.net	waws-prod-dm1-087.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:15.885478020 CEST	1.1.1.1	192.168.2.11	0xe9a5	No error (0)	www.rmshg.com	stratospherewebsitebuilderui.azurewebsites.net		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:15.885478020 CEST	1.1.1.1	192.168.2.11	0xe9a5	No error (0)	stratospherewebsitebuilderui.azurewebsites.net	waws-prod-dm1-087.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:15.885478020 CEST	1.1.1.1	192.168.2.11	0xe9a5	No error (0)	waws-prod-dm1-087.sip.azurewebsites.windows.net	waws-prod-dm1-087.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:15.885555029 CEST	1.1.1.1	192.168.2.11	0x823c	No error (0)	www.rmshg.com	stratospherewebsitebuilderui.azurewebsites.net		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:15.885555029 CEST	1.1.1.1	192.168.2.11	0x823c	No error (0)	stratospherewebsitebuilderui.azurewebsites.net	waws-prod-dm1-087.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:15.885555029 CEST	1.1.1.1	192.168.2.11	0x823c	No error (0)	waws-prod-dm1-087.sip.azurewebsites.windows.net	waws-prod-dm1-087.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:15.953172922 CEST	1.1.1.1	192.168.2.11	0x68cc	No error (0)	www.rmshg.com	stratospherewebsitebuilderui.azurewebsites.net		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:15.953172922 CEST	1.1.1.1	192.168.2.11	0x68cc	No error (0)	stratospherewebsitebuilderui.azurewebsites.net	waws-prod-dm1-087.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:15.953172922 CEST	1.1.1.1	192.168.2.11	0x68cc	No error (0)	waws-prod-dm1-087.sip.azurewebsites.windows.net	waws-prod-dm1-087.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:17.228939056 CEST	1.1.1.1	192.168.2.11	0x5f8	No error (0)	cdn.stratospherewebsites.com	cdnstratospherebuilder.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:17.230273008 CEST	1.1.1.1	192.168.2.11	0xed9a	No error (0)	kit.fontawesome.com	kit.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:17.230782032 CEST	1.1.1.1	192.168.2.11	0x1d70	No error (0)	kit.fontawesome.com	kit.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:17.230794907 CEST	1.1.1.1	192.168.2.11	0x355d	No error (0)	cdn.stratospherewebsites.com	cdnstratospherebuilder.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:17.230794907 CEST	1.1.1.1	192.168.2.11	0x355d	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:17.230794907 CEST	1.1.1.1	192.168.2.11	0x355d	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:17.230794907 CEST	1.1.1.1	192.168.2.11	0x355d	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:17.365482092 CEST	1.1.1.1	192.168.2.11	0xbc83	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:17.365482092 CEST	1.1.1.1	192.168.2.11	0xbc83	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:17.365482092 CEST	1.1.1.1	192.168.2.11	0xbc83	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:17.365482092 CEST	1.1.1.1	192.168.2.11	0xbc83	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:17.365482092 CEST	1.1.1.1	192.168.2.11	0xbc83	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:17.365894079 CEST	1.1.1.1	192.168.2.11	0x4349	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:17.366396904 CEST	1.1.1.1	192.168.2.11	0x4b02	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:17.366396904 CEST	1.1.1.1	192.168.2.11	0x4b02	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:17.367141008 CEST	1.1.1.1	192.168.2.11	0x5814	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
May 6, 2024 18:42:17.370388031 CEST	1.1.1.1	192.168.2.11	0x9c7b	No error (0)	googletagmanager.com		142.250.189.136	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:17.483366013 CEST	1.1.1.1	192.168.2.11	0x29f8	No error (0)	cdn.userway.org	1667503734.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:17.483366013 CEST	1.1.1.1	192.168.2.11	0x29f8	No error (0)	1667503734.rsc.cdn77.org		89.187.173.23	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:17.483366013 CEST	1.1.1.1	192.168.2.11	0x29f8	No error (0)	1667503734.rsc.cdn77.org		89.187.173.11	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:17.484133959 CEST	1.1.1.1	192.168.2.11	0xe1a7	No error (0)	cdn.userway.org	1667503734.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:18.424467087 CEST	1.1.1.1	192.168.2.11	0x9367	No error (0)	cdn.stratospherewebsites.com	cdnstratospherebuilder.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:18.440733910 CEST	1.1.1.1	192.168.2.11	0x2d2c	No error (0)	cdn.stratospherewebsites.com	cdnstratospherebuilder.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:18.440733910 CEST	1.1.1.1	192.168.2.11	0x2d2c	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:18.440733910 CEST	1.1.1.1	192.168.2.11	0x2d2c	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:18.440733910 CEST	1.1.1.1	192.168.2.11	0x2d2c	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:21.706315994 CEST	1.1.1.1	192.168.2.11	0xafe6	No error (0)	ka-p.fontawesome.com	ka-p.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:21.706342936 CEST	1.1.1.1	192.168.2.11	0xb322	No error (0)	ka-p.fontawesome.com	ka-p.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:24.060134888 CEST	1.1.1.1	192.168.2.11	0x107e	No error (0)	api.userway.org		44.234.218.238	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:24.060134888 CEST	1.1.1.1	192.168.2.11	0x107e	No error (0)	api.userway.org		44.228.194.124	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:24.060134888 CEST	1.1.1.1	192.168.2.11	0x107e	No error (0)	api.userway.org		54.189.224.158	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:24.060134888 CEST	1.1.1.1	192.168.2.11	0x107e	No error (0)	api.userway.org		52.32.120.155	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:24.060134888 CEST	1.1.1.1	192.168.2.11	0x107e	No error (0)	api.userway.org		54.214.56.197	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:24.060134888 CEST	1.1.1.1	192.168.2.11	0x107e	No error (0)	api.userway.org		52.43.148.183	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:24.060134888 CEST	1.1.1.1	192.168.2.11	0x107e	No error (0)	api.userway.org		52.43.90.101	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:24.060134888 CEST	1.1.1.1	192.168.2.11	0x107e	No error (0)	api.userway.org		44.227.127.206	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:25.143291950 CEST	1.1.1.1	192.168.2.11	0xf661	No error (0)	api.userway.org		34.208.13.132	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:25.143291950 CEST	1.1.1.1	192.168.2.11	0xf661	No error (0)	api.userway.org		35.162.81.38	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:25.143291950 CEST	1.1.1.1	192.168.2.11	0xf661	No error (0)	api.userway.org		44.227.127.206	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:25.143291950 CEST	1.1.1.1	192.168.2.11	0xf661	No error (0)	api.userway.org		44.228.194.124	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:25.143291950 CEST	1.1.1.1	192.168.2.11	0xf661	No error (0)	api.userway.org		54.189.224.158	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:25.143291950 CEST	1.1.1.1	192.168.2.11	0xf661	No error (0)	api.userway.org		52.32.120.155	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:25.143291950 CEST	1.1.1.1	192.168.2.11	0xf661	No error (0)	api.userway.org		52.43.148.183	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:25.143291950 CEST	1.1.1.1	192.168.2.11	0xf661	No error (0)	api.userway.org		52.43.90.101	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:25.500302076 CEST	1.1.1.1	192.168.2.11	0x5f5a	No error (0)	cdn.userway.org	1667503734.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:25.501341105 CEST	1.1.1.1	192.168.2.11	0x1865	No error (0)	cdn.userway.org	1667503734.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:25.501341105 CEST	1.1.1.1	192.168.2.11	0x1865	No error (0)	1667503734.rsc.cdn77.org		89.187.173.14	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:25.501341105 CEST	1.1.1.1	192.168.2.11	0x1865	No error (0)	1667503734.rsc.cdn77.org		89.187.173.22	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:25.826844931 CEST	1.1.1.1	192.168.2.11	0x56e1	No error (0)	www.rmshg.com	stratospherewebsitebuilderui.azurewebsites.net		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:25.826844931 CEST	1.1.1.1	192.168.2.11	0x56e1	No error (0)	stratospherewebsitebuilderui.azurewebsites.net	waws-prod-dm1-087.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:25.826844931 CEST	1.1.1.1	192.168.2.11	0x56e1	No error (0)	waws-prod-dm1-087.sip.azurewebsites.windows.net	waws-prod-dm1-087.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:25.936707020 CEST	1.1.1.1	192.168.2.11	0x40c5	No error (0)	www.rmshg.com	stratospherewebsitebuilderui.azurewebsites.net		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:25.936707020 CEST	1.1.1.1	192.168.2.11	0x40c5	No error (0)	stratospherewebsitebuilderui.azurewebsites.net	waws-prod-dm1-087.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:25.936707020 CEST	1.1.1.1	192.168.2.11	0x40c5	No error (0)	waws-prod-dm1-087.sip.azurewebsites.windows.net	waws-prod-dm1-087.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:26.722976923 CEST	1.1.1.1	192.168.2.11	0xfd5f	No error (0)	cdn77.api.userway.org	1784939676.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:26.723397017 CEST	1.1.1.1	192.168.2.11	0x74d3	No error (0)	cdn77.api.userway.org	1784939676.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:26.723397017 CEST	1.1.1.1	192.168.2.11	0x74d3	No error (0)	1784939676.rsc.cdn77.org		89.187.173.22	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:26.723397017 CEST	1.1.1.1	192.168.2.11	0x74d3	No error (0)	1784939676.rsc.cdn77.org		89.187.173.13	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:27.262852907 CEST	1.1.1.1	192.168.2.11	0x5ba	No error (0)	fortis-site.com			65	IN (0x0001)	false
May 6, 2024 18:42:27.262918949 CEST	1.1.1.1	192.168.2.11	0x4b67	No error (0)	fortis-site.com		104.21.49.115	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:27.262918949 CEST	1.1.1.1	192.168.2.11	0x4b67	No error (0)	fortis-site.com		172.67.162.118	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:28.012428045 CEST	1.1.1.1	192.168.2.11	0x8dc	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:28.012428045 CEST	1.1.1.1	192.168.2.11	0x8dc	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:28.013169050 CEST	1.1.1.1	192.168.2.11	0x7847	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
May 6, 2024 18:42:28.103554964 CEST	1.1.1.1	192.168.2.11	0xd62c	No error (0)	cdn77.api.userway.org	1784939676.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:28.103840113 CEST	1.1.1.1	192.168.2.11	0xc701	No error (0)	cdn77.api.userway.org	1784939676.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
May 6, 2024 18:42:28.103840113 CEST	1.1.1.1	192.168.2.11	0xc701	No error (0)	1784939676.rsc.cdn77.org		89.187.173.23	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:28.103840113 CEST	1.1.1.1	192.168.2.11	0xc701	No error (0)	1784939676.rsc.cdn77.org		89.187.173.14	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:31.945240974 CEST	1.1.1.1	192.168.2.11	0x9af4	No error (0)	fortissite.wpengine.com		35.188.55.83	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:32.561139107 CEST	1.1.1.1	192.168.2.11	0x8a6b	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:32.561139107 CEST	1.1.1.1	192.168.2.11	0x8a6b	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:32.561661005 CEST	1.1.1.1	192.168.2.11	0x8c30	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
May 6, 2024 18:42:32.607296944 CEST	1.1.1.1	192.168.2.11	0xeb96	No error (0)	fortis-site.com		104.21.49.115	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:32.607296944 CEST	1.1.1.1	192.168.2.11	0xeb96	No error (0)	fortis-site.com		172.67.162.118	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:32.633994102 CEST	1.1.1.1	192.168.2.11	0x796	No error (0)	fortis-site.com			65	IN (0x0001)	false
May 6, 2024 18:42:33.115468979 CEST	1.1.1.1	192.168.2.11	0x4641	No error (0)	fortissite.wpengine.com		35.188.55.83	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:33.892843008 CEST	1.1.1.1	192.168.2.11	0x5440	No error (0)	www.google.com		142.250.64.164	A (IP address)	IN (0x0001)	false
May 6, 2024 18:42:33.893846989 CEST	1.1.1.1	192.168.2.11	0xb3fb	No error (0)	www.google.com			65	IN (0x0001)	false
May 6, 2024 18:42:35.874902010 CEST	1.1.1.1	192.168.2.11	0xa5bc	No error (0)	www.google.com			65	IN (0x0001)	false
May 6, 2024 18:42:35.874927044 CEST	1.1.1.1	192.168.2.11	0x3a2f	No error (0)	www.google.com		192.178.50.68	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.11	49711	3.217.205.239	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:41:50 UTC	667	OUT	GET / HTTP/1.1 Host: rmshg.amplified.training Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:41:51 UTC	737	IN	HTTP/1.1 200 OK date: Mon, 06 May 2024 16:41:50 GMT content-type: text/html; charset=utf-8 transfer-encoding: chunked server: Apache expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache set-cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; path=/; secure; HttpOnly set-cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; expires=Mon, 06-May-2024 19:41:50 GMT; Max-Age=10800; path=/; secure; HttpOnly; SameSite=None set-cookie: login_token=153a9a8f304880470316f98fd745653f; path=/; secure; HttpOnly; SameSite=None x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000; includeSubDomains; preload; connection: close
2024-05-06 16:41:51 UTC	8291	IN	Data Raw: 32 30 35 42 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 77 65 62 73 69 74 65 22 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 72 6d 73 68 67 22 2f 3e 0a 09 09 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 52 4d 53 48 47 20 26 61 6d 70 3b 20 46 72 61 6e 63 68 69 73 65 20 53 65 6c 65 63 74 20 54 72 61 69 6e 69 6e 67 20 50 6f 72 74 61 6c 22 2f 3e 0a 09 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 Data Ascii: 205B<!DOCTYPE html><html lang="en"><head><meta property="og:type" content="website"/><meta property="og:site_name" content="rmshg"/><meta property="og:title" content="RMSHG & Franchise Select Training Portal"/><meta property="og:image"
2024-05-06 16:41:51 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 64 61 74 61 2d 6c 6f 61 64 69 6e 67 2d 74 65 78 74 3d 22 50 72 6f 63 65 73 73 69 6e 67 2e 2e 2e 22 20 74 61 62 69 6e 64 65 78 3d 27 27 2f 3e 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 70 61 63 65 72 22 3e 3c 2f 64 69 76 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 70 61 63 65 72 20 73 70 61 63 65 72 2d 2d 78 32 20 74 65 78 74 2d 63 65 6e 74 65 72 22 3e 0a 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 2d 63 6f 6c 6f 72 22 20 68 72 65 66 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 76 6f 69 64 28 30 29 22 20 64 61 74 61 2d 73 65 6c 65 63 74 2d 73 74 61 74 65 3d 22 61 75 74 68 5f 66 6f 72 6d 5f 76 69 65 77 3a Data Ascii: 3FC0utocomplete="off" data-loading-text="Processing..." tabindex=''/></div></div><div class="spacer"></div><div class="spacer spacer--x2 text-center"><a class="link-color" href="javascript:void(0)" data-select-state="auth_form_view:
2024-05-06 16:41:51 UTC	1585	IN	Data Raw: 36 32 41 0d 0a 61 73 73 3d 22 6d 6f 64 61 6c 20 66 61 64 65 20 68 69 64 65 22 20 69 64 3d 22 74 6c 2d 63 6f 6e 66 69 72 6d 22 20 73 74 79 6c 65 3d 22 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 3e 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 2d 68 65 61 64 65 72 22 3e 0a 09 09 3c 61 20 68 72 65 66 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 76 6f 69 64 28 30 29 22 20 63 6c 61 73 73 3d 22 63 6c 6f 73 65 22 20 64 61 74 61 2d 64 69 73 6d 69 73 73 3d 22 6d 6f 64 61 6c 22 20 3e 26 74 69 6d 65 73 3b 3c 2f 61 3e 0a 09 09 3c 68 33 20 63 6c 61 73 73 3d 22 74 6c 2d 6d 6f 64 61 6c 2d 68 65 61 64 65 72 22 3e 4e 6f 74 69 63 65 3c 2f 68 33 3e 0a 09 3c 2f 64 69 76 3e 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 Data Ascii: 62Aass="modal fade hide" id="tl-confirm" style="outline: none;" tabindex="-1"><div class="modal-header"><a href="javascript:void(0)" class="close" data-dismiss="modal" >×</a><h3 class="tl-modal-header">Notice</h3></div><div class="moda
2024-05-06 16:41:51 UTC	7424	IN	Data Raw: 31 43 46 33 0d 0a 74 6e 22 20 64 61 74 61 2d 64 69 73 6d 69 73 73 3d 22 6d 6f 64 61 6c 22 3e 43 61 6e 63 65 6c 3c 2f 61 3e 0a 09 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 0a 0a 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 24 28 27 62 6f 64 79 27 29 2e 6f 6e 28 27 74 6f 75 63 68 73 74 61 72 74 2e 64 72 6f 70 64 6f 77 6e 27 2c 20 27 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 20 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 3b 20 7d 29 3b 09 2f 2f 20 46 69 78 20 66 6f 72 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 69 74 74 65 72 2f 62 6f 6f 74 73 74 72 61 70 2f 69 73 73 75 65 73 2f 32 39 37 35 23 69 73 73 75 65 63 6f 6d 6d Data Ascii: 1CF3tn" data-dismiss="modal">Cancel</a></div></div><script type="text/javascript">$('body').on('touchstart.dropdown', '.dropdown-menu', function(e){ e.stopPropagation(); });// Fix for https://github.com/twitter/bootstrap/issues/2975#issuecomm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.11	49710	3.217.205.239	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:41:51 UTC	689	OUT	GET /pages/themes/default/css/animate.min.css?v=558 HTTP/1.1 Host: rmshg.amplified.training Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://rmshg.amplified.training/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; login_token=153a9a8f304880470316f98fd745653f
2024-05-06 16:41:51 UTC	489	IN	HTTP/1.1 200 OK date: Mon, 06 May 2024 16:41:51 GMT content-type: text/css content-length: 41626 server: Apache x-content-type-options: nosniff x-xss-protection: 1; mode=block last-modified: Wed, 23 Mar 2022 16:57:16 GMT etag: "a29a-5dae59f301760" accept-ranges: bytes cache-control: max-age=31536000, public expires: Tue, 06 May 2025 16:41:51 GMT vary: Accept-Encoding,User-Agent strict-transport-security: max-age=31536000; includeSubDomains; preload; connection: close
2024-05-06 16:41:51 UTC	8553	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 61 6e 69 6d 61 74 65 64 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 31 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 31 73 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 62 6f 74 68 3b 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 62 6f 74 68 7d 2e 61 6e 69 6d 61 74 65 64 2e 68 69 6e 67 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 32 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 32 73 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 7b 30 25 2c 32 30 25 2c 35 30 25 2c 38 30 25 2c 31 30 30 25 7b 2d 77 65 62 Data Ascii: @charset "UTF-8";.animated{-webkit-animation-duration:1s;animation-duration:1s;-webkit-animation-fill-mode:both;animation-fill-mode:both}.animated.hinge{-webkit-animation-duration:2s;animation-duration:2s}@-webkit-keyframes bounce{0%,20%,50%,80%,100%{-web
2024-05-06 16:41:51 UTC	16320	IN	Data Raw: 3a 74 72 61 6e 73 6c 61 74 65 58 28 31 30 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 31 30 70 78 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 7d 7d 2e 62 6f 75 6e 63 65 49 6e 52 69 67 68 74 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 62 6f 75 6e 63 65 49 6e 52 69 67 68 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 62 6f 75 6e 63 65 49 6e 52 69 67 68 74 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 49 6e 55 70 7b 30 25 7b 6f 70 61 63 69 74 Data Ascii: :translateX(10px);transform:translateX(10px)}100%{-webkit-transform:translateX(0);-ms-transform:translateX(0);transform:translateX(0)}}.bounceInRight{-webkit-animation-name:bounceInRight;animation-name:bounceInRight}@-webkit-keyframes bounceInUp{0%{opacit
2024-05-06 16:41:51 UTC	1578	IN	Data Raw: 70 49 6e 58 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 6c 69 70 49 6e 59 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 70 65 72 73 70 65 63 74 69 76 65 28 34 30 30 70 78 29 72 6f 74 61 74 65 59 28 39 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 70 65 72 73 70 65 63 74 69 76 65 28 34 30 30 70 78 29 72 6f 74 61 74 65 59 28 39 30 64 65 67 29 3b 6f 70 61 63 69 74 79 3a 30 7d 34 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 70 65 72 73 70 65 63 74 69 76 65 28 34 30 30 70 78 29 72 6f 74 61 74 65 59 28 2d 31 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 70 65 72 73 70 65 63 74 69 76 65 28 34 30 30 70 78 29 72 6f 74 61 74 65 59 28 2d 31 30 64 65 67 29 7d 37 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e Data Ascii: pInX}@-webkit-keyframes flipInY{0%{-webkit-transform:perspective(400px)rotateY(90deg);transform:perspective(400px)rotateY(90deg);opacity:0}40%{-webkit-transform:perspective(400px)rotateY(-10deg);transform:perspective(400px)rotateY(-10deg)}70%{-webkit-tran
2024-05-06 16:41:51 UTC	8949	IN	Data Raw: 72 6f 74 61 74 65 58 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 70 65 72 73 70 65 63 74 69 76 65 28 34 30 30 70 78 29 72 6f 74 61 74 65 58 28 30 29 3b 6f 70 61 63 69 74 79 3a 31 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 70 65 72 73 70 65 63 74 69 76 65 28 34 30 30 70 78 29 72 6f 74 61 74 65 58 28 39 30 64 65 67 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 70 65 72 73 70 65 63 74 69 76 65 28 34 30 30 70 78 29 72 6f 74 61 74 65 58 28 39 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 70 65 72 73 70 65 63 74 69 76 65 28 34 30 30 70 78 29 72 6f 74 61 74 65 58 28 39 30 64 65 67 29 3b 6f 70 61 63 69 74 79 3a 30 7d 7d 2e 66 6c 69 70 4f 75 74 58 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 6c 69 70 4f Data Ascii: rotateX(0);transform:perspective(400px)rotateX(0);opacity:1}100%{-webkit-transform:perspective(400px)rotateX(90deg);-ms-transform:perspective(400px)rotateX(90deg);transform:perspective(400px)rotateX(90deg);opacity:0}}.flipOutX{-webkit-animation-name:flipO
2024-05-06 16:41:51 UTC	6226	IN	Data Raw: 3b 6f 70 61 63 69 74 79 3a 31 7d 30 25 2c 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 72 69 67 68 74 20 62 6f 74 74 6f 6d 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 72 69 67 68 74 20 62 6f 74 74 6f 6d 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 3b 6f 70 61 63 69 74 79 3a 30 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 72 6f 74 61 74 65 4f 75 74 55 70 52 69 67 68 74 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 Data Ascii: ;opacity:1}0%,100%{-webkit-transform-origin:right bottom;transform-origin:right bottom}100%{-webkit-transform:rotate(90deg);transform:rotate(90deg);opacity:0}}@keyframes rotateOutUpRight{0%{-webkit-transform:rotate(0);-ms-transform:rotate(0);transform:rot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.11	49714	3.217.205.239	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:41:51 UTC	689	OUT	GET /index/css/fmt:1714566301,tn:51,tv:5,ct:1,rtl:0 HTTP/1.1 Host: rmshg.amplified.training Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://rmshg.amplified.training/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; login_token=153a9a8f304880470316f98fd745653f
2024-05-06 16:41:51 UTC	601	IN	HTTP/1.1 200 OK date: Mon, 06 May 2024 16:41:51 GMT content-type: text/css;charset=UTF-8 transfer-encoding: chunked server: Apache x-content-type-options: nosniff x-xss-protection: 1; mode=block expires: Mon, 20 May 2024 16:41:51 GMT cache-control: no-store, no-cache, must-revalidate, max-age=0 pragma: no-cache set-cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; expires=Mon, 06-May-2024 19:41:51 GMT; Max-Age=10800; path=/; secure; HttpOnly; SameSite=None vary: Accept-Encoding,User-Agent strict-transport-security: max-age=31536000; includeSubDomains; preload; connection: close
2024-05-06 16:41:51 UTC	8423	IN	Data Raw: 32 30 44 46 0d 0a 61 72 74 69 63 6c 65 2c 20 61 73 69 64 65 2c 20 64 65 74 61 69 6c 73 2c 20 66 69 67 63 61 70 74 69 6f 6e 2c 20 66 69 67 75 72 65 2c 20 66 6f 6f 74 65 72 2c 20 68 65 61 64 65 72 2c 20 68 67 72 6f 75 70 2c 20 6e 61 76 2c 20 73 65 63 74 69 6f 6e 20 7b 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 20 7d 0a 61 75 64 69 6f 2c 20 63 61 6e 76 61 73 2c 20 76 69 64 65 6f 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 2a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 0a 20 20 2a 7a 6f 6f 6d 3a 31 3b 0a 7d 0a 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 20 7b 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 7d 0a 68 74 6d 6c 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 0a 20 20 2d 77 Data Ascii: 20DFarticle, aside, details, figcaption, figure, footer, header, hgroup, nav, section { display:block; }audio, canvas, video { display:inline-block; display:inline; zoom:1;}audio:not([controls]) { display:none; }html { font-size:100%; -w
2024-05-06 16:41:51 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 7d 0a 2e 63 6f 6e 74 61 69 6e 65 72 3a 62 65 66 6f 72 65 2c 20 2e 63 6f 6e 74 61 69 6e 65 72 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 22 22 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 0a 7d 0a 2e 63 6f 6e 74 61 69 6e 65 72 3a 61 66 74 65 72 20 7b 20 63 6c 65 61 72 3a 62 6f 74 68 3b 20 7d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 38 30 70 78 29 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 31 30 70 78 20 31 30 70 78 3b 0a 7d 0a 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 30 70 78 3b 0a 20 20 Data Ascii: 3FB8}.container:before, .container:after { display:table; content:""; line-height:0;}.container:after { clear:both; }@media screen and (max-width: 480px) { padding:10px 10px;}.container-fluid { padding-right:10px; padding-left:10px;
2024-05-06 16:41:51 UTC	1585	IN	Data Raw: 36 32 41 0d 0a 63 74 69 6f 6e 73 3a 61 66 74 65 72 20 7b 20 63 6c 65 61 72 3a 62 6f 74 68 3b 20 7d 0a 2e 68 65 6c 70 2d 62 6c 6f 63 6b 2c 20 2e 68 65 6c 70 2d 69 6e 6c 69 6e 65 20 7b 20 63 6f 6c 6f 72 3a 23 32 36 32 36 32 36 3b 20 7d 0a 2e 68 65 6c 70 2d 62 6c 6f 63 6b 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 39 70 78 3b 0a 7d 0a 2e 68 65 6c 70 2d 69 6e 6c 69 6e 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 2a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 0a 20 20 2a 7a 6f 6f 6d 3a 31 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 35 70 78 3b 0a 7d 0a 2e 69 6e 70 75 74 Data Ascii: 62Actions:after { clear:both; }.help-block, .help-inline { color:#262626; }.help-block { display:block; margin-bottom:9px;}.help-inline { display:inline-block; display:inline; zoom:1; vertical-align:middle; padding-left:5px;}.input
2024-05-06 16:41:51 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 62 74 6e 2d 67 72 6f 75 70 20 3e 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2c 20 2e 69 6e 70 75 74 2d 70 72 65 70 65 6e 64 20 2e 61 64 64 2d 6f 6e 2c 20 2e 69 6e 70 75 74 2d 70 72 65 70 65 6e 64 20 2e 62 74 6e 2c 20 2e 69 6e 70 75 74 2d 70 72 65 70 65 6e 64 20 2e 62 74 6e 2d 67 72 6f 75 70 20 3e 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 20 7b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 0a 20 20 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 0a 7d 0a 2e 69 6e 70 75 74 2d 61 70 70 65 6e 64 20 2e 61 63 74 69 76 65 2c 20 2e 69 6e 70 75 74 2d 70 72 65 Data Ascii: 3FC0btn-group > .dropdown-toggle, .input-prepend .add-on, .input-prepend .btn, .input-prepend .btn-group > .dropdown-toggle { vertical-align:top; -webkit-border-radius:0; -moz-border-radius:0; border-radius:0;}.input-append .active, .input-pre
2024-05-06 16:41:51 UTC	10527	IN	Data Raw: 32 39 31 37 0d 0a 20 69 2c 20 2e 74 6c 2d 72 6f 6c 65 2d 63 68 61 6e 67 65 2d 62 74 6e 20 61 2e 61 63 74 69 76 65 3a 68 6f 76 65 72 20 69 2c 20 2e 74 6c 2d 72 6f 6c 65 2d 63 68 61 6e 67 65 2d 62 74 6e 20 61 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 20 69 2c 20 2e 74 6c 2d 72 6f 6c 65 2d 63 68 61 6e 67 65 2d 62 74 6e 20 61 2e 61 63 74 69 76 65 3a 76 69 73 69 74 65 64 20 69 20 7b 20 63 6f 6c 6f 72 3a 23 32 31 36 65 62 39 3b 20 7d 0a 2e 77 65 6c 6c 20 7b 0a 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 31 39 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 35 66 35 66 35 3b 0a 20 20 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 Data Ascii: 2917 i, .tl-role-change-btn a.active:hover i, .tl-role-change-btn a.active:focus i, .tl-role-change-btn a.active:visited i { color:#216eb9; }.well { min-height:20px; padding:19px; margin-bottom:20px; background-color:#f5f5f5; border:1px solid
2024-05-06 16:41:51 UTC	5815	IN	Data Raw: 31 36 44 39 0d 0a 20 20 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 27 23 30 30 35 62 63 30 64 65 27 2c 20 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 27 23 30 30 32 66 39 36 62 34 27 2c 20 47 72 61 64 69 65 6e 74 54 79 70 65 3d 30 29 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 66 39 36 62 34 20 23 32 66 39 36 62 34 20 23 31 66 36 33 37 37 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 29 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 29 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 32 35 29 3b 0a 20 20 2a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 66 Data Ascii: 16D9 filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#005bc0de', endColorstr='#002f96b4', GradientType=0); border-color:#2f96b4 #2f96b4 #1f6377; border-color:rgba(0,0,0,0.1) rgba(0,0,0,0.1) rgba(0,0,0,0.25); *background-color:#2f
2024-05-06 16:41:51 UTC	42	IN	Data Raw: 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 34 70 78 3b 0a 7d 0a 2e 62 74 6e 2d 67 72 6f 75 70 20 3e 20 2e 62 74 6e 2d 6c 61 0d 0a Data Ascii: dding-bottom:4px;}.btn-group > .btn-la
2024-05-06 16:41:51 UTC	10487	IN	Data Raw: 32 38 45 46 0d 0a 72 67 65 20 2b 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 32 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 32 70 78 3b 0a 20 20 2a 70 61 64 64 69 6e 67 2d 74 6f 70 3a 37 70 78 3b 0a 20 20 2a 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 37 70 78 3b 0a 7d 0a 2e 62 74 6e 2d 67 72 6f 75 70 2e 6f 70 65 6e 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 32 70 78 20 34 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 35 29 2c 20 30 20 31 70 78 20 32 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e Data Ascii: 28EFrge + .dropdown-toggle { padding-left:12px; padding-right:12px; padding-top:7px; padding-bottom:7px;}.btn-group.open .dropdown-toggle { background-image:none; -webkit-box-shadow:inset 0 2px 4px rgba(0,0,0,.15), 0 1px 2px rgba(0,0,0,.
2024-05-06 16:41:51 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 0a 7d 0a 2e 6e 61 76 20 3e 20 2e 64 69 73 61 62 6c 65 64 20 3e 20 61 20 7b 20 63 6f 6c 6f 72 3a 23 39 39 39 39 39 39 3b 20 7d 0a 2e 6e 61 76 20 3e 20 2e 64 69 73 61 62 6c 65 64 20 3e 20 61 3a 68 6f 76 65 72 2c 20 2e 6e 61 76 20 3e 20 2e 64 69 73 61 62 6c 65 64 20 3e 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 3b 0a 7d 0a 2e 6e 61 76 62 61 72 20 7b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 38 Data Ascii: 3FB8order-left-color:#ffffff;}.nav > .disabled > a { color:#999999; }.nav > .disabled > a:hover, .nav > .disabled > a:focus { text-decoration:none; background-color:transparent; cursor:default;}.navbar { overflow:visible; margin-bottom:18
2024-05-06 16:41:52 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 74 69 6f 6e 20 75 6c 20 3e 20 6c 69 20 3e 20 61 3a 66 6f 63 75 73 2c 20 2e 70 61 67 69 6e 61 74 69 6f 6e 20 75 6c 20 3e 20 2e 61 63 74 69 76 65 20 3e 20 61 2c 20 2e 70 61 67 69 6e 61 74 69 6f 6e 20 75 6c 20 3e 20 2e 61 63 74 69 76 65 20 3e 20 73 70 61 6e 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 35 66 35 66 35 3b 20 7d 0a 2e 70 61 67 69 6e 61 74 69 6f 6e 20 75 6c 20 3e 20 2e 61 63 74 69 76 65 20 3e 20 61 2c 20 2e 70 61 67 69 6e 61 74 69 6f 6e 20 75 6c 20 3e 20 2e 61 63 74 69 76 65 20 3e 20 73 70 61 6e 20 7b 0a 20 20 63 6f 6c 6f 72 3a 23 39 39 39 39 39 39 3b 0a 20 20 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 3b 0a 7d 0a 2e 70 61 67 69 6e 61 74 69 6f 6e 20 75 6c 20 3e 20 2e 64 69 73 61 62 6c 65 64 20 3e 20 73 70 61 Data Ascii: 3FB8tion ul > li > a:focus, .pagination ul > .active > a, .pagination ul > .active > span { background-color:#f5f5f5; }.pagination ul > .active > a, .pagination ul > .active > span { color:#999999; cursor:default;}.pagination ul > .disabled > spa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.11	49715	3.217.205.239	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:41:51 UTC	688	OUT	GET /pages/themes/default/css/toastr.min.css?v=558 HTTP/1.1 Host: rmshg.amplified.training Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://rmshg.amplified.training/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; login_token=153a9a8f304880470316f98fd745653f
2024-05-06 16:41:51 UTC	488	IN	HTTP/1.1 200 OK date: Mon, 06 May 2024 16:41:51 GMT content-type: text/css content-length: 6741 server: Apache x-content-type-options: nosniff x-xss-protection: 1; mode=block last-modified: Wed, 23 Mar 2022 16:57:16 GMT etag: "1a55-5dae59f31dc80" accept-ranges: bytes cache-control: max-age=31536000, public expires: Tue, 06 May 2025 16:41:51 GMT vary: Accept-Encoding,User-Agent strict-transport-security: max-age=31536000; includeSubDomains; preload; connection: close
2024-05-06 16:41:51 UTC	6741	IN	Data Raw: 2f 2a 0d 20 2a 20 4e 6f 74 65 20 74 68 61 74 20 74 68 69 73 20 69 73 20 74 6f 61 73 74 72 20 76 32 2e 31 2e 33 2c 20 74 68 65 20 22 6c 61 74 65 73 74 22 20 76 65 72 73 69 6f 6e 20 69 6e 20 75 72 6c 20 68 61 73 20 6e 6f 20 6d 6f 72 65 20 6d 61 69 6e 74 65 6e 61 6e 63 65 2c 0d 20 2a 20 70 6c 65 61 73 65 20 67 6f 20 74 6f 20 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6f 6d 2f 6c 69 62 72 61 72 69 65 73 2f 74 6f 61 73 74 72 2e 6a 73 20 61 6e 64 20 70 69 63 6b 20 61 20 63 65 72 74 61 69 6e 20 76 65 72 73 69 6f 6e 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 75 73 65 2c 0d 20 2a 20 6d 61 6b 65 20 73 75 72 65 20 79 6f 75 20 63 6f 70 79 20 74 68 65 20 75 72 6c 20 66 72 6f 6d 20 74 68 65 20 77 65 62 73 69 74 65 20 73 69 6e 63 65 20 74 68 65 20 75 72 6c 20 6d 61 79 20 Data Ascii: /* * Note that this is toastr v2.1.3, the "latest" version in url has no more maintenance, * please go to https://cdnjs.com/libraries/toastr.js and pick a certain version you want to use, * make sure you copy the url from the website since the url may

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.11	49717	18.173.145.206	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:41:51 UTC	635	OUT	GET /rmshg/1576085320_RMS%20Site%20Logo.png HTTP/1.1 Host: d3j0t7vrtr92dk.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rmshg.amplified.training/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:41:51 UTC	536	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 9838 Connection: close Date: Mon, 06 May 2024 16:41:52 GMT Last-Modified: Wed, 11 Dec 2019 17:28:39 GMT ETag: "0ec5dfc44a443bc30123721fefb83048" x-amz-server-side-encryption: AES256 x-amz-version-id: ccz0iq_fol8ZZFhP0MBvzNRhbeF.eQOs Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 8a904a0d16ba1d2d926b70585166d16e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: MjYMaOshxL8EBL32CGQQxXD307YdwBRNHqMn7FSvY91iMZx_CZ6UGA==
2024-05-06 16:41:51 UTC	9838	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b2 00 00 00 48 08 06 00 00 00 52 83 af 17 00 00 20 00 49 44 41 54 78 9c e5 7d 7b 7c 14 45 d6 f6 d3 3d 33 b9 5f 21 21 09 b9 11 92 10 20 21 42 60 51 94 08 02 ba ee 0a a2 a8 28 88 37 56 56 45 d7 75 bd ad 8a 2b e8 2a fb ae a0 ec 7a fd 54 14 96 4f 65 61 15 91 45 91 3b 82 80 ca 5d 2e 01 12 20 40 12 42 ee 99 dc 93 99 ae f7 8f 99 ee a9 a9 54 55 f7 00 be ef fe be ef f8 8b dd 5d 75 ea 9c 53 a7 4e 9d 7a aa 66 a6 51 08 21 04 00 08 21 50 14 05 97 92 58 99 32 1d 5e 33 2e a9 0d 3f 47 9f 02 d1 f1 bf a1 ff 42 75 fe 4f b4 d3 79 79 6d ac c8 91 f1 a8 fa 0d eb 0c 99 30 bd 9e e6 93 b5 91 c9 10 e9 17 e9 60 db ca ea 75 a7 b1 e5 22 5b 79 f2 65 e5 ac 0e d6 26 33 9f 9a f9 8c d7 37 b6 5c d7 a1 d7 d3 cf 3c fb 65 3e 94 5d 79 fa Data Ascii: PNGIHDRHR IDATx}{\|E=3_!! !B`Q(7VVEu+*zTOeaE;]. @BTU]uSNzfQ!!PX2^3.?GBuOyym0`u"[ye&37\<e>]y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.11	49716	18.173.145.206	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:41:51 UTC	621	OUT	GET /images/loading-small.gif HTTP/1.1 Host: d3j0t7vrtr92dk.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rmshg.amplified.training/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:41:51 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 35215 Connection: close Date: Mon, 06 May 2024 16:41:52 GMT Last-Modified: Wed, 30 Mar 2022 08:02:21 GMT ETag: "aecde3c3e0227b14798485942c61b819" x-amz-server-side-encryption: AES256 x-amz-version-id: sSPRRGSRbJwj6V1AT84aT1x5uH8.raNw Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 ba5631812fd92cdae7b4685e6efbc3c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: U_9PL1gAH05o2CMjVXj-PX76rn_G-5Y3QSbf0PHXT8cUqHya18HXgw==
2024-05-06 16:41:51 UTC	1489	IN	Data Raw: 47 49 46 38 39 61 a0 00 4e 00 f6 70 00 b5 b5 b6 85 85 86 78 78 7a 8c 8c 8d f2 f2 f2 60 60 62 81 81 82 d8 d8 d8 65 65 66 f6 f6 f6 74 74 76 bd bd be c5 c5 c5 9a 9a 9b b1 b1 b2 fc fc fc a6 a6 a7 7c 7c 7d f9 f9 f9 ef ef f0 fa fa fa a0 a0 a1 f4 f4 f4 af af b0 a1 a1 a2 b7 b7 b8 a3 a3 a4 d3 d3 d4 c3 c3 c4 dd dd de b0 b0 b1 bb bb bb 94 94 95 cf cf cf e9 e9 e9 cd cd ce a4 a4 a5 9b 9b 9c ab ab ac bf bf c0 7f 7f 80 d5 d5 d5 41 41 43 ec ec ec a9 a9 a9 b8 b8 b9 89 89 8a 9d 9d 9e 91 91 92 e6 e6 e7 56 56 58 ea ea ea 4a 4a 4c 58 58 5a 4c 4c 4e ee ee ee 54 54 55 d6 d6 d6 df df df 5c 5c 5e 6c 6c 6e 45 45 47 da da da d4 d4 d4 ae ae af 8e 8e 90 70 70 72 50 50 52 7a 7a 7b 46 46 48 d0 d0 d1 48 48 4a 72 72 74 95 95 96 d2 d2 d3 e0 e0 e1 5a 5a 5c 6a 6a 6c c7 c7 c8 4e 4e 50 63 63 Data Ascii: GIF89aNpxxz``beefttv\|\|}AACVVXJJLXXZLLNTTU\\^llnEEGpprPPRzz{FFHHHJrrtZZ\jjlNNPcc
2024-05-06 16:41:51 UTC	8192	IN	Data Raw: 37 36 35 34 33 32 31 30 2f 2e 2d 2c 2b 2a 29 28 27 26 25 24 23 22 21 20 1f 1e 1d 1c 1b 1a 19 18 17 16 15 14 13 12 11 10 0f 0e 0d 0c 0b 0a 09 08 07 06 05 04 03 02 01 00 00 21 f9 04 09 04 00 70 00 2c 00 00 00 00 a0 00 4e 00 40 07 ff 80 70 82 83 84 85 86 87 88 89 8a 8b 8c 8d 8e 8f 90 91 92 88 75 50 2a 97 98 99 9a 9b 9c 9d 2a 5a 03 60 93 93 04 01 9e a7 a8 9d 56 61 a3 8a 62 a9 b0 b1 b2 98 11 12 92 16 3c b3 ba bb 9b 62 91 5f 5a bb 1a ad 85 1c 36 bc 98 3b 2b 88 5b 34 b3 3b 1d c4 84 2d 5c ba 5a 5f 8a 26 b3 0e d2 91 77 43 c8 05 a2 dd e4 82 19 b3 17 88 c7 b1 10 e5 d2 a6 bc ed ee 93 10 b2 36 89 08 b3 0a f3 89 26 ce 9a 34 58 18 52 d2 03 19 8d 10 fc 10 a1 98 c5 a3 91 19 64 3b 8c 48 5a 80 03 d9 25 6c 88 0e ac b3 a8 c5 85 08 49 07 f2 f1 92 d2 6a 4b 14 8b 28 3b 35 59 26 Data Ascii: 76543210/.-,+)('&%$#"! !p,N@puP*Z`Vab<b_Z6;+[4;-\Z_&wC6&4XRd;HZ%lIjK(;5Y&
2024-05-06 16:41:51 UTC	6396	IN	Data Raw: 00 06 a8 a4 54 de 39 ca 31 24 aa 0c 34 04 0f 11 f8 30 96 1a 11 ad 97 c2 a8 9d a8 c5 c0 d9 47 16 30 5c d7 b9 43 44 a3 10 f3 69 32 69 71 f1 91 8e 01 f9 35 e1 07 2b 56 95 e4 d1 25 10 25 57 12 13 7b 20 92 42 7e 25 d9 c0 d0 25 5b 2c 51 85 11 d3 a9 92 c2 4a 58 a4 82 89 11 3b 08 55 03 68 85 1c f0 db 4a 44 68 e7 53 23 51 94 d4 87 2f 79 24 a6 13 13 33 10 d2 41 77 72 7d b0 e2 23 4b 28 58 0f 0b da 88 01 e1 44 05 f0 16 46 6a 34 21 10 c6 ff 8e 8f cc c1 d1 0b f0 84 81 80 4e 56 58 10 43 6e 2b 0d c0 0b 93 8d 3c 80 23 40 06 14 94 40 5f 34 f1 10 a2 52 17 70 f9 48 15 13 ed c0 1c 3c 5d a8 a1 1a 31 36 f0 a1 e6 23 49 24 a4 c5 08 3e 5d 21 8d 6a 38 64 73 a7 23 56 24 14 e6 8a 62 88 d6 d9 0e 24 0e ea cc 9f f5 68 51 06 93 23 0c 19 57 01 2a 3a 8a 08 1f 09 09 a1 a6 12 96 7a 55 9f a6 Data Ascii: T91$40G0\CDi2iq5+V%%W{ B~%%[,QJX;UhJDhS#Q/y$3Awr}#K(XDFj4!NVXCn+<#@@_4RpH<]16#I$>]!j8ds#V$b$hQ#W*:zU
2024-05-06 16:41:51 UTC	16384	IN	Data Raw: 2b c8 18 12 81 a7 e5 be 3b da 83 40 97 f5 a4 21 b0 20 0c 84 7a d3 10 b3 da cb a9 ff 90 ce 82 03 c1 c3 82 e8 51 ec 34 47 e4 c0 31 1b 10 24 64 43 c6 d4 5c 30 32 c9 37 71 c1 c0 ca 17 98 8c f2 34 40 ac cc c6 aa 13 99 61 33 10 32 27 b4 f1 c8 30 18 b6 c1 ca 25 03 64 03 c3 eb 6c c6 71 05 45 21 b1 32 08 09 c9 00 b0 3d 02 70 4c 42 6e e0 0a bc 98 3d 56 08 10 f5 c3 74 68 55 c5 c8 72 b2 5a 2e 40 15 4b 5b 34 55 7e 70 2c 82 42 69 90 a1 d0 a1 ee 32 1d 96 a7 02 df 99 90 03 21 28 64 85 bb 50 a3 25 ec be 36 25 14 02 18 1f 2b a1 ed d9 5a fd fd f0 01 0a f5 c0 c8 d4 f6 28 b0 ec 03 2e d8 95 d7 c3 81 26 a4 2c 1b 67 4c f4 72 48 09 cc 8b 56 ab 02 87 f0 b1 9a 6c 28 31 91 0c fa ec b3 07 e5 5a 21 91 c0 c3 79 b4 a4 90 e2 6c 74 81 74 3d a8 c3 63 c4 91 4d 19 53 04 06 0f 70 7c a3 42 32 Data Ascii: +;@! zQ4G1$dC\027q4@a32'0%dlqE!2=pLBn=VthUrZ.@K[4U~p,Bi2!(dP%6%+Z(.&,gLrHVl(1Z!yltt=cMSp\|B2
2024-05-06 16:41:51 UTC	2754	IN	Data Raw: 75 d3 1d 2e 58 b0 21 f3 02 4b 81 aa 56 04 1f c2 e0 53 8b 90 0c 37 10 1d 80 d1 d3 28 95 e1 8e 52 c0 6e 3a 4e 07 a2 09 19 14 f8 ed 88 18 51 98 b7 2e 05 42 22 80 a1 fb cd 1d 17 13 29 b1 ef 52 c6 9b 65 8f e8 10 c0 7a 08 15 a1 93 21 66 b8 b4 c3 08 97 ac e0 02 81 13 d5 10 83 76 c6 99 44 03 09 73 49 b2 41 4b 26 99 71 c8 01 10 b2 63 80 4c 98 28 b1 83 51 32 d0 56 48 07 4f 18 15 45 7e 98 48 30 80 49 5a 04 55 c8 62 09 69 d6 4b 1e 6b 84 f8 8f 0c 13 0e 52 c7 78 2e d1 90 01 33 64 f8 08 4e ff 04 85 7c a1 24 35 1a 6c c3 41 85 1e cd 20 c8 17 c0 b9 04 45 1d db b4 f0 a4 31 5a a8 28 08 64 13 e9 b8 4d 0c b7 dd 04 05 01 33 8c 76 93 0b 19 36 e3 40 47 66 76 f1 4d 42 06 10 94 80 56 37 35 71 a2 4b 5c b0 e0 50 10 13 e1 10 95 11 1e 91 a8 4f 09 b1 d1 42 03 03 18 49 c0 21 42 46 08 92 Data Ascii: u.X!KVS7(Rn:NQ.B")Rez!fvDsIAK&qcL(Q2VHOE~H0IZUbiKkRx.3dN\|$5lA E1Z(dM3v6@GfvMBV75qK\POBI!BF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.11	49713	3.217.205.239	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:41:51 UTC	663	OUT	GET /pages/scripts/lib/login-558.min.js HTTP/1.1 Host: rmshg.amplified.training Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://rmshg.amplified.training/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; login_token=153a9a8f304880470316f98fd745653f
2024-05-06 16:41:51 UTC	553	IN	HTTP/1.1 200 OK date: Mon, 06 May 2024 16:41:51 GMT content-type: text/javascript content-length: 105474 server: Apache content-location: login-558.min.js.gz tcn: choice x-content-type-options: nosniff x-xss-protection: 1; mode=block last-modified: Tue, 12 Mar 2024 10:12:06 GMT etag: "19c02-61373e3ef81fe;61373e408c6bc accept-ranges: bytes cache-control: max-age=31536000, public expires: Tue, 06 May 2025 16:41:51 GMT content-encoding: gzip strict-transport-security: max-age=31536000; includeSubDomains; preload; connection: close
2024-05-06 16:41:51 UTC	8465	IN	Data Raw: 1f 8b 08 08 76 2a f0 65 00 03 6c 6f 67 69 6e 2d 35 35 38 2e 6d 69 6e 2e 6a 73 00 ac 5b 0b 77 db 36 b2 fe 2b 12 9b ab 10 16 4c 4b 49 9b 7b 42 19 d1 49 65 a7 c9 6e 5e 1b b9 ed ee 4a 4a 0f 2d 41 36 13 99 54 48 c8 b6 62 ba bf fd 7e 03 f0 2d 2a e9 de 7b d3 53 f3 01 60 30 33 18 7c f3 00 75 74 d0 6e 7d fa c7 46 46 db d6 f5 63 e7 89 f3 63 2b 69 d9 73 d6 7a b7 96 c1 df c6 ad 17 e1 26 58 78 ca 0f 83 96 17 2c 5a a1 ba 94 51 6b 1e 06 2a f2 cf 37 2a 8c 62 74 ff f4 85 86 3b 61 74 71 b4 f2 e7 32 88 65 eb e0 a8 bd dc 04 73 1a 67 4b ae d8 9d b5 c1 db 18 a3 e6 ca 1a 58 e1 f9 27 89 1b 21 d4 76 2d c3 65 eb 2a 5c 6c 56 b2 d3 d9 d3 e0 c8 db 75 18 a9 78 58 7d 14 d2 59 84 f3 cd 95 0c d4 50 61 9a 76 8f b9 c5 ac ec ce 5f da ed a2 0b 53 97 51 78 d3 0a e4 4d eb 34 8a c2 c8 b6 52 b1 Data Ascii: velogin-558.min.js[w6+LKI{BIen^JJ-A6THb~-{S`03\|utn}FFcc+isz&Xx,ZQk7bt;atq2esgKX'!v-e*\lVuxX}YPav_SQxM4R
2024-05-06 16:41:51 UTC	16320	IN	Data Raw: 6a 6f 9e 82 1e e1 e9 e6 61 ad ff 32 0e ad 62 4a 68 45 5d 25 9c d2 ac 4f d4 3e e7 87 08 61 13 60 4e 0f 76 9e 90 a3 72 b7 48 61 00 12 53 77 66 70 db 2c fe cb 91 b4 8f a2 39 2c 11 00 f3 a2 ce 13 c7 7e e2 10 33 64 c0 db 81 ac 00 7e c9 1b 14 af ea 75 cc 43 d1 f8 38 80 c7 5b 47 64 94 e7 0b 83 f0 b0 12 7d e9 2b d1 97 5a 29 bf 30 28 58 a6 ba 91 da 87 b5 5c da 95 80 5b b2 70 a6 12 9c 12 fb 12 ad 12 e8 77 21 bd a9 42 c0 73 e1 1c a8 49 14 c1 66 46 f9 2a d8 4a 68 e7 c1 f4 66 57 2f d0 02 9c 14 23 8a df 19 ad eb 20 32 42 44 5a 30 97 b4 b0 de a9 ba 28 52 bc bf 3f 57 ef c3 48 f9 b2 9a 3b f4 cf ba b7 08 be de a2 82 de 20 4c 6f 49 f0 26 99 fa 3f b1 00 7d a0 82 3f 31 af ca b1 09 2b 4c 2a cc 8f 37 26 cc a0 66 59 6d 88 c9 7a 9e 66 67 e7 e5 e6 32 9b 96 e7 81 aa e2 91 7c a9 35 Data Ascii: joa2bJhE]%O>a`NvrHaSwfp,9,~3d~uC8[Gd}+Z)0(X\[pw!BsIfFJhfW/# 2BDZ0(R?WH; LoI&?}?1+L7&fYmzfg2\|5
2024-05-06 16:41:51 UTC	1578	IN	Data Raw: c0 2b 62 dd 25 19 87 54 55 6f 3a 4e 32 9a 47 33 c5 95 4e 1b 5c f4 e0 7b dc c4 0a a9 68 3f 87 2e 42 37 0a 13 ce 2f 71 28 63 87 16 86 37 1b e8 32 a0 86 e8 65 53 6f 03 e8 2c 5a a0 e3 61 84 f8 4b bb d2 79 8c b5 67 1c 7a b3 6b 05 d0 5d 68 83 97 db 4b 64 6b 43 5b e4 02 7b 77 c9 26 2f 59 5c b8 de 07 7d a2 12 d3 d7 84 cc 9c 5a 87 86 2b ed a2 a7 99 09 e8 24 74 05 14 01 b8 7b a3 61 a8 e7 51 a9 b3 45 c7 a2 be db ed 25 1b da 2c a3 9a 29 e4 26 88 7e d7 23 91 5f 37 76 94 35 03 23 eb 3c e6 9b 9a 87 75 5f 7a 18 89 00 b2 8e 6d a5 a7 ea 75 e6 64 82 59 de 76 ac 56 f9 fb 1c e2 08 31 1f ff 05 57 c3 27 3d 6f f8 36 6a 9c d5 f8 ee 51 f9 1e f4 80 d9 b2 c9 9f 8e 74 d7 e4 83 10 8a 9b 7a 41 92 db b0 22 7e f8 6e 8a c7 a5 b6 13 73 74 db de 41 41 3d 97 57 a1 4b e2 4e d4 ea 92 e1 69 f6 Data Ascii: +b%TUo:N2G3N\{h?.B7/q(c72eSo,ZaKygzk]hKdkC[{w&/Y\}Z+$t{aQE%,)&~#_7v5#<u_zmudYvV1W'=o6jQtzA"~nstAA=WKNi
2024-05-06 16:41:51 UTC	16320	IN	Data Raw: 1a ae 1a 05 82 32 2e e9 74 e2 31 26 5e 21 d0 7b 53 38 ce e7 ea 8c a0 da b5 3b d6 eb 85 d6 ac f8 84 ac 42 1e f6 66 73 ad 2e 5c 10 aa ff 24 ac 84 7c d2 c8 12 5c 90 e1 27 b4 0e c4 ec cb 2b cf 0a 81 1a 43 f0 45 32 9f a3 a1 39 54 2d c9 27 e9 de 05 90 32 4b 54 76 bb 84 ca 57 65 52 ae 57 e8 43 96 98 57 09 42 58 0d 66 03 f6 7a 0b 38 81 7a 1f df a0 4c c4 f5 bb 12 e9 77 f2 32 ff 83 de 17 df 40 7c 93 17 73 72 83 67 ac 70 de a0 29 28 cd 36 2a e3 6f 4a 56 99 5d 44 a8 91 50 73 e3 81 af 73 a3 38 dc 99 e4 d9 7c 28 87 27 a3 68 8b 8e 99 d2 86 ac 5b 0f c3 28 19 c3 28 35 d2 a7 f0 09 1b 87 f2 e5 7c ee 8f a6 c9 74 f6 f9 60 d1 b3 52 29 3f b0 e5 8e da d8 c5 7e e4 26 d9 59 de aa da b9 51 43 14 e0 bf 2a c1 7b 4b bf 0f 6f 15 aa d6 2d b3 69 fa 26 bb 60 97 ad 3b d9 ea e7 a4 2a 77 a1 Data Ascii: 2.t1&^!{S8;Bfs.\$\|\'+CE29T-'2KTvWeRWCWBXfz8zLw2@\|srgp)(6oJV]DPss8\|('h[((5\|t`R)?~&YQC{Ko-i&`;*w
2024-05-06 16:41:51 UTC	10527	IN	Data Raw: 34 4d 18 99 55 ef dd 32 5f 5b a5 5b 6d d8 ed ff 8b 52 15 df 16 97 e9 92 cc cd 44 ac 8a fb 76 26 a6 ce cf 80 12 07 d4 df 06 c3 23 c3 11 a0 93 f0 67 89 7f b2 fe e5 79 36 07 ca 0f b5 19 ce b3 19 be 65 66 bf b7 b1 c1 ff 66 0d 99 f0 21 8a 68 f8 2c ea 2d ed 57 69 be 9c 03 69 80 3c 93 a4 0c 73 f2 ad 2d 80 e5 2e a3 29 dc 05 8b b2 0e 3f b4 3f 0c 3f 8c 6e b6 61 74 bf 35 38 52 1f 3e 7c f8 f7 bd cd 9f 00 83 45 d7 55 1f 3e dc 3b 10 46 83 6c 31 bc a4 7f 48 cf 5e 5d 2d c2 20 0c 80 8e 0c a2 40 05 d9 99 ef e9 de f2 32 82 53 64 0f e7 67 cf 29 eb e9 b1 09 b1 5e 0b ee 80 bb b7 1c b2 bc 3c de 8f e7 e5 9d 64 c8 e5 b6 69 80 a8 c4 60 d3 80 37 41 34 bc bc 40 67 a7 62 ce 00 05 8e 14 b3 5c 28 e7 12 f9 06 3b cd b9 69 a0 82 b5 94 46 de c0 b7 2b e9 8b 1d 35 03 fe 5d a4 7d 4e a6 34 d1 Data Ascii: 4MU2_[[mRDv&#gy6eff!h,-Wii<s-.)???nat58R>\|EU>;Fl1H^]- @2Sdg)^<di`7A4@gb\(;iF+5]}N4
2024-05-06 16:41:51 UTC	5809	IN	Data Raw: 17 66 79 1e c9 c0 13 1b 80 da 45 ca 94 48 c3 85 ae 9b 66 de 06 1e c8 80 2b 03 84 2a b6 f3 ab 69 b4 6b 03 00 b3 c7 36 00 65 9e c8 c0 33 1b 80 0a b0 cc d2 54 70 62 03 b0 f6 8f 6c 00 7a fd 4c a6 88 c0 49 b7 2b 03 0f 64 99 b1 0c 4c 65 05 4f 64 ca 4c 54 f0 50 64 3b 79 e2 02 d0 eb b1 08 24 4f 44 e0 a9 6b 14 c6 83 43 58 99 f1 3c 30 81 2b 5a 9d 95 69 7f 6c 03 dd 94 50 03 9b 32 95 29 5d 91 22 02 90 f2 44 06 1e c8 c0 33 57 e6 a4 fb 4c 56 2d 7a 70 f2 c0 05 60 34 cf 44 e0 e9 23 51 db 33 d7 51 18 1a b6 53 9a a1 3d b4 01 68 74 2c 02 f4 04 59 9a 5e 3f 92 d9 a6 2e e5 a4 3b 96 d9 1e 88 6c 04 fe 6d 99 99 cc 26 ab 4e 64 6d 44 76 71 00 ae b0 c7 36 00 e3 79 22 02 84 30 95 86 64 21 b2 7d 6d 06 f4 c8 04 ae e8 2e d1 9f 89 fb 1c db dc d0 13 9b 05 3b fc 4c a6 8c 65 8a 57 66 ea ea Data Ascii: fyEHf+*ik6e3TpblzLI+dLeOdLTPd;y$ODkCX<0+ZilP2)]"D3WLV-zp`4D#Q3QS=ht,Y^?.;lm&NdmDvq6y"0d!}m.;LeWf
2024-05-06 16:41:51 UTC	48	IN	Data Raw: 2a 22 c5 97 e1 e1 9e 51 5f 8e 0f db 5d 40 a8 54 b0 b7 b7 77 ba 5a 24 79 43 81 55 9a 1f 3e 3f c8 c7 ab 45 ff f4 18 f3 3c 3f 4d c6 e3 65 33 41 66 Data Ascii: *"Q_]@TwZ$yCU>?E<?Me3Af
2024-05-06 16:41:51 UTC	10471	IN	Data Raw: ae 5b ba 6d d0 2f 27 66 bd ad 81 04 9d a1 42 c6 31 e4 c5 7f d4 00 e4 87 92 f4 c3 d6 22 2a 85 e8 0e 5f a5 cb 3d 2b 9c 64 14 c6 61 68 e8 4b f6 10 e1 dc e1 31 d5 d0 e0 41 14 df 82 6d 59 fd 92 d5 c6 f7 2d 3b 17 0d 85 78 80 26 07 fe a7 3b 27 5a dc c3 fd 3c 29 2e 16 28 a8 1f 1f 42 b7 4c d4 72 09 95 c8 98 64 91 95 c9 1c 88 4b 1d b9 5a a4 f3 39 60 f0 b8 88 b4 7a b5 c5 a3 d6 78 50 d8 b8 76 79 4a df eb 79 35 b3 c3 96 75 6e d4 b8 c4 69 a5 52 a3 a3 5f 8a 8c 88 74 fb a6 33 be 55 64 9b 11 5f 12 13 a8 8a f9 6a d3 5b cc 79 b5 d6 b7 a4 35 83 15 8a 18 54 05 9d f9 89 a4 26 65 ae f5 e8 1b 65 ab e8 b6 71 66 ba 0c 23 46 23 e1 5f 17 1a 89 7c 1e 77 9a b9 2d 72 10 ba 89 e6 ce ab bb 38 75 82 3b ef 0f 93 2f 54 ef 15 de 18 74 98 78 8c 7d ad 3f 61 b4 d1 de c3 ee f9 01 c5 33 06 74 7f Data Ascii: [m/'fB1"*_=+dahK1AmY-;x&;'Z<).(BLrdKZ9`zxPvyJy5uniR_t3Ud_j[y5T&eeqf#F#_\|w-r8u;/Ttx}?a3t
2024-05-06 16:41:51 UTC	16320	IN	Data Raw: 8c 6f f0 58 0f 2a 74 eb a7 f0 5f bd db 11 60 3a c1 36 76 16 ff d4 eb e2 5d fd aa ce 2f ed 57 db 94 4e e7 73 c3 f8 49 af f3 38 1d 6b 96 2f 5d 80 ee bd 35 d9 78 10 be 10 28 79 32 fd f4 dd 03 1c 18 a2 99 87 dd f9 df ac de f9 92 77 83 95 01 ae 4e 7d a0 f6 c6 03 ae c0 37 0f b3 02 df 3c e8 83 51 e9 41 9d 97 c7 28 1d 9b 63 d8 22 df 3e 98 18 e6 61 8e c0 87 3f f4 78 e2 5f a4 f3 b5 a4 94 7c ab 11 b7 9c 07 14 82 f1 bc 00 4f 30 bf 77 e1 a4 dd d4 03 af 43 b6 a6 ca dc ff ee 15 97 42 de 33 e1 24 ee a0 32 59 50 7b b2 b2 d8 83 e9 8f f1 ac 66 0f a2 41 96 6b eb e1 de c9 92 c9 c7 78 98 4c d6 92 35 8c 44 61 f4 1a 7b b4 35 9d a5 18 ff e0 68 2b 1a 0e 8f f6 4e e2 61 f8 40 22 01 d9 8d 13 d1 83 87 b8 11 96 b4 f9 60 eb f4 03 39 e3 b3 83 89 ac 22 79 0f 7b d8 b0 bb 40 8a 68 72 df 8b Data Ascii: oX*t_`:6v]/WNsI8k/]5x(y2wN}7<QA(c">a?x_\|O0wCB3$2YP{fAkxL5Da{5h+Na@"`9"y{@hr
2024-05-06 16:41:52 UTC	16320	IN	Data Raw: 63 f8 ae 9b 12 88 ed 21 34 82 17 6a c7 fc 15 b6 6a 3f 19 25 f3 8b 70 23 bf 9b f6 7c 72 a6 10 7a 43 e1 35 b2 36 81 43 ba c7 8e 48 4b fa a5 66 d6 8c 36 a8 cb 61 c3 a2 30 a1 34 fa bc 73 75 86 5c d8 95 bd af 5e 00 2c d5 62 d3 ef d6 d6 6c 8c dd e3 e0 b3 60 7e a4 f8 ea 47 a1 0b d7 06 85 96 32 46 c0 43 fa 23 e5 15 85 a3 6b 23 c4 50 04 b4 0b 0b 79 f2 1d e2 e9 b7 1d fb 8d 65 48 7e 45 3f fc 17 aa 6b e0 33 d2 b8 58 b7 61 19 54 21 84 36 2c 14 20 1a 45 7e c8 e0 94 8f 21 bd b5 dd 68 7f 80 ad 48 a9 4d bf dd 6e e7 57 cf 20 2e 43 e3 c0 15 14 c6 ea 50 d3 67 a3 68 ed 43 11 5d 36 91 b3 54 5a ce 74 42 cc 45 e8 3d ae 1f ad 6e e2 48 b6 a1 4b f3 79 ea 2c d4 68 f4 bc 0a b4 20 87 b7 0d 76 79 e8 57 d0 4f 03 74 6b 3e 9e 56 91 85 92 1e 79 b5 dc c6 e0 7d a1 10 cb 58 22 e7 7c 91 4f df Data Ascii: c!4jj?%p#\|rzC56CHKf6a04su\^,bl`~G2FC#k#PyeH~E?k3XaT!6, E~!hHMnW .CPghC]6TZtBE=nHKy,h vyWOtk>Vy}X"\|O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.11	49719	18.173.145.206	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:41:52 UTC	630	OUT	GET /rmshg/1576583896_newRMSbanner.png HTTP/1.1 Host: d3j0t7vrtr92dk.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rmshg.amplified.training/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:41:52 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 83741 Connection: close Date: Mon, 06 May 2024 16:41:53 GMT Last-Modified: Tue, 17 Dec 2019 11:58:17 GMT ETag: "f4ab68c1906e983eb48dd191a5556dc9" x-amz-server-side-encryption: AES256 x-amz-version-id: RcTlZpN32J2lExGrP5_BLoD7Pg0_FdM1 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 d4b7883c7915f8b518d09e4d04990ecc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: FyjhC1uEvkj_lcl94LIoZr9Dt1RC1pCqCQL2DuFkYfQf85xOmMpEgw==
2024-05-06 16:41:52 UTC	15847	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 92 00 00 01 c2 08 06 00 00 00 b4 5b e3 4f 00 00 20 00 49 44 41 54 78 9c ec dd 7b 7c 5c 75 9d ff f1 d7 f7 9c 99 c9 4c 26 4d 7a bf df 5b a0 c5 52 a0 b4 85 5d 2e 22 ee 2e e8 5e d4 5d 77 75 bd c0 8a 78 61 41 10 8a 5c 44 11 44 44 0a 01 a1 20 eb 05 af fb 73 75 fd ad e8 aa ab 3f 57 50 ee 62 4b 29 05 ed fd de b4 4d 9b 26 cd 75 26 99 39 e7 fb fb e3 cc 24 93 c9 cc 64 92 26 bd be 9f 8f 47 68 32 73 e6 9c ef 39 4d c9 9c 77 3e df cf d7 20 22 22 22 22 22 22 27 9d da da da 9b 7c df 3f 27 14 0a b5 b8 ae 8b e3 ba b8 ae 8b eb 38 c1 9f 99 0f 27 e7 6b a7 c8 e3 d9 8f 90 e3 80 e3 d0 95 4e 93 ee ec 24 9d 4e 93 4a a7 49 a7 52 c1 9f e9 34 e9 74 8a 74 2a f8 3c 95 4a 65 1e 0b 1e cf 7e 9d 4a 65 bf ce 79 ce 4b 91 ee 4a 77 6f 9f Data Ascii: PNGIHDR[O IDATx{\|\uL&Mz[R].".^]wuxaA\DDD su?WPbK)M&u&9$d&Gh2s9Mw> """"""'\|?'8'kN$NJIR4tt*<Je~JeyKJwo
2024-05-06 16:41:52 UTC	1101	IN	Data Raw: ff fe ff fb f0 c3 0f 7f f3 fa eb af bf 72 d3 a6 4d 2b 3c cf 7b 2e 37 00 61 00 d7 cf 5a eb 3b 8e c3 b9 e7 9e fb be 6c 18 65 1c e7 e2 83 0d 0d 7c e1 ee bb df df 9e 4e 3f 0d 10 ae a9 19 3b 6a e4 48 7e f1 8b 5f 7c 6d cb 96 2d 2f 17 3b bf b6 b6 b6 dd d6 98 a2 df 5b 45 af ab 31 05 ab 8d fa 93 ea 4c b6 85 42 21 c6 8e 1d 3b a1 ae ae ae cf f3 31 6b a3 c6 71 68 3e 74 68 1d 40 28 12 19 6d a1 e0 75 4c a7 d3 cf 55 e6 f4 7f ca bf 8e f1 b1 63 27 c7 22 91 b1 2d 6d 6d 1d 57 5e 79 e5 0f af be fa 6a fb f8 e3 8f 2b 4c 12 91 21 53 7c 3a 5b 4f 5a d2 dd 58 7b aa c3 92 db 53 ac 2a 50 89 f4 5a bd 25 9a 5f 89 94 7f 37 d5 6b 6a 55 66 ff e5 ae 02 56 4e 6f 22 8f e0 87 e6 10 ad 12 d6 4b 6e 35 4f a9 f1 ba 6e 10 9c 64 3f cf 06 34 d9 26 dd e5 06 4b 83 59 1d 6d b0 53 d7 8a 35 ca 1e 4c c6 Data Ascii: rM+<{.7aZ;le\|N?;jH~_\|m-/;[E1LB!;1kqh>th@(muLUc'"-mmW^yj+L!S\|:[OZX{S*PZ%_7kjUfVNo"Kn5Ond?4&KYmS5L
2024-05-06 16:41:52 UTC	16384	IN	Data Raw: ed db b6 ad 72 5d 37 1a 8d 46 27 27 12 89 dd d5 23 47 2e 7c e3 e5 97 6f 6b 68 6f ff 79 b1 f1 56 44 a3 b3 17 9d 7d f6 e3 13 26 4e 9c 7c a8 b1 91 cb 2e bd f4 eb f5 f5 f5 fb 7f ff 87 3f 5c 8d ef 6f 8d 44 a3 13 01 12 8e d3 1d 60 ad 5f bf fe 6d 3f fd e9 4f 57 5e 72 c9 25 8b 53 a9 14 58 eb 00 2c 3d ef bc c7 de fb cf ff bc f8 37 bf fe 75 bf d7 cf 18 13 0a 97 d1 75 35 1c 89 54 a7 53 29 de f1 8e 77 fc 74 c7 8e 1d 6b f2 cf 6f ed 4b 2f dd d2 98 48 fc 0f d0 f6 d5 af 7e f5 9b 1f ff f8 c7 af cc 7e 6f 25 12 89 ed 63 c6 8c 79 cb 5f ff cd df 5c b9 70 e1 99 fc f3 7b df d3 27 48 0a 85 42 95 c9 ce ce 82 c7 9e 33 67 4e ed 98 31 63 e6 c5 62 b1 74 38 1c 0e 2d 5d ba f4 67 0d 0d 0d 5b b7 6e dd 7a 3d c0 bf 3d f4 d0 ac 87 fe ed df b6 dd 7a eb ad f6 7f 7e f9 cb 6f d7 ef d9 f3 5f 55 Data Ascii: r]7F''#G.\|okhoyVD}&N\|.?\oD`_m?OW^r%SX,=7uu5TS)wtkoK/H~~o%cy_\p{'HB3gN1cbt8-]g[nz==z~o_U
2024-05-06 16:41:52 UTC	16384	IN	Data Raw: 38 b4 74 2b 7e eb 02 c7 3f ef 82 8b ba fc 88 1f f0 85 a4 9e 76 c5 b6 83 1e af fd b8 e5 db 37 65 c9 1d 55 4c 0c 3a 5f dc 09 a3 a3 82 f1 64 0c b4 2d 54 b0 d0 d1 7b a3 47 4b 56 d1 6c fc 35 2b 63 4c f3 1b 17 29 18 a1 5c 9c d1 90 35 80 72 fc e5 8f 1c cb 3a 55 59 c5 37 a3 e1 d1 3e c7 fb 36 6a ee ba c6 c0 01 ff 58 74 50 1e 3e 14 10 92 36 d9 0e 68 51 30 50 44 bd cf d2 d5 5e 2e 6d 84 a6 db 1f fd 2f c5 cd bf 0d 76 3f 11 c1 2c 38 20 b8 c6 d5 35 11 57 3a 20 3c 6e 36 c4 8c 2a dd b7 37 01 2d 90 9b 83 bf be 65 6b 12 b9 31 12 65 00 05 da 45 de f3 8f cf 8f a7 64 99 85 62 62 d4 3a 89 48 80 4d 18 95 a5 d3 d4 b7 88 f0 16 8e 29 ba 5c 4a a7 8a 76 15 c3 77 2e 56 ed ac d4 90 ae a5 61 4d 5a 35 d5 13 92 34 85 00 ac b8 08 5c f5 b8 84 03 3c ca 87 55 c7 2d a5 15 8c 8c fb d5 dc b6 d4 Data Ascii: 8t+~?v7eUL:_d-T{GKVl5+cL)\5r:UY7>6jXtP>6hQ0PD^.m/v?,8 5W: <n6*7-ek1eEdbb:HM)\Jvw.VaMZ54\<U-
2024-05-06 16:41:52 UTC	2048	IN	Data Raw: 0a 60 85 f9 f5 5b 66 9f ce 6b ca de ef 8d e1 48 54 02 7f 07 ee ae 34 57 39 ea 7e 81 52 b1 f4 72 84 6b 1d bb 30 1a 2f 7f f7 cb b2 27 54 ec 5d 01 45 8b 36 21 80 6e c9 e7 f6 0f a0 36 29 f4 66 28 92 00 18 16 82 54 bf e0 91 17 73 30 5a 54 5e 1b 0e 42 54 4f 1e 7e f5 7f bc 16 94 62 30 dc 1e 6c a8 b1 39 8b b8 30 88 8c a1 f9 48 b7 21 b0 7b f7 5b 65 85 82 2e 6c df 75 1b 99 52 46 e7 ca a8 6b 71 49 8a b7 2d 9a f9 b1 08 1b fb c7 e4 8e 74 a1 a0 eb 12 5d 28 de b2 5a d5 86 4b 3a 8e 5f 5a e3 22 a1 51 85 a6 90 a0 b9 49 d0 dc a1 d2 dc 2e 68 6e 16 34 85 04 4d 41 08 28 85 f3 23 a1 d4 cb c8 87 ee 8e eb 58 08 05 5d 4a 74 59 66 bc 44 99 7d 5e fb ad 73 26 75 6f d2 af d6 71 1c 08 9c 5d 15 79 2a 52 cc a9 55 ab c4 37 d0 4c 80 ba 71 3d 06 3b 04 0b de cc b1 76 93 60 64 13 79 b2 48 60 Data Ascii: `[fkHT4W9~Rrk0/'T]E6!n6)f(Ts0ZT^BTO~b0l90H!{[e.luRFkqI-t](ZK:_Z"QI.hn4MA(#X]JtYfD}^s&uoq]y*RU7Lq=;v`dyH`
2024-05-06 16:41:52 UTC	16384	IN	Data Raw: ad 2a a3 9b 15 66 4c 84 c6 4e 09 59 05 7d b3 24 a9 1b fa e1 b5 20 a7 43 6b 33 d0 29 60 93 e4 ce 67 b2 3c f8 96 e0 df ab 74 fa 34 81 96 33 63 f3 14 c3 60 a1 e4 50 a4 c2 8c 51 92 03 c6 28 1c 33 5b f2 95 7d 03 b4 8c 15 b0 0e fa 32 65 c8 04 8c f3 db dc 0c 2b 36 4a 2e ff 63 8e c9 23 84 f1 4b ac 1a c7 af ab 05 a7 38 a9 80 aa 81 a6 82 52 12 c6 65 98 a5 53 d0 ee ce 6b 78 17 5d 17 0a 8a 02 ef 75 69 7c 75 2f 85 a3 f7 50 49 f6 ca 62 1e c9 7e 5f 54 22 87 84 30 4e 90 a2 14 97 ab e5 7e 70 eb ab 52 1b ce 7e 9c df 07 71 7e d1 74 68 99 20 78 e1 df 3a 0b 97 ea cc 0d 0b 32 5a a1 9b 8c 04 7a 15 7e 77 82 80 8d e6 a1 78 8d 83 00 b6 04 51 0f d8 7a 45 9d 44 72 47 dd 23 a9 8e 8a a8 d6 23 69 d6 5e 7b 90 4e 67 d8 b0 71 1b c9 ee 35 18 b3 ad 5b 20 b9 15 84 1d a4 75 c4 04 c6 8c 19 6e Data Ascii: *fLNY}$ Ck3)`g<t43c`PQ(3[}2e+6J.c#K8ReSkx]ui\|u/PIb~_T"0N~pR~q~th x:2Zz~wxQzEDrG##i^{Ngq5[ un
2024-05-06 16:41:52 UTC	15593	IN	Data Raw: ef 3a 2f e7 1a 0a ef 51 c9 98 83 d2 f7 f8 39 17 1b 58 f0 a3 66 6a 2e 14 91 6e fa 76 c0 1f df dc 2d 22 bd 78 10 1e 7f 0c 76 fe 79 86 88 04 6d 37 55 f7 d4 12 91 44 4f c8 91 24 84 10 42 08 21 84 38 2c 99 fe e4 e6 97 61 bc 44 66 52 b6 63 a7 2b 33 69 35 ac 1c 4b 65 26 dd ef b8 e2 f5 75 ae b9 c0 63 f6 de 8a dd dc 7a 75 08 c5 39 42 c3 70 15 c5 ce 98 7e c6 9c 8b ae 64 59 73 c8 d6 d0 a6 e0 59 e9 c8 44 fa 76 c0 f9 df b0 4c 6c ca 70 22 3d 06 4f 5d 55 e7 a4 33 0c 53 8f 57 cb 44 f2 e0 d5 4b 24 22 89 1e 91 90 24 84 10 42 08 21 84 38 6c 99 be 7e e2 a5 c0 23 65 c7 75 94 b9 bd b7 c1 49 27 c1 ca a5 dd 01 dc 97 bd b1 ce 75 ef f4 16 26 80 3b a6 17 11 66 ae cb f0 16 42 10 1a c6 9c dd ed ee 2b ce 5d e1 9c 54 39 da 20 24 45 a4 af de 1e 39 91 52 22 d2 8b 33 f0 d8 76 d8 f9 c1 a8 Data Ascii: :/Q9Xfj.nv-"xvym7UDO$B!8,aDfRc+3i5Ke&uczu9Bp~dYsYDvLlp"=O]U3SWDK$"$B!8l~#euI'u&;fB+]T9 $E9R"3v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.11	49720	18.173.145.206	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:41:52 UTC	631	OUT	GET /rmshg/1576089489_bikertraining.png HTTP/1.1 Host: d3j0t7vrtr92dk.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rmshg.amplified.training/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:41:52 UTC	538	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 171251 Connection: close Date: Mon, 06 May 2024 16:41:53 GMT Last-Modified: Wed, 11 Dec 2019 18:38:07 GMT ETag: "9b3b6e8ceb323cc39786e6c41ad361db" x-amz-server-side-encryption: AES256 x-amz-version-id: NfH46vgFpstDy9OLOe1TKg16q1hU5WQk Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 e310f7e63a4f82a466ec0d5a5d825aa8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: c8LaH92v58caKzSEy3nSNrcMmk8Fs1M-QQx1mLYr3f54E-5MCFlDJw==
2024-05-06 16:41:52 UTC	7632	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 a3 00 00 01 40 08 02 00 00 00 9e 27 84 8f 00 00 20 00 49 44 41 54 78 9c 5c bd ed 92 24 49 8e 24 a6 aa 30 f7 c8 ac ea 9e d9 9d 9d 5b f2 78 cb 15 9e 90 8f 77 4f 73 8f c0 37 e2 6f 8a f0 cf 89 f0 84 c7 9d dd 99 ee ae ca 0c 37 03 94 3f 60 1e d5 c7 14 99 ee 9a ea 8c 2f 77 18 a0 aa 50 20 f8 9f fe f3 ff 4e 70 c2 84 07 49 90 82 44 82 36 0a 24 40 82 80 04 03 06 5c 10 29 11 44 ff b8 08 2a 44 84 49 7c ff e5 f3 bf fe 97 ff eb df ff 87 ff e5 cb cf 3f d9 06 20 b1 1f 4a f3 f1 7e fc e3 3f fc fc e5 ed cd 80 08 82 45 d3 0c 01 c6 cc fa fe bc 3e 67 8a ec c7 02 20 69 82 06 40 11 f3 9a bf 7d bf ae 95 24 68 01 28 58 34 49 42 fd 7b 86 69 01 26 61 80 c0 cc 9c d7 aa b2 c4 eb 73 fe cb 7f fb 2f ff f7 ff f9 7f 3c 7f f9 f6 f3 cf Data Ascii: PNGIHDR@' IDATx\$I$0[xwOs7o7?`/wP NpID6$@\)D*DI\|? J~?E>g i@}$h(X4IB{i&as/<
2024-05-06 16:41:52 UTC	16384	IN	Data Raw: 57 de 70 77 9b 6e c9 f6 e5 54 65 31 ab d6 5a 47 16 a8 c6 af 3b c1 79 23 bb 97 d1 7b 53 75 13 a8 02 6c a6 0b 31 4e a1 8a f3 7a 56 8f c4 d8 3d 57 97 85 55 75 82 3b af ed 40 76 19 d5 d1 9b 35 2b cb 5e 33 2b 9d 05 3a ce 38 17 22 dc 5e be 91 09 58 b9 3c 4d 25 ff ed db e7 b8 2a 86 b2 50 d5 47 d8 92 22 06 7b 93 80 10 34 23 de 5a 0f 4f cd ca 59 fe 98 73 15 b2 ea 60 0d 1e 23 f8 fe d3 fb 1f ff fc a7 3f ff cf ff fe f1 f5 cd d6 1e d7 27 ae 55 cf 95 b3 ca d7 b5 08 7a a1 32 ce a0 64 2a 76 27 70 f7 05 07 8f 71 7b 50 b1 c9 83 ab 72 77 0c aa 4e 05 da 24 5c c0 50 c4 e0 20 15 a8 f5 23 cc d4 65 7b 3b 85 c1 da 6d f8 86 c6 d5 64 dc b7 d5 62 0b 40 7d cf b7 99 98 20 f7 2c 4d e6 66 d0 0a ea 08 92 6b 65 96 b3 ed 92 5d 84 77 68 43 8a 56 bc ab b8 d1 78 a1 4a 0b dd b2 dc 86 80 4e c9 Data Ascii: WpwnTe1ZG;y#{Sul1NzV=WUu;@v5+^3+:8"^X<M%PG"{4#ZOYs`#?'Uz2dv'pq{PrwN$\P #e{;mdb@} ,Mfke]whCVxJN
2024-05-06 16:41:52 UTC	15990	IN	Data Raw: b7 12 a6 38 39 80 04 7c ea 92 63 86 8b 15 0c 85 4a b9 cf 22 ca 1e 2f 2e 6e 6e 6e 8e 8b 7f f5 ab 5f 6f 4b fb ce b7 ff f0 fe c7 1f bf fe e6 e7 ee 3d ff e2 3b 5f fa da f1 f2 82 4a 77 bf ba 7b 87 99 d7 4f 1f ff e0 9b ff f2 0f 9e 3e 3c 5c 5c f6 6d 3b 9f 9f 19 70 e7 ea 2a 95 cb b2 f8 e1 10 bd 0b f4 c5 97 c5 2e 2f 0f 82 6e 3a f7 95 1a ca ba d8 4c 04 73 94 05 8c 1d 0e d6 7c 31 5a 66 6e 7d 0b a0 47 af 0e c1 68 e6 35 67 73 ee cc 6a 6e 87 d6 a1 47 2b 53 3a 36 9a 6c 5b f3 fa 06 e7 67 3c 9f b1 0d 26 ec 9c 5c 93 69 14 11 ce e5 80 72 76 2c 06 78 83 6b 1a 73 66 02 84 a7 32 00 db 23 4d 2b 82 39 34 b7 91 9a 6a 3f 56 ac 44 e3 bc d1 9a 8c c5 42 41 26 d2 8b 82 65 b4 c5 9c ad 6c 0f 0f 7e 80 60 ac aa 2d d1 16 47 5b 8e ad 1d 7a 0a 0c b0 cc ec 8d cc e2 c0 c1 d8 0e c7 65 69 cb 1e Data Ascii: 89\|cJ"/.nnn_oK=;_Jw{O><\\m;p*./n:Ls\|1Zfn}Gh5gsjnG+S:6l[g<&\irv,xksf2#M+94j?VDBA&el~`-G[zei
2024-05-06 16:41:52 UTC	2442	IN	Data Raw: d6 71 a8 63 1d 19 63 44 d4 ed d6 ab 33 bf 69 1a eb 12 0d 65 c0 03 ea a8 6d 55 10 f8 95 67 bf f0 a7 7f e0 8f ef 9f 39 7f 66 f7 f6 8d 5b 77 2f 9d dd 79 cf e3 97 bf 76 fd d6 df fe 3f ff e5 f7 7d fb 87 df f7 e4 13 14 bd 7b ff fe a7 7f ff da 27 bf 78 ed ce 83 e3 47 1f 3a d7 95 d9 73 2f bc 79 f5 f2 65 db 3b f3 fa 8d 7b b7 ee be f9 c1 c7 2e 5e 7f e3 c6 87 bf f5 a3 2f bd f4 e2 6b af 5e 7f f7 b7 7c f4 e8 d8 fb be 5b 8d e5 ff fa 17 ff cf f7 7c e8 5b 7f ec 07 7e fc f1 2b 97 e7 fb 67 06 d6 5b 0f ee 7d f9 6b 5f fb cd 7f ff 1b cf 7f fd ab 77 1f dc 15 89 10 85 0a c2 00 28 c4 85 08 1f 86 c1 54 a3 54 33 41 58 d3 d7 4d 4a b7 ec 3f 50 04 ce 0e e2 4e 03 4a 57 58 bd 9a e6 24 d9 c8 9c 38 81 e5 e4 87 68 3c 5f 82 86 26 1a 04 19 a3 43 1c a5 44 fa 87 b5 64 e4 a3 12 41 27 45 53 d3 Data Ascii: qccD3iemUg9f[w/yv?}{'xG:s/ye;{.^/k^\|[\|[~+g[}k_w(TT3AXMJ?PNJWX$8h<_&CDdA'ES
2024-05-06 16:41:52 UTC	16384	IN	Data Raw: 08 13 05 59 73 b0 75 8e 2d 83 a8 6a 8e 4c 87 04 3d 92 a2 85 e4 3a c9 c2 2f fb 7d 9f 42 8f 43 52 ff 28 2d 40 22 4b 31 78 75 af d1 46 71 9b 20 31 8a 08 70 9e dd 9b b3 44 95 26 dd 89 a9 9b 6f fc 1e 22 e0 1e 35 d4 dd 4a d7 a9 aa 15 76 66 3a 9f ed ee ef ed 9f 81 e8 e8 6e eb 41 b7 b5 0a ea b0 e5 30 fa b8 ad 35 40 16 7a f8 a8 68 5a b8 6d 54 11 eb 4b 87 dc bb 41 31 05 82 90 a2 9a fc 5b 26 36 65 f7 af aa a6 39 10 30 a3 bf 09 cd d4 dc 76 89 c2 a3 8d f0 16 05 23 e3 06 31 ba c7 18 8c 81 50 11 29 aa 36 53 11 b4 bc 00 24 91 a8 a6 50 b5 d2 95 f9 7c 4e 9e d9 59 ec 9e 3b 3b ee 9e fb de ef 7c e6 4f 3e 73 f9 f2 99 c5 2f 7e e2 b3 9b 51 ee 1c 0d 01 7a c4 76 bb 0e e0 4d f1 5f ff 9d af 3c fe c8 95 eb 6f de a9 c1 ed 30 d8 de fe b9 fd 9d fd b9 9c d9 dd 79 fd f5 d7 3f fa cd ff e1 Data Ascii: Ysu-jL=:/}BCR(-@"K1xuFq 1pD&o"5Jvf:nA05@zhZmTKA1[&6e90v#1P)6S$P\|NY;;\|O>s/~QzvM_<o0y?
2024-05-06 16:41:52 UTC	1024	IN	Data Raw: af 5c 69 9b 36 67 de f4 dd f2 62 31 ff c6 bf 7e f8 95 ef ed ae 5e 19 fe e0 f9 e9 87 7f f4 b1 c5 a7 42 3b d9 6e 96 43 b7 15 11 44 0c 4d a3 22 66 f7 60 2e 43 d3 c9 01 0a 03 62 ce 39 a6 78 7c f5 ca db df f6 ee 67 3f f9 fb 2f df 7e c5 33 2b 61 1c 62 08 0d 02 1d 1c 9d 34 21 e4 9c 52 4e 6d d3 80 0f 2a 12 9c 6f 7d f0 be 99 0e fd 5f 39 0b e1 e4 f0 4d 34 7d 0a db 63 f4 43 4a 81 28 9f f7 db eb 07 ff f8 f4 0f 9f da c6 65 1c e6 c0 af 01 7f e8 a7 e7 22 13 d0 87 b0 7d fc f0 fa f1 9b 5e ff 63 6f 7d e8 e7 fb b5 07 e4 a2 47 b0 60 1e d4 c6 8d da fe 82 78 2f 99 55 0c 63 90 0a 19 2f 56 45 2d e5 53 a8 69 66 5d a7 46 4c 10 02 1b 06 d6 8a a0 9a 38 df 6a 53 a8 d6 a9 0c 50 06 87 18 eb 8c 58 7c 2e 68 0c 0f 4a 99 aa ec f6 50 d9 7e 5b 6e 88 c4 9c 87 2e 6e 87 41 99 cd 1c 0a 6f df 99 Data Ascii: \i6gb1~^B;nCDM"f`.Cb9x\|g?/~3+ab4!RNm*o}_9M4}cCJ(e"}^co}G`x/Uc/VE-Sif]FL8jSPX\|.hJP~[n.nAo
2024-05-06 16:41:52 UTC	16384	IN	Data Raw: 0a 59 d9 1a 4e 2c af 34 05 27 02 32 b0 57 c0 22 e3 34 bd 80 9a af 8d 07 64 00 0f 24 d6 ee 8f a0 e8 cb f4 24 28 85 59 52 9b 1b 0a 5a fb b4 68 24 b4 4b 75 9d 48 80 35 eb 68 ba a0 a5 e0 06 88 a6 4b b5 b9 41 58 95 56 80 52 86 77 d5 68 a3 40 7f ad 1d db 2f 7d 1d b9 8e 80 b5 8c 08 a8 f8 b0 a7 f7 3c 77 0b ae ce f4 15 c1 a9 e7 66 f2 fd e1 d6 0b a9 17 96 84 7d 8e 71 99 19 10 0f 8e 0e d7 e7 e7 39 47 04 40 91 ed 66 c3 39 07 87 0a 30 e4 41 84 11 c0 3b 97 85 1d fa ed 30 4c dd 26 72 ee 87 a1 69 26 07 b3 99 df dc dc fe f2 3f ec 0e ff 2a bc fd a9 93 27 0e d6 5f f2 cd f9 37 d6 d3 f9 73 89 05 40 a7 6d 0b 55 d1 0d 00 20 ea 10 45 98 c8 1c 3e 04 10 c8 11 28 a6 9c 43 98 a8 9a f5 9a 46 4e a2 30 99 4c 44 a5 f1 9e 0d 16 63 f4 2e 38 ef fb a1 ef ba 4d 70 61 32 3b 34 16 f8 d4 c1 3f Data Ascii: YN,4'2W"4d$$(YRZh$KuH5hKAXVRwh@/}<wf}q9G@f90A;0L&ri&?*'_7s@mU E>(CFN0LDc.8Mpa2;4?
2024-05-06 16:41:52 UTC	16384	IN	Data Raw: f8 c6 dd af 78 c5 77 9e 58 39 f1 ec d3 8f 1f 3c 74 e5 ca ea 35 07 0f 5e b1 ff c0 21 61 cf ce 2b 45 75 d3 0e 06 c3 bd 0b bb 9b 71 b3 ea 9a b2 2c 07 f3 73 8f 3c f4 f0 ad 37 5d 79 f8 9a 9b be 76 cf 37 8f 1c dc 7b f7 3d 77 7d ec bf fc 11 29 84 d0 53 50 44 45 a5 15 31 da 89 03 91 8b 48 88 80 a1 f7 29 82 4a 30 17 98 2f 87 18 bd aa 1a 5c 73 cd f5 4f 3c f9 f8 a1 43 87 a7 f5 74 7e 61 61 61 7e 61 3c 1e 6b c2 e9 64 62 9b ba 2a ab 98 f2 45 0a 00 24 72 93 e0 04 40 20 f4 22 4a e9 d4 a4 21 66 41 06 7e 89 14 e3 25 b4 d6 61 d5 f8 d0 d1 19 c0 18 83 48 cc ac b5 f6 d6 4e 27 d3 e5 c5 e5 95 b9 b9 f3 67 57 db 27 bf 79 f2 db 0f ed 3d 78 d5 95 af 7d ed 9b 8e de fc c5 a7 1f 53 a4 49 04 41 fe ea ec f1 ef 3d f3 dc eb 5f f6 52 e1 fa fc 37 1f 1e 1c 3a 60 96 17 1f 3c 77 6c c3 b6 fb 26 Data Ascii: xwX9<t5^!a+Euq,s<7]yv7{=w})SPDE1H)J0/\sO<Ct~aaa~a<kdb*E$r@ "J!fA~%aHN'gW'y=x}SIA=_R7:`<wl&
2024-05-06 16:41:52 UTC	16384	IN	Data Raw: 36 2a 51 37 ba a9 4d 40 00 24 f4 be 75 05 b7 dc 3a a8 18 4a e0 19 38 00 24 4d e9 1d 95 30 ad a4 69 01 05 88 c8 91 48 90 c2 4b 13 8e 4f ab f7 8f f6 5c b5 fb 12 77 e4 f0 f0 b1 1f 2a 60 81 9e 45 e6 f4 74 21 18 80 66 0a 8a 22 5f e0 98 46 a7 6d 50 07 26 39 73 26 ab 31 9d c0 ac 3d 1a 32 65 1d 02 48 df 06 fb 4f 97 b4 60 d0 d7 45 ca d1 be 9f ac 22 00 00 32 87 10 18 10 7d 66 db 93 13 99 e7 46 c4 cd 83 51 ec 31 20 38 95 31 90 79 ff d2 a0 51 00 80 92 37 b7 ed 95 bb 84 29 2b e5 22 50 88 fd 5f 73 31 ce 24 bb 3b 3d c2 8a 23 21 80 e5 43 e4 4c 21 31 81 39 ba 97 ad ab ce 73 d2 1c ac 45 94 2c 1a f1 95 14 60 48 5c b5 47 6d 34 00 11 d7 95 35 4f 17 3a 56 04 dd 08 65 cb 28 f9 d3 85 00 63 6d f7 b4 e1 18 77 08 e1 77 58 d9 e3 8f db 9a 94 7e cd 60 05 b1 db 8a d6 41 6b 1a 64 91 be Data Ascii: 6Q7M@$u:J8$M0iHKO\w`Et!f"_FmP&9s&1=2eHO`E"2}fFQ1 81yQ7)+"P_s1$;=#!CL!19sE,`H\Gm45O:Ve(cmwwX~`Akd
2024-05-06 16:41:52 UTC	16384	IN	Data Raw: 5e 78 e6 a9 ff f0 7f fd fb 6a 9a 22 02 19 23 51 68 6d 54 5a 01 46 60 6e ae 2c 2f 2c ce c7 5c 07 00 77 dd 7d cf e8 d8 78 22 04 02 0b 60 29 65 92 54 84 10 5f 7d f0 2b 79 9e af ee 26 1b 66 29 cc 70 ac be da bf 12 f3 ad 37 df 3c 3a 39 39 d8 3c d9 0b 39 2f 5e ad bd e8 83 65 0e 34 04 e2 fa 1d 9b 3f f5 07 ff 2a 2f cc f8 e8 f8 a7 3e f5 87 8d 56 6b d4 e8 bc c8 77 ed da 3b 31 b9 8e 85 c8 b2 6c db d6 ad 6f fd 85 b7 09 06 ef 29 13 56 5b f7 4b ef a4 1b 30 93 ed a7 12 a5 bf 11 31 19 46 95 be e9 be fb 3b 59 2f cf 7a 4f fd e4 b1 66 a7 ed c9 71 18 7a ca 19 18 d0 2d ca 83 88 b4 36 9a 0c 00 28 25 94 92 a1 60 71 80 42 e2 d5 f7 c9 a4 31 49 7b b8 01 5f e4 c1 81 33 dd 33 44 36 04 e2 1a 97 0d 6f e3 c7 13 36 95 8f 28 28 60 fe ba 61 54 4e ad b6 1d 84 b5 b7 df 42 e9 06 a0 10 4a 25 Data Ascii: ^xj"#QhmTZF`n,/,\w}x"`)eT_}+y&f)p7<:99<9/^e4?*/>Vkw;1lo)V[K01F;Y/zOfqz-6(%`qB1I{_33D6o6((`aTNBJ%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.11	49721	18.173.145.84	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:41:52 UTC	391	OUT	GET /rmshg/1576085320_RMS%20Site%20Logo.png HTTP/1.1 Host: d3j0t7vrtr92dk.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:41:52 UTC	536	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 9838 Connection: close Date: Mon, 06 May 2024 16:41:53 GMT Last-Modified: Wed, 11 Dec 2019 17:28:39 GMT ETag: "0ec5dfc44a443bc30123721fefb83048" x-amz-server-side-encryption: AES256 x-amz-version-id: ccz0iq_fol8ZZFhP0MBvzNRhbeF.eQOs Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 0e2299d7e48f77f171e85639c3f0534e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: btuvsWdzzYVOE08DWpLzSzN4zlMgNrYjVXkAgKQv9eNYHKGROdLWyQ==
2024-05-06 16:41:52 UTC	9838	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b2 00 00 00 48 08 06 00 00 00 52 83 af 17 00 00 20 00 49 44 41 54 78 9c e5 7d 7b 7c 14 45 d6 f6 d3 3d 33 b9 5f 21 21 09 b9 11 92 10 20 21 42 60 51 94 08 02 ba ee 0a a2 a8 28 88 37 56 56 45 d7 75 bd ad 8a 2b e8 2a fb ae a0 ec 7a fd 54 14 96 4f 65 61 15 91 45 91 3b 82 80 ca 5d 2e 01 12 20 40 12 42 ee 99 dc 93 99 ae f7 8f 99 ee a9 a9 54 55 f7 00 be ef fe be ef f8 8b dd 5d 75 ea 9c 53 a7 4e 9d 7a aa 66 a6 51 08 21 04 00 08 21 50 14 05 97 92 58 99 32 1d 5e 33 2e a9 0d 3f 47 9f 02 d1 f1 bf a1 ff 42 75 fe 4f b4 d3 79 79 6d ac c8 91 f1 a8 fa 0d eb 0c 99 30 bd 9e e6 93 b5 91 c9 10 e9 17 e9 60 db ca ea 75 a7 b1 e5 22 5b 79 f2 65 e5 ac 0e d6 26 33 9f 9a f9 8c d7 37 b6 5c d7 a1 d7 d3 cf 3c fb 65 3e 94 5d 79 fa Data Ascii: PNGIHDRHR IDATx}{\|E=3_!! !B`Q(7VVEu+*zTOeaE;]. @BTU]uSNzfQ!!PX2^3.?GBuOyym0`u"[ye&37\<e>]y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.11	49722	18.173.145.84	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:41:52 UTC	377	OUT	GET /images/loading-small.gif HTTP/1.1 Host: d3j0t7vrtr92dk.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:41:52 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 35215 Connection: close Date: Mon, 06 May 2024 16:41:53 GMT Last-Modified: Wed, 30 Mar 2022 08:02:21 GMT ETag: "aecde3c3e0227b14798485942c61b819" x-amz-server-side-encryption: AES256 x-amz-version-id: sSPRRGSRbJwj6V1AT84aT1x5uH8.raNw Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 a6d85ea59bcdf706b41bccb78ec2f8f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: o3OTbZkexOlvpkUcP-30u7gqMrQxtmyeHWF-JT2g07k4vaI4kvAaVA==
2024-05-06 16:41:52 UTC	1489	IN	Data Raw: 47 49 46 38 39 61 a0 00 4e 00 f6 70 00 b5 b5 b6 85 85 86 78 78 7a 8c 8c 8d f2 f2 f2 60 60 62 81 81 82 d8 d8 d8 65 65 66 f6 f6 f6 74 74 76 bd bd be c5 c5 c5 9a 9a 9b b1 b1 b2 fc fc fc a6 a6 a7 7c 7c 7d f9 f9 f9 ef ef f0 fa fa fa a0 a0 a1 f4 f4 f4 af af b0 a1 a1 a2 b7 b7 b8 a3 a3 a4 d3 d3 d4 c3 c3 c4 dd dd de b0 b0 b1 bb bb bb 94 94 95 cf cf cf e9 e9 e9 cd cd ce a4 a4 a5 9b 9b 9c ab ab ac bf bf c0 7f 7f 80 d5 d5 d5 41 41 43 ec ec ec a9 a9 a9 b8 b8 b9 89 89 8a 9d 9d 9e 91 91 92 e6 e6 e7 56 56 58 ea ea ea 4a 4a 4c 58 58 5a 4c 4c 4e ee ee ee 54 54 55 d6 d6 d6 df df df 5c 5c 5e 6c 6c 6e 45 45 47 da da da d4 d4 d4 ae ae af 8e 8e 90 70 70 72 50 50 52 7a 7a 7b 46 46 48 d0 d0 d1 48 48 4a 72 72 74 95 95 96 d2 d2 d3 e0 e0 e1 5a 5a 5c 6a 6a 6c c7 c7 c8 4e 4e 50 63 63 Data Ascii: GIF89aNpxxz``beefttv\|\|}AACVVXJJLXXZLLNTTU\\^llnEEGpprPPRzz{FFHHHJrrtZZ\jjlNNPcc
2024-05-06 16:41:52 UTC	8192	IN	Data Raw: 37 36 35 34 33 32 31 30 2f 2e 2d 2c 2b 2a 29 28 27 26 25 24 23 22 21 20 1f 1e 1d 1c 1b 1a 19 18 17 16 15 14 13 12 11 10 0f 0e 0d 0c 0b 0a 09 08 07 06 05 04 03 02 01 00 00 21 f9 04 09 04 00 70 00 2c 00 00 00 00 a0 00 4e 00 40 07 ff 80 70 82 83 84 85 86 87 88 89 8a 8b 8c 8d 8e 8f 90 91 92 88 75 50 2a 97 98 99 9a 9b 9c 9d 2a 5a 03 60 93 93 04 01 9e a7 a8 9d 56 61 a3 8a 62 a9 b0 b1 b2 98 11 12 92 16 3c b3 ba bb 9b 62 91 5f 5a bb 1a ad 85 1c 36 bc 98 3b 2b 88 5b 34 b3 3b 1d c4 84 2d 5c ba 5a 5f 8a 26 b3 0e d2 91 77 43 c8 05 a2 dd e4 82 19 b3 17 88 c7 b1 10 e5 d2 a6 bc ed ee 93 10 b2 36 89 08 b3 0a f3 89 26 ce 9a 34 58 18 52 d2 03 19 8d 10 fc 10 a1 98 c5 a3 91 19 64 3b 8c 48 5a 80 03 d9 25 6c 88 0e ac b3 a8 c5 85 08 49 07 f2 f1 92 d2 6a 4b 14 8b 28 3b 35 59 26 Data Ascii: 76543210/.-,+)('&%$#"! !p,N@puP*Z`Vab<b_Z6;+[4;-\Z_&wC6&4XRd;HZ%lIjK(;5Y&
2024-05-06 16:41:52 UTC	8192	IN	Data Raw: 00 06 a8 a4 54 de 39 ca 31 24 aa 0c 34 04 0f 11 f8 30 96 1a 11 ad 97 c2 a8 9d a8 c5 c0 d9 47 16 30 5c d7 b9 43 44 a3 10 f3 69 32 69 71 f1 91 8e 01 f9 35 e1 07 2b 56 95 e4 d1 25 10 25 57 12 13 7b 20 92 42 7e 25 d9 c0 d0 25 5b 2c 51 85 11 d3 a9 92 c2 4a 58 a4 82 89 11 3b 08 55 03 68 85 1c f0 db 4a 44 68 e7 53 23 51 94 d4 87 2f 79 24 a6 13 13 33 10 d2 41 77 72 7d b0 e2 23 4b 28 58 0f 0b da 88 01 e1 44 05 f0 16 46 6a 34 21 10 c6 ff 8e 8f cc c1 d1 0b f0 84 81 80 4e 56 58 10 43 6e 2b 0d c0 0b 93 8d 3c 80 23 40 06 14 94 40 5f 34 f1 10 a2 52 17 70 f9 48 15 13 ed c0 1c 3c 5d a8 a1 1a 31 36 f0 a1 e6 23 49 24 a4 c5 08 3e 5d 21 8d 6a 38 64 73 a7 23 56 24 14 e6 8a 62 88 d6 d9 0e 24 0e ea cc 9f f5 68 51 06 93 23 0c 19 57 01 2a 3a 8a 08 1f 09 09 a1 a6 12 96 7a 55 9f a6 Data Ascii: T91$40G0\CDi2iq5+V%%W{ B~%%[,QJX;UhJDhS#Q/y$3Awr}#K(XDFj4!NVXCn+<#@@_4RpH<]16#I$>]!j8ds#V$b$hQ#W*:zU
2024-05-06 16:41:52 UTC	1024	IN	Data Raw: df 1c 2f f0 31 45 6d ab 3f d1 0b cc 8c 80 fc 44 51 b0 5f b1 07 ef db a3 fc 20 3e 28 5f 28 0c 90 80 55 10 60 42 45 51 40 9d b8 66 23 fa f8 e0 10 0d c2 52 08 2e f1 00 3d c8 81 29 51 f0 90 39 c0 a0 b8 48 e4 60 55 13 19 d1 21 e4 e3 12 81 e8 00 12 5b 58 00 15 a8 62 06 fd 61 e2 0b 30 10 4e 0f e2 40 86 47 19 04 81 26 51 50 22 f6 56 c2 28 7c 00 0e 88 08 83 06 ee 67 92 29 7c 8f 19 5e a8 00 f7 44 41 03 18 fc a0 7a 85 20 c0 02 04 20 40 5a c0 27 11 5b f8 1d 7d a0 10 80 3e 38 20 03 e4 22 9e 56 82 00 45 66 d4 6a 1d 72 88 40 05 ae 90 01 07 f4 21 00 50 a8 62 31 a6 e3 88 d4 c8 c6 25 7d d8 87 b8 ee 58 0c 1a 80 29 11 0b e0 a3 42 b8 30 3b 73 e4 81 4f 82 54 41 5e 22 91 84 44 d6 83 52 05 c9 80 23 43 91 2a 4b 04 60 92 d4 90 01 a9 f6 11 c1 44 06 60 f8 2e b1 c3 64 28 b8 82 11 10 Data Ascii: /1Em?DQ_ >(_(U`BEQ@f#R.=)Q9H`U![Xba0N@G&QP"V(\|g)\|^DAz @Z'[}>8 "VEfjr@!Pb1%}X)B0;sOTA^"DR#C*K`D`.d(
2024-05-06 16:41:52 UTC	7544	IN	Data Raw: c6 0c ff 1f 3e 1e 44 03 22 5f 80 65 13 02 05 f6 f2 41 44 07 69 f1 05 21 67 70 d4 80 3b 22 c4 81 10 11 87 4c 00 9a 4d 03 48 e0 8e 03 1c 5d 26 48 17 ad 21 04 5c 3e 12 04 e6 cf 68 85 e4 d1 84 4d 5c 98 d0 50 10 12 e1 c0 90 11 12 ed 70 a2 3b 2f d0 d3 84 55 82 78 31 63 49 34 38 71 11 05 25 1e 64 84 20 73 48 a4 20 48 6c cc e2 0d 0e e4 15 02 68 4b 72 08 04 52 0a 48 16 a3 86 20 95 d2 53 64 50 63 34 49 0c 14 55 fe 01 81 4d 35 6c 19 d4 14 08 35 f1 87 05 a9 12 13 63 50 7f ac 00 c3 84 3b 5c 10 d9 20 62 a4 c5 22 b1 3a 04 2b 4a 0f 09 54 81 10 0f c4 12 b2 c5 01 0c f0 11 aa 21 a5 b5 54 c3 1e d9 0a 82 04 42 55 78 80 90 03 e5 46 92 47 ab 08 41 71 5d bb 00 20 74 01 08 08 59 d4 ee 23 2e b4 24 ef be 7f dc 20 6d 28 20 20 46 0f 13 00 3b a2 6e 49 3b cc 0b f0 99 f4 10 41 9b ab 09 Data Ascii: >D"_eADi!gp;"LMH]&H!\>hM\Pp;/Ux1cI48q%d sH HlhKrRH SdPc4IUM5l5cP;\ b":+JT!TBUxFGAq] tY#.$ m( F;nI;A
2024-05-06 16:41:52 UTC	8774	IN	Data Raw: a0 03 a4 04 2c 72 ce c4 d1 a6 91 0f b1 41 71 5c a1 00 e9 cb 80 f2 2a 71 c1 1a 22 1c 20 e7 4d 01 4a 5c 02 47 12 a1 25 84 c3 12 88 74 a0 9e 6a 15 2c 07 89 0f ae a9 24 44 23 19 34 18 84 49 a9 f8 c0 99 4e 43 b8 57 48 18 38 04 25 44 0c ab 6c 91 84 81 12 8d 60 5f 13 c5 ec d0 51 2f 5b bc 00 a3 48 43 54 34 48 0c dc cd 74 84 07 cc b4 d0 a0 37 1b 3a e2 03 ff 0b 41 b8 d0 00 1f 52 31 63 c7 84 22 c9 20 82 20 33 6c b5 12 15 36 31 c3 c1 91 d3 f8 d0 93 23 2b 40 b6 d2 0e 37 4c 40 85 4e 06 58 b8 cc 07 3b ae 33 c0 98 8e 50 e0 82 4e 50 8c f8 5a 05 0d 35 a0 11 0d 5f d1 d9 08 04 71 5a 56 c4 02 1e 79 61 e6 3f 37 0a ca c8 02 60 aa f5 c4 06 3d e9 10 e9 30 2e 38 ea c8 08 89 29 86 83 89 3d c1 20 91 0c 9a 3a 72 00 95 77 d5 c0 22 9d 22 5c 3a cb aa a5 46 88 ea 58 72 80 4a a7 14 12 f9 Data Ascii: ,rAq\*q" MJ\G%tj,$D#4INCWH8%Dl`_Q/[HCT4Ht7:AR1c" 3l61#+@7L@NX;3PNPZ5_qZVya?7`=0.8)= :rw""\:FXrJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.11	49723	18.173.145.206	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:41:52 UTC	632	OUT	GET /rmshg/1576785827_drivertraining.png HTTP/1.1 Host: d3j0t7vrtr92dk.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rmshg.amplified.training/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:41:53 UTC	538	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 224354 Connection: close Date: Mon, 06 May 2024 16:41:54 GMT Last-Modified: Thu, 19 Dec 2019 20:03:45 GMT ETag: "0cc7ab391f7504b777ae1aeeaf66b3f2" x-amz-server-side-encryption: AES256 x-amz-version-id: NUtnKffyEhEJ2DzPP3r8YAkbxH.AWVpj Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 ba5631812fd92cdae7b4685e6efbc3c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: zU49eBwTbUg_zC1wyA6synp8TqjO-T183YwF9xyr5uoCk9YQJV0f1A==
2024-05-06 16:41:53 UTC	15846	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 01 3f 08 02 00 00 00 11 de 87 38 00 00 20 00 49 44 41 54 78 9c 4c bc 59 b3 6d d9 59 25 36 c6 f7 cd b5 9b 73 ce 6d 32 ef 55 de cc 54 a6 12 29 3b a1 26 11 c8 88 46 a2 04 a2 29 b0 31 44 19 57 f9 dd 2f fe 0f 7e 76 38 fc 5a 11 76 38 ec 32 0e b0 5d 65 1b 53 18 6c a2 a8 06 10 02 44 81 0a 28 01 a2 93 10 12 28 a5 ec 6f 77 9a bd f7 5a f3 1b c3 0f 73 5f e1 fb 70 e2 9c 7b ef 39 67 ef b5 e6 fa e6 68 27 3f f1 63 3f 95 2d 1a 43 24 51 53 04 5d 72 90 36 68 b8 81 dd 95 a0 02 34 02 94 45 9a 0c c0 00 0c 12 20 93 06 20 59 08 d2 10 0d 21 81 92 04 13 ac 2a c3 ae ea 4b ef bd 2f fd 50 f3 b2 f4 de 97 c3 3c cf ea bd 7a 95 05 80 20 19 88 98 32 db 94 99 99 ad b5 98 18 01 94 3a 4a 55 ea 2e 57 75 d3 11 19 24 23 22 b3 45 Data Ascii: PNGIHDR?8 IDATxLYmY%6sm2UT);&F)1DW/~v8Zv82]eSlD((owZs_p{9gh'?c?-C$QS]r6h4E Y!*K/P<z 2:JU.Wu$#"E
2024-05-06 16:41:53 UTC	2026	IN	Data Raw: 20 57 0e 5e 7d e7 d5 2f 5f bb 36 dd b9 be 78 e0 fd 3f f5 c0 47 7f fc e5 57 bf bb 3b 3c fa e4 27 3f 7d e7 e4 f0 ce ad 1b d0 be 57 d9 d6 cd cd 3b b8 7a e9 0a 22 6e de bd 75 e5 d1 07 cf df 77 f5 95 e7 9e 79 eb c6 ab 39 3c b0 10 d1 dc 1d 90 e7 7a a5 91 1a 01 c9 8f 1a ae e1 0d 84 39 67 aa a9 c5 5c 40 31 0b 8e 04 1a 67 7e 66 40 1b 5b 52 d9 59 74 ec 7b a8 9c 3b b8 f8 9b ff e0 ef f7 2a a4 b4 f9 7b 9d 29 3f 67 b1 5e 11 51 14 94 e8 3a 01 8b 92 44 e9 50 34 e8 ca 4e 24 8a 42 b4 68 bf e8 94 7d b7 e8 c7 65 37 f4 0b 19 ca d8 93 18 cb a0 a5 74 e3 b8 b7 58 11 51 d6 e7 07 ed 40 1b c7 3d ed bb 6e 1c fb 7e 39 0c 63 d9 5b aa 70 77 e7 d6 dd a7 7e fb ee 53 bf c6 e3 1b fb ac 31 46 4e ea 38 ee f7 7d 2f 3e 59 3b 85 9b f5 d2 dc 2d d4 23 3c d8 1a b6 93 b7 6a b5 86 99 6c ab 44 d8 ed Data Ascii: W^}/_6x?GW;<'?}W;z"nuwy9<z9g\@1g~f@[RYt{;*{)?g^Q:DP4N$Bh}e7tXQ@=n~9c[pw~S1FN8}/>Y;-#<jlD
2024-05-06 16:41:53 UTC	1024	IN	Data Raw: 73 4d 46 e2 aa 23 a2 68 49 d9 a4 b5 96 fe 84 b3 33 1c 3c 69 3b e1 f3 06 22 e9 6d 13 02 45 f2 37 48 e3 4a ac 56 cb 27 3f f2 91 8f 3c f1 e4 30 0c cd 1d 11 82 30 30 cc 2d a7 9b 66 e6 6e 33 6a 23 7f c4 a0 b3 7a 73 33 0f 8f 6a 39 7c 6d cd cd 5a 3a c1 d3 df e3 96 64 ee 94 c7 c2 e7 ff 64 44 70 46 46 10 9a 73 c7 08 39 cb 40 5b 04 c2 ce 08 ad 41 ba a5 be 0a bb 37 8d 46 88 c3 18 b4 3c 15 e6 cf 94 d0 95 74 b6 0b e9 a6 73 61 d2 7c 3f 2a 11 8d 24 2c 32 26 91 31 28 cf 8a e2 dc f9 d3 b3 99 1f 25 80 cc 6b b2 e4 dc 13 19 fa 94 20 e6 f6 84 33 2a b9 08 b3 2b a4 cd ff 62 62 56 23 f7 0f 97 90 a0 47 44 e4 5a 9f 86 3d 47 e2 9e 13 3c ef d6 ac b5 a9 ee ea 6e b7 39 dd 6c 76 9f fa f4 8f 5e ba 72 b1 1f ba a2 45 c6 fe c2 fa 60 e8 87 dd 6e 17 e1 d5 ad eb 06 db 6d 4e b7 5b 9b 76 f9 fa Data Ascii: sMF#hI3<i;"mE7HJV'?<000-fn3j#zs3j9\|mZ:ddDpFFs9@[A7F<tsa\|?$,2&1(%k 3+bbV#GDZ=G<n9lv^rE`nmN[v
2024-05-06 16:41:53 UTC	16384	IN	Data Raw: b4 69 27 8c 5d dd f5 dd d8 47 6c dc d9 1a 23 61 5c 79 7c 08 67 94 60 d0 b3 57 3a b3 f5 11 21 22 ef b9 f0 75 3b 7c f6 73 5f f7 8f 3d 7e ee c1 0f fd 27 eb 83 f7 3c f5 27 5f 78 f0 be 87 1f fe c0 07 6f de 78 67 3a 39 35 70 6f b5 fe f6 77 5f b8 ef f2 a5 dd 76 77 7c 74 78 e3 ed 6b 0f bc fb 3d e3 72 7c f9 d5 97 4f ef de 7d f4 83 4f 8e 7d ff d6 9b af 6b 29 57 2e 5e 8e 66 e3 62 e8 f7 96 58 94 ce 50 a4 33 37 01 ab a1 53 36 33 e6 d5 cd 23 c8 08 63 6a a5 f3 f9 c9 85 e2 41 89 f0 a4 fd 35 04 cc cd a7 56 f7 f7 0f b0 18 bf fa fb ff e2 e8 e6 ad 52 54 40 00 69 d0 11 f6 9a ce 1b 89 22 85 42 88 84 4a 21 54 8b 20 44 b4 08 20 21 5d af 45 bb 7e 24 30 ac 56 83 f4 3a 76 fd 6a bf 94 32 f4 7d e9 fb d5 7a 6f d1 2f fb 8e 8b d5 b2 ef 46 ed 86 71 31 76 43 3f 8c ab 7e e8 fa be 5f ec 9f Data Ascii: i']Gl#a\y\|g`W:!"u;\|s_=~'<'_xoxg:95pow_vw\|txk=r\|O}O}k)W.^fbXP37S63#cjA5VRT@i"BJ!T D !]E~$0V:vj2}zo/Fq1vC?~_
2024-05-06 16:41:53 UTC	16384	IN	Data Raw: f7 f6 0f 67 80 ba 5a 29 36 e5 29 4f d3 94 b7 70 1c de 79 cf dd f7 be 98 da e6 e8 f6 51 df 2f bb ae 3f d8 df 6b 9a 7a 67 b1 ac da 36 55 d5 b2 6d b9 96 7b 8f ee ff c1 27 7e eb 0f fe ed af bd f5 d2 d7 cb b4 ae 98 9d bc ed f6 0f ef 3e bb d8 3d 5c 3f 79 f7 f4 de 9b 15 0c 65 4c 64 22 a9 41 d2 8b d3 b3 c4 7b 55 4a 9c a7 69 22 aa 2a 51 86 0a 79 45 22 54 90 2a 01 25 07 c1 2b 61 26 67 90 16 68 4e 79 b4 f5 e9 54 3a 4f 0d 57 e3 90 2b 48 25 32 5c 39 6f 84 85 d2 44 20 af 1a 42 5d ce ae b6 e7 c3 f6 32 8f eb 32 5d 95 3c ea 76 43 39 db 38 e8 98 7d 9c 68 1a 90 4d b3 fa 98 69 63 50 a3 69 2a 39 83 ad 2d 45 4b c9 93 da 5a 79 73 7c 9e 0e da 87 df fe 66 55 2d 9e fb e0 c7 eb ae ed a6 21 8f 8d 9a 06 18 6c 7d 7e 6e 24 3f fd 5f fc a3 0f ff d8 9f df 9c 0d 7a 75 75 7c b9 7d e7 d1 5b Data Ascii: gZ)6)OpyQ/?kzg6Um{'~>=\?yeLd"A{UJi"QyE"T%+a&ghNyT:OW+H%2\9oD B]22]<vC98}hMicPi*9-EKZys\|fU-!l}~n$?_zuu\|}[
2024-05-06 16:41:53 UTC	16384	IN	Data Raw: a6 14 bc 3d 45 9f 03 b1 a9 09 7b c0 41 3a 26 1c 85 9a 88 0c 96 45 88 85 99 4c 58 c6 7f fb 50 39 c3 d5 d4 30 ca 2f c9 13 a5 80 6f 89 e2 14 17 b8 f7 fd 7c b2 be 69 cb b2 77 e7 8e 08 8f b1 66 e0 62 e5 9d 1f ff c4 eb 1f 7d 55 5d 0c fd 91 9c 79 e3 13 cb 93 c5 e5 ab 2f cf 52 7a fc c1 47 1d da e6 76 18 0a f1 58 46 b7 5c 2c 7c 28 37 6e 5c 9b ac 4d de ff d1 9f fb fc 9f fc 87 7b 2f 5f d9 5f 2e 25 4b a5 86 ac 2a 52 86 ba 34 c3 30 4b a9 4d 4d 5b fa 65 c3 0a 22 36 f2 32 ec 16 3a ee b1 d6 15 37 6f 5b 11 b5 a5 b9 10 2f ab 57 d2 cc 96 99 12 60 e6 73 78 43 12 03 66 b0 ce 43 75 c9 9a c8 fb 8a db 0b eb a6 3e 15 3e 5e 92 30 c0 5e 8b c3 79 18 cc d9 3a 5a dd 55 6e 30 54 62 86 32 93 80 58 78 28 ae 63 87 34 01 3c a8 55 27 33 23 26 03 aa 46 e3 1b 22 f2 5d 89 0c 5e 41 31 c9 88 7b Data Ascii: =E{A:&ELXP90/o\|iwfb}U]y/RzGvXF\,\|(7n\M{/__.%K*R40KMM[e"62:7o[/W`sxCfCu>>^0^y:ZUn0Tb2Xx(c4<U'3#&F"]^A1{
2024-05-06 16:41:53 UTC	16384	IN	Data Raw: 38 3f b9 9a c1 9c b6 32 fc fb 17 ff d8 2f 5e 9c 5f 1c 95 69 75 ba de 1f e6 c3 a1 ed bb 35 47 4b e9 88 47 5a d7 59 ef 61 e6 70 37 f3 80 75 67 a2 cc de 07 37 32 5b e4 18 8e e5 49 e5 09 4b 73 3e b7 ec 54 dc 6e e8 d1 81 58 4d 75 bb df 03 31 cf 2d 2c 07 e9 8c 1a 90 14 49 02 54 49 bf b7 5e 02 2a f5 db 7e c7 27 6f 1f df 7f ee 7d ef 9d 56 7a b5 bb f8 fc bf f8 95 2f fc ea af ec 9a 9c 37 9c 37 5e 1a 8a 48 c9 08 15 20 9c aa ba 9a 56 ab d5 b4 9d 0f 7d 6e 52 54 45 c7 ea 59 d4 dd 73 b9 5b a5 4c aa 9b a9 5c 6e 1b a0 87 79 df dc d6 ab 55 6a 78 b3 cd 5b d5 ba 9b e7 34 12 27 64 9d be 54 c2 52 8b 30 58 a6 64 a0 67 bb 4d 85 98 ab 2a 84 a1 aa 10 08 2d 3b 4f 92 75 a4 90 3a 81 52 a5 4e ab 93 db 3a ad a7 a3 0d 95 84 59 3b dc 7d cf fb dc da 83 b7 de a9 f5 e8 c5 0f 7f e2 de dd db Data Ascii: 8?2/^_iu5GKGZYap7ug72[IKs>TnXMu1-,ITI^~'o}Vz/77^H V}nRTEYs[L\nyUjx[4'dTR0XdgM-;Ou:RN:Y;}
2024-05-06 16:41:53 UTC	2048	IN	Data Raw: 2c 58 01 22 a7 ec 4c 22 60 c9 2c 95 d0 c3 89 53 80 0e 91 20 d7 a5 8e 98 d4 34 e5 0e 48 94 39 a7 bc 18 16 c3 b0 3c 3c b8 b3 5d 1f 01 74 fb ca 0f 37 1d bf e9 e9 f7 1c be f2 c2 14 80 a4 d6 10 f4 16 f7 6e b5 b7 3a bd 9b 91 58 c4 d5 8c 18 44 a6 d5 aa a7 94 d8 50 c9 b5 f9 98 6c 54 38 e3 42 4f 1b f3 0a 4a 00 58 34 90 13 06 83 23 ff 3b 3a 03 e3 e7 8d f3 7a 8c 71 06 b9 16 72 cb ed 7e 40 0d c4 8c 5b 1f 45 2f 91 f6 e0 16 73 9e c9 23 5d 07 c4 49 52 92 dc 65 aa 16 a4 7d cc 6d 4a b4 ec 96 ab c5 d0 f7 5d 06 46 ad c7 9b cd 71 99 aa 35 fa 45 88 49 40 24 c4 22 10 62 06 7b 62 62 12 27 90 a4 94 33 a7 4c cc 0c 26 28 83 d4 1d e6 43 64 b9 b5 de 98 50 83 cc a7 1b 96 70 e2 71 d0 a8 30 6f c1 f4 8d 9a 91 67 3e f4 91 5a 54 6b 51 0d 84 a3 86 5b af aa 46 39 77 89 fc e3 b6 3f 37 60 99 Data Ascii: ,X"L"`,S 4H9<<]t7n:XDPlT8BOJX4#;:zqr~@[E/s#]IRe}mJ]Fq5EI@$"b{bb'3L&(CdPpq0og>ZTkQ[F9w?7`
2024-05-06 16:41:53 UTC	16384	IN	Data Raw: b0 8c f8 25 a3 95 67 a0 c0 e4 9e ae 2e 1e 17 51 35 05 01 14 00 50 11 2e 06 17 82 cc 53 76 2e 90 74 32 32 58 6a a5 28 81 2a 33 5b fc a4 e4 ee 24 29 c8 31 05 53 b8 8f 09 70 12 20 12 7f dc 3d ac a3 0d 78 f7 90 77 10 05 12 d6 96 e9 96 68 da cc 37 4c 24 89 32 47 7a 23 91 4e 9c 77 09 2e 4e 66 aa 3a d0 76 31 f8 60 38 a8 7e 50 68 d2 46 e2 a9 13 13 75 20 10 cc ac 92 90 92 a3 92 f2 48 ee 44 5f fd d4 9f fe 37 57 5e fe af ff bb ff f9 5b 5f fd fe f7 7f f8 47 7f ef 3f fb 2f b6 9b f2 7f ff c1 ff 23 e6 df f8 da b3 4f be e9 a9 fb 1f b8 fc ea d5 97 85 69 37 14 00 dd d0 2f 56 60 bf 76 ed 8a d6 6a 0c 02 47 2f 26 80 5a b7 9d 5b 61 df 32 db 1a a8 13 bb c1 6c 94 0c 5f a7 2c 93 4a 57 0b 1c a5 ef 0d 9e 1d 42 3c 3a 12 91 93 74 7d 97 92 9c b9 8f 13 21 49 fa ea e7 3f 7d e7 e0 16 3b Data Ascii: %g.Q5P.Sv.t22Xj(*3[$)1Sp =xwh7L$2Gz#Nw.Nf:v1`8~PhFu HD_7W^[_G?/#Oi7/V`vjG/&Z[a2l_,JWB<:t}!I?};
2024-05-06 16:41:53 UTC	2804	IN	Data Raw: c7 ff fe 8f 3f 76 62 65 6d 29 b6 9c 2f a0 5b a8 e0 68 ba ba 73 f0 1d 39 f3 d6 7a 3a 06 94 d0 ac 89 5d 8f 38 b6 26 5e 38 c5 b7 bf 7b 6b 3f 41 bb 58 04 84 93 a7 37 be f2 d5 6f 74 5d cb 1c 38 82 01 f4 7d 2e 65 d7 08 8e cd f6 c5 8a 68 db c1 67 2d 65 1a cd d0 62 31 6a 85 63 70 03 06 6d cf 50 da c1 b4 68 74 fc f3 34 f6 2c 75 43 02 13 28 eb d7 b2 f2 b3 01 dc 06 97 37 22 0d ac 3c f3 f8 16 6f ed 9d b6 65 2e 62 41 33 74 5f 54 87 dc 10 0c 2c 80 a3 9b ce 53 71 da 40 b9 3f cb 2b 01 20 18 fb d9 c4 46 86 2e eb 45 50 36 34 33 25 24 41 62 d3 54 34 4f 0a be 27 56 2d cc 79 64 45 51 60 02 23 24 2a 31 39 88 88 6c 68 3e b4 03 9a aa 31 ab 19 a6 9e 89 1a c2 e0 42 ca 81 9f d0 65 45 1e 55 ac 3d 02 53 c4 18 57 43 44 10 8e f5 fa 74 03 11 d7 af 6c b0 f2 c3 67 4e bd ff 83 ef 7f ee 87 Data Ascii: ?vbem)/[hs9z:]8&^8{k?AX7ot]8}.ehg-eb1jcpmPht4,uC(7"<oe.bA3t_T,Sq@?+ F.EP643%$AbT4O'V-ydEQ`#$*19lh>1BeEU=SWCDtlgN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.11	49725	18.173.145.206	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:41:53 UTC	631	OUT	GET /rmshg/1576785467_knifetraining.png HTTP/1.1 Host: d3j0t7vrtr92dk.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rmshg.amplified.training/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:41:53 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 68007 Connection: close Date: Mon, 06 May 2024 16:41:54 GMT Last-Modified: Thu, 19 Dec 2019 19:57:45 GMT ETag: "10b406b249271d05a45aa592835eeee9" x-amz-server-side-encryption: AES256 x-amz-version-id: Xux8EFNoPc4AV8e838tE2PdgN9ZuAYQI Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 e310f7e63a4f82a466ec0d5a5d825aa8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: SvFB9j26dJoAb5RTuwn_XGemDd1trdDhQkvrO2IvAIv-SQtn8qETYw==
2024-05-06 16:41:53 UTC	15847	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 df 00 00 01 3f 08 02 00 00 00 88 26 5e 8d 00 00 20 00 49 44 41 54 78 9c cc bd 5d af 65 57 75 2d da c7 5c ab 8c cb f8 03 6c c0 18 13 3e 82 83 4e f2 90 17 ee 79 c8 bd 42 91 8e ae a2 88 73 75 6e 1e 92 48 44 89 82 14 45 91 f2 c2 0f 0a 79 3e 49 24 2e 44 09 28 4a 42 38 d2 4d 84 91 c3 2b 22 c8 60 20 c2 09 b6 c1 1f 65 57 b9 f6 5e 6b 8e fb 30 6b 8f 6a b3 b5 d6 fb 9c 55 90 73 cf 00 6d cd 35 66 1f 7d b4 de 7a eb 7d 4c af 5a 7b ed d6 7b ef bd b7 d6 22 22 22 7a ef 11 b1 e7 e5 58 b5 5c e0 4f bc 8b 83 36 42 03 fb d2 3a b1 a3 de 37 c3 60 ef 62 bc 9b cb 6d ec 3b 37 ca 02 b4 2c 6d da 67 db d9 e4 16 89 d8 03 be 30 d8 ef 6d 7f 72 8b 85 fb 45 b8 f3 3a 12 79 db ed 74 52 97 ef 8f 7a e7 ad c2 73 ec 48 ee 7d 00 fb 59 81 bc Data Ascii: PNGIHDR?&^ IDATx]eWu-\l>NyBsunHDEy>I$.D(JB8M+"` eW^k0kjUsm5f}z}LZ{{"""zX\O6B:7`bm;7,mg0mrE:ytRzsH}Y
2024-05-06 16:41:53 UTC	16384	IN	Data Raw: d6 33 15 ad 12 88 b9 40 31 85 28 69 dc da e4 59 87 d6 aa cd 38 de b2 ca 51 d2 8a 8c 58 33 5b ab 94 dc ac 12 22 39 21 34 40 ab 7c db da 36 5b 86 e6 2b 83 8a 3d 0e 27 d5 73 c6 43 b1 97 ea 99 44 65 37 2d a2 0b d1 9e 62 0b a7 1c 0b 1e 3b 78 d1 79 b2 16 14 eb c4 e9 f2 ac 47 d5 f2 43 ae 32 33 92 4d 66 53 9c 8e 48 3e 9a 69 ca 56 df 82 94 65 65 13 6b 3d b4 c9 d2 4c 71 0b 77 a1 54 e9 12 db 64 69 17 55 ff 9e 96 91 9d f9 e3 ec a5 bf f7 ba 78 58 26 c7 97 3e 2f 4b 7e fc e3 1f 7f e3 1b df 78 fb ed b7 2d 18 2a 1b 4c aa d6 06 96 e2 98 df 3c cc 76 b2 6d a3 a6 c3 40 19 46 00 7b 9a 0e 79 28 9a ce a6 ab c2 e1 e6 ee 14 b2 ad 3a 64 d8 fa b7 7a d6 76 6c 6f d1 64 4b 1e 33 ad 7a 71 6d 96 4a 9a a4 c0 51 3f b1 66 6f 4f 4f 50 25 28 b6 6c d4 f1 a2 59 9d 4a 0b 78 94 09 c2 d3 9f 68 9f Data Ascii: 3@1(iY8QX3["9!4@\|6[+='sCDe7-b;xyGC23MfSH>iVeek=LqwTdiUxX&>/K~x-*L<vm@F{y(:dzvlodK3zqmJQ?foOOP%(lYJxh
2024-05-06 16:41:53 UTC	16384	IN	Data Raw: 9b 89 53 4c ae 25 c5 e7 eb bd 44 bd f8 16 82 0d 64 57 6d 3b 5e 77 dc f5 26 41 3e 07 63 fa 8b 59 2f 4d 1d 97 be e6 41 af e5 ca 17 3b 6a 3e cd ad 01 76 1a 58 f4 85 d9 db 66 8f 98 bb 88 e0 d3 08 59 67 80 ee 7f 93 28 a1 10 01 5e c0 10 a5 af 31 43 bb 3e ab b9 15 a9 99 2a ad e5 52 23 5c 30 69 02 16 89 73 b6 79 bd 04 18 91 02 07 23 58 12 ba d5 bd 20 3c 50 97 40 c0 e3 41 02 ee 1e 98 26 95 22 6d ed 7d 1c b1 68 69 41 65 ad 67 b4 d4 c4 a3 9a 6e 60 57 04 22 c3 1a 00 dd 8a fa 12 9b 8a 20 04 34 6e d6 71 33 80 8b c1 77 31 e5 92 13 20 10 81 77 21 8d 11 80 9c 77 de 87 94 13 02 20 42 29 74 72 12 6f 3d 7d d3 7b 1f 82 37 33 6d c3 e0 29 eb 16 9d 52 6e f4 3c 0f 2b 36 d5 3e 25 0a 24 16 82 25 41 cd 5b 63 44 54 47 24 a8 f9 17 8f 34 33 a6 33 82 6a a7 1a 36 bd 50 74 5d cd c2 04 60 Data Ascii: SL%DdWm;^w&A>cY/MA;j>vXfYg(^1C>*R#\0isy#X <P@A&"m}hiAegn`W" 4nq3w1 w!w B)tro=}{73m)Rn<+6>%$%A[cDTG$433j6Pt]`
2024-05-06 16:41:53 UTC	12147	IN	Data Raw: 4e 46 37 10 d8 8e 90 a9 98 9a 28 3e 95 e7 cd a2 e8 01 b8 ec 12 e7 b0 88 f0 32 c6 c8 61 2c 44 79 09 51 1c a8 6a 56 b5 d4 0a 3b 5c a5 ce 49 c5 e3 d1 2c c2 15 2c 96 9f d7 27 cf c8 ad 53 f7 2a e0 2a 3c bf fc 48 2e 1f 00 50 b8 b8 1c f6 97 87 27 1f 4f 87 69 da 3f a1 ab 0e 9b 34 8c 79 1c a8 9e 84 b4 43 ce 59 55 05 0a 79 8a 84 d3 cd 1d e6 74 21 40 da 34 d9 e1 c0 52 8a 19 09 08 24 cd 9b 62 03 10 1d 06 38 85 78 e7 8d 6f ff c1 57 6e bf f4 cc b3 8a ed c7 0f 9f 3c b9 2c 96 46 d9 dd 31 c9 a9 1c 76 c0 36 cb 6e 77 b1 d9 9e 8f bb f3 34 9c 23 8d 90 21 d3 b7 52 d2 28 c3 c5 d9 37 7e f1 e7 3e 7e e3 6b 40 63 29 1a f3 82 05 75 6e ae a7 27 90 7b a6 62 7e 7b df 46 7f aa 71 a3 fd 2a 71 cd be d5 58 cd 39 66 65 16 a9 d8 d8 54 8d a6 4b d5 28 4b 0f 23 e5 d0 62 72 95 32 84 3a 5a 22 1f Data Ascii: NF7(>2a,DyQjV;\I,,'S*<H.P'Oi?4yCYUyt!@4R$b8xoWn<,F1v6nw4#!R(7~>~k@c)un'{b~{FqqX9feTK(K#br2:Z"
2024-05-06 16:41:53 UTC	1680	IN	Data Raw: c2 55 cb aa 54 2a fb 4d b1 e8 d1 a2 22 50 d4 be 65 cb 1e 7d 23 c9 9a 9e 34 a3 8e 25 17 bd 8d 64 8d 7a 17 27 80 26 92 95 72 35 47 5f f6 8d 68 54 0b 99 aa 08 2b e3 4d df 56 e0 5a 1a a9 22 5d 11 a0 aa 57 ef a8 52 bc ae b9 31 65 4d 9f 97 70 35 9d 6c 76 e9 d1 60 25 fb d5 44 5b 79 55 61 bb de 25 46 da fc bc c2 90 15 d8 7b c4 6e 56 65 95 88 26 5d d7 61 9f 4f e6 79 af 4d 51 a5 d3 85 04 7d 7f 70 a7 9b 69 4e 56 0c a0 08 ca 34 cd cf e2 99 b9 93 2a c2 f9 8f 84 c7 6b 14 c7 dd 3c 4b 29 10 11 24 e7 24 50 80 ee d0 04 9a 17 3f 1c e5 4d 12 c8 e3 df eb 52 12 cc 4f b0 c8 bc 8f 10 91 41 aa 28 e9 f3 0d ca 84 c0 4d 44 09 a6 94 dc 5d c0 94 b3 ea 40 55 02 f3 2b a9 36 e3 66 16 50 77 11 d0 cc 55 32 a0 e6 ae 92 48 a8 24 40 e8 c5 e7 5b 34 58 86 31 e3 30 a1 98 8e 9b 24 2a 22 2c 93 68 Data Ascii: UTM"Pe}#4%dz'&r5G_hT+MVZ"]WR1eMp5lv`%D[yUa%F{nVe&]aOyMQ}piNV4k<K)$$P?MROA(MD]@U+6fPwU2H$@[4X10$*",h
2024-05-06 16:41:53 UTC	5565	IN	Data Raw: 04 6d 25 cc a6 5a 35 fd af 30 89 bd 2a b9 b9 09 79 2a 0c 2b 5a 22 e8 60 9c c5 9b fa b8 0c 61 c5 d5 9e a6 37 45 7f 39 d1 46 53 3d 07 2a dc aa 00 9b 0b 9a a5 4b 99 74 37 2f c5 e6 67 f4 68 85 34 88 b8 19 49 40 cc ac 14 13 88 fb 34 df 68 41 9a 88 cc f7 d5 89 c0 9d a2 89 f4 f9 8f 7b 20 35 29 21 22 7a 14 6b 11 15 05 48 37 88 cc 1b 71 a8 ea ec 99 9b 93 c7 56 84 24 3d de fb 66 69 de 7d 54 8e 51 ba 89 0a 99 9c 04 d2 90 36 29 cd 37 3b 03 e0 d3 f7 ab 3e 7d a4 3c 0d 9a 32 21 50 a1 6e 40 1d 87 3c ec 76 b7 5f fa f4 ad 17 3f 3d ec ce a1 a9 02 ae c9 ad de af 55 56 9a f9 a8 26 5b ac 56 42 65 73 49 ca 15 15 5b 27 41 ec d8 5b 23 c4 29 3d ca c1 12 87 e5 f9 38 13 ac 47 57 69 47 0f 8d 28 73 eb d4 8f ee f5 6c 36 6b b8 97 e5 95 64 35 cf af b4 6f 62 7b 3a e2 1a 0a 57 75 61 d9 ac Data Ascii: m%Z50y+Z"`a7E9FS=*Kt7/gh4I@4hA{ 5)!"zkH7qV$=fi}TQ6)7;>}<2!Pn@<v_?=UV&[VBesI['A[#)=8GWiG(sl6kd5ob{:Wua

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.11	49726	18.173.145.206	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:41:53 UTC	632	OUT	GET /rmshg/1576790499_slicertraining.png HTTP/1.1 Host: d3j0t7vrtr92dk.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rmshg.amplified.training/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:41:53 UTC	538	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 192842 Connection: close Date: Mon, 06 May 2024 16:41:54 GMT Last-Modified: Thu, 19 Dec 2019 21:21:37 GMT ETag: "b499dc97eeb6069ef017209b969f695b" x-amz-server-side-encryption: AES256 x-amz-version-id: GfqouhnrS5CZfht7ZkDgNt94xdQRLizP Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 35fc94560da4941563352a51b45ac862.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: nRCaLZvWpnFwSizB8ZeCaoALVHdq4Mrjw59c-VVfmcqj1FBIZo-C6w==
2024-05-06 16:41:53 UTC	3505	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 01 40 08 02 00 00 00 eb aa 38 2c 00 00 20 00 49 44 41 54 78 9c 8c bd 59 af 25 49 72 26 66 66 ee 11 67 b9 5b 6e 95 59 c5 aa ae ee 6a b2 17 35 49 0c 47 d4 80 03 48 3f 53 d0 bb fe 80 5e 04 0d 20 80 90 20 3d 68 46 10 87 12 c9 19 b2 57 76 77 75 77 65 65 e5 76 d7 b3 44 b8 9b cd 83 b9 5b 58 78 9c 2c 2a 50 c8 3a f7 9c 08 0f 77 73 b3 cf 16 37 37 c7 ff e1 bf ff 1f 11 51 44 f4 5f 22 02 00 11 81 7a 21 a2 ff a0 77 ea 9f f6 d9 5f fa 7d 08 c1 df ac 2d 33 b3 b5 8f 88 d6 4e d3 82 be fd e4 af 44 e4 fb d6 74 43 db b4 1b 7c 87 fd 6d be db fe fe a6 4d 11 fd c0 f6 7d 08 21 c6 18 63 17 63 08 48 31 46 11 c9 39 e7 9c 53 bd 32 b3 40 1d 9d 08 cc 87 ff a1 0e 2c 09 d5 8c 4b ef 69 7a 68 e4 b2 d6 1a d2 d9 b4 5a e3 1f a2 Data Ascii: PNGIHDR@8, IDATxY%Ir&ffg[nYj5IGH?S^ =hFWvwuweevD[Xx,*P:ws77QD_"z!w_}-3NDtC\|mM}!ccH1F9S2@,KizhZ
2024-05-06 16:41:53 UTC	14588	IN	Data Raw: 6f f4 3d 9f 31 89 1a 1b 73 50 6e 0c 58 75 9f b1 6a 26 00 a0 29 b5 ab 90 48 44 f4 ff 21 44 11 49 29 f9 f1 36 b4 fa 10 dd 3c 55 6b e7 67 ae ba fe e2 c7 08 ce f8 80 c2 f0 65 58 22 22 62 68 68 ac 5e 80 55 04 6d f3 45 7d b5 ef c3 0c 5e 99 d9 74 83 cc 9c c2 e2 50 37 3d 57 78 52 a5 e5 e6 1a 64 be e3 b7 1a 74 a0 e1 22 03 71 40 41 d2 b4 8d 10 28 28 05 4a 0e 47 9d 05 17 e7 0c 00 1a 9e 52 dc 12 44 4c 39 77 5d e7 29 6f 0c e0 17 e1 ad 11 d7 6d 6c c6 c2 ed 26 4c bb 82 0a 29 54 54 c1 70 da 83 f4 9c e0 67 5c 44 08 08 e6 b3 59 02 dc 45 75 55 42 e9 6d 8a aa 08 08 45 12 0b 3a 69 76 bc 5a d9 28 50 c2 6f 50 33 e6 71 d6 32 49 dd e1 66 a6 04 3a 63 02 e3 52 c2 0d 0a bd f9 3c 87 b6 19 99 ec 6a 04 5e e7 43 e3 4a fe 7b ff b9 c1 2f a8 92 e0 5e ca 5e 3e 75 d5 58 9c 7f e7 3b 69 52 01 Data Ascii: o=1sPnXuj&)HD!DI)6<UkgeX""bhh^UmE}^tP7=WxRdt"q@A((JGRDL9w])oml&L)TTpg\DYEuUBmE:ivZ(PoP3q2If:cR<j^CJ{/^^>uX;iR
2024-05-06 16:41:53 UTC	16384	IN	Data Raw: 2d 91 05 30 33 61 66 c2 46 12 50 2e ae 84 f3 7e 3f 24 28 0b 1d 2a 21 10 00 72 b5 0b 90 e5 e1 7e f7 ea 9b d7 d7 6f af 99 25 10 30 33 08 3f 7b 72 f5 c9 17 df 1f c6 f1 ef fe e9 57 bf f9 ed 57 37 f7 b7 5a 86 10 89 10 24 86 90 4b e1 40 21 40 42 1c 86 01 11 95 62 ec 36 10 78 9d 2d 35 fa a4 aa 17 ea 48 43 3d ba 37 20 31 6a cc 83 c1 16 39 15 dd 2c ca 44 38 1c 07 22 44 c0 9b 9b 77 f7 f7 37 21 74 cf 5f bc f8 d1 8f 7e fc fa f5 ab ff e5 7f fe 5f 9f 3d 7b fa 6f fe ea 5f 7d ff 4f 3e 7b fc e8 71 08 64 bb 44 6b 2d 1d 13 0d 61 ce bf 7f f9 eb ab f3 27 7f f6 67 3f f8 ea e5 37 2f 5f be 07 2e 86 cd d2 ba f2 60 04 4e b2 00 00 35 f9 44 91 47 8f fd ae d1 8f a5 44 78 40 50 2e 35 8b 64 0e 7c 64 38 03 73 c1 f1 af 6e ba 67 a3 6b 40 bf b9 b3 d1 37 36 2e df cf 65 23 e2 6c e7 e6 5d 20 Data Ascii: -03afFP.~?$(*!r~o%03?{rWW7Z$K@!@Bb6x-5HC=7 1j9,D8"Dw7!t_~_={o_}O>{qdDk-a'g?7/_.`N5DGDx@P.5d\|d8sngk@76.e#l]
2024-05-06 16:41:53 UTC	16384	IN	Data Raw: 04 9a 9b 7a 63 94 e9 de c3 f9 7c ef f5 9f fa b6 77 2e a5 60 ee 33 14 d1 d9 dd 9b 55 75 15 a3 84 90 8e 1c 3a 6c 55 38 26 16 a3 f1 ea f2 54 7b 16 98 7c 25 84 d0 a4 6e be 58 ce 17 0d 12 2a 48 17 b1 69 3a e7 3c 28 a6 90 2a e7 a5 92 36 b4 92 12 e4 3e 3d 8d 92 87 95 58 82 5e 52 72 75 95 0b fe 8b e1 56 51 64 2c 6e 59 de ca b0 6c 52 e5 99 13 22 82 4a db b6 88 4c c4 92 02 31 01 22 30 47 d4 41 32 04 62 8c e2 fd b8 ae 3a 6b e7 01 ce 8d 18 b6 c3 15 52 4e ee a4 68 65 13 31 76 6d 88 31 c5 98 ba 18 cd f1 0f 5d 17 52 03 9a 3d 09 3b 29 39 ab 56 66 22 f2 36 c7 d4 33 13 b9 ca 31 d2 8a 16 03 33 3d 69 91 ec 4c 06 af 9a 14 41 14 01 04 50 00 d8 d6 d5 b6 35 82 d5 fc 01 a8 38 72 5a 8a 52 99 59 21 22 12 20 3a 26 c7 54 d7 15 14 b7 53 44 8d 2f a2 59 b6 f3 c5 7c 6b 6d 4d 54 5c a9 36 Data Ascii: zc\|w.`3Uu:lU8&T{\|%nXHi:<(6>=X^RruVQd,nYlR"JL1"0GA2b:kRNhe1vm1]R=;)9Vf"6313=iLAP58rZRY!" :&TSD/Y\|kmMT\6
2024-05-06 16:41:53 UTC	4868	IN	Data Raw: 0b 16 11 1b f0 dc 08 5b 4e 04 45 94 6b 8a 6f 41 84 98 66 ce 04 b6 d4 50 02 54 85 53 49 67 16 e7 61 0b f9 2b 28 3c 3c 7c f8 f0 e8 ee e7 bf ff af 74 5d 2f 5a 8d be aa ed 0d 10 29 27 9b f5 d5 cb 17 87 4d 1a 56 8a 2e 88 a2 71 40 11 d1 28 bc 5c ea 23 b5 cb 02 50 ef d1 91 4b 39 23 c2 62 d1 07 1f 77 f7 23 52 59 9d 0c 63 c9 a5 08 80 16 66 55 0d 3e 9f 1c bb 34 6c ee 1f 6d 54 d5 05 87 d1 c9 20 65 2c 68 08 8c 68 d7 45 56 8b 92 54 c0 9c 3f f5 8b 4e 84 d7 9b f5 72 b1 40 87 22 22 95 e6 0a 15 9f 69 f4 f5 a2 4c 59 c8 7b 24 a7 cc a6 44 8c 6d 4c 75 35 19 84 d0 9a 6b da 5d 00 b4 e6 78 e7 28 fa 10 82 1b 52 6a a9 0d 54 09 1d 55 60 cd 39 21 92 30 33 17 54 20 67 0d 11 20 2a 25 e7 cd 26 35 04 0c 43 08 26 64 e1 2b e5 ce 58 39 de 39 57 2c 42 31 9e 87 5a 94 01 36 55 05 a7 69 9e 8f Data Ascii: [NEkoAfPTSIga+(<<\|t]/Z)'MV.q@(\#PK9#bw#RYcfU>4lmT e,hhEVT?Nr@""iLY{$DmLu5k]x(RjTU`9!03T g *%&5C&d+X99W,B1Z6Ui
2024-05-06 16:41:53 UTC	16384	IN	Data Raw: fa 94 52 18 e2 72 b5 5c ad 57 1f 7f f2 e9 7c de 3d 78 f0 da dd 3b f7 9a 56 65 10 8a 60 0d 11 59 6b ac b5 aa 24 57 6a b0 68 ac 35 02 60 74 b3 bb 1f 6e e8 8d 09 44 21 a6 e9 33 45 44 12 e2 cc 82 02 c2 28 cc 39 b3 77 86 88 88 d4 ea a9 6c 10 65 e4 65 22 d5 14 5b 1f fa a8 32 a8 78 8c 62 d6 65 38 22 3a ef bd f7 88 28 08 0c 22 9c 47 5c 64 88 ea 43 1d 53 2a e4 5d ce 69 b3 ed 77 fd b0 98 cd c6 2c 43 0e 12 31 60 e1 94 d2 d3 cf 2e 25 f3 9d 57 2f b4 b9 b1 f8 71 91 e1 9c 74 51 1f 47 a3 6a 03 39 6b 1e 3d 7c 1c 86 e1 9b 5f 7b ef fe dd 3b cc a2 19 b4 19 fd 0c 27 af 71 9a 21 22 80 18 42 20 24 b2 2a 21 ad 75 e6 94 8b 71 1b 11 01 8a c2 f7 a8 21 c6 d8 b9 75 5a 9f 92 22 79 cc 29 e7 c2 7e 4b 29 67 4e 31 ea 5a a5 f6 d6 21 84 21 0e 9a 75 80 88 e6 d4 46 41 07 ef bb b6 19 71 ec d1 Data Ascii: Rr\W\|=x;Ve`Yk$Wjh5`tnD!3ED(9wlee"[2xbe8":("G\dCS]iw,C1`.%W/qtQGj9k=\|_{;'q!"B $!uq!uZ"y)~K)gN1Z!!uFAq
2024-05-06 16:41:53 UTC	15990	IN	Data Raw: 29 57 03 27 45 b9 f3 43 85 98 72 30 ac a4 2e 25 57 b1 c2 46 39 30 04 a7 77 1e b4 cd 62 b7 db e4 9c 43 f0 44 44 e0 94 54 18 11 0b 89 5d 41 f3 41 73 2a b3 cc fd 4e 16 05 f7 7d 4f f7 ee 36 de 6f 77 9b cb 9b 5b fd a0 10 21 6d 13 c8 b9 43 42 4f 7d c6 e6 33 18 b5 b8 4f 8b df 45 24 0e 63 db b4 50 1b 97 9b a6 19 a7 29 e7 1c 42 70 ce c6 2f ed 4b f9 aa 20 58 f4 8c ec a9 a2 e2 34 59 d9 0a bd 73 c1 f9 b6 6b 09 3c 12 b0 f0 d1 ea f4 3f fb 2b 7f e3 df fd 87 1f 6b 96 98 32 67 de ae 87 77 7a 75 e7 f4 b8 ef 3a 0b 8c cd 07 98 3f f0 e4 d3 94 ba a6 d1 0f 69 f8 f5 ac 9a 9d 22 51 65 43 8a 10 b7 bb b1 6d 9a 7e b9 98 0d 8f 00 38 00 ab 79 da a3 9e f3 19 db 3f 96 3f cd 3a 12 88 08 66 62 ac 79 01 11 3d 02 60 d7 1a 93 81 91 d0 e4 a1 a7 98 a1 98 95 ec 8a 58 12 d9 4c 99 be eb b8 0c c1 Data Ascii: )W'ECr0.%WF90wbCDDT]AAs*N}O6ow[!mCBO}3OE$cP)Bp/K X4Ysk<?+k2gwzu:?i"QeCm~8y??:fby=`XL
2024-05-06 16:41:53 UTC	16384	IN	Data Raw: df b9 10 7c 37 f4 83 f3 c1 bb e0 63 b7 ed 96 cb 4d 82 44 84 46 2b ab 6d 5d 57 f3 66 be 58 34 cd 7c d6 d4 b5 36 c6 2a 93 32 25 11 b1 c8 de 8f d1 18 33 87 14 4b 2c 08 90 d2 5f bc fb e3 b7 3f ff 05 ab 74 6e e8 92 79 24 49 e6 76 22 29 44 40 45 a8 11 95 d6 4c e4 fb 8e 48 45 99 fe c3 49 11 49 22 e5 06 27 75 5f 1f 53 1e de 3a 89 84 a8 8c 43 83 ac 18 a7 a4 90 e8 43 a8 8c 02 40 52 ca ea ea f2 fc ec 8d cf 01 94 62 e9 f8 33 0d 31 27 fe a6 c4 4e 37 63 d6 34 11 54 9a de fb 58 a8 1b cf af 9c c7 f2 b1 f2 45 49 dc 2a e7 72 60 ae 0c eb e8 bd 88 c9 00 ec 68 fb a5 fa 71 83 51 c7 d9 5a 73 19 fb 98 e3 18 b1 39 82 c8 c8 fc b2 51 5c 11 ca 1b e5 ad a3 79 4a 45 44 a0 ec ef 6c ac 63 8a 23 7a 24 5f bd d8 3f 5c ec 1f de 7b f4 e6 76 bd b9 be 7c 79 79 fe b4 db ae 8d a9 7c f0 11 b8 ef Data Ascii: \|7cMDF+m]WfX4\|62%3K,_?tny$Iv")D@ELHEII"'u_S:CC@Rb31'N7c4TXEIr`hqQZs9Q\yJEDlc#z$_?\{v\|yy\|
2024-05-06 16:41:53 UTC	2442	IN	Data Raw: a7 39 00 24 b2 d6 29 1e 86 68 eb b6 aa db 56 04 38 44 01 0e 89 fb c9 0f de 0f fd 62 e8 fb 65 37 f4 83 1f 7a 6d 3a 09 fd d0 0f 7d 7f 63 31 bb 76 43 88 f0 cc d9 d3 0f 3f 70 ff a9 ad d3 58 ea 88 8a 9a 83 3c 08 ab 80 1b 21 70 ea c4 33 20 7c ed da 8d 3f 79 ff 07 7e ec 5d 8f df 73 ef 39 16 e6 5c 9e a4 32 af ce 9f 5a 7d 83 68 ad a9 8c 75 d6 cd ba 61 7f b9 1f 63 20 b2 e5 54 aa 80 1d 1f 1c 39 ed 3e 15 19 7c 38 98 2d 31 17 e0 ea 11 2b d5 1a 45 d4 cb 89 2e 28 b3 8c b0 53 59 c7 51 cb 7b f4 b3 ba e0 c3 30 d4 75 db 75 cb 1b d7 5f 3a 77 fe 12 94 14 19 00 00 18 53 68 f5 0d 0b 63 f6 c1 b1 38 c2 c5 27 83 d4 bd 46 09 17 56 f5 b0 7a c3 58 3d 8e 7f 2a 7a 66 b3 bb 98 95 2c 80 0e 31 1c bd 3b c7 dd b0 52 85 50 90 8b 74 13 90 1a b8 11 11 21 06 a1 0a 56 d7 1f c5 e3 ea 9a ca 8a 50 Data Ascii: 9$)hV8Dbe7zm:}c1vC?pX<!p3 \|?y~]s9\2Z}huac T9>\|8-1+E.(SYQ{0uu_:wShc8'FVzX=*zf,1;RPt!VP
2024-05-06 16:41:53 UTC	1024	IN	Data Raw: be eb 13 b7 ea e0 87 de f7 fd 10 59 0e 0f 67 ba c2 55 65 ab ca 4d da a6 6d 9b c9 74 52 d7 75 e5 1c 59 32 c6 92 a0 21 a3 0d fb 8a 64 2a bb 8a 8f 60 d3 20 ed f4 ca 8d 7c 23 91 ce a9 02 22 83 39 2a 0a 7e 08 31 62 42 02 89 88 8c 73 86 d4 63 b0 86 a8 6a 9b 10 86 55 c1 c2 ca 05 41 44 8c cc 81 63 88 31 9f 59 16 c0 ab 57 af be ef 8f 3f f4 77 7f f1 a7 1e 7b f3 9b 20 df 89 de 46 09 b5 13 90 0e 60 0d 19 4c e4 b1 3b 87 cb e3 e5 6e 9e 66 91 10 00 bd e8 f1 ee c1 b4 99 88 30 0b 84 20 43 14 22 1a 7c c8 a2 b5 52 b5 63 e9 1d 1f 96 72 c4 8a 1b 37 8e fb bd f7 7a 0c 8b 3f ae b2 ad 25 4c de f7 55 d5 d6 d5 f0 ea d5 97 1e 79 e3 5b 39 b7 8f fa 54 70 bd 86 de 94 03 15 53 f6 1d 46 d1 ea ea 36 94 2e 0a b2 83 97 ca 93 05 4c 06 37 00 00 84 39 c4 18 e3 e0 07 2b 19 1b 3d c1 60 87 63 d0 Data Ascii: YgUeMmtRuY2!d` \|#"9~1bBscjUADc1YW?w{ F`L;nf0 C"\|Rcr7z?%LUy[9TpSF6.L79+=`c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.11	49727	18.173.145.206	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:41:53 UTC	648	OUT	GET /rmshg/1576785996_AdobeStock_292938399%20%281%29.png HTTP/1.1 Host: d3j0t7vrtr92dk.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rmshg.amplified.training/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:41:53 UTC	538	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 179154 Connection: close Date: Mon, 06 May 2024 16:41:54 GMT Last-Modified: Thu, 19 Dec 2019 20:06:34 GMT ETag: "113a83ef1d3f5834b51d65263b5cdad9" x-amz-server-side-encryption: AES256 x-amz-version-id: 8EvvulyZ5tabqd6v5AorHFS4l6oC03uM Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 e6f0f8ffbc5127ddd41d2c980e250dc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: rkyDu09myzB6AcB9-XgFfDSdz1t_5oHOjcRsueYw80wkXf4Ubl38pQ==
2024-05-06 16:41:53 UTC	6396	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 df 00 00 01 40 08 02 00 00 00 72 52 e1 99 00 00 20 00 49 44 41 54 78 9c 54 bd db 96 24 c9 91 24 26 22 6a ee 91 97 aa 46 03 3d 98 e1 ee 3e ec 03 79 96 fc 11 fe 08 3f 8b 1f c6 43 f2 70 b9 c3 21 67 06 33 40 03 e8 ae aa cc 88 70 53 15 3e a8 79 64 21 bb ba 3b 2b 32 d3 c3 dd 2e a2 a2 a2 a2 96 fc 5f fe e7 ff d5 36 cc 20 6d 82 32 1c 63 20 08 c0 84 a0 11 51 86 69 90 20 21 85 35 38 44 4a a2 ad b4 48 52 03 da c6 18 5b 04 c3 04 41 81 82 44 11 30 4c 28 14 04 29 11 04 28 49 8c 00 61 90 b4 1d 24 0a 30 01 a1 e0 b2 00 82 30 01 c0 00 04 03 25 17 0c 10 ac d2 31 71 14 ee 13 26 b5 f3 f9 65 bb 3c f1 f9 b3 9e 5e 78 d9 bd ef 50 40 82 c4 7e 32 8b 04 28 02 00 c1 a0 81 2c 97 9d ae a3 7c 9f 35 a7 3d f1 fe c5 28 05 b6 a1 b1 0f Data Ascii: PNGIHDR@rR IDATxT$$&"jF=>y?Cp!g3@pS>yd!;+2._6 m2c Qi !58DJHR[AD0L()(Ia$00%1q&e<^xP@~2(,\|5=(
2024-05-06 16:41:53 UTC	1749	IN	Data Raw: 32 8b 10 98 f6 bd 58 a8 2b ac e2 25 f4 04 3d 27 37 6b 37 9b 41 6f e4 16 d8 a0 08 0c 78 31 23 22 9a c4 53 92 65 2d b9 05 dd 22 04 54 3b 97 89 5c c6 7a d8 95 ca d5 79 18 05 58 4a 3b 81 e9 4a 23 2b 93 98 ee 8a 22 0f 60 47 1d a5 a4 ef f4 a4 27 9d 6c c4 69 73 b9 8b 48 bb f5 07 9c e2 04 db 23 7e e2 ef 09 2f 3c f7 d5 39 be 27 2a ad 81 f2 03 20 ba 46 c8 00 f0 41 d2 f9 e0 95 3e 39 72 7b c6 f5 18 69 50 26 7b cf b6 b8 08 48 0a c4 80 36 c4 2e 5e a8 8b 74 11 37 61 93 24 0e 69 08 1b b9 b5 73 a6 0d 87 46 17 b8 a0 ce cd bd e6 b7 aa e0 fb a8 83 39 9d 57 e5 55 f9 6d 1c 6f ce 2f ba 7f e3 fd 0d c7 1d 35 ab 80 a5 8f c1 ab e9 94 6a 39 b6 5a c5 20 97 1d c5 eb 73 9c 49 e4 19 ae e8 53 52 68 e1 e7 61 9f 80 3a 20 bb 50 1d 57 39 df 2b 9e 02 03 04 59 ee 6a 90 67 f1 bd b6 15 da 98 bb Data Ascii: 2X+%='7k7Aox1#"Se-"T;\zyXJ;J#+"`G'lisH#~/<9'* FA>9r{iP&{H6.^t7a$isF9WUmo/5j9Z sISRha: PW9+Yjg
2024-05-06 16:41:53 UTC	16384	IN	Data Raw: 2f df 55 17 22 85 2a 49 26 fb 0c 23 ac 62 0b 24 56 d9 44 02 c5 65 a3 5f eb ca d6 23 9c 7e e4 e5 6d fb 5f f4 dd ab 3a d0 27 39 90 67 27 1b 4f d5 d0 dd 9d d0 fe 82 b5 b2 3f a0 f9 bb 8f 85 dc 1f cc 1c 6b 95 bb 90 bd 83 0d 10 f7 cc ab 6b 84 76 e7 b3 e3 75 1b 17 73 33 c9 90 a2 b8 00 00 20 00 49 44 41 54 37 78 ab da b0 bc de 83 0e 70 88 41 2e df 34 78 5a 0e d9 a7 05 61 6d ae ee 09 04 4a 55 96 5d 09 95 47 d7 27 4c 1b 89 98 ae cd a8 c2 2c 4f 3b d7 a9 47 48 f8 80 f7 36 53 db 07 7c 87 26 3c 9b dd ae fe 58 12 44 3d e6 ab e1 8f 6b 10 17 16 f7 ac 2c ee b2 48 65 ad 42 f9 49 a2 f9 90 44 7a 30 b5 f2 51 37 78 08 86 d4 7b 9e 86 e8 41 0e 72 10 03 18 50 04 36 e0 42 36 6b be 04 5a 17 da 03 17 61 c9 69 cb 0e 86 3e 21 05 e7 d1 43 70 25 ea ce ba ba be 32 ef cc ab f3 4d c7 37 ce Data Ascii: /U"*I&#b$VDe_#~m_:'9g'O?kkvus3 IDAT7xpA.4xZamJU]G'L,O;GH6S\|&<XD=k,HeBIDz0Q7x{ArP6B6kZai>!Cp%2M7
2024-05-06 16:41:53 UTC	14194	IN	Data Raw: 4e 82 54 36 69 d9 2a 2b 02 88 3b e0 53 d4 7b 18 80 eb 18 6e e3 8e 4e d1 e6 b8 9c 94 7d 24 b4 b0 d1 96 3f c6 e5 cc bb 3b ed ff 44 00 05 c8 a6 94 dc 48 6e 49 c3 4c 34 35 b7 2b 82 01 cf 5c 22 80 a0 57 ad 1b ae 1f fd 7d 3d 97 5f fe 6d fb 5f 3e ec 77 ff e4 bf fd 47 3f fc 53 5b 91 6d f8 3d 9c d5 50 25 48 3d 78 4f 2e c4 8b a2 4b f8 03 b3 16 d9 96 e4 a4 00 00 20 00 49 44 41 54 07 21 3c a2 79 ba f1 84 23 5c 39 a8 a1 7b f8 ee fd da f6 cb 75 3b ef 0f 97 f3 d6 bc 79 6c fb de c3 bb fc 1a 6d 8b de bd b7 e8 ad f5 e1 af 6a 73 7d 95 a1 14 a8 ab 45 46 61 1f 75 e2 b2 94 f0 b0 29 55 b7 ca 88 28 d5 dc 47 eb 1f c2 e5 0a 43 29 25 3c 52 b1 1b 83 ad a6 7b 80 a8 77 4b 35 1e a8 0e 21 79 28 19 52 54 dd 2d 56 49 08 ef de 9e ff fa af 7e fd e2 93 97 0f 1f b6 0f df 38 bc ac 27 93 99 8a Data Ascii: NT6i*+;S{nN}$?;DHnIL45+\"W}=_m_>wG?S[m=P%H=xO.K IDAT!<y#\9{u;ylmjs}EFau)U(GC)%<R{wK5!y(RT-VI~8'
2024-05-06 16:41:53 UTC	14588	IN	Data Raw: 0f 97 82 66 2a 22 c3 bf 79 fb bb bf fc e2 0f 4a cd 92 fb 71 3f d3 5e 07 a1 a0 d2 f2 2a d9 db 74 a4 ca 04 b3 62 b7 d8 4c f6 8f 01 cf 7f 0d 80 c8 52 86 bb 07 3b 87 ca 2d a3 f6 2f 66 85 f4 c4 e9 01 63 1b 94 52 92 0d 86 82 46 2d 7c 7e f1 0f 67 fc b2 18 43 26 40 5c 5e 04 c0 fc f8 7a 66 e8 1b 07 e0 61 67 52 6c fe 58 41 22 3c 72 5c d0 98 36 27 8f c3 d2 43 8e c6 71 d0 78 19 c8 35 a6 67 63 01 a5 b1 90 ea fc a5 77 37 50 ee ad 4b d8 5b 37 f3 0a ca 17 86 de 31 39 15 c2 5d 86 ed 04 68 63 3e 29 8f 09 40 0e 59 b1 b1 f1 8f 6f 2c ac fb 43 02 a5 67 e0 0a 1b 4a 36 c6 5d cb b9 42 67 64 b1 05 5e 39 1a 48 56 eb fa 53 82 47 c0 8a 11 de 01 fa 09 88 e6 fd ae 7d dd ba 9c 0b b7 6c cc b5 23 ca ae 38 83 e9 55 98 e5 8a 48 40 ba df 44 17 7a 6f dc da dc 6e 43 fa 4e f9 85 ab 12 c0 be 6b Data Ascii: f"yJq?^tbLR;-/fcRF-\|~gC&@\^zfagRlXA"<r\6'Cqx5gcw7PK[719]hc>)@Yo,CgJ6]Bgd^9HVSG}l#8UH@DzonCNk
2024-05-06 16:41:53 UTC	6396	IN	Data Raw: e0 6c 6d e2 b7 a0 5c 98 7f 87 38 f7 f8 99 80 d0 98 f7 7b fe 3d 4d c2 19 66 c0 00 01 cc 38 d1 f6 fe 3c 71 87 4a f7 e7 53 26 a9 a2 17 e5 fe 9d 07 ad 10 fc 9b a3 e8 8d 19 ab 4b 28 90 ea c6 67 64 65 3f db 32 f6 22 29 57 2f 6d 6d 1a c5 bc 87 62 8e 10 28 fd 5c 2d 4a a0 26 2e 2f d9 1f 50 f9 94 82 f8 a8 6c 70 8d d2 ab f5 df b1 b2 0a cf e8 fe 3e f4 d3 55 19 f0 42 67 65 4c dc 0c 8c 2e 89 29 ca 9c 96 80 cb 54 d6 dd 6b 79 9e 02 73 35 02 b9 a3 51 92 14 31 a7 8e d7 38 4e 68 3e 33 a5 67 b8 31 a0 2a d2 ec 99 80 21 05 e6 8c 39 db 37 f3 a2 36 0a 3c 7f 67 ba 6e ef b6 7d 97 bf e3 b6 6b 38 dd cd b7 71 b9 bd 3c 09 1b dc 8e a9 00 36 e0 02 fb 1c 31 a5 bf 89 f9 ec a0 04 59 30 42 a7 14 06 15 0e ea 55 25 45 64 55 7c 37 1b 38 7b 8e 18 e8 f9 c4 c5 74 bf 19 35 dc d4 48 a3 d9 54 e4 e8 Data Ascii: lm\8{=Mf8<qJS&K(gde?2")W/mmb(\-J&./Plp>UBgeL.)Tkys5Q18Nh>3g1*!976<gn}k8q<61Y0BU%EdU\|78{t5HT
2024-05-06 16:41:53 UTC	2734	IN	Data Raw: 10 19 b0 c9 71 a4 66 03 76 e8 06 36 b4 e7 5c 79 ab de 38 22 03 31 23 43 ef 8c a8 96 e1 59 de 92 e6 90 5c 35 15 e7 aa 2b 56 57 b7 0f 46 6c 61 ff ec 71 ff f9 3e c6 c3 17 ef de ff 73 be fb 74 46 86 68 f2 44 6b 74 0a 4e b3 cd 6e 48 75 b7 4f ef 39 32 59 25 b8 46 1f 34 c7 76 b1 0c 53 b8 bb bb c1 30 86 5d 1e c6 18 1c 6e 63 1b 60 76 36 f1 61 e6 0e 32 fb 49 0c 33 f7 61 63 1f d8 0c 9b db 66 1c ce e1 dd cd c2 ba ff 46 3b 1a 15 05 27 42 39 f7 41 59 71 1a 95 7c a0 61 15 d3 e7 ed 18 63 70 d2 3c 38 3c 3b 59 91 64 54 4e 9f 2d b3 eb f0 22 4a 68 b1 08 6e fe d7 2a 10 c1 73 f3 48 a8 ce f9 2b c0 7a 67 af ea 68 0d fa e7 57 1d 22 75 50 6e 29 da a6 9b b9 b5 72 79 3d cb fe e1 1f f8 e6 fe c7 84 a1 b6 53 75 0e 2b 4e 63 84 0b 93 59 08 0e 12 9b 83 3f 39 e6 9b 1f a5 e1 77 88 c6 f2 ee Data Ascii: qfv6\y8"1#CY\5+VWFlaq>stFhDktNnHuO92Y%F4vS0]nc`v6a2I3acfF;'B9AYq\|acp<8<;YdTN-"Jhn*sH+zghW"uPn)ry=Su+NcY?9w
2024-05-06 16:41:53 UTC	16384	IN	Data Raw: 7a f5 02 06 45 d7 58 c6 8b fb c7 51 ef b6 66 e5 82 28 07 18 dc 90 11 d2 11 50 29 28 95 7c 71 53 b7 53 dd 34 b6 d6 ba 03 ea ad f7 de 8d ba d9 70 ef be 99 ac 74 14 a0 34 73 c3 d3 eb 5a 7c aa 87 9b ba a9 3e 75 60 de 98 7f f8 51 f9 a5 7a dd 9b df bc c1 f3 d9 7e 54 f5 09 fd 36 a3 01 f9 10 1c 0f 13 88 b0 b9 4a 23 0f 20 1d 36 11 e8 3f 36 73 0c 5b 83 96 40 23 b1 5d 97 0e ae 87 8e 43 d9 a5 a1 5a 8c 13 8f 63 cc 48 1a ed 29 a7 5f b9 e2 cd 93 7e b5 7d f2 de f6 af 6d b7 7f f7 f0 fc 23 b7 48 5c 87 69 2a ac 26 62 da 58 3a 16 4c a5 4c ac 13 eb d6 6c 53 6d 5b eb a6 70 3b 71 63 ac 05 e1 17 62 a1 22 05 c2 c5 5c b2 e1 30 9d 96 bc 48 47 e7 a1 f2 4b 75 d8 d2 b0 a1 b5 24 d3 3e 30 cf 9a 15 64 3e ce 74 b0 7b 8b ac 20 f8 a6 23 5e 4e e6 62 f0 22 43 2a 1d b4 ba c7 09 25 57 2d 08 47 Data Ascii: zEXQf(P)(\|qSS4pt4sZ\|>u`Qz~T6J# 6?6s[@#]CZcH)_~}m#H\i&bX:LLlSm[p;qcb"\0HGKu$>0d>t{ #^Nb"C%W-G
2024-05-06 16:41:53 UTC	1024	IN	Data Raw: 52 d2 14 11 94 51 c9 9f 2a cc 6e 0c 35 31 5a 75 f7 cd 3a 92 5a ba c9 73 0a 16 9f 04 cd 4f ff f9 f4 eb 4f 1f f0 29 d0 fc cc 0f 7e d2 37 fe c4 5f 7e d2 35 90 80 44 86 a6 88 e4 67 5f e1 d3 23 f0 e9 af 7f ca c5 ff c4 1b f9 94 77 e3 af 75 1d 7e ca 07 01 18 31 55 2e 06 15 64 45 16 26 e9 02 17 e0 8e ca e8 60 2c 51 b9 bc b6 1e 22 47 86 25 4a a8 27 40 a1 59 90 54 9e f9 8d 3f c5 b3 68 16 2e 24 21 8f 9b b3 ed df f9 a5 cf 3c fa ee f5 ff f5 8d 79 36 11 17 21 cd 83 e0 4b 44 19 35 ff 5b 8b 7d 88 99 19 27 92 06 c0 31 67 85 d2 52 8e 8f e5 81 70 82 50 00 5d b0 c0 2d c1 c4 8d 4a 57 4f 3a 3a 14 d0 2c 18 20 67 82 0c 64 48 6a 10 a4 0e 14 85 c9 66 a1 15 ab d5 59 cc 2b 20 6b 98 30 dc 71 f3 e8 e6 9d 0f 3f 4a 82 84 a4 9a ce c6 b3 9c 87 5a 16 f7 99 52 13 10 25 fe 1b 2e 07 eb 0f d6 Data Ascii: RQ*n51Zu:ZsOO)~7_~5Dg_#wu~1U.dE&`,Q"G%J'@YT?h.$!<y6!KD5[}'1gRpP]-JWO::, gdHjfY+ k0q?JZR%.
2024-05-06 16:41:53 UTC	16384	IN	Data Raw: 6b 72 59 9b df c1 82 68 b7 e6 0b e1 b1 30 20 3f 73 4d 9e 5a b8 47 17 d0 b3 8e 79 fa f5 27 f8 e6 13 87 7d d2 a7 9e 79 cc e9 eb 24 43 2d 75 c2 08 f3 b5 8e 22 00 64 c5 a0 1d a9 4f e8 27 a3 67 f0 42 90 e9 58 88 58 3e e5 32 9e 79 61 9f 74 85 3f cd 10 3d 69 90 7e 32 40 a3 af 54 d1 67 0c c5 29 34 bb bb 5b eb fe d0 48 59 d4 fe 09 fc e9 60 d0 f2 7f 25 b2 45 b0 42 73 4f f1 88 a6 46 12 ea d8 4f 39 1a cf 7a 25 48 98 b4 62 5c 9a 30 0e 2f bc 7c f1 85 97 c6 0f 3f ae 6a 3a b5 da 73 41 70 c2 d5 27 02 a4 9c 73 d6 94 24 25 d5 d4 f3 81 a5 9d 74 c5 e4 26 69 f0 34 24 21 e0 bb 81 7d 18 e9 95 06 15 77 a9 ea 54 17 55 dd 28 37 22 5b 60 2b c8 d2 3c 3e 2e 30 c0 15 62 50 8f de 2a 42 49 48 88 bc 06 57 2e 62 37 e5 7b 1f bd a3 49 b7 9b 81 b5 58 9d ca 7c 63 5e 23 7c 17 c2 78 00 3d 91 b6 Data Ascii: krYh0 ?sMZGy'}y$C-u"dO'gBXX>2yat?=i~2@Tg)4[HY`%EBsOFO9z%Hb\0/\|?j:sAp's$%t&i4$!}wTU(7"[`+<>.0bP*BIHW.b7{IX\|c^#\|x=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.11	49728	18.173.145.206	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:41:53 UTC	637	OUT	GET /rmshg/1576789110_slipstripsfallsmall.png HTTP/1.1 Host: d3j0t7vrtr92dk.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rmshg.amplified.training/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:41:53 UTC	538	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 144807 Connection: close Date: Mon, 06 May 2024 16:41:54 GMT Last-Modified: Thu, 19 Dec 2019 20:58:28 GMT ETag: "e666d7a26e083a0412154d83ac7b16b0" x-amz-server-side-encryption: AES256 x-amz-version-id: 66h_XY.5NCqc0vmxtTqFjfoM3c2ggtI_ Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 defc7355b0e0e36ce67507f1b31ca166.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: EiteJVE4232nJ_mYX0beCzolZSQk0c8DSDEvmRROCQcoTdbmN5oy0Q==
2024-05-06 16:41:53 UTC	8192	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 df 00 00 01 40 08 02 00 00 00 72 52 e1 99 00 00 20 00 49 44 41 54 78 9c 94 bd 4b ac 2c 59 76 1d b6 d6 3e 91 79 3f ef 57 55 5d ff aa ee 2e f6 c7 64 53 14 c5 9f f8 91 68 09 b6 25 c3 30 2c 78 e4 89 47 1e 78 e0 99 e1 a9 27 e4 c8 1e d9 13 c3 f0 c0 82 0d 03 86 05 58 02 0c 1b 22 24 1a b6 21 81 12 45 89 00 49 c9 6c f1 23 7e aa bb ab ab 59 ac ee ae aa f7 de bd 99 11 e7 ec bd 3c 38 9f 88 cc 7b ab 24 67 65 e5 8b 9b 19 71 e2 7c d6 de 7b ed 7d f6 39 41 49 00 00 48 22 59 0f 00 d4 e3 f1 aa bf 8e 73 ce be df fe 29 89 cb 53 cd cf 41 12 56 7f 13 40 50 14 40 4a 00 44 42 e3 03 82 08 02 10 04 92 82 ea 75 24 6a 7d 00 21 04 d0 92 96 1b ca 85 e0 ee 12 b8 54 be 91 dc 6c 2a d2 54 af 23 01 50 10 85 c8 f2 02 26 40 b4 09 b6 43 Data Ascii: PNGIHDR@rR IDATxK,Yv>y?WU].dSh%0,xGx'X"$!EIl#~Y<8{$geq\|{}9AIH"Ys)SAV@P@JDBu$j}!Tl*T#P&@C
2024-05-06 16:41:53 UTC	7620	IN	Data Raw: ea ce b8 f3 19 38 b7 10 5f a9 8a cf a0 99 5c 4d 1e 39 88 4b 27 af dd 59 e9 0e 76 9d 8b 08 38 2c a9 64 c6 11 6d 94 12 2e 1e 0b 54 0a f1 00 00 20 00 49 44 41 54 b2 1c 99 97 3a 60 f5 dd c3 25 8d 19 34 ac 0a 96 12 d3 25 b8 63 b8 f2 c7 6c c9 c5 69 4c 67 77 bf 2d 89 3b 24 d3 72 6b 11 f5 04 53 9d de 00 63 84 c4 6b 6b d5 48 67 5b 46 e8 88 3c d1 29 10 46 db 13 13 91 54 e3 aa 83 6d b4 a9 9f 00 a4 3a 0d 02 45 99 4d 85 64 4a b4 c8 c8 07 b9 b3 b6 7e be c5 e7 be 68 9d 2e ac 3d 5f d3 fe 73 e6 fc 0c 34 a6 1d a7 1d 2c 61 02 54 ea de 2f 46 1a a3 25 53 56 77 b6 76 4e 5d b3 d6 c8 56 77 53 87 d2 97 2b 3f 85 1f 08 d1 08 85 f2 ac e5 c6 fc 48 9f 51 8e cd d5 f6 05 e5 c8 c8 49 a2 17 2c b7 c8 cf 51 9e 2b 3f 97 32 4e f8 db e6 2d a9 ed 36 25 29 d4 83 d7 56 a9 bc 3f b7 57 fe 4c d9 9b Data Ascii: 8_\M9K'Yv8,dm.T IDAT:`%4%cliLgw-;$rkSckkHg[F<)FTm:EMdJ~h.=_s4,aT/F%SVwvN]VwS+?HQI,Q+?2N-6%)V?WL
2024-05-06 16:41:53 UTC	16384	IN	Data Raw: f7 08 83 6c 49 31 18 41 0a c7 81 c5 ba 93 54 1d 5e a0 83 dc 83 c8 5e 61 32 0f 6c c4 1e f7 e6 2a e7 b6 bb 86 84 14 2d 5d 5b e3 c6 c7 ba f6 9d d2 f6 54 db 5c 64 6c 80 d4 be 79 1a ad a5 86 59 d8 ed 2b ae 5c 4f d8 8f dc 92 45 fd cf 41 e5 12 91 69 e9 07 05 82 e1 f4 80 e8 60 f3 58 e4 7b 7a 2d 34 70 42 39 67 31 4e 3b 90 dc 3d cd f3 87 62 40 b7 66 27 65 81 af bf f1 0d d4 85 be 2f 65 17 e5 de 66 c7 1d 64 d3 91 21 be fd 96 40 9c 3f cb 08 b6 0a b8 a2 f5 6d ae 90 22 dc bd b5 68 55 ee 5a 0b dc c3 d5 9a c2 d5 1d 32 bd 44 1b ea e6 05 11 59 ce 07 54 a9 a5 f1 87 c8 de 1d 75 cc 7d b6 ee 94 eb 37 04 a9 0f b3 47 38 c4 ec 46 66 b0 02 ec 76 f7 aa 6b f4 fd c1 f0 10 48 ad 12 00 0a cc 01 8f 97 3e a3 13 0e dc 6e 4c 6c 0d 97 cd 27 5b 64 bd 25 d1 96 cf 49 4e a7 bf 5c 49 b9 25 eb 6a Data Ascii: lI1AT^^a2l*-][T\dlyY+\OEAi`X{z-4pB9g1N;=b@f'e/efd!@?m"hUZ2DYTu}7G8FfvkH>nLl'[d%IN\I%j
2024-05-06 16:41:53 UTC	1024	IN	Data Raw: 6a ec 65 1b 6b bf be 83 ce c4 c7 a4 c0 91 80 58 9d 59 4d 4f 90 8a a4 2c f5 b3 36 25 3d f1 e5 e5 ad 6f f7 17 ff a8 bc ef 1f 4c 1f fd 55 bb 7e 1b c9 84 b4 7f f6 d9 e9 2f fc 5d 9d dd c6 62 71 1f 18 4d e3 9d c7 3f 4f 8b 6f 00 28 2a 17 f6 9e 1f d6 ad c7 53 d9 81 34 37 78 34 00 4d e0 24 f3 41 92 44 e4 56 8a 0e b6 0d e6 e5 36 10 eb 62 a7 e6 6d 97 1d 94 3d 27 db 9c 43 22 0b e6 fb f5 c9 69 83 b4 35 18 98 8a 32 8a bc 6d 75 d1 73 e4 1d c6 30 e1 7b 40 b5 9f 13 d9 97 dd ea 5d 70 ea 38 e6 d8 03 12 01 80 6c b3 c5 c5 0b 88 28 ae a6 b1 96 ff 56 7d 2f 2f 6e 29 45 2b 23 28 09 82 b5 4a df 6a b2 d7 b8 94 31 cc 7b 51 2c c5 64 60 02 f6 04 a0 a9 a7 36 40 56 2c 27 78 d9 5d a4 2f fe b3 69 ba b6 8c a9 af c0 b4 05 90 24 24 2b d7 9f d8 3e fd 96 fd 47 7e 65 63 12 ab e4 a5 4d 35 27 5e Data Ascii: jekXYMO,6%=oLU~/]bqM?Oo(*S47x4M$ADV6bm='C"i52mus0{@]p8l(V}//n)E+#(Jj1{Q,d`6@V,'x]/i$$+>G~ecM5'^
2024-05-06 16:41:53 UTC	15990	IN	Data Raw: 64 c9 54 84 f5 ba 1a ef 7c 15 6a ee 8f 88 3f 7d ff c2 f4 9e 1f 2e 8f 3d 89 8b cf 19 1d 25 72 05 8c 00 72 14 d9 5a 32 af 21 c1 8b 30 57 59 3d 4d f0 a2 88 c4 48 42 34 51 ee 2e 17 b5 3d 93 d8 fd 4b 9b 6a 6f 86 50 8b 36 3f ee 2a 80 99 44 4a 94 ab cc e1 b0 0e 4c 5a bb 7c 2d ec 82 d5 8b 8c 34 3c 69 b5 ac c4 dc e1 4f 62 65 f9 72 86 b1 6e 63 91 b6 67 7a eb 49 6a 62 8b 66 ad ac 87 08 ca 52 f5 9d 76 59 0d 92 49 64 04 8f 56 4f 5b 07 8e f1 38 10 65 87 3b af f6 47 be 74 3a e4 84 e3 89 13 24 26 92 8e 33 7b fd 9f b7 3f 78 47 be ff 71 db 3c 6a 2e a9 b4 27 bb f2 ce 8c 40 d2 fe 92 8a 06 d5 ae cb cf e3 4d 7f 55 d7 1e ef dd 5b 47 76 1d 3f 1c 53 f5 58 c3 81 54 c4 48 b8 e7 f7 fc 03 3b 3b 97 ef 91 ef 1b af c1 28 df 7b 29 29 19 6a 7b 3d b5 be 51 83 96 25 21 47 de d3 12 d2 b6 b2 Data Ascii: dT\|j?}.=%rrZ2!0WY=MHB4Q.=KjoP6?*DJLZ\|-4<iOberncgzIjbfRvYIdVO[8e;Gt:$&3{?xGq<j.'@MU[Gv?SXTH;;({))j{=Q%!G
2024-05-06 16:41:53 UTC	1418	IN	Data Raw: 29 a1 ef 8d 7e 11 a6 9f 66 7d 95 4e 91 8d 09 52 60 ba 14 86 a0 ab 92 75 a4 f6 6d d7 c7 8d 66 7a 4b f4 35 fd 7f dd a0 ac 38 3e 00 71 6a c4 87 00 00 20 00 49 44 41 54 c0 60 03 d3 15 0a 28 cf 54 03 f5 d3 b5 52 28 b3 4e 66 16 62 94 3b 2d 08 62 3a 02 80 98 e3 1c 67 e6 0e 95 6d 88 24 5b 4d 49 12 41 4a c0 e4 3a 2a 79 8e 53 55 14 c4 aa 44 32 98 1c 1c 22 52 65 00 95 92 8a 72 28 d2 e9 63 d6 b4 04 c1 72 d4 9e ec dd 1f b2 ff 7b 56 5b 13 53 17 9a d5 cc ae ae f0 da f7 e0 8d bf 15 5c db 2d b7 c3 94 18 7c 7a 25 fe f8 7f 18 1f bd c9 e9 15 92 d9 7f 89 56 62 99 96 4d 36 19 75 35 f1 25 59 0c 48 29 8d a3 19 90 52 d9 dc 9f e7 ee 43 21 f0 49 04 d0 5f 5c bd b2 ba d5 55 3e f3 98 f9 f5 e6 d4 dc 7f 7a c1 1f 51 c7 bd 9b bf 27 c8 29 86 f1 52 43 34 1e 6d ea f2 cb 54 8d 5d 2a 8a fb 69 Data Ascii: )~f}NR`umfzK58>qj IDAT`(TR(Nfb;-b:gm$[MIAJ:ySUD2"Rer(cr{V[S\-\|z%VbM6u5%YH)RC!I_\U>zQ')RC4mT]i
2024-05-06 16:41:53 UTC	16384	IN	Data Raw: ca 82 20 24 fc cb 9f d4 a7 fe 79 38 8f 0a 7b 8e c7 bc 65 b1 ac 85 18 f3 ae c9 b9 da a8 03 e2 93 a7 d1 bc 6e 2b 2f dd 5c 5b d6 0d c7 8a b1 b6 a3 81 e5 06 5d 57 40 a1 9d 14 2a 45 e3 8f 52 c3 02 1d 5e de 52 02 36 d7 fb 92 b7 d7 1a 7c 26 89 69 7a ec f6 39 2e a6 d9 69 2e 77 75 c7 f3 b3 6c f6 2e dd cf 76 f6 ad 84 4a cf 63 d1 d1 70 4f b4 2b 88 7c da df 79 c5 c5 fb 0f cf 58 66 b8 29 9f 42 89 76 5f 3b 24 7f 89 8d 01 56 64 51 50 03 d1 04 7f ae 62 dc f9 34 22 47 0b eb 10 55 7e b3 ed 25 23 b2 3b 65 50 4a 64 6a da 4c 87 77 eb a0 98 41 2a ef ba 9a e8 03 40 22 27 37 5e 75 e5 aa 47 56 2d ed cf a3 26 69 d2 73 1f 4d 1f fc 71 7d e9 63 76 76 8f f7 5e 8b 94 e5 41 f2 74 c5 1c f0 ac 64 de f3 bc cb 0b 12 64 75 eb 99 90 23 4a 5b 50 4e 7f 55 92 86 d0 b3 c3 56 a8 0e e0 d7 1c 6d 68 Data Ascii: $y8{en+/\[]W@ER^R6\|&iz9.i.wul.vJcpO+\|yXf)Bv_;$VdQPb4"GU~%#;ePJdjLwA@"'7^uGV-&isMq}cvv^Atddu#J[PNUVmh
2024-05-06 16:41:53 UTC	16384	IN	Data Raw: d2 5e 7d 0a 0a 81 0c e8 7c 62 f3 79 66 14 28 db de 66 43 cc c6 99 c6 06 d9 4a c7 f6 23 cb a6 0b 20 1f ad 94 0e 29 07 28 99 49 14 d0 a0 77 ee d1 c1 fe f9 97 1f 1d fd 9d bf f4 8d cf bd 55 9d 0e 92 f3 c4 0e a1 37 0e 07 a8 4e ac 68 00 e8 94 3c 1d 9a c0 7d f7 e2 73 cf fc a7 3f d3 bc f3 7d 2e 38 35 42 da 25 07 b5 41 d6 f6 b3 66 ab 13 23 ac 7f ae f9 40 ca 4f ce 95 9e 4b 9c 2b b4 08 ca 5a 62 31 f3 87 f5 4d 50 e0 f1 55 fb e2 ef f3 8b bf 0d 23 9e 7b 81 97 6f 42 d3 d1 e2 31 3f 74 74 90 e5 2a ca 5b 98 91 8a 1f 6d c7 ef f8 9c 83 02 61 ea 3b d0 6a 0a a3 d0 51 21 7d a0 1c 8e 90 a7 8b fd 7c 76 08 ca 60 bd cc c7 8d 71 22 17 a6 c2 00 7b a1 a3 a3 fa 8e 52 da 15 9a 94 3f ba 78 d2 53 42 25 41 52 08 e5 53 72 01 f4 87 d8 f6 14 a1 56 9e a1 47 f0 79 fd 5c 24 17 40 e8 10 fa c8 60 Data Ascii: ^}\|byf(fCJ# )(IwU7Nh<}s?}.85B%Af#@OK+Zb1MPU#{oB1?tt*[ma;jQ!}\|v`q"{R?xSB%ARSrVGy\$@`
2024-05-06 16:41:53 UTC	16384	IN	Data Raw: 50 86 98 a1 c6 13 6b 1e 1e 17 28 2f 83 fa 38 08 22 42 27 ff 88 d6 53 01 0a 70 17 bc f7 36 dc 7e 56 cd 55 e0 4e ed 2d 3c f9 16 e1 82 da c7 b8 f5 90 0d d6 9b f7 a0 63 dc 45 c6 1f 99 97 89 32 8f ca 52 60 d7 10 82 3f d2 1f e3 9b a8 3d 90 3f 2a 4c a0 9c 87 a2 03 29 56 29 31 6b 6f 03 2d 64 b4 0e 7e 8f fe 3a 76 5a 29 58 b4 e7 48 91 53 a7 10 86 31 63 2e b4 94 fd 44 8c 8a 9f 7e 60 11 c3 ec 9f a6 23 11 a4 11 2c 51 32 97 ee 31 47 ec 8a 90 55 bc bc 3c 01 c0 e1 cb b7 28 bf ea 6d 33 95 03 20 35 4d f3 ae 0f 7c cd 4b 9f e5 d1 5d 35 68 1b 1a fc 81 57 4f 37 9f f9 55 fb d8 cf 00 06 05 ad ef 6c b7 e6 e8 78 3d d0 3c b3 5e 01 86 fe c0 66 67 ed 6d 01 80 a1 df 87 47 2f b3 7f c8 b6 31 d3 d0 fc 63 c6 2b 75 0a 55 8e fd 6b ec b7 51 5b 90 4c 7d a7 e0 93 4d 17 0e 92 6a 60 f8 74 7f 04 Data Ascii: Pk(/8"B'Sp6~VUN-<cE2R`?=?*L)V)1ko-d~:vZ)XHS1c.D~`#,Q21GU<(m3 5M\|K]5hWO7Ulx=<^fgmG/1c+uUkQ[L}Mj`t
2024-05-06 16:41:53 UTC	3072	IN	Data Raw: 37 f5 f8 9b f6 e0 45 44 73 e4 0e 60 e5 35 12 6e bb dc 93 22 a2 d4 45 36 0d 32 aa 01 04 aa 21 d0 fb d4 d3 d2 0e e1 f5 28 0b 99 5a 9d 19 a3 f7 e8 8e 5e bb 2f 52 a5 d4 e3 7f 22 1c 74 9d 3a 99 36 4e 45 a0 85 d9 55 d4 80 c4 04 23 de 9f 80 0c 55 1d 4d 37 19 1c 0f 8e 6e 19 a3 20 f7 d3 0f 12 7d 4d 11 b8 c9 79 ef 34 74 6c 79 ec f6 f8 3b 5f e7 d9 28 e3 64 dc 24 fa 67 6f 00 b7 de 5a b1 1d d9 95 d6 7e 50 3f 9f e3 e1 fa 63 74 ab d3 0a 7b 29 e5 c5 e8 cd be 09 40 06 7a 00 2c d5 47 78 f4 1d 7b fe 6d 35 bd f2 7c 60 82 80 cc 0f be a5 f9 11 a6 0b 5d bc 88 cb 97 85 9a 56 1d f6 8e 47 b8 25 75 68 0d 02 79 22 fc e1 9b f8 ec 3f c2 3b bf bb 3c fd fe fe 70 21 77 9a 41 90 3b 6a b5 88 7b 0e cd b4 db 07 c9 d5 bb 04 b8 bc 20 d7 94 a2 a3 a9 0c b5 73 f9 42 cf c1 07 0d ac f3 23 fb b1 7f Data Ascii: 7EDs`5n"E62!(Z^/R"t:6NEU#UM7n }My4tly;_(d$goZ~P?ct{)@z,Gx{m5\|`]VG%uhy"?;<p!wA;j{ sB#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.11	49724	3.217.205.239	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:41:53 UTC	674	OUT	GET /pages/scripts/lib/formenhancements-558.min.js HTTP/1.1 Host: rmshg.amplified.training Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://rmshg.amplified.training/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; login_token=153a9a8f304880470316f98fd745653f
2024-05-06 16:41:53 UTC	559	IN	HTTP/1.1 200 OK date: Mon, 06 May 2024 16:41:53 GMT content-type: text/javascript content-length: 289 server: Apache content-location: formenhancements-558.min.js.gz tcn: choice x-content-type-options: nosniff x-xss-protection: 1; mode=block last-modified: Tue, 12 Mar 2024 10:12:08 GMT etag: "121-61373e407fb9c;61373e408c6bc accept-ranges: bytes cache-control: max-age=31536000, public expires: Tue, 06 May 2025 16:41:53 GMT content-encoding: gzip strict-transport-security: max-age=31536000; includeSubDomains; preload; connection: close
2024-05-06 16:41:53 UTC	289	IN	Data Raw: 1f 8b 08 08 78 2a f0 65 00 03 66 6f 72 6d 65 6e 68 61 6e 63 65 6d 65 6e 74 73 2d 35 35 38 2e 6d 69 6e 2e 6a 73 00 9d 92 4d 6a c3 30 10 85 f7 3d 45 03 26 1a 81 2d dc 45 57 c1 d0 1b 74 d3 5d 29 65 6a 8d 1d 11 49 0e fa 09 35 c1 77 af 2a 68 b1 71 42 4a 77 42 6f e6 7b 4f 33 2a 40 0e 6d 34 64 03 17 8e 50 8e d0 45 db 06 35 58 e0 e7 02 98 08 ba ea 06 67 2a 32 a8 d2 51 91 96 8c 8b 24 b3 03 8d f1 c8 ca 59 bd ea a0 80 b0 57 9e 8b 13 6a e0 22 38 65 80 6f 1a c6 b6 db cd 9c 16 3d 39 8b 86 7e 81 12 03 02 33 68 23 6a 3d b6 7b b4 3d a5 fb 0b 4c 65 25 7d 3e 77 c0 9e 18 6f 9a ea 61 19 73 05 fe 6e ba fe 8e 8c e4 bb e9 8e b4 a7 f3 09 dd 7d d6 df b3 ee 9b a5 b3 3f 6a 15 b2 ef ee a6 e5 1c f3 5a bf 25 8b 69 5a b6 ad 07 fa a1 a3 5b cc f3 7a 79 1a 6c df 93 fb 59 42 c2 df c8 74 79 Data Ascii: xeformenhancements-558.min.jsMj0=E&-EWt])ejI5whqBJwBo{O3@m4dPE5Xg2Q$YWj"8eo=9~3h#j={=Le%}>woasn}?jZ%iZ[zylYBty

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.11	49730	3.217.205.239	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:41:53 UTC	760	OUT	GET /pages/themes/default/css/font/Open_Sans_400.woff HTTP/1.1 Host: rmshg.amplified.training Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://rmshg.amplified.training sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://rmshg.amplified.training/index/css/fmt:1714566301,tn:51,tv:5,ct:1,rtl:0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; login_token=153a9a8f304880470316f98fd745653f
2024-05-06 16:41:53 UTC	430	IN	HTTP/1.1 200 OK date: Mon, 06 May 2024 16:41:53 GMT content-type: application/x-font-woff content-length: 20216 server: Apache x-content-type-options: nosniff x-xss-protection: 1; mode=block last-modified: Wed, 23 Mar 2022 16:57:16 GMT etag: "4ef8-5dae59f30a400" accept-ranges: bytes vary: User-Agent cache-control: public strict-transport-security: max-age=31536000; includeSubDomains; preload; connection: close
2024-05-06 16:41:53 UTC	8612	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 4e f8 00 12 00 00 00 00 85 40 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 44 45 46 00 00 01 94 00 00 00 16 00 00 00 16 00 10 00 dc 47 50 4f 53 00 00 01 ac 00 00 00 0c 00 00 00 0c 00 15 00 0a 47 53 55 42 00 00 01 b8 00 00 00 59 00 00 00 74 dd ca de 9a 4f 53 2f 32 00 00 02 14 00 00 00 5f 00 00 00 60 a1 3e 9e c9 63 6d 61 70 00 00 02 74 00 00 00 94 00 00 00 c4 cf 82 72 24 63 76 74 20 00 00 03 08 00 00 00 59 00 00 00 a2 0f 4d 18 a4 66 70 67 6d 00 00 03 64 00 00 04 9b 00 00 07 b4 7e 61 b6 11 67 61 73 70 00 00 08 00 00 00 00 10 00 00 00 10 00 15 00 23 67 6c 79 66 00 00 08 10 00 00 35 6f 00 00 51 58 13 5f c2 f0 68 65 61 64 00 00 3d 80 00 00 00 36 00 00 00 36 f7 76 e2 a6 68 68 65 61 00 00 3d b8 00 00 00 Data Ascii: wOFFN@GDEFGPOSGSUBYtOS/2_`>cmaptr$cvt YMfpgmd~agasp#glyf5oQX_head=66vhhea=
2024-05-06 16:41:54 UTC	8949	IN	Data Raw: ab 69 87 94 35 e5 91 cd 6b 1b a6 cc dc b2 aa 61 71 8a 2e 7f d7 44 c4 01 ba 82 c3 33 0f bf 4c 4e 2c 58 b0 ef e5 e8 16 e5 fe e7 8f a3 c7 85 ca fa ea a1 87 07 8f 79 f5 2f 5c 63 34 6d e5 f8 ba a0 20 9c 04 2e 45 5d 5d 7a 8f db a4 b7 d9 b8 b2 da 6c 06 eb ed 94 b5 a5 ae 7a 13 35 75 f7 36 05 8d d0 a1 a9 6f bd a3 68 ea e1 4f d4 79 ef 8a a8 93 c6 6c ec 28 3e a7 a2 49 3c 8b 75 82 59 06 39 d9 67 f0 70 3b 66 a3 36 c5 f8 df 32 8b e5 2a 43 8a 15 a3 0a 89 9d 1e c2 28 f6 c3 e5 35 5f fe 0e 4d 97 2f a1 b5 f9 95 9d cf 3d f7 e2 8b cf 3f d7 40 b2 d8 8f ec c3 27 91 fc 01 4d 98 c7 de 67 57 ff f2 b7 f3 1f 9e 39 a7 58 f9 bd dc 96 d5 aa 54 fb a1 3c 9c e1 33 0a b2 ac 4b 77 e8 1c 99 01 c1 08 56 ab bb 22 62 b5 e9 ad ba 14 68 75 c3 cc c7 59 d0 62 c1 aa 96 9e 3b 68 4f 02 13 14 af ad 98 Data Ascii: i5kaq.D3LN,Xy/\c4m .E]]zlz5u6ohOyl(>I<uY9gp;f62*C(5_M/=?@'MgW9XT<3KwV"bhuYb;hO
2024-05-06 16:41:54 UTC	2655	IN	Data Raw: 5d 3f d4 b1 65 d6 76 91 73 0c 33 ac 0b bb 00 73 5a ad b5 ba a0 4b ba ac 2b ba aa 6b ba a1 bf 58 ef 1b be 91 b7 c7 1f 56 68 a4 29 36 e5 15 6b 85 72 a7 e0 b0 8e e8 a8 8e 19 fb e9 77 e4 77 8a cd 79 c5 79 95 58 a1 91 a6 d8 1a ca c4 0a a5 4c 1c d6 11 1d 55 ca 44 ca c4 c8 ef 14 db 28 73 1c 2b 34 d2 14 3b 42 99 58 a1 91 a6 f8 cf 41 5d 23 44 10 04 01 14 6d 1c fa 5c b8 77 2d ce d5 70 8f d6 37 9e 08 bb 15 c5 4b de e8 1f 9f 3e 30 1a 1c 94 4d 6e b1 b1 c7 5b be f0 95 6f 7c e7 07 07 1c 72 c4 31 27 9c b1 4b 8f 5c c3 51 a9 fc e2 6f 7a 5c 96 58 f9 c5 df b4 95 25 56 e6 73 48 2f 79 c5 eb 7f 3d 87 e6 39 34 6d d3 86 36 b4 a1 0d 6d 68 43 1b da d0 86 36 b4 27 f9 0c 23 ad cc 31 33 dd e0 26 b7 b8 63 cf 66 be c7 5b de f1 9e 0f 7c e4 13 9f f9 c2 57 be f1 9d 1f 1c 70 c8 11 c7 9c 70 Data Ascii: ]?evs3sZK+kXVh)6krwwyyXLUD(s+4;BXA]#Dm\w-p7K>0Mn[o\|r1'K\Qoz\X%VsH/y=94m6mhC6'#13&cf[\|Wpp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.11	49732	3.217.205.239	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:41:53 UTC	765	OUT	GET /pages/themes/default/css/font/fontello.woff2?72081712 HTTP/1.1 Host: rmshg.amplified.training Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://rmshg.amplified.training sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://rmshg.amplified.training/index/css/fmt:1714566301,tn:51,tv:5,ct:1,rtl:0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; login_token=153a9a8f304880470316f98fd745653f
2024-05-06 16:41:54 UTC	391	IN	HTTP/1.1 200 OK date: Mon, 06 May 2024 16:41:53 GMT content-length: 31972 server: Apache x-content-type-options: nosniff x-xss-protection: 1; mode=block last-modified: Mon, 17 Oct 2022 09:40:06 GMT etag: "7ce4-5eb37c2be09d3" accept-ranges: bytes vary: User-Agent cache-control: public strict-transport-security: max-age=31536000; includeSubDomains; preload; connection: close
2024-05-06 16:41:54 UTC	13907	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 7c e4 00 0b 00 00 00 01 0a 1c 00 00 7c 92 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 54 06 60 00 a5 6a 0a 83 c4 28 82 e7 0b 0b 83 6a 00 01 36 02 24 03 87 50 04 20 05 85 4d 07 95 0e 1b cd d8 07 64 5e 4b 8e bb 1d 98 93 71 f9 67 17 1d 88 dd 8e 14 29 a0 99 2c 98 6e f3 41 6e 47 52 81 d8 9f cf fe ff 4f 4d 50 22 63 26 df 7a a1 a9 50 40 06 3a 75 13 10 86 98 50 58 cb 49 45 f4 c9 ee 73 64 06 3d 0c cb b9 b5 86 0b 48 1f b6 14 8c 75 db d7 87 eb 1e 8f c0 e1 8f 70 61 3f e7 de dc 38 46 5b b2 e4 f2 57 c9 b3 06 0a 43 61 79 c7 f5 2c 79 89 5e f0 5b 13 85 a5 c8 ab e4 d8 ce fd ec ab 8d fa 6f 3d 2a cc 72 da 6f f6 e3 df 1e 7b a2 90 18 f2 eb 5e df aa 8b dc 90 8d 8a 1f c4 1f 81 1c b8 ae 56 97 fe 5f 83 a6 56 14 2f 02 1b Data Ascii: wOF2\|\|T`j(j6$P Md^Kqg),nAnGROMP"c&zP@:uPXIEsd=Hupa?8F[WCay,y^[o=*ro{^V_V/
2024-05-06 16:41:54 UTC	12618	IN	Data Raw: 63 d4 1f 68 a3 ac 1f 36 8f de 73 d3 99 e7 22 74 0d 6e 82 45 c3 1a 79 8d f0 57 d8 e4 e7 a2 70 59 0b 89 0b 5a 08 fd 9c 83 ec 7e 65 8d 59 6d 1f d8 59 16 c5 6f 83 d1 77 52 6d d4 24 71 12 33 ea 36 73 17 1d 5e 2b a8 0c ca 50 86 87 bb 5d 0b af bf 2b cd 46 8b b3 76 8a 6d 5f 9c 8f 02 ef 77 37 f1 9f 9c 39 e2 52 4c 2b b6 16 d7 1a 74 29 c2 dc b0 9b 15 c6 ba 4f fb 7f f3 7f cc b3 55 fd e1 6e e3 b9 e8 0c 6f ba 85 f1 cd 8f 11 5b 78 95 fc 88 52 db 0b c5 d4 18 2a 1b a1 74 9c 07 4b fc 59 2d fd 53 a1 fc c5 36 4f f4 8a ee 9d 8d 12 ba 4f 13 e9 a7 42 db d1 15 8e 17 3f 45 b8 5e c0 42 f0 3e 4d 59 ad 90 57 77 b0 44 b5 bc 83 28 0e 41 11 55 28 b4 c4 09 a2 81 30 ee 7a 09 61 c5 51 e1 75 ae cd d7 56 34 ed 6b 05 62 39 9c 7b 56 42 ea 91 4c 80 50 b4 04 fa 3b d0 92 15 04 70 88 7b 1d ec 3e Data Ascii: ch6s"tnEyWpYZ~eYmYowRm$q36s^+P]+Fvm_w79RL+t)OUno[xR*tKY-S6OOB?E^B>MYWwD(AU(0zaQuV4kb9{VBLP;p{>
2024-05-06 16:41:54 UTC	5447	IN	Data Raw: 6c 12 a4 f0 f9 29 02 93 59 02 a5 71 14 db 53 da d5 55 01 5a ca ad 8b 14 9e 56 53 99 3c db 61 b6 c2 33 5d 72 cb cd 43 39 e6 77 05 e8 d4 0b 92 5a 1a 78 c7 77 06 e8 49 15 d9 22 ed 17 d9 e1 a5 ea 79 bb f6 fa 17 cd 69 d2 56 97 5d 1e 37 82 ed 4d 31 7d e0 99 7e db df f7 54 d3 44 9c 5d be ef f6 bd b0 0a 68 1d c3 10 9f 95 d9 5b 2a 4c 0b 36 a6 4b 7a d6 fd d6 d5 db 1d c5 09 58 7d 6e 11 b3 04 be 95 5b a0 07 56 e2 d6 d4 d4 d9 21 bb 02 cf 85 34 3f 7d a0 31 60 fd 1b 6d 90 36 3d 5f 24 fd 3c d7 47 ef 59 85 4a 42 34 cf 02 fc 1e 0c fd ea ab 64 d0 76 a2 36 8c c3 6c 0f 7a 82 2c d6 d3 df e3 f4 fe ba ac 54 d0 5a fa db bb 16 83 f7 19 03 7d 3b 3f 83 d8 e6 5d 9b 63 9b 86 37 81 e9 f3 6a c5 99 54 b2 08 2a 83 14 10 55 bb 09 f1 c5 fd ff 94 fd 42 ab a5 fd 22 fb d3 df fa f9 cf 01 51 1a Data Ascii: l)YqSUZVS<a3]rC9wZxwI"yiV]7M1}~TD]h[L6KzX}n[V!4?}1`m6=_$<GYJB4dv6lz,TZ};?]c7jTUB"Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.11	49729	3.217.205.239	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:41:53 UTC	760	OUT	GET /pages/themes/default/css/font/Open_Sans_600.woff HTTP/1.1 Host: rmshg.amplified.training Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://rmshg.amplified.training sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://rmshg.amplified.training/index/css/fmt:1714566301,tn:51,tv:5,ct:1,rtl:0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; login_token=153a9a8f304880470316f98fd745653f
2024-05-06 16:41:53 UTC	430	IN	HTTP/1.1 200 OK date: Mon, 06 May 2024 16:41:53 GMT content-type: application/x-font-woff content-length: 20792 server: Apache x-content-type-options: nosniff x-xss-protection: 1; mode=block last-modified: Wed, 23 Mar 2022 16:57:16 GMT etag: "5138-5dae59f30a400" accept-ranges: bytes vary: User-Agent cache-control: public strict-transport-security: max-age=31536000; includeSubDomains; preload; connection: close
2024-05-06 16:41:53 UTC	8588	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 51 38 00 12 00 00 00 00 89 04 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 44 45 46 00 00 01 94 00 00 00 16 00 00 00 16 00 10 00 dc 47 50 4f 53 00 00 01 ac 00 00 00 0c 00 00 00 0c 00 15 00 0a 47 53 55 42 00 00 01 b8 00 00 00 59 00 00 00 74 dd ca de 9a 4f 53 2f 32 00 00 02 14 00 00 00 5e 00 00 00 60 a2 0e 97 bd 63 6d 61 70 00 00 02 74 00 00 00 94 00 00 00 c4 cf 82 72 24 63 76 74 20 00 00 03 08 00 00 00 5b 00 00 00 a6 10 91 1a 34 66 70 67 6d 00 00 03 64 00 00 04 9b 00 00 07 b4 7e 61 b6 11 67 61 73 70 00 00 08 00 00 00 00 0c 00 00 00 0c 00 08 00 1b 67 6c 79 66 00 00 08 0c 00 00 37 8b 00 00 54 da 72 6e 93 dd 68 65 61 64 00 00 3f 98 00 00 00 36 00 00 00 36 f7 bd 9b af 68 68 65 61 00 00 3f d0 00 00 00 Data Ascii: wOFFQ8GDEFGPOSGSUBYtOS/2^`cmaptr$cvt [4fpgmd~agaspglyf7Trnhead?66hhea?
2024-05-06 16:41:54 UTC	12204	IN	Data Raw: 29 51 cc 7c d8 d2 6d 79 b6 3e b6 21 b6 c5 b6 67 6c a7 6d 9f da f4 16 6a d3 59 41 d0 0f 51 25 50 b7 90 e6 31 b4 91 96 a6 39 75 3c 0e c1 b1 a5 dd 7a ac bc f8 6a 69 0c 0f ee 4a dc eb d8 ca ce 5e 4f 7d 71 bb 32 22 86 51 84 f3 f3 b5 6e b6 a8 5e 10 2a 4b 16 93 e0 3d 65 92 62 10 29 b7 45 a7 30 66 20 46 20 56 39 ca ff 46 e3 08 b1 d8 3f a8 06 44 b1 dc 5b c1 05 73 b0 37 5a 79 57 3c c7 eb f8 86 59 df 7c 63 22 65 5b 70 24 cf 6a 98 8f 5f 8c e5 73 64 57 83 fe 7d 88 40 47 d5 27 50 f0 84 f4 80 28 31 02 e8 8e 06 03 31 de aa fc 94 5d 91 d5 8a 2c f6 95 1f 4a 43 fe 94 64 27 00 aa 8a 82 86 64 9a 95 e9 32 1b ec 46 6b 8a 50 93 66 92 5d f0 cc 6b b7 c5 b6 b7 9a 78 db 1b 87 72 8e e2 ff 52 1c af d6 8e 8a bc 0a e7 17 bb c4 2a ea 86 8e 7a 62 c6 c5 3d 3e 53 9b 97 c7 dc b8 d3 d6 6e c7 Data Ascii: )Q\|my>!glmjYAQ%P19u<zjiJ^O}q2"Qn^K=eb)E0f F V9F?D[s7ZyW<Y\|c"e[p$j_sdW}@G'P(11],JCd'd2FkPf]kxrRzb=>Sn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.11	49731	3.217.205.239	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:41:53 UTC	760	OUT	GET /pages/themes/default/css/font/Open_Sans_700.woff HTTP/1.1 Host: rmshg.amplified.training Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://rmshg.amplified.training sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://rmshg.amplified.training/index/css/fmt:1714566301,tn:51,tv:5,ct:1,rtl:0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; login_token=153a9a8f304880470316f98fd745653f
2024-05-06 16:41:53 UTC	430	IN	HTTP/1.1 200 OK date: Mon, 06 May 2024 16:41:53 GMT content-type: application/x-font-woff content-length: 20964 server: Apache x-content-type-options: nosniff x-xss-protection: 1; mode=block last-modified: Wed, 23 Mar 2022 16:57:16 GMT etag: "51e4-5dae59f30b3a0" accept-ranges: bytes vary: User-Agent cache-control: public strict-transport-security: max-age=31536000; includeSubDomains; preload; connection: close
2024-05-06 16:41:53 UTC	8588	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 51 e4 00 12 00 00 00 00 8b b0 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 44 45 46 00 00 01 94 00 00 00 16 00 00 00 16 00 10 00 dc 47 50 4f 53 00 00 01 ac 00 00 00 0c 00 00 00 0c 00 15 00 0a 47 53 55 42 00 00 01 b8 00 00 00 59 00 00 00 74 dd ca de 9a 4f 53 2f 32 00 00 02 14 00 00 00 60 00 00 00 60 a2 75 a1 18 63 6d 61 70 00 00 02 74 00 00 00 94 00 00 00 c4 cf 82 72 24 63 76 74 20 00 00 03 08 00 00 00 5d 00 00 00 aa 13 2d 1a 94 66 70 67 6d 00 00 03 68 00 00 04 a4 00 00 07 e0 bb 73 a4 75 67 61 73 70 00 00 08 0c 00 00 00 0c 00 00 00 0c 00 08 00 1b 67 6c 79 66 00 00 08 18 00 00 38 57 00 00 57 84 a6 7d 2b b5 68 65 61 64 00 00 40 70 00 00 00 36 00 00 00 36 f7 e1 c7 0e 68 68 65 61 00 00 40 a8 00 00 00 Data Ascii: wOFFQGDEFGPOSGSUBYtOS/2``ucmaptr$cvt ]-fpgmhsugaspglyf8WW}+head@p66hhea@
2024-05-06 16:41:54 UTC	12376	IN	Data Raw: 5b 14 37 78 20 12 cd 40 00 9f 4d 33 1b 0c 9a e6 b5 49 4e a7 34 2c e6 b4 1b 01 35 8f b0 fe 5d e2 73 67 55 2a 53 ee 23 18 e5 08 ea c6 21 b1 55 22 6d 61 87 b7 df 75 2b 3b 8c 65 aa 6a 9f fc b7 7d ef 93 55 df bd b0 b7 e3 3b 6e 08 f6 16 ae 1c b3 e9 3f f6 03 81 47 00 f0 04 9f db 00 66 51 d9 95 34 0d 8c 46 8b c9 66 f4 10 f5 ba 18 81 38 f9 07 76 d6 c1 5d 7d c2 e5 7a ed 53 88 ca 23 9b 37 5f 7f fd 66 1c 20 26 91 97 3c f6 d8 b0 51 17 7d 52 33 00 b9 d4 ca dc fa b8 16 f0 42 69 d4 ef e4 ea 4d 0c 06 9f dd 73 5d cc 0e 9a 4d a4 e8 5c b1 33 93 15 a7 84 85 49 4c 91 d8 06 d0 a3 45 85 26 27 1c 3a bf 71 e8 75 23 87 61 d9 07 73 f4 69 99 3b f0 ad ab a9 51 da 7a b1 e4 e5 dd ea 74 31 3b 24 a8 f9 83 be 93 7f 5d 34 24 71 df 49 28 55 64 d9 6e 35 5a 2c 06 83 d1 68 33 81 f8 d5 60 b5 52 Data Ascii: [7x @M3IN4,5]sgU*S#!U"mau+;ej}U;n?GfQ4Ff8v]}zS#7_f &<Q}R3BiMs]M\3ILE&':qu#asi;Qzt1;$]4$qI(Udn5Z,h3`R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.11	49735	18.173.145.206	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:41:54 UTC	635	OUT	GET /rmshg/1576085319_RMS%20Site%20Logo.png HTTP/1.1 Host: d3j0t7vrtr92dk.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rmshg.amplified.training/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:41:54 UTC	541	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 891 Connection: close Last-Modified: Wed, 11 Dec 2019 17:28:39 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: xuCm8c5hTh.dnekhlQ5ceXayCT.yqA_x Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 06 May 2024 16:41:55 GMT ETag: "75c459747c5170860ea16e7580989668" X-Cache: RefreshHit from cloudfront Via: 1.1 bd7394591e11960c5f8b5b7f1d8f3a30.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: S21xBrfsrAQEPPwDGQKlLqpyRbsWENx97eAdNFqp2FTU1RHBc53HCQ==
2024-05-06 16:41:54 UTC	891	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 42 49 44 41 54 58 85 ed 96 5d 68 93 57 18 c7 7f e7 7d 93 36 df b1 a9 d9 ec 36 36 53 15 41 13 c4 81 75 ac 20 ab 0e 6a f7 21 63 e2 57 57 c4 79 a1 bd 19 db c5 c4 c2 6e 8a e0 c0 0b ed 95 a0 bb 59 d5 ab 8d 31 2a f4 a2 ce 0f c8 36 bd f1 63 b5 16 d4 d4 d6 ac ad 89 71 4d 13 6d d2 36 6f de bc 67 17 19 29 dd 12 3b a1 a6 37 7d 2e 9f f3 1e fe bf f3 fc df 73 9e 47 48 29 25 0b 18 26 00 c3 90 e8 7a 0e 21 ca 27 2c 25 98 4c 6a 1e 60 e8 61 94 d3 a7 ce b3 72 d5 eb 65 03 18 fe 33 c6 8e 1d 0d 79 00 80 cd 9b d7 d3 d4 f4 4e d9 00 ae 5e bd 83 94 12 a5 6c 8a 25 c2 54 2c 19 0c de 24 91 98 9c 77 31 8b b5 82 ad 8d 1b e7 06 38 7e e2 67 42 a1 e8 bc 03 78 bd ee ff 00 2c b8 05 8b Data Ascii: PNGIHDR szzBIDATX]hW}666SAu j!cWWynY1*6cqMm6og);7}.sGH)%&z!',%Lj`are3yN^l%T,$w18~gBx,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.11	49741	18.173.145.84	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:41:54 UTC	386	OUT	GET /rmshg/1576583896_newRMSbanner.png HTTP/1.1 Host: d3j0t7vrtr92dk.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:41:55 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 83741 Connection: close Date: Mon, 06 May 2024 16:41:55 GMT Last-Modified: Tue, 17 Dec 2019 11:58:17 GMT ETag: "f4ab68c1906e983eb48dd191a5556dc9" x-amz-server-side-encryption: AES256 x-amz-version-id: RcTlZpN32J2lExGrP5_BLoD7Pg0_FdM1 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 d4b7883c7915f8b518d09e4d04990ecc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: Pup-2wzDgXlMIrH16moeAeBHmFhS-uU4DTOlchegWTNofG6wZInTAg==
2024-05-06 16:41:55 UTC	14588	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 92 00 00 01 c2 08 06 00 00 00 b4 5b e3 4f 00 00 20 00 49 44 41 54 78 9c ec dd 7b 7c 5c 75 9d ff f1 d7 f7 9c 99 c9 4c 26 4d 7a bf df 5b a0 c5 52 a0 b4 85 5d 2e 22 ee 2e e8 5e d4 5d 77 75 bd c0 8a 78 61 41 10 8a 5c 44 11 44 44 0a 01 a1 20 eb 05 af fb 73 75 fd ad e8 aa ab 3f 57 50 ee 62 4b 29 05 ed fd de b4 4d 9b 26 cd 75 26 99 39 e7 fb fb e3 cc 24 93 c9 cc 64 92 26 bd be 9f 8f 47 68 32 73 e6 9c ef 39 4d c9 9c 77 3e df cf d7 20 22 22 22 22 22 22 27 9d da da da 9b 7c df 3f 27 14 0a b5 b8 ae 8b e3 ba b8 ae 8b eb 38 c1 9f 99 0f 27 e7 6b a7 c8 e3 d9 8f 90 e3 80 e3 d0 95 4e 93 ee ec 24 9d 4e 93 4a a7 49 a7 52 c1 9f e9 34 e9 74 8a 74 2a f8 3c 95 4a 65 1e 0b 1e cf 7e 9d 4a 65 bf ce 79 ce 4b 91 ee 4a 77 6f 9f Data Ascii: PNGIHDR[O IDATx{\|\uL&Mz[R].".^]wuxaA\DDD su?WPbK)M&u&9$d&Gh2s9Mw> """"""'\|?'8'kN$NJIR4tt*<Je~JeyKJwo
2024-05-06 16:41:55 UTC	2854	IN	Data Raw: 2c 12 19 0d d0 e2 fb 7b fe ed 2b 5f 31 2f 3c f7 dc f9 a5 ce 0f 82 f7 57 87 0e 1d 6a 03 a8 19 31 62 a6 13 0a 7e f7 7a a8 a9 e9 1b 9f bf eb 2e 73 f0 e0 c1 e7 73 b7 ef 38 78 b0 21 14 0a e1 66 a6 ee 15 e2 1a e3 87 42 21 3a 1a 1a 1a f3 9f f3 3d 2f 6d 8c c1 18 73 58 3f af 2c e0 86 c3 24 1a 1a f6 e7 3e 1e ae a8 18 6d 7d 9f 67 9e 79 e6 bb 0b 17 2c e0 ca 0f 7f b8 fb ad 67 fe 31 07 72 fd ac b5 e9 48 24 d2 67 1c 75 7b f6 3c ed 7b 1e e3 c7 8f 5f 9c d9 d0 77 8c c1 eb ea 2a fa f7 09 30 71 d2 a4 bf 2f f6 bd f5 ea ea d5 1f 7a 28 a8 22 ca 4e 13 ec be d6 d6 da 74 de f7 58 9f bf 87 70 24 e2 64 ab 82 72 bd ed 6d 6f 5b fa df ff fd df 6b 73 43 24 80 fa fd fb 7f f2 c0 fd f7 7f 62 fa f4 e9 8c 8e 46 2f c9 3e 1e 8d 46 f9 dd ef 7e d7 e7 3a 02 dd 55 7c d0 73 1d bb 52 a9 b6 78 65 e5 Data Ascii: ,{+_1/<Wj1b~z.ss8x!fB!:=/msX?,$>m}gy,g1rH$gu{<{_w*0q/z("NtXp$drmo[ksC$bF/>F~:U\|sRxe
2024-05-06 16:41:55 UTC	16384	IN	Data Raw: f4 bf ef 79 cf 7b ee f6 7d 9f 74 3a cd 6f 7e f3 9b dd bf fa d5 af a6 e5 6e db da da 1a b5 05 9a 38 7e f1 0b 5f 08 3f f8 d0 43 a9 53 4f 3d f5 f1 8d 1b 37 7e 2c f7 b9 44 32 b9 3f 1d 8c a5 cf 34 b0 91 d1 e8 05 97 bd ed 6d 7f b5 a7 ae 8e 8d 1b 37 32 61 fc f8 05 67 2f 5a b4 60 db 1b 7f fc f3 bd cd 87 7e fe f4 53 4f 2d d9 5f 5f bf 62 e9 d2 a5 d7 be eb 5d ef ba d5 f7 7d 8c 31 34 35 35 f1 bd ef 7d ef 9b af be fa ea 87 fb 3b bf cf dd 71 87 39 ff fc f3 5f 58 b0 60 c1 9f 9f 7d f6 d9 0b 2b 2a 2a 70 1c 87 ed 3b 76 70 f7 5d 77 5d 71 b0 a9 e9 bb 00 b1 58 e5 f4 cb 2e bd f4 e2 ba ba 3a 36 6c d8 c0 e4 49 93 16 9d b3 68 11 3b 77 ee 7c 67 5d 5d 5d af c0 e3 50 7d fd fe 50 38 cc a1 64 b2 cf 39 ed 6f 6d fd d5 ba 75 eb 98 34 71 e2 82 c9 93 26 2d 80 60 ba 9b b5 96 29 53 a6 b0 77 Data Ascii: y{}t:o~n8~_?CSO=7~,D2?4m72ag/Z`~SO-__b]}1455};q9_X`}+**p;vp]w]qX.:6lIh;w\|g]]]P}P8d9omu4q&-`)Sw
2024-05-06 16:41:55 UTC	1024	IN	Data Raw: 21 09 80 51 cd 0d 2f 53 b0 4b 31 dc 07 a3 7d 8a d1 43 d6 ff da e7 18 3d e4 4a 5f a3 8f c3 8e d1 a7 2d b4 67 78 f5 1a c7 be a1 72 bf 24 cf c1 aa 2e c5 5d ff ed a0 18 31 dd 0e c6 36 99 fa f4 5c 92 74 5b 68 aa ef 48 0d 14 ac 2b a5 a5 45 75 1a 8b 2f b8 d9 48 db d1 f6 14 a0 bc f2 f7 94 87 67 1d 4d 69 e1 14 09 bf 8b 4f 46 09 45 05 b7 d4 5b 3c b6 b0 d1 68 b7 c4 86 6b 90 72 df db 30 12 ab 0a ba 6c 00 49 8d d4 d1 ff 6c c9 2a 06 5f 54 6b f4 b4 d0 80 3b 10 93 d6 2f 4b ae e6 56 c0 a3 ed 9a 02 74 68 da e6 e3 1b 70 a7 e1 8b 93 2b 70 ea c0 54 a6 f2 62 45 22 92 84 19 47 29 85 73 8e fd cf 1e a3 30 b4 97 92 14 9f f4 a7 94 68 09 88 f0 7f bf f9 90 6d 61 5e 67 3b cb ba 3b 19 cd 8f e3 62 2e 81 7e fa b5 62 df fe a3 14 47 0e 52 8a 6d 8d fe b6 90 65 41 f7 59 74 77 cf 65 74 b4 30 Data Ascii: !Q/SK1}C=J_-gxr$.]16\t[hH+Eu/HgMiOFE[<hkr0lIl*_Tk;/KVthp+pTbE"G)s0hma^g;;b.~bGRmeAYtwet0
2024-05-06 16:41:55 UTC	16384	IN	Data Raw: da 3c ad 85 59 bd e6 aa 4e e0 17 80 3f c3 9f 67 f8 2b 4c 13 f0 fb c0 d3 bb 77 6d 7e 3c 72 fc bb 77 ef da fc 99 c8 f7 cd c1 58 6e 01 4e 00 8f e2 af 41 94 0b 81 ce e0 b9 c6 5f e3 43 c0 ed c0 89 dd bb 36 ff 30 65 6c df 03 5e 4e e9 da 0c c7 0e e9 04 d6 e2 af ed c7 81 8f ee de b5 79 6c f5 9a ab ba 81 5b 83 d7 bb 81 55 f8 6b 18 fd 1b dc 10 b0 13 08 15 cf e6 a0 af 92 02 ea 1f 37 11 f4 7d 22 78 dc b4 7b d7 e6 be a4 f1 26 8c ff e5 c0 ef 00 9b 76 ef da fc 74 3d e7 44 ce 6d 05 6e 06 ae 0f fa 7d 9c ca 75 6d c2 37 46 ec 01 e6 01 0f ee de b5 f9 7f 34 d8 4f 2f b0 03 5f dd dd 1f 3c 26 28 dd 6b 1a 38 0f 7f 0d f7 02 57 ef de b5 f9 bf 57 af b9 ea 03 c0 a5 94 ee ef 36 ca d7 b7 08 ec a2 f4 79 98 00 5e 06 b4 52 fe eb ac 06 fa 80 67 80 31 e0 f3 bb 77 6d fe ee ea 35 57 7d 16 f8 Data Ascii: <YN?g+Lwm~<rwXnNA_C60el^Nyl[Uk7}"x{&vt=Dmn}um7F4O/_<&(k8WW6y^Rg1wm5W}
2024-05-06 16:41:55 UTC	2174	IN	Data Raw: ed c7 19 02 a6 60 2c a8 57 51 9c de bb 1c 6e c7 c8 2e b6 15 58 69 f6 65 ff 89 b3 9f 9b 3f 53 7a ee ec f0 7b ae 77 33 db 73 7a 51 dd 63 1e c3 1a b3 2d 1d e3 37 63 02 46 e8 ce bf 30 8e db 13 89 78 4c 0f 47 a2 7f 00 d6 9a 76 74 51 1a 84 d0 0e 4c c7 f0 de 59 08 3c 84 71 4d 2d a7 58 f8 18 8c 31 9f 42 f9 df ae 0c b0 0e e3 51 b1 11 f8 8b 83 6c 5b 8d 11 a2 b7 11 e3 bc 6c 70 d4 57 30 42 2f c7 62 9c 87 c5 65 8e ed 45 e0 7e b3 af f7 28 bd 17 1a 29 9c af 5a 75 6b 2c fc 03 e3 7a ca 99 b6 af a3 d8 ef 20 84 11 de 36 02 83 a4 71 b5 7b b0 61 7a 12 3d 19 8e 44 ff 63 da 73 00 c6 7d 35 8a e2 f3 a4 60 8c d3 df 30 f4 80 74 37 dd b1 44 3c 96 33 33 ad 4d c3 b8 be 56 52 7c 1d 58 e3 3a 05 e3 58 97 55 30 f1 f3 c0 b7 6c 75 15 0c 1d a4 56 0c d2 ab ec bd 69 ce 4f bf 0d 47 a2 cf 60 90 Data Ascii: `,WQn.Xie?Sz{w3szQc-7cF0xLGvtQLY<qM-X1BQl[lpW0B/beE~()Zuk,z 6q{az=Dcs}5`0t7D<33MVR\|X:XU0luViOG`
2024-05-06 16:41:55 UTC	34	IN	Data Raw: d3 f8 c9 6f 74 1a c3 c2 7b 2d e8 c6 6b 54 4b a2 58 e9 e8 9d f0 b3 d0 75 f6 a5 0d d2 5b bb 6a b2 60 f9 Data Ascii: ot{-kTKXu[j`
2024-05-06 16:41:55 UTC	16384	IN	Data Raw: 60 8d 84 30 bc 22 06 f2 21 e0 32 1c d2 f0 a4 2a e7 99 ef 0a b7 e3 ab 10 5e a4 54 71 0c aa 42 51 28 96 c4 20 5f 92 59 d8 ad 15 c6 4e 93 0c ff b1 06 42 d2 d2 02 d2 12 28 2f 49 07 6f d4 6b ed 10 a4 57 6b 1c f1 8b 1c 91 d9 92 66 15 d2 7a a9 6d 69 1d 36 f6 c2 8a 6d b0 6c 1b ac de 06 7d 19 77 7b 52 1a 8c 6c 86 29 33 60 b7 6b b3 d0 27 69 19 e6 4d 12 49 00 9f c7 af 94 39 1f 7e af 05 55 b5 b5 e3 67 c5 6e 65 ef f3 43 0e 79 e9 5e 0d 05 cc ec 67 be e0 d4 70 72 c2 b9 4d d7 d1 35 68 8e 08 1e 78 54 e3 d2 3f 6a ec 33 a3 40 22 29 02 fa 35 58 b9 04 36 5d 11 84 66 95 de ee 0a 24 92 65 73 28 7b aa 4f ab 3f b4 a8 7b 24 d5 51 47 1d 75 d4 51 47 1d 75 d4 51 c7 07 05 a9 f4 2c 14 e5 dd 92 ed 1a 79 8f 1d 35 00 bd 9b 25 ad e3 04 fd d7 a9 34 5f a4 21 a6 42 67 a3 e1 e1 91 ce c1 3e 11 Data Ascii: `0"!2*^TqBQ( _YNB(/IokWkfzmi6ml}w{Rl)3`k'iMI9~UgneCy^gprM5hxT?j3@")5X6]f$es({O?{$QGuQGuQ,y5%4_!Bg>
2024-05-06 16:41:55 UTC	1024	IN	Data Raw: 9e 9a ab 65 12 bb a2 7a 21 5e af 63 30 11 c9 da ee d2 b8 2a d6 0c 4b eb 73 76 80 09 32 44 24 d7 a3 88 04 12 91 c4 82 21 47 92 10 42 08 21 84 10 42 24 e8 0a e0 b6 16 8c 1f f6 67 8f 89 9d 49 ab 0c 3c d7 76 26 ad 4a 06 70 d7 e0 ae 7b a3 00 ee 0b eb cc de 6b 09 4c c5 4d 58 a5 10 69 7a 73 e7 58 1b 96 76 b9 39 b6 16 cd 77 00 76 ec f6 81 48 f4 9a 27 d7 51 c2 65 54 05 17 69 87 a3 eb 0d 5f b9 ad 38 58 bb 54 44 82 f4 3d 94 88 24 e6 0d 39 92 84 10 42 08 21 84 10 22 41 94 99 b4 b6 f5 82 ef 75 8b 2f 0e 6a 75 98 7a ca c1 31 6d 67 d2 ce b4 33 69 93 e1 13 3f 0e b8 fc 73 0d 46 36 1a 8c 4b e8 3e 45 8e a1 ce a4 e7 ec 63 d3 e1 d1 65 f8 7e 5e a6 ce 70 a9 b2 cb cc 13 7a f2 2e a7 e8 3a 03 42 01 29 76 4e 25 f3 93 62 e7 57 bf ee ac 22 e2 dc a8 8a 87 1a 17 8a 48 5f be 35 76 22 65 Data Ascii: ez!^c0*Ksv2D$!GB!B$gI<v&Jp{kLMXizsXv9wvH'QeTi_8XTD=$9B!"Au/juz1mg3i?sF6K>Ece~^pz.:B)vN%bW"H_5v"e
2024-05-06 16:41:55 UTC	12891	IN	Data Raw: bb 8f e9 06 c6 f3 da 4a 4b fb c5 d4 3a aa 86 5e 7b 9d 81 de bd ae df 16 cd 55 3c 98 75 30 1e 65 22 5d 70 6b 33 3b 13 e9 89 54 39 5b 3d 71 9d ad e1 bb b6 e9 2a 67 13 8b 0a 65 24 09 21 84 10 42 08 21 44 1f 4c 7f 62 f3 a9 78 5e 77 66 52 2a a8 ba 6a 66 d2 96 d7 d7 f9 e4 05 1e b3 0f a4 02 b8 17 92 ac cc 26 67 42 eb 4d 96 e3 a8 30 bb 89 62 2b 43 af 39 46 83 64 41 f5 75 6e 74 33 52 eb 74 84 b7 63 3c 19 ac bd d9 61 9b e1 7b be 07 2f 1c 84 c7 b7 c1 de 8f d4 39 6e 8d 61 6a 47 e5 4c a4 57 ca 89 24 16 1b 72 24 09 21 84 10 42 08 21 44 1f 8c 5d 76 f7 36 b2 9c 49 8e 8e 9d 56 57 66 d2 5e d8 71 a0 9d 99 d4 68 86 ce a4 eb 7f d2 e0 d2 2f 34 19 59 e7 f0 31 e5 d1 3f bd 64 10 f5 4b 90 f1 9a 0b c0 af a6 82 74 50 76 4a d9 ee 34 7d b9 83 64 41 f5 73 ae 8d 6e 46 4a 44 32 2e 25 22 Data Ascii: JK:^{U<u0e"]pk3;T9[=qge$!B!DLbx^wfRjf&gBM0b+C9FdAunt3Rtc<a{/9najGLW$r$!B!D]v6IVWf^qh/4Y1?dKtPvJ4}dAsnFJD2.%"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.11	49740	18.173.145.84	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:41:54 UTC	387	OUT	GET /rmshg/1576089489_bikertraining.png HTTP/1.1 Host: d3j0t7vrtr92dk.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:41:55 UTC	538	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 171251 Connection: close Date: Mon, 06 May 2024 16:41:55 GMT Last-Modified: Wed, 11 Dec 2019 18:38:07 GMT ETag: "9b3b6e8ceb323cc39786e6c41ad361db" x-amz-server-side-encryption: AES256 x-amz-version-id: NfH46vgFpstDy9OLOe1TKg16q1hU5WQk Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 b3022b7a8efd08934ce14d0556eaed52.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: mTS5lKAlxUS87NqfFXe0Je5pQO7x8o3DyBZVPO0SoGSA49_Qc4gW8A==
2024-05-06 16:41:55 UTC	15824	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 a3 00 00 01 40 08 02 00 00 00 9e 27 84 8f 00 00 20 00 49 44 41 54 78 9c 5c bd ed 92 24 49 8e 24 a6 aa 30 f7 c8 ac ea 9e d9 9d 9d 5b f2 78 cb 15 9e 90 8f 77 4f 73 8f c0 37 e2 6f 8a f0 cf 89 f0 84 c7 9d dd 99 ee ae ca 0c 37 03 94 3f 60 1e d5 c7 14 99 ee 9a ea 8c 2f 77 18 a0 aa 50 20 f8 9f fe f3 ff 4e 70 c2 84 07 49 90 82 44 82 36 0a 24 40 82 80 04 03 06 5c 10 29 11 44 ff b8 08 2a 44 84 49 7c ff e5 f3 bf fe 97 ff eb df ff 87 ff e5 cb cf 3f d9 06 20 b1 1f 4a f3 f1 7e fc e3 3f fc fc e5 ed cd 80 08 82 45 d3 0c 01 c6 cc fa fe bc 3e 67 8a ec c7 02 20 69 82 06 40 11 f3 9a bf 7d bf ae 95 24 68 01 28 58 34 49 42 fd 7b 86 69 01 26 61 80 c0 cc 9c d7 aa b2 c4 eb 73 fe cb 7f fb 2f ff f7 ff f9 7f 3c 7f f9 f6 f3 cf Data Ascii: PNGIHDR@' IDATx\$I$0[xwOs7o7?`/wP NpID6$@\)D*DI\|? J~?E>g i@}$h(X4IB{i&as/<
2024-05-06 16:41:55 UTC	16384	IN	Data Raw: 9a 31 16 a0 d4 38 1d ca 1b 28 4e 4a d4 34 d3 90 bc 00 c9 7a 67 39 01 fe f9 48 dd 0b e2 1a 93 f4 88 f9 53 cf 47 37 9f 53 44 1f d1 d7 6d 5b e1 68 20 72 8e bd 05 83 8f 91 99 ad 47 50 4c 64 e1 f8 dc 5b 5d 49 8a 50 51 e2 95 04 14 c5 04 56 a5 6d ee 14 db 7d dc 11 24 45 8d 11 91 dc 7a 7d 48 46 63 33 af 78 61 67 5b 96 57 5e ba fb e6 ab 2f 2e c7 c5 9d 0b 1b 1d 45 11 14 b0 8d 3c ad bd c8 3e d8 d7 5b 13 70 41 2a d9 47 a6 cd 70 17 21 43 4c 8a 21 23 42 a4 a2 ee 99 32 05 e7 de 2c df 76 cc 5b 44 26 cc dc da 25 dd d0 eb 72 c8 8c 00 38 99 3c 2e c2 a0 80 42 22 6d 81 46 33 26 82 23 7a 46 8a 91 d1 d7 5e 34 7a 8f 8e c0 36 a2 12 3d 23 d3 81 40 9a 8c 3c 38 63 b8 21 f6 1d b7 24 68 14 a3 6e b6 66 f5 ce 67 ca 76 d5 87 74 2b d0 11 46 a6 01 36 38 bd 9c 8a da 30 55 fc 13 b2 ad 73 d1 Data Ascii: 18(NJ4zg9HSG7SDm[h rGPLd[]IPQVm}$Ez}HFc3xag[W^/.E<>[pA*Gp!CL!#B2,v[D&%r8<.B"mF3&#zF^4z6=#@<8c!$hnfgvt+F680Us
2024-05-06 16:41:55 UTC	1024	IN	Data Raw: 84 e5 3c 05 f6 31 aa ee 84 11 2a 0d ca a4 8a 26 a7 1c dc 32 32 84 c3 93 49 4a 10 41 ed fd de f2 f8 e5 47 1f 7a fd 35 69 dd 63 ea a1 4d 32 7d 20 92 37 77 87 b0 31 ce e1 89 60 93 48 50 15 bd 6b 43 8a 8b 1c 96 50 96 9a b5 2c 10 00 7a 93 04 c2 03 55 d8 db 74 a6 e9 b5 06 95 46 82 68 aa 1e 89 08 37 b6 be 7c e1 b3 af fd f2 6f fd de bf ff ef fc 35 8a 1f 1e 3c 28 0b a5 3d 7d 8a e5 40 77 0d df 25 b5 af d8 ee 54 1a a4 27 18 e6 99 19 3a 49 35 aa 3c be ce 6f 3d 7b e7 37 be 86 ab 07 c7 e7 d3 0a 30 d3 74 cc ad 6e 21 ea e4 df 98 50 41 0a ef 6a df 09 1f 66 c3 b4 b5 d2 7e f5 d6 62 96 a3 65 d6 a8 ce 5a cb cb 1d 09 10 68 4d 7a 93 75 69 9e b9 79 94 8d ab 06 17 26 76 cf 45 e6 83 42 81 64 1d 5e 29 02 07 93 a8 3f 75 a8 63 d5 d3 cb 69 7f 21 bd 2a 65 25 00 74 6a d3 d6 9a a8 71 86 Data Ascii: <1&22IJAGz5icM2} 7w1`HPkCP,zUtFh7\|o5<(=}@w%T':I5<o={70tn!PAjf~beZhMzuiy&vEBd^)?uci!e%tjq
2024-05-06 16:41:55 UTC	16384	IN	Data Raw: 44 0a 22 62 47 20 c8 81 73 46 6c 4f 6e b6 f7 de 37 b3 ed 78 d5 db 1a 2a 4d 97 9b de fb d2 b4 75 69 4d a8 aa d5 84 33 03 62 6b bb 6d e9 b5 9a b0 a1 a9 a8 2c 2a 02 72 98 ab 34 59 8e 18 37 19 19 ee 59 c9 9b 19 b1 a9 b7 65 1b e6 93 67 95 f5 b8 2e 5d 65 69 49 84 c7 40 24 2b 3e a4 7e 06 36 ea f5 40 56 70 5a c9 ee 22 43 a8 e5 7a 4e 80 54 0a d0 86 ec 5a 8a 06 2d 2e 4f 28 ee 53 ad 04 50 b8 ac 6b 26 63 0c 1b 0e 4a d3 45 59 f2 af 9a ca c4 3d dc 33 62 50 3b a5 ab 46 2d cb c5 a2 4e 25 88 30 51 41 bb a2 d2 90 94 d2 b3 90 12 62 16 e7 3b 8b a0 96 d7 89 98 dc 27 62 e6 35 83 15 93 50 bb aa 87 59 02 2a 6c 85 57 65 90 6c 1d 11 6e 16 fb 79 db 4e e6 c3 87 87 3b 99 90 72 ff 6b 46 68 d3 76 d4 b5 ab 1e 9a 1e 1b 47 3a 72 5d 5a 3f ae 72 c6 b9 b7 4e 8e 32 59 10 19 91 36 2c 5d 2c 24 Data Ascii: D"bG sFlOn7xMuiM3bkm,r4Y7Yeg.]eiI@$+>~6@VpZ"CzNTZ-.O(SPk&cJEY=3bP;F-N%0QAb;'b5PY*lWelnyN;rkFhvG:r]Z?rN2Y6,],$
2024-05-06 16:41:55 UTC	1024	IN	Data Raw: f5 3e 9f 15 b1 02 eb d4 fa 6d ad c7 64 dd 8e 39 05 29 2f f0 94 c3 07 01 d1 08 21 63 70 ef 32 14 93 6d b4 61 de 73 d9 d4 65 39 e8 6c 2a a5 a4 f6 0a db de 48 5c 5a cd d0 f5 58 90 1e 3b e1 1e 11 d5 7d ac 3e 0c 75 33 8c c3 30 ae c6 e1 64 bd 3a 5e 2e ef 1f 1e dd 3d 3c 3c 5a 9d 1c 2f 4f c6 d1 1d a2 a5 58 29 05 66 40 a8 0c 45 e9 b0 62 99 fa c9 88 0c 34 9a b6 4e 6e 3c 4a 56 51 39 e5 05 90 0c dd cb ab 1b a4 47 8d 9a 15 42 6e ac 89 91 69 f8 42 64 ea 70 b4 e3 a3 c9 1f 54 e9 a7 ae a6 b6 be 27 60 27 09 be b4 f4 8b 84 67 c9 39 d2 55 44 9b f0 9b 02 6a e8 74 e3 79 16 a6 53 a9 c0 29 21 85 21 12 0e a8 5a 83 cc 5a 8d e5 e1 06 61 84 41 ac 33 41 38 a5 8e 63 cb d3 60 48 4b ac e3 29 da d4 2a 8b 69 47 67 2e 58 42 8d 23 5b 5c 4e 8b 5e 4a 2c 2b 9d 76 a7 7a 17 40 c0 49 f3 27 0d ac Data Ascii: >md9)/!cp2mase9lH\ZX;}>u30d:^.=<<Z/OX)f@Eb4Nn<JVQ9GBniBdpT'`'g9UDjtyS)!!ZZaA3A8c`HK)iGg.XB#[\N^J,+vz@I'
2024-05-06 16:41:55 UTC	16384	IN	Data Raw: e9 7a b3 26 d9 f7 fd 66 b3 51 b5 52 ba e3 93 c3 b1 d6 93 ab 4f 3e 20 b8 19 cb c9 fd e5 6c ff d7 bf f4 da ac eb 66 b3 ee e8 f0 60 f0 da 77 3b a5 d4 3b cb d5 cf ff b2 fc b5 1f bf 7f 5c 36 57 4e 0e 76 74 fb f0 77 fe d4 6e 5c ee 66 65 3e 9f 1f cd fb ae eb fe d4 f7 74 7f 5a 70 ef de c1 f1 f1 c9 fc 95 1b 8f 7e f9 6b ec ed a3 c3 fc 6f 5f f9 e6 4f fa f5 1f 1e 1f fd 67 c7 df a8 eb 7b ef dc 9d bf 31 ab c6 4e d5 b2 d4 f5 5a 21 12 c1 ed 76 bd 5a 2f 67 5d 7f ad 5f fc d6 d9 33 3f b2 31 dc 3b 41 b1 ee b1 cb db 83 83 9f 7c fe d6 5f ff c0 45 06 2a 88 50 00 0e 0d e9 13 87 15 f6 28 de f9 4c 82 ca 50 af 31 6e 87 71 3b c8 56 c6 51 27 ee 9d 1e 21 91 76 47 aa b0 c0 0c 5d 67 8c 12 3e 10 a7 b2 25 80 18 6b d8 10 43 a9 da a9 59 da 96 70 ea 67 6a b0 8d b2 98 f5 45 6b 8e 4e 10 a8 a0 Data Ascii: z&fQRO> lf`w;;\6WNvtwn\fe>tZp~ko_Og{1NZ!vZ/g]_3?1;A\|_E*P(LP1nq;VQ'!vG]g>%kCYpgjEkN
2024-05-06 16:41:55 UTC	1024	IN	Data Raw: 01 f2 9e 66 04 c2 f3 e1 ce 4d b9 c9 48 01 d0 6d d1 83 9f 30 7a 69 8e 20 b4 ea 02 39 e4 dc 83 12 f4 5b 27 83 e7 0e b6 ab 06 98 24 02 88 73 94 32 77 7d df 1c 1d ab 48 e2 ec 11 1d 11 11 b1 48 1c b6 d8 34 b5 27 ab 6c cf cc e2 83 32 0b 89 20 e2 c9 d5 6b 99 9c 70 c6 94 98 59 33 43 1a 62 66 cd 99 94 8b cd 7d 01 ab 0a 23 56 6b 02 73 bd 41 42 2c 33 2b f7 a2 9b aa 0e c1 ba b9 5b 23 97 d3 ca 73 6b 09 0d 41 8b 38 b9 f0 fd 6a 4d 66 00 5a 4c 14 a9 8e 48 82 bd 05 a5 ba 1b 1a 03 5a 9c c3 8a 72 c9 72 14 63 f9 04 d4 d7 ac 12 f6 92 ad 22 7c 1b 01 18 2a df 84 7b 69 ad ee 07 78 d5 df 6c 94 82 68 81 6b dc 77 25 80 3d 00 d2 ca d4 7d 11 59 70 c5 81 72 2c 97 59 35 ac 2a 94 92 4f 57 e5 28 29 c8 58 c5 18 cf 05 da e5 a8 e0 6e c2 5f 35 a1 83 5c fa 38 d5 42 42 54 35 6f 2d 2b 15 cc ba Data Ascii: fMHm0zi 9['$s2w}HH4'l2 kpY3Cbf}#VksAB,3+[#skA8jMfZLHZrrc"\|{ixlhkw%=}Ypr,Y5OW()Xn_5\8BBT5o-+
2024-05-06 16:41:55 UTC	16384	IN	Data Raw: 12 81 ca a4 5d 02 75 de b5 b3 b6 39 39 58 f1 d0 02 20 7a cc 59 72 4e 89 05 a2 b9 25 13 b9 49 ce 68 c3 9e 04 b2 48 cc ec 54 44 b2 27 0f ce 39 f4 23 dd e1 bc cf 71 00 d4 d9 74 2a 99 b5 dc 1b 00 08 c2 1c 28 74 dd d6 39 97 62 42 d0 b6 69 6d ff 3d 9c 1d 3a f2 0a b2 5e af 38 67 40 9c 4e a7 a0 50 7a 04 44 88 c8 d5 6a e7 f5 66 9a 52 4a aa 9c 73 08 41 00 44 d4 54 9d 47 93 69 33 99 b4 3e 6c b6 bd 6f 66 df f2 9d ff 61 ea ba 9f fa a7 ff 60 79 f3 65 44 84 2c 8a e8 bd cb 29 a5 64 b3 ba 21 e5 18 5c 18 e2 f6 ab de ff ed 06 bd 68 55 08 e7 c8 0b 4b c0 36 bb 94 35 35 29 27 49 99 53 02 4e aa 6c b3 4b 14 00 d1 c6 da d5 32 a3 02 96 59 3a 05 e4 6b 56 59 dd c3 10 11 a8 c6 01 76 b3 97 85 5b e4 b7 63 64 83 a5 d7 b5 ae 38 2d 65 c3 12 53 5a 36 06 44 c2 80 c0 35 ed 2b 2f 26 50 12 45 Data Ascii: ]u99X zYrN%IhHTD'9#qt*(t9bBim=:^8g@NPzDjfRJsADTGi3>lofa`yeD,)d!\hUK655)'ISNlK2Y:kVYv[cd8-eSZ6D5+/&PE
2024-05-06 16:41:55 UTC	1024	IN	Data Raw: 9c c7 19 72 27 3d a3 41 ef dc 1d 3a 5b 7e 3c 84 19 f3 1d 00 04 95 b6 37 73 48 39 2a 24 c2 f4 0c 0d 0f a7 3f bf d1 ac e7 2d d9 a1 f2 76 03 84 0c 9a f1 e1 25 96 64 c6 6e 32 f2 6c f4 12 49 ba ff 62 1a c9 ec ad 01 a0 77 d7 d9 cd 15 01 e0 a9 a7 9e 1e 8e 86 57 5e 79 45 0e 24 16 11 44 15 55 ff 30 9f 02 39 e2 0c 04 c7 db e3 67 9e 3d 3e 1c 8c 48 e9 52 97 56 f8 9a 6b af de b7 77 77 77 85 bc a9 40 ef c4 f4 f1 de 87 41 48 b2 ad 22 c0 b3 c7 4f dc f7 ad fb d7 d6 d6 8d 89 5d 47 b4 29 6c 53 7b ef 90 0c 29 bd 3d 59 67 81 a6 b5 9e 9d 88 34 4d 3b 19 8f 8d 2e 50 a3 c4 65 00 4a 51 50 b7 41 98 d9 4b dc 40 b8 9e 36 ce d6 b6 69 05 45 84 0b 53 0a b8 da b6 d3 7a 0a cc c1 a6 67 0a 13 02 87 9b b6 21 22 55 68 08 c5 d9 85 d1 f2 d6 74 bd 28 07 9e b9 02 d9 e7 fc 08 44 0b 1d 14 af 40 d5 Data Ascii: r'=A:[~<7sH9*$?-v%dn2lIbwW^yE$DU09g=>HRVkwww@AH"O]G)lS{)=Yg4M;.PeJQPAK@6iESzg!"Uht(D@
2024-05-06 16:41:55 UTC	15990	IN	Data Raw: 81 cd fe c0 66 34 dc b8 45 c5 69 93 4e a7 0d b3 9a 3a ab 27 ce 94 08 e9 e5 c9 36 61 2c 74 06 c9 0e 12 ac f5 e1 82 c7 8e 9d d8 bf ff c0 dc dc 9c f7 1e a0 73 ca ab 70 d9 24 53 c9 fd 2a 00 6c 8a f2 af ff f2 af 98 c5 da 49 55 94 b5 f8 c5 a5 a5 5b 6e ba 39 35 14 97 5e 07 5c 48 d7 84 de f8 e3 13 47 8a 0b 82 80 db db d3 93 a7 4e 8d c7 e3 50 ec 97 9d 55 4a b3 f7 a2 14 b0 6b da 66 50 0d e7 47 73 3e 35 e4 f3 2c 28 2c 1e 1a db 94 88 75 ed 90 a1 75 2d 3b 2b 40 a6 2c 8d 36 48 e8 9d f3 ce 05 ff 23 91 56 ba d0 4a 21 11 78 37 6d a6 08 38 18 8c 1c 73 a1 4b 44 34 9a 5c d3 b0 75 d5 dc 48 1b 83 88 ba 28 bc b3 6d 33 15 6b 11 a9 2a aa 6d 76 5b 4a 3c b1 66 a5 05 3d a0 47 b6 e0 a7 40 db d3 e6 e0 15 57 e8 a5 39 ef 9b ba ae 77 11 fa 9a 41 1b 51 a0 e7 17 70 f3 62 6b 1d 08 32 0a b0 Data Ascii: f4EiN:'6a,tsp$SlIU[n95^\HGNPUJkfPGs>5,(,uu-;+@,6H#VJ!x7m8sKD4\uH(m3kmv[J<f=G@W9wAQpbk2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.11	49737	18.173.145.84	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:41:54 UTC	387	OUT	GET /rmshg/1576785467_knifetraining.png HTTP/1.1 Host: d3j0t7vrtr92dk.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:41:54 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 68007 Connection: close Date: Mon, 06 May 2024 16:41:55 GMT Last-Modified: Thu, 19 Dec 2019 19:57:45 GMT ETag: "10b406b249271d05a45aa592835eeee9" x-amz-server-side-encryption: AES256 x-amz-version-id: Xux8EFNoPc4AV8e838tE2PdgN9ZuAYQI Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 0e2299d7e48f77f171e85639c3f0534e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: XbvAQRLM87xB5YjgekDPUkQdgDEYcsNkAh_fkR51utvT_WR5spHBDg==
2024-05-06 16:41:54 UTC	8192	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 df 00 00 01 3f 08 02 00 00 00 88 26 5e 8d 00 00 20 00 49 44 41 54 78 9c cc bd 5d af 65 57 75 2d da c7 5c ab 8c cb f8 03 6c c0 18 13 3e 82 83 4e f2 90 17 ee 79 c8 bd 42 91 8e ae a2 88 73 75 6e 1e 92 48 44 89 82 14 45 91 f2 c2 0f 0a 79 3e 49 24 2e 44 09 28 4a 42 38 d2 4d 84 91 c3 2b 22 c8 60 20 c2 09 b6 c1 1f 65 57 b9 f6 5e 6b 8e fb 30 6b 8f 6a b3 b5 d6 fb 9c 55 90 73 cf 00 6d cd 35 66 1f 7d b4 de 7a eb 7d 4c af 5a 7b ed d6 7b ef bd b7 d6 22 22 22 7a ef 11 b1 e7 e5 58 b5 5c e0 4f bc 8b 83 36 42 03 fb d2 3a b1 a3 de 37 c3 60 ef 62 bc 9b cb 6d ec 3b 37 ca 02 b4 2c 6d da 67 db d9 e4 16 89 d8 03 be 30 d8 ef 6d 7f 72 8b 85 fb 45 b8 f3 3a 12 79 db ed 74 52 97 ef 8f 7a e7 ad c2 73 ec 48 ee 7d 00 fb 59 81 bc Data Ascii: PNGIHDR?&^ IDATx]eWu-\l>NyBsunHDEy>I$.D(JB8M+"` eW^k0kjUsm5f}z}LZ{{"""zX\O6B:7`bm;7,mg0mrE:ytRzsH}Y
2024-05-06 16:41:55 UTC	8192	IN	Data Raw: d1 79 5b 44 ea 7f d2 59 f2 32 d8 c9 0a 4f 45 4c 15 ae 55 3a e0 12 6e eb 1c 25 42 59 d4 d6 43 0e 6d 01 58 ee b2 52 b4 a8 70 44 07 3c 78 00 00 20 00 49 44 41 54 ed f2 5e f3 f8 16 a4 b8 7a a3 79 7c c6 6e fc c3 60 ef 3d 62 be 7d fb f6 df fd dd df 3d ff fc f3 18 a0 66 81 c6 c0 63 05 d4 dc 31 a9 65 13 2e b9 1a 5a bb 1a 84 ca 76 25 84 41 00 62 ad cb 8c c6 ac 7d 50 e0 76 5f ea b9 8a 07 5f da a0 22 11 bc 2a 9c f0 84 23 44 65 a6 6d 45 91 2b 27 18 72 96 c1 4c 90 b1 66 32 e3 67 dc 55 e5 17 c6 59 e0 48 9a ce 67 a1 a9 f0 48 e4 59 d9 52 37 a0 1a 2f b6 d0 79 ab 13 5a 42 2d 4b 0f 86 21 1b bb af ce d7 5a 1d e3 a8 ad d0 2e b3 9d 97 e6 c7 4c 5f 77 6a 9b e9 0c 53 97 63 60 38 d1 80 07 35 f6 2e f9 b7 5d 23 a3 52 6b 00 a9 18 d7 d3 34 2d 9d 37 22 8e c7 e3 f2 cb 29 cb 67 9c fb d5 Data Ascii: y[DY2OELU:n%BYCmXRpD<x IDAT^zy\|n`=b}=fc1e.Zv%Ab}Pv__"*#DemE+'rLf2gUYHgHYR7/yZB-K!Z.L_wjSc`85.]#Rk4-7")g
2024-05-06 16:41:55 UTC	576	IN	Data Raw: 48 09 64 99 29 cd 36 91 ec a5 f5 a9 32 b3 01 ea 45 a6 58 d2 33 e5 08 65 d9 d7 8f ae 9b 25 8d 6b 49 d5 ea 93 a2 b3 5a 52 96 a8 28 2c 03 a4 10 f5 6f ab 55 55 8a d7 c2 0b be 00 00 20 00 49 44 41 54 b7 a8 30 e9 42 89 cd 5e ee 19 da 5b 94 79 aa 4d 65 4f 89 b5 48 b4 bf d1 05 0d 4c 41 ef 7d d2 fa a4 2d cb c6 64 10 37 f7 e8 44 f1 93 80 3a 3c d8 12 d6 58 e7 a6 49 43 1f a9 45 5d 12 41 ca 1a 41 d2 b8 e8 16 25 03 29 9e e7 7e 3e 9d a3 c7 7c 9e a3 47 bf d3 a5 67 04 30 44 70 3e 9f df f3 9e f7 bc eb 5d ef da 84 97 81 09 79 f4 c8 f0 93 0a 23 cf 60 26 c1 6c d2 ea cf 7a b3 09 b5 68 b3 1d c9 8f dd 4b cd 0a ff 9b c6 9b a3 ad 1b ab de dd 6c 61 05 39 24 cb 2c 84 02 9b da d7 19 a7 c2 c4 f2 d4 92 dc 09 a0 50 d4 32 6c 8b 18 17 5a f8 16 ad be d4 bc e0 4b 6d 0b 3b a3 d3 96 42 47 9a Data Ascii: Hd)62EX3e%kIZR(,oUU IDAT0B^[yMeOHLA}-d7D:<XICE]AA%)~>\|Gg0Dp>]y#`&lzhKla9$,P2lZKm;BG
2024-05-06 16:41:55 UTC	16384	IN	Data Raw: 90 e5 60 f3 20 a2 3c 65 b2 ce 66 b2 c0 06 30 3a c7 a8 97 11 bc e6 3e 54 68 2d f7 0c 24 67 3e cf bd f7 cb 8b 8b f9 3c df 7c eb d6 f9 3c f7 ab 5f da 1e c6 ed ea 57 07 1f 78 e0 81 df ff fd df 7f fa e9 a7 0b cf e8 bc bb 77 12 eb f6 a1 07 f2 32 54 3d 36 64 e5 8d e6 91 61 6b 6c 1f 04 ec 5e d6 2c b3 ac e3 dd bf 5d 40 31 d8 0e 5b cb 20 eb 3b 9b e2 29 c2 cc 22 da 1c 7a f0 d8 44 d4 78 86 ab 9d e7 d6 3d 21 44 cf d9 8e 04 9b 2c e9 5a 7b ae 5d d5 cb cf ea d9 81 7a b6 0a a1 56 43 5b ef 69 74 14 38 79 26 b7 fc 1d 75 23 24 04 87 bb ea 39 46 33 0d de 76 21 83 26 6f b5 d4 87 1e 75 5b bc 4b 9b 6a c2 c8 73 d6 e8 63 9d ef 81 3f 0b 90 5c 2d 0f c5 ad dd f9 b5 94 c3 f1 30 1d 0e cb 9b cf 94 aa 76 f5 27 54 3e fc e1 0f ff dc cf fd 9c ca c8 fa 57 06 b0 5f eb b0 b4 14 ec 11 0f 1a ac Data Ascii: ` <ef0:>Th-$g><\|<_Wxw2T=6dakl^,]@1[ ;)"zDx=!D,Z{]zVC[it8y&u#$9F3v!&ou[Kjsc?\-0v'T>W_
2024-05-06 16:41:55 UTC	16384	IN	Data Raw: 8e 98 2f aa a3 bd 45 54 76 e7 b7 20 99 55 17 7b 34 66 8a b4 45 fe 26 20 91 aa f6 41 1d 53 27 dc 3e b2 a0 5e 42 fe 94 4f db fa b8 5e 2e 0c ee ad d7 5e fb c0 87 de 3f 6c 56 0f 1e 9e 0d 71 24 c0 71 33 42 29 29 c5 10 3c 22 39 c8 39 c5 02 e3 2c 84 7e d6 03 d1 86 36 40 a5 0f fd c1 d1 81 89 a1 9d 4e 4d a6 a2 ea a6 34 4d da f9 2a 4d bb 59 2c ad e9 c6 76 e2 63 1b 36 a8 4b b7 6e cd b8 1b bd 64 6e a4 cf 7b bd 3b ec 0a 58 4f 13 4e c4 d1 9a 69 d6 8a 2b 62 b6 99 6c c0 ae 1d 51 e6 71 52 8b 69 0e d6 60 d7 c4 d0 4e aa 46 94 99 c8 1f e1 e0 34 c5 5c 9b 5f 23 8a 3f d2 6f 66 5a 75 3a 54 03 9e 2e 9f d9 4d 41 c4 6d db 5c bb 9d 6a 5c f0 2d 1a 7c e1 ee 09 b3 b7 e4 7b dd b6 06 4c 8c 9b 71 f6 ef 48 e0 20 7f f5 9f 7d 65 b3 d9 78 97 8f 8f 66 71 74 47 07 b3 94 33 c2 2c 84 d0 f5 21 a5 Data Ascii: /ETv U{4fE& AS'>^BO^.^?lVq$q3B))<"99,~6@NM4M*MY,vc6Kndn{;XONi+blQqRi`NF4\_#?ofZu:T.MAm\j\-\|{LqH }exfqtG3,!
2024-05-06 16:41:55 UTC	2048	IN	Data Raw: 70 34 5e c9 44 ef 3c ae 0a 4a 55 3f cb 12 5d e7 e7 f2 7c 53 4f 7b 08 34 4d 21 54 78 33 f0 18 72 af 18 a3 da 46 6a 21 e4 71 f9 39 fa d9 cc 7e 53 8c aa 96 cb 30 e3 b1 0c bf 52 8c a8 7d cd 81 aa 30 9b 81 37 3d 8f 80 37 33 15 01 6f 2a 5b 0c a4 59 80 11 cc cc 90 72 84 b2 ac 18 1c 89 1b 99 d1 24 65 4f 6a 7b 11 46 83 d1 0d 00 20 bc ec f9 c1 37 45 00 a7 40 c4 90 36 1b 49 ba bf 3c 88 ca 30 6c 34 65 d5 e4 56 72 1e 92 26 92 20 bc b0 b0 d0 a9 2a 74 11 15 b8 c0 dc 0e 07 7a f1 52 fc 50 00 d0 ca 61 7a a2 4e 14 1b b6 67 c3 c5 1d 1d 07 00 69 18 94 4e b3 e9 30 dd 7e fe 79 7c 74 7f 7b 7e b1 3d bf d0 ed 79 3e bf 93 77 b7 d2 d9 36 6d cf 34 0f 7e b8 ed 74 81 28 89 24 9c 0e d3 a3 8f be f6 8d af 7f f0 e6 1b 2f bc f4 c2 9d 17 5f 1e 6e 3d 93 c6 8d a4 4c 82 65 d2 cd 36 46 1d 45 a1 Data Ascii: p4^D<JU?]\|SO{4M!Tx3rFj!q9~S0R}07=73o[Yr$eOj{F 7E@6I<0l4eVr& tzRPazNgiN0~y\|t{~=y>w6m4~t($/_n=Le6FE
2024-05-06 16:41:55 UTC	10666	IN	Data Raw: 2a 48 e5 f9 8a 5e 03 5d 35 69 a2 bd 12 4e cf f9 a6 c4 44 c4 22 13 9a 43 f7 9c 59 e6 37 86 13 9b 45 3b 71 9e ae a0 a8 aa f8 24 6d 95 d9 5e 6a d6 a3 eb b9 da 83 b7 69 2a 8a fb e9 7c d5 ac 69 b3 ca 54 d3 f9 53 c8 95 b7 cd 4a c9 3d 12 34 87 a9 32 17 91 bd 09 d7 23 46 71 3e 3c 75 ac e8 38 ff e4 e3 0f f0 f6 2f a3 3c 11 11 2a bc 4c 10 75 a0 1c 0a 54 8a 15 33 2f c5 44 34 a7 0d e9 74 b7 62 0e b8 9b 4d e6 d3 61 5e 50 97 52 fc 70 f0 69 22 dc dd 4d 14 80 a4 e4 65 02 e9 c5 49 6a 4e aa 92 52 56 4d 34 cf 39 27 d5 39 9e 9c f0 57 7e fe 7f 1d 72 a6 fb 59 d6 3f f8 fc ee e5 5b e7 17 bb dd 36 0f bb ed 2e 51 76 9a cf 77 c3 d9 d9 6e bc d8 0d bb ed b0 19 37 e3 90 c7 61 dc e4 34 6e 44 14 92 08 28 20 69 78 e6 7b be 6f 38 bf 0d e0 f4 32 c4 15 46 56 82 d8 14 b8 28 01 b1 4d 34 88 d6 Data Ascii: H^]5iND"CY7E;q$m^ji\|iTSJ=42#Fq><u8/<*LuT3/D4tbMa^PRpi"MeIjNRVM49'9W~rY?[6.Qvwn7a4nD( ix{o82FV(M4
2024-05-06 16:41:55 UTC	5565	IN	Data Raw: 04 6d 25 cc a6 5a 35 fd af 30 89 bd 2a b9 b9 09 79 2a 0c 2b 5a 22 e8 60 9c c5 9b fa b8 0c 61 c5 d5 9e a6 37 45 7f 39 d1 46 53 3d 07 2a dc aa 00 9b 0b 9a a5 4b 99 74 37 2f c5 e6 67 f4 68 85 34 88 b8 19 49 40 cc ac 14 13 88 fb 34 df 68 41 9a 88 cc f7 d5 89 c0 9d a2 89 f4 f9 8f 7b 20 35 29 21 22 7a 14 6b 11 15 05 48 37 88 cc 1b 71 a8 ea ec 99 9b 93 c7 56 84 24 3d de fb 66 69 de 7d 54 8e 51 ba 89 0a 99 9c 04 d2 90 36 29 cd 37 3b 03 e0 d3 f7 ab 3e 7d a4 3c 0d 9a 32 21 50 a1 6e 40 1d 87 3c ec 76 b7 5f fa f4 ad 17 3f 3d ec ce a1 a9 02 ae c9 ad de af 55 56 9a f9 a8 26 5b ac 56 42 65 73 49 ca 15 15 5b 27 41 ec d8 5b 23 c4 29 3d ca c1 12 87 e5 f9 38 13 ac 47 57 69 47 0f 8d 28 73 eb d4 8f ee f5 6c 36 6b b8 97 e5 95 64 35 cf af b4 6f 62 7b 3a e2 1a 0a 57 75 61 d9 ac Data Ascii: m%Z50y+Z"`a7E9FS=*Kt7/gh4I@4hA{ 5)!"zkH7qV$=fi}TQ6)7;>}<2!Pn@<v_?=UV&[VBesI['A[#)=8GWiG(sl6kd5ob{:Wua

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.11	49736	18.173.145.84	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:41:54 UTC	404	OUT	GET /rmshg/1576785996_AdobeStock_292938399%20%281%29.png HTTP/1.1 Host: d3j0t7vrtr92dk.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:41:55 UTC	538	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 179154 Connection: close Date: Mon, 06 May 2024 16:41:55 GMT Last-Modified: Thu, 19 Dec 2019 20:06:34 GMT ETag: "113a83ef1d3f5834b51d65263b5cdad9" x-amz-server-side-encryption: AES256 x-amz-version-id: 8EvvulyZ5tabqd6v5AorHFS4l6oC03uM Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 702ef314013a608397b521ec26967856.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: 34sR5AHB-b_DfPk7deaxTW3YTUP-E1HWLjVRHB-7FuUz4FVfBe_Qzw==
2024-05-06 16:41:55 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 df 00 00 01 40 08 02 00 00 00 72 52 e1 99 00 00 20 00 49 44 41 54 78 9c 54 bd db 96 24 c9 91 24 26 22 6a ee 91 97 aa 46 03 3d 98 e1 ee 3e ec 03 79 96 fc 11 fe 08 3f 8b 1f c6 43 f2 70 b9 c3 21 67 06 33 40 03 e8 ae aa cc 88 70 53 15 3e a8 79 64 21 bb ba 3b 2b 32 d3 c3 dd 2e a2 a2 a2 a2 96 fc 5f fe e7 ff d5 36 cc 20 6d 82 32 1c 63 20 08 c0 84 a0 11 51 86 69 90 20 21 85 35 38 44 4a a2 ad b4 48 52 03 da c6 18 5b 04 c3 04 41 81 82 44 11 30 4c 28 14 04 29 11 04 28 49 8c 00 61 90 b4 1d 24 0a 30 01 a1 e0 b2 00 82 30 01 c0 00 04 03 25 17 0c 10 ac d2 31 71 14 ee 13 26 b5 f3 f9 65 bb 3c f1 f9 b3 9e 5e 78 d9 bd ef 50 40 82 c4 7e 32 8b 04 28 02 00 c1 a0 81 2c 97 9d ae a3 7c 9f 35 a7 3d f1 fe c5 28 05 b6 a1 b1 0f Data Ascii: PNGIHDR@rR IDATxT$$&"jF=>y?Cp!g3@pS>yd!;+2._6 m2c Qi !58DJHR[AD0L()(Ia$00%1q&e<^xP@~2(,\|5=(
2024-05-06 16:41:55 UTC	575	IN	Data Raw: c1 1c f3 c9 aa 9c fe 4b b7 70 2b d9 94 6d f0 78 8a 07 66 1d 14 d0 93 70 31 c3 c3 58 e3 a3 92 59 c6 16 40 02 c5 66 0d 95 90 86 a1 66 53 5c 85 84 d5 95 ac 54 15 f6 46 f1 d7 00 00 20 00 49 44 41 54 0a 9f 4c 06 00 0a b0 18 2a c6 18 97 a0 4d 1b 26 70 70 e3 a3 3d 0d 4f f8 80 f4 70 b2 e1 92 36 c5 c4 cc 91 bb 34 43 01 6a 41 a9 d9 b9 0f 28 c7 b4 cc 00 00 ba d4 63 54 19 1d da 42 57 8f 87 de 37 f7 b4 8f 43 c8 e6 fc c7 05 3c 41 b9 8e 2a 28 1d 6c be 68 13 dd 66 3c 20 82 a3 b2 9a d7 61 aa 0a 6f 4d 9c 37 42 79 44 9e a7 97 fa 7b 37 e3 08 b4 a3 16 30 39 10 dd 42 6f ee b6 43 8a 94 41 ed 08 c9 83 8d 1b ef 39 ef fe 41 d8 09 81 e8 27 9f 6f 31 f8 f1 69 5c 01 01 0e 3c 46 fb e5 df 7c f1 b7 f7 7f f9 85 fd ee d2 bf bd f8 db 8b 1e 69 d9 34 1f 8d bb 0d cb 2f 64 73 4e 86 21 c3 90 41 Data Ascii: Kp+mxfp1XY@ffS\TF IDATLM&pp=Op64CjA(cTBW7C<A(lhf< aoM7ByD{709BoCA9A'o1i\<F\|i4/dsN!A
2024-05-06 16:41:55 UTC	6396	IN	Data Raw: c6 32 b8 d3 92 3e d1 f9 fd 48 1c b3 c8 25 10 56 4c 10 4d 1c 78 3f 1b 05 61 b3 fc 71 c4 d7 03 de dc 42 b3 25 93 36 7f 3a e0 54 9a 9b c5 4c 8a 0f f4 ac 89 ca 07 42 9f e1 62 2e 74 de 84 df 73 9d 1c 6b 7e c4 9a 59 40 9d 2b fb f8 9e 24 c7 cc 10 71 f0 23 07 68 cf ce c4 72 8b 17 83 d9 95 c8 ec ad 8b 96 27 09 50 5a cd 0a 50 04 03 57 43 25 4e 66 ab a1 50 66 ac 50 1d 4d 89 48 d1 1e 72 f6 00 e6 bc b2 e3 ae 17 95 b9 ba 8f 40 96 d8 24 4b 7f c5 60 0c 22 5b 46 72 9d 27 a9 01 0f b9 87 2b 9a 14 c2 ae d8 dd af 1e 8f ee ad 7b ae e7 32 e4 f3 39 0b 86 4e 49 63 b8 55 ce 29 21 41 5a 68 b2 31 b3 f9 28 e9 1a 65 78 3a f6 c7 f9 10 1e d1 77 90 66 4f 43 32 67 8c d5 64 5e f2 2e 0e 79 cf d3 4c e8 c6 31 3f 39 02 06 80 1f dd 72 9c bf bd 21 e9 51 07 c9 ed 8a 70 06 9f 29 18 54 9a 97 dc 18 Data Ascii: 2>H%VLMx?aqB%6:TLBb.tsk~Y@+$q#hr'PZPWC%NfPfPMHr@$K`"[Fr'+{29NIcU)!AZh1(ex:wfOC2gd^.yL1?9r!Qp)T
2024-05-06 16:41:55 UTC	9988	IN	Data Raw: 03 25 ae c0 09 3c 89 15 d8 10 fb 24 a0 5d 21 dc ce ed 90 d8 e5 f9 f3 86 07 62 22 42 4d f6 5e 4f 7e 88 24 5e 74 48 a2 31 26 6b f9 e8 f4 92 c1 43 1d e4 47 a0 f7 7e f7 d5 fd c7 77 e7 6f 3f 6e 65 5d fe c9 8f 7e b6 a2 5a 03 77 70 07 41 76 83 0c 01 75 45 72 24 84 99 f0 da 78 4f 56 da 5a 32 0b cb 41 30 49 7a 8c cd 35 c4 9c 07 1d e8 17 c7 16 db 83 ef 7b df f7 76 3e 5f b6 cb de bc f7 1e 7b 6f cd 7d f3 7d 47 7b 8c 6d 0f 77 c5 ee 7b 00 5c 8c 90 15 8b 88 b2 98 71 09 f8 14 d1 c2 15 0c b0 0c ee cf dd 01 69 12 6b e9 0f d4 9b 2b c2 6a 75 8f e6 51 6a 4d 22 cd 73 aa 04 54 95 e3 05 8c e9 2f 53 e8 04 60 94 fc fe 39 5f de ed 1b be 79 bc 9c 9f 7d 7a 5f aa bb 7b ee 18 06 74 77 cd 69 67 2a bc ae 76 6e d1 d3 03 83 28 36 73 1e c1 43 3b a3 ba 63 07 f6 b0 fb f5 c5 27 f7 af 3e 7f b1 Data Ascii: %<$]!b"BM^O~$^tH1&kCG~wo?ne]~ZwpAvuEr$xOVZ2A0Iz5{v>_{o}}G{mw{\qik+juQjM"sT/S`9_y}z_{twig*vn(6sC;c'>
2024-05-06 16:41:55 UTC	16384	IN	Data Raw: 1c 00 42 ba e2 99 10 83 d3 c3 83 71 9d e8 19 a3 af a7 56 08 bc 90 49 9d a2 bb 5c 5d 4f ee 22 c4 fa a7 4a 7b d2 82 4f eb b2 61 1d 83 d8 e9 8a 04 3c f0 e9 df 7d f7 ab ff 71 fd 8b b7 e3 78 9c 7e 7a 64 0f 4a bd 32 49 d0 2c 94 c5 ec 14 86 d7 ef 65 62 34 84 27 4d 90 c2 39 6c af b0 0a 9e c6 c8 ec cc 98 be d2 10 2c 0f e0 3c d2 b2 17 aa 55 ee 23 db b5 21 90 63 98 5c 4f 27 12 d8 56 c3 21 20 72 d0 03 30 60 37 1b 37 e3 6d 6a 50 66 66 23 9d 3e e7 2f 7e fa 1e 54 84 96 47 ba 18 2e 21 60 0b 74 21 93 e7 00 4e 71 09 2b 8b f1 46 80 73 54 3f 40 56 41 d2 c2 3f 2d 8b 66 d6 f5 2a 36 17 c7 ac 4c 4c 49 2b 95 54 25 1c a3 52 47 56 e7 4d 05 6f 6c 36 b5 bc d0 2a ae d7 83 f1 d0 2a 5b 2c 91 f4 c0 89 e2 22 22 74 26 75 d0 81 83 68 c2 96 90 70 ae 74 1a cb 95 02 1b 14 60 82 4d 82 88 d0 eb Data Ascii: BqVI\]O"J{Oa<}qx~zdJ2I,eb4'M9l,<U#!c\O'V! r0`77mjPff#>/~TG.!`t!Nq+FsT?@VA?-f6LLI+T%RGVMol6*[,""t&uhpt`M
2024-05-06 16:41:55 UTC	2048	IN	Data Raw: af b8 0b 3b a0 53 58 c3 64 22 6f 4e 36 f1 aa 2d ef fa 6e e5 43 09 10 46 46 83 f6 22 a0 fd f1 6b 64 5b 63 ec fd f2 6c 66 59 9f 9d 9b ad ac 63 a1 bc 9d dc bd ee 13 99 c2 d5 b4 ca b5 76 cb 18 9c 27 7f 77 1b db ad 50 ed db 15 28 59 1e c1 a2 28 8b 0f 80 c0 09 89 00 ce 59 88 ab 4e a6 17 85 55 41 10 8b ec 53 4a 41 65 de 89 7b 75 ca fa 08 92 d8 8c d3 0a 9d b9 d1 87 f9 c0 76 f1 31 0c 49 01 eb 2c ce 73 a8 73 23 cc b9 6d 4c 65 32 59 e1 be 91 82 3c 03 dc 49 55 8b 8f f2 4b d5 d7 9c 95 32 0e f0 f6 31 30 f9 fc fc fc 77 8e 3f f8 c1 ff f8 8b 3f 9c b8 5c c6 36 1e c7 7e f1 cf 6f fc a3 e9 bf 32 3d bb ae d9 c3 3f 9b c3 55 d2 a4 5c 96 d9 a7 d5 ea 44 64 44 3f 3b 51 e6 14 95 43 f3 88 03 88 43 42 6a 4a 99 1b 3a 8e 59 43 a3 02 da cc 69 74 99 e6 0d e4 e6 ee e6 b7 79 ac db 97 89 c7 Data Ascii: ;SXd"oN6-nCFF"kd[clfYcv'wP(Y(YNUASJAe{uv1I,ss#mLe2Y<IUK210w??\6~o2=?U\DdD?;QCCBjJ:YCity
2024-05-06 16:41:55 UTC	16384	IN	Data Raw: f0 7d f7 cf 3a f2 9b 37 b1 3d cc bb bf aa 81 95 6d 62 ef 8f c0 5e 28 6f 93 99 bd 88 d7 67 16 58 36 0b 44 7b 12 6d 61 2a e3 8c 62 c8 b2 14 78 f3 c4 f8 bb a8 cf 9d fc 30 0d 1a bb 6e fb 6d 1e a5 ab f3 64 65 d7 79 5e cd 1d 99 00 4f 37 87 19 98 cf 15 67 4c 11 88 94 44 4f 69 78 d3 ba 57 6f d9 84 f6 9c fc 56 de 43 29 34 98 ac 7d dd 89 34 3d 49 f4 b3 33 0e c3 ea dc 21 e0 60 87 f0 8d 70 9c 92 5c 6b 33 0b 33 b4 04 95 d5 fa 08 75 0d 28 2d 55 94 2a 05 44 4e b5 8f a9 db f5 b8 be cc e3 b5 5d 9c fa 52 db 5a b4 69 86 08 4c 5c 5f a6 24 bf 4c df 46 ce b8 00 42 33 5e 3f dc 86 3d ec c3 03 fe 29 b6 77 cf 0f c7 df fa c7 07 7b da 1e 91 4d 23 85 01 ee e0 57 b0 5f 44 fc 06 78 25 42 93 80 56 3b 30 09 ad a8 21 4d 38 72 51 a4 95 62 0a 2f 52 c5 c5 bb 3d 4b 22 bb f2 33 1b 3b 55 41 f6 Data Ascii: }:7=mb^(ogX6D{mabx0nmdey^O7gLDOixWoVC)4}4=I3!`p\k33u(-UDN]RZiL\_$LFB3^?=)w{M#W_Dx%BV;0!M8rQb/R=K"3;UA
2024-05-06 16:41:55 UTC	1024	IN	Data Raw: 28 f4 11 d5 81 24 8a 79 c3 a1 fb 17 af da 0f 7f 32 ff c1 67 b7 bf 8b db 4f e6 db 37 ae 9d 37 87 47 0a c1 2e 09 e1 81 32 64 ad 1e bc 73 8a ec 93 66 a5 29 b6 45 dc 9d 8e a5 7b f4 94 b6 a7 a6 34 55 68 63 a6 dc c5 d0 76 31 4e 42 1d 5c f3 c1 5f 7e 36 7f f2 af ff e5 9f f9 ed df fa 4f fe e6 7f f8 fc c5 95 a7 23 4e 18 b1 64 44 df 90 69 dc 19 47 2c 8b 22 ee 8f 02 e6 6c 26 86 68 c2 13 63 fb 80 f8 0a 6b f0 e4 da 85 82 65 85 f1 ce aa 0a 67 73 70 18 05 a9 cb 1b bc 03 80 d9 a0 ea 3d 9d b4 d3 6a b9 f5 de 9b cf 73 3f 1c 0e bb 7d df cf 7d 76 2b 80 2a 36 26 83 43 3d 85 d8 61 cc ef 49 fa 29 08 b3 ab 43 dd e0 52 0d b8 b0 93 3f 81 0d c3 0b a1 45 b2 4b 0f 11 03 48 14 5b 2c dc 22 91 61 78 f9 6d 8c a5 b0 90 2d 24 f5 c6 2e 04 36 59 53 7b 2c 50 3e ad 88 30 24 1b 2b 01 c6 22 ee c0 Data Ascii: ($y2gO77G.2dsf)E{4Uhcv1NB\_~6O#NdDiG,"l&hckegsp=js?}}v+*6&C=aI)CR?EKH[,"axm-$.6YS{,P>0$+"
2024-05-06 16:41:55 UTC	12792	IN	Data Raw: 8f 58 24 c3 f1 a1 1a 06 77 0e bc 35 7f 61 35 95 1d 00 36 80 e4 07 6f 52 05 46 2e e9 23 ce 05 43 6c 6f 24 8b 65 90 ad 5c a9 31 41 42 44 d6 27 35 28 f4 9d dd 44 de d9 6a cb 56 ba f3 84 cb 62 e1 b2 0b 79 2e 86 bc b3 15 bf 32 c4 fb 77 fa ca 3b 4b fe ec 05 7e ee 2f 7e ed af 3c 06 8f 7f d5 56 ad 8b 32 b1 01 1f 53 c3 1d 29 07 92 25 1e c2 d3 88 8b eb 9d ec d4 86 b6 11 49 b7 58 c2 54 c6 27 f0 d4 70 87 f6 85 e2 e4 28 00 5d 94 3a 94 cc f2 f2 0d 60 40 ce 91 39 4b 1c 87 43 f0 bd 48 87 83 24 ca e1 a9 90 79 b5 7b a7 0e b2 da cb 04 0b ff 6e 87 3b fa dc bd 51 33 0b a6 f2 c1 f3 c3 cd 4f db 2b 89 a0 99 dc 25 cd 23 fd ac 3d dd 60 63 f3 6e ff 47 9f bf fc 9e 7f fe 6f fa ab 9f f2 76 57 f6 73 ef 85 e8 61 5f 4b 08 ea a1 c8 f7 3e ce 21 39 16 b5 57 fa b4 09 52 88 92 09 d0 86 c5 30 Data Ascii: X$w5a56oRF.#Clo$e\1ABD'5(DjVby.2w;K~/~<V2S)%IXT'p(]:`@9KCH$y{n;Q3O+%#=`cnGovWsa_K>!9WR0
2024-05-06 16:41:55 UTC	12792	IN	Data Raw: 89 ad d1 ad d6 ba d4 32 6a 16 11 17 b8 20 69 d2 8e ce 4f fb 18 db e4 70 d8 82 5a 7c 36 73 77 55 3e 37 08 24 7d 92 bf 71 9d bb 72 82 74 0d 9d 3b 70 d5 6e 9f 45 4a 59 0a 28 b4 48 da 71 ab 56 66 3b 2c 7e fe a2 6c ee 6c 01 1e 9b 3b 3c 45 12 db 62 78 56 26 e4 d3 b7 f3 f4 5b 4f 9e ad 25 7d ce 92 0c 00 00 20 00 49 44 41 54 0d ad 36 c5 f1 f8 a7 3d 9f d2 75 ac 30 e6 c2 8a d5 e3 20 84 e2 ec b5 fa 34 71 3f d3 44 24 21 65 30 c2 7f da 33 3c a5 66 51 1e a6 57 54 68 84 02 54 9a 46 8c 17 6f 60 97 e4 76 45 81 67 3d b5 a7 ef 71 05 8e 23 8c 36 d2 a8 a0 94 4a 83 6c 47 91 09 22 32 00 03 64 cc 3a 23 2d 34 24 9c 9d a7 57 9e 1f 2e 37 69 3b a6 71 d0 94 90 54 a4 55 5d 90 d8 74 57 41 76 35 97 4e 80 6e 1d a8 3e 0d 20 08 6f 8b 51 54 6a 74 b8 53 77 71 03 13 a4 37 dc ec f1 e1 49 58 30 Data Ascii: 2j iOpZ\|6swU>7$}qrt;pnEJY(HqVf;,~ll;<EbxV&[O%} IDAT6=u0 4q?D$!e03<fQWThTFo`vEg=q#6JlG"2d:#-4$W.7i;qTU]tWAv5Nn> oQTjtSwq7IX0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.11	49739	18.173.145.84	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:41:54 UTC	388	OUT	GET /rmshg/1576785827_drivertraining.png HTTP/1.1 Host: d3j0t7vrtr92dk.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:41:54 UTC	538	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 224354 Connection: close Date: Mon, 06 May 2024 16:41:55 GMT Last-Modified: Thu, 19 Dec 2019 20:03:45 GMT ETag: "0cc7ab391f7504b777ae1aeeaf66b3f2" x-amz-server-side-encryption: AES256 x-amz-version-id: NUtnKffyEhEJ2DzPP3r8YAkbxH.AWVpj Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 e0b76b98d8e7dfb4458bba8fb58b7380.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: A_uo70q6y5Qrx8KF6vZDl1uHTrii4LMS_zAbBVYEFI5JVkRwmvlthw==
2024-05-06 16:41:54 UTC	1490	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 01 3f 08 02 00 00 00 11 de 87 38 00 00 20 00 49 44 41 54 78 9c 4c bc 59 b3 6d d9 59 25 36 c6 f7 cd b5 9b 73 ce 6d 32 ef 55 de cc 54 a6 12 29 3b a1 26 11 c8 88 46 a2 04 a2 29 b0 31 44 19 57 f9 dd 2f fe 0f 7e 76 38 fc 5a 11 76 38 ec 32 0e b0 5d 65 1b 53 18 6c a2 a8 06 10 02 44 81 0a 28 01 a2 93 10 12 28 a5 ec 6f 77 9a bd f7 5a f3 1b c3 0f 73 5f e1 fb 70 e2 9c 7b ef 39 67 ef b5 e6 fa e6 68 27 3f f1 63 3f 95 2d 1a 43 24 51 53 04 5d 72 90 36 68 b8 81 dd 95 a0 02 34 02 94 45 9a 0c c0 00 0c 12 20 93 06 20 59 08 d2 10 0d 21 81 92 04 13 ac 2a c3 ae ea 4b ef bd 2f fd 50 f3 b2 f4 de 97 c3 3c cf ea bd 7a 95 05 80 20 19 88 98 32 db 94 99 99 ad b5 98 18 01 94 3a 4a 55 ea 2e 57 75 d3 11 19 24 23 22 b3 45 Data Ascii: PNGIHDR?8 IDATxLYmY%6sm2UT);&F)1DW/~v8Zv82]eSlD((owZs_p{9gh'?c?-C$QS]r6h4E Y!*K/P<z 2:JU.Wu$#"E
2024-05-06 16:41:55 UTC	8192	IN	Data Raw: 66 b5 5e 65 5a be bc af 74 f4 99 d7 1e e0 f4 5b 30 4d c0 75 30 00 90 1c db ce 37 a7 f3 37 3f 82 01 03 e8 c4 01 5a 00 83 13 48 d4 d5 e5 83 7b af 7f fd ad 77 ee 3e a8 be 6c 57 30 82 10 8a 4b 71 f6 b2 2c 92 3b fa fe 70 79 be 1c e6 d3 b3 1b 97 cb f2 f0 ee bd 8b b9 9b 2d 32 23 26 03 d3 e6 c6 8b df fe 5d df f1 03 3f f0 d5 af bd fa d3 ff f5 7f f5 d5 7f ff 59 d4 4c d8 a6 06 dc 48 6c 37 67 eb 69 93 a9 49 87 a8 43 55 07 bd 8d ca d5 e9 d9 e3 b7 36 37 1e bf fd 9e 8f bc f8 3d 9f ba f1 d8 63 7f f2 d9 cf fd e9 af ff f3 37 5f fb d2 61 ae 7b 87 d8 4b 56 18 96 60 3b 12 11 e3 4b 37 2a 88 29 a2 25 d7 81 6d c3 b4 8a b3 55 bb 7e aa 5b 67 c9 ef fe d4 7f 98 c1 08 18 9a 48 61 c0 33 1e af 09 c0 30 8c 01 9f 13 00 8f 90 19 00 48 8f c5 37 46 90 2d cb 30 19 60 a0 4a 01 e0 38 24 08 49 Data Ascii: f^eZt[0Mu077?ZH{w>lW0Kq,;py-2#&]?YLHl7giICU67=c7_a{KV`;K7*)%mU~[gHa30H7F-0`J8$I
2024-05-06 16:41:55 UTC	8192	IN	Data Raw: a9 a5 f7 f9 b4 6d 6e dc ba 73 f7 c1 5b 5f f9 f2 97 6e 9e 3d fe e3 3f f9 13 db b3 33 8f dc 20 09 40 28 14 a0 e1 58 8e 0a b7 c7 3a 19 f9 7a 0f 9a c7 10 5c 56 20 c3 85 60 20 46 77 54 c0 10 c6 34 24 af 6f 36 4f 19 a2 47 ef 51 25 82 0e 53 18 c7 06 58 e5 47 4e 89 0d 8e 60 8f 34 24 34 23 ad 3e 9e 04 8d 83 2d 70 5c 5d 47 5f 03 93 d4 31 2a 2a b6 ca f6 a8 37 66 57 97 aa fa 52 4b ed 0f bb dd ee ea d5 af fe f5 c3 37 5e 5b 33 df f7 fe 0f 3d f7 f2 cb 6d bd ba 7c f0 70 9f ed fa 53 b7 6f dc ba f5 c2 f3 2f 3d 7d fb 29 4c eb dd c5 d5 e7 3f f7 db bf f7 ff fc b3 c3 c5 db 99 9b 8c 63 a9 2b a3 31 62 4a b6 36 4d 19 4c 47 ae 5a 86 a3 35 2a 23 62 28 2d 53 6b ab d5 6a 75 b2 de 9c c0 d1 36 19 b1 6e 53 6e d7 eb a9 b5 b6 d9 66 24 5a ae 56 ab d5 fa d4 e6 b4 5a 21 22 d7 db b2 32 5a ae Data Ascii: mns[_n=?3 @(X:z\V ` FwT4$o6OGQ%SXGN`4$4#>-p\]G_1*7fWRK7^[3=m\|pSo/=})L?c+1bJ6MLGZ5#b(-Skju6nSnf$ZVZ!"2Z
2024-05-06 16:41:55 UTC	1024	IN	Data Raw: 46 e2 aa 23 a2 68 49 d9 a4 b5 96 fe 84 b3 33 1c 3c 69 3b e1 f3 06 22 e9 6d 13 02 45 f2 37 48 e3 4a ac 56 cb 27 3f f2 91 8f 3c f1 e4 30 0c cd 1d 11 82 30 30 cc 2d a7 9b 66 e6 6e 33 6a 23 7f c4 a0 b3 7a 73 33 0f 8f 6a 39 7c 6d cd cd 5a 3a c1 d3 df e3 96 64 ee 94 c7 c2 e7 ff 64 44 70 46 46 10 9a 73 c7 08 39 cb 40 5b 04 c2 ce 08 ad 41 ba a5 be 0a bb 37 8d 46 88 c3 18 b4 3c 15 e6 cf 94 d0 95 74 b6 0b e9 a6 73 61 d2 7c 3f 2a 11 8d 24 2c 32 26 91 31 28 cf 8a e2 dc f9 d3 b3 99 1f 25 80 cc 6b b2 e4 dc 13 19 fa 94 20 e6 f6 84 33 2a b9 08 b3 2b a4 cd ff 62 62 56 23 f7 0f 97 90 a0 47 44 e4 5a 9f 86 3d 47 e2 9e 13 3c ef d6 ac b5 a9 ee ea 6e b7 39 dd 6c 76 9f fa f4 8f 5e ba 72 b1 1f ba a2 45 c6 fe c2 fa 60 e8 87 dd 6e 17 e1 d5 ad eb 06 db 6d 4e b7 5b 9b 76 f9 fa 45 44 Data Ascii: F#hI3<i;"mE7HJV'?<000-fn3j#zs3j9\|mZ:ddDpFFs9@[A7F<tsa\|?$,2&1(%k 3+bbV#GDZ=G<n9lv^rE`nmN[vED
2024-05-06 16:41:55 UTC	16384	IN	Data Raw: 27 8c 5d dd f5 dd d8 47 6c dc d9 1a 23 61 5c 79 7c 08 67 94 60 d0 b3 57 3a b3 f5 11 21 22 ef b9 f0 75 3b 7c f6 73 5f f7 8f 3d 7e ee c1 0f fd 27 eb 83 f7 3c f5 27 5f 78 f0 be 87 1f fe c0 07 6f de 78 67 3a 39 35 70 6f b5 fe f6 77 5f b8 ef f2 a5 dd 76 77 7c 74 78 e3 ed 6b 0f bc fb 3d e3 72 7c f9 d5 97 4f ef de 7d f4 83 4f 8e 7d ff d6 9b af 6b 29 57 2e 5e 8e 66 e3 62 e8 f7 96 58 94 ce 50 a4 33 37 01 ab a1 53 36 33 e6 d5 cd 23 c8 08 63 6a a5 f3 f9 c9 85 e2 41 89 f0 a4 fd 35 04 cc cd a7 56 f7 f7 0f b0 18 bf fa fb ff e2 e8 e6 ad 52 54 40 00 69 d0 11 f6 9a ce 1b 89 22 85 42 88 84 4a 21 54 8b 20 44 b4 08 20 21 5d af 45 bb 7e 24 30 ac 56 83 f4 3a 76 fd 6a bf 94 32 f4 7d e9 fb d5 7a 6f d1 2f fb 8e 8b d5 b2 ef 46 ed 86 71 31 76 43 3f 8c ab 7e e8 fa be 5f ec 9f 47 dd Data Ascii: ']Gl#a\y\|g`W:!"u;\|s_=~'<'_xoxg:95pow_vw\|txk=r\|O}O}k)W.^fbXP37S63#cjA5VRT@i"BJ!T D !]E~$0V:vj2}zo/Fq1vC?~_G
2024-05-06 16:41:55 UTC	1024	IN	Data Raw: 0f 67 80 ba 5a 29 36 e5 29 4f d3 94 b7 70 1c de 79 cf dd f7 be 98 da e6 e8 f6 51 df 2f bb ae 3f d8 df 6b 9a 7a 67 b1 ac da 36 55 d5 b2 6d b9 96 7b 8f ee ff c1 27 7e eb 0f fe ed af bd f5 d2 d7 cb b4 ae 98 9d bc ed f6 0f ef 3e bb d8 3d 5c 3f 79 f7 f4 de 9b 15 0c 65 4c 64 22 a9 41 d2 8b d3 b3 c4 7b 55 4a 9c a7 69 22 aa 2a 51 86 0a 79 45 22 54 90 2a 01 25 07 c1 2b 61 26 67 90 16 68 4e 79 b4 f5 e9 54 3a 4f 0d 57 e3 90 2b 48 25 32 5c 39 6f 84 85 d2 44 20 af 1a 42 5d ce ae b6 e7 c3 f6 32 8f eb 32 5d 95 3c ea 76 43 39 db 38 e8 98 7d 9c 68 1a 90 4d b3 fa 98 69 63 50 a3 69 2a 39 83 ad 2d 45 4b c9 93 da 5a 79 73 7c 9e 0e da 87 df fe 66 55 2d 9e fb e0 c7 eb ae ed a6 21 8f 8d 9a 06 18 6c 7d 7e 6e 24 3f fd 5f fc a3 0f ff d8 9f df 9c 0d 7a 75 75 7c b9 7d e7 d1 5b 9b b3 Data Ascii: gZ)6)OpyQ/?kzg6Um{'~>=\?yeLd"A{UJi"QyE"T%+a&ghNyT:OW+H%2\9oD B]22]<vC98}hMicPi*9-EKZys\|fU-!l}~n$?_zuu\|}[
2024-05-06 16:41:55 UTC	16384	IN	Data Raw: cd e6 7b 5f c7 90 f5 99 f7 7e 80 52 53 b7 cd 34 0c eb d3 d3 f3 27 67 1f f8 4b 7f e5 67 7e e1 6f e7 8c 6f 7c f5 a5 9c 32 c6 fc 8d df fe f4 fd 37 bf 79 f7 7d cf af d7 a6 c3 b6 68 29 39 97 61 8b 69 70 50 6a fa 54 37 42 e2 6e 66 ce 24 4d df 39 e8 f2 f1 a3 61 73 1e c4 05 03 d8 55 09 0e 09 0f 27 01 4e 08 ef 73 5c e2 25 d8 10 6c 00 d2 b4 d9 10 66 3c 84 c3 c1 24 9c 86 cd 99 83 ea 6e 0f 6a 9b d3 93 48 e8 fa 75 16 5a 99 e7 ff c0 ce 2c 8e 00 e9 c4 79 4a 12 9e 04 a6 39 7d 17 ee 38 e6 d9 a4 36 af f8 67 37 30 dc c9 c8 67 54 9c bd f3 83 b7 ee bd f9 e6 d1 cd 1b 3f ff 73 7f e3 c6 c1 3e 88 1b 26 62 a7 29 16 67 4a 24 eb f5 95 21 76 78 64 88 cc f6 0f b9 cc 0e b0 13 09 27 17 29 6e aa 05 3e 5b 95 8c 8d 34 aa 4e dd a5 42 b1 f0 09 c0 05 89 5b 6e 13 a7 92 27 b5 92 e1 b1 3a 8c 54 Data Ascii: {_~RS4'gKg~oo\|27y}h)9aipPjT7Bnf$M9asU'Ns\%lf<$njHuZ,yJ9}86g70gT?s>&b)gJ$!vxd')n>[4NB[n':T
2024-05-06 16:41:55 UTC	1024	IN	Data Raw: f2 96 e5 64 d0 06 cc ec 0c 9b cd 20 6c 1b 13 5a 16 5f f6 9a 84 7a 33 22 a8 e2 d8 5c 98 28 54 b4 20 76 02 79 89 24 f5 6a c4 de 49 1a 4a 3d 52 ab ce 06 1f 1c ea 80 c2 cc 14 01 43 41 cc 40 f0 28 fa b1 a2 60 06 fa 51 cf ea 04 66 71 77 d3 50 63 e2 be 3b 30 90 04 d5 32 48 66 02 05 03 61 d6 47 22 28 bb 11 13 3b 55 21 35 a2 6a 22 2b c8 81 31 2a 62 9d 00 36 1a e5 60 44 c6 a3 84 8e 8c 21 84 50 ed 33 51 e5 e8 3f 89 2c f1 a8 e7 31 8a d5 0e 23 b6 96 c6 20 cb f8 bb 10 ab 3c dc 0c 84 0f be e7 83 af 7d eb 6b 8f 6f 1e b6 d3 56 ad 84 94 ae ba bb a3 04 62 ad e1 c6 08 41 92 c3 cc dc aa 1b 8d 5e 5c 75 73 98 ad b2 cf 10 48 41 10 80 d2 08 96 ae 55 bb 69 0b b5 52 8d 42 b2 46 a3 b5 3d 5e 71 27 57 ad c7 47 37 cf fa a5 94 52 6a 12 31 ac 94 7f f4 8f 3f 75 f7 ea b5 17 7e f4 7d e2 64 Data Ascii: d lZ_z3"\(T vy$jIJ=RCA@(`QfqwPc;02HfaG"(;U!5j"+1*b6`D!P3Q?,1# <}koVbA^\usHAUiRBF=^q'WG7Rj1?u~}d
2024-05-06 16:41:55 UTC	16384	IN	Data Raw: b9 aa 99 bb 91 b9 b3 79 81 45 a6 c7 8f cd b5 46 6e 56 17 c7 65 ba 35 3d dc 3f 36 f2 52 3d e6 65 90 3a 56 91 5b a6 4e 0e e7 c7 1e 7d 35 bc 11 49 20 27 c3 da fa fa e2 64 c6 92 ff e9 7f ff cf ff f9 3f fb 27 ea 5c fa 7e b0 5e b5 18 e0 ea b9 e1 4e 52 62 b6 50 94 32 ab 03 89 0d 94 92 24 81 10 80 9c a4 40 28 43 84 d9 9c 06 2d e6 6e 66 c4 e2 4c 99 d8 9c 40 d5 dd 65 6c c3 63 c9 9d 3b 4c cb 64 d2 e4 c4 75 28 cc d4 26 ea 52 96 84 96 79 33 35 49 64 73 32 9d 4e 3a b0 34 49 e0 c3 18 49 ec 79 2c ee 70 43 29 56 7b d5 a6 41 6a 44 4e 9f 3d fb c8 e3 4f ec dd b8 d5 65 61 17 96 e3 bd 7b 7a e9 91 87 b5 9f db 80 8d 8d 36 89 1d ed 1d c2 fd 4b 5f f8 ab b2 1c dc 80 68 60 24 24 24 83 31 41 8d 98 94 22 28 8f 65 6b 6b eb 7d 3f f5 d4 c7 3e f6 33 5f f9 ca 97 7e fd d7 ff ee 7c 36 1f 3b Data Ascii: yEFnVe5=?6R=e:V[N}5I 'd?'\~^NRbP2$@(C-nfL@elc;Ldu(&Ry35Ids2N:4IIy,pC)V{AjDN=Oea{z6K_h`$$$1A"(ekk}?>3_~\|6;
2024-05-06 16:41:55 UTC	1024	IN	Data Raw: ef 47 65 f6 89 75 b7 df ae eb e4 ad 79 f7 d6 67 04 e7 43 0b c6 24 a0 23 d5 54 9b f5 f1 f6 f1 a3 92 51 5b 6e e9 69 eb a0 d6 8d 59 ab aa 9f fa f8 33 17 db 76 be 35 0b af a5 1e ac 03 d8 4c 19 34 9c 8e f5 61 0c 6a a1 d3 dd 04 42 56 40 fb a2 81 eb d6 11 9d 61 86 e9 7c 37 37 c3 aa 56 33 6b 41 4b 94 10 74 f7 ee 38 18 9c 5a 45 28 25 3f 48 77 76 c3 54 f0 f4 0a 97 bb 66 01 4a ac 06 37 03 26 e2 0b 0b b4 45 92 2f 18 d6 01 96 22 d9 25 05 83 11 2a 7a ba 39 ba b7 d9 1c 6f ea 54 4a ef 71 76 75 7d 7e bd bd 9c fb c1 22 5d f5 38 20 4c a4 e1 af 94 49 89 5b 77 9f c6 7c f0 d4 8c 31 88 22 22 90 02 2a 6a aa 62 92 42 3d 6c 0a fa 58 06 0b 23 b2 33 b5 31 c6 fa b2 2e 96 4c 3a 71 42 7f f4 d3 bf ef fe 73 f7 2d 6c 9e 6d ee fd d0 9a 99 19 e0 5d 02 6e de 2d c8 6e d6 3b cc db cd b6 cf a3 Data Ascii: GeuygC$#TQ[niY3v5L4ajBV@a\|77V3kAKt8ZE(%?HwvTfJ7&E/"%z9oTJqvu}~"]8 LI[w\|1""jbB=lX#31.L:qBs-lm]n-n;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.11	49738	18.173.145.84	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:41:54 UTC	393	OUT	GET /rmshg/1576789110_slipstripsfallsmall.png HTTP/1.1 Host: d3j0t7vrtr92dk.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:41:55 UTC	538	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 144807 Connection: close Date: Mon, 06 May 2024 16:41:55 GMT Last-Modified: Thu, 19 Dec 2019 20:58:28 GMT ETag: "e666d7a26e083a0412154d83ac7b16b0" x-amz-server-side-encryption: AES256 x-amz-version-id: 66h_XY.5NCqc0vmxtTqFjfoM3c2ggtI_ Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 90f213fc1bf2dcf0cc7a135191b4c336.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: cT1sTAM8VlXK3P3aQU5NSyBmlAKDuOhwxa-QRwCqFYIc1cXebU-deQ==
2024-05-06 16:41:55 UTC	9661	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 df 00 00 01 40 08 02 00 00 00 72 52 e1 99 00 00 20 00 49 44 41 54 78 9c 94 bd 4b ac 2c 59 76 1d b6 d6 3e 91 79 3f ef 57 55 5d ff aa ee 2e f6 c7 64 53 14 c5 9f f8 91 68 09 b6 25 c3 30 2c 78 e4 89 47 1e 78 e0 99 e1 a9 27 e4 c8 1e d9 13 c3 f0 c0 82 0d 03 86 05 58 02 0c 1b 22 24 1a b6 21 81 12 45 89 00 49 c9 6c f1 23 7e aa bb ab ab 59 ac ee ae aa f7 de bd 99 11 e7 ec bd 3c 38 9f 88 cc 7b ab 24 67 65 e5 8b 9b 19 71 e2 7c d6 de 7b ed 7d f6 39 41 49 00 00 48 22 59 0f 00 d4 e3 f1 aa bf 8e 73 ce be df fe 29 89 cb 53 cd cf 41 12 56 7f 13 40 50 14 40 4a 00 44 42 e3 03 82 08 02 10 04 92 82 ea 75 24 6a 7d 00 21 04 d0 92 96 1b ca 85 e0 ee 12 b8 54 be 91 dc 6c 2a d2 54 af 23 01 50 10 85 c8 f2 02 26 40 b4 09 b6 43 Data Ascii: PNGIHDR@rR IDATxK,Yv>y?WU].dSh%0,xGx'X"$!EIl#~Y<8{$geq\|{}9AIH"Ys)SAV@P@JDBu$j}!Tl*T#P&@C
2024-05-06 16:41:55 UTC	8192	IN	Data Raw: 54 49 06 85 a3 26 cc b6 3b 58 80 b2 c4 c3 47 78 e3 27 cb f5 ab 14 c0 ba c4 c0 80 f3 f1 6e 83 c5 1d 09 bf 78 c0 1f f8 2b e5 78 60 32 dd 7e c8 4d b5 4f 10 03 68 ba 92 4d 11 75 8f b5 50 14 45 69 d4 47 01 cf a8 ea a0 06 9a c6 71 77 85 58 a3 37 84 8d c9 94 4a b5 10 41 3d bc d6 27 1f 14 3d ba 6e de 71 23 78 16 f3 0d 19 2c 4b fa f0 eb e9 e6 bd 90 41 3e c0 7a 97 08 df 25 17 f8 94 d7 09 77 06 04 aa 62 15 63 f2 75 c0 b2 6f fd a2 75 91 02 1a 5d a2 c8 e8 b6 1f 4c 98 2e 90 f6 98 0f 09 51 f3 c4 aa c0 8c 02 37 c0 6f 60 da 26 a1 01 11 f5 99 0f 3d 81 06 a8 9e 44 dd 2e c3 eb 8e 86 68 ce d6 d8 e7 a4 25 f9 0d 2e d0 ef 06 b9 a3 b4 a5 80 50 b7 37 7d 0f 7e ad 24 9a 6a 6b f5 14 92 90 2c 5d 24 bb 06 ae ac 8e 6f 6c 76 85 6e dd 62 52 c9 f3 d1 5e fc 62 02 da d4 48 d7 1a f5 a4 70 c7 Data Ascii: TI&;XGx'nx+x`2~MOhMuPEiGqwX7JA='=nq#x,KA>z%wbcuou]L.Q7o`&=D.h%.P7}~$jk,]$olvnbR^bHp
2024-05-06 16:41:55 UTC	1024	IN	Data Raw: 28 8f 9b 57 f9 f8 5b 5a 16 9e 3f 88 dd f3 68 00 5b af 9d 7a ee fd 98 1f 98 d4 65 eb ed eb 1a 14 98 ec e6 db f5 d5 2f cd 67 cf 09 80 15 d6 cc f7 1c 0c d7 23 f2 52 88 36 ad 34 87 28 35 e9 2a 1f 59 36 81 ec 93 bc 93 d0 9c b2 78 b3 d1 62 f4 08 4c 93 8b 04 5a 2f a5 1b 12 b3 f0 f1 57 0e 6b b8 79 dd 69 cc 9d be ee 16 d0 47 ac 32 e2 ad ab c6 5e 9f 26 0f e0 8a d4 06 8c ef be 8e 0d 7b 25 27 c3 b3 3f 8c c6 94 61 b0 58 ab 4b 99 67 44 a0 2d e9 e1 ef d0 5d d8 6e b7 2d 6a 27 b2 3d 50 cb b6 6e e3 61 75 10 d0 fd 7a 5b d2 8c bd 23 04 64 24 a2 c1 1b 73 00 61 26 10 a5 d3 4c 64 31 d5 c6 a8 36 5d a0 ec a2 5e 13 21 2c 14 41 e7 78 e8 b6 3c b6 b7 7f 3c 65 e0 29 50 23 d9 9a 74 f3 d8 2e de 12 52 99 6e f6 df f9 b3 b3 8b 1f a3 4d a7 12 ea f0 98 b7 1d af ba 7e 4d 8f bf 8e 7b 4f 73 79 Data Ascii: (W[Z?h[ze/g#R64(5*Y6xbLZ/WkyiG2^&{%'?aXKgD-]n-j'=Pnauz[#d$sa&Ld16]^!,Ax<<e)P#t.RnM~M{Osy
2024-05-06 16:41:55 UTC	15360	IN	Data Raw: 5e 35 ea c2 d5 89 4d a2 f7 44 45 ef d8 10 8e 9c 9c c8 9e 43 68 21 14 9c 3f b8 bf 7c fa 57 e2 63 f7 f8 fc 47 c3 46 c3 e6 bb b4 ee 91 c7 1f 2c 98 1f d8 5b bf 57 6f fd 18 bc 71 ff 9a 7f eb 4f ec 6b 7f c8 57 bf 46 4e 78 40 ee ce b1 30 80 02 e7 52 eb ee 91 9e 7a 76 be ff 76 a8 11 bb 2d 13 ac 0a 3c 64 80 97 bf fa 4d ee 1e 46 ec 49 4a 61 56 c4 b3 ce d7 d9 56 c6 33 e9 d4 80 e8 cc 2d 4f 8c 63 96 20 88 04 d5 2a 2d 9b 9d 6f f3 83 95 92 a4 33 82 51 5e 91 69 ce 31 52 d5 24 9a ec a6 a2 5e da ee 61 cf 35 3b e1 dd ad 3b ef 54 76 9f f2 ec 2d e0 0c 8e 76 2a 9d dc e3 cd 2a 98 b9 a6 c9 ae 3c d5 0f e3 e1 80 a8 0b 23 0c ea d3 6d c6 d9 24 d9 54 a0 88 ba a6 81 0e 1d c7 11 f4 00 e0 25 d0 e4 37 65 57 52 4b a9 d5 7e fa 61 30 76 3c bf c2 e5 e1 5e b9 a5 54 38 9a 28 d5 ba f5 b7 0c 29 Data Ascii: ^5MDECh!?\|WcGF,[WoqOkWFNx@0Rzvv-<dMFIJaVV3-Oc -o3Q^i1R$^a5;;Tv-v*<#m$T%7eWRK~a0v<^T8()
2024-05-06 16:41:55 UTC	16384	IN	Data Raw: 99 21 83 cf 40 54 b2 5f f4 96 5c 1c 5e 7c f5 6a c7 44 38 66 ce c3 eb 01 18 b4 6f 65 ca d0 c1 44 5d 5e 12 28 21 b2 18 4a c5 83 61 f3 f6 31 2c 3c 25 94 9d a6 33 b8 c1 33 54 58 b3 7e 03 bc a5 ba 7c 28 a1 c0 ce 38 97 f4 c4 9b c4 89 8c 70 a2 e2 9a 12 3c 42 29 8e d7 6d aa 5e 93 e4 00 61 78 c5 d7 a5 b3 87 f3 c7 7e 35 9d df 66 94 97 0b 8b 9e 60 be 10 92 9b 52 be 6f b7 5f 9b 5e fb 56 c4 b0 0f 21 58 ff d7 55 e0 91 27 67 89 6c 36 ed 5a e7 d5 f1 47 a9 84 7b 9f f6 77 fe 68 ba f3 0a 68 87 92 13 c4 12 53 6c aa 81 8f 0d aa 86 8a 2b 99 66 d8 5f 02 48 31 9b 36 c9 9d 9a c9 c4 69 f2 b2 47 de 33 56 65 a7 67 b5 8c 21 65 88 d1 75 a7 d5 5d 50 f4 2a 31 b2 95 c4 b7 0a 09 fa 63 c3 1e 86 40 29 ea 15 47 4c a7 83 9b 8d 04 95 12 ce 8a 1a b7 5e 2b b5 75 e6 a1 a5 da 73 8b 95 74 a6 dd 5d Data Ascii: !@T_\^\|jD8foeD]^(!Ja1,<%33TX~\|(8p<B)m^ax~5f`Ro_^V!XU'gl6ZG{whhSl+f_H16iG3Veg!eu]P*1c@)GL^+ust]
2024-05-06 16:41:55 UTC	16384	IN	Data Raw: b9 d8 e6 d3 f7 89 24 ca 82 20 24 fc cb 9f d4 a7 fe 79 38 8f 0a 7b 8e c7 bc 65 b1 ac 85 18 f3 ae c9 b9 da a8 03 e2 93 a7 d1 bc 6e 2b 2f dd 5c 5b d6 0d c7 8a b1 b6 a3 81 e5 06 5d 57 40 a1 9d 14 2a 45 e3 8f 52 c3 02 1d 5e de 52 02 36 d7 fb 92 b7 d7 1a 7c 26 89 69 7a ec f6 39 2e a6 d9 69 2e 77 75 c7 f3 b3 6c f6 2e dd cf 76 f6 ad 84 4a cf 63 d1 d1 70 4f b4 2b 88 7c da df 79 c5 c5 fb 0f cf 58 66 b8 29 9f 42 89 76 5f 3b 24 7f 89 8d 01 56 64 51 50 03 d1 04 7f ae 62 dc f9 34 22 47 0b eb 10 55 7e b3 ed 25 23 b2 3b 65 50 4a 64 6a da 4c 87 77 eb a0 98 41 2a ef ba 9a e8 03 40 22 27 37 5e 75 e5 aa 47 56 2d ed cf a3 26 69 d2 73 1f 4d 1f fc 71 7d e9 63 76 76 8f f7 5e 8b 94 e5 41 f2 74 c5 1c f0 ac 64 de f3 bc cb 0b 12 64 75 eb 99 90 23 4a 5b 50 4e 7f 55 92 86 d0 b3 c3 56 Data Ascii: $ $y8{en+/\[]W@ER^R6\|&iz9.i.wul.vJcpO+\|yXf)Bv_;$VdQPb4"GU~%#;ePJdjLwA@"'7^uGV-&isMq}cvv^Atddu#J[PNUV
2024-05-06 16:41:55 UTC	2048	IN	Data Raw: b2 00 11 0a 50 2f eb d2 5e 7d 0a 0a 81 0c e8 7c 62 f3 79 66 14 28 db de 66 43 cc c6 99 c6 06 d9 4a c7 f6 23 cb a6 0b 20 1f ad 94 0e 29 07 28 99 49 14 d0 a0 77 ee d1 c1 fe f9 97 1f 1d fd 9d bf f4 8d cf bd 55 9d 0e 92 f3 c4 0e a1 37 0e 07 a8 4e ac 68 00 e8 94 3c 1d 9a c0 7d f7 e2 73 cf fc a7 3f d3 bc f3 7d 2e 38 35 42 da 25 07 b5 41 d6 f6 b3 66 ab 13 23 ac 7f ae f9 40 ca 4f ce 95 9e 4b 9c 2b b4 08 ca 5a 62 31 f3 87 f5 4d 50 e0 f1 55 fb e2 ef f3 8b bf 0d 23 9e 7b 81 97 6f 42 d3 d1 e2 31 3f 74 74 90 e5 2a ca 5b 98 91 8a 1f 6d c7 ef f8 9c 83 02 61 ea 3b d0 6a 0a a3 d0 51 21 7d a0 1c 8e 90 a7 8b fd 7c 76 08 ca 60 bd cc c7 8d 71 22 17 a6 c2 00 7b a1 a3 a3 fa 8e 52 da 15 9a 94 3f ba 78 d2 53 42 25 41 52 08 e5 53 72 01 f4 87 d8 f6 14 a1 56 9e a1 47 f0 79 fd 5c 24 Data Ascii: P/^}\|byf(fCJ# )(IwU7Nh<}s?}.85B%Af#@OK+Zb1MPU#{oB1?tt*[ma;jQ!}\|v`q"{R?xSB%ARSrVGy\$
2024-05-06 16:41:55 UTC	16384	IN	Data Raw: f9 0b ee 62 e7 b0 53 6c d2 6c ec f8 d0 31 20 6f 84 65 30 42 ea 7d 3a c2 32 f3 e6 ac 87 03 81 70 b0 e0 e3 97 e3 64 1e d6 21 ce 8d 34 12 e8 3b c2 a7 98 f9 75 c2 4b 66 82 cd 38 33 de c7 8f b8 d2 5e 1f 30 10 12 e9 1c c2 01 be 2f 6c a8 cc 7a 8b a0 5a c0 cb ef 5d 3e 83 30 9e 2b 81 51 23 03 e8 10 8e c3 d6 e6 04 48 84 00 22 7d 53 ce 38 ab c6 12 4b 52 6a de fd b1 5a bb 26 86 72 5c 96 86 f5 5c 2b a8 5a 9c 78 39 c2 c2 88 6f 1e 6b 2d 00 0d f1 a4 32 13 01 ef 9c 0b d7 21 74 5f 73 e7 c7 fe 9b f6 9d df b0 73 06 b8 c9 d7 8f 73 13 3a d3 d8 ce 1c 3f ce 63 d5 37 93 e7 27 23 4e 84 00 30 f5 b8 ff a2 fe f0 1f eb f2 09 c7 0b f4 8f 60 a6 a6 6d e2 50 4c 86 44 26 08 10 a1 1b 38 63 94 96 c9 91 b1 a1 7a f6 07 e4 05 c6 c8 7e 33 00 70 0e 66 0a 47 ca 90 f6 87 30 99 31 cf 9d a4 91 16 08 Data Ascii: bSll1 oe0B}:2pd!4;uKf83^0/lzZ]>0+Q#H"}S8KRjZ&r\\+Zx9ok-2!t_sss:?c7'#N0`mPLD&8cz~3pfG01
2024-05-06 16:41:55 UTC	1024	IN	Data Raw: 7b ad e4 13 a0 64 07 24 51 20 1c e5 e8 65 66 6b 5e d9 e0 90 2f 8b dc a9 ea f9 e4 39 73 a0 2d dd 12 83 9d b2 56 91 62 68 e0 3f 5e d5 5b 24 09 9c aa a0 68 e0 64 2b 4f dd 2c e6 0a 8f b7 cf be ea c9 7d 66 81 ce 56 b0 da 57 06 39 37 de 6e 62 0a 92 76 18 76 97 36 4d dc 66 87 6f 2e 39 16 97 0c ce d2 bb b4 a8 21 a3 75 f5 d7 b9 dd 22 d0 4e 06 eb ce b9 f1 8f 40 05 ca 85 3e fd e6 ab df 7c 6f aa fb a9 4c 40 89 2b 1a eb e2 2f ff 48 fe ed ff a2 2e 47 53 15 e6 4d 81 bc f1 68 77 33 e8 b3 31 9c fd f4 43 5c a1 7f 93 8f c8 27 33 c2 26 21 89 6b 58 cb c0 73 03 3a ac 1b 61 04 74 76 fd 4f 0d 56 54 b2 b2 e6 3e ad d6 01 7a 98 e9 ba 9d 4e 43 eb 69 ba 8f ba cb 77 40 1e 5a e3 73 ca 99 d5 cf 8b 07 96 d2 02 81 e5 46 b5 ee d7 04 6a 51 3e 99 57 d5 92 9e 7f 0b 0c 3d b2 07 ab 75 e7 1e e1 Data Ascii: {d$Q efk^/9s-Vbh?^[$hd+O,}fVW97nbvv6Mfo.9!u"N@>\|oL@+/H.GSMhw31C\'3&!kXs:atvOVT>zNCiw@ZsFjQ>W=u
2024-05-06 16:41:55 UTC	16384	IN	Data Raw: 2b c6 56 5f f1 7a db 30 24 0c 0e f6 16 57 83 96 47 2c cd 46 6e 0f 12 b9 89 73 c4 e4 b4 1d 3f f9 93 9f fd d6 d7 8f 7e d8 d5 e4 e6 8a 32 79 ac 39 4d 17 e9 eb ff 53 fd fe 97 52 d7 52 9f f5 ba 93 c9 fe ff 3a e6 8c 7a 55 16 5f 8b 67 f5 fd b0 c2 bf 36 09 2b a7 ee a8 a2 75 1e a0 0b dd 0b 02 12 8b e7 39 66 b5 72 02 53 97 8b cf 18 2a ba 19 af 6b 1d e3 83 e4 2c 0b 41 55 07 7a 24 4f dc 0b 41 01 02 21 cf 2a 59 96 2c 25 ca 13 d1 84 77 c9 f6 c2 5b 60 ea 00 74 53 4b 8f 74 00 a7 47 b8 7a 8f 53 14 42 68 da ea 60 b2 23 fc 7c eb 2c 8e 51 85 2d 58 1b aa 01 20 b9 dc 15 1c 32 76 6b 38 6f 3c 0b 2e 42 66 4a 07 4e 17 4a 07 d9 d4 36 fc d8 da 72 a1 c6 3f 47 f1 e8 5e 48 38 4d dc 21 3f 05 72 cb 01 54 15 5c aa e2 00 75 20 0c 0c 95 74 98 c5 28 34 d9 b9 82 d3 0d 0e 69 54 3c e8 3e 48 03 Data Ascii: +V_z0$WG,Fns?~2y9MSRR:zU_g6+u9frSk,AUz$OA!Y,%w[`tSKtGzSBh`#\|,Q-X 2vk8o<.BfJNJ6r?G^H8M!?rT\u t(4iT<>H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.11	49742	23.196.177.159	443

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:41:54 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-06 16:41:55 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0790) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=224465 Date: Mon, 06 May 2024 16:41:54 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.11	49744	23.196.177.159	443

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:41:55 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-06 16:41:55 UTC	531	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Content-Type: application/octet-stream ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0DMGnYgAAAACXaXykPZuVRq4aV6pCkeO8U0pDRURHRTAzMTgAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=224457 Date: Mon, 06 May 2024 16:41:55 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-06 16:41:55 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.11	49745	18.173.145.84	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:41:55 UTC	388	OUT	GET /rmshg/1576790499_slicertraining.png HTTP/1.1 Host: d3j0t7vrtr92dk.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:41:55 UTC	538	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 192842 Connection: close Date: Mon, 06 May 2024 16:41:56 GMT Last-Modified: Thu, 19 Dec 2019 21:21:37 GMT ETag: "b499dc97eeb6069ef017209b969f695b" x-amz-server-side-encryption: AES256 x-amz-version-id: GfqouhnrS5CZfht7ZkDgNt94xdQRLizP Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 a61500b02203448696480e37b5438a58.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: zU8CnEPKCzDNxoxDyHwsbQcuEdf_0OTP5FKdNY31yOFKDYee_7uqbQ==
2024-05-06 16:41:55 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 01 40 08 02 00 00 00 eb aa 38 2c 00 00 20 00 49 44 41 54 78 9c 8c bd 59 af 25 49 72 26 66 66 ee 11 67 b9 5b 6e 95 59 c5 aa ae ee 6a b2 17 35 49 0c 47 d4 80 03 48 3f 53 d0 bb fe 80 5e 04 0d 20 80 90 20 3d 68 46 10 87 12 c9 19 b2 57 76 77 75 77 65 65 e5 76 d7 b3 44 b8 9b cd 83 b9 5b 58 78 9c 2c 2a 50 c8 3a f7 9c 08 0f 77 73 b3 cf 16 37 37 c7 ff e1 bf ff 1f 11 51 44 f4 5f 22 02 00 11 81 7a 21 a2 ff a0 77 ea 9f f6 d9 5f fa 7d 08 c1 df ac 2d 33 b3 b5 8f 88 d6 4e d3 82 be fd e4 af 44 e4 fb d6 74 43 db b4 1b 7c 87 fd 6d be db fe fe a6 4d 11 fd c0 f6 7d 08 21 c6 18 63 17 63 08 48 31 46 11 c9 39 e7 9c 53 bd 32 b3 40 1d 9d 08 cc 87 ff a1 0e 2c 09 d5 8c 4b ef 69 7a 68 e4 b2 d6 1a d2 d9 b4 5a e3 1f a2 Data Ascii: PNGIHDR@8, IDATxY%Ir&ffg[nYj5IGH?S^ =hFWvwuweevD[Xx,*P:ws77QD_"z!w_}-3NDtC\|mM}!ccH1F9S2@,KizhZ
2024-05-06 16:41:55 UTC	1025	IN	Data Raw: 04 14 01 e1 31 8f 63 ea 63 78 7c 71 f9 e8 e2 3c 06 ba be bb fb f2 0f 5f ff d3 cf 7e b9 db ed d5 20 d1 42 b8 56 13 85 99 05 98 8b 6f 01 c2 28 20 81 02 33 27 1e 2f 26 23 a4 00 00 20 00 49 44 41 54 10 01 34 02 c3 90 b3 ba 53 41 d7 78 78 94 71 38 3e ec 74 6f 21 10 e1 7a b5 fe e8 d9 47 9f 7f 7e b9 db df bc 7e f3 f6 e7 bf f8 55 17 e2 67 df f9 f4 8b 2f be f3 e9 a7 2f 9e 3f 7b d2 6d fb 7a ec 21 d8 f4 55 98 23 80 92 eb f2 fe fa f5 ed dd fb 8f 3f f9 f4 93 4f 9f fd f3 2f 5f 8e 43 7b 0c 9b 49 ab 54 d7 dc 73 08 4c 15 3c c0 6f 7e 09 48 5c 42 5b 9a 1e c0 84 f3 e3 b8 08 c9 9d 38 d1 38 2b 58 96 73 ad e7 a6 53 45 1d ec d2 03 d7 55 cf 99 0d 74 2e 65 d0 0b 8e 37 a1 7c 53 78 aa da ad 7f 85 f1 1b 4f f5 29 ab 88 85 10 cd fe 2a 74 a2 52 a9 41 01 a6 ac 78 96 b4 b0 49 56 73 4e c7 Data Ascii: 1ccx\|q<_~ BVo( 3'/&# IDAT4SAxxq8>to!zG~~Ug//?{mz!U#?O/_C{ITsL<o~H\B[88+XsSEUt.e7\|SxO)*tRAxIVsN
2024-05-06 16:41:55 UTC	15902	IN	Data Raw: 64 10 55 f4 57 36 82 aa a3 45 ca be 24 ac 3c 6d c0 aa 4f 23 d7 7a 95 96 bd a4 f6 51 75 cb 48 a3 25 52 97 74 c4 39 b6 3a 2e fb 73 0a a9 89 d6 0d 15 44 e4 9c 31 84 ea 66 b9 fb 51 08 09 a3 74 48 00 b0 dd 68 e8 4c f7 94 32 0b b0 00 11 0f 03 a7 84 00 21 8d 52 cf 48 45 66 60 aa d1 3c 10 b2 24 ff ea c2 37 e2 a4 96 43 29 8a 80 4c 28 db b3 b0 5a c1 fe 78 07 a0 11 00 b5 ce 2c e6 59 89 88 78 d8 ef de be be 7e fd f6 4d 3a 26 40 21 a2 c3 e1 b8 ee 57 9f 7d f2 f4 ea e2 ec fa e6 fe d7 bf fd dd db b7 d7 ef 6f 6e 87 61 c4 00 59 04 45 c6 74 00 96 9c 73 d7 75 3a f6 69 de eb 0a 90 e5 59 21 96 7a 67 21 50 4a a9 4c a9 80 aa 22 94 92 8d 51 77 39 09 82 84 10 b4 c0 cd 30 0c 3a c6 43 4e 99 f3 dd dd 1d 08 5c 9c 3f fa b7 7f f5 df 8d c7 f4 f3 5f fc f4 6f ff f6 ef bf f3 f9 67 7f fa e7 Data Ascii: dUW6E$<mO#zQuH%Rt9:.sD1fQtHhL2!RHEf`<$7C)L(Zx,Yx~M:&@!W}onaYEtsu:iY!zg!PJL"Qw90:CN\?_og
2024-05-06 16:41:55 UTC	1506	IN	Data Raw: 88 11 10 34 46 51 01 04 cf 7e 6d 3c 41 6c a2 28 32 71 52 8e 9c 9b 20 a1 26 c8 09 6a 53 8d de fb 71 3d 3a 1a c2 b2 69 62 0c 31 46 6b 3a ef 62 17 62 0c 6d 67 8d 3b 22 c5 da 02 39 c7 44 58 79 47 64 75 13 cc 44 ec 6c 36 93 15 e5 52 a9 a3 45 00 45 42 44 d6 94 72 ce 92 b3 8e 28 51 76 6e 7b 93 8c d8 44 44 b6 fe 01 05 50 14 46 54 00 22 9b ed 9a 95 b6 73 19 c5 ce a3 73 54 53 4c 1a 25 4a 5a 2c 17 16 45 2b 00 28 32 a3 73 ec bc 63 a2 ba 72 e3 f1 d8 c4 3a 4a 8a 29 69 8c 5d d7 3d d9 9b 8a 08 40 34 f7 c9 46 ed 15 11 b2 95 22 49 d2 36 f3 07 77 6f bf fb de 9f 30 c3 ab af 5e dc ed da 64 55 df 51 72 1b 66 a1 a9 82 42 72 5b c0 7a f1 06 bb db dd c6 f4 f8 e1 e3 cf ee de 23 e4 b5 b5 c9 f7 bf f7 cd 5f fc c5 ef 21 b1 64 be 6a 0c 21 5a 9e 36 e7 6f cd 31 cd 3b 0f c0 3a 2e f2 a0 74 Data Ascii: 4FQ~m<Al(2qR &jSq=:ib1Fk:bbmg;"9DXyGduDl6REEBDr(Qvn{DDPFT"ssTSL%JZ,E+(2scr:J)i]=@4F"I6wo0^dUQrfBr[z#_!dj!Z6o1;:.t
2024-05-06 16:41:55 UTC	12792	IN	Data Raw: 85 8a f3 9a d1 a1 18 63 61 3d b5 6d 92 e7 3a 8a 68 71 a4 f6 15 96 49 e9 dd 28 22 aa bd 87 d8 6f 93 de 30 88 f4 1c 0c 58 ae 67 c8 22 09 88 3d 45 51 16 fe 4c 9a 61 7b 93 28 47 40 59 84 f4 cc d9 93 7f f5 bf fa cf fe da 5f fd af bf f4 c5 9f 5a 9b cc ee de 7f 30 aa 6b 49 36 21 33 c7 1f 88 b9 5e b6 bf 25 22 8a 31 85 d0 d4 a3 09 a8 fc c1 0f de fd 95 5f fe 17 4e 9e 3e f7 e0 b3 bb a7 ce 1d 1b ba 6e 44 a4 9a f6 a6 db cb e5 b4 1e 8d 11 74 73 6d bc 5c 46 2c 7d 28 5a e2 ad 83 ca 61 7f 83 38 62 bf 97 75 e8 43 f4 e1 20 00 00 f4 18 1d 10 29 22 90 82 14 32 5b 5b df 5e b1 e6 13 15 95 46 d9 69 1f 9e 76 e0 75 42 8e f1 8b f8 ed 73 43 a5 54 d1 98 21 ec 93 7f 50 c6 dc 20 92 33 af a6 14 f7 64 23 13 ba 85 88 6c 6d 1d 16 11 55 2e d3 70 81 89 3d bb d0 85 1b d7 3f f6 ae 3a fe fc 79 Data Ascii: ca=m:hqI("o0Xg"=EQLa{(G@Y_Z0kI6!3^%"1_N>nDtsm\F,}(Za8buC )"2[[^FivuBsCT!P 3d#lmU.p=?:y
2024-05-06 16:41:55 UTC	4616	IN	Data Raw: 67 a7 43 04 f4 35 1d b2 c7 4d 68 77 e0 83 3f 13 fd 99 83 65 ce 7a 78 f8 f0 e4 e8 a8 0b d4 87 18 63 c7 c6 2d 48 49 ab 90 82 63 d3 83 6f 0c 53 66 29 45 88 40 89 b8 75 a7 58 81 4a 24 db 7e 30 21 34 9c d5 ee b1 6d 79 d3 f6 2e 6c a4 5a 90 a6 0e e1 c8 6d c6 55 61 de d9 d9 b5 79 a0 48 14 43 48 39 7d f4 d1 47 27 c7 47 5f 7c e5 47 62 0c aa 6a 1d 08 26 e0 a9 aa 63 4a 25 97 bd dd 33 25 ab 32 7a df 8f a5 00 80 c8 88 08 48 02 b5 73 aa 4e 74 b5 f4 cf 7b f4 9e d2 58 54 81 45 42 88 fd 12 8d 40 c5 cc aa c0 45 85 15 9c 6d 06 58 6f d6 87 ab 55 2a e2 83 17 91 9c b8 8c 19 21 9b 4b ed e3 de 66 93 98 b9 96 e1 ad cb de 6f b9 fa cc de b0 9d 25 67 d3 a0 68 5c 2a c9 a5 8c 69 e4 c6 81 b5 5f ab 6a 4a 19 b4 20 8d e6 a5 88 c0 f9 3a 93 89 c8 99 17 41 44 29 00 48 82 55 54 b0 65 64 5a a5 Data Ascii: gC5Mhw?ezxc-HIcoSf)E@uXJ$~0!4my.lZmUayHCH9}G'G_\|Gbj&cJ%3%2zHsNt{XTEB@EmXoU!Kfo%gh\i_jJ :AD)HUTedZ
2024-05-06 16:41:55 UTC	12792	IN	Data Raw: 41 0c 3e 33 73 cf 3d 20 ec 2c fa 73 7b bb 87 27 27 ac 47 b9 64 01 ed bb 38 6c c6 c2 06 54 0b 5a 8e 8b 82 00 44 ee 2f bf f5 97 d7 df b9 fe ad ef be 0e 00 63 1a df bd 76 8d 1c 5d bf f1 de 5b 6f 5d 7b ee fb ae fe f5 5f f9 ea 93 97 2f c5 3e 4e af 4d 55 88 9a c4 46 cd ed 55 75 8b 15 4c 26 5b 04 c4 db 5b 67 a2 aa 89 5e 88 8d 96 01 5b 03 a1 c5 a4 59 9b 48 6c 88 41 45 27 ba 02 a0 73 f8 ff 11 f6 66 bd 92 64 c9 99 98 99 9d c5 dd 23 e2 ee 99 95 59 95 b5 57 f5 ce de 38 2d 92 3d 5a 30 18 2d 10 41 40 10 04 bd 49 0f 82 a0 07 8d fe 91 04 e8 45 7a 91 30 10 66 44 11 20 a1 d1 83 40 91 98 6e 8a 1c 92 d3 5d ec ee ea ae ee aa ac cc aa ca ed 2e b1 ba 9f c5 4c 0f 76 8e 87 c7 cd e2 28 d0 e8 ba 79 6f 84 87 2f e7 d8 b1 f3 d9 67 df 87 ad b3 8d 73 4a ef 49 31 86 21 0c 21 26 6d ca 4c Data Ascii: A>3s= ,s{''Gd8lTZD/cv][o]{_/>NMUFUuL&[[g^[YHlAE'sfd#YW8-=Z0-A@IEz0fD @n].Lv(yo/gsJI1!!&mL
2024-05-06 16:41:55 UTC	16384	IN	Data Raw: 9c 53 d2 f3 54 30 47 4b 38 1a a3 59 18 50 d5 6e 95 6e 5f 45 93 eb e3 16 de e7 b6 63 61 63 4c fb c6 b7 dd 1a 0c 2f 97 fe ca 18 60 2e 04 7f 2c d7 3e 8d 60 cc d3 05 09 60 7c 36 00 b7 e8 22 aa fa 8d 58 20 28 8d 27 c6 18 28 19 8c d8 71 98 42 5d 6a a6 2f fc 7b b2 e0 e9 77 bc 14 5e f7 83 78 7a de b7 56 aa e9 f1 6f 4d 8f 8a fd 4b bd b4 6a f6 08 55 0d 57 f6 6f 16 11 35 1e 15 11 e7 7d d3 38 6b 28 a5 c1 37 0d 95 35 73 04 a7 00 01 db a6 6d db f6 ec f4 ec c5 f3 2f 3e 7f f2 58 d7 2d 4d 63 f5 ee 21 88 31 8d 31 78 7a e4 99 25 c5 60 88 e6 f3 4e 6a d1 b7 dc 10 63 a4 d2 c6 11 f7 37 2a 0b 23 91 42 87 3a a7 00 50 bb 78 43 08 f3 ae 5b bc f5 de 1b 6f 32 02 0d 3f fc 9d 67 4f 2e 3f fb fc 8b 47 8f 1e 3e 7d 76 79 fd e2 7a d3 ef 42 d8 21 4f 4b a3 00 80 cc 29 e7 d4 34 84 48 22 45 97 Data Ascii: ST0GK8YPnn_EcacL/`.,>``\|6"X ('(qB]j/{w^xzVoMKjUWo5}8k(75sm/>X-Mc!11xz%`Njc7*#B:PxC[o2?gO.?G>}vyzB!OK)4H"E
2024-05-06 16:41:55 UTC	5640	IN	Data Raw: 22 2c cc e3 38 26 36 36 7f ae d5 08 1d c7 e9 68 a5 a2 8a aa c8 62 9d 86 21 90 2a 88 32 2a 20 60 56 25 84 98 52 62 31 4f ef 1c b2 b0 47 62 4e 26 6a a4 ca 35 07 2b bc 7b 00 40 2d a3 40 a4 0e ea 44 44 4f 0e 08 02 06 d6 aa 88 a3 ca cc 39 32 73 56 01 e7 1c b9 22 42 eb 9c b7 4f b2 32 a6 77 36 e0 ad 55 d1 b6 17 50 93 1c 92 9c d3 76 b7 63 c9 de b7 87 96 88 10 19 f6 41 22 00 7c fd fc 9b b3 7b 0f 96 7d bb 77 8f 30 07 a1 85 0e 51 ea bf a0 a2 90 73 a2 50 22 c4 ca 50 04 44 88 e3 18 53 22 47 2c 00 0a 2c b2 4f 8f f6 33 5c 74 0e 51 1b df b5 4d f7 ea db af 9f 7d f7 77 45 c4 5a a8 f1 60 ba 0d 1e 00 1d b3 b5 ad d1 f4 07 12 0b 50 3c 7c 8d 7c 45 b0 76 6c cd 1f 38 7f ef a1 09 b5 a4 c1 1a 75 0f bf b4 3a 1e 10 15 ef 9c 43 aa a5 c2 bf 64 82 f7 9f 08 fb 69 a7 b3 53 c2 52 51 df c7 Data Ascii: ",8&66hb!2 `V%Rb1OGbN&j5+{@-@DDO92sV"BO2w6UPvcA"\|{}w0QsP"PDS"G,,O3\tQM}wEZ`P<\|\|Evl8u:CdiSRQ
2024-05-06 16:41:55 UTC	12792	IN	Data Raw: 66 1d 67 00 44 e8 ba 76 b3 d9 18 63 16 f3 79 55 d9 ca 1a e7 bd f3 9e e3 28 7e 94 d7 c5 5a 4b 84 31 a6 d5 6a 79 75 79 69 8c 99 cd e6 87 47 07 07 07 c7 77 ee 3d be 03 d8 0f db e5 f5 c5 7a b5 6a db 2e a5 18 9d 13 53 58 59 1b 43 e8 fb 1e 56 d7 75 63 66 97 f3 a6 39 7f 3a 7b d9 34 e6 e0 70 ef de 9d 7b b7 4e 8f 4e 4e 6e df be 7b ff 6f ff 9d 27 1f bf ff fe b3 17 4f 99 bb df fc 7b ff fe f7 be f3 6f be f4 e5 2f a4 e8 2e 2e cf de 7c e3 73 97 17 97 46 eb e3 83 db 04 b0 6e d7 57 ab 8b c0 7c b1 5c ad 8c 69 9a ba ae aa 2e a5 ae eb 00 a9 ae aa 7e 70 00 c0 9c fa a1 3d 3c 3c ba ff e8 e1 c7 1f 7d 24 4f 1d 51 b0 04 f0 2e ad d3 32 7c 1a ea 39 bd f3 fa db de b8 4d dc 88 2e 48 8a b1 aa ed fe c1 c1 66 bb 4d 25 62 50 bb e1 aa bb 0d 5f 55 4d b3 98 6f 57 eb ba 6a 00 12 b3 4c 71 f4 Data Ascii: fgDvcyU(~ZK1jyuyiGw=zj.SXYCVucf9:{4p{NNNn{o'O{o/..\|sFnW\|\i.~p=<<}$OQ.2\|9M.HfM%bP_UMoWjLq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.11	49746	18.173.145.84	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:41:55 UTC	391	OUT	GET /rmshg/1576085319_RMS%20Site%20Logo.png HTTP/1.1 Host: d3j0t7vrtr92dk.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:41:55 UTC	542	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 891 Connection: close Last-Modified: Wed, 11 Dec 2019 17:28:39 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: xuCm8c5hTh.dnekhlQ5ceXayCT.yqA_x Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 06 May 2024 16:41:55 GMT ETag: "75c459747c5170860ea16e7580989668" X-Cache: Hit from cloudfront Via: 1.1 9ef5db6f370d10d1eb67199cf30ee356.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: XfeHewm8GECCebs9G-cYfBIMDepgKYDrkepmyzfQAvDjr5FXIdUwCg== Age: 1
2024-05-06 16:41:55 UTC	891	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 42 49 44 41 54 58 85 ed 96 5d 68 93 57 18 c7 7f e7 7d 93 36 df b1 a9 d9 ec 36 36 53 15 41 13 c4 81 75 ac 20 ab 0e 6a f7 21 63 e2 57 57 c4 79 a1 bd 19 db c5 c4 c2 6e 8a e0 c0 0b ed 95 a0 bb 59 d5 ab 8d 31 2a f4 a2 ce 0f c8 36 bd f1 63 b5 16 d4 d4 d6 ac ad 89 71 4d 13 6d d2 36 6f de bc 67 17 19 29 dd 12 3b a1 a6 37 7d 2e 9f f3 1e fe bf f3 fc df 73 9e 47 48 29 25 0b 18 26 00 c3 90 e8 7a 0e 21 ca 27 2c 25 98 4c 6a 1e 60 e8 61 94 d3 a7 ce b3 72 d5 eb 65 03 18 fe 33 c6 8e 1d 0d 79 00 80 cd 9b d7 d3 d4 f4 4e d9 00 ae 5e bd 83 94 12 a5 6c 8a 25 c2 54 2c 19 0c de 24 91 98 9c 77 31 8b b5 82 ad 8d 1b e7 06 38 7e e2 67 42 a1 e8 bc 03 78 bd ee ff 00 2c b8 05 8b Data Ascii: PNGIHDR szzBIDATX]hW}666SAu j!cWWynY1*6cqMm6og);7}.sGH)%&z!',%Lj`are3yN^l%T,$w18~gBx,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.11	49751	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:02 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=vGNs1atD4sWEptG&MD=6odxzlER HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-05-06 16:42:03 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: c1a7d3dc-3721-475d-95a7-b9084d4cc9ff MS-RequestId: 1e77ea5c-18b5-4c58-a0d8-136a9a98f384 MS-CV: ciYF2vVCJUGdSHLX.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 06 May 2024 16:42:02 GMT Connection: close Content-Length: 24490
2024-05-06 16:42:03 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-05-06 16:42:03 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.11	49756	3.217.205.239	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:03 UTC	748	OUT	GET /index HTTP/1.1 Host: rmshg.amplified.training Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; login_token=153a9a8f304880470316f98fd745653f
2024-05-06 16:42:03 UTC	655	IN	HTTP/1.1 200 OK date: Mon, 06 May 2024 16:42:03 GMT content-type: text/html; charset=utf-8 transfer-encoding: chunked server: Apache content-location: index.php vary: negotiate,Accept-Encoding,User-Agent tcn: choice x-content-type-options: nosniff x-xss-protection: 1; mode=block expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate, max-age=0 pragma: no-cache set-cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; expires=Mon, 06-May-2024 19:42:03 GMT; Max-Age=10800; path=/; secure; HttpOnly; SameSite=None strict-transport-security: max-age=31536000; includeSubDomains; preload; connection: close
2024-05-06 16:42:03 UTC	8369	IN	Data Raw: 32 30 41 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 77 65 62 73 69 74 65 22 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 72 6d 73 68 67 22 2f 3e 0a 09 09 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 52 4d 53 48 47 20 26 61 6d 70 3b 20 46 72 61 6e 63 68 69 73 65 20 53 65 6c 65 63 74 20 54 72 61 69 6e 69 6e 67 20 50 6f 72 74 61 6c 22 2f 3e 0a 09 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 Data Ascii: 20A9<!DOCTYPE html><html lang="en"><head><meta property="og:type" content="website"/><meta property="og:site_name" content="rmshg"/><meta property="og:title" content="RMSHG & Franchise Select Training Portal"/><meta property="og:image"
2024-05-06 16:42:03 UTC	8949	IN	Data Raw: 32 32 45 44 0d 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 70 61 63 65 72 22 3e 3c 2f 64 69 76 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 70 61 63 65 72 20 73 70 61 63 65 72 2d 2d 78 32 20 74 65 78 74 2d 63 65 6e 74 65 72 22 3e 0a 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 2d 63 6f 6c 6f 72 22 20 68 72 65 66 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 76 6f 69 64 28 30 29 22 20 64 61 74 61 2d 73 65 6c 65 63 74 2d 73 74 61 74 65 3d 22 61 75 74 68 5f 66 6f 72 6d 5f 76 69 65 77 3a 6c 6f 67 69 6e 22 3e 0a 09 09 09 09 09 4c 6f 67 20 69 6e 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 77 69 74 68 20 79 6f 75 72 20 63 72 65 64 65 6e 74 69 61 6c 73 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 3c 2f 66 6f 72 6d 3e 09 09 3c Data Ascii: 22ED</div><div class="spacer"></div><div class="spacer spacer--x2 text-center"><a class="link-color" href="javascript:void(0)" data-select-state="auth_form_view:login">Log in</a>with your credentials</div></form><
2024-05-06 16:42:03 UTC	8957	IN	Data Raw: 32 32 46 35 0d 0a 73 69 67 6e 75 70 20 61 6c 65 72 74 20 62 6f 78 20 61 66 74 65 72 20 75 73 65 72 20 73 69 67 6e 65 64 20 75 70 20 61 6e 64 20 77 61 69 74 73 20 66 6f 72 20 76 65 72 69 66 69 63 61 74 69 6f 6e 0a 09 09 7d 29 3b 0a 09 09 24 28 27 23 74 6c 2d 63 6d 73 2d 6c 6f 67 69 6e 2d 6d 6f 64 61 6c 27 29 2e 6f 6e 28 27 68 69 64 64 65 6e 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 09 24 28 27 23 74 6c 2d 63 6d 73 2d 6c 6f 67 69 6e 2d 6d 6f 64 61 6c 20 2e 6d 6f 64 61 6c 2d 62 6f 64 79 3a 66 69 72 73 74 27 29 2e 73 68 6f 77 28 29 3b 0a 09 09 09 24 28 27 23 74 6c 2d 63 6d 73 2d 6c 6f 67 69 6e 2d 6d 6f 64 61 6c 20 2e 66 6f 72 67 6f 74 2d 6d 65 73 73 61 67 65 27 29 2e 68 69 64 65 28 29 3b 0a 09 09 09 73 65 74 53 74 61 74 65 28 22 61 75 74 68 5f 66 6f Data Ascii: 22F5signup alert box after user signed up and waits for verification});$('#tl-cms-login-modal').on('hidden', function(){$('#tl-cms-login-modal .modal-body:first').show();$('#tl-cms-login-modal .forgot-message').hide();setState("auth_fo
2024-05-06 16:42:03 UTC	7356	IN	Data Raw: 31 43 41 46 0d 0a 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 24 28 27 62 6f 64 79 27 29 2e 6f 6e 28 27 74 6f 75 63 68 73 74 61 72 74 2e 64 72 6f 70 64 6f 77 6e 27 2c 20 27 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 20 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 3b 20 7d 29 3b 09 2f 2f 20 46 69 78 20 66 6f 72 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 69 74 74 65 72 2f 62 6f 6f 74 73 74 72 61 70 2f 69 73 73 75 65 73 2f 32 39 37 35 23 69 73 73 75 65 63 6f 6d 6d 65 6e 74 2d 36 36 35 39 39 39 32 2c 20 73 68 6f 75 6c 64 20 62 65 20 72 65 6d 6f 76 65 64 20 69 66 20 66 69 78 65 64 20 69 6e 20 74 77 69 74 74 65 72 20 62 73 20 32 2e 31 2e 32 20 28 6f 72 20 77 68 65 6e Data Ascii: 1CAF"text/javascript">$('body').on('touchstart.dropdown', '.dropdown-menu', function(e){ e.stopPropagation(); });// Fix for https://github.com/twitter/bootstrap/issues/2975#issuecomment-6659992, should be removed if fixed in twitter bs 2.1.2 (or when

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.11	49757	3.217.205.239	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:03 UTC	694	OUT	GET /index/css/fmt:1714566301,tn:51,tv:5,ct:1,rtl:0 HTTP/1.1 Host: rmshg.amplified.training Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://rmshg.amplified.training/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; login_token=153a9a8f304880470316f98fd745653f
2024-05-06 16:42:04 UTC	601	IN	HTTP/1.1 200 OK date: Mon, 06 May 2024 16:42:03 GMT content-type: text/css;charset=UTF-8 transfer-encoding: chunked server: Apache x-content-type-options: nosniff x-xss-protection: 1; mode=block expires: Mon, 20 May 2024 16:42:03 GMT cache-control: no-store, no-cache, must-revalidate, max-age=0 pragma: no-cache set-cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; expires=Mon, 06-May-2024 19:42:03 GMT; Max-Age=10800; path=/; secure; HttpOnly; SameSite=None vary: Accept-Encoding,User-Agent strict-transport-security: max-age=31536000; includeSubDomains; preload; connection: close
2024-05-06 16:42:04 UTC	13697	IN	Data Raw: 33 35 37 39 0d 0a 61 72 74 69 63 6c 65 2c 20 61 73 69 64 65 2c 20 64 65 74 61 69 6c 73 2c 20 66 69 67 63 61 70 74 69 6f 6e 2c 20 66 69 67 75 72 65 2c 20 66 6f 6f 74 65 72 2c 20 68 65 61 64 65 72 2c 20 68 67 72 6f 75 70 2c 20 6e 61 76 2c 20 73 65 63 74 69 6f 6e 20 7b 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 20 7d 0a 61 75 64 69 6f 2c 20 63 61 6e 76 61 73 2c 20 76 69 64 65 6f 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 2a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 0a 20 20 2a 7a 6f 6f 6d 3a 31 3b 0a 7d 0a 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 20 7b 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 7d 0a 68 74 6d 6c 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 0a 20 20 2d 77 Data Ascii: 3579article, aside, details, figcaption, figure, footer, header, hgroup, nav, section { display:block; }audio, canvas, video { display:inline-block; display:inline; zoom:1;}audio:not([controls]) { display:none; }html { font-size:100%; -w
2024-05-06 16:42:04 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 6e 70 75 74 5b 74 79 70 65 3d 22 64 61 74 65 74 69 6d 65 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 64 61 74 65 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 6d 6f 6e 74 68 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 74 69 6d 65 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 77 65 65 6b 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 6e 75 6d 62 65 72 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 65 6d 61 69 6c 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 75 72 6c 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 74 65 6c 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 Data Ascii: 3FC0nput[type="datetime"], input[type="datetime-local"], input[type="date"], input[type="month"], input[type="time"], input[type="week"], input[type="number"], input[type="email"], input[type="url"], input[type="search"], input[type="tel"], input[type="
2024-05-06 16:42:04 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 6e 6c 69 6e 65 2c 20 2e 66 6f 72 6d 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 75 6e 65 64 69 74 61 62 6c 65 2d 69 6e 70 75 74 2c 20 2e 66 6f 72 6d 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 69 6e 70 75 74 2d 70 72 65 70 65 6e 64 2c 20 2e 66 6f 72 6d 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 69 6e 70 75 74 2d 61 70 70 65 6e 64 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 2a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 0a 20 20 2a 7a 6f 6f 6d 3a 31 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 0a 7d 0a 2e 66 6f 72 6d 2d 73 65 61 72 63 68 20 2e 68 69 64 65 2c 20 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 20 2e 68 69 64 65 2c 20 Data Ascii: 3FB8nline, .form-horizontal .uneditable-input, .form-horizontal .input-prepend, .form-horizontal .input-append { display:inline-block; display:inline; zoom:1; margin-bottom:0; vertical-align:middle;}.form-search .hide, .form-inline .hide,
2024-05-06 16:42:04 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 63 63 63 63 63 20 5c 39 3b 20 7d 0a 2e 62 74 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 20 2a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 20 7d 0a 2e 62 74 6e 3a 68 6f 76 65 72 2c 20 2e 62 74 6e 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 23 33 33 33 33 33 33 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 31 35 70 78 3b 0a 20 20 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 20 2e 31 73 20 6c 69 6e 65 61 72 3b 0a 20 20 2d 6d 6f 7a 2d 74 72 Data Ascii: 3FC0round-color:#cccccc \9; }.btn:first-child { *margin-left:0; }.btn:hover, .btn:focus { color:#333333; text-decoration:none; background-position:0 -15px; outline:none !important; -webkit-transition:background-position .1s linear; -moz-tr
2024-05-06 16:42:04 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 35 29 3b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 3b 0a 7d 0a 2e 6e 61 76 20 6c 69 20 2b 20 2e 6e 61 76 2d 68 65 61 64 65 72 20 7b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 39 70 78 3b 20 7d 0a 2e 6e 61 76 2d 6c 69 73 74 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 0a 7d 0a 2e 6e 61 76 2d 6c 69 73 74 20 3e 20 6c 69 20 3e 20 61 2c 20 2e 6e 61 76 2d 6c 69 73 74 20 2e 6e 61 76 2d 68 65 61 64 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a Data Ascii: 3FB8ba(255,255,255,0.5); text-transform:uppercase;}.nav li + .nav-header { margin-top:9px; }.nav-list { padding-left:15px; padding-right:15px; margin-bottom:0;}.nav-list > li > a, .nav-list .nav-header { margin-left:-15px; margin-right:
2024-05-06 16:42:04 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 31 31 31 31 27 2c 20 47 72 61 64 69 65 6e 74 54 79 70 65 3d 30 29 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 35 32 35 32 35 3b 0a 7d 0a 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 62 72 61 6e 64 2c 20 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 20 3e 20 6c 69 20 3e 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 23 39 39 39 39 39 39 3b 0a 20 20 74 65 78 74 2d 73 68 61 64 6f 77 3a 30 20 2d 31 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 32 35 29 3b 0a 7d 0a 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 62 72 61 6e 64 3a 68 6f 76 65 72 2c 20 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 62 72 61 6e 64 3a 66 6f 63 75 73 2c 20 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 20 3e 20 Data Ascii: 3FB81111', GradientType=0); border-color:#252525;}.navbar-inverse .brand, .navbar-inverse .nav > li > a { color:#999999; text-shadow:0 -1px 0 rgba(0,0,0,0.25);}.navbar-inverse .brand:hover, .navbar-inverse .brand:focus, .navbar-inverse .nav >
2024-05-06 16:42:04 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 72 2d 72 69 67 68 74 2d 77 69 64 74 68 3a 30 3b 0a 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 0a 20 20 62 6f 74 74 6f 6d 3a 2d 31 30 70 78 3b 0a 7d 0a 2e 74 68 75 6d 62 6e 61 69 6c 73 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 30 70 78 3b 0a 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 0a 20 20 2a 7a 6f 6f 6d 3a 31 3b 0a 7d 0a 2e 74 68 75 6d 62 6e 61 69 6c 73 3a 62 65 66 6f 72 65 2c 20 2e 74 68 75 6d 62 6e 61 69 6c 73 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 22 22 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 0a 7d 0a 2e 74 68 75 6d 62 6e 61 69 6c 73 3a 61 66 74 65 72 20 7b 20 63 6c 65 61 72 3a 62 6f Data Ascii: 3FB8r-right-width:0; border-left-color:#ffffff; bottom:-10px;}.thumbnails { margin-left:-10px; list-style:none; *zoom:1;}.thumbnails:before, .thumbnails:after { display:table; content:""; line-height:0;}.thumbnails:after { clear:bo
2024-05-06 16:42:04 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 66 66 66 66 3b 20 7d 0a 2e 63 61 72 6f 75 73 65 6c 2d 63 61 70 74 69 6f 6e 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 0a 20 20 6c 65 66 74 3a 30 3b 0a 20 20 72 69 67 68 74 3a 30 3b 0a 20 20 62 6f 74 74 6f 6d 3a 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 31 35 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 33 33 33 33 33 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 37 35 29 3b 0a 7d 0a 2e 63 61 72 6f 75 73 65 6c 2d 63 61 70 74 69 6f 6e 20 68 34 2c 20 2e 63 61 72 6f 75 73 65 6c 2d 63 61 70 74 69 6f 6e 20 70 20 7b 0a 20 20 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 38 70 78 3b 0a 7d 0a 2e 63 61 72 6f 75 73 65 6c 2d 63 61 70 Data Ascii: 3FC0ffff; }.carousel-caption { position:absolute; left:0; right:0; bottom:0; padding:15px; background:#333333; background:rgba(0,0,0,0.75);}.carousel-caption h4, .carousel-caption p { color:#ffffff; line-height:18px;}.carousel-cap
2024-05-06 16:42:04 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 6c 6f 61 74 3a 6c 65 66 74 3b 0a 20 20 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 70 78 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6e 74 61 69 6e 65 72 2c 20 2e 6e 61 76 62 61 72 2d 73 74 61 74 69 63 2d 74 6f 70 20 2e 63 6f 6e 74 61 69 6e 65 72 2c 20 2e 6e 61 76 62 61 72 2d 66 69 78 65 64 2d 74 6f 70 20 2e 63 6f 6e 74 61 69 6e 65 72 2c 20 2e 6e 61 76 62 61 72 2d 66 69 78 65 64 2d 62 6f 74 74 6f 6d 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 20 77 69 64 74 68 3a 37 32 34 70 78 3b 20 7d 0a 20 20 2e 73 70 61 6e 31 32 20 7b 20 77 69 64 74 68 3a 37 32 34 70 78 3b 20 7d 0a 20 20 2e 73 70 61 6e 31 31 20 7b 20 77 69 64 74 68 3a 36 36 32 70 78 3b 20 7d 0a 20 20 2e 73 70 61 6e 31 30 20 7b 20 77 69 Data Ascii: 3FB8loat:left; min-height:1px; margin-left:20px; } .container, .navbar-static-top .container, .navbar-fixed-top .container, .navbar-fixed-bottom .container { width:724px; } .span12 { width:724px; } .span11 { width:662px; } .span10 { wi
2024-05-06 16:42:04 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 20 64 69 76 2e 74 6c 2d 68 65 61 64 65 72 2d 74 6f 6f 6c 73 2e 70 75 6c 6c 2d 72 69 67 68 74 20 7b 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 7d 0a 20 20 2e 74 6c 2d 72 65 70 6f 72 74 73 2d 62 74 6e 2d 67 72 6f 75 70 20 3e 20 61 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 33 36 30 70 78 29 20 7b 0a 20 20 2e 74 6c 2d 6c 65 61 72 6e 65 72 2d 64 61 73 68 62 6f 61 72 64 2d 62 6f 78 20 2e 64 61 74 61 54 61 62 6c 65 73 5f 66 69 6c 74 65 72 20 3e 20 6c 61 62 65 6c 3a 66 69 72 73 Data Ascii: 3FB8 div.tl-header-tools.pull-right { display:none; } .tl-reports-btn-group > a { padding-right:1% !important; padding-left:1% !important; }}@media screen and (max-width: 360px) { .tl-learner-dashboard-box .dataTables_filter > label:firs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.11	49759	3.217.205.239	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:07 UTC	750	OUT	GET /catalog HTTP/1.1 Host: rmshg.amplified.training Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; login_token=153a9a8f304880470316f98fd745653f
2024-05-06 16:42:07 UTC	558	IN	HTTP/1.1 200 OK date: Mon, 06 May 2024 16:42:07 GMT content-type: text/html; charset=utf-8 transfer-encoding: chunked server: Apache expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache set-cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; expires=Mon, 06-May-2024 19:42:07 GMT; Max-Age=10800; path=/; secure; HttpOnly; SameSite=None x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000; includeSubDomains; preload; connection: close
2024-05-06 16:42:07 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 77 65 62 73 69 74 65 22 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 72 6d 73 68 67 22 2f 3e 0a 09 09 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 52 4d 53 48 47 20 26 61 6d 70 3b 20 46 72 61 6e 63 68 69 73 65 20 53 65 6c 65 63 74 20 54 72 61 69 6e 69 6e 67 20 50 6f 72 74 61 6c 22 2f 3e 0a 09 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 Data Ascii: 2000<!DOCTYPE html><html lang="en"><head><meta property="og:type" content="website"/><meta property="og:site_name" content="rmshg"/><meta property="og:title" content="RMSHG & Franchise Select Training Portal"/><meta property="og:image"
2024-05-06 16:42:08 UTC	16322	IN	Data Raw: 33 46 42 41 0d 0a 65 3d 27 73 75 62 6d 69 74 5f 6c 6f 67 69 6e 27 20 20 76 61 6c 75 65 3d 22 53 65 6e 64 22 20 63 6c 61 73 73 3d 27 62 74 6e 20 62 74 6e 2d 70 72 69 6d 61 72 79 20 62 74 6e 2d 6c 61 72 67 65 27 20 69 64 3d 27 31 38 33 37 33 31 39 31 36 31 27 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 64 61 74 61 2d 6c 6f 61 64 69 6e 67 2d 74 65 78 74 3d 22 50 72 6f 63 65 73 73 69 6e 67 2e 2e 2e 22 20 74 61 62 69 6e 64 65 78 3d 27 27 2f 3e 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 70 61 63 65 72 22 3e 3c 2f 64 69 76 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 70 61 63 65 72 20 73 70 61 63 65 72 2d 2d 78 32 20 74 65 78 74 2d 63 65 6e 74 65 72 22 3e 0a 09 09 09 09 Data Ascii: 3FBAe='submit_login' value="Send" class='btn btn-primary btn-large' id='1837319161' autocomplete="off" data-loading-text="Processing..." tabindex=''/></div></div><div class="spacer"></div><div class="spacer spacer--x2 text-center">
2024-05-06 16:42:08 UTC	1585	IN	Data Raw: 36 32 41 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 77 69 64 74 68 3b 0a 09 7d 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 20 22 3e 0a 09 09 09 09 0a 09 0a 09 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 70 61 6e 31 32 22 3e 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6d 73 2d 6d 61 69 6e 2d 64 69 76 22 3e 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 6c 2d 62 6f 78 20 74 6c 2d 62 6f 78 2d 62 6f 72 64 65 72 20 22 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 70 61 6e 31 32 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 6c 2d 63 6f 6e 74 65 6e 74 2d 77 69 64 65 Data Ascii: 62A return width;}</script><div class="container "><div class="row"><div class="span12"><div class="cms-main-div"><div class="tl-box tl-box-border "><div class="row"><div class="span12"><div class="tl-content-wide
2024-05-06 16:42:08 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 70 61 6e 31 20 63 61 74 61 6c 6f 67 5f 63 6f 75 72 73 65 5f 61 76 61 74 61 72 20 74 65 78 74 2d 63 65 6e 74 65 72 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 6d 73 68 67 2e 61 6d 70 6c 69 66 69 65 64 2e 74 72 61 69 6e 69 6e 67 2f 63 61 74 61 6c 6f 67 2f 69 6e 66 6f 2f 69 64 3a 31 32 35 22 20 3e 3c 69 6d 67 20 63 6c 61 73 73 3d 22 74 6c 2d 63 61 74 61 6c 6f 67 2d 63 6f 75 72 73 65 2d 61 76 61 74 61 72 2d 69 6d 61 67 65 20 61 76 61 74 61 72 2d 73 71 75 61 72 65 20 74 6c 2d 63 6f 75 72 73 65 2d 61 76 61 74 61 72 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 33 6a 30 74 37 76 72 74 72 39 32 64 6b 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 72 6d 73 68 67 2f 31 35 37 36 30 38 39 34 38 39 5f 62 69 6b 65 72 74 72 61 69 6e Data Ascii: 3FB8pan1 catalog_course_avatar text-center"><a href="https://rmshg.amplified.training/catalog/info/id:125" ><img class="tl-catalog-course-avatar-image avatar-square tl-course-avatar" src="https://d3j0t7vrtr92dk.cloudfront.net/rmshg/1576089489_bikertrain
2024-05-06 16:42:08 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 20 26 6c 74 3b 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 74 6c 2d 63 61 74 65 67 6f 72 79 2d 63 6f 75 72 73 65 73 2d 63 6f 75 6e 74 5c 22 26 67 74 3b 28 35 29 26 6c 74 3b 5c 2f 73 70 61 6e 26 67 74 3b 22 2c 22 74 6f 6f 6c 74 69 70 22 3a 22 47 65 6e 65 72 61 6c 20 28 35 29 22 2c 22 66 75 6c 6c 74 69 74 6c 65 22 3a 22 47 65 6e 65 72 61 6c 20 26 6c 74 3b 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 74 6c 2d 63 61 74 65 67 6f 72 79 2d 63 6f 75 72 73 65 73 2d 63 6f 75 6e 74 5c 22 26 67 74 3b 28 35 29 26 6c 74 3b 5c 2f 73 70 61 6e 26 67 74 3b 22 2c 22 74 79 70 65 22 3a 22 63 61 74 65 67 6f 72 69 65 73 22 2c 22 69 63 6f 6e 22 3a 66 61 6c 73 65 2c 22 65 78 70 61 6e 64 22 3a 74 72 75 65 7d 5d 3c 2f 64 69 76 3e 0a 09 3c 64 69 76 20 64 61 74 61 2d 6c 6f 61 Data Ascii: 3FC0 <span class=\"tl-category-courses-count\">(5)<\/span>","tooltip":"General (5)","fulltitle":"General <span class=\"tl-category-courses-count\">(5)<\/span>","type":"categories","icon":false,"expand":true}]</div><div data-loa
2024-05-06 16:42:08 UTC	12785	IN	Data Raw: 33 31 45 34 0d 0a 28 70 6e 6f 64 65 29 20 7b 0a 09 09 09 09 09 09 09 09 09 69 66 28 70 6e 6f 64 65 2e 64 61 74 61 2e 6b 65 79 20 21 3d 20 22 5f 31 22 29 7b 0a 09 09 09 09 09 09 09 09 09 09 70 6e 6f 64 65 2e 64 61 74 61 2e 61 64 64 43 6c 61 73 73 20 3d 20 22 63 6f 75 72 73 65 5f 63 61 74 61 6c 6f 67 5f 63 61 74 65 67 6f 72 79 22 3b 0a 09 09 09 09 09 09 09 09 09 09 24 28 22 23 64 79 6e 61 74 72 65 65 2d 69 64 2d 22 20 2b 20 70 6e 6f 64 65 2e 64 61 74 61 2e 6b 65 79 29 2e 73 68 6f 77 28 29 3b 0a 0a 09 09 09 09 09 09 09 09 09 09 69 66 28 70 6e 6f 64 65 2e 64 61 74 61 2e 6b 65 79 20 69 6e 20 63 6f 75 72 73 65 73 50 65 72 43 61 74 65 67 6f 72 79 29 7b 0a 09 09 09 09 09 09 09 09 09 09 09 63 6f 75 72 73 65 73 50 65 72 43 61 74 65 67 6f 72 79 5b 70 6e 6f 64 65 2e Data Ascii: 31E4(pnode) {if(pnode.data.key != "_1"){pnode.data.addClass = "course_catalog_category";$("#dynatree-id-" + pnode.data.key).show();if(pnode.data.key in coursesPerCategory){coursesPerCategory[pnode.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.11	49760	3.217.205.239	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:07 UTC	696	OUT	GET /index/css/fmt:1714566301,tn:51,tv:5,ct:1,rtl:0 HTTP/1.1 Host: rmshg.amplified.training Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://rmshg.amplified.training/catalog Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; login_token=153a9a8f304880470316f98fd745653f
2024-05-06 16:42:08 UTC	601	IN	HTTP/1.1 200 OK date: Mon, 06 May 2024 16:42:08 GMT content-type: text/css;charset=UTF-8 transfer-encoding: chunked server: Apache x-content-type-options: nosniff x-xss-protection: 1; mode=block expires: Mon, 20 May 2024 16:42:08 GMT cache-control: no-store, no-cache, must-revalidate, max-age=0 pragma: no-cache set-cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; expires=Mon, 06-May-2024 19:42:08 GMT; Max-Age=10800; path=/; secure; HttpOnly; SameSite=None vary: Accept-Encoding,User-Agent strict-transport-security: max-age=31536000; includeSubDomains; preload; connection: close
2024-05-06 16:42:08 UTC	8423	IN	Data Raw: 32 30 44 46 0d 0a 61 72 74 69 63 6c 65 2c 20 61 73 69 64 65 2c 20 64 65 74 61 69 6c 73 2c 20 66 69 67 63 61 70 74 69 6f 6e 2c 20 66 69 67 75 72 65 2c 20 66 6f 6f 74 65 72 2c 20 68 65 61 64 65 72 2c 20 68 67 72 6f 75 70 2c 20 6e 61 76 2c 20 73 65 63 74 69 6f 6e 20 7b 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 20 7d 0a 61 75 64 69 6f 2c 20 63 61 6e 76 61 73 2c 20 76 69 64 65 6f 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 2a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 0a 20 20 2a 7a 6f 6f 6d 3a 31 3b 0a 7d 0a 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 20 7b 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 7d 0a 68 74 6d 6c 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 0a 20 20 2d 77 Data Ascii: 20DFarticle, aside, details, figcaption, figure, footer, header, hgroup, nav, section { display:block; }audio, canvas, video { display:inline-block; display:inline; zoom:1;}audio:not([controls]) { display:none; }html { font-size:100%; -w
2024-05-06 16:42:08 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 7d 0a 2e 63 6f 6e 74 61 69 6e 65 72 3a 62 65 66 6f 72 65 2c 20 2e 63 6f 6e 74 61 69 6e 65 72 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 22 22 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 0a 7d 0a 2e 63 6f 6e 74 61 69 6e 65 72 3a 61 66 74 65 72 20 7b 20 63 6c 65 61 72 3a 62 6f 74 68 3b 20 7d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 38 30 70 78 29 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 31 30 70 78 20 31 30 70 78 3b 0a 7d 0a 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 30 70 78 3b 0a 20 20 Data Ascii: 3FB8}.container:before, .container:after { display:table; content:""; line-height:0;}.container:after { clear:both; }@media screen and (max-width: 480px) { padding:10px 10px;}.container-fluid { padding-right:10px; padding-left:10px;
2024-05-06 16:42:08 UTC	1585	IN	Data Raw: 36 32 41 0d 0a 63 74 69 6f 6e 73 3a 61 66 74 65 72 20 7b 20 63 6c 65 61 72 3a 62 6f 74 68 3b 20 7d 0a 2e 68 65 6c 70 2d 62 6c 6f 63 6b 2c 20 2e 68 65 6c 70 2d 69 6e 6c 69 6e 65 20 7b 20 63 6f 6c 6f 72 3a 23 32 36 32 36 32 36 3b 20 7d 0a 2e 68 65 6c 70 2d 62 6c 6f 63 6b 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 39 70 78 3b 0a 7d 0a 2e 68 65 6c 70 2d 69 6e 6c 69 6e 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 2a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 0a 20 20 2a 7a 6f 6f 6d 3a 31 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 35 70 78 3b 0a 7d 0a 2e 69 6e 70 75 74 Data Ascii: 62Actions:after { clear:both; }.help-block, .help-inline { color:#262626; }.help-block { display:block; margin-bottom:9px;}.help-inline { display:inline-block; display:inline; zoom:1; vertical-align:middle; padding-left:5px;}.input
2024-05-06 16:42:08 UTC	8957	IN	Data Raw: 32 32 46 35 0d 0a 62 74 6e 2d 67 72 6f 75 70 20 3e 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2c 20 2e 69 6e 70 75 74 2d 70 72 65 70 65 6e 64 20 2e 61 64 64 2d 6f 6e 2c 20 2e 69 6e 70 75 74 2d 70 72 65 70 65 6e 64 20 2e 62 74 6e 2c 20 2e 69 6e 70 75 74 2d 70 72 65 70 65 6e 64 20 2e 62 74 6e 2d 67 72 6f 75 70 20 3e 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 20 7b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 0a 20 20 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 0a 7d 0a 2e 69 6e 70 75 74 2d 61 70 70 65 6e 64 20 2e 61 63 74 69 76 65 2c 20 2e 69 6e 70 75 74 2d 70 72 65 Data Ascii: 22F5btn-group > .dropdown-toggle, .input-prepend .add-on, .input-prepend .btn, .input-prepend .btn-group > .dropdown-toggle { vertical-align:top; -webkit-border-radius:0; -moz-border-radius:0; border-radius:0;}.input-append .active, .input-pre
2024-05-06 16:42:08 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 68 69 6c 64 20 74 64 3a 6c 61 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 3b 0a 20 20 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 62 6f 74 74 6f 6d 72 69 67 68 74 3a 30 3b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 3b 0a 7d 0a 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 20 63 61 70 74 69 6f 6e 20 2b 20 74 68 65 61 64 20 74 72 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 74 68 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 20 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 20 63 61 70 74 69 6f 6e 20 2b 20 74 62 6f 64 79 20 74 72 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 74 64 3a 66 69 72 73 74 Data Ascii: 3FB8hild td:last-child { -webkit-border-bottom-right-radius:0; -moz-border-radius-bottomright:0; border-bottom-right-radius:0;}.table-bordered caption + thead tr:first-child th:first-child, .table-bordered caption + tbody tr:first-child td:first
2024-05-06 16:42:08 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 2d 64 61 6e 67 65 72 2e 61 63 74 69 76 65 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 39 34 32 61 32 35 20 5c 39 3b 20 7d 0a 2e 62 74 6e 2d 73 75 63 63 65 73 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 0a 20 20 74 65 78 74 2d 73 68 61 64 6f 77 3a 30 20 2d 31 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 32 35 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 62 62 37 35 62 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 36 32 63 34 36 32 2c 23 35 31 61 33 35 31 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 Data Ascii: 3FC0-danger.active { background-color:#942a25 \9; }.btn-success { color:#ffffff; text-shadow:0 -1px 0 rgba(0,0,0,0.25); background-color:#5bb75b; background-image:-moz-linear-gradient(top,#62c462,#51a351); background-image:-webkit-gradient(li
2024-05-06 16:42:08 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 0a 7d 0a 2e 74 61 62 73 2d 62 65 6c 6f 77 20 3e 20 2e 6e 61 76 2d 74 61 62 73 20 3e 20 2e 61 63 74 69 76 65 20 3e 20 61 2c 20 2e 74 61 62 73 2d 62 65 6c 6f 77 20 3e 20 2e 6e 61 76 2d 74 61 62 73 20 3e 20 2e 61 63 74 69 76 65 20 3e 20 61 3a 68 6f 76 65 72 2c 20 2e 74 61 62 73 2d 62 65 6c 6f 77 20 3e 20 2e 6e 61 76 2d 74 61 62 73 20 3e 20 2e 61 63 74 69 76 65 20 3e 20 61 3a 66 6f 63 75 73 20 7b 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 23 64 64 64 64 64 64 20 23 64 64 64 64 64 64 20 23 64 64 64 64 64 64 3b 20 7d 0a 2e 74 61 62 73 2d 6c 65 66 74 20 3e Data Ascii: 3FB8ottom-color:transparent; border-top-color:#dddddd;}.tabs-below > .nav-tabs > .active > a, .tabs-below > .nav-tabs > .active > a:hover, .tabs-below > .nav-tabs > .active > a:focus { border-color:transparent #dddddd #dddddd #dddddd; }.tabs-left >
2024-05-06 16:42:08 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 78 3b 0a 20 20 77 69 64 74 68 3a 31 38 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 32 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 74 72 61 6e 73 66 6f 72 6d 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 30 2e 31 35 73 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 3b 0a 7d 0a 2e 68 61 6d 62 75 72 67 65 72 2d 69 6e 6e 65 72 3a 62 65 66 6f 72 65 2c 20 2e 68 61 6d 62 75 72 67 65 72 2d 69 6e 6e 65 72 3a 61 66 74 65 72 20 7b 0a 20 Data Ascii: 3FC0x; width:18px; height:2px; background-color:black; border-radius:4px; position:absolute; transition-property:transform; transition-duration:0.15s; transition-timing-function:ease;}.hamburger-inner:before, .hamburger-inner:after {
2024-05-06 16:42:08 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 72 2d 62 6f 78 3b 0a 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 77 69 64 74 68 20 2e 36 73 20 65 61 73 65 3b 0a 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 77 69 64 74 68 20 2e 36 73 20 65 61 73 65 3b 0a 20 20 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 77 69 64 74 68 20 2e 36 73 20 65 61 73 65 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 77 69 64 74 68 20 2e 36 73 20 65 61 73 65 3b 0a 7d 0a 2e 70 72 6f 67 72 65 73 73 20 2e 62 61 72 20 2b 20 2e 62 61 72 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 31 70 Data Ascii: 3FB8r-box; -moz-box-sizing:border-box; box-sizing:border-box; -webkit-transition:width .6s ease; -moz-transition:width .6s ease; -o-transition:width .6s ease; transition:width .6s ease;}.progress .bar + .bar { -webkit-box-shadow:inset 1p
2024-05-06 16:42:08 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 74 72 65 65 2d 65 78 70 2d 65 64 6c 20 73 70 61 6e 2e 64 79 6e 61 74 72 65 65 2d 65 78 70 61 6e 64 65 72 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 33 32 70 78 20 2d 39 36 70 78 3b 20 7d 0a 2e 64 79 6e 61 74 72 65 65 2d 6c 6f 61 64 69 6e 67 20 73 70 61 6e 2e 64 79 6e 61 74 72 65 65 2d 65 78 70 61 6e 64 65 72 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 22 2f 70 61 67 65 73 2f 74 68 65 6d 65 73 2f 64 65 66 61 75 6c 74 2f 63 73 73 2f 69 6d 61 67 65 73 2f 6c 6f 61 64 69 6e 67 2e 67 69 66 22 29 3b 0a 7d 0a 73 70 61 6e 2e 64 79 6e 61 74 72 65 65 2d 63 68 65 63 6b 62 6f 78 20 7b 0a 20 20 6d 61 72 67 69 Data Ascii: 3FC0tree-exp-edl span.dynatree-expander { background-position:-32px -96px; }.dynatree-loading span.dynatree-expander { background-position:0 0; background-image:url("/pages/themes/default/css/images/loading.gif");}span.dynatree-checkbox { margi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.11	49762	3.217.205.239	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:08 UTC	669	OUT	GET /pages/scripts/lib/main-558.min.js HTTP/1.1 Host: rmshg.amplified.training Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://rmshg.amplified.training/catalog Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; login_token=153a9a8f304880470316f98fd745653f
2024-05-06 16:42:08 UTC	552	IN	HTTP/1.1 200 OK date: Mon, 06 May 2024 16:42:08 GMT content-type: text/javascript content-length: 252432 server: Apache content-location: main-558.min.js.gz tcn: choice x-content-type-options: nosniff x-xss-protection: 1; mode=block last-modified: Tue, 12 Mar 2024 10:12:06 GMT etag: "3da10-61373e3e83e9f;61373e408c6bc accept-ranges: bytes cache-control: max-age=31536000, public expires: Tue, 06 May 2025 16:42:08 GMT content-encoding: gzip strict-transport-security: max-age=31536000; includeSubDomains; preload; connection: close
2024-05-06 16:42:08 UTC	13730	IN	Data Raw: 1f 8b 08 08 76 2a f0 65 00 03 6d 61 69 6e 2d 35 35 38 2e 6d 69 6e 2e 6a 73 00 ac 5b 0b 77 db 36 b2 fe 2b 12 9b ab 10 16 4c 4b 49 9b 7b 42 19 d1 49 65 a7 c9 6e 5e 1b b9 ed ee 4a 4a 0f 2d 41 36 13 99 54 48 c8 b6 62 ba bf fd 7e 03 f0 2d 2a e9 de 7b d3 53 f3 01 60 30 33 18 7c f3 00 75 74 d0 6e 7d fa c7 46 46 db d6 f5 63 e7 89 f3 63 2b 69 d9 73 d6 7a b7 96 c1 df c6 ad 17 e1 26 58 78 ca 0f 83 96 17 2c 5a a1 ba 94 51 6b 1e 06 2a f2 cf 37 2a 8c 62 74 ff f4 85 86 3b 61 74 71 b4 f2 e7 32 88 65 eb e0 a8 bd dc 04 73 1a 67 4b ae d8 9d b5 c1 db 18 a3 e6 ca 1a 58 e1 f9 27 89 1b 21 d4 76 2d c3 65 eb 2a 5c 6c 56 b2 d3 d9 d3 e0 c8 db 75 18 a9 78 58 7d 14 d2 59 84 f3 cd 95 0c d4 50 61 9a 76 8f b9 c5 ac ec ce 5f da ed a2 0b 53 97 51 78 d3 0a e4 4d eb 34 8a c2 c8 b6 52 b1 23 Data Ascii: vemain-558.min.js[w6+LKI{BIen^JJ-A6THb~-{S`03\|utn}FFcc+isz&Xx,ZQk7bt;atq2esgKX'!v-e*\lVuxX}YPav_SQxM4R#
2024-05-06 16:42:08 UTC	12634	IN	Data Raw: 98 c5 a3 63 93 79 02 df 17 cb 62 b5 e0 62 e6 cb a9 51 2d bd 0a 15 42 11 69 94 7e ba 45 a1 e3 a7 f5 a2 27 d5 52 8a 2f 3f 6d a9 f3 4e a6 1f 8f fa e8 7f 34 08 c6 0e f0 be 75 43 26 1b 76 ca f6 e0 85 cd e8 78 db 22 a9 93 2b 1f 00 4c 0f 8a 2b 3a 6c 89 b2 a4 5b 80 f7 a3 c6 f0 64 a3 bf a1 d1 80 cd 88 3d 3f f7 e3 e1 d6 bc bc 39 6e 6a 8c 33 15 86 8d e8 44 45 05 17 b3 e2 2c 9d a1 4c 31 20 33 6a 7e 63 aa 7a 5e 14 6d 2e b2 1e ad 71 82 3f ce 01 a5 c2 1f 7a 5f e9 77 ca e7 e7 82 94 34 d2 a9 a2 1f f4 39 35 a7 0b 5e 0c 48 80 df a6 9a 9c 3a 3a 58 12 04 ec 0a b6 2d 5f cc b2 e4 23 fd eb 23 de 69 1d fe 6b cc 00 eb 0a e1 d1 fa e0 0f c3 b7 d7 9d c1 a1 dd dd 9b 6d 2e a9 f8 69 56 13 74 78 b6 15 f8 b0 3b a2 29 ac dd a5 5d bb e9 09 fc 9f cd 3c c8 65 d5 14 1f bf 3e 85 a1 a9 cb 88 80 Data Ascii: cybbQ-Bi~E'R/?mN4uC&vx"+L+:l[d=?9nj3DE,L1 3j~cz^m.q?z_w495^H::X-_##ikm.iVtx;)]<e>
2024-05-06 16:42:08 UTC	8949	IN	Data Raw: 9f d0 fc 7b c7 4b c8 7b 41 96 e0 81 0c df a3 77 20 66 5f de 78 5e 08 d4 19 7c 3e 4f 67 33 74 34 87 a6 25 f3 49 b6 77 05 a4 cc 12 8d dd ae a1 f1 b2 4a ab 55 89 31 64 89 79 95 22 84 15 30 1b 70 d4 5b c0 09 d4 9b e4 0e 75 22 6e 4f 2b a4 df 29 ca fc 6b 39 17 5f 40 7a 5b 14 73 0a 83 a7 bd 70 de a1 2b 28 61 1b 55 c9 17 15 9b cc 2e 22 b4 48 68 84 f1 40 e9 dc 38 09 b7 66 79 3e 1f aa d1 f1 38 da 60 60 a6 ac a5 e8 c6 c3 30 2a c6 30 2a 41 fa 14 8a b0 71 2a cf 66 33 7f 36 6d ae b3 2f 87 8b d8 68 a5 bc 66 cf 1d 8d b9 3b e7 91 bb e4 60 79 65 7d 70 e3 96 24 c0 7f 55 8a ef 96 c8 87 37 0a 4d eb 96 f9 34 fb 2a bf e2 90 ad 5b d9 ea 97 64 2a 77 25 e5 92 4c b7 60 77 b7 7d 83 c8 be fe 32 7a a3 0d 03 b3 d1 1b 39 11 0d b3 93 2c ba 46 45 a8 11 fe 4b 64 86 e7 f4 08 4e ce 19 de 97 Data Ascii: {K{Aw f_x^\|>Og3t4%IwJU1dy"0p[u"nO+)k9_@z[sp+(aU."Hh@8fy>8``00Aqf36m/hf;`ye}p$U7M4[d*w%L`w}2z9,FEKdN
2024-05-06 16:42:08 UTC	16320	IN	Data Raw: ef 79 56 dc e0 bb 55 f8 39 68 34 57 cc 2e 96 c5 6a e1 65 c0 d9 cc 16 40 7b cb 1a 98 64 a0 06 8b 0b 3f 69 99 5e 5c 98 29 d8 d4 62 b1 68 a4 22 41 ed 27 20 32 ef a5 68 60 75 96 fa 3d 13 83 a0 d1 20 df 98 2d c9 8d de 68 bf fd 66 4b a0 9c 9b d5 17 84 af 7b 69 50 aa f4 13 8a 02 6d 92 20 0d 2e fb f3 62 71 bb c4 33 ae e1 c5 bd 26 8a 83 bd 2f d9 2c 71 ba f7 d5 ab 37 7b 4f 0e 1f d9 e7 e1 3c 45 e5 ed db 9a 29 1e ca 8e 5c d3 42 00 d8 f6 85 70 ed 0c a3 bb 16 43 43 69 72 b0 e1 e8 19 fc 29 96 80 90 ba 89 6c f7 8f 6b 1d 3f ee ad f2 04 ff 31 71 f0 24 ae 00 25 f6 f4 47 c0 d0 31 20 b8 f9 68 ef 89 03 3a bf a7 35 db e3 02 98 d5 06 32 f7 9e 60 ce 87 af 24 d6 7a 8d 14 21 ae 25 92 9e 4b 52 26 c7 55 15 cb cf 5e a3 4b d7 2e f4 11 2e 3e ce 8a 77 f6 3b b4 70 ee 0f 6c c2 17 9e a6 7c Data Ascii: yVU9h4W.je@{d?i^\)bh"A' 2h`u= -hfK{iPm .bq3&/,q7{O<E)\BpCCir)lk?1q$%G1 h:52`$z!%KR&U^K..>w;pl\|
2024-05-06 16:42:08 UTC	16320	IN	Data Raw: de ff f8 92 80 17 c5 c9 2c 2d 7f 9d 9d 37 b5 ea b6 d9 07 7e 88 15 e0 36 4b bf e6 63 ff af d4 b9 fd 6d 30 e7 f7 d6 86 f5 80 d8 c3 00 91 d9 a6 16 8d 7d bd 71 2d 62 18 02 26 f7 41 b1 ee 51 7c 14 19 7d 86 8e 6e ce 51 a5 9d b4 77 ec 17 68 31 75 4c 76 97 e8 b3 31 e4 83 d4 ea 75 1b be 14 16 ed 8e fc d9 d5 47 95 98 95 ab 2f 83 99 e7 bf 87 7a f0 1b f1 c6 f1 9f 01 7e b6 fb 36 33 d1 08 9a 40 49 3b 1c d9 0a 90 b4 82 9b 2e e8 67 33 4b ab 01 02 f5 c2 69 6f a7 cd 25 fe 1c 23 32 a4 67 ff de dc 1a 5c cd de b9 1e a9 35 7e 37 12 ab b4 7c 93 9e 91 27 26 63 b6 8d a0 99 dc a0 e5 57 17 ca d4 7d 75 fe 77 26 30 d4 79 9e cd a6 65 56 29 ed 6a da 5c 62 9d d0 ab 8a 2f 8b 6b 13 ee 15 76 35 48 01 0a 05 70 1f 75 91 e8 0e 1f 00 03 5b 6c 10 74 e9 3c 81 bf 14 b4 9a ac 14 75 b9 4b b8 63 40 Data Ascii: ,-7~6Kcm0}q-b&AQ\|}nQwh1uLv1uG/z~63@I;.g3Kio%#2g\5~7\|'&cW}uw&0yeV)j\b/kv5Hpu[lt<uKc@
2024-05-06 16:42:08 UTC	16320	IN	Data Raw: 02 88 69 b4 b9 b7 65 6e 90 9f 65 ed 01 51 1c d0 6c 29 4f 4d 4b 1f ac 1a a4 73 04 f7 84 54 89 eb f3 3d 51 d6 0d 02 fe 5a 25 5e 79 7c cd fa fa 79 31 90 16 72 99 bc 8b 8c 53 df 56 06 ff 23 5e 3d 8f a0 66 ff 1a 4e de 83 6a c9 cc 19 a1 98 5e 78 45 c8 40 d7 21 4e bb 34 1a b7 66 2c e5 37 3a f1 3b d5 56 2a 81 18 50 08 11 a1 5c 28 35 96 92 22 e7 e9 56 f8 a5 2f 07 e1 3d a3 23 cb 7b e3 0a bf ae a6 af 69 9f 58 12 68 4a 18 18 e2 bd db 54 6e 00 3c c8 dd 78 5e d2 b5 a7 21 b0 f7 9e 83 03 27 7d b1 f2 34 ad 6b af 0a c8 e0 3d 4d 7c 9f 0b f2 e7 17 f2 cc 9c cb 64 22 cf f1 3e 03 e1 d5 d9 34 10 6f 01 a3 81 50 2e 0f c4 21 d6 6a ba e7 14 01 e0 61 e6 1e 92 29 15 36 3d 24 5c d5 43 5f e2 dd d3 bf e7 1b 9e 1f 13 02 3a 2d 67 48 0b da 36 4a e8 5c 48 f3 1d 31 0e b5 16 22 a9 44 49 f2 77 Data Ascii: ieneQl)OMKsT=QZ%^y\|y1rSV#^=fNj^xE@!N4f,7:;V*P\(5"V/=#{iXhJTn<x^!'}4k=M\|d">4oP.!ja)6=$\C_:-gH6J\H1"DIw
2024-05-06 16:42:09 UTC	16320	IN	Data Raw: 4f 6c 5c 06 49 cd a6 05 2c d5 87 02 54 1a 3e 98 11 9b e1 65 e6 04 88 03 6e 41 c0 e4 6c ac c8 72 7f 8b 6e d7 3d 17 aa 65 ea 05 6a 61 67 fd 34 1c 65 ba 62 be 2f 49 82 35 3d a9 4e f3 1e c2 41 e9 a3 e0 ac 4d b5 7b 68 7f e6 1c db 87 e4 37 42 4f 96 00 8b 3d d3 c2 14 63 6b 42 11 c2 43 cc 82 89 9c 61 ed 4f e5 84 fe 9e 96 c1 de d8 a1 d8 f0 02 96 f6 b8 a8 26 23 43 bd b5 52 cd 38 e7 7c 5e 1d 8e 4f 0d 83 4a 6e 6f e2 62 00 c1 0d 95 87 e7 4f 39 e0 20 0d 78 0e 8b e3 0c 9f 38 46 16 85 f7 c1 95 99 0d 46 df d7 f8 87 51 7a 8f f5 74 e9 8f 1f 6e c2 45 2a d2 f3 89 e0 08 04 82 69 80 0b 4a 95 3b 2c 96 d9 ff 43 94 21 1a 02 58 ee 78 79 82 0e 3b 25 f9 06 8f 59 a5 4b 0c a1 78 00 0f a3 ce 78 c9 eb 68 18 c5 ad 8a 5f de 0d 02 dc 8a 3e 78 f2 96 14 4f b6 3e 9e 4f b3 49 9b f8 23 e6 8d 18 Data Ascii: Ol\I,T>enAlrn=ejag4eb/I5=NAM{h7BO=ckBCaO&#CR8\|^OJnobO9 x8FFQztnE*iJ;,C!Xxy;%YKxxh_>xO>OI#
2024-05-06 16:42:09 UTC	16320	IN	Data Raw: d4 84 cc 77 36 6f 6f b0 4c de 60 5f fc e3 f7 1b 2d 8f 93 66 e9 4d 86 d4 0d 26 e6 0d d6 da 0d a6 c6 29 e9 75 42 6d 5c 71 dd 56 7c 13 2c 6a e3 1b fc 47 a8 e6 80 28 8c 99 f8 07 69 d6 60 0b 39 42 10 c1 cf 1e a9 67 1a 42 d3 4d c5 90 8f bb 13 34 e8 26 34 6e df 64 8b 9e a8 83 58 bf a9 8e 40 92 57 2f e0 95 69 46 ed 56 2b 6c 35 e6 29 1f 13 25 2d 86 04 f9 96 8e 11 c8 b6 77 dd f9 b4 5d 6f 38 07 06 02 78 ff ca 46 fe dc be 85 6d 5c 2d e2 c6 36 3a 70 68 38 5d 4d 63 d0 72 85 9d c6 d0 d1 63 b0 82 db 58 61 48 de ba c0 75 c7 55 3a 78 c1 bd 50 9f 3d 4e 1b d1 41 83 0e 4d d5 a8 37 e3 e5 68 c1 f1 ae 48 64 dd 14 77 b4 9e ff 8f 8a 3a ca c3 0d 6c a3 38 f5 1e d6 51 35 bc a8 1b 60 19 dd 30 b5 9a 08 4b 4a 4a 81 59 31 b8 ae 16 62 37 55 4f a7 e3 e1 12 3c 24 b8 94 e5 a0 9a a2 69 1f a7 Data Ascii: w6ooL`_-fM&)uBm\qV\|,jG(i`9BgBM4&4ndX@W/iFV+l5)%-w]o8xFm\-6:ph8]McrcXaHuU:xP=NAM7hHdw:l8Q5`0KJJY1b7UO<$i
2024-05-06 16:42:09 UTC	16320	IN	Data Raw: b4 ab 44 02 e7 ca a5 c6 bd d6 72 de 00 4c 55 6a 56 fe 99 3a 0e 29 df 60 7c 8c 34 e4 e0 31 3a 27 d4 e5 11 c4 42 b4 f4 bc af 8f 26 8a a5 21 24 8b 23 56 4b 72 1d b3 95 a4 9c 73 c0 43 2e 83 f9 56 c3 ff 33 22 d4 94 b5 ed 30 a6 ad 55 13 14 bb 97 48 6c 33 b5 6e dd af 4e 6a 83 63 ba 9a 4a a9 c2 5b d0 52 dd d1 b8 cb 5b a9 d6 fd d3 f8 73 be fc 98 9c 0b eb 24 68 6f 9b b7 9d fa b6 3b b3 99 fe 76 23 0c 29 70 5c b1 d3 62 4f 7d 19 aa bc 89 12 27 d1 0f 0a 6a 92 e2 9f 84 e8 27 6f 92 fb b4 ad dc c7 07 85 4a 18 63 e1 90 cd 7e 1b fc 22 53 68 99 11 b4 6a 5f fa 24 c3 c6 de aa 08 d6 ec c6 99 dd ad 73 07 f5 91 90 e9 77 63 12 1a a5 0b ec f6 6a ac e5 0b 21 33 30 47 35 01 be 82 58 69 3c f0 42 cf 8a 00 41 55 e2 7d f8 ac 0b f3 18 d2 fa 0e fc ba 4b 73 5b 9a 81 a3 95 dd 16 a6 dd 5d 1e Data Ascii: DrLUjV:)`\|41:'B&!$#VKrsC.V3"0UHl3nNjcJ[R[s$ho;v#)p\bO}'j'oJc~"Shj_$swcj!30G5Xi<BAU}Ks[]
2024-05-06 16:42:09 UTC	16320	IN	Data Raw: 05 d4 b5 f6 80 df 47 93 1d be 41 ed 21 97 af 18 7e 40 d5 1f b1 d5 1c 79 7c d9 70 c2 af f5 b6 6b c9 01 a7 70 0f f8 99 3b c1 cf b5 7e 7c 22 d7 33 24 7f a3 2e 59 c2 fd 9e c1 22 09 14 56 31 e6 a4 e2 57 5a 78 c1 27 fc 4a 4c 97 79 bc b0 7c 8b c4 17 49 55 76 a1 2a 10 77 ec a8 05 6d 58 0b b2 0e 34 9c 69 a8 93 97 e9 eb b3 1c bd 12 8d 4e 51 af c1 d2 90 44 ad 4d 79 6b 85 16 30 e7 ca 64 4a 56 0a 73 0e 0c 5b be 1c e7 6e ea 9f 9b fa 2b 1f 2b de 22 a4 71 42 a2 44 30 63 7b 54 d1 df 62 d6 33 f7 51 79 4e 5d af 9b 06 80 89 ee f2 18 3a 7d 6a 75 16 d5 3e b3 ee 1a e3 ab 24 de f5 f5 58 4a fc 72 4b 93 f6 b2 c1 89 45 b5 e9 da ae ea 5a c7 93 7d ce fb e3 50 0b 5b 05 4e e0 9e b3 02 43 0f 39 a4 5f 12 b1 29 7a 0f d5 a2 79 26 f9 30 52 e4 82 0c 35 0c 1c 69 7a 7d 2d c1 f9 a1 2c 75 7d 4d Data Ascii: GA!~@y\|pkp;~\|"3$.Y"V1WZx'JLy\|IUv*wmX4iNQDMyk0dJVs[n++"qBD0c{Tb3QyN]:}ju>$XJrKEZ}P[NC9_)zy&0R5iz}-,u}M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.11	49761	3.217.205.239	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:08 UTC	723	OUT	GET /pages/images/unknown_x4.png HTTP/1.1 Host: rmshg.amplified.training Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rmshg.amplified.training/catalog Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; login_token=153a9a8f304880470316f98fd745653f
2024-05-06 16:42:08 UTC	473	IN	HTTP/1.1 200 OK date: Mon, 06 May 2024 16:42:08 GMT content-type: image/png content-length: 5929 server: Apache x-content-type-options: nosniff x-xss-protection: 1; mode=block last-modified: Wed, 23 Mar 2022 16:57:16 GMT etag: "1729-5dae59f2efe20" accept-ranges: bytes cache-control: max-age=31536000, public expires: Tue, 06 May 2025 16:42:08 GMT vary: User-Agent strict-transport-security: max-age=31536000; includeSubDomains; preload; connection: close
2024-05-06 16:42:08 UTC	5929	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 01 40 08 03 00 00 00 53 16 5f 49 00 00 01 14 50 4c 54 45 00 00 00 18 67 b2 18 67 b3 19 67 b3 19 68 b2 19 68 b2 19 67 b3 1a 67 b3 1a 68 b3 19 67 b3 19 67 b2 19 67 b3 19 68 b3 1b 69 b4 1a 69 b6 1a 67 b2 1a 67 b3 19 67 b3 1a 68 b3 1a 67 b3 19 68 b4 1a 68 b3 1c 6e bf 1d 70 c2 19 67 b3 1a 67 b3 1a 67 b3 1a 67 b3 1a 68 b3 1a 67 b3 19 68 b4 19 67 b2 1a 67 b2 1a 68 b3 1c 6c bc 1b 6b b9 1b 6a b7 1b 68 b3 1a 68 b3 1a 68 b4 19 67 b2 19 68 b2 18 67 b2 1a 68 b3 1a 68 b3 1a 68 b2 1a 67 b3 19 67 b3 1b 6a b8 19 67 b3 1a 6b b8 1a 69 b2 f7 76 13 f6 78 14 f7 78 16 f7 79 16 f7 78 16 f7 7a 17 f8 79 17 f8 79 17 f8 79 17 f8 79 17 f6 79 17 f8 7b 18 f6 76 14 f7 77 16 f7 78 15 f9 7b 17 f8 7a 17 f8 79 18 ff 7e 18 ff Data Ascii: PNGIHDR@S_IPLTEggghhgghggghiiggghghhnpgggghghgghlkjhhhghghhhggjgkivxxyxzyyyyy{vwx{zy~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.11	49763	18.173.145.206	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:09 UTC	654	OUT	GET /amplifiedhr/1561165002_AdobeStock_106126834%20%281%29.png HTTP/1.1 Host: d3j0t7vrtr92dk.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rmshg.amplified.training/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:09 UTC	538	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 114176 Connection: close Date: Mon, 06 May 2024 16:42:10 GMT Last-Modified: Sat, 22 Jun 2019 00:56:41 GMT ETag: "67d07b630c99be0aba697ee8b22ce232" x-amz-server-side-encryption: AES256 x-amz-version-id: ee8.ctkgPlwmXE1mc2OwirGjX6nAUyCS Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 1da0abf50a5fdf7ae338fbc8547b31e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: luqsGcJqKJU2j9CP4gnqxAPT4E-OT9F0Jaows6C7Vtmxs8-x-O2P3g==
2024-05-06 16:42:09 UTC	14588	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 00 db 08 02 00 00 00 3a 7c d5 18 00 00 20 00 49 44 41 54 78 9c ec bd 67 9c 54 45 f6 3f 5c e1 86 0e 93 7a 12 03 c3 10 04 64 c8 ce 02 22 2e 28 bb 28 19 49 06 94 a8 04 01 61 41 82 2e 20 41 44 54 04 09 0a 18 10 50 51 50 14 24 88 b8 80 92 d6 55 94 2c 02 12 86 34 30 4c 9e e9 e9 ee 9b aa ea 79 71 77 e7 d7 de d4 3d 80 ae ff 7d 38 2f fa 53 f7 d4 a9 53 a7 4e 55 7d eb 54 dd ea 6e 58 bd 7a 75 70 8b 6e d1 ff 3b 04 21 fc fd f5 e8 c2 d1 14 09 97 61 8c 85 3f da 15 af 2c df 59 c6 b2 54 b8 fd d1 58 15 3d 33 7a 53 7f 8b b2 06 62 8c dd f4 82 96 59 66 a6 25 07 42 a8 f3 af 5b 09 77 83 de 31 74 f6 75 88 45 a9 e1 a6 98 f1 1b 69 70 2e 6b 99 6b 57 a4 52 66 fc 76 9a ff e0 f4 3b 37 e4 fa d0 d9 f0 e8 80 c2 86 69 e9 d0 Data Ascii: PNGIHDR:\| IDATxgTE?\zd".((IaA. ADTPQP$U,40Lyqw=}8/SSNU}TnXzupn;!a?,YTX=3zSbYf%B[w1tuEip.kkWRfv;7i
2024-05-06 16:42:09 UTC	2228	IN	Data Raw: 55 51 14 45 0e 04 a4 f2 00 28 95 c1 35 a2 fa 19 f5 40 44 18 13 20 e4 00 ba ad 46 c6 33 af bc 74 f0 f0 61 b7 db 7d fa f4 e9 13 3f 9f 48 49 49 e1 78 4e 92 24 af db 53 52 52 d2 a1 43 87 16 2d 5b f0 82 50 52 52 e2 76 bb 93 92 92 3c 1e 4f 6e 6e 6e 69 69 29 84 f0 e0 81 83 bb b6 6c 7c a8 6e cd da b5 6a c5 25 24 8a 22 cf 61 0e f1 1c 27 8a 50 10 b0 c0 43 9e 87 bc 40 01 50 83 01 c4 61 80 20 16 dd 00 21 c6 18 65 8c 11 42 89 f6 cb e5 2b af 7f ba 89 d2 df 04 9d c1 f5 bd 24 b4 7c 01 7d dd 45 ec b2 2a 55 8b a5 70 05 53 7f b7 5e ad 5a 35 55 55 47 8d 1a a5 e7 fe e5 2f 7f 39 79 f2 64 6c 6c ec 9a 35 6b 16 2c 58 30 7e fc f8 fb ef bf 7f cb 96 2d 82 20 bc f8 e2 8b 3a 9a ac 5c b9 72 c8 90 21 2e 97 6b c8 90 21 3e 9f ef b5 d7 5e cb cc cc 5c bb 76 6d df be 7d f5 73 c9 a5 4b 97 9a Data Ascii: UQE(5@D F3ta}?HIIxN$SRRC-[PRRv<Onnnii)l\|nj%$"a'PC@Pa !eB+$\|}E*UpS^Z5UUG/9ydll5k,X0~- :\r!.k!>^\vm}sK
2024-05-06 16:42:09 UTC	15990	IN	Data Raw: 72 72 fc 7e 3f 63 ac 6a d5 aa 94 52 29 24 b9 dc 2e 8c f1 c9 ec 73 a7 8e 1c ad 9e 9c 28 60 0c 88 06 00 40 18 01 8e 03 08 11 a2 85 8a f3 e5 92 3c 12 2c e2 63 12 84 b8 24 08 21 44 08 f1 82 fe de 17 02 40 28 db 7d f0 a8 aa 69 06 17 59 f6 a3 03 55 38 d0 30 a8 2c 6e 71 58 76 aa 65 37 87 33 0d 5d 65 a9 cd ae a0 41 d8 21 6d 59 ca 59 a7 9d 70 4e 4e 0e 00 e0 95 57 5e e9 d9 b3 e7 ec d9 b3 15 45 19 3f 7e 7c 72 72 72 eb d6 ad 0f 1f 3e fc c9 27 9f f4 ea d5 ab 55 ab 56 9f 7c f2 c9 ca 95 2b c7 8f 1f df ae 5d bb ef bf ff 7e ea d4 a9 fa b5 68 00 c0 80 01 03 9a 37 6f be 68 d1 22 fd 74 d2 dc 7c fd 31 10 08 10 42 3c 1e cf f9 f3 e7 2f 5e bc 98 94 94 c4 f3 7c 71 71 f1 be 7d fb 32 32 32 ba 76 ed ca 18 d3 bf eb 68 6e a9 99 59 af 5e 3d fd 36 5e 51 51 d1 a3 8f 3e 5a bf 7e fd 91 23 Data Ascii: rr~?cjR)$.s(`@<,c$!D@(}iYU80,nqXve73]eA!mYYpNNW^E?~\|rrr>'UV\|+]~h7oh"t\|1B</^\|qq}222vhnY^=6^QQ>Z~#
2024-05-06 16:42:09 UTC	16384	IN	Data Raw: 23 8a e2 57 5f 7d b5 7d fb f6 ec ec ec 9b 37 6f 7e fd f5 d7 56 ab 95 e7 f9 9c 9c 9c 35 6b d6 d4 af 5f 7f d3 a6 4d 2d c4 88 4e 84 00 00 20 00 49 44 41 54 5a b4 50 6e 09 2a 17 c4 77 ed da 35 71 e2 c4 ad 5b b7 42 08 4d 26 53 52 52 d2 c1 83 07 5b b6 6c 39 7d fa 74 00 00 c3 30 55 6d 06 00 80 b9 73 e7 36 68 d0 40 f1 92 3c 7e fc f8 e8 e8 e8 bb 77 ef ee df bf 3f 26 26 c6 64 32 7d fd f5 d7 8b 16 2d 2a 2d 2d bd 72 e5 4a bb 76 ed fc fc fc 6a d4 a8 51 58 58 f8 1f e1 d5 e8 d1 a3 fd fc fc be fb ee bb fe fd fb 67 66 66 0e 1b 36 6c dc b8 71 73 e6 cc 01 00 94 94 94 a4 a6 a6 76 ec d8 51 ab d5 9e 3b 77 ae 77 ef de ca d7 57 86 61 ae 5d bb 76 ff fe 7d 50 b5 98 38 71 e2 c4 c4 89 13 87 0c 19 62 b7 db 33 32 32 3a 75 ea f4 c3 0f 3f 78 79 79 ad 5b b7 2e 2d 2d 6d e1 c2 85 9f 7e fa Data Ascii: #W_}}7o~V5k_M-N IDATZPnw5q[BM&SRR[l9}t0Ums6h@<~w?&&d2}---rJvjQXXgff6lqsvQ;wwWa]v}P8qb322:u?xyy[.--m~
2024-05-06 16:42:09 UTC	2442	IN	Data Raw: b3 3b e5 1b d1 70 2c 1e 8f 84 c2 96 40 86 a1 1b a6 69 d9 96 69 9a 16 e7 b6 6d 73 ce 1d d3 3a 27 28 1d 92 d2 b6 2c 6e db 36 b7 85 6d 23 24 31 26 80 10 c1 44 d1 5c 94 50 4a 29 46 98 11 42 09 a7 e6 41 39 00 00 20 00 49 44 41 54 55 98 a2 32 c4 40 b8 34 c5 ef cb f2 7b bd fe ac 2c b7 df e7 f2 05 34 7f 90 b9 bc cc e5 24 7b a5 80 00 00 6b 1e 7f 43 f9 c1 9a 43 fb dc 1e 1f 55 5d 98 32 c9 6d c1 85 94 12 7e 95 8c 40 c8 d1 29 70 1b 83 94 9c 83 94 82 5b 18 63 4d f3 84 ea aa 76 6f da ea d2 b0 aa 30 29 84 b4 a5 5e 7f 04 b8 0d b6 81 85 45 40 32 a6 30 4d 43 b6 61 34 d6 e9 88 20 b7 5f 22 04 98 10 45 01 00 24 25 c6 98 68 1a 51 14 d5 e7 25 8c 39 1e e7 52 0a c0 20 84 00 42 85 cd 11 c6 dc b2 84 6d 49 84 2c cb 5e bb f9 27 67 3d 53 1e 0c 66 60 da 64 38 f6 11 07 fc a1 66 76 c7 45 Data Ascii: ;p,@iims:'(,n6m#$1&D\PJ)FBA9 IDATU2@4{,4${kCCU]2m~@)p[cMvo0)^E@20MCa4 _"E$%hQ%9R BmI,^'g=Sf`d8fvE
2024-05-06 16:42:09 UTC	16384	IN	Data Raw: ee 27 9f 7c a2 eb fa 2f bf fc 32 7f fe fc 8a 8a 8a ca ca ca 2f be f8 02 21 b4 6d db b6 6f bf fd 96 31 f6 f5 d7 5f af 5b b7 6e e8 d0 a1 a3 47 8f 2e 2e 2e 96 52 0e 1b 36 2c 16 8b 5d 76 d9 65 d3 a6 4d 8b c7 e3 4e 48 65 a7 d3 db 6e bb 6d d7 ae 5d 7b f7 ee 9d 3c 79 f2 be 7d fb a4 94 8f 3d f6 98 13 db 6c e5 ca 95 63 c6 8c 79 f1 c5 17 11 42 8d 8d 8d bb 77 ef 46 08 95 97 97 ab aa 7a d2 49 27 9d 7c f2 c9 ce e0 e3 f1 78 22 91 b8 e7 9e 7b 9c f0 a1 00 70 e4 c8 91 55 ab 56 35 95 df 7a eb ad da da da b7 de 7a 6b f8 f0 e1 3b 76 ec a8 ae ae 9e 31 63 c6 3b ef bc e3 20 b8 dd ee b9 73 e7 6e dd ba f5 bc f3 ce cb cf cf 0f 85 42 9b 36 6d 9a 3b 77 ee 89 27 9e 38 66 cc 98 91 23 47 36 75 24 a5 cc ca ca 3a e3 8c 33 22 91 48 e7 ce 9d 11 42 07 0e 1c 70 36 c3 ef f7 d7 d7 d7 3b 39 ae Data Ascii: '\|/2/!mo1_[nG...R6,]veMNHenm]{<y}=lcyBwFzI'\|x"{pUV5zzk;v1c; snB6m;w'8f#G6u$:3"HBp6;9
2024-05-06 16:42:09 UTC	16384	IN	Data Raw: a0 a8 75 ab 02 99 05 60 33 c3 16 46 cc 04 9b 5f 65 3c fd 6b cf 6f 96 e2 62 51 02 50 04 50 40 8c 12 5e 9b aa d8 00 80 94 52 8a 09 c1 18 49 1a c6 ad f0 28 c5 36 2b a5 84 12 c2 18 c5 8a 0a 00 a4 18 23 01 01 08 b8 e7 fb 47 47 44 c8 10 9f e8 7f 4f 58 08 20 63 4c 25 84 8b c5 c0 67 50 65 85 fb cf bd 53 d1 d5 bb 02 94 9f cb ca 8f 2a fc 17 00 90 9e 9e 1e 1a 1a 3a 65 ca 94 d4 d4 54 1e 45 73 f7 ee dd 53 a6 4c 71 76 76 76 77 77 bf 73 e7 ce 8d 1b 37 7a f4 e8 21 08 c2 f1 e3 c7 79 18 e5 ff 66 03 f3 7c 4b d3 a6 4d 7b f7 ee 9d af af 6f 56 56 d6 fa f5 eb a7 4f 9f 1e 16 16 b6 6a d5 2a 42 c8 8f 3f fe a8 d3 e9 96 2d 5b f6 f8 f1 63 a3 d1 f8 c9 0a 3f d7 50 59 a1 46 a3 e1 3e 14 03 06 0c 78 f2 e4 c9 ef bf ff 1e 15 15 65 30 18 38 31 92 96 96 e6 ec ec ac d3 e9 e2 e2 e2 ba 77 ef 6e Data Ascii: u`3F_e<kobQPP@^RI(6+#GGDOX cL%gPeS:eTEsSLqvvvwws7z!yf\|KM{oVVOjB?-[c?PYF>xe081wn
2024-05-06 16:42:09 UTC	630	IN	Data Raw: fa 69 b7 db 65 59 5e b8 70 a1 46 a3 19 37 6e dc c4 89 13 2b 2a 2a f4 7a bd b7 b7 77 5c 5c dc d0 a1 43 e9 4e 34 05 3f ac c6 d9 f5 96 66 40 08 43 42 42 1c 0e c7 a4 49 93 bc bd bd 8f 1c 39 e2 e7 e7 87 10 4a 4f 4f 7f f0 e0 41 b7 6e dd bc bc bc ce 9e 3d db b0 61 c3 0f 3e f8 e0 fc f9 f3 35 0b ac b5 e4 6a 8d 77 38 1c 19 19 19 4d 9b 36 6d d7 ae 1d fc cb b9 4c 37 94 ea d7 af df a3 47 8f bc bc 3c 59 96 a3 a3 a3 29 27 5e 65 3c e9 3b 7e 56 fd 49 6d b7 f1 e3 c7 77 e8 d0 e1 c8 91 23 9d 3b 77 0e 09 09 99 35 6b 56 dd ba 75 e7 cc 99 93 9e 9e be 7b f7 ee 90 90 90 84 84 84 86 0d 1b b6 6c d9 92 06 2d 54 2d ed f4 e9 d3 43 87 0e bd 78 f1 e2 b5 6b d7 96 2d 5b f6 f1 c7 1f ef dc b9 33 23 23 23 3c 3c 5c a3 d1 d0 98 bc f0 f0 f0 9c 9c 9c 6f be f9 86 e2 35 43 08 c7 8f 1f bf 77 ef de Data Ascii: ieY^pF7n+**zw\\CN4?f@CBBI9JOOAn=a>5jw8M6mL7G<Y)'^e<;~VImw#;w5kVu{l-T-Cxk-[3###<<\o5Cw
2024-05-06 16:42:09 UTC	1418	IN	Data Raw: 0c 66 58 cc b2 88 63 20 51 20 82 08 63 99 28 00 20 08 31 64 10 50 24 08 58 cc 51 7a 6f 09 71 1c 00 7a 45 56 30 81 9c 46 27 09 22 ab d6 03 88 10 c2 88 e1 21 c6 bc 56 17 d0 ac bd b9 38 4b 11 1d 2c cb 43 08 10 84 5a 0f 1f 7b 45 19 11 45 04 08 c3 b2 10 42 a2 c8 2c af 92 5c 0e 20 89 08 10 9d 9b a7 c3 66 b1 99 4a 15 45 96 44 41 12 1c 2a bd 11 40 44 08 91 65 09 22 48 a9 c4 09 01 10 22 45 96 89 a2 00 a0 00 a0 40 c4 42 04 21 42 0c c7 23 86 f9 23 29 a9 2a 32 cf 5b 1e ab 77 99 ff 95 07 ff 8f a3 38 2c 16 8b 20 08 1e 1e 1e 07 0f 1e f4 f2 f2 82 10 d2 ed ac ca cc 02 42 c8 a3 47 8f bc bd bd fd fd fd 2d 16 0b 7c 73 d0 49 b5 86 da 6c b6 b2 b2 b2 59 b3 66 75 ee dc d9 d7 d7 37 2b 2b 2b 3a 3a ba 45 8b 16 63 c6 8c 49 4a 4a 32 9b cd 1d 3a 74 48 49 49 a9 53 a7 ce db a3 56 df 2e Data Ascii: fXc Q c( 1dP$XQzoqzEV0F'"!V8K,CZ{EEB,\ fJEDA@De"H"E@B!B##)2[w8, BG-\|sIlYfu7+++::EcIJJ2:tHIISV.
2024-05-06 16:42:09 UTC	9594	IN	Data Raw: e9 d3 a7 6b 34 9a 57 af 5e e5 e7 e7 33 35 df cf cf 6f df be 7d bd 7b f7 4e 4d 4d ed d7 af df e0 c1 83 29 a5 47 8f 1e 6d d3 a6 4d 59 59 99 20 08 b7 6e dd 12 04 e1 bd f7 de ab 18 fd 54 a9 47 94 d2 df 7f ff dd e9 74 06 06 06 36 6a d4 68 d8 b0 61 5e 5e 5e 0b 16 2c f8 e1 87 1f 9a 35 6b d6 b2 65 cb 71 e3 c6 25 25 25 0d 1e 3c 78 fc f8 f1 f9 f9 f9 fb f7 ef a7 94 32 0c 96 56 ad 5a 31 02 94 d7 de 3c 3b 4e 08 19 3a 74 e8 de bd 7b 73 72 72 8a 8a 8a b2 b3 b3 1f 3f 7e 9c 9f 9f 5f af 5e 3d 08 61 ab 56 ad b2 b3 b3 19 81 f2 a2 45 8b 7e fe f9 e7 db b7 6f cf 98 31 23 2b 2b 8b 61 77 c8 b2 cc 8c d1 9e 9e 9e e1 e1 e1 cc 6f ea 1d 93 d1 6a cd 2b 28 a4 b2 04 31 af 12 78 9d de 5d 2d 08 8a cb e1 b4 9b 2c 66 83 cd 6a 2c 2b c9 a3 08 0b 5a 4f 8a 78 8b c5 62 2e 35 38 ad 56 80 79 0a a0 Data Ascii: k4W^35o}{NMM)GmMYY nTGt6jha^^^,5keq%%%<x2VZ1<;N:t{srr?~_^=aVE~o1#++awoj+(1x]-,fj,+ZOxb.58Vy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.11	49764	3.217.205.239	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:09 UTC	471	OUT	GET /pages/images/unknown_x4.png HTTP/1.1 Host: rmshg.amplified.training Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; login_token=153a9a8f304880470316f98fd745653f
2024-05-06 16:42:09 UTC	473	IN	HTTP/1.1 200 OK date: Mon, 06 May 2024 16:42:09 GMT content-type: image/png content-length: 5929 server: Apache x-content-type-options: nosniff x-xss-protection: 1; mode=block last-modified: Wed, 23 Mar 2022 16:57:16 GMT etag: "1729-5dae59f2efe20" accept-ranges: bytes cache-control: max-age=31536000, public expires: Tue, 06 May 2025 16:42:09 GMT vary: User-Agent strict-transport-security: max-age=31536000; includeSubDomains; preload; connection: close
2024-05-06 16:42:09 UTC	5929	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 01 40 08 03 00 00 00 53 16 5f 49 00 00 01 14 50 4c 54 45 00 00 00 18 67 b2 18 67 b3 19 67 b3 19 68 b2 19 68 b2 19 67 b3 1a 67 b3 1a 68 b3 19 67 b3 19 67 b2 19 67 b3 19 68 b3 1b 69 b4 1a 69 b6 1a 67 b2 1a 67 b3 19 67 b3 1a 68 b3 1a 67 b3 19 68 b4 1a 68 b3 1c 6e bf 1d 70 c2 19 67 b3 1a 67 b3 1a 67 b3 1a 67 b3 1a 68 b3 1a 67 b3 19 68 b4 19 67 b2 1a 67 b2 1a 68 b3 1c 6c bc 1b 6b b9 1b 6a b7 1b 68 b3 1a 68 b3 1a 68 b4 19 67 b2 19 68 b2 18 67 b2 1a 68 b3 1a 68 b3 1a 68 b2 1a 67 b3 19 67 b3 1b 6a b8 19 67 b3 1a 6b b8 1a 69 b2 f7 76 13 f6 78 14 f7 78 16 f7 79 16 f7 78 16 f7 7a 17 f8 79 17 f8 79 17 f8 79 17 f8 79 17 f6 79 17 f8 7b 18 f6 76 14 f7 77 16 f7 78 15 f9 7b 17 f8 7a 17 f8 79 18 ff 7e 18 ff Data Ascii: PNGIHDR@S_IPLTEggghhgghggghiiggghghhnpgggghghgghlkjhhhghghhhggjgkivxxyxzyyyyy{vwx{zy~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.11	49765	18.173.145.206	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:09 UTC	636	OUT	GET /amplifiedhr/1582601262_mgrshcourse2.png HTTP/1.1 Host: d3j0t7vrtr92dk.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rmshg.amplified.training/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:10 UTC	538	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 389934 Connection: close Date: Mon, 06 May 2024 16:42:11 GMT Last-Modified: Tue, 25 Feb 2020 03:27:40 GMT ETag: "95fd2cb545bde71284fd52423e7de389" x-amz-server-side-encryption: AES256 x-amz-version-id: CajUmgax.EAkabGsUsM9POd_0Rm40Epn Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 1bcde066110a083e8018c44defbfda9e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: pTc9rapWC4V8mqPLJKEwXYuzjeeqjMPj9h6PYBomGBPSY0sYmxs5_Q==
2024-05-06 16:42:10 UTC	14588	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 df 00 00 01 3f 08 06 00 00 00 07 44 c9 da 00 00 20 00 49 44 41 54 78 9c 64 bb f7 92 65 e9 75 e5 f7 3b fe 9a 73 bd bf 37 bd ad cc 72 5d 55 5d 6d d0 68 02 20 d0 20 39 4e 13 8a d0 e8 75 f0 28 0a 85 6c 50 d4 88 13 94 40 10 24 1c 61 da 97 77 e9 33 af f7 ee dc e3 8d fe 68 6a 14 23 7d af b0 bf 58 6b 2f b3 85 fb 8f 36 a3 6c ae cc a3 c7 9f 70 73 fe 16 55 4b 91 8c 29 5c 5c 9e a0 a7 b2 64 f5 1c 6f df be 25 5d ca b1 be de 40 26 c0 f7 5c 8c 95 83 aa ea b4 bb 1d d6 b6 0e 48 c5 22 9e 3d 79 46 2c a1 70 78 eb 08 c7 8d 08 a3 19 e3 91 c1 e5 e5 80 5c 26 46 36 95 60 b6 34 98 ce 1d 1e 3d da 45 15 7c 5c 13 94 b8 86 b1 58 f0 fb 7f 7e 46 ae 9c e1 c1 c3 5d 24 31 c9 55 f3 1a d3 75 29 64 74 62 4a 0c 37 b4 99 cc 26 6c 6d 1e 32 Data Ascii: PNGIHDR?D IDATxdeu;s7r]U]mh 9Nu(lP@$aw3hj#}Xk/6lpsUK)\\do%]@&\H"=yF,px\&F6`4=E\|\X~F]$1Uu)dtbJ7&lm2
2024-05-06 16:42:10 UTC	2371	IN	Data Raw: b1 6c 17 80 1f 7f fa 1e 4f de 7a 40 10 45 d4 eb 0f d8 df 39 66 d0 bf a0 50 cc e2 6d 96 8c 46 83 bb 30 8b ac a0 68 06 61 18 50 2e 56 69 df 9c 22 89 12 e9 64 92 88 98 28 16 50 55 9d c0 0f 51 34 09 45 bb 7b e8 1a d5 32 c3 5e 8f 46 f3 10 45 8e 38 39 f9 9e 42 ed 80 67 cf 1e 32 ea 5f f3 eb 5f 7d 41 a3 7e 9f 9d fd 06 0b 6b 41 e0 c1 7a b9 44 4b 24 b9 ff e8 11 69 d3 e4 ea ea 9a 56 bb 47 7f b2 e4 f9 f3 73 7a 83 01 0f 9f 3e e0 fd f7 df a6 d3 ea 32 1b 77 89 42 9f c5 7c c5 74 e5 93 cf 16 90 62 8f e1 cc 22 0a 6d 1e 1c 6c f1 dd 0f af c9 64 32 58 cb 05 92 ac a0 18 06 97 d7 63 b6 77 f7 a8 e4 35 6e ae 6e 19 8e 06 e4 72 69 8e 0e 0f 09 a3 88 e9 f0 86 d9 d2 62 b9 5a 81 28 50 2b 57 10 25 81 58 08 79 71 72 8d ae 40 be 60 b2 59 39 44 61 00 92 4c 36 ab f3 a3 4f de a6 da d8 65 3e Data Ascii: lOz@E9fPmF0haP.Vi"d(PUQ4E{2^FE89Bg2__}A~kAzDK$iVGsz>2wB\|tb"mld2Xcw5nnribZ(P+W%Xyqr@`Y9DaL6Oe>
2024-05-06 16:42:10 UTC	16384	IN	Data Raw: 81 8f 66 ea cc e7 1d 24 51 e6 fc e2 8a d1 62 04 a1 8f bd f2 39 bf ea 51 db 3d a2 56 4c 90 90 04 52 f9 02 b5 5a 09 c1 5d 20 4a 2a c5 42 1e cf b1 f1 23 87 4c 22 c9 f5 e5 2b dc b5 c5 76 73 8b 74 2e 89 a9 09 6c 57 9a 44 b2 8e 6c e6 a9 d5 77 51 54 91 57 af 5f d0 eb cd 19 8d 6f d1 0c 91 4c 36 4f 32 51 66 39 1f b2 71 37 e4 0b 55 26 93 11 01 12 89 44 8a f5 66 cd fe c1 31 d5 7c 16 d7 f7 38 be 7f 4c bd 56 a5 b9 bd 43 bf 37 a2 92 4b e1 4c ba fc ee 87 1f 40 56 40 8c d8 69 de a3 a8 c5 fc ed 5f fd 57 24 c5 e0 fe a3 77 88 83 80 d5 78 44 bb dd e5 f2 e6 92 c5 6c c6 26 92 78 f2 e4 2d 42 d7 26 8c 03 a6 f3 19 83 de 14 41 b9 4b b0 8e 46 63 62 a0 52 ca 61 3b 36 5b db fb fc f8 27 9f e0 d9 63 c6 93 bb 7e 77 ad 5e a5 52 2c f0 eb cf ff 9a 8d 65 23 4a 0a aa 2c b1 9e f5 18 0f db ac Data Ascii: f$Qb9Q=VLRZ] J*B#L"+vst.lWDlwQTW_oL6O2Qf9q7U&Df1\|8LVC7KL@V@i_W$wxDl&x-B&AKFcbRa;6['c~w^R,e#J,
2024-05-06 16:42:10 UTC	16384	IN	Data Raw: 24 09 6a bb 0f f9 fb ff ee 7f e2 de fd 3b 6c 36 03 e6 c3 01 b6 a9 22 2a 19 85 5c 8e 4a ad c5 fe fe 21 de 7a c1 74 70 ca cb 57 ef 78 fe dd 2b a6 b3 25 7e 92 e1 a7 19 bb ed 0e 71 1a d2 69 14 38 de df e1 ea f2 14 59 d1 51 ec 12 97 97 d7 e4 4c 03 45 13 59 ad d6 1c ec ed 33 19 9d f2 e2 c7 77 18 a6 c1 7a b3 42 37 0c f2 79 91 c5 72 88 20 3b 58 f9 2a d5 5a 83 c8 4f 10 4d 87 8f 97 03 34 59 a3 d5 6c f1 f6 ed 8f bc 7c f9 8a c1 70 86 ac 28 f8 51 c0 78 38 47 10 25 82 34 bc 65 9f 17 34 7c df c5 cf 34 76 db 4d c2 ed 94 df fe e1 39 e7 97 7d d2 34 25 13 14 8a c5 32 87 87 bb c4 69 46 14 cb e4 6d 87 46 ab 86 ac ab 94 cb 75 84 24 40 40 a0 d3 2a b3 58 7a 8c 16 01 9a 9a 52 ab 96 f9 f2 d1 5d 74 35 61 34 f1 68 77 76 f1 5d 8f 20 08 59 6d 5d e2 48 e0 ee 9d 5d f2 8e c9 bf fd db 1f Data Ascii: $j;l6"\J!ztpWx+%~qi8YQLEY3wzB7yr ;XZOM4Yl\|p(Qx8G%4e4\|4vM9}4%2iFmFu$@@*XzR]t5a4hwv] Ym]H]
2024-05-06 16:42:10 UTC	1024	IN	Data Raw: d2 50 13 2a a9 bc 4e e8 7b 24 52 15 ca e5 0a bd 4e 07 db 86 66 7d 8b 6a a5 7a 87 1d 5d d9 94 aa 65 a6 8b 11 31 22 1b ad 26 8a 2c 61 68 79 46 93 11 fd ee 80 6c 36 4f a5 5e a7 db ed b2 5e 5b a4 92 19 aa 95 06 73 d3 e2 f4 ec 8a 72 69 9f 7c a1 49 2c f8 48 42 c8 97 9f ff 19 f7 ee 3d 01 6f c1 e5 d1 37 c4 7a 8d 74 ae 86 b3 9e 21 44 0e 71 14 21 68 3a 91 67 63 d9 33 9a f5 2d 2e 2e 8f 90 84 08 41 48 92 d0 25 ae da d7 e4 b2 79 b2 19 0d 7b ed 70 f8 f0 73 4a e5 02 67 97 1f 49 a5 32 a4 14 89 e9 7c 8e ac dc 39 68 b7 77 37 89 ed 01 ff f7 7f fd 47 4e af 3a c8 82 cf 77 2f 7f e4 d5 db 4b 86 a3 29 eb b5 8b a2 1b 54 37 f7 f8 ec b3 4f d9 d9 ac a0 89 1e b9 7c 83 46 a3 c5 7c 32 24 ad a7 58 bb 2e 8b 59 9f f6 d9 39 a2 94 a2 de da 24 5f c8 70 7a fc 91 58 48 a1 eb 0a d3 61 87 fd c3 Data Ascii: P*N{$RNf}jz]e1"&,ahyFl6O^^[sri\|I,HB=o7zt!Dq!h:gc3-..AH%y{psJgI2\|9hw7GN:w/K)T7O\|F\|2$X.Y9$_pzXHa
2024-05-06 16:42:10 UTC	1024	IN	Data Raw: 62 a3 55 a7 7d 79 86 20 eb 6c ee df 07 df 66 3e 1b 60 24 0b 2c 97 26 8e 13 90 29 24 b9 3c bf e4 87 b7 27 94 ab 4d 36 9a 1b 78 9e c5 68 34 04 59 27 6d 64 88 88 79 f6 93 3f c7 9c 0e 99 cf 26 24 74 83 30 0e 18 8f 86 48 48 a4 52 05 cc e5 1a 5d 4d b0 76 7c 44 c9 e0 b6 7b cb 6c 36 67 d4 ed a2 1a 59 f2 a5 3a 9b ad 0d 26 93 2b d6 5e 4c ad 58 e4 ea ec 0d 93 f9 04 5d 4f e2 7b 36 b7 bd 5b 26 c3 3e cd ed 87 88 84 cc c6 43 72 a5 16 f9 4a 9d e6 e6 0e a1 bb 46 d5 34 ee 3f d8 e3 c3 db d7 d8 8e c8 fe c1 2e 85 7a 93 dd bd 4d 36 9a 1b 54 b2 1a d3 fe 05 11 1a a2 2c 61 af 1d a2 30 c0 0b 7c 3c 41 a2 54 6d 80 10 23 10 91 4f e7 71 57 33 16 b3 01 f9 f2 2e 9b 07 f7 71 3d 1b 21 8c b1 d7 2b ac d5 0a 62 81 52 ad 45 36 57 44 37 92 a4 93 1a 59 43 c6 77 97 fc e1 db df 73 7b db c1 5a cc Data Ascii: bU}y lf>`$,&)$<'M6xh4Y'mdy?&$t0HHR]Mv\|D{l6gY:&+^LX]O{6[&>CrJF4?.zM6T,a0\|<ATm#OqW3.q=!+bRE6WD7YCws{Z
2024-05-06 16:42:10 UTC	16384	IN	Data Raw: b5 2f 51 75 85 a5 75 f7 43 d2 b9 be 45 10 45 52 59 89 ad ed 6d 26 a3 19 b5 fa 2e af 5e ff 40 ad 52 e7 70 6f 8f 8f 47 1f d8 de dc 46 4d e6 98 cd 86 64 52 06 b2 28 91 4d aa 08 d2 9a c9 68 c1 d2 0a 49 27 34 8c 74 0a 59 4f e1 58 53 c6 d3 25 d5 4a 1e 51 0a 11 63 48 a7 93 54 cb 05 74 5d 61 3c 31 69 77 6e d8 6a 6d 92 cb d6 f8 f1 e3 5b a6 a3 11 ba 96 40 d1 ef a2 ec 4c 42 e3 b2 33 a4 5a 6b a1 29 21 f3 b9 85 1f 44 c8 b2 4c 14 82 a4 69 58 f6 8a 74 2a c9 c3 07 0f e9 8f c6 98 d3 01 d7 ed 1b 72 b9 12 95 5a 9d 6f 5f fe 40 b3 5e a3 dd e9 70 72 72 82 9e c8 d3 da de 05 c1 63 3a 5a 10 c6 32 e6 62 c6 6a b5 62 7f 7b 07 d7 75 59 cc 4c 82 28 60 65 bb 04 81 80 65 2d 88 00 4d 53 c8 24 52 e8 09 9d e5 6a 49 bb db c7 f3 22 72 69 95 cd 46 91 5a a9 ca da 75 40 92 e8 8f 46 9c 9e 9d a2 Data Ascii: /QuuCEERYm&.^@RpoGFMdR(MhI'4tYOXS%JQcHTt]a<1iwnjm[@LB3Zk)!DLiXt*rZo_@^prrc:Z2bjb{uYL(`ee-MS$RjI"riFZu@F
2024-05-06 16:42:10 UTC	1024	IN	Data Raw: 7c c0 77 0d 14 2d 45 b5 d2 a4 df 6f 51 6f 6e b0 bb fb 80 8b ab 6b 3e be 7f 85 1c 97 88 49 1a 11 3e b6 b9 e4 0f df be a2 b1 5e a7 58 cc 70 73 79 49 ad 9c 27 5b 48 93 2e 54 79 f6 f0 88 d9 a8 cb 65 ab 83 92 48 72 78 f0 80 58 64 33 ec f7 10 d4 14 0f 0f f6 59 1a 4b 26 93 19 fb fb 07 18 2b 8b cb cb 4b ea 95 12 47 07 87 c4 22 97 6f be fd 03 61 04 1b 6b 5b 74 ba 5d 2c db 43 96 24 cc d5 9c 28 16 43 4d a4 d0 e5 38 5a 26 85 69 dd bb e0 eb 9b 05 ae ce ae 48 68 69 0c cb c0 f3 3d 32 89 04 8d 7a 81 30 0c 78 f5 fa 18 cf 0b 29 15 ab 54 4b 39 fa c3 0e f5 e6 06 b7 77 5d 4e 3f 9c 90 d0 55 d4 64 82 94 a6 b1 be b1 4d 67 d8 63 32 1a 21 48 09 54 31 4e 3c 2e f2 8f ff f8 4b 8e 0e 8e 08 a2 18 7f f3 ff fd 0f 3c cf a7 52 ad 50 28 55 79 fa e8 13 e6 d3 31 11 31 92 09 99 d0 77 a8 54 d6 Data Ascii: \|w-EoQonk>I>^XpsyI'[H.TyeHrxXd3YK&+KG"oak[t],C$(CM8Z&iHhi=2z0x)TK9w]N?UdMgc2!HT1N<.K<RP(Uy11wT
2024-05-06 16:42:10 UTC	16384	IN	Data Raw: db d4 ab 39 92 c9 34 c6 62 4e e7 f6 12 39 1e e0 38 3e 37 ad 21 2b db e5 e1 83 35 96 a6 49 0c 09 55 cf b0 5a 99 68 92 48 18 06 5c 5d b5 a9 ae ed f0 f3 9f ff 84 72 26 81 e9 78 24 d5 90 97 2f 4f 58 18 06 bb db 25 1c cb a3 7d 73 c7 db b3 16 ff e9 7f ff bf 08 ec 29 b3 e9 18 c4 04 d5 e6 0e 99 6c 01 cb 0d d8 d9 de 64 de 3d e7 cd db 53 1a eb 6b b4 6e 6e 28 15 2b e0 0e e8 f7 97 6c 6d 6d 11 8f db ac 56 3e f3 d9 98 c5 ca c4 f2 56 94 f2 69 20 64 73 7d 13 73 d1 65 34 bc 43 4c 96 99 8c 06 5c b5 5a c4 05 89 a4 1e a3 75 3b 23 2e c8 a8 09 1d db 89 d1 eb de a1 a5 63 98 81 4b e4 87 f4 3a 3d bc d0 c6 0d 25 b2 c9 14 a2 08 a6 19 52 2c e5 a9 94 0b 74 fb 13 c2 f0 de 80 74 ef 83 8e 31 9d 2e 20 12 38 38 3a 40 cb 24 f1 1d 8f 4a 56 23 0c 5d 22 21 a2 51 ae 31 5d 58 2c 1c 8f b5 4a 11 Data Ascii: 94bN98>7!+5IUZhH\]r&x$/OX%}s)ld=Sknn(+lmmV>Vi ds}se4CL\Zu;#.cK:=%R,tt1. 88:@$JV#]"!Q1]X,J
2024-05-06 16:42:10 UTC	16384	IN	Data Raw: b7 59 e7 ec e8 2d 6b cb c4 b6 66 f4 bb 7d ee 3f fa 11 d5 7a 99 30 10 10 24 e8 77 2f 99 8d 7b 9c 9e 5d 30 1a 2d 29 37 f6 90 8d c4 75 d2 dd 0d 98 4c 7a cc 17 4b c6 83 0e 89 44 9c f5 7a cd 74 b1 66 67 f7 16 31 55 e4 db af fe c0 b7 4f 5e f3 a3 cf 7f c2 a7 3f fe 8c 52 2e c3 a0 7d c5 cc 0a d8 bb 77 9b 07 f7 b6 78 f2 f5 f7 ac 9d 90 ed 9b db 54 8b 55 ac 95 89 63 af 38 3c 38 66 d0 9b 50 2a 66 11 02 1f 43 8b a8 d4 ab e8 09 83 67 df 7d 4b bb 33 a5 b2 99 a7 58 c8 a3 08 1a e6 72 8a ae 49 2c 2c 8f 95 2d 90 49 e9 2c e7 5d 94 78 02 55 53 09 03 0f cf 0e f9 e6 c9 21 8e e7 f1 c9 67 0f d1 0d 83 52 b9 c9 fe de 0e 72 64 a3 1b 49 b2 f9 2a d3 49 8f f3 93 33 d6 e6 9c 93 e3 23 52 a9 38 c9 74 96 c8 b3 69 b7 2f c8 15 72 78 b6 c7 70 38 62 ed 05 dc b9 79 1f cb 99 11 4a 11 71 2d c6 6c Data Ascii: Y-kf}?z0$w/{]0-)7uLzKDztfg1UO^?R.}wxTUc8<8fPfCg}K3XrI,,-I,]xUS!gRrdII3#R8ti/rxp8byJq-l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.11	49767	18.173.145.206	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:09 UTC	637	OUT	GET /amplifiedhr/1563764025_absencessmall.png HTTP/1.1 Host: d3j0t7vrtr92dk.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rmshg.amplified.training/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:10 UTC	538	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 153332 Connection: close Date: Mon, 06 May 2024 16:42:11 GMT Last-Modified: Mon, 22 Jul 2019 02:53:43 GMT ETag: "361227c756ae1a1b5c10b198a1c13949" x-amz-server-side-encryption: AES256 x-amz-version-id: dqFcRwHhT1_GR0LFanfuPko5b.70lP8. Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 7b4689ed42fe93f37f5557f0c5f5a19c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: icq16--L8nQuKKH8nR1NN-UDHSDJ1PVYFwgPmTJm_gmSp_CNy7YoCQ==
2024-05-06 16:42:10 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 01 40 08 02 00 00 00 eb aa 38 2c 00 00 20 00 49 44 41 54 78 9c bc bd eb 8f 25 49 76 1f 76 4e 44 be ee ab 5e fd ae 7e cc ab 77 76 66 96 dc e5 d2 bb 14 bd c6 92 12 41 43 22 6c d8 12 6c 08 16 20 d9 96 6c 50 9f 0c fb 1f 30 0c d8 fe 62 c3 80 01 d9 90 bf 59 fe 40 58 02 6c 42 96 61 41 90 09 0b 12 45 72 b9 af e1 ce cc ee 4c f7 4c bf aa ab bb ab ba ba ba ea d6 7d e6 2b e2 f8 43 64 c6 3d 19 91 79 bb 7a 76 ed c0 a0 27 2b 6f 66 c4 89 f3 f8 c5 89 13 27 22 f1 0f fe f0 07 88 08 00 44 a4 b5 26 22 00 40 44 22 42 af 00 00 22 99 02 00 00 20 84 10 42 20 62 14 45 79 9e 2f 97 4b 22 0a c3 50 6b ad 94 42 c4 30 0c 89 1a af 98 fa 11 a5 52 aa 2c 4b 22 32 35 58 1a 6c 9d e6 8e 79 5e a9 02 11 cd 7d a7 36 f3 80 f3 af 29 Data Ascii: PNGIHDR@8, IDATx%IvvND^~wvfAC"ll lP0bY@XlBaAErLL}+Cd=yzv'+of'"D&"@D"B" B bEy/K"PkB0R,K"25Xly^}6)
2024-05-06 16:42:10 UTC	575	IN	Data Raw: 4e 8a 45 5f 9f 41 89 73 19 44 41 31 28 45 09 f5 66 fe e6 d2 ab 1d 5a f8 b8 08 f5 fc dd e4 ea 72 87 ce 3e ec 5c 6b ad cd 6e 05 29 10 49 93 a6 30 8a 15 c1 f8 74 81 4c 88 8b 00 00 20 00 49 44 41 54 12 27 17 8e 0f 0e 1f 7d fe 71 99 9f 8a 60 90 eb 7c 34 1c 0e 4b 75 70 3a ce 26 b3 00 c5 64 32 19 6d 8f 94 52 d9 74 3e de 7b 12 48 b8 71 e3 c6 e4 e0 e9 76 28 7f f9 ad 1b bb bb bb 17 77 2e 09 80 38 28 35 f6 f2 02 c7 27 c7 fd 38 29 f3 45 41 3a 88 47 72 3b 58 a6 a9 44 71 f9 d2 b0 3f e8 5d b9 b8 71 ff c1 a3 c3 c3 c3 07 e3 d9 fe c1 51 7f 33 11 f1 60 9e e5 3b 49 92 2e e6 c7 2f ce ee e3 f4 2b 6f bc f5 d3 7f f1 7f d3 fc e4 3b bf f3 6f 89 de 36 46 bd a2 40 01 aa 2c 33 29 a5 10 94 a6 69 18 25 41 6f 00 4a 69 dd 38 4a 9b 43 1e b7 46 7b 5f 93 b2 a9 d0 00 20 a4 b0 5e b6 52 4a 93 Data Ascii: NE_AsDA1(EfZr>\kn)I0tL IDAT'}q`\|4Kup:&d2mRt>{Hqv(w.8(5'8)EA:Gr;XDq?]qQ3`;I./+o;o6F@,3)i%AoJi8JCF{_ ^RJ
2024-05-06 16:42:10 UTC	7866	IN	Data Raw: 5c b9 fe f8 fb 5f 79 f6 77 b7 97 df cb 55 14 ea 79 04 fd 5e 29 40 4e 16 a2 d8 78 f4 a7 fd f9 87 77 df fa cf cf 06 bb b9 dc e9 97 13 4d 85 12 52 49 12 50 ec ce 7e 34 0f 44 2f 7f 70 7d b1 87 d9 e3 cd 6c 7c b6 f1 ad 74 f7 5f 9f f6 77 65 56 2a 5d 2a 90 04 52 52 1c 2b 85 90 92 50 84 e1 25 5d 9e 26 6f 97 94 bd f7 f9 7f f3 e6 c3 7f 28 d2 d3 b0 97 e8 5c a5 22 ee 2d 5e bc 71 fc 93 de f8 e9 cb 1b ff ae 8a 6f 2e b2 83 32 cc cb 08 a0 77 6d 00 ba 97 ce 32 3a 05 b5 4f c5 62 37 7d a8 e6 e9 7c e3 8d c9 e6 07 2a 1a 2a 5d 64 41 a8 86 97 6f de ff 47 a3 bb ff 63 48 7a d0 7f 03 41 2e 06 6f 9e 8d be 12 6c 5c 7f 32 fa 1a 86 19 96 61 9c ce 13 f9 bc 0c b6 d2 e8 e6 a2 d7 df 3e fd 28 3a 7b d2 9b 7e b2 31 fd 68 b4 dc eb 67 63 59 28 a1 89 c4 c6 20 3d 19 e8 12 44 09 54 42 99 95 2f fe Data Ascii: \_ywUy^)@NxwMRIP~4D/p}l\|t_weV]RR+P%]&o(\"-^qo.2wm2:Ob7}\|**]dAoGcHzA.ol\2a>(:{~1hgcY( =DTB/
2024-05-06 16:42:10 UTC	8518	IN	Data Raw: ce ac 2b cc f6 03 33 5c dc ba 88 75 c0 ac 12 af dc c4 a4 90 56 30 b3 ca 57 57 57 4f 9c 3a 15 04 81 8b 50 e7 3a fb d6 d9 b3 18 95 4a 65 77 77 77 7d 7d dd 81 5a 58 6b 7d df 37 c6 54 c2 90 67 dd bc 9c 67 50 5e 4b e5 b4 eb c2 9a 94 52 ee ec ec 9c 3a 75 ea c4 89 13 0e 5c 69 6d 6d 2d cf 73 17 61 2f e4 5d a1 87 5c ea 42 51 03 b9 5f db 22 ef a2 78 b3 cb 65 46 b0 7c b7 43 85 9d 15 6a 1e 94 8c b3 29 72 97 ed f5 7a 9b eb 1b 27 1f 3d a3 ad b1 c6 0a 21 d8 58 02 10 4a 45 51 f4 ce 5b 6f 0d 06 7b 9e e7 21 03 83 25 22 c2 fd 56 81 86 e1 fc f9 f3 8f 9e 3f 4f 44 b9 31 87 9b 24 1e a0 48 79 9d 38 65 5f 1c 56 7e c2 e2 4b 17 19 2f 4e 29 e6 b0 58 8d 4e 5b dc 5d 85 65 93 e1 e1 d2 f9 41 e3 c0 13 cc 8c 0b df 72 4c 20 88 2a 6c e2 ca f4 7d a1 63 4b e4 db 14 08 d1 4c 24 da bd 85 3f b3 Data Ascii: +3\uV0WWWO:P:Jewww}}ZXk}7TggP^KR:u\imm-sa/]\BQ_"xeF\|Cj)rz'=!XJEQ[o{!%"V?OD1$Hy8e_V~K/N)XN[]eArL *l}cKL$?
2024-05-06 16:42:10 UTC	6396	IN	Data Raw: 07 4b 10 dd 88 bd c6 f6 c9 1f 59 3f fe 03 43 d1 11 66 d4 42 9d da 83 b4 70 e3 e1 ae 6b 59 69 97 3f 1c 16 d6 d2 d0 88 53 21 75 c7 f7 17 83 80 c8 1a 93 b1 b1 26 4a 4c 9a 29 21 65 a5 42 35 1f 15 a5 51 34 9a 4c 20 1a 60 4a 8a aa 8d 5a 9b 2a 2a 19 8f 27 93 51 33 49 f3 93 c7 a4 26 98 6b ff d9 ff ee e7 e2 db eb f9 ed 9d 56 b3 3e e9 6f 27 bf fd de ab ff f6 37 6f f5 b6 c6 e7 16 39 b1 1f 3f f9 44 fb d4 d9 c6 e9 da 3c 54 a5 52 b9 65 0d 5c 6f 37 41 aa b0 5a 9d c6 91 8e f6 2a 61 6b ba 3b 4c ad 6c 35 5b 4f 3f f5 cc f5 1b ef 2d 6f ac 0e f6 fa 17 9e 79 b6 da 9a d7 d6 08 00 b6 39 e7 51 88 3a 86 7d 34 0c cf f3 a6 69 46 24 04 52 96 26 47 e7 bb 8b 47 8e ac df be 2c da 15 e9 fb bb bd 41 ba 10 06 a1 48 d3 d4 f7 53 23 04 03 01 22 03 02 12 33 9b 7b b3 98 ca dc 91 65 19 cf 72 39 Data Ascii: KY?CfBpkYi?S!u&JL)!eB5Q4L `JZ*'Q3I&kV>o'7o9?D<TRe\o7AZak;Ll5[O?-oy9Q:}4iF$R&GG,AHS#"3{er9
2024-05-06 16:42:10 UTC	2494	IN	Data Raw: dc 7a e2 af ef f4 9e af dd ad c4 8d 3d a5 c3 14 ee a9 17 9f b9 f6 0f 9e 79 fd 7f ac ab 83 84 e6 ef 7d eb 7f fe aa da 38 3a fb 7e 5d e7 be 3e 64 a9 80 34 93 03 f1 11 ae 43 c8 18 5d 59 27 a3 a2 f4 06 6e 6f fd f0 68 eb 33 50 dc ad e3 b3 26 8c bd 49 95 d6 65 d1 bf 72 eb 9f dd 3b f3 09 d3 3b af aa 5b 41 24 f6 a8 9d 03 3d c8 e2 41 65 63 16 7f 38 da 88 28 17 71 46 aa d8 87 24 1c 68 c8 a1 7f 15 a6 f7 04 1c 32 91 00 02 08 32 22 82 90 2c 54 4f dd 03 5f 22 82 45 34 b2 25 4d 1f ac 84 79 6a 7e 12 95 28 86 ca 39 25 7e dd 92 d5 c6 81 58 c2 5a 48 42 00 80 26 cc ae 31 46 b4 90 d1 45 51 04 6e 16 b3 52 c6 68 0b 9a 10 05 42 ed e2 38 19 9a ca da 58 29 05 ce e7 d3 f9 e1 f8 50 a6 f9 ad fd d9 af fe d6 6f 7f fb f5 b7 09 81 1d 1f 1c cd d6 ce 6e 9a ce 49 bd 26 94 e0 25 38 ab 74 94 Data Ascii: z=y}8:~]>d4C]Y'noh3P&Ier;;[A$=Aec8(qF$h22",TO_"E4%Myj~(9%~XZHB&1FEQnRhB8X)PonI&%8t
2024-05-06 16:42:10 UTC	16384	IN	Data Raw: 5e fc 89 4b 37 bf a4 b3 9b 76 68 6c e5 44 0d b2 28 ca 68 94 96 56 b9 da c7 c5 d0 8d 45 a0 a4 91 8a a2 1e 51 08 a6 c0 58 a9 32 84 2a ce ef 8d b7 7f 70 7c e5 87 14 84 6c 2e b5 8a 03 41 02 01 a5 d6 52 e8 50 81 1f 47 6e 06 be 76 60 15 69 df 1b d6 12 d6 8a f1 de 95 1f f9 ba 2e de ff ca 2f 99 a3 1b 61 78 d9 c3 1d 0f 69 30 e7 bc ca 55 95 2a dc 8a e3 b5 a9 54 b1 0a 2a 1f 97 d4 37 bd 51 94 dd e3 ea 20 0c 36 5e 7f ee 7f 29 36 ae f6 dc ad 38 cc 40 51 21 73 e3 03 a9 a1 28 0f a1 62 05 4a 6a c1 dc 14 83 5e b2 7f f7 dc bf 1b dd fb 57 e7 ef bd 54 a6 4f 24 54 3a 57 41 34 cc cd e5 8d 7b 5f 78 ef 97 ff fd af 7d f8 ff 9c 6e 7e 18 65 a8 ca 29 ac 6d 57 d1 c5 3e 17 00 85 c3 a8 d2 00 e4 3c 44 ca f4 c9 fb c4 dd 1b 23 36 ce 54 88 d2 3a 1d 88 34 f7 a9 a0 34 07 08 4a 2f 8e 70 39 e0 Data Ascii: ^K7vhlD(hVEQX2p\|l.ARPGnv`i./axi0UT*7Q 6^)68@Q!s(bJj^WTO$T:WA4{_x}n~e)mW><D#6T:44J/p9
2024-05-06 16:42:10 UTC	14966	IN	Data Raw: 57 ea 3d 49 7b de 99 16 d2 1a d2 51 fc 38 a5 f3 3e 27 46 68 07 34 3b d5 62 2f 04 62 63 e9 a0 0f 5c bc 1f d2 e7 c3 47 ce 3a 5d 14 5e 7f 9e d6 40 82 a2 c4 a7 68 62 d9 7b f6 f1 ae 68 c2 70 c5 0f d6 4e 94 b4 00 41 95 d8 ca 1b 3b 3a 7e 77 d8 3c 1c 94 85 ca b2 00 3a 88 18 8e d6 2e 5d d8 04 6d d3 9a 76 61 db ba 35 6d 6b cc bc ae ce a6 b3 f9 74 6a d9 bd 7d e7 43 bd 73 fd 37 ff e9 bf 14 a3 6b 87 c7 4f 14 d4 88 f9 45 c3 84 89 3b 88 63 dc ae f3 5a 6b 52 94 65 59 b8 12 3b cb b2 93 e3 63 00 c8 b2 0c 94 5a 1e cd 08 0e 5f 06 6b ad 12 b9 16 f2 e8 f4 74 34 de d3 65 f9 f3 b7 ef 3e 73 f3 c6 73 57 b6 27 8b c5 c3 d3 ca 5b 33 18 0c 66 b3 99 26 3a d8 1e ce 9e 4e b5 14 c6 79 6b 2d b3 27 91 21 21 33 b0 b7 1a 40 13 6c 0d f3 bd ad a1 b2 15 22 7a cf 71 bf 28 02 f4 12 32 7c c8 1f ee Data Ascii: W=I{Q8>'Fh4;b/bc\G:]^@hb{hpNA;:~w<:.]mva5mktj}Cs7kOE;cZkReY;cZ_kt4e>ssW'[3f&:Nyk-'!!3@l"zq(2\|
2024-05-06 16:42:10 UTC	16384	IN	Data Raw: 74 93 7e 27 e9 85 34 4e 71 a4 23 b3 5e 88 08 00 9e 39 88 4e 88 84 d1 7b ef ad 73 9e 05 c0 13 53 4d ae b2 de b3 54 de d5 d6 59 62 0e 88 be f6 dc f5 44 61 ae bc f7 9a 98 93 6e 55 b1 e6 fa b3 7b 4f 0f 1f dc 4b 87 7b de 7b 70 ae 97 64 45 5d 4c 97 65 de df f3 9e 27 93 d3 d1 fe 51 9a c6 cb e5 1c 51 b2 24 3d 3b 3b ad eb 3a 4d 3b 2c e2 ac 55 4a 11 08 21 9e 9c 9e 75 3a 9d fd c3 03 d5 0a 81 d6 88 11 c3 49 b3 72 6e 89 18 a1 72 85 8f 06 c3 a3 af 7d e3 f4 c7 df cf 0b df 31 2a 68 a1 01 04 43 e4 36 44 40 14 85 4a 42 84 0a 05 5a 10 45 91 41 85 14 a1 f7 1e 08 95 48 a4 35 32 16 b6 aa 2a 3b ba f3 5a ff b5 2f 4f 2b 4e 6a d7 ef 76 97 ce 4a ed 8a f9 19 83 e9 0d 07 c3 d1 e8 9d 77 de 59 16 d5 d1 51 0f 40 05 f7 96 b0 6c 02 47 dc e9 74 d2 34 cd f3 3c 1c 8a b9 65 64 d9 c8 19 82 f4 Data Ascii: t~'4Nq#^9N{sSMTYbDanU{OK{{pdE]Le'QQ$=;;:M;,UJ!u:Irnr}1hC6D@JBZEAH52;Z/O+NjvJwYQ@lGt4<ed
2024-05-06 16:42:10 UTC	4490	IN	Data Raw: 18 c1 79 5f 96 a5 fa 38 6f e5 32 44 5a 73 a1 29 51 5a c7 13 1c df e8 0f d2 96 46 4c 08 a3 13 1e 54 1f aa 47 10 45 51 68 ed de 7b 2f dd 76 6c d9 5a 40 c4 46 9d 5e 36 0d 11 99 36 8e 46 ab 08 d6 6e 56 55 a5 9b 7a 2d 8a 5d bb 85 97 ce 86 34 98 88 49 94 c2 50 87 e3 11 7d 13 fc 2f bb ba 32 c6 64 d6 aa a5 9a 96 0f 00 4e 98 d4 25 b1 22 32 82 86 ef f4 de 01 00 6a ac 65 bf 74 dc 0c 00 41 2f ac a7 70 8a 71 99 b1 cc 8c 00 04 a8 a6 19 5a 75 c3 55 d8 c9 c6 36 b0 88 a8 56 71 c1 ee 42 5f 3a 2f 44 7a 44 03 1a 26 2a cf f3 d3 d3 d3 57 af 5e ed 6c ef f8 2e 36 b6 7e a8 05 06 68 5b de 92 00 d0 76 8a c8 c5 8b 17 75 fd 57 55 35 1a 8d ca b2 a4 ce bf 47 4c 8a c1 17 65 2a ad 60 24 bb 45 16 2f f1 b1 7b f2 00 11 7c 87 3f 49 06 76 36 81 de 82 41 8b 96 6f ad 7d fc e5 a3 e7 cf 9f ef 9e Data Ascii: y_8o2DZs)QZFLTGEQh{/vlZ@F^66FnVUz-]4IP}/2dN%"2jetA/pqZuU6VqB_:/DzD&W^l.6~h[vuWU5GLe`$E/{\|?Iv6Ao}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.11	49766	18.173.145.206	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:09 UTC	641	OUT	GET /amplifiedhr/1563760228_ProtectYourAssets.png HTTP/1.1 Host: d3j0t7vrtr92dk.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rmshg.amplified.training/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:10 UTC	538	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 308553 Connection: close Date: Mon, 06 May 2024 16:42:11 GMT Last-Modified: Mon, 22 Jul 2019 01:50:26 GMT ETag: "34f72c173e9341380e317db3ff39e0cb" x-amz-server-side-encryption: AES256 x-amz-version-id: zRNbtVXvhukJk87eAHINCBlOTvLUcsqH Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 8a904a0d16ba1d2d926b70585166d16e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: Lo10VH2U-gatgXz2NjlqeOt15Ot92R6IWoyU2iT3wfMi73-eNHtf0A==
2024-05-06 16:42:10 UTC	15846	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 ad 00 00 01 1e 08 06 00 00 00 39 08 4a ec 00 00 20 00 49 44 41 54 78 9c ac 9d 77 74 1d d5 d9 f5 7f 33 73 7b 2f 92 ae 2c c9 b2 24 4b 72 ef dd 06 db d8 c6 1d 63 63 87 5e 42 27 04 48 80 90 10 20 09 49 20 24 21 05 48 08 9d 04 42 75 c7 bd f7 6e 5c 90 6d d9 96 8b 64 b9 a8 b7 db db cc 7c 7f 88 3b 96 6c 09 de f7 5d df 59 8b b5 c4 a3 d1 cc 3c 67 e6 ec 73 f6 9e fd 1c 0b 9f 7d f6 59 d3 84 09 13 5c 3e 9f 0f 80 40 20 c0 8a 15 2b 10 45 91 a1 43 87 d2 bd 7b 77 00 14 45 e1 cb 2f bf 44 92 24 8a 8b 8b 19 38 70 20 a9 b6 68 d1 22 64 59 26 37 37 97 91 23 47 6a f1 65 cb 96 11 8b c5 70 bb dd 4c 9a 34 49 8b af 5b b7 8e 96 96 16 4c 26 13 37 dc 70 83 16 df b6 6d 1b 35 35 35 88 a2 c8 dc b9 73 b5 f8 81 03 07 38 73 e6 0c 00 37 Data Ascii: PNGIHDR9J IDATxwt3s{/,$Krcc^B'H I $!HBun\md\|;l]Y<gs}Y\>@ +EC{wE/D$8p h"dY&77#GjepL4I[L&7pm555s8s7
2024-05-06 16:42:10 UTC	144	IN	Data Raw: c0 3d ed 22 54 80 0a 48 ca 93 51 b0 eb ef 08 dd 7d 08 37 bd 8a f3 8c 5d 96 35 8d 3c 4d 3e 48 15 78 bc 41 d0 c8 71 a7 95 e2 d2 e4 a2 6b f9 84 32 55 11 92 e2 47 c4 b9 b7 7d c7 0e 92 8d 29 a4 e9 0d 74 9b dd 4c 04 02 80 e4 d8 36 a6 1e fc 1c eb b4 db f0 cc 5e 10 f9 e3 a6 0d 38 0d 15 a4 4d ae 44 10 40 62 99 4c e0 cb 07 51 ac 7e 16 67 6e 15 da 69 2b 50 86 4e 93 22 77 61 cb 98 85 7a df cb c8 13 a7 a0 58 34 9f 5c cf 00 4a 9d 0a 4f 08 34 Data Ascii: ="THQ}7]5<M>HxAqk2UG})tL6^8MD@bLQ~gni+PN"wazX4\JO4
2024-05-06 16:42:10 UTC	969	IN	Data Raw: 32 70 67 5d 4c 62 f5 ef 91 aa 74 f8 8a aa b0 3a 3c 24 1b 34 71 d8 23 08 42 1c f6 28 14 0a 72 73 73 11 04 41 14 92 01 22 e3 14 c5 9e e8 08 85 42 e4 e6 e6 8e 03 69 8f c7 43 4e 4e 0e 32 99 2c 6e 83 ed 74 3a c9 ca ca 42 2a 95 c6 e1 a7 cf e7 13 71 35 16 6f a3 79 5b e1 70 f8 9c b8 aa d1 68 fe 2b f6 c4 fa a6 d1 68 44 ec 89 d2 8c 80 58 7d 3d 1c 0e 8b 89 d3 d1 df 8e e2 6a ec a6 dc ef f7 9f 13 57 9d 4e 27 d9 d9 d9 48 a5 d2 38 9c f4 78 3c a2 cf 51 21 1d 20 f6 2a 1c 8b ab 81 40 00 c9 b7 df 7e 6b 9d 3d 7b 76 52 94 36 b3 5a ad ec db b7 0f 89 44 c2 d4 a9 53 c5 e4 30 af d7 2b aa 0a f3 f3 f3 e3 54 2e 51 3a 2d 35 35 35 ae 59 d9 96 2d 5b 08 85 42 e8 74 ba 38 95 cb ee dd bb 71 bb dd 28 14 0a 96 2f 3f 5b 17 ac ba ba 5a 2c 24 19 ab 2a 3c 72 e4 08 7d 7d 7d 00 ac 58 b1 42 7c 41 Data Ascii: 2pg]Lbt:<$4q#B(rssA"BiCNN2,nt:Bq5oy[ph+hDX}=jWN'H8x<Q! @~k={vR6ZDS0+T.Q:-555Y-[Bt8q(/?[Z,$*<r}}}XB\|A
2024-05-06 16:42:10 UTC	16384	IN	Data Raw: 50 61 d9 88 ec b0 09 fd e2 3c 54 bf ea c6 ec 0a b2 63 f7 3e 72 5a 5f 47 7f c5 0b 54 14 a5 c1 de df e2 b0 38 a8 c9 bd 17 c9 fe bf a3 29 bf 96 85 4b 23 73 d2 3b d4 ce a9 57 af c3 97 3c 15 fb bc c7 59 3a b7 0c d9 48 2d 48 13 d8 7e 7c 18 9b d5 89 36 35 97 35 0b cb a0 6b 13 14 ac 62 cf c9 11 86 5b 0e a0 92 c2 a5 31 f5 f9 8e 1e 3d 4a 4f 4f 0f 00 17 5f 7c b1 b8 c1 3c 75 ea 14 2d 2d 2d a2 42 39 7a 3e de db db 4b 43 43 03 10 a1 04 a3 b4 99 d9 6c 66 ff fe fd 48 a5 52 4a 4b 4b 45 e5 b2 db ed 16 eb f6 15 16 16 8a ca 65 41 10 d8 b4 69 13 82 10 a9 c3 17 ab 1e 8c 62 8f c1 60 88 53 2e ef dc b9 13 af d7 8b 52 a9 8c 6b 91 b4 7f ff 7e ec 76 fb 38 ec 89 c5 d5 55 ab 56 89 11 d6 c9 93 27 c5 e6 90 4b 97 2e 15 17 aa ce ce 4e f1 08 66 fe fc f9 e2 99 d3 d0 d0 10 35 35 35 48 24 12 Data Ascii: Pa<Tc>rZ_GT8)K#s;W<Y:H-H~\|655kb[1=JOO_\|<u---B9z>KCClfHRJKKEeAib`S.Rk~v8UV'K.Nf555H$
2024-05-06 16:42:10 UTC	16384	IN	Data Raw: b1 61 3b e1 a4 99 d8 b4 3e c2 5e 37 a1 e9 d7 a0 5d fe 20 fa 2b 5f a7 ce 78 16 fd 61 23 f4 56 23 05 9c f0 fb 2e 84 b8 71 18 8a 5e 03 02 b8 d2 8f 95 bc f9 fb 02 7c 47 3b 88 4e bd 8c 88 31 19 c3 59 73 e9 bb 56 cf c8 88 13 cb 8a df e2 58 76 2f 81 6f be 40 15 1a 21 3a f3 26 06 3a 3a 08 3c 3f 09 ab 0b 86 2e 39 9f 81 84 c5 68 86 1b 20 1c 24 68 ca 44 35 5c 8f b9 cc cd 0f 33 1f a5 6f cd 5f 49 ea dc 43 d4 3b 44 24 1c 64 78 e2 a5 cc 4c 55 92 f1 ca 52 ec 8f 64 e3 31 67 22 a4 cd 45 88 84 61 7c 3e 86 a7 af 44 a3 37 c2 b2 87 b1 0f 04 a8 da f5 21 3a ab 95 a3 45 47 d1 19 62 fb 89 3e 5f 10 9f 36 09 53 72 16 79 7b 6f c3 b5 f7 5f e8 ce f9 39 d6 67 46 38 30 fb ef 14 a5 ff 1a 21 63 0a de 6f 5f 67 e4 f3 7b 00 70 9d f5 17 5c ea 34 a4 f6 1f 10 f3 96 41 ac a0 18 a9 36 03 c9 91 1e Data Ascii: a;>^7] +_xa#V#.q^\|G;N1YsVXv/o@!:&::<?.9h $hD5\3o_IC;D$dxLURd1g"Ea\|>D7!:EGb>_6Sry{o_9gF80!co_g{p\4A6
2024-05-06 16:42:10 UTC	519	IN	Data Raw: b8 f9 21 dc f7 ed c6 65 30 23 af 39 4b 78 52 2a 3e 8f 48 ee f0 61 78 3c 1e 72 73 73 19 d4 7f 10 4f 3c f9 30 25 e5 d5 28 e4 52 44 41 02 a2 88 5f f4 e3 f5 ba c9 48 4d 65 6f e1 41 9e 5e b0 00 b5 46 cd 90 a1 c3 79 e2 c9 05 28 14 52 14 72 09 3b 76 ec a1 a1 a1 9e 99 b3 a7 e1 76 fa 39 56 74 9c 11 43 87 22 95 f8 a8 0b 8f 24 e6 fb 3b d0 9e f8 81 ae cc d9 c8 5c 1d 5c 69 d3 f2 c9 b5 98 8b d6 d2 38 77 19 dd 63 e6 a2 6f ee c6 57 bc 1e 85 bd 01 51 1f 8f 33 7a 10 82 2a 12 b9 52 8e 37 5c 83 d0 e9 c3 b8 ec 06 9c bb 36 21 1f 76 2d 9a ce 12 44 87 85 d2 17 1d 28 d5 a0 a9 aa 46 72 e8 23 3c e3 df 01 19 88 6b 1e 45 1b 16 87 63 c4 5f f1 f8 64 a8 dc ad b8 7d a0 5e 3e 13 c3 c4 e7 70 55 14 e2 6f ad 45 3d eb 5d ca 89 21 62 eb 93 68 87 dc 49 7b 8f 41 74 9f 3c 45 45 75 0d 4e 97 1b b7 Data Ascii: !e0#9KxR>Hax<rssO<0%(RDA_HMeoA^Fy(Rr;vv9VtC"$;\\i8wcoWQ3zR7\6!v-D(Fr#<kEc_d}^>pUoE=]!bhI{At<EEuN
2024-05-06 16:42:10 UTC	1418	IN	Data Raw: 00 d1 47 d7 23 d9 f5 3a 8a 86 a3 68 e5 e0 96 6a b0 49 4c c8 06 df 41 eb b8 57 91 a9 40 68 6e a7 cb 64 c6 a0 04 b1 ba 0e e1 c0 c7 e8 8a 57 42 59 09 06 29 d8 e2 93 f1 0e 9f 8f d0 74 16 75 d1 f7 74 ce f8 0a d7 e8 bf 20 34 74 20 b3 9c c6 6f 29 c6 15 31 80 cc be 03 a9 6e b0 f0 e5 c7 1f d2 69 b3 a2 56 69 48 cf 4c e7 be 7b ee 04 60 da 8c 39 74 5b bb 18 35 6a 14 1e 8f 87 75 6b d6 71 c7 5d b7 f3 dc c2 67 f8 e2 ab ef 78 f7 ad b7 99 3e 63 3a 3a 9d 8e 43 87 0e e1 f7 8b 6c da bc 0e 09 50 5c 56 81 46 a3 a1 ad cd 42 bf 3e 01 26 dc b9 37 cf a3 ad ad 8d e1 23 46 e0 76 b9 c8 db bc 99 3b ef bb 9f 47 1f 7b 88 f2 e2 52 34 5a 1d 5a 8d 02 a9 5c c1 c1 03 87 69 6a 6e c4 ed 70 d3 7f 60 7f d2 d3 7a d2 dd 6d a3 5b 16 8e ac bb 0e 7d f9 46 ba fa dc 05 72 55 80 48 74 ed 23 a8 93 b2 71 Data Ascii: G#:hjILAW@hndWBY)tut 4t o)1niViHL{`9t[5jukq]gx>c::ClP\VFB>&7#Fv;G{R4ZZ\ijnp`zm[}FrUHt#q
2024-05-06 16:42:10 UTC	16384	IN	Data Raw: c2 56 03 b1 19 d9 64 c4 85 31 a0 5f 5f 1a 9b 5b d8 b6 75 0b 95 d5 35 64 a4 67 92 9c 10 fb 3b 5c 55 2a 95 57 c4 55 b7 db 4d ef de bd 43 f2 1d 3b 76 84 e8 4b 82 d1 7d 5a ad 96 fd fb f7 5f e6 12 0c ca 4f 9e 3c c9 a9 53 a7 42 2e c1 a0 bc ac ac 8c a3 47 8f 52 59 59 c9 f0 e1 c3 43 e3 37 35 35 51 58 58 48 45 45 05 d9 d9 d9 84 85 85 a1 d3 e9 b0 db ed 21 5c 4d 4b 4b 0b e1 aa 28 8a 6c db b6 8d aa aa aa cb 70 55 a3 d1 b0 71 e3 46 aa ab ab d1 eb f5 97 ed 25 9b 37 6f a6 ba ba 1a 51 14 c9 ca ca ba 1c 6f 2b 2a b0 5a ad f4 eb d7 2f 88 f5 ce cb ec d1 2b 51 88 04 77 ba 2b b5 3f 92 5f 69 ac ab f5 bf da dc 57 92 5f 6a b9 fd d1 78 ff 6d ee ab d5 f1 fa a3 66 b7 bb f1 89 3e 86 e4 0c c1 60 36 a2 d1 68 68 6a 68 a2 b1 bd 1b 73 f3 3e 5a 94 29 28 5f a8 81 b7 0d 50 b9 9b aa 59 db 69 Data Ascii: Vd1__[u5dg;\UWUMC;vK}Z_O<SB.GRYYC755QXXHEE!\MKK(lpUqF%7oQo+Z/+Qw+?_iW_jxmf>`6hhjhs>Z)(_PYi
2024-05-06 16:42:10 UTC	15990	IN	Data Raw: 20 19 bb 90 e4 96 bd d8 3f ba 0a 09 90 f4 c8 16 76 0f fb 8c 1d 31 37 52 ae 2e 22 f9 e6 0f 49 f9 58 44 35 f4 66 ba 0e 9d e6 d4 be cd f4 cf cb 25 23 ab 77 14 6e 51 a9 14 78 fd 5e 64 19 23 09 7c bb 88 c0 3b 37 e3 76 76 43 e6 38 ac 18 11 cf 6e 43 a2 0a 9f 4d 0a 34 4d f8 1b 8d aa 5c 12 e4 3e 4c 35 61 b8 4e 35 f5 69 9c f7 9f c1 6d ef 44 61 ab 60 eb e6 2d 18 12 52 c8 ee 9d 45 42 52 22 0e 97 83 63 87 8f 30 6f ee 85 5c 45 27 10 27 71 62 68 a9 c7 dd af 30 ea b0 9a 3b ba a9 a8 3d 47 bb d5 86 db 19 7e 21 54 02 71 1f 8a 34 d5 b5 a1 ee 65 66 e0 a1 25 74 ed fd 1e 08 b3 0a 5b 0c 83 d9 99 fe 18 bb fa bd 10 75 58 00 34 1e c4 ea 72 31 65 ea 15 00 4c 9f 7e 25 c1 40 90 91 23 47 d2 d2 d2 c2 b1 a3 47 a9 a9 3d 1b 75 58 87 8e 1e a7 4f bf 1c a6 cf 9e c9 de bd a5 68 b4 da a8 c3 72 Data Ascii: ?v17R."IXD5f%#wnQx^d#\|;7vvC8nCM4M\>L5aN5imDa`-REBR"c0o\E''qbh0;=G~!Tq4ef%t[uX4r1eL~%@#GG=uXOhr
2024-05-06 16:42:10 UTC	16384	IN	Data Raw: 8e 7d 80 66 ff 93 f8 2d 4d b4 98 1c f8 06 5d 8a 90 7f de 75 c4 90 8e d9 ee 64 e8 ce 1b 10 65 e4 10 12 c9 80 f8 f4 fc bf af 30 61 a9 8a b0 44 82 a6 f2 6b dc 6d 95 a8 d6 9c c2 70 fd 27 11 9f bf 5d 3f d1 d9 27 45 a8 f9 01 43 b0 0b 3a ab 10 06 cf 46 73 74 0d 96 80 9a a6 89 4f 21 05 f8 78 1e ae a6 ea ff 8d 12 14 49 10 82 5e c2 88 e2 f7 a3 54 e1 e0 a5 04 83 7d 4c 7f 5f 8f d3 de 83 59 92 04 92 44 18 be 1c 41 10 68 17 e5 e0 3b b7 17 e9 c9 5f 11 03 da 17 1c a8 57 95 d2 71 a4 04 7b 5d 31 ae 60 fc eb d6 d5 9d a3 51 94 87 5d 91 c6 79 ff 63 d4 40 cd c8 3f 50 36 ee 15 54 41 0b a2 c3 6f 42 e5 2f 00 78 25 3a 2c 3d 1d 58 1b ca 49 00 14 8b 9e 23 f1 86 55 58 ff 70 0a bb dd 8a b5 a1 94 04 4d e4 a4 dc de 6d 25 35 c5 48 7d 6d 0d 65 27 8f 91 9c d1 6f 69 36 f8 f5 51 24 76 f4 a2 Data Ascii: }f-M]ude0aDkmp']?'EC:FstO!xI^T}L_YDAh;_Wq{]1`Q]yc@?P6TAoB/x%:,=XI#UXpMm%5H}me'oi6Q$v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.11	49768	18.173.145.206	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:09 UTC	630	OUT	GET /images/empty_states/noCatalog.svg HTTP/1.1 Host: d3j0t7vrtr92dk.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rmshg.amplified.training/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:10 UTC	541	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 10652 Connection: close Date: Mon, 06 May 2024 16:42:11 GMT Last-Modified: Wed, 30 Mar 2022 08:02:20 GMT ETag: "73f66b9cb7c2fb35fd6e29e5116faa00" x-amz-server-side-encryption: AES256 x-amz-version-id: g95T1tFLeLGpGg7q_x_ezZrs..UOBBnC Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 1bcde066110a083e8018c44defbfda9e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: U7KkydRwq-VHncmUn5_t5YabDH9wy-2o_5wMalAtQOgzJKEv48XtNA==
2024-05-06 16:42:10 UTC	10652	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 77 69 64 74 68 3d 22 32 35 37 2e 31 32 34 22 20 68 65 69 67 68 74 3d 22 32 31 39 2e 30 36 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 35 37 2e 31 32 34 20 32 31 39 2e 30 36 38 22 3e 0d 0a 20 20 3c 64 65 66 73 3e 0d 0a 20 20 20 20 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 22 20 79 31 3d 22 30 2e 35 22 20 78 32 3d 22 31 22 20 79 32 3d 22 30 2e 35 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 6f 62 6a 65 63 74 42 6f 75 6e 64 69 6e 67 42 6f Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="257.124" height="219.068" viewBox="0 0 257.124 219.068"> <defs> <linearGradient id="linear-gradient" y1="0.5" x2="1" y2="0.5" gradientUnits="objectBoundingBo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.11	49773	18.173.145.84	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:10 UTC	410	OUT	GET /amplifiedhr/1561165002_AdobeStock_106126834%20%281%29.png HTTP/1.1 Host: d3j0t7vrtr92dk.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:10 UTC	538	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 114176 Connection: close Date: Mon, 06 May 2024 16:42:11 GMT Last-Modified: Sat, 22 Jun 2019 00:56:41 GMT ETag: "67d07b630c99be0aba697ee8b22ce232" x-amz-server-side-encryption: AES256 x-amz-version-id: ee8.ctkgPlwmXE1mc2OwirGjX6nAUyCS Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 35fc94560da4941563352a51b45ac862.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: x_8JtJKE6w_kB-YD5nRZx71gSlfA5h2-NBOK-krlNJoCygMCLryDYQ==
2024-05-06 16:42:10 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 00 db 08 02 00 00 00 3a 7c d5 18 00 00 20 00 49 44 41 54 78 9c ec bd 67 9c 54 45 f6 3f 5c e1 86 0e 93 7a 12 03 c3 10 04 64 c8 ce 02 22 2e 28 bb 28 19 49 06 94 a8 04 01 61 41 82 2e 20 41 44 54 04 09 0a 18 10 50 51 50 14 24 88 b8 80 92 d6 55 94 2c 02 12 86 34 30 4c 9e e9 e9 ee 9b aa ea 79 71 77 e7 d7 de d4 3d 80 ae ff 7d 38 2f fa 53 f7 d4 a9 53 a7 4e 55 7d eb 54 dd ea 6e 58 bd 7a 75 70 8b 6e d1 ff 3b 04 21 fc fd f5 e8 c2 d1 14 09 97 61 8c 85 3f da 15 af 2c df 59 c6 b2 54 b8 fd d1 58 15 3d 33 7a 53 7f 8b b2 06 62 8c dd f4 82 96 59 66 a6 25 07 42 a8 f3 af 5b 09 77 83 de 31 74 f6 75 88 45 a9 e1 a6 98 f1 1b 69 70 2e 6b 99 6b 57 a4 52 66 fc 76 9a ff e0 f4 3b 37 e4 fa d0 d9 f0 e8 80 c2 86 69 e9 d0 Data Ascii: PNGIHDR:\| IDATxgTE?\zd".((IaA. ADTPQP$U,40Lyqw=}8/SSNU}TnXzupn;!a?,YTX=3zSbYf%B[w1tuEip.kkWRfv;7i
2024-05-06 16:42:10 UTC	16384	IN	Data Raw: e6 7c f7 dd 77 6b d7 ae ad 52 a5 4a 76 76 f6 f4 e9 d3 27 4f 9e fc cd 37 df 9c 39 73 a6 a0 a0 20 18 0c 96 97 97 9f 38 71 e2 e8 d1 a3 ef bf ff fe e9 d3 a7 13 12 35 d1 2c 3f 00 00 20 00 49 44 41 54 12 ea d5 ab 97 9f 9f 8f 10 6a d8 b0 e1 ec d9 b3 fb f7 ef 3f 7b f6 6c 9f cf 37 63 c6 8c 73 e7 ce b9 dd ee ea d5 ab 2f 5b b6 ac 7b f7 ee 89 89 89 2e 97 cb ed 76 4f 9c 38 f1 2f 7f f9 8b fe 3a d4 60 aa df ef ef db b7 6f 6a 6a 6a 5e 5e de ca 95 2b 07 0e 1c e8 72 b9 76 ef de 3d 78 f0 e0 37 df 7c 53 3f 35 f2 78 3c aa aa 72 1c 07 21 14 45 f1 cc 99 33 a7 4e 9d b2 6c 78 f8 50 d4 bf 62 83 10 6a d3 a6 cd 27 9f 7c 32 67 ce 9c 3b ee b8 e3 f5 d7 5f a7 94 be f1 c6 1b c3 86 0d f3 78 3c ab 57 af be fb ee bb 79 9e 3f 77 ee dc f1 e3 c7 ed fc 69 18 e1 9d 3b 77 7e e8 a1 87 1a 37 6e 2c Data Ascii: \|wkRJvv'O79s 8q5,? IDATj?{l7cs/[{.vO8/:`ojjj^^+rv=x7\|S?5x<r!E3NlxPbj'\|2g;_x<Wy?wi;w~7n,
2024-05-06 16:42:10 UTC	1567	IN	Data Raw: eb d7 af c3 c2 c2 1c 0e c7 ba 75 eb 76 ed da 75 ff fe 7d c5 b2 6a c1 82 05 00 80 e5 cb 97 6b 34 9a e2 e2 e2 aa f8 23 8a e2 57 5f 7d b5 7d fb f6 ec ec ec 9b 37 6f 7e fd f5 d7 56 ab 95 e7 f9 9c 9c 9c 35 6b d6 d4 af 5f 7f d3 a6 4d 2d c4 88 4e 84 00 00 20 00 49 44 41 54 5a b4 50 6e 09 2a 17 c4 77 ed da 35 71 e2 c4 ad 5b b7 42 08 4d 26 53 52 52 d2 c1 83 07 5b b6 6c 39 7d fa 74 00 00 c3 30 55 6d 06 00 80 b9 73 e7 36 68 d0 40 f1 92 3c 7e fc f8 e8 e8 e8 bb 77 ef ee df bf 3f 26 26 c6 64 32 7d fd f5 d7 8b 16 2d 2a 2d 2d bd 72 e5 4a bb 76 ed fc fc fc 6a d4 a8 51 58 58 f8 1f e1 d5 e8 d1 a3 fd fc fc be fb ee bb fe fd fb 67 66 66 0e 1b 36 6c dc b8 71 73 e6 cc 01 00 94 94 94 a4 a6 a6 76 ec d8 51 ab d5 9e 3b 77 ae 77 ef de ca d7 57 86 61 ae 5d bb 76 ff fe 7d 50 b5 98 38 Data Ascii: uvu}jk4#W_}}7o~V5k_M-N IDATZPnw5q[BM&SRR[l9}t0Ums6h@<~w?&&d2}---rJvjQXXgff6lqsvQ;wwWa]v}P8
2024-05-06 16:42:10 UTC	16384	IN	Data Raw: d2 a4 f2 f2 f2 b1 63 c7 e6 e6 e6 c6 c7 c7 5f bb 76 ad 79 f3 e6 4d 9b 36 bd 7f ff be a2 90 ce 9c 39 b3 4f 9f 3e b7 6e dd aa 7e 0a de bf 7f ff e1 c3 87 7e 7e 7e db b6 6d 0b 09 09 51 ab d5 fd fa f5 bb 75 eb 96 e2 ca 2e 36 36 b6 53 a7 4e bb 76 ed 1a 38 70 20 21 e4 f2 e5 cb b3 67 cf ae 51 a3 c6 ba 75 eb 1e 3d 7a d4 a5 4b 97 93 27 4f 2e 5d ba f4 c0 81 03 b7 6e dd 1a 33 66 0c 45 51 69 69 69 15 53 bf 5b b7 6e 5d bb 76 8d 8b 8b db b2 65 4b 93 26 4d 62 62 62 b6 6d db d6 b7 6f df 07 0f 1e 2c 59 b2 e4 f2 e5 cb bd 7b f7 1e 31 62 c4 c4 89 13 25 49 5a b9 72 e5 b2 65 cb 14 47 54 16 8b e5 f5 eb d7 00 80 8a e8 56 e4 bf e1 8d 69 b7 44 c5 c0 55 a3 9f 82 aa cd cf 5d 47 cd ad cd 4a db 71 03 cf 2a d5 4f 00 37 3a 3d 4f d2 2b 40 84 d8 37 a8 2e c3 30 36 b3 59 70 3a 9c 36 8b d5 6a Data Ascii: c_vyM69O>n~~~~mQu.66SNv8p !gQu=zK'O.]n3fEQiiiS[n]veK&Mbbbmo,Y{1b%IZreGTViDU]GJq*O7:=O+@7.06Yp:6j
2024-05-06 16:42:10 UTC	1024	IN	Data Raw: 60 2a 6c 4e 15 45 48 49 08 11 06 62 6e 8f b4 0d cc 14 69 da 00 80 24 02 42 5d 81 60 7e 71 87 da 43 95 87 b6 ec 6c a8 af 37 89 cb 9b 9d e7 71 c5 5d 2e 97 cb 63 bb b3 72 a9 8a 54 8a 41 08 00 4c 98 c2 0d 5d f5 07 b8 6d 02 c6 12 00 14 86 30 70 6e 6b 7e bf e0 b6 15 0d 21 84 a8 e6 96 12 11 45 45 36 b6 2d 83 db 16 21 14 1d f5 66 47 00 50 94 9f 57 99 2a 10 6e eb 3f 12 36 d5 d0 94 2c d5 04 29 b5 03 84 50 20 10 78 f7 dd 77 4f 3a e9 24 42 88 10 c2 11 d3 08 21 47 f4 00 80 61 18 3e 9f 2f 03 65 07 2c cb 72 04 d6 9e 3d 7b 2a 2a 2a ee be fb 6e 27 58 fe 88 11 23 5e 7b ed 35 55 55 9b 30 1d 34 47 cc 35 9f 00 e7 dc 11 91 b7 df 7e 7b 8b 91 3b 43 b2 2c eb cd 37 df 7c fa e9 a7 9b 66 e1 f1 78 9a 62 2f a4 84 44 22 a1 69 5a 3a 84 70 38 5c 5d 5d 5d 5b 5b 1b 0a 85 8a 8b 8b bb 75 eb Data Ascii: `lNEHIbni$B]`~qCl7q].crTAL]m0pnk~!EE6-!fGPWn?6,)P xwO:$B!Ga>/e,r={***n'X#^{5UU04G5~{;C,7\|fxb/D"iZ:p8\]]][[u
2024-05-06 16:42:10 UTC	10665	IN	Data Raw: 42 8d 8d 8d bb 77 ef 46 08 95 97 97 ab aa 7a d2 49 27 9d 7c f2 c9 ce e0 e3 f1 78 22 91 b8 e7 9e 7b 9c f0 a1 00 70 e4 c8 91 55 ab 56 35 95 df 7a eb ad da da da b7 de 7a 6b f8 f0 e1 3b 76 ec a8 ae ae 9e 31 63 c6 3b ef bc e3 20 b8 dd ee b9 73 e7 6e dd ba f5 bc f3 ce cb cf cf 0f 85 42 9b 36 6d 9a 3b 77 ee 89 27 9e 38 66 cc 98 91 23 47 36 75 24 a5 cc ca ca 3a e3 8c 33 22 91 48 e7 ce 9d 11 42 07 0e 1c 70 36 c3 ef f7 d7 d7 d7 3b 39 ae 96 2f 5f 3e 65 ca 14 a7 7e e1 c2 85 8b 16 2d 02 80 2f bf fc f2 85 17 5e 28 29 29 89 c5 62 0f 3f fc f0 f7 df 7f 7f c1 05 17 ec dc b9 73 ea d4 a9 e3 c6 8d 63 8c 5d 7e f9 e5 fd fb f7 3f 78 f0 60 49 49 09 e7 fc ae bb ee 7a f1 c5 17 0f 1d 3a a4 28 0a 00 e4 e5 e5 3d f7 dc 73 1b 36 6c 78 e2 89 27 72 73 73 93 77 30 1d 20 84 6a 6b 6b 6d db Data Ascii: BwFzI'\|x"{pUV5zzk;v1c; snB6m;w'8f#G6u$:3"HBp6;9/_>e~-/^())b?sc]~?x`IIz:(=s6lx'rssw0 jkkm
2024-05-06 16:42:10 UTC	16384	IN	Data Raw: 62 62 62 99 99 7a cd 9a 35 0f 1c 38 70 ed da b5 f3 e7 cf af 5e bd 3a 23 23 23 29 29 c9 c7 c7 a7 63 c7 8e c1 c1 c1 63 c7 8e 1d 33 66 cc f3 e7 cf 11 42 f5 ea d5 db b7 6f 1f 17 b9 0e 19 32 c4 d9 d9 f9 9f 7f fe e9 df bf 3f c6 38 24 24 84 e7 14 ff e4 17 f9 f8 f8 ac 5e bd ba 55 ab 56 3f fd f4 53 cf 9e 3d 8b 8a 8a e2 e3 e3 fb f4 e9 c3 69 de 7b f7 ee 71 31 74 db b6 6d 65 59 2e 2d 2d b5 b7 b7 bf 7e fd fa 90 21 43 3e 59 61 e5 91 61 8c c9 b2 dc b9 73 e7 ed db b7 c7 c5 c5 e9 74 3a 67 67 67 3f 3f 3f 37 37 37 be bd 8b 8b 8b 1f 3d 7a d4 a8 51 a3 9d 3b 77 d6 ad 5b b7 4d 9b 36 92 24 bd 7f ff be 53 a7 4e 1f f5 dd 08 41 08 11 42 a1 a1 a1 a9 a9 a9 cf 9e 3d 2b df 62 cb 96 2d 23 22 22 24 49 2a 2d 2d 2d 2a 2a 2a 2d 2d d5 68 34 51 51 51 6e 6e 6e 09 09 09 dc 33 28 36 36 36 28 28 Data Ascii: bbbz58p^:###))cc3fBo2?8$$^UV?S=i{q1tmeY.--~!C>Yaast:ggg???777=zQ;w[M6$SNAB=+b-#""$I---**--h4QQQnnn3(666((
2024-05-06 16:42:10 UTC	1024	IN	Data Raw: 7c 38 75 ea d4 41 83 06 7d fe f9 e7 92 24 cd 9e 3d fb d2 a5 4b ff 8b 76 06 00 50 22 44 ca 5a 6b 32 99 d2 d3 d3 af 5e bd 1a 19 19 c9 30 8c c5 62 e9 d0 a1 03 bd 2c 35 35 55 ab d5 b2 2c 5b d5 07 fd df 56 ad d3 e9 d4 6a 75 fd fa f5 c7 8f 1f df a4 49 93 43 87 0e a5 a5 a5 85 86 86 7e f4 d1 47 91 91 91 29 29 29 56 ab 95 e7 f9 6a 78 55 10 c2 6d db b6 0d 19 32 a4 a0 a0 60 e3 c6 8d 23 47 8e 3c 71 e2 84 bb bb 7b 6e 6e 6e c3 86 0d 19 86 b9 70 e1 82 9f 9f df c4 89 13 cb cb cb 1f 3f 7e ec ee ee 4e 17 46 34 b2 c2 62 b1 78 78 78 98 4c a6 83 07 0f 8e 19 33 86 22 43 61 8c 2b b5 73 ad 42 b7 4f f6 ef df bf 68 d1 a2 23 47 8e 64 65 65 1d 3e 7c f8 c0 81 03 c9 c9 c9 34 66 83 a6 db c4 c6 c6 ae 59 b3 c6 6c 36 db 6c b6 76 ed da d1 08 f7 37 ad 2d aa 1d 0f 0e 0e 7e fc f8 31 f5 4d 35 Data Ascii: \|8uA}$=KvP"DZk2^0b,55U,[VjuIC~G)))VjxUm2`#G<q{nnnp?~NF4bxxxL3"Ca+sBOh#Gdee>\|4fYl6lv7-~1M5
2024-05-06 16:42:10 UTC	16384	IN	Data Raw: c6 73 e7 ce 69 34 9a cf 3e fb ac 75 eb d6 94 a6 87 c2 0c d5 7a 0b 95 3f 5f be 7c 29 08 02 e5 fa b9 75 eb d6 ae 5d bb b6 6e dd fa fc f9 f3 5d bb 76 7d ff fd f7 23 47 8e 7c f2 e4 c9 b5 6b d7 d6 ae 5d 7b fe fc f9 d1 a3 47 ab d5 ea ae 5d bb 56 65 ad ad 59 66 55 7f 34 21 84 e3 b8 16 2d 5a d0 3e 39 7d fa f4 e9 d3 a7 f7 ec d9 83 10 6a d6 ac d9 e2 c5 8b db b4 69 d3 ab 57 af b8 b8 b8 5e bd 7a f1 3c 1f 12 12 12 17 17 77 f0 e0 41 fa 18 52 f2 d9 d0 d0 50 97 cb a5 28 4a 4d b6 c3 da f4 35 c9 2b 29 ad ef ef ef d6 b0 7d 7d 41 cc 4e 7f e1 70 0a b2 0c 30 ab 52 a9 74 2c ab 46 00 f0 1a 2d af 51 f3 bc 9a e5 d5 0c a7 42 98 01 44 96 9d 0e cc b0 f6 b2 62 56 a3 07 00 c8 82 0b 02 a0 88 02 a3 d5 02 8c 6d 05 59 5a a3 bb ce 2f 10 33 2c 91 24 86 61 38 ad 8e 37 e8 21 90 01 91 b5 6e 6e Data Ascii: si4>uz?_\|)u]n]v}#G\|k]{G]VeYfU4!-Z>9}jiW^z<wARP(JM5+)}}ANp0Rt,F-QBDbVmYZ/3,$a87!nn
2024-05-06 16:42:10 UTC	2208	IN	Data Raw: af 5f bf e8 e8 68 f6 08 f6 ed db d7 b2 65 4b 9e e7 77 ee dc d9 a3 47 0f 26 9d 59 13 9f 7e fa 29 c3 35 9c 34 69 92 8f 8f cf 81 03 07 76 ef de fd f9 e7 9f 77 ec d8 71 ef de bd 17 2e 5c 38 70 e0 40 4c 4c cc c8 91 23 05 41 80 10 fa fb fb 1b 8d 46 77 77 f7 e2 e2 62 84 10 23 f6 3d 73 e6 cc e3 c7 8f 59 98 5c 25 ed e1 b5 2f 36 5b de 2d 59 b2 a4 5b b7 6e d7 ae 5d db b1 63 47 8d 1a 35 d8 f2 e2 b7 df 7e db b1 63 c7 d7 5f 7f ed 74 3a 93 93 93 f5 7a fd e7 9f 7f 9e 93 93 c3 71 5c f9 16 4b d5 3a e1 3f 5d 77 2a 9e da b4 69 53 61 61 e1 fc f9 f3 21 84 45 45 45 bf ff fe 7b b5 6a d5 66 cc 98 c1 a6 ed 5f 7e f9 65 eb d6 ad 7b f6 ec 09 09 09 49 4f 4f 7f f2 e4 49 62 62 22 a3 78 ff e6 9b 6f 58 55 0b 16 2c 78 f4 e8 d1 d6 ad 5b 53 53 53 ef dc b9 33 75 ea 54 8e e3 4c 26 d3 6f bf fd Data Ascii: _heKwG&Y~)54ivwq.\8p@LL#AFwwb#=sY\%/6[-Y[n]cG5~c_t:zq\K:?]w*iSaa!EEE{jf_~e{IOOIbb"xoXU,x[SSS3uTL&o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.11	49770	3.217.205.239	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:10 UTC	776	OUT	GET /pages/themes/default/css/images/icons.gif HTTP/1.1 Host: rmshg.amplified.training Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rmshg.amplified.training/index/css/fmt:1714566301,tn:51,tv:5,ct:1,rtl:0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; login_token=153a9a8f304880470316f98fd745653f
2024-05-06 16:42:10 UTC	473	IN	HTTP/1.1 200 OK date: Mon, 06 May 2024 16:42:10 GMT content-type: image/gif content-length: 5512 server: Apache x-content-type-options: nosniff x-xss-protection: 1; mode=block last-modified: Wed, 23 Mar 2022 16:57:16 GMT etag: "1588-5dae59f31bd40" accept-ranges: bytes cache-control: max-age=31536000, public expires: Tue, 06 May 2025 16:42:10 GMT vary: User-Agent strict-transport-security: max-age=31536000; includeSubDomains; preload; connection: close
2024-05-06 16:42:10 UTC	5512	IN	Data Raw: 47 49 46 38 39 61 60 00 c8 00 e7 ff 00 00 01 00 15 05 6a 00 10 74 08 19 7a 9f 00 00 00 29 97 2a 31 42 1f 30 8d 04 39 a7 ff 00 00 ff 00 08 00 42 ae 41 48 5a 1b 52 85 ff 1b 14 ff 1e 1e 0e 5a c8 ff 23 27 4a 55 6c 00 62 c9 59 5b 58 00 6b d8 51 61 7d 00 74 e0 ff 3e 44 00 85 84 40 73 9c 00 80 e6 55 71 92 ff 48 4c 19 95 1c 49 7b 92 55 7a 9a 56 7a ad ff 51 54 00 8d f9 44 84 94 00 94 fa ff 59 57 18 a5 19 54 85 af 5f 84 a4 7a 7b b5 4c 8c 96 7f 81 7e 00 9c ff 79 85 85 ff 62 60 83 85 82 26 ad 23 68 8c ad 6c 8c a7 6b 8c b4 4f 99 8b 04 a5 fd ff 6a 68 4f 94 d6 56 99 96 8b 8d 8a 6b 94 ae 6f 93 b4 75 94 a3 76 96 b2 8c 94 9b 92 94 91 6e 9c af ff 79 7b 55 ab 81 71 ad 2d 89 9d 9c 45 bd 45 71 a6 ab 3a c3 30 9b 9d 99 ff 82 86 79 a2 d6 58 b5 83 70 ad a5 a2 9f a3 5f b6 8b 61 b5 Data Ascii: GIF89a`jtz)*1B09BAHZRZ#'JUlbY[XkQa}t>D@sUqHLI{UzVzQTDYWT_z{L~yb`&#hlkOjhOVkouvny{Uq-EEq:0yXp_a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.11	49769	3.217.205.239	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:10 UTC	774	OUT	GET /pages/images/rating/star-solid-grey.svg HTTP/1.1 Host: rmshg.amplified.training Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rmshg.amplified.training/index/css/fmt:1714566301,tn:51,tv:5,ct:1,rtl:0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; login_token=153a9a8f304880470316f98fd745653f
2024-05-06 16:42:10 UTC	433	IN	HTTP/1.1 200 OK date: Mon, 06 May 2024 16:42:10 GMT content-type: image/svg+xml content-length: 479 server: Apache x-content-type-options: nosniff x-xss-protection: 1; mode=block last-modified: Wed, 23 Mar 2022 16:57:16 GMT etag: "1df-5dae59f2d8721" accept-ranges: bytes vary: Accept-Encoding,User-Agent cache-control: public strict-transport-security: max-age=31536000; includeSubDomains; preload; connection: close
2024-05-06 16:42:10 UTC	479	IN	Data Raw: 3c 73 76 67 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 66 6f 63 75 73 61 62 6c 65 3d 22 66 61 6c 73 65 22 20 64 61 74 61 2d 70 72 65 66 69 78 3d 22 66 61 73 22 20 64 61 74 61 2d 69 63 6f 6e 3d 22 73 74 61 72 22 20 63 6c 61 73 73 3d 22 73 76 67 2d 69 6e 6c 69 6e 65 2d 2d 66 61 20 66 61 2d 73 74 61 72 20 66 61 2d 77 2d 31 38 22 20 72 6f 6c 65 3d 22 69 6d 67 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 37 36 20 35 31 32 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 43 39 43 39 43 39 22 20 64 3d 22 4d 32 35 39 2e 33 20 31 37 2e 38 4c 31 39 34 20 31 35 30 2e 32 20 34 37 2e 39 20 31 37 31 2e 35 63 2d 32 36 2e 32 20 33 2e 38 2d 33 36 2e 37 Data Ascii: <svg aria-hidden="true" focusable="false" data-prefix="fas" data-icon="star" class="svg-inline--fa fa-star fa-w-18" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 576 512"><path fill="#C9C9C9" d="M259.3 17.8L194 150.2 47.9 171.5c-26.2 3.8-36.7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.11	49771	3.217.205.239	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:10 UTC	769	OUT	GET /pages/images/rating/star-solid.svg HTTP/1.1 Host: rmshg.amplified.training Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rmshg.amplified.training/index/css/fmt:1714566301,tn:51,tv:5,ct:1,rtl:0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; login_token=153a9a8f304880470316f98fd745653f
2024-05-06 16:42:10 UTC	433	IN	HTTP/1.1 200 OK date: Mon, 06 May 2024 16:42:10 GMT content-type: image/svg+xml content-length: 479 server: Apache x-content-type-options: nosniff x-xss-protection: 1; mode=block last-modified: Wed, 23 Mar 2022 16:57:16 GMT etag: "1df-5dae59f2d8721" accept-ranges: bytes vary: Accept-Encoding,User-Agent cache-control: public strict-transport-security: max-age=31536000; includeSubDomains; preload; connection: close
2024-05-06 16:42:10 UTC	479	IN	Data Raw: 3c 73 76 67 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 66 6f 63 75 73 61 62 6c 65 3d 22 66 61 6c 73 65 22 20 64 61 74 61 2d 70 72 65 66 69 78 3d 22 66 61 73 22 20 64 61 74 61 2d 69 63 6f 6e 3d 22 73 74 61 72 22 20 63 6c 61 73 73 3d 22 73 76 67 2d 69 6e 6c 69 6e 65 2d 2d 66 61 20 66 61 2d 73 74 61 72 20 66 61 2d 77 2d 31 38 22 20 72 6f 6c 65 3d 22 69 6d 67 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 37 36 20 35 31 32 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 39 46 30 45 22 20 64 3d 22 4d 32 35 39 2e 33 20 31 37 2e 38 4c 31 39 34 20 31 35 30 2e 32 20 34 37 2e 39 20 31 37 31 2e 35 63 2d 32 36 2e 32 20 33 2e 38 2d 33 36 2e 37 Data Ascii: <svg aria-hidden="true" focusable="false" data-prefix="fas" data-icon="star" class="svg-inline--fa fa-star fa-w-18" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 576 512"><path fill="#FF9F0E" d="M259.3 17.8L194 150.2 47.9 171.5c-26.2 3.8-36.7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.11	49774	18.173.145.84	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:10 UTC	386	OUT	GET /images/empty_states/noCatalog.svg HTTP/1.1 Host: d3j0t7vrtr92dk.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:10 UTC	541	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 10652 Connection: close Date: Mon, 06 May 2024 16:42:11 GMT Last-Modified: Wed, 30 Mar 2022 08:02:20 GMT ETag: "73f66b9cb7c2fb35fd6e29e5116faa00" x-amz-server-side-encryption: AES256 x-amz-version-id: g95T1tFLeLGpGg7q_x_ezZrs..UOBBnC Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 239ebd908a5cd20ee7b9bd546b4bf248.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: jgoFjtqZ6MBkdbAqBfUykmq8fuMIBoNecdfuW72yv0PSWWeZ6hIgUg==
2024-05-06 16:42:10 UTC	10652	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 77 69 64 74 68 3d 22 32 35 37 2e 31 32 34 22 20 68 65 69 67 68 74 3d 22 32 31 39 2e 30 36 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 35 37 2e 31 32 34 20 32 31 39 2e 30 36 38 22 3e 0d 0a 20 20 3c 64 65 66 73 3e 0d 0a 20 20 20 20 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 22 20 79 31 3d 22 30 2e 35 22 20 78 32 3d 22 31 22 20 79 32 3d 22 30 2e 35 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 6f 62 6a 65 63 74 42 6f 75 6e 64 69 6e 67 42 6f Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="257.124" height="219.068" viewBox="0 0 257.124 219.068"> <defs> <linearGradient id="linear-gradient" y1="0.5" x2="1" y2="0.5" gradientUnits="objectBoundingBo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.11	49775	3.217.205.239	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:10 UTC	760	OUT	GET /pages/themes/default/css/font/Open_Sans_300.woff HTTP/1.1 Host: rmshg.amplified.training Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://rmshg.amplified.training sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://rmshg.amplified.training/index/css/fmt:1714566301,tn:51,tv:5,ct:1,rtl:0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; login_token=153a9a8f304880470316f98fd745653f
2024-05-06 16:42:11 UTC	430	IN	HTTP/1.1 200 OK date: Mon, 06 May 2024 16:42:10 GMT content-type: application/x-font-woff content-length: 27376 server: Apache x-content-type-options: nosniff x-xss-protection: 1; mode=block last-modified: Wed, 23 Mar 2022 16:57:16 GMT etag: "6af0-5dae59f30a400" accept-ranges: bytes vary: User-Agent cache-control: public strict-transport-security: max-age=31536000; includeSubDomains; preload; connection: close
2024-05-06 16:42:11 UTC	13864	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 6a f0 00 12 00 00 00 00 b6 90 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 44 45 46 00 00 01 94 00 00 00 22 00 00 00 22 02 3f 02 a9 47 50 4f 53 00 00 01 b8 00 00 00 0c 00 00 00 0c 00 15 00 0a 47 53 55 42 00 00 01 c4 00 00 00 5b 00 00 00 74 de f3 de e2 4f 53 2f 32 00 00 02 20 00 00 00 5d 00 00 00 60 a0 d5 9b 51 63 6d 61 70 00 00 02 80 00 00 00 d3 00 00 01 24 d0 b6 c8 b4 63 76 74 20 00 00 03 54 00 00 00 5d 00 00 00 aa 12 eb 13 a9 66 70 67 6d 00 00 03 b4 00 00 04 9b 00 00 07 b4 7e 61 b6 11 67 61 73 70 00 00 08 50 00 00 00 10 00 00 00 10 00 1e 00 23 67 6c 79 66 00 00 08 60 00 00 48 cf 00 00 70 6e bd fc 2d 1a 68 65 61 64 00 00 51 30 00 00 00 36 00 00 00 36 f7 3b c5 a2 68 68 65 61 00 00 51 68 00 00 00 Data Ascii: wOFFjGDEF""?GPOSGSUB[tOS/2 ]`Qcmap$cvt T]fpgm~agaspP#glyf`Hpn-headQ066;hheaQh
2024-05-06 16:42:11 UTC	3697	IN	Data Raw: 72 35 8e ca f6 21 b8 65 d9 b0 ee be ea de 4d a3 73 77 3d 3a ee b1 fc de 7f eb 3f 6b c1 e0 1b 16 8f ef 5d 5d dd fb de a5 2b 37 4d 7a fd f0 a1 a3 3c b7 6c 66 b4 2a 92 53 d0 27 b7 66 d2 b4 be eb b7 86 53 a7 65 14 cc 68 ba 66 61 cd 75 f3 6b 7b 4c 2e 2f 9b 50 3e 76 f2 3d 8b 5b fb 70 fb b7 1f 5a 49 7c c0 58 57 42 90 f8 a0 af 72 7f 9d 0b 00 9d 93 19 16 ea 83 4e 16 02 98 e3 63 e5 79 57 2a 6f 79 83 95 17 76 28 e7 4f a9 e5 47 b7 b3 f2 fc 8e e5 47 d5 f2 c6 97 00 9b f1 25 cc 40 b5 10 96 a8 16 47 de 92 2d ba c8 16 00 53 0b 81 46 6f e9 7d a3 14 fc 25 5a 55 e2 43 46 57 2a 57 5c 9c 9d af d5 da 7c a1 6c 9a 17 01 f1 0e 63 76 02 8b 8c 77 14 a7 92 40 5c b1 bf 98 bc 2d 2e e6 1d 85 22 65 95 b9 ad 0e 31 10 e1 23 24 58 c9 3b 13 42 f1 89 b0 5d 47 99 4d 82 87 ad 0a 5f 2a 80 85 ce Data Ascii: r5!eMsw=:?k]]+7Mz<lfS'fSehfauk{L./P>v=[pZI\|XWBrNcyWoyv(OGG%@G-SFo}%ZUCFWW\\|lcvw@\-."e1#$X;B]GM_
2024-05-06 16:42:11 UTC	8949	IN	Data Raw: a9 92 33 bc 6d e5 ea c3 db a9 aa a9 db 81 1b 4f 1d 21 17 d9 be f9 61 45 61 76 dd 35 27 5e 6c 1d 24 9f af 39 b7 90 0d 74 20 09 38 40 55 34 62 33 1a 81 d5 64 e2 79 e0 72 5a 4d c4 cd d6 7c 2b 71 b3 d5 8a b5 5a 33 41 69 20 d6 57 d6 e1 ce 6e 56 be 4f 22 aa 1a a0 77 b3 00 0c d8 82 56 98 86 70 10 21 ce 7d ee 5b a9 e8 87 b3 f0 75 29 17 4e 30 c7 42 46 38 6e d7 4e 23 3a 6d dc 8f 93 a4 66 69 06 0e c0 bb e0 aa 8b 6e b4 2f 36 90 5f 21 fd 5d 3a 06 2b 61 4f 00 e5 3b 38 99 d7 49 74 57 0f 4d 26 41 34 27 99 f5 44 bd a0 57 be 4a 02 d3 4e a1 56 ca 62 1d a8 1d db d4 3b 6a 1f 1e 5e 7d 27 57 d1 76 f1 8e 99 e2 08 8d 69 e3 5f b1 48 d7 26 05 a5 41 02 78 0e 50 a5 fd af a4 37 04 21 08 d2 28 73 c2 2b 8a 69 50 eb c7 0e e0 48 07 21 e8 f7 1b 80 c3 20 54 d5 19 60 b2 ad aa 2e 39 e1 2e c8 Data Ascii: 3mO!aEav5'^l$9t 8@U4b3dyrZM\|+qZ3Ai WnVO"wVp!}[u)N0BF8nN#:mfin/6_!]:+aO;8ItWM&A4'DWJNVb;j^}'Wvi_H&AxP7!(s+iPH! T`.9.
2024-05-06 16:42:11 UTC	866	IN	Data Raw: b6 b4 63 16 ed b9 4a 07 2e 71 85 97 74 e4 0e b7 b8 cd 4e 3a f1 81 d9 dc e7 2e f7 e8 cc 6b de 32 99 ae 74 a1 1b 3d e8 4e 4f 56 d1 8b 3e f4 a6 2f fd 18 40 7f 06 32 88 57 0c 66 28 43 18 c6 08 86 73 88 d5 8c 62 24 a3 19 c3 1b de 71 84 07 32 66 17 bb 79 c8 33 1e c9 44 a6 32 93 b9 2c 64 29 2b 59 cb 46 b6 b2 93 bd 1c e4 28 27 39 cb 45 ae 72 93 bb 3c e4 29 2f 79 cb 47 be f2 93 bf 02 14 a8 20 05 2b 44 a1 0a 53 b8 22 14 a9 28 45 2b 46 b1 8a 53 bc 12 94 a8 24 25 2b 45 a9 4a 53 ba 32 94 c9 52 65 29 5b 39 ca 55 9e f2 55 a0 42 15 a9 58 25 2a 55 99 ca d9 c3 5e 0e 70 90 73 ec 63 3f e7 99 c8 56 4e 70 92 63 aa 60 13 ef 55 a9 2a 55 ab 46 b5 aa 53 bd 1a d4 48 14 37 b9 c6 75 6e a8 49 cd 6a 31 ea 39 a0 fb cf ae c8 42 b9 41 20 08 c3 33 48 dc 93 f7 a8 db 68 dd dd db d1 0d 5c 60 Data Ascii: cJ.qtN:.k2t=NOV>/@2Wf(Csb$q2fy3D2,d)+YF('9Er<)/yG +DS"(E+FS$%+EJS2Re)[9UUBX%U^psc?VNpc`UUFSH7unIj19BA 3Hh\`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.11	49777	3.217.205.239	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:10 UTC	483	OUT	GET /pages/images/rating/star-solid-grey.svg HTTP/1.1 Host: rmshg.amplified.training Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; login_token=153a9a8f304880470316f98fd745653f
2024-05-06 16:42:10 UTC	433	IN	HTTP/1.1 200 OK date: Mon, 06 May 2024 16:42:10 GMT content-type: image/svg+xml content-length: 479 server: Apache x-content-type-options: nosniff x-xss-protection: 1; mode=block last-modified: Wed, 23 Mar 2022 16:57:16 GMT etag: "1df-5dae59f2d8721" accept-ranges: bytes vary: Accept-Encoding,User-Agent cache-control: public strict-transport-security: max-age=31536000; includeSubDomains; preload; connection: close
2024-05-06 16:42:10 UTC	479	IN	Data Raw: 3c 73 76 67 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 66 6f 63 75 73 61 62 6c 65 3d 22 66 61 6c 73 65 22 20 64 61 74 61 2d 70 72 65 66 69 78 3d 22 66 61 73 22 20 64 61 74 61 2d 69 63 6f 6e 3d 22 73 74 61 72 22 20 63 6c 61 73 73 3d 22 73 76 67 2d 69 6e 6c 69 6e 65 2d 2d 66 61 20 66 61 2d 73 74 61 72 20 66 61 2d 77 2d 31 38 22 20 72 6f 6c 65 3d 22 69 6d 67 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 37 36 20 35 31 32 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 43 39 43 39 43 39 22 20 64 3d 22 4d 32 35 39 2e 33 20 31 37 2e 38 4c 31 39 34 20 31 35 30 2e 32 20 34 37 2e 39 20 31 37 31 2e 35 63 2d 32 36 2e 32 20 33 2e 38 2d 33 36 2e 37 Data Ascii: <svg aria-hidden="true" focusable="false" data-prefix="fas" data-icon="star" class="svg-inline--fa fa-star fa-w-18" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 576 512"><path fill="#C9C9C9" d="M259.3 17.8L194 150.2 47.9 171.5c-26.2 3.8-36.7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.11	49779	18.173.145.84	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:10 UTC	393	OUT	GET /amplifiedhr/1563764025_absencessmall.png HTTP/1.1 Host: d3j0t7vrtr92dk.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:11 UTC	538	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 153332 Connection: close Date: Mon, 06 May 2024 16:42:11 GMT Last-Modified: Mon, 22 Jul 2019 02:53:43 GMT ETag: "361227c756ae1a1b5c10b198a1c13949" x-amz-server-side-encryption: AES256 x-amz-version-id: dqFcRwHhT1_GR0LFanfuPko5b.70lP8. Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 8a904a0d16ba1d2d926b70585166d16e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: EHHTM9zEWhVxKd1DAx_j5sgeRo32u9BKddLRgS_F7_waK4XPKX7YzQ==
2024-05-06 16:42:11 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 01 40 08 02 00 00 00 eb aa 38 2c 00 00 20 00 49 44 41 54 78 9c bc bd eb 8f 25 49 76 1f 76 4e 44 be ee ab 5e fd ae 7e cc ab 77 76 66 96 dc e5 d2 bb 14 bd c6 92 12 41 43 22 6c d8 12 6c 08 16 20 d9 96 6c 50 9f 0c fb 1f 30 0c d8 fe 62 c3 80 01 d9 90 bf 59 fe 40 58 02 6c 42 96 61 41 90 09 0b 12 45 72 b9 af e1 ce cc ee 4c f7 4c bf aa ab bb ab ba ba ba ea d6 7d e6 2b e2 f8 43 64 c6 3d 19 91 79 bb 7a 76 ed c0 a0 27 2b 6f 66 c4 89 f3 f8 c5 89 13 27 22 f1 0f fe f0 07 88 08 00 44 a4 b5 26 22 00 40 44 22 42 af 00 00 22 99 02 00 00 20 84 10 42 20 62 14 45 79 9e 2f 97 4b 22 0a c3 50 6b ad 94 42 c4 30 0c 89 1a af 98 fa 11 a5 52 aa 2c 4b 22 32 35 58 1a 6c 9d e6 8e 79 5e a9 02 11 cd 7d a7 36 f3 80 f3 af 29 Data Ascii: PNGIHDR@8, IDATx%IvvND^~wvfAC"ll lP0bY@XlBaAErLL}+Cd=yzv'+of'"D&"@D"B" B bEy/K"PkB0R,K"25Xly^}6)
2024-05-06 16:42:11 UTC	16384	IN	Data Raw: 4e 8a 45 5f 9f 41 89 73 19 44 41 31 28 45 09 f5 66 fe e6 d2 ab 1d 5a f8 b8 08 f5 fc dd e4 ea 72 87 ce 3e ec 5c 6b ad cd 6e 05 29 10 49 93 a6 30 8a 15 c1 f8 74 81 4c 88 8b 00 00 20 00 49 44 41 54 12 27 17 8e 0f 0e 1f 7d fe 71 99 9f 8a 60 90 eb 7c 34 1c 0e 4b 75 70 3a ce 26 b3 00 c5 64 32 19 6d 8f 94 52 d9 74 3e de 7b 12 48 b8 71 e3 c6 e4 e0 e9 76 28 7f f9 ad 1b bb bb bb 17 77 2e 09 80 38 28 35 f6 f2 02 c7 27 c7 fd 38 29 f3 45 41 3a 88 47 72 3b 58 a6 a9 44 71 f9 d2 b0 3f e8 5d b9 b8 71 ff c1 a3 c3 c3 c3 07 e3 d9 fe c1 51 7f 33 11 f1 60 9e e5 3b 49 92 2e e6 c7 2f ce ee e3 f4 2b 6f bc f5 d3 7f f1 7f d3 fc e4 3b bf f3 6f 89 de 36 46 bd a2 40 01 aa 2c 33 29 a5 10 94 a6 69 18 25 41 6f 00 4a 69 dd 38 4a 9b 43 1e b7 46 7b 5f 93 b2 a9 d0 00 20 a4 b0 5e b6 52 4a 93 Data Ascii: NE_AsDA1(EfZr>\kn)I0tL IDAT'}q`\|4Kup:&d2mRt>{Hqv(w.8(5'8)EA:Gr;XDq?]qQ3`;I./+o;o6F@,3)i%AoJi8JCF{_ ^RJ
2024-05-06 16:42:11 UTC	16384	IN	Data Raw: 87 c1 a5 37 be 7a e3 ca 95 34 4e 1e 7d f4 09 e1 fb 9e 0c 2d 03 49 05 18 e5 d3 04 75 24 84 30 f1 fe e6 92 d5 b9 22 a1 51 a3 b1 e7 cf 9e 1c 6e ac 4f 87 bd 8a 17 04 d5 ca 24 49 11 c3 24 c9 d2 68 ba 9f 47 c1 08 28 18 0c c3 7e c1 31 94 5b a9 9f 79 00 00 20 00 49 44 41 54 f6 b2 8a 09 74 e2 c6 05 85 e7 e7 e7 7d df 67 6d 5c 3b 5d 9c a5 64 94 27 dc 13 d2 22 38 01 9a 24 49 92 a6 4e 24 1d 60 b7 e2 7f ad 8d 8b db 2e 2d 2d 39 2c e3 6c 66 44 17 a5 22 05 1b 17 22 2c 08 02 27 19 b5 d6 93 c9 a4 da a8 0b 7b 4f 82 30 cf 20 2c 1e ae d4 cb 66 dd be f8 10 fb 39 82 d6 5a 6d 0d 1b ed c4 a5 52 2a cd 33 77 00 20 6a 6b dc 67 41 42 e7 da 18 b3 b4 b4 d4 6a b5 74 96 3b b0 a4 22 e6 0e 00 2e 62 63 ad 75 99 76 2e a3 59 5b e3 9a 94 33 33 4a e1 42 0a 45 11 4a b1 da 33 9d a7 69 3a 77 64 7e Data Ascii: 7z4N}-Iu$0"QnO$I$hG(~1[y IDATt}gm\;]d'"8$IN$`.--9,lfD"",'{O0 ,f9ZmR*3w jkgABjt;".bcuv.Y[33JBEJ3i:wd~
2024-05-06 16:42:11 UTC	16384	IN	Data Raw: b9 63 22 dd 96 d0 fc 0f 2b 38 ac 94 52 7f f9 e7 fe 4a 3b dc dd e6 2e b5 00 3b 26 20 70 12 97 8f b3 09 74 23 0a 36 5f 02 36 91 0c 08 91 10 09 3b 30 1d 40 50 11 11 10 0a 34 41 2e 00 c8 46 46 80 18 14 ea 38 4a 34 28 09 41 6b 05 08 01 10 90 82 0f 75 ed 10 d0 68 4d 00 c0 81 a8 89 b0 c2 c8 81 84 15 29 24 ed 8c d9 95 3b 00 00 20 00 49 44 41 54 19 10 44 38 80 08 08 08 a0 00 31 20 03 69 b4 24 08 c0 00 8c 4a 01 69 16 62 41 61 14 30 82 91 80 25 51 4a 50 01 69 34 8c 4c 82 1a 22 16 1d 44 10 84 05 99 22 42 16 64 01 20 01 23 60 11 48 89 23 2f 28 a8 94 0f 84 3e 22 b2 44 1c 81 08 40 10 45 42 5a 9a 35 08 9a d1 b2 68 60 c5 5e 03 2b 00 85 a8 51 8b 50 10 c5 b0 cc 38 bb eb a6 15 76 1a 41 ac 21 c8 28 b0 80 11 30 01 bd 50 41 16 58 f5 73 ee 3f 3a f9 e6 19 ed d7 7b 89 35 31 88 62 Data Ascii: c"+8RJ;.;& pt#6_6;0@P4A.FF8J4(AkuhM)$; IDATD81 i$JibAa0%QJPi4L"D"Bd #`H#/(>"D@EBZ5h`^+QP8vA!(0PAXs?:{51b
2024-05-06 16:42:11 UTC	16384	IN	Data Raw: 5a 51 b4 5e 2a f2 e8 5b 47 ad cc 0b 26 f1 f0 a7 c3 f9 07 db db 42 e6 85 03 24 22 e9 d9 29 e9 c1 83 07 11 92 88 b2 03 f4 16 1d 99 19 7a 9a 56 8b aa 6e 1a cb f3 d6 2d 5a 33 5d 54 95 39 fd c9 83 bb af 7e ed 9f ec bf fc d9 99 85 6c 6b 38 cc 54 33 9f 54 8f de 79 7c ff c3 a3 fb 1f 4e 0f 1f 2f 8e 9f a2 ad c6 03 fd dc 30 db be 72 45 29 a5 a5 22 22 44 90 24 82 ce 92 d6 21 6e 97 9d 35 b5 db 22 00 00 20 00 49 44 41 54 d5 c5 ce 82 16 b3 7b 6f 96 7f f9 df bb df fd 2f ab e3 b3 9d e1 0e 58 b3 3b c8 8e a6 2c f3 2d b2 0f 99 47 ed ee 33 7e 30 dc 55 ed d1 6c 52 f1 cb 07 fb d7 67 4f df 11 be 1d 8a 6c b0 3f 72 de 8f 47 bb 1f 7c 78 ef e8 e9 d1 67 3f f7 8a 7a 7c 67 3e 5f 68 91 4b e2 ab e3 dc 2c a6 b7 ae 3e ff d9 5f 7a 95 0e 5e 3c d8 2e 5f 7b e9 53 df ff f6 bf 59 98 f9 17 3e fd Data Ascii: ZQ^*[G&B$")zVn-Z3]T9~lk8T3Ty\|N/0rE)""D$!n5" IDAT{o/X;,-G3~0UlRgOl?rG\|xg?z\|g>_hK,>_z^<._{SY>
2024-05-06 16:42:11 UTC	1062	IN	Data Raw: 2d 22 1e 45 e0 ff 27 ee 4d 7e 26 49 8e 7b 41 33 73 8f 25 33 bf bd d6 ee ea 5a ba 9a cd 66 4f 6b 28 52 a2 44 8d de c3 e8 a4 07 49 97 87 37 ba e8 ae bb fe 12 dd 06 33 ff 83 0e 03 0d 20 08 7a 80 40 0c de 41 18 89 24 08 92 cd 66 af b5 75 ed db 57 df 96 4b 44 b8 9b cd c1 22 3c 3d 3d 22 b3 ab 9b 94 c6 51 28 c4 17 e9 e1 ab f9 cf cc cd cd cd 50 d8 67 63 11 01 10 76 1e b0 11 30 8c cc d6 98 ae 2f 7d 0a 0f dd 5c 19 76 90 80 9b e1 25 33 53 17 8d 3b 99 a0 11 85 7e ad 00 00 20 00 49 44 41 54 98 5f 2a cb 57 d7 a0 7d 0c 4a 58 66 78 df 5f 6e 5a 7b 51 14 21 83 5a a3 5e bf 7e fd dd 77 df cd 47 e5 ce ce 0e 09 ea d1 85 4e d0 78 3c 26 6b 82 f7 d1 c0 a1 03 cd 18 24 44 14 5c 0e 05 2a 8f e7 95 96 04 c1 7f 9d 2a 35 d6 a1 43 24 ff 6d 46 d1 95 11 5e 83 2d 92 48 d0 fd ea 5f bf 0e 58 Data Ascii: -"E'M~&I{A3s%3ZfOk(RDI73 z@A$fuWKD"<=="Q(Pgcv0/}\v%3S;~ IDAT_W}JXfx_nZ{Q!Z^~wGNx<&k$D\*5C$mF^-H_X
2024-05-06 16:42:11 UTC	16384	IN	Data Raw: 22 6a 80 44 ac 64 d0 f9 f5 26 44 6e 47 5e 5d e8 15 45 a1 ea 20 95 4f 39 43 64 32 62 c4 0b 22 94 46 f6 d0 8f 18 7c 7d 36 25 58 64 96 21 63 4f 8c c0 cc 1a 2c 66 05 97 bb 07 8e 9c 4d 6e 26 f2 64 2d c7 7f ea cc aa 9a 08 23 87 fd 7d f1 53 22 2f 16 31 5d 85 89 8b ed e1 b4 04 f5 b3 d1 d1 06 e6 79 9e e7 b9 9a 76 88 88 31 aa 53 86 65 ed c6 68 5c 31 e8 c8 3b 54 44 9d 5d 76 98 7a e6 d6 be 0e 31 bd 50 13 eb d3 e3 d5 11 ad 9e e5 c5 f7 78 34 06 c7 6d c3 fb c1 af 52 2b 8e f8 4f 1c 52 1d ac 4b 61 0d a4 ad c4 e8 d7 88 20 fa ec 74 33 46 27 d0 99 90 57 d2 3d 8c 04 a8 b4 85 9d 8e a9 df fe 41 ca 8b 6b ef 3f c7 1d 0f 6f 74 49 eb 19 57 e7 a8 17 51 9a 7a e6 90 6c 66 f2 d9 ec ec 8c d9 d8 d1 f6 a5 bd ad b7 32 11 a1 36 1c 51 8b 02 28 e0 bb d0 44 5e 64 e1 c0 57 35 f3 82 99 0b 8b ad Data Ascii: "jDd&DnG^]E O9Cd2b"F\|}6%Xd!cO,fMn&d-#}S"/1]yv1Seh\1;TD]vz1Px4mR+ORKa t3F'W=Ak?otIWQzlf26Q(D^dW5
2024-05-06 16:42:11 UTC	16384	IN	Data Raw: 18 d4 b6 4f 4d 9b c3 6d ef 64 2b 1a 06 c1 ac ba 16 93 2e f0 1a 74 8e c1 74 59 ee ef ef 3f 78 f0 e0 c7 3f fe b1 74 b6 c0 41 ec 55 84 25 a2 c5 62 a1 9c 20 c8 ad 7d 01 16 3b df 4c 65 5e 68 84 01 8a 82 93 32 33 b7 51 9b 97 a6 ac eb c0 b7 15 82 a2 b3 b2 b8 5f f1 03 46 29 28 5b f4 42 fc 32 ee 0c 92 74 1a c3 27 4f 9e 6d 8d c6 7a 0f a8 0f 25 eb 5a 32 00 b2 ab 70 3c 88 cb 89 ec 1f 70 aa 61 7c 6f ec de d9 21 93 9b 9a ad 80 59 68 78 42 04 f6 e0 bd d3 ad 86 73 ec 9c 6b bc 67 00 c7 be f1 32 af 79 ba 58 cc eb c6 79 40 4b cd 68 ab 86 bc 01 12 64 23 1e d8 03 66 62 b2 f8 2c 17 3b de 8c ab 5a af 78 16 e2 cc 71 8f 42 83 13 10 04 48 59 5a 80 ad 78 0c e3 97 e1 41 ba 60 e1 d8 59 d9 e3 aa c6 12 3a 89 3e 69 30 44 bb cf d0 fe 18 85 63 2d 73 2c 3a c4 0f a1 61 21 f5 67 3c 26 ad 41 Data Ascii: OMmd+.ttY?x?tAU%b };Le^h23Q_F)([B2t'Omz%Z2p<pa\|o!YhxBskg2yXy@Khd#fb,;ZxqBHYZxA`Y:>i0Dc-s,:a!g<&A
2024-05-06 16:42:11 UTC	268	IN	Data Raw: be 1b dc f9 80 de d7 8e 97 a5 56 35 ca b3 ef 89 ee 0c 2b f8 d5 9c e4 87 00 70 30 fd 93 2b c7 bf b7 3b fd fa 56 f9 70 e0 59 48 07 ab 75 d2 08 0a e0 78 f6 17 d7 1f 8f e6 83 97 ee 8f be 78 6f f7 0b 8b f1 0b 99 1c 69 fb 41 a9 2e 08 08 20 2c bd 40 43 f7 57 07 61 13 f1 69 5a 7b c8 f6 ff 63 76 52 64 84 64 fc d3 88 48 d1 0f 34 6e 6e 24 44 13 03 0c 41 5a 9c 73 31 d6 44 a8 ad 63 b5 88 4e 23 c1 78 a2 94 0a 81 1f 23 ce 76 14 e7 14 85 d3 84 6d 28 48 68 e3 0e 37 6e 19 b7 ac e3 88 1a a3 e8 85 1b 07 d8 1e c8 14 a8 10 69 21 56 b4 01 eb 87 c5 e0 c2 d6 1e b0 68 dc ba 7f f7 c3 7f fb e5 d7 7f e9 8b 3f 7f e9 a4 fa b5 df fa e5 6f 4c 7f e0 df ba fe c5 e3 db 7a 7a 02 b3 d9 94 e7 a7 1e 1e 1c 1d bf 7f f7 ce f1 64 7a 77 7a 3a 5b cc 27 93 19 33 67 83 02 59 f2 dc 5c be 7c f9 85 bd 03 Data Ascii: V5+p0+;VpYHuxxoiA. ,@CWaiZ{cvRddH4nn$DAZs1DcN#x#vm(Hh7ni!Vh?oLzzdzwz:['3gY\\|
2024-05-06 16:42:11 UTC	16384	IN	Data Raw: dd 65 bb 73 71 98 0f f5 c0 4e 72 3d b4 48 65 c3 be d0 23 41 20 c5 80 84 a4 75 46 ca 88 88 77 4e 1a bf 68 dc 9d c9 e4 83 e3 93 9a 15 98 21 ab c2 e7 05 60 23 de 59 ae 1c 69 36 05 1b 07 58 23 97 60 1b 87 79 0d a3 9a 07 ec 95 02 5f a0 cd 89 3f 61 be 3d 52 6e d7 2c 0e d5 ec 52 3e 39 34 b3 6d 35 1f 28 2b b5 47 10 a0 d9 5f c1 0e fa 11 0c 75 89 79 26 fe 9d c9 ee 76 2e 57 8a e6 b9 9d a3 5b e6 fe 8b e6 e1 8d fc 68 2b 5b 80 8c 26 84 f7 4e 77 ef d4 d7 9c 46 f4 0e 85 3d 57 98 8d 1b 95 5b 19 16 d6 0e e5 d1 c0 57 43 19 58 7c ef b2 ce f2 fc 68 8e 5b f7 f9 d5 12 c6 1e 1b 20 2a e5 c2 4b cd fd cf aa 7f 76 09 4f b1 19 9f b0 fa 50 dd ac f8 6a ad 2f be 9f 5f b5 44 28 e6 c0 3d dc f7 a7 64 41 6c 45 6a 71 73 fe cd 87 d9 eb 7f 9d 7f d6 43 e6 50 84 0a 16 e5 a0 10 79 42 e0 8d 94 06 Data Ascii: esqNr=He#A uFwNh!`#Yi6X#`y_?a=Rn,R>94m5(+G_uy&v.W[h+[&NwF=W[WCX\|h[ *KvOPj/_D(=dAlEjqsCPyB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.11	49776	3.217.205.239	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:10 UTC	478	OUT	GET /pages/images/rating/star-solid.svg HTTP/1.1 Host: rmshg.amplified.training Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; login_token=153a9a8f304880470316f98fd745653f
2024-05-06 16:42:10 UTC	433	IN	HTTP/1.1 200 OK date: Mon, 06 May 2024 16:42:10 GMT content-type: image/svg+xml content-length: 479 server: Apache x-content-type-options: nosniff x-xss-protection: 1; mode=block last-modified: Wed, 23 Mar 2022 16:57:16 GMT etag: "1df-5dae59f2d8721" accept-ranges: bytes vary: Accept-Encoding,User-Agent cache-control: public strict-transport-security: max-age=31536000; includeSubDomains; preload; connection: close
2024-05-06 16:42:10 UTC	479	IN	Data Raw: 3c 73 76 67 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 66 6f 63 75 73 61 62 6c 65 3d 22 66 61 6c 73 65 22 20 64 61 74 61 2d 70 72 65 66 69 78 3d 22 66 61 73 22 20 64 61 74 61 2d 69 63 6f 6e 3d 22 73 74 61 72 22 20 63 6c 61 73 73 3d 22 73 76 67 2d 69 6e 6c 69 6e 65 2d 2d 66 61 20 66 61 2d 73 74 61 72 20 66 61 2d 77 2d 31 38 22 20 72 6f 6c 65 3d 22 69 6d 67 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 37 36 20 35 31 32 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 39 46 30 45 22 20 64 3d 22 4d 32 35 39 2e 33 20 31 37 2e 38 4c 31 39 34 20 31 35 30 2e 32 20 34 37 2e 39 20 31 37 31 2e 35 63 2d 32 36 2e 32 20 33 2e 38 2d 33 36 2e 37 Data Ascii: <svg aria-hidden="true" focusable="false" data-prefix="fas" data-icon="star" class="svg-inline--fa fa-star fa-w-18" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 576 512"><path fill="#FF9F0E" d="M259.3 17.8L194 150.2 47.9 171.5c-26.2 3.8-36.7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.11	49778	3.217.205.239	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:10 UTC	485	OUT	GET /pages/themes/default/css/images/icons.gif HTTP/1.1 Host: rmshg.amplified.training Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; login_token=153a9a8f304880470316f98fd745653f
2024-05-06 16:42:10 UTC	473	IN	HTTP/1.1 200 OK date: Mon, 06 May 2024 16:42:10 GMT content-type: image/gif content-length: 5512 server: Apache x-content-type-options: nosniff x-xss-protection: 1; mode=block last-modified: Wed, 23 Mar 2022 16:57:16 GMT etag: "1588-5dae59f31bd40" accept-ranges: bytes cache-control: max-age=31536000, public expires: Tue, 06 May 2025 16:42:10 GMT vary: User-Agent strict-transport-security: max-age=31536000; includeSubDomains; preload; connection: close
2024-05-06 16:42:10 UTC	5512	IN	Data Raw: 47 49 46 38 39 61 60 00 c8 00 e7 ff 00 00 01 00 15 05 6a 00 10 74 08 19 7a 9f 00 00 00 29 97 2a 31 42 1f 30 8d 04 39 a7 ff 00 00 ff 00 08 00 42 ae 41 48 5a 1b 52 85 ff 1b 14 ff 1e 1e 0e 5a c8 ff 23 27 4a 55 6c 00 62 c9 59 5b 58 00 6b d8 51 61 7d 00 74 e0 ff 3e 44 00 85 84 40 73 9c 00 80 e6 55 71 92 ff 48 4c 19 95 1c 49 7b 92 55 7a 9a 56 7a ad ff 51 54 00 8d f9 44 84 94 00 94 fa ff 59 57 18 a5 19 54 85 af 5f 84 a4 7a 7b b5 4c 8c 96 7f 81 7e 00 9c ff 79 85 85 ff 62 60 83 85 82 26 ad 23 68 8c ad 6c 8c a7 6b 8c b4 4f 99 8b 04 a5 fd ff 6a 68 4f 94 d6 56 99 96 8b 8d 8a 6b 94 ae 6f 93 b4 75 94 a3 76 96 b2 8c 94 9b 92 94 91 6e 9c af ff 79 7b 55 ab 81 71 ad 2d 89 9d 9c 45 bd 45 71 a6 ab 3a c3 30 9b 9d 99 ff 82 86 79 a2 d6 58 b5 83 70 ad a5 a2 9f a3 5f b6 8b 61 b5 Data Ascii: GIF89a`jtz)*1B09BAHZRZ#'JUlbY[XkQa}t>D@sUqHLI{UzVzQTDYWT_z{L~yb`&#hlkOjhOVkouvny{Uq-EEq:0yXp_a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.11	49780	18.173.145.84	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:10 UTC	392	OUT	GET /amplifiedhr/1582601262_mgrshcourse2.png HTTP/1.1 Host: d3j0t7vrtr92dk.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:11 UTC	538	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 389934 Connection: close Date: Mon, 06 May 2024 16:42:12 GMT Last-Modified: Tue, 25 Feb 2020 03:27:40 GMT ETag: "95fd2cb545bde71284fd52423e7de389" x-amz-server-side-encryption: AES256 x-amz-version-id: CajUmgax.EAkabGsUsM9POd_0Rm40Epn Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 d4b7883c7915f8b518d09e4d04990ecc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: sdJy_lwjlKOwWR1AOtqdk03D-yE9AeVRu5ujlEKX0yTCp6vstiTfVQ==
2024-05-06 16:42:11 UTC	15846	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 df 00 00 01 3f 08 06 00 00 00 07 44 c9 da 00 00 20 00 49 44 41 54 78 9c 64 bb f7 92 65 e9 75 e5 f7 3b fe 9a 73 bd bf 37 bd ad cc 72 5d 55 5d 6d d0 68 02 20 d0 20 39 4e 13 8a d0 e8 75 f0 28 0a 85 6c 50 d4 88 13 94 40 10 24 1c 61 da 97 77 e9 33 af f7 ee dc e3 8d fe 68 6a 14 23 7d af b0 bf 58 6b 2f b3 85 fb 8f 36 a3 6c ae cc a3 c7 9f 70 73 fe 16 55 4b 91 8c 29 5c 5c 9e a0 a7 b2 64 f5 1c 6f df be 25 5d ca b1 be de 40 26 c0 f7 5c 8c 95 83 aa ea b4 bb 1d d6 b6 0e 48 c5 22 9e 3d 79 46 2c a1 70 78 eb 08 c7 8d 08 a3 19 e3 91 c1 e5 e5 80 5c 26 46 36 95 60 b6 34 98 ce 1d 1e 3d da 45 15 7c 5c 13 94 b8 86 b1 58 f0 fb 7f 7e 46 ae 9c e1 c1 c3 5d 24 31 c9 55 f3 1a d3 75 29 64 74 62 4a 0c 37 b4 99 cc 26 6c 6d 1e 32 Data Ascii: PNGIHDR?D IDATxdeu;s7r]U]mh 9Nu(lP@$aw3hj#}Xk/6lpsUK)\\do%]@&\H"=yF,px\&F6`4=E\|\X~F]$1Uu)dtbJ7&lm2
2024-05-06 16:42:11 UTC	16384	IN	Data Raw: a0 e9 3a a5 62 99 ad 5a 1d df 9d 92 30 72 48 b2 82 28 08 cc d7 1b 92 c9 04 4a 14 13 89 11 b6 b5 64 36 e8 90 cc 35 51 8d 24 42 b4 c1 0f 62 92 99 3a a2 e0 10 84 32 42 14 e0 ae bb 24 93 05 fe e6 af 7f c1 df 7d f6 3b 64 51 c5 72 23 90 64 7e f4 d3 4f f9 d3 ff f6 9f 93 4d 08 fc e2 d7 df 01 f0 f1 47 8f d8 da de 65 bd 5e a2 c9 2a d9 4c 89 f3 8b 97 18 86 49 5a 15 f0 6c 9b c9 6c ca 7a 75 87 3d 0d 23 1f 41 88 f1 d6 73 d6 6b 0b 43 33 98 cf fb 4c c6 13 d2 c9 22 be bf 66 b6 ec 13 8b 11 46 26 47 a1 90 a3 75 fa 2d 5f 7c fe 35 f5 e6 1e 5a d2 c0 2c ec f2 ce d3 b7 e8 5d bf e1 b3 2f be 62 ef f0 11 99 5c 89 f9 dc 47 11 63 14 4d c1 30 34 14 39 66 7b 6b 87 de cd 2b 9e 7f 77 8a 1f c9 f4 46 13 d2 d9 1c 1f bd f7 18 39 d8 d0 ba bc 61 e7 e0 1e 5a a2 40 18 05 ac 2d 97 84 91 45 54 0d Data Ascii: :bZ0rH(Jd65Q$Bb:2B$};dQr#d~OMGe^*LIZllzu=#AskC3L"fF&Gu-_\|5Z,]/b\GcM049f{k+wF9aZ@-ET
2024-05-06 16:42:11 UTC	16384	IN	Data Raw: b5 5a 01 7f 1b f2 cd 37 df a3 ea 32 cd 46 9b 6a 7d 07 31 83 de cd 00 db 31 39 d8 eb a0 c9 0a 7e 90 d2 69 34 89 02 9f f5 72 85 17 27 14 1d 87 d1 60 c0 62 e5 e1 86 1e fe 7a 41 b9 54 a0 5a ab 62 9a 12 89 20 51 6f 1c b3 9c f7 d8 db bb 87 a4 58 9c 9e 7e c4 db 2e a9 d4 1b 6c 56 2b 54 cd a0 52 a9 a2 18 36 4a 26 d0 1b 4f f8 fa cf fe 03 de 7a 48 a5 b6 c7 af fe f5 b7 9c 5d cd d9 df 3d 60 3a f8 cc 62 b5 41 37 1d 92 24 c5 b2 f3 7c f5 f4 01 be ef f3 e3 cb 97 84 91 c0 f5 65 9f c5 d2 43 14 23 96 9b 05 a6 6e e1 7b 5b d2 44 c6 d4 75 3e 9e 9c 31 99 af a8 96 4b 90 c2 9b b7 1f a9 d4 aa ac d7 1e 42 96 72 fc e0 3e c7 fb 2d fc c9 05 83 d1 8c 14 8d 7a a5 46 be 50 e5 d3 e9 07 0c cb 21 e7 e4 b8 bc 38 a5 d1 d8 c3 0b 13 3e 7e 7a 4d 6b a7 8b 63 42 96 a4 a4 61 88 a4 a8 4c c6 23 46 fd Data Ascii: Z72Fj}119~i4r'`bzATZb QoX~.lV+TR6J&OzH]=`:bA7$\|eC#n{[Du>1KBr>-zFP!8>~zMkcBaL#F
2024-05-06 16:42:11 UTC	1152	IN	Data Raw: 14 59 ba 11 44 02 a5 7c 81 7c 21 c3 a0 df a5 52 6a 90 cb 15 f8 f0 e1 7b 32 e9 02 c5 d2 5d c3 7f 34 9b 63 24 13 98 cb 05 cd cd 1d 94 38 62 b5 1c 33 e8 77 08 02 95 4c 2a 0b 71 c0 4d 67 44 77 70 87 4e 14 65 95 ed fd 6d 0e f7 5b 6c 35 f3 5c 5c 0e e8 8f 16 fc e5 5f 7c c5 60 68 d1 eb 0d 48 24 34 7c d7 c1 0d 02 f6 ef dd a7 59 af 90 cb 66 a8 55 2b 14 32 49 e2 38 26 8a 64 06 c3 6b 46 fd 0b 12 29 99 4e 67 c4 d9 65 97 dd c3 7d b6 f6 9f e2 d9 e6 9d bd a7 b1 8f 9e d0 d0 75 83 5e e7 84 1f 5f bf 24 57 6e d2 ef f7 30 2d 97 ad dd 7d d2 d9 2a 57 57 d7 a4 35 99 d0 35 99 cc 17 c8 7a 9a c5 cc 24 a3 ab 9c dd 8c d8 da da 42 14 63 ae da 43 d2 99 3c f5 a2 ce 4d b7 cd 8b 4f 9e 23 86 11 ef 4f ee 0a 63 be b3 66 be 58 51 a9 54 90 55 85 62 2e c7 74 38 c0 f5 7c 3e ff fc 53 8a 49 99 93 Data Ascii: YD\|\|!Rj{2]4c$8b3wLqMgDwpNem[l5\\_\|`hH$4\|YfU+2I8&dkF)Nge}u^_$Wn0-}WW55z$BcC<MO#OcfXQTUb.t8\|>SI
2024-05-06 16:42:11 UTC	16384	IN	Data Raw: ad 26 8a 2c 61 68 79 46 93 11 fd ee 80 6c 36 4f a5 5e a7 db ed b2 5e 5b a4 92 19 aa 95 06 73 d3 e2 f4 ec 8a 72 69 9f 7c a1 49 2c f8 48 42 c8 97 9f ff 19 f7 ee 3d 01 6f c1 e5 d1 37 c4 7a 8d 74 ae 86 b3 9e 21 44 0e 71 14 21 68 3a 91 67 63 d9 33 9a f5 2d 2e 2e 8f 90 84 08 41 48 92 d0 25 ae da d7 e4 b2 79 b2 19 0d 7b ed 70 f8 f0 73 4a e5 02 67 97 1f 49 a5 32 a4 14 89 e9 7c 8e ac dc 39 68 b7 77 37 89 ed 01 ff f7 7f fd 47 4e af 3a c8 82 cf 77 2f 7f e4 d5 db 4b 86 a3 29 eb b5 8b a2 1b 54 37 f7 f8 ec b3 4f d9 d9 ac a0 89 1e b9 7c 83 46 a3 c5 7c 32 24 ad a7 58 bb 2e 8b 59 9f f6 d9 39 a2 94 a2 de da 24 5f c8 70 7a fc 91 58 48 a1 eb 0a d3 61 87 fd c3 07 d8 cb 19 d3 c9 14 df 75 71 1d 9b 52 b9 8a eb f9 6c 6d b6 a8 d4 1b 04 be 48 a3 92 a5 50 a9 b2 b1 71 80 b5 5c 20 2b Data Ascii: &,ahyFl6O^^[sri\|I,HB=o7zt!Dq!h:gc3-..AH%y{psJgI2\|9hw7GN:w/K)T7O\|F\|2$X.Y9$_pzXHauqRlmHPq\ +
2024-05-06 16:42:11 UTC	16384	IN	Data Raw: 37 14 8a 05 6c 2b 44 d2 1a 88 44 9c bd ff 86 e5 6c c6 fa 5a 83 94 9e 24 a9 c4 d1 d3 29 5c 47 40 cf 28 a4 f3 21 d9 54 82 74 ba 49 29 a7 d1 be fb 80 2f a8 1c ee 3d 22 a9 4b 84 31 fb fe e0 1b 0c b0 97 73 f4 6c 9e c0 5e 70 7a f2 96 d1 c4 43 d7 d2 44 a2 48 b9 ba 8e 61 38 cc 17 06 e9 4c 9c 5c 2a 49 f7 76 c2 37 af de d0 1d cc 48 a8 0a 6b eb eb ec 3e 38 64 77 a7 c9 ca 70 e9 0f fa 6c 6c 1e a0 48 09 be 7b fb 0a 3f f4 c8 66 92 94 ca 9b e4 0b 25 bc 40 24 9d c9 62 2c 87 c8 f1 88 74 3e c3 ed 70 84 61 2c 90 45 95 ea d6 0e a1 1f 63 3e 6a 33 9f 8d b1 cd 15 99 7c 96 d6 cd 0d ae ed 51 aa 6d 51 2a e5 88 7b 06 77 ed 36 37 d7 a7 f4 46 63 d6 76 0f d9 5e 6b e2 7a 06 a6 eb b0 34 0c 6e 2e ef 30 8c 15 b3 f9 0c c7 76 11 93 19 32 79 9d 72 46 26 a3 a5 98 19 26 68 65 36 d7 77 e8 b6 af Data Ascii: 7l+DDlZ$)\G@(!TtI)/="K1sl^pzCDHa8L\Iv7Hk>8dwpllH{?f%@$b,t>pa,Ec>j3\|QmQ{w67Fcv^kz4n.0v2yrF&&he6w
2024-05-06 16:42:11 UTC	1505	IN	Data Raw: b9 b1 86 24 0a 44 81 c7 6a b3 c6 d2 5a 32 9e 5a 34 aa 39 62 3c 16 b6 ce c6 c6 2e d6 cc e2 a2 d5 63 f7 ee 1a 07 3b 4d d2 aa c0 64 31 25 6b d4 88 e3 39 fd ee 90 f1 38 20 91 3d aa 95 2a ce dc bd 1d b6 86 c9 78 78 85 b5 70 29 56 57 d8 bf ff 84 bd 83 7b 08 4c 48 22 81 2f ff f4 0c 3d 9b 61 6d bd 41 4a 8a a8 d5 ab bc 7a 75 8a 6e 94 f0 9c 39 d7 ad 2e 8a 2a f3 e6 e8 94 f9 d2 e1 de 9d 75 5c db e5 e9 d7 af 79 73 76 c9 93 f7 1f f2 c9 c7 0f d8 de dd 63 a5 b6 8a a6 e9 9c 5f be 45 96 0d 32 69 8d ee cd 29 bd fe 90 52 ad ca fd 77 ee 01 0e 97 17 6d ba ed 6b 8a d5 22 62 26 cf 3b 8f de c7 50 14 5e be 7e c3 fb 1f be c7 e0 a6 8b a0 a4 69 ae ae 13 38 16 d3 7e 97 7c a1 4c b1 56 47 4d 67 d9 da da 47 4b c5 8c 6e de 92 08 32 49 12 52 6b ac 51 2f 57 e9 dc 5c 13 27 11 81 ef 62 6a 29 Data Ascii: $DjZ2Z49b<.c;Md1%k98 =xxp)VW{LH"/=amAJzun9.u\ysvc_E2i)Rwmk"b&;P^~i8~\|LVGMgGKn2IRkQ/W\'bj)
2024-05-06 16:42:11 UTC	16384	IN	Data Raw: 45 90 45 6a d5 02 e6 a2 0f a2 c1 6a b5 64 dc eb 62 5b 0e 72 bc c8 e3 47 1f a3 c8 1a dd fe 19 a9 58 40 2e 6d 30 9e af 79 f6 f2 90 93 93 16 8e e3 12 4f 48 58 2b 8f e6 e6 1e be 08 a5 5c 01 39 0a c9 64 53 b8 ab 35 bf fe cd f7 bc 3b b8 c4 0e 44 fe ec 5f 7c c1 87 f7 36 91 45 19 df d7 99 2c 5c ce ce 5e 21 46 0e 86 2a 72 70 fc 82 c5 6a 4d 22 61 90 cb 64 d1 14 85 76 e7 8a 6c a1 ca da 5e 32 9e 8c a8 d5 f3 b8 cb 21 df 7d 77 4c 3a 9b e6 e6 8d 5d ba dd 1e 92 a2 a0 4a 22 dd d6 39 92 92 a0 be 7b 8b 66 a5 44 cc 50 59 2d 57 88 c0 b8 73 8e a0 ea a8 c9 34 db f5 6d 50 55 04 25 22 a1 46 2c 16 2e a7 e7 ef b0 6c 0b dd 48 e2 87 1e 7e e8 a2 2b 09 44 c1 20 8a 7c 6a a5 0a 85 42 99 97 ef de 90 2b 94 28 16 52 2c 27 53 be fd ea 19 57 ed 2e f9 6a 83 5a ad c4 db d7 af 79 f5 aa 85 28 cb Data Ascii: EEjjdb[rGX@.m0yOHX+\9dS5;D_\|6E,\^!F*rpjM"advl^2!}wL:]J"9{fDPY-Ws4mPU%"F,.lH~+D \|jB+(R,'SW.jZy(
2024-05-06 16:42:11 UTC	16384	IN	Data Raw: f8 e4 2b 9b 44 31 19 c1 5f 12 06 1e cb d0 21 93 d4 98 8d fa 8c 8d 08 db f5 28 16 d2 08 31 95 e3 d3 53 70 0d 96 4b 9f 4c b1 4e 2a 15 e7 f8 d5 53 6e bd f1 03 dc e5 8c 41 77 88 ae c7 10 64 81 20 8a 68 9f b5 f9 ec 93 a7 18 b6 cf 7f fa eb ff 99 9b d7 2a bc 3e 7c c5 c1 61 0f db 0d c9 57 6a ec 5d dd 20 a3 cb 78 9e 84 e7 19 58 cb 19 aa 9a c6 f7 22 c2 d0 a1 3b 1e 13 f8 2e 9a ea e2 a3 b0 74 64 74 29 ce 62 36 02 31 22 a9 67 91 7d 9f 87 5f 7f 4f a6 90 63 61 4e 98 ce e6 14 8a 79 5a e7 23 be f8 f2 31 61 e0 f3 93 9f be 43 26 e3 31 9f f7 b8 68 9e 10 08 22 96 e9 13 8f 6b d4 6a 19 44 31 44 90 92 a8 71 81 4c be 44 a1 5c c4 31 5b 3c 7e f2 8a 6c b1 44 b3 79 46 af 3f a7 b6 be c6 ee f6 1a b6 e5 f0 f5 c3 c7 8c 46 53 f2 e5 15 2a b5 1a 29 25 42 89 07 34 3b 13 2c e3 d2 d0 f4 f0 fb Data Ascii: +D1_!(1SpKLNSnAwd h>\|aWj] xX";.tdt)b61"g}_OcaNyZ#1aC&1h"kjD1DqLD\1[<~lDyF?FS*)%B4;,
2024-05-06 16:42:11 UTC	4490	IN	Data Raw: 0b db c1 f7 3d 14 59 a0 50 2c e0 ba 21 d3 f1 80 d5 c6 3a 61 1c 82 28 60 cd 6d 96 f6 82 6e 77 80 a4 a8 ca 4f cd b4 81 2c 89 48 a2 4a f3 bc c5 fa c6 2e 95 8a c9 f1 f9 05 f9 42 9d 5c 36 c5 c7 1f 7f 48 2a 99 23 65 6a 7c f4 db 8f 10 65 93 5a 35 c3 f1 93 df f1 eb df fc 8e 3f ff 1f ff 57 b6 b6 1a 1c 3c fd 86 a3 83 97 14 57 b6 a8 55 57 38 39 7c 84 24 c8 88 02 0c 06 4d a2 38 24 99 5d 61 d2 eb d0 6d 3e 47 10 02 64 49 c2 9e cd f1 bc 25 46 2a 4d be 54 22 99 50 59 cc c7 24 74 85 e1 b0 cf 70 b2 64 a5 5c 60 36 ee 62 e6 2b 6c 6d ee e3 da 73 8e 4f 9f 53 5d dd 66 73 63 83 07 8f be a2 58 2c a1 49 02 ff f6 2f 3f 47 49 64 d9 bb b6 47 52 d7 09 7d 87 18 07 22 91 b3 93 16 d3 e9 94 7e bf 4f bb dd e3 9d 77 ef 33 1c f6 30 53 79 62 df 66 3c 99 d1 9f ba 94 aa 6b 28 22 b4 9b 2f 71 1c Data Ascii: =YP,!:a(`mnwO,HJ.B\6H#ej\|eZ5?W<WUW89\|$M8$]am>GdI%FMT"PY$tpd\`6b+lmsOS]fscX,I/?GIdGR}"~Ow30Sybf<k("/q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.11	49781	18.173.145.84	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:10 UTC	397	OUT	GET /amplifiedhr/1563760228_ProtectYourAssets.png HTTP/1.1 Host: d3j0t7vrtr92dk.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:11 UTC	538	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 308553 Connection: close Date: Mon, 06 May 2024 16:42:12 GMT Last-Modified: Mon, 22 Jul 2019 01:50:26 GMT ETag: "34f72c173e9341380e317db3ff39e0cb" x-amz-server-side-encryption: AES256 x-amz-version-id: zRNbtVXvhukJk87eAHINCBlOTvLUcsqH Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 a6d85ea59bcdf706b41bccb78ec2f8f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: z4qc7rp2_e7ib4F4bW9bEHwbULQVvWAqjDWnXMGNROgnOpabzqLLiQ==
2024-05-06 16:42:11 UTC	15846	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 ad 00 00 01 1e 08 06 00 00 00 39 08 4a ec 00 00 20 00 49 44 41 54 78 9c ac 9d 77 74 1d d5 d9 f5 7f 33 73 7b 2f 92 ae 2c c9 b2 24 4b 72 ef dd 06 db d8 c6 1d 63 63 87 5e 42 27 04 48 80 90 10 20 09 49 20 24 21 05 48 08 9d 04 42 75 c7 bd f7 6e 5c 90 6d d9 96 8b 64 b9 a8 b7 db db cc 7c 7f 88 3b 96 6c 09 de f7 5d df 59 8b b5 c4 a3 d1 cc 3c 67 e6 ec 73 f6 9e fd 1c 0b 9f 7d f6 59 d3 84 09 13 5c 3e 9f 0f 80 40 20 c0 8a 15 2b 10 45 91 a1 43 87 d2 bd 7b 77 00 14 45 e1 cb 2f bf 44 92 24 8a 8b 8b 19 38 70 20 a9 b6 68 d1 22 64 59 26 37 37 97 91 23 47 6a f1 65 cb 96 11 8b c5 70 bb dd 4c 9a 34 49 8b af 5b b7 8e 96 96 16 4c 26 13 37 dc 70 83 16 df b6 6d 1b 35 35 35 88 a2 c8 dc b9 73 b5 f8 81 03 07 38 73 e6 0c 00 37 Data Ascii: PNGIHDR9J IDATxwt3s{/,$Krcc^B'H I $!HBun\md\|;l]Y<gs}Y\>@ +EC{wE/D$8p h"dY&77#GjepL4I[L&7pm555s8s7
2024-05-06 16:42:11 UTC	14427	IN	Data Raw: c0 3d ed 22 54 80 0a 48 ca 93 51 b0 eb ef 08 dd 7d 08 37 bd 8a f3 8c 5d 96 35 8d 3c 4d 3e 48 15 78 bc 41 d0 c8 71 a7 95 e2 d2 e4 a2 6b f9 84 32 55 11 92 e2 47 c4 b9 b7 7d c7 0e 92 8d 29 a4 e9 0d 74 9b dd 4c 04 02 80 e4 d8 36 a6 1e fc 1c eb b4 db f0 cc 5e 10 f9 e3 a6 0d 38 0d 15 a4 4d ae 44 10 40 62 99 4c e0 cb 07 51 ac 7e 16 67 6e 15 da 69 2b 50 86 4e 93 22 77 61 cb 98 85 7a df cb c8 13 a7 a0 58 34 9f 5c cf 00 4a 9d 0a 4f 08 34 32 70 67 5d 4c 62 f5 ef 91 aa 74 f8 8a aa b0 3a 3c 24 1b 34 71 d8 23 08 42 1c f6 28 14 0a 72 73 73 11 04 41 14 92 01 22 e3 14 c5 9e e8 08 85 42 e4 e6 e6 8e 03 69 8f c7 43 4e 4e 0e 32 99 2c 6e 83 ed 74 3a c9 ca ca 42 2a 95 c6 e1 a7 cf e7 13 71 35 16 6f a3 79 5b e1 70 f8 9c b8 aa d1 68 fe 2b f6 c4 fa a6 d1 68 44 ec 89 d2 8c 80 58 7d Data Ascii: ="THQ}7]5<M>HxAqk2UG})tL6^8MD@bLQ~gni+PN"wazX4\JO42pg]Lbt:<$4q#B(rssA"BiCNN2,nt:B*q5oy[ph+hDX}
2024-05-06 16:42:11 UTC	16384	IN	Data Raw: 97 1d 96 e6 9b f7 fd e6 cf b3 cf ce cc b9 33 f3 7b 9e 73 9e 53 1c bb 09 9b 32 91 4c e9 78 8a 3f 82 91 4e 7c 80 3e 7f 19 5a c1 8f 73 da 65 48 4b ef 41 75 c5 4b a0 4f 46 5d f7 39 51 a5 89 e0 ca 3f 33 e2 0d 42 60 88 e0 ea 27 70 5c 7e 0f a1 af de 43 90 94 88 b6 1c d0 d8 f0 3e 99 49 52 67 04 cf ac 39 ec 58 db 84 64 4a 26 be 65 33 3e 73 3e de f1 0b 39 fb dd 0c 46 8c e3 e9 f8 6d 39 89 8d 7b 88 fa 3d 44 c2 61 06 27 ad 65 ba 60 27 f9 d5 b3 19 ad 53 12 75 f7 a0 50 6b 31 9c 7d 2b ec dd 02 8e a3 98 3e 88 82 bd 2a 16 0e 1f 8e 22 04 41 ca 39 be a2 1e e8 a8 22 39 23 9b d0 b1 96 15 6a a5 40 d4 e5 c4 3f f9 32 0e 3d 1a 25 f4 b3 87 09 34 1f c2 f3 8f d5 04 81 91 b3 1e 25 14 12 d0 fa 9a f1 27 ce 86 ee 98 85 60 9f b6 92 b2 99 cf a2 b2 24 10 da fc 32 d1 3d 4f 02 60 89 4f a2 f8 Data Ascii: 3{sS2Lx?N\|>ZseHKAuKOF]9Q?3B`'p\~C>IRg9XdJ&e3>s>9Fm9{=Da'e`'SuPk1}+>*"A9"9#j@?2=%4%'`$2=O`O
2024-05-06 16:42:11 UTC	16384	IN	Data Raw: 13 9f 7c b2 e4 b2 8b b3 6c c5 6a de 7a e3 75 dc 5e 2f 9f 7d fe 05 d7 e4 06 b8 93 96 7c f0 09 fb f7 ef a7 b6 a6 9a a4 e4 14 a6 de 70 03 b7 cd 9d 05 c0 fa 4d db d0 eb f4 c4 c5 99 29 2e 2e 47 a9 52 13 1e 1d 8b aa 4f 26 d1 5f cd 46 7e 7e 0d f6 8c d9 48 5d 81 90 e2 df 36 bf 52 8f f1 f8 6a 5a 67 7c 84 75 c2 23 18 ea ea 21 32 0e 0a 96 20 78 ec 78 0c 89 38 4d bd 50 a6 0c 46 65 6b c4 ef 76 d3 aa 49 42 02 28 ed 75 18 aa 36 43 77 2b 3e 53 4f 3c b5 c7 11 b5 91 78 fa dd 81 2f 36 9c a8 8a c3 78 96 dd 81 e7 9a e7 89 6c 3b 40 e3 81 5f b0 bf 51 4f f8 ba 97 90 d9 5b 69 9d f9 09 f2 fa 72 24 71 a9 d4 1e 3b 42 bb a5 19 bd d1 44 4b 4b 2b bd fb f4 c2 a0 55 e3 30 c4 23 d5 80 fe ec 76 d8 f3 1e 52 99 0c bb a9 37 82 4c 8e 42 e2 43 5a 73 90 ce 51 2f e2 4e b8 06 49 7b 05 12 b9 02 b5 Data Ascii: \|ljzu^/}\|pM)..GRO&_F~~H]6RjZg\|u#!2 xx8MPFekvIB(u6Cw+>SO<x/6xl;@_QO[ir$q;BDKK+U0#vR7LBCZsQ/NI{
2024-05-06 16:42:11 UTC	4206	IN	Data Raw: 91 20 e6 98 18 62 cc 66 42 12 29 06 ad 06 93 d1 c0 f5 37 dc 82 5a a5 e7 fb ef be a0 a9 dd 8a 5e a3 26 36 21 81 9f 7e fc 99 bb ee ba 9d d8 84 64 3c 5d 56 64 5a 13 21 29 d8 5b 5a 48 3a f3 15 e9 35 3f e1 ed 35 16 77 ff 6b 08 ed fe 10 4f 67 90 78 4f 39 a6 96 1d a0 8e c7 33 70 36 a1 00 b8 dd 60 1b ba 10 93 d7 46 02 6d 38 db 1b 71 8c 7b 19 b7 46 20 f9 79 15 ea 7b 36 a1 6a da 87 a6 fd 18 8e 5e 85 d8 3a 1d a8 a4 02 06 73 2c 66 a3 01 b3 c9 80 d7 17 c0 eb f5 44 bb 17 1b 0c 06 cc 66 73 34 65 13 0a 85 88 89 89 89 4a d8 5d 6a 57 e3 e2 e2 50 a9 54 51 9d c0 3f b2 ab 1e 8f 27 6a 57 15 0a 45 b4 10 d8 e5 72 45 ed aa 5a ad 8e da 55 a7 d3 19 b5 ab 11 55 f6 88 5d d5 68 34 d1 fd e8 f5 7a 82 c1 20 dd dd dd a8 54 aa 1e 3e 23 92 8e 92 4a a5 58 2c 16 0c 06 03 26 93 29 7a 36 00 b3 Data Ascii: bfB)7Z^&6!~d<]VdZ!)[ZH:5?5wkOgxO93p6`Fm8q{F y{6j^:s,fDfs4eJ]jWPTQ?'jWErEZUU]h4z T>#JX,&)z6
2024-05-06 16:42:11 UTC	15990	IN	Data Raw: c6 e0 21 05 48 64 b2 e8 9b b3 5c 2e 47 ad 56 73 e8 d0 21 3a da db 59 bb 7e 2d b1 31 26 f6 1f 3a c2 80 01 03 78 e8 c1 bf b2 67 e7 2e e6 cd 9f 47 77 77 37 27 4e 9c 20 26 26 0e 85 42 4a 7a 7a 3a 4d 4d 4d 9c 3a 75 8a 57 5e 79 19 31 e4 25 d0 6b 1c 93 32 25 b0 ec 56 7c d6 76 aa 6a 2a a9 4b bf 0e 4f ff eb 98 3b ea 82 9c d6 aa 1d 87 f0 d8 3b c8 3f fa 24 39 46 1f d2 5b 57 82 36 8d 6d 7b 8f d0 de 50 05 52 39 85 c3 86 93 9e 9a c0 7f de fa 80 49 93 c6 73 f0 e0 7e 4e 57 9c e1 b5 97 5f e4 a5 57 de e0 9f 4f 3c 4a 10 f8 ea cb af 50 eb cc 4c 9d 7f 25 b1 47 de 01 6b 33 65 53 5e 62 ef c6 53 0c 3a f9 22 bd 9c 07 89 99 f7 1a b2 fe b3 a9 76 43 f9 77 cf 92 5c f5 2d e6 b1 f7 90 31 eb d1 f0 fd 5e f5 28 fb 9a 64 54 5f f5 2a 79 e5 9b 19 5e ff 06 cc 7c 1d a7 39 8f b5 eb 4b 08 3a da Data Ascii: !Hd\.GVs!:Y~-1&:xg.Gww7'N &&BJzz:MMM:uW^y1%k2%V\|vjKO;;?$9F[W6m{PR9Is~NW_WO<JPL%Gk3eS^bS:"vCw\-1^(dT_y^\|9K:
2024-05-06 16:42:11 UTC	16384	IN	Data Raw: d5 f5 ef a3 99 71 17 26 67 98 13 fb 7f 42 a4 34 90 9c 3f 8e f1 d9 32 68 2d c7 d1 55 c7 b1 be 7c bc ba 7c d2 6d 47 19 9f 16 26 94 bf 18 33 70 a6 ac 11 5f 4f 3d 32 e3 60 66 8f cf 04 14 0c 1d 3e 99 dc 2c 3d 8b 96 2c 63 dd bb ef b2 e8 b2 a5 bc b5 f6 35 ba ba cd 4c 1c 3f 9e e5 57 5e 81 5c 26 8f b9 72 6b 34 1a 5a 5b 5b 69 6b 6b 8b 51 3b 81 40 00 b5 5a 4d 47 47 3b 47 0f 1f e1 f9 7f 7d c8 35 0b a7 41 ed 8f 38 43 3a 34 05 b3 39 55 59 c7 7d b7 df 4a 7a 66 0e 13 27 4f e2 74 59 09 07 0e 16 f3 c9 e7 9f 91 97 93 8a 7c 70 1e 46 97 19 b1 b5 11 47 6b 25 ed 07 3e c1 5e 78 23 86 ee 03 e4 8f 99 82 50 74 17 76 a0 64 f3 47 b8 13 0a 48 31 ea 29 1a 1b c1 9e 5e a0 7e e3 3a f2 b6 dc 43 78 d6 12 82 6e 27 e1 b6 93 c8 2f 7f 95 40 c5 16 08 b8 08 4b b4 48 6b b7 92 f0 6c 1b 82 3e 83 c3 Data Ascii: q&gB4?2h-U\|\|mG&3p_O=2`f>,=,c5L?W^\&rk4Z[[ikkQ;@ZMGG;G}5A8C:49UY}Jzf'OtY\|pFGk%>^x#PtvdGH1)^~:Cxn'/@KHkl>
2024-05-06 16:42:11 UTC	16384	IN	Data Raw: 89 cc 7c 80 b8 60 33 c8 b5 74 7b d5 04 5c dd a0 b7 a2 cf 4e 41 b3 e6 06 0c 87 df a5 e3 45 09 e1 e7 af 89 db 74 1d ea 79 ff c2 39 ed 7e e2 3e bf 04 af 42 4f db f5 9f a1 ab a8 44 ed aa c2 30 f5 4a 12 4e a6 67 8e 35 d9 89 28 8d 98 53 95 a4 1c ff 94 f0 be 57 70 ce 78 00 67 da 22 82 c3 7d a8 d2 93 19 b5 7e 25 01 41 c9 e0 b2 77 70 b6 fb 10 9b 7e 44 39 e6 42 8c aa 08 ea c3 af 11 52 c5 e1 10 e2 51 b6 6e c1 af cb 41 77 e9 3f 91 03 c2 a3 e9 c8 ed 1d 84 cf 5a 71 52 fc f6 7f 17 0e 0b ba 04 42 1d c7 d0 79 da f0 67 9f 47 28 12 46 0c fb 89 39 30 29 02 ba 04 e8 3c 0a 4d 0d 04 1f a8 c3 94 93 47 97 13 dc cd c7 40 10 30 a6 15 92 94 a0 c1 39 04 e2 7d 02 f2 a4 6c 22 a9 c5 e0 1b e4 cc 9c 16 82 0c 82 6e b0 37 20 3c d8 43 40 02 7b 5d 39 82 5c 81 42 21 c7 9a 98 8c 20 aa f1 fb 43 Data Ascii: \|`3t{\NAEty9~>BOD0JNg5(SWpxg"}~%Awp~D9BRQnAw?ZqRBygG(F90)<MG@09}l"n7 <C@{]9\B! C
2024-05-06 16:42:11 UTC	16384	IN	Data Raw: 7d b4 8e 5b 0a e5 07 a8 7c 66 1a d2 6d f3 50 2b 55 78 0b 36 a0 b2 5e c5 37 ea 7e 1c 6b 3e c5 b3 f1 cf 98 73 a7 e3 69 2c 47 ea 6a bd fe 3d f7 9b 84 23 6d 0e 2a 5b 09 24 5f df f0 cb 2a 15 b2 42 8b ca 56 8a a8 0e 87 e8 5c f8 66 1e ce ba 22 0c 39 53 68 4e 9d 83 13 2d 18 8c 60 48 00 b5 01 73 d1 4a 02 01 2f 31 7d 86 d0 3f bb 0f d3 a7 4e 00 c0 de d5 45 40 08 e6 8e de d8 7e 29 fc d6 ad 57 7f 2e bf 51 ff df 2a fc 77 ab d2 22 dd fd 7f 1e 8e fc a5 71 fe 53 89 92 ee fe 8a e5 cb 97 bf a0 52 a9 b4 b2 1c 2c 33 e2 72 b9 88 8a 8a 22 3e 3e 1e 9d 4e 77 2d f4 e6 c2 e1 70 60 b1 58 88 8b 8b c3 64 32 a1 50 28 70 b9 5c 38 9d ce 50 85 4a b3 d9 8c 52 a9 c4 e5 72 e1 76 bb 31 1a 8d c4 c6 c6 12 15 15 85 52 a9 c4 ed 76 e3 f3 f9 d0 68 34 c4 c6 c6 12 17 17 17 4a 2a ee 76 03 63 62 62 48 Data Ascii: }[\|fmP+Ux6^7~k>si,Gj=#m[$_BV\f"9ShN-`HsJ/1}?NE@~)W.Qw"qSR,3r">>Nw-p`Xd2P(p\8PJRrv1Rvh4JvcbbH
2024-05-06 16:42:11 UTC	5214	IN	Data Raw: eb 24 68 6a ed 88 17 3f 81 6d de 97 1c 38 91 8d 48 e5 4d a0 e9 06 89 13 3b 0d 19 5a 2b 39 78 b1 14 9b aa 17 41 b5 a9 24 4e bf 07 74 b7 20 64 14 d9 65 46 2a f2 cf 72 3d ff 3a 7d fb f6 65 ea 8c 99 78 29 3d 48 cb b8 84 ae b1 0e a9 48 c4 8c 6e c6 0e b9 b9 b9 54 55 55 61 b3 d9 7a ec ab 37 6f de a4 a0 a0 00 bb dd 4e 72 72 32 de de de 00 54 57 57 93 9d ed 12 f3 8c 1c 39 92 ae d6 56 3a 9d 8e 73 e7 ce b9 3b 14 77 99 53 74 74 74 70 ec d8 31 c4 62 31 e1 e1 e1 3d d2 4b 29 29 29 6e c7 a4 84 84 04 f7 fc b1 63 c7 b0 d9 6c a8 54 2a 26 4c 70 7b bd ba d4 83 5d 4e ee ed ed ed 3d a2 ab 2e 67 76 93 c9 d4 03 41 bb 9c d9 bb 1a 41 76 1f 5d cd ea fe 9b e2 b3 db ed 98 4c a6 bb 42 45 87 c3 81 c9 64 72 87 7e 5d a3 0b e5 bb 1a 8d 75 8d ae b5 5a 2c 96 1e a1 a5 d4 53 83 a2 f4 6f 1a ec Data Ascii: $hj?m8HM;Z+9xA$Nt deFr=:}ex)=HHnTUUaz7oNrr2TWW9V:s;wStttp1b1=K)))nclT&Lp{]N=.gvAAv]LBEdr~]uZ,So

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.11	49787	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:17 UTC	634	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/css/bootstrap.min.css?v=173520240735289729204 HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:18 UTC	611	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:18 GMT Content-Type: text/css Content-Length: 140100 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Wed, 17 Jan 2024 07:35:28 GMT ETag: 0x8DC172EE08870DC x-ms-request-id: c34fe8f4-601e-0023-75d4-9f6266000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164217Z-174c4b644cc2rp650s4fq0bw4n000000027000000000edsk Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-06 16:42:18 UTC	15773	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0d 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0d 0a 20 2a 2f 64 64 2c 6c 65 67 65 6e 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 Data Ascii: @charset "UTF-8";/! Bootstrap v5.1.3 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors * Copyright 2011-2021 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */dd,legend{margin-bot
2024-05-06 16:42:18 UTC	16384	IN	Data Raw: 20 2d 2e 35 72 65 6d 3b 2d 77 65 62 6b 69 74 2d 6d 61 72 67 69 6e 2d 65 6e 64 3a 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 2e 35 72 65 6d 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 67 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 63 61 6c 63 28 31 2e 35 65 6d 2b 31 72 65 6d 2b 32 70 78 29 3b 70 61 64 64 69 6e 67 3a 2e 35 72 65 6d 20 31 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 33 72 65 6d 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 67 3a 3a 66 69 6c 65 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 3a 2e 35 72 65 6d 20 31 72 65 6d 3b 6d 61 72 67 69 6e 3a 2d 2e 35 72 65 6d 20 2d 31 72 65 6d 3b 2d 77 65 62 6b 69 74 2d 6d 61 72 67 69 6e Data Ascii: -.5rem;-webkit-margin-end:.5rem;margin-inline-end:.5rem}.form-control-lg{min-height:calc(1.5em+1rem+2px);padding:.5rem 1rem;font-size:1.25rem;border-radius:.3rem}.form-control-lg::file-selector-button{padding:.5rem 1rem;margin:-.5rem -1rem;-webkit-margin
2024-05-06 16:42:18 UTC	16384	IN	Data Raw: 64 2c 2e 62 74 6e 2d 64 61 72 6b 3a 64 69 73 61 62 6c 65 64 2c 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 64 61 72 6b 2e 61 63 74 69 76 65 2c 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 64 61 72 6b 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 73 68 6f 77 2c 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 64 61 72 6b 3a 61 63 74 69 76 65 2c 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 64 61 72 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 7d 2e 62 74 6e 2d 63 68 65 63 6b 3a 66 6f 63 75 73 2b 2e 62 74 6e 2d 64 61 72 6b 2c 2e 62 74 6e 2d 64 61 72 6b 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 64 61 72 6b 3a 68 6f 76 65 72 7b 62 61 63 6b 67 Data Ascii: d,.btn-dark:disabled,.btn-outline-dark.active,.btn-outline-dark.dropdown-toggle.show,.btn-outline-dark:active,.btn-outline-dark:hover{color:#fff;background-color:#212529;border-color:#212529}.btn-check:focus+.btn-dark,.btn-dark:focus,.btn-dark:hover{backg
2024-05-06 16:42:18 UTC	16384	IN	Data Raw: 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 32 35 29 7d 2e 63 61 72 64 2d 68 65 61 64 65 72 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 63 61 6c 63 28 2e 32 35 72 65 6d 20 2d 20 31 70 78 29 20 63 61 6c 63 28 2e 32 35 72 65 6d 20 2d 20 31 70 78 29 20 30 20 30 7d 2e 63 61 72 64 2d 66 6f 6f 74 65 72 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 32 35 29 7d 2e 63 61 72 64 2d 66 6f 6f 74 65 72 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 30 20 63 61 6c 63 28 2e 32 35 72 65 6d 20 2d 20 31 70 78 29 20 63 61 6c 63 28 2e 32 35 72 65 6d 20 2d 20 31 70 78 29 7d 2e 63 61 72 64 2d 68 65 61 64 65 72 2d 74 61 62 73 7b 6d 61 72 67 Data Ascii: lid rgba(0,0,0,.125)}.card-header:first-child{border-radius:calc(.25rem - 1px) calc(.25rem - 1px) 0 0}.card-footer{border-top:1px solid rgba(0,0,0,.125)}.card-footer:last-child{border-radius:0 0 calc(.25rem - 1px) calc(.25rem - 1px)}.card-header-tabs{marg
2024-05-06 16:42:18 UTC	16384	IN	Data Raw: 6c 65 3a 73 6f 6c 69 64 7d 2e 62 73 2d 74 6f 6f 6c 74 69 70 2d 61 75 74 6f 5b 64 61 74 61 2d 70 6f 70 70 65 72 2d 70 6c 61 63 65 6d 65 6e 74 5e 3d 62 6f 74 74 6f 6d 5d 2c 2e 62 73 2d 74 6f 6f 6c 74 69 70 2d 61 75 74 6f 5b 64 61 74 61 2d 70 6f 70 70 65 72 2d 70 6c 61 63 65 6d 65 6e 74 5e 3d 74 6f 70 5d 2c 2e 62 73 2d 74 6f 6f 6c 74 69 70 2d 62 6f 74 74 6f 6d 2c 2e 62 73 2d 74 6f 6f 6c 74 69 70 2d 74 6f 70 7b 70 61 64 64 69 6e 67 3a 2e 34 72 65 6d 20 30 7d 2e 62 73 2d 74 6f 6f 6c 74 69 70 2d 61 75 74 6f 5b 64 61 74 61 2d 70 6f 70 70 65 72 2d 70 6c 61 63 65 6d 65 6e 74 5e 3d 74 6f 70 5d 20 2e 74 6f 6f 6c 74 69 70 2d 61 72 72 6f 77 2c 2e 62 73 2d 74 6f 6f 6c 74 69 70 2d 74 6f 70 20 2e 74 6f 6f 6c 74 69 70 2d 61 72 72 6f 77 7b 62 6f 74 74 6f 6d 3a 30 7d 2e 62 Data Ascii: le:solid}.bs-tooltip-auto[data-popper-placement^=bottom],.bs-tooltip-auto[data-popper-placement^=top],.bs-tooltip-bottom,.bs-tooltip-top{padding:.4rem 0}.bs-tooltip-auto[data-popper-placement^=top] .tooltip-arrow,.bs-tooltip-top .tooltip-arrow{bottom:0}.b
2024-05-06 16:42:18 UTC	16384	IN	Data Raw: 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 61 75 74 6f 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 73 74 61 72 74 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 73 74 61 72 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 65 6e 64 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 65 6e 64 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 63 65 6e 74 65 72 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 63 65 6e 74 65 72 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 62 61 73 65 6c 69 6e 65 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 62 61 73 65 6c 69 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d Data Ascii: !important}.align-self-auto{align-self:auto!important}.align-self-start{align-self:flex-start!important}.align-self-end{align-self:flex-end!important}.align-self-center{align-self:center!important}.align-self-baseline{align-self:baseline!important}.align-
2024-05-06 16:42:18 UTC	16384	IN	Data Raw: 62 2d 73 6d 2d 35 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 62 2d 73 6d 2d 61 75 74 6f 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 73 2d 73 6d 2d 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 73 2d 73 6d 2d 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 73 2d 73 6d 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 73 2d 73 6d 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 73 2d 73 6d 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 2e 35 72 65 6d 21 69 6d 70 6f 72 74 Data Ascii: b-sm-5{margin-bottom:3rem!important}.mb-sm-auto{margin-bottom:auto!important}.ms-sm-0{margin-left:0!important}.ms-sm-1{margin-left:.25rem!important}.ms-sm-2{margin-left:.5rem!important}.ms-sm-3{margin-left:1rem!important}.ms-sm-4{margin-left:1.5rem!import
2024-05-06 16:42:18 UTC	16384	IN	Data Raw: 6f 6c 75 6d 6e 2d 72 65 76 65 72 73 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 6c 67 2d 67 72 6f 77 2d 30 7b 66 6c 65 78 2d 67 72 6f 77 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 6c 67 2d 67 72 6f 77 2d 31 7b 66 6c 65 78 2d 67 72 6f 77 3a 31 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 6c 67 2d 73 68 72 69 6e 6b 2d 30 7b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 6c 67 2d 73 68 72 69 6e 6b 2d 31 7b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 6c 67 2d 77 72 61 70 7b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 6c 67 2d 6e 6f 77 72 61 70 7b 66 6c 65 78 2d 77 72 61 70 3a 6e 6f 77 72 61 70 Data Ascii: olumn-reverse!important}.flex-lg-grow-0{flex-grow:0!important}.flex-lg-grow-1{flex-grow:1!important}.flex-lg-shrink-0{flex-shrink:0!important}.flex-lg-shrink-1{flex-shrink:1!important}.flex-lg-wrap{flex-wrap:wrap!important}.flex-lg-nowrap{flex-wrap:nowrap
2024-05-06 16:42:18 UTC	9639	IN	Data Raw: 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 78 6c 2d 32 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 78 6c 2d 34 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 78 6c 2d 35 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 34 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 78 6c 2d 37 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 78 6c 2d 38 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 36 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d Data Ascii: ex:0 0 auto;width:8.33333333%}.col-xxl-2{flex:0 0 auto;width:16.66666667%}.col-xxl-4{flex:0 0 auto;width:33.33333333%}.col-xxl-5{flex:0 0 auto;width:41.66666667%}.col-xxl-7{flex:0 0 auto;width:58.33333333%}.col-xxl-8{flex:0 0 auto;width:66.66666667%}.col-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.11	49791	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:17 UTC	627	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/css/header.css?v=080020230200248353247 HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:18 UTC	617	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:18 GMT Content-Type: text/css Content-Length: 23313 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Wed, 08 Nov 2023 14:00:24 GMT ETag: 0x8DBE0630DEE7F2F x-ms-request-id: 3ba5a7a9-401e-0079-64d4-9f0481000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164217Z-174c4b644cczzkfhyv0zgfrckc000000015g00000000cqbw Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 69388692 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-06 16:42:18 UTC	15767	IN	Data Raw: 2a 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 7d 0d 0a 0d 0a 68 74 6d 6c 20 7b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 36 32 2e 35 25 3b 0d 0a 7d 0d 0a 0d 0a 68 74 6d 6c 2c 0d 0a 62 6f 64 79 20 7b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 2d 78 3a 20 63 6c 69 70 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 20 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4d 6f 6e 74 73 65 72 72 61 74 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 2e 30 31 72 65 6d 20 61 75 74 6f 20 30 3b 0d 0a Data Ascii: * { margin: 0; padding: 0; outline: 0 !important; box-sizing: border-box;}html { font-size: 62.5%;}html,body { overflow-x: clip !important;}body { font-family: "Montserrat", sans-serif; margin: 0.01rem auto 0;
2024-05-06 16:42:18 UTC	7546	IN	Data Raw: 66 6f 63 75 73 20 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 30 32 30 33 37 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 70 64 2d 38 30 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 36 30 70 78 20 30 3b 0d 0a 20 20 7d 0d 0a 7d 0d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 39 30 70 78 29 20 7b 0d 0a 20 20 2e 73 63 72 6f 6c 6c 2d 74 6f 2d 74 6f 70 20 7b 0d 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 34 35 70 78 3b 0d 0a 20 20 7d 0d 0a 20 20 68 74 6d 6c 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 35 35 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 66 6f 6f 74 65 72 2d 6c 65 66 74 2d 62 6c 6f 63 6b 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f Data Ascii: focus { color: #102037; background-color: #fff; } .pd-80 { padding: 60px 0; }}@media (max-width: 990px) { .scroll-to-top { bottom: 45px; } html { font-size: 55%; } .footer-left-block { margin-botto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.11	49788	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:17 UTC	625	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/css/home.css?v=015820240858469386724 HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:18 UTC	609	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:18 GMT Content-Type: text/css Content-Length: 9229 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Fri, 01 Mar 2024 08:58:46 GMT ETag: 0x8DC39CDCE053812 x-ms-request-id: 065889a8-f01e-001e-1dd4-9f147d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164217Z-174c4b644cczzkfhyv0zgfrckc000000014000000000kn23 Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-06 16:42:18 UTC	9229	IN	Data Raw: 2e 68 6f 6d 65 2d 73 6c 69 64 65 72 20 7b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 7d 0d 0a 2e 68 6f 6d 65 2d 73 6c 69 64 65 72 20 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 20 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 68 6f 6d 65 2d 73 6c 69 64 65 72 20 2e 6d 6f 62 69 6c 65 2d 62 61 6e 6e 65 72 20 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a Data Ascii: .home-slider { position: relative;}.home-slider .carousel-item { background-repeat: no-repeat; background-size: cover; background-position: center center;}.home-slider .mobile-banner { background-repeat: no-repeat; background-siz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.11	49789	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:17 UTC	661	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/xs-home-banner.webp HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:18 UTC	520	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:17 GMT Content-Type: image/webp Content-Length: 21960 Connection: close Last-Modified: Fri, 08 Sep 2023 11:15:05 GMT ETag: 0x8DBB05CDAEB9910 x-ms-request-id: 37afdea1-c01e-0058-18d4-9f20fa000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164217Z-174c4b644ccvzznle3ep1zsgcn000000012g00000000sy60 Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-06 16:42:18 UTC	15864	IN	Data Raw: 52 49 46 46 c0 55 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 bb 02 00 bb 02 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFUWEBPVP8X ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-05-06 16:42:18 UTC	6096	IN	Data Raw: 16 02 b1 92 3a d4 2b ec a8 c1 52 c3 35 15 97 ca 6b 68 f6 b0 09 44 69 f5 d9 c8 8c 41 02 c8 d7 39 f5 af 68 b3 56 7a f9 1a 65 8c 72 55 50 10 9f c5 7c c5 8c d5 87 8c 04 1f c1 64 fd f0 83 d2 c4 9b 81 7f 90 23 f5 5a 7b d2 57 e3 22 4b 4c 7c 27 19 17 a3 2d 82 88 b4 28 16 f3 e2 b9 1c 36 5d aa 7c 8d f6 11 80 85 f7 13 e9 60 ef df 54 bc 62 6a 45 df a3 0a b5 97 89 45 43 95 77 2e 91 4d ab d8 ff 31 fc ea d4 8b 82 80 9b bc 07 67 37 16 bd ef 91 c3 c1 19 d3 ed e2 69 ac b5 e5 5e 52 4e 6d 83 c2 5e f0 af fc c7 a1 a9 84 2b de f6 05 ad 34 78 fd 02 3c 12 d2 95 2a 97 36 49 1b 68 2a b2 d2 fe 3d 73 84 63 bd cc ae 36 07 8c 5a 1f 2f 26 73 39 83 bd a8 84 94 ab 87 57 05 d5 fb da 94 ba b6 f7 bf 10 e2 03 68 a3 19 98 5c 9d 7f ed 24 40 aa 00 8f 0e 81 db 9b 3c e8 8f 01 89 b7 bc 87 b8 42 36 Data Ascii: :+R5khDiA9hVzerUP\|d#Z{W"KL\|'-(6]\|`TbjEECw.M1g7i^RNm^+4x<6Ih=sc6Z/&s9Wh\$@<B6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.11	49790	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:17 UTC	621	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/js/jquery-3.7.0.min.js?v=081420231114354913937 HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:18 UTC	624	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:18 GMT Content-Type: application/javascript Content-Length: 87464 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Fri, 08 Sep 2023 11:15:06 GMT ETag: 0x8DBB05CDB067019 x-ms-request-id: e232dfc2-101e-0074-0cd4-9fcc55000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164217Z-174c4b644cclmf9mt9bc53yybs00000000sg00000001cky5 Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-06 16:42:18 UTC	15760	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 Data Ascii: /! jQuery v3.7.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQ
2024-05-06 16:42:18 UTC	16384	IN	Data Raw: 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 21 21 65 2e 63 68 65 63 6b 65 64 7c 7c 66 65 28 65 2c 22 6f 70 74 69 6f 6e 22 29 26 26 21 21 65 2e 73 65 6c 65 63 74 65 64 7d 2c 73 65 6c 65 63 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 21 30 3d 3d 3d 65 2e 73 65 6c 65 63 74 65 64 7d 2c 65 6d 70 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 65 3d 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 65 3b 65 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 65 2e 6e 6f 64 65 54 79 70 65 3c 36 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 70 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b Data Ascii: n fe(e,"input")&&!!e.checked\|\|fe(e,"option")&&!!e.selected},selected:function(e){return e.parentNode&&e.parentNode.selectedIndex,!0===e.selected},empty:function(e){for(e=e.firstChild;e;e=e.nextSibling)if(e.nodeType<6)return!1;return!0},parent:function(e){
2024-05-06 16:42:18 UTC	16384	IN	Data Raw: 64 65 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 3d 74 7c 7c 22 66 78 22 3b 76 61 72 20 6e 3d 63 65 2e 71 75 65 75 65 28 65 2c 74 29 2c 72 3d 6e 2e 6c 65 6e 67 74 68 2c 69 3d 6e 2e 73 68 69 66 74 28 29 2c 6f 3d 63 65 2e 5f 71 75 65 75 65 48 6f 6f 6b 73 28 65 2c 74 29 3b 22 69 6e 70 72 6f 67 72 65 73 73 22 3d 3d 3d 69 26 26 28 69 3d 6e 2e 73 68 69 66 74 28 29 2c 72 2d 2d 29 2c 69 26 26 28 22 66 78 22 3d 3d 3d 74 26 26 6e 2e 75 6e 73 68 69 66 74 28 22 69 6e 70 72 6f 67 72 65 73 73 22 29 2c 64 65 6c 65 74 65 20 6f 2e 73 74 6f 70 2c 69 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 65 2e 64 65 71 75 65 75 65 28 65 2c 74 29 7d 2c 6f 29 29 2c 21 72 26 26 6f 26 26 6f 2e 65 6d 70 74 79 2e 66 69 72 65 28 29 7d 2c 5f 71 75 65 75 65 Data Ascii: dequeue:function(e,t){t=t\|\|"fx";var n=ce.queue(e,t),r=n.length,i=n.shift(),o=ce._queueHooks(e,t);"inprogress"===i&&(i=n.shift(),r--),i&&("fx"===t&&n.unshift("inprogress"),delete o.stop,i.call(e,function(){ce.dequeue(e,t)},o)),!r&&o&&o.empty.fire()},_queue
2024-05-06 16:42:18 UTC	16384	IN	Data Raw: 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 20 74 2e 69 6e 6e 65 72 48 54 4d 4c 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 21 4f 65 2e 74 65 73 74 28 65 29 26 26 21 6b 65 5b 28 54 65 2e 65 78 65 63 28 65 29 7c 7c 5b 22 22 2c 22 22 5d 29 5b 31 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 29 7b 65 3d 63 65 2e 68 74 6d 6c 50 72 65 66 69 6c 74 65 72 28 65 29 3b 74 72 79 7b 66 6f 72 28 3b 6e 3c 72 3b 6e 2b 2b 29 31 3d 3d 3d 28 74 3d 74 68 69 73 5b 6e 5d 7c 7c 7b 7d 29 2e 6e 6f 64 65 54 79 70 65 26 26 28 63 65 2e 63 6c 65 61 6e 44 61 74 61 28 53 65 28 74 2c 21 31 29 29 2c 74 2e 69 6e 6e 65 72 48 54 4d 4c 3d 65 29 3b 74 3d 30 7d 63 61 74 63 68 28 65 29 7b 7d 7d 74 26 26 74 68 69 73 2e 65 6d 70 74 79 28 29 2e 61 70 70 Data Ascii: ==t.nodeType)return t.innerHTML;if("string"==typeof e&&!Oe.test(e)&&!ke[(Te.exec(e)\|\|["",""])[1].toLowerCase()]){e=ce.htmlPrefilter(e);try{for(;n<r;n++)1===(t=this[n]\|\|{}).nodeType&&(ce.cleanData(Se(t,!1)),t.innerHTML=e);t=0}catch(e){}}t&&this.empty().app
2024-05-06 16:42:18 UTC	16384	IN	Data Raw: 6e 2e 65 78 74 65 6e 64 28 7b 70 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 52 28 74 68 69 73 2c 63 65 2e 70 72 6f 70 2c 65 2c 74 2c 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 72 65 6d 6f 76 65 50 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 74 68 69 73 5b 63 65 2e 70 72 6f 70 46 69 78 5b 65 5d 7c 7c 65 5d 7d 29 7d 7d 29 2c 63 65 2e 65 78 74 65 6e 64 28 7b 70 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 20 31 3d 3d 3d 6f 26 26 63 65 2e Data Ascii: n.extend({prop:function(e,t){return R(this,ce.prop,e,t,1<arguments.length)},removeProp:function(e){return this.each(function(){delete this[ce.propFix[e]\|\|e]})}}),ce.extend({prop:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return 1===o&&ce.
2024-05-06 16:42:18 UTC	6168	IN	Data Raw: 61 72 73 65 74 3a 6e 2e 73 63 72 69 70 74 43 68 61 72 73 65 74 2c 73 72 63 3a 6e 2e 75 72 6c 7d 29 2e 6f 6e 28 22 6c 6f 61 64 20 65 72 72 6f 72 22 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 2e 72 65 6d 6f 76 65 28 29 2c 69 3d 6e 75 6c 6c 2c 65 26 26 74 28 22 65 72 72 6f 72 22 3d 3d 3d 65 2e 74 79 70 65 3f 34 30 34 3a 32 30 30 2c 65 2e 74 79 70 65 29 7d 29 2c 43 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 72 5b 30 5d 29 7d 2c 61 62 6f 72 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 26 26 69 28 29 7d 7d 7d 29 3b 76 61 72 20 4a 74 2c 4b 74 3d 5b 5d 2c 5a 74 3d 2f 28 3d 29 5c 3f 28 3f 3d 26 7c 24 29 7c 5c 3f 5c 3f 2f 3b 63 65 2e 61 6a 61 78 53 65 74 75 70 28 7b 6a 73 6f 6e 70 3a 22 63 61 6c 6c 62 61 63 6b 22 2c 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 Data Ascii: arset:n.scriptCharset,src:n.url}).on("load error",i=function(e){r.remove(),i=null,e&&t("error"===e.type?404:200,e.type)}),C.head.appendChild(r[0])},abort:function(){i&&i()}}});var Jt,Kt=[],Zt=/(=)\?(?=&\|$)\|\?\?/;ce.ajaxSetup({jsonp:"callback",jsonpCallbac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.11	49792	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:17 UTC	651	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/logo.webp HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:18 UTC	519	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:18 GMT Content-Type: image/webp Content-Length: 4288 Connection: close Last-Modified: Fri, 08 Sep 2023 11:15:02 GMT ETag: 0x8DBB05CD8F17320 x-ms-request-id: 2d7403b9-501e-0075-4fd4-9f9389000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164217Z-174c4b644cc8llxfddnp81g2cw000000011g00000000w9t4 Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-06 16:42:18 UTC	4288	IN	Data Raw: 52 49 46 46 b8 10 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 30 00 00 00 bc 01 00 5c 00 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFWEBPVP8X0\ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.11	49804	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:19 UTC	618	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/js/bootstrap.min.js?v=081420231114354913928 HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:19 UTC	624	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:19 GMT Content-Type: application/javascript Content-Length: 59182 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Fri, 08 Sep 2023 11:15:05 GMT ETag: 0x8DBB05CDAF2C3E3 x-ms-request-id: 1e4e34b3-501e-0017-58d4-9f51ae000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164219Z-174c4b644ccnbbfqs67zd7fd04000000024000000000t0y6 Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-06 16:42:19 UTC	15760	IN	Data Raw: 2f 2a 21 0d 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0d 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0d 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0d 0a 20 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 Data Ascii: /! Bootstrap v5.1.3 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,e
2024-05-06 16:42:19 UTC	16384	IN	Data Raw: 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 73 6c 69 64 65 22 29 29 7b 6f 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 68 29 2c 66 28 6f 29 2c 73 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 63 29 2c 6f 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 63 29 3b 63 6f 6e 73 74 20 74 3d 28 29 3d 3e 7b 6f 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 63 2c 68 29 2c 6f 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 6f 74 29 2c 73 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 6f 74 2c 68 2c 63 29 2c 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 31 2c 73 65 74 54 69 6d 65 6f 75 74 28 75 2c 30 29 7d 3b 74 68 69 73 2e 5f 71 75 65 75 65 43 61 6c 6c 62 61 63 6b 28 74 2c 73 2c 21 30 29 7d 65 Data Ascii: (this._element.classList.contains("slide")){o.classList.add(h),f(o),s.classList.add(c),o.classList.add(c);const t=()=>{o.classList.remove(c,h),o.classList.add(ot),s.classList.remove(ot,h,c),this._isSliding=!1,setTimeout(u,0)};this._queueCallback(t,s,!0)}e
2024-05-06 16:42:19 UTC	16384	IN	Data Raw: 28 29 2c 74 68 69 73 2e 5f 73 65 74 52 65 73 69 7a 65 45 76 65 6e 74 28 29 2c 74 68 69 73 2e 5f 66 6f 63 75 73 74 72 61 70 2e 64 65 61 63 74 69 76 61 74 65 28 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 6c 65 29 2c 24 2e 6f 66 66 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 6e 65 29 2c 24 2e 6f 66 66 28 74 68 69 73 2e 5f 64 69 61 6c 6f 67 2c 72 65 29 2c 74 68 69 73 2e 5f 71 75 65 75 65 43 61 6c 6c 62 61 63 6b 28 28 28 29 3d 3e 74 68 69 73 2e 5f 68 69 64 65 4d 6f 64 61 6c 28 29 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 74 29 7d 64 69 73 70 6f 73 65 28 29 7b 5b 77 69 6e 64 6f 77 2c 74 68 69 73 2e 5f 64 69 61 6c 6f 67 5d 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 24 2e 6f 66 66 28 74 2c 22 2e 62 73 2e Data Ascii: (),this._setResizeEvent(),this._focustrap.deactivate(),this._element.classList.remove(le),$.off(this._element,ne),$.off(this._dialog,re),this._queueCallback((()=>this._hideModal()),this._element,t)}dispose(){[window,this._dialog].forEach((t=>$.off(t,".bs.
2024-05-06 16:42:19 UTC	10654	IN	Data Raw: 28 74 68 69 73 2e 5f 61 63 74 69 76 65 54 72 69 67 67 65 72 5b 74 5d 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 5f 67 65 74 43 6f 6e 66 69 67 28 74 29 7b 63 6f 6e 73 74 20 65 3d 58 2e 67 65 74 44 61 74 61 41 74 74 72 69 62 75 74 65 73 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 54 65 2e 68 61 73 28 74 29 26 26 64 65 6c 65 74 65 20 65 5b 74 5d 7d 29 29 2c 28 74 3d 7b 2e 2e 2e 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 44 65 66 61 75 6c 74 2c 2e 2e 2e 65 2c 2e 2e 2e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 3f 74 3a 7b 7d 7d 29 2e 63 6f 6e 74 61 69 6e 65 72 3d 21 31 3d 3d 3d 74 2e 63 6f 6e 74 61 69 6e 65 72 Data Ascii: (this._activeTrigger[t])return!0;return!1}_getConfig(t){const e=X.getDataAttributes(this._element);return Object.keys(e).forEach((t=>{Te.has(t)&&delete e[t]})),(t={...this.constructor.Default,...e,..."object"==typeof t&&t?t:{}}).container=!1===t.container

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.11	49801	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:19 UTC	418	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/logo.webp HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:19 UTC	539	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:19 GMT Content-Type: image/webp Content-Length: 4288 Connection: close Last-Modified: Fri, 08 Sep 2023 11:15:02 GMT ETag: 0x8DBB05CD8F17320 x-ms-request-id: 2d7403b9-501e-0075-4fd4-9f9389000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164219Z-174c4b644ccs74jgmhzea1yqq00000000180000000000a5b Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-06 16:42:19 UTC	4288	IN	Data Raw: 52 49 46 46 b8 10 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 30 00 00 00 bc 01 00 5c 00 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFWEBPVP8X0\ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.11	49798	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:19 UTC	609	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/js/webp.js?v=081420231114354913925 HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:19 UTC	623	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:19 GMT Content-Type: application/javascript Content-Length: 3443 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Fri, 08 Sep 2023 11:15:06 GMT ETag: 0x8DBB05CDB1CDAF4 x-ms-request-id: 0014795a-501e-0081-1bd4-9f587f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164219Z-174c4b644ccr7bcmgpxbx6ydy800000001wg00000000gzuv Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-06 16:42:19 UTC	3443	IN	Data Raw: 2f 2a 21 20 6d 6f 64 65 72 6e 69 7a 72 20 33 2e 36 2e 30 20 28 43 75 73 74 6f 6d 20 42 75 69 6c 64 29 20 7c 20 4d 49 54 20 2a 0d 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 2f 3f 2d 77 65 62 70 2d 73 65 74 63 6c 61 73 73 65 73 20 21 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 41 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 3d 3d 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 65 2c 6e 2c 41 2c 74 2c 61 2c 69 2c 6c 3b 66 6f 72 28 76 61 72 20 66 20 69 6e 20 72 29 69 66 28 72 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 66 29 29 7b 69 66 28 65 3d 5b 5d 2c 6e 3d 72 5b 66 5d 2c 6e 2e 6e 61 6d 65 26 26 28 65 2e 70 75 73 68 28 Data Ascii: /! modernizr 3.6.0 (Custom Build) \| MIT * https://modernizr.com/download/?-webp-setclasses !*/!function(e,n,A){function o(e,n){return typeof e===n}function t(){var e,n,A,t,a,i,l;for(var f in r)if(r.hasOwnProperty(f)){if(e=[],n=r[f],n.name&&(e.push(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.11	49799	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:19 UTC	621	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/js/owl.carousel.min.js?v=081420231114354913921 HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:19 UTC	631	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:19 GMT Content-Type: application/javascript Content-Length: 42772 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Fri, 08 Sep 2023 11:15:06 GMT ETag: 0x8DBB05CDB153AF1 x-ms-request-id: 55658aa7-001e-0057-13d4-9f5696000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164219Z-174c4b644ccnbbfqs67zd7fd04000000024g00000000se66 Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 69388692 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-06 16:42:19 UTC	15753	IN	Data Raw: 2f 2a 2a 0d 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 32 2e 31 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 37 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 20 28 29 0d 0a 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 62 2c 63 29 7b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 61 2e 65 78 74 65 6e 64 28 7b 7d 2c 65 2e 44 65 66 61 75 6c 74 73 2c 63 29 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 3d 61 28 62 29 2c 74 68 69 73 2e 5f 68 61 6e 64 6c 65 72 73 3d 7b 7d 2c 74 68 69 73 2e 5f 70 6c 75 67 69 6e 73 3d 7b 7d 2c 74 68 69 73 2e 5f 73 75 70 72 65 73 73 Data Ascii: /** * Owl Carousel v2.2.1 * Copyright 2013-2017 David Deutsch * Licensed under () */!function(a,b,c,d){function e(b,c){this.settings=null,this.options=a.extend({},e.Defaults,c),this.$element=a(b),this._handlers={},this._plugins={},this._supress
2024-05-06 16:42:19 UTC	16384	IN	Data Raw: 67 73 2e 6e 65 73 74 65 64 49 74 65 6d 53 65 6c 65 63 74 6f 72 26 26 28 62 3d 62 2e 66 69 6e 64 28 22 2e 22 2b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 6e 65 73 74 65 64 49 74 65 6d 53 65 6c 65 63 74 6f 72 29 29 2c 62 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7d 29 2e 65 61 63 68 28 61 2e 70 72 6f 78 79 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 74 68 69 73 2e 70 72 65 70 61 72 65 28 62 29 2c 74 68 69 73 2e 24 73 74 61 67 65 2e 61 70 70 65 6e 64 28 62 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 70 75 73 68 28 62 29 2c 74 68 69 73 2e 5f 6d 65 72 67 65 72 73 2e 70 75 73 68 28 31 2a 62 2e 66 69 6e 64 28 22 5b 64 61 74 61 2d 6d 65 72 67 65 5d 22 29 2e 61 64 64 42 61 Data Ascii: gs.nestedItemSelector&&(b=b.find("."+this.settings.nestedItemSelector)),b.filter(function(){return 1===this.nodeType}).each(a.proxy(function(a,b){b=this.prepare(b),this.$stage.append(b),this._items.push(b),this._mergers.push(1*b.find("[data-merge]").addBa
2024-05-06 16:42:19 UTC	10635	IN	Data Raw: 6d 61 74 65 3d 65 7d 28 77 69 6e 64 6f 77 2e 5a 65 70 74 6f 7c 7c 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 74 68 69 73 2e 5f 63 6f 72 65 3d 62 2c 74 68 69 73 2e 5f 74 69 6d 65 6f 75 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 70 61 75 73 65 64 3d 21 31 2c 74 68 69 73 2e 5f 68 61 6e 64 6c 65 72 73 3d 7b 22 63 68 61 6e 67 65 64 2e 6f 77 6c 2e 63 61 72 6f 75 73 65 6c 22 3a 61 2e 70 72 6f 78 79 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 6e 61 6d 65 73 70 61 63 65 26 26 22 73 65 74 74 69 6e 67 73 22 3d 3d 3d 61 2e 70 72 6f 70 65 72 74 79 2e 6e 61 6d 65 3f 74 68 69 73 2e 5f 63 6f 72 65 2e 73 65 74 74 69 6e Data Ascii: mate=e}(window.Zepto\|\|window.jQuery,window,document),function(a,b,c,d){var e=function(b){this._core=b,this._timeout=null,this._paused=!1,this._handlers={"changed.owl.carousel":a.proxy(function(a){a.namespace&&"settings"===a.property.name?this._core.settin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.11	49802	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:19 UTC	611	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/js/common.js?v=082720230227518133675 HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:19 UTC	630	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:19 GMT Content-Type: application/javascript Content-Length: 2719 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Fri, 08 Sep 2023 14:27:51 GMT ETag: 0x8DBB077C8855AAE x-ms-request-id: e87b4163-901e-006a-52d4-9f208d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164219Z-174c4b644cc6plwg4k7ydfex1w00000001w000000000kqpa Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 69388692 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-06 16:42:19 UTC	2719	IN	Data Raw: 2f 2f 44 72 6f 70 64 6f 77 6e 0d 0a 24 28 27 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 27 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0d 0a 09 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 3b 0d 0a 7d 29 3b 0d 0a 24 28 22 2e 64 72 70 2d 61 72 72 6f 77 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 09 24 28 74 68 69 73 29 2e 70 61 72 65 6e 74 28 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 22 73 68 6f 77 2d 64 72 6f 70 22 29 3b 0d 0a 7d 29 0d 0a 2f 2f 44 72 6f 70 64 6f 77 6e 20 45 4e 44 0d 0a 0d 0a 2f 2f 77 65 62 70 2d 66 69 6e 64 65 72 0d 0a 24 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 6c 6f 61 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 09 24 28 22 68 74 6d 6c 2e 6e 6f 2d 77 65 62 70 20 2e Data Ascii: //Dropdown$('.dropdown-menu').click(function (e) {e.stopPropagation();});$(".drp-arrow").click(function () {$(this).parent().toggleClass("show-drop");})//Dropdown END//webp-finder$(window).on('load', function () {$("html.no-webp .

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.11	49800	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:19 UTC	428	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/xs-home-banner.webp HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:19 UTC	540	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:19 GMT Content-Type: image/webp Content-Length: 21960 Connection: close Last-Modified: Fri, 08 Sep 2023 11:15:05 GMT ETag: 0x8DBB05CDAEB9910 x-ms-request-id: 37afdea1-c01e-0058-18d4-9f20fa000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164219Z-174c4b644cc7f4tz1k9q69z0vc000000020g000000000kuz Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-06 16:42:19 UTC	15844	IN	Data Raw: 52 49 46 46 c0 55 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 bb 02 00 bb 02 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFUWEBPVP8X ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-05-06 16:42:19 UTC	6116	IN	Data Raw: 55 8c f1 ed db f3 02 7e ff b8 1d 0a cb 74 5e cb 86 cc 71 6f 16 02 b1 92 3a d4 2b ec a8 c1 52 c3 35 15 97 ca 6b 68 f6 b0 09 44 69 f5 d9 c8 8c 41 02 c8 d7 39 f5 af 68 b3 56 7a f9 1a 65 8c 72 55 50 10 9f c5 7c c5 8c d5 87 8c 04 1f c1 64 fd f0 83 d2 c4 9b 81 7f 90 23 f5 5a 7b d2 57 e3 22 4b 4c 7c 27 19 17 a3 2d 82 88 b4 28 16 f3 e2 b9 1c 36 5d aa 7c 8d f6 11 80 85 f7 13 e9 60 ef df 54 bc 62 6a 45 df a3 0a b5 97 89 45 43 95 77 2e 91 4d ab d8 ff 31 fc ea d4 8b 82 80 9b bc 07 67 37 16 bd ef 91 c3 c1 19 d3 ed e2 69 ac b5 e5 5e 52 4e 6d 83 c2 5e f0 af fc c7 a1 a9 84 2b de f6 05 ad 34 78 fd 02 3c 12 d2 95 2a 97 36 49 1b 68 2a b2 d2 fe 3d 73 84 63 bd cc ae 36 07 8c 5a 1f 2f 26 73 39 83 bd a8 84 94 ab 87 57 05 d5 fb da 94 ba b6 f7 bf 10 e2 03 68 a3 19 98 5c 9d 7f ed Data Ascii: U~t^qo:+R5khDiA9hVzerUP\|d#Z{W"KL\|'-(6]\|`TbjEECw.M1g7i^RNm^+4x<6Ih=sc6Z/&s9Wh\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.11	49803	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:19 UTC	621	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/js/recent-blog-post.js?v=014420240744232137143 HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:19 UTC	623	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:19 GMT Content-Type: application/javascript Content-Length: 2504 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Fri, 01 Mar 2024 07:44:22 GMT ETag: 0x8DC39C3696BDA06 x-ms-request-id: 1648d47f-b01e-0052-5ad4-9f844d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164219Z-174c4b644ccr7hzt0kk52hyr1n000000016g0000000062d4 Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-06 16:42:19 UTC	2504	IN	Data Raw: 0d 0a 0d 0a 2f 2f 63 61 6c 6c 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 61 66 74 65 72 20 70 61 67 65 20 6c 6f 61 64 0d 0a 24 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 6c 6f 61 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 6c 6f 61 64 72 65 63 65 6e 74 42 6c 6f 67 50 6f 73 74 28 33 29 3b 0d 0a 7d 29 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 76 65 72 74 44 61 74 65 28 64 61 74 65 54 69 6d 65 29 20 7b 0d 0a 0d 0a 20 20 76 61 72 20 6d 6f 6e 74 68 4e 61 6d 65 73 20 3d 20 5b 22 4a 61 6e 22 2c 20 22 46 65 62 22 2c 20 22 4d 61 72 22 2c 20 22 41 70 72 22 2c 20 22 4d 61 79 22 2c 20 22 4a 75 6e 22 2c 20 22 4a 75 6c 22 2c 20 22 41 75 67 22 2c 20 22 53 65 70 22 2c 20 22 4f 63 74 22 2c 20 22 4e 6f 76 22 2c 20 22 44 65 63 22 5d 3b 0d 0a 0d 0a Data Ascii: //call this function after page load$(window).on('load', function () { loadrecentBlogPost(3);});function convertDate(dateTime) { var monthNames = ["Jan", "Feb", "Mar", "Apr", "May", "Jun", "Jul", "Aug", "Sep", "Oct", "Nov", "Dec"];

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.11	49795	104.17.24.14	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:19 UTC	572	OUT	GET /ajax/libs/jquery-validate/1.19.3/jquery.validate.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:19 UTC	954	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:19 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"60c342a7-1ec3" Last-Modified: Fri, 11 Jun 2021 11:01:59 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 615184 Expires: Sat, 26 Apr 2025 16:42:19 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gI9egWa8CImJIRpZaoJqqfmlaiIJjpcXu4EX2ws6Qm2ZhqoGevoWtcMQ3T817HmSnYAj85SqDJnjOOjlhIzJFo%2Bnrkn3TRTXHs7FgvTbopgW1Wbk3rGKq948G1PjqCbVFyOvI1Nj"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87fa6c427a26498c-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:19 UTC	415	IN	Data Raw: 35 66 36 65 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 56 61 6c 69 64 61 74 69 6f 6e 20 50 6c 75 67 69 6e 20 2d 20 76 31 2e 31 39 2e 33 20 2d 20 31 2f 39 2f 32 30 32 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 76 61 6c 69 64 61 74 69 6f 6e 2e 6f 72 67 2f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 31 20 4a c3 b6 72 6e 20 5a 61 65 66 66 65 72 65 72 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 61 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 Data Ascii: 5f6e/! jQuery Validation Plugin - v1.19.3 - 1/9/2021 https://jqueryvalidation.org/ * Copyright (c) 2021 Jrn Zaefferer; Licensed MIT */!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof module&&module.exports
2024-05-06 16:42:19 UTC	1369	IN	Data Raw: 77 61 72 6e 28 22 4e 6f 74 68 69 6e 67 20 73 65 6c 65 63 74 65 64 2c 20 63 61 6e 27 74 20 76 61 6c 69 64 61 74 65 2c 20 72 65 74 75 72 6e 69 6e 67 20 6e 6f 74 68 69 6e 67 2e 22 29 29 3b 76 61 72 20 63 3d 61 2e 64 61 74 61 28 74 68 69 73 5b 30 5d 2c 22 76 61 6c 69 64 61 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 63 3f 63 3a 28 74 68 69 73 2e 61 74 74 72 28 22 6e 6f 76 61 6c 69 64 61 74 65 22 2c 22 6e 6f 76 61 6c 69 64 61 74 65 22 29 2c 63 3d 6e 65 77 20 61 2e 76 61 6c 69 64 61 74 6f 72 28 62 2c 74 68 69 73 5b 30 5d 29 2c 61 2e 64 61 74 61 28 74 68 69 73 5b 30 5d 2c 22 76 61 6c 69 64 61 74 6f 72 22 2c 63 29 2c 63 2e 73 65 74 74 69 6e 67 73 2e 6f 6e 73 75 62 6d 69 74 26 26 28 74 68 69 73 2e 6f 6e 28 22 63 6c 69 63 6b 2e 76 61 6c 69 64 61 74 65 22 2c 22 3a 73 75 Data Ascii: warn("Nothing selected, can't validate, returning nothing."));var c=a.data(this[0],"validator");return c?c:(this.attr("novalidate","novalidate"),c=new a.validator(b,this[0]),a.data(this[0],"validator",c),c.settings.onsubmit&&(this.on("click.validate",":su
2024-05-06 16:42:19 UTC	1369	IN	Data Raw: 68 69 73 2e 61 74 74 72 28 22 6e 61 6d 65 22 29 29 2c 6e 75 6c 6c 21 3d 6a 2e 66 6f 72 6d 29 29 7b 69 66 28 62 29 73 77 69 74 63 68 28 64 3d 61 2e 64 61 74 61 28 6a 2e 66 6f 72 6d 2c 22 76 61 6c 69 64 61 74 6f 72 22 29 2e 73 65 74 74 69 6e 67 73 2c 65 3d 64 2e 72 75 6c 65 73 2c 66 3d 61 2e 76 61 6c 69 64 61 74 6f 72 2e 73 74 61 74 69 63 52 75 6c 65 73 28 6a 29 2c 62 29 7b 63 61 73 65 22 61 64 64 22 3a 61 2e 65 78 74 65 6e 64 28 66 2c 61 2e 76 61 6c 69 64 61 74 6f 72 2e 6e 6f 72 6d 61 6c 69 7a 65 52 75 6c 65 28 63 29 29 2c 64 65 6c 65 74 65 20 66 2e 6d 65 73 73 61 67 65 73 2c 65 5b 6a 2e 6e 61 6d 65 5d 3d 66 2c 63 2e 6d 65 73 73 61 67 65 73 26 26 28 64 2e 6d 65 73 73 61 67 65 73 5b 6a 2e 6e 61 6d 65 5d 3d 61 2e 65 78 74 65 6e 64 28 64 2e 6d 65 73 73 61 67 Data Ascii: his.attr("name")),null!=j.form)){if(b)switch(d=a.data(j.form,"validator").settings,e=d.rules,f=a.validator.staticRules(j),b){case"add":a.extend(f,a.validator.normalizeRule(c)),delete f.messages,e[j.name]=f,c.messages&&(d.messages[j.name]=a.extend(d.messag
2024-05-06 16:42:19 UTC	1369	IN	Data Raw: 28 63 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 62 3d 62 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 7b 22 2b 61 2b 22 5c 5c 7d 22 2c 22 67 22 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 29 7d 29 2c 62 29 7d 2c 61 2e 65 78 74 65 6e 64 28 61 2e 76 61 6c 69 64 61 74 6f 72 2c 7b 64 65 66 61 75 6c 74 73 3a 7b 6d 65 73 73 61 67 65 73 3a 7b 7d 2c 67 72 6f 75 70 73 3a 7b 7d 2c 72 75 6c 65 73 3a 7b 7d 2c 65 72 72 6f 72 43 6c 61 73 73 3a 22 65 72 72 6f 72 22 2c 70 65 6e 64 69 6e 67 43 6c 61 73 73 3a 22 70 65 6e 64 69 6e 67 22 2c 76 61 6c 69 64 43 6c 61 73 73 3a 22 76 61 6c 69 64 22 2c 65 72 72 6f 72 45 6c 65 6d 65 6e 74 3a 22 6c 61 62 65 6c 22 2c 66 6f 63 75 73 43 6c 65 61 6e 75 70 3a 21 31 2c 66 6f 63 75 73 49 6e Data Ascii: (c,function(a,c){b=b.replace(new RegExp("\\{"+a+"\\}","g"),function(){return c})}),b)},a.extend(a.validator,{defaults:{messages:{},groups:{},rules:{},errorClass:"error",pendingClass:"pending",validClass:"valid",errorElement:"label",focusCleanup:!1,focusIn
2024-05-06 16:42:19 UTC	1369	IN	Data Raw: 75 69 72 65 64 2e 22 2c 72 65 6d 6f 74 65 3a 22 50 6c 65 61 73 65 20 66 69 78 20 74 68 69 73 20 66 69 65 6c 64 2e 22 2c 65 6d 61 69 6c 3a 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 69 64 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 2e 22 2c 75 72 6c 3a 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 69 64 20 55 52 4c 2e 22 2c 64 61 74 65 3a 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 69 64 20 64 61 74 65 2e 22 2c 64 61 74 65 49 53 4f 3a 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 69 64 20 64 61 74 65 20 28 49 53 4f 29 2e 22 2c 6e 75 6d 62 65 72 3a 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 69 64 20 6e 75 6d 62 65 72 2e 22 2c 64 69 67 69 74 73 3a 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 6f 6e 6c Data Ascii: uired.",remote:"Please fix this field.",email:"Please enter a valid email address.",url:"Please enter a valid URL.",date:"Please enter a valid date.",dateISO:"Please enter a valid date (ISO).",number:"Please enter a valid number.",digits:"Please enter onl
2024-05-06 16:42:19 UTC	1369	IN	Data Raw: 6f 72 6d 29 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 73 3d 61 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 43 6f 6e 74 61 69 6e 65 72 29 2e 61 64 64 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 4c 61 62 65 6c 43 6f 6e 74 61 69 6e 65 72 29 2c 74 68 69 73 2e 73 75 62 6d 69 74 74 65 64 3d 7b 7d 2c 74 68 69 73 2e 76 61 6c 75 65 43 61 63 68 65 3d 7b 7d 2c 74 68 69 73 2e 70 65 6e 64 69 6e 67 52 65 71 75 65 73 74 3d 30 2c 74 68 69 73 2e 70 65 6e 64 69 6e 67 3d 7b 7d 2c 74 68 69 73 2e 69 6e 76 61 6c 69 64 3d 7b 7d 2c 74 68 69 73 2e 72 65 73 65 74 28 29 3b 76 61 72 20 63 2c 64 3d 74 68 69 73 2e 63 75 72 72 65 6e 74 46 6f 72 6d 2c 65 3d 74 68 69 73 2e 67 72 6f 75 70 73 3d 7b 7d 3b 61 2e 65 61 63 68 28 74 68 69 73 2e 73 65 74 74 69 Data Ascii: orm),this.containers=a(this.settings.errorContainer).add(this.settings.errorLabelContainer),this.submitted={},this.valueCache={},this.pendingRequest=0,this.pending={},this.invalid={},this.reset();var c,d=this.currentForm,e=this.groups={};a.each(this.setti
2024-05-06 16:42:19 UTC	1369	IN	Data Raw: 68 65 63 6b 28 62 5b 61 5d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 69 64 28 29 7d 2c 65 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 2c 64 2c 65 3d 74 68 69 73 2e 63 6c 65 61 6e 28 62 29 2c 66 3d 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 54 61 72 67 65 74 46 6f 72 28 65 29 2c 67 3d 74 68 69 73 2c 68 3d 21 30 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 66 3f 64 65 6c 65 74 65 20 74 68 69 73 2e 69 6e 76 61 6c 69 64 5b 65 2e 6e 61 6d 65 5d 3a 28 74 68 69 73 2e 70 72 65 70 61 72 65 45 6c 65 6d 65 6e 74 28 66 29 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 45 6c 65 6d 65 6e 74 73 3d 61 28 66 29 2c 64 3d 74 68 69 73 2e 67 72 6f 75 70 73 5b 66 2e 6e 61 6d 65 5d 2c 64 26 26 61 2e 65 61 63 68 28 74 68 69 73 2e 67 72 6f 75 Data Ascii: heck(b[a]);return this.valid()},element:function(b){var c,d,e=this.clean(b),f=this.validationTargetFor(e),g=this,h=!0;return void 0===f?delete this.invalid[e.name]:(this.prepareElement(f),this.currentElements=a(f),d=this.groups[f.name],d&&a.each(this.grou
2024-05-06 16:42:19 UTC	1369	IN	Data Raw: 6d 65 28 61 5b 62 5d 2e 6e 61 6d 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 76 61 6c 69 64 43 6c 61 73 73 29 3b 65 6c 73 65 20 61 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 43 6c 61 73 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 76 61 6c 69 64 43 6c 61 73 73 29 7d 2c 6e 75 6d 62 65 72 4f 66 49 6e 76 61 6c 69 64 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 62 6a 65 63 74 4c 65 6e 67 74 68 28 74 68 69 73 2e 69 6e 76 61 6c 69 64 29 7d 2c 6f 62 6a 65 63 74 4c 65 6e 67 74 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3d 30 3b 66 6f 72 28 62 20 69 6e 20 61 29 76 6f 69 64 20 Data Ascii: me(a[b].name).removeClass(this.settings.validClass);else a.removeClass(this.settings.errorClass).removeClass(this.settings.validClass)},numberOfInvalids:function(){return this.objectLength(this.invalid)},objectLength:function(a){var b,c=0;for(b in a)void
2024-05-06 16:42:19 UTC	1369	IN	Data Raw: 6d 26 26 28 21 28 64 20 69 6e 20 63 7c 7c 21 62 2e 6f 62 6a 65 63 74 4c 65 6e 67 74 68 28 61 28 74 68 69 73 29 2e 72 75 6c 65 73 28 29 29 29 26 26 28 63 5b 64 5d 3d 21 30 2c 21 30 29 29 7d 29 7d 2c 63 6c 65 61 6e 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 28 62 29 5b 30 5d 7d 2c 65 72 72 6f 72 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 43 6c 61 73 73 2e 73 70 6c 69 74 28 22 20 22 29 2e 6a 6f 69 6e 28 22 2e 22 29 3b 72 65 74 75 72 6e 20 61 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 45 6c 65 6d 65 6e 74 2b 22 2e 22 2b 62 2c 74 68 69 73 2e 65 72 72 6f 72 43 6f 6e 74 65 78 74 29 7d 2c 72 65 73 65 74 49 6e 74 65 72 6e 61 6c 73 3a 66 75 6e 63 74 69 6f 6e Data Ascii: m&&(!(d in c\|\|!b.objectLength(a(this).rules()))&&(c[d]=!0,!0))})},clean:function(b){return a(b)[0]},errors:function(){var b=this.settings.errorClass.split(" ").join(".");return a(this.settings.errorElement+"."+b,this.errorContext)},resetInternals:function
2024-05-06 16:42:19 UTC	1369	IN	Data Raw: 62 2c 6a 29 2c 64 65 6c 65 74 65 20 67 2e 6e 6f 72 6d 61 6c 69 7a 65 72 29 3b 66 6f 72 28 64 20 69 6e 20 67 29 7b 65 3d 7b 6d 65 74 68 6f 64 3a 64 2c 70 61 72 61 6d 65 74 65 72 73 3a 67 5b 64 5d 7d 3b 74 72 79 7b 69 66 28 63 3d 61 2e 76 61 6c 69 64 61 74 6f 72 2e 6d 65 74 68 6f 64 73 5b 64 5d 2e 63 61 6c 6c 28 74 68 69 73 2c 6a 2c 62 2c 65 2e 70 61 72 61 6d 65 74 65 72 73 29 2c 22 64 65 70 65 6e 64 65 6e 63 79 2d 6d 69 73 6d 61 74 63 68 22 3d 3d 3d 63 26 26 31 3d 3d 3d 68 29 7b 69 3d 21 30 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 69 3d 21 31 2c 22 70 65 6e 64 69 6e 67 22 3d 3d 3d 63 29 72 65 74 75 72 6e 20 76 6f 69 64 28 74 68 69 73 2e 74 6f 48 69 64 65 3d 74 68 69 73 2e 74 6f 48 69 64 65 2e 6e 6f 74 28 74 68 69 73 2e 65 72 72 6f 72 73 46 6f 72 28 62 29 29 Data Ascii: b,j),delete g.normalizer);for(d in g){e={method:d,parameters:g[d]};try{if(c=a.validator.methods[d].call(this,j,b,e.parameters),"dependency-mismatch"===c&&1===h){i=!0;continue}if(i=!1,"pending"===c)return void(this.toHide=this.toHide.not(this.errorsFor(b))

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.11	49805	104.17.24.14	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:20 UTC	598	OUT	GET /ajax/libs/jquery-validation-unobtrusive/3.2.12/jquery.validate.unobtrusive.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:20 UTC	952	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:20 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"6021e167-16ef" Last-Modified: Tue, 09 Feb 2021 01:12:07 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Sat, 26 Apr 2025 16:42:20 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M5YlEt%2Ftv2HjqfT%2FGtJGZ3gfSLkXiphp3sX9jNctNV0T%2B2pssz4if6Xlp2SgMueH1FJTUlaLhyYlYHHQn4sHcltvHsaLWBxBLqejvGciveBV%2BkNgIUcon3LyLfnCkFz8NL%2B7%2F9CN"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87fa6c44dc059ae3-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:20 UTC	417	IN	Data Raw: 31 36 65 66 0d 0a 2f 2f 20 55 6e 6f 62 74 72 75 73 69 76 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 73 75 70 70 6f 72 74 20 6c 69 62 72 61 72 79 20 66 6f 72 20 6a 51 75 65 72 79 20 61 6e 64 20 6a 51 75 65 72 79 20 56 61 6c 69 64 61 74 65 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 2e 4e 45 54 20 46 6f 75 6e 64 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 2f 2f 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 2e 20 53 65 65 20 4c 69 63 65 6e 73 65 2e 74 78 74 20 69 6e 20 74 68 65 20 70 72 6f 6a 65 63 74 20 72 6f 6f 74 20 66 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0d 0a 2f 2f 20 40 76 65 Data Ascii: 16ef// Unobtrusive validation support library for jQuery and jQuery Validate// Copyright (c) .NET Foundation. All rights reserved.// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.// @ve
2024-05-06 16:42:20 UTC	1369	IN	Data Raw: 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 28 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 2d 76 61 6c 69 64 61 74 69 6f 6e 22 29 29 3a 6a 51 75 65 72 79 2e 76 61 6c 69 64 61 74 6f 72 2e 75 6e 6f 62 74 72 75 73 69 76 65 3d 61 28 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 61 2c 65 2c 6e 29 7b 61 2e 72 75 6c 65 73 5b 65 5d 3d 6e 2c 61 2e 6d 65 73 73 61 67 65 26 26 28 61 2e 6d 65 73 73 61 67 65 73 5b 65 5d 3d 61 2e 6d 65 73 73 61 67 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 73 2b 7c 5c 73 2b 24 2f 67 2c 22 22 29 2e 73 70 6c 69 74 28 2f 5c 73 2a 2c 5c 73 2a 2f 67 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 61 29 7b 72 65 Data Ascii: ports?module.exports=a(require("jquery-validation")):jQuery.validator.unobtrusive=a(jQuery)}(function(a){function e(a,e,n){a.rules[e]=n,a.message&&(a.messages[e]=a.message)}function n(a){return a.replace(/^\s+\|\s+$/g,"").split(/\s,\s/g)}function t(a){re
2024-05-06 16:42:20 UTC	1369	IN	Data Raw: 28 74 29 29 7b 6e 2e 64 61 74 61 28 74 2c 21 30 29 3b 74 72 79 7b 6e 2e 64 61 74 61 28 22 76 61 6c 69 64 61 74 6f 72 22 29 2e 72 65 73 65 74 46 6f 72 6d 28 29 7d 66 69 6e 61 6c 6c 79 7b 6e 2e 72 65 6d 6f 76 65 44 61 74 61 28 74 29 7d 6e 2e 66 69 6e 64 28 22 2e 76 61 6c 69 64 61 74 69 6f 6e 2d 73 75 6d 6d 61 72 79 2d 65 72 72 6f 72 73 22 29 2e 61 64 64 43 6c 61 73 73 28 22 76 61 6c 69 64 61 74 69 6f 6e 2d 73 75 6d 6d 61 72 79 2d 76 61 6c 69 64 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 76 61 6c 69 64 61 74 69 6f 6e 2d 73 75 6d 6d 61 72 79 2d 65 72 72 6f 72 73 22 29 2c 6e 2e 66 69 6e 64 28 22 2e 66 69 65 6c 64 2d 76 61 6c 69 64 61 74 69 6f 6e 2d 65 72 72 6f 72 22 29 2e 61 64 64 43 6c 61 73 73 28 22 66 69 65 6c 64 2d 76 61 6c 69 64 61 74 69 6f 6e 2d 76 Data Ascii: (t)){n.data(t,!0);try{n.data("validator").resetForm()}finally{n.removeData(t)}n.find(".validation-summary-errors").addClass("validation-summary-valid").removeClass("validation-summary-errors"),n.find(".field-validation-error").addClass("field-validation-v
2024-05-06 16:42:20 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 29 7b 73 5b 74 68 69 73 5d 3d 6f 2e 61 74 74 72 28 6e 2b 74 68 69 73 29 7d 29 2c 74 68 69 73 2e 61 64 61 70 74 28 7b 65 6c 65 6d 65 6e 74 3a 65 2c 66 6f 72 6d 3a 64 2c 6d 65 73 73 61 67 65 3a 74 2c 70 61 72 61 6d 73 3a 73 2c 72 75 6c 65 73 3a 72 2c 6d 65 73 73 61 67 65 73 3a 69 7d 29 29 7d 29 2c 61 2e 65 78 74 65 6e 64 28 72 2c 7b 5f 5f 64 75 6d 6d 79 5f 5f 3a 21 30 7d 29 2c 6e 7c 7c 74 2e 61 74 74 61 63 68 56 61 6c 69 64 61 74 69 6f 6e 28 29 29 7d 2c 70 61 72 73 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 61 28 65 29 2c 74 3d 6e 2e 70 61 72 65 6e 74 73 28 29 2e 61 64 64 42 61 63 6b 28 29 2e 66 69 6c 74 65 72 28 22 66 6f 72 6d 22 29 2e 61 64 64 28 6e 2e 66 69 6e 64 28 22 66 6f 72 6d 22 29 29 2e 68 61 73 28 22 5b 64 61 74 61 Data Ascii: tion(){s[this]=o.attr(n+this)}),this.adapt({element:e,form:d,message:t,params:s,rules:r,messages:i}))}),a.extend(r,{__dummy__:!0}),n\|\|t.attachValidation())},parse:function(e){var n=a(e),t=n.parents().addBack().filter("form").add(n.find("form")).has("[data
2024-05-06 16:42:20 UTC	1355	IN	Data Raw: 2e 61 64 64 42 6f 6f 6c 28 22 65 6d 61 69 6c 22 29 2e 61 64 64 42 6f 6f 6c 28 22 6e 75 6d 62 65 72 22 29 2e 61 64 64 42 6f 6f 6c 28 22 75 72 6c 22 29 2c 6d 2e 61 64 64 4d 69 6e 4d 61 78 28 22 6c 65 6e 67 74 68 22 2c 22 6d 69 6e 6c 65 6e 67 74 68 22 2c 22 6d 61 78 6c 65 6e 67 74 68 22 2c 22 72 61 6e 67 65 6c 65 6e 67 74 68 22 29 2e 61 64 64 4d 69 6e 4d 61 78 28 22 72 61 6e 67 65 22 2c 22 6d 69 6e 22 2c 22 6d 61 78 22 2c 22 72 61 6e 67 65 22 29 2c 6d 2e 61 64 64 4d 69 6e 4d 61 78 28 22 6d 69 6e 6c 65 6e 67 74 68 22 2c 22 6d 69 6e 6c 65 6e 67 74 68 22 29 2e 61 64 64 4d 69 6e 4d 61 78 28 22 6d 61 78 6c 65 6e 67 74 68 22 2c 22 6d 69 6e 6c 65 6e 67 74 68 22 2c 22 6d 61 78 6c 65 6e 67 74 68 22 29 2c 6d 2e 61 64 64 28 22 65 71 75 61 6c 74 6f 22 2c 5b 22 6f 74 68 Data Ascii: .addBool("email").addBool("number").addBool("url"),m.addMinMax("length","minlength","maxlength","rangelength").addMinMax("range","min","max","range"),m.addMinMax("minlength","minlength").addMinMax("maxlength","minlength","maxlength"),m.add("equalto",["oth
2024-05-06 16:42:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.11	49806	104.17.24.14	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:20 UTC	577	OUT	GET /ajax/libs/jquery.maskedinput/1.4.1/jquery.maskedinput.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:20 UTC	964	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:20 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec3-10e4" Last-Modified: Mon, 04 May 2020 16:11:47 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 3659 Expires: Sat, 26 Apr 2025 16:42:20 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q0LgWRXZNltXoQEPzsKyUIFv0OAerOcWW%2B2qd83tSPTWm3Dr7wqIxygthX0%2FQ9gbc7V3BhMzhGTGaeedHgevybzBC%2B4mPlBHqZ%2B4KricGDdlPNY%2Bnaz%2BjK6Sab8%2B6SoWajpu7D45"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87fa6c467d140a2e-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:20 UTC	405	IN	Data Raw: 31 30 65 34 0d 0a 2f 2a 0a 20 20 20 20 6a 51 75 65 72 79 20 4d 61 73 6b 65 64 20 49 6e 70 75 74 20 50 6c 75 67 69 6e 0a 20 20 20 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 37 20 2d 20 32 30 31 35 20 4a 6f 73 68 20 42 75 73 68 20 28 64 69 67 69 74 61 6c 62 75 73 68 2e 63 6f 6d 29 0a 20 20 20 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 28 68 74 74 70 3a 2f 2f 64 69 67 69 74 61 6c 62 75 73 68 2e 63 6f 6d 2f 70 72 6f 6a 65 63 74 73 2f 6d 61 73 6b 65 64 2d 69 6e 70 75 74 2d 70 6c 75 67 69 6e 2f 23 6c 69 63 65 6e 73 65 29 0a 20 20 20 20 56 65 72 73 69 6f 6e 3a 20 31 2e 34 2e 31 0a 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e Data Ascii: 10e4/* jQuery Masked Input Plugin Copyright (c) 2007 - 2015 Josh Bush (digitalbush.com) Licensed under the MIT license (http://digitalbush.com/projects/masked-input-plugin/#license) Version: 1.4.1*/!function(a){"function"==typeof defin
2024-05-06 16:42:20 UTC	1369	IN	Data Raw: 3d 2f 63 68 72 6f 6d 65 2f 69 2e 74 65 73 74 28 63 29 2c 66 3d 2f 61 6e 64 72 6f 69 64 2f 69 2e 74 65 73 74 28 63 29 3b 61 2e 6d 61 73 6b 3d 7b 64 65 66 69 6e 69 74 69 6f 6e 73 3a 7b 39 3a 22 5b 30 2d 39 5d 22 2c 61 3a 22 5b 41 2d 5a 61 2d 7a 5d 22 2c 22 2a 22 3a 22 5b 41 2d 5a 61 2d 7a 30 2d 39 5d 22 7d 2c 61 75 74 6f 63 6c 65 61 72 3a 21 30 2c 64 61 74 61 4e 61 6d 65 3a 22 72 61 77 4d 61 73 6b 46 6e 22 2c 70 6c 61 63 65 68 6f 6c 64 65 72 3a 22 5f 22 7d 2c 61 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 63 61 72 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3b 69 66 28 30 21 3d 3d 74 68 69 73 2e 6c 65 6e 67 74 68 26 26 21 74 68 69 73 2e 69 73 28 22 3a 68 69 64 64 65 6e 22 29 29 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 Data Ascii: =/chrome/i.test(c),f=/android/i.test(c);a.mask={definitions:{9:"[0-9]",a:"[A-Za-z]","*":"[A-Za-z0-9]"},autoclear:!0,dataName:"rawMaskFn",placeholder:"_"},a.fn.extend({caret:function(a,b){var c;if(0!==this.length&&!this.is(":hidden"))return"number"==typeof
2024-05-06 16:42:20 UTC	1369	IN	Data Raw: 74 28 61 3c 67 2e 70 6c 61 63 65 68 6f 6c 64 65 72 2e 6c 65 6e 67 74 68 3f 61 3a 30 29 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 29 7b 66 6f 72 28 3b 2b 2b 61 3c 6e 26 26 21 6a 5b 61 5d 3b 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 72 28 61 29 7b 66 6f 72 28 3b 2d 2d 61 3e 3d 30 26 26 21 6a 5b 61 5d 3b 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 73 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3b 69 66 28 21 28 30 3e 61 29 29 7b 66 6f 72 28 63 3d 61 2c 64 3d 71 28 62 29 3b 6e 3e 63 3b 63 2b 2b 29 69 66 28 6a 5b 63 5d 29 7b 69 66 28 21 28 6e 3e 64 26 26 6a 5b 63 5d 2e 74 65 73 74 28 43 5b 64 5d 29 29 29 62 72 65 61 6b 3b 43 5b 63 5d 3d 43 5b 64 5d 2c 43 5b 64 5d 3d 70 28 64 29 2c 64 3d 71 28 64 29 7d 7a 28 29 2c 42 2e 63 61 72 65 74 Data Ascii: t(a<g.placeholder.length?a:0)}function q(a){for(;++a<n&&!j[a];);return a}function r(a){for(;--a>=0&&!j[a];);return a}function s(a,b){var c,d;if(!(0>a)){for(c=a,d=q(b);n>c;c++)if(j[c]){if(!(n>d&&j[c].test(C[d])))break;C[c]=C[d],C[d]=p(d),d=q(d)}z(),B.caret
2024-05-06 16:42:20 UTC	1189	IN	Data Raw: 6e 3c 3d 6d 26 26 68 28 29 7d 62 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 28 61 2c 62 29 7b 76 61 72 20 63 3b 66 6f 72 28 63 3d 61 3b 62 3e 63 26 26 6e 3e 63 3b 63 2b 2b 29 6a 5b 63 5d 26 26 28 43 5b 63 5d 3d 70 28 63 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 42 2e 76 61 6c 28 43 2e 6a 6f 69 6e 28 22 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 41 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 2c 65 3d 42 2e 76 61 6c 28 29 2c 66 3d 2d 31 3b 66 6f 72 28 62 3d 30 2c 64 3d 30 3b 6e 3e 62 3b 62 2b 2b 29 69 66 28 6a 5b 62 5d 29 7b 66 6f 72 28 43 5b 62 5d 3d 70 28 62 29 3b 64 2b 2b 3c 65 2e 6c 65 6e 67 74 68 3b 29 69 66 28 63 3d 65 2e 63 68 61 72 41 74 28 64 2d 31 29 2c 6a 5b 62 5d 2e 74 65 73 74 28 63 29 29 7b 43 5b 62 Data Ascii: n<=m&&h()}b.preventDefault()}}}function y(a,b){var c;for(c=a;b>c&&n>c;c++)j[c]&&(C[c]=p(c))}function z(){B.val(C.join(""))}function A(a){var b,c,d,e=B.val(),f=-1;for(b=0,d=0;n>b;b++)if(j[b]){for(C[b]=p(b);d++<e.length;)if(c=e.charAt(d-1),j[b].test(c)){C[b
2024-05-06 16:42:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.11	49807	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:20 UTC	658	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/home-banner.webp HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:21 UTC	520	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:21 GMT Content-Type: image/webp Content-Length: 59602 Connection: close Last-Modified: Fri, 08 Sep 2023 11:15:01 GMT ETag: 0x8DBB05CD8231DF0 x-ms-request-id: 996049a1-801e-003b-32d4-9fbd01000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164220Z-174c4b644cc5t6x2zzk3xununw00000002d000000000xgah Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-06 16:42:21 UTC	15864	IN	Data Raw: 52 49 46 46 ca e8 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 7f 07 00 ff 04 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFWEBPVP8X ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-05-06 16:42:21 UTC	16384	IN	Data Raw: c9 5b ad 6b f2 dc ad 0b e4 9c 71 d2 9c 3e 4f 2f 75 44 7b e1 e4 b1 58 5d 15 4d 7e c2 66 04 9d 9f de a1 87 f2 ef 53 1c 25 73 45 01 cb e7 e4 30 bb b7 60 da 34 45 70 33 67 ce f3 9e aa 64 ee fd d8 00 1e 98 38 42 25 fd 6d 66 ed 39 70 74 59 f8 d3 2f c7 d2 56 c9 8c 52 8f 5f 8b 4f c0 c1 b9 c4 dd 4e db 04 d7 85 3f 16 59 2f 23 1b f7 8c e6 4e 7f e7 ee b2 b7 a8 72 33 ad ec 2b 48 6e ed 39 0e 50 03 4f a4 ae 8f 8a 42 25 f6 cd 55 7f 85 74 ba 36 d0 46 5c a7 70 b6 db f9 db 0f 12 57 1d ca 90 b9 b9 64 41 12 0f 2b 6f bd 8a 65 91 b8 1f 28 ae c4 0a ba ca 99 81 b1 d4 77 ca 63 a2 d7 9e aa a0 8d 04 14 43 8e f9 80 6f 84 20 ae 31 03 6f 6a b6 e7 ab f5 0e d7 73 06 cb 99 3a af 7d 99 8f f9 98 fb c4 0c 0a a2 25 ac ef 41 63 d8 c6 1b 9b a2 14 fa 48 3c 9b f5 2d 88 28 78 af d9 cd 26 9f 7a 96 Data Ascii: [kq>O/uD{X]M~fS%sE0`4Ep3gd8B%mf9ptY/VR_ON?Y/#Nr3+Hn9POB%Ut6F\pWdA+oe(wcCo 1ojs:}%AcH<-(x&z
2024-05-06 16:42:21 UTC	16384	IN	Data Raw: c2 2a 16 f5 07 93 d3 1c 9a 09 19 36 94 a7 55 67 f6 2f df 5d 00 c3 bb 34 99 fe 68 03 02 96 6f f5 c9 c3 a7 09 a3 e2 8d b4 93 11 25 53 71 ca b4 33 a7 74 40 1b dc af 31 47 64 be 6f 39 93 1c da c7 bd 3c b4 99 28 1a c4 c9 9b b5 17 34 d4 c2 83 75 a9 5e 5f 4e 3e 7a d8 5a f7 14 98 80 fc a5 ba da 46 71 f6 fc bc e2 e9 d8 d3 87 ca 75 5f ed c6 5c ac 44 ee b6 bf 61 c3 54 10 7f 99 b9 de f5 e8 e4 98 c8 f5 d2 66 18 fa 38 65 07 75 f7 95 73 b7 45 6c a1 77 63 e6 47 75 f4 72 a7 66 85 e6 69 df f0 58 8d 58 f6 bd f8 ec 92 fb 20 36 86 fa d4 41 80 d0 c3 9f 2c 1c 09 97 ce 2b b5 73 36 59 48 3a 03 77 de 9a 7e bc db 29 a6 c5 d3 4b 98 7b cf 27 c5 cf 62 6e 41 fa dc 00 a1 22 56 d1 9e d9 52 c6 b4 09 d5 c2 43 b6 80 17 5d 1f f9 d7 be 3a 4d 6c 5b 81 40 14 68 36 0f 31 fc e2 b7 9a 00 b3 68 a8 Data Ascii: *6Ug/]4ho%Sq3t@1Gdo9<(4u^_N>zZFqu_\DaTf8eusElwcGurfiXX 6A,+s6YH:w~)K{'bnA"VRC]:Ml[@h61h
2024-05-06 16:42:21 UTC	10970	IN	Data Raw: 22 f3 79 2d 33 68 b2 39 fe 78 26 f8 cf 6b 60 aa c1 d4 49 09 3f 6b af 27 ec e4 c4 b4 90 22 62 58 70 9f 26 22 a5 56 2f 90 57 52 31 5a 79 5c 0d 6e b4 60 82 f3 ab 67 79 1a 21 69 ee 31 2b 7d 46 2a d2 64 93 d0 42 77 56 92 57 68 b4 ae 01 04 a5 97 c1 0e 3f ca 17 ca ab bd 37 35 e2 4f ca fd db 6a e7 52 ca 6b 79 47 54 40 15 2f b0 30 8b e3 1d a3 3e b3 be 64 69 ae a2 44 d6 8e 0b a3 c8 ff 16 0a 00 63 28 ac 84 a4 0b 1c 40 df 47 35 54 9c 7e 46 21 aa 5b ef cb cb d9 03 30 fd 00 e9 94 0b 3a a8 4d 5b f0 4c 98 72 a7 00 34 f0 69 4a f1 f2 2e b5 ae 33 d7 c5 65 1c 16 4c 76 43 7d 9c ab 11 be 39 b9 56 58 b4 26 15 b5 8d 22 92 f1 4b d9 8e c6 96 03 0d 0e 02 87 3e 14 d1 d5 1f 8b a9 08 48 4e c1 ad d4 0f b2 07 d5 04 7c e2 2b 03 11 2b bd e5 00 e6 94 83 94 55 e1 50 88 fd 82 a0 df 42 ca 78 Data Ascii: "y-3h9x&k`I?k'"bXp&"V/WR1Zy\n`gy!i1+}F*dBwVWh?75OjRkyGT@/0>diDc(@G5T~F![0:M[Lr4iJ.3eLvC}9VX&"K>HN\|++UPBx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.11	49808	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:20 UTC	757	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/covid-bg.svg HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/css/header.css?v=080020230200248353247 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:21 UTC	615	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:21 GMT Content-Type: image/svg+xml Content-Length: 55861 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Fri, 08 Sep 2023 11:15:00 GMT ETag: 0x8DBB05CD7751D3E x-ms-request-id: 1e4e37cd-501e-0017-1bd4-9f51ae000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164220Z-174c4b644ccbnfrj3r328ckevn00000002d000000000we52 Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-06 16:42:21 UTC	15769	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 32 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 78 22 0d 0a 09 20 76 69 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" vie
2024-05-06 16:42:21 UTC	16384	IN	Data Raw: 39 2c 38 33 31 2e 31 2c 31 31 39 37 2e 37 7a 20 4d 37 39 34 2e 37 2c 31 31 32 39 2e 34 6c 32 32 2e 38 2d 38 2e 33 63 2d 30 2e 37 2c 34 2e 37 2c 31 2c 36 2e 35 2d 32 2c 31 34 2e 31 6c 31 31 2e 32 2c 33 30 2e 38 0d 0a 09 09 63 39 2e 34 2c 31 2e 35 2c 31 37 2e 32 2c 36 2e 37 2c 32 31 2e 35 2c 31 39 2e 38 63 33 2e 38 2c 31 34 2e 34 2d 32 37 2e 39 2c 32 36 2d 33 38 2e 31 2c 31 33 2e 38 63 2d 32 2e 36 2d 31 31 2c 30 2e 31 2d 32 31 2c 36 2e 32 2d 33 30 2e 32 6c 2d 31 31 2d 33 30 2e 31 43 37 39 39 2e 31 2c 31 31 33 37 2e 36 2c 37 39 38 2e 33 2c 31 31 33 32 2e 37 2c 37 39 34 2e 37 2c 31 31 32 39 2e 34 0d 0a 09 09 7a 20 4d 36 39 35 2e 38 2c 37 37 39 2e 35 63 2d 37 2e 37 2c 32 2e 38 2d 31 33 2e 33 2c 36 2e 38 2d 31 32 2e 36 2c 38 2e 39 63 30 2e 38 2c 32 2e 31 2c 37 Data Ascii: 9,831.1,1197.7z M794.7,1129.4l22.8-8.3c-0.7,4.7,1,6.5-2,14.1l11.2,30.8c9.4,1.5,17.2,6.7,21.5,19.8c3.8,14.4-27.9,26-38.1,13.8c-2.6-11,0.1-21,6.2-30.2l-11-30.1C799.1,1137.6,798.3,1132.7,794.7,1129.4z M695.8,779.5c-7.7,2.8-13.3,6.8-12.6,8.9c0.8,2.1,7
2024-05-06 16:42:21 UTC	16384	IN	Data Raw: 35 2e 36 2c 35 33 32 2e 31 7a 20 4d 33 36 30 30 2e 35 2c 31 31 34 63 2d 37 2e 39 2d 32 2e 39 2d 31 35 2d 33 2e 35 2d 31 35 2e 37 2d 31 2e 33 0d 0a 09 09 63 2d 30 2e 38 2c 32 2e 32 2c 35 2c 36 2e 32 2c 31 32 2e 39 2c 39 2e 31 63 37 2e 39 2c 32 2e 39 2c 31 35 2c 33 2e 35 2c 31 35 2e 37 2c 31 2e 33 43 33 36 31 34 2e 32 2c 31 32 30 2e 39 2c 33 36 30 38 2e 34 2c 31 31 36 2e 38 2c 33 36 30 30 2e 35 2c 31 31 34 7a 20 4d 33 35 34 34 2e 31 2c 38 35 2e 38 63 2d 38 2e 34 2c 30 2d 31 35 2e 32 2c 31 2e 39 2d 31 35 2e 32 2c 34 2e 32 0d 0a 09 09 63 30 2c 32 2e 33 2c 36 2e 38 2c 34 2e 31 2c 31 35 2e 32 2c 34 2e 32 63 38 2e 34 2c 30 2c 31 35 2e 32 2d 31 2e 39 2c 31 35 2e 32 2d 34 2e 32 43 33 35 35 39 2e 34 2c 38 37 2e 37 2c 33 35 35 32 2e 36 2c 38 35 2e 38 2c 33 35 34 34 Data Ascii: 5.6,532.1z M3600.5,114c-7.9-2.9-15-3.5-15.7-1.3c-0.8,2.2,5,6.2,12.9,9.1c7.9,2.9,15,3.5,15.7,1.3C3614.2,120.9,3608.4,116.8,3600.5,114z M3544.1,85.8c-8.4,0-15.2,1.9-15.2,4.2c0,2.3,6.8,4.1,15.2,4.2c8.4,0,15.2-1.9,15.2-4.2C3559.4,87.7,3552.6,85.8,3544
2024-05-06 16:42:21 UTC	7324	IN	Data Raw: 32 2e 36 0d 0a 09 09 43 33 36 39 37 2e 37 2c 37 30 32 2e 33 2c 33 36 39 37 2e 33 2c 37 30 30 2e 37 2c 33 36 39 36 2e 33 2c 36 39 39 7a 20 4d 33 35 39 38 2e 39 2c 37 35 35 2e 32 63 2d 31 2d 31 2e 37 2d 31 2e 34 2d 33 2e 33 2d 30 2e 39 2d 33 2e 35 63 30 2e 35 2d 30 2e 33 2c 31 2e 36 2c 30 2e 39 2c 32 2e 36 2c 32 2e 36 63 31 2c 31 2e 37 2c 31 2e 34 2c 33 2e 33 2c 30 2e 39 2c 33 2e 35 0d 0a 09 09 43 33 36 30 31 2c 37 35 38 2e 31 2c 33 35 39 39 2e 39 2c 37 35 36 2e 39 2c 33 35 39 38 2e 39 2c 37 35 35 2e 32 7a 20 4d 33 36 31 34 2e 37 2c 37 36 30 2e 35 63 2d 31 2e 35 2d 31 2e 32 2d 32 2e 34 2d 32 2e 36 2d 32 2e 31 2d 33 63 30 2e 33 2d 30 2e 34 2c 31 2e 38 2c 30 2e 33 2c 33 2e 33 2c 31 2e 35 63 31 2e 35 2c 31 2e 33 2c 32 2e 34 2c 32 2e 36 2c 32 2e 31 2c 33 0d 0a Data Ascii: 2.6C3697.7,702.3,3697.3,700.7,3696.3,699z M3598.9,755.2c-1-1.7-1.4-3.3-0.9-3.5c0.5-0.3,1.6,0.9,2.6,2.6c1,1.7,1.4,3.3,0.9,3.5C3601,758.1,3599.9,756.9,3598.9,755.2z M3614.7,760.5c-1.5-1.2-2.4-2.6-2.1-3c0.3-0.4,1.8,0.3,3.3,1.5c1.5,1.3,2.4,2.6,2.1,3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.11	49810	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:20 UTC	656	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/live-music.jpg HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:21 UTC	521	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:21 GMT Content-Type: image/jpeg Content-Length: 122865 Connection: close Last-Modified: Fri, 08 Sep 2023 11:15:02 GMT ETag: 0x8DBB05CD8C81F49 x-ms-request-id: 68f272fb-201e-000d-18d4-9f3071000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164220Z-174c4b644ccnbbfqs67zd7fd04000000024g00000000sedn Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-06 16:42:21 UTC	15863	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c2 00 11 08 01 4c 01 f4 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 00 00 00 00 00 08 05 06 07 09 02 03 04 01 00 0a ff c4 00 1d 01 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 06 03 04 05 07 00 01 02 08 09 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 ab Data Ascii: JFIFCCL
2024-05-06 16:42:21 UTC	16384	IN	Data Raw: 14 6d f7 45 3d a5 42 d5 4b e0 af 11 3b 78 ab 75 3b e1 7e d9 0e e7 59 4e 79 82 2a cb 50 c0 4b 5c 00 41 17 c7 e3 74 e9 95 51 8b 32 35 5e a8 e8 9e 63 cd b7 d5 66 b2 12 85 ab 28 d2 95 8c 31 a3 3c 3c 55 d1 94 5d 7d 65 8b 15 e6 87 d0 91 57 61 2f 65 5d dc a8 72 95 cd 9f 18 77 15 88 ad a0 97 de 37 d4 4d ae 23 ea 6e 9f 07 08 55 76 42 53 a3 f8 e6 b3 62 98 be 6f c5 17 37 ff 00 26 fb c6 db 18 bc 85 81 5e 25 c6 bf 10 99 4c 16 c8 d4 31 9a ea b4 69 88 c3 37 5a b5 a3 9f 0c 39 4e 55 48 21 11 4b 18 05 3f 69 62 c3 89 04 6f 92 d0 78 d2 c2 85 0c 89 04 5b 52 92 b7 51 d7 06 4b 3c c8 f4 32 99 12 c1 af 73 00 12 89 0a 09 b5 23 30 de 98 5a d1 c6 94 78 2b 21 65 c8 a1 6c 3c 14 56 56 1b af 25 04 b0 48 a9 9a 66 12 45 d3 ed 26 12 0c 59 a3 f1 66 5b 54 9e a6 47 41 91 bc 99 eb a1 2c d2 1d Data Ascii: mE=BK;xu;~YNy*PK\AtQ25^cf(1<<U]}eWa/e]rw7M#nUvBSbo7&^%L1i7Z9NUH!K?ibox[RQK<2s#0Zx+!el<VV%HfE&Yf[TGA,
2024-05-06 16:42:21 UTC	16384	IN	Data Raw: 10 b1 13 0b 5a 7b c0 f7 86 04 4c 6d 71 ef 23 23 c8 43 cb 31 2b f3 de 03 c4 2f 12 c5 de 7c 19 fc c2 38 37 25 5d a7 c2 83 98 d7 6a 10 38 49 64 cd cd 71 08 c1 42 88 f3 cc 69 e7 a0 3a 93 a2 6b 9e e3 32 54 4c 02 33 18 70 c9 00 21 94 f0 00 a0 84 4a 34 40 40 51 16 c4 6e 11 00 32 09 a0 42 96 a0 a9 e8 55 38 b4 73 cc a1 0e 08 12 f5 13 05 fa 35 01 a7 22 04 c3 b4 86 88 8d 4c c2 21 f6 84 f0 fc 43 e6 11 54 99 e3 c4 3b 0d 13 e0 e8 fc 43 17 ca e6 f0 42 31 f5 21 72 04 17 2b 99 0c 40 e0 8e 66 20 8f 6a 0a 00 1d 68 16 21 41 19 f8 ef 04 90 40 31 b4 a8 ed b0 dc 1e 58 cd 02 b2 9c 8f a2 0b 10 e2 88 4e c8 80 7a 14 65 04 5f 10 ad 20 a7 5e 8c cb 8f f1 08 80 0e d0 a2 1b da 39 a8 22 20 bb 98 45 92 0f 04 42 ae 0f 92 0f cc 74 e0 2e 07 f5 fb 85 8c 73 a4 5a 78 95 22 5a d0 1f 80 5f bc a9 Data Ascii: Z{Lmq##C1+/\|87%]j8IdqBi:k2TL3p!J4@@Qn2BU8s5"L!CT;CB1!r+@f jh!A@1XNze_ ^9" EBt.sZx"Z_
2024-05-06 16:42:21 UTC	16384	IN	Data Raw: 20 bb 29 8b 1c e5 38 7f e3 fb 95 43 f2 24 f1 73 4a b0 1c 45 3a 5f 21 92 79 f3 51 f5 fd 90 12 76 35 f9 21 0e 27 ef 2b fb cd 83 c0 7a 16 09 d0 f5 a8 eb 08 6a 9a 36 f6 2a ea 5f 82 82 2b e5 dc bc 08 f5 5b fc ab 3e b2 99 a8 6e 0e f1 5d 5b 9f 30 98 57 5f 05 4b fc 03 b8 67 7f f6 d4 2d 5e 62 f8 b8 75 6d 8e 46 01 bc 91 28 67 2a 22 a6 5a 3a 3a f2 88 a0 a7 04 21 32 f8 69 3b bb ed ea 11 67 c1 c3 16 df 2b 49 cf 7a b9 6a 57 c4 2d 31 58 2e a0 5e af 12 85 f6 72 b7 d0 b0 f9 da ce 23 a3 19 9a bc 02 ed 08 5c 6b 49 7f ab d1 5a e5 b8 e9 68 36 1c c1 57 68 bb f8 23 99 f6 8d ab f1 2b c1 63 a8 94 ce 06 3d 07 36 48 77 40 6b 83 c6 0f 19 8e f8 85 ac 8f 7b 77 52 d7 09 50 c0 5a b9 21 9b 59 85 67 12 d8 c4 ef 81 75 31 31 ae 67 33 9c 78 39 ba 8f 6c 44 f2 cb ed c9 6c 6a fa 96 b1 36 f7 d1 Data Ascii: )8C$sJE:_!yQv5!'+zj6_+[>n][0W_Kg-^bumF(g"Z::!2i;g+IzjW-1X.^r#\kIZh6Wh#+c=6Hw@k{wRPZ!Ygu11g3x9lDlj6
2024-05-06 16:42:21 UTC	16384	IN	Data Raw: 19 af ea 6d 44 ee b8 ff 00 e5 69 c9 dc 47 a2 64 b4 f9 70 2a 85 6c 8e ef 7a 63 87 82 04 1d 0a cf 07 26 f5 1e dd eb cf b9 f2 54 0b 45 59 ba 3d 5c f0 38 33 ad 35 26 be 1a 2c ff 00 4b 51 88 b0 c7 cf 01 21 19 e0 9d bb 6b 69 f4 47 f2 10 aa bb 70 fd bf 5c 04 e4 17 fa 62 24 23 4a 63 74 d8 22 89 c5 bb 31 d6 a7 d3 44 69 1e fb d7 23 f4 4f 23 bc a7 13 cd 15 18 5b 82 ec 6c f7 9a 3b ab ea 51 aa 3b c6 de 3a 7b aa 31 29 bb be 88 cf 20 b6 31 df eb f8 50 df 7c 55 bd 71 e1 86 7f a0 37 5e 2a e2 b8 18 c1 c8 4a a6 05 57 24 13 ba 80 38 9d 61 aa e0 c1 36 9d 31 b9 42 5b ae bc 56 56 f4 42 09 c5 e4 44 a3 a5 4f a2 10 22 ff 00 85 68 8f 05 67 51 5b e5 3c 31 18 3c b5 dc 34 5d 91 4c d1 aa a4 1f 45 b3 1f 54 e8 e7 54 42 84 67 a1 ae 1a fc 4d 16 78 8c 91 ba ba d4 23 72 82 6d 13 4f 4b 36 3b Data Ascii: mDiGdplzc&TEY=\835&,KQ!kiGp\b$#Jct"1Di#O#[l;Q;:{1) 1P\|Uq7^JW$8a61B[VVBDO"hgQ[<1<4]LETTBgMx#rmOK6;
2024-05-06 16:42:21 UTC	16384	IN	Data Raw: a9 c2 de ef dd b3 f8 96 b8 ef 2f 6d c9 5c 2f 2b cf ed 3f bc 0c cf 4f 8c e4 0e 17 b8 be 09 27 da e3 93 6f 7c 40 a6 fc 3a cf 92 65 26 1f b8 52 34 2e 11 97 35 f8 ab da d6 1e b1 c4 36 f9 59 9a a8 9e 64 b2 64 6a e2 93 14 11 e6 08 b7 5f c7 e3 82 74 c6 0e 04 c5 d5 1e f0 3d fa d6 8e 3a 9a ea 6a 6e cb f0 39 9f 32 d7 02 d8 20 2b e6 8c a7 8d 78 08 ba 1e eb 17 4d 94 7a 26 a3 8d 85 69 06 87 60 7a 3d 30 16 60 4b 31 01 0f 8d e0 31 55 c6 5c 6a 93 07 ea 9c c1 8c f7 f9 71 e4 d0 8d 8f 63 30 5b dd 0a f8 57 cc c0 5e e6 2e fa 68 e3 a7 83 c4 13 38 ea 8e 53 1f 1b 20 39 a9 e7 d6 11 e5 0e f8 51 25 a0 b0 f7 15 69 3c 1a 73 a5 9f 63 81 72 67 ae 80 e1 0a d7 dd c5 ab bb 9d 5a f7 35 33 31 fd 79 63 e7 83 1f 9a 91 27 a6 29 c1 6d 4e 60 03 24 6d 89 60 ef 4c 03 86 40 10 ff 00 f0 99 29 a7 46 Data Ascii: /m\/+?O'o\|@:e&R4.56Yddj_t=:jn92 +xMz&i`z=0`K11U\jqc0[W^.h8S 9Q%i<scrgZ531yc')mN`$m`L@)F
2024-05-06 16:42:21 UTC	16384	IN	Data Raw: e1 ec 08 d1 2a bd 8b 94 78 6e 60 88 d2 5d 38 d2 43 05 00 01 bc 0d e7 b7 32 f1 a1 84 7e eb e9 a0 17 c6 38 21 77 ce 5a f7 29 d4 47 be d8 14 50 31 34 c6 79 79 8d 91 cf e6 29 8b 2a 2e 3c 1f eb 2c 8a 44 2e 35 48 fc 3f fe 38 5e 65 1d 40 94 99 43 88 85 cd 84 33 3d c7 24 a8 02 98 04 a8 2b 51 4a d0 a1 7d 43 0b b2 8b 54 6f 86 f1 66 f0 40 a8 62 28 23 2d 02 50 d4 c3 e6 e0 b8 31 1b bd 4d 04 5d 05 db 70 d8 50 c7 bf 72 ed 95 a1 7e 79 40 21 45 7e d1 98 d4 66 a1 e9 d1 ed 5c f4 c0 df 86 df ae de 18 91 db 72 ba e8 86 89 c0 5c 11 cf a8 d3 ed 1d ac bb ae 86 ad c6 50 f8 65 21 40 5d 0f 27 d9 82 25 cd 37 b6 d4 15 d5 b2 94 98 01 8c 21 43 a4 19 76 20 99 5c 85 c1 92 97 17 e6 15 a3 70 9c f8 6a 03 47 60 71 73 23 95 cd c5 4e 96 2f c6 d8 3c 44 28 78 2f 2c d4 88 b7 a4 6c 4f 58 63 33 66 Data Ascii: xn`]8C2~8!wZ)GP14yy).<,D.5H?8^e@C3=$+QJ}CTof@b(#-P1M]pPr~y@!E~f\r\Pe!@]'%7!Cv \pjG`qs#N/<D(x/,lOXc3f
2024-05-06 16:42:21 UTC	8698	IN	Data Raw: b8 dd ab ad 45 62 ae 18 19 f1 35 42 18 2b 4e 6e a2 e0 5d aa df ee 14 18 bc 5f 51 24 6e 0c 8d 0c 8e cb f5 30 9f 31 ae 08 58 dd f1 7d 62 02 08 39 59 9b e8 38 22 e1 63 0b 54 3d 35 c7 bc 4b 7c e8 2c 05 c3 5a ad 55 8b a6 07 ff 00 a2 03 86 8c 29 7e c8 dc 26 f5 6d 56 21 e4 bb 3d 42 17 42 80 b7 d6 b9 6d 41 db 33 39 74 e0 93 9d 82 15 55 a8 b9 28 b5 c5 9e da b8 79 46 bf c3 28 c9 ab 27 83 9f 57 09 5a 56 d7 8b 1f b8 46 25 9a c6 3e 61 7b 05 85 d6 a4 43 3c 34 c1 7a c0 14 82 2a 53 b5 ad ac b5 7d 0b 27 1a 00 a4 a8 02 c1 83 c4 48 db 06 20 40 cb 54 f5 19 2f c9 74 88 14 aa cf 25 35 d9 05 c4 d3 f9 ac 66 36 6b c1 bc 1d 2c e3 a0 62 af fc 84 9a 79 39 1b 19 71 42 d7 4c 86 95 6b c8 c3 09 66 a2 9c e4 3f 0b 2f c7 e4 a3 50 c5 70 f3 1a 4e 8a 12 dc 3c 1f 5b 62 aa 5f c5 44 95 0f f1 48 Data Ascii: Eb5B+Nn]_Q$n01X}b9Y8"cT=5K\|,ZU)~&mV!=BBmA39tU(yF('WZVF%>a{C<4z*S}'H @T/t%5f6k,by9qBLkf?/PpN<[b_DH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.11	49809	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:20 UTC	656	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/night-club.jpg HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:21 UTC	521	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:21 GMT Content-Type: image/jpeg Content-Length: 125601 Connection: close Last-Modified: Fri, 08 Sep 2023 11:15:02 GMT ETag: 0x8DBB05CD9296AC9 x-ms-request-id: 1ebc4151-901e-0055-5fd4-9fe82e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164220Z-174c4b644ccbnfrj3r328ckevn00000002bg00000001315u Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-06 16:42:21 UTC	15863	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c2 00 11 08 01 4c 01 f4 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 05 01 01 01 01 01 00 00 00 00 00 00 00 00 05 03 04 06 07 08 02 09 01 00 0a ff c4 00 1c 01 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 04 05 02 03 06 01 00 07 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f2 4f Data Ascii: JFIFCCLO
2024-05-06 16:42:21 UTC	16384	IN	Data Raw: 8d 67 07 15 b6 44 fc f3 b1 69 7f 2c d3 60 d0 27 14 33 40 e1 f3 47 3b 89 61 43 e2 b7 8f c4 f6 5b 35 29 00 d2 7e 75 86 93 e0 93 9c 7d 23 b5 96 44 de b7 1a 64 d6 89 cd 33 2f 0c 9b 68 b2 17 24 10 7b 7a 8b 60 ed e5 64 7c 04 8d 40 ed f2 77 6e 0b 23 82 4d 6e de d9 af 98 ca d7 f6 53 13 f1 f4 6c 60 56 3a cd 2c ec 96 c6 01 6d b7 dc 2e e6 92 48 64 78 d6 d5 37 0c 9b 38 70 45 5d 33 6d f2 96 4a 27 74 98 a8 bb cb d3 7e 55 1f c5 46 e4 49 8a 0d fe 5b f0 14 c0 7c d3 2e d1 d8 f2 ea b3 d5 1a 4e e8 9e e9 6b f1 6f fb 06 71 5e 38 c5 11 9a 51 fa ae 8e 5d 91 ba c0 98 11 f2 3f cd 25 1f a6 3b ae 4f f1 8e a9 64 64 07 6b 1c d2 fe 5d 47 b9 4e 6a 38 c4 9b 8c 9b 4b 9c 2e 9f a9 c9 05 aa c4 a3 24 51 1b 93 24 6d 2c 5a 8b 36 31 5b eb 3b be 2c b6 34 85 65 b8 5d b2 b6 0d 2f e5 4a 06 0d 0f 8a Data Ascii: gDi,`'3@G;aC[5)~u}#Dd3/h${z`d\|@wn#MnSl`V:,m.Hdx78pE]3mJ't~UFI[\|.Nkoq^8Q]?%;Oddk]GNj8K.$Q$m,Z61[;,4e]/J
2024-05-06 16:42:21 UTC	16384	IN	Data Raw: e6 6c 45 4d c9 82 20 21 e3 10 af e3 88 66 50 9b e0 47 e2 e0 57 1d 4a e3 c9 81 67 ad c5 74 18 5b ee f7 cc 48 4d c0 ac 7f 26 58 09 03 07 0b 28 b1 a3 0a c8 49 ad 98 40 1a 38 c4 fd a1 67 b3 ef 2a 57 93 99 0e f9 e2 62 c4 01 05 32 a6 98 24 e1 2f 42 d1 5c af f9 18 65 da 3c 4e 08 70 7b e4 4c e5 46 8a 1e 63 30 3a fb 80 92 6c 52 c2 19 78 20 86 2b 34 eb e8 a0 e0 a1 21 de 46 8c 18 fe 03 3f a8 46 94 00 f8 82 60 1a 88 09 11 52 a3 76 5c 49 26 82 b1 70 a0 32 75 cc 61 ec 60 d1 d6 e1 c6 b8 e9 cc 19 fd 0c 75 08 00 5a 4d be c1 06 e8 1d 93 00 09 d1 60 f3 14 0e 9c 10 31 2e e1 17 03 c7 e4 8c 41 11 2d 7f 90 c2 43 a5 c4 67 62 0d 58 d3 a4 b2 3a 29 f8 95 82 3c df 88 96 7b 84 2a 60 da 11 0d 17 57 03 36 f2 64 43 bd 88 01 f5 08 c4 36 d8 94 f4 04 84 ac 6b 82 30 b2 2b 9f bc a8 25 94 e2 Data Ascii: lEM !fPGWJgt[HM&X(I@8gWb2$/B\e<Np{LFc0:lRx +4!F?F`Rv\I&p2ua`uZM`1.A-CgbX:)<{`W6dC6k0+%
2024-05-06 16:42:21 UTC	16384	IN	Data Raw: 46 02 b5 94 d3 25 e7 28 47 87 79 cf b2 61 ac 8a c3 91 b3 10 3b 47 96 e5 46 ae 1f 42 fc cc 33 7f 03 fe cb f1 20 6d ab fb 08 e1 a9 e4 6d ab 98 62 d5 bc 08 6f 16 5d 30 7f 86 d2 eb 0a 29 0d fc cb 5b 35 64 b4 f7 50 ac 2a 20 0b 06 0a 03 af 71 aa 7c 5d 21 79 cc bc 41 c6 a1 b8 61 51 61 ab c6 ce 66 1f aa 76 1c 7a 85 32 d9 36 e6 70 83 22 f3 2e 0e ce d3 6c b0 1d 26 6c 8f fd be 22 ba ba 46 3d bf 92 2d 8e f6 98 04 01 d7 a9 4b e4 ba 4d 91 f8 2f a8 d0 26 bd 0f a9 f8 2f 16 f0 41 36 6a 34 d7 49 71 a5 3c f3 2e df 82 56 99 6a 5e b7 79 96 7e 62 d2 b6 f9 66 82 6d 46 d7 2c ca 94 6d 0b 5b 8b e7 5d 44 62 78 9d ac fa 61 bc 5c 07 38 73 1e a8 45 5f 73 ca 63 0b 2f 41 e3 26 7e 20 0c bd 99 b6 a6 b0 a0 5f c1 31 f9 40 db e0 bf ec 15 2a a1 54 ff 00 0b 22 dd 2c ef 01 30 6f 89 8a c0 0d e1 Data Ascii: F%(Gya;GFB3 mmbo]0)[5dP* q\|]!yAaQafvz26p".l&l"F=-KM/&/A6j4Iq<.Vj^y~bfmF,m[]Dbxa\8sE_sc/A&~ _1@*T",0o
2024-05-06 16:42:21 UTC	16384	IN	Data Raw: 16 bb ea 48 55 14 55 53 79 92 89 92 2a 68 32 12 6f 32 58 2a 09 6e 4f 30 4e e6 c9 53 72 2d 39 ea 10 93 f1 54 59 91 e1 9a 7e d4 e1 dd 3e 47 e5 0e 79 a6 1c 9c 2d 45 43 35 44 3a ae 87 61 62 de 1d 02 78 1e 84 5d e3 33 9e cd 06 e4 5a ee 39 a2 a2 08 b7 9a 82 7b da 4a 1e 7f 1a aa 8c b5 45 9f c9 1f 77 54 3b f0 2a 40 4f d9 55 07 6b 7b ef c2 29 e1 0f 76 4e b7 a7 39 a1 f7 15 fb 41 b7 a0 c5 1e 91 e8 d1 6e 5c 35 1f 18 04 6e c7 4c bc 55 0a ac 1e 63 00 87 f0 0f 56 f9 73 b9 3f e7 7e 21 cd 80 b9 c0 da 9f 94 5f d5 47 d5 13 65 45 c3 35 25 0c f3 5d ec d4 32 b8 d5 05 2e 7d d5 77 79 04 18 aa 61 d5 8a 1a aa ab 60 24 8c ba 01 57 d7 b1 e2 ab 9a a1 91 e7 cd 44 ed 42 28 b9 cc 2f b7 91 88 ed 65 a9 4d c3 f1 d0 b9 47 0e f2 13 dd 80 f0 f7 08 e0 24 6e b7 28 43 66 8f 42 98 7d c1 0b 23 34 Data Ascii: HUUSyh2o2XnO0NSr-9TY~>Gy-EC5D:abx]3Z9{JEwT;*@OUk{)vN9An\5nLUcVs?~!_GeE5%]2.}wya`$WDB(/eMG$n(CfB}#4
2024-05-06 16:42:21 UTC	16384	IN	Data Raw: 16 61 db 82 be b1 d8 88 09 80 5b c4 8f 00 75 69 29 68 b8 b7 2a d9 83 de 0b 4d b6 77 19 4f 33 fa c1 7e 3c 51 0d 76 13 16 d9 02 64 47 73 43 62 15 96 63 fb 6a 08 01 34 3e e6 c0 52 0f 0b 22 6d 03 a1 96 8e e1 bd dd 1a 90 81 f8 21 9d b4 9e 9c 10 d3 77 71 63 32 37 8a b2 a4 ea 91 1e 18 83 2b 25 18 e3 e3 c5 57 91 01 b7 08 a2 0b ba 76 24 21 74 6d 18 b6 95 cf 20 a7 b1 98 47 62 d5 c6 e1 61 a2 0a 20 dc 34 fb d7 ae 11 e6 f1 1b 15 78 a0 d3 5b 9b ca 86 42 0b 51 0c 28 03 d4 68 24 30 15 49 66 50 09 17 0d e1 b0 33 99 30 95 4a 9c c3 47 c6 b7 fd b1 a6 e2 b0 d9 1c b0 97 1b d0 a4 26 c5 78 08 7e 61 6e 59 a2 8a 29 1a 89 79 70 22 fd 37 b7 72 af 82 40 8d 67 37 31 ad ae 07 65 8c 0d 01 8e 20 eb 0c e1 31 6e 94 0c 33 61 7a 57 82 9a 19 c0 2b dc 71 df 03 55 23 b4 48 09 e0 31 71 85 92 50 Data Ascii: a[ui)h*MwO3~<QvdGsCbcj4>R"m!wqc27+%Wv$!tm Gba 4x[BQ(h$0IfP30JG&x~anY)yp"7r@g71e 1n3azW+qU#H1qP
2024-05-06 16:42:21 UTC	16384	IN	Data Raw: 69 ec 6b 37 03 7c 1e b1 0b 06 90 8b 3d 36 d6 06 23 d1 da a3 08 1e c8 8f 7e 71 8c ba 40 48 53 0e a2 1d 6f b7 20 72 55 1d ec 4b f8 ec 74 e1 39 49 9f 47 1f 77 78 3a 2b 32 9a 15 10 90 5e 41 cb 87 67 98 7e 7b c5 1f 05 cc 06 da 73 48 c9 c9 8b e8 8a d5 83 76 ef 43 58 4d a6 2a c9 07 95 4e c0 1a 2e ea a2 ef 05 dd 38 00 90 5d 6e d5 f2 ea f8 c4 1e a3 39 91 6a 42 6e 10 e7 bc 10 ec 10 51 54 db 38 88 40 70 32 c4 70 c0 46 b0 de da a3 bd a6 6d 62 c4 36 8f 9c 38 9b ae 98 cc ba 79 77 17 97 92 69 22 b8 0a 5b 62 e8 75 4a 5a 27 0f 8d 8e 52 6e 33 e8 ec d6 f9 ca 7c af fe f1 e3 7b c6 b0 67 f2 1d e2 e4 d9 61 87 8b 5a d7 13 bb eb 03 3a a4 34 d0 9f 56 99 e0 5c e1 c2 15 e4 e5 a3 8d 64 3c 09 0f 98 bc 60 6e a0 d1 36 de bd 81 dd c4 7f a7 00 55 af 05 c4 0c 50 43 9e 93 dd fc e2 21 94 e5 Data Ascii: ik7\|=6#~q@HSo rUKt9IGwx:+2^Ag~{sHvCXM*N.8]n9jBnQT8@p2pFmb68ywi"[buJZ'Rn3\|{gaZ:4V\d<`n6UPC!
2024-05-06 16:42:21 UTC	11434	IN	Data Raw: 8f 93 69 43 30 b3 1a 12 d3 75 4e 2e 8a 3b b8 52 22 68 26 79 ab f1 cd c1 d0 2a 5e ea ba 1a f7 18 54 5a d2 e6 db bf 8e 86 3e 14 47 9b 77 f4 36 a4 74 12 85 9c 28 e5 1b cd 91 f6 4d 40 e1 f5 ea 08 a0 a2 87 35 ab c7 98 d5 14 b5 26 56 f4 1b a6 fb 58 8b 70 ea f5 f1 0a 15 9c b6 c5 f6 72 2f 34 d4 a0 f4 5d 0c 09 70 77 b3 eb dc c9 0d c4 d1 28 9b 4e a6 a5 cd 16 a0 0b ff 00 82 5b 25 d4 1a 4f cc 7b ab 1e 5d 40 9f c4 51 4f 06 77 78 dd 4c 45 28 95 8a 2f 89 74 e3 25 f9 71 5e 6e 3d 6c 72 0e af 08 9b 5c 74 44 54 70 28 ed 05 ac 98 14 29 1e e1 0a 63 31 1d 1b ee ae 91 58 2d 62 60 50 e5 76 28 4e ee 30 d1 18 96 f3 c8 61 b9 7a 40 15 80 eb 8c f8 dc 40 63 99 fe a0 2c 14 5b 5e 78 fa 91 ab b9 b0 3f 19 7a 7e d3 09 8a 76 aa 14 7c 5d 9c c4 0c a7 62 ff 00 1c d9 13 ae c4 b1 11 3d 09 82 67 Data Ascii: iC0uN.;R"h&y*^TZ>Gw6t(M@5&VXpr/4]pw(N[%O{]@QOwxLE(/t%q^n=lr\tDTp()c1X-b`Pv(N0az@@c,[^x?z~v\|]b=g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.11	49811	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:20 UTC	662	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/adult-night-club.jpg HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:21 UTC	520	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:21 GMT Content-Type: image/jpeg Content-Length: 92660 Connection: close Last-Modified: Fri, 08 Sep 2023 11:14:56 GMT ETag: 0x8DBB05CD580E9E9 x-ms-request-id: e3311f64-501e-0028-2cd4-9f990d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164220Z-174c4b644cc5t6x2zzk3xununw00000002gg00000000e376 Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-06 16:42:21 UTC	15864	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c2 00 11 08 01 4c 01 f4 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 00 00 00 00 00 03 04 05 06 07 08 00 02 09 01 0a ff c4 00 1d 01 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 e0 Data Ascii: JFIFCCL
2024-05-06 16:42:21 UTC	16384	IN	Data Raw: 56 96 88 2d 13 2f 9a b3 33 72 39 5d 18 54 ab 59 7e 8d ee b7 d3 f6 ee 6f a1 d3 60 e6 9b 61 79 66 57 2b 1a 85 5e 66 b0 d8 70 4e fa 0b 34 c3 79 e2 1e 50 ac 6e 87 0d ce 90 7b 6b 34 db 90 5a 66 18 3f 13 af 62 d6 f1 65 63 a7 74 bf 84 1f 24 66 32 3f 48 76 04 3e 84 cb a9 43 e1 89 b9 15 16 6e 3f 11 be 1e c6 03 b2 c2 88 1e aa 27 c8 28 44 f9 94 c0 17 2e 2f 76 81 34 49 8d 90 92 3c f4 42 8a ce f8 8c 60 de 38 b1 98 6c 38 60 8f d0 41 0c 63 06 59 a7 b0 c7 89 10 5c 66 63 af 61 b4 cd cb 95 9f 79 db 05 db b0 64 62 5d a0 3f b3 35 4d 84 67 3c 53 67 2c 94 1a 9c 64 8d e1 f8 6c 0a 15 ed c0 bc d8 4e ef 94 1b 0a f1 c1 39 c7 59 05 0b e6 54 87 90 4e 29 a8 28 a1 4c a6 49 ef a9 46 47 ba b1 67 75 42 0f 85 67 6c 83 1c 28 5c 54 26 b1 ba 34 49 42 0d 64 78 61 f2 1a e6 86 c1 db 7d d6 43 6c Data Ascii: V-/3r9]TY~o`ayfW+^fpN4yPn{k4Zf?bect$f2?Hv>Cn?'(D./v4I<B`8l8`AcY\fcaydb]?5Mg<Sg,dlN9YTN)(LIFGguBgl(\T&4IBdxa}Cl
2024-05-06 16:42:21 UTC	16384	IN	Data Raw: 9a a9 b8 83 75 09 7e 6b fe cc aa c3 dc 12 5e ed fc 04 e1 22 34 0d ed c7 da 1a 58 5d a2 e2 b4 f7 31 38 94 37 72 c1 cd 62 99 45 5f 8f 3c 12 33 63 17 c4 6d af 2a b5 36 7c a5 1c c7 bd 8d e2 bd ce cb 83 b2 b2 c5 52 bb 3d c6 83 44 34 80 fb 9d 3c 47 51 31 66 57 17 29 a8 6f 09 ce 9d e2 37 e2 0d 79 0b 05 78 4d 0b 6b e7 dc d6 4f 52 bf 02 ba 47 10 7f 6c a7 06 e4 a3 92 17 2c 62 5d 15 e4 23 75 9e e5 2f 53 89 cc 27 d2 0b d9 42 79 db fa 83 dd 5d 4f 9b 24 a7 b8 29 e3 13 4c 40 96 ec ae ce 62 04 ce 3d fb 0e 8c ad c7 fd 7c d8 6b 18 40 6c 0b 0d 4c b5 9c f3 bf d0 18 f8 96 bf 23 13 47 26 e5 30 94 23 7f aa d3 7f b4 bb 4f ed 04 e7 04 97 28 64 1c 6f 99 fd 1d 47 41 69 be 30 84 61 3d 44 61 28 b9 e9 88 9f 60 06 b2 af 16 20 5d 7f c8 e9 7d db ce cb e3 72 be ca 9f f5 59 1e 74 ca d4 72 Data Ascii: u~k^"4X]187rbE_<3cm*6\|R=D4<GQ1fW)o7yxMkORGl,b]#u/S'By]O$)L@b=\|k@lL#G&0#O(doGAi0a=Da(` ]}rYtr
2024-05-06 16:42:21 UTC	16384	IN	Data Raw: 83 c0 44 75 ea e1 ac c1 02 30 a8 85 c6 7b 47 25 30 7b 99 e9 6d 70 c0 d9 9b 46 e7 80 da f1 b7 f2 e3 00 2a 9a 65 98 c7 58 c2 6c 0c ae 29 c5 35 fb 9a 5c cd b6 ce fd 2d e4 46 02 39 be a1 c1 cd 29 85 3d 1b 52 ff 00 13 b5 c6 0d b2 41 64 ed 14 5a 32 c3 54 20 e6 3e 99 62 e1 b9 d7 42 2d 50 8c d9 ff 00 e6 a9 ae db 32 d8 41 b1 d9 d1 0d 5d 20 a8 3e e9 91 12 2e fe 5e 92 9b 1b bf fd 87 a8 db df d0 aa 75 39 f7 ad 86 7f c6 7e a5 7e ac c0 e4 00 6b 9a 6c e9 0f f7 9c 25 d1 07 34 53 31 52 22 ca 80 61 30 61 aa 8d b9 ec 46 24 4b 1d 5a 7d 9d 75 2d 2b 1e 13 b7 2f f1 6a fc d7 2c 8d c2 e1 b0 8a 15 e2 12 6b 78 af 3a f1 f2 45 45 c3 bb 38 2c e1 2b c2 e8 aa 83 5d 98 ca aa 22 3b fb 8a b5 82 9a 50 7f ec 2f c4 57 73 af aa d7 50 7a 79 2a 79 31 15 d9 39 3e b8 26 ea a9 98 4f 63 a6 cf aa 31 Data Ascii: Du0{G%0{mpFeXl)5\-F9)=RAdZ2T >bB-P2A] >.^u9~~kl%4S1R"a0aF$KZ}u-+/j,kx:EE8,+]";P/WsPzyy19>&Oc1
2024-05-06 16:42:21 UTC	16384	IN	Data Raw: 45 1e 82 7a d7 83 c5 2a 2b c1 47 f7 1c 4f ca a9 82 85 e8 8d cb 5a bf ad 36 a8 d2 48 4b 80 11 cf ce 14 2f d9 28 cb 59 99 c4 c8 04 a9 35 a2 c0 95 70 ac 83 89 48 89 29 2b 0c d6 c1 b4 4a c0 89 c8 19 16 aa 29 78 a1 0f 18 5b e0 34 ce f1 e5 35 96 a5 a3 a8 2a ce e0 f8 7c 3c c5 19 c3 e0 a7 a2 ad d2 b5 74 f3 7d e1 2f dd 48 20 36 b9 57 6e 5e b8 8f a2 03 6d 76 34 10 62 02 82 5e c9 54 87 54 0a b2 1b 5e e6 b7 3a ad 64 1c 0b 70 f2 71 3b 75 36 78 74 f4 b9 6d d8 7e 36 2d 87 32 e9 59 95 45 7a 53 50 3e 53 f1 1b ee 13 43 03 36 81 c7 65 96 a9 42 1d 1c a9 2a 96 90 da c4 5a 2d 0e cc 17 57 c8 4b 21 d1 60 b6 b6 a9 e5 77 77 30 c4 6d 05 8f e5 3b 94 36 ed de de 94 1a 95 5c 48 e4 34 3f 19 11 dc 78 84 76 40 8b e7 24 db 55 db 1e 4a ba 65 9c c0 29 63 8d 37 00 38 08 1d 61 ab 03 ad ab b6 Data Ascii: Ez+GOZ6HK/(Y5pH)+J)x[45\|<t}/H 6Wn^mv4b^TT^:dpq;u6xtm~6-2YEzSP>SC6eB*Z-WK!`ww0m;6\H4?xv@$UJe)c78a
2024-05-06 16:42:21 UTC	11260	IN	Data Raw: a7 9f 8f ea 6f 17 9c c6 6f 2f 0b 88 2f d6 8c 56 9a 45 17 e0 ad 1e 87 65 7d 3c 8f 64 68 bf 41 2f 68 38 df e8 81 54 bd ea 23 1d 29 ea f6 43 ac 82 8a 68 74 45 af 7f 89 6a b2 18 88 7c 1e 9f 42 c7 d9 e7 da 1c 0d cb 9c f3 04 9e ee 08 33 79 6f bc 21 6f 57 51 62 ba fc cf a6 41 79 9a 8b 7c 63 4e 90 e3 c2 70 91 46 e9 54 bb df d7 99 93 6b f7 dc 2f ea e2 b8 0f f5 c0 ac 41 bf 47 51 dc ca d4 d9 06 d3 51 b5 8f 42 f4 0b e8 a7 f1 5d 10 60 d4 5f c2 14 d4 28 51 2d 32 cc b3 1c c5 ea 15 2d 4c 75 6a 02 b6 85 4e 47 1f 41 9f 48 3f 1e 94 6a b3 96 ee 00 dd f8 8c bf 29 bf c7 31 f0 1b 69 54 af a1 2c 65 44 56 1b 30 1c 17 0a 9d 97 1f 99 67 af 21 10 4b 34 a8 d3 1d f8 87 5e f0 eb c9 e3 c7 10 6e e7 7b 34 7d 22 74 09 a1 5a bb 50 1b a3 2b 80 8d 85 62 be 36 c2 dd e0 8e 83 b1 cf c9 28 6e bc Data Ascii: oo//VEe}<dhA/h8T#)ChtEj\|B3yo!oWQbAy\|cNpFTk/AGQQB]`_(Q-2-LujNGAH?j)1iT,eDV0g!K4^n{4}"tZP+b6(n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.11	49812	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:21 UTC	620	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/js/form-validation.js?v=145820231158259990808 HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:21 UTC	623	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:21 GMT Content-Type: application/javascript Content-Length: 8578 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 14 Nov 2023 11:58:25 GMT ETag: 0x8DBE50902346D8F x-ms-request-id: 00147dea-501e-0081-45d4-9f587f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164221Z-174c4b644cch57xx1kbpmuwk4000000001800000000005ep Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-06 16:42:21 UTC	8578	IN	Data Raw: 24 28 27 2e 70 68 6f 6e 65 2d 6d 61 73 6b 27 29 2e 6d 61 73 6b 28 22 3f 28 39 39 39 29 20 39 39 39 20 39 39 39 39 22 2c 20 7b 20 61 75 74 6f 63 6c 65 61 72 3a 20 66 61 6c 73 65 20 7d 2c 29 3b 0d 0a 0d 0a 2f 2f 44 61 74 65 20 50 69 63 6b 65 72 0d 0a 76 61 72 20 74 6f 64 61 79 20 3d 20 6e 65 77 20 44 61 74 65 28 29 2e 74 6f 49 53 4f 53 74 72 69 6e 67 28 29 2e 73 70 6c 69 74 28 27 54 27 29 5b 30 5d 3b 0d 0a 24 28 27 2e 64 6f 62 27 29 2e 61 74 74 72 28 27 6d 61 78 27 2c 20 74 6f 64 61 79 29 3b 0d 0a 2f 2f 44 61 74 65 20 50 69 63 6b 65 72 20 45 4e 44 0d 0a 0d 0a 2f 2f 52 65 67 65 78 20 56 61 72 69 61 62 6c 65 73 0d 0a 76 61 72 20 54 79 70 65 41 52 65 67 65 78 20 3d 20 2f 5e 28 3f 21 5c 73 29 5b 61 2d 7a 41 2d 5a 30 2d 39 5f 5c 73 2d 2c 5d 2a 24 2f 3b 0d 0a 76 Data Ascii: $('.phone-mask').mask("?(999) 999 9999", { autoclear: false },);//Date Pickervar today = new Date().toISOString().split('T')[0];$('.dob').attr('max', today);//Date Picker END//Regex Variablesvar TypeARegex = /^(?!\s)[a-zA-Z0-9_\s-,]*$/;v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.11	49813	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:22 UTC	421	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/covid-bg.svg HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:22 UTC	635	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:22 GMT Content-Type: image/svg+xml Content-Length: 55861 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Fri, 08 Sep 2023 11:15:00 GMT ETag: 0x8DBB05CD7751D3E x-ms-request-id: 1e4e37cd-501e-0017-1bd4-9f51ae000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164222Z-174c4b644cc5t6x2zzk3xununw00000002f000000000na04 Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-06 16:42:22 UTC	15749	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 32 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 78 22 0d 0a 09 20 76 69 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" vie
2024-05-06 16:42:22 UTC	16384	IN	Data Raw: 34 2e 34 2c 31 31 39 31 2c 38 33 38 2e 38 2c 31 31 39 34 2e 39 2c 38 33 31 2e 31 2c 31 31 39 37 2e 37 7a 20 4d 37 39 34 2e 37 2c 31 31 32 39 2e 34 6c 32 32 2e 38 2d 38 2e 33 63 2d 30 2e 37 2c 34 2e 37 2c 31 2c 36 2e 35 2d 32 2c 31 34 2e 31 6c 31 31 2e 32 2c 33 30 2e 38 0d 0a 09 09 63 39 2e 34 2c 31 2e 35 2c 31 37 2e 32 2c 36 2e 37 2c 32 31 2e 35 2c 31 39 2e 38 63 33 2e 38 2c 31 34 2e 34 2d 32 37 2e 39 2c 32 36 2d 33 38 2e 31 2c 31 33 2e 38 63 2d 32 2e 36 2d 31 31 2c 30 2e 31 2d 32 31 2c 36 2e 32 2d 33 30 2e 32 6c 2d 31 31 2d 33 30 2e 31 43 37 39 39 2e 31 2c 31 31 33 37 2e 36 2c 37 39 38 2e 33 2c 31 31 33 32 2e 37 2c 37 39 34 2e 37 2c 31 31 32 39 2e 34 0d 0a 09 09 7a 20 4d 36 39 35 2e 38 2c 37 37 39 2e 35 63 2d 37 2e 37 2c 32 2e 38 2d 31 33 2e 33 2c 36 2e Data Ascii: 4.4,1191,838.8,1194.9,831.1,1197.7z M794.7,1129.4l22.8-8.3c-0.7,4.7,1,6.5-2,14.1l11.2,30.8c9.4,1.5,17.2,6.7,21.5,19.8c3.8,14.4-27.9,26-38.1,13.8c-2.6-11,0.1-21,6.2-30.2l-11-30.1C799.1,1137.6,798.3,1132.7,794.7,1129.4z M695.8,779.5c-7.7,2.8-13.3,6.
2024-05-06 16:42:22 UTC	16384	IN	Data Raw: 35 33 30 2e 32 2c 33 35 38 34 2c 35 33 32 2e 31 2c 33 35 37 35 2e 36 2c 35 33 32 2e 31 7a 20 4d 33 36 30 30 2e 35 2c 31 31 34 63 2d 37 2e 39 2d 32 2e 39 2d 31 35 2d 33 2e 35 2d 31 35 2e 37 2d 31 2e 33 0d 0a 09 09 63 2d 30 2e 38 2c 32 2e 32 2c 35 2c 36 2e 32 2c 31 32 2e 39 2c 39 2e 31 63 37 2e 39 2c 32 2e 39 2c 31 35 2c 33 2e 35 2c 31 35 2e 37 2c 31 2e 33 43 33 36 31 34 2e 32 2c 31 32 30 2e 39 2c 33 36 30 38 2e 34 2c 31 31 36 2e 38 2c 33 36 30 30 2e 35 2c 31 31 34 7a 20 4d 33 35 34 34 2e 31 2c 38 35 2e 38 63 2d 38 2e 34 2c 30 2d 31 35 2e 32 2c 31 2e 39 2d 31 35 2e 32 2c 34 2e 32 0d 0a 09 09 63 30 2c 32 2e 33 2c 36 2e 38 2c 34 2e 31 2c 31 35 2e 32 2c 34 2e 32 63 38 2e 34 2c 30 2c 31 35 2e 32 2d 31 2e 39 2c 31 35 2e 32 2d 34 2e 32 43 33 35 35 39 2e 34 2c 38 Data Ascii: 530.2,3584,532.1,3575.6,532.1z M3600.5,114c-7.9-2.9-15-3.5-15.7-1.3c-0.8,2.2,5,6.2,12.9,9.1c7.9,2.9,15,3.5,15.7,1.3C3614.2,120.9,3608.4,116.8,3600.5,114z M3544.1,85.8c-8.4,0-15.2,1.9-15.2,4.2c0,2.3,6.8,4.1,15.2,4.2c8.4,0,15.2-1.9,15.2-4.2C3559.4,8
2024-05-06 16:42:22 UTC	7344	IN	Data Raw: 35 63 31 2c 31 2e 37 2c 32 2e 31 2c 32 2e 38 2c 32 2e 36 2c 32 2e 36 0d 0a 09 09 43 33 36 39 37 2e 37 2c 37 30 32 2e 33 2c 33 36 39 37 2e 33 2c 37 30 30 2e 37 2c 33 36 39 36 2e 33 2c 36 39 39 7a 20 4d 33 35 39 38 2e 39 2c 37 35 35 2e 32 63 2d 31 2d 31 2e 37 2d 31 2e 34 2d 33 2e 33 2d 30 2e 39 2d 33 2e 35 63 30 2e 35 2d 30 2e 33 2c 31 2e 36 2c 30 2e 39 2c 32 2e 36 2c 32 2e 36 63 31 2c 31 2e 37 2c 31 2e 34 2c 33 2e 33 2c 30 2e 39 2c 33 2e 35 0d 0a 09 09 43 33 36 30 31 2c 37 35 38 2e 31 2c 33 35 39 39 2e 39 2c 37 35 36 2e 39 2c 33 35 39 38 2e 39 2c 37 35 35 2e 32 7a 20 4d 33 36 31 34 2e 37 2c 37 36 30 2e 35 63 2d 31 2e 35 2d 31 2e 32 2d 32 2e 34 2d 32 2e 36 2d 32 2e 31 2d 33 63 30 2e 33 2d 30 2e 34 2c 31 2e 38 2c 30 2e 33 2c 33 2e 33 2c 31 2e 35 63 31 2e 35 Data Ascii: 5c1,1.7,2.1,2.8,2.6,2.6C3697.7,702.3,3697.3,700.7,3696.3,699z M3598.9,755.2c-1-1.7-1.4-3.3-0.9-3.5c0.5-0.3,1.6,0.9,2.6,2.6c1,1.7,1.4,3.3,0.9,3.5C3601,758.1,3599.9,756.9,3598.9,755.2z M3614.7,760.5c-1.5-1.2-2.4-2.6-2.1-3c0.3-0.4,1.8,0.3,3.3,1.5c1.5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.11	49814	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:22 UTC	425	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/home-banner.webp HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:22 UTC	540	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:22 GMT Content-Type: image/webp Content-Length: 59602 Connection: close Last-Modified: Fri, 08 Sep 2023 11:15:01 GMT ETag: 0x8DBB05CD8231DF0 x-ms-request-id: 996049a1-801e-003b-32d4-9fbd01000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164222Z-174c4b644cc2rp650s4fq0bw4n000000024g00000000t41a Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-06 16:42:22 UTC	15844	IN	Data Raw: 52 49 46 46 ca e8 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 7f 07 00 ff 04 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFWEBPVP8X ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-05-06 16:42:22 UTC	16384	IN	Data Raw: 11 10 c4 42 62 1b ff c0 99 56 d2 c0 58 98 59 da 53 6c 24 08 c9 5b ad 6b f2 dc ad 0b e4 9c 71 d2 9c 3e 4f 2f 75 44 7b e1 e4 b1 58 5d 15 4d 7e c2 66 04 9d 9f de a1 87 f2 ef 53 1c 25 73 45 01 cb e7 e4 30 bb b7 60 da 34 45 70 33 67 ce f3 9e aa 64 ee fd d8 00 1e 98 38 42 25 fd 6d 66 ed 39 70 74 59 f8 d3 2f c7 d2 56 c9 8c 52 8f 5f 8b 4f c0 c1 b9 c4 dd 4e db 04 d7 85 3f 16 59 2f 23 1b f7 8c e6 4e 7f e7 ee b2 b7 a8 72 33 ad ec 2b 48 6e ed 39 0e 50 03 4f a4 ae 8f 8a 42 25 f6 cd 55 7f 85 74 ba 36 d0 46 5c a7 70 b6 db f9 db 0f 12 57 1d ca 90 b9 b9 64 41 12 0f 2b 6f bd 8a 65 91 b8 1f 28 ae c4 0a ba ca 99 81 b1 d4 77 ca 63 a2 d7 9e aa a0 8d 04 14 43 8e f9 80 6f 84 20 ae 31 03 6f 6a b6 e7 ab f5 0e d7 73 06 cb 99 3a af 7d 99 8f f9 98 fb c4 0c 0a a2 25 ac ef 41 63 d8 c6 Data Ascii: BbVXYSl$[kq>O/uD{X]M~fS%sE0`4Ep3gd8B%mf9ptY/VR_ON?Y/#Nr3+Hn9POB%Ut6F\pWdA+oe(wcCo 1ojs:}%Ac
2024-05-06 16:42:22 UTC	16384	IN	Data Raw: 5e e0 8a bb 1e e5 c3 84 b4 f3 e4 da 71 dd 3d 01 6d 6b 7f 0c c2 2a 16 f5 07 93 d3 1c 9a 09 19 36 94 a7 55 67 f6 2f df 5d 00 c3 bb 34 99 fe 68 03 02 96 6f f5 c9 c3 a7 09 a3 e2 8d b4 93 11 25 53 71 ca b4 33 a7 74 40 1b dc af 31 47 64 be 6f 39 93 1c da c7 bd 3c b4 99 28 1a c4 c9 9b b5 17 34 d4 c2 83 75 a9 5e 5f 4e 3e 7a d8 5a f7 14 98 80 fc a5 ba da 46 71 f6 fc bc e2 e9 d8 d3 87 ca 75 5f ed c6 5c ac 44 ee b6 bf 61 c3 54 10 7f 99 b9 de f5 e8 e4 98 c8 f5 d2 66 18 fa 38 65 07 75 f7 95 73 b7 45 6c a1 77 63 e6 47 75 f4 72 a7 66 85 e6 69 df f0 58 8d 58 f6 bd f8 ec 92 fb 20 36 86 fa d4 41 80 d0 c3 9f 2c 1c 09 97 ce 2b b5 73 36 59 48 3a 03 77 de 9a 7e bc db 29 a6 c5 d3 4b 98 7b cf 27 c5 cf 62 6e 41 fa dc 00 a1 22 56 d1 9e d9 52 c6 b4 09 d5 c2 43 b6 80 17 5d 1f f9 d7 Data Ascii: ^q=mk*6Ug/]4ho%Sq3t@1Gdo9<(4u^_N>zZFqu_\DaTf8eusElwcGurfiXX 6A,+s6YH:w~)K{'bnA"VRC]
2024-05-06 16:42:22 UTC	10990	IN	Data Raw: e5 22 ea fd 23 55 77 36 4c d2 93 46 ee 08 de db 91 b3 73 c1 22 f3 79 2d 33 68 b2 39 fe 78 26 f8 cf 6b 60 aa c1 d4 49 09 3f 6b af 27 ec e4 c4 b4 90 22 62 58 70 9f 26 22 a5 56 2f 90 57 52 31 5a 79 5c 0d 6e b4 60 82 f3 ab 67 79 1a 21 69 ee 31 2b 7d 46 2a d2 64 93 d0 42 77 56 92 57 68 b4 ae 01 04 a5 97 c1 0e 3f ca 17 ca ab bd 37 35 e2 4f ca fd db 6a e7 52 ca 6b 79 47 54 40 15 2f b0 30 8b e3 1d a3 3e b3 be 64 69 ae a2 44 d6 8e 0b a3 c8 ff 16 0a 00 63 28 ac 84 a4 0b 1c 40 df 47 35 54 9c 7e 46 21 aa 5b ef cb cb d9 03 30 fd 00 e9 94 0b 3a a8 4d 5b f0 4c 98 72 a7 00 34 f0 69 4a f1 f2 2e b5 ae 33 d7 c5 65 1c 16 4c 76 43 7d 9c ab 11 be 39 b9 56 58 b4 26 15 b5 8d 22 92 f1 4b d9 8e c6 96 03 0d 0e 02 87 3e 14 d1 d5 1f 8b a9 08 48 4e c1 ad d4 0f b2 07 d5 04 7c e2 2b 03 Data Ascii: "#Uw6LFs"y-3h9x&k`I?k'"bXp&"V/WR1Zy\n`gy!i1+}F*dBwVWh?75OjRkyGT@/0>diDc(@G5T~F![0:M[Lr4iJ.3eLvC}9VX&"K>HN\|+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.11	49819	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:22 UTC	423	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/live-music.jpg HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:22 UTC	541	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:22 GMT Content-Type: image/jpeg Content-Length: 122865 Connection: close Last-Modified: Fri, 08 Sep 2023 11:15:02 GMT ETag: 0x8DBB05CD8C81F49 x-ms-request-id: 68f272fb-201e-000d-18d4-9f3071000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164222Z-174c4b644ccdthtf8yqbdzcpbc00000001xg00000000cg07 Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-06 16:42:22 UTC	15843	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c2 00 11 08 01 4c 01 f4 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 00 00 00 00 00 08 05 06 07 09 02 03 04 01 00 0a ff c4 00 1d 01 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 06 03 04 05 07 00 01 02 08 09 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 ab Data Ascii: JFIFCCL
2024-05-06 16:42:22 UTC	16384	IN	Data Raw: 17 a8 a1 7f 12 0f 65 f6 28 4c 68 27 1d 80 aa e4 0a d5 8a 51 14 6d f7 45 3d a5 42 d5 4b e0 af 11 3b 78 ab 75 3b e1 7e d9 0e e7 59 4e 79 82 2a cb 50 c0 4b 5c 00 41 17 c7 e3 74 e9 95 51 8b 32 35 5e a8 e8 9e 63 cd b7 d5 66 b2 12 85 ab 28 d2 95 8c 31 a3 3c 3c 55 d1 94 5d 7d 65 8b 15 e6 87 d0 91 57 61 2f 65 5d dc a8 72 95 cd 9f 18 77 15 88 ad a0 97 de 37 d4 4d ae 23 ea 6e 9f 07 08 55 76 42 53 a3 f8 e6 b3 62 98 be 6f c5 17 37 ff 00 26 fb c6 db 18 bc 85 81 5e 25 c6 bf 10 99 4c 16 c8 d4 31 9a ea b4 69 88 c3 37 5a b5 a3 9f 0c 39 4e 55 48 21 11 4b 18 05 3f 69 62 c3 89 04 6f 92 d0 78 d2 c2 85 0c 89 04 5b 52 92 b7 51 d7 06 4b 3c c8 f4 32 99 12 c1 af 73 00 12 89 0a 09 b5 23 30 de 98 5a d1 c6 94 78 2b 21 65 c8 a1 6c 3c 14 56 56 1b af 25 04 b0 48 a9 9a 66 12 45 d3 ed 26 Data Ascii: e(Lh'QmE=BK;xu;~YNy*PK\AtQ25^cf(1<<U]}eWa/e]rw7M#nUvBSbo7&^%L1i7Z9NUH!K?ibox[RQK<2s#0Zx+!el<VV%HfE&
2024-05-06 16:42:22 UTC	16384	IN	Data Raw: 13 73 63 2a 51 a4 82 16 e1 39 73 75 f6 94 e0 21 31 71 90 47 10 b1 13 0b 5a 7b c0 f7 86 04 4c 6d 71 ef 23 23 c8 43 cb 31 2b f3 de 03 c4 2f 12 c5 de 7c 19 fc c2 38 37 25 5d a7 c2 83 98 d7 6a 10 38 49 64 cd cd 71 08 c1 42 88 f3 cc 69 e7 a0 3a 93 a2 6b 9e e3 32 54 4c 02 33 18 70 c9 00 21 94 f0 00 a0 84 4a 34 40 40 51 16 c4 6e 11 00 32 09 a0 42 96 a0 a9 e8 55 38 b4 73 cc a1 0e 08 12 f5 13 05 fa 35 01 a7 22 04 c3 b4 86 88 8d 4c c2 21 f6 84 f0 fc 43 e6 11 54 99 e3 c4 3b 0d 13 e0 e8 fc 43 17 ca e6 f0 42 31 f5 21 72 04 17 2b 99 0c 40 e0 8e 66 20 8f 6a 0a 00 1d 68 16 21 41 19 f8 ef 04 90 40 31 b4 a8 ed b0 dc 1e 58 cd 02 b2 9c 8f a2 0b 10 e2 88 4e c8 80 7a 14 65 04 5f 10 ad 20 a7 5e 8c cb 8f f1 08 80 0e d0 a2 1b da 39 a8 22 20 bb 98 45 92 0f 04 42 ae 0f 92 0f cc 74 Data Ascii: sc*Q9su!1qGZ{Lmq##C1+/\|87%]j8IdqBi:k2TL3p!J4@@Qn2BU8s5"L!CT;CB1!r+@f jh!A@1XNze_ ^9" EBt
2024-05-06 16:42:22 UTC	16384	IN	Data Raw: 49 90 ac e3 aa a4 0d 6e 14 54 36 5e a5 9e e6 81 7c 12 9f 88 20 bb 29 8b 1c e5 38 7f e3 fb 95 43 f2 24 f1 73 4a b0 1c 45 3a 5f 21 92 79 f3 51 f5 fd 90 12 76 35 f9 21 0e 27 ef 2b fb cd 83 c0 7a 16 09 d0 f5 a8 eb 08 6a 9a 36 f6 2a ea 5f 82 82 2b e5 dc bc 08 f5 5b fc ab 3e b2 99 a8 6e 0e f1 5d 5b 9f 30 98 57 5f 05 4b fc 03 b8 67 7f f6 d4 2d 5e 62 f8 b8 75 6d 8e 46 01 bc 91 28 67 2a 22 a6 5a 3a 3a f2 88 a0 a7 04 21 32 f8 69 3b bb ed ea 11 67 c1 c3 16 df 2b 49 cf 7a b9 6a 57 c4 2d 31 58 2e a0 5e af 12 85 f6 72 b7 d0 b0 f9 da ce 23 a3 19 9a bc 02 ed 08 5c 6b 49 7f ab d1 5a e5 b8 e9 68 36 1c c1 57 68 bb f8 23 99 f6 8d ab f1 2b c1 63 a8 94 ce 06 3d 07 36 48 77 40 6b 83 c6 0f 19 8e f8 85 ac 8f 7b 77 52 d7 09 50 c0 5a b9 21 9b 59 85 67 12 d8 c4 ef 81 75 31 31 ae 67 Data Ascii: InT6^\| )8C$sJE:_!yQv5!'+zj6_+[>n][0W_Kg-^bumF(g"Z::!2i;g+IzjW-1X.^r#\kIZh6Wh#+c=6Hw@k{wRPZ!Ygu11g
2024-05-06 16:42:22 UTC	16384	IN	Data Raw: e3 95 46 17 28 d1 a3 cf ee a2 78 5b a0 cd e7 b4 50 7d 7b af 19 af ea 6d 44 ee b8 ff 00 e5 69 c9 dc 47 a2 64 b4 f9 70 2a 85 6c 8e ef 7a 63 87 82 04 1d 0a cf 07 26 f5 1e dd eb cf b9 f2 54 0b 45 59 ba 3d 5c f0 38 33 ad 35 26 be 1a 2c ff 00 4b 51 88 b0 c7 cf 01 21 19 e0 9d bb 6b 69 f4 47 f2 10 aa bb 70 fd bf 5c 04 e4 17 fa 62 24 23 4a 63 74 d8 22 89 c5 bb 31 d6 a7 d3 44 69 1e fb d7 23 f4 4f 23 bc a7 13 cd 15 18 5b 82 ec 6c f7 9a 3b ab ea 51 aa 3b c6 de 3a 7b aa 31 29 bb be 88 cf 20 b6 31 df eb f8 50 df 7c 55 bd 71 e1 86 7f a0 37 5e 2a e2 b8 18 c1 c8 4a a6 05 57 24 13 ba 80 38 9d 61 aa e0 c1 36 9d 31 b9 42 5b ae bc 56 56 f4 42 09 c5 e4 44 a3 a5 4f a2 10 22 ff 00 85 68 8f 05 67 51 5b e5 3c 31 18 3c b5 dc 34 5d 91 4c d1 aa a4 1f 45 b3 1f 54 e8 e7 54 42 84 67 a1 Data Ascii: F(x[P}{mDiGdplzc&TEY=\835&,KQ!kiGp\b$#Jct"1Di#O#[l;Q;:{1) 1P\|Uq7^JW$8a61B[VVBDO"hgQ[<1<4]LETTBg
2024-05-06 16:42:22 UTC	16384	IN	Data Raw: f1 9a 58 6f ae 20 2d d9 94 56 81 7e 5f 59 a5 68 9a 34 1f 42 a9 c2 de ef dd b3 f8 96 b8 ef 2f 6d c9 5c 2f 2b cf ed 3f bc 0c cf 4f 8c e4 0e 17 b8 be 09 27 da e3 93 6f 7c 40 a6 fc 3a cf 92 65 26 1f b8 52 34 2e 11 97 35 f8 ab da d6 1e b1 c4 36 f9 59 9a a8 9e 64 b2 64 6a e2 93 14 11 e6 08 b7 5f c7 e3 82 74 c6 0e 04 c5 d5 1e f0 3d fa d6 8e 3a 9a ea 6a 6e cb f0 39 9f 32 d7 02 d8 20 2b e6 8c a7 8d 78 08 ba 1e eb 17 4d 94 7a 26 a3 8d 85 69 06 87 60 7a 3d 30 16 60 4b 31 01 0f 8d e0 31 55 c6 5c 6a 93 07 ea 9c c1 8c f7 f9 71 e4 d0 8d 8f 63 30 5b dd 0a f8 57 cc c0 5e e6 2e fa 68 e3 a7 83 c4 13 38 ea 8e 53 1f 1b 20 39 a9 e7 d6 11 e5 0e f8 51 25 a0 b0 f7 15 69 3c 1a 73 a5 9f 63 81 72 67 ae 80 e1 0a d7 dd c5 ab bb 9d 5a f7 35 33 31 fd 79 63 e7 83 1f 9a 91 27 a6 29 c1 6d Data Ascii: Xo -V~_Yh4B/m\/+?O'o\|@:e&R4.56Yddj_t=:jn92 +xMz&i`z=0`K11U\jqc0[W^.h8S 9Q%i<scrgZ531yc')m
2024-05-06 16:42:22 UTC	16384	IN	Data Raw: 97 96 1b e2 d5 b7 05 5f 27 2d 41 a3 6e 02 db a1 8e 6f 35 96 e1 ec 08 d1 2a bd 8b 94 78 6e 60 88 d2 5d 38 d2 43 05 00 01 bc 0d e7 b7 32 f1 a1 84 7e eb e9 a0 17 c6 38 21 77 ce 5a f7 29 d4 47 be d8 14 50 31 34 c6 79 79 8d 91 cf e6 29 8b 2a 2e 3c 1f eb 2c 8a 44 2e 35 48 fc 3f fe 38 5e 65 1d 40 94 99 43 88 85 cd 84 33 3d c7 24 a8 02 98 04 a8 2b 51 4a d0 a1 7d 43 0b b2 8b 54 6f 86 f1 66 f0 40 a8 62 28 23 2d 02 50 d4 c3 e6 e0 b8 31 1b bd 4d 04 5d 05 db 70 d8 50 c7 bf 72 ed 95 a1 7e 79 40 21 45 7e d1 98 d4 66 a1 e9 d1 ed 5c f4 c0 df 86 df ae de 18 91 db 72 ba e8 86 89 c0 5c 11 cf a8 d3 ed 1d ac bb ae 86 ad c6 50 f8 65 21 40 5d 0f 27 d9 82 25 cd 37 b6 d4 15 d5 b2 94 98 01 8c 21 43 a4 19 76 20 99 5c 85 c1 92 97 17 e6 15 a3 70 9c f8 6a 03 47 60 71 73 23 95 cd c5 4e Data Ascii: _'-Ano5xn`]8C2~8!wZ)GP14yy).<,D.5H?8^e@C3=$+QJ}CTof@b(#-P1M]pPr~y@!E~f\r\Pe!@]'%7!Cv \pjG`qs#N
2024-05-06 16:42:22 UTC	8718	IN	Data Raw: 90 d3 6e 7a fe 61 68 10 2c 60 78 c5 6e d6 08 8a ce 77 0a a1 b8 dd ab ad 45 62 ae 18 19 f1 35 42 18 2b 4e 6e a2 e0 5d aa df ee 14 18 bc 5f 51 24 6e 0c 8d 0c 8e cb f5 30 9f 31 ae 08 58 dd f1 7d 62 02 08 39 59 9b e8 38 22 e1 63 0b 54 3d 35 c7 bc 4b 7c e8 2c 05 c3 5a ad 55 8b a6 07 ff 00 a2 03 86 8c 29 7e c8 dc 26 f5 6d 56 21 e4 bb 3d 42 17 42 80 b7 d6 b9 6d 41 db 33 39 74 e0 93 9d 82 15 55 a8 b9 28 b5 c5 9e da b8 79 46 bf c3 28 c9 ab 27 83 9f 57 09 5a 56 d7 8b 1f b8 46 25 9a c6 3e 61 7b 05 85 d6 a4 43 3c 34 c1 7a c0 14 82 2a 53 b5 ad ac b5 7d 0b 27 1a 00 a4 a8 02 c1 83 c4 48 db 06 20 40 cb 54 f5 19 2f c9 74 88 14 aa cf 25 35 d9 05 c4 d3 f9 ac 66 36 6b c1 bc 1d 2c e3 a0 62 af fc 84 9a 79 39 1b 19 71 42 d7 4c 86 95 6b c8 c3 09 66 a2 9c e4 3f 0b 2f c7 e4 a3 50 Data Ascii: nzah,`xnwEb5B+Nn]_Q$n01X}b9Y8"cT=5K\|,ZU)~&mV!=BBmA39tU(yF('WZVF%>a{C<4z*S}'H @T/t%5f6k,by9qBLkf?/P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.11	49818	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:22 UTC	657	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/logo-white.webp HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:22 UTC	519	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:22 GMT Content-Type: image/webp Content-Length: 3564 Connection: close Last-Modified: Fri, 08 Sep 2023 11:15:02 GMT ETag: 0x8DBB05CD8E4CACE x-ms-request-id: 0b5ca019-d01e-0054-2ed4-9fb7f2000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164222Z-174c4b644cchz564s3cys7udfc000000017g000000002uzt Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-06 16:42:22 UTC	3564	IN	Data Raw: 52 49 46 46 e4 0d 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 30 00 00 00 bc 01 00 5c 00 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFWEBPVP8X0\ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.11	49820	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:22 UTC	660	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/google-review.webp HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:22 UTC	519	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:22 GMT Content-Type: image/webp Content-Length: 1770 Connection: close Last-Modified: Fri, 08 Sep 2023 11:15:01 GMT ETag: 0x8DBB05CD8031787 x-ms-request-id: 3da143be-e01e-0070-57d4-9f4152000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164222Z-174c4b644ccdthtf8yqbdzcpbc00000001zg000000003xd1 Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-06 16:42:22 UTC	1770	IN	Data Raw: 52 49 46 46 e2 06 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 30 00 00 00 c7 00 00 17 00 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFWEBPVP8X0ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.11	49822	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:22 UTC	660	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/testimonial-bg.jpg HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:22 UTC	521	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:22 GMT Content-Type: image/jpeg Content-Length: 538032 Connection: close Last-Modified: Fri, 08 Sep 2023 11:15:05 GMT ETag: 0x8DBB05CDA982E19 x-ms-request-id: 8b0c61f1-301e-0001-79d4-9fa779000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164222Z-174c4b644cclmf9mt9bc53yybs00000000wg00000000bf3m Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-06 16:42:22 UTC	15863	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 02 02 02 02 01 02 02 02 02 03 02 02 03 03 06 04 03 03 03 03 07 05 05 04 06 08 07 09 08 08 07 08 08 09 0a 0d 0b 09 0a 0c 0a 08 08 0b 0f 0b 0c 0d 0e 0e 0f 0e 09 0b 10 11 10 0e 11 0d 0e 0e 0e ff db 00 43 01 02 03 03 03 03 03 07 04 04 07 0e 09 08 09 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e ff c2 00 11 08 02 bc 07 6c 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 00 00 00 00 00 03 01 02 04 07 05 06 08 00 09 0a ff c4 00 1d 01 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 01 02 00 03 04 05 06 07 08 09 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f9 Data Ascii: JFIFCCl
2024-05-06 16:42:22 UTC	16384	IN	Data Raw: ae 93 48 c7 ca bb 74 76 51 db 27 ab fa 0d 6d f3 c3 ee f2 7c e6 75 11 e8 7a b8 59 78 7d 95 e6 1b 8c 9e 16 77 12 7a 9f 3d 61 e8 b2 0b 89 b2 d9 f5 19 94 5f a0 73 5d 5d e5 1d 2d 21 df e9 34 ed f6 b2 bd e8 f5 1d bf e0 3e 89 af e7 3d f5 cd 53 f3 27 ea bf 2e b4 76 7c d7 d6 2f 92 3b 0a 67 5b d3 73 8f d3 5c 1f 0a 7d 49 e5 1f 40 33 7a 2a a3 5f 25 59 81 f2 87 a8 e3 20 eb ad 56 41 48 d2 ac 31 d6 56 28 d7 0e e7 90 1c 71 b2 cb a7 3d 42 b5 ea 13 55 25 6e 01 a7 37 8b b2 1b 3e 23 27 54 33 3c 42 3d 7e 52 e0 cd 29 e6 8e 81 ca f2 d3 28 06 b1 bd 62 11 80 a8 29 19 b1 9b 22 42 85 23 02 c9 14 4d 87 5b d6 e3 72 f4 71 72 b5 de 81 14 c8 14 be 34 9b 41 99 25 b3 96 45 8e f9 49 6b 92 16 c8 6a d8 76 98 5a a3 03 92 42 43 9b 17 6c 98 79 71 6d ac 57 55 02 ca 84 b0 b1 99 53 b4 b3 48 54 3e Data Ascii: HtvQ'm\|uzYx}wz=a_s]]-!4>=S'.v\|/;g[s\}I@3z*_%Y VAH1V(q=BU%n7>#'T3<B=~R)(b)"B#M[rqr4A%EIkjvZBClyqmWUSHT>
2024-05-06 16:42:23 UTC	16384	IN	Data Raw: 90 18 ec 05 a5 c8 15 92 ef 17 f4 01 91 88 61 03 11 5e 34 00 8e 10 21 d5 11 5b 1a b9 ad 86 2d 36 05 1d ea ed 09 f4 0b e6 7f 72 fb 39 f0 16 6f c5 3f be 53 86 be a1 f9 f3 ce 50 97 c9 92 b2 8c a9 a3 ca b1 d9 9e 66 62 d6 ca d8 65 19 39 e9 55 26 26 41 8e 01 d0 a9 8b 1a 4d 71 23 38 07 29 20 65 56 55 92 49 78 27 0c 72 ec 47 68 6f 02 60 4a b6 10 b7 96 49 b2 b6 54 fe 47 f5 4c f8 ec 5b 0b 27 ab 28 22 b8 8f 45 be ae c6 a4 64 8b 1c 90 8a 8c cb 47 92 e9 74 3d f7 37 de 9e 35 da 7d 66 d1 35 bd dc e9 72 9b fc 0c 2e 97 3b e5 b6 b3 6b c9 19 1b 6f a8 fb 2c 32 ef 75 dc ab c1 f5 36 17 9b 6f 05 85 7f 3b a6 c3 5b a6 dd 4b 67 54 e8 db 76 23 62 b7 b8 fa be ca 9b 5b 85 d9 ef da 3c 88 d0 eb 79 0b 52 76 3a 7e 8b c2 1d 41 d9 73 34 ad 5b 1a d3 a1 c5 c7 6a f6 12 2b b7 43 c5 b9 f8 95 6c Data Ascii: a^4![-6r9o?SPfbe9U&&AMq#8) eVUIx'rGho`JITGL['("EdGt=75}f5r.;ko,2u6o;[KgTv#b[<yRv:~As4[j+Cl
2024-05-06 16:42:23 UTC	16384	IN	Data Raw: 6f 1f 98 20 92 43 b8 99 85 b8 40 c6 83 b1 c3 8f 5e 7a 2f 9c 09 72 66 06 21 db d3 3c 2d b8 3e b7 06 54 73 9c d2 cb 05 51 31 9e f4 e6 6e 37 f8 f5 fb f8 44 c8 9c 10 ce 25 d7 6e b8 58 8b 26 34 f8 0c e9 64 15 5c 5e ef 59 ed 68 d3 e9 b3 18 13 17 67 ae f6 f3 79 50 88 8e 5e 90 12 33 d2 11 aa 58 b6 28 f0 63 a6 6c 78 a9 da 27 68 83 71 77 77 65 79 75 2c 38 d3 1f d2 a4 c8 be a2 cf cf f7 ad 51 8a f7 fd a8 da 6c fa b9 fa 06 64 4b 3d e8 a7 51 e6 7c 7f 7f 0c 78 74 6d 97 7d 54 23 a8 bb f3 cc 54 d4 e9 db 8c 7d 5e de bf 7f 1f df c3 db d7 ed ea f6 f5 ff 00 a7 a1 71 ce 87 b5 5a 86 22 4b dc a7 9c d3 4b 95 4c ea 39 2f 93 ed e8 8f aa 2a de 7b 52 4b 95 7e 9a 9e d4 ee d4 e8 e5 34 5c 9a 5e 11 f5 d5 bd 2c 79 53 57 3a 28 c2 82 24 4b 9d 45 33 e9 a9 fa bc 7d ea 26 87 b5 73 10 9f de 10 Data Ascii: o C@^z/rf!<->TsQ1n7D%nX&4d\^YhgyP^3X(clx'hqwweyu,8QldK=Q\|xtm}T#T}^qZ"KKL9/*{RK~4\^,ySW:($KE3}&s
2024-05-06 16:42:23 UTC	16384	IN	Data Raw: 43 89 6e 0c ac 2c 81 ee b9 b6 37 0c f1 69 7b d4 6c 1d a1 bc bd 53 b8 71 ed 59 6f 00 86 cd 9f 98 b3 19 08 5c 3a 2f 05 af b5 c2 ae c5 32 8d ad 80 b7 af 20 57 6c 50 38 26 66 e4 2d d1 67 0a b6 3d 13 6b 77 28 79 b2 f2 5c 2e 55 cc ad 4b 5a 39 45 e4 32 f5 f6 c0 a1 59 4c 69 59 33 cd 5a 8b 19 16 40 1c 2c ed 74 ae b7 27 5e e1 5d 4c 9e 1c 56 0d 18 5f 45 b0 dc 5c f3 02 90 16 d9 d8 5c 2f 00 f3 8b 95 aa 25 40 12 cc 54 5a b9 52 6f 12 da 8b 99 4b 0a 5b 10 cd 6d 5d bd af 0d de b5 70 ee e5 8e 7a d8 ed 57 0d 87 68 36 68 91 0a bb b8 24 a1 bb 69 d9 b7 16 76 2d 3d 53 7f 70 db 2d 82 3c 04 16 a5 84 7d 2a 51 47 c3 c4 85 3a c1 6b b3 13 0b 8d 57 17 28 bc d1 37 4c 8c 25 81 72 16 aa 0b 99 d0 23 6c 3a 24 c5 dc 91 10 65 ff 00 75 46 bc 3f 58 86 ab 66 ba da e9 79 8a e2 17 ad b6 30 76 90 Data Ascii: Cn,7i{lSqYo\:/2 WlP8&f-g=kw(y\.UKZ9E2YLiY3Z@,t'^]LV_E\\/%@TZRoK[m]pzWh6h$iv-=Sp-<}*QG:kW(7L%r#l:$euF?Xfy0v
2024-05-06 16:42:23 UTC	16384	IN	Data Raw: b5 c4 8e a3 6d ab 9b 6e db bb 89 8d 22 dd e6 02 71 e5 11 73 6d 66 ad bf bc 4b e8 0c 3f 13 49 61 b7 9b 97 0d cc 6c 81 34 61 61 13 10 34 17 3f 10 21 9d 70 a6 04 5c 97 bc 27 3a 0a 41 94 57 8b 0b 31 4b 06 4c c6 27 75 6e b8 89 86 45 c1 00 6d 9b 46 03 46 ed a1 2e 4c f4 8a 8d 58 00 5f c2 b7 1f 2a 18 d2 c2 a2 71 cd de e3 35 d4 19 ab 84 0b 05 b2 65 65 63 00 bd 67 18 2b b5 4c dc ea 8a ba 07 45 ce 1c 23 2b b6 65 ba 09 ff 00 0f 74 ee 66 6d ac fa 99 1a fd a8 ab 15 3f 32 7b cf f9 29 53 02 e8 99 e7 12 98 25 c9 ab a8 64 6a 7b fe 4f 1f 2a 19 3a 71 ed 25 33 5c 3e 20 ad 5b 8f ad b1 89 f5 5b fd 53 56 fd f9 55 ab e4 5d a7 df 8f 4a 67 8b 7c 2f cd c4 54 0d 40 56 3a 6a 22 bd aa 27 9d 2a 79 d2 9d 8a 87 45 15 d0 d1 5d ce 68 75 19 75 4d 28 71 14 35 1d ab b5 13 29 cf 81 19 e7 57 97 Data Ascii: mn"qsmfK?Ial4aa4?!p\':AW1KL'unEmFF.LX_q5eecg+LE#+etfm?2{)S%dj{O:q%3\> [[SVU]Jg\|/T@V:j"'*yE]huuM(q5)W
2024-05-06 16:42:23 UTC	16384	IN	Data Raw: 66 4d 80 11 17 d8 a3 6f 14 3a 58 ad 1e 0f 2a 2d e4 9a ad 01 6a 37 e1 b2 9e 26 47 e6 9d cf 98 44 78 21 0c c8 c6 a8 a4 8a 95 80 20 2f 8b 45 35 ca 9d cf 5b a9 e5 2b 7d 96 1f b4 38 ae 95 97 87 11 d4 27 c1 5c d5 67 9f 27 76 b0 26 d4 12 ee 15 94 ce 55 1c 48 ba fd 8d c0 5a c0 ac 75 f9 0e 29 3d 98 7b fa b3 d9 b7 cb b0 b5 ed 2a 7c df 28 aa 33 4d 90 99 7f 44 db 49 4d 88 16 59 8e 5c 12 6c 34 56 07 26 92 99 88 08 f4 74 31 a9 4d 65 40 b8 58 95 71 d5 4f a3 60 4d 79 6f 91 f1 e6 94 d7 1e 19 1c 3d 56 19 9c 4c cd 51 ff 00 85 5c e1 86 ac b2 c0 d5 97 29 3a b4 6a 21 5b 2f 8a 2f a0 79 a8 4f 7e 51 86 f1 5f fd 26 d4 b3 96 7c 11 ac bf 89 ce 2a 63 85 94 59 43 9b 5f c9 62 e9 b2 69 de eb 25 f5 0a 33 17 4e ab 37 31 b2 dc ea 82 fe e4 8b 27 9d 2c 50 3c db ac d4 cd 60 8b a1 b8 ad 3c 21 Data Ascii: fMo:X-j7&GDx! /E5[+}8'\g'v&UHZu)={\|(3MDIMY\l4V&t1Me@XqO`Myo=VLQ\):j![//yO~Q_&\|*cYC_bi%3N71',P<`<!
2024-05-06 16:42:23 UTC	16384	IN	Data Raw: 0a 88 fd fa 6f 3a 21 42 d1 7f 62 31 81 a3 2c 9e 07 3c 16 e8 fd 84 37 05 92 c8 89 78 2e 49 37 21 a3 77 d6 6e 16 29 76 29 0e 42 36 2d 5c 39 34 5e 4b 45 e5 1e c5 37 0f 51 a8 14 ab 80 fa 97 09 f3 46 9a 71 a1 6a 8d 72 79 1f 36 66 23 85 e2 49 4a 76 67 7a f0 26 bd 29 9a e0 f6 b8 82 5e f4 3e c5 78 4c 53 95 a5 b7 be cc dd 49 07 2a b0 f5 ae bb c4 4a 34 53 09 bc fd 8e 83 db 3e df 48 d1 05 d5 9b 4c 79 bc 07 8f 53 df f3 d8 51 6d c8 da af b3 c8 dc ac df 86 a7 dc 71 cd 4a c4 96 0f 15 3b f4 8b b4 64 73 b6 18 9a 61 aa 63 e1 d8 bf e3 fd 0b bc 92 17 75 d4 9f 3c 14 2d a4 09 c6 f3 0f 70 4c 66 8d b9 c3 18 6c cf 77 d8 a3 39 73 2d 96 db 49 fd 09 4e 9d 3e 1f fb 02 74 ef a7 3c 27 e8 7d 35 f4 e9 e0 89 9e 26 27 fa 1c d5 ca b3 7d d1 c8 92 82 9c 52 23 3f ca 49 5a 11 65 af 53 dc f0 57 Data Ascii: o:!Bb1,<7x.I7!wn)v)B6-\94^KE7QFqjry6f#IJvgz&)^>xLSI*J4S>HLySQmqJ;dsacu<-pLflw9s-IN>t<'}5&'}R#?IZeSW
2024-05-06 16:42:23 UTC	16384	IN	Data Raw: 91 1f 5c e2 a9 bf 60 e9 4a f0 27 a6 fd 39 c1 06 1f ac d7 56 c6 ef a4 f4 fc 93 f2 4f b9 26 85 d2 8d 9a 12 be c2 42 f4 cb 02 34 2e 88 c2 38 e9 a1 7d 74 fb 10 5f b4 c8 d4 ba 68 e7 62 5a 38 68 88 a8 c4 a4 8b ec 21 18 be 4c 76 23 b9 c0 fb e9 f4 a0 a2 e6 95 9b 7f e8 33 d8 54 c6 34 38 f1 fd c4 ba 42 6d 39 b5 ec 2f 3e e4 42 ac 8f d0 e5 10 b4 b0 61 99 09 5e fa 48 23 92 ac 88 a9 f2 14 c9 3a a7 9c 11 bd 66 84 95 98 70 d7 88 ca ed 07 7c e4 2a 9d 6c 3c 64 81 42 64 b4 32 51 9a 0d bb 1c 68 b0 4a 54 fe 79 42 16 f2 d7 f0 81 67 2d c9 e1 70 e7 f7 25 62 2d 5a c2 5d c7 37 b4 50 87 fb 63 35 45 97 dd 6d ec 91 b9 19 5c fe 47 24 fc 82 8a c2 92 a5 8a af 62 4c ec c9 e5 5e 9e 05 db 98 05 a8 38 76 d1 dd 43 a9 5a 7b 93 db 2d 56 ef 3d d0 a1 3a 5c e8 5d 98 87 33 eb 08 7e 1a b1 9b a8 ea Data Ascii: \`J'9VO&B4.8}t_hbZ8h!Lv#3T48Bm9/>Ba^H#:fp\|*l<dBd2QhJTyBg-p%b-Z]7Pc5Em\G$bL^8vCZ{-V=:\]3~
2024-05-06 16:42:23 UTC	16384	IN	Data Raw: 98 02 62 03 81 dc 0e a9 ce a9 c3 a1 a3 43 19 47 e0 7b 21 86 4d 1f dc 3a 42 92 35 88 47 b9 73 83 2d 79 cd 40 33 04 4d 83 98 26 c7 76 e0 64 c9 e6 0d 48 c6 09 73 65 50 a2 21 b6 74 61 88 07 d9 26 d4 a2 88 27 35 71 e6 18 01 1a c8 7f 88 ef 7b 04 e2 15 f9 e6 35 90 01 6a 27 f2 d9 2d fd 9f 08 10 52 0c 16 6a 01 05 c4 56 f1 fa 68 da ef 11 21 64 e5 00 6d 85 c4 53 be 89 cd 34 03 b0 64 e9 dd 60 a9 a4 65 e2 4e 83 6e 5b eb 20 2f 65 02 b1 1d 47 f1 37 48 9d e5 a0 10 2c 93 1c c6 19 a0 e3 ed 04 4e 1c ec 3f a8 f8 f9 46 d5 f6 8d 59 1b 00 6d 98 0b da b9 01 06 e1 4d f0 15 8c 74 e4 88 5b 00 7e 4c db 05 e9 6e 00 b7 be 82 86 c5 82 fb 62 ea 0a eb f4 3c 71 88 12 f9 28 02 1b f0 0c 16 ad 87 80 20 f4 37 00 1c 33 4b f2 25 03 88 e9 6c 17 f8 7f 51 bf 70 e3 55 1b f3 1c 67 96 08 64 ad d3 e6 Data Ascii: bCG{!M:B5Gs-y@3M&vdHseP!ta&'5q{5j'-RjVh!dmS4d`eNn[ /eG7H,N?FYmMt[~Lnb<q( 73K%lQpUgd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.11	49821	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:22 UTC	757	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/program-bg.jpg HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/css/home.css?v=015820240858469386724 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:22 UTC	521	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:22 GMT Content-Type: image/jpeg Content-Length: 195902 Connection: close Last-Modified: Fri, 08 Sep 2023 11:15:03 GMT ETag: 0x8DBB05CD9B84F62 x-ms-request-id: 5df2b467-801e-0014-2fd4-9fb0ca000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164222Z-174c4b644ccnbbfqs67zd7fd04000000023g00000000x1ps Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-06 16:42:22 UTC	15863	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c2 00 11 08 01 f4 03 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 00 00 00 00 00 03 04 05 06 07 08 01 02 09 00 0a ff c4 00 1d 01 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 e0 Data Ascii: JFIFCC
2024-05-06 16:42:22 UTC	16384	IN	Data Raw: 44 12 8f c5 d1 40 ba 99 c8 1a a8 68 68 d8 2b 64 98 4a 6c 17 19 0c 35 b0 73 70 ad 42 48 bd 01 7e 0c 9d 4d 08 12 e3 0e 81 27 e7 f5 4f 6a 7d 23 96 ba f0 f3 52 70 68 2e b2 66 da 52 47 d7 b8 d3 d1 d1 61 b3 5a 09 96 ae 59 e8 ef 2d b6 bc 21 4f d3 62 72 97 58 9e 67 46 e7 d9 d3 dd 2d 13 6e c6 a5 0e 75 61 09 31 d2 24 b4 12 90 e6 0c bc 20 da 06 b6 22 a9 6d 28 92 45 53 5b 2d b0 c2 b2 00 c9 19 34 f9 49 dc 03 ed ac 05 16 80 68 00 40 02 67 b2 40 66 78 23 c1 8d 0c 0a 49 2c a0 20 2f 10 10 0d 41 ea 15 80 30 0f c0 0c 44 09 9e a0 6a 06 50 ad 1b 7a 51 cc ea 86 6d dd 92 e6 e4 79 07 ba 57 e3 49 86 9f d4 10 a9 71 4a 3c d1 51 24 b2 d7 80 bd 89 6c fb cc e2 6c aa e2 8e c7 05 69 0d 48 c8 18 33 d4 23 60 ac 85 68 12 5d 71 f4 52 04 27 30 13 a8 22 0f c3 54 8c 6b 51 a5 08 93 11 b7 e5 ac Data Ascii: D@hh+dJl5spBH~M'Oj}#Rph.fRGaZY-!ObrXgF-nua1$ "m(ES[-4Ih@g@fx#I, /A0DjPzQmyWIqJ<Q$lliH3#`h]qR'0"TkQ
2024-05-06 16:42:22 UTC	16384	IN	Data Raw: f5 39 d3 b1 d0 b7 9f 89 d3 ed 93 da c9 96 8c 97 51 5b 9a 11 bd bc 40 c9 e1 17 2f bb 94 ca 4a 74 03 e6 39 31 c3 57 cb 77 3c d2 ae 78 a1 41 4f a9 55 4b e1 10 27 38 69 96 59 69 11 e7 1d 19 0d 18 31 27 5b 51 3d 9f 73 27 bf 5a b2 4a 4e 89 ea 1a dc 43 6f b7 71 44 80 b4 97 a2 fc 19 ae 2b 1f c6 a5 4a 43 ac a5 66 95 6b 3a bf 71 69 6b 57 18 ac f1 4a 5e 80 19 5c aa 7a fd f3 51 e4 09 70 a2 54 8b 94 c5 4d b7 1c 75 ee 62 31 20 4d 28 71 f6 65 cc 7b c9 73 00 26 30 e6 19 96 16 7b 1a 8f bb 8b 6d be 6e 8e cb cd 49 12 4a 9d 6c 83 2b e7 0b 1b b0 2e 00 f1 b3 36 d5 79 8c ac 2f 51 f4 30 41 64 ee 16 a8 16 49 a6 48 e2 ba f1 5a e1 2d 19 eb 5d 08 09 42 3e b2 5d ff 00 14 ce eb 8a 48 a5 f6 a5 2c f0 9d 2b d2 3d ea ab f3 e5 47 72 19 ed 1c 94 a9 bc 66 93 dd 6b 3c 52 7b d4 49 67 05 dd c1 Data Ascii: 9Q[@/Jt91Ww<xAOUK'8iYi1'[Q=s'ZJNCoqD+JCfk:qikWJ^\zQpTMub1 M(qe{s&0{mnIJl+.6y/Q0AdIHZ-]B>]H,+=Grfk<R{Ig
2024-05-06 16:42:22 UTC	16384	IN	Data Raw: 5b 9e 20 5b e5 75 a1 d3 fa 27 e8 5e 87 d3 fa 84 35 0c e7 0c 68 85 12 81 85 92 3b 09 4a 31 e8 fa d8 49 5b 1a 31 cd a4 14 2d b6 4b 62 61 8e 60 5b b1 28 a4 b2 23 42 d3 22 1c e0 55 78 df 77 a3 7e 8c 7e 83 19 03 1d 30 91 0f 0d 7d 8d f0 d3 98 c9 30 52 c8 a3 cd cf 0b c8 52 d3 b0 1f 6f d1 ef 60 11 ec 88 f1 47 0f c8 4c 6b f4 df 94 3e 7a 97 b5 24 a2 7c 88 d9 0e 42 5b 6e 54 ac ff 00 01 f4 7c bf e7 1b 88 a2 70 89 b4 d7 a1 49 63 84 c9 4b ff 00 68 bb c8 47 d7 72 72 ff 00 66 e6 ae 54 95 70 84 86 eb 3d 3a 4d fc 18 d8 a2 32 8a 40 9f 21 11 fd a6 73 c3 8a ad e8 3d 0f 82 16 59 c7 29 6c 5b db 7c c5 d2 74 eb aa 31 36 47 c3 8b 7e 0b 2c 1f 6a 24 7b 0c 53 18 d5 02 63 af 38 43 6c be 68 7c 88 a2 23 a2 92 ad a7 97 fc 18 ab d9 d3 b1 6e f1 3f 00 6f 85 87 10 a2 b2 73 d9 48 48 81 e7 3c Data Ascii: [ [u'^5h;J1I[1-Kba`[(#B"Uxw~~0}0RRo`GLk>z$\|B[nT\|pIcKhGrrfTp=:M2@!s=Y)l[\|t16G~,j${Sc8Clh\|#n?osHH<
2024-05-06 16:42:22 UTC	16384	IN	Data Raw: 77 86 3f c8 7f f2 f9 ff 00 e0 35 37 fa 10 c4 b9 73 5f fe c3 04 1e a0 f5 1c 75 07 de 73 88 13 94 19 dc 2e 83 9f a0 33 1e 67 b0 69 7f d2 e6 18 57 f2 e3 1f 74 44 bb 49 7c 67 eb ef 2a 54 a9 5f e7 7e fe 44 1a 29 ee 2b ac c3 c6 38 61 85 9d a5 05 90 51 5f 5d 69 6f 38 8f 2c 8c 27 58 ff 00 92 f5 0f 75 f7 dc b5 5d 45 bb 4b 10 35 d4 9f 73 60 b5 5f 33 80 b1 eb 2c 6a ef 1a b8 fb 4b d5 37 46 b8 75 ea 56 94 b8 aa d3 2e 98 37 53 81 14 af 71 59 9a fa ed fe 41 0f ff 00 14 9b ff 00 89 06 31 1f ab df f8 1f e2 66 6f f4 99 ce 9b ff 00 98 62 f3 97 fc 92 8b a6 17 11 da e1 88 ea 19 be 37 fe b9 94 5a 12 19 bf fc d7 cc 88 2a 54 24 7b 3b 3c 91 5d 45 d6 a2 bf c0 57 d6 e1 f5 26 3c ca d9 2e 20 d5 30 e2 18 87 02 44 29 b2 28 fe b1 0f e5 9f f2 f3 0a d1 27 65 d6 62 79 15 f1 00 a0 cf 11 19 Data Ascii: w?57s_us.3giWtDI\|gT_~D)+8aQ_]io8,'Xu]EK5s`_3,jK7FuV.7SqYA1fob7ZT${;<]EW&<. 0D)('eby
2024-05-06 16:42:23 UTC	16384	IN	Data Raw: 41 29 2f 0a 38 af ea 64 64 bc 15 55 59 d9 b3 88 9d f3 bb 7c 16 97 b8 6a b1 3a 2c 9a a3 cf de a0 6c 6a 7b 3d 46 f7 cf 68 45 02 6a c1 ef 97 e3 29 08 0c 69 c4 56 8c f8 4a 8c 64 65 5e 61 01 78 cf 0f 97 d7 10 7a f4 02 0d f5 01 2d f1 ad 2c f0 8b 8c bb c4 04 ab 49 ce d7 4e 7c 47 85 72 ad 38 7b 2f c2 42 8a 62 d9 d1 98 62 d6 0b da 31 5d b2 aa 17 e2 21 ab f6 b7 ef a4 15 fe a1 0e ce 6e 7d 50 b4 52 9b 0f 17 c4 eb 6d 7b 3f b6 96 dd 43 97 43 a8 94 72 4a 5d eb 82 29 a1 21 56 30 86 91 92 b8 85 1d 45 2b b7 5a 00 4c a2 1e 0f 65 12 5a b2 3a c7 4d c6 99 42 d2 b0 eb 3a b2 a8 aa fc c1 df 34 f3 6c 75 66 6b b1 98 4a 0c b8 ad 7f 47 e6 a0 13 97 ba 8f e1 2b b2 9c be e6 28 be bc c4 00 92 56 00 e5 7c 11 a4 7d c6 2b 3c 0d 1c 32 d6 c4 ea f1 32 32 e9 f8 93 98 98 b6 15 2f cb fe e6 65 70 Data Ascii: A)/8ddUY\|j:,lj{=FhEj)iVJde^axz-,IN\|Gr8{/Bbb1]!n}PRm{?CCrJ])!V0E+ZLeZ:MB:4lufkJG+(V\|}+<222/ep
2024-05-06 16:42:23 UTC	16384	IN	Data Raw: 31 3e 34 13 2b f3 dc 9c 2c d3 8f dd 12 c7 3e b1 86 3c 2f 66 63 fc bc b5 24 cf 41 e2 e9 c7 e5 40 5e 07 fd 4c da 3d 50 0b 71 e5 6e 50 65 9f 0a f7 4d 33 3d 88 db 93 59 a9 af 46 f4 c4 a6 c1 70 56 bf d5 b0 ec 5a 51 6a 1c 6b f2 6e 13 73 6d 0f 5d 9d 3f ad 75 1d 37 ac dd 31 ec d1 6a 76 b7 d4 07 ae 6a db 70 e0 7c 44 d6 3f ec cd 71 c5 b3 47 7b 55 70 c6 e3 03 13 16 2f 9e c6 08 20 ee 60 ff 00 10 76 1d b5 23 22 15 c1 8a c7 d4 96 af ef 09 6f 96 8d 5a 18 28 5c 1c 7d 3b c2 98 8a cc 9e 29 75 b4 61 a9 16 ad bb 4a 81 03 22 98 09 8b c0 c4 51 c4 6f f1 39 80 e5 b3 2c 76 af 90 ce 00 8e 7f 68 e5 18 93 2c d7 67 56 a8 ba 95 a6 ed 49 de 74 3b ea f8 37 4c d5 07 e7 4f 46 32 c6 d4 5f a7 dd 19 2c 71 81 d3 f4 6d 6e ac 2d b5 1d f0 70 23 0c b6 65 96 60 f1 ab e6 bc 4d 36 97 d6 01 9e ab 68 Data Ascii: 1>4+,></fc$A@^L=PqnPeM3=YFpVZQjknsm]?u71jvjp\|D?qG{Up/ `v#"oZ(\};)uaJ"Qo9,vh,gVIt;7LOF2_,qmn-p#e`M6h
2024-05-06 16:42:23 UTC	16384	IN	Data Raw: b7 25 ec 6d 07 7d 9e a0 ea 2b 81 3c 1f 96 5c a5 6c 73 8d 41 bd a1 f1 ad bf 80 f1 f7 86 ee f2 16 d4 01 bb 1a 89 7b 80 56 7b 83 45 a5 b9 15 14 1c b1 fc 86 38 1c 0d 1e 42 8c af 89 f7 95 56 60 65 e3 5a 78 c6 b1 38 ee 79 5c ba 99 cf 08 d3 f6 f4 d4 51 e8 66 bf 01 0b 6e a9 bd 8d 7a ff 00 0c 5a 86 d1 ba 19 bc af 9f 4c 81 f2 ae 86 69 5b a9 1c 95 4e e7 1d cd 4d 09 a8 dc 4c f3 ad c7 08 b4 be d2 ed fd 3e 4a 17 70 b0 e1 b8 06 98 99 79 1c b7 3e d2 28 ef 50 a7 41 40 f9 f5 31 69 dd 92 a0 ac da 18 b6 ad 96 90 16 88 c3 4c 2a 5d cb 79 db d0 b3 c6 64 30 98 98 2d d8 89 87 70 1b 37 bf e9 b6 66 d6 e7 2e cd 48 d7 c4 23 2f 44 58 aa 3a f7 14 af 59 a5 3d ee 28 a8 ce e1 46 16 12 e1 d1 a8 56 15 d7 67 5d cd f7 36 4f d8 e8 c5 9a ff 00 79 95 f3 ab 51 83 97 d4 a7 16 9c 61 fd 53 6b ef 42 Data Ascii: %m}+<\lsA{V{E8BV`eZx8y\QfnzZLi[NML>Jpy>(PA@1iL*]yd0-p7f.H#/DX:Y=(FVg]6OyQaSkB
2024-05-06 16:42:23 UTC	16384	IN	Data Raw: b4 58 23 36 14 74 7d a0 96 54 7b 99 79 09 8d 10 a8 00 49 b5 30 ff 00 cc bd 3a 7b 72 da 1e ff 00 d8 25 bd 87 6d af 38 20 e3 31 9f 94 e3 e6 82 d4 a6 95 f5 18 66 a1 a9 92 5d f4 b9 87 51 e2 21 80 ab 96 89 d9 b0 43 fc ba 31 4b e5 a8 7b 96 5d 7c 5a 4b 0e 44 0c 4a b5 0e 9f 24 6a 40 87 01 de 46 26 1d 08 bc 78 7e 20 61 eb 08 3f dc bf f5 20 d7 88 de 85 58 82 b1 96 38 8d 02 89 17 04 59 fe 88 d9 92 2c ae 5f ad 59 0b 76 0a 7b 78 c0 5d ac e5 bf da ca e4 c8 68 d0 2b db 9d 6d 44 e5 1d 48 3c 9f 02 fd e4 a6 65 f1 6b 05 bc 07 b2 6c 63 5b 08 33 b1 e2 98 10 3b 98 cc ed ba 50 0a ea ae 81 96 08 a6 0f 67 b2 e7 aa 86 80 aa a5 07 91 5e 3b 79 1a 4a 60 00 75 4a e1 0e 97 97 c9 05 53 4b 2e 93 0c 0d 1c c6 71 fc 13 58 60 11 6b d6 0c 63 9d c1 67 8b 4a 73 1d 9b 0d 9d 92 e9 67 ea aa a3 bd Data Ascii: X#6t}T{yI0:{r%m8 1f]Q!C1K{]\|ZKDJ$j@F&x~ a? X8Y,_Yv{x]h+mDH<eklc[3;Pg^;yJ`uJSK.qX`kcgJsg
2024-05-06 16:42:23 UTC	16384	IN	Data Raw: 9d c5 5d c8 b4 d1 1f 5e 8b a0 2d 25 a7 85 6c 5f c8 54 2b ca 54 f2 8b fe c7 0c 5a 7d 26 ba 73 12 99 44 a3 a6 25 c1 ba 57 02 55 4a 79 94 88 89 21 e9 e0 3e 46 ec 8e 7e 16 1d 03 74 86 1e 29 95 81 ab 20 76 b7 cd 7f 11 9c 3d 45 75 ae cc d6 8f b2 30 82 c1 6c 33 d2 5f 31 b7 05 c4 b5 d3 45 91 0a 42 10 91 9b 5c df 6f 08 f0 4f 89 e0 0b 93 9c fd 3a 53 42 25 88 47 10 d3 60 a9 be 0a 38 cc 47 6a 56 4f 3d 31 07 6e 82 94 0a 01 10 c4 a7 a1 2d 96 9a 17 1b 9e 97 55 01 b5 1c 80 0e a9 06 56 54 a1 4b c9 ff 00 9c 45 1f 69 6f d1 58 00 f0 c7 98 0c 12 bb 01 45 d3 18 28 93 6c 84 6d 15 a7 0e 47 4e b0 d8 5b 63 3b 20 80 88 10 d0 30 0f 68 eb cf 87 c6 c4 56 13 8a 18 45 59 21 b8 b9 70 9a 10 20 2b c2 95 29 6c 7c 74 5d c6 4b a3 7f ca 44 b1 3a 44 14 1a 08 1b db c2 15 50 70 38 e5 10 02 9a 99 Data Ascii: ]^-%l_T+TZ}&sD%WUJy!>F~t) v=Eu0l3_1EB\oO:SB%G`8GjVO=1n-UVTKEioXE(lmGN[c; 0hVEY!p +)l\|t]KD:DPp8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.11	49816	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:22 UTC	423	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/night-club.jpg HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:22 UTC	541	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:22 GMT Content-Type: image/jpeg Content-Length: 125601 Connection: close Last-Modified: Fri, 08 Sep 2023 11:15:02 GMT ETag: 0x8DBB05CD9296AC9 x-ms-request-id: 1ebc4151-901e-0055-5fd4-9fe82e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164222Z-174c4b644cc5t6x2zzk3xununw00000002cg00000000ygk3 Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-06 16:42:22 UTC	15843	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c2 00 11 08 01 4c 01 f4 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 05 01 01 01 01 01 00 00 00 00 00 00 00 00 05 03 04 06 07 08 02 09 01 00 0a ff c4 00 1c 01 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 04 05 02 03 06 01 00 07 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f2 4f Data Ascii: JFIFCCLO
2024-05-06 16:42:22 UTC	16384	IN	Data Raw: 7c 8f a6 6b 3f e6 e6 f3 dc c3 14 34 bf 3f 41 f4 43 83 4c c1 8d 67 07 15 b6 44 fc f3 b1 69 7f 2c d3 60 d0 27 14 33 40 e1 f3 47 3b 89 61 43 e2 b7 8f c4 f6 5b 35 29 00 d2 7e 75 86 93 e0 93 9c 7d 23 b5 96 44 de b7 1a 64 d6 89 cd 33 2f 0c 9b 68 b2 17 24 10 7b 7a 8b 60 ed e5 64 7c 04 8d 40 ed f2 77 6e 0b 23 82 4d 6e de d9 af 98 ca d7 f6 53 13 f1 f4 6c 60 56 3a cd 2c ec 96 c6 01 6d b7 dc 2e e6 92 48 64 78 d6 d5 37 0c 9b 38 70 45 5d 33 6d f2 96 4a 27 74 98 a8 bb cb d3 7e 55 1f c5 46 e4 49 8a 0d fe 5b f0 14 c0 7c d3 2e d1 d8 f2 ea b3 d5 1a 4e e8 9e e9 6b f1 6f fb 06 71 5e 38 c5 11 9a 51 fa ae 8e 5d 91 ba c0 98 11 f2 3f cd 25 1f a6 3b ae 4f f1 8e a9 64 64 07 6b 1c d2 fe 5d 47 b9 4e 6a 38 c4 9b 8c 9b 4b 9c 2e 9f a9 c9 05 aa c4 a3 24 51 1b 93 24 6d 2c 5a 8b 36 31 5b Data Ascii: \|k?4?ACLgDi,`'3@G;aC[5)~u}#Dd3/h${z`d\|@wn#MnSl`V:,m.Hdx78pE]3mJ't~UFI[\|.Nkoq^8Q]?%;Oddk]GNj8K.$Q$m,Z61[
2024-05-06 16:42:22 UTC	16384	IN	Data Raw: 1c 52 46 46 04 99 10 83 9b 71 c7 48 6e 74 ae 32 51 59 01 d4 e6 6c 45 4d c9 82 20 21 e3 10 af e3 88 66 50 9b e0 47 e2 e0 57 1d 4a e3 c9 81 67 ad c5 74 18 5b ee f7 cc 48 4d c0 ac 7f 26 58 09 03 07 0b 28 b1 a3 0a c8 49 ad 98 40 1a 38 c4 fd a1 67 b3 ef 2a 57 93 99 0e f9 e2 62 c4 01 05 32 a6 98 24 e1 2f 42 d1 5c af f9 18 65 da 3c 4e 08 70 7b e4 4c e5 46 8a 1e 63 30 3a fb 80 92 6c 52 c2 19 78 20 86 2b 34 eb e8 a0 e0 a1 21 de 46 8c 18 fe 03 3f a8 46 94 00 f8 82 60 1a 88 09 11 52 a3 76 5c 49 26 82 b1 70 a0 32 75 cc 61 ec 60 d1 d6 e1 c6 b8 e9 cc 19 fd 0c 75 08 00 5a 4d be c1 06 e8 1d 93 00 09 d1 60 f3 14 0e 9c 10 31 2e e1 17 03 c7 e4 8c 41 11 2d 7f 90 c2 43 a5 c4 67 62 0d 58 d3 a4 b2 3a 29 f8 95 82 3c df 88 96 7b 84 2a 60 da 11 0d 17 57 03 36 f2 64 43 bd 88 01 f5 Data Ascii: RFFqHnt2QYlEM !fPGWJgt[HM&X(I@8gWb2$/B\e<Np{LFc0:lRx +4!F?F`Rv\I&p2ua`uZM`1.A-CgbX:)<{`W6dC
2024-05-06 16:42:22 UTC	16384	IN	Data Raw: 62 9d 60 a3 08 78 5e 1a d3 15 b1 2f 85 8a 45 8a 2c 79 5f 8c 46 02 b5 94 d3 25 e7 28 47 87 79 cf b2 61 ac 8a c3 91 b3 10 3b 47 96 e5 46 ae 1f 42 fc cc 33 7f 03 fe cb f1 20 6d ab fb 08 e1 a9 e4 6d ab 98 62 d5 bc 08 6f 16 5d 30 7f 86 d2 eb 0a 29 0d fc cb 5b 35 64 b4 f7 50 ac 2a 20 0b 06 0a 03 af 71 aa 7c 5d 21 79 cc bc 41 c6 a1 b8 61 51 61 ab c6 ce 66 1f aa 76 1c 7a 85 32 d9 36 e6 70 83 22 f3 2e 0e ce d3 6c b0 1d 26 6c 8f fd be 22 ba ba 46 3d bf 92 2d 8e f6 98 04 01 d7 a9 4b e4 ba 4d 91 f8 2f a8 d0 26 bd 0f a9 f8 2f 16 f0 41 36 6a 34 d7 49 71 a5 3c f3 2e df 82 56 99 6a 5e b7 79 96 7e 62 d2 b6 f9 66 82 6d 46 d7 2c ca 94 6d 0b 5b 8b e7 5d 44 62 78 9d ac fa 61 bc 5c 07 38 73 1e a8 45 5f 73 ca 63 0b 2f 41 e3 26 7e 20 0c bd 99 b6 a6 b0 a0 5f c1 31 f9 40 db e0 bf Data Ascii: b`x^/E,y_F%(Gya;GFB3 mmbo]0)[5dP* q\|]!yAaQafvz26p".l&l"F=-KM/&/A6j4Iq<.Vj^y~bfmF,m[]Dbxa\8sE_sc/A&~ _1@
2024-05-06 16:42:22 UTC	16384	IN	Data Raw: c0 ea 83 9f 35 09 85 41 37 f1 d5 49 78 a0 36 67 2b be 6a 16 16 bb ea 48 55 14 55 53 79 92 89 92 2a 68 32 12 6f 32 58 2a 09 6e 4f 30 4e e6 c9 53 72 2d 39 ea 10 93 f1 54 59 91 e1 9a 7e d4 e1 dd 3e 47 e5 0e 79 a6 1c 9c 2d 45 43 35 44 3a ae 87 61 62 de 1d 02 78 1e 84 5d e3 33 9e cd 06 e4 5a ee 39 a2 a2 08 b7 9a 82 7b da 4a 1e 7f 1a aa 8c b5 45 9f c9 1f 77 54 3b f0 2a 40 4f d9 55 07 6b 7b ef c2 29 e1 0f 76 4e b7 a7 39 a1 f7 15 fb 41 b7 a0 c5 1e 91 e8 d1 6e 5c 35 1f 18 04 6e c7 4c bc 55 0a ac 1e 63 00 87 f0 0f 56 f9 73 b9 3f e7 7e 21 cd 80 b9 c0 da 9f 94 5f d5 47 d5 13 65 45 c3 35 25 0c f3 5d ec d4 32 b8 d5 05 2e 7d d5 77 79 04 18 aa 61 d5 8a 1a aa ab 60 24 8c ba 01 57 d7 b1 e2 ab 9a a1 91 e7 cd 44 ed 42 28 b9 cc 2f b7 91 88 ed 65 a9 4d c3 f1 d0 b9 47 0e f2 13 Data Ascii: 5A7Ix6g+jHUUSyh2o2XnO0NSr-9TY~>Gy-EC5D:abx]3Z9{JEwT;*@OUk{)vN9An\5nLUcVs?~!_GeE5%]2.}wya`$WDB(/eMG
2024-05-06 16:42:22 UTC	16384	IN	Data Raw: 40 a6 39 a4 ad 5c a4 4f bc 62 44 4e 24 49 5d ba 39 27 6a 31 16 61 db 82 be b1 d8 88 09 80 5b c4 8f 00 75 69 29 68 b8 b7 2a d9 83 de 0b 4d b6 77 19 4f 33 fa c1 7e 3c 51 0d 76 13 16 d9 02 64 47 73 43 62 15 96 63 fb 6a 08 01 34 3e e6 c0 52 0f 0b 22 6d 03 a1 96 8e e1 bd dd 1a 90 81 f8 21 9d b4 9e 9c 10 d3 77 71 63 32 37 8a b2 a4 ea 91 1e 18 83 2b 25 18 e3 e3 c5 57 91 01 b7 08 a2 0b ba 76 24 21 74 6d 18 b6 95 cf 20 a7 b1 98 47 62 d5 c6 e1 61 a2 0a 20 dc 34 fb d7 ae 11 e6 f1 1b 15 78 a0 d3 5b 9b ca 86 42 0b 51 0c 28 03 d4 68 24 30 15 49 66 50 09 17 0d e1 b0 33 99 30 95 4a 9c c3 47 c6 b7 fd b1 a6 e2 b0 d9 1c b0 97 1b d0 a4 26 c5 78 08 7e 61 6e 59 a2 8a 29 1a 89 79 70 22 fd 37 b7 72 af 82 40 8d 67 37 31 ad ae 07 65 8c 0d 01 8e 20 eb 0c e1 31 6e 94 0c 33 61 7a 57 Data Ascii: @9\ObDN$I]9'j1a[ui)h*MwO3~<QvdGsCbcj4>R"m!wqc27+%Wv$!tm Gba 4x[BQ(h$0IfP30JG&x~anY)yp"7r@g71e 1n3azW
2024-05-06 16:42:22 UTC	16384	IN	Data Raw: eb 27 15 53 03 84 03 e7 7b 15 79 de 37 7e 06 b5 be f5 e7 ce 69 ec 6b 37 03 7c 1e b1 0b 06 90 8b 3d 36 d6 06 23 d1 da a3 08 1e c8 8f 7e 71 8c ba 40 48 53 0e a2 1d 6f b7 20 72 55 1d ec 4b f8 ec 74 e1 39 49 9f 47 1f 77 78 3a 2b 32 9a 15 10 90 5e 41 cb 87 67 98 7e 7b c5 1f 05 cc 06 da 73 48 c9 c9 8b e8 8a d5 83 76 ef 43 58 4d a6 2a c9 07 95 4e c0 1a 2e ea a2 ef 05 dd 38 00 90 5d 6e d5 f2 ea f8 c4 1e a3 39 91 6a 42 6e 10 e7 bc 10 ec 10 51 54 db 38 88 40 70 32 c4 70 c0 46 b0 de da a3 bd a6 6d 62 c4 36 8f 9c 38 9b ae 98 cc ba 79 77 17 97 92 69 22 b8 0a 5b 62 e8 75 4a 5a 27 0f 8d 8e 52 6e 33 e8 ec d6 f9 ca 7c af fe f1 e3 7b c6 b0 67 f2 1d e2 e4 d9 61 87 8b 5a d7 13 bb eb 03 3a a4 34 d0 9f 56 99 e0 5c e1 c2 15 e4 e5 a3 8d 64 3c 09 0f 98 bc 60 6e a0 d1 36 de bd 81 Data Ascii: 'S{y7~ik7\|=6#~q@HSo rUKt9IGwx:+2^Ag~{sHvCXM*N.8]n9jBnQT8@p2pFmb68ywi"[buJZ'Rn3\|{gaZ:4V\d<`n6
2024-05-06 16:42:22 UTC	11454	IN	Data Raw: d7 15 7e ce 3c 97 1e ed 25 a1 dd 3e 1b c3 c2 46 91 45 8b de 8f 93 69 43 30 b3 1a 12 d3 75 4e 2e 8a 3b b8 52 22 68 26 79 ab f1 cd c1 d0 2a 5e ea ba 1a f7 18 54 5a d2 e6 db bf 8e 86 3e 14 47 9b 77 f4 36 a4 74 12 85 9c 28 e5 1b cd 91 f6 4d 40 e1 f5 ea 08 a0 a2 87 35 ab c7 98 d5 14 b5 26 56 f4 1b a6 fb 58 8b 70 ea f5 f1 0a 15 9c b6 c5 f6 72 2f 34 d4 a0 f4 5d 0c 09 70 77 b3 eb dc c9 0d c4 d1 28 9b 4e a6 a5 cd 16 a0 0b ff 00 82 5b 25 d4 1a 4f cc 7b ab 1e 5d 40 9f c4 51 4f 06 77 78 dd 4c 45 28 95 8a 2f 89 74 e3 25 f9 71 5e 6e 3d 6c 72 0e af 08 9b 5c 74 44 54 70 28 ed 05 ac 98 14 29 1e e1 0a 63 31 1d 1b ee ae 91 58 2d 62 60 50 e5 76 28 4e ee 30 d1 18 96 f3 c8 61 b9 7a 40 15 80 eb 8c f8 dc 40 63 99 fe a0 2c 14 5b 5e 78 fa 91 ab b9 b0 3f 19 7a 7e d3 09 8a 76 aa 14 Data Ascii: ~<%>FEiC0uN.;R"h&y*^TZ>Gw6t(M@5&VXpr/4]pw(N[%O{]@QOwxLE(/t%q^n=lr\tDTp()c1X-b`Pv(N0az@@c,[^x?z~v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.11	49823	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:22 UTC	429	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/adult-night-club.jpg HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:22 UTC	540	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:22 GMT Content-Type: image/jpeg Content-Length: 92660 Connection: close Last-Modified: Fri, 08 Sep 2023 11:14:56 GMT ETag: 0x8DBB05CD580E9E9 x-ms-request-id: e3311f64-501e-0028-2cd4-9f990d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164222Z-174c4b644cc2jftdzntyz37er000000002eg00000000s3rg Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-06 16:42:22 UTC	15844	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c2 00 11 08 01 4c 01 f4 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 00 00 00 00 00 03 04 05 06 07 08 00 02 09 01 0a ff c4 00 1d 01 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 e0 Data Ascii: JFIFCCL
2024-05-06 16:42:22 UTC	16384	IN	Data Raw: 8d d7 40 80 87 01 a7 dd c0 66 0d d9 11 ad 6b 5a 4c 3b f8 5f 56 96 88 2d 13 2f 9a b3 33 72 39 5d 18 54 ab 59 7e 8d ee b7 d3 f6 ee 6f a1 d3 60 e6 9b 61 79 66 57 2b 1a 85 5e 66 b0 d8 70 4e fa 0b 34 c3 79 e2 1e 50 ac 6e 87 0d ce 90 7b 6b 34 db 90 5a 66 18 3f 13 af 62 d6 f1 65 63 a7 74 bf 84 1f 24 66 32 3f 48 76 04 3e 84 cb a9 43 e1 89 b9 15 16 6e 3f 11 be 1e c6 03 b2 c2 88 1e aa 27 c8 28 44 f9 94 c0 17 2e 2f 76 81 34 49 8d 90 92 3c f4 42 8a ce f8 8c 60 de 38 b1 98 6c 38 60 8f d0 41 0c 63 06 59 a7 b0 c7 89 10 5c 66 63 af 61 b4 cd cb 95 9f 79 db 05 db b0 64 62 5d a0 3f b3 35 4d 84 67 3c 53 67 2c 94 1a 9c 64 8d e1 f8 6c 0a 15 ed c0 bc d8 4e ef 94 1b 0a f1 c1 39 c7 59 05 0b e6 54 87 90 4e 29 a8 28 a1 4c a6 49 ef a9 46 47 ba b1 67 75 42 0f 85 67 6c 83 1c 28 5c 54 Data Ascii: @fkZL;_V-/3r9]TY~o`ayfW+^fpN4yPn{k4Zf?bect$f2?Hv>Cn?'(D./v4I<B`8l8`AcY\fcaydb]?5Mg<Sg,dlN9YTN)(LIFGguBgl(\T
2024-05-06 16:42:22 UTC	16384	IN	Data Raw: 33 fd 77 03 b3 57 91 a0 2a f1 00 a8 04 0a f1 a9 65 19 70 6e 9a a9 b8 83 75 09 7e 6b fe cc aa c3 dc 12 5e ed fc 04 e1 22 34 0d ed c7 da 1a 58 5d a2 e2 b4 f7 31 38 94 37 72 c1 cd 62 99 45 5f 8f 3c 12 33 63 17 c4 6d af 2a b5 36 7c a5 1c c7 bd 8d e2 bd ce cb 83 b2 b2 c5 52 bb 3d c6 83 44 34 80 fb 9d 3c 47 51 31 66 57 17 29 a8 6f 09 ce 9d e2 37 e2 0d 79 0b 05 78 4d 0b 6b e7 dc d6 4f 52 bf 02 ba 47 10 7f 6c a7 06 e4 a3 92 17 2c 62 5d 15 e4 23 75 9e e5 2f 53 89 cc 27 d2 0b d9 42 79 db fa 83 dd 5d 4f 9b 24 a7 b8 29 e3 13 4c 40 96 ec ae ce 62 04 ce 3d fb 0e 8c ad c7 fd 7c d8 6b 18 40 6c 0b 0d 4c b5 9c f3 bf d0 18 f8 96 bf 23 13 47 26 e5 30 94 23 7f aa d3 7f b4 bb 4f ed 04 e7 04 97 28 64 1c 6f 99 fd 1d 47 41 69 be 30 84 61 3d 44 61 28 b9 e9 88 9f 60 06 b2 af 16 20 Data Ascii: 3wWepnu~k^"4X]187rbE_<3cm6\|R=D4<GQ1fW)o7yxMkORGl,b]#u/S'By]O$)L@b=\|k@lL#G&0#O(doGAi0a=Da(`
2024-05-06 16:42:22 UTC	16384	IN	Data Raw: 8f 3a ad a3 06 fa fe 71 f8 9a e8 fa 33 08 6e 6a 63 91 55 21 83 c0 44 75 ea e1 ac c1 02 30 a8 85 c6 7b 47 25 30 7b 99 e9 6d 70 c0 d9 9b 46 e7 80 da f1 b7 f2 e3 00 2a 9a 65 98 c7 58 c2 6c 0c ae 29 c5 35 fb 9a 5c cd b6 ce fd 2d e4 46 02 39 be a1 c1 cd 29 85 3d 1b 52 ff 00 13 b5 c6 0d b2 41 64 ed 14 5a 32 c3 54 20 e6 3e 99 62 e1 b9 d7 42 2d 50 8c d9 ff 00 e6 a9 ae db 32 d8 41 b1 d9 d1 0d 5d 20 a8 3e e9 91 12 2e fe 5e 92 9b 1b bf fd 87 a8 db df d0 aa 75 39 f7 ad 86 7f c6 7e a5 7e ac c0 e4 00 6b 9a 6c e9 0f f7 9c 25 d1 07 34 53 31 52 22 ca 80 61 30 61 aa 8d b9 ec 46 24 4b 1d 5a 7d 9d 75 2d 2b 1e 13 b7 2f f1 6a fc d7 2c 8d c2 e1 b0 8a 15 e2 12 6b 78 af 3a f1 f2 45 45 c3 bb 38 2c e1 2b c2 e8 aa 83 5d 98 ca aa 22 3b fb 8a b5 82 9a 50 7f ec 2f c4 57 73 af aa d7 50 Data Ascii: :q3njcU!Du0{G%0{mpF*eXl)5\-F9)=RAdZ2T >bB-P2A] >.^u9~~kl%4S1R"a0aF$KZ}u-+/j,kx:EE8,+]";P/WsP
2024-05-06 16:42:22 UTC	16384	IN	Data Raw: 66 20 9c 2c 8e 06 64 42 2f 37 8b 43 01 16 6e 15 74 0f 28 41 45 1e 82 7a d7 83 c5 2a 2b c1 47 f7 1c 4f ca a9 82 85 e8 8d cb 5a bf ad 36 a8 d2 48 4b 80 11 cf ce 14 2f d9 28 cb 59 99 c4 c8 04 a9 35 a2 c0 95 70 ac 83 89 48 89 29 2b 0c d6 c1 b4 4a c0 89 c8 19 16 aa 29 78 a1 0f 18 5b e0 34 ce f1 e5 35 96 a5 a3 a8 2a ce e0 f8 7c 3c c5 19 c3 e0 a7 a2 ad d2 b5 74 f3 7d e1 2f dd 48 20 36 b9 57 6e 5e b8 8f a2 03 6d 76 34 10 62 02 82 5e c9 54 87 54 0a b2 1b 5e e6 b7 3a ad 64 1c 0b 70 f2 71 3b 75 36 78 74 f4 b9 6d d8 7e 36 2d 87 32 e9 59 95 45 7a 53 50 3e 53 f1 1b ee 13 43 03 36 81 c7 65 96 a9 42 1d 1c a9 2a 96 90 da c4 5a 2d 0e cc 17 57 c8 4b 21 d1 60 b6 b6 a9 e5 77 77 30 c4 6d 05 8f e5 3b 94 36 ed de de 94 1a 95 5c 48 e4 34 3f 19 11 dc 78 84 76 40 8b e7 24 db 55 db Data Ascii: f ,dB/7Cnt(AEz+GOZ6HK/(Y5pH)+J)x[45\|<t}/H 6Wn^mv4b^TT^:dpq;u6xtm~6-2YEzSP>SC6eB*Z-WK!`ww0m;6\H4?xv@$U
2024-05-06 16:42:22 UTC	11280	IN	Data Raw: d3 6f 87 5f 46 3e ab 3e 96 5d 7b 70 7c 10 8a 10 c6 ea 22 b9 a7 9f 8f ea 6f 17 9c c6 6f 2f 0b 88 2f d6 8c 56 9a 45 17 e0 ad 1e 87 65 7d 3c 8f 64 68 bf 41 2f 68 38 df e8 81 54 bd ea 23 1d 29 ea f6 43 ac 82 8a 68 74 45 af 7f 89 6a b2 18 88 7c 1e 9f 42 c7 d9 e7 da 1c 0d cb 9c f3 04 9e ee 08 33 79 6f bc 21 6f 57 51 62 ba fc cf a6 41 79 9a 8b 7c 63 4e 90 e3 c2 70 91 46 e9 54 bb df d7 99 93 6b f7 dc 2f ea e2 b8 0f f5 c0 ac 41 bf 47 51 dc ca d4 d9 06 d3 51 b5 8f 42 f4 0b e8 a7 f1 5d 10 60 d4 5f c2 14 d4 28 51 2d 32 cc b3 1c c5 ea 15 2d 4c 75 6a 02 b6 85 4e 47 1f 41 9f 48 3f 1e 94 6a b3 96 ee 00 dd f8 8c bf 29 bf c7 31 f0 1b 69 54 af a1 2c 65 44 56 1b 30 1c 17 0a 9d 97 1f 99 67 af 21 10 4b 34 a8 d3 1d f8 87 5e f0 eb c9 e3 c7 10 6e e7 7b 34 7d 22 74 09 a1 5a bb 50 Data Ascii: o_F>>]{p\|"oo//VEe}<dhA/h8T#)ChtEj\|B3yo!oWQbAy\|cNpFTk/AGQQB]`_(Q-2-LujNGAH?j)1iT,eDV0g!K4^n{4}"tZP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.11	49797	89.187.173.23	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:22 UTC	521	OUT	GET /widget.js HTTP/1.1 Host: cdn.userway.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:22 UTC	1026	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:22 GMT Content-Type: application/javascript Content-Length: 1787 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD, PUT, POST, DELETE Access-Control-Expose-Headers: Content-Range, Content-Length, ETag, Content-Type Access-Control-Max-Age: 3000 Last-Modified: Tue, 30 Apr 2024 12:17:00 GMT ETag: "2de2d3a4fa8cc3535ca51bf797159fd8" x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600, public Vary: Accept-Encoding Via: 1.1 a1128ada13f2f3694bc79e73c9d5598e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: Jj-J_Q6uWzn3BOz5LYJZnaPXUUDYddB22CDj2l_O1mALkfj5FgfrXQ== Age: 761 X-77-NZT: EgwBWbutFQH3BAIAAAwBnJI73wH3+gIAAA X-77-NZT-Ray: 256bf6193abf39ea6e083966738b7510 X-Accel-Expires: @1715016808 X-Accel-Date: 1715013226 X-77-Cache: HIT X-77-Age: 516 Server: CDN77-Turbo Alt-Svc: h3=":443"; ma=86400 X-Cache: HIT X-Age: 516 X-77-POP: miamiUSFL Accept-Ranges: bytes
2024-05-06 16:42:22 UTC	1787	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 7c 7c 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2c 69 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 69 2e 73 72 63 3d 74 2c 69 2e 61 73 79 6e 63 3d 21 30 2c 69 2e 69 64 3d 22 61 31 31 79 57 69 64 67 65 74 53 72 63 22 2c 65 26 26 28 69 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 2c 69 2e 69 6e 74 65 67 72 69 74 79 3d 65 29 2c 6e 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 69 29 7d 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 74 2e 74 Data Ascii: !function(){function t(t,e){var n=document.body\|\|document.head,i=document.createElement("script");i.src=t,i.async=!0,i.id="a11yWidgetSrc",e&&(i.crossOrigin="anonymous",i.integrity=e),n.appendChild(i)}function e(){var t=document.createElement("iframe");t.t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.11	49824	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:22 UTC	757	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/party-mood.svg HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/css/home.css?v=015820240858469386724 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:23 UTC	616	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:22 GMT Content-Type: image/svg+xml Content-Length: 337607 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Fri, 08 Sep 2023 11:15:03 GMT ETag: 0x8DBB05CD95D6B75 x-ms-request-id: 7dc690f3-801e-0004-3bd4-9f75a2000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164222Z-174c4b644cc2j2nvnewgssu2c400000000fg00000001qxbk Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-06 16:42:23 UTC	15768	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 32 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y
2024-05-06 16:42:23 UTC	16384	IN	Data Raw: 09 63 2d 30 2e 39 2c 39 2e 31 2d 34 2e 39 2c 31 35 2d 35 2e 34 2c 32 34 2e 35 63 30 2c 30 2e 36 2d 30 2e 33 2c 31 2d 30 2e 35 2c 31 2e 35 63 2d 30 2e 32 2c 31 2c 31 2c 30 2e 35 2c 30 2e 38 2c 31 2e 35 63 2d 33 2e 39 2c 31 30 2d 35 2e 35 2c 32 33 2e 31 2d 34 2e 39 2c 33 37 63 30 2e 33 2c 37 2e 36 2c 30 2e 39 2c 31 35 2e 33 2c 30 2e 32 2c 32 32 2e 34 0d 0a 09 09 09 09 09 09 63 30 2e 31 2c 31 2e 39 2c 30 2e 34 2c 33 2e 37 2c 30 2e 35 2c 35 2e 35 63 32 2e 35 2c 36 2e 32 2c 35 2c 31 32 2e 34 2c 37 2e 31 2c 31 39 68 33 35 2e 34 43 31 31 34 2e 39 2c 33 32 34 2e 33 2c 31 31 34 2e 39 2c 33 32 33 2e 37 2c 31 31 34 2e 38 2c 33 32 33 2e 31 7a 20 4d 31 32 30 2e 38 2c 31 38 39 2e 34 0d 0a 09 09 09 09 09 09 63 30 2e 32 2c 30 2e 38 2c 31 2c 31 2e 33 2c 31 2e 32 2c 32 2e Data Ascii: c-0.9,9.1-4.9,15-5.4,24.5c0,0.6-0.3,1-0.5,1.5c-0.2,1,1,0.5,0.8,1.5c-3.9,10-5.5,23.1-4.9,37c0.3,7.6,0.9,15.3,0.2,22.4c0.1,1.9,0.4,3.7,0.5,5.5c2.5,6.2,5,12.4,7.1,19h35.4C114.9,324.3,114.9,323.7,114.8,323.1z M120.8,189.4c0.2,0.8,1,1.3,1.2,2.
2024-05-06 16:42:23 UTC	16384	IN	Data Raw: 35 2d 30 2e 35 2c 31 2e 32 2d 30 2e 31 2c 31 2e 38 63 30 2e 34 2c 30 2e 32 2c 30 2e 33 2c 30 2e 37 2c 30 2e 37 2c 30 2e 35 63 2d 30 2e 36 2d 30 2e 34 2d 30 2e 35 2d 31 2e 32 2d 30 2e 34 2d 31 2e 38 63 30 2e 35 2d 31 2e 32 2c 32 2e 31 2d 32 2c 31 2e 37 2d 33 2e 36 63 30 2e 35 2d 30 2e 31 2c 31 2e 32 2c 30 2c 31 2e 34 2c 30 2e 36 0d 0a 09 09 09 09 09 09 63 30 2e 31 2c 30 2e 34 2d 30 2e 33 2c 31 2e 31 2c 30 2e 34 2c 31 2e 31 63 31 2e 33 2c 31 2e 36 2c 30 2e 39 2c 34 2e 33 2c 33 2e 32 2c 35 2e 32 63 30 2e 39 2c 30 2e 32 2c 31 2e 38 2c 30 2e 38 2c 32 2e 31 2c 31 2e 37 63 31 2e 35 2c 31 2e 39 2d 30 2e 32 2c 36 2e 35 2c 33 2e 33 2c 36 2e 33 63 30 2e 38 2d 30 2e 34 2c 31 2e 37 2d 30 2e 39 2c 32 2e 33 2c 30 2e 33 0d 0a 09 09 09 09 09 09 63 30 2e 35 2c 30 2e 33 2c Data Ascii: 5-0.5,1.2-0.1,1.8c0.4,0.2,0.3,0.7,0.7,0.5c-0.6-0.4-0.5-1.2-0.4-1.8c0.5-1.2,2.1-2,1.7-3.6c0.5-0.1,1.2,0,1.4,0.6c0.1,0.4-0.3,1.1,0.4,1.1c1.3,1.6,0.9,4.3,3.2,5.2c0.9,0.2,1.8,0.8,2.1,1.7c1.5,1.9-0.2,6.5,3.3,6.3c0.8-0.4,1.7-0.9,2.3,0.3c0.5,0.3,
2024-05-06 16:42:23 UTC	16384	IN	Data Raw: 34 2c 33 2e 34 2d 32 2e 37 63 30 2e 34 2d 30 2e 35 2c 30 2e 38 2d 31 2c 31 2e 33 2d 31 2e 35 63 30 2e 34 2d 30 2e 34 2c 30 2e 39 2d 30 2e 36 2c 31 2e 34 2d 30 2e 38 0d 0a 09 09 09 09 09 09 63 30 2e 32 2d 30 2e 31 2d 30 2e 34 2c 31 2e 32 2d 30 2e 33 2c 31 63 2d 30 2e 35 2c 31 2e 33 2d 30 2e 38 2c 32 2e 37 2d 31 2e 32 2c 34 63 2d 31 2c 32 2e 38 2d 32 2e 38 2c 33 2e 32 2d 35 2c 33 2e 38 63 2d 31 2e 39 2c 30 2e 35 2d 34 2e 35 2c 32 2d 34 2e 31 2c 34 2e 38 63 30 2e 32 2c 31 2e 31 2c 30 2e 38 2c 31 2e 35 2c 31 2e 34 2c 31 2e 35 0d 0a 09 09 09 09 09 09 63 30 2e 34 2c 30 2e 31 2c 30 2e 38 2d 30 2e 31 2c 31 2e 33 2d 30 2e 34 63 30 2e 33 2d 30 2e 31 2c 30 2e 35 2d 30 2e 33 2c 30 2e 37 2d 30 2e 35 76 2d 30 2e 31 63 2d 31 2e 31 2c 30 2d 33 2e 33 2d 31 2e 34 2d 31 2e Data Ascii: 4,3.4-2.7c0.4-0.5,0.8-1,1.3-1.5c0.4-0.4,0.9-0.6,1.4-0.8c0.2-0.1-0.4,1.2-0.3,1c-0.5,1.3-0.8,2.7-1.2,4c-1,2.8-2.8,3.2-5,3.8c-1.9,0.5-4.5,2-4.1,4.8c0.2,1.1,0.8,1.5,1.4,1.5c0.4,0.1,0.8-0.1,1.3-0.4c0.3-0.1,0.5-0.3,0.7-0.5v-0.1c-1.1,0-3.3-1.4-1.
2024-05-06 16:42:23 UTC	16384	IN	Data Raw: 2e 39 63 2d 31 2e 37 2c 32 2c 31 2e 33 2c 32 2e 36 2c 32 2c 34 63 30 2e 34 2c 30 2e 38 2c 30 2e 31 2c 31 2e 36 2d 30 2e 31 2c 32 2e 35 0d 0a 09 09 09 09 09 09 63 30 2e 33 2c 31 2e 34 2c 32 2e 31 2c 31 2e 31 2c 33 2e 31 2c 31 2e 38 63 30 2e 39 2c 30 2e 38 2c 32 2e 32 2c 31 2e 37 2c 31 2e 39 2c 33 2e 31 6c 31 2e 35 2c 30 2e 32 63 32 2e 36 2c 30 2e 33 2c 31 2e 35 2c 33 2e 33 2c 33 2e 35 2c 34 2e 36 63 33 2e 31 2c 33 2e 31 2c 37 2e 31 2c 34 2e 39 2c 31 30 2e 34 2c 37 2e 36 0d 0a 09 09 09 09 09 09 63 30 2e 36 2c 30 2c 31 2e 37 2c 30 2e 33 2c 32 2e 32 2d 30 2e 35 63 30 2e 32 2d 30 2e 33 2c 30 2e 31 2d 30 2e 38 2d 30 2e 31 2d 31 2e 31 6c 2d 36 2e 31 2d 34 2e 39 6c 2d 30 2e 31 2d 30 2e 33 63 32 2e 32 2c 30 2e 32 2c 32 2e 33 2d 32 2e 32 2c 33 2e 38 2d 33 2e 32 63 Data Ascii: .9c-1.7,2,1.3,2.6,2,4c0.4,0.8,0.1,1.6-0.1,2.5c0.3,1.4,2.1,1.1,3.1,1.8c0.9,0.8,2.2,1.7,1.9,3.1l1.5,0.2c2.6,0.3,1.5,3.3,3.5,4.6c3.1,3.1,7.1,4.9,10.4,7.6c0.6,0,1.7,0.3,2.2-0.5c0.2-0.3,0.1-0.8-0.1-1.1l-6.1-4.9l-0.1-0.3c2.2,0.2,2.3-2.2,3.8-3.2c
2024-05-06 16:42:23 UTC	16384	IN	Data Raw: 2e 32 2c 31 36 35 2e 38 2c 35 34 34 2e 35 2c 31 36 35 2e 33 2c 35 34 34 2e 39 2c 31 36 34 2e 39 7a 20 4d 35 33 34 2e 35 2c 31 38 35 2e 39 4c 35 33 34 2e 35 2c 31 38 35 2e 39 6c 30 2e 32 2c 30 2e 31 4c 35 33 34 2e 35 2c 31 38 35 2e 39 7a 20 4d 35 34 34 2e 37 2c 31 38 36 2e 37 48 35 34 33 0d 0a 09 09 09 09 09 09 63 2d 30 2e 38 2d 30 2e 33 2d 31 2e 34 2d 31 2d 31 2e 39 2d 31 2e 37 43 35 34 32 2e 36 2c 31 38 34 2e 36 2c 35 34 34 2e 31 2c 31 38 35 2e 34 2c 35 34 34 2e 37 2c 31 38 36 2e 37 7a 20 4d 35 34 37 2e 35 2c 31 37 38 2e 34 63 2d 30 2e 36 2c 30 2e 31 2d 30 2e 32 2d 30 2e 36 2d 30 2e 33 2d 31 63 30 2e 39 2d 30 2e 32 2c 31 2e 36 2c 30 2e 39 2c 32 2e 36 2c 30 2e 33 0d 0a 09 09 09 09 09 09 63 30 2e 32 2c 31 2e 33 2d 31 2e 33 2c 31 2e 38 2d 32 2c 32 2e 37 63 Data Ascii: .2,165.8,544.5,165.3,544.9,164.9z M534.5,185.9L534.5,185.9l0.2,0.1L534.5,185.9z M544.7,186.7H543c-0.8-0.3-1.4-1-1.9-1.7C542.6,184.6,544.1,185.4,544.7,186.7z M547.5,178.4c-0.6,0.1-0.2-0.6-0.3-1c0.9-0.2,1.6,0.9,2.6,0.3c0.2,1.3-1.3,1.8-2,2.7c
2024-05-06 16:42:23 UTC	16384	IN	Data Raw: 2c 32 2e 38 2c 36 2e 31 2c 34 2e 32 2c 39 2e 32 6c 2d 30 2e 33 2c 30 2e 34 0d 0a 09 09 09 09 63 2d 32 2e 35 2d 31 2e 38 2d 35 2e 36 2d 33 2e 39 2d 38 2e 39 2d 32 2e 36 63 2d 30 2e 34 2c 30 2e 34 2d 30 2e 39 2c 30 2e 38 2d 30 2e 38 2c 31 2e 35 63 31 2e 33 2c 31 2e 35 2c 33 2e 32 2c 31 2e 38 2c 34 2e 38 2c 32 2e 39 63 32 2e 32 2c 31 2e 39 2c 34 2e 34 2c 33 2e 38 2c 36 2e 32 2c 36 63 2d 30 2e 33 2c 31 2e 37 2c 30 2e 33 2c 34 2d 30 2e 31 2c 35 2e 39 0d 0a 09 09 09 09 63 2d 31 2e 31 2c 30 2e 35 2d 32 2e 31 2c 31 2e 33 2d 33 2c 32 2e 34 63 2d 31 2e 37 2c 32 2d 34 2e 37 2c 30 2d 36 2e 37 2c 31 2e 36 63 2d 32 2e 33 2c 30 2e 38 2d 33 2c 33 2e 34 2d 33 2e 35 2c 35 2e 36 63 2d 31 2e 33 2c 32 2e 32 2d 32 2e 31 2c 35 2d 32 2e 32 2c 37 2e 39 63 2d 32 2e 36 2d 31 2e 33 Data Ascii: ,2.8,6.1,4.2,9.2l-0.3,0.4c-2.5-1.8-5.6-3.9-8.9-2.6c-0.4,0.4-0.9,0.8-0.8,1.5c1.3,1.5,3.2,1.8,4.8,2.9c2.2,1.9,4.4,3.8,6.2,6c-0.3,1.7,0.3,4-0.1,5.9c-1.1,0.5-2.1,1.3-3,2.4c-1.7,2-4.7,0-6.7,1.6c-2.3,0.8-3,3.4-3.5,5.6c-1.3,2.2-2.1,5-2.2,7.9c-2.6-1.3
2024-05-06 16:42:23 UTC	16384	IN	Data Raw: 32 63 2d 31 2e 34 2d 32 2e 32 2d 31 2e 39 2d 34 2e 38 2d 33 2d 37 2e 31 0d 0a 09 09 09 09 09 09 63 2d 33 2e 32 2d 36 2e 37 2d 37 2e 38 2d 31 32 2e 39 2d 31 30 2e 33 2d 31 39 2e 39 63 2d 31 2e 31 2d 33 2e 31 2d 32 2d 36 2e 36 2d 31 2e 33 2d 31 30 2e 31 63 31 2e 38 2d 33 2e 36 2d 30 2e 36 2d 37 2d 31 2e 38 2d 31 30 2e 31 63 2d 30 2e 31 2d 31 2c 30 2d 32 2e 31 2d 30 2e 38 2d 32 2e 37 63 2d 30 2e 36 2c 30 2e 31 2d 31 2e 32 2c 30 2e 35 2d 31 2e 33 2c 31 2e 32 0d 0a 09 09 09 09 09 09 63 2d 30 2e 35 2c 32 2e 33 2c 31 2e 35 2c 34 2e 34 2c 30 2e 31 2c 36 2e 35 63 2d 31 2d 30 2e 35 2d 31 2e 33 2d 31 2e 36 2d 31 2e 37 2d 32 2e 35 63 2d 30 2e 34 2d 30 2e 38 2d 30 2e 36 2d 32 2d 31 2e 36 2d 32 2e 34 63 2d 30 2e 35 2d 30 2e 31 2d 30 2e 37 2c 30 2e 35 2d 30 2e 38 2c 30 Data Ascii: 2c-1.4-2.2-1.9-4.8-3-7.1c-3.2-6.7-7.8-12.9-10.3-19.9c-1.1-3.1-2-6.6-1.3-10.1c1.8-3.6-0.6-7-1.8-10.1c-0.1-1,0-2.1-0.8-2.7c-0.6,0.1-1.2,0.5-1.3,1.2c-0.5,2.3,1.5,4.4,0.1,6.5c-1-0.5-1.3-1.6-1.7-2.5c-0.4-0.8-0.6-2-1.6-2.4c-0.5-0.1-0.7,0.5-0.8,0
2024-05-06 16:42:23 UTC	16384	IN	Data Raw: 30 2c 32 2e 34 2c 32 2e 31 63 31 2c 31 2e 33 2c 32 2e 37 2c 31 2e 33 2c 33 2e 35 2c 32 2e 37 63 2d 30 2e 32 2c 30 2e 34 2d 30 2e 36 2c 30 2e 33 2d 30 2e 39 2c 30 2e 35 63 30 2e 35 2c 31 2e 37 2c 31 2e 35 2c 33 2e 33 2c 32 2e 37 2c 34 2e 35 0d 0a 09 09 09 09 09 09 63 30 2e 34 2c 30 2e 34 2d 30 2e 31 2c 31 2d 30 2e 35 2c 31 63 30 2e 34 2c 31 2e 38 2c 31 2e 34 2c 33 2e 34 2c 31 2e 32 2c 35 2e 35 63 2d 31 2e 35 2c 30 2e 31 2d 30 2e 34 2c 31 2e 38 2d 30 2e 35 2c 32 2e 35 63 2d 30 2e 32 2c 31 2e 36 2c 30 2c 33 2e 37 2d 31 2e 31 2c 34 2e 36 63 2d 30 2e 33 2c 31 2e 31 2d 30 2e 37 2c 32 2e 36 2d 30 2e 32 2c 33 2e 35 0d 0a 09 09 09 09 09 09 6c 34 2e 35 2d 34 2e 35 63 31 2e 38 2d 33 2e 35 2c 33 2e 36 2d 37 2c 35 2e 34 2d 31 30 2e 35 63 32 2e 34 2d 32 2e 35 2c 32 2e Data Ascii: 0,2.4,2.1c1,1.3,2.7,1.3,3.5,2.7c-0.2,0.4-0.6,0.3-0.9,0.5c0.5,1.7,1.5,3.3,2.7,4.5c0.4,0.4-0.1,1-0.5,1c0.4,1.8,1.4,3.4,1.2,5.5c-1.5,0.1-0.4,1.8-0.5,2.5c-0.2,1.6,0,3.7-1.1,4.6c-0.3,1.1-0.7,2.6-0.2,3.5l4.5-4.5c1.8-3.5,3.6-7,5.4-10.5c2.4-2.5,2.
2024-05-06 16:42:23 UTC	16384	IN	Data Raw: 32 2c 31 2d 33 2e 31 2c 31 2e 32 63 2d 35 2e 32 2d 30 2e 31 2d 31 30 2e 35 2c 31 2e 34 2d 31 34 2e 39 2c 34 2e 31 0d 0a 09 09 09 09 09 09 63 2d 30 2e 37 2c 30 2e 31 2d 31 2e 34 2c 30 2e 36 2d 32 2e 33 2c 30 2e 34 6c 2d 30 2e 34 2d 30 2e 34 63 30 2e 32 2d 30 2e 37 2c 31 2e 31 2d 30 2e 38 2c 31 2e 33 2d 31 2e 33 63 2d 31 2e 31 2c 30 2e 33 2d 32 2e 32 2c 30 2d 33 2e 32 2d 30 2e 35 63 31 2e 31 2d 30 2e 37 2c 32 2e 34 2d 31 2e 33 2c 33 2e 37 2d 31 2e 37 0d 0a 09 09 09 09 09 09 63 31 2e 34 2d 31 2e 31 2c 32 2e 37 2d 32 2e 38 2c 34 2e 37 2d 32 2e 36 6c 33 2e 32 2c 30 2e 36 63 30 2d 30 2e 39 2d 31 2e 34 2d 31 2e 33 2d 32 2e 32 2d 31 2e 37 63 2d 32 2e 32 2d 30 2e 38 2d 34 2e 31 2c 30 2e 38 2d 35 2e 35 2c 31 2e 39 63 30 2d 30 2e 34 2d 30 2e 33 2d 30 2e 38 2d 30 2e Data Ascii: 2,1-3.1,1.2c-5.2-0.1-10.5,1.4-14.9,4.1c-0.7,0.1-1.4,0.6-2.3,0.4l-0.4-0.4c0.2-0.7,1.1-0.8,1.3-1.3c-1.1,0.3-2.2,0-3.2-0.5c1.1-0.7,2.4-1.3,3.7-1.7c1.4-1.1,2.7-2.8,4.7-2.6l3.2,0.6c0-0.9-1.4-1.3-2.2-1.7c-2.2-0.8-4.1,0.8-5.5,1.9c0-0.4-0.3-0.8-0.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.11	49826	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:22 UTC	658	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/about-thumb.webp HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:23 UTC	520	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:22 GMT Content-Type: image/webp Content-Length: 42732 Connection: close Last-Modified: Fri, 08 Sep 2023 11:14:56 GMT ETag: 0x8DBB05CD525DF00 x-ms-request-id: b3e6437c-701e-003f-06d4-9f3006000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164222Z-174c4b644ccbnfrj3r328ckevn00000002f000000000qvx9 Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-06 16:42:23 UTC	15864	IN	Data Raw: 52 49 46 46 e4 a6 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 83 02 00 68 02 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFWEBPVP8X hICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-05-06 16:42:23 UTC	16384	IN	Data Raw: 7e 72 c0 6a bc c8 19 45 0a 69 1d ec cc fb 0b ed c5 99 47 c3 5d 22 d5 df 0d b6 30 11 9d d2 f7 1c 28 df ea b1 fb c9 70 b8 3b f5 fb bd 99 20 6d 94 21 23 7f 01 89 b2 6f 59 14 2b 7b 7f e7 56 11 76 b1 4a f8 b1 ad 4b 02 12 db 3f e6 48 4b c2 07 f1 90 fe 15 d5 9e 90 f6 1a 9d 8f 90 7d 41 ca 3d cd bc 49 bf 0c a9 f6 6b 1a ad 0a e7 79 c9 94 a2 9e 22 1f 05 30 07 2c c1 b2 da 38 6d c5 9a 57 be 5f 76 cb 8c f9 89 be ca f6 fe ab 92 aa 42 13 ee 60 b8 ec 88 b8 b8 db b0 84 38 aa f4 70 45 4f 93 d9 1e 92 de ee 5c d2 3e 27 4e e8 5f 81 01 7a 7a 7b 9a 50 e8 dd 52 31 ab 51 15 04 f6 52 9a 51 1a 06 4e 09 f1 ba ef c7 06 15 b8 81 1c 1b 66 ce 5f 36 c8 a2 47 36 cc 16 c9 28 6d e8 0a af 59 3e 9f b6 8d 1e 59 70 14 cb db df 31 cc c5 7d aa 85 f1 fd ae a9 de 71 dd a2 89 0b 15 9d 08 94 d8 89 bf Data Ascii: ~rjEiG]"0(p; m!#oY+{VvJK?HK}A=Iky"0,8mW_vB`8pEO\>'N_zz{PR1QRQNf_6G6(mY>Yp1}q
2024-05-06 16:42:23 UTC	10484	IN	Data Raw: ae 9b 35 05 20 82 fc a0 80 ae 0f c4 c1 77 7e f0 14 bc 38 da b5 4e e8 fe 5e 2d dd 96 a9 c8 14 52 f7 78 24 a1 67 ee 89 8f 2d ec b4 37 56 89 84 57 bf 65 70 5e d6 80 6d 13 6b 24 8d b1 7d c8 d5 f2 a7 bf 54 91 e2 8a f9 42 1c 74 08 d6 51 c0 59 cf b9 04 df d4 1d ab 9e e2 fb 0f dc 1b 44 6f d3 27 a4 bb 18 11 22 f5 bc bc a1 8b 6f d8 1a b2 eb 8f 1a 87 87 9a db e0 8c 3a 91 a5 be ba f9 7d f1 71 46 65 f2 67 fb e5 23 0b 7e 0e a5 8a 94 4d db 78 4e d4 7f 63 c6 b7 c9 15 7e ea c1 62 ce 0f 85 b8 e4 fc 92 7f 6c d8 55 91 dd 3e 40 23 60 69 4f a1 d2 3d c6 64 c1 6c 36 52 98 0e ce b7 1a 73 e4 64 ce 6c ce a1 93 72 1b 9b ea 60 ae 25 82 05 b2 09 b5 35 41 8c 9d da 77 dc ee 3d b1 c8 7d 39 23 b9 49 ad 0e 62 4a 16 3e 00 43 b0 21 7c 53 40 20 5f 10 ed 3a 97 70 10 77 af 6a c4 e8 d1 82 80 b0 Data Ascii: 5 w~8N^-Rx$g-7VWep^mk$}TBtQYDo'"o:}qFeg#~MxNc~blU>@#`iO=dl6Rsdlr`%5Aw=}9#IbJ>C!\|S@ _:pwj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.11	49828	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:23 UTC	424	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/logo-white.webp HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:23 UTC	539	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:23 GMT Content-Type: image/webp Content-Length: 3564 Connection: close Last-Modified: Fri, 08 Sep 2023 11:15:02 GMT ETag: 0x8DBB05CD8E4CACE x-ms-request-id: 0b5ca019-d01e-0054-2ed4-9fb7f2000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164223Z-174c4b644ccdthtf8yqbdzcpbc00000001zg000000003xfq Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-06 16:42:23 UTC	3564	IN	Data Raw: 52 49 46 46 e4 0d 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 30 00 00 00 bc 01 00 5c 00 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFWEBPVP8X0\ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.11	49829	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:23 UTC	427	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/google-review.webp HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:23 UTC	539	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:23 GMT Content-Type: image/webp Content-Length: 1770 Connection: close Last-Modified: Fri, 08 Sep 2023 11:15:01 GMT ETag: 0x8DBB05CD8031787 x-ms-request-id: 3da143be-e01e-0070-57d4-9f4152000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164223Z-174c4b644cch57xx1kbpmuwk40000000012000000000tvmt Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-06 16:42:23 UTC	1770	IN	Data Raw: 52 49 46 46 e2 06 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 30 00 00 00 c7 00 00 17 00 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFWEBPVP8X0ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.11	49832	89.187.173.23	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:23 UTC	602	OUT	GET /widgetapp/2024-04-30-12-14-34/widget_app_base_1714479274721.js HTTP/1.1 Host: cdn.userway.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.rmshg.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:23 UTC	1038	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:23 GMT Content-Type: application/javascript Content-Length: 156166 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD, PUT, POST, DELETE Access-Control-Expose-Headers: Content-Range, Content-Length, ETag, Content-Type Access-Control-Max-Age: 3000 Last-Modified: Tue, 30 Apr 2024 12:16:54 GMT ETag: "de02da26b05523fea66308b0c5dccf8e" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25920000, public Vary: Accept-Encoding Via: 1.1 d5b1e30b6413a7f5a2c9efa2afce8170.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: QYHmAH0EJvc3_mEmruQRGyX2xrc5zpZZmLSIoAVkU0yWPZi6nRxONA== Age: 810 X-77-NZT: EgwBWbutFQHX3RYIAAwBuTvfFAH33QwAAA X-77-NZT-Ray: 256bf61996bc26a16f0839663fd5900f X-Accel-Expires: @1740400309 X-Accel-Date: 1714483602 X-77-Cache: HIT X-77-Age: 530141 Server: CDN77-Turbo Alt-Svc: h3=":443"; ma=86400 X-Cache: HIT X-Age: 530141 X-77-POP: miamiUSFL Accept-Ranges: bytes
2024-05-06 16:42:23 UTC	15346	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 45 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 45 5b 65 5d 5b 30 5d 28 45 5b 65 5d 5b 31 5d 29 3b 45 3d 5b 5d 2c 77 3d 21 31 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 45 2e 70 75 73 68 28 5b 65 2c 74 5d 29 2c 77 7c 7c 28 77 3d 21 30 2c 78 28 69 2c 30 29 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 73 28 74 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 6c 28 74 2c Data Ascii: !function(e){function t(e){return"[object Array]"===Object.prototype.toString.call(e)}function i(){for(var e=0;e<E.length;e++)E[e][0](E[e][1]);E=[],w=!1}function n(e,t){E.push([e,t]),w\|\|(w=!0,x(i,0))}function r(e,t){function i(e){s(t,e)}function n(e){l(t,
2024-05-06 16:42:23 UTC	16384	IN	Data Raw: 2f 5c 75 32 30 30 42 2f 67 2c 22 22 29 3a 22 22 7d 2c 50 2e 63 75 73 74 6f 6d 54 65 78 74 43 6f 6e 74 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 33 29 3b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 3c 31 29 72 65 74 75 72 6e 22 22 3b 76 61 72 20 6e 3d 65 2e 63 68 69 6c 64 45 6c 65 6d 65 6e 74 43 6f 75 6e 74 2c 72 3d 22 22 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 72 2b 3d 65 2e 74 65 78 74 43 6f 6e 74 65 6e 74 29 2c 21 72 26 26 65 2e 6c 65 6e 67 74 68 26 26 28 72 2b 3d 65 2e 6e 6f 64 65 56 61 6c 75 65 29 2c 6e 26 26 65 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 26 26 28 72 2b 3d 5f 5f 73 70 72 65 61 64 41 72 72 61 79 28 5b 5d 2c 5f 5f 72 65 61 64 28 65 2e 63 68 69 6c Data Ascii: /\u200B/g,""):""},P.customTextContent=function(e,t){void 0===t&&(t=3);var i=function(e,t){if(t<1)return"";var n=e.childElementCount,r="";return n\|\|(r+=e.textContent),!r&&e.length&&(r+=e.nodeValue),n&&e.childNodes.length&&(r+=__spreadArray([],__read(e.chil
2024-05-06 16:42:23 UTC	16384	IN	Data Raw: 7d 72 65 74 75 72 6e 20 6f 7d 2c 5f 5f 73 70 72 65 61 64 41 72 72 61 79 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 73 70 72 65 61 64 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 69 66 28 69 7c 7c 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6e 2c 72 3d 30 2c 61 3d 74 2e 6c 65 6e 67 74 68 3b 72 3c 61 3b 72 2b 2b 29 21 6e 26 26 72 20 69 6e 20 74 7c 7c 28 6e 7c 7c 28 6e 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 2c 30 2c 72 29 29 2c 6e 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 2e 63 6f 6e 63 61 74 28 6e 7c 7c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 29 7d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: }return o},__spreadArray=this&&this.__spreadArray\|\|function(e,t,i){if(i\|\|2===arguments.length)for(var n,r=0,a=t.length;r<a;r++)!n&&r in t\|\|(n\|\|(n=Array.prototype.slice.call(t,0,r)),n[r]=t[r]);return e.concat(n\|\|Array.prototype.slice.call(t))};!function(){
2024-05-06 16:42:23 UTC	16384	IN	Data Raw: 5f 6c 69 6e 6b 73 2e 74 69 74 6c 65 22 29 7c 7c 22 51 75 69 63 6b 20 41 63 63 65 73 73 69 62 69 6c 69 74 79 20 4f 70 74 69 6f 6e 73 22 29 2c 6e 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 69 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 62 75 74 74 6f 6e 22 29 3b 69 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 75 77 2d 73 6c 5f 5f 69 74 65 6d 22 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 75 77 2d 72 6d 2d 69 67 6e 6f 72 65 22 2c 22 74 72 75 65 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 75 77 2d 69 67 6e 6f 72 65 2d 74 72 61 6e 73 6c 61 74 65 22 2c 22 74 72 75 65 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6c 61 6e 67 22 2c 65 2e 6c 61 Data Ascii: _links.title")\|\|"Quick Accessibility Options"),n.forEach(function(e,t){var i=document.createElement("button");i.className="uw-sl__item",i.setAttribute("data-uw-rm-ignore","true"),i.setAttribute("data-uw-ignore-translate","true"),i.setAttribute("lang",e.la
2024-05-06 16:42:23 UTC	16384	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 74 6d 6c 22 29 5b 30 5d 3b 72 65 74 75 72 6e 21 21 61 28 28 6e 75 6c 6c 3d 3d 3d 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6c 61 6e 67 22 29 29 7c 7c 28 6e 75 6c 6c 3d 3d 3d 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 78 6d 6c 3a 6c 61 6e 67 22 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 74 6d 6c 22 29 5b 30 5d 2c 74 3d 28 6e 75 6c 6c 3d 3d 3d 65 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 Data Ascii: document.getElementsByTagName("html")[0];return!!a((null===t\|\|void 0===t?void 0:t.getAttribute("lang"))\|\|(null===t\|\|void 0===t?void 0:t.getAttribute("xml:lang")))}function n(){var e=document.getElementsByTagName("html")[0],t=(null===e\|\|void 0===e?void 0:e
2024-05-06 16:42:23 UTC	16384	IN	Data Raw: 74 75 6e 69 6e 67 73 2e 77 69 64 67 65 74 5f 69 63 6f 6e 5f 74 79 70 65 3d 74 2e 69 63 6f 6e 54 79 70 65 2c 4f 28 29 3b 65 6c 73 65 20 69 66 28 22 73 65 74 53 6f 75 6e 64 45 66 66 65 63 74 73 22 3d 3d 3d 74 2e 61 63 74 69 6f 6e 29 63 74 2e 74 75 6e 69 6e 67 73 2e 77 69 64 67 65 74 5f 73 6f 75 6e 64 73 3d 74 2e 76 61 6c 75 65 3b 65 6c 73 65 20 69 66 28 22 69 73 56 69 73 69 62 6c 65 4f 6e 4d 6f 62 69 6c 65 22 3d 3d 3d 74 2e 61 63 74 69 6f 6e 29 63 74 2e 74 75 6e 69 6e 67 73 2e 77 69 64 67 65 74 5f 68 69 64 64 65 6e 5f 66 6f 72 5f 6d 6f 62 69 6c 65 3d 74 2e 76 61 6c 75 65 3b 65 6c 73 65 20 69 66 28 22 73 65 74 49 63 6f 6e 53 69 7a 65 22 3d 3d 3d 74 2e 61 63 74 69 6f 6e 29 63 74 2e 74 75 6e 69 6e 67 73 2e 77 69 64 67 65 74 5f 69 63 6f 6e 5f 73 69 7a 65 3d 74 Data Ascii: tunings.widget_icon_type=t.iconType,O();else if("setSoundEffects"===t.action)ct.tunings.widget_sounds=t.value;else if("isVisibleOnMobile"===t.action)ct.tunings.widget_hidden_for_mobile=t.value;else if("setIconSize"===t.action)ct.tunings.widget_icon_size=t
2024-05-06 16:42:23 UTC	16384	IN	Data Raw: 2e 74 75 6e 69 6e 67 73 2e 77 69 64 67 65 74 5f 6c 61 6e 67 75 61 67 65 3f 74 2e 64 61 74 61 2e 74 75 6e 69 6e 67 73 2e 77 69 64 67 65 74 5f 6c 61 6e 67 75 61 67 65 3a 6e 75 6c 6c 3b 63 74 2e 6c 61 6e 67 75 61 67 65 3d 53 74 2e 72 65 73 6f 6c 76 65 28 7b 6f 77 6e 65 72 4c 61 6e 67 53 65 6c 65 63 74 69 6f 6e 3a 69 7d 29 2c 53 74 2e 75 73 65 72 4c 61 6e 64 53 65 6c 65 63 74 69 6f 6e 49 73 44 65 66 61 75 6c 74 4c 61 6e 67 53 65 6c 65 63 74 65 64 28 7b 6f 77 6e 65 72 4c 61 6e 67 53 65 6c 65 63 74 69 6f 6e 3a 69 7d 29 26 26 6d 74 2e 72 65 6d 6f 76 65 50 72 6f 70 65 72 74 79 28 63 74 2c 56 74 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 63 74 2e 72 65 6d 65 64 69 61 74 69 6f 6e 3d 74 2e 64 61 74 61 2e 72 65 6d 65 64 69 61 74 69 6f 6e 56 32 2c 63 74 Data Ascii: .tunings.widget_language?t.data.tunings.widget_language:null;ct.language=St.resolve({ownerLangSelection:i}),St.userLandSelectionIsDefaultLangSelected({ownerLangSelection:i})&&mt.removeProperty(ct,Vt),function(){var e;ct.remediation=t.data.remediationV2,ct
2024-05-06 16:42:23 UTC	16384	IN	Data Raw: 20 53 65 28 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 75 77 79 22 29 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 63 74 2e 73 65 74 74 69 6e 67 73 29 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 63 74 2e 73 65 74 74 69 6e 67 73 5b 65 5d 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 76 61 6c 75 65 29 26 26 22 75 73 65 72 77 61 79 2d 70 6f 73 69 74 69 6f 6e 57 69 64 67 65 74 22 21 3d 3d 65 7d 29 3f 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 75 65 6e 22 29 3a 65 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 75 65 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 65 28 29 7b 77 69 6e 64 6f 77 2e 55 Data Ascii: Se(){var e=document.querySelector(".uwy");Object.keys(ct.settings).some(function(e){var t;return(null===(t=ct.settings[e])\|\|void 0===t?void 0:t.value)&&"userway-positionWidget"!==e})?e.classList.add("uen"):e.classList.remove("uen")}function ke(){window.U
2024-05-06 16:42:23 UTC	16384	IN	Data Raw: 74 69 76 65 2c 62 6f 64 79 20 2e 75 77 79 20 2e 75 6c 73 74 69 3a 66 6f 63 75 73 2c 62 6f 64 79 20 2e 75 77 79 20 2e 75 6c 73 74 69 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 37 64 64 35 7d 62 6f 64 79 20 2e 75 77 79 20 2e 75 61 69 20 2e 75 70 73 2c 62 6f 64 79 20 2e 75 77 79 20 2e 75 6c 73 74 69 20 2e 75 70 73 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 68 65 69 67 68 74 3a 34 35 70 78 3b 77 69 64 74 68 3a 34 35 70 78 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d Data Ascii: tive,body .uwy .ulsti:focus,body .uwy .ulsti:hover{background:#007dd5}body .uwy .uai .ups,body .uwy .ulsti .ups{display:none;position:absolute;height:45px;width:45px;top:0;left:0;background-color:transparent!important;overflow:hidden;background-position:-
2024-05-06 16:42:23 UTC	9748	IN	Data Raw: 75 70 73 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 21 69 6d 70 6f 72 74 61 6e 74 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 6d 73 2d 66 6c 65 78 2d 66 6c 6f 77 3a 72 6f 77 20 6e 6f 77 72 61 70 3b 66 6c 65 78 2d 66 6c 6f 77 3a 72 6f 77 20 6e 6f 77 72 61 70 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 75 77 79 20 2e 75 61 69 20 2e 75 69 5f 62 2c 2e 75 77 79 20 2e 75 61 69 2e 75 73 65 72 77 61 79 5f 64 61 72 6b 20 2e 75 70 73 20 2e 73 69 5f 62 2c 2e 75 77 79 20 2e 75 61 69 2e 75 73 65 72 77 61 79 Data Ascii: ups{display:-ms-flexbox!important;display:flex!important;-ms-flex-flow:row nowrap;flex-flow:row nowrap;-ms-flex-pack:center;justify-content:center;-ms-flex-align:center;align-items:center}.uwy .uai .ui_b,.uwy .uai.userway_dark .ups .si_b,.uwy .uai.userway

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.11	49830	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:23 UTC	656	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/service-1.webp HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:23 UTC	520	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:23 GMT Content-Type: image/webp Content-Length: 23182 Connection: close Last-Modified: Fri, 08 Sep 2023 11:15:04 GMT ETag: 0x8DBB05CDA0EEE18 x-ms-request-id: 9c51ca14-001e-0068-09d4-9f9e35000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164223Z-174c4b644ccqpml656qge81brw000000023000000000y8zp Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-06 16:42:23 UTC	15864	IN	Data Raw: 52 49 46 46 86 5a 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 c1 01 00 0d 01 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFZWEBPVP8X ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-05-06 16:42:23 UTC	7318	IN	Data Raw: 68 30 35 c0 35 70 65 5b 2b cd cf 76 e2 6c 31 06 b8 80 d9 bb 2a f6 40 0c b8 34 92 1b c8 ff 39 d5 db 6d 9c 60 7a 1a 19 49 07 0f 3d e3 67 81 fe 39 a4 a9 8f b5 c0 31 d6 e1 81 8a 4a e6 f1 6b c0 b5 24 de f6 58 db af 55 8b b4 db 53 c8 ef 12 9d af 3e 8c e3 54 c9 1e a4 29 65 55 b4 ba ea 9a 54 73 ad f6 d1 56 d2 39 1a bb 98 4c f7 a9 1c 6a 60 27 20 d2 be c9 b4 f8 f6 3f 22 a0 e6 2e ff 60 08 0b e8 31 81 4b a6 4e a4 e8 51 53 86 13 9f 19 8e 0b 3b 85 19 f2 29 93 b0 25 19 7a cb 4b 8b 69 3a 55 d4 f4 25 18 cf be 75 45 de cb 44 01 26 57 b0 53 c9 cd 9c dc 36 c4 8c 56 08 1f 5c 84 42 7b 29 5f 44 6c 89 62 33 af ca ae c0 0d fd 86 b6 af 75 8c c3 72 c5 f5 3e 72 90 21 a9 fe 9c df 24 78 0b ba bf 90 ab ff 4e 3d e9 05 fb 27 1b 75 88 73 de 21 6d b5 36 8e 39 dc c3 b4 a2 e3 f3 53 79 36 d4 Data Ascii: h055pe[+vl1*@49m`zI=g91Jk$XUS>T)eUTsV9Lj`' ?".`1KNQS;)%zKi:U%uED&WS6V\B{)_Dlb3ur>r!$xN='us!m69Sy6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.11	49831	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:23 UTC	656	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/service-2.webp HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:53 UTC	520	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:53 GMT Content-Type: image/webp Content-Length: 23656 Connection: close Last-Modified: Fri, 08 Sep 2023 11:15:04 GMT ETag: 0x8DBB05CDA2CAADC x-ms-request-id: 095abe2d-f01e-007c-5fd4-9fd65a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164223Z-174c4b644cck4rfd7mzqdhwvmn00000001zg000000003sc9 Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-06 16:42:53 UTC	15864	IN	Data Raw: 52 49 46 46 60 5c 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 c1 01 00 0d 01 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFF`\WEBPVP8X ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-05-06 16:42:53 UTC	7792	IN	Data Raw: 03 26 3b ee 97 c8 c2 31 a9 03 d0 df e8 0c 83 a2 54 80 7b 97 c6 90 af 00 79 c7 f8 ea 1f 98 79 23 e9 f9 0f 86 9b b3 65 d8 23 e0 9f 2d 8c 7c 67 31 61 36 38 f5 5d f9 23 d0 c1 0f 6f 61 d0 16 c0 f6 f0 b3 6b 25 b3 c0 e5 4d c9 07 c1 9e c7 ee 40 c1 b7 8e c6 7c ff c8 84 25 4d e7 03 25 3f d9 c8 7c af a7 58 b7 b6 c9 b5 c5 09 49 eb 99 1e 1f 9e 51 75 30 9a 7c 29 79 51 6a b2 99 c9 2e 84 84 50 bf 50 3f e9 b0 01 72 f5 d0 ec fa 2e 0d 87 2f da 8b 33 8d 76 45 5f c4 d5 08 af 8b 60 a4 34 ab ce f4 d4 02 0d dd 41 00 9f 64 7a a2 10 0f f3 45 46 6d 29 4f 60 8f d0 a7 73 c5 a8 58 67 df 8b 38 71 ab f1 c4 60 39 e3 83 bb 0f ec a2 d7 20 35 5e 9c 27 0c 31 ba df 45 58 ce 5b 47 8e 12 a5 c1 47 15 6e 26 9a d8 2c 45 e6 30 f5 b4 e8 c9 8e 37 da 36 36 24 48 64 4d 9a 75 7e cf e3 ab 16 cc 12 4b 34 Data Ascii: &;1T{yy#e#-\|g1a68]#oak%M@\|%M%?\|XIQu0\|)yQj.PP?r./3vE_`4AdzEFm)O`sXg8q`9 5^'1EX[GGn&,E0766$HdMu~K4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.11	49834	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:23 UTC	423	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/program-bg.jpg HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:24 UTC	541	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:23 GMT Content-Type: image/jpeg Content-Length: 195902 Connection: close Last-Modified: Fri, 08 Sep 2023 11:15:03 GMT ETag: 0x8DBB05CD9B84F62 x-ms-request-id: 5df2b467-801e-0014-2fd4-9fb0ca000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164223Z-174c4b644cc75wrcuvcd0fs1yn000000027g00000000bt6f Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-06 16:42:24 UTC	15843	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c2 00 11 08 01 f4 03 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 00 00 00 00 00 03 04 05 06 07 08 01 02 09 00 0a ff c4 00 1d 01 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 e0 Data Ascii: JFIFCC
2024-05-06 16:42:24 UTC	16384	IN	Data Raw: a5 59 07 b9 28 44 2f 26 67 a3 d8 6e 89 85 5d 43 62 e2 8d 36 44 12 8f c5 d1 40 ba 99 c8 1a a8 68 68 d8 2b 64 98 4a 6c 17 19 0c 35 b0 73 70 ad 42 48 bd 01 7e 0c 9d 4d 08 12 e3 0e 81 27 e7 f5 4f 6a 7d 23 96 ba f0 f3 52 70 68 2e b2 66 da 52 47 d7 b8 d3 d1 d1 61 b3 5a 09 96 ae 59 e8 ef 2d b6 bc 21 4f d3 62 72 97 58 9e 67 46 e7 d9 d3 dd 2d 13 6e c6 a5 0e 75 61 09 31 d2 24 b4 12 90 e6 0c bc 20 da 06 b6 22 a9 6d 28 92 45 53 5b 2d b0 c2 b2 00 c9 19 34 f9 49 dc 03 ed ac 05 16 80 68 00 40 02 67 b2 40 66 78 23 c1 8d 0c 0a 49 2c a0 20 2f 10 10 0d 41 ea 15 80 30 0f c0 0c 44 09 9e a0 6a 06 50 ad 1b 7a 51 cc ea 86 6d dd 92 e6 e4 79 07 ba 57 e3 49 86 9f d4 10 a9 71 4a 3c d1 51 24 b2 d7 80 bd 89 6c fb cc e2 6c aa e2 8e c7 05 69 0d 48 c8 18 33 d4 23 60 ac 85 68 12 5d 71 f4 Data Ascii: Y(D/&gn]Cb6D@hh+dJl5spBH~M'Oj}#Rph.fRGaZY-!ObrXgF-nua1$ "m(ES[-4Ih@g@fx#I, /A0DjPzQmyWIqJ<Q$lliH3#`h]q
2024-05-06 16:42:24 UTC	16384	IN	Data Raw: 9b 1c 5d 11 d1 3e 09 46 76 7c 39 4d 4b de b7 db e1 75 01 06 f5 39 d3 b1 d0 b7 9f 89 d3 ed 93 da c9 96 8c 97 51 5b 9a 11 bd bc 40 c9 e1 17 2f bb 94 ca 4a 74 03 e6 39 31 c3 57 cb 77 3c d2 ae 78 a1 41 4f a9 55 4b e1 10 27 38 69 96 59 69 11 e7 1d 19 0d 18 31 27 5b 51 3d 9f 73 27 bf 5a b2 4a 4e 89 ea 1a dc 43 6f b7 71 44 80 b4 97 a2 fc 19 ae 2b 1f c6 a5 4a 43 ac a5 66 95 6b 3a bf 71 69 6b 57 18 ac f1 4a 5e 80 19 5c aa 7a fd f3 51 e4 09 70 a2 54 8b 94 c5 4d b7 1c 75 ee 62 31 20 4d 28 71 f6 65 cc 7b c9 73 00 26 30 e6 19 96 16 7b 1a 8f bb 8b 6d be 6e 8e cb cd 49 12 4a 9d 6c 83 2b e7 0b 1b b0 2e 00 f1 b3 36 d5 79 8c ac 2f 51 f4 30 41 64 ee 16 a8 16 49 a6 48 e2 ba f1 5a e1 2d 19 eb 5d 08 09 42 3e b2 5d ff 00 14 ce eb 8a 48 a5 f6 a5 2c f0 9d 2b d2 3d ea ab f3 e5 47 Data Ascii: ]>Fv\|9MKu9Q[@/Jt91Ww<xAOUK'8iYi1'[Q=s'ZJNCoqD+JCfk:qikWJ^\zQpTMub1 M(qe{s&0{mnIJl+.6y/Q0AdIHZ-]B>]H,+=G
2024-05-06 16:42:24 UTC	16384	IN	Data Raw: 04 f8 e2 4c 9a 93 c1 a3 b1 1e fe b7 1b 86 52 bd c5 3b 67 52 5b 9e 20 5b e5 75 a1 d3 fa 27 e8 5e 87 d3 fa 84 35 0c e7 0c 68 85 12 81 85 92 3b 09 4a 31 e8 fa d8 49 5b 1a 31 cd a4 14 2d b6 4b 62 61 8e 60 5b b1 28 a4 b2 23 42 d3 22 1c e0 55 78 df 77 a3 7e 8c 7e 83 19 03 1d 30 91 0f 0d 7d 8d f0 d3 98 c9 30 52 c8 a3 cd cf 0b c8 52 d3 b0 1f 6f d1 ef 60 11 ec 88 f1 47 0f c8 4c 6b f4 df 94 3e 7a 97 b5 24 a2 7c 88 d9 0e 42 5b 6e 54 ac ff 00 01 f4 7c bf e7 1b 88 a2 70 89 b4 d7 a1 49 63 84 c9 4b ff 00 68 bb c8 47 d7 72 72 ff 00 66 e6 ae 54 95 70 84 86 eb 3d 3a 4d fc 18 d8 a2 32 8a 40 9f 21 11 fd a6 73 c3 8a ad e8 3d 0f 82 16 59 c7 29 6c 5b db 7c c5 d2 74 eb aa 31 36 47 c3 8b 7e 0b 2c 1f 6a 24 7b 0c 53 18 d5 02 63 af 38 43 6c be 68 7c 88 a2 23 a2 92 ad a7 97 fc 18 ab Data Ascii: LR;gR[ [u'^5h;J1I[1-Kba`[(#B"Uxw~~0}0RRo`GLk>z$\|B[nT\|pIcKhGrrfTp=:M2@!s=Y)l[\|t16G~,j${Sc8Clh\|#
2024-05-06 16:42:24 UTC	16384	IN	Data Raw: 93 1f de 22 d5 b0 8e 37 2b e5 b9 56 fa 7d c0 cb 06 6f a8 7d 77 86 3f c8 7f f2 f9 ff 00 e0 35 37 fa 10 c4 b9 73 5f fe c3 04 1e a0 f5 1c 75 07 de 73 88 13 94 19 dc 2e 83 9f a0 33 1e 67 b0 69 7f d2 e6 18 57 f2 e3 1f 74 44 bb 49 7c 67 eb ef 2a 54 a9 5f e7 7e fe 44 1a 29 ee 2b ac c3 c6 38 61 85 9d a5 05 90 51 5f 5d 69 6f 38 8f 2c 8c 27 58 ff 00 92 f5 0f 75 f7 dc b5 5d 45 bb 4b 10 35 d4 9f 73 60 b5 5f 33 80 b1 eb 2c 6a ef 1a b8 fb 4b d5 37 46 b8 75 ea 56 94 b8 aa d3 2e 98 37 53 81 14 af 71 59 9a fa ed fe 41 0f ff 00 14 9b ff 00 89 06 31 1f ab df f8 1f e2 66 6f f4 99 ce 9b ff 00 98 62 f3 97 fc 92 8b a6 17 11 da e1 88 ea 19 be 37 fe b9 94 5a 12 19 bf fc d7 cc 88 2a 54 24 7b 3b 3c 91 5d 45 d6 a2 bf c0 57 d6 e1 f5 26 3c ca d9 2e 20 d5 30 e2 18 87 02 44 29 b2 28 fe Data Ascii: "7+V}o}w?57s_us.3giWtDI\|gT_~D)+8aQ_]io8,'Xu]EK5s`_3,jK7FuV.7SqYA1fob7ZT${;<]EW&<. 0D)(
2024-05-06 16:42:24 UTC	16384	IN	Data Raw: 45 40 65 0d 87 5c 06 28 0a 97 03 fd 35 72 5a d3 bf 83 cc 35 41 29 2f 0a 38 af ea 64 64 bc 15 55 59 d9 b3 88 9d f3 bb 7c 16 97 b8 6a b1 3a 2c 9a a3 cf de a0 6c 6a 7b 3d 46 f7 cf 68 45 02 6a c1 ef 97 e3 29 08 0c 69 c4 56 8c f8 4a 8c 64 65 5e 61 01 78 cf 0f 97 d7 10 7a f4 02 0d f5 01 2d f1 ad 2c f0 8b 8c bb c4 04 ab 49 ce d7 4e 7c 47 85 72 ad 38 7b 2f c2 42 8a 62 d9 d1 98 62 d6 0b da 31 5d b2 aa 17 e2 21 ab f6 b7 ef a4 15 fe a1 0e ce 6e 7d 50 b4 52 9b 0f 17 c4 eb 6d 7b 3f b6 96 dd 43 97 43 a8 94 72 4a 5d eb 82 29 a1 21 56 30 86 91 92 b8 85 1d 45 2b b7 5a 00 4c a2 1e 0f 65 12 5a b2 3a c7 4d c6 99 42 d2 b0 eb 3a b2 a8 aa fc c1 df 34 f3 6c 75 66 6b b1 98 4a 0c b8 ad 7f 47 e6 a0 13 97 ba 8f e1 2b b2 9c be e6 28 be bc c4 00 92 56 00 e5 7c 11 a4 7d c6 2b 3c 0d 1c Data Ascii: E@e\(5rZ5A)/8ddUY\|j:,lj{=FhEj)iVJde^axz-,IN\|Gr8{/Bbb1]!n}PRm{?CCrJ])!V0E+ZLeZ:MB:4lufkJG+(V\|}+<
2024-05-06 16:42:24 UTC	16384	IN	Data Raw: a7 56 47 ca ad 20 a9 76 c1 58 51 c3 54 d9 e7 60 ac 6c 8e d9 31 3e 34 13 2b f3 dc 9c 2c d3 8f dd 12 c7 3e b1 86 3c 2f 66 63 fc bc b5 24 cf 41 e2 e9 c7 e5 40 5e 07 fd 4c da 3d 50 0b 71 e5 6e 50 65 9f 0a f7 4d 33 3d 88 db 93 59 a9 af 46 f4 c4 a6 c1 70 56 bf d5 b0 ec 5a 51 6a 1c 6b f2 6e 13 73 6d 0f 5d 9d 3f ad 75 1d 37 ac dd 31 ec d1 6a 76 b7 d4 07 ae 6a db 70 e0 7c 44 d6 3f ec cd 71 c5 b3 47 7b 55 70 c6 e3 03 13 16 2f 9e c6 08 20 ee 60 ff 00 10 76 1d b5 23 22 15 c1 8a c7 d4 96 af ef 09 6f 96 8d 5a 18 28 5c 1c 7d 3b c2 98 8a cc 9e 29 75 b4 61 a9 16 ad bb 4a 81 03 22 98 09 8b c0 c4 51 c4 6f f1 39 80 e5 b3 2c 76 af 90 ce 00 8e 7f 68 e5 18 93 2c d7 67 56 a8 ba 95 a6 ed 49 de 74 3b ea f8 37 4c d5 07 e7 4f 46 32 c6 d4 5f a7 dd 19 2c 71 81 d3 f4 6d 6e ac 2d b5 1d Data Ascii: VG vXQT`l1>4+,></fc$A@^L=PqnPeM3=YFpVZQjknsm]?u71jvjp\|D?qG{Up/ `v#"oZ(\};)uaJ"Qo9,vh,gVIt;7LOF2_,qmn-
2024-05-06 16:42:24 UTC	16384	IN	Data Raw: 3f 8c c3 35 d1 fc 59 e3 93 3b 0a bf 39 8b 01 d4 33 f5 15 a4 b7 25 ec 6d 07 7d 9e a0 ea 2b 81 3c 1f 96 5c a5 6c 73 8d 41 bd a1 f1 ad bf 80 f1 f7 86 ee f2 16 d4 01 bb 1a 89 7b 80 56 7b 83 45 a5 b9 15 14 1c b1 fc 86 38 1c 0d 1e 42 8c af 89 f7 95 56 60 65 e3 5a 78 c6 b1 38 ee 79 5c ba 99 cf 08 d3 f6 f4 d4 51 e8 66 bf 01 0b 6e a9 bd 8d 7a ff 00 0c 5a 86 d1 ba 19 bc af 9f 4c 81 f2 ae 86 69 5b a9 1c 95 4e e7 1d cd 4d 09 a8 dc 4c f3 ad c7 08 b4 be d2 ed fd 3e 4a 17 70 b0 e1 b8 06 98 99 79 1c b7 3e d2 28 ef 50 a7 41 40 f9 f5 31 69 dd 92 a0 ac da 18 b6 ad 96 90 16 88 c3 4c 2a 5d cb 79 db d0 b3 c6 64 30 98 98 2d d8 89 87 70 1b 37 bf e9 b6 66 d6 e7 2e cd 48 d7 c4 23 2f 44 58 aa 3a f7 14 af 59 a5 3d ee 28 a8 ce e1 46 16 12 e1 d1 a8 56 15 d7 67 5d cd f7 36 4f d8 e8 c5 Data Ascii: ?5Y;93%m}+<\lsA{V{E8BV`eZx8y\QfnzZLi[NML>Jpy>(PA@1iL*]yd0-p7f.H#/DX:Y=(FVg]6O
2024-05-06 16:42:24 UTC	16384	IN	Data Raw: 99 39 53 a9 79 d3 9a e9 1e 08 d1 4c 4c 5e fa 9a d7 c7 47 30 b4 58 23 36 14 74 7d a0 96 54 7b 99 79 09 8d 10 a8 00 49 b5 30 ff 00 cc bd 3a 7b 72 da 1e ff 00 d8 25 bd 87 6d af 38 20 e3 31 9f 94 e3 e6 82 d4 a6 95 f5 18 66 a1 a9 92 5d f4 b9 87 51 e2 21 80 ab 96 89 d9 b0 43 fc ba 31 4b e5 a8 7b 96 5d 7c 5a 4b 0e 44 0c 4a b5 0e 9f 24 6a 40 87 01 de 46 26 1d 08 bc 78 7e 20 61 eb 08 3f dc bf f5 20 d7 88 de 85 58 82 b1 96 38 8d 02 89 17 04 59 fe 88 d9 92 2c ae 5f ad 59 0b 76 0a 7b 78 c0 5d ac e5 bf da ca e4 c8 68 d0 2b db 9d 6d 44 e5 1d 48 3c 9f 02 fd e4 a6 65 f1 6b 05 bc 07 b2 6c 63 5b 08 33 b1 e2 98 10 3b 98 cc ed ba 50 0a ea ae 81 96 08 a6 0f 67 b2 e7 aa 86 80 aa a5 07 91 5e 3b 79 1a 4a 60 00 75 4a e1 0e 97 97 c9 05 53 4b 2e 93 0c 0d 1c c6 71 fc 13 58 60 11 6b Data Ascii: 9SyLL^G0X#6t}T{yI0:{r%m8 1f]Q!C1K{]\|ZKDJ$j@F&x~ a? X8Y,_Yv{x]h+mDH<eklc[3;Pg^;yJ`uJSK.qX`k
2024-05-06 16:42:24 UTC	16384	IN	Data Raw: 0c d3 74 25 88 57 87 8b 7c c0 78 1c ba 7d fe a6 62 17 45 76 9d c5 5d c8 b4 d1 1f 5e 8b a0 2d 25 a7 85 6c 5f c8 54 2b ca 54 f2 8b fe c7 0c 5a 7d 26 ba 73 12 99 44 a3 a6 25 c1 ba 57 02 55 4a 79 94 88 89 21 e9 e0 3e 46 ec 8e 7e 16 1d 03 74 86 1e 29 95 81 ab 20 76 b7 cd 7f 11 9c 3d 45 75 ae cc d6 8f b2 30 82 c1 6c 33 d2 5f 31 b7 05 c4 b5 d3 45 91 0a 42 10 91 9b 5c df 6f 08 f0 4f 89 e0 0b 93 9c fd 3a 53 42 25 88 47 10 d3 60 a9 be 0a 38 cc 47 6a 56 4f 3d 31 07 6e 82 94 0a 01 10 c4 a7 a1 2d 96 9a 17 1b 9e 97 55 01 b5 1c 80 0e a9 06 56 54 a1 4b c9 ff 00 9c 45 1f 69 6f d1 58 00 f0 c7 98 0c 12 bb 01 45 d3 18 28 93 6c 84 6d 15 a7 0e 47 4e b0 d8 5b 63 3b 20 80 88 10 d0 30 0f 68 eb cf 87 c6 c4 56 13 8a 18 45 59 21 b8 b9 70 9a 10 20 2b c2 95 29 6c 7c 74 5d c6 4b a3 7f Data Ascii: t%W\|x}bEv]^-%l_T+TZ}&sD%WUJy!>F~t) v=Eu0l3_1EB\oO:SB%G`8GjVO=1n-UVTKEioXE(lmGN[c; 0hVEY!p +)l\|t]K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.11	49833	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:23 UTC	656	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/service-3.webp HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:24 UTC	520	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:24 GMT Content-Type: image/webp Content-Length: 20522 Connection: close Last-Modified: Fri, 08 Sep 2023 11:15:04 GMT ETag: 0x8DBB05CDA3FBAEB x-ms-request-id: 53e99eac-501e-005a-77d4-9f9e42000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164223Z-174c4b644ccqpml656qge81brw000000027g00000000br9b Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-06 16:42:24 UTC	15864	IN	Data Raw: 52 49 46 46 22 50 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 c1 01 00 0d 01 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFF"PWEBPVP8X ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-05-06 16:42:24 UTC	4658	IN	Data Raw: 54 76 2d eb 2d 21 9b 8b cc ae 29 8c 01 92 62 57 c1 51 82 eb 0c 97 95 30 70 d6 81 19 6d d2 c4 02 17 b7 bd 05 92 a7 f1 9f 5d 85 07 4b ea 5c 04 7c 9f 0a 81 e9 05 56 c1 ba 68 bc 77 d0 3e 47 16 35 8c a2 76 6f 3a 2f 90 7e 2b ef 53 08 64 80 86 c3 0d 6e 1b be d1 e5 4b 27 57 c1 e9 2c c4 e8 bf 39 ef 42 28 d5 0e 42 40 fc 05 82 68 4c 26 10 2c 5d 33 e7 30 f7 cd a6 f1 7d 07 f8 f6 a7 b7 e7 af 79 54 66 55 ec 0b 75 f3 ba 29 c0 cb d5 8c 1c e8 24 55 95 36 47 26 ea ae 09 b0 c1 b5 47 3e bc 4f e7 d5 f8 fd 58 07 f9 b0 17 2c 1a 48 23 81 4c 50 1e 6e 50 60 f7 e7 66 8d 8a c8 ed aa d6 e3 9a af 0e bf c2 d0 7a 71 9b c1 b1 46 c7 b9 ec 17 46 01 8b e3 71 10 4a 24 e4 f2 05 15 ff 41 a1 87 fb f7 ae 5d 50 f2 77 1d cb 73 ce a9 bf b5 98 5d 51 94 8e b9 60 34 a4 b8 4f 59 2d 03 8e db 99 2a ef 4f Data Ascii: Tv--!)bWQ0pm]K\\|Vhw>G5vo:/~+SdnK'W,9B(B@hL&,]30}yTfUu)$U6G&G>OX,H#LPnP`fzqFFqJ$A]Pws]Q`4OY-*O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.11	49836	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:23 UTC	425	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/about-thumb.webp HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:24 UTC	540	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:23 GMT Content-Type: image/webp Content-Length: 42732 Connection: close Last-Modified: Fri, 08 Sep 2023 11:14:56 GMT ETag: 0x8DBB05CD525DF00 x-ms-request-id: b3e6437c-701e-003f-06d4-9f3006000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164223Z-174c4b644ccf7hq4thpwqsmses000000025g00000000mr89 Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-06 16:42:24 UTC	15844	IN	Data Raw: 52 49 46 46 e4 a6 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 83 02 00 68 02 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFWEBPVP8X hICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-05-06 16:42:24 UTC	16384	IN	Data Raw: fa 80 ca 26 18 ab f9 1d 71 66 13 99 5e c6 0c 15 ed 17 65 27 7e 72 c0 6a bc c8 19 45 0a 69 1d ec cc fb 0b ed c5 99 47 c3 5d 22 d5 df 0d b6 30 11 9d d2 f7 1c 28 df ea b1 fb c9 70 b8 3b f5 fb bd 99 20 6d 94 21 23 7f 01 89 b2 6f 59 14 2b 7b 7f e7 56 11 76 b1 4a f8 b1 ad 4b 02 12 db 3f e6 48 4b c2 07 f1 90 fe 15 d5 9e 90 f6 1a 9d 8f 90 7d 41 ca 3d cd bc 49 bf 0c a9 f6 6b 1a ad 0a e7 79 c9 94 a2 9e 22 1f 05 30 07 2c c1 b2 da 38 6d c5 9a 57 be 5f 76 cb 8c f9 89 be ca f6 fe ab 92 aa 42 13 ee 60 b8 ec 88 b8 b8 db b0 84 38 aa f4 70 45 4f 93 d9 1e 92 de ee 5c d2 3e 27 4e e8 5f 81 01 7a 7a 7b 9a 50 e8 dd 52 31 ab 51 15 04 f6 52 9a 51 1a 06 4e 09 f1 ba ef c7 06 15 b8 81 1c 1b 66 ce 5f 36 c8 a2 47 36 cc 16 c9 28 6d e8 0a af 59 3e 9f b6 8d 1e 59 70 14 cb db df 31 cc c5 Data Ascii: &qf^e'~rjEiG]"0(p; m!#oY+{VvJK?HK}A=Iky"0,8mW_vB`8pEO\>'N_zz{PR1QRQNf_6G6(mY>Yp1
2024-05-06 16:42:24 UTC	10504	IN	Data Raw: c5 f5 08 92 2f 06 40 50 30 37 a0 cc 2f 1f 84 4d 49 69 7c af ae 9b 35 05 20 82 fc a0 80 ae 0f c4 c1 77 7e f0 14 bc 38 da b5 4e e8 fe 5e 2d dd 96 a9 c8 14 52 f7 78 24 a1 67 ee 89 8f 2d ec b4 37 56 89 84 57 bf 65 70 5e d6 80 6d 13 6b 24 8d b1 7d c8 d5 f2 a7 bf 54 91 e2 8a f9 42 1c 74 08 d6 51 c0 59 cf b9 04 df d4 1d ab 9e e2 fb 0f dc 1b 44 6f d3 27 a4 bb 18 11 22 f5 bc bc a1 8b 6f d8 1a b2 eb 8f 1a 87 87 9a db e0 8c 3a 91 a5 be ba f9 7d f1 71 46 65 f2 67 fb e5 23 0b 7e 0e a5 8a 94 4d db 78 4e d4 7f 63 c6 b7 c9 15 7e ea c1 62 ce 0f 85 b8 e4 fc 92 7f 6c d8 55 91 dd 3e 40 23 60 69 4f a1 d2 3d c6 64 c1 6c 36 52 98 0e ce b7 1a 73 e4 64 ce 6c ce a1 93 72 1b 9b ea 60 ae 25 82 05 b2 09 b5 35 41 8c 9d da 77 dc ee 3d b1 c8 7d 39 23 b9 49 ad 0e 62 4a 16 3e 00 43 b0 21 Data Ascii: /@P07/MIi\|5 w~8N^-Rx$g-7VWep^mk$}TBtQYDo'"o:}qFeg#~MxNc~blU>@#`iO=dl6Rsdlr`%5Aw=}9#IbJ>C!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.11	49835	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:23 UTC	637	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/css/owl.carousel.min.css?v=082020231220461627960 HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:24 UTC	609	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:24 GMT Content-Type: text/css Content-Length: 2941 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Fri, 08 Sep 2023 11:14:55 GMT ETag: 0x8DBB05CD4E006AA x-ms-request-id: 4b237f77-501e-0007-06d4-9f94c6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164223Z-174c4b644cchlx72ek2dgdqv9g000000025000000000q1vr Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-06 16:42:24 UTC	2941	IN	Data Raw: 2f 2a 2a 0d 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 32 2e 31 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 37 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 20 28 29 0d 0a 20 2a 2f 0d 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 2c 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 7b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f Data Ascii: /** * Owl Carousel v2.2.1 * Copyright 2013-2017 David Deutsch * Licensed under () */.owl-carousel,.owl-carousel .owl-item{-webkit-tap-highlight-color:transparent;position:relative}.owl-carousel{display:none;width:100%;z-index:1}.owl-carousel .o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.11	49837	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:23 UTC	427	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/testimonial-bg.jpg HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:24 UTC	541	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:24 GMT Content-Type: image/jpeg Content-Length: 538032 Connection: close Last-Modified: Fri, 08 Sep 2023 11:15:05 GMT ETag: 0x8DBB05CDA982E19 x-ms-request-id: 8b0c61f1-301e-0001-79d4-9fa779000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164224Z-174c4b644ccbdm78n5scf7u6un00000002bg000000014b44 Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-06 16:42:24 UTC	15843	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 02 02 02 02 01 02 02 02 02 03 02 02 03 03 06 04 03 03 03 03 07 05 05 04 06 08 07 09 08 08 07 08 08 09 0a 0d 0b 09 0a 0c 0a 08 08 0b 0f 0b 0c 0d 0e 0e 0f 0e 09 0b 10 11 10 0e 11 0d 0e 0e 0e ff db 00 43 01 02 03 03 03 03 03 07 04 04 07 0e 09 08 09 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e ff c2 00 11 08 02 bc 07 6c 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 00 00 00 00 00 03 01 02 04 07 05 06 08 00 09 0a ff c4 00 1d 01 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 01 02 00 03 04 05 06 07 08 09 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f9 Data Ascii: JFIFCCl
2024-05-06 16:42:24 UTC	16384	IN	Data Raw: 78 e7 a1 72 8f a7 71 77 36 af 26 d3 f3 3e 8e c1 c5 d8 68 5d ae 93 48 c7 ca bb 74 76 51 db 27 ab fa 0d 6d f3 c3 ee f2 7c e6 75 11 e8 7a b8 59 78 7d 95 e6 1b 8c 9e 16 77 12 7a 9f 3d 61 e8 b2 0b 89 b2 d9 f5 19 94 5f a0 73 5d 5d e5 1d 2d 21 df e9 34 ed f6 b2 bd e8 f5 1d bf e0 3e 89 af e7 3d f5 cd 53 f3 27 ea bf 2e b4 76 7c d7 d6 2f 92 3b 0a 67 5b d3 73 8f d3 5c 1f 0a 7d 49 e5 1f 40 33 7a 2a a3 5f 25 59 81 f2 87 a8 e3 20 eb ad 56 41 48 d2 ac 31 d6 56 28 d7 0e e7 90 1c 71 b2 cb a7 3d 42 b5 ea 13 55 25 6e 01 a7 37 8b b2 1b 3e 23 27 54 33 3c 42 3d 7e 52 e0 cd 29 e6 8e 81 ca f2 d3 28 06 b1 bd 62 11 80 a8 29 19 b1 9b 22 42 85 23 02 c9 14 4d 87 5b d6 e3 72 f4 71 72 b5 de 81 14 c8 14 be 34 9b 41 99 25 b3 96 45 8e f9 49 6b 92 16 c8 6a d8 76 98 5a a3 03 92 42 43 9b 17 Data Ascii: xrqw6&>h]HtvQ'm\|uzYx}wz=a_s]]-!4>=S'.v\|/;g[s\}I@3z*_%Y VAH1V(q=BU%n7>#'T3<B=~R)(b)"B#M[rqr4A%EIkjvZBC
2024-05-06 16:42:24 UTC	16384	IN	Data Raw: b8 32 4b 9c ac 69 1d 0b 82 b8 b3 43 b0 c7 c2 c5 76 32 28 46 90 18 ec 05 a5 c8 15 92 ef 17 f4 01 91 88 61 03 11 5e 34 00 8e 10 21 d5 11 5b 1a b9 ad 86 2d 36 05 1d ea ed 09 f4 0b e6 7f 72 fb 39 f0 16 6f c5 3f be 53 86 be a1 f9 f3 ce 50 97 c9 92 b2 8c a9 a3 ca b1 d9 9e 66 62 d6 ca d8 65 19 39 e9 55 26 26 41 8e 01 d0 a9 8b 1a 4d 71 23 38 07 29 20 65 56 55 92 49 78 27 0c 72 ec 47 68 6f 02 60 4a b6 10 b7 96 49 b2 b6 54 fe 47 f5 4c f8 ec 5b 0b 27 ab 28 22 b8 8f 45 be ae c6 a4 64 8b 1c 90 8a 8c cb 47 92 e9 74 3d f7 37 de 9e 35 da 7d 66 d1 35 bd dc e9 72 9b fc 0c 2e 97 3b e5 b6 b3 6b c9 19 1b 6f a8 fb 2c 32 ef 75 dc ab c1 f5 36 17 9b 6f 05 85 7f 3b a6 c3 5b a6 dd 4b 67 54 e8 db 76 23 62 b7 b8 fa be ca 9b 5b 85 d9 ef da 3c 88 d0 eb 79 0b 52 76 3a 7e 8b c2 1d 41 d9 Data Ascii: 2KiCv2(Fa^4![-6r9o?SPfbe9U&&AMq#8) eVUIx'rGho`JITGL['("EdGt=75}f5r.;ko,2u6o;[KgTv#b[<yRv:~A
2024-05-06 16:42:24 UTC	16384	IN	Data Raw: 89 d5 25 ae 81 0e 6d 81 b8 5b a0 38 7b a2 db 77 52 e7 51 5c 6f 1f 98 20 92 43 b8 99 85 b8 40 c6 83 b1 c3 8f 5e 7a 2f 9c 09 72 66 06 21 db d3 3c 2d b8 3e b7 06 54 73 9c d2 cb 05 51 31 9e f4 e6 6e 37 f8 f5 fb f8 44 c8 9c 10 ce 25 d7 6e b8 58 8b 26 34 f8 0c e9 64 15 5c 5e ef 59 ed 68 d3 e9 b3 18 13 17 67 ae f6 f3 79 50 88 8e 5e 90 12 33 d2 11 aa 58 b6 28 f0 63 a6 6c 78 a9 da 27 68 83 71 77 77 65 79 75 2c 38 d3 1f d2 a4 c8 be a2 cf cf f7 ad 51 8a f7 fd a8 da 6c fa b9 fa 06 64 4b 3d e8 a7 51 e6 7c 7f 7f 0c 78 74 6d 97 7d 54 23 a8 bb f3 cc 54 d4 e9 db 8c 7d 5e de bf 7f 1f df c3 db d7 ed ea f6 f5 ff 00 a7 a1 71 ce 87 b5 5a 86 22 4b dc a7 9c d3 4b 95 4c ea 39 2f 93 ed e8 8f aa 2a de 7b 52 4b 95 7e 9a 9e d4 ee d4 e8 e5 34 5c 9a 5e 11 f5 d5 bd 2c 79 53 57 3a 28 c2 Data Ascii: %m[8{wRQ\o C@^z/rf!<->TsQ1n7D%nX&4d\^YhgyP^3X(clx'hqwweyu,8QldK=Q\|xtm}T#T}^qZ"KKL9/*{RK~4\^,ySW:(
2024-05-06 16:42:24 UTC	16384	IN	Data Raw: ba b1 62 e6 d5 76 6e ba 8b 45 71 05 42 5a 0e ab 2d fb f0 6a 43 89 6e 0c ac 2c 81 ee b9 b6 37 0c f1 69 7b d4 6c 1d a1 bc bd 53 b8 71 ed 59 6f 00 86 cd 9f 98 b3 19 08 5c 3a 2f 05 af b5 c2 ae c5 32 8d ad 80 b7 af 20 57 6c 50 38 26 66 e4 2d d1 67 0a b6 3d 13 6b 77 28 79 b2 f2 5c 2e 55 cc ad 4b 5a 39 45 e4 32 f5 f6 c0 a1 59 4c 69 59 33 cd 5a 8b 19 16 40 1c 2c ed 74 ae b7 27 5e e1 5d 4c 9e 1c 56 0d 18 5f 45 b0 dc 5c f3 02 90 16 d9 d8 5c 2f 00 f3 8b 95 aa 25 40 12 cc 54 5a b9 52 6f 12 da 8b 99 4b 0a 5b 10 cd 6d 5d bd af 0d de b5 70 ee e5 8e 7a d8 ed 57 0d 87 68 36 68 91 0a bb b8 24 a1 bb 69 d9 b7 16 76 2d 3d 53 7f 70 db 2d 82 3c 04 16 a5 84 7d 2a 51 47 c3 c4 85 3a c1 6b b3 13 0b 8d 57 17 28 bc d1 37 4c 8c 25 81 72 16 aa 0b 99 d0 23 6c 3a 24 c5 dc 91 10 65 ff 00 Data Ascii: bvnEqBZ-jCn,7i{lSqYo\:/2 WlP8&f-g=kw(y\.UKZ9E2YLiY3Z@,t'^]LV_E\\/%@TZRoK[m]pzWh6h$iv-=Sp-<}*QG:kW(7L%r#l:$e
2024-05-06 16:42:24 UTC	16384	IN	Data Raw: 20 b5 2e 10 cf bd 8d b0 41 11 b4 33 32 10 67 31 b4 74 b8 00 b5 c4 8e a3 6d ab 9b 6e db bb 89 8d 22 dd e6 02 71 e5 11 73 6d 66 ad bf bc 4b e8 0c 3f 13 49 61 b7 9b 97 0d cc 6c 81 34 61 61 13 10 34 17 3f 10 21 9d 70 a6 04 5c 97 bc 27 3a 0a 41 94 57 8b 0b 31 4b 06 4c c6 27 75 6e b8 89 86 45 c1 00 6d 9b 46 03 46 ed a1 2e 4c f4 8a 8d 58 00 5f c2 b7 1f 2a 18 d2 c2 a2 71 cd de e3 35 d4 19 ab 84 0b 05 b2 65 65 63 00 bd 67 18 2b b5 4c dc ea 8a ba 07 45 ce 1c 23 2b b6 65 ba 09 ff 00 0f 74 ee 66 6d ac fa 99 1a fd a8 ab 15 3f 32 7b cf f9 29 53 02 e8 99 e7 12 98 25 c9 ab a8 64 6a 7b fe 4f 1f 2a 19 3a 71 ed 25 33 5c 3e 20 ad 5b 8f ad b1 89 f5 5b fd 53 56 fd f9 55 ab e4 5d a7 df 8f 4a 67 8b 7c 2f cd c4 54 0d 40 56 3a 6a 22 bd aa 27 9d 2a 79 d2 9d 8a 87 45 15 d0 d1 5d ce Data Ascii: .A32g1tmn"qsmfK?Ial4aa4?!p\':AW1KL'unEmFF.LX_q5eecg+LE#+etfm?2{)S%dj{O:q%3\> [[SVU]Jg\|/T@V:j"'*yE]
2024-05-06 16:42:24 UTC	16384	IN	Data Raw: 94 03 aa c0 32 58 f1 47 26 df 25 e3 64 5b ec da 45 10 ee cc 66 4d 80 11 17 d8 a3 6f 14 3a 58 ad 1e 0f 2a 2d e4 9a ad 01 6a 37 e1 b2 9e 26 47 e6 9d cf 98 44 78 21 0c c8 c6 a8 a4 8a 95 80 20 2f 8b 45 35 ca 9d cf 5b a9 e5 2b 7d 96 1f b4 38 ae 95 97 87 11 d4 27 c1 5c d5 67 9f 27 76 b0 26 d4 12 ee 15 94 ce 55 1c 48 ba fd 8d c0 5a c0 ac 75 f9 0e 29 3d 98 7b fa b3 d9 b7 cb b0 b5 ed 2a 7c df 28 aa 33 4d 90 99 7f 44 db 49 4d 88 16 59 8e 5c 12 6c 34 56 07 26 92 99 88 08 f4 74 31 a9 4d 65 40 b8 58 95 71 d5 4f a3 60 4d 79 6f 91 f1 e6 94 d7 1e 19 1c 3d 56 19 9c 4c cd 51 ff 00 85 5c e1 86 ac b2 c0 d5 97 29 3a b4 6a 21 5b 2f 8a 2f a0 79 a8 4f 7e 51 86 f1 5f fd 26 d4 b3 96 7c 11 ac bf 89 ce 2a 63 85 94 59 43 9b 5f c9 62 e9 b2 69 de eb 25 f5 0a 33 17 4e ab 37 31 b2 dc ea Data Ascii: 2XG&%d[EfMo:X-j7&GDx! /E5[+}8'\g'v&UHZu)={\|(3MDIMY\l4V&t1Me@XqO`Myo=VLQ\):j![//yO~Q_&\|*cYC_bi%3N71
2024-05-06 16:42:24 UTC	16384	IN	Data Raw: 23 5d dc 41 51 7f 99 ae 51 ce f8 22 3c 7e 05 92 32 e4 e4 fe 0a 88 fd fa 6f 3a 21 42 d1 7f 62 31 81 a3 2c 9e 07 3c 16 e8 fd 84 37 05 92 c8 89 78 2e 49 37 21 a3 77 d6 6e 16 29 76 29 0e 42 36 2d 5c 39 34 5e 4b 45 e5 1e c5 37 0f 51 a8 14 ab 80 fa 97 09 f3 46 9a 71 a1 6a 8d 72 79 1f 36 66 23 85 e2 49 4a 76 67 7a f0 26 bd 29 9a e0 f6 b8 82 5e f4 3e c5 78 4c 53 95 a5 b7 be cc dd 49 07 2a b0 f5 ae bb c4 4a 34 53 09 bc fd 8e 83 db 3e df 48 d1 05 d5 9b 4c 79 bc 07 8f 53 df f3 d8 51 6d c8 da af b3 c8 dc ac df 86 a7 dc 71 cd 4a c4 96 0f 15 3b f4 8b b4 64 73 b6 18 9a 61 aa 63 e1 d8 bf e3 fd 0b bc 92 17 75 d4 9f 3c 14 2d a4 09 c6 f3 0f 70 4c 66 8d b9 c3 18 6c cf 77 d8 a3 39 73 2d 96 db 49 fd 09 4e 9d 3e 1f fb 02 74 ef a7 3c 27 e8 7d 35 f4 e9 e0 89 9e 26 27 fa 1c d5 ca Data Ascii: #]AQQ"<~2o:!Bb1,<7x.I7!wn)v)B6-\94^KE7QFqjry6f#IJvgz&)^>xLSI*J4S>HLySQmqJ;dsacu<-pLflw9s-IN>t<'}5&'
2024-05-06 16:42:24 UTC	16384	IN	Data Raw: 44 b0 37 cd fa eb fe 67 d5 0b a2 ea 9c 13 9f d0 4f d1 ae ab 91 1f 5c e2 a9 bf 60 e9 4a f0 27 a6 fd 39 c1 06 1f ac d7 56 c6 ef a4 f4 fc 93 f2 4f b9 26 85 d2 8d 9a 12 be c2 42 f4 cb 02 34 2e 88 c2 38 e9 a1 7d 74 fb 10 5f b4 c8 d4 ba 68 e7 62 5a 38 68 88 a8 c4 a4 8b ec 21 18 be 4c 76 23 b9 c0 fb e9 f4 a0 a2 e6 95 9b 7f e8 33 d8 54 c6 34 38 f1 fd c4 ba 42 6d 39 b5 ec 2f 3e e4 42 ac 8f d0 e5 10 b4 b0 61 99 09 5e fa 48 23 92 ac 88 a9 f2 14 c9 3a a7 9c 11 bd 66 84 95 98 70 d7 88 ca ed 07 7c e4 2a 9d 6c 3c 64 81 42 64 b4 32 51 9a 0d bb 1c 68 b0 4a 54 fe 79 42 16 f2 d7 f0 81 67 2d c9 e1 70 e7 f7 25 62 2d 5a c2 5d c7 37 b4 50 87 fb 63 35 45 97 dd 6d ec 91 b9 19 5c fe 47 24 fc 82 8a c2 92 a5 8a af 62 4c ec c9 e5 5e 9e 05 db 98 05 a8 38 76 d1 dd 43 a9 5a 7b 93 db 2d Data Ascii: D7gO\`J'9VO&B4.8}t_hbZ8h!Lv#3T48Bm9/>Ba^H#:fp\|*l<dBd2QhJTyBg-p%b-Z]7Pc5Em\G$bL^8vCZ{-
2024-05-06 16:42:24 UTC	16384	IN	Data Raw: 00 c8 61 85 03 98 0d 25 b9 d9 67 37 99 92 f8 d4 2c 56 41 a7 98 02 62 03 81 dc 0e a9 ce a9 c3 a1 a3 43 19 47 e0 7b 21 86 4d 1f dc 3a 42 92 35 88 47 b9 73 83 2d 79 cd 40 33 04 4d 83 98 26 c7 76 e0 64 c9 e6 0d 48 c6 09 73 65 50 a2 21 b6 74 61 88 07 d9 26 d4 a2 88 27 35 71 e6 18 01 1a c8 7f 88 ef 7b 04 e2 15 f9 e6 35 90 01 6a 27 f2 d9 2d fd 9f 08 10 52 0c 16 6a 01 05 c4 56 f1 fa 68 da ef 11 21 64 e5 00 6d 85 c4 53 be 89 cd 34 03 b0 64 e9 dd 60 a9 a4 65 e2 4e 83 6e 5b eb 20 2f 65 02 b1 1d 47 f1 37 48 9d e5 a0 10 2c 93 1c c6 19 a0 e3 ed 04 4e 1c ec 3f a8 f8 f9 46 d5 f6 8d 59 1b 00 6d 98 0b da b9 01 06 e1 4d f0 15 8c 74 e4 88 5b 00 7e 4c db 05 e9 6e 00 b7 be 82 86 c5 82 fb 62 ea 0a eb f4 3c 71 88 12 f9 28 02 1b f0 0c 16 ad 87 80 20 f4 37 00 1c 33 4b f2 25 03 88 Data Ascii: a%g7,VAbCG{!M:B5Gs-y@3M&vdHseP!ta&'5q{5j'-RjVh!dmS4d`eNn[ /eG7H,N?FYmMt[~Lnb<q( 73K%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.11	49838	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:24 UTC	423	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/service-1.webp HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:24 UTC	540	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:24 GMT Content-Type: image/webp Content-Length: 23182 Connection: close Last-Modified: Fri, 08 Sep 2023 11:15:04 GMT ETag: 0x8DBB05CDA0EEE18 x-ms-request-id: 9c51ca14-001e-0068-09d4-9f9e35000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164224Z-174c4b644cclmf9mt9bc53yybs00000000t0000000019tu4 Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-06 16:42:24 UTC	15844	IN	Data Raw: 52 49 46 46 86 5a 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 c1 01 00 0d 01 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFZWEBPVP8X ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-05-06 16:42:24 UTC	7338	IN	Data Raw: 2c fb b4 73 36 97 75 fe 88 56 05 6d 49 41 6f 73 b0 ec 88 40 68 30 35 c0 35 70 65 5b 2b cd cf 76 e2 6c 31 06 b8 80 d9 bb 2a f6 40 0c b8 34 92 1b c8 ff 39 d5 db 6d 9c 60 7a 1a 19 49 07 0f 3d e3 67 81 fe 39 a4 a9 8f b5 c0 31 d6 e1 81 8a 4a e6 f1 6b c0 b5 24 de f6 58 db af 55 8b b4 db 53 c8 ef 12 9d af 3e 8c e3 54 c9 1e a4 29 65 55 b4 ba ea 9a 54 73 ad f6 d1 56 d2 39 1a bb 98 4c f7 a9 1c 6a 60 27 20 d2 be c9 b4 f8 f6 3f 22 a0 e6 2e ff 60 08 0b e8 31 81 4b a6 4e a4 e8 51 53 86 13 9f 19 8e 0b 3b 85 19 f2 29 93 b0 25 19 7a cb 4b 8b 69 3a 55 d4 f4 25 18 cf be 75 45 de cb 44 01 26 57 b0 53 c9 cd 9c dc 36 c4 8c 56 08 1f 5c 84 42 7b 29 5f 44 6c 89 62 33 af ca ae c0 0d fd 86 b6 af 75 8c c3 72 c5 f5 3e 72 90 21 a9 fe 9c df 24 78 0b ba bf 90 ab ff 4e 3d e9 05 fb 27 1b Data Ascii: ,s6uVmIAos@h055pe[+vl1*@49m`zI=g91Jk$XUS>T)eUTsV9Lj`' ?".`1KNQS;)%zKi:U%uED&WS6V\B{)_Dlb3ur>r!$xN='

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.11	49839	44.234.218.238	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:24 UTC	624	OUT	POST /api/tunings/D0JSP1avgg HTTP/1.1 Host: api.userway.org Connection: keep-alive Content-Length: 1557 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.rmshg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:24 UTC	1557	OUT	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 75 73 65 72 77 61 79 2d 73 32 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 64 69 73 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 22 75 73 65 72 77 61 79 2d 73 33 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 64 69 73 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 22 75 73 65 72 77 61 79 2d 73 34 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 64 69 73 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 22 75 73 65 72 77 61 79 2d 73 36 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 64 69 73 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 22 75 73 65 72 77 61 79 2d 73 37 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 64 69 73 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 22 75 73 65 72 77 61 79 2d 73 38 22 Data Ascii: {"settings":{"userway-s2":{"value":false,"disabled":false},"userway-s3":{"value":false,"disabled":false},"userway-s4":{"value":false,"disabled":false},"userway-s6":{"value":false,"disabled":false},"userway-s7":{"value":false,"disabled":false},"userway-s8"
2024-05-06 16:42:24 UTC	550	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:24 GMT Content-Type: application/json; charset=utf-8 Content-Length: 516 Connection: close X-Service-Version: uw-pr Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD, PUT, PATCH, POST, DELETE Access-Control-Allow-Headers: * Access-Control-Expose-Headers: Content-Range, Content-Length, ETag, Content-Type Access-Control-Max-Age: 3000 Cache-Control: no-cache, no-store, must-revalidate X-Service-Request-Id: usrf74160a532be4e4 ETag: W/"204-GHC+q1MNV1I1maFF9Af6KcVsqqI"
2024-05-06 16:42:24 UTC	516	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 32 30 30 2c 22 64 61 74 61 22 3a 7b 22 74 75 6e 69 6e 67 73 22 3a 7b 22 77 69 64 67 65 74 5f 63 6f 6c 6f 72 22 3a 6e 75 6c 6c 2c 22 77 69 64 67 65 74 5f 6c 61 6e 67 75 61 67 65 22 3a 6e 75 6c 6c 2c 22 77 69 64 67 65 74 5f 69 63 6f 6e 5f 74 79 70 65 22 3a 6e 75 6c 6c 2c 22 77 69 64 67 65 74 5f 70 6f 73 69 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 77 69 64 67 65 74 5f 69 63 6f 6e 5f 73 69 7a 65 22 3a 6e 75 6c 6c 2c 22 73 69 74 65 5f 6e 61 6d 65 22 3a 22 72 6d 73 68 67 2e 63 6f 6d 22 7d 2c 22 6f 72 67 49 6e 66 6f 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 6e 75 6c 6c 2c 22 61 6c 6c 6f 77 73 22 3a 5b 22 43 52 45 44 45 4e 54 49 41 4c 53 5f 4c 4f 47 49 4e 22 2c 22 53 4f 43 49 41 4c 5f 4c 4f 47 49 4e 22 5d 2c 22 73 73 6f 50 61 74 68 22 3a 6e 75 6c 6c Data Ascii: {"code":200,"data":{"tunings":{"widget_color":null,"widget_language":null,"widget_icon_type":null,"widget_position":null,"widget_icon_size":null,"site_name":"rmshg.com"},"orgInfo":{"domain":null,"allows":["CREDENTIALS_LOGIN","SOCIAL_LOGIN"],"ssoPath":null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.11	49840	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:24 UTC	423	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/service-3.webp HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:25 UTC	540	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:24 GMT Content-Type: image/webp Content-Length: 20522 Connection: close Last-Modified: Fri, 08 Sep 2023 11:15:04 GMT ETag: 0x8DBB05CDA3FBAEB x-ms-request-id: 53e99eac-501e-005a-77d4-9f9e42000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164224Z-174c4b644cc68b4v7hu1156dnw00000001z0000000005gz7 Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-06 16:42:25 UTC	15844	IN	Data Raw: 52 49 46 46 22 50 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 c1 01 00 0d 01 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFF"PWEBPVP8X ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-05-06 16:42:25 UTC	4678	IN	Data Raw: 31 5d e7 4e 8a f3 20 c5 91 7b 5f 5c 67 36 da 26 4f 6f 0c 97 54 76 2d eb 2d 21 9b 8b cc ae 29 8c 01 92 62 57 c1 51 82 eb 0c 97 95 30 70 d6 81 19 6d d2 c4 02 17 b7 bd 05 92 a7 f1 9f 5d 85 07 4b ea 5c 04 7c 9f 0a 81 e9 05 56 c1 ba 68 bc 77 d0 3e 47 16 35 8c a2 76 6f 3a 2f 90 7e 2b ef 53 08 64 80 86 c3 0d 6e 1b be d1 e5 4b 27 57 c1 e9 2c c4 e8 bf 39 ef 42 28 d5 0e 42 40 fc 05 82 68 4c 26 10 2c 5d 33 e7 30 f7 cd a6 f1 7d 07 f8 f6 a7 b7 e7 af 79 54 66 55 ec 0b 75 f3 ba 29 c0 cb d5 8c 1c e8 24 55 95 36 47 26 ea ae 09 b0 c1 b5 47 3e bc 4f e7 d5 f8 fd 58 07 f9 b0 17 2c 1a 48 23 81 4c 50 1e 6e 50 60 f7 e7 66 8d 8a c8 ed aa d6 e3 9a af 0e bf c2 d0 7a 71 9b c1 b1 46 c7 b9 ec 17 46 01 8b e3 71 10 4a 24 e4 f2 05 15 ff 41 a1 87 fb f7 ae 5d 50 f2 77 1d cb 73 ce a9 bf b5 Data Ascii: 1]N {_\g6&OoTv--!)bWQ0pm]K\\|Vhw>G5vo:/~+SdnK'W,9B(B@hL&,]30}yTfUu)$U6G&G>OX,H#LPnP`fzqFFqJ$A]Pws

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.11	49841	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:24 UTC	423	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/party-mood.svg HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:25 UTC	636	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:25 GMT Content-Type: image/svg+xml Content-Length: 337607 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Fri, 08 Sep 2023 11:15:03 GMT ETag: 0x8DBB05CD95D6B75 x-ms-request-id: 7dc690f3-801e-0004-3bd4-9f75a2000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164225Z-174c4b644ccdthtf8yqbdzcpbc00000001tg00000000xzcz Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-06 16:42:25 UTC	15748	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 32 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y
2024-05-06 16:42:25 UTC	16384	IN	Data Raw: 31 2c 31 2e 34 2c 30 2e 32 2c 32 2e 31 0d 0a 09 09 09 09 09 09 63 2d 30 2e 39 2c 39 2e 31 2d 34 2e 39 2c 31 35 2d 35 2e 34 2c 32 34 2e 35 63 30 2c 30 2e 36 2d 30 2e 33 2c 31 2d 30 2e 35 2c 31 2e 35 63 2d 30 2e 32 2c 31 2c 31 2c 30 2e 35 2c 30 2e 38 2c 31 2e 35 63 2d 33 2e 39 2c 31 30 2d 35 2e 35 2c 32 33 2e 31 2d 34 2e 39 2c 33 37 63 30 2e 33 2c 37 2e 36 2c 30 2e 39 2c 31 35 2e 33 2c 30 2e 32 2c 32 32 2e 34 0d 0a 09 09 09 09 09 09 63 30 2e 31 2c 31 2e 39 2c 30 2e 34 2c 33 2e 37 2c 30 2e 35 2c 35 2e 35 63 32 2e 35 2c 36 2e 32 2c 35 2c 31 32 2e 34 2c 37 2e 31 2c 31 39 68 33 35 2e 34 43 31 31 34 2e 39 2c 33 32 34 2e 33 2c 31 31 34 2e 39 2c 33 32 33 2e 37 2c 31 31 34 2e 38 2c 33 32 33 2e 31 7a 20 4d 31 32 30 2e 38 2c 31 38 39 2e 34 0d 0a 09 09 09 09 09 09 63 Data Ascii: 1,1.4,0.2,2.1c-0.9,9.1-4.9,15-5.4,24.5c0,0.6-0.3,1-0.5,1.5c-0.2,1,1,0.5,0.8,1.5c-3.9,10-5.5,23.1-4.9,37c0.3,7.6,0.9,15.3,0.2,22.4c0.1,1.9,0.4,3.7,0.5,5.5c2.5,6.2,5,12.4,7.1,19h35.4C114.9,324.3,114.9,323.7,114.8,323.1z M120.8,189.4c
2024-05-06 16:42:25 UTC	16384	IN	Data Raw: 2c 33 2e 35 0d 0a 09 09 09 09 09 09 63 2d 30 2e 32 2c 30 2e 35 2d 30 2e 35 2c 31 2e 32 2d 30 2e 31 2c 31 2e 38 63 30 2e 34 2c 30 2e 32 2c 30 2e 33 2c 30 2e 37 2c 30 2e 37 2c 30 2e 35 63 2d 30 2e 36 2d 30 2e 34 2d 30 2e 35 2d 31 2e 32 2d 30 2e 34 2d 31 2e 38 63 30 2e 35 2d 31 2e 32 2c 32 2e 31 2d 32 2c 31 2e 37 2d 33 2e 36 63 30 2e 35 2d 30 2e 31 2c 31 2e 32 2c 30 2c 31 2e 34 2c 30 2e 36 0d 0a 09 09 09 09 09 09 63 30 2e 31 2c 30 2e 34 2d 30 2e 33 2c 31 2e 31 2c 30 2e 34 2c 31 2e 31 63 31 2e 33 2c 31 2e 36 2c 30 2e 39 2c 34 2e 33 2c 33 2e 32 2c 35 2e 32 63 30 2e 39 2c 30 2e 32 2c 31 2e 38 2c 30 2e 38 2c 32 2e 31 2c 31 2e 37 63 31 2e 35 2c 31 2e 39 2d 30 2e 32 2c 36 2e 35 2c 33 2e 33 2c 36 2e 33 63 30 2e 38 2d 30 2e 34 2c 31 2e 37 2d 30 2e 39 2c 32 2e 33 2c Data Ascii: ,3.5c-0.2,0.5-0.5,1.2-0.1,1.8c0.4,0.2,0.3,0.7,0.7,0.5c-0.6-0.4-0.5-1.2-0.4-1.8c0.5-1.2,2.1-2,1.7-3.6c0.5-0.1,1.2,0,1.4,0.6c0.1,0.4-0.3,1.1,0.4,1.1c1.3,1.6,0.9,4.3,3.2,5.2c0.9,0.2,1.8,0.8,2.1,1.7c1.5,1.9-0.2,6.5,3.3,6.3c0.8-0.4,1.7-0.9,2.3,
2024-05-06 16:42:25 UTC	16384	IN	Data Raw: 31 2e 32 2c 30 63 31 2e 37 2d 30 2e 31 2c 32 2e 35 2d 31 2e 34 2c 33 2e 34 2d 32 2e 37 63 30 2e 34 2d 30 2e 35 2c 30 2e 38 2d 31 2c 31 2e 33 2d 31 2e 35 63 30 2e 34 2d 30 2e 34 2c 30 2e 39 2d 30 2e 36 2c 31 2e 34 2d 30 2e 38 0d 0a 09 09 09 09 09 09 63 30 2e 32 2d 30 2e 31 2d 30 2e 34 2c 31 2e 32 2d 30 2e 33 2c 31 63 2d 30 2e 35 2c 31 2e 33 2d 30 2e 38 2c 32 2e 37 2d 31 2e 32 2c 34 63 2d 31 2c 32 2e 38 2d 32 2e 38 2c 33 2e 32 2d 35 2c 33 2e 38 63 2d 31 2e 39 2c 30 2e 35 2d 34 2e 35 2c 32 2d 34 2e 31 2c 34 2e 38 63 30 2e 32 2c 31 2e 31 2c 30 2e 38 2c 31 2e 35 2c 31 2e 34 2c 31 2e 35 0d 0a 09 09 09 09 09 09 63 30 2e 34 2c 30 2e 31 2c 30 2e 38 2d 30 2e 31 2c 31 2e 33 2d 30 2e 34 63 30 2e 33 2d 30 2e 31 2c 30 2e 35 2d 30 2e 33 2c 30 2e 37 2d 30 2e 35 76 2d 30 Data Ascii: 1.2,0c1.7-0.1,2.5-1.4,3.4-2.7c0.4-0.5,0.8-1,1.3-1.5c0.4-0.4,0.9-0.6,1.4-0.8c0.2-0.1-0.4,1.2-0.3,1c-0.5,1.3-0.8,2.7-1.2,4c-1,2.8-2.8,3.2-5,3.8c-1.9,0.5-4.5,2-4.1,4.8c0.2,1.1,0.8,1.5,1.4,1.5c0.4,0.1,0.8-0.1,1.3-0.4c0.3-0.1,0.5-0.3,0.7-0.5v-0
2024-05-06 16:42:25 UTC	16384	IN	Data Raw: 2e 37 2c 31 2e 31 2c 32 2e 34 2c 31 2e 34 2c 32 2e 32 2c 32 2e 39 63 2d 31 2e 37 2c 32 2c 31 2e 33 2c 32 2e 36 2c 32 2c 34 63 30 2e 34 2c 30 2e 38 2c 30 2e 31 2c 31 2e 36 2d 30 2e 31 2c 32 2e 35 0d 0a 09 09 09 09 09 09 63 30 2e 33 2c 31 2e 34 2c 32 2e 31 2c 31 2e 31 2c 33 2e 31 2c 31 2e 38 63 30 2e 39 2c 30 2e 38 2c 32 2e 32 2c 31 2e 37 2c 31 2e 39 2c 33 2e 31 6c 31 2e 35 2c 30 2e 32 63 32 2e 36 2c 30 2e 33 2c 31 2e 35 2c 33 2e 33 2c 33 2e 35 2c 34 2e 36 63 33 2e 31 2c 33 2e 31 2c 37 2e 31 2c 34 2e 39 2c 31 30 2e 34 2c 37 2e 36 0d 0a 09 09 09 09 09 09 63 30 2e 36 2c 30 2c 31 2e 37 2c 30 2e 33 2c 32 2e 32 2d 30 2e 35 63 30 2e 32 2d 30 2e 33 2c 30 2e 31 2d 30 2e 38 2d 30 2e 31 2d 31 2e 31 6c 2d 36 2e 31 2d 34 2e 39 6c 2d 30 2e 31 2d 30 2e 33 63 32 2e 32 2c Data Ascii: .7,1.1,2.4,1.4,2.2,2.9c-1.7,2,1.3,2.6,2,4c0.4,0.8,0.1,1.6-0.1,2.5c0.3,1.4,2.1,1.1,3.1,1.8c0.9,0.8,2.2,1.7,1.9,3.1l1.5,0.2c2.6,0.3,1.5,3.3,3.5,4.6c3.1,3.1,7.1,4.9,10.4,7.6c0.6,0,1.7,0.3,2.2-0.5c0.2-0.3,0.1-0.8-0.1-1.1l-6.1-4.9l-0.1-0.3c2.2,
2024-05-06 16:42:25 UTC	16384	IN	Data Raw: 2e 36 2d 32 2c 30 2e 33 0d 0a 09 09 09 09 09 09 43 35 34 34 2e 32 2c 31 36 35 2e 38 2c 35 34 34 2e 35 2c 31 36 35 2e 33 2c 35 34 34 2e 39 2c 31 36 34 2e 39 7a 20 4d 35 33 34 2e 35 2c 31 38 35 2e 39 4c 35 33 34 2e 35 2c 31 38 35 2e 39 6c 30 2e 32 2c 30 2e 31 4c 35 33 34 2e 35 2c 31 38 35 2e 39 7a 20 4d 35 34 34 2e 37 2c 31 38 36 2e 37 48 35 34 33 0d 0a 09 09 09 09 09 09 63 2d 30 2e 38 2d 30 2e 33 2d 31 2e 34 2d 31 2d 31 2e 39 2d 31 2e 37 43 35 34 32 2e 36 2c 31 38 34 2e 36 2c 35 34 34 2e 31 2c 31 38 35 2e 34 2c 35 34 34 2e 37 2c 31 38 36 2e 37 7a 20 4d 35 34 37 2e 35 2c 31 37 38 2e 34 63 2d 30 2e 36 2c 30 2e 31 2d 30 2e 32 2d 30 2e 36 2d 30 2e 33 2d 31 63 30 2e 39 2d 30 2e 32 2c 31 2e 36 2c 30 2e 39 2c 32 2e 36 2c 30 2e 33 0d 0a 09 09 09 09 09 09 63 30 2e Data Ascii: .6-2,0.3C544.2,165.8,544.5,165.3,544.9,164.9z M534.5,185.9L534.5,185.9l0.2,0.1L534.5,185.9z M544.7,186.7H543c-0.8-0.3-1.4-1-1.9-1.7C542.6,184.6,544.1,185.4,544.7,186.7z M547.5,178.4c-0.6,0.1-0.2-0.6-0.3-1c0.9-0.2,1.6,0.9,2.6,0.3c0.
2024-05-06 16:42:25 UTC	16384	IN	Data Raw: 2c 30 2e 33 2d 31 2e 37 2c 30 2e 39 63 30 2e 34 2c 33 2e 35 2c 32 2e 38 2c 36 2e 31 2c 34 2e 32 2c 39 2e 32 6c 2d 30 2e 33 2c 30 2e 34 0d 0a 09 09 09 09 63 2d 32 2e 35 2d 31 2e 38 2d 35 2e 36 2d 33 2e 39 2d 38 2e 39 2d 32 2e 36 63 2d 30 2e 34 2c 30 2e 34 2d 30 2e 39 2c 30 2e 38 2d 30 2e 38 2c 31 2e 35 63 31 2e 33 2c 31 2e 35 2c 33 2e 32 2c 31 2e 38 2c 34 2e 38 2c 32 2e 39 63 32 2e 32 2c 31 2e 39 2c 34 2e 34 2c 33 2e 38 2c 36 2e 32 2c 36 63 2d 30 2e 33 2c 31 2e 37 2c 30 2e 33 2c 34 2d 30 2e 31 2c 35 2e 39 0d 0a 09 09 09 09 63 2d 31 2e 31 2c 30 2e 35 2d 32 2e 31 2c 31 2e 33 2d 33 2c 32 2e 34 63 2d 31 2e 37 2c 32 2d 34 2e 37 2c 30 2d 36 2e 37 2c 31 2e 36 63 2d 32 2e 33 2c 30 2e 38 2d 33 2c 33 2e 34 2d 33 2e 35 2c 35 2e 36 63 2d 31 2e 33 2c 32 2e 32 2d 32 2e Data Ascii: ,0.3-1.7,0.9c0.4,3.5,2.8,6.1,4.2,9.2l-0.3,0.4c-2.5-1.8-5.6-3.9-8.9-2.6c-0.4,0.4-0.9,0.8-0.8,1.5c1.3,1.5,3.2,1.8,4.8,2.9c2.2,1.9,4.4,3.8,6.2,6c-0.3,1.7,0.3,4-0.1,5.9c-1.1,0.5-2.1,1.3-3,2.4c-1.7,2-4.7,0-6.7,1.6c-2.3,0.8-3,3.4-3.5,5.6c-1.3,2.2-2.
2024-05-06 16:42:25 UTC	16384	IN	Data Raw: 32 2d 34 2e 35 2d 35 2e 37 2d 37 2e 32 6c 30 2e 31 2d 30 2e 32 63 2d 31 2e 34 2d 32 2e 32 2d 31 2e 39 2d 34 2e 38 2d 33 2d 37 2e 31 0d 0a 09 09 09 09 09 09 63 2d 33 2e 32 2d 36 2e 37 2d 37 2e 38 2d 31 32 2e 39 2d 31 30 2e 33 2d 31 39 2e 39 63 2d 31 2e 31 2d 33 2e 31 2d 32 2d 36 2e 36 2d 31 2e 33 2d 31 30 2e 31 63 31 2e 38 2d 33 2e 36 2d 30 2e 36 2d 37 2d 31 2e 38 2d 31 30 2e 31 63 2d 30 2e 31 2d 31 2c 30 2d 32 2e 31 2d 30 2e 38 2d 32 2e 37 63 2d 30 2e 36 2c 30 2e 31 2d 31 2e 32 2c 30 2e 35 2d 31 2e 33 2c 31 2e 32 0d 0a 09 09 09 09 09 09 63 2d 30 2e 35 2c 32 2e 33 2c 31 2e 35 2c 34 2e 34 2c 30 2e 31 2c 36 2e 35 63 2d 31 2d 30 2e 35 2d 31 2e 33 2d 31 2e 36 2d 31 2e 37 2d 32 2e 35 63 2d 30 2e 34 2d 30 2e 38 2d 30 2e 36 2d 32 2d 31 2e 36 2d 32 2e 34 63 2d 30 Data Ascii: 2-4.5-5.7-7.2l0.1-0.2c-1.4-2.2-1.9-4.8-3-7.1c-3.2-6.7-7.8-12.9-10.3-19.9c-1.1-3.1-2-6.6-1.3-10.1c1.8-3.6-0.6-7-1.8-10.1c-0.1-1,0-2.1-0.8-2.7c-0.6,0.1-1.2,0.5-1.3,1.2c-0.5,2.3,1.5,4.4,0.1,6.5c-1-0.5-1.3-1.6-1.7-2.5c-0.4-0.8-0.6-2-1.6-2.4c-0
2024-05-06 16:42:25 UTC	16384	IN	Data Raw: 34 2c 35 2e 35 2c 31 2e 31 63 30 2e 37 2c 31 2c 33 2e 32 2c 30 2c 32 2e 34 2c 32 2e 31 63 31 2c 31 2e 33 2c 32 2e 37 2c 31 2e 33 2c 33 2e 35 2c 32 2e 37 63 2d 30 2e 32 2c 30 2e 34 2d 30 2e 36 2c 30 2e 33 2d 30 2e 39 2c 30 2e 35 63 30 2e 35 2c 31 2e 37 2c 31 2e 35 2c 33 2e 33 2c 32 2e 37 2c 34 2e 35 0d 0a 09 09 09 09 09 09 63 30 2e 34 2c 30 2e 34 2d 30 2e 31 2c 31 2d 30 2e 35 2c 31 63 30 2e 34 2c 31 2e 38 2c 31 2e 34 2c 33 2e 34 2c 31 2e 32 2c 35 2e 35 63 2d 31 2e 35 2c 30 2e 31 2d 30 2e 34 2c 31 2e 38 2d 30 2e 35 2c 32 2e 35 63 2d 30 2e 32 2c 31 2e 36 2c 30 2c 33 2e 37 2d 31 2e 31 2c 34 2e 36 63 2d 30 2e 33 2c 31 2e 31 2d 30 2e 37 2c 32 2e 36 2d 30 2e 32 2c 33 2e 35 0d 0a 09 09 09 09 09 09 6c 34 2e 35 2d 34 2e 35 63 31 2e 38 2d 33 2e 35 2c 33 2e 36 2d 37 Data Ascii: 4,5.5,1.1c0.7,1,3.2,0,2.4,2.1c1,1.3,2.7,1.3,3.5,2.7c-0.2,0.4-0.6,0.3-0.9,0.5c0.5,1.7,1.5,3.3,2.7,4.5c0.4,0.4-0.1,1-0.5,1c0.4,1.8,1.4,3.4,1.2,5.5c-1.5,0.1-0.4,1.8-0.5,2.5c-0.2,1.6,0,3.7-1.1,4.6c-0.3,1.1-0.7,2.6-0.2,3.5l4.5-4.5c1.8-3.5,3.6-7
2024-05-06 16:42:25 UTC	16384	IN	Data Raw: 36 2e 36 2c 32 2e 31 2c 31 30 63 2d 30 2e 36 2c 31 2e 31 2d 32 2c 31 2d 33 2e 31 2c 31 2e 32 63 2d 35 2e 32 2d 30 2e 31 2d 31 30 2e 35 2c 31 2e 34 2d 31 34 2e 39 2c 34 2e 31 0d 0a 09 09 09 09 09 09 63 2d 30 2e 37 2c 30 2e 31 2d 31 2e 34 2c 30 2e 36 2d 32 2e 33 2c 30 2e 34 6c 2d 30 2e 34 2d 30 2e 34 63 30 2e 32 2d 30 2e 37 2c 31 2e 31 2d 30 2e 38 2c 31 2e 33 2d 31 2e 33 63 2d 31 2e 31 2c 30 2e 33 2d 32 2e 32 2c 30 2d 33 2e 32 2d 30 2e 35 63 31 2e 31 2d 30 2e 37 2c 32 2e 34 2d 31 2e 33 2c 33 2e 37 2d 31 2e 37 0d 0a 09 09 09 09 09 09 63 31 2e 34 2d 31 2e 31 2c 32 2e 37 2d 32 2e 38 2c 34 2e 37 2d 32 2e 36 6c 33 2e 32 2c 30 2e 36 63 30 2d 30 2e 39 2d 31 2e 34 2d 31 2e 33 2d 32 2e 32 2d 31 2e 37 63 2d 32 2e 32 2d 30 2e 38 2d 34 2e 31 2c 30 2e 38 2d 35 2e 35 2c Data Ascii: 6.6,2.1,10c-0.6,1.1-2,1-3.1,1.2c-5.2-0.1-10.5,1.4-14.9,4.1c-0.7,0.1-1.4,0.6-2.3,0.4l-0.4-0.4c0.2-0.7,1.1-0.8,1.3-1.3c-1.1,0.3-2.2,0-3.2-0.5c1.1-0.7,2.4-1.3,3.7-1.7c1.4-1.1,2.7-2.8,4.7-2.6l3.2,0.6c0-0.9-1.4-1.3-2.2-1.7c-2.2-0.8-4.1,0.8-5.5,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.11	49843	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:24 UTC	670	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/favicon.ico?v=014020240840136914499 HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:25 UTC	522	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:25 GMT Content-Type: image/x-icon Content-Length: 15406 Connection: close Last-Modified: Fri, 08 Sep 2023 11:42:02 GMT ETag: 0x8DBB0609E9CFE20 x-ms-request-id: e33127e2-501e-0028-07d4-9f990d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164225Z-174c4b644ccrr9zvtm7xpcuspg000000026000000000k40e Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-06 16:42:25 UTC	15406	IN	Data Raw: 00 00 01 00 03 00 10 10 00 00 01 00 20 00 68 04 00 00 36 00 00 00 20 20 00 00 01 00 20 00 28 11 00 00 9e 04 00 00 30 30 00 00 01 00 20 00 68 26 00 00 c6 15 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cd ba b8 f0 e3 d8 d7 f9 e3 d8 d7 f9 e3 d8 d7 f9 e3 d8 d7 f9 e3 d8 d7 f9 e3 d8 d7 f9 e3 d8 d7 f9 e3 d8 d7 f9 e3 d8 d7 f9 e3 d8 d7 f9 e3 d8 d7 f9 e3 d8 d7 f9 e3 d8 d7 f9 e3 d8 d7 f9 cc b9 b6 e8 e3 d9 d8 f6 e4 d9 d9 ff c1 a9 a7 ff c1 a9 a7 ff c1 a9 a7 ff c1 a9 a7 ff c1 a9 a7 ff c1 a9 a7 ff c1 a9 a7 ff c1 a9 a7 ff c1 a9 a7 ff c1 a9 a7 ff c1 a9 a7 ff c1 a9 a7 ff e6 dd dc ff e2 d6 d5 ee e3 d9 d8 f6 ba a0 9e ff 63 27 21 ff 63 27 21 ff 63 27 21 ff 63 27 21 ff 63 27 21 ff 63 27 21 ff 63 Data Ascii: h6 (00 h&( c'!c'!c'!c'!c'!c'!c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.11	49844	89.187.173.23	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:25 UTC	587	OUT	GET /widgetapp/2024-04-30-12-14-34/locales/en-US.json HTTP/1.1 Host: cdn.userway.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.rmshg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:25 UTC	1006	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:25 GMT Content-Type: application/json Content-Length: 621 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD, PUT, POST, DELETE Access-Control-Expose-Headers: Content-Range, Content-Length, ETag, Content-Type Access-Control-Max-Age: 3000 Last-Modified: Tue, 30 Apr 2024 12:16:53 GMT ETag: "85d8c40aac9c25bb0b993d4aa039a56f" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25920000, public Via: 1.1 62c27224785ce0e5201a4eab3d49262e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: Gx1w55lnDU_4l9Anwm6jP5kpnXbW8d-kCE_REaS14Cv9qTza-MKdOA== Age: 812 X-77-NZT: EgwBWbutFQH3wQQIAAwBnJI74gH39h4AAA X-77-NZT-Ray: 256bf619beac19e571083966e0df2011 X-Accel-Expires: @1740400314 X-Accel-Date: 1714488240 X-77-Cache: HIT X-77-Age: 525505 Vary: Accept-Encoding Server: CDN77-Turbo Alt-Svc: h3=":443"; ma=86400 X-Cache: HIT X-Age: 525505 X-77-POP: miamiUSFL Accept-Ranges: bytes
2024-05-06 16:42:25 UTC	621	IN	Data Raw: 7b 22 77 69 64 67 65 74 22 3a 7b 22 68 74 6d 6c 5f 6c 73 74 5f 74 69 74 6c 65 22 3a 22 54 72 61 6e 73 6c 61 74 69 6f 6e 73 20 4d 65 6e 75 22 2c 22 68 74 6d 6c 5f 74 69 74 6c 65 22 3a 22 41 63 63 65 73 73 69 62 69 6c 69 74 79 20 4d 65 6e 75 22 2c 22 74 65 78 74 5f 69 63 6f 6e 5f 73 6d 61 6c 6c 22 3a 22 41 63 63 65 73 73 69 62 69 6c 69 74 79 22 2c 22 74 65 78 74 5f 69 63 6f 6e 5f 6c 61 72 67 65 22 3a 22 41 63 63 65 73 73 69 62 69 6c 69 74 79 3c 2f 62 72 3e 4d 65 6e 75 22 2c 22 6e 65 77 5f 74 61 62 22 3a 22 6f 70 65 6e 20 69 6e 20 61 20 6e 65 77 20 74 61 62 22 2c 22 62 72 6f 6b 65 6e 5f 6c 69 6e 6b 73 22 3a 7b 22 74 61 72 67 65 74 5f 73 69 74 65 5f 6e 6f 74 5f 61 76 61 69 6c 61 62 6c 65 22 3a 22 74 61 72 67 65 74 20 77 65 62 73 69 74 65 20 6d 61 79 20 6e 6f Data Ascii: {"widget":{"html_lst_title":"Translations Menu","html_title":"Accessibility Menu","text_icon_small":"Accessibility","text_icon_large":"Accessibility</br>Menu","new_tab":"open in a new tab","broken_links":{"target_site_not_available":"target website may no

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.11	49845	34.208.13.132	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:25 UTC	361	OUT	GET /api/tunings/D0JSP1avgg HTTP/1.1 Host: api.userway.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:25 UTC	555	IN	HTTP/1.1 405 Method Not Allowed Date: Mon, 06 May 2024 16:42:25 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close X-Service-Version: uw-pr Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD, PUT, PATCH, POST, DELETE Access-Control-Allow-Headers: * Access-Control-Expose-Headers: Content-Range, Content-Length, ETag, Content-Type Access-Control-Max-Age: 3000 Cache-Control: no-cache, no-store, must-revalidate X-Service-Request-Id: usreca51714d6044f7 ETag: W/"0-2jmj7l5rSw0yVb/vlWAYkK/YBwk"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.11	49846	89.187.173.23	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:25 UTC	618	OUT	GET /remediation/2024-04-30-12-14-34/free/remediation-tool-free.js?ts=1714479274721 HTTP/1.1 Host: cdn.userway.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.rmshg.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:25 UTC	994	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:25 GMT Content-Type: application/javascript Content-Length: 30407 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD, PUT, POST, DELETE Access-Control-Expose-Headers: Content-Range, Content-Length, ETag, Content-Type Access-Control-Max-Age: 3000 Last-Modified: Tue, 30 Apr 2024 12:16:59 GMT ETag: "53768dc930d588ea5455c29121acdb29" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25920000, public Vary: Accept-Encoding Via: 1.1 7c1248297a08764c17a9223ad5c211f8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: IPO5rd06bUZ-VyrOhTWUtvMqsSPC3Yf34bQ03zdUYQAvITrbIrHQig== Age: 814 X-77-NZT: EggBWbutFQGBDAGckjviAfe3IwgA X-77-NZT-Ray: 256bf619ceb97df7710839663930d331 X-Accel-Expires: @1740400314 X-Accel-Date: 1714480314 X-77-Cache: HIT X-77-Age: 533431 Server: CDN77-Turbo Alt-Svc: h3=":443"; ma=86400 X-Cache: MISS X-77-POP: miamiUSFL Accept-Ranges: bytes
2024-05-06 16:42:25 UTC	15390	IN	Data Raw: 76 61 72 20 5f 5f 64 65 66 50 72 6f 70 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 5f 5f 64 65 66 50 72 6f 70 73 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 2c 5f 5f 67 65 74 4f 77 6e 50 72 6f 70 44 65 73 63 73 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 2c 5f 5f 67 65 74 4f 77 6e 50 72 6f 70 53 79 6d 62 6f 6c 73 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 2c 5f 5f 68 61 73 4f 77 6e 50 72 6f 70 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 5f 5f 70 72 6f 70 49 73 45 6e 75 6d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 6f 70 65 72 74 79 49 Data Ascii: var __defProp=Object.defineProperty,__defProps=Object.defineProperties,__getOwnPropDescs=Object.getOwnPropertyDescriptors,__getOwnPropSymbols=Object.getOwnPropertySymbols,__hasOwnProp=Object.prototype.hasOwnProperty,__propIsEnum=Object.prototype.propertyI
2024-05-06 16:42:26 UTC	15017	IN	Data Raw: 6e 20 6d 6f 6e 69 74 6f 72 22 3a 2f 63 6d 61 69 6c 28 5c 64 2b 29 5c 2e 63 6f 6d 5c 2f 74 5c 2f 2f 2c 22 63 69 72 72 75 73 20 69 6e 73 69 67 68 74 22 3a 2f 74 72 61 63 6b 69 6e 67 5c 2e 63 69 72 72 75 73 69 6e 73 69 67 68 74 5c 2e 63 6f 6d 2f 2c 63 6c 6f 73 65 3a 2f 63 6c 6f 73 65 5c 2e 63 6f 6d 5c 2f 65 6d 61 69 6c 5f 6f 70 65 6e 65 64 2f 2c 22 63 6f 6e 73 74 61 6e 74 20 63 6f 6e 74 61 63 74 22 3a 2f 72 73 36 5c 2e 6e 65 74 5c 2f 6f 6e 5c 2e 6a 73 70 2f 2c 63 6f 6e 74 61 63 74 6d 6f 6e 6b 65 79 3a 2f 63 6f 6e 74 61 63 74 6d 6f 6e 6b 65 79 5c 2e 63 6f 6d 5c 2f 61 70 69 5c 2f 76 31 5c 2f 74 72 61 63 6b 65 72 2f 2c 63 6f 6e 76 65 72 74 6b 69 74 3a 2f 63 6f 6e 76 65 72 74 6b 69 74 2d 6d 61 69 6c 5c 2e 63 6f 6d 5c 2f 6f 2f 2c 22 63 72 69 74 69 63 61 6c 20 69 Data Ascii: n monitor":/cmail(\d+)\.com\/t\//,"cirrus insight":/tracking\.cirrusinsight\.com/,close:/close\.com\/email_opened/,"constant contact":/rs6\.net\/on\.jsp/,contactmonkey:/contactmonkey\.com\/api\/v1\/tracker/,convertkit:/convertkit-mail\.com\/o/,"critical i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.11	49847	89.187.173.23	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:25 UTC	600	OUT	GET /widgetapp/images/body_wh.svg HTTP/1.1 Host: cdn.userway.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:25 UTC	1017	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:25 GMT Content-Type: image/svg+xml Content-Length: 4561 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD, PUT, POST, DELETE Access-Control-Expose-Headers: Content-Range, Content-Length, ETag, Content-Type Access-Control-Max-Age: 3000 Last-Modified: Fri, 22 Mar 2024 12:49:37 GMT ETag: "1d8b1582fe82bd329041cc1982ad42e4" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25920000, public Vary: Accept-Encoding Via: 1.1 100ce1d37f67e6c59753cd4c9c473afc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: whl_QDbHhLU_AGWHR1ydlBKfMnwrieip9mFcz6SrS8yom4sxdVco7w== X-77-NZT: EgwBWbutFQHX1d0HAAwBnJI73wH3GEYAAA X-77-NZT-Ray: 256bf619b0cda6f87108396606779e33 X-Accel-Expires: @1740400260 X-Accel-Date: 1714498204 X-77-Cache: HIT X-77-Age: 515541 Server: CDN77-Turbo Alt-Svc: h3=":443"; ma=86400 X-Cache: HIT X-Age: 515541 X-77-POP: miamiUSFL Accept-Ranges: bytes
2024-05-06 16:42:25 UTC	4561	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 36 30 70 78 22 20 68 65 69 67 68 74 3d 22 36 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 30 20 36 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 6d 61 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 44 72 61 77 65 72 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="60px" height="60px" viewBox="0 0 60 60" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>man</title> <g id="Drawer" stroke="none" stroke-width="1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.11	49848	89.187.173.23	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:25 UTC	600	OUT	GET /widgetapp/images/spin_wh.svg HTTP/1.1 Host: cdn.userway.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:25 UTC	1027	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:25 GMT Content-Type: image/svg+xml Content-Length: 1977 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD, PUT, POST, DELETE Access-Control-Expose-Headers: Content-Range, Content-Length, ETag, Content-Type Access-Control-Max-Age: 3000 Last-Modified: Fri, 22 Mar 2024 12:49:37 GMT ETag: "8e0a35946bf39d10f46a1f1653366a0a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25920000, public Vary: Accept-Encoding Via: 1.1 16af463a01c5a83f3019835cbbb82152.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: wZi_yifg8O8pnuzVWaqq6E03S9nFeR2OreeYwpJLJ0cBLq5DOGeHVw== Age: 741 X-77-NZT: EgwBWbutFQHXYeoHAAwBnJI73wH3jDkAAA X-77-NZT-Ray: 256bf619e7a7adf871083966aae1a733 X-Accel-Expires: @1740400260 X-Accel-Date: 1714494992 X-77-Cache: HIT X-77-Age: 518753 Server: CDN77-Turbo Alt-Svc: h3=":443"; ma=86400 X-Cache: HIT X-Age: 518753 X-77-POP: miamiUSFL Accept-Ranges: bytes
2024-05-06 16:42:25 UTC	1977	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 77 69 64 74 68 3d 22 34 30 22 0a 20 20 20 20 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3a 63 63 3d 22 68 74 74 70 3a 2f 2f 63 72 65 61 74 69 76 65 63 6f 6d 6d 6f 6e 73 2e 6f 72 67 2f 6e 73 23 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><svg xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns="http://www.w3.org/2000/svg" height="40" width="40" version="1.1" xmlns:cc="http://creativecommons.org/ns#" xmlns:dc="http://pur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.11	49849	89.187.173.14	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:25 UTC	387	OUT	GET /widgetapp/2024-04-30-12-14-34/locales/en-US.json HTTP/1.1 Host: cdn.userway.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:25 UTC	976	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:25 GMT Content-Type: application/json Content-Length: 621 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD, PUT, POST, DELETE Access-Control-Expose-Headers: Content-Range, Content-Length, ETag, Content-Type Access-Control-Max-Age: 3000 Last-Modified: Tue, 30 Apr 2024 12:16:53 GMT ETag: "85d8c40aac9c25bb0b993d4aa039a56f" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25920000, public Via: 1.1 62c27224785ce0e5201a4eab3d49262e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: Gx1w55lnDU_4l9Anwm6jP5kpnXbW8d-kCE_REaS14Cv9qTza-MKdOA== Age: 812 X-77-NZT: EgwBWbutCgH3BekHAAwBnJI74gH3sjoAAA X-77-NZT-Ray: 596cea2ef631fd34710839664f9f4635 X-Accel-Expires: @1740400314 X-Accel-Date: 1714495340 X-77-Cache: HIT X-77-Age: 518405 Vary: Accept-Encoding Server: CDN77-Turbo X-Cache: HIT X-Age: 518405 X-77-POP: miamiUSFL Accept-Ranges: bytes
2024-05-06 16:42:25 UTC	621	IN	Data Raw: 7b 22 77 69 64 67 65 74 22 3a 7b 22 68 74 6d 6c 5f 6c 73 74 5f 74 69 74 6c 65 22 3a 22 54 72 61 6e 73 6c 61 74 69 6f 6e 73 20 4d 65 6e 75 22 2c 22 68 74 6d 6c 5f 74 69 74 6c 65 22 3a 22 41 63 63 65 73 73 69 62 69 6c 69 74 79 20 4d 65 6e 75 22 2c 22 74 65 78 74 5f 69 63 6f 6e 5f 73 6d 61 6c 6c 22 3a 22 41 63 63 65 73 73 69 62 69 6c 69 74 79 22 2c 22 74 65 78 74 5f 69 63 6f 6e 5f 6c 61 72 67 65 22 3a 22 41 63 63 65 73 73 69 62 69 6c 69 74 79 3c 2f 62 72 3e 4d 65 6e 75 22 2c 22 6e 65 77 5f 74 61 62 22 3a 22 6f 70 65 6e 20 69 6e 20 61 20 6e 65 77 20 74 61 62 22 2c 22 62 72 6f 6b 65 6e 5f 6c 69 6e 6b 73 22 3a 7b 22 74 61 72 67 65 74 5f 73 69 74 65 5f 6e 6f 74 5f 61 76 61 69 6c 61 62 6c 65 22 3a 22 74 61 72 67 65 74 20 77 65 62 73 69 74 65 20 6d 61 79 20 6e 6f Data Ascii: {"widget":{"html_lst_title":"Translations Menu","html_title":"Accessibility Menu","text_icon_small":"Accessibility","text_icon_large":"Accessibility</br>Menu","new_tab":"open in a new tab","broken_links":{"target_site_not_available":"target website may no

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.11	49850	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:25 UTC	662	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/istock-182417552.jpg HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:26 UTC	521	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:26 GMT Content-Type: image/jpeg Content-Length: 519218 Connection: close Last-Modified: Fri, 12 Apr 2024 18:07:53 GMT ETag: 0x8DC5B1B790AD35A x-ms-request-id: 0b5ca828-d01e-0054-01d4-9fb7f2000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164226Z-174c4b644ccr7bcmgpxbx6ydy800000001wg00000000h0hu Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-06 16:42:26 UTC	15863	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 18 dc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 12 00 00 01 03 00 01 00 00 00 b0 0d 00 00 01 01 03 00 01 00 00 00 20 09 00 00 02 01 03 00 03 00 00 00 e6 00 00 00 03 01 03 00 01 00 00 00 01 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 0f 01 02 00 06 00 00 00 ec 00 00 00 10 01 02 00 0e 00 00 00 f2 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 00 01 00 00 1b 01 05 00 01 00 00 00 08 01 00 00 1c 01 03 00 01 00 00 00 01 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1e 00 00 00 10 01 00 00 32 01 02 00 14 00 00 00 2e 01 00 00 3b 01 02 00 0d 00 00 00 42 01 00 00 98 82 02 00 1c 00 00 00 50 01 00 00 69 87 04 00 01 00 00 00 6c 01 00 Data Ascii: JFIF,,ExifII* (12.;BPil
2024-05-06 16:42:26 UTC	16384	IN	Data Raw: 7b dc 2d a1 d2 d9 f8 4d c8 5c 45 c9 18 3f 26 3f 5a f3 2a e7 1d 6e 3b 25 b1 d1 5a f8 3c 9d b9 8c 0f 98 7f 07 07 fc e6 bc da d9 da e5 d1 96 9a 5a 9d 35 9f 83 d3 e5 2d 1f 03 db 39 f6 af 22 be 73 ad 93 15 ed a1 d4 db 78 52 34 23 11 03 9e 08 2a 39 c5 79 35 f3 69 3f b5 af f5 f3 0e 6e ac dc 87 c3 50 85 1f ba 5e 07 1c 7c df 4a e0 96 63 52 a2 ba 44 ba 96 dd 9a 11 e8 b1 20 e2 31 d7 20 15 e0 7b 7e b5 cb 53 1b 51 e8 f4 f5 27 9d 77 27 6d 22 2c ff 00 ab 52 4f 1d 30 6b 37 8b 95 d7 bc 9f cc 6a 44 d1 69 b8 e8 8a a4 1c 0c 73 9a 89 62 93 d9 ab fa dc 77 77 2c 7d 83 90 48 3d 38 21 06 73 fe 4d 67 f5 ab 5d 5f ff 00 25 0b a1 e7 4b 05 46 51 80 07 04 f7 39 f5 a4 f1 52 4b 67 6f 44 43 94 76 4c 63 e8 c1 4a 92 80 01 d0 91 8a 73 c5 ce 0e cd 59 7f 5e 64 fb 54 c8 bf b3 e0 8c 82 d8 e0 e0 Data Ascii: {-M\E?&?Zn;%Z<Z5-9"sxR4#9y5i?nP^\|JcRD 1 {~SQ'w'm",RO0k7jDisbww,}H=8!sMg]_%KFQ9RKgoDCvLcJsY^dT
2024-05-06 16:42:26 UTC	16384	IN	Data Raw: 52 92 4d bd cc 9d 26 b7 5a 89 e5 72 56 45 07 07 23 03 95 a5 cc 9e a6 33 a4 d6 ab 41 76 79 41 82 02 c7 19 e7 81 c7 b5 0f 96 6d 19 fb 16 f7 22 91 77 00 0a a6 47 f1 0e 08 ef 8c 0a 71 4a 2f 47 a1 9c a9 eb 61 8e 8d 90 44 79 e3 1c 1f 9b 3e d5 4b 6b 32 3d 92 b9 00 8b 69 e7 38 03 20 7a f5 a6 dd c9 95 2d 2c 90 9b 78 51 b4 e0 8c ee 03 91 9f 53 48 c2 54 6e dd 86 f9 60 95 23 aa 8d c4 72 54 fb 0a 2f 63 29 c1 c7 49 6c 33 6e 14 97 51 80 7e 56 c9 20 f7 c7 f3 a7 76 f4 46 32 a6 d6 a8 8d c1 20 32 85 cf f0 8c 9c 7e 55 4b 95 68 65 28 f4 1d 83 d4 a1 76 da 0b 10 7e 51 eb c5 45 97 73 37 4d 5b 42 32 8e 06 ee 0e 49 61 b4 e4 bd 25 66 ec 8c da 7c dc ac 8b f8 50 82 e1 5b 24 05 3b 58 1a ab 34 c2 51 d5 df a0 8b 1e ec 70 73 b3 82 4f 06 9b 95 d5 99 8c a3 6d 46 2a b0 66 3b 0a ba 8c 02 dd Data Ascii: RM&ZrVE#3AvyAm"wGqJ/GaDy>Kk2=i8 z-,xQSHTn`#rT/c)Il3nQ~V vF2 2~UKhe(v~QEs7M[B2Ia%f\|P[$;X4QpsOmF*f;
2024-05-06 16:42:26 UTC	16384	IN	Data Raw: fe 67 a1 4b 97 46 ce 86 d6 54 41 d4 6e 38 07 a1 1e 9c fa 57 c8 63 a9 55 93 72 67 ad 4a 6a 2c e8 ad b5 28 d0 ae 5c 03 d0 73 93 d3 15 f3 f5 70 72 9b b9 df 4e bc 52 4b a1 b9 6f ae 28 00 6f 18 03 a8 38 22 bc ea b9 7c 8e 95 8b 49 ee 6d 5b 6b c8 08 cc 99 07 07 27 81 5c 15 72 e7 6b 23 aa 18 ea 6d 9d 04 1e 21 81 42 e5 c1 27 83 c8 c0 f5 af 3e a6 59 51 ea 96 a7 4c 71 b4 d3 dc d0 8f c6 30 c2 c0 2b 8f f7 37 67 3c d7 34 b2 5a 95 16 a8 a5 9a d3 bd 99 b5 6d e3 d8 81 03 7a e3 23 8c 91 fe 7a 57 9f 57 87 66 d6 a8 a8 e6 94 fa 9d e6 8d e3 e8 5f 68 13 0d c5 71 b8 9f d3 ff 00 d5 5f 3f 8e e1 e9 a4 ef 13 be 86 61 4e 6b dd 67 75 6b e3 a8 d5 43 19 c6 31 fd fc 1a f9 ea b9 04 b9 ac d1 d4 f1 71 e8 cd 64 f1 ea e4 05 b8 00 10 4e 0b 67 15 c9 3e 1e 95 dd e2 35 89 57 b3 65 a8 fc 78 07 2b Data Ascii: gKFTAn8WcUrgJj,(\sprNRKo(o8"\|Im[k'\rk#m!B'>YQLq0+7g<4Zmz#zWWf_hq_?aNkgukC1qdNg>5Wex+
2024-05-06 16:42:26 UTC	16384	IN	Data Raw: cb 16 ac 72 12 46 04 85 42 e0 8c e0 f4 20 7a 7a 7a 57 d9 e1 ab b9 d3 f7 1e bf a1 f3 75 93 4d a2 37 87 77 27 ee 81 92 3f cf bd 6f 6a 8a 5c e9 ea 73 93 db da ee 60 41 00 02 a4 b0 3b 47 d2 b9 71 75 64 a9 b5 7b b7 bf f9 7e a7 5d 15 aa be 87 6d a6 e2 15 03 76 46 30 30 73 f8 d7 c5 62 a2 ea 49 dc f7 30 f5 54 23 ab 3a 18 6e d7 38 cf 3c 00 0f 3f fe aa f2 6a 51 7d 11 ec d0 c4 2d 99 b5 0c a0 f4 e4 67 38 3d 47 d2 b8 67 4a fa 3d cf 66 95 64 d6 e2 cd b5 d7 8c 72 31 e9 f5 a7 4a 12 8a 77 3a 1c ee ae 9e a6 25 f0 2a a4 70 41 19 c6 7a 1f 5f f3 eb 5d d8 6d ec d9 12 d9 b3 c9 75 dd c2 72 4e 32 4f ca 01 f4 af bd c9 da 51 b2 dc f9 8c 7a 97 b4 d4 e0 75 73 88 9c f4 7d a7 70 3d f8 cf f8 d7 df e4 fa d5 8e bd 8f 27 10 9a a6 d3 3c 17 5c e6 e2 4e 40 21 f2 32 71 9e 4e 05 7e b9 97 bb 52 Data Ascii: rFB zzzWuM7w'?oj\s`A;Gqud{~]mvF00sbI0T#:n8<?jQ}-g8=GgJ=fdr1Jw:%*pAz_]murN2OQzus}p='<\N@!2qN~R
2024-05-06 16:42:27 UTC	16384	IN	Data Raw: 2e ae 4a a2 79 be 59 c8 e0 01 d7 db f2 ae 69 de 2f 94 e2 ab 56 29 72 93 47 6e 22 56 79 7c b9 0b c5 98 93 24 48 19 cf 50 7b 90 bc f3 d7 35 8f 3d b4 4b fa 7d 4f 3e ad 6e 6d 0c 5d 46 ca 58 63 54 b7 cb 19 67 88 ab 42 76 93 b9 b7 7c c0 fa 0c 92 7d 2b a6 94 ee f6 ed fd 33 25 89 5c d7 97 66 67 3c f1 45 3c b1 c5 33 46 96 92 32 a9 0c 59 a4 77 07 76 ef 63 9c fa 57 43 8a 5e f3 d9 5f f1 46 6f 15 68 df bf e8 62 de dc de 8b 76 8c a4 93 28 bb f2 d4 07 de 81 b7 83 ce 0e 47 de e3 d2 ba 61 18 2d 2d df fa fc 42 38 d4 e5 f1 5b 4f d0 ab 73 79 3c 17 57 83 12 24 66 f5 6d d8 33 f9 6e 87 a2 ed ee 47 cc a4 9e 3a d7 4c e3 19 2b 3d ef 63 05 8a e6 84 5d f5 e5 6f fa fc 6c 5a 81 ff 00 b4 35 13 19 92 49 a3 10 24 cd 1b 30 c3 c9 c8 0b f8 15 24 82 7b 57 3f 2c a1 1e 56 b5 76 33 9e 31 c6 9f Data Ascii: .JyYi/V)rGn"Vy\|$HP{5=K}O>nm]FXcTgBv\|}+3%\fg<E<3F2YwvcWC^_Fohbv(Ga--B8[Osy<W$fm3nG:L+=c]olZ5I$0${W?,Vv31
2024-05-06 16:42:27 UTC	16384	IN	Data Raw: 70 fa dc a4 b1 01 5c f3 8c 8e 7f 0f e9 5e f6 06 0a d7 e8 7c fe 36 a3 a9 2b 23 8f 28 ef 27 28 e7 2d c2 32 f0 4f 7e 3f 2a f6 39 b9 55 cf 3a 14 dd cd 7b 4b 27 7d ec 17 6f 73 86 e7 8e d5 cb 5b 10 93 3d ac 1e 19 b7 76 8d db 5b 65 40 09 07 20 71 8e 39 f7 af 36 b5 5b ec 7d 46 13 0c b7 66 99 b6 25 43 04 2c 7d 86 4f e5 5c be d2 2d eb b9 ed d3 a3 cb ad 8d bb 5b 46 10 70 84 0e a0 95 23 6f e3 5c 35 aa a9 37 16 ce da 51 69 9c ae a8 bb 2e 00 db 8c 82 09 5f bb 5e be 0a 49 c2 ed 9d 3e cb 99 1c 27 89 89 5b 57 c2 92 0f 73 c6 3a 7e 95 f4 39 55 bd b2 ec 65 5e 82 f6 4d 9f 2c f8 a9 41 69 8b 0f 9b 27 68 c7 1d 79 af de 78 42 a4 94 a3 13 e0 b3 5a 4b 99 bb 1f 39 6b ea 56 e1 97 61 e5 ce e5 04 9c d7 f4 2e 57 67 45 33 e6 7d 9f bf a1 05 8c 46 40 77 26 ec 8c 60 2e 08 c7 bd 75 d6 9f 2e Data Ascii: p\^\|6+#('(-2O~?*9U:{K'}os[=v[e@ q96[}Ff%C,}O\-[Fp#o\57Qi._^I>'[Ws:~9Ue^M,Ai'hyxBZK9kVa.WgE3}F@w&`.u.
2024-05-06 16:42:27 UTC	16384	IN	Data Raw: 9a f9 15 d5 db 27 03 01 88 3b 40 2d 8f c7 f1 15 8d de f6 d0 c9 5d fa 0a 8c c4 a8 dd 82 70 47 50 87 db 1e e4 7e b4 26 db 15 e5 aa 92 d0 b1 d8 6f c8 c8 c9 da 30 41 ad 22 d2 d5 9b 41 a6 b4 d4 9c 1f a1 1b b7 0e 73 91 db fa d6 d2 bc a2 e2 b5 34 83 b4 d3 25 32 90 bb 77 b2 02 78 05 06 c3 db f3 cd 65 ef bd 16 86 f2 92 48 a9 2c 9c 1e 78 df b4 bf 27 3d fa 50 e5 18 2b 47 7e e7 2c ea b9 3d 1e a4 7e 61 67 55 04 ed 27 ab 75 e0 9e f5 0a 7a dd 33 3e 6b 46 fb fa 16 a3 43 85 e4 7e f3 e6 19 38 e4 66 ba 54 39 e1 67 d4 de 12 b3 bb 3a 0d 2b 48 9f 53 2c 63 05 90 29 27 0a 55 73 c1 19 ff 00 eb 50 e8 4a 9a e6 7f d7 99 75 31 10 a4 bd f7 af e3 f2 19 79 61 71 6b 33 46 63 7d ae 72 a2 45 28 c7 9e d9 ed 9a 8f 68 e2 b5 46 f4 da ab 15 28 b4 32 38 98 02 4e e2 70 7a f5 01 7a f1 ee 6a 63 15 Data Ascii: ';@-]pGP~&o0A"As4%2wxeH,x'=P+G~,=~agU'uz3>kFC~8fT9g:+HS,c)'UsPJu1yaqk3Fc}rE(hF(28Npzzjc
2024-05-06 16:42:27 UTC	16384	IN	Data Raw: ab 1f 98 18 43 a9 38 35 92 94 ae e1 d1 ff 00 56 66 d2 87 b3 97 3a 7b fe 0c d2 f0 4f c6 bd 4f c3 d7 da 3f 86 86 a1 2e 9b fd 8d a9 4a 34 28 2f ee 12 f7 4c be b6 75 2d 26 99 76 e5 0f d9 fc c0 0f 23 30 c8 c7 78 50 6b 96 54 a2 a7 78 2b 76 fe bf a4 69 38 b9 2f eb ef fe b5 3d 26 3f 8b 36 bf 0f f5 36 d3 22 d4 1e 7f 03 fc 48 b6 3a ac 7a 4c 77 50 dc 43 e1 e9 44 e5 04 f6 ec a0 04 92 d2 78 4b 0d b8 62 a8 c8 46 d6 42 da 29 a8 38 b7 bb fd 04 e8 7b 64 e6 be 25 fd 5b e6 73 7e 11 f1 e7 f6 17 8b ec b5 6d 62 e9 63 d3 b5 bb e3 a7 6a f0 c4 97 10 41 6f 34 4c 2d ed ee 2d a5 e6 33 14 a9 2c 12 ac 8b c6 59 c6 00 cd 65 8b 82 ad 3f 68 b6 f9 ec 10 6e 9a e5 87 43 ec 3f 1f 78 3e 2b 97 f0 df 8e 26 d4 d3 5d b1 bf d0 2d 4e a7 a8 25 bb 5a d9 6b 16 f2 ab 2c 73 b0 2a 55 24 3b 8d b4 85 8a 83 Data Ascii: C85Vf:{OO?.J4(/Lu-&v#0xPkTx+vi8/=&?66"H:zLwPCDxKbFB)8{d%[s~mbcjAo4L--3,Ye?hnC?x>+&]-N%Zk,s*U$;
2024-05-06 16:42:27 UTC	16384	IN	Data Raw: 48 39 3a 85 a0 b8 b1 88 c5 bc a5 c4 04 45 73 11 18 fe 22 37 e3 a8 de 7d ab 58 49 24 91 9b bd ec 41 e1 88 9f 47 b2 bd 4b 8b 58 6c ec 35 7d 7a ce 1d 3d 91 59 57 ce 48 6f a4 c3 3f 69 09 47 40 79 dd 95 1d 07 1d 38 a5 2c 4d 0f 69 16 e5 28 ef 7f d0 b5 55 39 a8 3d d2 ff 00 23 ea 39 3c 3d 69 e3 9f 85 ba 26 83 67 ae 49 36 bf a5 3d ce a1 e1 b6 62 4c 8d 82 24 9a cd 48 19 07 ca 93 0c 8c 3e 75 80 b0 ce 4d 79 11 ab 05 2e 4a 91 de e6 f1 4a 33 72 5d 7f ab 9e 39 69 ad dc c5 79 6f 7b 76 00 d5 ec 34 28 ee 35 1d 28 62 29 a7 86 d4 9b 5b 89 60 1d 4c 90 98 51 9e 3e 5b 6b e4 06 00 d1 57 09 1a d0 72 85 da db fa f3 d0 d9 55 94 25 75 b5 cf d4 df d8 fb f6 8d d2 b4 4b f8 ec 7c 45 73 21 d2 7c 4b 68 20 b8 5b 70 06 93 aa b3 05 10 c7 28 63 84 78 9c 65 5f 21 90 16 da 48 3b 4f cc 56 a7 2a Data Ascii: H9:Es"7}XI$AGKXl5}z=YWHo?iG@y8,Mi(U9=#9<=i&gI6=bL$H>uMy.JJ3r]9iyo{v4(5(b)[`LQ>[kWrU%uK\|Es!\|Kh [p(cxe_!H;OV*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.11	49851	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:25 UTC	662	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/istock-597639502.jpg HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:26 UTC	541	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:26 GMT Content-Type: image/jpeg Content-Length: 599228 Connection: close Last-Modified: Tue, 09 Apr 2024 18:51:18 GMT ETag: 0x8DC58C60AB468D7 x-ms-request-id: 98d0793c-801e-003b-66aa-9fbd01000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164226Z-174c4b644cc75wrcuvcd0fs1yn000000025000000000r5bf Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-06 16:42:26 UTC	15843	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 20 42 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0b 00 0f 01 02 00 06 00 00 00 92 00 00 00 10 01 02 00 0e 00 00 00 98 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 a6 00 00 00 1b 01 05 00 01 00 00 00 ae 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 20 00 00 00 b6 00 00 00 32 01 02 00 14 00 00 00 d6 00 00 00 3b 01 02 00 0a 00 00 00 ea 00 00 00 98 82 02 00 0a 00 00 00 f4 00 00 00 69 87 04 00 01 00 00 00 fe 00 00 00 4c 03 00 00 43 61 6e 6f 6e 00 43 61 6e 6f 6e 20 45 4f 53 20 35 44 53 00 c0 c6 2d 00 10 27 00 00 c0 c6 2d 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 31 36 3a 30 36 3a 32 35 20 Data Ascii: JFIF,, BExifII*(1 2;iLCanonCanon EOS 5DS-'-'Adobe Photoshop CS6 (Macintosh)2016:06:25
2024-05-06 16:42:26 UTC	16384	IN	Data Raw: a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 Data Ascii: w!1AQaq"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
2024-05-06 16:42:26 UTC	16384	IN	Data Raw: ff 00 90 1e 87 68 07 00 12 a3 96 6c 7d 3a f6 e6 82 64 af 06 a3 e5 eb f7 f5 ef dc 61 51 9c 83 85 2b c1 c8 c9 cf 6c 7a f5 e6 8f 53 39 d3 b4 9b 5b 7f 5f d3 fc c1 40 05 81 c8 c3 70 15 b0 7b 67 fc ff 00 8d 26 25 14 db 4f 4d 7a 08 ca 3a 28 c1 04 03 97 ce 3d 8f f3 a6 4c e9 a7 ee ad d0 d0 bc f1 83 b7 83 ce e1 cf 34 68 42 a7 66 ad 6b af 98 cc 1e 4e 78 24 e4 93 83 9e f8 a7 a7 53 37 4f ab db 51 54 6d e7 20 e4 71 96 c2 fa 7e bc d4 95 4e f1 77 bd ff 00 22 55 c9 27 69 50 40 cf 1f c3 82 7d e8 3b 68 ca 4d a5 16 bf e1 9f f5 6f f2 3a ad 0f 55 96 ce 78 d8 ca 02 07 c9 c3 6c cf 61 d3 b7 7a 8a 90 8c a2 ee 7e a5 c1 bc 47 88 cb 71 94 e7 ed 2c 93 ef 6b f4 5d b4 ea fb 9f a7 9f b3 0f c6 88 e1 58 b4 1d 4a f1 8c 72 11 0c 2b 90 40 1c 04 00 75 0b ea 39 e7 93 ed f9 bf 11 65 52 55 3e b1 Data Ascii: hl}:daQ+lzS9[_@p{g&%OMz:(=L4hBfkNx$S7OQTm q~Nw"U'iP@};hMo:Uxlaz~Gq,k]XJr+@u9eRU>
2024-05-06 16:42:26 UTC	16384	IN	Data Raw: 9c 0a f9 ec 35 6a b8 69 2b ea 8f ab 94 69 d7 6d 48 fc b1 f1 b7 c0 7f ec bd 5e 5d 42 3b 50 d1 bb 0c 4d f7 22 8c e0 b6 cd bd 7e 52 de 83 18 6c 67 1c fd 96 0f 3b 55 69 fb 26 ec cf 32 ae 41 08 d4 55 e2 af e6 78 87 c4 0f 0b c7 a0 e9 a8 c8 24 8b cb dc 3c a7 95 24 94 60 90 0e 33 f7 7d 31 d3 b8 3d 6b dc c0 62 7d b5 43 93 1f 82 58 7c 37 32 5b 7f 5f 71 c0 78 62 dd ae e3 36 ec ac 00 00 82 cb b0 b3 f2 08 38 23 82 47 23 d5 4f 4c 9a f6 1c f9 67 74 46 53 17 52 1c 8f fa fe be e3 93 f1 7f 86 45 bb b4 81 76 87 62 df 24 7b 55 b7 12 48 4f 5c 72 4f 41 cf 1c 57 b3 84 c5 29 3b 23 7c c3 2a 85 7a 7a ad 7c 97 df 6e e7 95 49 03 46 cd d8 ae 55 80 50 0a e7 f1 ef c9 e2 bd a8 4a 29 1f 9f e2 30 92 a7 51 f7 5a 3f eb cf cb a6 97 22 55 5f e1 39 c0 f9 59 b2 71 d3 9f af f8 56 a7 1b a7 14 ed Data Ascii: 5ji+imH^]B;PM"~Rlg;Ui&2AUx$<$`3}1=kb}CX\|72[_qxb68#G#OLgtFSREvb${UHO\rOAW);#\|*zz\|nIFUPJ)0QZ?"U_9YqV
2024-05-06 16:42:26 UTC	16384	IN	Data Raw: 3e 66 e1 ba 6f 7e dd ad e7 ff 00 0e 7b 8f c1 3f 17 5d f8 63 c4 36 d2 da dd 48 b2 ac 99 11 31 20 e7 7a 91 80 06 09 c0 39 07 23 02 bc 0c f7 0b 1c 4e 19 c6 48 f5 b0 15 55 38 2a 3c cd bd 6e 9e fe 5a 58 fd 61 1f b5 e6 a7 e1 6d 1a da 37 f3 8d ba c0 82 29 64 98 f9 5b 47 25 b3 b4 1c e0 be 41 3c 9e 3b 57 e6 8b 2c 9c a5 c9 17 a9 d1 3a 58 68 de 55 f6 20 f0 b7 ed b9 69 aa 6a cc f2 dd 3b 4e e0 89 09 74 84 12 02 82 0b 93 8e 33 d0 0e 42 8e 95 15 32 7c 65 19 39 c9 e8 c8 a7 1c 0e 22 3e cf 0e d3 b7 e6 7d 3b a3 ff 00 c1 49 35 4f 07 b4 36 50 e8 7a bd e6 14 98 8d bb 2d e0 b9 20 fc bc 60 64 15 00 8c 11 8f 7a e8 a7 53 1b 87 8d e9 ce cb cf 63 9b 1b c2 d9 55 78 f3 62 a2 db 7b 59 1f 41 78 43 f6 c2 f1 1f c5 29 21 17 be 1e bf b5 8e 51 bc 23 7c d8 27 23 68 1d c6 46 d3 f8 fb 57 95 8e Data Ascii: >fo~{?]c6H1 z9#NHU8*<nZXam7)d[G%A<;W,:XhU ij;Nt3B2\|e9">};I5O6Pz- `dzScUxb{YAxC)!Q#\|'#hFW
2024-05-06 16:42:26 UTC	16384	IN	Data Raw: a3 88 f7 a0 be 4a c7 f5 2f 03 f8 d5 81 c5 4e 18 7c d1 f2 55 ee ef 6b 77 6f b7 e1 7f 2b 1f a8 9f 06 bf 6e 2b 7d d6 76 da a5 c1 09 90 24 76 cb da e3 a0 6e 3a 83 ed c0 ef 5f 11 8c c8 31 b8 76 e5 4f 6e cc fd e3 0d 9b e4 99 fd 25 2a 76 95 fe d4 75 5e bf d6 c7 e9 16 8d e3 1f 86 ff 00 17 f4 55 17 ab a7 5d 49 73 1e 77 2e d6 04 95 18 24 fa 10 7a 74 fc 85 78 75 22 e2 f9 6b 46 d2 07 86 cc 32 c6 aa e0 a7 cd 4f b6 ff 00 d3 3e 02 fd a6 3f e0 9e 9e 1e f1 34 17 be 28 f0 04 50 58 ea 1b 1a 60 b0 ae db 69 b2 c7 86 41 d3 39 6e 98 e7 bf 1c fb d9 77 11 e3 32 e9 2a 78 97 cf 4b bf 54 7c a6 77 c2 1c 3d c5 ed ce a4 15 1c 67 47 6b 26 ff 00 af c5 9f 87 de 3f f8 6f e2 af 86 da e4 da 1f 89 f4 ab 9b 0b b4 2d e5 19 50 ac 77 4b bb 0a ca f8 c1 ce 07 e7 5f a2 60 b3 0c 36 3e 8f b7 c3 4d 38 Data Ascii: J/N\|Ukwo+n+}v$vn:_1vOn%vu^U]Isw.$ztxu"kF2O>?4(PX`iA9nw2xKT\|w=gGk&?o-PwK_`6>M8
2024-05-06 16:42:26 UTC	16384	IN	Data Raw: e2 64 9d 19 4c b2 c2 91 86 70 31 f3 23 9e 71 c9 27 a0 ef d0 70 6b e4 b0 31 6d fe f7 73 f5 74 a9 7b 3b d3 3e 31 f1 27 8a 7c 63 0c b6 f2 1b bb c0 b0 5c 2c 8d 11 53 6b 08 62 84 b3 2f a1 20 e4 63 3e bc 74 af a9 c2 51 a3 2b a7 d8 e2 ac e7 17 ee 9d cf c2 ef db 0b e2 1f c1 cd 42 3b cd 3f 51 b8 99 22 70 1a ce 79 d9 d0 ba 8c 8e 79 3d 4f 5f f6 b0 7a 0a f4 a3 95 46 bb 52 a4 ec d7 54 79 58 a5 86 af 4f 93 13 04 d6 da 9f b9 7f b1 97 fc 16 b7 40 f1 37 8a 74 5f 03 7c 48 d3 9f 40 9f 50 9d 2c ed f5 3b 99 d4 5a 86 6d aa ab 27 4c 16 27 03 e9 ee 2b e9 68 66 d9 96 57 18 cf 17 15 3a 6b 47 25 74 d2 ef 6e b6 dc fc bb 3c e0 ac 3e 39 4a be 53 2f 79 6b c8 f7 f9 7f 91 fd 2f 78 7f c6 7a 2f 8d 3c 3f 6f 7d 69 71 05 f5 8d fd b0 91 59 1c 3a 10 eb 90 73 ee 3f 95 7d e6 1f 19 87 c6 51 52 a5 Data Ascii: dLp1#q'pk1mst{;>1'\|c\,Skb/ c>tQ+B;?Q"pyy=O_zFRTyXO@7t_\|H@P,;Zm'L'+hfW:kG%tn<>9JS/yk/xz/<?o}iqY:s?}QR
2024-05-06 16:42:26 UTC	16384	IN	Data Raw: b0 84 60 65 55 8b 6d 28 1b 81 d7 1d 7d bb 57 ab 4f 38 ce a9 52 50 92 bc 51 e3 56 e0 bc 9e ad 57 55 4b de 7d 0f b1 7c 39 f1 a7 c2 7e 31 b2 8f 53 3a ed ac f2 5d a9 c1 59 95 d4 86 38 27 23 d0 1c 76 eb 58 47 33 a3 5e 4e 75 65 ab ee 73 62 f2 1c 46 12 4a 34 63 a2 ec 72 3f 16 7f 65 6f 02 7c 7c d1 e5 8b 54 b0 d3 6f c4 f1 79 69 3a c0 af 2a 92 32 18 37 50 46 7a fb d6 8f 2b 9d 49 2c 56 0a 5e f7 97 f5 d4 e6 a1 9d 2c 2a 78 6c 64 74 f3 3f 27 be 2b ff 00 c1 1a 74 bb a9 ee 6e 74 1d 57 50 b4 82 67 33 34 32 42 6e e0 8d 8f 1b d1 4e 0e 7a 9c 02 06 4f 43 c5 75 ff 00 6d e7 99 72 57 82 76 5e 97 5d 86 f2 fc 87 36 6f 9e 76 bf f5 72 b7 c2 8f d8 3a 3f 84 d7 b6 f1 de 5c 4b 31 b4 6c c5 2c b6 9b 24 91 88 01 c1 41 f3 00 d8 53 81 d0 b1 fc 7e 47 33 cf b1 38 da 9f bf a7 69 3d f7 3e b3 2d Data Ascii: `eUm(}WO8RPQVWUK}\|9~1S:]Y8'#vXG3^NuesbFJ4cr?eo\|\|Toyi:27PFz+I,V^,xldt?'+tntWPg342BnNzOCumrWv^]6ovr:?\K1l,$AS~G38i=>-
2024-05-06 16:42:26 UTC	16384	IN	Data Raw: fe 26 fd 80 ff 00 6a 2f 0a 5c c5 a7 df 7c 38 d4 75 0d 56 48 4b cd a7 68 72 ae af 2d 89 cf 31 cd 2a e1 15 80 0a c7 0c 40 dc 39 ae ba 3c 63 c3 d5 9c af 5f 93 95 db df 4e 37 f3 b6 ff 00 82 31 5c 1d 8f 74 15 5a 55 61 2b f4 4f f5 76 3e 5e f1 67 82 7c 57 e0 6d 52 e3 45 f1 7e 81 a9 68 1a a5 b4 8f 04 b6 97 f0 18 f6 3a 1c 32 ee fb a4 a9 04 1c 1a f7 b0 b8 bc 36 36 92 c4 61 66 a7 07 ad d7 f5 a1 e2 e3 f2 8c 7e 5d 2b 63 e9 b8 df 67 a3 8f de b4 d3 b1 cb 72 49 23 77 24 92 4f d7 3f a5 74 1e 6b 5a b6 93 fe bf af b8 40 0f a8 e0 93 e8 47 e3 40 a2 9a 5a 3d af fd 7a 0b ca 83 8e 48 3b 57 a7 cc 4f b1 fc 28 1d 9c 53 fe bf 0f f2 24 52 d9 c0 e7 f8 8f 03 9f 7f f3 e9 41 d1 09 4d bb 47 c9 ff 00 5b 09 92 17 3c 81 fc 20 63 77 e2 3b 50 6b 19 c9 42 ff 00 f0 fe 64 b1 b3 ab 7d e2 18 f0 09 Data Ascii: &j/\\|8uVHKhr-1*@9<c_N71\tZUa+Ov>^g\|WmRE~h:266af~]+cgrI#w$O?tkZ@G@Z=zH;WO(S$RAMG[< cw;PkBd}
2024-05-06 16:42:26 UTC	16384	IN	Data Raw: 41 43 eb bc 39 25 4f 57 0b df f3 3f a1 4f 16 f8 a2 04 db b2 5f 94 80 54 6e 18 6e 83 39 fc ff 00 2a e6 cc b3 28 a7 ee b3 a3 2c cb 27 2d d1 99 a6 ea 11 dd 44 64 38 1f 2e 32 b9 18 cf e1 8c 9a c2 85 65 52 37 66 f8 8c 3b a5 3e 54 6e da c8 a0 ab 20 ce e6 ce e1 d0 9e e7 f3 ae da 6d 6c 8e 19 c7 a4 8e bb 4f 98 64 06 fa 83 9c 03 ed fc eb ba 9b 49 6a cf 3e b4 1e f1 3d 4b 40 bf 58 d9 18 90 30 de bb bf 0a f5 28 ca ce e7 99 56 9e e8 a3 f1 ab 48 b5 f1 4f c3 ed 5a c2 e1 16 64 b9 b2 92 16 0c 01 04 32 30 20 e7 8e e7 35 c9 9e d0 58 bc b2 a5 27 d8 ee e1 ba f2 c0 e6 d4 ea 47 4d 4f f3 9a fd a8 bc 06 bf 0c 7e 3f 7c 49 f0 88 88 5b db d9 f8 96 e6 e2 cd 19 59 63 10 4f 29 95 00 c8 ce 00 63 9e 7a fd 2b 7c 8f 14 f1 99 55 1a d2 7e f5 ac fd 63 a3 fc 8f ea ec 4e 26 8c ab d2 ae bf e5 e4 Data Ascii: AC9%OW?O_Tnn9*(,'-Dd8.2eR7f;>Tn mlOdIj>=K@X0(VHOZd20 5X'GMO~?\|I[YcO)cz+\|U~cN&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.11	49852	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:25 UTC	437	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/favicon.ico?v=014020240840136914499 HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:26 UTC	542	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:26 GMT Content-Type: image/x-icon Content-Length: 15406 Connection: close Last-Modified: Fri, 08 Sep 2023 11:42:02 GMT ETag: 0x8DBB0609E9CFE20 x-ms-request-id: e33127e2-501e-0028-07d4-9f990d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164226Z-174c4b644cc2jftdzntyz37er000000002e000000000swch Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-06 16:42:26 UTC	15406	IN	Data Raw: 00 00 01 00 03 00 10 10 00 00 01 00 20 00 68 04 00 00 36 00 00 00 20 20 00 00 01 00 20 00 28 11 00 00 9e 04 00 00 30 30 00 00 01 00 20 00 68 26 00 00 c6 15 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cd ba b8 f0 e3 d8 d7 f9 e3 d8 d7 f9 e3 d8 d7 f9 e3 d8 d7 f9 e3 d8 d7 f9 e3 d8 d7 f9 e3 d8 d7 f9 e3 d8 d7 f9 e3 d8 d7 f9 e3 d8 d7 f9 e3 d8 d7 f9 e3 d8 d7 f9 e3 d8 d7 f9 e3 d8 d7 f9 cc b9 b6 e8 e3 d9 d8 f6 e4 d9 d9 ff c1 a9 a7 ff c1 a9 a7 ff c1 a9 a7 ff c1 a9 a7 ff c1 a9 a7 ff c1 a9 a7 ff c1 a9 a7 ff c1 a9 a7 ff c1 a9 a7 ff c1 a9 a7 ff c1 a9 a7 ff c1 a9 a7 ff e6 dd dc ff e2 d6 d5 ee e3 d9 d8 f6 ba a0 9e ff 63 27 21 ff 63 27 21 ff 63 27 21 ff 63 27 21 ff 63 27 21 ff 63 27 21 ff 63 Data Ascii: h6 (00 h&( c'!c'!c'!c'!c'!c'!c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.11	49856	89.187.173.14	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:26 UTC	367	OUT	GET /widgetapp/images/spin_wh.svg HTTP/1.1 Host: cdn.userway.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:26 UTC	997	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:26 GMT Content-Type: image/svg+xml Content-Length: 1977 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD, PUT, POST, DELETE Access-Control-Expose-Headers: Content-Range, Content-Length, ETag, Content-Type Access-Control-Max-Age: 3000 Last-Modified: Fri, 22 Mar 2024 12:49:37 GMT ETag: "8e0a35946bf39d10f46a1f1653366a0a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25920000, public Vary: Accept-Encoding Via: 1.1 16af463a01c5a83f3019835cbbb82152.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: wZi_yifg8O8pnuzVWaqq6E03S9nFeR2OreeYwpJLJ0cBLq5DOGeHVw== Age: 741 X-77-NZT: EgwBWbutCgH3xwYIAAwBnJI73wH3Jx0AAA X-77-NZT-Ray: 596cea2e0b34003c72083966d9d7f314 X-Accel-Expires: @1740400260 X-Accel-Date: 1714487723 X-77-Cache: HIT X-77-Age: 526023 Server: CDN77-Turbo X-Cache: HIT X-Age: 526023 X-77-POP: miamiUSFL Accept-Ranges: bytes
2024-05-06 16:42:26 UTC	1977	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 77 69 64 74 68 3d 22 34 30 22 0a 20 20 20 20 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3a 63 63 3d 22 68 74 74 70 3a 2f 2f 63 72 65 61 74 69 76 65 63 6f 6d 6d 6f 6e 73 2e 6f 72 67 2f 6e 73 23 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><svg xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns="http://www.w3.org/2000/svg" height="40" width="40" version="1.1" xmlns:cc="http://creativecommons.org/ns#" xmlns:dc="http://pur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.11	49854	89.187.173.14	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:26 UTC	367	OUT	GET /widgetapp/images/body_wh.svg HTTP/1.1 Host: cdn.userway.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:26 UTC	987	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:26 GMT Content-Type: image/svg+xml Content-Length: 4561 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD, PUT, POST, DELETE Access-Control-Expose-Headers: Content-Range, Content-Length, ETag, Content-Type Access-Control-Max-Age: 3000 Last-Modified: Fri, 22 Mar 2024 12:49:37 GMT ETag: "1d8b1582fe82bd329041cc1982ad42e4" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25920000, public Vary: Accept-Encoding Via: 1.1 100ce1d37f67e6c59753cd4c9c473afc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: whl_QDbHhLU_AGWHR1ydlBKfMnwrieip9mFcz6SrS8yom4sxdVco7w== X-77-NZT: EgwBWbutCgH3bvgHAAwBnJI73wH3gCsAAA X-77-NZT-Ray: 596cea2ef72ff53b720839665156fb14 X-Accel-Expires: @1740400260 X-Accel-Date: 1714491396 X-77-Cache: HIT X-77-Age: 522350 Server: CDN77-Turbo X-Cache: HIT X-Age: 522350 X-77-POP: miamiUSFL Accept-Ranges: bytes
2024-05-06 16:42:26 UTC	4561	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 36 30 70 78 22 20 68 65 69 67 68 74 3d 22 36 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 30 20 36 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 6d 61 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 44 72 61 77 65 72 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="60px" height="60px" viewBox="0 0 60 60" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>man</title> <g id="Drawer" stroke="none" stroke-width="1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.11	49853	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:26 UTC	663	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/istock-1350660376.jpg HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:26 UTC	521	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:26 GMT Content-Type: image/jpeg Content-Length: 766208 Connection: close Last-Modified: Tue, 09 Apr 2024 18:44:28 GMT ETag: 0x8DC58C51658EAEB x-ms-request-id: 5b80b691-001e-0035-7ed4-9f94b1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164226Z-174c4b644cch57xx1kbpmuwk40000000011000000001fhuv Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-06 16:42:26 UTC	15863	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 57 3f 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0a 00 0e 01 02 00 c1 00 00 00 86 00 00 00 0f 01 02 00 05 00 00 00 48 01 00 00 10 01 02 00 09 00 00 00 4e 01 00 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 58 01 00 00 1b 01 05 00 01 00 00 00 60 01 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 31 00 00 00 68 01 00 00 32 01 02 00 14 00 00 00 9a 01 00 00 69 87 04 00 01 00 00 00 ae 01 00 00 68 04 00 00 48 61 70 70 79 20 70 65 6f 70 6c 65 20 64 72 69 6e 6b 69 6e 67 20 62 65 65 72 20 61 74 20 62 72 65 77 65 72 79 20 62 61 72 20 6f 75 74 20 64 6f 6f 72 73 20 2d 20 4d 75 6c 74 69 63 75 6c 74 75 72 61 6c 20 6c 69 66 65 20 73 74 79 6c 65 20 63 6f 6e 63 65 70 74 20 77 69 74 68 Data Ascii: JFIF,,W?ExifII*HNX`(11h2ihHappy people drinking beer at brewery bar out doors - Multicultural life style concept with
2024-05-06 16:42:26 UTC	16384	IN	Data Raw: 92 ca 04 df 9a 44 ee 1e 66 76 fe 5a 2a e3 4a 25 65 ec 96 b7 be 59 d0 34 91 e5 48 24 13 ea d2 c0 de aa 27 c5 4a ae ef 23 76 ae 0a 66 f1 bf cd df ca bb 3d 2e ea f3 5b d3 2d d2 46 a2 ce f0 74 f4 e9 49 15 d6 9d 9d 83 ab 61 bb d8 b0 31 af 50 1b 8f f7 a9 26 a7 7b a0 79 8f cc 16 ba ac 56 d1 dc db c1 68 2d ed ad a4 42 56 a1 43 54 a8 fe 7a 7f c0 e6 1e 8b 04 b1 44 89 75 2e c3 b4 35 30 cd 20 63 b8 01 1f e4 ff 00 cb 59 5f 57 9f 55 b9 70 2c 66 49 21 b5 b0 1c 88 15 40 54 33 6d 5f 4d c7 a7 ff 00 3d 33 3b 6a 75 d4 6d 8d de bd bb 79 2e e3 4a 72 b3 cf a5 6a 2f 69 64 a5 79 15 88 ba bc 0a bb 7f 23 f1 c9 75 60 7e 9a 64 bf 9a de 54 d6 7c d3 60 35 6f 80 47 65 0a 43 0d a9 66 59 11 e2 40 ae d4 e4 63 70 cf f0 f1 28 8e bf cf 82 32 a2 ca 71 e2 0f 9f 68 c0 95 60 55 81 a3 29 14 20 8d Data Ascii: DfvZ*J%eY4H$'J#vf=.[-FtIa1P&{yVh-BVCTzDu.50 cY_WUp,fI!@T3m_M=3;jumy.Jrj/idy#u`~dT\|`5oGeCfY@cp(2qh`U)
2024-05-06 16:42:27 UTC	16384	IN	Data Raw: 00 1d 68 ab c4 b9 86 61 4e 95 18 3b 52 87 4d 93 f9 3f f8 24 50 e0 dc 16 06 a5 5a f3 57 a9 3e bd 57 cf f4 56 ec 7c 0b fb 42 fe c4 7a f7 86 a5 bc 92 09 c5 f8 92 76 9c c3 67 2c 6e 48 3b b6 9f 25 48 0b 86 38 da df 4f af e9 b9 07 88 d4 30 f5 23 47 17 15 16 95 ba fe 7b ec 8f ce 78 af c2 ca d5 29 3c 46 12 6e 57 77 69 25 bf a6 db b3 e3 3d 1e c7 51 f8 43 ae 8b c3 19 b7 f1 02 34 70 d9 46 f7 a6 5b e5 31 c8 a5 52 50 8d 88 e3 25 77 64 11 22 1c 30 2b b4 63 ef ea e3 e8 71 2e 11 c2 9c af 47 56 da 56 5a ad d3 6b 56 b6 ea 9e da dc fc ba 8e 57 88 e1 bc 53 95 48 da b6 89 2b de 5a 3d 9a 4f 44 f7 e8 d6 fd 0f d5 bf 1f 7e d8 9f f0 be f4 5f 82 7a f5 c2 eb fe 20 d5 fe 03 df f8 63 c5 2d 26 95 a8 cb 6f a8 6a 10 6a 77 49 a1 5e d8 5f 34 5f 34 f1 5c 79 d0 ca 53 f8 fe cb 92 0e ec 57 c6 Data Ascii: haN;RM?$PZW>WV\|Bzvg,nH;%H8O0#G{x)<FnWwi%=QC4pF[1RP%wd"0+cq.GVVZkVWSH+Z=OD~_z c-&ojjwI^_4_4\ySW
2024-05-06 16:42:27 UTC	16384	IN	Data Raw: c9 ab 12 c9 e2 45 97 39 90 e3 ef 65 5b 3f af 7a cf 91 a3 7f 6c 9e 97 31 6f 75 38 e6 47 01 87 27 27 9f d0 fe b4 45 49 3b 98 54 6a 67 9c eb 72 5b ec 6d d8 24 b6 78 03 8e 3b 7e 46 bb a9 c8 f3 eb d3 8d b5 47 cf be 2e b9 8d 52 45 8c a8 4d ed 86 27 07 d8 fb f7 af 57 0b 36 a4 7c 6e 69 4d 72 b4 8f 9a 7c 45 7a 24 79 37 b0 ce f1 c8 21 b0 3d 7f cf ad 7d 7e 12 56 49 a3 f3 bc c2 2a 52 6a 5d cf 9f fc 4f 74 a0 4a b9 1c b6 15 07 18 eb d7 f5 e7 de be ab 06 db 4a 47 c3 e3 e2 95 d2 3e 69 f1 25 ce 66 98 13 95 03 82 c3 25 bd 79 fc 39 fa d7 d9 60 9f b8 9a 3f 3e cc a3 ef cb b1 e3 7a 8d d2 ee 38 24 7c c4 e3 d2 be 8a 95 dc 6e 8f 85 c4 2b 4c e7 2e 2e fa f3 ef 5a ab 25 a9 ce e3 76 64 cd 74 49 5c f0 33 9c e7 8c f5 ac e7 25 6d 0e 9a 30 69 db a1 a5 a6 5c ee 91 4f 51 bb fb bc 7d 7f 0a Data Ascii: E9e[?zl1ou8G''EI;Tjgr[m$x;~FG.REM'W6\|niMr\|Ez$y7!=}~VI*Rj]OtJJG>i%f%y9`?>z8$\|n+L..Z%vdtI\3%m0i\OQ}
2024-05-06 16:42:27 UTC	16384	IN	Data Raw: 39 90 aa ed 01 17 e5 dd 21 07 6a be 32 71 83 cf 6a f4 23 53 dd 48 f3 6a d0 53 7a 3f f8 1a 19 77 32 99 01 56 70 ce e0 64 a8 cf 6c 1e 3b 70 28 9d 4b c5 5f 73 92 86 05 46 a3 5a bf cb fe 0f e9 df a9 8a 2e ee 2c 6e 56 7b 79 0a 3c 6c 59 19 72 84 60 8e 9d fd 7d 6b ca af 69 a6 97 53 e9 30 91 95 3e 54 bf e0 fd e7 d0 1f 0e ff 00 69 6f 13 f8 0a 64 0b 2c b2 c2 8c a4 a4 72 79 68 e1 4e 42 90 78 c6 78 20 0f e9 5f 1f 9b f0 ce 1b 32 5a 3e 57 df 73 ed 32 9c fb 13 80 92 e5 bb 5e bd 8f ad b4 8f f8 28 53 db d9 fe f0 cd 6f 70 ab b5 a3 40 27 60 42 8c b2 e4 63 92 4f 00 80 32 7b 60 57 c5 d4 f0 dd 54 9e b2 4d 77 db fe 09 f5 ab 8f dd 28 a5 28 bb 9c f6 b1 ff 00 05 18 f1 49 dc da 74 97 b2 21 dd 1c 68 f2 61 54 9e fd 47 20 f7 e9 9e dd 45 6f 4b c3 2c 23 6b da 49 5b ca ff 00 d7 f5 b9 c1 Data Ascii: 9!j2qj#SHjSz?w2Vpdl;p(K_sFZ.,nV{y<lYr`}kiS0>Tiod,ryhNBxx _2Z>Ws2^(Sop@'`BcO2{`WTMw((It!haTG EoK,#kI[
2024-05-06 16:42:27 UTC	16384	IN	Data Raw: c0 81 b9 b2 72 38 cf a7 af e9 5c f5 1a dd 6a 75 53 bc 75 7f d7 f9 1c d6 a2 8a 02 38 52 01 6c 00 a3 04 8c 67 93 9e 71 fd 6b cb ad 66 db 47 a7 42 77 56 66 40 48 c8 3b d3 8d e7 23 f8 30 70 33 fe 7a 66 b9 d7 2d b5 36 ba 6f c8 96 28 50 b2 32 67 18 18 2b d5 7e a3 fc 2b 58 a4 b6 39 aa b9 3d 2f fd 79 1a b6 d1 2a b0 70 09 39 38 dc 72 39 07 db d3 d7 d6 bb a8 ab ae 64 78 18 cf 71 be 76 d2 d3 ef fe bf 12 fa aa 94 56 43 2b af dc 75 ea 33 8e de df 98 1e f5 d6 b7 3c 6a 92 e5 bc 74 ba fb f7 eb e7 f8 f7 2e 08 d8 70 8a cb 85 11 83 8d c5 89 24 6d 1d 79 c1 1f 5c 71 52 dd d1 50 b4 6a f3 4b bf 6b 6b fd 7f 56 2e a4 22 26 72 ea 19 94 b2 06 04 86 8c 8e 38 fa 77 ae 79 a4 ee d9 f4 98 49 42 9d 08 5b 5b 5a ed ab 6f be fd d9 69 51 62 52 b2 ec 42 c0 82 42 99 32 30 32 73 db af d6 b8 6a Data Ascii: r8\juSu8RlgqkfGBwVf@H;#0p3zf-6o(P2g+~+X9=/y*p98r9dxqvVC+u3<jt.p$my\qRPjKkkV."&r8wyIB[[ZoiQbRBB202sj
2024-05-06 16:42:27 UTC	16384	IN	Data Raw: 3b 70 2b 78 56 96 88 e0 9d 24 9b 4f 7f f8 63 0a 5d 6a 43 cf 99 b8 ee dd d7 b0 e0 0c 7a e3 1c fb d6 8a bb d9 a3 37 43 43 2a 7d 50 f4 de 40 04 95 db c0 5e 99 c7 61 57 ce 9e 89 94 a8 c9 a1 d1 ea 2f f2 15 65 5c 91 83 9c f4 e9 c7 f5 a0 b8 fb 48 3d 0f ef 83 fe 08 df f1 17 c3 be 21 ff 00 82 7e fe cf ba 56 9d f1 0b 4a f1 27 88 3c 09 a1 df 68 9a a9 f0 0f 86 f5 1f 0d 5e f8 39 20 d4 ae 6e e1 d0 b5 96 67 96 0b 8b fb 41 3b 3b dd 46 b6 ff 00 69 8e e6 02 91 bb 17 91 bf 07 e3 fa 72 86 71 39 b8 b4 9a 4d 5f ee ba eb e5 d7 ab d0 fe a9 f0 ce 51 9f 0d 51 49 a6 d5 d6 9d ee f4 7e 7a df 6d 9a df 73 f6 13 c4 1a 87 88 af 2c 96 18 e7 9e d7 4f b7 36 c6 f3 59 bb 85 75 19 22 b9 9e 45 92 1f b4 d9 dc 42 ae 70 a5 8a c0 e1 f1 bb e5 5c f3 5f 9d 57 94 9a 77 d8 fd 27 0d 0a 49 a7 f6 ba 2f 2f Data Ascii: ;p+xV$Oc]jCz7CC*}P@^aW/e\H=!~VJ'<h^9 ngA;;Firq9M_QQI~zms,O6Yu"EBp\_Ww'I//
2024-05-06 16:42:27 UTC	16384	IN	Data Raw: 70 31 f8 8e 2b 78 e5 f4 9b d1 0b da b5 b1 48 fc 63 f1 21 62 c2 e6 51 d0 03 bf 91 c7 4f d2 b5 fe cf a0 4a a9 24 db 47 ef 8c 7a db b6 d1 e6 0e 3a 7c dd 6b f6 9f 64 92 ba ea 7f 21 47 13 26 f4 35 2d f5 96 62 3e 6c 02 47 20 e3 81 43 a4 6b 1c 4e d7 5f 89 e8 9a 0e a2 cf 24 4c 0e e0 d8 62 18 6e 2c 07 f9 15 c5 5a 2a ce 28 f4 f0 b3 6e 6a c7 ba 68 d3 13 09 2a d8 f9 7a 93 d3 ae 7f 4a f0 ab 3f 7b 53 e9 e8 41 f2 3e e6 85 cd f6 c4 63 cf c8 00 1c 64 76 ed f5 cd 63 05 ef 24 2a ae c7 09 aa 6b 0c 1d 80 70 32 4e 49 f6 ff 00 22 bd ac 25 34 e2 ae 8f 03 30 c4 38 ca d7 39 f4 d6 26 70 c0 48 30 e7 71 2b f7 40 f6 ae d5 49 29 5c f2 96 21 be a6 8d be b3 3c 64 31 90 92 3d 4f 0b 9e 87 34 3a 31 96 85 2c 44 e0 ef 73 56 3f 10 b4 58 0f 22 b6 39 2a 0e 03 64 e6 92 c3 46 5b 0d e3 5c 25 ab 2e Data Ascii: p1+xHc!bQOJ$Gz:\|kd!G&5-b>lG CkN_$Lbn,Z(njhzJ?{SA>cdvc$kp2NI"%4089&pH0q+@I)\!<d1=O4:1,DsV?X"9dF[\%.
2024-05-06 16:42:27 UTC	16384	IN	Data Raw: 98 93 ca 28 0e 40 27 9c ed 18 39 db ff 00 ea e9 c2 2c 46 2e 7c b4 d6 db ff 00 99 f9 47 11 67 18 3c be 1c d2 7f bc 6f ae bf d3 3b f9 f4 43 a3 59 cd a5 d8 f9 7b e7 87 ec f3 ca 66 60 46 41 fe 2c 64 0f 9b 3c 1e c6 b3 c7 46 54 5f b1 a6 f5 ea 7c ed 2c c5 63 eb 47 17 88 bd a2 ee 95 bf ab 9e 5e fe 19 d3 f4 cf b5 dc 5d dc 2d eb b4 86 59 e7 61 b5 19 81 23 66 0f 6e 3b 7a 66 be 6a 38 5a 70 94 9d 47 7e e7 d1 7d 7a b6 25 af 65 1e 55 d1 79 77 3e 70 f8 a7 f1 63 c2 be 15 b7 ba ff 00 4c b4 89 ed e3 25 bf 7a a2 3b 45 04 64 fb 01 c7 5a e3 ad 5e 10 4f 90 f7 f2 fc be b5 47 cf 55 d9 77 67 f3 f1 fb 78 ff 00 c1 4b 74 6f 87 ba 4d fe 85 f0 fa ec 6b fe 36 91 24 3f 63 86 65 8a d7 49 88 0c c9 75 7b 21 c8 8d 54 12 40 61 9e 33 ed 5f 45 c2 7c 1d 8e e2 9c 4a ad 5d ba 78 44 ec e4 d6 b2 7d Data Ascii: (@'9,F.\|Gg<o;CY{f`FA,d<FT_\|,cG^]-Ya#fn;zfj8ZpG~}z%eUyw>pcL%z;EdZ^OGUwgxKtoMk6$?ceIu{!T@a3_E\|J]xD}
2024-05-06 16:42:27 UTC	16384	IN	Data Raw: 30 46 71 de 97 23 b6 a1 1d 34 3d 1f 47 bf c2 8f 6c 13 ce 09 f4 ae 4c 4d 34 df ba 7a 38 6a ae 2e cb a1 d8 47 a9 b3 c7 8c e5 b1 9d bd 09 ef 8a e1 74 92 f8 4f 5a 15 a7 64 67 cf 3b 97 63 9c 8e 9c 77 cf 3d ab 48 45 2d ff 00 ab 18 54 6e 72 e6 91 5d 25 23 39 38 03 b8 f4 ed 5d 2b 55 73 9e 50 bb 1e 64 0c 08 e0 8c 70 4f 51 de ad 54 67 3c a8 c6 4f 52 01 19 2e a7 27 81 cb 63 3f 4a d5 56 b2 ba 39 5e 17 5b 1d 1e 9b 71 e4 90 0e 46 00 c1 e8 06 3b 56 72 9b 91 d1 0a 2a 2a cc ee ec f5 a2 8a ab b9 43 29 dd c1 c6 30 31 d7 de b2 51 72 5a b2 da 51 d0 d4 8f 5b 7c 81 bc 6c da 4b 00 72 06 7f 5f ce 93 82 b6 84 f3 32 b4 fa d3 b8 3f 39 54 50 43 65 b9 39 c7 5a 6a 29 31 fb dd 8c 2b bd 50 b8 24 3e 58 0e 76 74 18 3c 62 b5 8a b3 b2 22 4d 34 67 7d b3 0e a1 9b 0d 9c 90 58 80 3f fa e6 b4 77 Data Ascii: 0Fq#4=GlLM4z8j.GtOZdg;cw=HE-Tnr]%#98]+UsPdpOQTg<OR.'c?JV9^[qF;Vr**C)01QrZQ[\|lKr_2?9TPCe9Zj)1+P$>Xvt<b"M4g}X?w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.11	49857	89.187.173.22	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:26 UTC	843	OUT	OPTIONS /api/img-dscr/v2/D0JSP1avgg/3527403/RLqwMG7OTpTSzPtD/alts.json?dto=%7B%22sorted%22%3A%5B%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Flogo.webp%22%2C%22alt%22%3A%22RMS%20Hospitality%20Group%22%2C%22dir%22%3A%22RO%22%7D%5D%2C%22tier%22%3A%22FREE_QUOTA_TIER%22%7D HTTP/1.1 Host: cdn77.api.userway.org Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://www.rmshg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:27 UTC	593	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:27 GMT Transfer-Encoding: chunked Connection: close X-Service-Version: img-dscr-srv-727604a1 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD, PUT, PATCH, POST, DELETE Access-Control-Allow-Headers: * Access-Control-Expose-Headers: Content-Range, Content-Length, ETag, Content-Type Access-Control-Max-Age: 3000 Cache-Control: max-age=604800 X-77-NZT: EggBWbutFQAACAGckjviAAA X-77-NZT-Ray: 256bf619ecbdfa2173083966d05c5006 X-77-Cache: MISS Server: CDN77-Turbo Alt-Svc: h3=":443"; ma=86400 X-77-POP: miamiUSFL
2024-05-06 16:42:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.11	49859	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:27 UTC	638	OUT	GET / HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:27 UTC	993	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding,Cookie Link: <https://fortis-site.com/wp-json/>; rel="https://api.w.org/" Link: <https://fortis-site.com/wp-json/wp/v2/pages/2347>; rel="alternate"; type="application/json" Link: <https://fortis-site.com/>; rel=shortlink X-Powered-By: WP Engine X-Cacheable: SHORT Cache-Control: max-age=600, must-revalidate X-Cache: HIT: 2 X-Cache-Group: normal CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e6AwMdj5efntk6fGdmZo6kQezsFfpZ4htZCwOwylPJUjffwvjzjtsbFcQq53JMwI9OLX%2BgdxawHfOpHtoj3505JJd8OvWd0qxZE3RJ4cY2RcUQl0fWhV1CdicCZE3zBxBhc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c7329e08750-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:27 UTC	376	IN	Data Raw: 37 62 64 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 37 29 20 7c 20 21 28 49 45 20 38 29 20 20 5d 3e 3c 21 2d 2d 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 0a 3c 6d 65 Data Ascii: 7bd0<!DOCTYPE html>...[if IE 7]><html class="ie ie7" lang="en-US"><![endif]-->...[if IE 8]><html class="ie ie8" lang="en-US"><![endif]-->...[if !(IE 7) \| !(IE 8) ]>...><html lang="en-US">...<![endif]--><head><meta charset="UTF-8"><me
2024-05-06 16:42:27 UTC	1369	IN	Data Raw: 6c 6c 6f 77 2c 20 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 2c 20 6d 61 78 2d 73 6e 69 70 70 65 74 3a 2d 31 2c 20 6d 61 78 2d 76 69 64 65 6f 2d 70 72 65 76 69 65 77 3a 2d 31 22 20 2f 3e 0a 0a 3c 74 69 74 6c 65 3e 46 6f 72 74 69 73 20 53 69 74 65 20 49 6e 73 70 65 63 74 69 6f 6e 73 20 2d 20 4c 6f 73 73 20 43 6f 6e 74 72 6f 6c 20 26 61 6d 70 3b 20 52 69 73 6b 20 4d 61 6e 61 67 65 6d 65 6e 74 20 43 6f 6e 73 75 6c 74 69 6e 67 3c 2f 74 69 74 6c 65 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4f 70 65 6e 25 32 30 53 61 6e 73 25 33 41 33 30 30 25 32 43 72 65 67 75 6c 61 72 25 32 43 69 74 61 Data Ascii: llow, max-image-preview:large, max-snippet:-1, max-video-preview:-1" /><title>Fortis Site Inspections - Loss Control & Risk Management Consulting</title><link rel="stylesheet" href="//fonts.googleapis.com/css?family=Open%20Sans%3A300%2Cregular%2Cita
2024-05-06 16:42:27 UTC	1369	IN	Data Raw: 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 72 74 69 73 2d 73 69 74 65 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 31 38 2f 31 30 2f 68 6f 6d 65 32 2e 6a 70 67 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 3a 77 69 64 74 68 22 20 63 6f 6e 74 65 6e 74 3d 22 31 32 30 30 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 3a 68 65 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 36 33 30 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 63 61 72 64 22 20 63 6f 6e 74 65 6e 74 3d 22 73 75 6d 6d 61 72 79 5f 6c 61 72 67 65 5f 69 6d 61 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 6c Data Ascii: content="https://fortis-site.com/wp-content/uploads/2018/10/home2.jpg" /><meta property="og:image:width" content="1200" /><meta property="og:image:height" content="630" /><meta name="twitter:card" content="summary_large_image" /><meta name="twitter:l
2024-05-06 16:42:27 UTC	1369	IN	Data Raw: 73 68 65 64 22 3a 22 32 30 31 38 2d 30 31 2d 30 32 54 30 34 3a 33 32 3a 34 35 2b 30 30 3a 30 30 22 2c 22 64 61 74 65 4d 6f 64 69 66 69 65 64 22 3a 22 32 30 31 38 2d 31 30 2d 31 32 54 30 31 3a 34 31 3a 30 31 2b 30 30 3a 30 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 46 6f 72 74 69 73 20 53 69 74 65 20 49 6e 73 70 65 63 74 69 6f 6e 73 20 70 72 6f 76 69 64 65 73 20 6c 6f 73 73 20 63 6f 6e 74 72 6f 6c 20 61 6e 64 20 72 69 73 6b 20 6d 61 6e 61 67 65 6d 65 6e 74 20 63 6f 6e 73 75 6c 74 69 6e 67 20 73 6f 6c 75 74 69 6f 6e 73 20 66 6f 72 20 69 6e 73 75 72 65 72 73 20 61 6e 64 20 74 68 6f 73 65 20 69 6e 20 74 68 65 20 70 72 69 76 61 74 65 20 73 65 63 74 6f 72 20 61 63 72 6f 73 73 20 74 68 65 20 55 2e 53 2e 22 2c 22 62 72 65 61 64 63 72 75 6d 62 22 3a 7b Data Ascii: shed":"2018-01-02T04:32:45+00:00","dateModified":"2018-10-12T01:41:01+00:00","description":"Fortis Site Inspections provides loss control and risk management consulting solutions for insurers and those in the private sector across the U.S.","breadcrumb":{
2024-05-06 16:42:27 UTC	1369	IN	Data Raw: 20 6f 70 74 65 64 20 6f 75 74 20 75 73 65 72 73 20 2a 2f 0a 09 09 09 09 66 75 6e 63 74 69 6f 6e 20 5f 5f 67 74 61 67 54 72 61 63 6b 65 72 49 73 4f 70 74 65 64 4f 75 74 28 29 20 7b 0a 09 09 09 09 09 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 69 6e 64 65 78 4f 66 28 20 64 69 73 61 62 6c 65 53 74 72 20 2b 20 27 3d 74 72 75 65 27 20 29 20 3e 20 2d 20 31 3b 0a 09 09 09 09 7d 0a 0a 09 09 09 09 2f 2a 20 44 69 73 61 62 6c 65 20 74 72 61 63 6b 69 6e 67 20 69 66 20 74 68 65 20 6f 70 74 2d 6f 75 74 20 63 6f 6f 6b 69 65 20 65 78 69 73 74 73 2e 20 2a 2f 0a 09 09 09 09 69 66 20 28 20 5f 5f 67 74 61 67 54 72 61 63 6b 65 72 49 73 4f 70 74 65 64 4f 75 74 28 29 20 29 20 7b 0a 09 09 09 09 09 77 69 6e 64 6f 77 5b 64 69 73 61 62 6c 65 53 74 72 5d 20 Data Ascii: opted out users /function __gtagTrackerIsOptedOut() {return document.cookie.indexOf( disableStr + '=true' ) > - 1;}/ Disable tracking if the opt-out cookie exists. */if ( __gtagTrackerIsOptedOut() ) {window[disableStr]
2024-05-06 16:42:27 UTC	1369	IN	Data Raw: 61 63 6b 65 72 2e 70 72 6f 74 6f 74 79 70 65 3b 0a 09 09 09 09 09 09 09 70 2e 67 65 74 20 3d 20 6e 6f 6f 70 66 6e 3b 0a 09 09 09 09 09 09 09 70 2e 73 65 74 20 3d 20 6e 6f 6f 70 66 6e 3b 0a 09 09 09 09 09 09 09 70 2e 73 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 7b 0a 09 09 09 09 09 09 09 09 76 61 72 20 61 72 67 73 20 3d 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3b 0a 09 09 09 09 09 09 09 09 61 72 67 73 2e 75 6e 73 68 69 66 74 28 20 27 73 65 6e 64 27 20 29 3b 0a 09 09 09 09 09 09 09 09 5f 5f 67 61 54 72 61 63 6b 65 72 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 20 61 72 67 73 29 3b 0a 09 09 09 09 09 09 09 7d 3b 0a 09 09 09 09 09 09 09 76 61 72 20 5f 5f 67 61 54 72 61 63 6b 65 72 20 3d Data Ascii: acker.prototype;p.get = noopfn;p.set = noopfn;p.send = function (){var args = Array.prototype.slice.call(arguments);args.unshift( 'send' );__gaTracker.apply(null, args);};var __gaTracker =
2024-05-06 16:42:27 UTC	1369	IN	Data Raw: 74 2c 20 61 72 67 75 6d 65 6e 74 73 5b 35 5d 20 29 3b 0a 09 09 09 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 09 09 09 09 69 66 20 28 20 27 75 6e 64 65 66 69 6e 65 64 27 20 21 3d 3d 20 74 79 70 65 6f 66 20 61 72 67 75 6d 65 6e 74 73 5b 31 5d 2e 68 69 74 54 79 70 65 20 29 20 7b 0a 09 09 09 09 09 09 09 09 09 09 09 68 69 74 4f 62 6a 65 63 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3b 0a 09 09 09 09 09 09 09 09 09 09 09 69 66 20 28 20 27 70 61 67 65 76 69 65 77 27 20 3d 3d 3d 20 68 69 74 4f 62 6a 65 63 74 2e 68 69 74 54 79 70 65 20 29 20 7b 0a 09 09 09 09 09 09 09 09 09 09 09 09 68 69 74 4f 62 6a 65 63 74 2e 65 76 65 6e 74 41 63 74 69 6f 6e 20 3d 20 27 70 61 67 65 5f 76 69 65 77 27 3b 0a 09 09 09 09 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 09 09 09 Data Ascii: t, arguments[5] );}if ( 'undefined' !== typeof arguments[1].hitType ) {hitObject = arguments[1];if ( 'pageview' === hitObject.hitType ) {hitObject.eventAction = 'page_view';}
2024-05-06 16:42:27 UTC	1369	IN	Data Raw: 74 72 79 20 7b 0a 09 09 09 09 09 09 09 09 09 66 2e 68 69 74 43 61 6c 6c 62 61 63 6b 28 29 3b 0a 09 09 09 09 09 09 09 09 7d 20 63 61 74 63 68 20 28 20 65 78 20 29 20 7b 0a 09 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 09 7d 3b 0a 09 09 09 09 09 09 09 5f 5f 67 61 54 72 61 63 6b 65 72 2e 63 72 65 61 74 65 20 3d 20 6e 65 77 74 72 61 63 6b 65 72 3b 0a 09 09 09 09 09 09 09 5f 5f 67 61 54 72 61 63 6b 65 72 2e 67 65 74 42 79 4e 61 6d 65 20 3d 20 6e 65 77 74 72 61 63 6b 65 72 3b 0a 09 09 09 09 09 09 09 5f 5f 67 61 54 72 61 63 6b 65 72 2e 67 65 74 41 6c 6c 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 09 09 09 09 09 09 09 72 65 74 75 72 6e 20 5b 5d 3b 0a 09 09 09 09 09 09 09 7d 3b 0a 09 09 09 09 09 09 09 5f 5f 67 61 54 72 61 63 6b 65 72 2e 72 65 6d 6f 76 Data Ascii: try {f.hitCallback();} catch ( ex ) {}};__gaTracker.create = newtracker;__gaTracker.getByName = newtracker;__gaTracker.getAll = function () {return [];};__gaTracker.remov
2024-05-06 16:42:27 UTC	1369	IN	Data Raw: 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 22 63 6c 61 73 73 69 63 2d 74 68 65 6d 65 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 32 33 37 33 63 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 39 39 39 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 63 61 6c 63 28 2e 36 36 37 65 6d 20 2b Data Ascii: /css" media="all" /><style id="classic-theme-styles-inline-css" type="text/css">/! This file is auto-generated /.wp-block-button__link{color:#fff;background-color:#32373c;border-radius:9999px;box-shadow:none;text-decoration:none;padding:calc(.667em +
2024-05-06 16:42:27 UTC	1369	IN	Data Raw: 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 74 6f 2d 76 69 76 69 64 2d 72 65 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 61 28 32 35 35 2c 31 30 35 2c 30 2c 31 29 20 30 25 2c 72 67 62 28 32 30 37 2c 34 36 2c 34 36 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 76 65 72 79 2d 6c 69 67 68 74 2d 67 72 61 79 2d 74 6f 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 33 38 2c 32 33 38 2c 32 33 38 29 20 30 25 2c 72 67 62 28 31 36 39 2c 31 38 34 2c 31 39 35 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 Data Ascii: set--gradient--luminous-vivid-orange-to-vivid-red: linear-gradient(135deg,rgba(255,105,0,1) 0%,rgb(207,46,46) 100%);--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray: linear-gradient(135deg,rgb(238,238,238) 0%,rgb(169,184,195) 100%);--wp--preset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.11	49858	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:27 UTC	429	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/istock-597639502.jpg HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:27 UTC	541	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:27 GMT Content-Type: image/jpeg Content-Length: 599228 Connection: close Last-Modified: Tue, 09 Apr 2024 18:51:18 GMT ETag: 0x8DC58C60AB468D7 x-ms-request-id: 98d0793c-801e-003b-66aa-9fbd01000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164227Z-174c4b644ccw2t95unkdcwu6b000000002fg00000000kuda Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-06 16:42:27 UTC	15843	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 20 42 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0b 00 0f 01 02 00 06 00 00 00 92 00 00 00 10 01 02 00 0e 00 00 00 98 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 a6 00 00 00 1b 01 05 00 01 00 00 00 ae 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 20 00 00 00 b6 00 00 00 32 01 02 00 14 00 00 00 d6 00 00 00 3b 01 02 00 0a 00 00 00 ea 00 00 00 98 82 02 00 0a 00 00 00 f4 00 00 00 69 87 04 00 01 00 00 00 fe 00 00 00 4c 03 00 00 43 61 6e 6f 6e 00 43 61 6e 6f 6e 20 45 4f 53 20 35 44 53 00 c0 c6 2d 00 10 27 00 00 c0 c6 2d 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 31 36 3a 30 36 3a 32 35 20 Data Ascii: JFIF,, BExifII*(1 2;iLCanonCanon EOS 5DS-'-'Adobe Photoshop CS6 (Macintosh)2016:06:25
2024-05-06 16:42:27 UTC	16384	IN	Data Raw: a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 Data Ascii: w!1AQaq"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
2024-05-06 16:42:28 UTC	16384	IN	Data Raw: ff 00 90 1e 87 68 07 00 12 a3 96 6c 7d 3a f6 e6 82 64 af 06 a3 e5 eb f7 f5 ef dc 61 51 9c 83 85 2b c1 c8 c9 cf 6c 7a f5 e6 8f 53 39 d3 b4 9b 5b 7f 5f d3 fc c1 40 05 81 c8 c3 70 15 b0 7b 67 fc ff 00 8d 26 25 14 db 4f 4d 7a 08 ca 3a 28 c1 04 03 97 ce 3d 8f f3 a6 4c e9 a7 ee ad d0 d0 bc f1 83 b7 83 ce e1 cf 34 68 42 a7 66 ad 6b af 98 cc 1e 4e 78 24 e4 93 83 9e f8 a7 a7 53 37 4f ab db 51 54 6d e7 20 e4 71 96 c2 fa 7e bc d4 95 4e f1 77 bd ff 00 22 55 c9 27 69 50 40 cf 1f c3 82 7d e8 3b 68 ca 4d a5 16 bf e1 9f f5 6f f2 3a ad 0f 55 96 ce 78 d8 ca 02 07 c9 c3 6c cf 61 d3 b7 7a 8a 90 8c a2 ee 7e a5 c1 bc 47 88 cb 71 94 e7 ed 2c 93 ef 6b f4 5d b4 ea fb 9f a7 9f b3 0f c6 88 e1 58 b4 1d 4a f1 8c 72 11 0c 2b 90 40 1c 04 00 75 0b ea 39 e7 93 ed f9 bf 11 65 52 55 3e b1 Data Ascii: hl}:daQ+lzS9[_@p{g&%OMz:(=L4hBfkNx$S7OQTm q~Nw"U'iP@};hMo:Uxlaz~Gq,k]XJr+@u9eRU>
2024-05-06 16:42:28 UTC	16384	IN	Data Raw: 9c 0a f9 ec 35 6a b8 69 2b ea 8f ab 94 69 d7 6d 48 fc b1 f1 b7 c0 7f ec bd 5e 5d 42 3b 50 d1 bb 0c 4d f7 22 8c e0 b6 cd bd 7e 52 de 83 18 6c 67 1c fd 96 0f 3b 55 69 fb 26 ec cf 32 ae 41 08 d4 55 e2 af e6 78 87 c4 0f 0b c7 a0 e9 a8 c8 24 8b cb dc 3c a7 95 24 94 60 90 0e 33 f7 7d 31 d3 b8 3d 6b dc c0 62 7d b5 43 93 1f 82 58 7c 37 32 5b 7f 5f 71 c0 78 62 dd ae e3 36 ec ac 00 00 82 cb b0 b3 f2 08 38 23 82 47 23 d5 4f 4c 9a f6 1c f9 67 74 46 53 17 52 1c 8f fa fe be e3 93 f1 7f 86 45 bb b4 81 76 87 62 df 24 7b 55 b7 12 48 4f 5c 72 4f 41 cf 1c 57 b3 84 c5 29 3b 23 7c c3 2a 85 7a 7a ad 7c 97 df 6e e7 95 49 03 46 cd d8 ae 55 80 50 0a e7 f1 ef c9 e2 bd a8 4a 29 1f 9f e2 30 92 a7 51 f7 5a 3f eb cf cb a6 97 22 55 5f e1 39 c0 f9 59 b2 71 d3 9f af f8 56 a7 1b a7 14 ed Data Ascii: 5ji+imH^]B;PM"~Rlg;Ui&2AUx$<$`3}1=kb}CX\|72[_qxb68#G#OLgtFSREvb${UHO\rOAW);#\|*zz\|nIFUPJ)0QZ?"U_9YqV
2024-05-06 16:42:28 UTC	16384	IN	Data Raw: 3e 66 e1 ba 6f 7e dd ad e7 ff 00 0e 7b 8f c1 3f 17 5d f8 63 c4 36 d2 da dd 48 b2 ac 99 11 31 20 e7 7a 91 80 06 09 c0 39 07 23 02 bc 0c f7 0b 1c 4e 19 c6 48 f5 b0 15 55 38 2a 3c cd bd 6e 9e fe 5a 58 fd 61 1f b5 e6 a7 e1 6d 1a da 37 f3 8d ba c0 82 29 64 98 f9 5b 47 25 b3 b4 1c e0 be 41 3c 9e 3b 57 e6 8b 2c 9c a5 c9 17 a9 d1 3a 58 68 de 55 f6 20 f0 b7 ed b9 69 aa 6a cc f2 dd 3b 4e e0 89 09 74 84 12 02 82 0b 93 8e 33 d0 0e 42 8e 95 15 32 7c 65 19 39 c9 e8 c8 a7 1c 0e 22 3e cf 0e d3 b7 e6 7d 3b a3 ff 00 c1 49 35 4f 07 b4 36 50 e8 7a bd e6 14 98 8d bb 2d e0 b9 20 fc bc 60 64 15 00 8c 11 8f 7a e8 a7 53 1b 87 8d e9 ce cb cf 63 9b 1b c2 d9 55 78 f3 62 a2 db 7b 59 1f 41 78 43 f6 c2 f1 1f c5 29 21 17 be 1e bf b5 8e 51 bc 23 7c d8 27 23 68 1d c6 46 d3 f8 fb 57 95 8e Data Ascii: >fo~{?]c6H1 z9#NHU8*<nZXam7)d[G%A<;W,:XhU ij;Nt3B2\|e9">};I5O6Pz- `dzScUxb{YAxC)!Q#\|'#hFW
2024-05-06 16:42:28 UTC	16384	IN	Data Raw: a3 88 f7 a0 be 4a c7 f5 2f 03 f8 d5 81 c5 4e 18 7c d1 f2 55 ee ef 6b 77 6f b7 e1 7f 2b 1f a8 9f 06 bf 6e 2b 7d d6 76 da a5 c1 09 90 24 76 cb da e3 a0 6e 3a 83 ed c0 ef 5f 11 8c c8 31 b8 76 e5 4f 6e cc fd e3 0d 9b e4 99 fd 25 2a 76 95 fe d4 75 5e bf d6 c7 e9 16 8d e3 1f 86 ff 00 17 f4 55 17 ab a7 5d 49 73 1e 77 2e d6 04 95 18 24 fa 10 7a 74 fc 85 78 75 22 e2 f9 6b 46 d2 07 86 cc 32 c6 aa e0 a7 cd 4f b6 ff 00 d3 3e 02 fd a6 3f e0 9e 9e 1e f1 34 17 be 28 f0 04 50 58 ea 1b 1a 60 b0 ae db 69 b2 c7 86 41 d3 39 6e 98 e7 bf 1c fb d9 77 11 e3 32 e9 2a 78 97 cf 4b bf 54 7c a6 77 c2 1c 3d c5 ed ce a4 15 1c 67 47 6b 26 ff 00 af c5 9f 87 de 3f f8 6f e2 af 86 da e4 da 1f 89 f4 ab 9b 0b b4 2d e5 19 50 ac 77 4b bb 0a ca f8 c1 ce 07 e7 5f a2 60 b3 0c 36 3e 8f b7 c3 4d 38 Data Ascii: J/N\|Ukwo+n+}v$vn:_1vOn%vu^U]Isw.$ztxu"kF2O>?4(PX`iA9nw2xKT\|w=gGk&?o-PwK_`6>M8
2024-05-06 16:42:28 UTC	16384	IN	Data Raw: e2 64 9d 19 4c b2 c2 91 86 70 31 f3 23 9e 71 c9 27 a0 ef d0 70 6b e4 b0 31 6d fe f7 73 f5 74 a9 7b 3b d3 3e 31 f1 27 8a 7c 63 0c b6 f2 1b bb c0 b0 5c 2c 8d 11 53 6b 08 62 84 b3 2f a1 20 e4 63 3e bc 74 af a9 c2 51 a3 2b a7 d8 e2 ac e7 17 ee 9d cf c2 ef db 0b e2 1f c1 cd 42 3b cd 3f 51 b8 99 22 70 1a ce 79 d9 d0 ba 8c 8e 79 3d 4f 5f f6 b0 7a 0a f4 a3 95 46 bb 52 a4 ec d7 54 79 58 a5 86 af 4f 93 13 04 d6 da 9f b9 7f b1 97 fc 16 b7 40 f1 37 8a 74 5f 03 7c 48 d3 9f 40 9f 50 9d 2c ed f5 3b 99 d4 5a 86 6d aa ab 27 4c 16 27 03 e9 ee 2b e9 68 66 d9 96 57 18 cf 17 15 3a 6b 47 25 74 d2 ef 6e b6 dc fc bb 3c e0 ac 3e 39 4a be 53 2f 79 6b c8 f7 f9 7f 91 fd 2f 78 7f c6 7a 2f 8d 3c 3f 6f 7d 69 71 05 f5 8d fd b0 91 59 1c 3a 10 eb 90 73 ee 3f 95 7d e6 1f 19 87 c6 51 52 a5 Data Ascii: dLp1#q'pk1mst{;>1'\|c\,Skb/ c>tQ+B;?Q"pyy=O_zFRTyXO@7t_\|H@P,;Zm'L'+hfW:kG%tn<>9JS/yk/xz/<?o}iqY:s?}QR
2024-05-06 16:42:28 UTC	16384	IN	Data Raw: b0 84 60 65 55 8b 6d 28 1b 81 d7 1d 7d bb 57 ab 4f 38 ce a9 52 50 92 bc 51 e3 56 e0 bc 9e ad 57 55 4b de 7d 0f b1 7c 39 f1 a7 c2 7e 31 b2 8f 53 3a ed ac f2 5d a9 c1 59 95 d4 86 38 27 23 d0 1c 76 eb 58 47 33 a3 5e 4e 75 65 ab ee 73 62 f2 1c 46 12 4a 34 63 a2 ec 72 3f 16 7f 65 6f 02 7c 7c d1 e5 8b 54 b0 d3 6f c4 f1 79 69 3a c0 af 2a 92 32 18 37 50 46 7a fb d6 8f 2b 9d 49 2c 56 0a 5e f7 97 f5 d4 e6 a1 9d 2c 2a 78 6c 64 74 f3 3f 27 be 2b ff 00 c1 1a 74 bb a9 ee 6e 74 1d 57 50 b4 82 67 33 34 32 42 6e e0 8d 8f 1b d1 4e 0e 7a 9c 02 06 4f 43 c5 75 ff 00 6d e7 99 72 57 82 76 5e 97 5d 86 f2 fc 87 36 6f 9e 76 bf f5 72 b7 c2 8f d8 3a 3f 84 d7 b6 f1 de 5c 4b 31 b4 6c c5 2c b6 9b 24 91 88 01 c1 41 f3 00 d8 53 81 d0 b1 fc 7e 47 33 cf b1 38 da 9f bf a7 69 3d f7 3e b3 2d Data Ascii: `eUm(}WO8RPQVWUK}\|9~1S:]Y8'#vXG3^NuesbFJ4cr?eo\|\|Toyi:27PFz+I,V^,xldt?'+tntWPg342BnNzOCumrWv^]6ovr:?\K1l,$AS~G38i=>-
2024-05-06 16:42:28 UTC	16384	IN	Data Raw: fe 26 fd 80 ff 00 6a 2f 0a 5c c5 a7 df 7c 38 d4 75 0d 56 48 4b cd a7 68 72 ae af 2d 89 cf 31 cd 2a e1 15 80 0a c7 0c 40 dc 39 ae ba 3c 63 c3 d5 9c af 5f 93 95 db df 4e 37 f3 b6 ff 00 82 31 5c 1d 8f 74 15 5a 55 61 2b f4 4f f5 76 3e 5e f1 67 82 7c 57 e0 6d 52 e3 45 f1 7e 81 a9 68 1a a5 b4 8f 04 b6 97 f0 18 f6 3a 1c 32 ee fb a4 a9 04 1c 1a f7 b0 b8 bc 36 36 92 c4 61 66 a7 07 ad d7 f5 a1 e2 e3 f2 8c 7e 5d 2b 63 e9 b8 df 67 a3 8f de b4 d3 b1 cb 72 49 23 77 24 92 4f d7 3f a5 74 1e 6b 5a b6 93 fe bf af b8 40 0f a8 e0 93 e8 47 e3 40 a2 9a 5a 3d af fd 7a 0b ca 83 8e 48 3b 57 a7 cc 4f b1 fc 28 1d 9c 53 fe bf 0f f2 24 52 d9 c0 e7 f8 8f 03 9f 7f f3 e9 41 d1 09 4d bb 47 c9 ff 00 5b 09 92 17 3c 81 fc 20 63 77 e2 3b 50 6b 19 c9 42 ff 00 f0 fe 64 b1 b3 ab 7d e2 18 f0 09 Data Ascii: &j/\\|8uVHKhr-1*@9<c_N71\tZUa+Ov>^g\|WmRE~h:266af~]+cgrI#w$O?tkZ@G@Z=zH;WO(S$RAMG[< cw;PkBd}
2024-05-06 16:42:28 UTC	16384	IN	Data Raw: 41 43 eb bc 39 25 4f 57 0b df f3 3f a1 4f 16 f8 a2 04 db b2 5f 94 80 54 6e 18 6e 83 39 fc ff 00 2a e6 cc b3 28 a7 ee b3 a3 2c cb 27 2d d1 99 a6 ea 11 dd 44 64 38 1f 2e 32 b9 18 cf e1 8c 9a c2 85 65 52 37 66 f8 8c 3b a5 3e 54 6e da c8 a0 ab 20 ce e6 ce e1 d0 9e e7 f3 ae da 6d 6c 8e 19 c7 a4 8e bb 4f 98 64 06 fa 83 9c 03 ed fc eb ba 9b 49 6a cf 3e b4 1e f1 3d 4b 40 bf 58 d9 18 90 30 de bb bf 0a f5 28 ca ce e7 99 56 9e e8 a3 f1 ab 48 b5 f1 4f c3 ed 5a c2 e1 16 64 b9 b2 92 16 0c 01 04 32 30 20 e7 8e e7 35 c9 9e d0 58 bc b2 a5 27 d8 ee e1 ba f2 c0 e6 d4 ea 47 4d 4f f3 9a fd a8 bc 06 bf 0c 7e 3f 7c 49 f0 88 88 5b db d9 f8 96 e6 e2 cd 19 59 63 10 4f 29 95 00 c8 ce 00 63 9e 7a fd 2b 7c 8f 14 f1 99 55 1a d2 7e f5 ac fd 63 a3 fc 8f ea ec 4e 26 8c ab d2 ae bf e5 e4 Data Ascii: AC9%OW?O_Tnn9*(,'-Dd8.2eR7f;>Tn mlOdIj>=K@X0(VHOZd20 5X'GMO~?\|I[YcO)cz+\|U~cN&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.11	49863	89.187.173.22	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:27 UTC	919	OUT	GET /api/img-dscr/v2/D0JSP1avgg/3527403/RLqwMG7OTpTSzPtD/alts.json?dto=%7B%22sorted%22%3A%5B%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Flogo.webp%22%2C%22alt%22%3A%22RMS%20Hospitality%20Group%22%2C%22dir%22%3A%22RO%22%7D%5D%2C%22tier%22%3A%22FREE_QUOTA_TIER%22%7D HTTP/1.1 Host: cdn77.api.userway.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.rmshg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:27 UTC	814	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:27 GMT Content-Type: application/json; charset=utf-8 Content-Length: 260 Connection: close X-Service-Version: img-dscr-srv-727604a1 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD, PUT, PATCH, POST, DELETE Access-Control-Allow-Headers: * Access-Control-Expose-Headers: Content-Range, Content-Length, ETag, Content-Type Access-Control-Max-Age: 3000 Cache-Control: max-age=604800 ETag: W/"104-WeQcxxwA6Yiuay45tSUykKoKv/o" Vary: Accept-Encoding X-77-NZT: EggBWbutFQFBDAGckjviAffQ+wMA X-77-NZT-Ray: 256bf619e2c33c3c7308396630617f35 X-Accel-Expires: @1715357475 X-Accel-Date: 1714752675 X-77-Cache: HIT X-77-Age: 261072 Server: CDN77-Turbo Alt-Svc: h3=":443"; ma=86400 X-Cache: MISS X-77-POP: miamiUSFL Accept-Ranges: bytes
2024-05-06 16:42:27 UTC	260	IN	Data Raw: 7b 22 70 61 79 6c 6f 61 64 22 3a 7b 22 6d 69 73 73 69 6e 67 41 6c 74 73 22 3a 5b 7b 22 73 72 63 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 73 74 72 61 74 6f 73 70 68 65 72 65 77 65 62 73 69 74 65 73 2e 63 6f 6d 2f 73 6f 75 72 63 65 2f 73 69 74 65 73 2f 33 63 35 31 37 64 64 36 2d 36 66 61 36 2d 34 33 38 61 2d 38 64 34 37 2d 65 37 61 39 63 64 63 61 33 65 33 62 2f 69 6d 61 67 65 73 2f 6c 6f 67 6f 2e 77 65 62 70 22 2c 22 61 6c 74 22 3a 6e 75 6c 6c 2c 22 61 70 70 72 6f 76 65 64 22 3a 66 61 6c 73 65 2c 22 64 65 63 6f 72 61 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 73 6b 69 70 70 65 64 46 6f 72 52 65 61 64 4f 6e 6c 79 22 3a 74 72 75 65 7d 7d 5d 7d 2c 22 70 61 79 6c 6f 61 64 54 79 70 65 22 3a 22 4d 69 73 73 69 6e 67 41 6c 74 73 Data Ascii: {"payload":{"missingAlts":[{"src":"https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/logo.webp","alt":null,"approved":false,"decorative":false,"metadata":{"skippedForReadOnly":true}}]},"payloadType":"MissingAlts

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.11	49861	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:27 UTC	429	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/istock-182417552.jpg HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:28 UTC	541	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:27 GMT Content-Type: image/jpeg Content-Length: 519218 Connection: close Last-Modified: Fri, 12 Apr 2024 18:07:53 GMT ETag: 0x8DC5B1B790AD35A x-ms-request-id: 0b5ca828-d01e-0054-01d4-9fb7f2000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164227Z-174c4b644cc5t6x2zzk3xununw00000002eg00000000qu0h Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-06 16:42:28 UTC	15843	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 18 dc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 12 00 00 01 03 00 01 00 00 00 b0 0d 00 00 01 01 03 00 01 00 00 00 20 09 00 00 02 01 03 00 03 00 00 00 e6 00 00 00 03 01 03 00 01 00 00 00 01 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 0f 01 02 00 06 00 00 00 ec 00 00 00 10 01 02 00 0e 00 00 00 f2 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 00 01 00 00 1b 01 05 00 01 00 00 00 08 01 00 00 1c 01 03 00 01 00 00 00 01 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1e 00 00 00 10 01 00 00 32 01 02 00 14 00 00 00 2e 01 00 00 3b 01 02 00 0d 00 00 00 42 01 00 00 98 82 02 00 1c 00 00 00 50 01 00 00 69 87 04 00 01 00 00 00 6c 01 00 Data Ascii: JFIF,,ExifII* (12.;BPil
2024-05-06 16:42:28 UTC	16384	IN	Data Raw: a1 b7 f0 99 18 0b 11 07 1c fc a3 1f 80 ff 00 0a f3 2a 67 2b 7b dc 2d a1 d2 d9 f8 4d c8 5c 45 c9 18 3f 26 3f 5a f3 2a e7 1d 6e 3b 25 b1 d1 5a f8 3c 9d b9 8c 0f 98 7f 07 07 fc e6 bc da d9 da e5 d1 96 9a 5a 9d 35 9f 83 d3 e5 2d 1f 03 db 39 f6 af 22 be 73 ad 93 15 ed a1 d4 db 78 52 34 23 11 03 9e 08 2a 39 c5 79 35 f3 69 3f b5 af f5 f3 0e 6e ac dc 87 c3 50 85 1f ba 5e 07 1c 7c df 4a e0 96 63 52 a2 ba 44 ba 96 dd 9a 11 e8 b1 20 e2 31 d7 20 15 e0 7b 7e b5 cb 53 1b 51 e8 f4 f5 27 9d 77 27 6d 22 2c ff 00 ab 52 4f 1d 30 6b 37 8b 95 d7 bc 9f cc 6a 44 d1 69 b8 e8 8a a4 1c 0c 73 9a 89 62 93 d9 ab fa dc 77 77 2c 7d 83 90 48 3d 38 21 06 73 fe 4d 67 f5 ab 5d 5f ff 00 25 0b a1 e7 4b 05 46 51 80 07 04 f7 39 f5 a4 f1 52 4b 67 6f 44 43 94 76 4c 63 e8 c1 4a 92 80 01 d0 91 8a Data Ascii: g+{-M\E?&?Zn;%Z<Z5-9"sxR4#*9y5i?nP^\|JcRD 1 {~SQ'w'm",RO0k7jDisbww,}H=8!sMg]_%KFQ9RKgoDCvLcJ
2024-05-06 16:42:28 UTC	16384	IN	Data Raw: 35 a8 96 1e 7b 91 98 23 77 50 9b b6 e7 3b b3 f2 70 0e 7b d3 52 92 4d bd cc 9d 26 b7 5a 89 e5 72 56 45 07 07 23 03 95 a5 cc 9e a6 33 a4 d6 ab 41 76 79 41 82 02 c7 19 e7 81 c7 b5 0f 96 6d 19 fb 16 f7 22 91 77 00 0a a6 47 f1 0e 08 ef 8c 0a 71 4a 2f 47 a1 9c a9 eb 61 8e 8d 90 44 79 e3 1c 1f 9b 3e d5 4b 6b 32 3d 92 b9 00 8b 69 e7 38 03 20 7a f5 a6 dd c9 95 2d 2c 90 9b 78 51 b4 e0 8c ee 03 91 9f 53 48 c2 54 6e dd 86 f9 60 95 23 aa 8d c4 72 54 fb 0a 2f 63 29 c1 c7 49 6c 33 6e 14 97 51 80 7e 56 c9 20 f7 c7 f3 a7 76 f4 46 32 a6 d6 a8 8d c1 20 32 85 cf f0 8c 9c 7e 55 4b 95 68 65 28 f4 1d 83 d4 a1 76 da 0b 10 7e 51 eb c5 45 97 73 37 4d 5b 42 32 8e 06 ee 0e 49 61 b4 e4 bd 25 66 ec 8c da 7c dc ac 8b f8 50 82 e1 5b 24 05 3b 58 1a ab 34 c2 51 d5 df a0 8b 1e ec 70 73 b3 Data Ascii: 5{#wP;p{RM&ZrVE#3AvyAm"wGqJ/GaDy>Kk2=i8 z-,xQSHTn`#rT/c)Il3nQ~V vF2 2~UKhe(v~QEs7M[B2Ia%f\|P[$;X4Qps
2024-05-06 16:42:28 UTC	16384	IN	Data Raw: 1b 96 f1 c6 a4 72 0e 09 03 38 c6 6b e6 f1 95 aa b4 d2 bf f5 fe 67 a1 4b 97 46 ce 86 d6 54 41 d4 6e 38 07 a1 1e 9c fa 57 c8 63 a9 55 93 72 67 ad 4a 6a 2c e8 ad b5 28 d0 ae 5c 03 d0 73 93 d3 15 f3 f5 70 72 9b b9 df 4e bc 52 4b a1 b9 6f ae 28 00 6f 18 03 a8 38 22 bc ea b9 7c 8e 95 8b 49 ee 6d 5b 6b c8 08 cc 99 07 07 27 81 5c 15 72 e7 6b 23 aa 18 ea 6d 9d 04 1e 21 81 42 e5 c1 27 83 c8 c0 f5 af 3e a6 59 51 ea 96 a7 4c 71 b4 d3 dc d0 8f c6 30 c2 c0 2b 8f f7 37 67 3c d7 34 b2 5a 95 16 a8 a5 9a d3 bd 99 b5 6d e3 d8 81 03 7a e3 23 8c 91 fe 7a 57 9f 57 87 66 d6 a8 a8 e6 94 fa 9d e6 8d e3 e8 5f 68 13 0d c5 71 b8 9f d3 ff 00 d5 5f 3f 8e e1 e9 a4 ef 13 be 86 61 4e 6b dd 67 75 6b e3 a8 d5 43 19 c6 31 fd fc 1a f9 ea b9 04 b9 ac d1 d4 f1 71 e8 cd 64 f1 ea e4 05 b8 00 10 Data Ascii: r8kgKFTAn8WcUrgJj,(\sprNRKo(o8"\|Im[k'\rk#m!B'>YQLq0+7g<4Zmz#zWWf_hq_?aNkgukC1qd
2024-05-06 16:42:28 UTC	16384	IN	Data Raw: 2c 59 51 c9 5c 64 1c 76 19 ef 5e 96 1b 13 6a 8a c7 91 89 a1 cb 16 ac 72 12 46 04 85 42 e0 8c e0 f4 20 7a 7a 7a 57 d9 e1 ab b9 d3 f7 1e bf a1 f3 75 93 4d a2 37 87 77 27 ee 81 92 3f cf bd 6f 6a 8a 5c e9 ea 73 93 db da ee 60 41 00 02 a4 b0 3b 47 d2 b9 71 75 64 a9 b5 7b b7 bf f9 7e a7 5d 15 aa be 87 6d a6 e2 15 03 76 46 30 30 73 f8 d7 c5 62 a2 ea 49 dc f7 30 f5 54 23 ab 3a 18 6e d7 38 cf 3c 00 0f 3f fe aa f2 6a 51 7d 11 ec d0 c4 2d 99 b5 0c a0 f4 e4 67 38 3d 47 d2 b8 67 4a fa 3d cf 66 95 64 d6 e2 cd b5 d7 8c 72 31 e9 f5 a7 4a 12 8a 77 3a 1c ee ae 9e a6 25 f0 2a a4 70 41 19 c6 7a 1f 5f f3 eb 5d d8 6d ec d9 12 d9 b3 c9 75 dd c2 72 4e 32 4f ca 01 f4 af bd c9 da 51 b2 dc f9 8c 7a 97 b4 d4 e0 75 73 88 9c f4 7d a7 70 3d f8 cf f8 d7 df e4 fa d5 8e bd 8f 27 10 9a a6 Data Ascii: ,YQ\dv^jrFB zzzWuM7w'?oj\s`A;Gqud{~]mvF00sbI0T#:n8<?jQ}-g8=GgJ=fdr1Jw:%*pAz_]murN2OQzus}p='
2024-05-06 16:42:28 UTC	16384	IN	Data Raw: 95 e8 55 82 ba 83 df a9 d3 3a b1 d1 2d f6 34 92 40 5f cf 66 2e ae 4a a2 79 be 59 c8 e0 01 d7 db f2 ae 69 de 2f 94 e2 ab 56 29 72 93 47 6e 22 56 79 7c b9 0b c5 98 93 24 48 19 cf 50 7b 90 bc f3 d7 35 8f 3d b4 4b fa 7d 4f 3e ad 6e 6d 0c 5d 46 ca 58 63 54 b7 cb 19 67 88 ab 42 76 93 b9 b7 7c c0 fa 0c 92 7d 2b a6 94 ee f6 ed fd 33 25 89 5c d7 97 66 67 3c f1 45 3c b1 c5 33 46 96 92 32 a9 0c 59 a4 77 07 76 ef 63 9c fa 57 43 8a 5e f3 d9 5f f1 46 6f 15 68 df bf e8 62 de dc de 8b 76 8c a4 93 28 bb f2 d4 07 de 81 b7 83 ce 0e 47 de e3 d2 ba 61 18 2d 2d df fa fc 42 38 d4 e5 f1 5b 4f d0 ab 73 79 3c 17 57 83 12 24 66 f5 6d d8 33 f9 6e 87 a2 ed ee 47 cc a4 9e 3a d7 4c e3 19 2b 3d ef 63 05 8a e6 84 5d f5 e5 6f fa fc 6c 5a 81 ff 00 b4 35 13 19 92 49 a3 10 24 cd 1b 30 c3 c9 Data Ascii: U:-4@_f.JyYi/V)rGn"Vy\|$HP{5=K}O>nm]FXcTgBv\|}+3%\fg<E<3F2YwvcWC^_Fohbv(Ga--B8[Osy<W$fm3nG:L+=c]olZ5I$0
2024-05-06 16:42:28 UTC	16384	IN	Data Raw: 0e 04 80 8c 67 1b 81 15 f3 12 c2 fb 1a 9b 1d 6f 16 a5 1b a6 70 fa dc a4 b1 01 5c f3 8c 8e 7f 0f e9 5e f6 06 0a d7 e8 7c fe 36 a3 a9 2b 23 8f 28 ef 27 28 e7 2d c2 32 f0 4f 7e 3f 2a f6 39 b9 55 cf 3a 14 dd cd 7b 4b 27 7d ec 17 6f 73 86 e7 8e d5 cb 5b 10 93 3d ac 1e 19 b7 76 8d db 5b 65 40 09 07 20 71 8e 39 f7 af 36 b5 5b ec 7d 46 13 0c b7 66 99 b6 25 43 04 2c 7d 86 4f e5 5c be d2 2d eb b9 ed d3 a3 cb ad 8d bb 5b 46 10 70 84 0e a0 95 23 6f e3 5c 35 aa a9 37 16 ce da 51 69 9c ae a8 bb 2e 00 db 8c 82 09 5f bb 5e be 0a 49 c2 ed 9d 3e cb 99 1c 27 89 89 5b 57 c2 92 0f 73 c6 3a 7e 95 f4 39 55 bd b2 ec 65 5e 82 f6 4d 9f 2c f8 a9 41 69 8b 0f 9b 27 68 c7 1d 79 af de 78 42 a4 94 a3 13 e0 b3 5a 4b 99 bb 1f 39 6b ea 56 e1 97 61 e5 ce e5 04 9c d7 f4 2e 57 67 45 33 e6 7d Data Ascii: gop\^\|6+#('(-2O~?*9U:{K'}os[=v[e@ q96[}Ff%C,}O\-[Fp#o\57Qi._^I>'[Ws:~9Ue^M,Ai'hyxBZK9kVa.WgE3}
2024-05-06 16:42:28 UTC	16384	IN	Data Raw: 9f 51 bb b6 55 99 f2 09 c9 18 c7 1f 77 77 6c 0f 6a 2a c8 e5 9a f9 15 d5 db 27 03 01 88 3b 40 2d 8f c7 f1 15 8d de f6 d0 c9 5d fa 0a 8c c4 a8 dd 82 70 47 50 87 db 1e e4 7e b4 26 db 15 e5 aa 92 d0 b1 d8 6f c8 c8 c9 da 30 41 ad 22 d2 d5 9b 41 a6 b4 d4 9c 1f a1 1b b7 0e 73 91 db fa d6 d2 bc a2 e2 b5 34 83 b4 d3 25 32 90 bb 77 b2 02 78 05 06 c3 db f3 cd 65 ef bd 16 86 f2 92 48 a9 2c 9c 1e 78 df b4 bf 27 3d fa 50 e5 18 2b 47 7e e7 2c ea b9 3d 1e a4 7e 61 67 55 04 ed 27 ab 75 e0 9e f5 0a 7a dd 33 3e 6b 46 fb fa 16 a3 43 85 e4 7e f3 e6 19 38 e4 66 ba 54 39 e1 67 d4 de 12 b3 bb 3a 0d 2b 48 9f 53 2c 63 05 90 29 27 0a 55 73 c1 19 ff 00 eb 50 e8 4a 9a e6 7f d7 99 75 31 10 a4 bd f7 af e3 f2 19 79 61 71 6b 33 46 63 7d ae 72 a2 45 28 c7 9e d9 ed 9a 8f 68 e2 b5 46 f4 da Data Ascii: QUwwlj*';@-]pGP~&o0A"As4%2wxeH,x'=P+G~,=~agU'uz3>kFC~8fT9g:+HS,c)'UsPJu1yaqk3Fc}rE(hF
2024-05-06 16:42:28 UTC	16384	IN	Data Raw: a6 5b dd 9f b3 c7 e2 4d 29 59 fe d3 6b 75 2b 65 7c d8 14 a2 ab 1f 98 18 43 a9 38 35 92 94 ae e1 d1 ff 00 56 66 d2 87 b3 97 3a 7b fe 0c d2 f0 4f c6 bd 4f c3 d7 da 3f 86 86 a1 2e 9b fd 8d a9 4a 34 28 2f ee 12 f7 4c be b6 75 2d 26 99 76 e5 0f d9 fc c0 0f 23 30 c8 c7 78 50 6b 96 54 a2 a7 78 2b 76 fe bf a4 69 38 b9 2f eb ef fe b5 3d 26 3f 8b 36 bf 0f f5 36 d3 22 d4 1e 7f 03 fc 48 b6 3a ac 7a 4c 77 50 dc 43 e1 e9 44 e5 04 f6 ec a0 04 92 d2 78 4b 0d b8 62 a8 c8 46 d6 42 da 29 a8 38 b7 bb fd 04 e8 7b 64 e6 be 25 fd 5b e6 73 7e 11 f1 e7 f6 17 8b ec b5 6d 62 e9 63 d3 b5 bb e3 a7 6a f0 c4 97 10 41 6f 34 4c 2d ed ee 2d a5 e6 33 14 a9 2c 12 ac 8b c6 59 c6 00 cd 65 8b 82 ad 3f 68 b6 f9 ec 10 6e 9a e5 87 43 ec 3f 1f 78 3e 2b 97 f0 df 8e 26 d4 d3 5d b1 bf d0 2d 4e a7 a8 Data Ascii: [M)Yku+e\|C85Vf:{OO?.J4(/Lu-&v#0xPkTx+vi8/=&?66"H:zLwPCDxKbFB)8{d%[s~mbcjAo4L--3,Ye?hnC?x>+&]-N
2024-05-06 16:42:28 UTC	16384	IN	Data Raw: 2d f8 3e 72 3d c1 a9 77 92 6c c1 ab 7c 46 8d cd a8 bd b1 8a 48 39 3a 85 a0 b8 b1 88 c5 bc a5 c4 04 45 73 11 18 fe 22 37 e3 a8 de 7d ab 58 49 24 91 9b bd ec 41 e1 88 9f 47 b2 bd 4b 8b 58 6c ec 35 7d 7a ce 1d 3d 91 59 57 ce 48 6f a4 c3 3f 69 09 47 40 79 dd 95 1d 07 1d 38 a5 2c 4d 0f 69 16 e5 28 ef 7f d0 b5 55 39 a8 3d d2 ff 00 23 ea 39 3c 3d 69 e3 9f 85 ba 26 83 67 ae 49 36 bf a5 3d ce a1 e1 b6 62 4c 8d 82 24 9a cd 48 19 07 ca 93 0c 8c 3e 75 80 b0 ce 4d 79 11 ab 05 2e 4a 91 de e6 f1 4a 33 72 5d 7f ab 9e 39 69 ad dc c5 79 6f 7b 76 00 d5 ec 34 28 ee 35 1d 28 62 29 a7 86 d4 9b 5b 89 60 1d 4c 90 98 51 9e 3e 5b 6b e4 06 00 d1 57 09 1a d0 72 85 da db fa f3 d0 d9 55 94 25 75 b5 cf d4 df d8 fb f6 8d d2 b4 4b f8 ec 7c 45 73 21 d2 7c 4b 68 20 b8 5b 70 06 93 aa b3 05 Data Ascii: ->r=wl\|FH9:Es"7}XI$AGKXl5}z=YWHo?iG@y8,Mi(U9=#9<=i&gI6=bL$H>uMy.JJ3r]9iyo{v4(5(b)[`LQ>[kWrU%uK\|Es!\|Kh [p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.11	49860	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:27 UTC	587	OUT	GET /wp-includes/css/dist/block-library/style.min.css?ver=6.4.3 HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:28 UTC	771	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:28 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Wed, 24 Jan 2024 19:02:28 GMT ETag: W/"65b15ec4-1ae43" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EqFjODYIC28vMQV2TRpRdFznE8ZnQKqUst5RKdyM6%2F8CQmbEC%2BD7nUcXwlrsanj9NQcB5vGB%2BJW7%2Fs1ybAkK73Yfk5AgyEtzI1GcbnWzRZDRKNaBZwwZkaeS9gn5QtpTy9A%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c74bd2da584-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:28 UTC	598	IN	Data Raw: 37 63 61 64 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 20 69 6d 67 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 Data Ascii: 7cad@charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-b
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 67 6e 72 69 67 68 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 39 39 39 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 63 61 6c 63 28 2e 36 36 37 65 6d 20 2b 20 32 70 78 29 20 63 61 6c 63 28 31 2e 33 33 33 65 6d 20 2b 20 32 70 78 29 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5b 73 74 79 6c 65 2a 3d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 5d 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 69 6e 68 65 72 69 74 7d 2e 77 70 2d 62 6c Data Ascii: gnright{text-align:right}:where(.wp-block-button__link){border-radius:9999px;box-shadow:none;padding:calc(.667em + 2px) calc(1.333em + 2px);text-decoration:none}.wp-block-button[style*=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-bl
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 72 64 65 72 2d 72 61 64 69 75 73 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 2e 69 73 2d 73 74 79 6c 65 2d 6f 75 74 6c 69 6e 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 69 73 2d 73 74 79 6c 65 2d 6f 75 74 6c 69 6e 65 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 62 6f 72 64 65 72 3a 32 70 78 20 73 6f 6c 69 64 3b 70 61 64 64 69 6e 67 3a 2e 36 36 37 65 6d 20 31 2e 33 33 33 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 2e 69 73 2d 73 74 79 6c 65 2d 6f 75 74 6c 69 6e 65 3a 6e 6f 74 28 2e 68 61 73 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 Data Ascii: rder-radius:0!important}.wp-block-button .wp-block-button__link.is-style-outline,.wp-block-button.is-style-outline>.wp-block-button__link{border:2px solid;padding:.667em 1.333em}.wp-block-button .wp-block-button__link.is-style-outline:not(.has-text-color)
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 6c 69 6e 6b 3a 77 68 65 72 65 28 5b 73 74 79 6c 65 2a 3d 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 73 74 79 6c 65 5d 29 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 6d 65 64 69 75 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 3a 77 68 65 72 65 28 5b 73 74 79 6c 65 2a 3d 62 6f 72 64 65 72 2d 6c 65 66 74 2d 73 74 79 6c 65 5d 29 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 6d 65 64 69 75 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 2e 69 73 2d 76 65 72 74 69 63 61 6c 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 2e 69 73 2d 76 65 72 74 69 63 61 6c 3e 2e 77 70 2d 62 6c Data Ascii: link:where([style=border-bottom-style]){border-bottom-width:medium}.wp-block-button .wp-block-button__link:where([style=border-left-style]){border-left-width:medium}.wp-block-buttons.is-vertical{flex-direction:column}.wp-block-buttons.is-vertical>.wp-bl
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 6f 6d 2d 66 6f 6e 74 2d 73 69 7a 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 61 6c 69 67 6e 63 65 6e 74 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 20 74 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 20 74 68 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 3b 70 61 64 64 69 6e 67 3a 2e 32 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 20 74 68 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 20 63 61 70 Data Ascii: om-font-size .wp-block-button__link{font-size:inherit}.wp-block-button.aligncenter,.wp-block-calendar{text-align:center}.wp-block-calendar td,.wp-block-calendar th{border:1px solid;padding:.25em}.wp-block-calendar th{font-weight:400}.wp-block-calendar cap
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 65 72 74 69 63 61 6c 6c 79 2d 61 6c 69 67 6e 65 64 2d 63 65 6e 74 65 72 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 61 72 65 2d 76 65 72 74 69 63 61 6c 6c 79 2d 61 6c 69 67 6e 65 64 2d 62 6f 74 74 6f 6d 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 38 31 70 78 29 7b 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 3a 6e 6f 74 28 2e 69 73 2d 6e 6f 74 2d 73 74 61 63 6b 65 64 2d 6f 6e 2d 6d 6f 62 69 6c 65 29 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 7b 66 6c 65 78 2d 62 61 73 69 73 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 38 32 70 78 29 Data Ascii: ertically-aligned-center{align-items:center}.wp-block-columns.are-vertically-aligned-bottom{align-items:flex-end}@media (max-width:781px){.wp-block-columns:not(.is-not-stacked-on-mobile)>.wp-block-column{flex-basis:100%!important}}@media (min-width:782px)
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 6c 69 67 6e 6c 65 66 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 61 6c 69 67 6e 72 69 67 68 74 7b 66 6c 6f 61 74 3a 72 69 67 68 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 6e 61 76 69 67 61 74 69 6f 6e 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 6c 69 73 74 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 Data Ascii: lignleft{float:left}.wp-block-post-comments .alignright{float:right}.wp-block-post-comments .navigation:after{clear:both;content:"";display:table}.wp-block-post-comments .commentlist{clear:both;list-style:none;margin:0;padding:0}.wp-block-post-comments .c
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 6e 6f 74 28 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 20 74 65 78 74 61 72 65 61 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 2d 63 6f 6f 6b 69 65 73 2d 63 6f 6e 73 65 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 67 61 70 3a 2e 32 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 2d 63 6f 6f 6b 69 65 73 2d 63 6f 6e 73 65 6e 74 20 23 77 70 2d 63 6f 6d 6d 65 Data Ascii: not([type=checkbox]),.wp-block-post-comments .comment-form textarea{box-sizing:border-box;display:block;width:100%}.wp-block-post-comments .comment-form-cookies-consent{display:flex;gap:.25em}.wp-block-post-comments .comment-form-cookies-consent #wp-comme
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 70 72 65 76 69 6f 75 73 2d 61 72 72 6f 77 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 63 68 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 70 72 65 76 69 6f 75 73 2d 61 72 72 6f 77 3a 6e 6f 74 28 2e 69 73 2d 61 72 72 6f 77 2d 63 68 65 76 72 6f 6e 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d Data Ascii: ht:0}.wp-block-comments-pagination .wp-block-comments-pagination-previous-arrow{display:inline-block;margin-right:1ch}.wp-block-comments-pagination .wp-block-comments-pagination-previous-arrow:not(.is-arrow-chevron){transform:scaleX(1)}.wp-block-comments-
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 75 6e 64 2d 64 69 6d 3a 6e 6f 74 28 5b 63 6c 61 73 73 2a 3d 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5d 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 3a 6e 6f 74 28 5b 63 6c 61 73 73 2a 3d 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5d 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 20 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 20 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 7b Data Ascii: und-dim:not([class=-background-color]),.wp-block-cover.has-background-dim:not([class=-background-color]){background-color:#000}.wp-block-cover .has-background-dim.has-background-gradient,.wp-block-cover-image .has-background-dim.has-background-gradient{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.11	49864	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:27 UTC	430	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/istock-1350660376.jpg HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:28 UTC	541	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:28 GMT Content-Type: image/jpeg Content-Length: 766208 Connection: close Last-Modified: Tue, 09 Apr 2024 18:44:28 GMT ETag: 0x8DC58C51658EAEB x-ms-request-id: 5b80b691-001e-0035-7ed4-9f94b1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164228Z-174c4b644ccvzznle3ep1zsgcn0000000180000000000qmk Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-06 16:42:28 UTC	15843	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 57 3f 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0a 00 0e 01 02 00 c1 00 00 00 86 00 00 00 0f 01 02 00 05 00 00 00 48 01 00 00 10 01 02 00 09 00 00 00 4e 01 00 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 58 01 00 00 1b 01 05 00 01 00 00 00 60 01 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 31 00 00 00 68 01 00 00 32 01 02 00 14 00 00 00 9a 01 00 00 69 87 04 00 01 00 00 00 ae 01 00 00 68 04 00 00 48 61 70 70 79 20 70 65 6f 70 6c 65 20 64 72 69 6e 6b 69 6e 67 20 62 65 65 72 20 61 74 20 62 72 65 77 65 72 79 20 62 61 72 20 6f 75 74 20 64 6f 6f 72 73 20 2d 20 4d 75 6c 74 69 63 75 6c 74 75 72 61 6c 20 6c 69 66 65 20 73 74 79 6c 65 20 63 6f 6e 63 65 70 74 20 77 69 74 68 Data Ascii: JFIF,,W?ExifII*HNX`(11h2ihHappy people drinking beer at brewery bar out doors - Multicultural life style concept with
2024-05-06 16:42:28 UTC	16384	IN	Data Raw: 61 11 b6 07 20 08 11 e6 1d 47 ce 9e 60 3f a3 ad 9e 09 6f ad 92 ca 04 df 9a 44 ee 1e 66 76 fe 5a 2a e3 4a 25 65 ec 96 b7 be 59 d0 34 91 e5 48 24 13 ea d2 c0 de aa 27 c5 4a ae ef 23 76 ae 0a 66 f1 bf cd df ca bb 3d 2e ea f3 5b d3 2d d2 46 a2 ce f0 74 f4 e9 49 15 d6 9d 9d 83 ab 61 bb d8 b0 31 af 50 1b 8f f7 a9 26 a7 7b a0 79 8f cc 16 ba ac 56 d1 dc db c1 68 2d ed ad a4 42 56 a1 43 54 a8 fe 7a 7f c0 e6 1e 8b 04 b1 44 89 75 2e c3 b4 35 30 cd 20 63 b8 01 1f e4 ff 00 cb 59 5f 57 9f 55 b9 70 2c 66 49 21 b5 b0 1c 88 15 40 54 33 6d 5f 4d c7 a7 ff 00 3d 33 3b 6a 75 d4 6d 8d de bd bb 79 2e e3 4a 72 b3 cf a5 6a 2f 69 64 a5 79 15 88 ba bc 0a bb 7f 23 f1 c9 75 60 7e 9a 64 bf 9a de 54 d6 7c d3 60 35 6f 80 47 65 0a 43 0d a9 66 59 11 e2 40 ae d4 e4 63 70 cf f0 f1 28 8e bf Data Ascii: a G`?oDfvZ*J%eY4H$'J#vf=.[-FtIa1P&{yVh-BVCTzDu.50 cY_WUp,fI!@T3m_M=3;jumy.Jrj/idy#u`~dT\|`5oGeCfY@cp(
2024-05-06 16:42:28 UTC	16384	IN	Data Raw: 8b 8b 9d 5e fa 1f dc de de 0c 45 02 9c 16 77 97 8d d8 e8 11 00 1d 68 ab c4 b9 86 61 4e 95 18 3b 52 87 4d 93 f9 3f f8 24 50 e0 dc 16 06 a5 5a f3 57 a9 3e bd 57 cf f4 56 ec 7c 0b fb 42 fe c4 7a f7 86 a5 bc 92 09 c5 f8 92 76 9c c3 67 2c 6e 48 3b b6 9f 25 48 0b 86 38 da df 4f af e9 b9 07 88 d4 30 f5 23 47 17 15 16 95 ba fe 7b ec 8f ce 78 af c2 ca d5 29 3c 46 12 6e 57 77 69 25 bf a6 db b3 e3 3d 1e c7 51 f8 43 ae 8b c3 19 b7 f1 02 34 70 d9 46 f7 a6 5b e5 31 c8 a5 52 50 8d 88 e3 25 77 64 11 22 1c 30 2b b4 63 ef ea e3 e8 71 2e 11 c2 9c af 47 56 da 56 5a ad d3 6b 56 b6 ea 9e da dc fc ba 8e 57 88 e1 bc 53 95 48 da b6 89 2b de 5a 3d 9a 4f 44 f7 e8 d6 fd 0f d5 bf 1f 7e d8 9f f0 be f4 5f 82 7a f5 c2 eb fe 20 d5 fe 03 df f8 63 c5 2d 26 95 a8 cb 6f a8 6a 10 6a 77 49 a1 Data Ascii: ^EwhaN;RM?$PZW>WV\|Bzvg,nH;%H8O0#G{x)<FnWwi%=QC4pF[1RP%wd"0+cq.GVVZkVWSH+Z=OD~_z c-&ojjwI
2024-05-06 16:42:28 UTC	16384	IN	Data Raw: f8 a5 42 e0 48 b9 1c 90 0e d5 e9 da bc f9 53 69 dd 9e bd 2a c9 ab 12 c9 e2 45 97 39 90 e3 ef 65 5b 3f af 7a cf 91 a3 7f 6c 9e 97 31 6f 75 38 e6 47 01 87 27 27 9f d0 fe b4 45 49 3b 98 54 6a 67 9c eb 72 5b ec 6d d8 24 b6 78 03 8e 3b 7e 46 bb a9 c8 f3 eb d3 8d b5 47 cf be 2e b9 8d 52 45 8c a8 4d ed 86 27 07 d8 fb f7 af 57 0b 36 a4 7c 6e 69 4d 72 b4 8f 9a 7c 45 7a 24 79 37 b0 ce f1 c8 21 b0 3d 7f cf ad 7d 7e 12 56 49 a3 f3 bc c2 2a 52 6a 5d cf 9f fc 4f 74 a0 4a b9 1c b6 15 07 18 eb d7 f5 e7 de be ab 06 db 4a 47 c3 e3 e2 95 d2 3e 69 f1 25 ce 66 98 13 95 03 82 c3 25 bd 79 fc 39 fa d7 d9 60 9f b8 9a 3f 3e cc a3 ef cb b1 e3 7a 8d d2 ee 38 24 7c c4 e3 d2 be 8a 95 dc 6e 8f 85 c4 2b 4c e7 2e 2e fa f3 ef 5a ab 25 a9 ce e3 76 64 cd 74 49 5c f0 33 9c e7 8c f5 ac e7 25 Data Ascii: BHSiE9e[?zl1ou8G''EI;Tjgr[m$x;~FG.REM'W6\|niMr\|Ez$y7!=}~VIRj]OtJJG>i%f%y9`?>z8$\|n+L..Z%vdtI\3%
2024-05-06 16:42:28 UTC	16384	IN	Data Raw: 10 aa 8c e4 64 7c a3 d7 b7 eb ed fd 6b 7a 6f a1 13 4d b4 99 39 90 aa ed 01 17 e5 dd 21 07 6a be 32 71 83 cf 6a f4 23 53 dd 48 f3 6a d0 53 7a 3f f8 1a 19 77 32 99 01 56 70 ce e0 64 a8 cf 6c 1e 3b 70 28 9d 4b c5 5f 73 92 86 05 46 a3 5a bf cb fe 0f e9 df a9 8a 2e ee 2c 6e 56 7b 79 0a 3c 6c 59 19 72 84 60 8e 9d fd 7d 6b ca af 69 a6 97 53 e9 30 91 95 3e 54 bf e0 fd e7 d0 1f 0e ff 00 69 6f 13 f8 0a 64 0b 2c b2 c2 8c a4 a4 72 79 68 e1 4e 42 90 78 c6 78 20 0f e9 5f 1f 9b f0 ce 1b 32 5a 3e 57 df 73 ed 32 9c fb 13 80 92 e5 bb 5e bd 8f ad b4 8f f8 28 53 db d9 fe f0 cd 6f 70 ab b5 a3 40 27 60 42 8c b2 e4 63 92 4f 00 80 32 7b 60 57 c5 d4 f0 dd 54 9e b2 4d 77 db fe 09 f5 ab 8f dd 28 a5 28 bb 9c f6 b1 ff 00 05 18 f1 49 dc da 74 97 b2 21 dd 1c 68 f2 61 54 9e fd 47 20 f7 Data Ascii: d\|kzoM9!j2qj#SHjSz?w2Vpdl;p(K_sFZ.,nV{y<lYr`}kiS0>Tiod,ryhNBxx _2Z>Ws2^(Sop@'`BcO2{`WTMw((It!haTG
2024-05-06 16:42:28 UTC	16384	IN	Data Raw: 4e de dc 8f e7 54 e5 65 ca c6 a3 16 ae 61 dc b0 0c c3 7e ed c0 81 b9 b2 72 38 cf a7 af e9 5c f5 1a dd 6a 75 53 bc 75 7f d7 f9 1c d6 a2 8a 02 38 52 01 6c 00 a3 04 8c 67 93 9e 71 fd 6b cb ad 66 db 47 a7 42 77 56 66 40 48 c8 3b d3 8d e7 23 f8 30 70 33 fe 7a 66 b9 d7 2d b5 36 ba 6f c8 96 28 50 b2 32 67 18 18 2b d5 7e a3 fc 2b 58 a4 b6 39 aa b9 3d 2f fd 79 1a b6 d1 2a b0 70 09 39 38 dc 72 39 07 db d3 d7 d6 bb a8 ab ae 64 78 18 cf 71 be 76 d2 d3 ef fe bf 12 fa aa 94 56 43 2b af dc 75 ea 33 8e de df 98 1e f5 d6 b7 3c 6a 92 e5 bc 74 ba fb f7 eb e7 f8 f7 2e 08 d8 70 8a cb 85 11 83 8d c5 89 24 6d 1d 79 c1 1f 5c 71 52 dd d1 50 b4 6a f3 4b bf 6b 6b fd 7f 56 2e a4 22 26 72 ea 19 94 b2 06 04 86 8c 8e 38 fa 77 ae 79 a4 ee d9 f4 98 49 42 9d 08 5b 5b 5a ed ab 6f be fd d9 Data Ascii: NTea~r8\juSu8RlgqkfGBwVf@H;#0p3zf-6o(P2g+~+X9=/y*p98r9dxqvVC+u3<jt.p$my\qRPjKkkV."&r8wyIB[[Zo
2024-05-06 16:42:28 UTC	16384	IN	Data Raw: 42 9b d9 59 f7 39 3b bd 64 29 78 cb ee 43 f2 b0 cf b0 c6 46 3b 70 2b 78 56 96 88 e0 9d 24 9b 4f 7f f8 63 0a 5d 6a 43 cf 99 b8 ee dd d7 b0 e0 0c 7a e3 1c fb d6 8a bb d9 a3 37 43 43 2a 7d 50 f4 de 40 04 95 db c0 5e 99 c7 61 57 ce 9e 89 94 a8 c9 a1 d1 ea 2f f2 15 65 5c 91 83 9c f4 e9 c7 f5 a0 b8 fb 48 3d 0f ef 83 fe 08 df f1 17 c3 be 21 ff 00 82 7e fe cf ba 56 9d f1 0b 4a f1 27 88 3c 09 a1 df 68 9a a9 f0 0f 86 f5 1f 0d 5e f8 39 20 d4 ae 6e e1 d0 b5 96 67 96 0b 8b fb 41 3b 3b dd 46 b6 ff 00 69 8e e6 02 91 bb 17 91 bf 07 e3 fa 72 86 71 39 b8 b4 9a 4d 5f ee ba eb e5 d7 ab d0 fe a9 f0 ce 51 9f 0d 51 49 a6 d5 d6 9d ee f4 7e 7a df 6d 9a df 73 f6 13 c4 1a 87 88 af 2c 96 18 e7 9e d7 4f b7 36 c6 f3 59 bb 85 75 19 22 b9 9e 45 92 1f b4 d9 dc 42 ae 70 a5 8a c0 e1 f1 bb Data Ascii: BY9;d)xCF;p+xV$Oc]jCz7CC*}P@^aW/e\H=!~VJ'<h^9 ngA;;Firq9M_QQI~zms,O6Yu"EBp
2024-05-06 16:42:28 UTC	16384	IN	Data Raw: a5 5d db 53 8f 93 e3 46 be 19 ff 00 78 f8 2c 49 26 52 58 0e 70 31 f8 8e 2b 78 e5 f4 9b d1 0b da b5 b1 48 fc 63 f1 21 62 c2 e6 51 d0 03 bf 91 c7 4f d2 b5 fe cf a0 4a a9 24 db 47 ef 8c 7a db b6 d1 e6 0e 3a 7c dd 6b f6 9f 64 92 ba ea 7f 21 47 13 26 f4 35 2d f5 96 62 3e 6c 02 47 20 e3 81 43 a4 6b 1c 4e d7 5f 89 e8 9a 0e a2 cf 24 4c 0e e0 d8 62 18 6e 2c 07 f9 15 c5 5a 2a ce 28 f4 f0 b3 6e 6a c7 ba 68 d3 13 09 2a d8 f9 7a 93 d3 ae 7f 4a f0 ab 3f 7b 53 e9 e8 41 f2 3e e6 85 cd f6 c4 63 cf c8 00 1c 64 76 ed f5 cd 63 05 ef 24 2a ae c7 09 aa 6b 0c 1d 80 70 32 4e 49 f6 ff 00 22 bd ac 25 34 e2 ae 8f 03 30 c4 38 ca d7 39 f4 d6 26 70 c0 48 30 e7 71 2b f7 40 f6 ae d5 49 29 5c f2 96 21 be a6 8d be b3 3c 64 31 90 92 3d 4f 0b 9e 87 34 3a 31 96 85 2c 44 e0 ef 73 56 3f 10 b4 Data Ascii: ]SFx,I&RXp1+xHc!bQOJ$Gz:\|kd!G&5-b>lG CkN_$Lbn,Z(njhzJ?{SA>cdvc$*kp2NI"%4089&pH0q+@I)\!<d1=O4:1,DsV?
2024-05-06 16:42:28 UTC	16384	IN	Data Raw: 5e 29 69 db e4 7e 82 78 1b c3 1a c6 b0 ea 8e a0 d8 45 06 7c 98 93 ca 28 0e 40 27 9c ed 18 39 db ff 00 ea e9 c2 2c 46 2e 7c b4 d6 db ff 00 99 f9 47 11 67 18 3c be 1c d2 7f bc 6f ae bf d3 3b f9 f4 43 a3 59 cd a5 d8 f9 7b e7 87 ec f3 ca 66 60 46 41 fe 2c 64 0f 9b 3c 1e c6 b3 c7 46 54 5f b1 a6 f5 ea 7c ed 2c c5 63 eb 47 17 88 bd a2 ee 95 bf ab 9e 5e fe 19 d3 f4 cf b5 dc 5d dc 2d eb b4 86 59 e7 61 b5 19 81 23 66 0f 6e 3b 7a 66 be 6a 38 5a 70 94 9d 47 7e e7 d1 7d 7a b6 25 af 65 1e 55 d1 79 77 3e 70 f8 a7 f1 63 c2 be 15 b7 ba ff 00 4c b4 89 ed e3 25 bf 7a a2 3b 45 04 64 fb 01 c7 5a e3 ad 5e 10 4f 90 f7 f2 fc be b5 47 cf 55 d9 77 67 f3 f1 fb 78 ff 00 c1 4b 74 6f 87 ba 4d fe 85 f0 fa ec 6b fe 36 91 24 3f 63 86 65 8a d7 49 88 0c c9 75 7b 21 c8 8d 54 12 40 61 9e 33 Data Ascii: ^)i~xE\|(@'9,F.\|Gg<o;CY{f`FA,d<FT_\|,cG^]-Ya#fn;zfj8ZpG~}z%eUyw>pcL%z;EdZ^OGUwgxKtoMk6$?ceIu{!T@a3
2024-05-06 16:42:28 UTC	16384	IN	Data Raw: 39 ef cf 39 27 bf 6a de d7 f8 45 ca da d0 d7 b3 ba c3 83 92 30 46 71 de 97 23 b6 a1 1d 34 3d 1f 47 bf c2 8f 6c 13 ce 09 f4 ae 4c 4d 34 df ba 7a 38 6a ae 2e cb a1 d8 47 a9 b3 c7 8c e5 b1 9d bd 09 ef 8a e1 74 92 f8 4f 5a 15 a7 64 67 cf 3b 97 63 9c 8e 9c 77 cf 3d ab 48 45 2d ff 00 ab 18 54 6e 72 e6 91 5d 25 23 39 38 03 b8 f4 ed 5d 2b 55 73 9e 50 bb 1e 64 0c 08 e0 8c 70 4f 51 de ad 54 67 3c a8 c6 4f 52 01 19 2e a7 27 81 cb 63 3f 4a d5 56 b2 ba 39 5e 17 5b 1d 1e 9b 71 e4 90 0e 46 00 c1 e8 06 3b 56 72 9b 91 d1 0a 2a 2a cc ee ec f5 a2 8a ab b9 43 29 dd c1 c6 30 31 d7 de b2 51 72 5a b2 da 51 d0 d4 8f 5b 7c 81 bc 6c da 4b 00 72 06 7f 5f ce 93 82 b6 84 f3 32 b4 fa d3 b8 3f 39 54 50 43 65 b9 39 c7 5a 6a 29 31 fb dd 8c 2b bd 50 b8 24 3e 58 0e 76 74 18 3c 62 b5 8a b3 Data Ascii: 99'jE0Fq#4=GlLM4z8j.GtOZdg;cw=HE-Tnr]%#98]+UsPdpOQTg<OR.'c?JV9^[qF;Vr**C)01QrZQ[\|lKr_2?9TPCe9Zj)1+P$>Xvt<b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.11	49867	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:28 UTC	652	OUT	GET /wp-content/cache/min/1/wp-content/plugins/simple-sitemap/lib/assets/css/simple-sitemap-0fcff4a6bcb5f8882c1edb6fbe9287d1.css HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:28 UTC	770	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:28 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 28 Oct 2021 03:54:18 GMT ETag: W/"617a1eea-11c9" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AuvtXeOcWuo0ZpCXPq1z3%2BoJUn5RDFQLshd53URI4D9ULza5%2F77V5f2Dd3dlGxntIfdLDSODkg10Asa4ltTq3rorOc%2FpXDSGOQ%2BHZdCBD0x9QxIRp3cx0EaO1PkLtsBVT54%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c771f98746f-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:28 UTC	599	IN	Data Raw: 31 31 63 39 0d 0a 62 6f 64 79 20 2e 73 69 6d 70 6c 65 2d 73 69 74 65 6d 61 70 2d 6d 65 6e 75 20 6c 69 7b 66 6c 6f 61 74 3a 69 6e 69 74 69 61 6c 7d 2e 73 69 6d 70 6c 65 2d 73 69 74 65 6d 61 70 2d 63 6f 6e 74 61 69 6e 65 72 20 75 6c 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 2e 32 65 6d 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 65 64 69 74 6f 72 2d 73 74 79 6c 65 73 2d 77 72 61 70 70 65 72 20 2e 73 69 6d 70 6c 65 2d 73 69 74 65 6d 61 70 2d 63 6f 6e 74 61 69 6e 65 72 20 75 6c 2c 2e 65 64 69 74 6f 72 2d 73 74 79 6c 65 73 2d 77 72 61 70 70 65 72 20 2e 73 69 6d 70 6c 65 2d 73 69 74 65 6d 61 70 2d 63 6f 6e 74 61 69 6e 65 72 20 6f 6c 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 2e 32 65 6d 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 73 69 6d 70 6c 65 2d 73 69 74 65 6d 61 70 Data Ascii: 11c9body .simple-sitemap-menu li{float:initial}.simple-sitemap-container ul{margin:0 0 0 1.2em;padding:0}.editor-styles-wrapper .simple-sitemap-container ul,.editor-styles-wrapper .simple-sitemap-container ol{margin:0 0 0 1.2em;padding:0}.simple-sitemap
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 30 7d 2e 73 69 6d 70 6c 65 2d 73 69 74 65 6d 61 70 2d 66 69 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 36 70 78 3b 6c 65 66 74 3a 2d 35 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 2e 73 69 6d 70 6c 65 2d 73 69 74 65 6d 61 70 2d 63 6f 6e 74 61 69 6e 65 72 2e 63 6f 6c 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 7d 2e 73 69 6d 70 6c 65 2d 73 69 74 65 6d 61 70 2d 77 72 61 70 2e 63 6f 6c 7b 77 69 64 74 68 3a 32 36 30 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 7d 2e 73 69 6d 70 6c 65 2d 73 69 74 65 6d 61 70 2d 77 72 61 70 2e 63 6f 6c 20 75 6c 2e 6d 61 69 6e 7b 6d Data Ascii: 0}.simple-sitemap-fi{position:relative;top:6px;left:-5px;margin-left:5px}.simple-sitemap-container.col{padding:0;margin:0;display:flex;flex-wrap:wrap}.simple-sitemap-wrap.col{width:260px;margin-right:20px;margin-top:10px}.simple-sitemap-wrap.col ul.main{m
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 2e 73 69 6d 70 6c 65 2d 73 69 74 65 6d 61 70 2d 63 6f 6e 74 65 6e 74 20 2e 73 69 6d 70 6c 65 2d 73 69 74 65 6d 61 70 2d 74 61 62 2d 31 2c 2e 73 69 6d 70 6c 65 2d 73 69 74 65 6d 61 70 2d 63 6f 6e 74 61 69 6e 65 72 2e 74 61 62 2d 65 6e 61 62 6c 65 64 20 69 6e 70 75 74 5b 69 64 5e 3d 22 73 69 6d 70 6c 65 2d 73 69 74 65 6d 61 70 2d 74 61 62 2d 32 22 5d 3a 63 68 65 63 6b 65 64 7e 2e 73 69 6d 70 6c 65 2d 73 69 74 65 6d 61 70 2d 63 6f 6e 74 65 6e 74 20 2e 73 69 6d 70 6c 65 2d 73 69 74 65 6d 61 70 2d 74 61 62 2d 32 2c 2e 73 69 6d 70 6c 65 2d 73 69 74 65 6d 61 70 2d 63 6f 6e 74 61 69 6e 65 72 2e 74 61 62 2d 65 6e 61 62 6c 65 64 20 69 6e 70 75 74 5b 69 64 5e 3d 22 73 69 6d 70 6c 65 2d 73 69 74 65 6d 61 70 2d 74 61 62 2d 33 22 5d 3a 63 68 65 63 6b 65 64 7e 2e 73 69 Data Ascii: .simple-sitemap-content .simple-sitemap-tab-1,.simple-sitemap-container.tab-enabled input[id^="simple-sitemap-tab-2"]:checked~.simple-sitemap-content .simple-sitemap-tab-2,.simple-sitemap-container.tab-enabled input[id^="simple-sitemap-tab-3"]:checked~.si
2024-05-06 16:42:28 UTC	1224	IN	Data Raw: 6c 69 64 20 23 64 64 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 30 20 34 70 78 20 34 70 78 7d 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 61 6e 65 6c 5f 5f 72 6f 77 2e 73 69 6d 70 6c 65 2d 73 69 74 65 6d 61 70 20 2e 72 65 61 63 74 2d 73 65 6c 65 63 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 70 78 7d 2e 6c 61 62 65 6c 2d 77 69 64 65 20 6c 61 62 65 6c 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 61 6e 65 6c 20 2e 74 61 62 2d 63 6f 6c 6f 72 73 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 61 6e 65 6c 20 2e 73 65 72 69 65 73 2d 63 6f 6c 6f 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 Data Ascii: lid #ddd;border-radius:0 0 4px 4px}.components-panel__row.simple-sitemap .react-select-container{min-width:120px}.label-wide label{max-width:100%}.components-panel .tab-colors{display:block}.components-panel .series-color{display:inline-block;margin:0 0 0
2024-05-06 16:42:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.11	49866	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:28 UTC	644	OUT	GET /wp-content/cache/min/1/wp-content/plugins/revslider/public/assets/css/settings-36ca63d9d38924f69a128c3b249182a0.css HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:28 UTC	774	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:28 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 28 Oct 2021 03:54:18 GMT ETag: W/"617a1eea-7b67" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P75T043uBH2BIAy%2B0854o3ZCt00rjn7t44X%2B%2B6xzk3wV%2BLIREliUPKof3Yt0UjmpY8eMTpZq0wvRqmc0LU0NX0JdFlCxvzYjKwgG%2BvFp%2FVEC13Qol37JTK7zohJQPDXcT0E%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c771db7a4c4-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:28 UTC	595	IN	Data Raw: 37 62 36 37 0d 0a 23 64 65 62 75 6e 67 63 6f 6e 74 72 6f 6c 6c 73 7b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 30 30 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 62 6f 74 74 6f 6d 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 36 29 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 64 65 62 75 67 74 69 6d 65 6c 69 6e 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 70 78 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 77 68 69 74 65 2d 73 70 Data Ascii: 7b67#debungcontrolls{z-index:100000;position:fixed;bottom:0;width:100%;height:auto;background:rgba(0,0,0,.6);padding:10px;box-sizing:border-box}.debugtimeline{width:100%;height:10px;position:relative;display:block;margin-bottom:3px;display:none;white-sp
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 67 74 69 6d 65 6c 69 6e 65 2e 74 6c 5f 73 6c 69 64 65 20 2e 74 68 65 5f 74 69 6d 65 6c 69 6e 65 5f 74 65 73 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 33 39 63 31 32 7d 2e 64 65 62 75 67 74 69 6d 65 6c 69 6e 65 2e 74 6c 5f 66 72 61 6d 65 20 2e 74 68 65 5f 74 69 6d 65 6c 69 6e 65 5f 74 65 73 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 34 39 38 64 62 7d 2e 64 65 62 75 67 74 69 6d 6c 69 6e 65 5f 74 78 74 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 37 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 31 30 70 78 3b 74 6f 70 3a 30 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 70 78 7d 2e 72 74 Data Ascii: gtimeline.tl_slide .the_timeline_tester{background:#f39c12}.debugtimeline.tl_frame .the_timeline_tester{background:#3498db}.debugtimline_txt{color:#fff;font-weight:400;font-size:7px;position:absolute;left:10px;top:0;white-space:nowrap;line-height:10px}.rt
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 33 27 7d 2e 72 65 76 69 63 6f 6e 2d 63 61 6e 63 65 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 30 61 27 7d 2e 72 65 76 69 63 6f 6e 2d 69 6e 66 6f 2d 63 69 72 63 6c 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 30 66 27 7d 2e 72 65 76 69 63 6f 6e 2d 74 72 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 30 31 27 7d 2e 72 65 76 69 63 6f 6e 2d 6c 65 66 74 2d 64 69 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 31 37 27 7d 2e 72 65 76 69 63 6f 6e 2d 72 69 67 68 74 2d 64 69 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 31 38 27 7d 2e 72 65 76 69 63 6f 6e 2d 64 6f 77 6e 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 33 62 27 7d 2e 72 65 76 69 Data Ascii: 3'}.revicon-cancel:before{content:'\e80a'}.revicon-info-circled:before{content:'\e80f'}.revicon-trash:before{content:'\e801'}.revicon-left-dir:before{content:'\e817'}.revicon-right-dir:before{content:'\e818'}.revicon-down-open:before{content:'\e83b'}.revi
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 69 63 6f 6e 2d 6c 65 66 74 2d 6f 70 65 6e 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 32 65 27 7d 2e 72 65 76 69 63 6f 6e 2d 6c 65 66 74 2d 6f 70 65 6e 2d 32 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 32 63 27 7d 2e 72 65 76 69 63 6f 6e 2d 72 69 67 68 74 2d 6f 70 65 6e 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 32 66 27 7d 2e 72 65 76 69 63 6f 6e 2d 72 69 67 68 74 2d 6f 70 65 6e 2d 32 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 32 64 27 7d 2e 72 65 76 69 63 6f 6e 2d 65 71 75 61 6c 69 7a 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 33 61 27 7d 2e 72 65 76 69 63 6f 6e 2d 6c 61 79 65 72 73 2d 61 6c 74 3a 62 65 66 6f 72 65 7b Data Ascii: icon-left-open-outline:before{content:'\e82e'}.revicon-left-open-2:before{content:'\e82c'}.revicon-right-open-outline:before{content:'\e82f'}.revicon-right-open-2:before{content:'\e82d'}.revicon-equalizer:before{content:'\e83a'}.revicon-layers-alt:before{
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 3e 6c 69 2c 2e 74 70 2d 73 69 6d 70 6c 65 72 65 73 70 6f 6e 73 69 76 65 3e 75 6c 3e 6c 69 3a 62 65 66 6f 72 65 2c 2e 74 70 2d 72 65 76 73 6c 69 64 65 72 2d 6d 61 69 6e 75 6c 3e 6c 69 2c 2e 74 70 2d 73 69 6d 70 6c 65 72 65 73 70 6f 6e 73 69 76 65 3e 75 6c 3e 6c 69 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 74 70 2d 72 65 76 73 6c 69 64 65 72 2d 73 6c 69 64 65 73 6c 69 2c 2e 74 70 2d 72 65 76 73 6c 69 64 65 72 2d 6d 61 69 6e 75 6c 7b 70 61 64 64 69 6e 67 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 72 65 76 5f 73 6c 69 64 65 72 20 6c 69 2e 74 70 2d 72 65 76 73 6c 69 64 65 72 2d 73 6c 69 64 65 73 6c 69 7b 70 6f Data Ascii: >li,.tp-simpleresponsive>ul>li:before,.tp-revslider-mainul>li,.tp-simpleresponsive>ul>li{visibility:hidden}.tp-revslider-slidesli,.tp-revslider-mainul{padding:0!important;margin:0!important;list-style:none!important}.rev_slider li.tp-revslider-slidesli{po
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 70 5f 69 6e 6e 65 72 5f 70 61 64 64 69 6e 67 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 70 2d 63 61 70 74 69 6f 6e 2e 74 70 2d 6c 61 79 65 72 2d 73 65 6c 65 63 74 61 62 6c 65 7b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 61 6c 6c 3b 2d 6b 68 74 6d 6c 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 61 6c 6c 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 61 6c 6c 3b 2d 6f 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 61 6c 6c 7d 2e 74 70 2d 66 6f 72 63 65 6e 6f 74 76 69 73 69 62 6c 65 2c 2e 74 70 2d 68 69 64 65 2d 72 65 76 73 6c 69 64 65 72 2c 2e 74 70 2d 63 61 70 74 69 6f 6e 2e 74 70 2d 68 69 64 64 65 6e 2d 63 61 70 74 69 6f 6e 2c 2e 74 70 Data Ascii: p_inner_padding{box-sizing:border-box;max-height:none!important}.tp-caption.tp-layer-selectable{-moz-user-select:all;-khtml-user-select:all;-webkit-user-select:all;-o-user-select:all}.tp-forcenotvisible,.tp-hide-revslider,.tp-caption.tp-hidden-caption,.tp
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 3b 68 65 69 67 68 74 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 72 65 76 5f 63 6f 6c 75 6d 6e 5f 62 67 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 7a 2d 69 6e 64 65 78 3a 30 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 72 64 65 72 3a 30 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 72 65 76 5f 63 6f 6c 75 6d 6e 5f 69 6e 6e 65 72 20 2e 74 70 Data Ascii: ative;width:100%!important;height:auto!important;white-space:normal!important}.rev_column_bg{width:100%;height:100%;position:absolute;top:0;left:0;z-index:0;box-sizing:border-box;background-clip:content-box;border:0 solid transparent}.rev_column_inner .tp
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 6f 6c 69 64 20 23 30 30 41 38 46 46 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 2d 34 30 70 78 3b 74 6f 70 3a 30 7d 2e 74 70 2d 63 61 70 74 69 6f 6e 20 2e 62 61 63 6b 63 6f 72 6e 65 72 7b 77 69 64 74 68 3a 30 3b 68 65 69 67 68 74 3a 30 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 30 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 34 30 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 34 30 70 78 20 73 6f 6c 69 64 20 23 30 30 41 38 46 46 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 7d 2e 74 70 2d 63 61 70 74 69 6f 6e 20 2e 66 72 6f 6e 74 63 6f 72 6e 65 72 74 6f 70 7b 77 69 64 74 68 Data Ascii: olid #00A8FF;position:absolute;left:-40px;top:0}.tp-caption .backcorner{width:0;height:0;border-left:0 solid transparent;border-right:40px solid transparent;border-bottom:40px solid #00A8FF;position:absolute;right:0;top:0}.tp-caption .frontcornertop{width
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 6e 76 69 64 65 6f 20 76 69 64 65 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 30 7d 2e 66 75 6c 6c 63 6f 76 65 72 65 64 76 69 64 65 6f 20 2e 74 70 2d 70 6f 73 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 20 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 7d 2e 76 69 64 65 6f 69 73 70 6c 61 79 69 6e 67 20 2e 68 74 6d 6c 35 76 69 64 20 2e 74 70 2d 70 6f 73 74 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 74 70 2d 76 69 64 65 6f 2d 70 6c 61 79 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 Data Ascii: nvideo video{background:#000}.fullcoveredvideo .tp-poster{background-position:center center;background-size:cover;width:100%;height:100%;top:0;left:0}.videoisplaying .html5vid .tp-poster{display:none}.tp-video-play-button{background:#000;background:rgba(0
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 6c 73 63 72 65 65 6e 76 69 64 65 6f 20 2e 66 75 6c 6c 73 63 72 65 65 6e 76 69 64 65 6f 20 61 75 64 69 6f 7b 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 6e 74 61 69 6e 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 75 6c 6c 73 63 72 65 65 6e 76 69 64 65 6f 20 2e 66 75 6c 6c 73 63 72 65 65 6e 76 69 64 65 6f 20 76 69 64 65 6f 7b 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 6e 74 61 69 6e 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 75 6c 6c 73 63 72 65 65 6e 76 69 64 65 6f 20 2e 66 75 6c 6c 63 6f 76 65 72 65 64 76 69 64 65 6f 20 61 75 64 69 6f 7b 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 75 6c 6c 73 63 72 65 65 6e 76 69 64 65 6f 20 2e 66 75 6c 6c 63 6f 76 65 72 65 64 76 69 64 65 6f 20 76 69 64 65 6f 7b 6f 62 6a 65 63 74 2d 66 69 74 3a 63 Data Ascii: lscreenvideo .fullscreenvideo audio{object-fit:contain!important}.fullscreenvideo .fullscreenvideo video{object-fit:contain!important}.fullscreenvideo .fullcoveredvideo audio{object-fit:cover!important}.fullscreenvideo .fullcoveredvideo video{object-fit:c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.11	49865	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:28 UTC	631	OUT	GET /wp-content/cache/min/1/wp-content/themes/fortuna/stylesheets/grid-896199530817a6736ba181d5858c9463.css HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:28 UTC	775	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:28 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 28 Oct 2021 03:54:18 GMT ETag: W/"617a1eea-4ad" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FzUt9VLxCOdhADbYm2uSwc3rEeaZQeIMCkyjyoCxSA1w%2BMh1MBcn834blhPlcb%2FYuJdNWiFZhUY%2Bims%2BFcfXm%2Bwp3h3awdDqsKukhFj0vbrJ1Pg%2BsWMR%2BHnEPnfNhXXpHss%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c771b659ac3-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:28 UTC	594	IN	Data Raw: 34 61 64 0d 0a 2e 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 31 32 30 30 70 78 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 62 6f 78 65 64 5f 77 72 61 70 70 65 72 2c 2e 62 6f 78 65 64 5f 77 72 61 70 70 65 72 20 23 68 65 61 64 65 72 2c 2e 62 6f 78 65 64 5f 77 72 61 70 70 65 72 20 23 66 6f 6f 74 65 72 7b 77 69 64 74 68 3a 31 32 36 30 70 78 7d 2e 62 6f 78 65 64 5f 77 72 61 70 70 65 72 20 2e 76 63 5f 72 6f 77 3a 6e 6f 74 28 2e 76 63 5f 69 6e 6e 65 72 29 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 33 30 70 78 3b 6d 61 72 Data Ascii: 4ad.container{width:1200px;margin:0 auto;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}.boxed_wrapper,.boxed_wrapper #header,.boxed_wrapper #footer{width:1260px}.boxed_wrapper .vc_row:not(.vc_inner){margin-left:-30px;mar
2024-05-06 16:42:28 UTC	610	IN	Data Raw: 69 6e 2d 6c 65 66 74 3a 30 7d 2e 73 70 61 6e 5f 32 5f 6f 66 5f 32 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 73 70 61 6e 5f 31 5f 6f 66 5f 32 7b 77 69 64 74 68 3a 34 38 2e 35 25 7d 2e 73 70 61 6e 5f 33 5f 6f 66 5f 33 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 73 70 61 6e 5f 32 5f 6f 66 5f 33 7b 77 69 64 74 68 3a 36 35 2e 36 36 25 7d 2e 73 70 61 6e 5f 31 5f 6f 66 5f 33 7b 77 69 64 74 68 3a 33 31 2e 33 33 25 7d 2e 73 70 61 6e 5f 34 5f 6f 66 5f 34 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 73 70 61 6e 5f 33 5f 6f 66 5f 34 7b 77 69 64 74 68 3a 37 34 2e 32 35 25 7d 2e 73 70 61 6e 5f 32 5f 6f 66 5f 34 7b 77 69 64 74 68 3a 34 38 2e 35 25 7d 2e 73 70 61 6e 5f 31 5f 6f 66 5f 34 7b 77 69 64 74 68 3a 32 32 2e 37 35 25 7d 2e 73 70 61 6e 5f 35 5f 6f 66 5f 35 7b 77 69 64 74 68 3a Data Ascii: in-left:0}.span_2_of_2{width:100%}.span_1_of_2{width:48.5%}.span_3_of_3{width:100%}.span_2_of_3{width:65.66%}.span_1_of_3{width:31.33%}.span_4_of_4{width:100%}.span_3_of_4{width:74.25%}.span_2_of_4{width:48.5%}.span_1_of_4{width:22.75%}.span_5_of_5{width:
2024-05-06 16:42:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.11	49868	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:28 UTC	632	OUT	GET /wp-content/cache/min/1/wp-content/themes/fortuna/stylesheets/icons-1dc822960f4092c5373ece9212ad5a49.css HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:28 UTC	774	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:28 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 28 Oct 2021 03:54:18 GMT ETag: W/"617a1eea-a983" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FiB6bh%2BadWue%2FCTrZ2H3NcHhuAAdsEtRT7PBln9KlNLLMi7%2B29nZoR21WMWZuaxfYCUqGF151ZEdRBV%2BKM5l0NukVGyATp%2Bv0%2F6PWWTED32FFT6pR1ilZ7re2EAYd8c8NHw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c771ccc0355-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:28 UTC	595	IN	Data Raw: 37 63 61 62 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 69 63 6f 6d 6f 6f 6e 27 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 74 68 65 6d 65 73 2f 66 6f 72 74 75 6e 61 2f 73 74 79 6c 65 73 68 65 65 74 73 2f 66 6f 6e 74 73 2f 69 63 6f 6d 6f 6f 6e 2e 65 6f 74 3f 6d 62 33 62 31 6b 29 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 74 68 65 6d 65 73 2f 66 6f 72 74 75 6e 61 2f 73 74 79 6c 65 73 68 65 65 74 73 2f 66 6f 6e 74 73 2f 69 63 6f 6d 6f 6f 6e 2e 65 6f 74 3f 23 69 65 66 69 78 6d 62 33 62 31 6b 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 Data Ascii: 7cab@font-face{font-display:swap;font-family:'icomoon';src:url(../../../../../../../themes/fortuna/stylesheets/fonts/icomoon.eot?mb3b1k);src:url('../../../../../../../themes/fortuna/stylesheets/fonts/icomoon.eot?#iefixmb3b1k') format('embedded-opentype'
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 30 29 7b 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 69 63 6f 6d 6f 6f 6e 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 74 68 65 6d 65 73 2f 66 6f 72 74 75 6e 61 2f 73 74 79 6c 65 73 68 65 65 74 73 2f 66 6f 6e 74 73 2f 69 63 6f 6d 6f 6f 6e 2e 73 76 67 3f 6d 62 33 62 31 6b 23 69 63 6f 6d 6f 6f 6e 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 7d 7d 2e 69 63 6f 6e 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 69 63 6f 6d 6f 6f 6e 27 3b 73 70 65 61 6b 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 3b 66 6f Data Ascii: en and (-webkit-min-device-pixel-ratio:0){@font-face{font-display:swap;font-family:'icomoon';src:url('../../../../../../../themes/fortuna/stylesheets/fonts/icomoon.svg?mb3b1k#icomoon') format('svg')}}.icon{font-family:'icomoon';speak:none;font-size:1em;fo
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 62 75 63 6b 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 62 64 22 7d 2e 69 63 6f 6e 2d 70 65 6e 64 72 69 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 62 65 22 7d 2e 69 63 6f 6e 2d 70 68 6f 74 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 62 66 22 7d 2e 69 63 6f 6e 2d 70 69 67 67 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 63 30 22 7d 2e 69 63 6f 6e 2d 70 6c 75 67 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 63 31 22 7d 2e 69 63 6f 6e 2d 72 65 66 72 65 73 68 2d 32 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 63 32 22 7d 2e 69 63 6f 6e 2d 72 6f 63 6b 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 63 33 22 7d 2e 69 63 6f 6e 2d Data Ascii: bucket:before{content:"\e6bd"}.icon-pendrive:before{content:"\e6be"}.icon-photo:before{content:"\e6bf"}.icon-piggy:before{content:"\e6c0"}.icon-plugin:before{content:"\e6c1"}.icon-refresh-2:before{content:"\e6c2"}.icon-rocket:before{content:"\e6c3"}.icon-
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 2e 69 63 6f 6e 2d 73 63 69 73 73 6f 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 39 37 22 7d 2e 69 63 6f 6e 2d 77 61 6c 6c 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 30 22 7d 2e 69 63 6f 6e 2d 73 61 66 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 39 38 22 7d 2e 69 63 6f 6e 2d 76 6f 6c 75 6d 65 32 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 31 22 7d 2e 69 63 6f 6e 2d 76 6f 6c 75 6d 65 31 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 32 22 7d 2e 69 63 6f 6e 2d 76 6f 69 63 65 6d 61 69 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 33 22 7d 2e 69 63 6f 6e 2d 76 69 64 65 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 34 22 Data Ascii: .icon-scissors:before{content:"\e697"}.icon-wallet:before{content:"\e600"}.icon-safe:before{content:"\e698"}.icon-volume2:before{content:"\e601"}.icon-volume1:before{content:"\e602"}.icon-voicemail:before{content:"\e603"}.icon-video:before{content:"\e604"
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 5c 65 36 39 64 22 7d 2e 69 63 6f 6e 2d 70 72 69 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 31 66 22 7d 2e 69 63 6f 6e 2d 6e 65 74 77 6f 72 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 39 65 22 7d 2e 69 63 6f 6e 2d 70 72 65 76 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 32 30 22 7d 2e 69 63 6f 6e 2d 6d 75 74 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 39 66 22 7d 2e 69 63 6f 6e 2d 70 6f 77 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 32 31 22 7d 2e 69 63 6f 6e 2d 6d 65 64 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 61 30 22 7d 2e 69 63 6f 6e 2d 70 6f 72 74 66 6f 6c 69 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 32 32 22 Data Ascii: \e69d"}.icon-print:before{content:"\e61f"}.icon-network:before{content:"\e69e"}.icon-prev:before{content:"\e620"}.icon-mute:before{content:"\e69f"}.icon-power:before{content:"\e621"}.icon-medal:before{content:"\e6a0"}.icon-portfolio:before{content:"\e622"
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 6e 74 3a 22 5c 65 36 33 38 22 7d 2e 69 63 6f 6e 2d 6d 61 69 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 33 39 22 7d 2e 69 63 6f 6e 2d 6d 61 69 6c 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 33 61 22 7d 2e 69 63 6f 6e 2d 6d 61 69 6c 2d 6f 70 65 6e 2d 66 69 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 33 62 22 7d 2e 69 63 6f 6e 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 33 63 22 7d 2e 69 63 6f 6e 2d 6c 6f 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 33 64 22 7d 2e 69 63 6f 6e 2d 6c 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 33 65 22 7d 2e 69 63 6f 6e 2d 6c 6f 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 Data Ascii: nt:"\e638"}.icon-mail:before{content:"\e639"}.icon-mail-open:before{content:"\e63a"}.icon-mail-open-file:before{content:"\e63b"}.icon-magnet:before{content:"\e63c"}.icon-loop:before{content:"\e63d"}.icon-look:before{content:"\e63e"}.icon-lock:before{conte
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 6e 2d 64 69 73 6b 65 74 74 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 35 66 22 7d 2e 69 63 6f 6e 2d 64 61 74 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 36 30 22 7d 2e 69 63 6f 6e 2d 63 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 36 31 22 7d 2e 69 63 6f 6e 2d 63 75 6c 74 75 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 36 32 22 7d 2e 69 63 6f 6e 2d 63 72 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 36 33 22 7d 2e 69 63 6f 6e 2d 63 72 65 64 69 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 36 34 22 7d 2e 69 63 6f 6e 2d 63 6f 70 79 2d 66 69 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 36 35 22 7d 2e 69 63 6f 6e 2d 63 6f Data Ascii: n-diskette:before{content:"\e65f"}.icon-date:before{content:"\e660"}.icon-cup:before{content:"\e661"}.icon-culture:before{content:"\e662"}.icon-crop:before{content:"\e663"}.icon-credit:before{content:"\e664"}.icon-copy-file:before{content:"\e665"}.icon-co
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 75 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 35 22 7d 2e 69 63 6f 6e 2d 64 6f 63 75 6d 65 6e 74 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 36 22 7d 2e 69 63 6f 6e 2d 73 65 61 72 63 68 35 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 37 22 7d 2e 69 63 6f 6e 2d 63 6c 69 70 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 38 22 7d 2e 69 63 6f 6e 2d 6e 65 77 73 70 61 70 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 39 22 7d 2e 69 63 6f 6e 2d 6e 6f 74 65 62 6f 6f 6b 32 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 61 22 7d 2e 69 63 6f 6e 2d 62 6f 6f 6b 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c Data Ascii: ument:before{content:"\e005"}.icon-documents:before{content:"\e006"}.icon-search5:before{content:"\e007"}.icon-clipboard:before{content:"\e008"}.icon-newspaper:before{content:"\e009"}.icon-notebook2:before{content:"\e00a"}.icon-book-open:before{content:"\
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 30 32 39 22 7d 2e 69 63 6f 6e 2d 74 65 6c 65 73 63 6f 70 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 32 61 22 7d 2e 69 63 6f 6e 2d 67 65 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 32 62 22 7d 2e 69 63 6f 6e 2d 6b 65 79 35 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 32 63 22 7d 2e 69 63 6f 6e 2d 70 61 70 65 72 63 6c 69 70 34 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 32 64 22 7d 2e 69 63 6f 6e 2d 61 74 74 61 63 68 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 32 65 22 7d 2e 69 63 6f 6e 2d 70 72 69 63 65 74 61 67 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 32 66 22 7d 2e 69 63 6f 6e 2d 6c 69 67 68 74 62 75 6c 62 3a 62 65 66 6f 72 65 7b Data Ascii: 029"}.icon-telescope:before{content:"\e02a"}.icon-gears:before{content:"\e02b"}.icon-key5:before{content:"\e02c"}.icon-paperclip4:before{content:"\e02d"}.icon-attachment:before{content:"\e02e"}.icon-pricetags:before{content:"\e02f"}.icon-lightbulb:before{
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 2d 74 61 72 67 65 74 33 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 65 22 7d 2e 69 63 6f 6e 2d 68 61 7a 61 72 64 6f 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 66 22 7d 2e 69 63 6f 6e 2d 70 69 65 63 68 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 35 30 22 7d 2e 69 63 6f 6e 2d 73 70 65 65 64 6f 6d 65 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 35 31 22 7d 2e 69 63 6f 6e 2d 67 6c 6f 62 61 6c 32 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 35 32 22 7d 2e 69 63 6f 6e 2d 63 6f 6d 70 61 73 73 34 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 35 33 22 7d 2e 69 63 6f 6e 2d 6c 69 66 65 73 61 76 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 Data Ascii: -target3:before{content:"\e04e"}.icon-hazardous:before{content:"\e04f"}.icon-piechart:before{content:"\e050"}.icon-speedometer:before{content:"\e051"}.icon-global2:before{content:"\e052"}.icon-compass4:before{content:"\e053"}.icon-lifesaver:before{content

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.11	49872	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:28 UTC	646	OUT	GET /wp-content/cache/min/1/wp-content/plugins/js_composer/assets/css/js_composer.min-c4495c7268876157b19ecbb3bfe2431e.css HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:28 UTC	775	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:28 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 28 Oct 2021 03:54:18 GMT ETag: W/"617a1eea-71cec" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=myoKJa4YsDbYjl43WCMrbIU0Y%2Fmbp%2BdN3hYFyJbpEbIJH9EJQkUz%2B4ReqtKZV1MvIXaSbZvH%2B2n%2ByIsEu%2BY9yJZbF4CarNpDK47Ax0ZpXjZXZrOlNU3mEWGMJqiE1A5CYxI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c783989a4e8-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:28 UTC	594	IN	Data Raw: 37 63 61 39 0d 0a 2e 76 63 5f 6e 6f 6e 5f 72 65 73 70 6f 6e 73 69 76 65 20 2e 76 63 5f 72 6f 77 20 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 31 2c 2e 76 63 5f 6e 6f 6e 5f 72 65 73 70 6f 6e 73 69 76 65 20 2e 76 63 5f 72 6f 77 20 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 76 63 5f 6e 6f 6e 5f 72 65 73 70 6f 6e 73 69 76 65 20 2e 76 63 5f 72 6f 77 20 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 76 63 5f 6e 6f 6e 5f 72 65 73 70 6f 6e 73 69 76 65 20 2e 76 63 5f 72 6f 77 20 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 76 63 5f 6e 6f 6e 5f 72 65 73 70 6f 6e 73 69 76 65 20 2e 76 63 5f 72 6f 77 20 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 32 2c 2e 76 63 5f 6e 6f 6e 5f 72 65 73 70 6f 6e 73 69 76 65 20 2e 76 63 5f 72 6f 77 20 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 33 2c 2e 76 63 5f 6e 6f Data Ascii: 7ca9.vc_non_responsive .vc_row .vc_col-sm-1,.vc_non_responsive .vc_row .vc_col-sm-10,.vc_non_responsive .vc_row .vc_col-sm-11,.vc_non_responsive .vc_row .vc_col-sm-12,.vc_non_responsive .vc_row .vc_col-sm-2,.vc_non_responsive .vc_row .vc_col-sm-3,.vc_no
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 3a 3a 61 66 74 65 72 2c 2e 76 63 5f 65 6c 2d 63 6c 65 61 72 66 69 78 2c 2e 76 63 5f 72 6f 77 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 76 63 2d 63 6f 6d 70 6f 73 65 72 2d 69 63 6f 6e 2c 5b 63 6c 61 73 73 2a 3d 22 20 76 63 5f 61 72 72 6f 77 2d 69 63 6f 6e 2d 22 5d 2c 5b 63 6c 61 73 73 5e 3d 76 63 5f 61 72 72 6f 77 2d 69 63 6f 6e 2d 5d 7b 73 70 65 61 6b 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 6e 6f 72 6d 61 6c 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 7d 2e 76 63 5f 72 6f 77 3a 61 66 74 65 72 2c 2e 76 63 Data Ascii: ::after,.vc_el-clearfix,.vc_row:after{clear:both}.vc-composer-icon,[class*=" vc_arrow-icon-"],[class^=vc_arrow-icon-]{speak:none;font-variant:normal;text-transform:none;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.vc_row:after,.vc
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 6e 2d 68 65 69 67 68 74 3a 31 70 78 7d 2e 76 63 5f 6e 6f 6e 5f 72 65 73 70 6f 6e 73 69 76 65 20 2e 76 63 5f 72 6f 77 20 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 39 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 37 35 25 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 7d 2e 76 63 5f 6e 6f 6e 5f 72 65 73 70 6f 6e 73 69 76 65 20 2e 76 63 5f 72 6f 77 20 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 31 30 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 33 33 25 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 7d 2e 76 63 5f 6e 6f 6e 5f 72 65 73 70 6f 6e 73 69 76 65 20 2e 76 63 5f 72 6f 77 20 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 31 31 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 39 Data Ascii: n-height:1px}.vc_non_responsive .vc_row .vc_col-sm-9{position:relative;width:75%;min-height:1px}.vc_non_responsive .vc_row .vc_col-sm-10{position:relative;width:83.33333333%;min-height:1px}.vc_non_responsive .vc_row .vc_col-sm-11{position:relative;width:9
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 2e 76 63 5f 72 6f 77 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 35 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 31 35 70 78 7d 2e 76 63 5f 63 6f 6c 2d 6c 67 2d 31 2c 2e 76 63 5f 63 6f 6c 2d 6c 67 2d 31 30 2c 2e 76 63 5f 63 6f 6c 2d 6c 67 2d 31 31 2c 2e 76 63 5f 63 6f 6c 2d 6c 67 2d 31 32 2c 2e 76 63 5f 63 6f 6c 2d 6c 67 2d 32 2c 2e 76 63 5f 63 6f 6c 2d 6c 67 2d 33 2c 2e 76 63 5f 63 6f 6c 2d 6c 67 2d 34 2c 2e 76 63 5f 63 6f 6c 2d 6c 67 2d 35 2c 2e 76 63 5f 63 6f 6c 2d 6c 67 2d 36 2c 2e 76 63 5f 63 6f 6c 2d 6c 67 2d 37 2c 2e 76 63 5f 63 6f 6c 2d 6c 67 2d 38 2c 2e 76 63 5f 63 6f 6c 2d 6c 67 2d 39 2c 2e 76 63 5f 63 6f 6c 2d 6d 64 2d 31 2c 2e 76 63 5f 63 6f 6c 2d 6d 64 2d 31 30 2c 2e 76 63 5f 63 6f 6c 2d 6d 64 2d 31 31 2c 2e 76 63 5f 63 6f 6c 2d 6d 64 Data Ascii: .vc_row{margin-left:-15px;margin-right:-15px}.vc_col-lg-1,.vc_col-lg-10,.vc_col-lg-11,.vc_col-lg-12,.vc_col-lg-2,.vc_col-lg-3,.vc_col-lg-4,.vc_col-lg-5,.vc_col-lg-6,.vc_col-lg-7,.vc_col-lg-8,.vc_col-lg-9,.vc_col-md-1,.vc_col-md-10,.vc_col-md-11,.vc_col-md
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 6c 6c 2d 31 31 7b 72 69 67 68 74 3a 39 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 76 63 5f 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 31 30 7b 72 69 67 68 74 3a 38 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 76 63 5f 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 39 7b 72 69 67 68 74 3a 37 35 25 7d 2e 76 63 5f 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 38 7b 72 69 67 68 74 3a 36 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 76 63 5f 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 37 7b 72 69 67 68 74 3a 35 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 76 63 5f 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 36 7b 72 69 67 68 74 3a 35 30 25 7d 2e 76 63 5f 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 35 7b 72 69 67 68 74 3a 34 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 76 63 5f 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 34 7b 72 69 67 68 74 3a 33 Data Ascii: ll-11{right:91.66666667%}.vc_col-xs-pull-10{right:83.33333333%}.vc_col-xs-pull-9{right:75%}.vc_col-xs-pull-8{right:66.66666667%}.vc_col-xs-pull-7{right:58.33333333%}.vc_col-xs-pull-6{right:50%}.vc_col-xs-pull-5{right:41.66666667%}.vc_col-xs-pull-4{right:3
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 31 2c 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 32 2c 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 33 2c 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 34 2c 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 35 2c 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 36 2c 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 37 2c 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 38 2c 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 39 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 31 32 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 31 31 7b 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 76 63 5f 63 6f Data Ascii: ia (min-width:768px){.vc_col-sm-1,.vc_col-sm-10,.vc_col-sm-11,.vc_col-sm-12,.vc_col-sm-2,.vc_col-sm-3,.vc_col-sm-4,.vc_col-sm-5,.vc_col-sm-6,.vc_col-sm-7,.vc_col-sm-8,.vc_col-sm-9{float:left}.vc_col-sm-12{width:100%}.vc_col-sm-11{width:91.66666667%}.vc_co
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 70 75 73 68 2d 30 7b 6c 65 66 74 3a 61 75 74 6f 7d 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 31 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 25 7d 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 76 63 5f Data Ascii: 8.33333333%}.vc_col-sm-push-0{left:auto}.vc_col-sm-offset-12{margin-left:100%}.vc_col-sm-offset-11{margin-left:91.66666667%}.vc_col-sm-offset-10{margin-left:83.33333333%}.vc_col-sm-offset-9{margin-left:75%}.vc_col-sm-offset-8{margin-left:66.66666667%}.vc_
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 35 7b 72 69 67 68 74 3a 34 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 76 63 5f 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 34 7b 72 69 67 68 74 3a 33 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 76 63 5f 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 33 7b 72 69 67 68 74 3a 32 35 25 7d 2e 76 63 5f 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 32 7b 72 69 67 68 74 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 76 63 5f 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 31 7b 72 69 67 68 74 3a 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 76 63 5f 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 30 7b 72 69 67 68 74 3a 61 75 74 6f 7d 2e 76 63 5f 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 31 32 7b 6c 65 66 74 3a 31 30 30 25 7d 2e 76 63 5f 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 31 31 7b 6c 65 66 74 3a 39 31 2e Data Ascii: ol-md-pull-5{right:41.66666667%}.vc_col-md-pull-4{right:33.33333333%}.vc_col-md-pull-3{right:25%}.vc_col-md-pull-2{right:16.66666667%}.vc_col-md-pull-1{right:8.33333333%}.vc_col-md-pull-0{right:auto}.vc_col-md-push-12{left:100%}.vc_col-md-push-11{left:91.
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 6f 6c 2d 6c 67 2d 38 2c 2e 76 63 5f 63 6f 6c 2d 6c 67 2d 39 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 76 63 5f 63 6f 6c 2d 6c 67 2d 31 32 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 76 63 5f 63 6f 6c 2d 6c 67 2d 31 31 7b 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 76 63 5f 63 6f 6c 2d 6c 67 2d 31 30 7b 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 76 63 5f 63 6f 6c 2d 6c 67 2d 39 7b 77 69 64 74 68 3a 37 35 25 7d 2e 76 63 5f 63 6f 6c 2d 6c 67 2d 38 7b 77 69 64 74 68 3a 36 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 76 63 5f 63 6f 6c 2d 6c 67 2d 37 7b 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 76 63 5f 63 6f 6c 2d 6c 67 2d 36 7b 77 69 64 74 68 3a 35 30 25 7d 2e 76 63 5f 63 6f 6c 2d 6c 67 2d 35 7b 77 69 64 74 68 3a 34 31 2e Data Ascii: ol-lg-8,.vc_col-lg-9{float:left}.vc_col-lg-12{width:100%}.vc_col-lg-11{width:91.66666667%}.vc_col-lg-10{width:83.33333333%}.vc_col-lg-9{width:75%}.vc_col-lg-8{width:66.66666667%}.vc_col-lg-7{width:58.33333333%}.vc_col-lg-6{width:50%}.vc_col-lg-5{width:41.
2024-05-06 16:42:28 UTC	1369	IN	Data Raw: 2e 33 33 33 33 33 33 33 33 25 7d 2e 76 63 5f 63 6f 6c 2d 6c 67 2d 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 76 63 5f 63 6f 6c 2d 6c 67 2d 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 76 63 5f 63 6f 6c 2d 6c 67 2d 6f 66 66 73 65 74 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 76 63 5f 63 6f 6c 2d 6c 67 2d 6f 66 66 73 65 74 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 76 63 5f 63 6f 6c 2d 6c 67 2d 6f 66 66 73 65 74 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 76 63 5f 63 6f 6c 2d 6c 67 2d 6f 66 66 73 65 74 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 Data Ascii: .33333333%}.vc_col-lg-offset-9{margin-left:75%}.vc_col-lg-offset-8{margin-left:66.66666667%}.vc_col-lg-offset-7{margin-left:58.33333333%}.vc_col-lg-offset-6{margin-left:50%}.vc_col-lg-offset-5{margin-left:41.66666667%}.vc_col-lg-offset-4{margin-left:33.33

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.11	49873	89.187.173.23	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:28 UTC	687	OUT	GET /api/img-dscr/v2/D0JSP1avgg/3527403/RLqwMG7OTpTSzPtD/alts.json?dto=%7B%22sorted%22%3A%5B%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Flogo.webp%22%2C%22alt%22%3A%22RMS%20Hospitality%20Group%22%2C%22dir%22%3A%22RO%22%7D%5D%2C%22tier%22%3A%22FREE_QUOTA_TIER%22%7D HTTP/1.1 Host: cdn77.api.userway.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:28 UTC	814	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:28 GMT Content-Type: application/json; charset=utf-8 Content-Length: 260 Connection: close X-Service-Version: img-dscr-srv-727604a1 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD, PUT, PATCH, POST, DELETE Access-Control-Allow-Headers: * Access-Control-Expose-Headers: Content-Range, Content-Length, ETag, Content-Type Access-Control-Max-Age: 3000 Cache-Control: max-age=604800 ETag: W/"104-WeQcxxwA6Yiuay45tSUykKoKv/o" Vary: Accept-Encoding X-77-NZT: EggBWbutFQFBDAGckjviAffR+wMA X-77-NZT-Ray: 256bf61940cc254f740839666cf8041d X-Accel-Expires: @1715357475 X-Accel-Date: 1714752675 X-77-Cache: HIT X-77-Age: 261073 Server: CDN77-Turbo Alt-Svc: h3=":443"; ma=86400 X-Cache: MISS X-77-POP: miamiUSFL Accept-Ranges: bytes
2024-05-06 16:42:28 UTC	260	IN	Data Raw: 7b 22 70 61 79 6c 6f 61 64 22 3a 7b 22 6d 69 73 73 69 6e 67 41 6c 74 73 22 3a 5b 7b 22 73 72 63 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 73 74 72 61 74 6f 73 70 68 65 72 65 77 65 62 73 69 74 65 73 2e 63 6f 6d 2f 73 6f 75 72 63 65 2f 73 69 74 65 73 2f 33 63 35 31 37 64 64 36 2d 36 66 61 36 2d 34 33 38 61 2d 38 64 34 37 2d 65 37 61 39 63 64 63 61 33 65 33 62 2f 69 6d 61 67 65 73 2f 6c 6f 67 6f 2e 77 65 62 70 22 2c 22 61 6c 74 22 3a 6e 75 6c 6c 2c 22 61 70 70 72 6f 76 65 64 22 3a 66 61 6c 73 65 2c 22 64 65 63 6f 72 61 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 73 6b 69 70 70 65 64 46 6f 72 52 65 61 64 4f 6e 6c 79 22 3a 74 72 75 65 7d 7d 5d 7d 2c 22 70 61 79 6c 6f 61 64 54 79 70 65 22 3a 22 4d 69 73 73 69 6e 67 41 6c 74 73 Data Ascii: {"payload":{"missingAlts":[{"src":"https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/logo.webp","alt":null,"approved":false,"decorative":false,"metadata":{"skippedForReadOnly":true}}]},"payloadType":"MissingAlts

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.11	49875	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:28 UTC	626	OUT	GET /wp-content/cache/min/1/wp-content/themes/fortuna-child/style-de4eeabd10fd7e5c34310e1183bfc60c.css HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:28 UTC	786	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:28 GMT Content-Type: text/css Content-Length: 52 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Cf-Bgj: minify Cf-Polished: origSize=56 ETag: "617a1eea-38" Last-Modified: Thu, 28 Oct 2021 03:54:18 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 352104 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HVlC9xPg8N35mZBul6Y93mCV8GRWGIZED%2FtrseAmRB7CucGWP4a%2BvlaaGppNoXspX6yQgqij8YSWPxIUHDMDbsYIYbYw7cB7gxh6h8MT5Anj7t2kzAVgTaCQx7iSK%2FSFuI0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c79c8396c88-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:28 UTC	52	IN	Data Raw: 40 69 6d 70 6f 72 74 20 22 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 74 68 65 6d 65 73 2f 66 6f 72 74 75 6e 61 2f 73 74 79 6c 65 2e 63 73 73 22 Data Ascii: @import "../../../../../../themes/fortuna/style.css"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.11	49876	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:28 UTC	637	OUT	GET /wp-content/cache/min/1/wp-content/themes/fortuna/stylesheets/animations-bc60c9de0e91faa1d9bd8ff70f604f89.css HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:29 UTC	826	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:29 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Cf-Bgj: minify Cf-Polished: origSize=9214 ETag: W/"617a1eea-23fe" Last-Modified: Thu, 28 Oct 2021 03:54:18 GMT Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding CF-Cache-Status: HIT Age: 352105 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fFmzQHvE08A2Nh1OYs%2F6tmFGygFu25BVZnVMvehUMIKtyJKA2GZQ1EcWO1nxokX4t%2Ff9DLXQTB57PBm64Eezoqnx%2FHYNyB8kErE2lkVZlOHK2n1QmCi73O%2BiFcPxJ4Nn9H0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c7b5d1f498a-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:29 UTC	543	IN	Data Raw: 32 33 63 34 0d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 39 70 78 29 7b 2e 62 6f 63 5f 61 6e 69 6d 61 74 65 5f 77 68 65 6e 5f 61 6c 6d 6f 73 74 5f 76 69 73 69 62 6c 65 7b 6f 70 61 63 69 74 79 3a 30 7d 2e 62 6f 63 5f 61 6e 69 6d 5f 68 69 64 64 65 6e 7b 6f 70 61 63 69 74 79 3a 30 7d 2e 62 6f 63 5f 73 74 61 72 74 5f 61 6e 69 6d 61 74 69 6f 6e 2c 2e 77 70 62 5f 73 74 61 72 74 5f 61 6e 69 6d 61 74 69 6f 6e 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 36 2c 2e 38 37 2c 2e 34 34 2c 31 29 20 2e 32 35 73 2c 6f 70 61 63 69 74 79 20 2e 36 73 20 65 61 73 65 20 2e 32 35 Data Ascii: 23c4@media only screen and (min-width:769px){.boc_animate_when_almost_visible{opacity:0}.boc_anim_hidden{opacity:0}.boc_start_animation,.wpb_start_animation{opacity:1;-webkit-transition:transform .7s cubic-bezier(.26,.87,.44,1) .25s,opacity .6s ease .25
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 69 65 72 28 2e 32 36 2c 2e 38 37 2c 2e 34 34 2c 31 29 20 2e 32 35 73 2c 6f 70 61 63 69 74 79 20 2e 36 73 20 65 61 73 65 20 2e 32 35 73 7d 2e 62 6f 63 5f 73 74 61 72 74 5f 61 6e 69 6d 61 74 69 6f 6e 2e 62 75 74 74 6f 6e 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 31 35 73 20 6c 69 6e 65 61 72 2c 74 72 61 6e 73 66 6f 72 6d 20 2e 39 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 36 2c 2e 38 37 2c 2e 34 34 2c 31 29 20 2e 32 35 73 2c 6f 70 61 63 69 74 79 20 2e 36 73 20 65 61 73 65 20 2e 32 35 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 31 35 73 20 6c 69 6e 65 61 72 2c 74 72 61 6e 73 66 6f 72 6d 20 2e 39 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 36 2c 2e 38 37 2c 2e 34 34 2c 31 29 20 2e 32 35 Data Ascii: ier(.26,.87,.44,1) .25s,opacity .6s ease .25s}.boc_start_animation.button{-webkit-transition:all .15s linear,transform .9s cubic-bezier(.26,.87,.44,1) .25s,opacity .6s ease .25s;-moz-transition:all .15s linear,transform .9s cubic-bezier(.26,.87,.44,1) .25
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 2e 62 6f 63 5f 6c 65 66 74 2d 74 6f 2d 72 69 67 68 74 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 34 30 70 78 29 7d 2e 62 6f 63 5f 73 74 61 72 74 5f 61 6e 69 6d 61 74 69 6f 6e 2e 62 6f 63 5f 72 69 67 68 74 2d 74 6f 2d 6c 65 66 74 2c 2e 77 70 62 5f 73 74 61 72 74 5f 61 6e 69 6d 61 74 69 6f 6e 2e 62 6f 63 5f 72 69 67 68 74 2d 74 6f 2d 6c 65 66 74 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 2e 62 6f 63 5f 72 69 67 68 74 2d 74 6f 2d 6c 65 66 74 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 34 30 70 78 29 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 7b 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 Data Ascii: sform:translateY(0)}.boc_left-to-right{transform:translateX(-40px)}.boc_start_animation.boc_right-to-left,.wpb_start_animation.boc_right-to-left{transform:translateY(0)}.boc_right-to-left{transform:translateX(40px)}@-webkit-keyframes spin{100%{-webkit-tra
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 69 6f 6e 2d 6e 61 6d 65 3a 66 61 64 65 49 6e 55 70 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 6c 69 70 49 6e 58 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 70 65 72 73 70 65 63 74 69 76 65 28 36 30 30 30 70 78 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 39 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 70 65 72 73 70 65 63 74 69 76 65 28 36 30 30 30 70 78 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 39 30 64 65 67 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 69 6e 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 69 6e 3b 6f 70 61 63 69 74 79 3a 30 7d 34 30 25 7b 2d 77 65 Data Ascii: ion-name:fadeInUp}@-webkit-keyframes flipInX{0%{-webkit-transform:perspective(6000px) rotate3d(1,0,0,90deg);transform:perspective(6000px) rotate3d(1,0,0,90deg);-webkit-transition-timing-function:ease-in;transition-timing-function:ease-in;opacity:0}40%{-we
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 72 61 6e 73 66 6f 72 6d 3a 70 65 72 73 70 65 63 74 69 76 65 28 36 30 30 30 70 78 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 2d 35 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 70 65 72 73 70 65 63 74 69 76 65 28 36 30 30 30 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 70 65 72 73 70 65 63 74 69 76 65 28 36 30 30 30 70 78 29 7d 7d 2e 66 6c 69 70 49 6e 58 7b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 6c 69 70 49 6e 58 3b 61 6e 69 6d 61 74 Data Ascii: ransform:perspective(6000px) rotate3d(1,0,0,-5deg)}100%{-webkit-transform:perspective(6000px);transform:perspective(6000px)}}.flipInX{-webkit-backface-visibility:visible!important;backface-visibility:visible!important;-webkit-animation-name:flipInX;animat
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 3a 62 6c 69 6e 6b 20 2e 37 73 20 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 3a 62 6c 69 6e 6b 20 2e 37 73 20 69 6e 66 69 6e 69 74 65 7d 40 6b 65 79 66 72 61 6d 65 73 20 62 6c 69 6e 6b 7b 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 35 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 62 6c 69 6e 6b 7b 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 35 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 2d 6d 6f 7a 2d 6b 65 79 66 72 61 6d 65 73 20 62 6c 69 6e 6b 7b 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 35 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 2e Data Ascii: oz-animation:blink .7s infinite;animation:blink .7s infinite}@keyframes blink{0%{opacity:1}50%{opacity:0}100%{opacity:1}}@-webkit-keyframes blink{0%{opacity:1}50%{opacity:0}100%{opacity:1}}@-moz-keyframes blink{0%{opacity:1}50%{opacity:0}100%{opacity:1}}.
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 65 5f 77 68 65 6e 5f 61 6c 6d 6f 73 74 5f 76 69 73 69 62 6c 65 2e 62 6f 63 5f 73 74 61 72 74 5f 61 6e 69 6d 61 74 69 6f 6e 3e 2a 2c 2e 74 6f 70 5f 69 63 6f 6e 5f 62 6f 78 2e 62 6f 63 5f 61 6e 69 6d 61 74 65 5f 77 68 65 6e 5f 61 6c 6d 6f 73 74 5f 76 69 73 69 62 6c 65 2e 62 6f 63 5f 73 74 61 72 74 5f 61 6e 69 6d 61 74 69 6f 6e 3e 61 3e 64 69 76 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 31 32 30 30 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 33 2c 31 2c 2e 33 32 2c 31 29 20 30 6d 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 31 32 30 30 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 33 2c 31 2c 2e 33 32 2c 31 29 20 30 6d 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f Data Ascii: e_when_almost_visible.boc_start_animation>*,.top_icon_box.boc_animate_when_almost_visible.boc_start_animation>a>div{opacity:1;-webkit-transition:all 1200ms cubic-bezier(.23,1,.32,1) 0ms;-moz-transition:all 1200ms cubic-bezier(.23,1,.32,1) 0ms;-o-transitio
2024-05-06 16:42:29 UTC	407	IN	Data Raw: 70 7b 6f 70 61 63 69 74 79 3a 31 3b 74 6f 70 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 36 30 30 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 33 2c 31 2c 2e 33 32 2c 31 29 20 30 6d 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 36 30 30 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 33 2c 31 2c 2e 33 32 2c 31 29 20 30 6d 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 36 30 30 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 33 2c 31 2c 2e 33 32 2c 31 29 20 30 6d 73 3b 2d 6d 73 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 36 30 30 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 33 2c 31 2c 2e 33 32 2c 31 29 20 30 6d 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c Data Ascii: p{opacity:1;top:0;-webkit-transition:all 600ms cubic-bezier(.23,1,.32,1) 0ms;-moz-transition:all 600ms cubic-bezier(.23,1,.32,1) 0ms;-o-transition:all 600ms cubic-bezier(.23,1,.32,1) 0ms;-ms-transition:all 600ms cubic-bezier(.23,1,.32,1) 0ms;transition:al
2024-05-06 16:42:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.11	49877	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:28 UTC	642	OUT	GET /wp-content/cache/min/1/wp-content/themes/fortuna/stylesheets/grid_responsive-48bd67224ddeecbaf91ae5289d134224.css HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:29 UTC	772	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:29 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 28 Oct 2021 03:54:18 GMT ETag: W/"617a1eea-26dd" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z76xTqZO338V%2BR7F4NzSEmng2tcG8FeAxxpsYQ%2FZShSh9SYyBI11cpRGogv75XSsqU2i8lZFUSaRRpFWZCJFNnay3fLhpwY%2F2PF3rAfLbl27%2FkGEvk3i7TvKyz2%2BKTCm820%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c7b6f00742e-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:29 UTC	597	IN	Data Raw: 32 36 64 64 0d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 31 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 32 38 30 70 78 29 7b 2e 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 39 34 30 70 78 7d 2e 62 6f 78 65 64 5f 77 72 61 70 70 65 72 2c 2e 62 6f 78 65 64 5f 77 72 61 70 70 65 72 20 23 68 65 61 64 65 72 2c 2e 62 6f 78 65 64 5f 77 72 61 70 70 65 72 20 23 66 6f 6f 74 65 72 7b 77 69 64 74 68 3a 31 30 30 30 70 78 7d 23 6d 65 6e 75 3e 75 6c 3e 6c 69 3e 61 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 39 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 39 70 78 7d 23 6d 65 6e 75 3e 75 6c 3e 6c 69 2e 62 6f 63 5f 6e 61 76 5f 62 75 74 74 6f 6e 20 61 7b 70 61 64 64 69 6e 67 3a 30 Data Ascii: 26dd@media only screen and (min-width:1018px) and (max-width:1280px){.container{width:940px}.boxed_wrapper,.boxed_wrapper #header,.boxed_wrapper #footer{width:1000px}#menu>ul>li>a{padding-left:9px;padding-right:9px}#menu>ul>li.boc_nav_button a{padding:0
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 66 5f 35 7b 77 69 64 74 68 3a 63 61 6c 63 28 35 30 25 20 2d 20 38 70 78 29 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 39 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 30 31 37 70 78 29 7b 2e 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 37 32 30 70 78 7d 2e 62 6f 78 65 64 5f 77 72 61 70 70 65 72 2c 2e 62 6f 78 65 64 5f 77 72 61 70 70 65 72 20 23 68 65 61 64 65 72 2c 2e 62 6f 78 65 64 5f 77 72 61 70 70 65 72 20 23 66 6f 6f 74 65 72 7b 77 69 64 74 68 3a 31 30 30 25 7d 23 68 65 61 64 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 66 75 6c 6c 5f 68 65 61 64 65 Data Ascii: f_5{width:calc(50% - 8px)}}@media only screen and (min-width:769px) and (max-width:1017px){.container{width:720px}.boxed_wrapper,.boxed_wrapper #header,.boxed_wrapper #footer{width:100%}#header{position:relative;background:#fff;min-height:auto}.full_heade
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 61 63 69 74 79 3a 31 7d 2e 72 65 73 70 2d 74 61 62 73 2d 6c 69 73 74 20 6c 69 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 2e 63 73 5f 6e 61 76 5f 69 74 65 6d 7b 6d 69 6e 2d 77 69 64 74 68 3a 31 34 34 70 78 7d 2e 63 69 72 63 5f 63 6f 75 6e 74 65 72 20 2e 63 69 72 63 5f 63 6f 75 6e 74 65 72 5f 64 65 73 63 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 7d 2e 68 65 61 64 65 72 5f 63 61 72 74 20 2e 63 61 72 74 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 7b 74 6f 70 3a 33 39 70 78 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 62 6f 78 65 64 5f 77 72 61 70 70 65 72 2c 2e 62 6f 78 65 64 5f 77 72 61 70 70 65 72 20 23 68 65 61 64 65 72 2c 2e 62 6f 78 65 64 5f 77 72 61 70 70 65 72 20 Data Ascii: acity:1}.resp-tabs-list li{font-size:14px}.cs_nav_item{min-width:144px}.circ_counter .circ_counter_desc{font-size:15px}.header_cart .cart-notification{top:39px}}@media only screen and (max-width:768px){.boxed_wrapper,.boxed_wrapper #header,.boxed_wrapper
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 69 6c 74 65 72 20 75 6c 7b 6d 69 6e 2d 77 69 64 74 68 3a 31 36 32 70 78 7d 2e 62 75 74 74 6f 6e 2b 2e 62 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 62 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 36 70 78 7d 2e 62 74 6e 5f 70 75 73 68 5f 72 69 67 68 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 69 63 6f 6e 5f 64 69 76 7b 77 69 64 74 68 3a 35 30 25 7d 2e 67 72 69 64 5f 68 6f 6c 64 65 72 7b 6d 61 72 67 69 6e 3a 30 7d 2e 67 72 69 64 5f 68 6f 6c 64 65 72 20 2e 63 6f 6c 2e 73 70 61 6e 5f 31 5f 6f 66 5f 33 2c 2e 67 72 69 64 5f 68 6f 6c 64 65 72 2e 73 6d 61 6c 6c 5f 73 70 61 63 69 6e 67 20 2e 63 6f 6c 2e 73 70 61 6e 5f 31 5f 6f 66 5f 33 2c 2e 67 72 69 64 5f 68 6f 6c 64 65 72 20 2e 63 6f 6c Data Ascii: ilter ul{min-width:162px}.button+.button{margin-left:0}.button{margin-right:6px}.btn_push_right{margin-left:0px!important}.icon_div{width:50%}.grid_holder{margin:0}.grid_holder .col.span_1_of_3,.grid_holder.small_spacing .col.span_1_of_3,.grid_holder .col
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 70 78 7d 2e 62 6f 63 5f 74 65 78 74 5f 73 6c 69 64 65 72 5f 77 6f 72 64 5f 73 74 61 72 74 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 75 6c 2e 72 65 73 70 2d 74 61 62 73 2d 6c 69 73 74 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 68 32 2e 72 65 73 70 2d 61 63 63 6f 72 64 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 20 31 39 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 72 65 73 70 2d 74 61 62 2d 63 6f 6e 74 65 6e 74 2c 2e 76 65 72 74 69 63 61 6c 20 2e 72 65 73 70 2d 74 61 62 2d 63 6f 6e 74 65 6e 74 2c 2e 6d 69 6e 69 6d 61 6c 5f 73 74 79 6c 65 2e 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 72 65 73 70 2d 74 61 62 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 2d 62 Data Ascii: px}.boc_text_slider_word_start{display:none!important}ul.resp-tabs-list{display:none}h2.resp-accordion{display:block;padding:10px 19px!important}.horizontal .resp-tab-content,.vertical .resp-tab-content,.minimal_style.horizontal .resp-tab-content{margin-b
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 6f 70 3a 33 30 70 78 7d 2e 6c 6f 67 6f 5f 67 61 6c 6c 65 72 79 20 2e 67 72 69 64 5f 68 6f 6c 64 65 72 20 2e 63 6f 6c 2e 73 70 61 6e 5f 31 5f 6f 66 5f 32 2c 2e 6c 6f 67 6f 5f 67 61 6c 6c 65 72 79 20 2e 67 72 69 64 5f 68 6f 6c 64 65 72 20 2e 63 6f 6c 2e 73 70 61 6e 5f 31 5f 6f 66 5f 33 2c 2e 6c 6f 67 6f 5f 67 61 6c 6c 65 72 79 20 2e 67 72 69 64 5f 68 6f 6c 64 65 72 20 2e 63 6f 6c 2e 73 70 61 6e 5f 31 5f 6f 66 5f 34 2c 2e 6c 6f 67 6f 5f 67 61 6c 6c 65 72 79 20 2e 67 72 69 64 5f 68 6f 6c 64 65 72 20 2e 63 6f 6c 2e 73 70 61 6e 5f 31 5f 6f 66 5f 35 7b 6d 61 72 67 69 6e 3a 31 35 70 78 20 30 7d 2e 6c 6f 67 6f 5f 67 61 6c 6c 65 72 79 2e 6c 65 66 74 5f 62 6f 72 64 65 72 7b 6d 61 72 67 69 6e 3a 33 30 70 78 20 33 30 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 Data Ascii: op:30px}.logo_gallery .grid_holder .col.span_1_of_2,.logo_gallery .grid_holder .col.span_1_of_3,.logo_gallery .grid_holder .col.span_1_of_4,.logo_gallery .grid_holder .col.span_1_of_5{margin:15px 0}.logo_gallery.left_border{margin:30px 30px;padding-left:0
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 6e 67 6c 65 5f 70 72 6f 64 75 63 74 5f 72 69 67 68 74 7b 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 25 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 2e 71 75 61 6e 74 69 74 79 20 2e 70 6c 75 73 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 23 63 6f 6e 74 65 6e 74 20 2e 71 75 61 6e 74 69 74 79 20 2e 70 6c 75 73 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 70 61 67 65 20 2e 71 75 61 6e 74 69 74 79 20 2e 70 6c 75 73 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 70 61 67 65 20 23 63 6f 6e 74 65 6e 74 20 2e 71 75 61 6e 74 69 74 79 20 2e 70 6c 75 73 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 2e 71 75 61 6e 74 69 74 79 20 2e 6d 69 6e 75 73 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 23 63 Data Ascii: ngle_product_right{width:100%!important;margin-right:0%!important}.woocommerce .quantity .plus,.woocommerce #content .quantity .plus,.woocommerce-page .quantity .plus,.woocommerce-page #content .quantity .plus,.woocommerce .quantity .minus,.woocommerce #c
2024-05-06 16:42:29 UTC	1146	IN	Data Raw: 2e 63 6f 6c 2e 73 70 61 6e 5f 31 5f 6f 66 5f 34 2c 2e 67 72 69 64 5f 68 6f 6c 64 65 72 2e 73 6d 61 6c 6c 5f 73 70 61 63 69 6e 67 20 2e 63 6f 6c 2e 73 70 61 6e 5f 31 5f 6f 66 5f 34 2c 2e 67 72 69 64 5f 68 6f 6c 64 65 72 20 2e 63 6f 6c 2e 73 70 61 6e 5f 31 5f 6f 66 5f 35 2c 2e 67 72 69 64 5f 68 6f 6c 64 65 72 2e 73 6d 61 6c 6c 5f 73 70 61 63 69 6e 67 20 2e 63 6f 6c 2e 73 70 61 6e 5f 31 5f 6f 66 5f 35 7b 6d 61 72 67 69 6e 3a 30 20 30 20 33 30 70 78 7d 2e 67 72 69 64 5f 68 6f 6c 64 65 72 2e 6e 6f 5f 73 70 61 63 69 6e 67 20 2e 63 6f 6c 2e 73 70 61 6e 5f 31 5f 6f 66 5f 33 2c 2e 67 72 69 64 5f 68 6f 6c 64 65 72 2e 6e 6f 5f 73 70 61 63 69 6e 67 20 2e 63 6f 6c 2e 73 70 61 6e 5f 31 5f 6f 66 5f 32 2c 2e 67 72 69 64 5f 68 6f 6c 64 65 72 2e 6e 6f 5f 73 70 61 63 69 6e Data Ascii: .col.span_1_of_4,.grid_holder.small_spacing .col.span_1_of_4,.grid_holder .col.span_1_of_5,.grid_holder.small_spacing .col.span_1_of_5{margin:0 0 30px}.grid_holder.no_spacing .col.span_1_of_3,.grid_holder.no_spacing .col.span_1_of_2,.grid_holder.no_spacin
2024-05-06 16:42:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.11	49878	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:28 UTC	592	OUT	GET /wp-content/plugins/gravityforms/css/formreset.min.css?ver=2.3.4 HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:29 UTC	769	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:29 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Fri, 05 Oct 2018 13:00:07 GMT ETag: W/"5bb76057-f00" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XdwUutbZVh3aQAQvx2uETGMwrU6GVjqvoql2CGhwM0BXz0kTfpOZmLzTjoYE0fkm45a%2F5wz7R%2FYuQ%2F9qlmfO1qfn%2FZf8dQEAB6IssrwBm2dSefIpgzosuY6F9x2E9Xz8N2Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c7b6ffc0975-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:29 UTC	600	IN	Data Raw: 66 30 30 0d 0a 62 6f 64 79 20 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 72 65 73 65 74 5f 77 72 61 70 70 65 72 2c 62 6f 64 79 20 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 72 65 73 65 74 5f 77 72 61 70 70 65 72 20 62 75 74 74 6f 6e 2c 62 6f 64 79 20 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 72 65 73 65 74 5f 77 72 61 70 70 65 72 20 63 61 70 74 69 6f 6e 2c 62 6f 64 79 20 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 72 65 73 65 74 5f 77 72 61 70 70 65 72 20 64 69 76 2c 62 6f 64 79 20 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 72 65 73 65 74 5f 77 72 61 70 70 65 72 20 66 69 65 6c 64 73 65 74 2c 62 6f 64 79 20 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 72 65 73 65 74 5f 77 72 61 70 70 65 72 20 Data Ascii: f00body .gform_wrapper.gf_reset_wrapper,body .gform_wrapper.gf_reset_wrapper button,body .gform_wrapper.gf_reset_wrapper caption,body .gform_wrapper.gf_reset_wrapper div,body .gform_wrapper.gf_reset_wrapper fieldset,body .gform_wrapper.gf_reset_wrapper
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 70 70 65 72 2e 67 66 5f 72 65 73 65 74 5f 77 72 61 70 70 65 72 20 69 6e 70 75 74 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 62 6f 64 79 20 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 72 65 73 65 74 5f 77 72 61 70 70 65 72 20 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 62 6f 64 79 20 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 72 65 73 65 74 5f 77 72 61 70 70 65 72 20 69 6e 70 75 74 5b 74 79 70 65 3d 69 6d 61 67 65 5d 2c 62 6f 64 79 20 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 72 65 73 65 74 5f 77 72 61 70 70 65 72 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2c 62 6f 64 79 20 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 72 65 73 65 74 5f 77 72 61 70 70 65 72 20 69 6e 70 75 74 5b 74 79 70 65 3d Data Ascii: pper.gf_reset_wrapper input[type=button],body .gform_wrapper.gf_reset_wrapper input[type=email],body .gform_wrapper.gf_reset_wrapper input[type=image],body .gform_wrapper.gf_reset_wrapper input[type=number],body .gform_wrapper.gf_reset_wrapper input[type=
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 20 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 72 65 73 65 74 5f 77 72 61 70 70 65 72 20 66 6f 72 6d 2c 62 6f 64 79 20 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 72 65 73 65 74 5f 77 72 61 70 70 65 72 20 69 66 72 61 6d 65 2c 62 6f 64 79 20 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 72 65 73 65 74 5f 77 72 61 70 70 65 72 20 69 6d 67 2c 62 6f 64 79 20 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 72 65 73 65 74 5f 77 72 61 70 70 65 72 20 69 6e 70 75 74 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 62 6f 64 79 20 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 72 65 73 65 74 5f 77 72 61 70 70 65 72 20 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 62 6f 64 79 20 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 Data Ascii: .gform_wrapper.gf_reset_wrapper form,body .gform_wrapper.gf_reset_wrapper iframe,body .gform_wrapper.gf_reset_wrapper img,body .gform_wrapper.gf_reset_wrapper input[type=button],body .gform_wrapper.gf_reset_wrapper input[type=email],body .gform_wrapper.g
2024-05-06 16:42:29 UTC	509	IN	Data Raw: 6e 65 2d 68 65 69 67 68 74 3a 31 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 62 6f 64 79 20 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 72 65 73 65 74 5f 77 72 61 70 70 65 72 20 64 69 76 2c 62 6f 64 79 20 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 72 65 73 65 74 5f 77 72 61 70 70 65 72 20 70 2c 62 6f 64 79 20 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 72 65 73 65 74 5f 77 72 61 70 70 65 72 20 73 70 61 6e 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 38 7d 62 6f 64 79 20 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 72 65 73 65 74 5f 77 72 61 70 70 65 72 20 66 69 65 6c 64 73 65 74 2c 62 6f 64 79 20 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 72 65 73 65 74 5f 77 72 61 70 70 65 72 20 69 6d 67 7b 62 6f Data Ascii: ne-height:1;font-weight:400}body .gform_wrapper.gf_reset_wrapper div,body .gform_wrapper.gf_reset_wrapper p,body .gform_wrapper.gf_reset_wrapper span{line-height:1.8}body .gform_wrapper.gf_reset_wrapper fieldset,body .gform_wrapper.gf_reset_wrapper img{bo
2024-05-06 16:42:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.11	49879	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:28 UTC	592	OUT	GET /wp-content/plugins/gravityforms/css/formsmain.min.css?ver=2.3.4 HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:29 UTC	773	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:29 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Fri, 05 Oct 2018 13:00:07 GMT ETag: W/"5bb76057-11016" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w%2F%2FsWMexVBRjSZXL%2FYUlk8YfhHjklWfJbzK3OYKLD33jpc6TEhcx%2BVf7dSKf0rZMypCygdJU1djj8yhkWpcU7pRJG6d5pqCXTs5Dxll2Z5SnOf4GGZfQ3b2%2BZOgIhLuZla0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c7b6a89127b-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:29 UTC	596	IN	Data Raw: 37 63 61 62 0d 0a 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 73 65 6c 65 63 74 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 74 65 78 74 61 72 65 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 67 66 5f 70 72 6f 67 72 65 73 73 62 61 72 3a 61 66 74 65 72 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 6f 6c 2e 76 61 6c 69 64 61 74 69 6f 6e 5f 6c 69 73 74 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 7b 6d 61 72 67 69 6e 3a 31 36 70 78 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 Data Ascii: 7cab.gform_wrapper select,.gform_wrapper textarea{font-family:inherit;letter-spacing:normal;font-size:inherit}.gform_wrapper .gf_progressbar:after,.gform_wrapper ol.validation_list:after{content:""}.gform_wrapper{margin:16px 0;max-width:100%}.gform_wrap
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 69 6d 61 67 65 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 66 69 6c 65 5d 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 34 70 78 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 69 6e 70 75 74 5b 74 79 70 65 3d 69 6d 61 67 65 5d 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 74 65 78 74 61 72 65 61 7b 70 61 64 64 69 6e 67 3a 36 70 78 20 38 70 78 3b 6c 69 6e 65 2d 68 Data Ascii: ):not([type=image]):not([type=file]){font-size:inherit;font-family:inherit;padding:5px 4px;letter-spacing:normal}.gform_wrapper input[type=image]{border:none!important;padding:0!important;width:auto!important}.gform_wrapper textarea{padding:6px 8px;line-h
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 65 66 74 5f 6c 61 62 65 6c 20 6c 69 20 75 6c 2e 67 66 69 65 6c 64 5f 72 61 64 69 6f 20 6c 69 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 75 6c 2e 72 69 67 68 74 5f 6c 61 62 65 6c 20 6c 69 20 75 6c 2e 67 66 69 65 6c 64 5f 63 68 65 63 6b 62 6f 78 20 6c 69 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 75 6c 2e 72 69 67 68 74 5f 6c 61 62 65 6c 20 6c 69 20 75 6c 2e 67 66 69 65 6c 64 5f 72 61 64 69 6f 20 6c 69 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 75 6c 20 6c 69 3a 61 66 74 65 72 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 75 6c 20 6c 69 3a 62 65 66 6f 72 65 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 75 6c 2e 67 66 6f 72 6d 5f 66 69 65 6c 64 73 7b 70 61 64 64 69 6e 67 3a 30 3b 6d Data Ascii: eft_label li ul.gfield_radio li,.gform_wrapper ul.right_label li ul.gfield_checkbox li,.gform_wrapper ul.right_label li ul.gfield_radio li{margin-bottom:10px}.gform_wrapper ul li:after,.gform_wrapper ul li:before,.gform_wrapper ul.gform_fields{padding:0;m
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 61 70 70 65 72 20 2e 67 66 69 65 6c 64 5f 64 61 74 65 5f 79 65 61 72 20 69 6e 70 75 74 7b 77 69 64 74 68 3a 34 72 65 6d 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 66 69 65 6c 64 5f 73 75 62 6c 61 62 65 6c 5f 61 62 6f 76 65 20 64 69 76 5b 63 6c 61 73 73 2a 3d 67 66 69 65 6c 64 5f 64 61 74 65 5f 5d 2e 67 69 6e 70 75 74 5f 63 6f 6e 74 61 69 6e 65 72 20 6c 61 62 65 6c 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 66 69 65 6c 64 5f 73 75 62 6c 61 62 65 6c 5f 62 65 6c 6f 77 20 64 69 76 5b 63 6c 61 73 73 2a 3d 67 66 69 65 6c 64 5f 64 61 74 65 5f 5d 2e 67 69 6e 70 75 74 5f 63 6f 6e 74 61 69 6e 65 72 20 6c 61 62 65 6c 7b 77 69 64 74 68 3a 33 72 65 6d 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 Data Ascii: apper .gfield_date_year input{width:4rem}.gform_wrapper .field_sublabel_above div[class=gfield_date_].ginput_container label,.gform_wrapper .field_sublabel_below div[class=gfield_date_].ginput_container label{width:3rem;text-align:center}.gform_wrapper
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 67 66 69 65 6c 64 5f 74 69 6d 65 5f 61 6d 70 6d 20 73 65 6c 65 63 74 7b 6d 69 6e 2d 77 69 64 74 68 3a 63 61 6c 63 28 32 72 65 6d 20 2b 20 32 35 70 78 29 3b 77 69 64 74 68 3a 63 61 6c 63 28 33 72 65 6d 20 2b 20 32 35 70 78 29 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 67 66 69 65 6c 64 5f 74 69 6d 65 5f 68 6f 75 72 20 69 6e 70 75 74 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 67 66 69 65 6c 64 5f 74 69 6d 65 5f 6d 69 6e 75 74 65 20 69 6e 70 75 74 7b 77 69 64 74 68 3a 63 61 6c 63 28 33 72 65 6d 20 2b 20 38 70 78 29 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 67 66 69 65 6c 64 5f 74 69 6d 65 5f 68 6f 75 72 20 69 6e 70 75 74 5b 74 79 70 65 Data Ascii: lay:inline-block}.gform_wrapper .gfield_time_ampm select{min-width:calc(2rem + 25px);width:calc(3rem + 25px)}.gform_wrapper .gfield_time_hour input,.gform_wrapper .gfield_time_minute input{width:calc(3rem + 8px)}.gform_wrapper .gfield_time_hour input[type
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 6f 74 28 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 69 6d 61 67 65 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 66 69 6c 65 5d 29 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 67 69 6e 70 75 74 5f 63 6f 6d 70 6c 65 78 20 2e 67 69 6e 70 75 74 5f 72 69 67 68 74 20 73 65 6c 65 63 74 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 67 69 6e 70 75 74 5f 63 6f 6d 70 6c 65 78 20 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 72 61 64 69 6f 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 69 6d 61 67 65 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 66 69 6c 65 5d 29 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 67 69 6e 70 Data Ascii: ot([type=submit]):not([type=image]):not([type=file]),.gform_wrapper .ginput_complex .ginput_right select,.gform_wrapper .ginput_complex input:not([type=radio]):not([type=checkbox]):not([type=submit]):not([type=image]):not([type=file]),.gform_wrapper .ginp
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 73 73 2a 3d 67 66 69 65 6c 64 5f 74 69 6d 65 5f 5d 2e 67 69 6e 70 75 74 5f 63 6f 6e 74 61 69 6e 65 72 20 6c 61 62 65 6c 7b 6d 61 72 67 69 6e 3a 39 70 78 20 30 20 31 70 78 20 31 70 78 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 75 6c 2e 67 66 6f 72 6d 5f 66 69 65 6c 64 73 3a 6e 6f 74 28 2e 74 6f 70 5f 6c 61 62 65 6c 29 20 2e 66 69 65 6c 64 5f 73 75 62 6c 61 62 65 6c 5f 61 62 6f 76 65 20 2e 67 69 6e 70 75 74 5f 63 6f 6e 74 61 69 6e 65 72 2e 67 69 6e 70 75 74 5f 63 6f 6e 74 61 69 6e 65 72 5f 65 6d 61 69 6c 20 6c 61 62 65 6c 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 75 6c 2e 67 66 6f 72 6d 5f 66 69 65 6c 64 73 3a 6e 6f 74 28 2e 74 6f 70 5f 6c 61 62 65 6c 29 20 2e 66 69 65 6c 64 5f 73 75 62 6c 61 62 65 6c 5f 61 62 6f 76 65 20 2e 67 69 6e 70 75 74 5f Data Ascii: ss*=gfield_time_].ginput_container label{margin:9px 0 1px 1px}.gform_wrapper ul.gform_fields:not(.top_label) .field_sublabel_above .ginput_container.ginput_container_email label,.gform_wrapper ul.gform_fields:not(.top_label) .field_sublabel_above .ginput_
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 69 6e 70 75 74 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 32 70 78 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 66 69 65 6c 64 5f 73 75 62 6c 61 62 65 6c 5f 68 69 64 64 65 6e 5f 6c 61 62 65 6c 20 2e 67 69 6e 70 75 74 5f 63 6f 6d 70 6c 65 78 2e 67 69 6e 70 75 74 5f 63 6f 6e 74 61 69 6e 65 72 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 66 69 65 6c 64 5f 73 75 62 6c 61 62 65 6c 5f 68 69 64 64 65 6e 5f 6c 61 62 65 6c 20 2e 67 69 6e 70 75 74 5f 63 6f 6d 70 6c 65 78 2e 67 69 6e 70 75 74 5f 63 6f 6e 74 61 69 6e 65 72 20 73 65 6c 65 63 74 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 69 6e 70 75 74 2e 6c 61 72 67 65 2c 2e 67 66 6f 72 6d 5f 77 72 Data Ascii: input{margin-top:12px}.gform_wrapper .field_sublabel_hidden_label .ginput_complex.ginput_container input[type=text],.gform_wrapper .field_sublabel_hidden_label .ginput_complex.ginput_container select{margin-bottom:12px}.gform_wrapper input.large,.gform_wr
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 6e 5f 74 69 74 6c 65 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 68 33 2e 67 66 6f 72 6d 5f 74 69 74 6c 65 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 65 6d 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 68 33 2e 67 66 6f 72 6d 5f 74 69 74 6c 65 7b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 36 70 78 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 6c 69 2e 67 66 69 65 6c 64 2e 66 69 65 6c 64 5f 64 65 73 63 72 69 70 74 69 6f 6e 5f 62 65 6c 6f 77 2b 6c 69 2e 67 73 65 63 74 69 6f 6e 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 73 70 Data Ascii: n_title,.gform_wrapper h3.gform_title{font-weight:700;font-size:1.25em}.gform_wrapper h3.gform_title{letter-spacing:normal!important;margin:10px 0 6px}.gform_wrapper li.gfield.field_description_below+li.gsection{margin-top:24px!important}.gform_wrapper sp
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 70 78 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 64 65 73 63 72 69 70 74 69 6f 6e 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 67 66 69 65 6c 64 5f 64 65 73 63 72 69 70 74 69 6f 6e 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 67 73 65 63 74 69 6f 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 69 6e 73 74 72 75 63 74 69 6f 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 31 33 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 6c 65 74 74 65 72 2d 73 70 61 Data Ascii: line-block;vertical-align:middle;margin-left:1px}.gform_wrapper .description,.gform_wrapper .gfield_description,.gform_wrapper .gsection_description,.gform_wrapper .instruction{font-size:.813em;line-height:inherit;clear:both;font-family:inherit;letter-spa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.11	49881	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:29 UTC	593	OUT	GET /wp-content/plugins/gravityforms/css/readyclass.min.css?ver=2.3.4 HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:29 UTC	768	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:29 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Fri, 05 Oct 2018 13:00:07 GMT ETag: W/"5bb76057-75df" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fxiWZ1r8VEe7na03OfWDpKntFM3dhCOIElIwNHxxNTAA5gmr9l8gNONHSciQ%2BEsejGbjntVFbhSOj2p0YA40Hj4SiDaH9OofxQ%2F52pd62o1E02Q2C8zvub%2FduEh39fKZdu8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c7cf8aaa4ee-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:29 UTC	601	IN	Data Raw: 37 35 64 66 0d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 34 31 70 78 29 7b 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 74 6f 70 5f 6c 61 62 65 6c 20 6c 69 2e 67 66 69 65 6c 64 2e 67 66 5f 69 6e 6c 69 6e 65 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 3b 77 69 64 74 68 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 36 70 78 3b 66 6c 6f 61 74 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 73 74 61 63 6b 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 74 6f 70 5f 6c 61 62 65 6c 20 Data Ascii: 75df@media only screen and (min-width:641px){.gform_wrapper .top_label li.gfield.gf_inline{vertical-align:top;width:auto!important;margin:0;padding-right:16px;float:none!important;display:-moz-inline-stack;display:inline-block}.gform_wrapper .top_label
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 70 5f 6c 61 62 65 6c 20 6c 69 2e 67 66 69 65 6c 64 2e 67 66 5f 69 6e 6c 69 6e 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2e 73 6d 61 6c 6c 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 74 6f 70 5f 6c 61 62 65 6c 20 6c 69 2e 67 66 69 65 6c 64 2e 67 66 5f 69 6e 6c 69 6e 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2e 6c 61 72 67 65 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 74 6f 70 5f 6c 61 62 65 6c 20 6c 69 2e 67 66 69 65 6c 64 2e 67 66 5f 69 6e 6c 69 6e 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2e 6d 65 64 69 75 6d 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 74 6f 70 5f 6c 61 62 65 6c 20 6c 69 2e 67 66 69 65 6c 64 2e 67 66 5f 69 6e 6c 69 6e 65 20 69 6e 70 75 74 5b 74 79 70 Data Ascii: p_label li.gfield.gf_inline input[type=number].small,.gform_wrapper .top_label li.gfield.gf_inline input[type=password].large,.gform_wrapper .top_label li.gfield.gf_inline input[type=password].medium,.gform_wrapper .top_label li.gfield.gf_inline input[typ
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 5f 64 61 74 65 5f 64 61 79 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 74 6f 70 5f 6c 61 62 65 6c 20 6c 69 2e 67 66 69 65 6c 64 2e 67 66 5f 69 6e 6c 69 6e 65 20 64 69 76 2e 67 66 69 65 6c 64 5f 64 61 74 65 5f 6d 6f 6e 74 68 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 74 6f 70 5f 6c 61 62 65 6c 20 6c 69 2e 67 66 69 65 6c 64 2e 67 66 5f 69 6e 6c 69 6e 65 20 64 69 76 2e 67 66 69 65 6c 64 5f 64 61 74 65 5f 79 65 61 72 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 74 6f 70 5f 6c 61 62 65 6c 20 6c 69 2e 67 66 69 65 6c 64 2e 67 66 5f 69 6e 6c 69 6e 65 20 64 69 76 2e 67 66 69 65 6c 64 5f 74 69 6d 65 5f 68 6f 75 72 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 74 6f 70 5f 6c 61 62 65 6c 20 6c 69 2e 67 66 69 65 6c 64 2e 67 66 5f 69 6e 6c 69 Data Ascii: _date_day,.gform_wrapper .top_label li.gfield.gf_inline div.gfield_date_month,.gform_wrapper .top_label li.gfield.gf_inline div.gfield_date_year,.gform_wrapper .top_label li.gfield.gf_inline div.gfield_time_hour,.gform_wrapper .top_label li.gfield.gf_inli
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 74 6f 70 5f 6c 61 62 65 6c 20 6c 69 2e 67 66 69 65 6c 64 2e 67 66 5f 72 69 67 68 74 5f 68 61 6c 66 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 6f 72 6d 5f 76 61 6c 69 64 61 74 69 6f 6e 5f 65 72 72 6f 72 20 2e 74 6f 70 5f 6c 61 62 65 6c 20 6c 69 2e 67 66 69 65 6c 64 2e 67 66 69 65 6c 64 5f 65 72 72 6f 72 2e 67 66 5f 6c 65 66 74 5f 68 61 6c 66 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 6f 72 6d 5f 76 61 6c 69 64 61 74 69 6f 6e 5f 65 72 72 6f 72 20 2e 74 6f Data Ascii: {content:"";display:block;clear:both}.gform_wrapper .top_label li.gfield.gf_right_half:after{content:"";display:table;clear:both}.gform_wrapper.gform_validation_error .top_label li.gfield.gfield_error.gf_left_half,.gform_wrapper.gform_validation_error .to
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 75 74 2e 73 6d 61 6c 6c 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 74 6f 70 5f 6c 61 62 65 6c 20 6c 69 2e 67 66 69 65 6c 64 2e 67 66 5f 72 69 67 68 74 5f 68 61 6c 66 20 69 6e 70 75 74 2e 73 6d 61 6c 6c 7b 77 69 64 74 68 3a 33 35 25 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 74 6f 70 5f 6c 61 62 65 6c 20 6c 69 2e 67 66 69 65 6c 64 2e 67 66 5f 6c 65 66 74 5f 68 61 6c 66 2b 6c 69 2e 67 66 69 65 6c 64 2e 67 73 65 63 74 69 6f 6e 2e 67 66 5f 6c 65 66 74 5f 68 61 6c 66 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 74 6f 70 5f 6c 61 62 65 6c 20 6c 69 2e 67 66 69 65 6c 64 2e 67 66 5f 6c 65 66 74 5f 68 61 6c 66 2b 6c 69 2e 67 66 69 65 6c 64 2e 67 73 65 63 74 69 6f 6e 2e 67 66 5f 72 69 67 68 74 5f 68 61 6c 66 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 Data Ascii: ut.small,.gform_wrapper .top_label li.gfield.gf_right_half input.small{width:35%}.gform_wrapper .top_label li.gfield.gf_left_half+li.gfield.gsection.gf_left_half,.gform_wrapper .top_label li.gfield.gf_left_half+li.gfield.gsection.gf_right_half,.gform_wrap
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 77 72 61 70 70 65 72 20 2e 74 6f 70 5f 6c 61 62 65 6c 20 6c 69 2e 67 66 69 65 6c 64 2e 67 66 5f 6c 65 66 74 5f 68 61 6c 66 2b 2e 67 66 6f 72 6d 5f 66 6f 6f 74 65 72 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 74 6f 70 5f 6c 61 62 65 6c 20 6c 69 2e 67 66 69 65 6c 64 2e 67 66 5f 6c 65 66 74 5f 68 61 6c 66 2b 6c 69 2e 67 66 69 65 6c 64 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 74 6f 70 5f 6c 61 62 65 6c 20 6c 69 2e 67 66 69 65 6c 64 2e 67 66 5f 72 69 67 68 74 5f 68 61 6c 66 2b 2e 67 66 6f 72 6d 5f 66 6f 6f 74 65 72 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 74 6f 70 5f 6c 61 62 65 6c 20 6c 69 2e 67 66 69 65 6c 64 2e 67 66 5f 72 69 67 68 74 5f 68 61 6c 66 2b 6c 69 2e 67 66 69 65 6c 64 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 67 66 6f 72 Data Ascii: wrapper .top_label li.gfield.gf_left_half+.gform_footer,.gform_wrapper .top_label li.gfield.gf_left_half+li.gfield,.gform_wrapper .top_label li.gfield.gf_right_half+.gform_footer,.gform_wrapper .top_label li.gfield.gf_right_half+li.gfield{clear:both}.gfor
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 6d 5f 77 72 61 70 70 65 72 20 2e 74 6f 70 5f 6c 61 62 65 6c 20 6c 69 2e 67 66 69 65 6c 64 2e 67 66 5f 6d 69 64 64 6c 65 5f 74 68 69 72 64 20 64 69 76 3a 6e 6f 74 28 2e 67 69 6e 70 75 74 5f 63 6f 6e 74 61 69 6e 65 72 5f 64 61 74 65 29 20 69 6e 70 75 74 2e 6d 65 64 69 75 6d 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 74 6f 70 5f 6c 61 62 65 6c 20 6c 69 2e 67 66 69 65 6c 64 2e 67 66 5f 6d 69 64 64 6c 65 5f 74 68 69 72 64 20 64 69 76 3a 6e 6f 74 28 2e 67 69 6e 70 75 74 5f 63 6f 6e 74 61 69 6e 65 72 5f 64 61 74 65 29 20 73 65 6c 65 63 74 2e 6c 61 72 67 65 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 74 6f 70 5f 6c 61 62 65 6c 20 6c 69 2e 67 66 69 65 6c 64 2e 67 66 5f 6d 69 64 64 6c 65 5f 74 68 69 72 64 20 64 69 76 3a 6e 6f 74 28 2e 67 69 6e 70 75 Data Ascii: m_wrapper .top_label li.gfield.gf_middle_third div:not(.ginput_container_date) input.medium,.gform_wrapper .top_label li.gfield.gf_middle_third div:not(.ginput_container_date) select.large,.gform_wrapper .top_label li.gfield.gf_middle_third div:not(.ginpu
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 74 28 2e 67 69 6e 70 75 74 5f 63 6f 6e 74 61 69 6e 65 72 5f 64 61 74 65 29 20 73 65 6c 65 63 74 7b 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 74 6f 70 5f 6c 61 62 65 6c 20 6c 69 2e 67 66 69 65 6c 64 2e 67 66 69 65 6c 64 5f 65 72 72 6f 72 2e 67 66 5f 6c 65 66 74 5f 74 68 69 72 64 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 74 6f 70 5f 6c 61 62 65 6c 20 6c 69 2e 67 66 69 65 6c 64 2e 67 66 69 65 6c 64 5f 65 72 72 6f 72 2e 67 66 5f 6d 69 64 64 6c 65 5f 74 68 69 72 64 7b 77 69 64 74 68 3a 63 61 6c 63 28 33 33 2e 33 25 20 2d 20 32 34 70 78 29 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 74 6f 70 5f Data Ascii: t(.ginput_container_date) select{width:100%!important}.gform_wrapper .top_label li.gfield.gfield_error.gf_left_third,.gform_wrapper .top_label li.gfield.gfield_error.gf_middle_third{width:calc(33.3% - 24px)!important;margin-right:16px}.gform_wrapper .top_
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 6f 61 74 3a 6e 6f 6e 65 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 74 6f 70 5f 6c 61 62 65 6c 20 6c 69 2e 67 66 69 65 6c 64 2e 67 66 5f 66 69 72 73 74 5f 71 75 61 72 74 65 72 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 74 6f 70 5f 6c 61 62 65 6c 20 6c 69 2e 67 66 69 65 6c 64 2e 67 66 5f 66 6f 75 72 74 68 5f 71 75 61 72 74 65 72 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 74 6f 70 5f 6c 61 62 65 6c 20 6c 69 2e 67 66 69 65 6c 64 2e 67 66 5f 73 65 63 6f 6e 64 5f 71 75 61 72 74 65 72 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 74 6f 70 5f 6c 61 62 65 6c 20 6c 69 2e 67 66 69 65 6c 64 2e 67 66 5f 74 68 69 72 64 5f 71 75 61 72 74 65 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 Data Ascii: oat:none}.gform_wrapper .top_label li.gfield.gf_first_quarter,.gform_wrapper .top_label li.gfield.gf_fourth_quarter,.gform_wrapper .top_label li.gfield.gf_second_quarter,.gform_wrapper .top_label li.gfield.gf_third_quarter{margin-bottom:8px}.gform_wrapper
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 2e 74 6f 70 5f 6c 61 62 65 6c 20 6c 69 2e 67 66 69 65 6c 64 2e 67 66 69 65 6c 64 5f 65 72 72 6f 72 2e 67 66 5f 74 68 69 72 64 5f 71 75 61 72 74 65 72 7b 77 69 64 74 68 3a 32 34 2e 35 25 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 74 6f 70 5f 6c 61 62 65 6c 20 6c 69 2e 67 66 69 65 6c 64 2e 67 66 5f 66 6f 75 72 74 68 5f 71 75 61 72 74 65 72 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 74 6f 70 5f 6c 61 62 65 6c 20 6c 69 2e 67 66 69 65 6c 64 2e 67 66 5f 66 69 72 73 74 5f 71 75 61 72 74 65 72 20 69 6e 70 75 74 2e 6c 61 72 67 65 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 74 6f 70 5f 6c 61 62 65 6c 20 6c 69 2e 67 66 Data Ascii: .top_label li.gfield.gfield_error.gf_third_quarter{width:24.5%}.gform_wrapper .top_label li.gfield.gf_fourth_quarter:after{content:"";display:table;clear:both}.gform_wrapper .top_label li.gfield.gf_first_quarter input.large,.gform_wrapper .top_label li.gf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.11	49882	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:29 UTC	591	OUT	GET /wp-content/plugins/gravityforms/css/browsers.min.css?ver=2.3.4 HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:29 UTC	770	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:29 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Fri, 05 Oct 2018 13:00:07 GMT ETag: W/"5bb76057-1c78" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iueJZvsyZ%2BTmWZHz8g9lh91xToH4lEPsGZgw1c%2BONrg1It2UE8DDznKUKdwakIOS0Pjq6zdUAIA1%2FzO5OylmXQE7Y%2Fs2svAD5vNfE9HqIUATUQlgrxkgXYxW6ZsDYEn7H0U%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c7dd8dd3710-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:29 UTC	599	IN	Data Raw: 31 63 37 38 0d 0a 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 62 72 6f 77 73 65 72 5f 63 68 72 6f 6d 65 20 2e 6c 65 66 74 5f 6c 61 62 65 6c 20 23 72 65 63 61 70 74 63 68 61 5f 61 72 65 61 20 23 72 65 63 61 70 74 63 68 61 5f 74 61 62 6c 65 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 62 72 6f 77 73 65 72 5f 63 68 72 6f 6d 65 20 2e 72 69 67 68 74 5f 6c 61 62 65 6c 20 23 72 65 63 61 70 74 63 68 61 5f 61 72 65 61 20 23 72 65 63 61 70 74 63 68 61 5f 74 61 62 6c 65 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 62 72 6f 77 73 65 72 5f 73 61 66 61 72 69 20 2e 6c 65 66 74 5f 6c 61 62 65 6c 20 23 72 65 63 61 70 74 63 68 61 5f 61 72 65 61 20 23 72 65 63 61 70 74 63 68 61 5f 74 61 62 6c 65 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 Data Ascii: 1c78.gform_wrapper.gf_browser_chrome .left_label #recaptcha_area #recaptcha_table,.gform_wrapper.gf_browser_chrome .right_label #recaptcha_area #recaptcha_table,.gform_wrapper.gf_browser_safari .left_label #recaptcha_area #recaptcha_table,.gform_wrapper
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 62 72 6f 77 73 65 72 5f 63 68 72 6f 6d 65 20 75 6c 20 6c 69 3a 61 66 74 65 72 2c 2e 65 6e 74 72 79 20 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 62 72 6f 77 73 65 72 5f 63 68 72 6f 6d 65 20 75 6c 20 6c 69 3a 62 65 66 6f 72 65 2c 2e 65 6e 74 72 79 20 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 62 72 6f 77 73 65 72 5f 67 65 63 6b 6f 20 75 6c 20 6c 69 3a 61 66 74 65 72 2c 2e 65 6e 74 72 79 20 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 62 72 6f 77 73 65 72 5f 67 65 63 6b 6f 20 75 6c 20 6c 69 3a 62 65 66 6f 72 65 2c 2e 65 6e 74 72 79 20 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 62 72 6f 77 73 65 72 5f 69 65 20 75 6c 20 6c 69 3a 61 66 74 65 72 2c 2e 65 6e 74 72 79 Data Ascii: .gform_wrapper.gf_browser_chrome ul li:after,.entry .gform_wrapper.gf_browser_chrome ul li:before,.entry .gform_wrapper.gf_browser_gecko ul li:after,.entry .gform_wrapper.gf_browser_gecko ul li:before,.entry .gform_wrapper.gf_browser_ie ul li:after,.entry
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 75 74 2e 62 75 74 74 6f 6e 2e 67 66 6f 72 6d 5f 62 75 74 74 6f 6e 5f 73 65 6c 65 63 74 5f 66 69 6c 65 73 7b 70 61 64 64 69 6e 67 3a 36 70 78 20 31 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 62 72 6f 77 73 65 72 5f 73 61 66 61 72 69 20 2e 67 66 69 65 6c 64 5f 74 69 6d 65 5f 61 6d 70 6d 20 73 65 6c 65 63 74 7b 6d 61 78 2d 77 69 64 74 68 3a 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 3a 63 61 6c 63 28 32 72 65 6d 20 2b 20 32 30 70 78 29 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 62 72 6f 77 73 65 72 5f 63 68 72 6f 6d 65 20 73 65 6c 65 63 74 7b 70 61 64 64 69 6e 67 3a 32 70 78 20 30 20 32 70 78 20 33 70 78 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 62 72 6f 77 73 Data Ascii: ut.button.gform_button_select_files{padding:6px 12px!important}.gform_wrapper.gf_browser_safari .gfield_time_ampm select{max-width:5rem!important;width:calc(2rem + 20px)}.gform_wrapper.gf_browser_chrome select{padding:2px 0 2px 3px}.gform_wrapper.gf_brows
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 2e 67 66 6f 72 6d 5f 66 69 65 6c 64 73 20 6c 69 2e 67 66 69 65 6c 64 20 73 70 61 6e 2e 6e 61 6d 65 5f 6c 61 73 74 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 62 72 6f 77 73 65 72 5f 63 68 72 6f 6d 65 20 75 6c 2e 67 66 6f 72 6d 5f 66 69 65 6c 64 73 20 6c 69 2e 67 66 69 65 6c 64 20 73 70 61 6e 2e 6e 61 6d 65 5f 6d 69 64 64 6c 65 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 62 72 6f 77 73 65 72 5f 63 68 72 6f 6d 65 20 2e 67 66 69 65 6c 64 5f 65 72 72 6f 72 20 2e 67 69 6e 70 75 74 5f 63 6f 6d 70 6c 65 78 2e 67 69 6e 70 75 74 5f 63 6f 6e 74 61 69 6e 65 72 2e 68 61 73 5f 66 69 72 73 74 5f 6e 61 6d 65 2e 68 61 73 5f 6d 69 64 64 6c 65 5f 6e 61 6d 65 2e 68 61 73 5f 6c 61 73 74 5f 6e 61 6d 65 Data Ascii: .gform_fields li.gfield span.name_last,.gform_wrapper.gf_browser_chrome ul.gform_fields li.gfield span.name_middle{padding-top:2px}.gform_wrapper.gf_browser_chrome .gfield_error .ginput_complex.ginput_container.has_first_name.has_middle_name.has_last_name
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 68 3a 63 61 6c 63 28 34 72 65 6d 20 2b 20 32 35 70 78 29 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 62 72 6f 77 73 65 72 5f 67 65 63 6b 6f 20 2e 67 69 6e 70 75 74 5f 63 6f 6d 70 6c 65 78 20 2e 67 69 6e 70 75 74 5f 63 61 72 64 69 6e 66 6f 5f 6c 65 66 74 20 73 65 6c 65 63 74 2e 67 69 6e 70 75 74 5f 63 61 72 64 5f 65 78 70 69 72 61 74 69 6f 6e 2e 67 69 6e 70 75 74 5f 63 61 72 64 5f 65 78 70 69 72 61 74 69 6f 6e 5f 6d 6f 6e 74 68 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 70 78 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 67 66 5f 62 72 6f 77 73 65 72 5f 67 65 63 6b 6f 20 2e 63 68 6f 73 65 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 69 6e 67 6c 65 20 2e 63 68 6f 73 65 6e 2d 73 69 6e 67 6c 65 7b 68 65 69 67 68 74 3a 33 32 70 78 3b 6c 69 6e 65 2d 68 Data Ascii: h:calc(4rem + 25px)}.gform_wrapper.gf_browser_gecko .ginput_complex .ginput_cardinfo_left select.ginput_card_expiration.ginput_card_expiration_month{margin-right:1px}.gform_wrappergf_browser_gecko .chosen-container-single .chosen-single{height:32px;line-h
2024-05-06 16:42:29 UTC	1221	IN	Data Raw: 65 63 74 7b 70 61 64 64 69 6e 67 3a 32 70 78 20 30 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 62 72 6f 77 73 65 72 5f 69 65 20 2e 67 66 6f 72 6d 5f 62 6f 64 79 20 75 6c 2e 67 66 6f 72 6d 5f 66 69 65 6c 64 73 20 6c 69 2e 67 66 69 65 6c 64 20 2e 67 69 6e 70 75 74 5f 63 6f 6e 74 61 69 6e 65 72 20 23 72 65 63 61 70 74 63 68 61 5f 77 69 64 67 65 74 5f 64 69 76 20 23 72 65 63 61 70 74 63 68 61 5f 61 72 65 61 7b 77 69 64 74 68 3a 39 39 25 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 62 72 6f 77 73 65 72 5f 69 65 20 2e 6c 65 66 74 5f 6c 61 62 65 6c 20 23 72 65 63 61 70 74 63 68 61 5f 61 72 65 61 20 23 72 65 63 61 70 74 63 68 61 5f 74 61 62 6c 65 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 66 5f 62 72 Data Ascii: ect{padding:2px 0}.gform_wrapper.gf_browser_ie .gform_body ul.gform_fields li.gfield .ginput_container #recaptcha_widget_div #recaptcha_area{width:99%!important}.gform_wrapper.gf_browser_ie .left_label #recaptcha_area #recaptcha_table,.gform_wrapper.gf_br
2024-05-06 16:42:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.11	49883	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:29 UTC	625	OUT	GET /wp-content/plugins/gravity-forms-wcag-20-form-fields/css/gf_wcag20_form_fields.min.css?ver=6.4.3 HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:29 UTC	767	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:29 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 17 Mar 2020 03:12:49 GMT ETag: W/"5e704031-190" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u7hpn9RNswX4FTL4KFEZKgvazlK5qENOEEb8dsn59u2zG3CizEnv64XSPc%2FCu8iZ2UA9j6eyW3BbUHka20kJ3H%2FEqfKveHyHt1DGe10wPMERcn2RH%2B802EIpueNjJj5oU4g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c7e89ad8de5-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:29 UTC	407	IN	Data Raw: 31 39 30 0d 0a 2e 67 66 69 65 6c 64 73 65 74 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 73 72 2d 6f 6e 6c 79 7b 62 6f 72 64 65 72 3a 30 20 6e 6f 6e 65 3b 63 6c 69 70 3a 72 65 63 74 28 30 2c 30 2c 30 2c 30 29 3b 68 65 69 67 68 74 3a 31 70 78 3b 6d 61 72 67 69 6e 3a 2d 31 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 70 78 7d 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 20 2e 6c 65 66 74 5f 6c 61 62 65 6c 20 2e 67 66 69 65 6c 64 73 65 74 20 2e 67 66 69 65 6c 64 5f 6c 61 62 65 6c 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 3a 2e 37 35 65 6d 20 31 35 70 78 20 30 20 30 3b 77 69 64 74 Data Ascii: 190.gfieldset{border:none;margin:0;padding:0}.sr-only{border:0 none;clip:rect(0,0,0,0);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px}.gform_wrapper .left_label .gfieldset .gfield_label{float:left;margin:.75em 15px 0 0;widt
2024-05-06 16:42:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.11	49884	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:29 UTC	590	OUT	GET /wp-content/uploads/hm_custom_css_js/custom.css?ver=1522749326 HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:29 UTC	732	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:29 GMT Content-Type: text/css Content-Length: 0 Connection: close Last-Modified: Wed, 03 Oct 2018 23:54:46 GMT ETag: "5bb556c6-0" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YSCuNFWFxO0cczv556dDSwF4X6ygZDS%2FXsi0PbQ4bXwjLLf5peQuTdiW%2B4UgWJenNFzxUugkyCUxGsM%2B0korVMWaJO5adAkcObkzpiV2zlJT6ECMCJkq8tqASQgklC%2F3iDs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c7f183602f1-MIA alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.11	49885	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:29 UTC	658	OUT	GET /wp-content/cache/min/1/font-awesome/4.7.0/css/font-awesome.min-f3c95ec7959d6de503c73e1f51f186af.css HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://fortis-site.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:29 UTC	766	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:29 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 28 Oct 2021 03:54:18 GMT ETag: W/"617a1eea-7a5f" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=931aCj4YGmu%2BlQfDLd2xrSTBch8V3ME6gYK4IdlmMTmvU1xcn0CPOvddK4O6QmysUl7Et133fFkBhGtNgO2fy9MzvgvXlNSnNvqdARcaj6dlRfOAVtIM5mXYzK%2F00Vu7jIM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c7f6cec741d-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:29 UTC	603	IN	Data Raw: 37 61 35 66 0d 0a 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 Data Ascii: 7a5f/! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-display:swap;font-family:'FontAwesome';src:url(https://maxcdn.bootst
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 66 6f 6e 74 2d 61 77 65 73 6f 6d 65 2f 34 2e 37 2e 30 2f 63 73 73 2f 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 3f 76 3d 34 2e 37 2e 30 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 68 74 74 70 73 3a 2f 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 66 6f 6e 74 2d 61 77 65 73 6f 6d 65 2f 34 2e 37 2e 30 2f 63 73 73 2f 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 74 74 66 3f 76 3d 34 2e 37 2e 30 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 Data Ascii: /maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/../fonts/fontawesome-webfont.woff?v=4.7.0) format('woff'),url(https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/../fonts/fontawesome-webfont.ttf?v=4.7.0) format('truetype'),url('https://maxcdn.bootstrap
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 66 61 2d 73 70 69 6e 20 32 73 20 69 6e 66 69 6e 69 74 65 20 6c 69 6e 65 61 72 7d 2e 66 61 2d 70 75 6c 73 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 2d 73 70 69 6e 20 31 73 20 69 6e 66 69 6e 69 74 65 20 73 74 65 70 73 28 38 29 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 2d 73 70 69 6e 20 31 73 20 69 6e 66 69 6e 69 74 65 20 73 74 65 70 73 28 38 29 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a Data Ascii: fa-spin 2s infinite linear}.fa-pulse{-webkit-animation:fa-spin 1s infinite steps(8);animation:fa-spin 1s infinite steps(8)}@-webkit-keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 74 20 2e 66 61 2d 66 6c 69 70 2d 76 65 72 74 69 63 61 6c 7b 66 69 6c 74 65 72 3a 6e 6f 6e 65 7d 2e 66 61 2d 73 74 61 63 6b 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 32 65 6d 3b 68 65 69 67 68 74 3a 32 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 66 61 2d 73 74 61 63 6b 2d 31 78 2c 2e 66 61 2d 73 74 61 63 6b 2d 32 78 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 61 2d 73 74 61 63 6b 2d 31 78 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 2e 66 Data Ascii: t .fa-flip-vertical{filter:none}.fa-stack{position:relative;display:inline-block;width:2em;height:2em;line-height:2em;vertical-align:middle}.fa-stack-1x,.fa-stack-2x{position:absolute;left:0;width:100%;text-align:center}.fa-stack-1x{line-height:inherit}.f
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 31 64 22 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 65 70 65 61 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 31 65 22 7d 2e 66 61 2d 72 65 66 72 65 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 31 22 7d 2e 66 61 2d 6c 69 73 74 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 32 22 7d 2e 66 61 2d 6c 6f 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 33 22 7d 2e 66 61 2d 66 6c 61 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 34 22 7d 2e 66 61 2d 68 65 61 64 70 68 6f 6e 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 35 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 6f 66 66 3a 62 65 66 6f 72 Data Ascii: 1d"}.fa-rotate-right:before,.fa-repeat:before{content:"\f01e"}.fa-refresh:before{content:"\f021"}.fa-list-alt:before{content:"\f022"}.fa-lock:before{content:"\f023"}.fa-flag:before{content:"\f024"}.fa-headphones:before{content:"\f025"}.fa-volume-off:befor
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 5c 66 30 34 34 22 7d 2e 66 61 2d 73 68 61 72 65 2d 73 71 75 61 72 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 35 22 7d 2e 66 61 2d 63 68 65 63 6b 2d 73 71 75 61 72 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 36 22 7d 2e 66 61 2d 61 72 72 6f 77 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 37 22 7d 2e 66 61 2d 73 74 65 70 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 38 22 7d 2e 66 61 2d 66 61 73 74 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 39 22 7d 2e 66 61 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 61 22 7d 2e 66 61 2d 70 6c 61 79 3a 62 65 66 Data Ascii: \f044"}.fa-share-square-o:before{content:"\f045"}.fa-check-square-o:before{content:"\f046"}.fa-arrows:before{content:"\f047"}.fa-step-backward:before{content:"\f048"}.fa-fast-backward:before{content:"\f049"}.fa-backward:before{content:"\f04a"}.fa-play:bef
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 36 61 22 7d 2e 66 61 2d 67 69 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 36 62 22 7d 2e 66 61 2d 6c 65 61 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 36 63 22 7d 2e 66 61 2d 66 69 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 36 64 22 7d 2e 66 61 2d 65 79 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 36 65 22 7d 2e 66 61 2d 65 79 65 2d 73 6c 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 30 22 7d 2e 66 61 2d 77 61 72 6e 69 6e 67 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 74 72 69 61 6e 67 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 31 22 7d 2e 66 61 2d 70 Data Ascii: re{content:"\f06a"}.fa-gift:before{content:"\f06b"}.fa-leaf:before{content:"\f06c"}.fa-fire:before{content:"\f06d"}.fa-eye:before{content:"\f06e"}.fa-eye-slash:before{content:"\f070"}.fa-warning:before,.fa-exclamation-triangle:before{content:"\f071"}.fa-p
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 61 2d 74 72 6f 70 68 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 31 22 7d 2e 66 61 2d 67 69 74 68 75 62 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 32 22 7d 2e 66 61 2d 75 70 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 33 22 7d 2e 66 61 2d 6c 65 6d 6f 6e 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 34 22 7d 2e 66 61 2d 70 68 6f 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 35 22 7d 2e 66 61 2d 73 71 75 61 72 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 36 22 7d 2e 66 61 2d 62 6f 6f 6b 6d 61 72 6b 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 37 22 7d 2e 66 61 2d 70 68 Data Ascii: a-trophy:before{content:"\f091"}.fa-github-square:before{content:"\f092"}.fa-upload:before{content:"\f093"}.fa-lemon-o:before{content:"\f094"}.fa-phone:before{content:"\f095"}.fa-square-o:before{content:"\f096"}.fa-bookmark-o:before{content:"\f097"}.fa-ph
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 33 22 7d 2e 66 61 2d 63 75 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 63 69 73 73 6f 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 34 22 7d 2e 66 61 2d 63 6f 70 79 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 69 6c 65 73 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 35 22 7d 2e 66 61 2d 70 61 70 65 72 63 6c 69 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 36 22 7d 2e 66 61 2d 73 61 76 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 6c 6f 70 70 79 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 37 22 7d 2e 66 61 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 38 22 7d 2e 66 61 2d 6e 61 76 69 63 6f 6e 3a 62 65 66 Data Ascii: ontent:"\f0c3"}.fa-cut:before,.fa-scissors:before{content:"\f0c4"}.fa-copy:before,.fa-files-o:before{content:"\f0c5"}.fa-paperclip:before{content:"\f0c6"}.fa-save:before,.fa-floppy-o:before{content:"\f0c7"}.fa-square:before{content:"\f0c8"}.fa-navicon:bef
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 6e 74 3a 22 5c 66 30 65 35 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 73 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 36 22 7d 2e 66 61 2d 66 6c 61 73 68 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 6f 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 37 22 7d 2e 66 61 2d 73 69 74 65 6d 61 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 38 22 7d 2e 66 61 2d 75 6d 62 72 65 6c 6c 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 39 22 7d 2e 66 61 2d 70 61 73 74 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 6c 69 70 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 61 22 7d 2e 66 61 2d 6c 69 67 68 74 62 75 6c 62 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 Data Ascii: nt:"\f0e5"}.fa-comments-o:before{content:"\f0e6"}.fa-flash:before,.fa-bolt:before{content:"\f0e7"}.fa-sitemap:before{content:"\f0e8"}.fa-umbrella:before{content:"\f0e9"}.fa-paste:before,.fa-clipboard:before{content:"\f0ea"}.fa-lightbulb-o:before{content:"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.11	49887	89.187.173.22	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:29 UTC	2613	OUT	OPTIONS /api/img-dscr/v2/D0JSP1avgg/3527403/RLqwMG7OTpTSzPtD/alts.json?dto=%7B%22sorted%22%3A%5B%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fabout-thumb.webp%22%2C%22alt%22%3A%22RMS%20Hospitality%20Group%20Let%20Us%20Take%20Risk%20off%20Your%20Table%22%2C%22dir%22%3A%22RO%22%7D%2C%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fgoogle-review.webp%22%2C%22alt%22%3A%22Leave%20a%20review%20on%20Google%22%2C%22dir%22%3A%22RO%22%7D%2C%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fistock-1350660376.jpg%22%2C%22alt%22%3A%22How%20Can%20Pubs%20Improve%20Safety%3F%20A%20Primer%20for%20Insurance%20Professionals%22%2C%22dir%22%3A%22RO%22%7D%2C%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fistock-1824175 [TRUNCATED] Host: cdn77.api.userway.org Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://www.rmshg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:29 UTC	593	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:29 GMT Transfer-Encoding: chunked Connection: close X-Service-Version: img-dscr-srv-727604a1 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD, PUT, PATCH, POST, DELETE Access-Control-Allow-Headers: * Access-Control-Expose-Headers: Content-Range, Content-Length, ETag, Content-Type Access-Control-Max-Age: 3000 Cache-Control: max-age=604800 X-77-NZT: EggBWbutFQAACAGckjviAAA X-77-NZT-Ray: 256bf61927b612787508396613345f29 X-77-Cache: MISS Server: CDN77-Turbo Alt-Svc: h3=":443"; ma=86400 X-77-POP: miamiUSFL
2024-05-06 16:42:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.11	49886	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:29 UTC	661	OUT	GET /wp-content/themes/fortuna/style.css HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://fortis-site.com/wp-content/cache/min/1/wp-content/themes/fortuna-child/style-de4eeabd10fd7e5c34310e1183bfc60c.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:29 UTC	837	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:29 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Cf-Bgj: minify Cf-Polished: origSize=254673 ETag: W/"5bb556c8-3e2d1" Last-Modified: Wed, 03 Oct 2018 23:54:48 GMT Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding CF-Cache-Status: HIT Age: 352105 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tk6EQiUMZRKQ%2BtFTA5ay8X3A2KXH%2BdT%2FTSjp0LJiTUCxZzS95k72Snf%2FIBZ%2BikgXWA%2BT7V4ACdUVE5b4H6HLlWWI%2B6KdqzqJw%2FPpuOr5Z1xCTLx2A1TM4jGNhW2O5PIZ4y0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c7fb93b21c1-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:29 UTC	532	IN	Data Raw: 37 63 36 34 0d 0a 68 74 6d 6c 2c 62 6f 64 79 2c 64 69 76 2c 73 70 61 6e 2c 61 70 70 6c 65 74 2c 6f 62 6a 65 63 74 2c 69 66 72 61 6d 65 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 70 2c 62 6c 6f 63 6b 71 75 6f 74 65 2c 70 72 65 2c 61 2c 61 62 62 72 2c 61 63 72 6f 6e 79 6d 2c 61 64 64 72 65 73 73 2c 62 69 67 2c 63 69 74 65 2c 63 6f 64 65 2c 64 65 6c 2c 64 66 6e 2c 65 6d 2c 69 6d 67 2c 69 6e 73 2c 6b 62 64 2c 71 2c 73 2c 73 61 6d 70 2c 73 6d 61 6c 6c 2c 73 74 72 69 6b 65 2c 73 74 72 6f 6e 67 2c 73 75 62 2c 73 75 70 2c 74 74 2c 76 61 72 2c 62 2c 75 2c 69 2c 63 65 6e 74 65 72 2c 64 6c 2c 64 74 2c 64 64 2c 6f 6c 2c 75 6c 2c 6c 69 2c 66 69 65 6c 64 73 65 74 2c 66 6f 72 6d 2c 6c 61 62 65 6c 2c 6c 65 67 65 6e 64 2c 74 61 62 6c 65 2c 63 61 70 74 69 6f Data Ascii: 7c64html,body,div,span,applet,object,iframe,h1,h2,h3,h4,h5,h6,p,blockquote,pre,a,abbr,acronym,address,big,cite,code,del,dfn,em,img,ins,kbd,q,s,samp,small,strike,strong,sub,sup,tt,var,b,u,i,center,dl,dt,dd,ol,ul,li,fieldset,form,label,legend,table,captio
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6d 65 6e 75 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 62 6f 64 79 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 62 6c 6f 63 6b 71 75 6f 74 65 2c 71 7b 71 75 6f 74 65 73 3a 6e 6f 6e 65 7d 62 6c 6f 63 6b 71 75 6f 74 65 3a 62 65 66 6f 72 65 2c 62 6c 6f 63 6b 71 75 6f 74 65 3a 61 66 74 65 72 2c 71 3a 62 65 66 6f 72 65 2c 71 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 6e 6f 6e 65 7d 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 3b 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 3a 30 7d 2a 2c 2a 3a 62 65 66 6f 72 65 2c 2a 3a 61 66 74 65 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 Data Ascii: gure,footer,header,hgroup,menu,nav,section{display:block}body{line-height:1}blockquote,q{quotes:none}blockquote:before,blockquote:after,q:before,q:after{content:none}table{border-collapse:collapse;border-spacing:0},:before,*:after{-webkit-box-sizing:bor
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 37 37 37 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 7d 62 6c 6f 63 6b 71 75 6f 74 65 7b 6d 61 72 67 69 6e 3a 30 20 30 20 32 30 70 78 3b 70 61 64 64 69 6e 67 3a 39 70 78 20 32 30 70 78 20 30 20 31 39 70 78 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 33 70 78 20 73 6f 6c 69 64 20 23 30 38 61 64 61 37 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 7d 62 6c 6f 63 6b 71 75 6f 74 65 20 63 69 74 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 32 70 78 3b 63 6f 6c 6f 72 3a 23 39 39 39 7d 62 6c 6f 63 6b 71 75 6f 74 65 20 63 69 74 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 32 30 31 34 20 5c 30 30 32 30 22 7d 62 6c 6f 63 6b 71 75 6f 74 65 20 63 69 74 65 20 61 Data Ascii: 777;font-style:italic}blockquote{margin:0 0 20px;padding:9px 20px 0 19px;border-left:3px solid #08ada7;border-radius:2px}blockquote cite{display:block;font-size:12px;margin-top:12px;color:#999}blockquote cite:before{content:"\2014 \0020"}blockquote cite a
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 6c 20 75 6c 20 6c 69 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 36 70 78 7d 6c 69 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 36 70 78 7d 69 6d 67 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 23 6d 61 70 5f 63 61 6e 76 61 73 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 34 30 30 70 78 7d 23 6d 61 70 5f 63 61 6e 76 61 73 20 69 6d 67 7b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 7d 23 62 6f 63 5f 70 61 67 65 5f 70 72 65 6c 6f 61 64 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 39 39 32 3b 74 65 78 Data Ascii: l ul li{margin-bottom:6px}li{line-height:1.5em;margin-bottom:6px}img{max-width:100%;height:auto}#map_canvas{width:100%;height:400px}#map_canvas img{max-width:none}#boc_page_preloader{position:fixed;width:100%;height:100%;background:#fff;z-index:999992;tex
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 74 68 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 39 66 39 66 39 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 7d 2e 77 70 63 66 37 2d 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 77 72 61 70 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 2e 77 70 63 66 37 2d 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 77 72 61 70 20 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2c 2e 77 70 63 66 37 2d 66 6f 72 Data Ascii: th:100%;display:block;margin-bottom:20px;background:#f9f9f9;transition:all .3s ease-out;-webkit-transition:all .3s ease-out;-moz-transition:all .3s ease-out}.wpcf7-form-control-wrap input[type=text],.wpcf7-form-control-wrap input[type=password],.wpcf7-for
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 2e 77 68 69 74 65 5f 74 65 78 74 20 74 65 78 74 61 72 65 61 2e 69 6e 70 75 74 5f 62 6f 74 74 6f 6d 5f 6c 69 6e 65 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 32 35 30 2c 32 35 30 2c 32 35 30 2c 2e 33 29 3b 63 6f 6c 6f 72 3a 23 65 65 65 7d 2e 77 68 69 74 65 5f 74 65 78 74 20 69 6e 70 75 74 2e 69 6e 70 75 74 5f 62 6f 74 74 6f 6d 5f 6c 69 6e 65 3a 66 6f 63 75 73 2c 2e 77 68 69 74 65 5f 74 65 78 74 20 74 65 78 74 61 72 65 61 2e 69 6e 70 75 74 5f 62 6f 74 74 6f 6d 5f 6c 69 6e 65 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 32 35 30 2c 32 35 30 2c 32 35 30 2c 2e 36 35 29 7d 2e 69 6e 70 75 74 5f 62 6f 74 74 6f 6d 5f 6c 69 6e 65 3a 3a 2d 77 65 62 6b 69 74 Data Ascii: .white_text textarea.input_bottom_line{border-bottom:1px solid rgba(250,250,250,.3);color:#eee}.white_text input.input_bottom_line:focus,.white_text textarea.input_bottom_line:focus{border-bottom:1px solid rgba(250,250,250,.65)}.input_bottom_line::-webkit
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 6e 65 61 72 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 31 35 73 20 6c 69 6e 65 61 72 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 62 75 74 74 6f 6e 2b 2e 62 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 32 70 78 7d 2e 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 61 3a 68 6f 76 65 72 2e 62 75 74 74 6f 6e 2c 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 3a 68 6f 76 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 72 65 73 65 74 5d 3a 68 6f 76 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 38 61 64 61 37 7d 2e 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 2c 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 2c 69 Data Ascii: near;transition:all .15s linear;white-space:nowrap}.button+.button{margin-left:12px}.button:hover,a:hover.button,button:hover,input[type=submit]:hover,input[type=reset]:hover,input[type=button]:hover{background-color:#08ada7}.button:active,button:active,i
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 23 66 38 66 38 66 38 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 61 3a 68 6f 76 65 72 2e 62 74 6e 5f 77 68 69 74 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 33 33 7d 69 6e 70 75 74 2e 62 74 6e 5f 77 68 69 74 65 2e 62 74 6e 5f 6f 75 74 6c 69 6e 65 2c 61 2e 62 74 6e 5f 77 68 69 74 65 2e 62 74 6e 5f 6f 75 74 6c 69 6e 65 2c 2e 62 74 6e 5f 77 68 69 74 65 2e 62 74 6e 5f 6f 75 74 6c 69 6e 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 3a 32 70 78 20 73 6f 6c 69 64 20 23 66 38 66 38 66 38 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 7d 69 6e 70 75 74 2e 62 74 6e 5f 77 68 69 74 65 2e 62 74 6e 5f 6f 75 74 6c 69 6e 65 3a 68 6f 76 65 72 2c 61 2e 62 74 6e 5f 77 68 69 Data Ascii: #f8f8f8;text-shadow:none}a:hover.btn_white{color:#fff;background-color:#333}input.btn_white.btn_outline,a.btn_white.btn_outline,.btn_white.btn_outline{color:#fff!important;border:2px solid #f8f8f8;background:0 0}input.btn_white.btn_outline:hover,a.btn_whi
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 6e 70 75 74 2e 62 74 6e 5f 67 72 65 65 6e 2c 61 2e 62 74 6e 5f 67 72 65 65 6e 2c 2e 62 74 6e 5f 67 72 65 65 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 31 37 66 30 31 3b 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 7d 69 6e 70 75 74 2e 62 74 6e 5f 67 72 65 65 6e 3a 68 6f 76 65 72 2c 61 2e 62 74 6e 5f 67 72 65 65 6e 3a 68 6f 76 65 72 2c 2e 62 74 6e 5f 67 72 65 65 6e 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 33 33 21 69 6d 70 6f 72 74 61 6e 74 7d 69 6e 70 75 74 2e 62 74 6e 5f 67 72 65 65 6e 2e 62 74 6e 5f 6f 75 74 6c 69 6e 65 2c 61 2e 62 74 6e 5f 67 72 65 65 6e 2e 62 74 6e 5f 6f 75 74 6c 69 6e 65 2c 2e 62 74 6e 5f 67 72 65 65 6e 2e 62 74 6e 5f 6f 75 74 6c 69 6e 65 7b 63 6f 6c 6f 72 3a 23 Data Ascii: nput.btn_green,a.btn_green,.btn_green{background-color:#017f01;color:#fff!important}input.btn_green:hover,a.btn_green:hover,.btn_green:hover{background-color:#333!important}input.btn_green.btn_outline,a.btn_green.btn_outline,.btn_green.btn_outline{color:#
2024-05-06 16:42:29 UTC	1369	IN	Data Raw: 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 7d 69 6e 70 75 74 2e 62 74 6e 5f 62 6f 6e 64 69 2c 61 2e 62 74 6e 5f 62 6f 6e 64 69 2c 2e 62 74 6e 5f 62 6f 6e 64 69 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 39 35 62 36 3b 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 7d 69 6e 70 75 74 2e 62 74 6e 5f 62 6f 6e 64 69 3a 68 6f 76 65 72 2c 61 2e 62 74 6e 5f 62 6f 6e 64 69 3a 68 6f 76 65 72 2c 2e 62 74 6e 5f 62 6f 6e 64 69 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 33 33 21 69 6d 70 6f 72 74 61 6e 74 7d 69 6e 70 75 74 2e 62 74 6e 5f 62 6f 6e 64 69 2e 62 74 6e 5f 6f 75 74 6c 69 6e 65 2c 61 2e 62 74 6e 5f 62 6f 6e 64 69 2e 62 74 6e 5f 6f 75 74 6c 69 6e 65 2c 2e Data Ascii: ortant;color:#fff!important}input.btn_bondi,a.btn_bondi,.btn_bondi{background-color:#0095b6;color:#fff!important}input.btn_bondi:hover,a.btn_bondi:hover,.btn_bondi:hover{background-color:#333!important}input.btn_bondi.btn_outline,a.btn_bondi.btn_outline,.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.11	49888	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:29 UTC	606	OUT	GET /wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=7.18.0 HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:30 UTC	792	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:30 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 15 Jul 2021 14:58:04 GMT ETag: W/"60f04cfc-23d2" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FlaCu6cGu2SFoOZR1K9yEfjFX%2F9j3CtjYhBD05N%2Fc3%2B8xuRYwsv8lye0zk5NaT0l8ko3rUvyxgZMZqff2hWi%2BuBSV37T5cWzKx2IkdYoUIwIDO0LzFfR%2Bw%2FtAtkM%2B27r2H4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c8109aea4d6-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:30 UTC	577	IN	Data Raw: 32 33 64 32 0d 0a 3b 76 61 72 20 4d 6f 6e 73 74 65 72 49 6e 73 69 67 68 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 5b 5d 2c 61 3d 27 27 2c 6f 3d 21 31 3b 74 68 69 73 2e 73 65 74 4c 61 73 74 43 6c 69 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 29 7b 74 3d 74 79 70 65 6f 66 20 74 21 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 3f 74 3a 5b 5d 3b 6e 3d 74 79 70 65 6f 66 20 6e 21 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 3f 6e 3a 5b 5d 3b 69 3d 74 79 70 65 6f 66 20 69 21 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 3f 69 3a 21 31 3b 65 2e 76 61 6c 75 65 73 41 72 72 61 79 3d 74 3b 65 2e 66 69 65 6c 64 73 41 72 72 61 79 3d 6e 7d 3b 74 68 69 73 2e 67 65 74 4c 61 73 74 43 6c 69 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 Data Ascii: 23d2;var MonsterInsights=function(){var e=[],a='',o=!1;this.setLastClicked=function(t,n,i){t=typeof t!=='undefined'?t:[];n=typeof n!=='undefined'?n:[];i=typeof i!=='undefined'?i:!1;e.valuesArray=t;e.fieldsArray=n};this.getLastClicked=function(){return e
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 6f 66 20 72 21 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 3f 72 3a 5b 5d 3b 61 3d 74 79 70 65 6f 66 20 61 21 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 3f 61 3a 7b 7d 3b 5f 5f 67 74 61 67 54 72 61 63 6b 65 72 28 74 2c 6e 2c 61 29 3b 65 2e 76 61 6c 75 65 73 41 72 72 61 79 3d 72 3b 65 2e 66 69 65 6c 64 73 41 72 72 61 79 3d 61 3b 65 2e 66 69 65 6c 64 73 41 72 72 61 79 2e 65 76 65 6e 74 5f 61 63 74 69 6f 6e 3d 6e 3b 65 2e 74 72 61 63 6b 65 64 3d 21 30 3b 69 28 27 54 72 61 63 6b 65 64 3a 20 27 2b 72 2e 74 79 70 65 29 3b 69 28 65 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 74 3d 74 79 70 65 6f 66 20 74 21 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 3f 74 3a 5b 5d 3b 65 2e 76 61 6c 75 65 73 41 72 72 61 79 3d 74 3b 65 2e 66 69 65 6c 64 73 41 72 72 61 79 3d 5b 5d 3b 65 Data Ascii: of r!=='undefined'?r:[];a=typeof a!=='undefined'?a:{};__gtagTracker(t,n,a);e.valuesArray=r;e.fieldsArray=a;e.fieldsArray.event_action=n;e.tracked=!0;i('Tracked: '+r.type);i(e)};function n(t){t=typeof t!=='undefined'?t:[];e.valuesArray=t;e.fieldsArray=[];e
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 20 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 28 65 29 7b 69 66 28 65 2e 77 68 69 63 68 3d 3d 31 29 7b 72 65 74 75 72 6e 27 65 76 65 6e 74 2e 77 68 69 63 68 3d 31 27 7d 0a 65 6c 73 65 20 69 66 28 65 2e 77 68 69 63 68 3d 3d 32 29 7b 72 65 74 75 72 6e 27 65 76 65 6e 74 2e 77 68 69 63 68 3d 32 27 7d 0a 65 6c 73 65 20 69 66 28 65 2e 6d 65 74 61 4b 65 79 29 7b 72 65 74 75 72 6e 27 6d 65 74 61 4b 65 79 27 7d 0a 65 6c 73 65 20 69 66 28 65 2e 63 74 72 6c 4b 65 79 29 7b 72 65 74 75 72 6e 27 63 74 72 6c 4b 65 79 27 7d 0a 65 6c 73 65 20 69 66 28 65 2e 73 68 69 66 74 4b 65 79 29 7b 72 65 74 75 72 6e 27 73 68 69 66 74 4b 65 79 27 7d 0a 65 6c 73 65 20 69 66 28 65 2e 61 6c 74 4b 65 79 29 7b 72 65 74 75 72 6e 27 61 6c 74 4b 65 79 27 7d 0a 65 6c 73 65 7b 72 65 74 75 72 6e 27 Data Ascii: e};function y(e){if(e.which==1){return'event.which=1'}else if(e.which==2){return'event.which=2'}else if(e.metaKey){return'metaKey'}else if(e.ctrlKey){return'ctrlKey'}else if(e.shiftKey){return'shiftKey'}else if(e.altKey){return'altKey'}else{return'
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 74 72 6c 4b 65 79 7c 7c 74 2e 73 68 69 66 74 4b 65 79 7c 7c 74 2e 6d 65 74 61 4b 65 79 7c 7c 74 2e 77 68 69 63 68 3d 3d 32 29 7b 6e 3d 27 5f 62 6c 61 6e 6b 27 7d 3b 72 65 74 75 72 6e 20 6e 7d 3b 66 75 6e 63 74 69 6f 6e 20 76 28 65 29 7b 69 66 28 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 76 61 72 73 2d 67 61 2d 6c 61 62 65 6c 27 29 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 76 61 72 73 2d 67 61 2d 6c 61 62 65 6c 27 29 2e 72 65 70 6c 61 63 65 28 2f 5c 6e 2f 69 67 2c 27 27 29 29 7b 72 65 74 75 72 6e 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 76 61 72 73 2d 67 61 2d 6c 61 62 65 6c 27 29 2e 72 65 70 6c 61 63 65 28 2f 5c 6e 2f 69 67 2c 27 27 29 7d 0a 65 6c 73 65 20 69 66 28 65 2e 74 69 74 6c Data Ascii: trlKey\|\|t.shiftKey\|\|t.metaKey\|\|t.which==2){n='_blank'};return n};function v(e){if(e.getAttribute('data-vars-ga-label')&&e.getAttribute('data-vars-ga-label').replace(/\n/ig,'')){return e.getAttribute('data-vars-ga-label').replace(/\n/ig,'')}else if(e.titl
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 6c 3d 6c 3b 65 2e 65 6c 5f 68 72 65 66 3d 6c 2e 68 72 65 66 3b 65 2e 65 6c 5f 70 72 6f 74 6f 63 6f 6c 3d 6c 2e 70 72 6f 74 6f 63 6f 6c 3b 65 2e 65 6c 5f 68 6f 73 74 6e 61 6d 65 3d 6c 2e 68 6f 73 74 6e 61 6d 65 3b 65 2e 65 6c 5f 70 6f 72 74 3d 6c 2e 70 6f 72 74 3b 65 2e 65 6c 5f 70 61 74 68 6e 61 6d 65 3d 6c 2e 70 61 74 68 6e 61 6d 65 3b 65 2e 65 6c 5f 73 65 61 72 63 68 3d 6c 2e 73 65 61 72 63 68 3b 65 2e 65 6c 5f 68 61 73 68 3d 6c 2e 68 61 73 68 3b 65 2e 65 6c 5f 68 6f 73 74 3d 6c 2e 68 6f 73 74 3b 65 2e 64 65 62 75 67 5f 6d 6f 64 65 3d 75 28 29 3b 65 2e 64 6f 77 6e 6c 6f 61 64 5f 65 78 74 65 6e 73 69 6f 6e 73 3d 4d 3b 65 2e 69 6e 62 6f 75 6e 64 5f 70 61 74 68 73 3d 53 3b 65 2e 68 6f 6d 65 5f 75 72 6c 3d 4c 3b 65 2e 6c 69 6e 6b 3d 41 3b 65 2e 65 78 74 65 Data Ascii: l=l;e.el_href=l.href;e.el_protocol=l.protocol;e.el_hostname=l.hostname;e.el_port=l.port;e.el_pathname=l.pathname;e.el_search=l.search;e.el_hash=l.hash;e.el_host=l.host;e.debug_mode=u();e.download_extensions=M;e.inbound_paths=S;e.home_url=L;e.link=A;e.exte
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 7b 69 66 28 21 69 2e 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 29 7b 69 66 28 69 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 29 7b 69 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 0a 65 6c 73 65 7b 69 2e 72 65 74 75 72 6e 56 61 6c 75 65 3d 21 31 7d 7d 7d 3b 69 66 28 72 3d 3d 27 64 6f 77 6e 6c 6f 61 64 27 29 7b 66 3d 7b 65 76 65 6e 74 5f 63 61 74 65 67 6f 72 79 3a 27 64 6f 77 6e 6c 6f 61 64 27 2c 65 76 65 6e 74 5f 6c 61 62 65 6c 3a 70 7c 7c 65 2e 74 69 74 6c 65 2c 65 76 65 6e 74 5f 63 61 6c 6c 62 61 63 6b 3a 6d 2c 7d 3b 74 28 27 65 76 65 6e 74 27 2c 54 7c 7c 41 2c 66 2c 65 29 7d 0a 65 6c 73 65 20 69 66 28 72 3d 3d 27 69 6e 74 65 72 6e 61 6c 2d 61 73 2d 6f 75 74 62 6f 75 6e 64 27 29 7b 6f 3d 21 30 3b 77 69 6e 64 6f 77 2e 6f 6e 62 65 66 6f 72 Data Ascii: {if(!i.defaultPrevented){if(i.preventDefault){i.preventDefault()}else{i.returnValue=!1}}};if(r=='download'){f={event_category:'download',event_label:p\|\|e.title,event_callback:m,};t('event',T\|\|A,f,e)}else if(r=='internal-as-outbound'){o=!0;window.onbefor
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 30 29 7d 0a 65 6c 73 65 7b 69 66 28 72 3d 3d 27 65 78 74 65 72 6e 61 6c 27 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 45 2c 31 31 30 30 29 7d 0a 65 6c 73 65 20 69 66 28 72 3d 3d 27 63 72 6f 73 73 2d 68 6f 73 74 6e 61 6d 65 27 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 43 2c 31 31 30 30 29 7d 0a 65 6c 73 65 7b 73 65 74 54 69 6d 65 6f 75 74 28 44 2c 31 31 30 30 29 7d 7d 3b 73 65 74 54 69 6d 65 6f 75 74 28 73 2c 31 30 30 29 7d 7d 0a 65 6c 73 65 7b 73 28 29 3b 65 2e 65 78 69 74 3d 27 69 6e 74 65 72 6e 61 6c 27 3b 6e 28 65 29 7d 7d 0a 65 6c 73 65 7b 65 2e 65 78 69 74 3d 27 6e 6f 74 6c 69 6e 6b 27 3b 6e 28 65 29 7d 7d 3b 76 61 72 20 66 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 29 7b 69 66 28 6d 6f 6e 73 74 65 72 Data Ascii: 0)}else{if(r=='external'){setTimeout(E,1100)}else if(r=='cross-hostname'){setTimeout(C,1100)}else{setTimeout(D,1100)}};setTimeout(s,100)}}else{s();e.exit='internal';n(e)}}else{e.exit='notlink';n(e)}};var f=window.location.hash;function m(){if(monster
2024-05-06 16:42:30 UTC	387	IN	Data Raw: 69 73 3d 3d 3d 76 6f 69 64 20 30 7c 7c 74 68 69 73 3d 3d 3d 6e 75 6c 6c 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 29 7d 3b 76 61 72 20 74 2c 6e 2c 61 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 69 3d 61 2e 6c 65 6e 67 74 68 3e 3e 3e 30 3b 69 66 28 69 3d 3d 3d 30 29 7b 72 65 74 75 72 6e 2d 31 7d 3b 74 3d 69 2d 31 3b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 29 7b 74 3d 4e 75 6d 62 65 72 28 61 72 67 75 6d 65 6e 74 73 5b 31 5d 29 3b 69 66 28 74 21 3d 74 29 7b 74 3d 30 7d 0a 65 6c 73 65 20 69 66 28 74 21 3d 30 26 26 74 21 3d 28 31 2f 30 29 26 26 74 21 3d 2d 28 31 2f 30 29 29 7b 74 3d 28 74 3e 30 7c 7c 2d 31 29 2a 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 61 62 73 28 74 29 29 7d 7d 3b 66 6f 72 28 6e 3d 74 3e 3d Data Ascii: is===void 0\|\|this===null){throw new TypeError()};var t,n,a=Object(this),i=a.length>>>0;if(i===0){return-1};t=i-1;if(arguments.length>1){t=Number(arguments[1]);if(t!=t){t=0}else if(t!=0&&t!=(1/0)&&t!=-(1/0)){t=(t>0\|\|-1)*Math.floor(Math.abs(t))}};for(n=t>=
2024-05-06 16:42:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.11	49889	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:29 UTC	560	OUT	GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:30 UTC	783	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:30 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 28 Aug 2023 17:14:23 GMT ETag: W/"64ecd5ef-15601" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UjpXI%2B2D7Q0jc60kmWDrChoyFNVn7sLRUjTMwEXA1bG7eysQhmDNWQqBAJg4oM62D4%2BPtWmMxjGYvLDa%2BwNfnWiwMeEPQ1bIbNgP4jhpoKklk2n1Zgnnykt91O5GqVM6kf0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c81ff7c6dad-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:30 UTC	586	IN	Data Raw: 37 63 61 32 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 7ca2/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 65 2e 74 6f 53 74 72 69 6e 67 2c 61 3d 6f 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 6c 65 3d 7b 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 6f 64 65 54 79 70 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 2e 69 74 65 6d 7d 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 65 3d 3d 3d 65 2e 77 69 6e 64 6f 77 7d 2c 43 3d 69 65 2e 64 6f 63 75 6d 65 6e 74 2c 75 3d 7b 74 79 70 65 3a 21 30 2c 73 72 63 3a 21 30 2c 6e 6f 6e 63 65 3a 21 30 2c 6e 6f 4d 6f 64 75 6c 65 3a 21 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 Data Ascii: e.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 73 2e 70 75 73 68 53 74 61 63 6b 28 63 65 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 63 65 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 Data Ascii: s.pushStack(ce.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(ce.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]:[])},end:function(){return th
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 76 61 72 20 74 2c 6e 3d 22 22 2c 72 3d 30 2c 69 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 21 69 29 77 68 69 6c 65 28 74 3d 65 5b 72 2b 2b 5d 29 6e 2b 3d 63 65 2e 74 65 78 74 28 74 29 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 69 7c 7c 31 31 3d 3d 3d 69 3f 65 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3a 39 3d 3d 3d 69 3f 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3a 33 3d 3d 3d 69 7c 7c 34 3d 3d 3d 69 3f 65 2e 6e 6f 64 65 56 61 6c 75 65 3a 6e 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 63 28 4f 62 6a 65 63 74 28 65 29 29 3f 63 65 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 Data Ascii: var t,n="",r=0,i=e.nodeType;if(!i)while(t=e[r++])n+=ce.text(t);return 1===i\|\|11===i?e.textContent:9===i?e.documentElement.textContent:3===i\|\|4===i?e.nodeValue:n},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(c(Object(e))?ce.merge(n,"string"==typeof
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 78 38 30 2d 5c 75 46 46 46 46 5c 77 2d 5d 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3f 22 5c 30 22 3d 3d 3d 65 3f 22 5c 75 66 66 66 64 22 3a 65 2e 73 6c 69 63 65 28 30 2c 2d 31 29 2b 22 5c 5c 22 2b 65 2e 63 68 61 72 43 6f 64 65 41 74 28 65 2e 6c 65 6e 67 74 68 2d 31 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2b 22 20 22 3a 22 5c 5c 22 2b 65 7d 63 65 2e 65 73 63 61 70 65 53 65 6c 65 63 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 65 2b 22 22 29 2e 72 65 70 6c 61 63 65 28 66 2c 70 29 7d 3b 76 61 72 20 79 65 3d 43 2c 6d 65 3d 73 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 62 2c 77 2c 6f 2c 61 2c 54 2c Data Ascii: [\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\x80-\uFFFF\w-]/g;function p(e,t){return t?"\0"===e?"\ufffd":e.slice(0,-1)+"\\"+e.charCodeAt(e.length-1).toString(16)+" ":"\\"+e}ce.escapeSelector=function(e){return(e+"").replace(f,p)};var ye=C,me=s;!function(){var e,b,w,o,a,T,
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 5c 5c 28 22 2b 67 65 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 67 65 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 4e 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 71 3d 2f 5e 68 5c 64 24 2f 69 2c 4c 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 48 3d 2f 5b 2b 7e 5d 2f 2c 4f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 67 65 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 Data Ascii: \$"+ge+"((?:-\\d)?\\d)"+ge+"*\$\|)(?=[^-]\|$)","i")},N=/^(?:input\|select\|textarea\|button)$/i,q=/^h\d$/i,L=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,H=/[+~]/,O=new RegExp("\\\\[\\da-fA-F]{1,6}"+ge+"?\|\\\\([^\\r\\n\\f])","g"),P=function(e,t){var n="0x"+e.slice(1
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 51 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 6b 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 65 29 7b 68 28 74 2c 21 30 29 7d 66 69 6e 61 6c 6c 79 7b 73 3d 3d 3d 53 26 26 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 7d 7d 7d 72 65 74 75 72 6e 20 72 65 28 74 2e 72 65 70 6c 61 63 65 28 76 65 2c 22 24 31 22 29 2c 65 2c 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 57 28 29 7b 76 61 72 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e Data Ascii: (t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+Q(l[o]);c=l.join(",")}try{return k.apply(n,f.querySelectorAll(c)),n}catch(e){h(t,!0)}finally{s===S&&e.removeAttribute("id")}}}return re(t.replace(ve,"$1"),e,n,r)}function W(){var r=[];return function e(t,n
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 4d 29 2c 6c 65 2e 67 65 74 42 79 49 64 3d 24 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 64 3d 63 65 2e 65 78 70 61 6e 64 6f 2c 21 54 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 54 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 63 65 2e 65 78 70 61 6e 64 6f 29 2e 6c 65 6e 67 74 68 7d 29 2c 6c 65 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d 61 74 63 68 3d 24 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 65 2c 22 2a 22 29 7d 29 2c 6c 65 2e 73 63 6f 70 65 3d 24 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c Data Ascii: ntListener("unload",M),le.getById=$(function(e){return r.appendChild(e).id=ce.expando,!T.getElementsByName\|\|!T.getElementsByName(ce.expando).length}),le.disconnectedMatch=$(function(e){return i.call(e,"*")}),le.scope=$(function(){return T.querySelectorAll
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 2d 5c 72 5c 5c 27 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 27 27 3e 3c 2f 6f 70 74 69 6f 6e 3e 3c 2f 73 65 6c 65 63 74 3e 22 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 64 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 67 65 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 66 2b 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 53 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 64 2e 70 75 73 68 28 22 7e 3d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 64 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e Data Ascii: -\r\\' disabled='disabled'><option selected=''></option></select>",e.querySelectorAll("[selected]").length\|\|d.push("\\["+ge+"(?:value\|"+f+")"),e.querySelectorAll("[id~="+S+"-]").length\|\|d.push("~="),e.querySelectorAll("a#"+S+"+").length\|\|d.push(".#.+[+~
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 7d 72 65 74 75 72 6e 20 30 3c 49 28 74 2c 54 2c 6e 75 6c 6c 2c 5b 65 5d 29 2e 6c 65 6e 67 74 68 7d 2c 49 2e 63 6f 6e 74 61 69 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 21 3d 54 26 26 56 28 65 29 2c 63 65 2e 63 6f 6e 74 61 69 6e 73 28 65 2c 74 29 7d 2c 49 2e 61 74 74 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 21 3d 54 26 26 56 28 65 29 3b 76 61 72 20 6e 3d 62 2e 61 74 74 72 48 61 6e 64 6c 65 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 2c 72 3d 6e 26 26 75 65 2e 63 61 6c 6c 28 62 2e 61 74 74 72 48 61 6e 64 6c 65 2c 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3f 6e 28 65 2c 74 2c 21 43 29 3a 76 6f Data Ascii: }return 0<I(t,T,null,[e]).length},I.contains=function(e,t){return(e.ownerDocument\|\|e)!=T&&V(e),ce.contains(e,t)},I.attr=function(e,t){(e.ownerDocument\|\|e)!=T&&V(e);var n=b.attrHandle[t.toLowerCase()],r=n&&ue.call(b.attrHandle,t.toLowerCase())?n(e,t,!C):vo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.11	49890	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:29 UTC	568	OUT	GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:30 UTC	790	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:30 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Fri, 09 Jun 2023 05:49:24 GMT ETag: W/"6482bd64-3509" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Hc%2BJ2EbuhXdwriemYKWax9acuSnUklgRR7%2FKZtrZGhWnfr%2FPI%2Bm%2Fuw%2FR3RdAzgQf3PBREJUGbT6RzlK3ma0MLiNG2Ng8%2FCqusJiIesUBX0xLpBNZQeScoGQLMbHYo89mV0c%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c829fb6a50c-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:30 UTC	579	IN	Data Raw: 33 35 30 39 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f Data Ascii: 3509/! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],functio
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 6e 20 30 7d 28 73 2e 66 6e 2e 6a 71 75 65 72 79 2c 65 29 7d 73 2e 6d 69 67 72 61 74 65 56 65 72 73 69 6f 6e 3d 22 33 2e 34 2e 31 22 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 73 2e 6d 69 67 72 61 74 65 44 69 73 61 62 6c 65 50 61 74 63 68 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 61 72 67 75 6d 65 6e 74 73 5b 65 5d 5d 3d 21 30 7d 2c 73 2e 6d 69 67 72 61 74 65 45 6e 61 62 6c 65 50 61 74 63 68 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 64 65 6c 65 74 65 20 74 5b 61 72 67 75 6d 65 6e 74 73 5b 65 5d 5d 7d 2c 73 Data Ascii: n 0}(s.fn.jquery,e)}s.migrateVersion="3.4.1";var t=Object.create(null);s.migrateDisablePatches=function(){for(var e=0;e<arguments.length;e++)t[arguments[e]]=!0},s.migrateEnablePatches=function(){for(var e=0;e<arguments.length;e++)delete t[arguments[e]]},s
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 61 74 65 52 65 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 3d 7b 7d 2c 73 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 2e 6c 65 6e 67 74 68 3d 30 7d 2c 22 42 61 63 6b 43 6f 6d 70 61 74 22 3d 3d 3d 6e 2e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6d 70 61 74 4d 6f 64 65 26 26 75 28 22 71 75 69 72 6b 73 22 2c 22 6a 51 75 65 72 79 20 69 73 20 6e 6f 74 20 63 6f 6d 70 61 74 69 62 6c 65 20 77 69 74 68 20 51 75 69 72 6b 73 20 4d 6f 64 65 22 29 3b 76 61 72 20 64 2c 6c 2c 70 2c 66 3d 7b 7d 2c 6d 3d 73 2e 66 6e 2e 69 6e 69 74 2c 79 3d 73 2e 66 69 6e 64 2c 68 3d 2f 5c 5b 28 5c 73 2a 5b 2d 5c 77 5d 2b 5c 73 2a 29 28 5b 7e 7c 5e 24 2a 5d 3f 3d 29 5c 73 2a 28 5b 2d 5c 77 23 5d 2a 3f 23 5b 2d 5c 77 23 5d 2a 29 5c 73 2a 5c 5d 2f 2c 67 3d 2f 5c 5b 28 5c 73 2a 5b 2d 5c 77 5d Data Ascii: ateReset=function(){o={},s.migrateWarnings.length=0},"BackCompat"===n.document.compatMode&&u("quirks","jQuery is not compatible with Quirks Mode");var d,l,p,f={},m=s.fn.init,y=s.find,h=/\[(\s[-\w]+\s)([~\|^$]?=)\s([-\w#]?#[-\w#])\s\]/,g=/\[(\s[-\w]
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 73 20 64 65 70 72 65 63 61 74 65 64 3b 20 75 73 65 20 4a 53 4f 4e 2e 70 61 72 73 65 22 29 2c 63 28 73 2c 22 68 6f 6c 64 52 65 61 64 79 22 2c 73 2e 68 6f 6c 64 52 65 61 64 79 2c 22 68 6f 6c 64 52 65 61 64 79 22 2c 22 6a 51 75 65 72 79 2e 68 6f 6c 64 52 65 61 64 79 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 63 28 73 2c 22 75 6e 69 71 75 65 22 2c 73 2e 75 6e 69 71 75 65 53 6f 72 74 2c 22 75 6e 69 71 75 65 22 2c 22 6a 51 75 65 72 79 2e 75 6e 69 71 75 65 20 69 73 20 64 65 70 72 65 63 61 74 65 64 3b 20 75 73 65 20 6a 51 75 65 72 79 2e 75 6e 69 71 75 65 53 6f 72 74 22 29 2c 72 28 73 2e 65 78 70 72 2c 22 66 69 6c 74 65 72 73 22 2c 73 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2c 22 65 78 70 72 2d 70 72 65 2d 70 73 65 75 64 6f 73 22 2c 22 6a 51 75 65 72 79 2e Data Ascii: s deprecated; use JSON.parse"),c(s,"holdReady",s.holdReady,"holdReady","jQuery.holdReady is deprecated"),c(s,"unique",s.uniqueSort,"unique","jQuery.unique is deprecated; use jQuery.uniqueSort"),r(s.expr,"filters",s.expr.pseudos,"expr-pre-pseudos","jQuery.
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 64 65 70 72 65 63 61 74 65 64 22 29 2c 63 28 73 2c 22 69 73 57 69 6e 64 6f 77 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 65 3d 3d 3d 65 2e 77 69 6e 64 6f 77 7d 2c 22 69 73 57 69 6e 64 6f 77 22 2c 22 6a 51 75 65 72 79 2e 69 73 57 69 6e 64 6f 77 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 29 2c 73 2e 61 6a 61 78 26 26 28 6c 3d 73 2e 61 6a 61 78 2c 70 3d 2f 28 3d 29 5c 3f 28 3f 3d 26 7c 24 29 7c 5c 3f 5c 3f 2f 2c 69 28 73 2c 22 61 6a 61 78 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6c 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 65 2e 70 72 6f 6d 69 73 65 26 26 28 63 28 65 2c 22 73 75 63 63 65 73 73 22 2c 65 2e 64 6f 6e 65 2c 22 6a 71 58 48 52 Data Ascii: deprecated"),c(s,"isWindow",function(e){return null!=e&&e===e.window},"isWindow","jQuery.isWindow() is deprecated")),s.ajax&&(l=s.ajax,p=/(=)\?(?=&\|$)\|\?\?/,i(s,"ajax",function(){var e=l.apply(this,arguments);return e.promise&&(c(e,"success",e.done,"jqXHR
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 74 68 69 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 3b 65 26 26 73 2e 64 61 74 61 28 74 68 69 73 2c 22 5f 5f 63 6c 61 73 73 4e 61 6d 65 5f 5f 22 2c 65 29 2c 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 26 26 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 2c 21 65 26 26 21 31 21 3d 3d 74 26 26 73 2e 64 61 74 61 28 74 68 69 73 2c 22 5f 5f 63 6c 61 73 73 4e 61 6d 65 5f 5f 22 29 7c 7c 22 22 29 7d 29 29 7d 2c 22 74 6f 67 67 6c 65 43 6c 61 73 73 2d 62 6f 6f 6c 22 29 3b 76 61 72 20 51 2c 41 2c 52 3d 21 31 2c 43 3d 2f 5e 5b 61 2d 7a 5d 2f 2c 4e 3d 2f 5e 28 3f 3a 42 Data Ascii: s.each(function(){var e=this.getAttribute&&this.getAttribute("class")\|\|"";e&&s.data(this,"__className__",e),this.setAttribute&&this.setAttribute("class",!e&&!1!==t&&s.data(this,"__className__")\|\|"")}))},"toggleClass-bool");var Q,A,R=!1,C=/^[a-z]/,N=/^(?:B
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 74 65 64 22 29 2c 52 65 66 6c 65 63 74 2e 67 65 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 28 22 63 73 73 2d 6e 75 6d 62 65 72 22 2c 22 6a 51 75 65 72 79 2e 63 73 73 4e 75 6d 62 65 72 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 52 65 66 6c 65 63 74 2e 73 65 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 29 3a 73 2e 63 73 73 4e 75 6d 62 65 72 3d 41 29 3a 41 3d 73 2e 63 73 73 4e 75 6d 62 65 72 2c 51 3d 73 2e 66 6e 2e 63 73 73 2c 69 28 73 2e 66 6e 2c 22 63 73 73 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 Data Ascii: ted"),Reflect.get.apply(this,arguments)},set:function(){return u("css-number","jQuery.cssNumber is deprecated"),Reflect.set.apply(this,arguments)}}):s.cssNumber=A):A=s.cssNumber,Q=s.fn.css,i(s.fn,"css",function(e,t){var r,n,o=this;return e&&"object"==type
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 61 6c 2c 50 3d 22 6a 51 75 65 72 79 2e 66 78 2e 69 6e 74 65 72 76 61 6c 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 2c 6e 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 73 2e 66 78 2c 22 69 6e 74 65 72 76 61 6c 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 7c 7c 75 28 22 66 78 2d 69 6e 74 65 72 76 61 6c 22 2c 50 29 2c 73 2e 6d 69 67 72 61 74 65 49 73 50 61 74 63 68 45 6e 61 62 6c 65 64 28 22 66 78 2d 69 6e 74 65 72 76 61 6c 22 29 26 26 76 6f 69 64 20 30 3d 3d 3d 53 3f 31 33 3a 53 7d 2c 73 65 74 3a Data Ascii: al,P="jQuery.fx.interval is deprecated",n.requestAnimationFrame&&Object.defineProperty(s.fx,"interval",{configurable:!0,enumerable:!0,get:function(){return n.document.hidden\|\|u("fx-interval",P),s.migrateIsPatchEnabled("fx-interval")&&void 0===S?13:S},set:
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 2d 76 33 22 2c 22 6a 51 75 65 72 79 2e 66 6e 2e 22 2b 74 2b 22 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 65 2e 73 70 6c 69 63 65 28 30 2c 30 2c 74 29 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 6f 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 65 29 3a 28 74 68 69 73 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 65 29 2c 74 68 69 73 29 29 7d 2c 22 73 68 6f 72 74 68 61 6e 64 2d 72 65 6d 6f 76 65 64 2d 76 33 22 29 7d 29 2c 73 2e 65 61 63 68 28 22 62 6c 75 72 20 66 6f 63 75 73 20 66 6f 63 75 73 69 6e 20 66 6f 63 75 73 6f 75 74 20 72 65 73 69 7a 65 20 73 63 72 6f 6c 6c 20 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 6b 20 6d 6f 75 73 65 64 6f 77 6e 20 6d 6f 75 73 65 75 70 20 6d 6f 75 73 65 6d 6f 76 Data Ascii: -v3","jQuery.fn."+t+"() is deprecated"),e.splice(0,0,t),arguments.length?this.on.apply(this,e):(this.triggerHandler.apply(this,e),this))},"shorthand-removed-v3")}),s.each("blur focus focusin focusout resize scroll click dblclick mousedown mouseup mousemov
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2e 63 72 65 61 74 65 48 54 4d 4c 44 6f 63 75 6d 65 6e 74 28 22 22 29 3b 72 65 74 75 72 6e 20 74 2e 62 6f 64 79 2e 69 6e 6e 65 72 48 54 4d 4c 3d 65 2c 74 2e 62 6f 64 79 26 26 74 2e 62 6f 64 79 2e 69 6e 6e 65 72 48 54 4d 4c 7d 76 61 72 20 46 3d 2f 3c 28 3f 21 61 72 65 61 7c 62 72 7c 63 6f 6c 7c 65 6d 62 65 64 7c 68 72 7c 69 6d 67 7c 69 6e 70 75 74 7c 6c 69 6e 6b 7c 6d 65 74 61 7c 70 61 72 61 6d 29 28 28 5b 61 2d 7a 5d 5b 5e 5c 2f 5c 30 3e 5c 78 32 30 5c 74 5c 72 5c 6e 5c 66 5d 2a 29 5b 5e 3e 5d 2a 29 5c 2f 3e 2f 67 69 3b 73 2e 55 4e 53 41 46 45 5f 72 65 73 74 6f 72 65 4c 65 67 61 63 79 48 74 6d 6c 50 72 65 66 69 6c 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 6d 69 67 72 61 74 65 45 6e 61 62 6c 65 50 61 74 63 68 Data Ascii: mplementation.createHTMLDocument("");return t.body.innerHTML=e,t.body&&t.body.innerHTML}var F=/<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\/\0>\x20\t\r\n\f])[^>])\/>/gi;s.UNSAFE_restoreLegacyHtmlPrefilter=function(){s.migrateEnablePatch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.11	49891	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:29 UTC	603	OUT	GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.6.4 HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:30 UTC	783	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:30 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Wed, 03 Oct 2018 23:54:48 GMT ETag: W/"5bb556c8-1afe3" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y%2BzBVJaFQhMcRx7VJhemzTqqJ0Aji4KkfSD%2FnyiwS5DmJ7BcWlbAd5AOVqG564TEVjGUZCTK9lHkjzbyheE0xeVDzli2s01hQg6k7ArNRE5%2FRvtcWy3eC5X2EOomuqzKjc4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c82bad89071-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:30 UTC	586	IN	Data Raw: 37 63 61 32 0d 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0d 0a 09 2d 09 54 48 45 4d 45 50 55 4e 43 48 20 54 4f 4f 4c 53 20 56 65 72 2e 20 31 2e 30 20 20 20 20 20 2d 0d 0a 09 20 4c 61 73 74 20 55 70 64 61 74 65 20 6f 66 20 54 6f 6f 6c 73 20 32 37 2e 30 32 2e 32 30 31 35 0d 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0d 0a 0d 0a 0d 0a 2f 2a 0d 0a 2a 20 40 66 69 6c 65 4f 76 65 72 76 69 65 77 20 54 6f 75 63 68 53 77 69 70 65 20 2d 20 6a 51 75 65 72 79 20 50 6c 75 67 69 6e 0d 0a 2a 20 40 76 65 72 73 69 6f 6e 20 31 2e 36 2e 39 0d 0a 2a 0d 0a 2a 20 40 61 75 74 68 6f 72 20 Data Ascii: 7ca2/******************************************-THEMEPUNCH TOOLS Ver. 1.0 - Last Update of Tools 27.02.2015*****************************************// @fileOverview TouchSwipe - jQuery Plugin* @version 1.6.9** @author
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 26 26 64 65 66 69 6e 65 2e 61 6d 64 2e 6a 51 75 65 72 79 29 7b 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 61 29 7d 65 6c 73 65 7b 61 28 6a 51 75 65 72 79 29 7d 7d 28 66 75 6e 63 74 69 6f 6e 28 66 29 7b 76 61 72 20 79 3d 22 31 2e 36 2e 39 22 2c 70 3d 22 6c 65 66 74 22 2c 6f 3d 22 72 69 67 68 74 22 2c 65 3d 22 75 70 22 2c 78 3d 22 64 6f 77 6e 22 2c 63 3d 22 69 6e 22 2c 41 3d 22 6f 75 74 22 2c 6d 3d 22 6e 6f 6e 65 22 2c 73 3d 22 61 75 74 6f 22 2c 6c 3d 22 73 77 69 70 65 22 2c 74 3d 22 70 69 6e 63 68 22 2c 42 3d 22 74 61 70 22 2c 6a 3d 22 64 6f 75 62 6c 65 74 61 70 22 2c 62 3d 22 6c 6f 6e 67 74 61 70 22 2c 7a 3d 22 68 6f 6c 64 22 2c 45 Data Ascii: typeof define==="function"&&define.amd&&define.amd.jQuery){define(["jquery"],a)}else{a(jQuery)}}(function(f){var y="1.6.9",p="left",o="right",e="up",x="down",c="in",A="out",m="none",s="auto",l="swipe",t="pinch",B="tap",j="doubletap",b="longtap",z="hold",E
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 2e 76 65 72 73 69 6f 6e 3d 79 3b 66 2e 66 6e 2e 73 77 69 70 65 74 70 2e 64 65 66 61 75 6c 74 73 3d 6e 3b 66 2e 66 6e 2e 73 77 69 70 65 74 70 2e 70 68 61 73 65 73 3d 7b 50 48 41 53 45 5f 53 54 41 52 54 3a 67 2c 50 48 41 53 45 5f 4d 4f 56 45 3a 6b 2c 50 48 41 53 45 5f 45 4e 44 3a 68 2c 50 48 41 53 45 5f 43 41 4e 43 45 4c 3a 71 7d 3b 66 2e 66 6e 2e 73 77 69 70 65 74 70 2e 64 69 72 65 63 74 69 6f 6e 73 3d 7b 4c 45 46 54 3a 70 2c 52 49 47 48 54 3a 6f 2c 55 50 3a 65 2c 44 4f 57 4e 3a 78 2c 49 4e 3a 63 2c 4f 55 54 3a 41 7d 3b 66 2e 66 6e 2e 73 77 69 70 65 74 70 2e 70 61 67 65 53 63 72 6f 6c 6c 3d 7b 4e 4f 4e 45 3a 6d 2c 48 4f 52 49 5a 4f 4e 54 41 4c 3a 45 2c 56 45 52 54 49 43 41 4c 3a 75 2c 41 55 54 4f 3a 73 7d 3b 66 2e 66 6e 2e 73 77 69 70 65 74 70 2e 66 69 6e Data Ascii: .version=y;f.fn.swipetp.defaults=n;f.fn.swipetp.phases={PHASE_START:g,PHASE_MOVE:k,PHASE_END:h,PHASE_CANCEL:q};f.fn.swipetp.directions={LEFT:p,RIGHT:o,UP:e,DOWN:x,IN:c,OUT:A};f.fn.swipetp.pageScroll={NONE:m,HORIZONTAL:E,VERTICAL:u,AUTO:s};f.fn.swipetp.fin
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 62 64 2c 62 63 29 7b 69 66 28 61 77 5b 62 64 5d 21 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 69 66 28 62 63 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 72 65 74 75 72 6e 20 61 77 5b 62 64 5d 7d 65 6c 73 65 7b 61 77 5b 62 64 5d 3d 62 63 7d 7d 65 6c 73 65 7b 66 2e 65 72 72 6f 72 28 22 4f 70 74 69 6f 6e 20 22 2b 62 64 2b 22 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 20 6f 6e 20 6a 51 75 65 72 79 2e 73 77 69 70 65 74 70 2e 6f 70 74 69 6f 6e 73 22 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 4f 28 62 65 29 7b 69 66 28 61 43 28 29 29 7b 72 65 74 75 72 6e 7d 69 66 28 66 28 62 65 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 61 77 2e 65 78 63 6c 75 64 65 64 45 6c 65 6d 65 6e 74 73 2c 61 Data Ascii: ption=function(bd,bc){if(aw[bd]!==undefined){if(bc===undefined){return aw[bd]}else{aw[bd]=bc}}else{f.error("Option "+bd+" does not exist on jQuery.swipetp.options")}return null};function aO(be){if(aC()){return}if(f(be.target).closest(aw.excludedElements,a
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 75 73 7c 7c 61 77 2e 70 69 6e 63 68 53 74 61 74 75 73 29 7b 62 65 3d 50 28 62 69 2c 61 61 29 7d 69 66 28 21 61 77 2e 74 72 69 67 67 65 72 4f 6e 54 6f 75 63 68 45 6e 64 7c 7c 61 77 2e 74 72 69 67 67 65 72 4f 6e 54 6f 75 63 68 4c 65 61 76 65 29 7b 76 61 72 20 62 63 3d 74 72 75 65 3b 69 66 28 61 77 2e 74 72 69 67 67 65 72 4f 6e 54 6f 75 63 68 4c 65 61 76 65 29 7b 76 61 72 20 62 68 3d 61 5a 28 74 68 69 73 29 3b 62 63 3d 46 28 62 67 2e 65 6e 64 2c 62 68 29 7d 69 66 28 21 61 77 2e 74 72 69 67 67 65 72 4f 6e 54 6f 75 63 68 45 6e 64 26 26 62 63 29 7b 61 61 3d 61 44 28 6b 29 7d 65 6c 73 65 7b 69 66 28 61 77 2e 74 72 69 67 67 65 72 4f 6e 54 6f 75 63 68 4c 65 61 76 65 26 26 21 62 63 29 7b 61 61 3d 61 44 28 68 29 7d 7d 69 66 28 61 61 3d 3d 71 7c 7c 61 61 3d 3d 68 29 Data Ascii: us\|\|aw.pinchStatus){be=P(bi,aa)}if(!aw.triggerOnTouchEnd\|\|aw.triggerOnTouchLeave){var bc=true;if(aw.triggerOnTouchLeave){var bh=aZ(this);bc=F(bg.end,bh)}if(!aw.triggerOnTouchEnd&&bc){aa=aD(k)}else{if(aw.triggerOnTouchLeave&&!bc){aa=aD(h)}}if(aa==q\|\|aa==h)
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 28 61 71 28 29 26 26 62 64 21 3d 3d 66 61 6c 73 65 29 7b 62 64 3d 61 47 28 62 65 2c 62 63 2c 62 29 7d 65 6c 73 65 7b 69 66 28 61 69 28 29 26 26 62 64 21 3d 3d 66 61 6c 73 65 29 7b 62 64 3d 61 47 28 62 65 2c 62 63 2c 42 29 7d 7d 7d 7d 69 66 28 62 63 3d 3d 3d 71 29 7b 62 61 28 62 65 29 7d 69 66 28 62 63 3d 3d 3d 68 29 7b 69 66 28 62 66 29 7b 69 66 28 21 62 66 2e 6c 65 6e 67 74 68 29 7b 62 61 28 62 65 29 7d 7d 65 6c 73 65 7b 62 61 28 62 65 29 7d 7d 72 65 74 75 72 6e 20 62 64 7d 66 75 6e 63 74 69 6f 6e 20 61 47 28 62 66 2c 62 63 2c 62 65 29 7b 76 61 72 20 62 64 3b 69 66 28 62 65 3d 3d 6c 29 7b 61 53 2e 74 72 69 67 67 65 72 28 22 73 77 69 70 65 53 74 61 74 75 73 22 2c 5b 62 63 2c 61 51 7c 7c 6e 75 6c 6c 2c 61 68 7c 7c 30 2c 61 63 7c 7c 30 2c 58 2c 61 52 5d 29 Data Ascii: (aq()&&bd!==false){bd=aG(be,bc,b)}else{if(ai()&&bd!==false){bd=aG(be,bc,B)}}}}if(bc===q){ba(be)}if(bc===h){if(bf){if(!bf.length){ba(be)}}else{ba(be)}}return bd}function aG(bf,bc,be){var bd;if(be==l){aS.trigger("swipeStatus",[bc,aQ\|\|null,ah\|\|0,ac\|\|0,X,aR])
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 64 3d 61 77 2e 70 69 6e 63 68 4f 75 74 2e 63 61 6c 6c 28 61 53 2c 62 66 2c 61 4b 7c 7c 6e 75 6c 6c 2c 61 72 7c 7c 30 2c 61 63 7c 7c 30 2c 58 2c 48 2c 61 52 29 7d 62 72 65 61 6b 7d 7d 7d 69 66 28 62 65 3d 3d 42 29 7b 69 66 28 62 63 3d 3d 3d 71 7c 7c 62 63 3d 3d 3d 68 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 61 58 29 3b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 61 67 29 3b 69 66 28 5a 28 29 26 26 21 49 28 29 29 7b 4f 3d 61 75 28 29 3b 61 58 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 2e 70 72 6f 78 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4f 3d 6e 75 6c 6c 3b 61 53 2e 74 72 69 67 67 65 72 28 22 74 61 70 22 2c 5b 62 66 2e 74 61 72 67 65 74 5d 29 3b 69 66 28 61 77 2e 74 61 70 29 7b 62 64 3d 61 77 2e 74 61 70 2e 63 61 6c 6c 28 61 53 2c 62 66 2c 62 66 2e 74 61 72 67 Data Ascii: d=aw.pinchOut.call(aS,bf,aK\|\|null,ar\|\|0,ac\|\|0,X,H,aR)}break}}}if(be==B){if(bc===q\|\|bc===h){clearTimeout(aX);clearTimeout(ag);if(Z()&&!I()){O=au();aX=setTimeout(f.proxy(function(){O=null;aS.trigger("tap",[bf.target]);if(aw.tap){bd=aw.tap.call(aS,bf,bf.targ
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 61 67 65 53 63 72 6f 6c 6c 21 3d 45 29 29 7b 62 63 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 62 72 65 61 6b 3b 63 61 73 65 20 65 3a 69 66 28 28 61 77 2e 73 77 69 70 65 55 70 26 26 62 65 29 7c 7c 28 21 62 65 26 26 61 77 2e 61 6c 6c 6f 77 50 61 67 65 53 63 72 6f 6c 6c 21 3d 75 29 29 7b 62 63 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 62 72 65 61 6b 3b 63 61 73 65 20 78 3a 69 66 28 28 61 77 2e 73 77 69 70 65 44 6f 77 6e 26 26 62 65 29 7c 7c 28 21 62 65 26 26 61 77 2e 61 6c 6c 6f 77 50 61 67 65 53 63 72 6f 6c 6c 21 3d 75 29 29 7b 62 63 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 62 72 65 61 6b 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 39 28 29 7b 76 61 72 20 62 64 3d 61 50 28 29 3b 76 61 72 20 62 63 3d 59 28 29 3b 76 61 72 20 62 Data Ascii: ageScroll!=E)){bc.preventDefault()}break;case e:if((aw.swipeUp&&be)\|\|(!be&&aw.allowPageScroll!=u)){bc.preventDefault()}break;case x:if((aw.swipeDown&&be)\|\|(!be&&aw.allowPageScroll!=u)){bc.preventDefault()}break}}}function a9(){var bd=aP();var bc=Y();var b
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 53 2e 64 61 74 61 28 43 2b 22 5f 69 6e 74 6f 75 63 68 22 29 3d 3d 3d 74 72 75 65 29 7d 66 75 6e 63 74 69 6f 6e 20 61 70 28 62 63 29 7b 69 66 28 62 63 3d 3d 3d 74 72 75 65 29 7b 61 53 2e 62 69 6e 64 28 61 7a 2c 61 34 29 3b 61 53 2e 62 69 6e 64 28 56 2c 4d 29 3b 69 66 28 54 29 7b 61 53 2e 62 69 6e 64 28 54 2c 4c 29 7d 7d 65 6c 73 65 7b 61 53 2e 75 6e 62 69 6e 64 28 61 7a 2c 61 34 2c 66 61 6c 73 65 29 3b 61 53 2e 75 6e 62 69 6e 64 28 56 2c 4d 2c 66 61 6c 73 65 29 3b 69 66 28 54 29 7b 61 53 2e 75 6e 62 69 6e 64 28 54 2c 4c 2c 66 61 6c 73 65 29 7d 7d 61 53 2e 64 61 74 61 28 43 2b 22 5f 69 6e 74 6f 75 63 68 22 2c 62 63 3d 3d 3d 74 72 75 65 29 7d 66 75 6e 63 74 69 6f 6e 20 61 6a 28 62 64 2c 62 63 29 7b 76 61 72 20 62 65 3d 62 63 2e 69 64 65 6e 74 69 66 69 65 72 Data Ascii: S.data(C+"_intouch")===true)}function ap(bc){if(bc===true){aS.bind(az,a4);aS.bind(V,M);if(T){aS.bind(T,L)}}else{aS.unbind(az,a4,false);aS.unbind(V,M,false);if(T){aS.unbind(T,L,false)}}aS.data(C+"_intouch",bc===true)}function aj(bd,bc){var be=bc.identifier
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 20 61 46 28 62 66 2c 62 64 29 7b 76 61 72 20 62 63 3d 62 66 2e 78 2d 62 64 2e 78 3b 76 61 72 20 62 68 3d 62 64 2e 79 2d 62 66 2e 79 3b 76 61 72 20 62 65 3d 4d 61 74 68 2e 61 74 61 6e 32 28 62 68 2c 62 63 29 3b 76 61 72 20 62 67 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 62 65 2a 31 38 30 2f 4d 61 74 68 2e 50 49 29 3b 69 66 28 62 67 3c 30 29 7b 62 67 3d 33 36 30 2d 4d 61 74 68 2e 61 62 73 28 62 67 29 7d 72 65 74 75 72 6e 20 62 67 7d 66 75 6e 63 74 69 6f 6e 20 61 4d 28 62 64 2c 62 63 29 7b 76 61 72 20 62 65 3d 61 46 28 62 64 2c 62 63 29 3b 69 66 28 28 62 65 3c 3d 34 35 29 26 26 28 62 65 3e 3d 30 29 29 7b 72 65 74 75 72 6e 20 70 7d 65 6c 73 65 7b 69 66 28 28 62 65 3c 3d 33 36 30 29 26 26 28 62 65 3e 3d 33 31 35 29 29 7b 72 65 74 75 72 6e 20 70 7d 65 6c 73 65 7b 69 Data Ascii: aF(bf,bd){var bc=bf.x-bd.x;var bh=bd.y-bf.y;var be=Math.atan2(bh,bc);var bg=Math.round(be*180/Math.PI);if(bg<0){bg=360-Math.abs(bg)}return bg}function aM(bd,bc){var be=aF(bd,bc);if((be<=45)&&(be>=0)){return p}else{if((be<=360)&&(be>=315)){return p}else{i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.11	49892	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:30 UTC	608	OUT	GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.4.6.4 HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:30 UTC	788	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:30 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Wed, 03 Oct 2018 23:54:48 GMT ETag: W/"5bb556c8-fd8c" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AvBm41a9Uj6ihUSTJ27yZ7xC17InYjww9IoEeRUYQTZH%2FP8sxYkKysa%2FT5KeT6LIZDmpufpNj%2F5U%2BnuXlVYGGFgdZ7xJP6erOQ%2FURafs1n11XbxeK%2FBwYC0WUJyuGrRLYhc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c83188a9acf-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:30 UTC	581	IN	Data Raw: 37 63 39 64 0d 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0d 0a 20 2a 20 6a 71 75 65 72 79 2e 74 68 65 6d 65 70 75 6e 63 68 2e 72 65 76 6f 6c 75 74 69 6f 6e 2e 6a 73 20 2d 20 6a 51 75 65 72 79 20 50 6c 75 67 69 6e 20 66 6f 72 20 52 65 76 6f 6c 75 74 69 6f 6e 20 53 6c 69 64 65 72 0d 0a 20 2a 20 40 76 65 72 73 69 6f 6e 3a 20 35 2e 34 2e 36 2e 34 20 28 32 38 2e 31 31 2e 32 30 31 37 29 0d 0a 20 2a 20 40 72 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 20 76 31 2e 37 20 6f 72 20 6c 61 74 65 72 20 28 74 65 73 74 65 64 20 6f 6e 20 31 2e 39 29 0d 0a 20 2a 20 40 61 75 74 68 6f 72 20 54 Data Ascii: 7c9d/************************************************************************** * jquery.themepunch.revolution.js - jQuery Plugin for Revolution Slider * @version: 5.4.6.4 (28.11.2017) * @requires jQuery v1.7 or later (tested on 1.9) * @author T
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 79 65 72 61 6e 69 6d 61 74 69 6f 6e 2e 6d 69 6e 2e 6a 73 22 3a 22 33 2e 36 2e 34 22 2c 22 72 65 76 6f 6c 75 74 69 6f 6e 2e 65 78 74 65 6e 73 69 6f 6e 73 2e 6e 61 76 69 67 61 74 69 6f 6e 2e 6d 69 6e 2e 6a 73 22 3a 22 31 2e 33 2e 33 22 2c 22 72 65 76 6f 6c 75 74 69 6f 6e 2e 65 78 74 65 6e 73 69 6f 6e 73 2e 70 61 72 61 6c 6c 61 78 2e 6d 69 6e 2e 6a 73 22 3a 22 32 2e 32 2e 30 22 2c 22 72 65 76 6f 6c 75 74 69 6f 6e 2e 65 78 74 65 6e 73 69 6f 6e 73 2e 73 6c 69 64 65 61 6e 69 6d 73 2e 6d 69 6e 2e 6a 73 22 3a 22 31 2e 37 22 2c 22 72 65 76 6f 6c 75 74 69 6f 6e 2e 65 78 74 65 6e 73 69 6f 6e 73 2e 76 69 64 65 6f 2e 6d 69 6e 2e 6a 73 22 3a 22 32 2e 32 2e 30 22 7d 3b 6a 51 75 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 72 65 76 6f 6c 75 74 69 6f 6e 3a 66 75 6e 63 74 Data Ascii: yeranimation.min.js":"3.6.4","revolution.extensions.navigation.min.js":"1.3.3","revolution.extensions.parallax.min.js":"2.2.0","revolution.extensions.slideanims.min.js":"1.7","revolution.extensions.video.min.js":"2.2.0"};jQuery.fn.extend({revolution:funct
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 3a 22 6f 66 66 22 2c 6d 61 78 62 6c 75 72 3a 31 30 2c 6f 6e 5f 6c 61 79 65 72 73 3a 22 6f 66 66 22 2c 6f 6e 5f 73 6c 69 64 65 62 67 3a 22 6f 66 66 22 2c 6f 6e 5f 73 74 61 74 69 63 5f 6c 61 79 65 72 73 3a 22 6f 66 66 22 2c 6f 6e 5f 70 61 72 61 6c 6c 61 78 5f 6c 61 79 65 72 73 3a 22 6f 66 66 22 2c 6f 6e 5f 70 61 72 61 6c 6c 61 78 5f 73 74 61 74 69 63 5f 6c 61 79 65 72 73 3a 22 6f 66 66 22 2c 64 69 72 65 63 74 69 6f 6e 3a 22 62 6f 74 68 22 2c 6d 75 6c 74 69 70 6c 69 63 61 74 6f 72 3a 31 2e 33 35 2c 6d 75 6c 74 69 70 6c 69 63 61 74 6f 72 5f 6c 61 79 65 72 73 3a 2e 35 2c 74 69 6c 74 3a 33 30 2c 64 69 73 61 62 6c 65 5f 6f 6e 5f 6d 6f 62 69 6c 65 3a 22 6f 6e 22 7d 2c 63 61 72 6f 75 73 65 6c 3a 7b 65 61 73 69 6e 67 3a 70 75 6e 63 68 67 73 2e 50 6f 77 65 72 33 2e Data Ascii: :"off",maxblur:10,on_layers:"off",on_slidebg:"off",on_static_layers:"off",on_parallax_layers:"off",on_parallax_static_layers:"off",direction:"both",multiplicator:1.35,multiplicator_layers:.5,tilt:30,disable_on_mobile:"on"},carousel:{easing:punchgs.Power3.
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 69 6d 61 67 65 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 74 70 2d 62 75 6c 6c 65 74 2d 74 69 74 6c 65 22 3e 3c 2f 73 70 61 6e 3e 27 7d 2c 74 68 75 6d 62 6e 61 69 6c 73 3a 7b 63 6f 6e 74 61 69 6e 65 72 3a 22 73 6c 69 64 65 72 22 2c 72 74 6c 3a 21 31 2c 73 74 79 6c 65 3a 22 22 2c 65 6e 61 62 6c 65 3a 21 31 2c 77 69 64 74 68 3a 31 30 30 2c 68 65 69 67 68 74 3a 35 30 2c 6d 69 6e 5f 77 69 64 74 68 3a 31 30 30 2c 77 72 61 70 70 65 72 5f 70 61 64 64 69 6e 67 3a 32 2c 77 72 61 70 70 65 72 5f 63 6f 6c 6f 72 3a 22 23 66 35 66 35 66 35 22 2c 77 72 61 70 70 65 72 5f 6f 70 61 63 69 74 79 3a 31 2c 74 6d 70 3a 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 74 70 2d 74 68 75 6d 62 2d 69 6d 61 67 65 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 Data Ascii: image"></span><span class="tp-bullet-title"></span>'},thumbnails:{container:"slider",rtl:!1,style:"",enable:!1,width:100,height:50,min_width:100,wrapper_padding:2,wrapper_color:"#f5f5f5",wrapper_opacity:1,tmp:'<span class="tp-thumb-image"></span><span cla
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 61 74 69 6f 6e 3d 65 2e 6a 73 46 69 6c 65 4c 6f 63 61 74 69 6f 6e 7c 7c 67 65 74 53 63 72 69 70 74 4c 6f 63 61 74 69 6f 6e 28 22 74 68 65 6d 65 70 75 6e 63 68 2e 72 65 76 6f 6c 75 74 69 6f 6e 2e 6d 69 6e 2e 6a 73 22 29 2c 65 2e 6a 73 46 69 6c 65 4c 6f 63 61 74 69 6f 6e 3d 65 2e 6a 73 46 69 6c 65 4c 6f 63 61 74 69 6f 6e 2b 65 2e 65 78 74 65 6e 73 69 6f 6e 73 2c 65 2e 73 63 72 69 70 74 73 6e 65 65 64 65 64 3d 67 65 74 4e 65 65 64 65 64 53 63 72 69 70 74 73 28 65 2c 69 29 2c 65 2e 63 75 72 57 69 6e 52 61 6e 67 65 3d 30 2c 65 2e 72 74 6c 3d 21 30 2c 65 2e 6e 61 76 69 67 61 74 69 6f 6e 21 3d 75 6e 64 65 66 69 6e 65 64 26 26 65 2e 6e 61 76 69 67 61 74 69 6f 6e 2e 74 6f 75 63 68 21 3d 75 6e 64 65 66 69 6e 65 64 26 26 28 65 2e 6e 61 76 69 67 61 74 69 6f 6e 2e 74 Data Ascii: ation=e.jsFileLocation\|\|getScriptLocation("themepunch.revolution.min.js"),e.jsFileLocation=e.jsFileLocation+e.extensions,e.scriptsneeded=getNeededScripts(e,i),e.curWinRange=0,e.rtl=!0,e.navigation!=undefined&&e.navigation.touch!=undefined&&(e.navigation.t
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 7c 65 3e 74 2e 73 6c 69 64 65 61 6d 6f 75 6e 74 29 26 26 69 21 3d 75 6e 64 65 66 69 6e 65 64 26 26 69 2e 6c 65 6e 67 74 68 3e 30 26 26 6a 51 75 65 72 79 28 22 62 6f 64 79 22 29 2e 66 69 6e 64 28 22 23 22 2b 69 2e 61 74 74 72 28 22 69 64 22 29 29 2e 6c 65 6e 67 74 68 3e 30 26 26 74 26 26 74 2e 6c 69 2e 6c 65 6e 67 74 68 3e 30 26 26 28 65 3e 30 7c 7c 65 3c 3d 74 2e 6c 69 2e 6c 65 6e 67 74 68 29 29 7b 76 61 72 20 61 3d 6a 51 75 65 72 79 28 74 2e 6c 69 5b 65 5d 29 2c 6e 3d 61 2e 64 61 74 61 28 22 69 6e 64 65 78 22 29 2c 72 3d 21 31 3b 74 2e 73 6c 69 64 65 61 6d 6f 75 6e 74 3d 74 2e 73 6c 69 64 65 61 6d 6f 75 6e 74 2d 31 2c 74 2e 72 65 61 6c 73 6c 69 64 65 61 6d 6f 75 6e 74 3d 74 2e 72 65 61 6c 73 6c 69 64 65 61 6d 6f 75 6e 74 2d 31 2c 72 65 6d 6f 76 65 4e 61 Data Ascii: \|e>t.slideamount)&&i!=undefined&&i.length>0&&jQuery("body").find("#"+i.attr("id")).length>0&&t&&t.li.length>0&&(e>0\|\|e<=t.li.length)){var a=jQuery(t.li[e]),n=a.data("index"),r=!1;t.slideamount=t.slideamount-1,t.realslideamount=t.realslideamount-1,removeNa
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 69 73 29 3b 69 66 28 70 75 6e 63 68 67 73 2e 54 77 65 65 6e 4c 69 74 65 2e 6b 69 6c 6c 44 65 6c 61 79 65 64 43 61 6c 6c 73 54 6f 28 5f 52 2e 73 68 6f 77 48 69 64 65 4e 61 76 45 6c 65 6d 65 6e 74 73 29 2c 74 21 3d 75 6e 64 65 66 69 6e 65 64 26 26 74 2e 6c 65 6e 67 74 68 3e 30 26 26 6a 51 75 65 72 79 28 22 62 6f 64 79 22 29 2e 66 69 6e 64 28 22 23 22 2b 74 2e 61 74 74 72 28 22 69 64 22 29 29 2e 6c 65 6e 67 74 68 3e 30 29 7b 74 2e 64 61 74 61 28 22 63 6f 6e 74 68 6f 76 65 72 22 2c 31 29 2c 74 2e 64 61 74 61 28 22 63 6f 6e 74 68 6f 76 65 72 2d 63 68 61 6e 67 65 64 22 2c 31 29 2c 74 2e 74 72 69 67 67 65 72 28 22 72 65 76 6f 6c 75 74 69 6f 6e 2e 73 6c 69 64 65 2e 6f 6e 70 61 75 73 65 22 29 3b 76 61 72 20 61 3d 74 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 22 Data Ascii: is);if(punchgs.TweenLite.killDelayedCallsTo(_R.showHideNavElements),t!=undefined&&t.length>0&&jQuery("body").find("#"+t.attr("id")).length>0){t.data("conthover",1),t.data("conthover-changed",1),t.trigger("revolution.slide.onpause");var a=t.parent().find("
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 2c 64 65 6c 65 74 65 20 69 2e 63 2c 64 65 6c 65 74 65 20 69 2e 6f 70 74 2c 64 65 6c 65 74 65 20 69 2e 63 6f 6e 74 61 69 6e 65 72 2c 21 30 7d 72 65 74 75 72 6e 21 31 7d 2c 72 65 76 70 61 75 73 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6a 51 75 65 72 79 28 74 68 69 73 29 3b 65 21 3d 75 6e 64 65 66 69 6e 65 64 26 26 65 2e 6c 65 6e 67 74 68 3e 30 26 26 6a 51 75 65 72 79 28 22 62 6f 64 79 22 29 2e 66 69 6e 64 28 22 23 22 2b 65 2e 61 74 74 72 28 22 69 64 22 29 29 2e 6c 65 6e 67 74 68 3e 30 26 26 28 65 2e 64 61 74 61 28 22 63 6f 6e 74 68 6f 76 65 72 22 2c 31 29 2c 65 2e 64 61 74 61 28 22 63 6f 6e 74 68 6f 76 65 72 2d 63 68 61 6e 67 65 64 22 2c 31 29 2c 65 2e 74 72 Data Ascii: ,delete i.c,delete i.opt,delete i.container,!0}return!1},revpause:function(){return this.each(function(){var e=jQuery(this);e!=undefined&&e.length>0&&jQuery("body").find("#"+e.attr("id")).length>0&&(e.data("conthover",1),e.data("conthover-changed",1),e.tr
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 28 65 21 3d 75 6e 64 65 66 69 6e 65 64 26 26 65 2e 6c 65 6e 67 74 68 3e 30 26 26 6a 51 75 65 72 79 28 22 62 6f 64 79 22 29 2e 66 69 6e 64 28 22 23 22 2b 65 2e 61 74 74 72 28 22 69 64 22 29 29 2e 6c 65 6e 67 74 68 3e 30 29 72 65 74 75 72 6e 20 70 61 72 73 65 49 6e 74 28 65 5b 30 5d 2e 6f 70 74 2e 61 63 74 2c 30 29 2b 31 7d 2c 72 65 76 6c 61 73 74 73 6c 69 64 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 51 75 65 72 79 28 74 68 69 73 29 2e 66 69 6e 64 28 22 2e 74 70 2d 72 65 76 73 6c 69 64 65 72 2d 6d 61 69 6e 75 6c 20 3e 6c 69 22 29 2e 6c 65 6e 67 74 68 7d 2c 72 65 76 73 68 6f 77 73 6c 69 64 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 6a 51 Data Ascii: (e!=undefined&&e.length>0&&jQuery("body").find("#"+e.attr("id")).length>0)return parseInt(e[0].opt.act,0)+1},revlastslide:function(){return jQuery(this).find(".tp-revslider-mainul >li").length},revshowslide:function(e){return this.each(function(){var i=jQ
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 72 3a 23 33 33 33 22 29 29 2c 65 2e 63 68 65 63 6b 3d 22 73 74 6f 70 22 29 3a 5f 52 2e 67 65 74 76 65 72 73 69 6f 6e 28 29 5b 65 2e 6e 61 6d 65 5d 21 3d 75 6e 64 65 66 69 6e 65 64 26 26 65 2e 76 65 72 73 69 6f 6e 3c 5f 52 2e 67 65 74 76 65 72 73 69 6f 6e 28 29 5b 65 2e 6e 61 6d 65 5d 26 26 28 65 2e 63 68 65 63 6b 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 28 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 25 63 53 6c 69 64 65 72 20 52 65 76 6f 6c 75 74 69 6f 6e 20 57 61 72 6e 69 6e 67 20 28 43 6f 72 65 3a 22 2b 5f 52 2e 67 65 74 76 65 72 73 69 6f 6e 28 29 2e 63 6f 72 65 2b 22 29 22 2c 22 63 6f 6c 6f 72 3a 23 63 30 33 39 32 62 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 29 2c 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 25 63 20 20 20 20 20 22 2b 65 2e 61 6c Data Ascii: r:#333")),e.check="stop"):_R.getversion()[e.name]!=undefined&&e.version<_R.getversion()[e.name]&&(e.check===undefined&&(console.log("%cSlider Revolution Warning (Core:"+_R.getversion().core+")","color:#c0392b;font-weight:bold;"),console.log("%c "+e.al

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.11	49893	89.187.173.22	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:30 UTC	2689	OUT	GET /api/img-dscr/v2/D0JSP1avgg/3527403/RLqwMG7OTpTSzPtD/alts.json?dto=%7B%22sorted%22%3A%5B%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fabout-thumb.webp%22%2C%22alt%22%3A%22RMS%20Hospitality%20Group%20Let%20Us%20Take%20Risk%20off%20Your%20Table%22%2C%22dir%22%3A%22RO%22%7D%2C%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fgoogle-review.webp%22%2C%22alt%22%3A%22Leave%20a%20review%20on%20Google%22%2C%22dir%22%3A%22RO%22%7D%2C%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fistock-1350660376.jpg%22%2C%22alt%22%3A%22How%20Can%20Pubs%20Improve%20Safety%3F%20A%20Primer%20for%20Insurance%20Professionals%22%2C%22dir%22%3A%22RO%22%7D%2C%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fistock-182417552.j [TRUNCATED] Host: cdn77.api.userway.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.rmshg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:30 UTC	737	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:30 GMT Content-Type: application/json; charset=utf-8 Content-Length: 1942 Connection: close X-Service-Version: img-dscr-srv-727604a1 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD, PUT, PATCH, POST, DELETE Access-Control-Allow-Headers: * Access-Control-Expose-Headers: Content-Range, Content-Length, ETag, Content-Type Access-Control-Max-Age: 3000 Cache-Control: max-age=604800 ETag: W/"796-Goiuc8D3JhepdwJS9qoFdh8Fk7c" Vary: Accept-Encoding X-77-NZT: EggBWbutFQFBCAGckjviAUE X-77-NZT-Ray: 256bf619babfad8e76083966277f3915 X-77-Cache: MISS Server: CDN77-Turbo Alt-Svc: h3=":443"; ma=86400 X-Cache: MISS X-77-POP: miamiUSFL Accept-Ranges: bytes
2024-05-06 16:42:30 UTC	1942	IN	Data Raw: 7b 22 70 61 79 6c 6f 61 64 22 3a 7b 22 6d 69 73 73 69 6e 67 41 6c 74 73 22 3a 5b 7b 22 73 72 63 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 73 74 72 61 74 6f 73 70 68 65 72 65 77 65 62 73 69 74 65 73 2e 63 6f 6d 2f 73 6f 75 72 63 65 2f 73 69 74 65 73 2f 33 63 35 31 37 64 64 36 2d 36 66 61 36 2d 34 33 38 61 2d 38 64 34 37 2d 65 37 61 39 63 64 63 61 33 65 33 62 2f 69 6d 61 67 65 73 2f 61 62 6f 75 74 2d 74 68 75 6d 62 2e 77 65 62 70 22 2c 22 61 6c 74 22 3a 6e 75 6c 6c 2c 22 61 70 70 72 6f 76 65 64 22 3a 66 61 6c 73 65 2c 22 64 65 63 6f 72 61 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 73 6b 69 70 70 65 64 46 6f 72 52 65 61 64 4f 6e 6c 79 22 3a 74 72 75 65 2c 22 66 6f 75 6e 64 43 61 63 68 65 64 52 65 73 70 6f 6e 73 65 22 3a 74 Data Ascii: {"payload":{"missingAlts":[{"src":"https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/about-thumb.webp","alt":null,"approved":false,"decorative":false,"metadata":{"skippedForReadOnly":true,"foundCachedResponse":t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.11	49894	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:30 UTC	565	OUT	GET /wp-content/themes/fortuna/js/libs.min.js?ver=6.4.3 HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:30 UTC	781	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:30 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Wed, 03 Oct 2018 23:54:48 GMT ETag: W/"5bb556c8-2e3ec" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3nL5SlVdFQGTi5h9vBZqtROn5LNzBS7gN2PnZ3F2I4Lj1e3F2LCVwsssXI7YY3RmGRZ1s5%2F0LBkKuOxYd002czX6tYqxGtIAa7UAVnoO2js14pnGnY8Fpgph7qySf9I%2B1o8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c845de6b3e5-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:30 UTC	588	IN	Data Raw: 37 63 61 34 0d 0a 66 75 6e 63 74 69 6f 6e 20 68 65 78 54 6f 52 67 62 28 74 29 7b 76 61 72 20 65 3d 2f 5e 23 3f 28 5b 61 2d 66 5c 64 5d 29 28 5b 61 2d 66 5c 64 5d 29 28 5b 61 2d 66 5c 64 5d 29 24 2f 69 3b 74 3d 74 2e 72 65 70 6c 61 63 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2b 65 2b 69 2b 69 2b 6e 2b 6e 7d 29 3b 76 61 72 20 69 3d 2f 5e 23 3f 28 5b 61 2d 66 5c 64 5d 7b 32 7d 29 28 5b 61 2d 66 5c 64 5d 7b 32 7d 29 28 5b 61 2d 66 5c 64 5d 7b 32 7d 29 24 2f 69 2e 65 78 65 63 28 74 29 3b 72 65 74 75 72 6e 20 69 3f 7b 72 3a 70 61 72 73 65 49 6e 74 28 69 5b 31 5d 2c 31 36 29 2c 67 3a 70 61 72 73 65 49 6e 74 28 69 5b 32 5d 2c 31 36 29 2c 62 3a 70 61 72 73 65 49 6e 74 28 69 5b 33 5d 2c 31 36 29 7d 3a 6e 75 6c 6c 7d Data Ascii: 7ca4function hexToRgb(t){var e=/^#?([a-f\d])([a-f\d])([a-f\d])$/i;t=t.replace(e,function(t,e,i,n){return e+e+i+i+n+n});var i=/^#?([a-f\d]{2})([a-f\d]{2})([a-f\d]{2})$/i.exec(t);return i?{r:parseInt(i[1],16),g:parseInt(i[2],16),b:parseInt(i[3],16)}:null}
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6e 2c 6f 29 7b 72 65 74 75 72 6e 2d 6e 2a 28 65 2f 3d 6f 29 2a 28 65 2d 32 29 2b 69 7d 2c 65 61 73 65 49 6e 4f 75 74 51 75 61 64 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6e 2c 6f 29 7b 72 65 74 75 72 6e 28 65 2f 3d 6f 2f 32 29 3c 31 3f 6e 2f 32 2a 65 2a 65 2b 69 3a 2d 6e 2f 32 2a 28 2d 2d 65 2a 28 65 2d 32 29 2d 31 29 2b 69 7d 2c 65 61 73 65 49 6e 43 75 62 69 63 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 2a 28 65 2f 3d 6f 29 2a 65 2a 65 2b 69 7d 2c 65 61 73 65 4f 75 74 43 75 62 69 63 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 2a 28 28 65 3d 65 2f 6f 2d 31 29 2a 65 2a 65 2b 31 29 2b 69 7d 2c 65 61 73 65 49 6e 4f 75 74 43 Data Ascii: unction(t,e,i,n,o){return-n(e/=o)(e-2)+i},easeInOutQuad:function(t,e,i,n,o){return(e/=o/2)<1?n/2ee+i:-n/2(--e(e-2)-1)+i},easeInCubic:function(t,e,i,n,o){return n(e/=o)ee+i},easeOutCubic:function(t,e,i,n,o){return n((e=e/o-1)ee+1)+i},easeInOutC
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 74 68 2e 73 71 72 74 28 31 2d 28 65 3d 65 2f 6f 2d 31 29 2a 65 29 2b 69 7d 2c 65 61 73 65 49 6e 4f 75 74 43 69 72 63 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6e 2c 6f 29 7b 72 65 74 75 72 6e 28 65 2f 3d 6f 2f 32 29 3c 31 3f 2d 6e 2f 32 2a 28 4d 61 74 68 2e 73 71 72 74 28 31 2d 65 2a 65 29 2d 31 29 2b 69 3a 6e 2f 32 2a 28 4d 61 74 68 2e 73 71 72 74 28 31 2d 28 65 2d 3d 32 29 2a 65 29 2b 31 29 2b 69 7d 2c 65 61 73 65 49 6e 45 6c 61 73 74 69 63 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6e 2c 6f 29 7b 76 61 72 20 73 3d 31 2e 37 30 31 35 38 2c 72 3d 30 2c 61 3d 6e 3b 69 66 28 30 3d 3d 65 29 72 65 74 75 72 6e 20 69 3b 69 66 28 31 3d 3d 28 65 2f 3d 6f 29 29 72 65 74 75 72 6e 20 69 2b 6e 3b 69 66 28 72 7c 7c 28 72 3d 2e 33 2a 6f 29 2c 61 3c 4d 61 74 Data Ascii: th.sqrt(1-(e=e/o-1)e)+i},easeInOutCirc:function(t,e,i,n,o){return(e/=o/2)<1?-n/2(Math.sqrt(1-ee)-1)+i:n/2(Math.sqrt(1-(e-=2)e)+1)+i},easeInElastic:function(t,e,i,n,o){var s=1.70158,r=0,a=n;if(0==e)return i;if(1==(e/=o))return i+n;if(r\|\|(r=.3o),a<Mat
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 63 65 28 74 2c 6f 2d 65 2c 30 2c 6e 2c 6f 29 2b 69 7d 2c 65 61 73 65 4f 75 74 42 6f 75 6e 63 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6e 2c 6f 29 7b 72 65 74 75 72 6e 28 65 2f 3d 6f 29 3c 31 2f 32 2e 37 35 3f 6e 2a 28 37 2e 35 36 32 35 2a 65 2a 65 29 2b 69 3a 32 2f 32 2e 37 35 3e 65 3f 6e 2a 28 37 2e 35 36 32 35 2a 28 65 2d 3d 31 2e 35 2f 32 2e 37 35 29 2a 65 2b 2e 37 35 29 2b 69 3a 32 2e 35 2f 32 2e 37 35 3e 65 3f 6e 2a 28 37 2e 35 36 32 35 2a 28 65 2d 3d 32 2e 32 35 2f 32 2e 37 35 29 2a 65 2b 2e 39 33 37 35 29 2b 69 3a 6e 2a 28 37 2e 35 36 32 35 2a 28 65 2d 3d 32 2e 36 32 35 2f 32 2e 37 35 29 2a 65 2b 2e 39 38 34 33 37 35 29 2b 69 7d 2c 65 61 73 65 49 6e 4f 75 74 42 6f 75 6e 63 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6e 2c 6f 29 7b Data Ascii: ce(t,o-e,0,n,o)+i},easeOutBounce:function(t,e,i,n,o){return(e/=o)<1/2.75?n(7.5625ee)+i:2/2.75>e?n(7.5625(e-=1.5/2.75)e+.75)+i:2.5/2.75>e?n(7.5625(e-=2.25/2.75)e+.9375)+i:n(7.5625(e-=2.625/2.75)e+.984375)+i},easeInOutBounce:function(t,e,i,n,o){
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 75 74 65 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 22 2c 2f 5e 72 61 6e 67 65 24 2f 2e 74 65 73 74 28 6f 29 26 26 5f 2e 73 74 79 6c 65 2e 57 65 62 6b 69 74 41 70 70 65 61 72 61 6e 63 65 21 3d 3d 69 3f 28 67 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 5f 29 2c 73 3d 65 2e 64 65 66 61 75 6c 74 56 69 65 77 2c 6e 3d 73 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 26 26 22 74 65 78 74 66 69 65 6c 64 22 21 3d 3d 73 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 5f 2c 6e 75 6c 6c 29 2e 57 65 62 6b 69 74 41 70 70 65 61 72 61 6e 63 65 26 26 30 21 3d 3d 5f 2e 6f 66 66 73 65 74 48 65 69 67 68 74 2c 67 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 5f 29 29 3a 2f 5e 28 73 65 61 72 63 68 7c 74 65 6c 29 24 2f 2e 74 65 73 74 28 6f 29 7c 7c 28 6e 3d 2f 5e Data Ascii: ute;visibility:hidden;",/^range$/.test(o)&&_.style.WebkitAppearance!==i?(g.appendChild(_),s=e.defaultView,n=s.getComputedStyle&&"textfield"!==s.getComputedStyle(_,null).WebkitAppearance&&0!==_.offsetHeight,g.removeChild(_)):/^(search\|tel)$/.test(o)\|\|(n=/^
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 7b 20 23 22 2b 76 2b 22 20 7b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 7d 20 7d 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 22 61 62 73 6f 6c 75 74 65 22 3d 3d 28 74 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3f 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3a 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 29 2e 70 6f 73 69 74 69 6f 6e 7d 29 2c 6e 7d 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 6f 29 7b 6f 3d 6f 7c 7c 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6e 5b 74 5d 7c 7c 22 64 69 76 22 29 2c 74 3d 22 6f 6e 22 2b 74 3b 76 61 72 20 72 3d 74 20 69 6e 20 6f 3b 72 65 74 75 72 6e 20 72 7c 7c 28 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 7c 7c 28 6f 3d 65 2e 63 Data Ascii: { #"+v+" { position: absolute; } }",function(e){n="absolute"==(t.getComputedStyle?getComputedStyle(e,null):e.currentStyle).position}),n},j=function(){function t(t,o){o=o\|\|e.createElement(n[t]\|\|"div"),t="on"+t;var r=t in o;return r\|\|(o.setAttribute\|\|(o=e.c
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 6f 6e 28 29 7b 76 61 72 20 69 3b 72 65 74 75 72 6e 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 74 7c 7c 74 2e 44 6f 63 75 6d 65 6e 74 54 6f 75 63 68 26 26 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 6f 63 75 6d 65 6e 74 54 6f 75 63 68 3f 69 3d 21 30 3a 41 28 5b 22 40 6d 65 64 69 61 20 28 22 2c 43 2e 6a 6f 69 6e 28 22 74 6f 75 63 68 2d 65 6e 61 62 6c 65 64 29 2c 28 22 29 2c 76 2c 22 29 22 2c 22 7b 23 6d 6f 64 65 72 6e 69 7a 72 7b 74 6f 70 3a 39 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 7d 22 5d 2e 6a 6f 69 6e 28 22 22 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 3d 39 3d 3d 3d 74 2e 6f 66 66 73 65 74 54 6f 70 7d 29 2c 69 7d 2c 54 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 67 65 6f Data Ascii: on(){var i;return"ontouchstart"in t\|\|t.DocumentTouch&&e instanceof DocumentTouch?i=!0:A(["@media (",C.join("touch-enabled),("),v,")","{#modernizr{top:9px;position:absolute}}"].join(""),function(t){i=9===t.offsetTop}),i},T.geolocation=function(){return"geo
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 69 76 22 29 2e 73 74 79 6c 65 2e 74 65 78 74 53 68 61 64 6f 77 7d 2c 54 2e 6f 70 61 63 69 74 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 28 22 6f 70 61 63 69 74 79 3a 2e 35 35 22 29 2c 2f 5e 30 2e 35 35 24 2f 2e 74 65 73 74 28 62 2e 6f 70 61 63 69 74 79 29 7d 2c 54 2e 63 73 73 61 6e 69 6d 61 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 22 61 6e 69 6d 61 74 69 6f 6e 4e 61 6d 65 22 29 7d 2c 54 2e 63 73 73 63 6f 6c 75 6d 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 22 63 6f 6c 75 6d 6e 43 6f 75 6e 74 22 29 7d 2c 54 2e 63 73 73 67 72 61 64 69 65 6e 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 22 2c 65 3d 22 67 72 61 Data Ascii: iv").style.textShadow},T.opacity=function(){return o("opacity:.55"),/^0.55$/.test(b.opacity)},T.cssanimations=function(){return c("animationName")},T.csscolumns=function(){return c("columnCount")},T.cssgradients=function(){var t="background-image:",e="gra
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 76 69 64 65 6f 22 29 2c 69 3d 21 31 3b 74 72 79 7b 28 69 3d 21 21 74 2e 63 61 6e 50 6c 61 79 54 79 70 65 29 26 26 28 69 3d 6e 65 77 20 42 6f 6f 6c 65 61 6e 28 69 29 2c 69 2e 6f 67 67 3d 74 2e 63 61 6e 50 6c 61 79 54 79 70 65 28 27 76 69 64 65 6f 2f 6f 67 67 3b 20 63 6f 64 65 63 73 3d 22 74 68 65 6f 72 61 22 27 29 2e 72 65 70 6c 61 63 65 28 2f 5e 6e 6f 24 2f 2c 22 22 29 2c 69 2e 68 32 36 34 3d 74 2e 63 61 6e 50 6c 61 79 54 79 70 65 28 27 76 69 64 65 6f 2f 6d 70 34 3b 20 63 6f 64 65 63 73 3d 22 61 76 63 31 2e 34 32 45 30 31 45 22 27 29 2e 72 65 70 6c 61 63 65 28 2f 5e 6e 6f 24 2f 2c 22 22 29 2c 69 2e 77 65 62 6d 3d 74 2e 63 61 6e 50 6c 61 79 54 79 70 65 28 27 76 69 64 65 6f 2f 77 65 62 6d 3b 20 63 6f 64 65 63 73 3d 22 Data Ascii: eateElement("video"),i=!1;try{(i=!!t.canPlayType)&&(i=new Boolean(i),i.ogg=t.canPlayType('video/ogg; codecs="theora"').replace(/^no$/,""),i.h264=t.canPlayType('video/mp4; codecs="avc1.42E01E"').replace(/^no$/,""),i.webm=t.canPlayType('video/webm; codecs="
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 63 6c 69 70 70 61 74 68 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 26 26 2f 53 56 47 43 6c 69 70 50 61 74 68 2f 2e 74 65 73 74 28 78 2e 63 61 6c 6c 28 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 45 2e 73 76 67 2c 22 63 6c 69 70 50 61 74 68 22 29 29 29 7d 3b 66 6f 72 28 76 61 72 20 46 20 69 6e 20 54 29 70 28 54 2c 46 29 26 26 28 68 3d 46 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 66 5b 68 5d 3d 54 5b 46 5d 28 29 2c 50 2e 70 75 73 68 28 28 66 5b 68 5d 3f 22 22 3a 22 6e 6f 2d 22 29 2b 68 29 29 3b 72 65 74 75 72 6e 20 66 2e 69 6e 70 75 74 7c 7c 75 28 29 2c 66 2e 61 64 64 54 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 Data Ascii: clippaths=function(){return!!e.createElementNS&&/SVGClipPath/.test(x.call(e.createElementNS(E.svg,"clipPath")))};for(var F in T)p(T,F)&&(h=F.toLowerCase(),f[h]=T[F](),P.push((f[h]?"":"no-")+h));return f.input\|\|u(),f.addTest=function(t,e){if("object"==type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.11	49895	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:30 UTC	609	OUT	GET /wp-content/cache/min/1/wp-content/themes/fortuna/js/common-156789e0351d24a22549032aa8f52ad9.js HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:30 UTC	788	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:30 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 28 Oct 2021 03:54:18 GMT ETag: W/"617a1eea-5fee" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VlBz8K2vO1yoIje3gF6KXF0D01GrrP0TXgeA6y%2FOMJRvlw%2Fvj1Iaw1delaAGM%2BQ8%2BgKhL%2B1ti6Qg5qoqjbWtMcTT4EQXchqM9NmGz4Bv5oEcUdi%2BNP8Cpj6Ph8EXjVfzb1M%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c84bbf0741a-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:30 UTC	581	IN	Data Raw: 35 66 65 65 0d 0a 76 61 72 20 62 6f 63 5f 69 73 5f 6d 6f 62 69 6c 65 3d 28 62 6f 63 4a 53 50 61 72 61 6d 73 2e 62 6f 63 5f 69 73 5f 6d 6f 62 69 6c 65 5f 64 65 76 69 63 65 29 3f 21 30 3a 21 31 3b 76 61 72 20 62 6f 63 5f 74 68 65 6d 65 5f 75 72 6c 3d 62 6f 63 4a 53 50 61 72 61 6d 73 2e 62 6f 63 5f 74 68 65 6d 65 5f 75 72 6c 3b 76 61 72 20 62 6f 63 5f 64 65 66 61 75 6c 74 5f 65 6d 70 74 79 5f 69 6d 61 67 65 3d 62 6f 63 5f 74 68 65 6d 65 5f 75 72 6c 2b 22 2f 69 6d 61 67 65 73 2f 6e 6f 5f 69 6d 67 2e 6a 70 67 22 3b 76 61 72 20 73 74 69 63 6b 79 5f 68 65 61 64 65 72 3d 28 62 6f 63 4a 53 50 61 72 61 6d 73 2e 73 74 69 63 6b 79 5f 68 65 61 64 65 72 3d 3d 27 30 27 29 3f 66 61 6c 73 65 3a 21 30 3b 76 61 72 20 74 72 61 6e 73 70 61 72 65 6e 74 5f 68 65 61 64 65 72 3d Data Ascii: 5feevar boc_is_mobile=(bocJSParams.boc_is_mobile_device)?!0:!1;var boc_theme_url=bocJSParams.boc_theme_url;var boc_default_empty_image=boc_theme_url+"/images/no_img.jpg";var sticky_header=(bocJSParams.sticky_header=='0')?false:!0;var transparent_header=
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 6c 73 65 3a 21 30 3b 76 61 72 20 62 6f 63 5f 73 75 62 6d 65 6e 75 5f 61 6e 69 6d 61 74 69 6f 6e 5f 65 66 66 65 63 74 3d 62 6f 63 4a 53 50 61 72 61 6d 73 2e 62 6f 63 5f 73 75 62 6d 65 6e 75 5f 61 6e 69 6d 61 74 69 6f 6e 5f 65 66 66 65 63 74 3b 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 76 61 72 20 68 65 61 64 65 72 5f 68 3d 24 28 27 23 68 65 61 64 65 72 27 29 2e 68 65 69 67 68 74 28 29 3b 76 61 72 20 77 69 6e 5f 77 69 64 74 68 3d 67 65 74 57 69 6e 64 6f 77 57 69 64 74 68 28 29 3b 76 61 72 20 69 6d 67 3d 24 28 27 69 6d 67 27 29 3b 69 6d 67 2e 65 72 72 6f 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 74 68 69 73 29 2e 61 74 74 72 28 27 73 72 63 27 2c 62 6f 63 5f 64 65 66 61 75 6c 74 5f 65 6d 70 74 Data Ascii: lse:!0;var boc_submenu_animation_effect=bocJSParams.boc_submenu_animation_effect;jQuery(document).ready(function($){var header_h=$('#header').height();var win_width=getWindowWidth();var img=$('img');img.error(function(){$(this).attr('src',boc_default_empt
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 6c 65 27 29 7d 7d 29 7d 7d 29 3b 24 28 64 6f 63 75 6d 65 6e 74 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 27 23 6d 65 6e 75 20 3e 20 75 6c 20 3e 20 6c 69 20 3e 20 61 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 6c 69 6e 6b 61 62 6c 65 27 29 7d 29 7d 0a 24 28 27 23 6d 65 6e 75 20 2e 63 68 69 6c 64 72 65 6e 27 29 2e 61 64 64 43 6c 61 73 73 28 27 73 75 62 2d 6d 65 6e 75 27 29 3b 24 28 27 23 6d 65 6e 75 20 2e 73 75 62 2d 6d 65 6e 75 27 29 2e 70 72 65 76 28 27 61 27 29 2e 61 64 64 43 6c 61 73 73 28 27 6e 6f 5f 62 6f 72 64 65 72 27 29 3b 24 28 27 23 6d 65 6e 75 20 2e 73 75 62 2d 6d 65 6e 75 27 29 2e 77 72 61 70 28 27 3c 64 69 76 2f 3e 27 29 3b 24 28 27 23 6d 65 6e 75 20 2e 73 75 62 2d 6d 65 6e 75 20 6c 69 20 61 27 29 2e 77 72 61 70 49 6e Data Ascii: le')}})}});$(document).click(function(){$('#menu > ul > li > a').removeClass('linkable')})}$('#menu .children').addClass('sub-menu');$('#menu .sub-menu').prev('a').addClass('no_border');$('#menu .sub-menu').wrap('<div/>');$('#menu .sub-menu li a').wrapIn
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 74 68 69 73 29 2e 68 65 69 67 68 74 28 6d 6d 5f 68 69 67 68 65 73 74 5f 63 6f 6c 75 6d 6e 5f 68 2d 34 30 29 7d 29 7d 29 7d 0a 24 28 27 23 6d 6f 62 69 6c 65 5f 6d 65 6e 75 20 3e 20 75 6c 20 3e 20 6c 69 20 75 6c 20 3e 20 6c 69 2e 6d 6d 5f 68 69 64 65 20 3e 20 61 27 29 2e 68 69 64 65 28 29 2e 73 69 62 6c 69 6e 67 73 28 27 75 6c 27 29 2e 73 68 6f 77 28 29 3b 24 28 77 69 6e 64 6f 77 29 2e 73 6d 61 72 74 72 65 73 69 7a 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 69 6e 5f 77 69 64 74 68 3d 67 65 74 57 69 6e 64 6f 77 57 69 64 74 68 28 29 3b 69 66 28 77 69 6e 5f 77 69 64 74 68 3e 3d 31 30 31 38 29 7b 24 28 27 23 6d 6f 62 69 6c 65 5f 6d 65 6e 75 27 29 2e 63 73 73 28 27 64 69 73 70 6c 61 79 27 2c 27 6e 6f 6e 65 27 29 Data Ascii: function(){$(this).height(mm_highest_column_h-40)})})}$('#mobile_menu > ul > li ul > li.mm_hide > a').hide().siblings('ul').show();$(window).smartresize(function(){var win_width=getWindowWidth();if(win_width>=1018){$('#mobile_menu').css('display','none')
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 6f 63 5f 73 65 61 72 63 68 66 6f 72 6d 5f 69 6e 5f 68 65 61 64 65 72 2c 20 2e 62 6f 63 5f 73 65 61 72 63 68 5f 74 6f 67 67 6c 65 5f 6c 69 27 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 7b 65 76 65 6e 74 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 7d 29 3b 24 28 64 6f 63 75 6d 65 6e 74 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 27 23 62 6f 63 5f 73 65 61 72 63 68 66 6f 72 6d 5f 69 6e 5f 68 65 61 64 65 72 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 61 63 74 69 76 61 74 65 64 27 29 2e 66 61 64 65 4f 75 74 28 32 30 30 29 7d 29 3b 24 28 27 2e 62 6f 63 5f 73 65 61 72 63 68 5f 74 6f 67 67 6c 65 5f 6c 69 20 61 27 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 Data Ascii: oc_searchform_in_header, .boc_search_toggle_li').click(function(event){event.stopPropagation()});$(document).click(function(){$('#boc_searchform_in_header').removeClass('activated').fadeOut(200)});$('.boc_search_toggle_li a').click(function(e){e.preventDe
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 72 67 69 6e 65 64 5f 6c 65 66 74 27 29 3b 24 28 27 2e 73 69 64 65 5f 62 61 72 5f 6e 61 76 20 61 27 29 2e 6e 6f 74 28 22 2e 61 63 74 69 76 65 22 29 2e 68 6f 76 65 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 74 68 69 73 29 2e 63 68 69 6c 64 72 65 6e 28 27 2e 68 6f 76 65 72 5f 73 70 61 6e 27 29 2e 73 74 6f 70 28 29 2e 61 6e 69 6d 61 74 65 28 7b 77 69 64 74 68 3a 27 31 30 30 25 27 7d 2c 35 30 30 2c 27 65 61 73 65 4f 75 74 45 78 70 6f 27 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 74 68 69 73 29 2e 63 68 69 6c 64 72 65 6e 28 27 2e 68 6f 76 65 72 5f 73 70 61 6e 27 29 2e 73 74 6f 70 28 29 2e 61 6e 69 6d 61 74 65 28 7b 77 69 64 74 68 3a 27 30 27 7d 2c 32 30 30 2c 27 65 61 73 65 4f 75 74 45 78 70 6f 27 29 7d 29 3b 24 28 27 2e 72 65 73 70 2d 74 61 62 73 2d 63 Data Ascii: rgined_left');$('.side_bar_nav a').not(".active").hover(function(){$(this).children('.hover_span').stop().animate({width:'100%'},500,'easeOutExpo')},function(){$(this).children('.hover_span').stop().animate({width:'0'},200,'easeOutExpo')});$('.resp-tabs-c
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 28 22 2e 61 63 63 6f 72 64 69 6f 6e 5f 63 6f 6e 74 65 6e 74 22 29 29 2e 73 6c 69 64 65 55 70 28 34 30 30 2c 27 65 61 73 65 49 6e 4f 75 74 45 78 70 6f 27 29 3b 24 28 74 68 69 73 29 2e 70 61 72 65 6e 74 28 27 2e 61 63 63 5f 69 74 65 6d 27 29 2e 73 69 62 6c 69 6e 67 73 28 29 2e 63 68 69 6c 64 72 65 6e 28 22 2e 61 63 63 6f 72 64 69 6f 6e 22 29 2e 6e 6f 74 28 24 28 74 68 69 73 29 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 61 63 74 69 76 65 5f 61 63 63 22 29 7d 0a 24 28 74 68 69 73 29 2e 6e 65 78 74 28 22 2e 61 63 63 6f 72 64 69 6f 6e 5f 63 6f 6e 74 65 6e 74 22 29 2e 73 6c 69 64 65 54 6f 67 67 6c 65 28 38 30 30 2c 27 65 61 73 65 49 6e 4f 75 74 45 78 70 6f 27 29 3b 69 66 28 24 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 27 61 63 74 69 76 65 5f 61 63 63 27 Data Ascii: (".accordion_content")).slideUp(400,'easeInOutExpo');$(this).parent('.acc_item').siblings().children(".accordion").not($(this)).removeClass("active_acc")}$(this).next(".accordion_content").slideToggle(800,'easeInOutExpo');if($(this).hasClass('active_acc'
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 20 2e 77 70 62 5f 73 69 6e 67 6c 65 5f 69 6d 61 67 65 2e 6d 66 70 5f 69 66 72 61 6d 65 5f 70 6f 70 75 70 20 61 22 29 2e 6d 61 67 6e 69 66 69 63 50 6f 70 75 70 28 7b 74 79 70 65 3a 27 69 66 72 61 6d 65 27 2c 6d 61 69 6e 43 6c 61 73 73 3a 27 62 6f 63 5f 70 6f 70 75 70 5f 73 70 69 6e 27 2c 72 65 6d 6f 76 61 6c 44 65 6c 61 79 3a 32 30 30 2c 66 69 78 65 64 43 6f 6e 74 65 6e 74 50 6f 73 3a 21 31 2c 7d 29 3b 69 66 28 62 6f 63 5f 77 6f 6f 5f 6c 69 67 68 74 62 6f 78 5f 65 6e 61 62 6c 65 64 29 7b 24 28 22 2e 62 6f 63 5f 73 69 6e 67 6c 65 5f 70 72 6f 64 75 63 74 20 2e 69 6d 61 67 65 73 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 74 68 69 73 29 2e 6d 61 67 6e 69 66 69 63 50 6f 70 75 70 28 7b 64 65 6c 65 67 61 74 65 3a 22 61 22 2c 74 79 70 65 3a 27 Data Ascii: .wpb_single_image.mfp_iframe_popup a").magnificPopup({type:'iframe',mainClass:'boc_popup_spin',removalDelay:200,fixedContentPos:!1,});if(boc_woo_lightbox_enabled){$(".boc_single_product .images").each(function(){$(this).magnificPopup({delegate:"a",type:'
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 6d 5f 73 74 61 72 74 3a 6e 6f 74 28 2e 62 6f 63 5f 73 74 61 72 74 5f 61 6e 69 6d 61 74 69 6f 6e 29 27 29 2e 77 61 79 70 6f 69 6e 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 5f 77 69 64 74 68 3d 24 28 74 68 69 73 29 2e 66 69 6e 64 28 22 73 70 61 6e 22 29 2e 61 74 74 72 28 22 64 61 74 61 2d 77 69 64 74 68 22 29 3b 24 28 74 68 69 73 29 2e 61 64 64 43 6c 61 73 73 28 27 62 6f 63 5f 73 74 61 72 74 5f 61 6e 69 6d 61 74 69 6f 6e 27 29 3b 24 28 74 68 69 73 29 2e 66 69 6e 64 28 22 73 70 61 6e 22 29 2e 61 6e 69 6d 61 74 65 28 7b 77 69 64 74 68 3a 62 5f 77 69 64 74 68 2b 22 25 22 7d 2c 32 30 30 30 2c 22 65 61 73 65 4f 75 74 43 75 62 69 63 22 29 3b 24 28 74 68 69 73 29 2e 66 69 6e 64 28 22 73 70 61 6e 20 73 74 72 6f 6e 67 22 29 2e 61 6e 69 6d 61 74 65 28 7b Data Ascii: m_start:not(.boc_start_animation)').waypoint(function(){var b_width=$(this).find("span").attr("data-width");$(this).addClass('boc_start_animation');$(this).find("span").animate({width:b_width+"%"},2000,"easeOutCubic");$(this).find("span strong").animate({
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 69 6f 6e 29 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 69 2c 65 29 7b 76 61 72 20 64 65 6c 61 79 3d 33 30 30 3b 24 28 65 29 2e 74 72 61 6e 73 28 69 2a 64 65 6c 61 79 2b 27 6d 73 27 2c 27 2d 64 65 6c 61 79 27 29 7d 29 3b 24 28 65 29 2e 66 69 6e 64 28 27 2e 74 65 61 6d 5f 62 6c 6f 63 6b 5f 63 6f 6e 74 65 6e 74 2e 62 6f 63 5f 61 6e 69 6d 61 74 65 5f 77 68 65 6e 5f 61 6c 6d 6f 73 74 5f 76 69 73 69 62 6c 65 3a 6e 6f 74 28 2e 62 6f 63 5f 73 74 61 72 74 5f 61 6e 69 6d 61 74 69 6f 6e 29 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 69 2c 65 29 7b 76 61 72 20 64 65 6c 61 79 3d 33 30 30 3b 24 28 65 29 2e 74 72 61 6e 73 28 69 2a 64 65 6c 61 79 2b 27 6d 73 27 2c 27 2d 64 65 6c 61 79 27 29 7d 29 3b 24 28 65 29 2e 66 69 6e 64 28 27 2e 74 6f 70 5f 69 63 6f Data Ascii: ion)').each(function(i,e){var delay=300;$(e).trans(idelay+'ms','-delay')});$(e).find('.team_block_content.boc_animate_when_almost_visible:not(.boc_start_animation)').each(function(i,e){var delay=300;$(e).trans(idelay+'ms','-delay')});$(e).find('.top_ico

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.11	49897	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:30 UTC	578	OUT	GET /wp-content/plugins/gravityforms/js/jquery.json.min.js?ver=2.3.4 HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:31 UTC	779	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:30 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Fri, 05 Oct 2018 13:00:07 GMT ETag: W/"5bb76057-738" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SkikLcKW6Jwo5a3FHw9ColE8WFVpKsgt1yYmIhWdWScEmtQyO7Q5cVV7%2BOf00foE99oZ19JytINuKRTpSv5AyBjywTC8c8tk%2F3hL6jTm7vrfQ28FRNWyxvhpfoiu4SUjvRI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c868fc221eb-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:31 UTC	590	IN	Data Raw: 37 33 38 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 24 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 73 63 61 70 65 3d 2f 5b 22 5c 5c 5c 78 30 30 2d 5c 78 31 66 5c 78 37 66 2d 5c 78 39 66 5d 2f 67 2c 6d 65 74 61 3d 7b 22 5c 62 22 3a 22 5c 5c 62 22 2c 22 5c 74 22 3a 22 5c 5c 74 22 2c 22 5c 6e 22 3a 22 5c 5c 6e 22 2c 22 5c 66 22 3a 22 5c 5c 66 22 2c 22 5c 72 22 3a 22 5c 5c 72 22 2c 27 22 27 3a 27 5c 5c 22 27 2c 22 5c 5c 22 3a 22 5c 5c 5c 5c 22 7d 2c 68 61 73 4f 77 6e 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 24 2e 74 6f 4a 53 4f 4e 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 4a 53 4f 4e 26 26 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 3f 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 3a 66 Data Ascii: 738!function($){"use strict";var escape=/["\\\x00-\x1f\x7f-\x9f]/g,meta={"\b":"\\b","\t":"\\t","\n":"\\n","\f":"\\f","\r":"\\r",'"':'\\"',"\\":"\\\\"},hasOwn=Object.prototype.hasOwnProperty;$.toJSON="object"==typeof JSON&&JSON.stringify?JSON.stringify:f
2024-05-06 16:42:31 UTC	1265	IN	Data Raw: 75 74 65 73 28 29 2c 6c 3d 61 2e 67 65 74 55 54 43 53 65 63 6f 6e 64 73 28 29 2c 6d 3d 61 2e 67 65 74 55 54 43 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 28 29 3b 72 65 74 75 72 6e 20 67 3c 31 30 26 26 28 67 3d 22 30 22 2b 67 29 2c 68 3c 31 30 26 26 28 68 3d 22 30 22 2b 68 29 2c 6a 3c 31 30 26 26 28 6a 3d 22 30 22 2b 6a 29 2c 6b 3c 31 30 26 26 28 6b 3d 22 30 22 2b 6b 29 2c 6c 3c 31 30 26 26 28 6c 3d 22 30 22 2b 6c 29 2c 6d 3c 31 30 30 26 26 28 6d 3d 22 30 22 2b 6d 29 2c 6d 3c 31 30 26 26 28 6d 3d 22 30 22 2b 6d 29 2c 27 22 27 2b 69 2b 22 2d 22 2b 67 2b 22 2d 22 2b 68 2b 22 54 22 2b 6a 2b 22 3a 22 2b 6b 2b 22 3a 22 2b 6c 2b 22 2e 22 2b 6d 2b 27 5a 22 27 7d 69 66 28 62 3d 5b 5d 2c 24 2e 69 73 41 72 72 61 79 28 61 29 29 7b 66 6f 72 28 63 3d 30 3b 63 3c 61 2e 6c 65 Data Ascii: utes(),l=a.getUTCSeconds(),m=a.getUTCMilliseconds();return g<10&&(g="0"+g),h<10&&(h="0"+h),j<10&&(j="0"+j),k<10&&(k="0"+k),l<10&&(l="0"+l),m<100&&(m="0"+m),m<10&&(m="0"+m),'"'+i+"-"+g+"-"+h+"T"+j+":"+k+":"+l+"."+m+'Z"'}if(b=[],$.isArray(a)){for(c=0;c<a.le
2024-05-06 16:42:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.11	49896	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:30 UTC	579	OUT	GET /wp-content/plugins/gravityforms/js/gravityforms.min.js?ver=2.3.4 HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:30 UTC	782	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:30 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Fri, 05 Oct 2018 13:00:07 GMT ETag: W/"5bb76057-6e92" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=weBh%2BqT9sX1y6zK7DKzqf3hJuckj33dho5f%2F78htu6eEnmu5txBVyacP9iHamSXc6PwCBUEVyfvEdIbK96hLZtqNxrzdhZ2VILR1pKl3566N3yQ7zNgfwcij1wDMR%2FJnRFc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c865b886daa-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:30 UTC	587	IN	Data Raw: 36 65 39 32 0d 0a 66 75 6e 63 74 69 6f 6e 20 67 66 6f 72 6d 42 69 6e 64 46 6f 72 6d 61 74 50 72 69 63 69 6e 67 46 69 65 6c 64 73 28 29 7b 6a 51 75 65 72 79 28 22 2e 67 69 6e 70 75 74 5f 61 6d 6f 75 6e 74 2c 20 2e 67 69 6e 70 75 74 5f 64 6f 6e 61 74 69 6f 6e 5f 61 6d 6f 75 6e 74 22 29 2e 62 69 6e 64 28 22 63 68 61 6e 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 67 66 6f 72 6d 46 6f 72 6d 61 74 50 72 69 63 69 6e 67 46 69 65 6c 64 28 74 68 69 73 29 7d 29 2c 6a 51 75 65 72 79 28 22 2e 67 69 6e 70 75 74 5f 61 6d 6f 75 6e 74 2c 20 2e 67 69 6e 70 75 74 5f 64 6f 6e 61 74 69 6f 6e 5f 61 6d 6f 75 6e 74 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 67 66 6f 72 6d 46 6f 72 6d 61 74 50 72 69 63 69 6e 67 46 69 65 6c 64 28 74 68 69 73 29 7d 29 7d 66 75 6e 63 Data Ascii: 6e92function gformBindFormatPricingFields(){jQuery(".ginput_amount, .ginput_donation_amount").bind("change",function(){gformFormatPricingField(this)}),jQuery(".ginput_amount, .ginput_donation_amount").each(function(){gformFormatPricingField(this)})}func
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 79 2e 64 65 63 69 6d 61 6c 5f 73 65 70 61 72 61 74 6f 72 29 29 2c 21 31 3d 3d 3d 61 29 72 65 74 75 72 6e 22 22 3b 61 2b 3d 22 22 2c 6e 65 67 61 74 69 76 65 3d 22 22 2c 22 2d 22 3d 3d 61 5b 30 5d 26 26 28 61 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 73 75 62 73 74 72 28 31 29 29 2c 6e 65 67 61 74 69 76 65 3d 22 2d 22 29 2c 6d 6f 6e 65 79 3d 74 68 69 73 2e 6e 75 6d 62 65 72 46 6f 72 6d 61 74 28 61 2c 74 68 69 73 2e 63 75 72 72 65 6e 63 79 2e 64 65 63 69 6d 61 6c 73 2c 74 68 69 73 2e 63 75 72 72 65 6e 63 79 2e 64 65 63 69 6d 61 6c 5f 73 65 70 61 72 61 74 6f 72 2c 74 68 69 73 2e 63 75 72 72 65 6e 63 79 2e 74 68 6f 75 73 61 6e 64 5f 73 65 70 61 72 61 74 6f 72 29 2c 22 30 2e 30 30 22 3d 3d 6d 6f 6e 65 79 26 26 28 6e 65 67 61 74 69 76 65 3d 22 22 29 3b 76 61 72 Data Ascii: y.decimal_separator)),!1===a)return"";a+="",negative="","-"==a[0]&&(a=parseFloat(a.substr(1)),negative="-"),money=this.numberFormat(a,this.currency.decimals,this.currency.decimal_separator,this.currency.thousand_separator),"0.00"==money&&(negative="");var
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 3d 22 20 22 2c 61 3d 61 2e 72 65 70 6c 61 63 65 28 2f 26 2e 2a 3f 3b 2f 67 2c 22 22 29 2c 61 3d 61 2e 72 65 70 6c 61 63 65 28 62 2c 22 22 29 2c 61 3d 61 2e 72 65 70 6c 61 63 65 28 63 2c 22 22 29 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 61 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 67 3d 61 2e 73 75 62 73 74 72 28 69 2c 31 29 2c 70 61 72 73 65 49 6e 74 28 67 29 3e 3d 30 26 26 70 61 72 73 65 49 6e 74 28 67 29 3c 3d 39 7c 7c 67 3d 3d 64 3f 65 2b 3d 67 3a 22 2d 22 3d 3d 67 26 26 28 68 3d 21 30 29 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 65 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 67 3d 65 2e 73 75 62 73 74 72 28 69 2c 31 29 2c 67 3e 3d 22 30 22 26 26 67 3c 3d 22 39 22 3f 66 2b 3d 67 3a 67 3d 3d 64 26 26 28 66 2b 3d 22 2e 22 29 3b 72 65 74 75 72 6e 20 68 26 26 28 Data Ascii: =" ",a=a.replace(/&.*?;/g,""),a=a.replace(b,""),a=a.replace(c,"");for(var i=0;i<a.length;i++)g=a.substr(i,1),parseInt(g)>=0&&parseInt(g)<=9\|\|g==d?e+=g:"-"==g&&(h=!0);for(var i=0;i<e.length;i++)g=e.substr(i,1),g>="0"&&g<="9"?f+=g:g==d&&(f+=".");return h&&(
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 73 3b 6a 51 75 65 72 79 28 22 23 22 2b 6a 2e 67 66 5f 76 61 72 73 2e 6d 65 73 73 61 67 65 5f 69 64 29 2e 68 74 6d 6c 28 22 22 29 2c 67 5b 68 5d 2e 6c 65 6e 67 74 68 3c 6b 26 26 67 66 4d 75 6c 74 69 46 69 6c 65 55 70 6c 6f 61 64 65 72 2e 74 6f 67 67 6c 65 44 69 73 61 62 6c 65 64 28 6a 2c 21 31 29 7d 65 6c 73 65 20 67 5b 68 5d 3d 6e 75 6c 6c 3b 6a 51 75 65 72 79 28 22 23 67 66 6f 72 6d 5f 75 70 6c 6f 61 64 65 64 5f 66 69 6c 65 73 5f 22 2b 61 29 2e 76 61 6c 28 6a 51 75 65 72 79 2e 74 6f 4a 53 4f 4e 28 67 29 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 66 6f 72 6d 49 73 48 69 64 64 65 6e 28 61 29 7b 72 65 74 75 72 6e 22 6e 6f 6e 65 22 3d 3d 61 2e 70 61 72 65 6e 74 73 28 22 2e 67 66 69 65 6c 64 22 29 2e 6e 6f 74 28 22 2e 67 66 69 65 6c 64 5f 68 69 64 64 65 6e 5f Data Ascii: s;jQuery("#"+j.gf_vars.message_id).html(""),g[h].length<k&&gfMultiFileUploader.toggleDisabled(j,!1)}else g[h]=null;jQuery("#gform_uploaded_files_"+a).val(jQuery.toJSON(g))}}}function gformIsHidden(a){return"none"==a.parents(".gfield").not(".gfield_hidden_
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 74 68 69 73 29 2c 63 3d 67 66 6f 72 6d 47 65 74 50 72 69 63 65 28 62 2e 76 61 6c 28 29 29 2c 64 3d 62 2e 61 74 74 72 28 22 69 64 22 29 2e 73 70 6c 69 74 28 22 5f 22 29 5b 32 5d 3b 62 2e 63 68 69 6c 64 72 65 6e 28 22 6f 70 74 69 6f 6e 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 6a 51 75 65 72 79 28 74 68 69 73 29 2c 65 3d 67 66 6f 72 6d 47 65 74 4f 70 74 69 6f 6e 4c 61 62 65 6c 28 62 2c 62 2e 76 61 6c 28 29 2c 63 2c 61 2c 64 29 3b 62 2e 68 74 6d 6c 28 65 29 7d 29 2c 62 2e 74 72 69 67 67 65 72 28 22 63 68 6f 73 65 6e 3a 75 70 64 61 74 65 64 22 29 7d 29 2c 6a 51 75 65 72 79 28 22 2e 67 66 69 65 6c 64 5f 6f 70 74 69 6f 6e 22 2b 63 29 2e 66 69 6e 64 28 22 2e 67 66 69 65 6c 64 5f 63 68 65 63 6b 62 6f 78 22 29 2e 66 69 6e 64 28 22 Data Ascii: this),c=gformGetPrice(b.val()),d=b.attr("id").split("_")[2];b.children("option").each(function(){var b=jQuery(this),e=gformGetOptionLabel(b,b.val(),c,a,d);b.html(e)}),b.trigger("chosen:updated")}),jQuery(".gfield_option"+c).find(".gfield_checkbox").find("
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 3d 67 66 5f 67 65 74 5f 69 6e 70 75 74 5f 69 64 5f 62 79 5f 68 74 6d 6c 5f 69 64 28 66 29 3b 64 3d 67 66 5f 67 65 74 5f 66 69 65 6c 64 5f 6e 75 6d 62 65 72 5f 66 6f 72 6d 61 74 28 67 2c 61 2c 22 76 61 6c 75 65 22 29 7d 72 65 74 75 72 6e 20 64 7c 7c 28 64 3d 22 63 75 72 72 65 6e 63 79 22 29 2c 63 3d 67 66 6f 72 6d 43 6c 65 61 6e 4e 75 6d 62 65 72 28 63 2c 22 22 2c 22 22 2c 67 66 6f 72 6d 47 65 74 44 65 63 69 6d 61 6c 53 65 70 61 72 61 74 6f 72 28 64 29 29 2c 63 7c 7c 28 63 3d 30 29 2c 63 7d 66 75 6e 63 74 69 6f 6e 20 67 66 6f 72 6d 49 73 50 72 6f 64 75 63 74 53 65 6c 65 63 74 65 64 28 61 2c 62 29 7b 76 61 72 20 63 3d 22 5f 22 2b 61 2b 22 5f 22 2b 62 2c 64 3d 6a 51 75 65 72 79 28 22 23 67 69 6e 70 75 74 5f 62 61 73 65 5f 70 72 69 63 65 22 2b 63 2b 22 2c 20 Data Ascii: =gf_get_input_id_by_html_id(f);d=gf_get_field_number_format(g,a,"value")}return d\|\|(d="currency"),c=gformCleanNumber(c,"","",gformGetDecimalSeparator(d)),c\|\|(c=0),c}function gformIsProductSelected(a,b){var c="_"+a+"_"+b,d=jQuery("#ginput_base_price"+c+",
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 54 6f 4e 75 6d 62 65 72 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 43 75 72 72 65 6e 63 79 28 67 66 5f 67 6c 6f 62 61 6c 2e 67 66 5f 63 75 72 72 65 6e 63 79 5f 63 6f 6e 66 69 67 29 2e 74 6f 4e 75 6d 62 65 72 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 67 66 6f 72 6d 47 65 74 50 72 69 63 65 44 69 66 66 65 72 65 6e 63 65 28 61 2c 62 29 7b 76 61 72 20 63 3d 70 61 72 73 65 46 6c 6f 61 74 28 62 29 2d 70 61 72 73 65 46 6c 6f 61 74 28 61 29 3b 72 65 74 75 72 6e 20 70 72 69 63 65 3d 67 66 6f 72 6d 46 6f 72 6d 61 74 4d 6f 6e 65 79 28 63 2c 21 30 29 2c 63 3e 30 26 26 28 70 72 69 63 65 3d 22 2b 22 2b 70 72 69 63 65 29 2c 70 72 69 63 65 7d 66 75 6e 63 74 69 6f 6e 20 67 66 6f 72 6d 47 65 74 4f 70 74 69 6f 6e 4c 61 62 65 6c 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 61 3d 6a 51 Data Ascii: ToNumber(a){return new Currency(gf_global.gf_currency_config).toNumber(a)}function gformGetPriceDifference(a,b){var c=parseFloat(b)-parseFloat(a);return price=gformFormatMoney(c,!0),c>0&&(price="+"+price),price}function gformGetOptionLabel(a,b,c,d,e){a=jQ
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 63 65 46 69 65 6c 64 73 28 29 7b 6a 51 75 65 72 79 28 22 2e 67 66 69 65 6c 64 5f 70 72 69 63 65 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 67 66 6f 72 6d 52 65 67 69 73 74 65 72 50 72 69 63 65 46 69 65 6c 64 28 67 66 6f 72 6d 47 65 74 50 72 6f 64 75 63 74 49 64 73 28 22 67 66 69 65 6c 64 5f 70 72 69 63 65 22 2c 74 68 69 73 29 29 2c 6a 51 75 65 72 79 28 74 68 69 73 29 2e 6f 6e 28 22 63 68 61 6e 67 65 22 2c 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 74 65 78 74 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 6e 75 6d 62 65 72 22 5d 2c 20 73 65 6c 65 63 74 27 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 67 66 6f 72 6d 47 65 74 50 72 6f 64 75 63 74 49 64 73 28 22 67 66 69 65 6c 64 5f 70 72 69 63 65 22 2c 74 68 69 73 29 3b 30 3d 3d 61 2e 66 Data Ascii: ceFields(){jQuery(".gfield_price").each(function(){gformRegisterPriceField(gformGetProductIds("gfield_price",this)),jQuery(this).on("change",'input[type="text"], input[type="number"], select',function(){var a=gformGetProductIds("gfield_price",this);0==a.f
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 22 62 61 64 22 3a 64 3c 35 36 3f 22 67 6f 6f 64 22 3a 22 73 74 72 6f 6e 67 22 29 7d 66 75 6e 63 74 69 6f 6e 20 67 66 6f 72 6d 54 6f 67 67 6c 65 43 68 65 63 6b 62 6f 78 65 73 28 61 29 7b 76 61 72 20 62 3d 6a 51 75 65 72 79 28 61 29 2e 70 61 72 65 6e 74 28 29 2c 63 3d 62 2e 66 69 6e 64 28 22 6c 61 62 65 6c 22 29 3b 24 63 68 65 63 6b 62 6f 78 65 73 3d 62 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 22 6c 69 3a 6e 6f 74 28 20 2e 67 63 68 6f 69 63 65 5f 73 65 6c 65 63 74 5f 61 6c 6c 20 29 22 29 2c 24 63 68 65 63 6b 62 6f 78 65 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6a 51 75 65 72 79 28 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 27 2c 74 68 69 73 29 2e 70 72 6f 70 28 22 63 68 65 63 6b 65 64 22 2c 61 2e 63 68 65 63 6b 65 Data Ascii: "bad":d<56?"good":"strong")}function gformToggleCheckboxes(a){var b=jQuery(a).parent(),c=b.find("label");$checkboxes=b.parent().find("li:not( .gchoice_select_all )"),$checkboxes.each(function(){jQuery('input[type="checkbox"]',this).prop("checked",a.checke
2024-05-06 16:42:30 UTC	1369	IN	Data Raw: 22 67 66 69 65 6c 64 5f 6c 69 73 74 5f 72 6f 77 5f 6f 64 64 20 67 66 69 65 6c 64 5f 6c 69 73 74 5f 72 6f 77 5f 65 76 65 6e 22 29 2e 61 64 64 43 6c 61 73 73 28 63 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 67 66 6f 72 6d 54 6f 67 67 6c 65 49 63 6f 6e 73 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2e 66 69 6e 64 28 22 2e 67 66 69 65 6c 64 5f 6c 69 73 74 5f 67 72 6f 75 70 22 29 2e 6c 65 6e 67 74 68 2c 64 3d 61 2e 66 69 6e 64 28 22 2e 61 64 64 5f 6c 69 73 74 5f 69 74 65 6d 22 29 3b 61 2e 66 69 6e 64 28 22 2e 64 65 6c 65 74 65 5f 6c 69 73 74 5f 69 74 65 6d 22 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 74 79 22 2c 31 3d 3d 63 3f 22 68 69 64 64 65 6e 22 3a 22 76 69 73 69 62 6c 65 22 29 2c 62 3e 30 26 26 63 3e 3d 62 3f 28 64 2e 64 61 74 61 28 22 74 69 74 6c 65 22 2c 61 Data Ascii: "gfield_list_row_odd gfield_list_row_even").addClass(c)})}function gformToggleIcons(a,b){var c=a.find(".gfield_list_group").length,d=a.find(".add_list_item");a.find(".delete_list_item").css("visibility",1==c?"hidden":"visible"),b>0&&c>=b?(d.data("title",a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.11	49898	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:31 UTC	586	OUT	GET /wp-content/plugins/gravityforms/js/placeholders.jquery.min.js?ver=2.3.4 HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:31 UTC	784	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:31 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Fri, 05 Oct 2018 13:00:07 GMT ETag: W/"5bb76057-121f" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DxCzL%2FmG6BCEW2fD4w6WTWrIOusNiZPyyy%2FF%2BozfshhhL4xHvbya%2BJblLCKFil78sD1LcbcFwLauTvO6GGSqZz6muStoFD01ffdLceTL1Brbb29249hy293x0CrUITCWmGA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c889a7d0318-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:31 UTC	585	IN	Data Raw: 31 32 31 66 0d 0a 2f 2a 20 50 6c 61 63 65 68 6f 6c 64 65 72 73 2e 6a 73 20 76 33 2e 30 2e 32 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 65 2c 72 29 7b 72 65 74 75 72 6e 20 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 2c 72 2c 21 31 29 3a 74 2e 61 74 74 61 63 68 45 76 65 6e 74 3f 74 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 65 2c 72 29 3a 76 6f 69 64 20 30 7d 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 65 29 7b 76 61 72 20 72 2c 6e 3b 66 6f 72 28 72 3d 30 2c 6e 3d 74 2e 6c 65 6e 67 74 68 3b 6e 3e 72 3b 72 2b 2b 29 69 66 28 74 5b 72 5d 3d 3d 3d 65 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e Data Ascii: 121f/* Placeholders.js v3.0.2 */(function(t){"use strict";function e(t,e,r){return t.addEventListener?t.addEventListener(e,r,!1):t.attachEvent?t.attachEvent("on"+e,r):void 0}function r(t,e){var r,n;for(r=0,n=t.length;n>r;r++)if(t[r]===e)return!0;return
2024-05-06 16:42:31 UTC	1369	IN	Data Raw: 69 6f 6e 20 65 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 65 29 7b 76 61 72 20 72 2c 6e 2c 61 3d 21 21 65 26 26 74 2e 76 61 6c 75 65 21 3d 3d 65 2c 75 3d 74 2e 76 61 6c 75 65 3d 3d 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 56 29 3b 72 65 74 75 72 6e 28 61 7c 7c 75 29 26 26 22 74 72 75 65 22 3d 3d 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 50 29 3f 28 74 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 50 29 2c 74 2e 76 61 6c 75 65 3d 74 2e 76 61 6c 75 65 2e 72 65 70 6c 61 63 65 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 56 29 2c 22 22 29 2c 74 2e 63 6c 61 73 Data Ascii: ion e(){}function r(){try{return document.activeElement}catch(t){}}function n(t,e){var r,n,a=!!e&&t.value!==e,u=t.value===t.getAttribute(V);return(a\|\|u)&&"true"===t.getAttribute(P)?(t.removeAttribute(P),t.value=t.value.replace(t.getAttribute(V),""),t.clas
2024-05-06 16:42:31 UTC	1369	IN	Data Raw: 29 2c 22 22 3d 3d 3d 74 2e 76 61 6c 75 65 26 26 28 74 2e 62 6c 75 72 28 29 2c 4b 2e 6d 6f 76 65 43 61 72 65 74 28 74 2c 30 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 3d 3d 3d 72 28 29 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 56 29 26 26 22 74 72 75 65 22 3d 3d 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 50 29 26 26 4b 2e 6d 6f 76 65 43 61 72 65 74 28 74 2c 30 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 69 28 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 29 7b 74 2e 66 6f 72 6d 26 26 28 54 3d 74 2e 66 6f 72 6d 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 54 26 26 28 54 3d 64 Data Ascii: ),""===t.value&&(t.blur(),K.moveCaret(t,0))}}function v(t){return function(){t===r()&&t.value===t.getAttribute(V)&&"true"===t.getAttribute(P)&&K.moveCaret(t,0)}}function g(t){return function(){i(t)}}function p(t){t.form&&(T=t.form,"string"==typeof T&&(T=d
2024-05-06 16:42:31 UTC	1324	IN	Data Raw: 79 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 74 79 6c 65 22 29 2c 79 2e 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 2c 45 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 22 2e 22 2b 49 2b 22 20 7b 20 63 6f 6c 6f 72 3a 22 2b 6b 2b 22 3b 20 7d 22 29 2c 79 2e 73 74 79 6c 65 53 68 65 65 74 3f 79 2e 73 74 79 6c 65 53 68 65 65 74 2e 63 73 73 54 65 78 74 3d 45 2e 6e 6f 64 65 56 61 6c 75 65 3a 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 45 29 2c 47 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 79 2c 47 2e 66 69 72 73 74 43 68 69 6c 64 29 2c 77 3d 30 2c 4e 3d 66 2e 6c 65 6e 67 74 68 2b 68 2e 6c 65 6e 67 74 68 3b 4e 3e 77 3b 77 2b 2b 29 53 3d 66 2e 6c 65 6e 67 74 68 3e 77 3f 66 5b 77 5d 3a 68 5b 77 2d 66 2e Data Ascii: y=document.createElement("style"),y.type="text/css",E=document.createTextNode("."+I+" { color:"+k+"; }"),y.styleSheet?y.styleSheet.cssText=E.nodeValue:y.appendChild(E),G.insertBefore(y,G.firstChild),w=0,N=f.length+h.length;N>w;w++)S=f.length>w?f[w]:h[w-f.
2024-05-06 16:42:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.11	49899	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:31 UTC	585	OUT	GET /wp-content/plugins/gravityforms/js/jquery.maskedinput.min.js?ver=2.3.4 HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:31 UTC	790	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:31 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Fri, 05 Oct 2018 13:00:07 GMT ETag: W/"5bb76057-10ad" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=du9LLXY%2FV%2BcK6SCutPcSUiMQla98rgpZWfIX9%2B7sgYFYlouWohDK4O%2ByjMeVK%2BjjEph7bkf19TUaN2pI0cg2ZmsjsIiDLmUtOTugOjYnBqIQQLh%2FUxEr%2BVcU0GH9CagDk4o%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c889ba3a515-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:31 UTC	579	IN	Data Raw: 31 30 61 64 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 61 29 3a 61 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 3a 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2c 64 3d 2f 69 70 68 6f 6e 65 2f 69 2e 74 65 73 74 28 63 29 2c 65 3d 2f 63 68 72 6f 6d 65 2f 69 2e 74 65 73 74 28 63 29 2c 66 3d 2f 61 6e 64 72 6f 69 64 2f 69 2e 74 65 73 74 28 63 29 3b 61 2e 6d 61 73 6b 3d 7b 64 65 66 69 6e 69 74 69 6f 6e 73 3a 7b 39 Data Ascii: 10ad!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):a("object"==typeof exports?require("jquery"):jQuery)}(function(a){var b,c=navigator.userAgent,d=/iphone/i.test(c),e=/chrome/i.test(c),f=/android/i.test(c);a.mask={definitions:{9
2024-05-06 16:42:31 UTC	1369	IN	Data Raw: 67 65 28 61 2c 62 29 3a 74 68 69 73 2e 63 72 65 61 74 65 54 65 78 74 52 61 6e 67 65 26 26 28 63 3d 74 68 69 73 2e 63 72 65 61 74 65 54 65 78 74 52 61 6e 67 65 28 29 2c 63 2e 63 6f 6c 6c 61 70 73 65 28 21 30 29 2c 63 2e 6d 6f 76 65 45 6e 64 28 22 63 68 61 72 61 63 74 65 72 22 2c 62 29 2c 63 2e 6d 6f 76 65 53 74 61 72 74 28 22 63 68 61 72 61 63 74 65 72 22 2c 61 29 2c 63 2e 73 65 6c 65 63 74 28 29 29 7d 29 29 3a 28 74 68 69 73 5b 30 5d 2e 73 65 74 53 65 6c 65 63 74 69 6f 6e 52 61 6e 67 65 3f 28 61 3d 74 68 69 73 5b 30 5d 2e 73 65 6c 65 63 74 69 6f 6e 53 74 61 72 74 2c 62 3d 74 68 69 73 5b 30 5d 2e 73 65 6c 65 63 74 69 6f 6e 45 6e 64 29 3a 64 6f 63 75 6d 65 6e 74 2e 73 65 6c 65 63 74 69 6f 6e 26 26 64 6f 63 75 6d 65 6e 74 2e 73 65 6c 65 63 74 69 6f 6e 2e 63 Data Ascii: ge(a,b):this.createTextRange&&(c=this.createTextRange(),c.collapse(!0),c.moveEnd("character",b),c.moveStart("character",a),c.select())})):(this[0].setSelectionRange?(a=this[0].selectionStart,b=this[0].selectionEnd):document.selection&&document.selection.c
2024-05-06 16:42:31 UTC	1369	IN	Data Raw: 3c 6e 3b 62 2b 2b 29 69 66 28 6a 5b 62 5d 29 7b 69 66 28 64 3d 71 28 62 29 2c 65 3d 43 5b 62 5d 2c 43 5b 62 5d 3d 63 2c 21 28 64 3c 6e 26 26 6a 5b 64 5d 2e 74 65 73 74 28 65 29 29 29 62 72 65 61 6b 3b 63 3d 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 62 29 7b 76 61 72 20 63 3d 42 2e 76 61 6c 28 29 2c 64 3d 42 2e 63 61 72 65 74 28 29 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 70 72 6f 78 79 28 61 2e 66 6e 2e 63 61 72 65 74 2c 42 2c 64 2e 62 65 67 69 6e 2c 64 2e 62 65 67 69 6e 29 28 29 7d 3b 69 66 28 6f 26 26 6f 2e 6c 65 6e 67 74 68 26 26 6f 2e 6c 65 6e 67 74 68 3e 63 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 41 28 21 30 29 3b 64 2e 62 65 67 69 6e 3e 30 26 26 21 6a 5b 64 2e 62 65 67 69 6e 2d 31 5d 3b 29 64 2e 62 65 67 69 6e 2d 2d 3b 69 66 28 30 3d 3d 3d 64 Data Ascii: <n;b++)if(j[b]){if(d=q(b),e=C[b],C[b]=c,!(d<n&&j[d].test(e)))break;c=e}}function u(b){var c=B.val(),d=B.caret(),e=function(){a.proxy(a.fn.caret,B,d.begin,d.begin)()};if(o&&o.length&&o.length>c.length){for(A(!0);d.begin>0&&!j[d.begin-1];)d.begin--;if(0===d
2024-05-06 16:42:31 UTC	960	IN	Data Raw: 63 68 61 72 41 74 28 64 2d 31 29 2c 6a 5b 62 5d 2e 74 65 73 74 28 63 29 29 7b 43 5b 62 5d 3d 63 2c 66 3d 62 3b 62 72 65 61 6b 7d 69 66 28 64 3e 65 2e 6c 65 6e 67 74 68 29 7b 79 28 62 2b 31 2c 6e 29 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 43 5b 62 5d 3d 3d 3d 65 2e 63 68 61 72 41 74 28 64 29 26 26 64 2b 2b 2c 62 3c 6b 26 26 28 66 3d 62 29 3b 72 65 74 75 72 6e 20 61 3f 7a 28 29 3a 66 2b 31 3c 6b 3f 67 2e 61 75 74 6f 63 6c 65 61 72 7c 7c 43 2e 6a 6f 69 6e 28 22 22 29 3d 3d 3d 44 3f 28 42 2e 76 61 6c 28 29 26 26 42 2e 76 61 6c 28 22 22 29 2c 79 28 30 2c 6e 29 29 3a 7a 28 29 3a 28 7a 28 29 2c 42 2e 76 61 6c 28 42 2e 76 61 6c 28 29 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 66 2b 31 29 29 29 2c 6b 3f 62 3a 6c 7d 76 61 72 20 42 3d 61 28 74 68 69 73 29 2c 43 3d 61 2e Data Ascii: charAt(d-1),j[b].test(c)){C[b]=c,f=b;break}if(d>e.length){y(b+1,n);break}}else C[b]===e.charAt(d)&&d++,b<k&&(f=b);return a?z():f+1<k?g.autoclear\|\|C.join("")===D?(B.val()&&B.val(""),y(0,n)):z():(z(),B.val(B.val().substring(0,f+1))),k?b:l}var B=a(this),C=a.
2024-05-06 16:42:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.11	49900	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:31 UTC	609	OUT	GET /wp-content/plugins/gravity-forms-wcag-20-form-fields/js/gf_wcag20_form_fields.min.js?ver=6.4.3 HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:31 UTC	787	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:31 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 17 Mar 2020 03:12:49 GMT ETag: W/"5e704031-251" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6Nol%2F72ViPN51HQSmP2GBueWE%2Bh%2FcFzKej7kGLWK4xChXDe5LLo4724kpdqiWPITQjYs1lN5xtsNl3rFb9O7IXUyo%2BHz5v8%2BOI52%2B7tMaXyC2TAq2W9r5D19QAJEuPrs3nU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c8b0db9a570-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:31 UTC	582	IN	Data Raw: 32 35 31 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 28 64 6f 63 75 6d 65 6e 74 29 2e 62 69 6e 64 28 22 67 66 6f 72 6d 5f 70 6f 73 74 5f 72 65 6e 64 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 67 66 5f 77 63 61 67 32 30 5f 66 6f 72 6d 5f 66 69 65 6c 64 73 5f 73 65 74 74 69 6e 67 73 2e 66 61 69 6c 65 64 5f 76 61 6c 69 64 61 74 69 6f 6e 26 26 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 3d 22 23 65 72 72 6f 72 22 2c 74 28 74 68 69 73 29 2e 66 69 6e 64 28 22 2e 76 61 6c 69 64 61 74 69 6f 6e 5f 65 72 72 6f 72 22 29 2e 66 6f 63 75 73 28 29 2c 74 28 74 68 69 73 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 74 28 22 2e 76 61 6c 69 64 61 74 69 6f 6e 5f 65 72 72 6f 72 22 29 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 Data Ascii: 251!function(t){"use strict";t(document).bind("gform_post_render",function(){gf_wcag20_form_fields_settings.failed_validation&&(window.location.hash="#error",t(this).find(".validation_error").focus(),t(this).scrollTop(t(".validation_error").offset().top
2024-05-06 16:42:31 UTC	18	IN	Data Raw: 69 29 7d 29 7d 29 7d 28 6a 51 75 65 72 79 29 3b 0d 0a Data Ascii: i)})})}(jQuery);
2024-05-06 16:42:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.11	49901	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:31 UTC	621	OUT	GET /wp-content/cache/min/1/ajax/libs/jquery-easing/1.4.1/jquery.easing.min-5fbd6a69fa350237d507240b81a6abed.js HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:31 UTC	783	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:31 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 28 Oct 2021 03:54:18 GMT ETag: W/"617a1eea-9e3" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8rYJnpHcKj9nQO2nE4cBQyPWHzSIF1RpeWE5AhUEmxk9UcQ2xtfF%2BrJz5OSU3X52PKojVbaYHCxIYOFlecI%2FzI2Z%2B8CFYcfLFDk4f5x2hWLWfzkLK745J1%2BqZNSpjYafbc4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c8b2db18d97-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:31 UTC	586	IN	Data Raw: 39 65 33 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 66 61 63 74 6f 72 79 29 7b 69 66 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 7b 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 24 29 7b 72 65 74 75 72 6e 20 66 61 63 74 6f 72 79 28 24 29 7d 29 7d 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 3d 3d 22 6f 62 6a 65 63 74 22 29 7b 65 78 70 6f 72 74 73 3d 66 61 63 74 6f 72 79 28 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 29 7d 65 6c 73 65 7b 66 61 63 74 6f 72 79 28 6a 51 75 65 72 79 29 7d 7d 29 28 66 75 6e 63 74 69 6f 6e 28 24 29 Data Ascii: 9e3(function(factory){if(typeof define==="function"&&define.amd){define(["jquery"],function($){return factory($)})}else if(typeof module==="object"&&typeof module.exports==="object"){exports=factory(require("jquery"))}else{factory(jQuery)}})(function($)
2024-05-06 16:42:31 UTC	1369	IN	Data Raw: 28 78 2d 3d 32 2e 36 32 35 2f 64 31 29 2a 78 2b 2e 39 38 34 33 37 35 7d 7d 24 2e 65 78 74 65 6e 64 28 24 2e 65 61 73 69 6e 67 2c 7b 64 65 66 3a 22 65 61 73 65 4f 75 74 51 75 61 64 22 2c 73 77 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 78 29 7b 72 65 74 75 72 6e 20 24 2e 65 61 73 69 6e 67 5b 24 2e 65 61 73 69 6e 67 2e 64 65 66 5d 28 78 29 7d 2c 65 61 73 65 49 6e 51 75 61 64 3a 66 75 6e 63 74 69 6f 6e 28 78 29 7b 72 65 74 75 72 6e 20 78 2a 78 7d 2c 65 61 73 65 4f 75 74 51 75 61 64 3a 66 75 6e 63 74 69 6f 6e 28 78 29 7b 72 65 74 75 72 6e 20 31 2d 28 31 2d 78 29 2a 28 31 2d 78 29 7d 2c 65 61 73 65 49 6e 4f 75 74 51 75 61 64 3a 66 75 6e 63 74 69 6f 6e 28 78 29 7b 72 65 74 75 72 6e 20 78 3c 2e 35 3f 32 2a 78 2a 78 3a 31 2d 70 6f 77 28 2d 32 2a 78 2b 32 2c 32 29 2f Data Ascii: (x-=2.625/d1)x+.984375}}$.extend($.easing,{def:"easeOutQuad",swing:function(x){return $.easing[$.easing.def](x)},easeInQuad:function(x){return xx},easeOutQuad:function(x){return 1-(1-x)(1-x)},easeInOutQuad:function(x){return x<.5?2xx:1-pow(-2x+2,2)/
2024-05-06 16:42:31 UTC	583	IN	Data Raw: 7b 72 65 74 75 72 6e 20 78 3d 3d 3d 30 3f 30 3a 78 3d 3d 3d 31 3f 31 3a 70 6f 77 28 32 2c 2d 31 30 2a 78 29 2a 73 69 6e 28 28 78 2a 31 30 2d 2e 37 35 29 2a 63 34 29 2b 31 7d 2c 65 61 73 65 49 6e 4f 75 74 45 6c 61 73 74 69 63 3a 66 75 6e 63 74 69 6f 6e 28 78 29 7b 72 65 74 75 72 6e 20 78 3d 3d 3d 30 3f 30 3a 78 3d 3d 3d 31 3f 31 3a 78 3c 2e 35 3f 2d 28 70 6f 77 28 32 2c 32 30 2a 78 2d 31 30 29 2a 73 69 6e 28 28 32 30 2a 78 2d 31 31 2e 31 32 35 29 2a 63 35 29 29 2f 32 3a 70 6f 77 28 32 2c 2d 32 30 2a 78 2b 31 30 29 2a 73 69 6e 28 28 32 30 2a 78 2d 31 31 2e 31 32 35 29 2a 63 35 29 2f 32 2b 31 7d 2c 65 61 73 65 49 6e 42 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 78 29 7b 72 65 74 75 72 6e 20 63 33 2a 78 2a 78 2a 78 2d 63 31 2a 78 2a 78 7d 2c 65 61 73 65 4f 75 74 Data Ascii: {return x===0?0:x===1?1:pow(2,-10x)sin((x10-.75)c4)+1},easeInOutElastic:function(x){return x===0?0:x===1?1:x<.5?-(pow(2,20x-10)sin((20x-11.125)c5))/2:pow(2,-20x+10)sin((20x-11.125)c5)/2+1},easeInBack:function(x){return c3xxx-c1x*x},easeOut
2024-05-06 16:42:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.11	49902	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:31 UTC	616	OUT	GET /wp-content/cache/min/1/wp-content/uploads/hm_custom_css_js/custom-fbb9c72e087199ef0302a0e006af0db2.js HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:31 UTC	780	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:31 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 28 Oct 2021 03:54:18 GMT ETag: W/"617a1eea-1ff8" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QHp6Ll%2Bd1I0hJcyyBFLlzap%2B2sgWPDEOld9g3KqfwtUuDbUeaqcAUZgu31eE7FDkH2vRZPHUg7fiAUdgGZE9xQzoJxqGjlTRi6A8uabE2ntUQzoFJfoNO8PORzyi2qXxof0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c8b2cdca518-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:31 UTC	589	IN	Data Raw: 31 66 66 38 0d 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 76 61 72 20 63 6f 6e 74 61 69 6e 65 72 32 3d 6a 51 75 65 72 79 28 27 62 6f 64 79 2c 68 74 6d 6c 27 29 3b 76 61 72 20 71 75 65 72 79 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 2e 73 75 62 73 74 72 69 6e 67 28 31 29 3b 76 61 72 20 6d 79 48 65 61 64 65 72 3d 24 28 22 23 68 65 61 64 65 72 22 29 3b 76 61 72 20 66 69 65 6c 64 54 61 72 67 65 74 3d 6a 51 75 65 72 79 28 22 2e 79 6f 75 72 2d 6e 61 6d 65 20 69 6e 70 75 74 22 29 3b 76 61 72 20 74 68 69 73 4c 6f 67 6f 3d 6a 51 75 65 72 79 28 22 23 6c 6f 67 6f 22 29 3b 76 61 72 20 6d 61 70 4f 76 65 72 6c 61 79 3d 6a 51 75 65 72 79 28 22 2e 6d 61 70 6f 76 65 72 6c 61 79 22 Data Ascii: 1ff8jQuery(document).ready(function($){var container2=jQuery('body,html');var query=window.location.search.substring(1);var myHeader=$("#header");var fieldTarget=jQuery(".your-name input");var thisLogo=jQuery("#logo");var mapOverlay=jQuery(".mapoverlay"
2024-05-06 16:42:31 UTC	1369	IN	Data Raw: 28 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 68 65 69 67 68 74 28 29 21 3d 3d 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 68 65 69 67 68 74 28 29 29 7b 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 73 63 72 6f 6c 6c 27 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 63 72 6f 6c 6c 57 69 6e 3d 6a 51 75 65 72 79 28 74 68 69 73 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 3b 69 66 28 73 63 72 6f 6c 6c 57 69 6e 3e 32 37 35 29 7b 62 61 63 6b 54 6f 54 6f 70 2e 61 64 64 43 6c 61 73 73 28 22 73 68 6f 77 2d 74 6f 70 22 29 7d 65 6c 73 65 7b 62 61 63 6b 54 6f 54 6f 70 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 73 68 6f 77 2d 74 6f 70 22 29 7d 7d 29 7d 65 6c 73 65 7b 62 61 63 6b 54 6f 54 6f 70 2e 61 64 64 43 6c 61 73 73 28 22 73 68 6f 77 2d 74 6f 70 Data Ascii: (jQuery(window).height()!==jQuery(document).height()){jQuery(window).on('scroll',function(){var scrollWin=jQuery(this).scrollTop();if(scrollWin>275){backToTop.addClass("show-top")}else{backToTop.removeClass("show-top")}})}else{backToTop.addClass("show-top
2024-05-06 16:42:31 UTC	1369	IN	Data Raw: 66 6f 2e 74 6f 70 26 26 68 61 6c 66 57 69 6e 3c 69 6d 61 67 65 31 49 6e 66 6f 2e 74 6f 70 2b 69 6d 61 67 65 48 65 69 67 68 74 29 7b 6a 51 75 65 72 79 28 22 2e 63 70 2d 63 6f 6e 74 61 69 6e 65 72 22 29 2e 61 64 64 43 6c 61 73 73 28 22 73 63 61 6c 65 2d 75 70 22 29 7d 7d 29 7d 0a 69 66 28 65 6c 65 6d 65 6e 74 32 45 78 69 73 74 73 21 3d 3d 6e 75 6c 6c 29 7b 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 73 63 72 6f 6c 6c 27 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 61 6c 66 57 69 6e 3d 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 68 65 69 67 68 74 28 29 2a 30 2e 37 35 3b 76 61 72 20 69 6d 61 67 65 31 49 6e 66 6f 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 66 61 64 65 2d 74 68 69 73 2d 75 70 22 29 2e 67 65 Data Ascii: fo.top&&halfWin<image1Info.top+imageHeight){jQuery(".cp-container").addClass("scale-up")}})}if(element2Exists!==null){jQuery(window).on('scroll',function(){var halfWin=jQuery(window).height()*0.75;var image1Info=document.querySelector(".fade-this-up").ge
2024-05-06 16:42:31 UTC	1369	IN	Data Raw: 22 29 2e 68 65 69 67 68 74 28 29 3b 69 66 28 68 61 6c 66 57 69 6e 3e 69 6d 61 67 65 31 49 6e 66 6f 2e 74 6f 70 26 26 68 61 6c 66 57 69 6e 3c 69 6d 61 67 65 31 49 6e 66 6f 2e 74 6f 70 2b 69 6d 61 67 65 48 65 69 67 68 74 29 7b 6a 51 75 65 72 79 28 22 2e 66 61 64 65 2d 74 68 69 73 2d 69 6e 22 29 2e 61 64 64 43 6c 61 73 73 28 22 66 61 64 65 2d 74 68 69 73 22 29 7d 7d 29 7d 0a 69 66 28 65 6c 65 6d 65 6e 74 36 45 78 69 73 74 73 21 3d 3d 6e 75 6c 6c 29 7b 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 73 63 72 6f 6c 6c 27 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 61 6c 66 57 69 6e 3d 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 68 65 69 67 68 74 28 29 2a 30 2e 37 35 3b 76 61 72 20 69 6d 61 67 65 31 49 6e 66 6f 3d 64 6f 63 75 6d 65 6e 74 2e 71 Data Ascii: ").height();if(halfWin>image1Info.top&&halfWin<image1Info.top+imageHeight){jQuery(".fade-this-in").addClass("fade-this")}})}if(element6Exists!==null){jQuery(window).on('scroll',function(){var halfWin=jQuery(window).height()*0.75;var image1Info=document.q
2024-05-06 16:42:31 UTC	1369	IN	Data Raw: 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 3b 76 61 72 20 69 6d 61 67 65 48 65 69 67 68 74 3d 6a 51 75 65 72 79 28 22 2e 66 61 64 65 2d 74 68 69 73 2d 6c 65 66 74 33 22 29 2e 68 65 69 67 68 74 28 29 3b 69 66 28 68 61 6c 66 57 69 6e 3e 69 6d 61 67 65 31 49 6e 66 6f 2e 74 6f 70 26 26 68 61 6c 66 57 69 6e 3c 69 6d 61 67 65 31 49 6e 66 6f 2e 74 6f 70 2b 69 6d 61 67 65 48 65 69 67 68 74 29 7b 6a 51 75 65 72 79 28 22 2e 66 61 64 65 2d 74 68 69 73 2d 6c 65 66 74 33 22 29 2e 61 64 64 43 6c 61 73 73 28 22 73 63 61 6c 65 2d 6c 65 66 74 22 29 7d 7d 29 7d 0a 69 66 28 65 6c 65 6d 65 6e 74 31 30 45 78 69 73 74 73 21 3d 3d 6e 75 6c 6c 29 7b 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 73 63 72 6f 6c 6c 27 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 Data Ascii: undingClientRect();var imageHeight=jQuery(".fade-this-left3").height();if(halfWin>image1Info.top&&halfWin<image1Info.top+imageHeight){jQuery(".fade-this-left3").addClass("scale-left")}})}if(element10Exists!==null){jQuery(window).on('scroll',function(){va
2024-05-06 16:42:31 UTC	1369	IN	Data Raw: 2e 37 35 3b 76 61 72 20 69 6d 61 67 65 31 49 6e 66 6f 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 66 61 64 65 2d 74 68 69 73 2d 6c 65 66 74 35 22 29 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 3b 76 61 72 20 69 6d 61 67 65 48 65 69 67 68 74 3d 6a 51 75 65 72 79 28 22 2e 66 61 64 65 2d 74 68 69 73 2d 6c 65 66 74 35 22 29 2e 68 65 69 67 68 74 28 29 3b 69 66 28 68 61 6c 66 57 69 6e 3e 69 6d 61 67 65 31 49 6e 66 6f 2e 74 6f 70 26 26 68 61 6c 66 57 69 6e 3c 69 6d 61 67 65 31 49 6e 66 6f 2e 74 6f 70 2b 69 6d 61 67 65 48 65 69 67 68 74 29 7b 6a 51 75 65 72 79 28 22 2e 66 61 64 65 2d 74 68 69 73 2d 6c 65 66 74 35 22 29 2e 61 64 64 43 6c 61 73 73 28 22 73 63 61 6c 65 2d 6c 65 66 74 22 29 7d 7d 29 7d 7d Data Ascii: .75;var image1Info=document.querySelector(".fade-this-left5").getBoundingClientRect();var imageHeight=jQuery(".fade-this-left5").height();if(halfWin>image1Info.top&&halfWin<image1Info.top+imageHeight){jQuery(".fade-this-left5").addClass("scale-left")}})}}
2024-05-06 16:42:31 UTC	758	IN	Data Raw: 7b 76 61 72 20 77 69 6e 64 6f 77 73 69 7a 65 3d 24 77 69 6e 64 6f 77 2e 77 69 64 74 68 28 29 3b 24 28 22 2e 6d 6f 64 61 6c 2d 6c 69 6e 6b 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6d 6f 64 61 6c 43 6f 6e 74 65 6e 74 3d 24 28 22 23 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 22 29 3b 76 61 72 20 70 6f 73 74 5f 6c 69 6e 6b 3d 24 28 74 68 69 73 29 2e 6e 65 78 74 28 29 2e 68 74 6d 6c 28 29 3b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 24 28 27 2e 6d 6f 64 61 6c 27 29 2e 61 64 64 43 6c 61 73 73 28 27 73 68 6f 77 27 2c 33 30 30 2c 22 65 61 73 65 4f 75 74 53 69 6e 65 22 29 3b 24 28 27 2e 6d 6f 64 61 6c 2d 77 72 61 70 70 65 72 27 29 2e 61 64 64 43 6c 61 73 73 28 27 73 68 6f 77 2d 77 72 61 70 27 2c 33 30 30 2c 22 65 61 73 Data Ascii: {var windowsize=$window.width();$(".modal-link").click(function(e){var modalContent=$("#modal-content");var post_link=$(this).next().html();e.preventDefault();$('.modal').addClass('show',300,"easeOutSine");$('.modal-wrapper').addClass('show-wrap',300,"eas
2024-05-06 16:42:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.11	49903	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:31 UTC	613	OUT	GET /wp-content/uploads/2017/12/slider3.jpg HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:31 UTC	746	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:31 GMT Content-Type: image/jpeg Content-Length: 68363 Connection: close Last-Modified: Tue, 09 Oct 2018 23:31:39 GMT ETag: "5bbd3a5b-10b0b" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RjSs7jFeDMhggObfhWLBuuYj8ZEu9qMn0Famc%2FXvPSVEgO2ibs3aQJT4WmebSXQz7KBDy4UOzttL%2F5O%2B1WfvNr%2F%2FTE0W1fgR7QkVbLUD%2FEbeUHmMmnvewvofUgwk1cncl18%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c8b38b9d9e1-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:31 UTC	623	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 1f 43 6f 6d 70 72 65 73 73 65 64 20 62 79 20 6a 70 65 67 2d 72 65 63 6f 6d 70 72 65 73 73 ff db 00 84 00 08 08 08 08 08 08 09 0a 0a 09 0c 0d 0c 0d 0c 12 10 0f 0f 10 12 1b 13 15 13 15 13 1b 29 19 1e 19 19 1e 19 29 24 2c 24 21 24 2c 24 41 33 2d 2d 33 41 4b 3f 3c 3f 4b 5b 51 51 5b 72 6c 72 95 95 c9 01 08 08 08 08 08 08 09 0a 0a 09 0c 0d 0c 0d 0c 12 10 0f 0f 10 12 1b 13 15 13 15 13 1b 29 19 1e 19 19 1e 19 29 24 2c 24 21 24 2c 24 41 33 2d 2d 33 41 4b 3f 3c 3f 4b 5b 51 51 5b 72 6c 72 95 95 c9 ff c2 00 11 08 03 b1 08 98 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 08 01 01 00 00 00 00 f9 45 06 28 55 ba 3c bf 0f e9 Data Ascii: JFIFCompressed by jpeg-recompress))$,$!$,$A3--3AK?<?K[QQ[rlr))$,$!$,$A3--3AK?<?K[QQ[rlr"E(U<
2024-05-06 16:42:31 UTC	1369	IN	Data Raw: ce ec 65 95 58 73 e5 cb e3 fa 1d db 3a 33 a2 d2 d2 d7 37 cc 7d 4f 68 ae 7e 1a d9 67 2e f6 5e 7e 3b 7b b8 3a 72 b6 52 79 9d ff 00 29 7e 87 67 44 70 7a 34 69 cb 72 6b e3 f4 a6 8c fa fb e2 1f 29 e9 fa 28 6b d1 cd e7 fb 17 a4 84 24 42 42 11 10 88 44 48 88 44 22 42 10 90 4b 21 20 48 42 20 88 42 41 04 f2 b5 e9 ec c3 3d 19 75 2a 22 4b 92 d5 fa 5a a2 96 44 4a a6 8f 37 c1 fa 7f 62 41 70 e6 cb 9f c6 f4 7b ef 46 c2 a9 55 4b 5a fe 4f e8 7d 61 7c a6 1b 97 97 79 38 7b b8 b9 fd 0d 94 0a f2 bc 2e 5f b1 eb c4 be 77 7e 63 4d df 1e 5f a3 b2 68 cb dd c5 1f 29 ea 7a 29 0b cd 87 8f d7 d7 bb 74 44 48 44 82 22 10 90 84 88 88 44 84 22 24 10 21 21 09 04 20 48 44 22 4a 97 5f 95 86 3d 19 eb c2 f5 2a 44 8b 6d 55 fa 51 55 42 44 15 75 f0 fc d7 b5 f4 77 13 0e 7b a3 c8 ea f5 5b b7 0a 53 Data Ascii: eXs:37}Oh~g.^~;{:rRy)~gDpz4irk)(k$BBDHD"BK! HB BA=u"KZDJ7bAp{FUKZO}a\|y8{._w~cM_h)z)tDHD"D"$!! HD"J_=DmUQUBDuw{[S
2024-05-06 16:42:31 UTC	1369	IN	Data Raw: 44 88 21 11 10 89 01 20 84 22 08 44 20 2f 9b c9 a3 ab 0d 9a ae 3d 1b d2 12 55 b5 72 10 20 fa 15 a5 15 4a 16 70 e3 75 78 9b ba fd 0c f6 ed 57 37 97 e5 fd 47 74 0a 55 5a 5a ab e6 f0 ef d3 d1 69 c1 8f 9b f4 7c bd a5 0d 7e 77 a1 05 e4 e7 f2 7c df b9 d9 20 63 c3 e9 d4 1f 37 bf d6 e5 d7 d9 35 f5 73 7b dd 52 22 24 24 39 39 f0 f1 bd ac 77 f5 54 48 44 42 22 42 12 22 10 84 44 22 10 84 42 08 44 84 20 0f 2b 46 9e 99 96 b6 3d 5b 51 12 32 ab 6a 82 08 7d 0a d1 45 2a 97 1e 1c 72 d1 e2 74 76 f6 db d5 6a b4 f9 fe 27 d0 7a a0 aa 5a aa b6 df 9b e8 d7 bb 2a 70 76 34 78 fe 8f a8 b2 98 79 9e 90 46 7e 77 8f e6 7d b6 dc 6c 09 c1 e9 d1 f3 db fa f5 f4 79 be b1 ab 7b e8 71 88 89 0c 48 f3 a7 2f 0f ab 87 76 ca 88 88 84 44 12 12 42 11 08 48 22 10 84 12 09 04 84 20 5c 3c 9d 7a b7 ed c3 Data Ascii: D! "D /=Ur JpuxW7GtUZZi\|~w\| c75s{R"$$99wTHDB"B"D"BD +F=[Q2j}Ertvj'zZpv4xyF~w}ly{qH/vDBH" \<z
2024-05-06 16:42:31 UTC	1369	IN	Data Raw: 13 d2 ea d9 36 7a 19 0a aa 28 41 2a d9 cb e2 68 fa cd f1 7c be 3c fc fd fd 0a b2 56 5e 5f 6f 0f 56 c5 b6 93 cc 9e d1 2e 5e 57 3f 81 f5 5e 8e 31 3c 0d fd 5c fd b6 b3 52 ea d1 dd 38 3d 06 0d 1b b6 fd 2e 11 12 22 24 23 9f 86 f1 f3 7a 98 ef ea a4 42 22 22 09 08 44 21 11 04 21 08 84 10 38 38 34 ed cb 66 ab 8f 4e e8 86 2b 6d 64 c8 10 81 09 62 08 fa 02 94 e6 e3 b6 78 b8 7a 3d 7b 26 5e 8e 54 52 a9 45 84 14 cb 9b c7 f2 7e b7 d0 97 e6 77 e9 e3 f4 56 91 53 cc cb 7e d3 25 51 e7 f3 7b c5 79 7a 3c 1f a7 f5 30 3e 7b 77 7d d5 cb e8 aa aa b0 e5 ef e6 cf a3 09 39 f0 fb 0c f1 49 09 09 10 79 da de 3f 77 46 1d db 6a 11 09 12 08 88 42 10 88 84 21 04 21 08 b3 cc e5 e7 ea b8 17 a7 34 44 96 db 6e 40 10 21 04 21 1e fa a9 79 39 2d d7 e4 63 e8 f4 6e 99 7a 39 94 a2 d2 8a 42 59 56 ea Data Ascii: 6z(A*h\|<V^_oV.^W?^1<\R8=."$#zB""D!!884fN+mdbxz={&^TRE~wVS~%Q{yz<0>{w}9Iy?wFjB!!4Dn@!!y9-cnz9BYV
2024-05-06 16:42:31 UTC	1369	IN	Data Raw: 80 84 21 02 08 41 0d b9 ea f2 a7 76 ed ec 76 fa 39 2a 95 4a a1 54 aa a5 2a ad cb e5 b6 39 b7 a1 71 f3 f6 e8 d5 ed e5 e6 f4 64 ca c8 a4 06 59 e5 e5 6d cf 4b c1 f4 fd 6c 38 b7 f7 40 02 22 73 74 d1 c9 db 53 4c d9 e8 7b f3 14 48 90 48 88 71 72 35 f9 1e cd c3 b7 7e 44 21 10 90 22 10 84 40 42 f1 79 9a 57 68 ea da 92 24 b7 25 b9 51 04 10 44 10 40 84 10 df af ca c7 bb 76 f6 39 fa 5b 02 d2 aa 8a a5 28 aa aa ab 78 3c 7d 97 93 aa 44 c7 83 b5 a7 4f 3f a5 ab a0 a0 40 36 df 2f 6f 67 36 8d bf 3f e8 fa ec 78 f2 f4 00 21 10 e5 ea a7 1f 56 c4 6a c2 fd ae 11 22 22 22 12 13 c9 97 8b 97 d5 98 7a 59 e5 04 42 21 04 24 10 88 96 0b e7 70 f3 2e cc f6 75 2c 48 8b 91 72 b4 12 58 09 08 20 81 08 41 b7 c8 c3 bb 6f 4a 3d 3d 85 55 15 54 52 a9 54 aa a5 b9 7c da ea bb 24 63 e6 f6 ad c3 9b Data Ascii: !Avv9JT9qdYmKl8@"stSL{HHqr5~D!"@ByWh$%QD@v9[(x<}DO?@6/og6?x!Vj"""zYB!$p.u,HrX AoJ==UTRT\|$c
2024-05-06 16:42:31 UTC	1369	IN	Data Raw: 40 25 88 c3 9f ad cd df bf 56 8d 3f 43 ea e1 0c 48 88 88 48 87 99 a2 e3 e6 f4 f5 e3 af d0 e8 c8 22 08 82 2f 2f 93 a7 5c d9 b8 ed cd 09 8c cf 2a 5c 95 03 10 81 10 22 04 41 02 10 96 23 d7 aa ab 42 8b 42 8a aa 55 29 4c af 85 cf 72 f3 fa 76 55 52 07 2e 1d 31 62 4c 5c 1a bb b5 6a d7 db bf 1e 90 71 6a dd e1 ee f6 f2 c0 02 84 e4 dd d4 01 8a 72 f5 56 8e be 8e 6c 73 fa ec 71 48 48 44 24 44 30 f1 f2 69 f2 fd 6c f1 c3 d4 d9 41 08 48 a7 0f 9b ce bb 33 67 d7 9c c4 91 95 b5 6d 08 22 04 18 82 11 02 10 22 02 0f 59 6a a9 4a 51 4a 2a a8 aa a5 32 9f 2b d0 d1 87 4a d0 40 e0 e8 cd 48 93 cd d5 dd 5a f5 63 bb b3 71 17 87 56 ff 00 0f 67 bb 70 28 0a 27 35 ed 02 43 9b 66 d3 4f 46 dd 5c bf 63 be 49 08 90 88 88 83 8f 85 78 f8 fd 79 86 5e 9e 60 82 11 5e 67 17 1e dd 5d 39 6c ec 58 c4 Data Ascii: @%V?CHH"//\\"A#BBU)LrvUR.1bL\jqjrVlsqHHD$D0ilAH3gm""YjJQJ2+J@HZcqVgp('5CfOF\cIxy^`^g]9lX
2024-05-06 16:42:31 UTC	1369	IN	Data Raw: 42 21 a3 83 19 ab 87 77 5d 9c 3a 3a 37 e7 33 ec a9 23 1c 95 95 b6 88 81 21 20 88 b2 52 44 b0 88 22 08 10 10 20 f5 28 a2 95 4a 15 54 a5 2a ae 5e 57 95 b4 e7 e9 16 00 30 e1 e8 d3 87 50 aa 01 08 92 4c f2 f3 67 a5 e0 e8 f7 b0 6f 92 89 41 43 6f 7d c7 83 05 4e 7c f7 f3 74 e6 11 35 fd be 32 44 24 11 11 04 45 f3 b4 62 e6 e2 ef d9 e7 4e ad b9 63 b3 b1 11 25 c8 b7 25 08 82 44 ac 48 45 92 a4 08 24 21 04 01 04 20 7a 85 15 45 28 aa 55 29 4a b7 2f 95 d9 5a 73 d9 28 08 1a 79 32 c7 a8 55 01 04 44 93 3c bc c7 a3 e0 eb f7 33 e2 cf a4 2c 28 03 3f 43 37 06 a2 b4 4c e7 50 43 47 d3 7a 58 c8 88 42 22 22 10 63 e5 49 8f 27 3f 2f 47 4e fd 98 6e ea 44 49 72 aa ca 88 12 08 12 20 90 4a 88 21 08 11 02 04 08 27 aa 50 b2 ad 14 5a 55 29 45 b9 71 f8 1b d7 97 a4 a1 00 71 6a 75 8a a1 2c 20 Data Ascii: B!w]::73#! RD" (JT*^W0PLgoACo}N\|t52D$EbNc%%DHE$! zE(U)J/Zs(y2UD<3,(?C7LPCGzXB""cI'?/GNnDIr J!'PZU)Eqqju,
2024-05-06 16:42:31 UTC	1369	IN	Data Raw: e2 db d9 d5 8f 4f 4a 24 39 39 b2 b3 97 ce f7 13 56 af 6b 3c c0 82 20 88 21 08 42 09 2c 09 00 44 08 81 02 12 fc f7 ab b7 b3 ba c5 14 aa b2 94 52 ae 5e 77 91 b0 e7 dd 54 0d 5c 3d b6 2b 93 2d f0 b4 80 81 02 11 76 eb f2 73 f7 3c 0e 3f 53 d1 c3 08 12 01 86 bb d3 60 a2 8a 2e a9 bc 53 52 fa 9f 47 8c 88 41 7c ee 7f 17 5e ce cd d7 af 7c 84 c5 94 f3 06 1c 9a 7d 54 d1 7d 9c aa 88 22 10 42 22 20 31 01 04 21 2a 20 84 08 10 3c 5d 3b bd 2d 9e 87 4c 0a 55 14 52 95 96 5f 31 6a 73 f4 0a 1a b8 7b 28 38 f7 6c 16 a0 40 92 cb 08 4c b6 e9 f2 f6 7b 7e 07 1f a7 e8 cd 40 48 8a 63 af 1e ab 15 45 05 63 ab a2 8a 6a c3 3f b6 48 80 79 7a 3c 4d 3d 7e 86 73 b3 74 91 25 56 9f 37 39 74 79 fd bd 73 1e 7e af 51 95 11 02 20 24 18 90 24 02 20 80 82 10 81 02 09 e5 73 dc 3b fa f7 7a 59 a5 0b 4a Data Ascii: OJ$99Vk< !B,DR^wT\=+-vs<?S`.SRGA\|^\|}T}"B" 1!* <];-LUR_1js{(8l@L{~@HcEcj?Hyz<M=~st%V79tys~Q $$ s;zYJ
2024-05-06 16:42:31 UTC	1369	IN	Data Raw: 71 e5 b9 16 84 10 40 82 12 ed cb 93 87 6f b7 e0 f1 f5 fa b9 f3 0a 01 65 04 01 8e bc ba 52 51 a7 ab d3 42 f3 f8 da fa 76 ec f7 f0 dd d0 92 48 a5 b7 24 10 84 62 63 e1 a9 cd c1 ec c9 35 74 fa 4c b2 54 21 08 41 10 40 84 25 84 04 b2 10 96 04 13 72 aa aa 61 c4 4d 3c fa f4 f5 3b 3a 3a 3d 0c d5 f2 bb ac 73 74 b1 e3 e8 cd 2a c1 06 1c bb 36 0a b0 40 42 04 20 dd 78 f8 f6 fb 3e 1f 1f 5f a9 9f 38 02 82 84 11 49 ad d1 96 25 6b c7 dc 2b 93 93 4e 5b 7c ee 6f b9 ea d9 13 19 15 6d b4 44 20 90 8e 3f 2f 33 0e 3d 7e 9b 19 ab d1 e9 cb 2b 42 08 84 11 02 10 40 81 01 21 02 04 0d aa 64 55 4e 4d 19 49 c9 86 1a ba b2 ee d9 db db 7c cf 27 61 a9 b6 71 6f d8 94 08 1a 74 6d cc 50 42 04 10 21 1b ef 17 26 df 63 c4 e3 ea f5 73 e7 82 81 40 a1 88 53 0c 37 ec 91 70 d5 ea f4 af 06 8d 3b 32 e0 Data Ascii: q@oeRQBvH$bc5tLT!A@%raM<;::=st*6@B x>_8I%k+N[\|omD ?/3=~+B@!dUNMI\|'aqotmPB!&cs@S7p;2
2024-05-06 16:42:31 UTC	1369	IN	Data Raw: 5f 27 8b 3f 63 6e ad 40 a0 50 50 51 4d 1c 9b 3b 9c 7a b1 bb ae 12 63 ea f6 dc d9 72 e9 ba 7d 4f a5 c2 22 10 48 10 82 22 22 17 cd e0 cd 71 e6 e1 f6 49 8e 1e cb 2b 90 09 16 24 09 52 04 40 40 81 20 40 65 62 ad 15 6a 15 96 7f 3d af 3d 38 ed d3 bd 8e 8d 59 26 ad f4 c3 0c fb b6 44 73 e1 b3 24 5a 21 01 08 08 21 97 43 c9 c7 7f a7 e4 f1 e7 eb ed d7 a8 01 45 02 82 97 97 9f 77 66 be 5c 30 cf 6e 4c 35 ec d7 af d3 f5 32 ca e3 c4 c3 5f db 5c 51 08 21 10 42 08 88 84 f1 30 ca cd 7c b8 7a 72 30 cb d7 c7 2c a8 20 c4 45 89 58 82 08 21 00 c4 10 0b 56 8a aa b6 2a e1 f2 fd 5a b0 df a7 3d 84 c3 46 19 4d 7b 3a 35 e5 a6 61 d1 d9 64 e5 cb 3a 8b 50 22 02 58 80 84 cf 7b c9 c7 7f a7 e5 71 e5 eb ee d7 a8 94 02 8a 0b 2a 9c 7a ba 37 4e 49 86 cd a2 69 cf 63 5f 57 af b3 2b c3 86 3a 7e 87 Data Ascii: _'?cn@PPQM;zcr}O"H""qI+$R@@ @ebj==8Y&Ds$Z!!CEwf\0nL52_\Q!B0\|zr0, EX!VZ=FM{:5ad:P"X{qz7NIic_W+:~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.11	49905	89.187.173.23	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:31 UTC	2457	OUT	GET /api/img-dscr/v2/D0JSP1avgg/3527403/RLqwMG7OTpTSzPtD/alts.json?dto=%7B%22sorted%22%3A%5B%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fabout-thumb.webp%22%2C%22alt%22%3A%22RMS%20Hospitality%20Group%20Let%20Us%20Take%20Risk%20off%20Your%20Table%22%2C%22dir%22%3A%22RO%22%7D%2C%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fgoogle-review.webp%22%2C%22alt%22%3A%22Leave%20a%20review%20on%20Google%22%2C%22dir%22%3A%22RO%22%7D%2C%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fistock-1350660376.jpg%22%2C%22alt%22%3A%22How%20Can%20Pubs%20Improve%20Safety%3F%20A%20Primer%20for%20Insurance%20Professionals%22%2C%22dir%22%3A%22RO%22%7D%2C%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fistock-182417552.j [TRUNCATED] Host: cdn77.api.userway.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:31 UTC	767	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:31 GMT Content-Type: application/json; charset=utf-8 Content-Length: 1942 Connection: close X-Service-Version: img-dscr-srv-727604a1 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD, PUT, PATCH, POST, DELETE Access-Control-Allow-Headers: * Access-Control-Expose-Headers: Content-Range, Content-Length, ETag, Content-Type Access-Control-Max-Age: 3000 Cache-Control: max-age=604800 ETag: W/"796-Goiuc8D3JhepdwJS9qoFdh8Fk7c" Vary: Accept-Encoding X-77-NZT: EggBWbutFQFBCAGckjviAYE X-77-NZT-Ray: 256bf61918c98fba770839663db61f30 X-Accel-Expires: @1715618551 X-77-Cache: MISS Server: CDN77-Turbo Alt-Svc: h3=":443"; ma=86400 X-Cache: MISS X-77-POP: miamiUSFL Accept-Ranges: bytes
2024-05-06 16:42:31 UTC	1942	IN	Data Raw: 7b 22 70 61 79 6c 6f 61 64 22 3a 7b 22 6d 69 73 73 69 6e 67 41 6c 74 73 22 3a 5b 7b 22 73 72 63 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 73 74 72 61 74 6f 73 70 68 65 72 65 77 65 62 73 69 74 65 73 2e 63 6f 6d 2f 73 6f 75 72 63 65 2f 73 69 74 65 73 2f 33 63 35 31 37 64 64 36 2d 36 66 61 36 2d 34 33 38 61 2d 38 64 34 37 2d 65 37 61 39 63 64 63 61 33 65 33 62 2f 69 6d 61 67 65 73 2f 61 62 6f 75 74 2d 74 68 75 6d 62 2e 77 65 62 70 22 2c 22 61 6c 74 22 3a 6e 75 6c 6c 2c 22 61 70 70 72 6f 76 65 64 22 3a 66 61 6c 73 65 2c 22 64 65 63 6f 72 61 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 73 6b 69 70 70 65 64 46 6f 72 52 65 61 64 4f 6e 6c 79 22 3a 74 72 75 65 2c 22 66 6f 75 6e 64 43 61 63 68 65 64 52 65 73 70 6f 6e 73 65 22 3a 74 Data Ascii: {"payload":{"missingAlts":[{"src":"https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/about-thumb.webp","alt":null,"approved":false,"decorative":false,"metadata":{"skippedForReadOnly":true,"foundCachedResponse":t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.11	49904	44.234.218.238	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:31 UTC	617	OUT	GET /api/a11y-data/v0/page/https%3A%2F%2Fwww.rmshg.com%2F/DESKTOP/WIDGET_OFF/status HTTP/1.1 Host: api.userway.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.rmshg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:32 UTC	538	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:31 GMT Content-Type: application/json; charset=utf-8 Content-Length: 77 Connection: close X-Service-Version: seo-w-fa0246c1 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD, PUT, PATCH, POST, DELETE Access-Control-Allow-Headers: * Access-Control-Expose-Headers: Content-Range, Content-Length, ETag, Content-Type Access-Control-Max-Age: 3000 Cache-Control: no-cache, no-store, must-revalidate ETag: W/"4d-wYLRLrbWidRwnfhEvoB+Y2U04NY" Vary: Accept-Encoding
2024-05-06 16:42:32 UTC	77	IN	Data Raw: 7b 22 70 61 79 6c 6f 61 64 22 3a 7b 22 73 74 61 74 75 73 22 3a 22 43 4f 4e 54 52 49 42 5f 50 52 45 53 45 4e 54 22 7d 2c 22 70 61 79 6c 6f 61 64 54 79 70 65 22 3a 22 50 61 67 65 43 6f 6e 74 72 69 62 53 74 61 74 75 73 44 74 6f 22 7d Data Ascii: {"payload":{"status":"CONTRIB_PRESENT"},"payloadType":"PageContribStatusDto"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.11	49906	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:32 UTC	628	OUT	GET /wp-content/uploads/2018/10/insurance-inspections2.jpg HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:32 UTC	747	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:32 GMT Content-Type: image/jpeg Content-Length: 191976 Connection: close Last-Modified: Tue, 09 Oct 2018 23:35:36 GMT ETag: "5bbd3b48-2ede8" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yX2bVi3Xwp5cmpYgBxdECe05MExhi%2BsLN7gARhKYlX22KzJfLgDSrcyC8h5%2BaaOPUALrW0%2Fvs7qbRBWv%2BVkxwkWPHRMX99zm%2BbpGU8oX0ZpFM2BeiGCrn20W5cTS0g%2FEMX8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c908d69a67a-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:32 UTC	622	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 1f 43 6f 6d 70 72 65 73 73 65 64 20 62 79 20 6a 70 65 67 2d 72 65 63 6f 6d 70 72 65 73 73 ff db 00 84 00 04 04 04 04 04 04 04 04 04 04 06 06 05 06 06 08 07 07 07 07 08 0c 09 09 09 09 09 0c 13 0c 0e 0c 0c 0e 0c 13 11 14 10 0f 10 14 11 1e 17 15 15 17 1e 22 1d 1b 1d 22 2a 25 25 2a 34 32 34 44 44 5c 01 04 04 04 04 04 04 04 04 04 04 06 06 05 06 06 08 07 07 07 07 08 0c 09 09 09 09 09 0c 13 0c 0e 0c 0c 0e 0c 13 11 14 10 0f 10 14 11 1e 17 15 15 17 1e 22 1d 1b 1d 22 2a 25 25 2a 34 32 34 44 44 5c ff c2 00 11 08 04 00 04 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 00 07 08 ff da 00 08 01 01 00 00 00 00 f1 52 30 ed 2f 30 03 14 ae Data Ascii: JFIFCompressed by jpeg-recompress""%%424DD\""%%424DD\"R0/0
2024-05-06 16:42:32 UTC	1369	IN	Data Raw: 84 11 9a f2 71 c6 e7 14 a8 fe 11 a4 12 4d 8f 5b 86 17 31 23 8a d2 c1 94 90 26 48 10 ac 34 fb 9f 4e b5 cf 79 df 9b 53 86 d3 d3 bd 57 5d 21 c4 ee 7a f4 78 c0 e3 4b 72 b9 1c 8c 05 64 3f 39 c0 65 23 29 55 1d dc fe 21 5b 63 3a 54 38 fd d6 d6 35 4a d1 74 56 be 30 53 9c ee 96 27 bd 5d e0 e2 7b 4a 22 73 64 aa a3 cc e9 2d e5 74 d5 95 60 c2 bc 45 8c 20 c5 74 9b 62 c3 a5 25 d6 a7 7b ad d2 5f c9 e8 b9 1f 30 f3 8a 9d 57 b5 7a 3c c7 2b 5a 45 8c 30 8d 1a 59 0f ee e2 95 3b 9a 3a ac 17 99 e4 23 29 15 cf 62 b9 d2 27 c8 d0 e5 a0 92 65 a5 49 d5 ee 58 cd 63 47 19 84 e4 21 08 c3 1b c1 23 c9 1b b9 c6 e9 93 23 c6 2c 82 3c 3d a1 00 8b 28 ad 79 5a 20 c4 68 da 0b 6b 71 40 d9 fa a6 e2 fe 61 39 ed 41 56 66 f0 d4 7e cd a8 50 71 1e ee 50 89 06 35 29 9d ce 25 3d d2 73 5a f0 d3 63 b1 98 Data Ascii: qM[1#&H4NySW]!zxKrd?9e#)U![c:T85JtV0S']{J"sd-t`E tb%{_0Wz<+ZE0Y;:#)b'eIXcG!##,<=(yZ hkq@a9AVf~PqP5)%=sZc
2024-05-06 16:42:32 UTC	1369	IN	Data Raw: cc e5 6f 3c f2 0b 2a 4b da 15 f9 d4 87 30 1e db 57 cc 94 a5 e2 2c 37 f4 af 55 db 5f ce 39 52 b3 23 a4 bb 3b 55 b1 87 cd 71 3a ba 77 32 6b 85 dc bc a8 f6 73 7c e7 c2 a2 2a ca 1b 7a 58 5d 23 be 8f d2 57 4b 99 e7 75 37 57 5d 52 f7 46 14 97 16 f6 d5 ae 68 ca 36 b9 ce 1b 1d 8f f1 ba e5 e7 13 8a e0 b4 a9 32 41 4e 75 41 fc e7 21 ea 1e 99 2e 4c e2 71 0c e8 81 61 74 5e db a0 9e f2 f6 7f cc 36 db c9 bc 89 d0 63 bb 99 1c 75 9a d9 0e 6f 22 72 a3 bb 95 3c f3 25 e4 dd ce 7d a0 e0 ab 1f cf fa 5b 4d 8a 97 ad 6d 1f 9f 96 41 ac c5 04 44 96 79 f7 b3 5e 83 2f 23 de bc ad 8d 95 f1 08 1c af 77 3d 8f e5 2c a9 0f 9b a9 cd 33 e7 47 b9 59 26 59 e5 94 ae 74 98 a0 6b 76 17 fe 9b 6c 58 91 b2 f8 89 9e c7 a4 2a 35 59 4f 1f 9c d8 f5 d0 af ee bb a5 bb bb bb b9 60 ce c7 79 bf 95 a9 d8 56 Data Ascii: o<K0W,7U_9R#;Uq:w2ks\|zX]#WKu7W]RFh62ANuA!.Lqat^6cuo"r<%}[MmADy^/#w=,3GY&YtkvlX*5YO`yV
2024-05-06 16:42:32 UTC	1369	IN	Data Raw: fc 6f 82 6e f3 be ee bf 31 ef fd ec 3e 11 7f b6 c4 82 da 83 db 8c bd dc 0f 36 f4 97 f3 2a 3e 6a 8c e7 98 d2 6d f4 9b eb d2 ca 7b 09 dc 00 a3 e4 c7 85 e2 7d 49 0d fd cf 7b 57 c0 5d 29 ea 8d 10 21 35 48 9d ce 28 d7 5f e9 18 1c e7 d2 9e ce c7 61 68 a3 46 63 db 12 54 6b 3f 40 93 9d c5 5c 58 61 e3 fb ed 86 65 9a 4c 47 a1 47 c0 7a 20 95 e3 7f 8d 4d 8d 94 f6 9d 26 53 55 ce cd 5a d9 50 4c ca 6e 08 5a bb 4e 5e f1 fb 0b 23 5d 5a fc cb 9f 42 3c f2 ed 75 3e 87 7c 59 0f 47 f7 2b 04 19 6f 89 4f f3 e8 55 5c e5 33 1b e3 b5 2e 55 57 46 10 18 fe 2b 44 f6 3b ac fd 4f 07 9a f7 cf a4 d8 1f 3d 81 26 1e b4 34 f0 a8 96 d2 4c 4a 8b d1 e6 63 db d2 eb 34 57 7a 7a 9b a7 c1 c7 6f 63 d7 db 57 e0 7c 79 76 79 1d 67 af 1e f1 cc 8f 23 9b 23 90 9c 83 38 fc 5c 7e a0 4c e6 b7 e6 dc da a9 0d Data Ascii: on1>6*>jm{}I{W])!5H(_ahFcTk?@\XaeLGGz M&SUZPLnZN^#]ZB<u>\|YG+oOU\3.UWF+D;O=&4LJc4WzzocW\|yvyg##8\~L
2024-05-06 16:42:32 UTC	1369	IN	Data Raw: 46 e5 4e 48 95 95 34 b8 0a 15 f9 8d ac 8e 06 3d e6 2c ad 86 b6 3f 92 47 91 69 b1 de fd 37 9a ca e9 f0 81 63 1f 22 de ff 00 63 49 e4 fa 7a 9c 0c 6b e7 60 05 e9 d5 fe 61 70 4a 87 59 42 ad b6 16 e0 7e 69 a9 f4 0d 75 4d fe 34 5a 16 1c f4 95 90 e8 b3 3a 6d d5 74 6c 80 d0 72 ab fa 6e ff 00 cf bd 37 cb 5e e5 de 64 23 f3 da 8e 75 84 ed 3e a7 43 ae b6 2b f9 ce 56 b1 fc 88 0a fc ec 5c 3e 4d 7e 61 2d 68 a2 f2 bd c4 77 3a c7 7b 9d a5 8d a8 fa bf 7f e7 35 5b 5f 3c aa 67 30 0f fa 58 9e 7f e3 94 29 3e d7 23 17 40 7c 77 aa 51 e6 b3 3b 00 e4 74 b2 73 56 de e7 93 5f 4f f0 cf 6c b0 f1 1c 17 a3 6a 7d 0a a3 ca 1f 3b 25 a4 b5 99 aa c5 62 34 95 b4 71 80 ee f4 6c 34 7f 4c c2 41 eb 2b ec af 2a cd 88 56 bc b7 da dd 8e c6 ec e4 5e 7a a3 53 b9 16 36 7a 9b 3b e7 ab f2 c6 eb ce dc c8 Data Ascii: FNH4=,?Gi7c"cIzk`apJYB~iuM4Z:mtlrn7^d#u>C+V\>M~a-hw:{5[_<g0X)>#@\|wQ;tsV_Olj};%b4ql4LA+*V^zS6z;
2024-05-06 16:42:32 UTC	1369	IN	Data Raw: 47 49 8c d7 3f 9e f9 81 55 27 d7 5e 95 e5 71 7b d2 fc 52 ba b6 31 e0 53 43 98 c8 40 94 10 7a 6d 56 68 b5 12 d2 17 af f9 a4 1b fd 3e aa ee 36 36 b2 b2 87 d1 bd b3 77 f3 97 9c f3 e2 f3 f9 26 b8 04 ee 2c b8 e4 bf 8d 5e d7 af 39 85 7f b7 78 8b b9 a4 55 45 21 49 a4 d6 e8 2d ed 27 49 43 c5 43 4d b6 3a 25 7f 8e f9 b7 c9 a0 5e 72 f1 85 dc 66 23 8a a8 e5 37 d9 be c5 d4 99 5d 0c bf 37 cf 57 52 da d6 65 23 dc 3f 3b 03 51 33 5d e4 37 f1 68 35 dd 93 f4 18 d8 9d a6 a3 27 13 41 86 d1 6a bd 33 47 67 f2 ee 14 87 e6 b9 f6 ce 58 83 4e 71 2e 1f 1e 01 08 f7 b5 fd cf 6e ab 59 e5 ea d2 ab 48 e3 35 d7 9a bd 1d ac c9 c4 53 1c 2c d1 5c bd 16 07 8d f9 af c9 c1 4e 7b 91 a4 45 7b 95 1e ab ce 2f d7 1e ed e6 3a fa ac 6c ca ca 0c b8 ea 6d 9b 95 8f 78 6a 20 7b 5e 13 0f 71 7f 45 1b 63 55 Data Ascii: GI?U'^q{R1SC@zmVh>66w&,^9xUE!I-'ICCM:%^rf#7]7WRe#?;Q3]7h5'Aj3GgXNq.nYH5S,\N{E{/:lmxj {^qEcU
2024-05-06 16:42:32 UTC	1369	IN	Data Raw: 5f 3c d5 fd 51 f3 c5 0c b8 44 5e 23 88 f7 18 86 03 f9 eb ce 57 f7 14 d6 b1 9f 6e 27 39 fb 3f a1 7c 1a 9a aa d2 d6 5b 91 92 19 55 55 a4 f6 a9 d3 a9 fc 3f 0e 05 f9 8c b6 3a 2d 9d cc 3a 0a 0a c8 e5 00 a6 57 58 53 71 f8 1c f3 4f fa 3f c2 e8 53 ed 39 7f 2a 45 b0 36 7e 37 b0 8b c3 46 ac bd 9d 98 e7 3f 8d d6 f5 c3 96 e7 23 fa 3b b4 f4 45 bb a4 0b 1e e5 7c c0 93 88 fb 78 d1 55 1e a4 47 31 fc 67 71 a7 03 88 bc ff 00 5c f7 2f 0f f3 1b 9b 09 67 31 2d 62 e7 e3 de fb 0e c5 be 6b e2 11 02 9f 35 48 f4 af 4e d6 4b af c7 e7 28 eb 6b 6a a3 a0 c6 34 7d b3 ca 77 75 e7 9f 82 47 d5 7e ad f3 7d 93 f0 b5 17 de a5 80 f1 d4 24 bd 66 29 08 e4 6c a2 0d cd fa cf 5f 9c 99 ad 9d f3 2e 57 0e 45 eb 1f 64 f1 02 38 64 94 02 f1 dc f6 15 ae 77 2b 5f dc a5 92 29 68 9e b7 e4 c7 57 c8 b8 fa 6a Data Ascii: _<QD^#Wn'9?\|[UU?:-:WXSqO?S9*E6~7F?#;E\|xUG1gq\/g1-bk5HNK(kj4}wuG~}$f)l_.WEd8dw+_)hWj
2024-05-06 16:42:32 UTC	1369	IN	Data Raw: 84 9b 10 5c ae 6f 72 7a 1e 01 8a af 52 27 39 5c 9a b1 7a b4 af 3c f5 3c 0f 96 b8 dc 45 6a 19 1c af 4b 6a ee 7a a1 3b 9f ce ee 26 eb 08 e2 a1 1c af 92 d6 f1 39 48 d9 64 98 43 ce 97 21 c1 ae 86 6d 5f d2 16 15 d7 8c c4 78 2e 7b 9b f3 a4 fb 49 ef 89 5b 5a e5 14 96 a9 f7 9e e9 79 e4 be 47 4e c4 1a 16 3e cb 1c ae 4e 6f 29 7d 0f cd dc ee e9 81 73 fb b9 7b d8 34 76 db 6f 9b f0 8e 2a ab da ee 73 4a ef a2 a2 78 4f b7 79 0c 07 28 de ab ca 84 55 79 14 85 27 34 cf 1b fb b9 7a ff 00 92 44 f9 af 1c 5a 95 b2 dd 7d 0f 94 ae d2 ec 30 bf 34 d6 11 9f 3b dd 9a 6b 99 0e 8f 96 44 95 1b 6d f4 76 99 ac d4 76 38 62 56 a9 06 8e 20 9e a9 e8 78 98 ad e5 9d 08 9c e7 aa 2c c5 f6 a0 79 2d 71 39 ee e2 23 1f ea 9a 1d 13 fc cf d3 2a 60 e3 32 5a 54 c9 6f 96 a2 bc 51 dc e7 c9 1c 96 b9 57 8e Data Ascii: \orzR'9\z<<EjKjz;&9HdC!m_x.{I[ZyGN>No)}s{4vosJxOy(Uy'4zDZ}04;kDmvv8bV x,y-q9#`2ZToQW
2024-05-06 16:42:32 UTC	1369	IN	Data Raw: 07 2a c9 51 b3 d9 fc d8 fb 9a e5 94 1f 2c e0 c4 1b 66 58 ba d2 14 ba c6 d7 43 e7 be 7c c6 33 d1 7c ed 2e af 22 e1 23 bb 91 c5 ee e6 91 19 a9 de f8 c9 05 32 3f 39 56 c2 c6 1c 07 25 8f da 35 bf 36 6a 6a e8 36 60 a0 d6 c8 cc 68 74 f8 89 9e 99 81 77 a4 47 cf ca f9 d9 dc ab d7 df 64 62 75 fb 0c 66 6f c9 a8 df 65 73 75 7d e9 56 d1 ac aa 6a 6b d9 8e cd 91 23 d1 e6 e1 f4 f1 c6 e5 52 f9 6b c1 5a 36 a5 e1 24 4c 3e 7d 8e a5 42 ba 44 e3 35 fd 36 ce a7 32 37 72 a3 9e 46 37 9c a8 9e e5 e6 79 95 fa e3 e5 20 b5 ce 7b d6 5b a3 7b ef bc 7c f1 e6 d6 3a 3c 7d 96 9f 2f 27 4f 9f 35 d8 a2 cc d6 66 fb d2 2a 7c b7 0d c5 54 4f 53 fb 02 a2 d6 2c a9 0c c3 e3 62 df ca 7e ea 0d 56 b2 ba 89 b4 d8 0a a7 0a 1e 6e af 92 c6 22 2a a1 7c ac 9d 5a 1e 8f 63 b0 a8 b8 3d 1d 43 aa 10 dc 62 c8 92 Data Ascii: Q,fXC\|3\|."#2?9V%56jj6`htwGdbufoesu}Vjk#RkZ6$L>}BD5627rF7y {[{\|:<}/'O5f\|TOS,b~Vn"*\|Zc=Cb
2024-05-06 16:42:32 UTC	1369	IN	Data Raw: 19 dc 8c 5b 47 96 1d 06 52 96 9a b2 2f 39 15 84 91 ea f1 bc c9 6e 6b e3 8d 17 7b 81 bd fb a4 78 42 e1 2f 35 d8 d6 6c a1 d0 dc 5d 7c 9d 47 ce e6 98 a4 13 9b 3e 5c fb bf 5f f6 19 58 fc 84 fb 99 59 2a 09 c1 cb e2 ab f5 7e 74 ab ad cd f0 58 de e7 c8 b1 29 e6 78 44 8f 42 c8 58 1e 20 06 c0 b0 00 7c 94 38 d2 ca 1c 40 21 1a eb 4f 40 f6 5d 95 66 26 15 91 56 38 a9 33 74 55 b0 e2 88 01 1b 64 3f d8 72 f8 bb ea 78 c2 eb 4f 52 f1 84 fa ff 00 d7 63 d2 f9 8c bd 26 55 da b8 35 52 f2 fe 11 4e d9 b1 fa 5e c0 f9 9a 94 2c b9 be a7 ee 7a b8 b9 97 4a 75 3e 76 a6 31 a9 30 b9 34 4e 59 a2 46 a3 c7 c6 9a 72 58 dd 7c fd 21 d2 0d 2d ad 58 f1 e1 c5 8e e3 19 48 8a 26 07 9c bd 27 55 e8 7a fe 85 22 4c 86 38 91 ab 29 e8 aa ea 2b 7a 14 51 b8 ee f6 3c 8c 6a 2a f1 ae bb 4b e4 eb 23 67 ed be Data Ascii: [GR/9nk{xB/5l]\|G>\_XY~tX)xDBX \|8@!O@]f&V83tUd?rxORc&U5RN^,zJu>v104NYFrX\|!-XH&'Uz"L8)+zQ<jK#g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.11	49907	35.188.55.83	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:32 UTC	624	OUT	GET /wp-content/uploads/2017/12/logo-220x38.png HTTP/1.1 Host: fortissite.wpengine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:32 UTC	323	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 06 May 2024 16:42:32 GMT Content-Type: image/png Content-Length: 1535 Connection: close Last-Modified: Fri, 05 Oct 2018 05:55:47 GMT ETag: "5bb6fce3-5ff" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-05-06 16:42:32 UTC	1535	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 dc 00 00 00 26 08 03 00 00 00 98 8d 05 cc 00 00 00 8a 50 4c 54 45 47 70 4c 55 55 55 0e 0a 09 0b 08 08 20 1a 1a 2f 05 02 26 26 26 07 05 05 05 04 04 61 61 61 2e 2e 2e 3d 3d 3d 2e 2e 2e 17 15 15 44 08 04 31 31 31 4f 08 04 4d 4d 4d 14 14 14 10 0f 0e 23 1e 1e 6b 0c 06 2c 2b 2b 39 39 39 41 41 41 49 49 49 5b 5b 5b 76 0e 08 36 36 36 3a 06 04 1b 1a 1a 5d 5d 5d 40 07 04 4c 08 04 59 0a 06 64 0b 06 72 0c 08 5d 5d 5d 71 0d 06 72 0c 08 76 0e 08 65 65 65 69 69 69 7e 0e 08 7b 0e 08 82 0e 08 e3 bf ff c5 00 00 00 28 74 52 4e 53 00 db 1e 17 4b 5c 5d 0e 08 fc 76 9b 72 36 8d 7e a6 c6 2e 26 54 e3 6a 8e a6 b8 ea f8 88 79 3f f4 86 9e b4 ce f1 fb f3 ef 5b fb c4 5d 00 00 04 fc 49 44 41 54 68 de ed 58 69 77 9b 3a 10 95 c4 26 Data Ascii: PNGIHDR&PLTEGpLUUU /&&&aaa...===...D111OMMM#k,++999AAAIII[[[v666:]]]@LYdr]]]qrveeeiii~{(tRNSK\]vr6~.&Tjy?[]IDAThXiw:&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.11	49908	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:32 UTC	709	OUT	GET /wp-content/themes/fortuna/stylesheets/fonts/icomoon.woff?mb3b1k HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://fortis-site.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://fortis-site.com/wp-content/cache/min/1/wp-content/themes/fortuna/stylesheets/icons-1dc822960f4092c5373ece9212ad5a49.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:33 UTC	738	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:33 GMT Content-Type: font/woff Content-Length: 306868 Connection: close Last-Modified: Wed, 03 Oct 2018 23:54:48 GMT ETag: "5bb556c8-4aeb4" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yvgTYDvzfR6cf3MZBIyIAYeDgIrrZA4pXtI1mMvlu4%2BN8GUa9sBDJFxWTmkkLwvpcZ5K1ED34pJrI7b9YuFm2RWLrZOTsiDwfqwc7YY4u18xJM4xKnkYa74qtr4V%2FEKK3dU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c9378654c00-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:33 UTC	631	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 04 ae b4 00 0b 00 00 00 04 ae 68 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 08 00 00 00 60 00 00 00 60 0f 12 0f 11 63 6d 61 70 00 00 01 68 00 00 01 64 00 00 01 64 49 5d 06 c6 67 61 73 70 00 00 02 cc 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 02 d4 00 04 86 c8 00 04 86 c8 ac f3 ae 68 68 65 61 64 00 04 89 9c 00 00 00 36 00 00 00 36 12 87 40 9c 68 68 65 61 00 04 89 d4 00 00 00 24 00 00 00 24 0a 83 0a df 68 6d 74 78 00 04 89 f8 00 00 11 78 00 00 11 78 cd c2 a9 61 6c 6f 63 61 00 04 9b 70 00 00 11 7c 00 00 11 7c 09 ef dc 9c 6d 61 78 70 00 04 ac ec 00 00 00 20 00 00 00 20 04 78 02 d0 6e 61 6d 65 00 04 ad 0c 00 00 01 86 00 00 01 86 99 4a 09 fb 70 6f 73 74 00 04 ae 94 00 00 00 Data Ascii: wOFFhOS/2``cmaphddI]gaspglyfhhead66@hhea$$hmtxxxalocap\|\|maxp xnameJpost
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 52 12 51 00 03 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 01 ff ff 00 0f 00 01 00 00 00 00 00 00 00 00 00 02 00 00 37 39 01 00 00 00 00 01 00 00 00 00 00 00 00 00 00 02 00 00 37 39 01 00 00 00 00 01 00 00 00 00 00 00 00 00 00 02 00 00 37 39 01 00 00 00 00 05 00 00 ff c0 04 00 03 c0 00 25 00 35 00 45 00 51 00 5d 00 00 17 21 32 36 35 34 26 23 21 22 26 35 11 34 36 33 21 32 16 1d 01 14 16 33 32 36 3d 01 34 26 23 21 22 06 15 11 14 16 01 11 14 16 33 21 32 36 35 11 34 26 23 21 22 06 05 11 14 06 23 21 22 26 35 11 34 36 33 21 32 16 01 14 16 33 32 36 35 34 26 23 Data Ascii: RQ797979%5EQ]!2654&#!"&5463!2326=4&#!"3!2654&#!"#!"&5463!232654&#
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 33 21 15 14 16 3b 01 11 14 06 23 21 22 26 35 13 21 32 36 35 34 26 23 21 22 06 15 14 16 17 21 32 36 35 34 26 23 21 22 06 15 14 16 13 33 32 36 35 34 26 2b 01 22 06 15 14 16 13 21 32 36 35 34 26 23 21 22 06 15 14 16 17 21 32 36 35 34 26 23 21 22 06 15 14 16 30 02 a0 14 1c 01 02 01 ff 00 02 03 02 01 01 01 01 01 fe 40 14 1c 1c 14 01 d0 cc bc 05 0b fe 20 09 07 01 b0 1c 14 d0 09 07 fd 60 07 09 90 01 a0 07 09 09 07 fe 60 07 09 09 07 01 a0 07 09 09 07 fe 60 07 09 09 07 c0 07 09 09 07 c0 07 09 09 07 01 a0 07 09 09 07 fe 60 07 09 09 07 01 a0 07 09 09 07 fe 60 07 09 09 40 1c 14 02 a0 01 01 01 01 01 03 02 01 01 20 01 02 01 01 1c 14 fc 60 14 1c 03 c6 e6 10 08 d8 07 09 e8 13 25 fd 70 07 09 09 07 02 10 09 07 07 09 09 07 07 09 80 09 07 07 09 09 07 07 09 01 00 09 07 07 09 Data Ascii: 3!;#!"&5!2654&#!"!2654&#!"32654&+"!2654&#!"!2654&#!"0@ `````@ `%p
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 07 07 09 09 07 07 09 00 08 00 00 ff c0 03 80 03 c0 00 2d 00 4f 00 5f 00 69 00 77 00 85 00 93 00 a1 00 00 17 21 32 36 35 11 34 26 2b 01 22 06 15 14 16 3b 01 32 16 15 11 14 06 23 21 22 26 35 11 34 36 3b 01 32 36 35 34 26 2b 01 22 06 15 11 14 16 13 32 36 35 34 26 2b 01 22 06 15 11 14 16 33 21 32 36 35 11 34 26 2b 01 22 06 15 14 16 3b 01 11 21 11 17 21 32 36 3d 01 34 26 23 21 22 06 1d 01 14 16 27 21 15 14 06 23 21 22 26 35 13 21 32 36 35 34 26 23 21 22 06 15 14 16 37 21 32 36 35 34 26 23 21 22 06 15 14 16 13 21 32 36 35 34 26 23 21 22 06 15 14 16 17 21 32 36 35 34 26 23 21 22 06 15 14 16 30 03 20 15 1b 1b 15 80 07 09 09 07 80 08 08 08 08 fc e0 08 08 08 08 80 07 09 09 07 80 15 1b 1b 95 07 09 09 07 40 07 09 09 07 02 a0 07 09 09 07 40 07 09 09 07 30 fd 80 a0 01 Data Ascii: -O_iw!2654&+";2#!"&546;2654&+"2654&+"3!2654&+";!!26=4&#!"'!#!"&5!2654&#!"7!2654&#!"!2654&#!"!2654&#!"0 @@0
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 07 09 09 07 80 07 09 09 07 80 07 09 09 07 80 07 09 09 07 80 07 09 09 07 80 07 09 09 07 80 07 09 09 07 80 07 09 09 40 1b 15 03 80 15 1b 1b 15 25 07 09 09 07 25 08 08 fc 60 08 08 1d 07 09 09 07 1d 15 1b 03 c0 08 08 fc 80 08 08 30 03 40 07 09 09 07 fc c0 07 09 09 02 57 09 07 07 09 09 07 07 09 80 09 07 07 09 09 07 07 09 ff 00 09 07 07 09 09 07 07 09 ff 00 09 07 07 09 09 07 07 09 80 09 07 07 09 09 07 07 09 ff 00 09 07 07 09 09 07 07 09 00 00 11 00 00 ff c0 05 20 03 a0 00 1d 00 2d 00 3d 00 4b 00 59 00 67 00 75 00 83 00 91 00 9f 00 ad 00 bb 00 c9 00 d7 00 e5 00 f3 01 01 00 00 01 21 22 06 07 2e 01 23 21 22 06 15 11 14 16 33 21 32 36 37 1e 01 33 21 32 36 35 11 34 26 01 21 22 26 35 11 34 36 33 21 32 16 15 11 14 06 25 14 06 23 21 22 26 35 11 34 36 33 21 32 16 15 17 Data Ascii: @%%`0@W -=KYgu!".#!"3!2673!2654&!"&5463!2%#!"&5463!2
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 3d 01 33 15 14 16 33 32 36 3d 01 33 15 14 16 33 32 36 3d 01 33 32 36 35 34 26 2b 01 35 33 32 36 35 34 26 2b 01 35 34 26 23 22 06 1d 01 23 35 34 26 23 22 06 1d 01 23 35 34 26 23 22 06 1d 01 23 35 34 26 23 22 06 1d 01 23 22 06 15 14 16 3b 01 15 25 15 23 35 23 15 23 35 23 33 15 23 01 33 32 16 1d 01 21 35 34 36 3b 01 32 36 35 34 26 2b 01 22 06 1d 01 14 16 33 21 32 36 3d 01 34 26 2b 01 22 06 15 14 16 23 32 36 35 34 26 23 21 22 06 15 14 16 33 07 35 34 26 23 22 06 1d 01 14 16 33 32 36 05 32 36 3d 01 34 26 23 22 06 1d 01 14 16 04 40 09 07 07 09 09 07 fc 20 07 09 09 07 07 09 1c 14 03 e0 14 1c fc 50 07 09 09 07 30 09 07 07 09 c0 09 07 07 09 c0 09 07 07 09 c0 09 07 07 09 30 07 09 09 07 30 30 07 09 09 07 30 09 07 07 09 c0 09 07 07 09 c0 09 07 07 09 c0 09 07 07 09 30 Data Ascii: =3326=3326=32654&+532654&+54&#"#54&#"#54&#"#54&#"#";%#5##5#3#32!546;2654&+"3!26=4&+"#2654&#!"354&#"32626=4&#"@ P000000
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 07 09 09 07 fc c0 07 09 02 20 1a 26 26 1a 1a 26 26 1a 0d 13 13 0d 0d 13 13 fe 3d 02 c0 07 09 09 07 fd 40 07 09 09 17 01 01 a4 06 13 06 f1 02 06 03 03 06 02 7c 03 08 04 05 07 03 3a fd 60 02 a0 23 07 14 0b 0b 13 08 70 e5 10 2d 10 8f 10 07 09 1c 14 03 40 14 1c 1c 14 1d 07 09 09 07 1d 07 09 09 07 fc c0 07 09 09 40 1c 14 03 20 14 1c 1c 14 fc e0 14 1c 03 50 07 09 09 07 fc e0 07 09 09 07 01 f0 26 1a 1a 26 26 1a 1a 26 60 13 0d 0d 13 13 0d 0d 13 fe 20 09 07 02 60 07 09 09 07 fd a0 07 09 20 94 01 01 a4 06 06 f1 02 03 02 03 75 03 04 04 02 42 7d 02 40 fe 6d 28 07 09 09 07 6b e6 0f 0f 8f 01 7f fc dd 09 07 1d 14 1c 1c 14 03 40 14 1c 09 07 07 09 09 07 fc c0 07 09 09 07 1d 07 09 00 14 00 00 ff c0 04 a0 03 c0 00 10 00 1a 00 1e 00 28 00 41 00 44 00 52 00 60 00 6e 00 7c 00 Data Ascii: &&&&=@\|:`#p-@@ P&&&&` ` uB}@m(k@(ADR`n\|
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 14 14 14 14 46 2e 2f 35 35 2f 2e 46 14 14 14 14 46 2e 2f 03 00 3b 05 20 1e 42 43 1d 20 02 3e 2f 21 fd c0 21 2f 09 07 07 09 1c 14 01 90 25 50 2b 56 4c 4c 71 20 21 21 20 71 4c 4c 56 2b 50 25 fe 70 14 1c 09 07 07 09 2f 21 02 40 21 2f fc e0 1e 1e 69 46 46 4f 4f 46 46 69 1e 1e 1e 1e 69 46 46 4f 4f 46 46 69 1e 1e 02 40 01 01 33 29 2a 3b 11 10 10 11 3b 2a 29 33 01 01 90 14 1c 47 19 20 13 2d 30 10 20 19 47 1c 14 90 01 00 09 07 20 14 1c 1c 14 20 07 09 09 07 20 07 09 09 07 20 07 09 a0 17 16 4f 34 34 3c 3c 34 34 4f 16 17 17 16 4f 34 34 3c 3c 34 34 4f 16 17 fd e0 14 14 46 2e 2f 35 35 2f 2e 46 14 14 14 14 46 2e 2f 35 35 2f 2e 46 14 14 00 00 06 00 00 ff c0 05 40 03 c0 00 53 00 57 00 61 00 79 00 85 00 91 00 00 01 23 35 34 26 2b 01 22 06 15 14 16 3b 01 32 16 1d 01 23 11 Data Ascii: F./55/.FF./; BC >/!!/%P+VLLq !! qLLV+P%p/!@!/iFFOOFFiiFFOOFFi@3);;)3G -0 G O44<<44OO44<<44OF./55/.FF./55/.F@SWay#54&+";2#
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 26 23 22 06 1d 01 14 06 23 21 22 26 35 11 1e 01 33 21 32 16 1d 01 23 22 06 1d 01 14 16 33 21 32 36 3d 01 34 26 07 14 16 33 32 36 35 34 26 23 22 06 04 10 07 09 1e 16 56 14 02 0b 07 fe 2f 07 06 02 02 08 05 02 02 01 01 c3 2b 02 0c 06 07 05 02 11 4b 08 0c 0a 86 07 09 09 07 08 08 08 08 ff 00 08 08 08 08 c0 07 09 1a 16 fc 30 1e 22 22 1e a2 60 07 06 02 02 09 05 01 02 02 02 43 07 06 02 02 0c 07 fe 7d 01 01 ff 00 2b 35 35 2b 03 d0 16 1a 09 07 07 09 08 08 fc 30 1e 22 0c 21 13 03 d0 08 08 b0 16 1a 1a 16 01 00 16 1a 1a c6 13 0d 0d 13 13 0d 0d 13 02 d0 09 07 35 16 1f 3a 06 06 02 8e 02 0b 07 05 06 01 89 7f 07 05 02 02 0c 06 34 0c 09 35 07 09 f0 09 07 07 09 08 08 c0 08 08 08 08 a0 08 08 09 07 c0 16 1a 22 1e 1e 22 20 02 0c 06 05 06 01 bf 02 0c 06 06 06 02 7f 35 2b fd 40 Data Ascii: &#"#!"&53!2#"3!26=4&32654&#"V/+K0""`C}+55+0"!5:45"" 5+@
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: e0 01 20 01 60 1c 14 fc 80 14 1c 1c 14 03 80 14 1c fc 40 09 07 03 80 07 09 09 07 fc 80 07 09 02 60 09 07 07 09 f0 07 09 09 07 f0 f0 07 09 09 07 f0 09 07 07 09 fe e0 09 07 07 09 fe f0 07 09 09 07 01 10 fe f0 07 09 09 07 01 10 09 07 07 09 01 20 fe e0 01 20 fd 90 03 a0 14 1c 1c 14 fc 60 14 1c 1c 14 03 a0 07 09 09 07 fc 60 07 09 09 00 00 00 00 03 00 00 ff c0 04 00 03 c0 00 25 00 47 00 54 00 00 05 11 34 26 23 21 22 06 15 11 14 16 33 32 36 35 11 34 36 33 21 32 16 15 11 14 06 23 21 22 06 15 14 16 33 21 32 36 01 22 06 15 11 14 16 33 21 32 36 35 11 37 15 14 16 33 32 36 35 11 34 26 23 21 22 06 15 14 16 3b 01 07 03 14 06 23 21 22 26 35 11 34 36 33 21 04 00 1c 14 fc 60 14 1c 09 07 07 09 09 07 03 a0 07 09 09 07 fe e0 07 09 09 07 01 20 14 1c fc 30 14 1c 1c 14 02 00 14 Data Ascii: `@` ``%GT4&#!"3265463!2#!"3!26"3!265732654&#!";#!"&5463!` 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.11	49909	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:32 UTC	577	OUT	GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:32 UTC	750	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:32 GMT Content-Type: application/javascript Content-Length: 1239 Connection: close Last-Modified: Tue, 30 Apr 2024 15:20:25 GMT ETag: "66310c39-4d7" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Rbkos4zYFlPZIhydhFev87S1BG6y9p7S5C11ksbom1mB2kD2xy%2Bx%2BBHjrki6avqkQGjzmTNuOlh3KQmlJsH8dxyIu%2B8PUfx0NtdUiUIZ5q6ffAhPDChAfRh4NyxO9aqjuhg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c937bdb9abf-MIA X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Wed, 08 May 2024 16:42:32 GMT Cache-Control: max-age=172800 Cache-Control: public Accept-Ranges: bytes
2024-05-06 16:42:32 UTC	619	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 74 72 79 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 29 72 65 74 75 72 6e 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 3a 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 3c 61 20 68 72 65 66 3d 22 27 2b 65 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2b 27 22 3e 3c 2f 61 3e 27 2c 64 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 Data Ascii: !function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href
2024-05-06 16:42:32 UTC	620	IN	Data Raw: 61 2b 6c 2e 6c 65 6e 67 74 68 29 29 7d 63 61 74 63 68 28 69 29 7b 65 28 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 75 29 2c 63 3d 30 3b 63 3c 72 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 74 72 79 7b 76 61 72 20 6f 3d 72 5b 63 5d 2c 61 3d 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 69 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 66 29 3b 69 66 28 69 29 7b 76 61 72 20 6c 3d 6e 28 69 2c 30 29 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 6c 29 3b 61 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 64 2c 6f 29 7d 7d 63 61 74 63 68 28 68 29 7b 65 28 68 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 2e 71 75 Data Ascii: a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var r=t.qu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.11	49910	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:32 UTC	665	OUT	GET /wp-content/cache/min/1/wp-content/plugins/parallax_video_backgrounds_vc/assets/css/background-style-0f44168bd3d23e9e7fdbf608efe91d3c.css HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:33 UTC	770	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:32 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 28 Oct 2021 03:54:18 GMT ETag: W/"617a1eea-23db" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Di4uypnXUCeuiqaCzhlTqLMEp06BA3UVy5FJpw6xugGtFt2x23f1g7K38engVXMMP%2F21x0paEk9zxHrhzxzT37cVA%2Fw2tmcD7Eg23%2FuaZy%2Bm2MDNEmG1yMWRUTwOOcOnUSQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c937b5f2886-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:33 UTC	599	IN	Data Raw: 32 33 64 62 0d 0a 2e 75 70 62 5f 72 6f 77 5f 62 67 2c 2e 75 70 62 5f 76 69 64 65 6f 2d 62 67 2c 2e 76 63 70 62 2d 66 73 2d 6a 71 75 65 72 79 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 76 63 2d 72 6f 77 2d 74 72 61 6e 73 6c 61 74 65 2d 77 72 61 70 70 65 72 7b 6d 61 72 67 69 6e 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 75 70 62 5f 62 67 5f 6f 76 65 72 6c 61 79 2c 2e 75 70 62 5f 62 67 5f 6f 76 65 72 6c 61 79 5f 70 61 74 74 65 72 6e 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 30 7d 2e 75 70 62 5f 62 67 5f 6f 76 65 72 6c 61 79 5f 70 61 74 74 65 72 6e 7b 62 61 63 6b Data Ascii: 23db.upb_row_bg,.upb_video-bg,.vcpb-fs-jquery{overflow:hidden}.vc-row-translate-wrapper{margin:0!important}.upb_bg_overlay,.upb_bg_overlay_pattern{color:inherit;position:absolute;width:100%;height:100%!important;left:0;top:0}.upb_bg_overlay_pattern{back
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 72 69 61 6e 67 6c 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 31 70 78 3b 62 6f 74 74 6f 6d 3a 61 75 74 6f 3b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 62 6f 74 74 6f 6d 5f 73 65 70 65 72 61 74 6f 72 20 2e 75 76 63 2d 73 76 67 2d 63 69 72 63 6c 65 2c 2e 62 6f 74 74 6f 6d 5f 73 65 70 65 72 61 74 6f 72 20 2e 75 76 63 2d 73 76 67 2d 74 72 69 61 6e 67 6c 65 7b 74 6f 70 3a 61 75 74 6f 3b 62 6f 74 74 6f 6d 3a 2d 31 70 78 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 59 28 2d 31 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 59 28 2d 31 29 3b 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 59 28 2d 31 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 59 28 2d 31 29 3b 74 72 61 Data Ascii: riangle{position:absolute;top:-1px;bottom:auto;z-index:1}.bottom_seperator .uvc-svg-circle,.bottom_seperator .uvc-svg-triangle{top:auto;bottom:-1px;-moz-transform:scaleY(-1);-webkit-transform:scaleY(-1);-o-transform:scaleY(-1);-ms-transform:scaleY(-1);tra
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 6c 61 72 67 65 2d 63 69 72 63 6c 65 7b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 59 28 2d 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 59 28 2d 31 29 7d 2e 62 6f 74 74 6f 6d 5f 73 65 70 65 72 61 74 6f 72 20 2e 75 76 63 2d 78 2d 6c 61 72 67 65 2d 63 69 72 63 6c 65 2c 2e 74 6f 70 5f 73 65 70 65 72 61 74 6f 72 20 2e 75 76 63 2d 63 75 72 76 65 2d 75 70 2d 73 65 70 65 72 61 74 6f 72 7b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 59 28 2d 31 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 59 28 2d 31 29 3b 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 59 28 2d 31 29 7d 2e 75 76 63 2d 63 75 72 76 65 2d 75 70 2d 73 65 70 65 72 61 74 6f 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 Data Ascii: large-circle{-ms-transform:scaleY(-1);transform:scaleY(-1)}.bottom_seperator .uvc-x-large-circle,.top_seperator .uvc-curve-up-seperator{-moz-transform:scaleY(-1);-webkit-transform:scaleY(-1);-o-transform:scaleY(-1)}.uvc-curve-up-seperator{position:absolut
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 6d 3a 73 63 61 6c 65 28 31 2c 2d 31 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2c 2d 31 29 3b 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2c 2d 31 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2c 2d 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2c 2d 31 29 7d 2e 75 6c 74 2d 72 6f 75 6e 64 65 64 2d 73 70 6c 69 74 2d 73 65 70 65 72 61 74 6f 72 2d 77 72 61 70 70 65 72 7b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 75 6c 74 2d 72 6f 75 6e 64 65 64 2d 73 70 6c 69 74 2d 73 65 70 65 72 61 74 6f 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 75 6c 74 2d 72 6f 75 6e 64 65 64 2d 73 70 6c 69 74 2d 73 65 70 65 72 61 74 6f 72 3a 61 66 74 Data Ascii: m:scale(1,-1);-webkit-transform:scale(1,-1);-o-transform:scale(1,-1);-ms-transform:scale(1,-1);transform:scale(1,-1)}.ult-rounded-split-seperator-wrapper{z-index:1}.ult-rounded-split-seperator{position:relative;height:100%}.ult-rounded-split-seperator:aft
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2d 31 29 7d 2e 73 65 70 61 72 61 74 6f 72 2d 69 63 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 2d 35 30 25 29 3b 7a 2d 69 6e 64 65 78 3a 35 7d 2e 76 63 2d 72 6f 77 2d 74 72 61 6e 73 6c 61 74 65 3e 2e 76 63 2d 72 6f 77 2d 74 72 61 6e 73 6c 61 74 65 2d 77 72 61 70 70 65 72 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 75 70 62 5f 76 69 64 65 6f 5f 63 6c 61 73 73 2c 2e 77 70 62 5f 63 6f 6c 75 6d 6e 2c 2e 77 70 62 5f 72 6f 77 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 75 70 62 5f 72 6f 77 5f 62 67 7b 70 6f 73 69 74 69 Data Ascii: ansform:scale(-1)}.separator-icon{position:absolute;top:50%;left:50%;transform:translate(-50%,-50%);z-index:5}.vc-row-translate>.vc-row-translate-wrapper{overflow:hidden;width:100%}.upb_video_class,.wpb_column,.wpb_row{position:relative}.upb_row_bg{positi
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 61 6e 74 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 3b 6c 65 66 74 3a 35 30 25 7d 2e 75 70 62 5f 75 74 75 62 65 5f 69 66 72 61 6d 65 2c 2e 75 70 62 5f 76 69 6d 65 6f 5f 69 66 72 61 6d 65 7b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 6d 61 78 2d 68 65 69 67 68 74 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 75 70 62 5f 76 69 64 65 6f 2d 62 67 20 2e 6d 62 59 54 50 5f 77 72 61 70 70 65 72 20 69 66 72 61 6d 65 7b 6d 61 78 2d 77 Data Ascii: ant;-webkit-transform:translateX(-50%);-ms-transform:translateX(-50%);transform:translateX(-50%);left:50%}.upb_utube_iframe,.upb_vimeo_iframe{max-width:none;max-height:none;width:100%;height:100%;position:absolute}.upb_video-bg .mbYTP_wrapper iframe{max-w
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 7b 2e 75 76 63 5f 68 69 64 64 65 6e 2d 78 73 6c 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 39 39 31 70 78 29 7b 2e 75 76 63 5f 68 69 64 64 65 6e 2d 73 6d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 39 32 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 31 39 39 70 78 29 7b 2e 75 76 63 5f 68 69 64 64 65 6e 2d 6d 64 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 38 32 Data Ascii: {.uvc_hidden-xsl{display:none!important}}@media (min-width:768px)and (max-width:991px){.uvc_hidden-sm{display:none!important}}@media (min-width:992px)and (max-width:1199px){.uvc_hidden-md{display:none!important}}@media (min-width:1200px)and (max-width:182
2024-05-06 16:42:33 UTC	374	IN	Data Raw: 2d 62 6f 74 74 6f 6d 20 2e 76 63 2d 72 6f 77 2d 74 72 61 6e 73 6c 61 74 65 2d 77 72 61 70 70 65 72 7b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 76 63 5f 72 6f 77 2d 6f 2d 63 6f 6e 74 65 6e 74 2d 74 6f 70 2e 66 75 6c 6c 2d 62 72 6f 77 73 65 72 2d 73 69 7a 65 20 2e 75 70 62 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 74 65 78 74 2c 2e 76 63 5f 72 6f 77 2d 6f 2d 63 6f 6e 74 65 6e 74 2d 74 6f 70 2e 76 69 64 65 6f 2d 62 72 6f 77 73 65 72 2d 73 69 7a 65 20 2e 75 70 62 5f 76 69 64 65 6f 2d 74 65 78 74 7b 74 6f 70 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 2e 76 63 5f 72 6f 77 2d 6f 2d 63 6f 6e 74 65 6e 74 2d 62 6f 74 74 6f 6d 2e 66 75 6c 6c 2d 62 72 6f 77 73 65 72 2d 73 69 7a 65 20 2e 75 70 62 2d 62 Data Ascii: -bottom .vc-row-translate-wrapper{margin:0 auto!important}.vc_row-o-content-top.full-browser-size .upb-background-text,.vc_row-o-content-top.video-browser-size .upb_video-text{top:0;transform:translateY(0)}.vc_row-o-content-bottom.full-browser-size .upb-b
2024-05-06 16:42:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.11	49912	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:32 UTC	656	OUT	GET /wp-content/cache/min/1/wp-content/plugins/parallax_video_backgrounds_vc/assets/css/animate-7490004261602226c037e62260c39c8e.css HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:33 UTC	777	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:33 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 28 Oct 2021 03:54:18 GMT ETag: W/"617a1eea-112b8" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p5bcB4XUNmze%2FE5LKIpb01qDkvOW%2FhpXCMyMFuy8fgasZo2Rze%2BX2q%2BLnH3oq%2BJdjcSgtevjI5KVdY9R4MNU0LMqeWvklMGMJ5GFctk%2FZvNEy4IjNku%2B4A4qvMGE48LE3SA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c938b20da6b-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:33 UTC	592	IN	Data Raw: 37 63 61 37 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 2f 2a 21 0a 0a 41 6e 69 6d 61 74 65 2e 63 73 73 20 2d 20 68 74 74 70 3a 2f 2f 64 61 6e 65 64 65 6e 2e 6d 65 2f 61 6e 69 6d 61 74 65 0a 0a 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 0a 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 33 20 44 61 6e 69 65 6c 20 45 64 65 6e 0a 0a 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 20 61 20 63 6f 70 79 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 61 6e 64 20 61 73 73 6f 63 69 61 74 65 64 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f Data Ascii: 7ca7@charset "UTF-8";/*!Animate.css - http://daneden.me/animateLicensed under the MIT licenseCopyright (c) 2013 Daniel EdenPermission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentatio
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 63 65 20 61 6e 64 20 74 68 69 73 20 70 65 72 6d 69 73 73 69 6f 6e 20 6e 6f 74 69 63 65 20 73 68 61 6c 6c 20 62 65 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 61 6c 6c 20 63 6f 70 69 65 73 20 6f 72 20 73 75 62 73 74 61 6e 74 69 61 6c 20 70 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2e 0a 0a 54 48 45 20 53 4f 46 54 57 41 52 45 20 49 53 20 50 52 4f 56 49 44 45 44 20 22 41 53 20 49 53 22 2c 20 57 49 54 48 4f 55 54 20 57 41 52 52 41 4e 54 59 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 20 45 58 50 52 45 53 53 20 4f 52 20 49 4d 50 4c 49 45 44 2c 20 49 4e 43 4c 55 44 49 4e 47 20 42 55 54 20 4e 4f 54 20 4c 49 4d 49 54 45 44 20 54 4f 20 54 48 45 20 57 41 52 52 41 4e 54 49 45 53 20 4f 46 20 4d 45 52 43 48 41 4e 54 41 42 49 4c 49 54 59 2c 20 46 49 54 Data Ascii: ce and this permission notice shall be included in all copies or substantial portions of the Software.THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FIT
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 33 30 70 78 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 33 30 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 33 30 70 78 29 7d 36 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 35 70 78 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 35 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 35 70 78 29 7d 7d 2e 62 6f 75 6e 63 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 62 6f 75 6e 63 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 62 6f 75 6e 63 65 7d 40 2d 77 65 62 6b 69 74 Data Ascii: ansform:translateY(-30px);-ms-transform:translateY(-30px);transform:translateY(-30px)}60%{-webkit-transform:translateY(-15px);-ms-transform:translateY(-15px);transform:translateY(-15px)}}.bounce{-webkit-animation-name:bounce;animation-name:bounce}@-webkit
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 3a 73 63 61 6c 65 28 31 29 7d 33 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 2e 32 35 29 20 73 63 61 6c 65 59 28 2e 37 35 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 2e 32 35 29 20 73 63 61 6c 65 59 28 2e 37 35 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 2e 32 35 29 20 73 63 61 6c 65 59 28 2e 37 35 29 7d 34 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 2e 37 35 29 20 73 63 61 6c 65 59 28 31 2e 32 35 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 2e 37 35 29 20 73 63 61 6c 65 59 28 31 2e 32 35 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 2e 37 35 29 20 73 63 61 6c 65 59 28 31 2e 32 35 29 7d 36 30 25 Data Ascii: :scale(1)}30%{-webkit-transform:scaleX(1.25) scaleY(.75);-ms-transform:scaleX(1.25) scaleY(.75);transform:scaleX(1.25) scaleY(.75)}40%{-webkit-transform:scaleX(.75) scaleY(1.25);-ms-transform:scaleX(.75) scaleY(1.25);transform:scaleX(.75) scaleY(1.25)}60%
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 38 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 35 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 77 69 6e 67 7b 32 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 35 64 65 67 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 35 64 65 67 29 7d 34 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d Data Ascii: 80%{-webkit-transform:rotate(-5deg);transform:rotate(-5deg)}100%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}}@keyframes swing{20%{-webkit-transform:rotate(15deg);-ms-transform:rotate(15deg);transform:rotate(15deg)}40%{-webkit-transform:rotate(-
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 31 29 20 72 6f 74 61 74 65 28 33 64 65 67 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 31 29 20 72 6f 74 61 74 65 28 33 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 31 29 20 72 6f 74 61 74 65 28 33 64 65 67 29 7d 34 30 25 2c 36 30 25 2c 38 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 31 29 20 72 6f 74 61 74 65 28 2d 33 64 65 67 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 31 29 20 72 6f 74 61 74 65 28 2d 33 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 31 29 20 72 6f 74 61 74 65 28 2d 33 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 Data Ascii: bkit-transform:scale(1.1) rotate(3deg);-ms-transform:scale(1.1) rotate(3deg);transform:scale(1.1) rotate(3deg)}40%,60%,80%{-webkit-transform:scale(1.1) rotate(-3deg);-ms-transform:scale(1.1) rotate(-3deg);transform:scale(1.1) rotate(-3deg)}100%{-webkit-tr
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 65 58 28 32 30 25 29 20 72 6f 74 61 74 65 28 33 64 65 67 29 7d 34 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 35 25 29 20 72 6f 74 61 74 65 28 2d 33 64 65 67 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 35 25 29 20 72 6f 74 61 74 65 28 2d 33 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 35 25 29 20 72 6f 74 61 74 65 28 2d 33 64 65 67 29 7d 36 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 31 30 25 29 20 72 6f 74 61 74 65 28 32 64 65 67 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 31 30 25 29 20 72 6f 74 61 74 65 28 32 64 65 67 29 3b 74 Data Ascii: eX(20%) rotate(3deg)}45%{-webkit-transform:translateX(-15%) rotate(-3deg);-ms-transform:translateX(-15%) rotate(-3deg);transform:translateX(-15%) rotate(-3deg)}60%{-webkit-transform:translateX(10%) rotate(2deg);-ms-transform:translateX(10%) rotate(2deg);t
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 72 61 6e 73 6c 61 74 65 59 28 2d 32 30 30 30 70 78 29 7d 36 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 33 30 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 33 30 70 78 29 7d 38 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 70 78 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 49 6e 44 6f 77 6e 7b 30 25 7b 6f 70 61 Data Ascii: ranslateY(-2000px)}60%{opacity:1;-webkit-transform:translateY(30px);transform:translateY(30px)}80%{-webkit-transform:translateY(-10px);transform:translateY(-10px)}100%{-webkit-transform:translateY(0);transform:translateY(0)}}@keyframes bounceInDown{0%{opa
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 2d 31 30 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 30 70 78 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 7d 7d 2e 62 6f 75 6e 63 65 49 6e 4c 65 66 74 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 62 6f 75 6e 63 65 49 6e 4c 65 66 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 62 6f 75 6e 63 65 49 6e 4c 65 66 74 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 49 6e 52 69 67 68 74 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 Data Ascii: -10px);transform:translateX(-10px)}100%{-webkit-transform:translateX(0);-ms-transform:translateX(0);transform:translateX(0)}}.bounceInLeft{-webkit-animation-name:bounceInLeft;animation-name:bounceInLeft}@-webkit-keyframes bounceInRight{0%{opacity:0;-webki
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 6e 55 70 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 32 30 30 30 70 78 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 32 30 30 30 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 32 30 30 30 70 78 29 7d 36 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 33 30 70 78 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 33 30 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 33 30 70 78 29 7d 38 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 Data Ascii: nUp{0%{opacity:0;-webkit-transform:translateY(2000px);-ms-transform:translateY(2000px);transform:translateY(2000px)}60%{opacity:1;-webkit-transform:translateY(-30px);-ms-transform:translateY(-30px);transform:translateY(-30px)}80%{-webkit-transform:transla

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.11	49914	104.18.11.207	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:32 UTC	608	OUT	GET /font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://fortis-site.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:33 UTC	910	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:33 GMT Content-Type: font/woff2 Content-Length: 77160 Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: "af7ae505a9eed503f8b8e6982036873e" Last-Modified: Mon, 25 Jan 2021 22:04:55 GMT CDN-CachedAt: 10/31/2023 18:55:41 CDN-ProxyVer: 1.04 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 975 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: d69368bed68fbf9519234012a3d8d4a6 CDN-Cache: HIT CF-Cache-Status: HIT Age: 352105 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87fa6c942d2609da-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:33 UTC	459	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 2d 68 00 0d 00 00 00 02 86 98 00 01 2d 0e 00 04 01 cb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 20 06 60 00 85 72 11 08 0a 89 99 28 87 b6 58 01 36 02 24 03 95 70 0b 96 10 00 04 20 05 89 06 07 b4 75 5b 52 09 72 47 61 f7 91 84 2a ba 0d 81 27 ed 3d eb 3a b5 1a 26 d3 cd 3d 72 b7 2a 0a 02 19 e5 1a f1 f6 5d 04 74 07 dc 45 aa 6e a3 b2 ff ff ff ff e4 a4 31 46 db 0e dc 40 e0 d5 f4 fb 7c ad 8a 14 08 66 93 6d 92 60 9b 24 d8 91 a1 40 64 5b 42 51 11 24 28 5b 55 3c 2b 28 ad b8 40 50 d0 35 1e e4 60 81 b0 0e da 3e f6 50 10 1a 3b e1 28 91 d1 31 b3 fd 6c db fe 68 d4 a8 a2 c2 29 9f dc 59 79 94 f2 4a 69 e9 eb 17 ad 85 ce 7c 25 db 81 b7 5e ac 14 47 82 a2 33 b8 12 6e 9e 95 e8 ba da 95 dc 0a c4 cd 90 44 8a 9e Data Ascii: wOF2-h-?FFTM `r(X6$p u[RrGa'=:&=r]tEn1F@\|fm`$@d[BQ$([U<+(@P5`>P;(1lh)YyJi\|%^G3nD
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: f1 48 0e 3f f1 73 ce a9 3a 91 0f 4e 44 9f a8 fc a9 10 49 11 a4 24 8c 04 54 14 8b 5b 81 82 62 34 8a 11 cd fc 7f ea ec ef 2c af ce bc d7 ef bd a3 62 6c 36 91 ba 0b 49 4c e9 69 7d db 8c 26 e0 34 e3 94 6d 2c 27 cb 16 cb f3 23 bd d7 a5 b3 7f 52 77 01 a2 62 75 c0 b6 2c 4b 96 0b c6 06 9b e2 76 8b 03 db 08 6d 5f 2d c0 c0 e6 5c 48 8b 9d fb 8e 48 48 fe aa f3 93 ea 07 c6 c2 3f 98 96 d3 6d f3 0b 39 50 88 ad d8 29 39 e7 4a a8 86 24 c6 bd 88 9c e7 b1 f4 38 f8 e8 c7 da ce ce 7e b9 3b c4 72 15 8d 6e bf 3d 24 11 1a b5 1f 94 4e 64 64 6e 1b 21 27 ae a6 f0 e3 3b b3 f4 ac 38 99 bc 27 d9 4e a6 ed 1e 21 7f 2d 18 06 4a 19 ca b6 d3 2e e0 d8 fa 91 ee 58 af 3d 0c 2c 12 04 0e 90 9b 1e 22 60 3a 18 a2 ff 1b 0f 09 09 20 7b 8d ef 9e dc e0 bc 12 cb 4b 21 27 9f 00 a1 2d 46 48 94 9c 09 89 Data Ascii: H?s:NDI$T[b4,bl6ILi}&4m,'#Rwbu,Kvm_-\HHH?m9P)9J$8~;rn=$Nddn!';8'N!-J.X=,"`: {K!'-FH
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: a0 1e e2 45 77 21 01 2e 1f d7 e9 fd 21 42 53 12 43 aa 67 1e c4 9d 89 63 e3 0e b9 e4 73 2a d5 a7 73 89 28 35 6d 94 3d 71 c6 ca 8a 65 a2 fb f1 59 91 0b 24 eb 5c 3e 10 66 4e 38 80 71 97 8c 78 ea 23 76 0a a5 36 75 6d ef 09 e0 19 9d b0 60 db 4e 4d 2d 4a 00 5c f4 10 46 b7 c7 72 e9 44 02 80 1e b5 5a d3 30 93 07 23 27 ea a5 88 6e ec 11 d2 47 6a 4c 82 da 86 58 14 1b ca 8c a2 41 aa 9d f1 67 59 73 99 2a b2 59 ca dc 07 c7 5e d9 b5 98 3b 22 d8 1d 24 68 62 7f 3d b9 16 19 cf 9b 13 98 30 de 76 48 3c 97 56 76 7f 81 63 9b 5f 00 5c 59 8a 03 ec a3 e8 77 3b 64 42 16 02 83 8b 03 4e 83 84 33 1b 21 24 ce e7 e7 b4 e7 e2 de 49 7c 50 98 20 7e 13 26 13 e4 03 64 c5 2e c8 03 1b d4 b0 e9 02 2d 61 07 f3 fa 61 19 09 2b 2b c2 13 92 39 ba 2e 6d 52 f8 e9 34 e3 63 79 af 9e b9 23 8b 55 d5 c2 Data Ascii: Ew!.!BSCgcss(5m=qeY$\>fN8qx#v6um`NM-J\FrDZ0#'nGjLXAgYsY^;"$hb=0vH<Vvc_\Yw;dBN3!$I\|P ~&d.-aa++9.mR4cy#U
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 89 95 2d 1f a9 7b 0e 35 c0 81 99 3c 0d 2c 7d 94 d1 13 60 60 36 fa c7 ed 18 90 6a 69 a2 e9 d8 69 6d 3c 55 75 6a 59 a9 5a fa 6a 0e 42 5c 40 8c 67 cb 33 45 6a 66 70 96 f8 98 9f 3a ba da ed ea 10 57 db c7 ae 9f ba d9 df b3 8e 9c 94 ce 70 a5 c4 b3 33 61 6f af fb 11 81 31 88 64 61 8b f8 20 9c 03 b7 dd ab a5 fd 88 99 4a 82 d7 b2 3f 20 6a ce 71 37 ae be 4d c3 e6 ce 66 66 99 59 b5 66 cb 1c d4 73 02 1e b0 1b 24 9b 9c 09 84 95 48 fd 91 14 e6 ac 6c a5 96 f5 b9 bf c0 88 97 28 25 2e 9b 72 06 e3 d2 77 3f 03 f2 be 6d 3d 7e 0b 82 79 b2 63 59 91 62 67 29 3c cb 57 84 20 2f 56 78 16 da 6b a9 b4 92 24 e7 f3 8f 0c 42 f0 72 7e f1 86 01 a7 d3 f0 39 13 de 36 8d 30 d1 26 fe 99 5f 76 4d 00 59 c2 25 84 93 d2 9d 7b e6 45 7f 89 36 3c c3 e9 95 c7 c2 ed db 25 8b 25 ab 34 ad 8b 8e df a0 Data Ascii: -{5<,}``6jiim<UujYZjB\@g3Ejfp:Wp3ao1da J? jq7MffYfs$Hl(%.rw?m=~ycYbg)<W /Vxk$Br~960&_vMY%{E6<%%4
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: f7 03 51 12 21 98 ca 00 ea ee f7 20 56 86 bb 99 0a 25 22 08 15 5e d0 60 97 4e 33 4f f2 8c a2 0f fa 86 83 ac 5b f1 1d 76 3a e0 ca 84 3a d9 e8 5e da 9c 72 d7 bf e7 11 40 ea d2 ec 0a 8d 46 c5 5f ae d7 11 e5 01 08 4e 63 cc 42 d2 17 f1 fd c3 38 70 a3 5c 69 af a2 b5 d7 37 cf ee 8b 67 e5 ad 03 2a ee 8f d1 cd fd 2c 83 43 ab 9d 1a c2 0e e1 5b 87 36 b4 54 92 3f ba ba b5 16 85 25 f2 7a fb c5 40 01 06 18 6a 41 70 42 4e 35 f0 9e 22 34 54 9e a5 e0 f4 22 96 7d 30 75 4a f4 87 8f 9e 96 c8 9c 7e 33 f6 1e d9 0e d1 7b 7d 02 75 57 f6 8c e0 ee 4d 93 1e 6a fa 39 c8 2d 82 5d 13 f5 ab 9d 11 99 27 6c 53 b2 20 2f f0 52 3e 3c a5 2b e7 4f 9f 95 db d8 1f 65 42 23 95 42 63 d2 1a d9 c0 02 e8 6a 4c 5c 11 12 a3 c4 2d be 5a 68 95 5b d7 fa 49 3c 8d aa fc 0f f1 84 18 71 a8 76 de 7e 96 6b 5d Data Ascii: Q! V%"^`N3O[v::^r@F_NcB8p\i7g*,C[6T?%z@jApBN5"4T"}0uJ~3{}uWMj9-]'lS /R><+OeB#BcjL\-Zh[I<qv~k]
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 19 bb 2b 23 1e 4b 48 c8 46 0a 8d c3 e9 c4 ea ed be 83 00 a7 8e 09 ee c8 18 f8 89 1f a7 8f 29 2d 09 be 06 3a 4d 24 cb 79 63 a0 ae 45 c0 25 41 69 95 92 05 32 5d 96 98 08 cc 6c e5 b6 a8 90 89 1c 9a 19 cd 38 86 49 1a bc 79 b2 d2 05 5a 17 47 4a b3 83 1a a2 06 ae 5c d5 1e 32 1a d6 99 58 62 18 bf 4c be f6 f0 9f 49 c2 41 2d fd 47 72 52 00 21 cd 30 a0 13 a0 db 4c 2b c0 51 68 aa 53 f3 59 d4 d2 13 d7 f2 53 bf 35 fd 5f 1e d8 28 a5 06 0e 70 6f 46 9a a7 54 89 87 11 af 23 6b 1c 4e db be ea 6c 7c 72 87 6e 06 b3 64 d7 48 a0 07 1e 96 dc 79 13 db 8a e6 f9 ee e4 c8 26 db 86 17 78 e3 70 b0 c1 f7 e1 e5 5b e9 16 38 47 1a 86 fe d9 64 74 ac a2 ac a3 b1 7a ec b0 83 d9 a6 06 09 38 b4 b4 42 bd ae 4b 50 22 40 32 65 8c 65 03 e6 94 0b ac 79 e6 1e 78 e7 a7 1e da 6a bd b8 9c 06 95 4a 4b Data Ascii: +#KHF)-:M$ycE%Ai2]l8IyZGJ\2XbLIA-GrR!0L+QhSYS5_(poFT#kNl\|rndHy&xp[8Gdtz8BKP"@2eeyxjJK
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: f9 89 d3 81 bb d0 51 65 6a 60 8c 8b 97 54 71 92 05 3d a2 fa b1 94 48 26 a3 6f 8f 1b a1 1b 6b c4 89 4c 44 de 57 a1 4f fb 86 c2 f9 94 eb ca 2a 4a 33 73 5b 19 ce 36 9d 6a 31 f0 40 d9 d8 6e 72 3c ae ce be db 87 86 23 89 cd d2 40 09 88 30 bf 9b 63 06 09 a2 9d 1f 05 99 3f ef b5 9d 3c 32 8a 44 d5 d3 a6 09 bf e8 7d af b0 54 73 cd d9 53 ce fd d0 22 e2 0b 52 cd 0a ae 95 a4 2e 7d df 6f 5a de cd 18 e3 87 f9 46 6f 2a 98 95 a7 dd 97 87 b6 ff b7 96 b5 3a dd f4 d6 1b c1 93 bc c1 37 c9 ed f7 48 c2 f2 e4 8d 9a 0e a5 78 a1 b4 5d c5 db c7 61 19 36 1e 76 35 ed 12 52 fd a0 cc be 65 31 87 ed 24 58 4c 85 9b ba c3 0a 4a 89 61 61 9a 11 13 dd 86 2c c6 f3 ec 84 90 cc 1a 22 33 2d cf 47 e4 21 1c cb a5 38 b3 b7 f2 38 0a 7c e0 54 3a 53 de 50 93 8c 02 1f b8 b6 f5 f1 70 1c 4d 52 ae 59 de Data Ascii: Qej`Tq=H&okLDWOJ3s[6j1@nr<#@0c?<2D}TsS"R.}oZFo:7Hx]a6v5Re1$XLJaa,"3-G!88\|T:SPpMRY
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 38 09 d9 73 af 02 aa d8 14 4d 66 f4 3f d4 b0 07 1c a1 49 12 18 9a b2 72 1b bb 72 21 d2 4b 86 39 d1 8f 38 70 d9 7d 51 bf ec bd 8d 8b e7 67 fb 2d 84 2a 0f 73 6d b5 7e c5 58 06 d7 50 1a 30 64 f8 4d 5e 08 b5 f0 3f 44 c5 18 64 49 82 6d 3c 86 a8 70 3b a1 7f 06 79 8e 06 2c 22 db a6 a6 36 ad e4 76 ca 70 07 54 5c 5e ca 6e f4 db f7 be 7f 05 33 6d a4 3e 38 a4 65 43 ae f1 dc 4e 7d 10 ad cd ea ed 63 c3 a0 e6 d9 ad 24 73 37 db bc 13 fa 9c 23 d5 b5 3c 53 46 2d 41 ba a7 a0 14 e4 86 f9 7a ac d2 e2 89 b1 13 cf 0a 80 42 81 09 2a 7b b8 06 36 63 67 1d 89 87 b1 54 7a ad 47 07 58 1f 32 2b 93 82 cd f6 d9 19 ff 61 07 b6 9c 30 9b 01 1b 86 a4 ff 07 3b e6 1c 20 9d 45 45 61 47 98 64 f1 ce 98 00 06 d7 bf c0 5b ef aa 4d 00 bc ab 06 e1 0a ae 69 f0 1b 9e d3 0f 67 f4 d2 3a 42 88 5b c4 09 Data Ascii: 8sMf?Irr!K98p}Qg-sm~XP0dM^?DdIm<p;y,"6vpT\^n3m>8eCN}c$s7#<SF-AzB{6cgTzGX2+a0; EEaGd[Mig:B[
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 03 fe a7 3a 88 a0 cd 22 e9 d6 8a 9d db 61 09 c2 6c 02 f2 3e 1b de 68 00 c7 e1 79 a2 7f 80 14 61 d1 ce 7b 9e 32 3e af fe 43 50 ae 89 90 b0 4c c5 0f 10 20 9a 6a 3f d1 6e 08 74 67 e5 9e d8 d3 5d 03 a6 16 e1 53 88 b8 f8 f8 7b e1 b5 55 d3 87 05 91 28 27 b3 b5 62 e7 a3 27 66 8f e6 67 30 d3 83 dd ea 18 95 c4 4c 50 41 a5 4d 74 64 15 07 cc 29 e3 b3 32 c3 ba e3 59 21 d6 76 00 8e 26 60 6f 85 af fe 32 12 50 5b 0b 1b 9d 61 de 94 84 bb 35 fb c0 0c 53 87 7c 23 2b 80 b2 01 37 4a 05 a4 8a 0a 23 1b c8 b8 cc 5f ab d5 64 55 a9 a4 36 23 56 19 44 ae 86 c0 9b 42 22 4b 83 f7 d6 7c a2 1a b8 c0 c1 19 16 80 29 02 6f 90 d0 10 aa 74 6b fd 6c 03 9a e6 c8 2c ae 14 fb 6c 11 e8 a1 eb 0f f3 55 1f ec 29 dd b9 65 98 35 81 3c 41 ba 08 b0 1e 5c 30 9c eb 9e 5f ec 37 d8 d9 f6 ed 5e 7e 7b d8 24 Data Ascii: :"al>hya{2>CPL j?ntg]S{U('b'fg0LPAMtd)2Y!v&`o2P[a5S\|#+7J#_dU6#VDB"K\|)otkl,lU)e5<A\0_7^~{$
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 59 bf f3 87 d1 ae ec dd 62 d4 a9 ea 1c f9 9e 19 d9 58 6f c3 49 12 c4 97 cb 9c dd 58 a8 81 a2 0e 5f 27 01 c4 12 f2 c3 35 f5 c7 15 5d 1a 4a 84 b8 fc 32 50 d2 08 39 32 b0 a8 43 cd 89 fa d4 ff 0c fd 40 f1 99 a6 43 a5 a0 86 f9 9b 18 36 14 45 9f 65 d1 00 42 40 8b 0b 06 e8 ac df 41 91 39 94 df 87 c3 02 e7 e6 c7 b4 e8 79 06 5d 00 f5 05 48 f1 09 07 89 03 2d 1c e0 20 db 62 b6 a8 39 0d d1 f0 4f 1e f5 19 30 0c 75 77 a7 ac 49 e2 c8 f1 a6 02 37 4a a6 78 95 c5 ab 32 af f3 5c ca 19 56 66 3d 6e 56 91 56 80 ab a4 d0 22 23 39 93 ac d6 76 38 78 0a fb b6 6d 15 0f 14 70 41 68 f6 d3 13 e8 79 e2 91 33 82 bb 70 51 09 0e 25 e4 d0 74 5e af 91 d8 20 7c 83 c2 82 5d 9d 59 42 38 6a 43 d7 ac 6e c4 23 07 26 cb c9 87 0b ee fc bd f0 ca b4 76 ac cb 92 50 a1 3e 15 96 4f 03 7f a1 a9 a7 04 93 Data Ascii: YbXoIX_'5]J2P92C@C6EeB@A9y]H- b9O0uwI7Jx2\Vf=nVV"#9v8xmpAhy3pQ%t^ \|]YB8jCn#&vP>O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.11	49915	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:32 UTC	377	OUT	GET /wp-content/uploads/2017/12/slider3.jpg HTTP/1.1 Host: fortis-site.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:33 UTC	745	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:33 GMT Content-Type: image/jpeg Content-Length: 68363 Connection: close Last-Modified: Tue, 09 Oct 2018 23:31:39 GMT ETag: "5bbd3a5b-10b0b" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 2 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i9oyKgSPsugXdQ9P3VJThoXFWNGAMx%2B9WQtnkUTlJi1Jm0aYB0Dvy4tjZSXb8btKFdRuZ%2B4OGczvAUTKn93LRB667lo1DwMB2L9vaN5AlbHHylmtSS1FywoQYaOD89qOTtE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c94ab6831f6-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:33 UTC	624	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 1f 43 6f 6d 70 72 65 73 73 65 64 20 62 79 20 6a 70 65 67 2d 72 65 63 6f 6d 70 72 65 73 73 ff db 00 84 00 08 08 08 08 08 08 09 0a 0a 09 0c 0d 0c 0d 0c 12 10 0f 0f 10 12 1b 13 15 13 15 13 1b 29 19 1e 19 19 1e 19 29 24 2c 24 21 24 2c 24 41 33 2d 2d 33 41 4b 3f 3c 3f 4b 5b 51 51 5b 72 6c 72 95 95 c9 01 08 08 08 08 08 08 09 0a 0a 09 0c 0d 0c 0d 0c 12 10 0f 0f 10 12 1b 13 15 13 15 13 1b 29 19 1e 19 19 1e 19 29 24 2c 24 21 24 2c 24 41 33 2d 2d 33 41 4b 3f 3c 3f 4b 5b 51 51 5b 72 6c 72 95 95 c9 ff c2 00 11 08 03 b1 08 98 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 08 01 01 00 00 00 00 f9 45 06 28 55 ba 3c bf 0f e9 Data Ascii: JFIFCompressed by jpeg-recompress))$,$!$,$A3--3AK?<?K[QQ[rlr))$,$!$,$A3--3AK?<?K[QQ[rlr"E(U<
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: ec 65 95 58 73 e5 cb e3 fa 1d db 3a 33 a2 d2 d2 d7 37 cc 7d 4f 68 ae 7e 1a d9 67 2e f6 5e 7e 3b 7b b8 3a 72 b6 52 79 9d ff 00 29 7e 87 67 44 70 7a 34 69 cb 72 6b e3 f4 a6 8c fa fb e2 1f 29 e9 fa 28 6b d1 cd e7 fb 17 a4 84 24 42 42 11 10 88 44 48 88 44 22 42 10 90 4b 21 20 48 42 20 88 42 41 04 f2 b5 e9 ec c3 3d 19 75 2a 22 4b 92 d5 fa 5a a2 96 44 4a a6 8f 37 c1 fa 7f 62 41 70 e6 cb 9f c6 f4 7b ef 46 c2 a9 55 4b 5a fe 4f e8 7d 61 7c a6 1b 97 97 79 38 7b b8 b9 fd 0d 94 0a f2 bc 2e 5f b1 eb c4 be 77 7e 63 4d df 1e 5f a3 b2 68 cb dd c5 1f 29 ea 7a 29 0b cd 87 8f d7 d7 bb 74 44 48 44 82 22 10 90 84 88 88 44 84 22 24 10 21 21 09 04 20 48 44 22 4a 97 5f 95 86 3d 19 eb c2 f5 2a 44 8b 6d 55 fa 51 55 42 44 15 75 f0 fc d7 b5 f4 77 13 0e 7b a3 c8 ea f5 5b b7 0a 53 22 Data Ascii: eXs:37}Oh~g.^~;{:rRy)~gDpz4irk)(k$BBDHD"BK! HB BA=u"KZDJ7bAp{FUKZO}a\|y8{._w~cM_h)z)tDHD"D"$!! HD"J_=DmUQUBDuw{[S"
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 88 21 11 10 89 01 20 84 22 08 44 20 2f 9b c9 a3 ab 0d 9a ae 3d 1b d2 12 55 b5 72 10 20 fa 15 a5 15 4a 16 70 e3 75 78 9b ba fd 0c f6 ed 57 37 97 e5 fd 47 74 0a 55 5a 5a ab e6 f0 ef d3 d1 69 c1 8f 9b f4 7c bd a5 0d 7e 77 a1 05 e4 e7 f2 7c df b9 d9 20 63 c3 e9 d4 1f 37 bf d6 e5 d7 d9 35 f5 73 7b dd 52 22 24 24 39 39 f0 f1 bd ac 77 f5 54 48 44 42 22 42 12 22 10 84 44 22 10 84 42 08 44 84 20 0f 2b 46 9e 99 96 b6 3d 5b 51 12 32 ab 6a 82 08 7d 0a d1 45 2a 97 1e 1c 72 d1 e2 74 76 f6 db d5 6a b4 f9 fe 27 d0 7a a0 aa 5a aa b6 df 9b e8 d7 bb 2a 70 76 34 78 fe 8f a8 b2 98 79 9e 90 46 7e 77 8f e6 7d b6 dc 6c 09 c1 e9 d1 f3 db fa f5 f4 79 be b1 ab 7b e8 71 88 89 0c 48 f3 a7 2f 0f ab 87 76 ca 88 88 84 44 12 12 42 11 08 48 22 10 84 12 09 04 84 20 5c 3c 9d 7a b7 ed c3 06 Data Ascii: ! "D /=Ur JpuxW7GtUZZi\|~w\| c75s{R"$$99wTHDB"B"D"BD +F=[Q2j}Ertvj'zZpv4xyF~w}ly{qH/vDBH" \<z
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: d2 ea d9 36 7a 19 0a aa 28 41 2a d9 cb e2 68 fa cd f1 7c be 3c fc fd fd 0a b2 56 5e 5f 6f 0f 56 c5 b6 93 cc 9e d1 2e 5e 57 3f 81 f5 5e 8e 31 3c 0d fd 5c fd b6 b3 52 ea d1 dd 38 3d 06 0d 1b b6 fd 2e 11 12 22 24 23 9f 86 f1 f3 7a 98 ef ea a4 42 22 22 09 08 44 21 11 04 21 08 84 10 38 38 34 ed cb 66 ab 8f 4e e8 86 2b 6d 64 c8 10 81 09 62 08 fa 02 94 e6 e3 b6 78 b8 7a 3d 7b 26 5e 8e 54 52 a9 45 84 14 cb 9b c7 f2 7e b7 d0 97 e6 77 e9 e3 f4 56 91 53 cc cb 7e d3 25 51 e7 f3 7b c5 79 7a 3c 1f a7 f5 30 3e 7b 77 7d d5 cb e8 aa aa b0 e5 ef e6 cf a3 09 39 f0 fb 0c f1 49 09 09 10 79 da de 3f 77 46 1d db 6a 11 09 12 08 88 42 10 88 84 21 04 21 08 b3 cc e5 e7 ea b8 17 a7 34 44 96 db 6e 40 10 21 04 21 1e fa a9 79 39 2d d7 e4 63 e8 f4 6e 99 7a 39 94 a2 d2 8a 42 59 56 ea f2 Data Ascii: 6z(A*h\|<V^_oV.^W?^1<\R8=."$#zB""D!!884fN+mdbxz={&^TRE~wVS~%Q{yz<0>{w}9Iy?wFjB!!4Dn@!!y9-cnz9BYV
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 84 21 02 08 41 0d b9 ea f2 a7 76 ed ec 76 fa 39 2a 95 4a a1 54 aa a5 2a ad cb e5 b6 39 b7 a1 71 f3 f6 e8 d5 ed e5 e6 f4 64 ca c8 a4 06 59 e5 e5 6d cf 4b c1 f4 fd 6c 38 b7 f7 40 02 22 73 74 d1 c9 db 53 4c d9 e8 7b f3 14 48 90 48 88 71 72 35 f9 1e cd c3 b7 7e 44 21 10 90 22 10 84 40 42 f1 79 9a 57 68 ea da 92 24 b7 25 b9 51 04 10 44 10 40 84 10 df af ca c7 bb 76 f6 39 fa 5b 02 d2 aa 8a a5 28 aa aa ab 78 3c 7d 97 93 aa 44 c7 83 b5 a7 4f 3f a5 ab a0 a0 40 36 df 2f 6f 67 36 8d bf 3f e8 fa ec 78 f2 f4 00 21 10 e5 ea a7 1f 56 c4 6a c2 fd ae 11 22 22 22 12 13 c9 97 8b 97 d5 98 7a 59 e5 04 42 21 04 24 10 88 96 0b e7 70 f3 2e cc f6 75 2c 48 8b 91 72 b4 12 58 09 08 20 81 08 41 b7 c8 c3 bb 6f 4a 3d 3d 85 55 15 54 52 a9 54 aa a5 b9 7c da ea bb 24 63 e6 f6 ad c3 9b 97 Data Ascii: !Avv9JT9qdYmKl8@"stSL{HHqr5~D!"@ByWh$%QD@v9[(x<}DO?@6/og6?x!Vj"""zYB!$p.u,HrX AoJ==UTRT\|$c
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 25 88 c3 9f ad cd df bf 56 8d 3f 43 ea e1 0c 48 88 88 48 87 99 a2 e3 e6 f4 f5 e3 af d0 e8 c8 22 08 82 2f 2f 93 a7 5c d9 b8 ed cd 09 8c cf 2a 5c 95 03 10 81 10 22 04 41 02 10 96 23 d7 aa ab 42 8b 42 8a aa 55 29 4c af 85 cf 72 f3 fa 76 55 52 07 2e 1d 31 62 4c 5c 1a bb b5 6a d7 db bf 1e 90 71 6a dd e1 ee f6 f2 c0 02 84 e4 dd d4 01 8a 72 f5 56 8e be 8e 6c 73 fa ec 71 48 48 44 24 44 30 f1 f2 69 f2 fd 6c f1 c3 d4 d9 41 08 48 a7 0f 9b ce bb 33 67 d7 9c c4 91 95 b5 6d 08 22 04 18 82 11 02 10 22 02 0f 59 6a a9 4a 51 4a 2a a8 aa a5 32 9f 2b d0 d1 87 4a d0 40 e0 e8 cd 48 93 cd d5 dd 5a f5 63 bb b3 71 17 87 56 ff 00 0f 67 bb 70 28 0a 27 35 ed 02 43 9b 66 d3 4f 46 dd 5c bf 63 be 49 08 90 88 88 83 8f 85 78 f8 fd 79 86 5e 9e 60 82 11 5e 67 17 1e dd 5d 39 6c ec 58 c4 c6 Data Ascii: %V?CHH"//\\"A#BBU)LrvUR.1bL\jqjrVlsqHHD$D0ilAH3gm""YjJQJ2+J@HZcqVgp('5CfOF\cIxy^`^g]9lX
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 21 a3 83 19 ab 87 77 5d 9c 3a 3a 37 e7 33 ec a9 23 1c 95 95 b6 88 81 21 20 88 b2 52 44 b0 88 22 08 10 10 20 f5 28 a2 95 4a 15 54 a5 2a ae 5e 57 95 b4 e7 e9 16 00 30 e1 e8 d3 87 50 aa 01 08 92 4c f2 f3 67 a5 e0 e8 f7 b0 6f 92 89 41 43 6f 7d c7 83 05 4e 7c f7 f3 74 e6 11 35 fd be 32 44 24 11 11 04 45 f3 b4 62 e6 e2 ef d9 e7 4e ad b9 63 b3 b1 11 25 c8 b7 25 08 82 44 ac 48 45 92 a4 08 24 21 04 01 04 20 7a 85 15 45 28 aa 55 29 4a b7 2f 95 d9 5a 73 d9 28 08 1a 79 32 c7 a8 55 01 04 44 93 3c bc c7 a3 e0 eb f7 33 e2 cf a4 2c 28 03 3f 43 37 06 a2 b4 4c e7 50 43 47 d3 7a 58 c8 88 42 22 22 10 63 e5 49 8f 27 3f 2f 47 4e fd 98 6e ea 44 49 72 aa ca 88 12 08 12 20 90 4a 88 21 08 11 02 04 08 27 aa 50 b2 ad 14 5a 55 29 45 b9 71 f8 1b d7 97 a4 a1 00 71 6a 75 8a a1 2c 20 88 Data Ascii: !w]::73#! RD" (JT*^W0PLgoACo}N\|t52D$EbNc%%DHE$! zE(U)J/Zs(y2UD<3,(?C7LPCGzXB""cI'?/GNnDIr J!'PZU)Eqqju,
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: db d9 d5 8f 4f 4a 24 39 39 b2 b3 97 ce f7 13 56 af 6b 3c c0 82 20 88 21 08 42 09 2c 09 00 44 08 81 02 12 fc f7 ab b7 b3 ba c5 14 aa b2 94 52 ae 5e 77 91 b0 e7 dd 54 0d 5c 3d b6 2b 93 2d f0 b4 80 81 02 11 76 eb f2 73 f7 3c 0e 3f 53 d1 c3 08 12 01 86 bb d3 60 a2 8a 2e a9 bc 53 52 fa 9f 47 8c 88 41 7c ee 7f 17 5e ce cd d7 af 7c 84 c5 94 f3 06 1c 9a 7d 54 d1 7d 9c aa 88 22 10 42 22 20 31 01 04 21 2a 20 84 08 10 3c 5d 3b bd 2d 9e 87 4c 0a 55 14 52 95 96 5f 31 6a 73 f4 0a 1a b8 7b 28 38 f7 6c 16 a0 40 92 cb 08 4c b6 e9 f2 f6 7b 7e 07 1f a7 e8 cd 40 48 8a 63 af 1e ab 15 45 05 63 ab a2 8a 6a c3 3f b6 48 80 79 7a 3c 4d 3d 7e 86 73 b3 74 91 25 56 9f 37 39 74 79 fd bd 73 1e 7e af 51 95 11 02 20 24 18 90 24 02 20 80 82 10 81 02 09 e5 73 dc 3b fa f7 7a 59 a5 0b 4a 14 Data Ascii: OJ$99Vk< !B,DR^wT\=+-vs<?S`.SRGA\|^\|}T}"B" 1!* <];-LUR_1js{(8l@L{~@HcEcj?Hyz<M=~st%V79tys~Q $$ s;zYJ
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: e5 b9 16 84 10 40 82 12 ed cb 93 87 6f b7 e0 f1 f5 fa b9 f3 0a 01 65 04 01 8e bc ba 52 51 a7 ab d3 42 f3 f8 da fa 76 ec f7 f0 dd d0 92 48 a5 b7 24 10 84 62 63 e1 a9 cd c1 ec c9 35 74 fa 4c b2 54 21 08 41 10 40 84 25 84 04 b2 10 96 04 13 72 aa aa 61 c4 4d 3c fa f4 f5 3b 3a 3a 3d 0c d5 f2 bb ac 73 74 b1 e3 e8 cd 2a c1 06 1c bb 36 0a b0 40 42 04 20 dd 78 f8 f6 fb 3e 1f 1f 5f a9 9f 38 02 82 84 11 49 ad d1 96 25 6b c7 dc 2b 93 93 4e 5b 7c ee 6f b9 ea d9 13 19 15 6d b4 44 20 90 8e 3f 2f 33 0e 3d 7e 9b 19 ab d1 e9 cb 2b 42 08 84 11 02 10 40 81 01 21 02 04 0d aa 64 55 4e 4d 19 49 c9 86 1a ba b2 ee d9 db db 7c cf 27 61 a9 b6 71 6f d8 94 08 1a 74 6d cc 50 42 04 10 21 1b ef 17 26 df 63 c4 e3 ea f5 73 e7 82 81 40 a1 88 53 0c 37 ec 91 70 d5 ea f4 af 06 8d 3b 32 e0 d5 Data Ascii: @oeRQBvH$bc5tLT!A@%raM<;::=st*6@B x>_8I%k+N[\|omD ?/3=~+B@!dUNMI\|'aqotmPB!&cs@S7p;2
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 27 8b 3f 63 6e ad 40 a0 50 50 51 4d 1c 9b 3b 9c 7a b1 bb ae 12 63 ea f6 dc d9 72 e9 ba 7d 4f a5 c2 22 10 48 10 82 22 22 17 cd e0 cd 71 e6 e1 f6 49 8e 1e cb 2b 90 09 16 24 09 52 04 40 40 81 20 40 65 62 ad 15 6a 15 96 7f 3d af 3d 38 ed d3 bd 8e 8d 59 26 ad f4 c3 0c fb b6 44 73 e1 b3 24 5a 21 01 08 08 21 97 43 c9 c7 7f a7 e4 f1 e7 eb ed d7 a8 01 45 02 82 97 97 9f 77 66 be 5c 30 cf 6e 4c 35 ec d7 af d3 f5 32 ca e3 c4 c3 5f db 5c 51 08 21 10 42 08 88 84 f1 30 ca cd 7c b8 7a 72 30 cb d7 c7 2c a8 20 c4 45 89 58 82 08 21 00 c4 10 0b 56 8a aa b6 2a e1 f2 fd 5a b0 df a7 3d 84 c3 46 19 4d 7b 3a 35 e5 a6 61 d1 d9 64 e5 cb 3a 8b 50 22 02 58 80 84 cf 7b c9 c7 7f a7 e5 71 e5 eb ee d7 a8 94 02 8a 0b 2a 9c 7a ba 37 4e 49 86 cd a2 69 cf 63 5f 57 af b3 2b c3 86 3a 7e 87 d7 Data Ascii: '?cn@PPQM;zcr}O"H""qI+$R@@ @ebj==8Y&Ds$Z!!CEwf\0nL52_\Q!B0\|zr0, EX!VZ=FM{:5ad:P"X{qz7NIic_W+:~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.11	49913	34.208.13.132	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:32 UTC	417	OUT	GET /api/a11y-data/v0/page/https%3A%2F%2Fwww.rmshg.com%2F/DESKTOP/WIDGET_OFF/status HTTP/1.1 Host: api.userway.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:33 UTC	538	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:33 GMT Content-Type: application/json; charset=utf-8 Content-Length: 77 Connection: close X-Service-Version: seo-w-fa0246c1 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD, PUT, PATCH, POST, DELETE Access-Control-Allow-Headers: * Access-Control-Expose-Headers: Content-Range, Content-Length, ETag, Content-Type Access-Control-Max-Age: 3000 Cache-Control: no-cache, no-store, must-revalidate ETag: W/"4d-wYLRLrbWidRwnfhEvoB+Y2U04NY" Vary: Accept-Encoding
2024-05-06 16:42:33 UTC	77	IN	Data Raw: 7b 22 70 61 79 6c 6f 61 64 22 3a 7b 22 73 74 61 74 75 73 22 3a 22 43 4f 4e 54 52 49 42 5f 50 52 45 53 45 4e 54 22 7d 2c 22 70 61 79 6c 6f 61 64 54 79 70 65 22 3a 22 50 61 67 65 43 6f 6e 74 72 69 62 53 74 61 74 75 73 44 74 6f 22 7d Data Ascii: {"payload":{"status":"CONTRIB_PRESENT"},"payloadType":"PageContribStatusDto"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.11	49916	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:33 UTC	392	OUT	GET /wp-content/uploads/2018/10/insurance-inspections2.jpg HTTP/1.1 Host: fortis-site.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:33 UTC	754	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:33 GMT Content-Type: image/jpeg Content-Length: 191976 Connection: close Last-Modified: Tue, 09 Oct 2018 23:35:36 GMT ETag: "5bbd3b48-2ede8" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dPp3AYXA1Fzdk3qdH%2F%2BI7z9U3mpmmzp8Hp0LcmQVyGhMRpojkN3NsgW%2FIPoCZiNaS%2BAz%2B7p6%2FNhDy1NCQy82eemQ7WTFkHPfZwQkjVNMcib4HxLm0vPegCHMGLqaOisPN0k%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c96fe917472-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:33 UTC	615	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 1f 43 6f 6d 70 72 65 73 73 65 64 20 62 79 20 6a 70 65 67 2d 72 65 63 6f 6d 70 72 65 73 73 ff db 00 84 00 04 04 04 04 04 04 04 04 04 04 06 06 05 06 06 08 07 07 07 07 08 0c 09 09 09 09 09 0c 13 0c 0e 0c 0c 0e 0c 13 11 14 10 0f 10 14 11 1e 17 15 15 17 1e 22 1d 1b 1d 22 2a 25 25 2a 34 32 34 44 44 5c 01 04 04 04 04 04 04 04 04 04 04 06 06 05 06 06 08 07 07 07 07 08 0c 09 09 09 09 09 0c 13 0c 0e 0c 0c 0e 0c 13 11 14 10 0f 10 14 11 1e 17 15 15 17 1e 22 1d 1b 1d 22 2a 25 25 2a 34 32 34 44 44 5c ff c2 00 11 08 04 00 04 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 00 07 08 ff da 00 08 01 01 00 00 00 00 f1 52 30 ed 2f 30 03 14 ae Data Ascii: JFIFCompressed by jpeg-recompress""%%424DD\""%%424DD\"R0/0
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: d7 9c e2 97 e7 f0 19 84 11 9a f2 71 c6 e7 14 a8 fe 11 a4 12 4d 8f 5b 86 17 31 23 8a d2 c1 94 90 26 48 10 ac 34 fb 9f 4e b5 cf 79 df 9b 53 86 d3 d3 bd 57 5d 21 c4 ee 7a f4 78 c0 e3 4b 72 b9 1c 8c 05 64 3f 39 c0 65 23 29 55 1d dc fe 21 5b 63 3a 54 38 fd d6 d6 35 4a d1 74 56 be 30 53 9c ee 96 27 bd 5d e0 e2 7b 4a 22 73 64 aa a3 cc e9 2d e5 74 d5 95 60 c2 bc 45 8c 20 c5 74 9b 62 c3 a5 25 d6 a7 7b ad d2 5f c9 e8 b9 1f 30 f3 8a 9d 57 b5 7a 3c c7 2b 5a 45 8c 30 8d 1a 59 0f ee e2 95 3b 9a 3a ac 17 99 e4 23 29 15 cf 62 b9 d2 27 c8 d0 e5 a0 92 65 a5 49 d5 ee 58 cd 63 47 19 84 e4 21 08 c3 1b c1 23 c9 1b b9 c6 e9 93 23 c6 2c 82 3c 3d a1 00 8b 28 ad 79 5a 20 c4 68 da 0b 6b 71 40 d9 fa a6 e2 fe 61 39 ed 41 56 66 f0 d4 7e cd a8 50 71 1e ee 50 89 06 35 29 9d ce 25 3d d2 Data Ascii: qM[1#&H4NySW]!zxKrd?9e#)U![c:T85JtV0S']{J"sd-t`E tb%{_0Wz<+ZE0Y;:#)b'eIXcG!##,<=(yZ hkq@a9AVf~PqP5)%=
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 5b 83 f3 68 ca 46 38 cc e5 6f 3c f2 0b 2a 4b da 15 f9 d4 87 30 1e db 57 cc 94 a5 e2 2c 37 f4 af 55 db 5f ce 39 52 b3 23 a4 bb 3b 55 b1 87 cd 71 3a ba 77 32 6b 85 dc bc a8 f6 73 7c e7 c2 a2 2a ca 1b 7a 58 5d 23 be 8f d2 57 4b 99 e7 75 37 57 5d 52 f7 46 14 97 16 f6 d5 ae 68 ca 36 b9 ce 1b 1d 8f f1 ba e5 e7 13 8a e0 b4 a9 32 41 4e 75 41 fc e7 21 ea 1e 99 2e 4c e2 71 0c e8 81 61 74 5e db a0 9e f2 f6 7f cc 36 db c9 bc 89 d0 63 bb 99 1c 75 9a d9 0e 6f 22 72 a3 bb 95 3c f3 25 e4 dd ce 7d a0 e0 ab 1f cf fa 5b 4d 8a 97 ad 6d 1f 9f 96 41 ac c5 04 44 96 79 f7 b3 5e 83 2f 23 de bc ad 8d 95 f1 08 1c af 77 3d 8f e5 2c a9 0f 9b a9 cd 33 e7 47 b9 59 26 59 e5 94 ae 74 98 a0 6b 76 17 fe 9b 6c 58 91 b2 f8 89 9e c7 a4 2a 35 59 4f 1f 9c d8 f5 d0 af ee bb a5 bb bb bb b9 60 ce Data Ascii: [hF8o<K0W,7U_9R#;Uq:w2ks\|zX]#WKu7W]RFh62ANuA!.Lqat^6cuo"r<%}[MmADy^/#w=,3GY&YtkvlX*5YO`
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 9a b0 cc ed 1b 4d 72 fc 6f 82 6e f3 be ee bf 31 ef fd ec 3e 11 7f b6 c4 82 da 83 db 8c bd dc 0f 36 f4 97 f3 2a 3e 6a 8c e7 98 d2 6d f4 9b eb d2 ca 7b 09 dc 00 a3 e4 c7 85 e2 7d 49 0d fd cf 7b 57 c0 5d 29 ea 8d 10 21 35 48 9d ce 28 d7 5f e9 18 1c e7 d2 9e ce c7 61 68 a3 46 63 db 12 54 6b 3f 40 93 9d c5 5c 58 61 e3 fb ed 86 65 9a 4c 47 a1 47 c0 7a 20 95 e3 7f 8d 4d 8d 94 f6 9d 26 53 55 ce cd 5a d9 50 4c ca 6e 08 5a bb 4e 5e f1 fb 0b 23 5d 5a fc cb 9f 42 3c f2 ed 75 3e 87 7c 59 0f 47 f7 2b 04 19 6f 89 4f f3 e8 55 5c e5 33 1b e3 b5 2e 55 57 46 10 18 fe 2b 44 f6 3b ac fd 4f 07 9a f7 cf a4 d8 1f 3d 81 26 1e b4 34 f0 a8 96 d2 4c 4a 8b d1 e6 63 db d2 eb 34 57 7a 7a 9b a7 c1 c7 6f 63 d7 db 57 e0 7c 79 76 79 1d 67 af 1e f1 cc 8f 23 9b 23 90 9c 83 38 fc 5c 7e a0 4c Data Ascii: Mron1>6*>jm{}I{W])!5H(_ahFcTk?@\XaeLGGz M&SUZPLnZN^#]ZB<u>\|YG+oOU\3.UWF+D;O=&4LJc4WzzocW\|yvyg##8\~L
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: d3 9d a2 b4 37 73 d5 46 e5 4e 48 95 95 34 b8 0a 15 f9 8d ac 8e 06 3d e6 2c ad 86 b6 3f 92 47 91 69 b1 de fd 37 9a ca e9 f0 81 63 1f 22 de ff 00 63 49 e4 fa 7a 9c 0c 6b e7 60 05 e9 d5 fe 61 70 4a 87 59 42 ad b6 16 e0 7e 69 a9 f4 0d 75 4d fe 34 5a 16 1c f4 95 90 e8 b3 3a 6d d5 74 6c 80 d0 72 ab fa 6e ff 00 cf bd 37 cb 5e e5 de 64 23 f3 da 8e 75 84 ed 3e a7 43 ae b6 2b f9 ce 56 b1 fc 88 0a fc ec 5c 3e 4d 7e 61 2d 68 a2 f2 bd c4 77 3a c7 7b 9d a5 8d a8 fa bf 7f e7 35 5b 5f 3c aa 67 30 0f fa 58 9e 7f e3 94 29 3e d7 23 17 40 7c 77 aa 51 e6 b3 3b 00 e4 74 b2 73 56 de e7 93 5f 4f f0 cf 6c b0 f1 1c 17 a3 6a 7d 0a a3 ca 1f 3b 25 a4 b5 99 aa c5 62 34 95 b4 71 80 ee f4 6c 34 7f 4c c2 41 eb 2b ec af 2a cd 88 56 bc b7 da dd 8e c6 ec e4 5e 7a a3 53 b9 16 36 7a 9b 3b e7 Data Ascii: 7sFNH4=,?Gi7c"cIzk`apJYB~iuM4Z:mtlrn7^d#u>C+V\>M~a-hw:{5[_<g0X)>#@\|wQ;tsV_Olj};%b4ql4LA+*V^zS6z;
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: bf cd be 49 8c 8f 45 47 49 8c d7 3f 9e f9 81 55 27 d7 5e 95 e5 71 7b d2 fc 52 ba b6 31 e0 53 43 98 c8 40 94 10 7a 6d 56 68 b5 12 d2 17 af f9 a4 1b fd 3e aa ee 36 36 b2 b2 87 d1 bd b3 77 f3 97 9c f3 e2 f3 f9 26 b8 04 ee 2c b8 e4 bf 8d 5e d7 af 39 85 7f b7 78 8b b9 a4 55 45 21 49 a4 d6 e8 2d ed 27 49 43 c5 43 4d b6 3a 25 7f 8e f9 b7 c9 a0 5e 72 f1 85 dc 66 23 8a a8 e5 37 d9 be c5 d4 99 5d 0c bf 37 cf 57 52 da d6 65 23 dc 3f 3b 03 51 33 5d e4 37 f1 68 35 dd 93 f4 18 d8 9d a6 a3 27 13 41 86 d1 6a bd 33 47 67 f2 ee 14 87 e6 b9 f6 ce 58 83 4e 71 2e 1f 1e 01 08 f7 b5 fd cf 6e ab 59 e5 ea d2 ab 48 e3 35 d7 9a bd 1d ac c9 c4 53 1c 2c d1 5c bd 16 07 8d f9 af c9 c1 4e 7b 91 a4 45 7b 95 1e ab ce 2f d7 1e ed e6 3a fa ac 6c ca ca 0c b8 ea 6d 9b 95 8f 78 6a 20 7b 5e 13 Data Ascii: IEGI?U'^q{R1SC@zmVh>66w&,^9xUE!I-'ICCM:%^rf#7]7WRe#?;Q3]7h5'Aj3GgXNq.nYH5S,\N{E{/:lmxj {^
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 2b 0d cb ce 35 9f d1 5f 3c d5 fd 51 f3 c5 0c b8 44 5e 23 88 f7 18 86 03 f9 eb ce 57 f7 14 d6 b1 9f 6e 27 39 fb 3f a1 7c 1a 9a aa d2 d6 5b 91 92 19 55 55 a4 f6 a9 d3 a9 fc 3f 0e 05 f9 8c b6 3a 2d 9d cc 3a 0a 0a c8 e5 00 a6 57 58 53 71 f8 1c f3 4f fa 3f c2 e8 53 ed 39 7f 2a 45 b0 36 7e 37 b0 8b c3 46 ac bd 9d 98 e7 3f 8d d6 f5 c3 96 e7 23 fa 3b b4 f4 45 bb a4 0b 1e e5 7c c0 93 88 fb 78 d1 55 1e a4 47 31 fc 67 71 a7 03 88 bc ff 00 5c f7 2f 0f f3 1b 9b 09 67 31 2d 62 e7 e3 de fb 0e c5 be 6b e2 11 02 9f 35 48 f4 af 4e d6 4b af c7 e7 28 eb 6b 6a a3 a0 c6 34 7d b3 ca 77 75 e7 9f 82 47 d5 7e ad f3 7d 93 f0 b5 17 de a5 80 f1 d4 24 bd 66 29 08 e4 6c a2 0d cd fa cf 5f 9c 99 ad 9d f3 2e 57 0e 45 eb 1f 64 f1 02 38 64 94 02 f1 dc f6 15 ae 77 2b 5f dc a5 92 29 68 9e b7 Data Ascii: +5_<QD^#Wn'9?\|[UU?:-:WXSqO?S9*E6~7F?#;E\|xUG1gq\/g1-bk5HNK(kj4}wuG~}$f)l_.WEd8dw+_)h
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: b3 f2 bf 0b a0 68 c4 84 9b 10 5c ae 6f 72 7a 1e 01 8a af 52 27 39 5c 9a b1 7a b4 af 3c f5 3c 0f 96 b8 dc 45 6a 19 1c af 4b 6a ee 7a a1 3b 9f ce ee 26 eb 08 e2 a1 1c af 92 d6 f1 39 48 d9 64 98 43 ce 97 21 c1 ae 86 6d 5f d2 16 15 d7 8c c4 78 2e 7b 9b f3 a4 fb 49 ef 89 5b 5a e5 14 96 a9 f7 9e e9 79 e4 be 47 4e c4 1a 16 3e cb 1c ae 4e 6f 29 7d 0f cd dc ee e9 81 73 fb b9 7b d8 34 76 db 6f 9b f0 8e 2a ab da ee 73 4a ef a2 a2 78 4f b7 79 0c 07 28 de ab ca 84 55 79 14 85 27 34 cf 1b fb b9 7a ff 00 92 44 f9 af 1c 5a 95 b2 dd 7d 0f 94 ae d2 ec 30 bf 34 d6 11 9f 3b dd 9a 6b 99 0e 8f 96 44 95 1b 6d f4 76 99 ac d4 76 38 62 56 a9 06 8e 20 9e a9 e8 78 98 ad e5 9d 08 9c e7 aa 2c c5 f6 a0 79 2d 71 39 ee e2 23 1f ea 9a 1d 13 fc cf d3 2a 60 e3 32 5a 54 c9 6f 96 a2 bc 51 dc Data Ascii: h\orzR'9\z<<EjKjz;&9HdC!m_x.{I[ZyGN>No)}s{4vosJxOy(Uy'4zDZ}04;kDmvv8bV x,y-q9#`2ZToQ
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 7a 5d 8c 6a ba b8 ab 07 2a c9 51 b3 d9 fc d8 fb 9a e5 94 1f 2c e0 c4 1b 66 58 ba d2 14 ba c6 d7 43 e7 be 7c c6 33 d1 7c ed 2e af 22 e1 23 bb 91 c5 ee e6 91 19 a9 de f8 c9 05 32 3f 39 56 c2 c6 1c 07 25 8f da 35 bf 36 6a 6a e8 36 60 a0 d6 c8 cc 68 74 f8 89 9e 99 81 77 a4 47 cf ca f9 d9 dc ab d7 df 64 62 75 fb 0c 66 6f c9 a8 df 65 73 75 7d e9 56 d1 ac aa 6a 6b d9 8e cd 91 23 d1 e6 e1 f4 f1 c6 e5 52 f9 6b c1 5a 36 a5 e1 24 4c 3e 7d 8e a5 42 ba 44 e3 35 fd 36 ce a7 32 37 72 a3 9e 46 37 9c a8 9e e5 e6 79 95 fa e3 e5 20 b5 ce 7b d6 5b a3 7b ef bc 7c f1 e6 d6 3a 3c 7d 96 9f 2f 27 4f 9f 35 d8 a2 cc d6 66 fb d2 2a 7c b7 0d c5 54 4f 53 fb 02 a2 d6 2c a9 0c c3 e3 62 df ca 7e ea 0d 56 b2 ba 89 b4 d8 0a a7 0a 1e 6e af 92 c6 22 2a a1 7c ac 9d 5a 1e 8f 63 b0 a8 b8 3d 1d Data Ascii: z]jQ,fXC\|3\|."#2?9V%56jj6`htwGdbufoesu}Vjk#RkZ6$L>}BD5627rF7y {[{\|:<}/'O5f\|TOS,b~Vn"*\|Zc=
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 28 14 75 86 eb da b6 19 dc 8c 5b 47 96 1d 06 52 96 9a b2 2f 39 15 84 91 ea f1 bc c9 6e 6b e3 8d 17 7b 81 bd fb a4 78 42 e1 2f 35 d8 d6 6c a1 d0 dc 5d 7c 9d 47 ce e6 98 a4 13 9b 3e 5c fb bf 5f f6 19 58 fc 84 fb 99 59 2a 09 c1 cb e2 ab f5 7e 74 ab ad cd f0 58 de e7 c8 b1 29 e6 78 44 8f 42 c8 58 1e 20 06 c0 b0 00 7c 94 38 d2 ca 1c 40 21 1a eb 4f 40 f6 5d 95 66 26 15 91 56 38 a9 33 74 55 b0 e2 88 01 1b 64 3f d8 72 f8 bb ea 78 c2 eb 4f 52 f1 84 fa ff 00 d7 63 d2 f9 8c bd 26 55 da b8 35 52 f2 fe 11 4e d9 b1 fa 5e c0 f9 9a 94 2c b9 be a7 ee 7a b8 b9 97 4a 75 3e 76 a6 31 a9 30 b9 34 4e 59 a2 46 a3 c7 c6 9a 72 58 dd 7c fd 21 d2 0d 2d ad 58 f1 e1 c5 8e e3 19 48 8a 26 07 9c bd 27 55 e8 7a fe 85 22 4c 86 38 91 ab 29 e8 aa ea 2b 7a 14 51 b8 ee f6 3c 8c 6a 2a f1 ae bb Data Ascii: (u[GR/9nk{xB/5l]\|G>\_XY~tX)xDBX \|8@!O@]f&V83tUd?rxORc&U5RN^,zJu>v104NYFrX\|!-XH&'Uz"L8)+zQ<j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.11	49919	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:33 UTC	654	OUT	GET /wp-content/cache/min/1/wp-content/plugins/parallax_video_backgrounds_vc/assets/css/style-b40bed06cbf66bb43c63a21c111befe2.css HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:33 UTC	766	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:33 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 28 Oct 2021 03:54:18 GMT ETag: W/"617a1eea-1d77" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XQbYZJc3wdpq5serTV0rJuf5EOfdxHpMeyQOwUI0Ac0Q4tPFQ8adX26IxCvok5ffBaRrXfqPGJqIj%2BO1dxPbGfNn%2F0xcexFvWljhQ4J0bUPv2ohUMYA34ji0orZjctegn70%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c982e64a515-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:33 UTC	603	IN	Data Raw: 31 64 37 37 0d 0a 2e 73 6d 69 6c 65 5f 69 63 6f 6e 5f 6c 69 73 74 5f 77 72 61 70 2c 2e 73 6d 69 6c 65 5f 69 63 6f 6e 5f 6c 69 73 74 5f 77 72 61 70 20 2a 2c 2e 61 69 6f 2d 69 63 6f 6e 2d 63 6f 6d 70 6f 6e 65 6e 74 2c 2e 61 69 6f 2d 69 63 6f 6e 2d 63 6f 6d 70 6f 6e 65 6e 74 20 2a 2c 2e 75 6c 74 5f 70 72 69 63 69 6e 67 5f 74 61 62 6c 65 5f 77 72 61 70 2c 2e 75 6c 74 5f 70 72 69 63 69 6e 67 5f 74 61 62 6c 65 5f 77 72 61 70 20 2a 2c 2e 75 6c 74 2d 6e 65 77 2d 69 62 2c 2e 75 6c 74 2d 6e 65 77 2d 69 62 20 2a 2c 2e 61 6c 69 67 6e 2d 69 63 6f 6e 2c 2e 61 6c 69 67 6e 2d 69 63 6f 6e 20 2a 2c 2e 66 6c 69 70 2d 62 6f 78 2d 77 72 61 70 2c 2e 66 6c 69 70 2d 62 6f 78 2d 77 72 61 70 20 2a 2c 2e 62 61 6e 6e 65 72 2d 62 6c 6f 63 6b 2c 2e 62 61 6e 6e 65 72 2d 62 6c 6f 63 6b Data Ascii: 1d77.smile_icon_list_wrap,.smile_icon_list_wrap ,.aio-icon-component,.aio-icon-component ,.ult_pricing_table_wrap,.ult_pricing_table_wrap ,.ult-new-ib,.ult-new-ib ,.align-icon,.align-icon ,.flip-box-wrap,.flip-box-wrap ,.banner-block,.banner-block
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 2d 77 72 61 70 70 65 72 20 2a 2c 2e 75 61 76 63 2d 69 63 6f 6e 73 2c 2e 75 61 76 63 2d 69 63 6f 6e 73 20 2a 2c 2e 75 61 76 63 2d 6c 69 73 74 2d 69 63 6f 6e 2c 2e 75 61 76 63 2d 6c 69 73 74 2d 69 63 6f 6e 20 2a 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 61 69 6f 2d 69 63 6f 6e 2c 2e 76 63 5f 72 6f 77 20 2e 61 69 6f 2d 69 63 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 33 32 70 78 3b 68 65 69 67 68 74 3a 32 65 6d 3b 77 69 64 74 68 3a 32 65 6d 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 6c 69 Data Ascii: -wrapper ,.uavc-icons,.uavc-icons ,.uavc-list-icon,.uavc-list-icon *{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}.aio-icon,.vc_row .aio-icon{display:inline-block;font-size:32px;height:2em;width:2em;text-align:center;li
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 6f 6e 5f 6c 69 73 74 20 6c 69 2e 69 63 6f 6e 5f 6c 69 73 74 5f 69 74 65 6d 7b 70 61 64 64 69 6e 67 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6c 65 61 72 3a 62 6f 74 68 21 69 6d 70 6f 72 74 61 6e 74 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 20 30 20 33 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 2e 73 6d 69 6c 65 5f 69 63 6f 6e 5f 6c 69 73 74 20 6c 69 2e 69 63 6f 6e 5f 6c 69 73 74 5f 69 74 65 6d 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 Data Ascii: on_list li.icon_list_item{padding:0!important;list-style:none!important;clear:both!important;position:relative!important;min-height:1em!important;margin:0 0 30px!important;line-height:100%;overflow:visible}.smile_icon_list li.icon_list_item:last-child{mar
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 72 69 70 74 69 6f 6e 20 73 70 61 6e 2e 69 63 6f 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 5f 74 65 78 74 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 31 34 32 38 35 37 31 34 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 6d 69 6c 65 5f 69 63 6f 6e 5f 6c 69 73 74 20 6c 69 20 2e 69 63 6f 6e 5f 6c 69 73 74 5f 63 6f 6e 6e 65 63 74 6f 72 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 31 65 6d 3b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 73 6d 69 6c 65 5f 69 63 6f 6e 5f 6c 69 73 74 20 6c 69 3a 6c 61 73 74 2d 63 Data Ascii: ription span.icon_description_text{margin:0;padding:0;border:0;vertical-align:baseline;font-size:14px;line-height:1.714285714;display:block}.smile_icon_list li .icon_list_connector{height:100%;position:absolute;top:1em;z-index:1}.smile_icon_list li:last-c
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 61 74 69 76 65 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 73 6d 69 6c 65 5f 69 63 6f 6e 5f 6c 69 73 74 2e 74 6f 70 20 6c 69 20 2e 69 63 6f 6e 5f 6c 69 73 74 5f 69 63 6f 6e 7b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 66 6c 6f 61 74 3a 6e 6f 6e 65 7d 2e 73 6d 69 6c 65 5f 69 63 6f 6e 5f 6c 69 73 74 2e 74 6f 70 20 6c 69 20 2e 69 63 6f 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 73 6d 69 6c 65 5f 69 63 6f 6e 5f 6c 69 73 74 Data Ascii: ative;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}.smile_icon_list.top li .icon_list_icon{margin:0 auto;float:none}.smile_icon_list.top li .icon_description{text-align:center;margin:15px;padding-bottom:0}.smile_icon_list
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 65 6d 20 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 6d 69 6c 65 5f 69 63 6f 6e 5f 6c 69 73 74 2e 74 6f 70 2e 68 65 78 61 67 6f 6e 20 2e 69 63 6f 6e 5f 6c 69 73 74 5f 69 63 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 65 6d 7d 2e 73 6d 69 6c 65 5f 69 63 6f 6e 5f 6c 69 73 74 2e 74 6f 70 2e 68 65 78 61 67 6f 6e 20 2e 69 63 6f 6e 5f 6c 69 73 74 5f 63 6f 6e 6e 65 63 74 6f 72 7b 74 6f 70 3a 2e 35 35 65 6d 7d 2e 66 75 6c 6c 2d 77 69 64 74 68 2d 63 6f 6e 74 65 6e 74 2e 77 70 62 2d 6a 73 2d 63 6f 6d 70 6f 73 65 72 20 2e 73 69 Data Ascii: olid rgba(0,0,0,0);border-top:1em solid;border-top-color:inherit!important}.smile_icon_list.top.hexagon .icon_list_icon{position:relative;margin-bottom:2em}.smile_icon_list.top.hexagon .icon_list_connector{top:.55em}.full-width-content.wpb-js-composer .si
2024-05-06 16:42:33 UTC	103	IN	Data Raw: 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 2e 61 69 6f 2d 69 63 6f 6e 20 69 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 2e 75 6c 74 69 6d 61 74 65 5f 67 6f 6f 67 6c 65 5f 6d 61 70 20 69 6d 67 7b 6d 61 78 2d 77 69 64 74 68 3a 69 6e 69 74 69 61 6c 21 69 6d 70 6f 72 74 61 6e 74 7d 0d 0a Data Ascii: ext-align:right}.aio-icon i{line-height:inherit}.ultimate_google_map img{max-width:initial!important}
2024-05-06 16:42:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.11	49920	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:33 UTC	614	OUT	GET /wp-content/plugins/js_composer/assets/lib/bower/animate-css/animate.min.css?ver=5.4.5 HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:33 UTC	774	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:33 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Wed, 03 Oct 2018 23:54:50 GMT ETag: W/"5bb556ca-c91d" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1efTsq8xZP24kpAOqMLmX6H%2BaDhEyTQY04EwNOJ5ZqKA%2FujtZfOQ5jGvJqd9dFrE28gHxqDNAM%2Bw8D97Rh8vYFNb%2Bar2V2%2FSwzSLbCsMzp3LGw2W2OdS19b2bdqkXuR5%2FjY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c983865335b-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:33 UTC	595	IN	Data Raw: 37 63 61 62 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 41 6e 69 6d 61 74 65 2e 63 73 73 20 2d 20 68 74 74 70 3a 2f 2f 64 61 6e 65 64 65 6e 2e 6d 65 2f 61 6e 69 6d 61 74 65 0a 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0a 0a 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 20 44 61 6e 69 65 6c 20 45 64 65 6e 0a 2a 2f 2e 61 6e 69 6d 61 74 65 64 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 31 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 31 73 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d Data Ascii: 7cab@charset "UTF-8";/!Animate.css - http://daneden.me/animateLicensed under the MIT license - http://opensource.org/licenses/MITCopyright (c) 2014 Daniel Eden/.animated{-webkit-animation-duration:1s;animation-duration:1s;-webkit-animation-fill-m
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 7d 34 30 25 2c 34 33 25 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 35 35 2c 2e 30 35 30 2c 2e 38 35 35 2c 2e 30 36 30 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 33 30 70 78 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 33 30 70 78 2c 30 29 7d 37 30 25 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 35 35 2c 2e 30 35 30 2c 2e 38 35 35 2c 2e 30 36 30 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 Data Ascii: ransform:translate3d(0,0,0)}40%,43%{transition-timing-function:cubic-bezier(.755,.050,.855,.060);-webkit-transform:translate3d(0,-30px,0);transform:translate3d(0,-30px,0)}70%{transition-timing-function:cubic-bezier(.755,.050,.855,.060);-webkit-transform:t
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 6c 65 33 64 28 31 2e 30 35 2c 31 2e 30 35 2c 31 2e 30 35 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 30 35 2c 31 2e 30 35 2c 31 2e 30 35 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 70 75 6c 73 65 7b 30 25 2c 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2c 31 2c 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2c 31 2c 31 29 7d 35 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 30 35 2c 31 2e 30 35 2c 31 2e 30 35 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 30 35 2c 31 2e 30 35 2c 31 2e 30 35 29 7d 7d 2e 70 75 6c 73 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 70 75 6c 73 65 Data Ascii: le3d(1.05,1.05,1.05);transform:scale3d(1.05,1.05,1.05)}}@keyframes pulse{0%,100%{-webkit-transform:scale3d(1,1,1);transform:scale3d(1,1,1)}50%{-webkit-transform:scale3d(1.05,1.05,1.05);transform:scale3d(1.05,1.05,1.05)}}.pulse{-webkit-animation-name:pulse
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 2c 39 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 70 78 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 70 78 2c 30 2c 30 29 7d 32 30 25 2c 34 30 25 2c 36 30 25 2c 38 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 70 78 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 70 78 2c 30 2c 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 68 61 6b 65 7b 30 25 2c 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 Data Ascii: ,90%{-webkit-transform:translate3d(-10px,0,0);transform:translate3d(-10px,0,0)}20%,40%,60%,80%{-webkit-transform:translate3d(10px,0,0);transform:translate3d(10px,0,0)}}@keyframes shake{0%,100%{-webkit-transform:translate3d(0,0,0);transform:translate3d(0,0
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 63 65 6e 74 65 72 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 74 6f 70 20 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 73 77 69 6e 67 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 73 77 69 6e 67 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 74 61 64 61 7b 30 25 2c 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2c 31 2c 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2c 31 2c 31 29 7d 31 30 25 2c 32 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 2e 39 2c 2e 39 2c 2e 39 29 20 72 6f 74 61 74 65 33 64 28 30 2c 30 2c 31 2c 2d 33 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c Data Ascii: center;transform-origin:top center;-webkit-animation-name:swing;animation-name:swing}@-webkit-keyframes tada{0%,100%{-webkit-transform:scale3d(1,1,1);transform:scale3d(1,1,1)}10%,20%{-webkit-transform:scale3d(.9,.9,.9) rotate3d(0,0,1,-3deg);transform:scal
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 35 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 33 64 28 30 2c 30 2c 31 2c 2d 33 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 35 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 33 64 28 30 2c 30 2c 31 2c 2d 33 64 65 67 29 7d 36 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 33 64 28 30 2c 30 2c 31 2c 32 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 33 64 28 30 2c 30 2c 31 2c 32 64 65 67 29 7d 37 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 Data Ascii: kit-transform:translate3d(-15%,0,0) rotate3d(0,0,1,-3deg);transform:translate3d(-15%,0,0) rotate3d(0,0,1,-3deg)}60%{-webkit-transform:translate3d(10%,0,0) rotate3d(0,0,1,2deg);transform:translate3d(10%,0,0) rotate3d(0,0,1,2deg)}75%{-webkit-transform:trans
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 72 6d 3a 73 63 61 6c 65 33 64 28 2e 39 2c 2e 39 2c 2e 39 29 7d 36 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 30 33 2c 31 2e 30 33 2c 31 2e 30 33 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 30 33 2c 31 2e 30 33 2c 31 2e 30 33 29 7d 38 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 2e 39 37 2c 2e 39 37 2c 2e 39 37 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 2e 39 37 2c 2e 39 37 2c 2e 39 37 29 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2c 31 2c 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2c 31 2c Data Ascii: rm:scale3d(.9,.9,.9)}60%{opacity:1;-webkit-transform:scale3d(1.03,1.03,1.03);transform:scale3d(1.03,1.03,1.03)}80%{-webkit-transform:scale3d(.97,.97,.97);transform:scale3d(.97,.97,.97)}100%{opacity:1;-webkit-transform:scale3d(1,1,1);transform:scale3d(1,1,
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 35 70 78 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 35 70 78 2c 30 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 49 6e 44 6f 77 6e 7b 30 25 2c 31 30 30 25 2c 36 30 25 2c 37 35 25 2c 39 30 25 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 7d 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 33 30 30 Data Ascii: ransform:translate3d(0,5px,0);transform:translate3d(0,5px,0)}100%{-webkit-transform:none;transform:none}}@keyframes bounceInDown{0%,100%,60%,75%,90%{transition-timing-function:cubic-bezier(.215,.61,.355,1)}0%{opacity:0;-webkit-transform:translate3d(0,-300
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 61 74 65 33 64 28 32 35 70 78 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 32 35 70 78 2c 30 2c 30 29 7d 37 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 70 78 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 70 78 2c 30 2c 30 29 7d 39 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 35 70 78 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 35 70 78 2c 30 2c 30 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 7d 2e 62 6f 75 6e 63 65 49 6e 4c 65 Data Ascii: ate3d(25px,0,0);transform:translate3d(25px,0,0)}75%{-webkit-transform:translate3d(-10px,0,0);transform:translate3d(-10px,0,0)}90%{-webkit-transform:translate3d(5px,0,0);transform:translate3d(5px,0,0)}100%{-webkit-transform:none;transform:none}}.bounceInLe
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 2d 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 49 6e 55 70 7b 30 25 2c 31 30 30 25 2c 36 30 25 2c 37 35 25 2c 39 30 25 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 7d 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 33 30 30 30 70 78 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 33 30 30 30 70 78 2c 30 29 7d 36 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 32 30 70 78 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 Data Ascii: -keyframes bounceInUp{0%,100%,60%,75%,90%{transition-timing-function:cubic-bezier(.215,.61,.355,1)}0%{opacity:0;-webkit-transform:translate3d(0,3000px,0);transform:translate3d(0,3000px,0)}60%{opacity:1;-webkit-transform:translate3d(0,-20px,0);transform:tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.11	49918	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:33 UTC	595	OUT	GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=5.4.5 HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:33 UTC	788	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:33 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Wed, 03 Oct 2018 23:54:50 GMT ETag: W/"5bb556ca-4d45" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pawZzDavhdFl5d5xSvdPeOefMoQVqsDxQu7cGjoS5LD%2BRnOEV7blRxz2455BtC2P2exRh0YUMbxgQb03ral2YOqrBs%2F%2BVbqBIoQB%2FEpKvNSM9%2B%2BPryWEF7xaP9x2jfLfCq8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c9839daa680-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:33 UTC	581	IN	Data Raw: 34 64 34 35 0d 0a 66 75 6e 63 74 69 6f 6e 20 76 63 5f 6a 73 28 29 7b 76 63 5f 74 6f 67 67 6c 65 42 65 68 61 76 69 6f 75 72 28 29 2c 76 63 5f 74 61 62 73 42 65 68 61 76 69 6f 75 72 28 29 2c 76 63 5f 61 63 63 6f 72 64 69 6f 6e 42 65 68 61 76 69 6f 75 72 28 29 2c 76 63 5f 74 65 61 73 65 72 47 72 69 64 28 29 2c 76 63 5f 63 61 72 6f 75 73 65 6c 42 65 68 61 76 69 6f 75 72 28 29 2c 76 63 5f 73 6c 69 64 65 72 73 42 65 68 61 76 69 6f 75 72 28 29 2c 76 63 5f 70 72 65 74 74 79 50 68 6f 74 6f 28 29 2c 76 63 5f 67 6f 6f 67 6c 65 70 6c 75 73 28 29 2c 76 63 5f 70 69 6e 74 65 72 65 73 74 28 29 2c 76 63 5f 70 72 6f 67 72 65 73 73 5f 62 61 72 28 29 2c 76 63 5f 70 6c 75 67 69 6e 5f 66 6c 65 78 73 6c 69 64 65 72 28 29 2c 76 63 5f 67 6f 6f 67 6c 65 5f 66 6f 6e 74 73 28 29 2c Data Ascii: 4d45function vc_js(){vc_toggleBehaviour(),vc_tabsBehaviour(),vc_accordionBehaviour(),vc_teaserGrid(),vc_carouselBehaviour(),vc_slidersBehaviour(),vc_prettyPhoto(),vc_googleplus(),vc_pinterest(),vc_progress_bar(),vc_plugin_flexslider(),vc_google_fonts(),
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 6e 5f 77 3f 22 74 61 62 6c 65 74 22 3a 33 30 30 3c 73 63 72 65 65 6e 5f 77 26 26 37 36 37 3e 73 63 72 65 65 6e 5f 77 3f 22 6d 6f 62 69 6c 65 22 3a 33 30 30 3e 73 63 72 65 65 6e 5f 77 3f 22 6d 6f 62 69 6c 65 5f 70 6f 72 74 72 61 69 74 22 3a 22 22 7d 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 53 63 72 69 70 74 28 75 72 6c 2c 24 6f 62 6a 2c 63 61 6c 6c 62 61 63 6b 29 7b 76 61 72 20 73 63 72 69 70 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 73 63 72 69 70 74 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 73 63 72 69 70 74 2e 72 65 61 64 79 53 74 61 74 65 26 26 28 73 63 72 69 70 74 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 6c Data Ascii: n_w?"tablet":300<screen_w&&767>screen_w?"mobile":300>screen_w?"mobile_portrait":""}function loadScript(url,$obj,callback){var script=document.createElement("script");script.type="text/javascript",script.readyState&&(script.onreadystatechange=function(){"l
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 74 68 26 26 6a 51 75 65 72 79 2e 66 6e 2e 76 63 43 68 61 74 26 26 24 70 69 65 5f 63 68 61 72 74 73 2e 76 63 43 68 61 74 28 29 2c 24 72 6f 75 6e 64 5f 63 68 61 72 74 73 2e 6c 65 6e 67 74 68 26 26 6a 51 75 65 72 79 2e 66 6e 2e 76 63 52 6f 75 6e 64 43 68 61 72 74 26 26 24 72 6f 75 6e 64 5f 63 68 61 72 74 73 2e 76 63 52 6f 75 6e 64 43 68 61 72 74 28 7b 72 65 6c 6f 61 64 3a 21 31 7d 29 2c 24 6c 69 6e 65 5f 63 68 61 72 74 73 2e 6c 65 6e 67 74 68 26 26 6a 51 75 65 72 79 2e 66 6e 2e 76 63 4c 69 6e 65 43 68 61 72 74 26 26 24 6c 69 6e 65 5f 63 68 61 72 74 73 2e 76 63 4c 69 6e 65 43 68 61 72 74 28 7b 72 65 6c 6f 61 64 3a 21 31 7d 29 2c 24 63 61 72 6f 75 73 65 6c 2e 6c 65 6e 67 74 68 26 26 6a 51 75 65 72 79 2e 66 6e 2e 63 61 72 6f 75 73 65 6c 26 26 24 63 61 72 6f 75 Data Ascii: th&&jQuery.fn.vcChat&&$pie_charts.vcChat(),$round_charts.length&&jQuery.fn.vcRoundChart&&$round_charts.vcRoundChart({reload:!1}),$line_charts.length&&jQuery.fn.vcLineChart&&$line_charts.vcLineChart({reload:!1}),$carousel.length&&jQuery.fn.carousel&&$carou
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 65 6c 65 6d 65 6e 74 2c 79 6f 75 74 75 62 65 49 64 2c 63 6f 75 6e 74 65 72 2b 2b 29 7d 2c 31 30 30 29 3b 76 61 72 20 24 63 6f 6e 74 61 69 6e 65 72 3d 24 65 6c 65 6d 65 6e 74 2e 70 72 65 70 65 6e 64 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 76 63 5f 76 69 64 65 6f 2d 62 67 20 76 63 5f 68 69 64 64 65 6e 2d 78 73 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 6e 65 72 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 27 29 2e 66 69 6e 64 28 22 2e 69 6e 6e 65 72 22 29 3b 6e 65 77 20 59 54 2e 50 6c 61 79 65 72 28 24 63 6f 6e 74 61 69 6e 65 72 5b 30 5d 2c 7b 77 69 64 74 68 3a 22 31 30 30 25 22 2c 68 65 69 67 68 74 3a 22 31 30 30 25 22 2c 76 69 64 65 6f 49 64 3a 79 6f 75 74 75 62 65 49 64 2c 70 6c 61 79 65 72 56 61 72 73 3a 7b 70 6c 61 79 6c 69 73 74 3a 79 6f 75 74 75 Data Ascii: element,youtubeId,counter++)},100);var $container=$element.prepend('<div class="vc_video-bg vc_hidden-xs"><div class="inner"></div></div>').find(".inner");new YT.Player($container[0],{width:"100%",height:"100%",videoId:youtubeId,playerVars:{playlist:youtu
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 2f 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 69 64 26 26 69 64 5b 31 5d 7d 66 75 6e 63 74 69 6f 6e 20 76 63 5f 67 6f 6f 67 6c 65 4d 61 70 73 50 6f 69 6e 74 65 72 28 29 7b 76 61 72 20 24 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 24 77 70 62 47 6d 61 70 73 57 69 64 67 65 74 3d 24 28 22 2e 77 70 62 5f 67 6d 61 70 73 5f 77 69 64 67 65 74 22 29 3b 24 77 70 62 47 6d 61 70 73 57 69 64 67 65 74 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 22 69 66 72 61 6d 65 22 2c 74 68 69 73 29 2e 63 73 73 28 22 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 22 2c 22 61 75 74 6f 22 29 7d 29 2c 24 77 70 62 47 6d 61 70 73 57 69 64 67 65 74 2e 6d 6f 75 73 65 6c 65 61 76 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 22 69 66 72 61 6d 65 22 2c 74 68 69 73 29 2e 63 Data Ascii: /);return null!==id&&id[1]}function vc_googleMapsPointer(){var $=window.jQuery,$wpbGmapsWidget=$(".wpb_gmaps_widget");$wpbGmapsWidget.click(function(){$("iframe",this).css("pointer-events","auto")}),$wpbGmapsWidget.mouseleave(function(){$("iframe",this).c
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 6e 73 66 6f 72 6d 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 26 26 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 2b 3d 22 20 76 63 5f 74 72 61 6e 73 66 6f 72 6d 20 22 29 7d 28 29 2c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 76 63 5f 70 6c 75 67 69 6e 5f 66 6c 65 78 73 6c 69 64 65 72 26 26 28 77 69 6e 64 6f 77 2e 76 63 5f 70 6c 75 67 69 6e 5f 66 6c 65 78 73 6c 69 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 24 70 61 72 65 6e 74 29 7b 28 24 70 61 72 65 6e 74 3f 24 70 61 72 65 6e 74 2e 66 69 6e 64 28 22 2e 77 70 62 5f 66 6c 65 78 73 6c 69 64 65 72 22 29 3a 6a 51 75 65 72 79 28 22 2e 77 70 62 5f 66 6c 65 78 73 6c Data Ascii: nsform"in document.documentElement.style&&(document.documentElement.className+=" vc_transform ")}(),"function"!=typeof window.vc_plugin_flexslider&&(window.vc_plugin_flexslider=function($parent){($parent?$parent.find(".wpb_flexslider"):jQuery(".wpb_flexsl
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 6e 2e 77 61 79 70 6f 69 6e 74 26 26 6a 51 75 65 72 79 28 22 2e 76 63 5f 70 72 6f 67 72 65 73 73 5f 62 61 72 22 29 2e 77 61 79 70 6f 69 6e 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6a 51 75 65 72 79 28 74 68 69 73 29 2e 66 69 6e 64 28 22 2e 76 63 5f 73 69 6e 67 6c 65 5f 62 61 72 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 69 6e 64 65 78 29 7b 76 61 72 20 24 74 68 69 73 3d 6a 51 75 65 72 79 28 74 68 69 73 29 2c 62 61 72 3d 24 74 68 69 73 2e 66 69 6e 64 28 22 2e 76 63 5f 62 61 72 22 29 2c 76 61 6c 3d 62 61 72 2e 64 61 74 61 28 22 70 65 72 63 65 6e 74 61 67 65 2d 76 61 6c 75 65 22 29 3b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 62 61 72 2e 63 73 73 28 7b 77 69 64 74 68 3a 76 61 6c 2b 22 25 22 7d 29 7d 2c 32 30 30 2a 69 6e 64 65 78 Data Ascii: n.waypoint&&jQuery(".vc_progress_bar").waypoint(function(){jQuery(this).find(".vc_single_bar").each(function(index){var $this=jQuery(this),bar=$this.find(".vc_bar"),val=bar.data("percentage-value");setTimeout(function(){bar.css({width:val+"%"})},200*index
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 2e 76 65 72 73 69 6f 6e 3f 6a 51 75 65 72 79 2e 75 69 2e 76 65 72 73 69 6f 6e 2e 73 70 6c 69 74 28 22 2e 22 29 3a 22 31 2e 31 30 22 2c 6f 6c 64 5f 76 65 72 73 69 6f 6e 3d 31 3d 3d 3d 70 61 72 73 65 49 6e 74 28 76 65 72 5b 30 5d 29 26 26 39 3e 70 61 72 73 65 49 6e 74 28 76 65 72 5b 31 5d 29 3b 24 63 61 6c 6c 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 69 6e 64 65 78 29 7b 76 61 72 20 24 74 61 62 73 2c 69 6e 74 65 72 76 61 6c 3d 6a 51 75 65 72 79 28 74 68 69 73 29 2e 61 74 74 72 28 22 64 61 74 61 2d 69 6e 74 65 72 76 61 6c 22 29 2c 74 61 62 73 5f 61 72 72 61 79 3d 5b 5d 3b 69 66 28 24 74 61 62 73 3d 6a 51 75 65 72 79 28 74 68 69 73 29 2e 66 69 6e 64 28 22 2e 77 70 62 5f 74 6f 75 72 5f 74 61 62 73 5f 77 72 61 70 70 65 72 22 29 2e 74 61 62 73 28 7b 73 68 6f Data Ascii: .version?jQuery.ui.version.split("."):"1.10",old_version=1===parseInt(ver[0])&&9>parseInt(ver[1]);$call.each(function(index){var $tabs,interval=jQuery(this).attr("data-interval"),tabs_array=[];if($tabs=jQuery(this).find(".wpb_tour_tabs_wrapper").tabs({sho
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 2d 31 3f 6c 65 6e 67 74 68 2d 31 3a 69 6e 64 65 78 2d 31 2c 24 74 61 62 73 2e 74 61 62 73 28 22 6f 70 74 69 6f 6e 22 2c 22 61 63 74 69 76 65 22 2c 69 6e 64 65 78 29 7d 7d 29 7d 29 7d 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 76 63 5f 61 63 63 6f 72 64 69 6f 6e 42 65 68 61 76 69 6f 75 72 26 26 28 77 69 6e 64 6f 77 2e 76 63 5f 61 63 63 6f 72 64 69 6f 6e 42 65 68 61 76 69 6f 75 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6a 51 75 65 72 79 28 22 2e 77 70 62 5f 61 63 63 6f 72 64 69 6f 6e 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 69 6e 64 65 78 29 7b 76 61 72 20 24 74 61 62 73 2c 24 74 68 69 73 3d 6a 51 75 65 72 79 28 74 68 69 73 29 2c 61 63 74 69 76 65 5f 74 61 62 3d 28 24 74 68 69 73 2e 61 74 74 72 28 22 64 61 Data Ascii: -1?length-1:index-1,$tabs.tabs("option","active",index)}})})}}),"function"!=typeof window.vc_accordionBehaviour&&(window.vc_accordionBehaviour=function(){jQuery(".wpb_accordion").each(function(index){var $tabs,$this=jQuery(this),active_tab=($this.attr("da
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 5f 6d 6f 64 65 73 5b 6c 61 79 6f 75 74 5f 6d 6f 64 65 5d 7d 29 2c 24 63 6f 6e 74 61 69 6e 65 72 2e 66 69 6e 64 28 22 2e 63 61 74 65 67 6f 72 69 65 73 5f 66 69 6c 74 65 72 20 61 22 29 2e 64 61 74 61 28 22 69 73 6f 74 6f 70 65 22 2c 24 74 68 75 6d 62 73 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 24 74 68 75 6d 62 73 3d 6a 51 75 65 72 79 28 74 68 69 73 29 2e 64 61 74 61 28 22 69 73 6f 74 6f 70 65 22 29 3b 6a 51 75 65 72 79 28 74 68 69 73 29 2e 70 61 72 65 6e 74 28 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 22 2e 61 63 74 69 76 65 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 2c 6a 51 75 65 72 79 28 74 68 69 73 29 2e 70 61 72 65 6e 74 28 29 2e Data Ascii: _modes[layout_mode]}),$container.find(".categories_filter a").data("isotope",$thumbs).click(function(e){e.preventDefault();var $thumbs=jQuery(this).data("isotope");jQuery(this).parent().parent().find(".active").removeClass("active"),jQuery(this).parent().

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.11	49921	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:33 UTC	644	OUT	GET /wp-content/cache/min/1/wp-content/plugins/parallax_video_backgrounds_vc/assets/js/ultimate_bg-6bd23221ddeccc28e806dea9e7e1cccc.js HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:33 UTC	782	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:33 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 28 Oct 2021 03:54:18 GMT ETag: W/"617a1eea-effa" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QH9yTDZEC9mNBCFcAXUJ5f4qtPNMdmdqX%2FED0u9S1tPwaV6%2BmGGlPqQusn2csaSsSS9CQi%2BN1BvTPJk3CKc4zhwCZnaQyd58HUS7wTzSzBscpwVL5i5hN5F1bdFGNzMNwcs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c98495ab3e0-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:33 UTC	587	IN	Data Raw: 37 63 61 33 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 76 65 72 73 69 6f 6e 5f 63 6f 6d 70 61 72 65 28 73 74 72 56 65 72 73 69 6f 6e 41 2c 73 74 72 56 65 72 73 69 6f 6e 42 29 7b 76 61 72 20 61 72 72 56 65 72 73 69 6f 6e 41 3d 73 74 72 56 65 72 73 69 6f 6e 41 2e 73 70 6c 69 74 28 27 2e 27 29 3b 76 61 72 20 61 72 72 56 65 72 73 69 6f 6e 42 3d 73 74 72 56 65 72 73 69 6f 6e 42 2e 73 70 6c 69 74 28 27 2e 27 29 3b 76 61 72 20 69 6e 74 56 65 72 73 69 6f 6e 41 3d 28 31 30 30 30 30 30 30 30 30 2a 70 61 72 73 65 49 6e 74 28 61 72 72 56 65 72 73 69 6f 6e 41 5b 30 5d 29 29 2b 28 31 30 30 30 30 30 30 2a 70 61 72 73 65 49 6e 74 28 61 72 72 Data Ascii: 7ca3(function($){jQuery(document).ready(function(){function version_compare(strVersionA,strVersionB){var arrVersionA=strVersionA.split('.');var arrVersionB=strVersionB.split('.');var intVersionA=(100000000parseInt(arrVersionA[0]))+(1000000parseInt(arr
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 20 4d 69 6e 69 2f 69 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 29 7b 24 28 27 68 74 6d 6c 27 29 2e 61 64 64 43 6c 61 73 73 28 27 75 6c 74 2d 72 65 6d 6f 76 65 2d 66 69 78 65 64 2d 62 61 63 6b 67 72 6f 75 6e 64 27 29 7d 0a 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 73 63 72 6f 6c 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 63 5f 76 69 65 77 70 6f 72 74 5f 76 69 64 65 6f 28 29 7d 29 3b 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 6c 6f 61 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 63 5f 76 69 65 77 70 6f 72 74 5f 76 69 64 65 6f 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 76 63 5f 76 69 65 77 70 6f 72 74 5f 76 69 64 65 6f 28 29 7b 69 66 28 2f 41 6e 64 72 6f 69 64 7c 77 65 62 4f 53 7c 69 50 68 6f 6e 65 7c 69 50 61 64 7c 69 50 Data Ascii: Mini/i.test(navigator.userAgent)){$('html').addClass('ult-remove-fixed-background')}jQuery(window).scroll(function(){vc_viewport_video()});jQuery(window).load(function(){vc_viewport_video()});function vc_viewport_video(){if(/Android\|webOS\|iPhone\|iPad\|iP
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 63 74 6f 72 2e 64 61 74 61 28 27 73 65 70 65 72 61 74 6f 72 27 29 3b 76 61 72 20 73 65 70 65 72 61 74 6f 72 5f 74 79 70 65 3d 73 65 6c 65 63 74 6f 72 2e 64 61 74 61 28 27 73 65 70 65 72 61 74 6f 72 2d 74 79 70 65 27 29 3b 76 61 72 20 73 65 70 65 72 61 74 6f 72 5f 73 68 61 70 65 5f 73 69 7a 65 3d 73 65 6c 65 63 74 6f 72 2e 64 61 74 61 28 27 73 65 70 65 72 61 74 6f 72 2d 73 68 61 70 65 2d 73 69 7a 65 27 29 3b 76 61 72 20 73 65 70 65 72 61 74 6f 72 5f 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 3d 73 65 6c 65 63 74 6f 72 2e 64 61 74 61 28 27 73 65 70 65 72 61 74 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 27 29 3b 76 61 72 20 73 65 70 65 72 61 74 6f 72 5f 62 6f 72 64 65 72 3d 73 65 6c 65 63 74 6f 72 2e 64 61 74 61 28 27 73 65 70 65 72 61 74 Data Ascii: ctor.data('seperator');var seperator_type=selector.data('seperator-type');var seperator_shape_size=selector.data('seperator-shape-size');var seperator_background_color=selector.data('seperator-background-color');var seperator_border=selector.data('seperat
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 62 6f 72 64 65 72 3d 30 3b 69 66 28 73 65 70 65 72 61 74 6f 72 5f 74 79 70 65 3d 3d 27 74 72 69 61 6e 67 6c 65 5f 73 65 70 65 72 61 74 6f 72 27 29 0a 73 65 70 65 72 61 74 6f 72 5f 63 6c 61 73 73 3d 27 75 6c 74 2d 74 72 69 6e 61 6c 67 65 2d 73 65 70 65 72 61 74 6f 72 27 3b 65 6c 73 65 20 69 66 28 73 65 70 65 72 61 74 6f 72 5f 74 79 70 65 3d 3d 27 63 69 72 63 6c 65 5f 73 65 70 65 72 61 74 6f 72 27 29 0a 73 65 70 65 72 61 74 6f 72 5f 63 6c 61 73 73 3d 27 75 6c 74 2d 63 69 72 63 6c 65 2d 73 65 70 65 72 61 74 6f 72 27 3b 65 6c 73 65 20 69 66 28 73 65 70 65 72 61 74 6f 72 5f 74 79 70 65 3d 3d 27 64 69 61 67 6f 6e 61 6c 5f 73 65 70 65 72 61 74 6f 72 27 29 0a 73 65 70 65 72 61 74 6f 72 5f 63 6c 61 73 73 3d 27 75 6c 74 2d 64 6f 75 62 6c 65 2d 64 69 61 67 6f 6e 61 Data Ascii: border=0;if(seperator_type=='triangle_seperator')seperator_class='ult-trinalge-seperator';else if(seperator_type=='circle_seperator')seperator_class='ult-circle-seperator';else if(seperator_type=='diagonal_seperator')seperator_class='ult-double-diagona
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 30 30 25 22 20 68 65 69 67 68 74 3d 22 27 2b 73 65 70 65 72 61 74 6f 72 5f 73 76 67 5f 68 65 69 67 68 74 2b 27 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 2e 36 36 36 36 36 20 30 2e 33 33 33 33 33 31 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 6e 6f 6e 65 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 66 69 6c 30 22 20 64 3d 22 4d 2d 30 20 30 2e 33 33 33 33 33 31 6c 34 2e 36 36 36 36 36 20 30 20 30 20 2d 33 2e 39 33 37 30 31 65 2d 30 30 36 20 2d 32 2e 33 33 33 33 33 20 30 20 2d 32 2e 33 33 33 33 33 20 30 20 30 20 33 2e 39 33 37 30 31 65 2d 30 30 36 7a 6d 30 20 2d 30 2e 33 33 33 33 33 31 6c 34 2e 36 36 36 36 36 20 30 20 30 20 30 2e 31 36 36 36 36 31 20 2d 34 2e 36 36 36 36 36 20 30 20 30 20 2d 30 2e 31 36 36 36 36 31 7a 6d 34 2e Data Ascii: 00%" height="'+seperator_svg_height+'" viewBox="0 0 4.66666 0.333331" preserveAspectRatio="none"><path class="fil0" d="M-0 0.333331l4.66666 0 0 -3.93701e-006 -2.33333 0 -2.33333 0 0 3.93701e-006zm0 -0.333331l4.66666 0 0 0.166661 -4.66666 0 0 -0.166661zm4.
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 6c 74 2d 78 6c 61 72 67 65 2d 63 69 72 63 6c 65 27 3b 73 76 67 3d 27 3c 73 76 67 20 63 6c 61 73 73 3d 22 75 76 63 2d 78 2d 6c 61 72 67 65 2d 63 69 72 63 6c 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 66 69 6c 6c 3d 22 27 2b 73 65 70 65 72 61 74 6f 72 5f 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 2b 27 22 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 68 65 69 67 68 74 3d 22 27 2b 73 65 70 65 72 61 74 6f 72 5f 73 76 67 5f 68 65 69 67 68 74 2b 27 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 2e 36 36 36 36 36 20 30 2e 33 33 33 33 33 31 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 6e 6f 6e 65 22 3e 3c 70 61 74 68 20 63 6c Data Ascii: lt-xlarge-circle';svg='<svg class="uvc-x-large-circle" xmlns="http://www.w3.org/2000/svg" version="1.1" fill="'+seperator_background_color+'" width="100%" height="'+seperator_svg_height+'" viewBox="0 0 4.66666 0.333331" preserveAspectRatio="none"><path cl
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 30 2f 73 76 67 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 66 69 6c 6c 3d 22 27 2b 73 65 70 65 72 61 74 6f 72 5f 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 2b 27 22 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 68 65 69 67 68 74 3d 22 27 2b 73 65 70 65 72 61 74 6f 72 5f 73 76 67 5f 68 65 69 67 68 74 2b 27 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 2e 36 36 36 36 36 20 30 2e 33 33 33 33 33 31 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 6e 6f 6e 65 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 66 69 6c 30 22 20 64 3d 22 4d 2d 37 2e 38 37 34 30 32 65 2d 30 30 36 20 30 2e 30 31 34 38 38 35 38 6c 30 2e 30 30 32 33 34 36 34 36 20 30 63 30 2e 30 35 32 36 38 39 2c 30 2e 30 31 35 34 30 39 34 20 30 2e 35 35 34 34 33 37 2c 30 2e 31 Data Ascii: 0/svg" version="1.1" fill="'+seperator_background_color+'" width="100%" height="'+seperator_svg_height+'" viewBox="0 0 4.66666 0.333331" preserveAspectRatio="none"><path class="fil0" d="M-7.87402e-006 0.0148858l0.00234646 0c0.052689,0.0154094 0.554437,0.1
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 74 6f 72 5f 63 6c 61 73 73 3d 27 75 6c 74 2d 77 61 76 65 2d 73 65 70 65 72 61 74 6f 72 27 3b 73 76 67 3d 27 3c 73 76 67 20 63 6c 61 73 73 3d 22 77 61 76 65 2d 69 6e 6e 65 72 2d 73 65 70 65 72 61 74 6f 72 20 75 76 63 2d 77 61 76 65 2d 73 65 70 65 72 61 74 6f 72 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 66 69 6c 6c 3d 22 27 2b 73 65 70 65 72 61 74 6f 72 5f 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 2b 27 22 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 68 65 69 67 68 74 3d 22 27 2b 73 65 70 65 72 61 74 6f 72 5f 73 76 67 5f 68 65 69 67 68 74 2b 27 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 20 30 2e 31 22 20 70 72 65 73 65 72 76 65 41 73 70 65 Data Ascii: tor_class='ult-wave-seperator';svg='<svg class="wave-inner-seperator uvc-wave-seperator" xmlns="http://www.w3.org/2000/svg" version="1.1" fill="'+seperator_background_color+'" width="100%" height="'+seperator_svg_height+'" viewBox="0 0 6 0.1" preserveAspe
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 30 63 37 2e 38 37 34 30 32 65 2d 30 30 36 2c 30 2e 30 35 35 32 32 30 35 20 30 2e 30 34 34 37 38 37 34 2c 30 2e 31 20 30 2e 31 2c 30 2e 31 6c 2d 30 2e 32 20 30 63 30 2e 30 35 35 32 31 32 36 2c 30 20 30 2e 30 39 39 39 39 32 31 2c 2d 30 2e 30 34 34 37 37 39 35 20 30 2e 31 2c 2d 30 2e 31 7a 6d 32 2e 30 30 30 30 34 20 30 63 37 2e 38 37 34 30 32 65 2d 30 30 36 2c 30 2e 30 35 35 32 32 30 35 20 30 2e 30 34 34 37 38 37 34 2c 30 2e 31 20 30 2e 31 2c 30 2e 31 6c 2d 30 2e 32 20 30 63 30 2e 30 35 35 32 31 32 36 2c 30 20 30 2e 30 39 39 39 39 32 31 2c 2d 30 2e 30 34 34 37 37 39 35 20 30 2e 31 2c 2d 30 2e 31 7a 6d 2d 30 2e 31 20 30 2e 31 6c 2d 30 2e 32 30 30 30 30 38 20 30 63 2d 30 2e 30 35 35 32 31 32 36 2c 30 20 2d 30 2e 30 39 39 39 39 32 31 2c 2d 30 2e 30 34 34 37 37 Data Ascii: 0c7.87402e-006,0.0552205 0.0447874,0.1 0.1,0.1l-0.2 0c0.0552126,0 0.0999921,-0.0447795 0.1,-0.1zm2.00004 0c7.87402e-006,0.0552205 0.0447874,0.1 0.1,0.1l-0.2 0c0.0552126,0 0.0999921,-0.0447795 0.1,-0.1zm-0.1 0.1l-0.200008 0c-0.0552126,0 -0.0999921,-0.04477
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 30 39 39 39 39 32 31 2c 2d 30 2e 30 34 34 37 37 39 35 20 30 2e 31 2c 2d 30 2e 31 7a 6d 30 2e 32 30 30 30 30 34 20 30 63 33 2e 39 33 37 30 31 65 2d 30 30 36 2c 30 2e 30 35 35 32 32 30 35 20 30 2e 30 34 34 37 37 39 35 2c 30 2e 31 20 30 2e 31 30 30 30 30 34 2c 30 2e 31 6c 2d 30 2e 32 30 30 30 30 38 20 30 63 30 2e 30 35 35 32 32 34 34 2c 30 20 30 2e 31 2c 2d 30 2e 30 34 34 37 37 39 35 20 30 2e 31 30 30 30 30 34 2c 2d 30 2e 31 7a 6d 30 2e 32 30 30 30 30 34 20 30 63 37 2e 38 37 34 30 32 65 2d 30 30 36 2c 30 2e 30 35 35 32 32 30 35 20 30 2e 30 34 34 37 38 37 34 2c 30 2e 31 20 30 2e 31 2c 30 2e 31 6c 2d 30 2e 32 20 30 63 30 2e 30 35 35 32 31 32 36 2c 30 20 30 2e 30 39 39 39 39 32 31 2c 2d 30 2e 30 34 34 37 37 39 35 20 30 2e 31 2c 2d 30 2e 31 7a 6d 30 2e 32 30 30 Data Ascii: 0999921,-0.0447795 0.1,-0.1zm0.200004 0c3.93701e-006,0.0552205 0.0447795,0.1 0.100004,0.1l-0.200008 0c0.0552244,0 0.1,-0.0447795 0.100004,-0.1zm0.200004 0c7.87402e-006,0.0552205 0.0447874,0.1 0.1,0.1l-0.2 0c0.0552126,0 0.0999921,-0.0447795 0.1,-0.1zm0.200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.11	49922	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:33 UTC	642	OUT	GET /wp-content/cache/min/1/wp-content/plugins/parallax_video_backgrounds_vc/assets/js/jparallax-7d021341b99ed81aaf7377dd90a3097a.js HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:33 UTC	790	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:33 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 28 Oct 2021 03:54:18 GMT ETag: W/"617a1eea-1c6e" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F%2FqwvQyFAWg%2F9VLZlElOReXROqzLaNogqf9MtV4pD3lcAL5C%2F%2BdMElyNeUtdPnqy1AYZ4SzIp4oIp5IRliudbE8xh7ZiPSXKo%2Bqqr34q1bo1S4q%2BzzQ3PGPVeZda4L9Ekg4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c984c8e222d-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:33 UTC	579	IN	Data Raw: 31 63 36 65 0d 0a 76 61 72 20 72 65 73 69 7a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6a 51 75 65 72 79 28 27 2e 76 63 70 62 2d 66 73 2d 6a 71 75 65 72 79 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 65 6c 65 63 74 6f 72 3d 6a 51 75 65 72 79 28 74 68 69 73 29 3b 76 61 72 20 73 65 6e 73 65 3d 73 65 6c 65 63 74 6f 72 2e 64 61 74 61 28 27 70 61 72 61 6c 6c 61 78 5f 73 65 6e 73 65 27 29 3b 76 61 72 20 69 6e 63 72 3d 28 73 65 6c 65 63 74 6f 72 2e 6f 75 74 65 72 57 69 64 74 68 28 29 2a 28 73 65 6e 73 65 2f 31 30 30 29 29 3b 76 61 72 20 68 70 3d 6a 51 75 65 72 79 28 73 65 6c 65 63 74 6f 72 29 2e 66 69 6e 64 28 27 2e 75 6c 74 69 6d 61 74 65 5f 68 5f 70 61 72 61 6c 6c 61 78 27 29 3b 69 66 28 68 70 2e 70 61 72 65 6e 74 28 29 2e 6f 75 74 65 72 Data Ascii: 1c6evar resiz=function(){jQuery('.vcpb-fs-jquery').each(function(){var selector=jQuery(this);var sense=selector.data('parallax_sense');var incr=(selector.outerWidth()*(sense/100));var hp=jQuery(selector).find('.ultimate_h_parallax');if(hp.parent().outer
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 72 6f 70 65 72 74 79 28 27 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 27 2c 27 6e 6f 6e 65 27 2c 27 69 6d 70 6f 72 74 61 6e 74 27 29 7d 29 3b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6a 51 75 65 72 79 28 27 2e 76 63 70 62 2d 66 73 2d 6a 71 75 65 72 79 27 29 2e 6c 65 6e 67 74 68 3e 30 29 7b 69 66 28 21 6a 51 75 65 72 79 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 66 72 61 6d 65 29 7b 28 66 75 6e 63 74 69 6f 6e 28 64 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 66 2e 66 72 61 6d 65 43 6f 75 6e 74 2b 2b 3b 61 2e 63 61 6c 6c 28 66 29 7d 76 61 72 20 66 3d 74 68 69 73 2c 67 3b 74 68 69 73 2e 66 72 61 6d 65 44 75 72 61 74 69 6f 6e 3d 62 7c 7c 32 35 3b 74 68 69 73 2e 66 Data Ascii: roperty('background-image','none','important')});setTimeout(function(){if(jQuery('.vcpb-fs-jquery').length>0){if(!jQuery.event.special.frame){(function(d,h){function i(a,b){function e(){f.frameCount++;a.call(f)}var f=this,g;this.frameDuration=b\|\|25;this.f
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 5d 2b 74 68 69 73 2e 64 65 63 61 79 2a 28 74 68 69 73 2e 70 6f 69 6e 74 65 72 5b 67 5d 2d 65 5b 67 5d 29 3b 74 68 69 73 2e 70 6f 69 6e 74 65 72 3d 61 7d 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 7a 28 69 2c 62 29 7b 76 61 72 20 6b 3d 74 68 69 73 2c 65 3d 69 20 69 6e 73 74 61 6e 63 65 6f 66 20 6c 3f 69 3a 6c 28 69 29 2c 61 3d 5b 71 28 62 2e 78 70 61 72 61 6c 6c 61 78 29 2c 71 28 62 2e 79 70 61 72 61 6c 6c 61 78 29 5d 2c 67 3d 30 2c 64 3b 74 68 69 73 2e 70 6f 69 6e 74 65 72 3d 5b 30 2c 30 5d 3b 74 68 69 73 2e 61 63 74 69 76 65 3d 21 31 3b 74 68 69 73 2e 61 63 74 69 76 65 4f 75 74 73 69 64 65 3d 62 26 26 62 2e 61 63 74 69 76 65 4f 75 74 73 69 64 65 7c 7c 21 31 3b 74 68 69 73 2e 75 70 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6a 3d 74 68 69 73 Data Ascii: ]+this.decay*(this.pointer[g]-e[g]);this.pointer=a}}}function z(i,b){var k=this,e=i instanceof l?i:l(i),a=[q(b.xparallax),q(b.yparallax)],g=0,d;this.pointer=[0,0];this.active=!1;this.activeOutside=b&&b.activeOutside\|\|!1;this.update=function(h){var j=this
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 65 72 63 65 6e 74 2e 74 65 73 74 28 6a 5b 63 5d 29 3f 70 61 72 73 65 46 6c 6f 61 74 28 6a 5b 63 5d 29 2f 31 30 30 3a 76 5b 6a 5b 63 5d 5d 7c 7c 31 3b 69 66 28 6b 5b 63 5d 29 7b 65 5b 63 5d 3d 70 61 72 73 65 49 6e 74 28 64 5b 63 5d 29 3b 61 5b 63 5d 3d 6a 5b 63 5d 2a 28 74 68 69 73 2e 73 69 7a 65 5b 63 5d 2d 65 5b 63 5d 29 3b 67 5b 63 5d 3d 6a 5b 63 5d 2a 31 30 30 2b 22 25 22 7d 65 6c 73 65 7b 65 5b 63 5d 3d 64 5b 63 5d 3d 3d 3d 21 30 3f 31 3a 6f 2e 70 65 72 63 65 6e 74 2e 74 65 73 74 28 64 5b 63 5d 29 3f 70 61 72 73 65 46 6c 6f 61 74 28 64 5b 63 5d 29 2f 31 30 30 3a 64 5b 63 5d 3b 61 5b 63 5d 3d 65 5b 63 5d 3f 6a 5b 63 5d 2a 28 31 2d 65 5b 63 5d 29 3a 30 7d 7d 7d 3b 74 68 69 73 2e 67 65 74 50 6f 69 6e 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 Data Ascii: ercent.test(j[c])?parseFloat(j[c])/100:v[j[c]]\|\|1;if(k[c]){e[c]=parseInt(d[c]);a[c]=j[c](this.size[c]-e[c]);g[c]=j[c]100+"%"}else{e[c]=d[c]===!0?1:o.percent.test(d[c])?parseFloat(d[c])/100:d[c];a[c]=e[c]?j[c]*(1-e[c]):0}}};this.getPointer=function(){for
2024-05-06 16:42:33 UTC	1369	IN	Data Raw: 2e 6d 6f 75 73 65 70 6f 72 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 6c 29 29 62 2e 6d 6f 75 73 65 70 6f 72 74 3d 6c 28 62 2e 6d 6f 75 73 65 70 6f 72 74 29 3b 62 2e 70 6f 72 74 3d 6e 65 77 20 7a 28 62 2e 6d 6f 75 73 65 70 6f 72 74 2c 62 29 3b 62 2e 6d 6f 75 73 65 3d 6e 65 77 20 72 28 62 29 3b 62 2e 6d 6f 75 73 65 70 6f 72 74 2e 62 69 6e 64 28 22 6d 6f 75 73 65 65 6e 74 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 6d 6f 75 73 65 2e 6f 6e 74 61 72 67 65 74 3d 21 31 3b 65 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 6c 28 74 68 69 73 29 3b 61 2e 64 61 74 61 28 6e 29 2e 66 72 65 65 7a 65 7c 7c 61 2e 62 69 6e 64 28 70 2c 62 2c 73 29 7d 29 7d 29 3b 72 65 74 75 72 6e 20 65 2e 62 69 6e 64 28 22 66 72 65 65 7a 65 22 2c 66 75 6e 63 74 69 Data Ascii: .mouseport instanceof l))b.mouseport=l(b.mouseport);b.port=new z(b.mouseport,b);b.mouse=new r(b);b.mouseport.bind("mouseenter",function(){b.mouse.ontarget=!1;e.each(function(){var a=l(this);a.data(n).freeze\|\|a.bind(p,b,s)})});return e.bind("freeze",functi
2024-05-06 16:42:33 UTC	1231	IN	Data Raw: 74 6f 72 29 2e 70 72 65 70 65 6e 64 28 27 3c 69 6d 67 20 63 6c 61 73 73 3d 22 75 6c 74 69 6d 61 74 65 5f 68 5f 70 61 72 61 6c 6c 61 78 22 20 73 72 63 3d 22 27 2b 69 6d 67 5f 6c 69 73 74 5b 69 5d 2b 27 22 3e 3c 2f 64 69 76 3e 27 29 7d 3b 76 61 72 20 68 70 3d 6a 51 75 65 72 79 28 73 65 6c 65 63 74 6f 72 29 2e 66 69 6e 64 28 27 2e 75 6c 74 69 6d 61 74 65 5f 68 5f 70 61 72 61 6c 6c 61 78 27 29 3b 68 70 2e 63 73 73 28 7b 27 6d 61 78 2d 77 69 64 74 68 27 3a 27 6e 6f 6e 65 27 2c 27 70 6f 73 69 74 69 6f 6e 27 3a 27 61 62 73 6f 6c 75 74 65 27 7d 29 3b 68 70 2e 63 73 73 28 27 6d 69 6e 2d 77 69 64 74 68 27 2c 28 68 70 2e 70 61 72 65 6e 74 28 29 2e 6f 75 74 65 72 57 69 64 74 68 28 29 29 2b 69 6e 63 72 2b 27 70 78 27 29 7d 29 3b 72 65 73 69 7a 28 29 7d 7d 2c 32 30 30 Data Ascii: tor).prepend('<img class="ultimate_h_parallax" src="'+img_list[i]+'"></div>')};var hp=jQuery(selector).find('.ultimate_h_parallax');hp.css({'max-width':'none','position':'absolute'});hp.css('min-width',(hp.parent().outerWidth())+incr+'px')});resiz()}},200
2024-05-06 16:42:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.11	49917	35.188.55.83	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:33 UTC	389	OUT	GET /wp-content/uploads/2017/12/logo-220x38.png HTTP/1.1 Host: fortissite.wpengine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:33 UTC	323	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 06 May 2024 16:42:33 GMT Content-Type: image/png Content-Length: 1535 Connection: close Last-Modified: Fri, 05 Oct 2018 05:55:47 GMT ETag: "5bb6fce3-5ff" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-05-06 16:42:33 UTC	1535	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 dc 00 00 00 26 08 03 00 00 00 98 8d 05 cc 00 00 00 8a 50 4c 54 45 47 70 4c 55 55 55 0e 0a 09 0b 08 08 20 1a 1a 2f 05 02 26 26 26 07 05 05 05 04 04 61 61 61 2e 2e 2e 3d 3d 3d 2e 2e 2e 17 15 15 44 08 04 31 31 31 4f 08 04 4d 4d 4d 14 14 14 10 0f 0e 23 1e 1e 6b 0c 06 2c 2b 2b 39 39 39 41 41 41 49 49 49 5b 5b 5b 76 0e 08 36 36 36 3a 06 04 1b 1a 1a 5d 5d 5d 40 07 04 4c 08 04 59 0a 06 64 0b 06 72 0c 08 5d 5d 5d 71 0d 06 72 0c 08 76 0e 08 65 65 65 69 69 69 7e 0e 08 7b 0e 08 82 0e 08 e3 bf ff c5 00 00 00 28 74 52 4e 53 00 db 1e 17 4b 5c 5d 0e 08 fc 76 9b 72 36 8d 7e a6 c6 2e 26 54 e3 6a 8e a6 b8 ea f8 88 79 3f f4 86 9e b4 ce f1 fb f3 ef 5b fb c4 5d 00 00 04 fc 49 44 41 54 68 de ed 58 69 77 9b 3a 10 95 c4 26 Data Ascii: PNGIHDR&PLTEGpLUUU /&&&aaa...===...D111OMMM#k,++999AAAIII[[[v666:]]]@LYdr]]]qrveeeiii~{(tRNSK\]vr6~.&Tjy?[]IDAThXiw:&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.11	49923	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:33 UTC	650	OUT	GET /wp-content/cache/min/1/wp-content/plugins/parallax_video_backgrounds_vc/assets/js/jquery.vhparallax-bfc9ef7c09a950ff0c31faba03ea8408.js HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:34 UTC	786	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:34 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 28 Oct 2021 03:54:18 GMT ETag: W/"617a1eea-1395" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2VavPPRncCtVbzkbFMRx47MK7Muq17c4JN89FgXMYcHoNmLM%2FXzdnW8yU6Ewkm%2Be%2F8%2BgJFpLG4SZjwYkiRcEXHHEDvEie12CHNeNs5HOVUR%2F9S7J5mktOkASzqgschbCX4U%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c9a1e79dad5-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:34 UTC	583	IN	Data Raw: 31 33 39 35 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 76 61 72 20 24 77 69 6e 64 6f 77 3d 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 3b 76 61 72 20 77 69 6e 64 6f 77 48 65 69 67 68 74 3d 24 77 69 6e 64 6f 77 2e 68 65 69 67 68 74 28 29 3b 24 77 69 6e 64 6f 77 2e 72 65 73 69 7a 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 48 65 69 67 68 74 3d 24 77 69 6e 64 6f 77 2e 68 65 69 67 68 74 28 29 7d 29 3b 6a 51 75 65 72 79 2e 66 6e 2e 76 70 61 72 61 6c 6c 61 78 3d 66 75 6e 63 74 69 6f 6e 28 78 70 6f 73 2c 73 70 65 65 64 46 61 63 74 6f 72 2c 6f 75 74 65 72 48 65 69 67 68 74 29 7b 76 61 72 20 24 74 68 69 73 3d 6a 51 75 65 72 79 28 74 68 69 73 29 3b 76 61 72 20 67 65 74 48 65 69 67 68 74 3b 76 61 72 20 66 69 72 73 74 54 6f 70 3b 76 61 72 20 70 61 64 64 Data Ascii: 1395(function($){var $window=jQuery(window);var windowHeight=$window.height();$window.resize(function(){windowHeight=$window.height()});jQuery.fn.vparallax=function(xpos,speedFactor,outerHeight){var $this=jQuery(this);var getHeight;var firstTop;var padd
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: 6c 54 6f 70 28 29 3b 24 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 69 72 73 74 54 6f 70 3d 6a 51 75 65 72 79 28 74 68 69 73 29 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 3b 76 61 72 20 24 65 6c 65 6d 65 6e 74 3d 6a 51 75 65 72 79 28 74 68 69 73 29 3b 76 61 72 20 74 6f 70 3d 24 65 6c 65 6d 65 6e 74 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 3b 76 61 72 20 68 65 69 67 68 74 3d 67 65 74 48 65 69 67 68 74 28 24 65 6c 65 6d 65 6e 74 29 3b 69 66 28 74 6f 70 2b 68 65 69 67 68 74 3c 70 6f 73 7c 7c 74 6f 70 3e 70 6f 73 2b 77 69 6e 64 6f 77 48 65 69 67 68 74 29 7b 72 65 74 75 72 6e 7d 0a 76 61 72 20 66 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 28 66 69 72 73 74 54 6f 70 2d 70 6f 73 29 2a 73 70 65 65 64 46 61 63 74 6f 72 29 3b 66 3d 2d 66 3b 69 66 28 6a 51 Data Ascii: lTop();$this.each(function(){firstTop=jQuery(this).offset().top;var $element=jQuery(this);var top=$element.offset().top;var height=getHeight($element);if(top+height<pos\|\|top>pos+windowHeight){return}var f=Math.round((firstTop-pos)*speedFactor);f=-f;if(jQ
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: 6c 6c 29 6f 75 74 65 72 48 65 69 67 68 74 3d 21 30 3b 73 70 65 65 64 46 61 63 74 6f 72 3d 28 6a 51 75 65 72 79 28 74 68 69 73 29 2e 64 61 74 61 28 27 70 61 72 61 6c 6c 61 78 5f 73 65 6e 73 65 27 29 29 2f 31 30 30 3b 78 70 6f 73 3d 27 30 70 78 27 3b 76 61 72 20 70 72 65 76 5f 70 6f 73 3d 24 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 3b 66 75 6e 63 74 69 6f 6e 20 75 70 64 61 74 65 28 29 7b 76 61 72 20 70 6f 73 3d 24 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 3b 24 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 69 72 73 74 54 6f 70 3d 6a 51 75 65 72 79 28 74 68 69 73 29 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 3b 76 61 72 20 24 65 6c 65 6d 65 6e 74 3d 6a 51 75 65 72 79 28 74 68 69 73 29 3b 76 61 72 20 74 6f 70 3d 24 65 Data Ascii: ll)outerHeight=!0;speedFactor=(jQuery(this).data('parallax_sense'))/100;xpos='0px';var prev_pos=$window.scrollTop();function update(){var pos=$window.scrollTop();$this.each(function(){firstTop=jQuery(this).offset().top;var $element=jQuery(this);var top=$e
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: 70 2d 6a 71 75 65 72 79 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 65 6c 65 63 74 6f 72 3d 6a 51 75 65 72 79 28 74 68 69 73 29 3b 76 61 72 20 69 6d 67 5f 6c 69 73 74 3d 73 65 6c 65 63 74 6f 72 2e 64 61 74 61 28 27 69 6d 67 2d 61 72 72 61 79 27 29 3b 69 6d 67 5f 6c 69 73 74 3d 69 6d 67 5f 6c 69 73 74 2e 73 70 6c 69 74 28 27 2c 27 29 3b 76 61 72 20 69 6d 67 5f 6c 69 73 74 5f 6c 65 6e 3d 69 6d 67 5f 6c 69 73 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 69 6d 67 5f 6c 69 73 74 5f 6c 65 6e 3b 69 2b 2b 29 7b 6a 51 75 65 72 79 28 73 65 6c 65 63 74 6f 72 29 2e 70 72 65 70 65 6e 64 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 76 65 72 74 69 63 61 6c 5f 6c 61 79 65 72 5f 70 61 72 61 6c 6c 61 78 22 20 73 74 79 6c 65 Data Ascii: p-jquery').each(function(){var selector=jQuery(this);var img_list=selector.data('img-array');img_list=img_list.split(',');var img_list_len=img_list.length;for(var i=0;i<img_list_len;i++){jQuery(selector).prepend('<div class="vertical_layer_parallax" style
2024-05-06 16:42:34 UTC	331	IN	Data Raw: 62 6c 65 5f 6f 6e 5f 6d 6f 62 69 6c 65 3d 3d 27 74 72 75 65 27 29 0a 76 61 72 20 64 69 73 61 62 6c 65 5f 72 6f 77 5f 65 66 66 65 63 74 3d 27 74 72 75 65 27 3b 65 6c 73 65 20 76 61 72 20 64 69 73 61 62 6c 65 5f 72 6f 77 5f 65 66 66 65 63 74 3d 27 66 61 6c 73 65 27 3b 69 66 28 64 69 73 61 62 6c 65 5f 72 6f 77 5f 65 66 66 65 63 74 3d 3d 27 66 61 6c 73 65 27 29 0a 6a 51 75 65 72 79 28 74 68 69 73 29 2e 76 70 61 72 61 6c 6c 61 78 28 22 35 30 25 22 2c 6a 51 75 65 72 79 28 74 68 69 73 29 2e 64 61 74 61 28 27 70 61 72 61 6c 6c 61 78 5f 73 65 6e 73 65 27 29 2f 31 30 30 29 7d 29 0a 6a 51 75 65 72 79 28 27 2e 76 63 70 62 2d 68 7a 2d 6a 71 75 65 72 79 27 29 2e 68 70 61 72 61 6c 6c 61 78 28 29 3b 69 66 28 6a 51 75 65 72 79 28 27 2e 76 63 70 62 2d 68 7a 2d 6a 71 75 65 Data Ascii: ble_on_mobile=='true')var disable_row_effect='true';else var disable_row_effect='false';if(disable_row_effect=='false')jQuery(this).vparallax("50%",jQuery(this).data('parallax_sense')/100)})jQuery('.vcpb-hz-jquery').hparallax();if(jQuery('.vcpb-hz-jque
2024-05-06 16:42:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.11	49924	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:34 UTC	646	OUT	GET /wp-content/cache/min/1/wp-content/plugins/parallax_video_backgrounds_vc/assets/js/jquery.appear-01c0b6095409fd502bc0f13168cfdd74.js HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:34 UTC	815	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:34 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Cf-Bgj: minify ETag: W/"617a1eea-64b" Last-Modified: Thu, 28 Oct 2021 03:54:18 GMT Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding CF-Cache-Status: HIT Age: 352106 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nt33FEXALVhzGOrovGMhcIFfEiQoPAYN4cNF298nL9CJbQjHYizkBuLLFfdxy23Tef%2BgxSLU8j7VWPu%2BI7K2Cd6%2Fl6kNRFCL4v%2FtRA%2B5H8yuFx%2BbaDLDjtdlzxDFOtayAzU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c9bdda7746a-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:34 UTC	554	IN	Data Raw: 36 34 62 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 24 2e 66 6e 2e 62 73 66 5f 61 70 70 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 66 6e 2c 6f 70 74 69 6f 6e 73 29 7b 76 61 72 20 73 65 74 74 69 6e 67 73 3d 24 2e 65 78 74 65 6e 64 28 7b 64 61 74 61 3a 75 6e 64 65 66 69 6e 65 64 2c 6f 6e 65 3a 21 30 2c 61 63 63 58 3a 30 2c 61 63 63 59 3a 30 7d 2c 6f 70 74 69 6f 6e 73 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 24 28 74 68 69 73 29 3b 74 2e 62 73 66 5f 61 70 70 65 61 72 65 64 3d 21 31 3b 69 66 28 21 66 6e 29 7b 74 2e 74 72 69 67 67 65 72 28 27 62 73 66 5f 61 70 70 65 61 72 27 2c 73 65 74 74 69 6e 67 73 2e 64 61 74 61 29 3b 72 65 74 75 72 6e 7d 0a 76 61 72 20 77 3d 24 28 77 69 6e 64 6f 77 29 3b 76 Data Ascii: 64b(function($){$.fn.bsf_appear=function(fn,options){var settings=$.extend({data:undefined,one:!0,accX:0,accY:0},options);return this.each(function(){var t=$(this);t.bsf_appeared=!1;if(!fn){t.trigger('bsf_appear',settings.data);return}var w=$(window);v
2024-05-06 16:42:34 UTC	1064	IN	Data Raw: 61 26 26 78 3c 3d 61 2b 77 77 2b 61 78 29 7b 69 66 28 21 74 2e 62 73 66 5f 61 70 70 65 61 72 65 64 29 74 2e 74 72 69 67 67 65 72 28 27 62 73 66 5f 61 70 70 65 61 72 27 2c 73 65 74 74 69 6e 67 73 2e 64 61 74 61 29 7d 65 6c 73 65 7b 74 2e 62 73 66 5f 61 70 70 65 61 72 65 64 3d 21 31 7d 7d 3b 76 61 72 20 6d 6f 64 69 66 69 65 64 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 62 73 66 5f 61 70 70 65 61 72 65 64 3d 21 30 3b 69 66 28 73 65 74 74 69 6e 67 73 2e 6f 6e 65 29 7b 77 2e 75 6e 62 69 6e 64 28 27 73 63 72 6f 6c 6c 27 2c 63 68 65 63 6b 29 3b 76 61 72 20 69 3d 24 2e 69 6e 41 72 72 61 79 28 63 68 65 63 6b 2c 24 2e 66 6e 2e 62 73 66 5f 61 70 70 65 61 72 2e 63 68 65 63 6b 73 29 3b 69 66 28 69 3e 3d 30 29 24 2e 66 6e 2e 62 73 66 5f 61 70 70 65 61 72 2e 63 68 Data Ascii: a&&x<=a+ww+ax){if(!t.bsf_appeared)t.trigger('bsf_appear',settings.data)}else{t.bsf_appeared=!1}};var modifiedFn=function(){t.bsf_appeared=!0;if(settings.one){w.unbind('scroll',check);var i=$.inArray(check,$.fn.bsf_appear.checks);if(i>=0)$.fn.bsf_appear.ch
2024-05-06 16:42:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.11	49925	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:34 UTC	639	OUT	GET /wp-content/cache/min/1/wp-content/plugins/parallax_video_backgrounds_vc/assets/js/custom-d568b807ee8bd8c276f949ed58c0dcee.js HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:34 UTC	786	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:34 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 28 Oct 2021 03:54:18 GMT ETag: W/"617a1eea-6bdc" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TQOAED2%2Fhd2y1yrzrBXIIpUi1kIBfg%2BP1Beb9O9Y1uf0j3g8b2mH%2BK95A2rTVCwFUe1zCyFDGwwypsUBS8c2weEptAZsnGqsfXK0%2Bg82I0fmP8DuS8WGHU9%2BOkcvbjfTkpw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c9bea2ddaa3-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:34 UTC	583	IN	Data Raw: 36 62 64 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 24 2e 66 6e 2e 76 63 5f 74 72 61 6e 73 6c 61 74 65 5f 72 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 69 6e 64 6f 77 5f 73 63 72 6f 6c 6c 3d 24 28 77 69 6e 64 6f 77 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 3b 76 61 72 20 77 69 6e 64 6f 77 5f 68 65 69 67 68 74 3d 24 28 77 69 6e 64 6f 77 29 2e 68 65 69 67 68 74 28 29 3b 24 28 74 68 69 73 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 69 6e 64 65 78 2c 65 6c 65 6d 65 6e 74 29 7b 76 61 72 20 6d 6f 62 69 6c 65 5f 64 69 73 61 62 6c 65 3d 24 28 65 6c 65 6d 65 6e 74 29 2e 61 74 74 72 28 27 64 61 74 61 2d 72 6f 77 2d 65 66 66 65 63 74 2d 6d 6f 62 69 6c 65 2d 64 69 73 61 62 6c 65 27 29 3b 69 66 28 74 79 70 65 Data Ascii: 6bdc(function($){"use strict";$.fn.vc_translate_row=function(){var window_scroll=$(window).scrollTop();var window_height=$(window).height();$(this).each(function(index,element){var mobile_disable=$(element).attr('data-row-effect-mobile-disable');if(type
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: 72 20 64 69 73 61 62 6c 65 5f 72 6f 77 5f 65 66 66 65 63 74 3d 27 66 61 6c 73 65 27 3b 69 66 28 64 69 73 61 62 6c 65 5f 72 6f 77 5f 65 66 66 65 63 74 3d 3d 27 66 61 6c 73 65 27 29 7b 76 61 72 20 70 65 72 63 65 6e 74 61 67 65 3d 30 0a 76 61 72 20 72 6f 77 5f 68 65 69 67 68 74 3d 24 28 65 6c 65 6d 65 6e 74 29 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 3b 76 61 72 20 72 6f 77 5f 74 6f 70 3d 24 28 65 6c 65 6d 65 6e 74 29 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 3b 76 61 72 20 70 6f 73 69 74 69 6f 6e 3d 72 6f 77 5f 74 6f 70 2d 77 69 6e 64 6f 77 5f 73 63 72 6f 6c 6c 3b 76 61 72 20 72 6f 77 5f 76 69 73 69 62 6c 65 3d 70 6f 73 69 74 69 6f 6e 2b 72 6f 77 5f 68 65 69 67 68 74 3b 76 61 72 20 70 63 73 65 6e 73 65 3d 24 28 65 6c 65 6d 65 6e 74 29 2e 61 74 74 72 28 27 64 Data Ascii: r disable_row_effect='false';if(disable_row_effect=='false'){var percentage=0var row_height=$(element).outerHeight();var row_top=$(element).offset().top;var position=row_top-window_scroll;var row_visible=position+row_height;var pcsense=$(element).attr('d
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: 3b 65 6c 73 65 20 76 61 72 20 69 73 5f 6d 6f 62 69 6c 65 3d 27 74 72 75 65 27 3b 69 66 28 69 73 5f 6d 6f 62 69 6c 65 3d 3d 27 74 72 75 65 27 26 26 6d 6f 62 69 6c 65 5f 64 69 73 61 62 6c 65 3d 3d 27 74 72 75 65 27 29 0a 76 61 72 20 64 69 73 61 62 6c 65 5f 72 6f 77 5f 65 66 66 65 63 74 3d 27 74 72 75 65 27 3b 65 6c 73 65 20 76 61 72 20 64 69 73 61 62 6c 65 5f 72 6f 77 5f 65 66 66 65 63 74 3d 27 66 61 6c 73 65 27 3b 69 66 28 64 69 73 61 62 6c 65 5f 72 6f 77 5f 65 66 66 65 63 74 3d 3d 27 66 61 6c 73 65 27 29 7b 76 61 72 20 6d 69 6e 5f 6f 70 61 63 69 74 79 3d 30 3b 76 61 72 20 70 65 72 63 65 6e 74 61 67 65 3d 24 28 65 6c 65 6d 65 6e 74 29 2e 64 61 74 61 28 27 66 61 64 65 6f 75 74 2d 70 65 72 63 65 6e 74 61 67 65 27 29 3b 70 65 72 63 65 6e 74 61 67 65 3d 31 30 Data Ascii: ;else var is_mobile='true';if(is_mobile=='true'&&mobile_disable=='true')var disable_row_effect='true';else var disable_row_effect='false';if(disable_row_effect=='false'){var min_opacity=0;var percentage=$(element).data('fadeout-percentage');percentage=10
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: 63 5f 74 72 61 6e 73 6c 61 74 65 5f 72 6f 77 28 29 7d 29 3b 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 6c 6f 61 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6a 51 75 65 72 79 28 27 2e 75 6c 74 2d 62 61 6e 6e 65 72 2d 62 6c 6f 63 6b 2d 63 75 73 74 6f 6d 2d 68 65 69 67 68 74 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 69 6e 64 65 78 2c 65 6c 65 6d 65 6e 74 29 7b 76 61 72 20 24 62 6c 6f 63 6b 69 6d 67 3d 6a 51 75 65 72 79 28 74 68 69 73 29 2e 66 69 6e 64 28 27 69 6d 67 27 29 3b 76 61 72 20 62 6c 6f 63 6b 5f 77 69 64 74 68 3d 6a 51 75 65 72 79 28 74 68 69 73 29 2e 77 69 64 74 68 28 29 3b 76 61 72 20 62 6c 6f 63 6b 5f 68 65 69 67 68 74 3d 6a 51 75 65 72 79 28 74 68 69 73 29 2e 68 65 69 67 68 74 28 29 3b 76 61 72 20 69 6d 67 5f 77 69 64 74 68 3d 24 62 6c 6f Data Ascii: c_translate_row()});jQuery(window).load(function(){jQuery('.ult-banner-block-custom-height').each(function(index,element){var $blockimg=jQuery(this).find('img');var block_width=jQuery(this).width();var block_height=jQuery(this).height();var img_width=$blo
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: 72 20 62 68 3d 70 61 72 73 65 49 6e 74 28 6a 51 75 65 72 79 28 74 68 69 73 29 2e 66 69 6e 64 28 27 2e 69 66 62 2d 62 61 63 6b 20 3e 20 64 69 76 27 29 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 29 3b 76 61 72 20 67 72 3d 28 66 68 3e 62 68 29 3f 66 68 3a 62 68 3b 6a 51 75 65 72 79 28 74 68 69 73 29 2e 66 69 6e 64 28 27 2e 69 66 62 2d 66 6c 69 70 2d 62 6f 78 27 29 2e 63 73 73 28 27 68 65 69 67 68 74 27 2c 67 72 2b 27 70 78 27 29 7d 7d 29 7d 0a 69 66 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 27 53 61 66 61 72 69 27 29 21 3d 2d 31 26 26 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 27 43 68 72 6f 6d 65 27 29 3d 3d 2d 31 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f Data Ascii: r bh=parseInt(jQuery(this).find('.ifb-back > div').outerHeight());var gr=(fh>bh)?fh:bh;jQuery(this).find('.ifb-flip-box').css('height',gr+'px')}})}if(navigator.userAgent.indexOf('Safari')!=-1&&navigator.userAgent.indexOf('Chrome')==-1){setTimeout(functio
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: 6d 61 73 6f 6e 5f 64 65 73 3d 30 7d 2c 33 30 30 29 7d 7d 7d 29 3b 24 28 27 2e 73 6d 69 6c 65 2d 69 63 6f 6e 2d 74 69 6d 65 6c 69 6e 65 2d 77 72 61 70 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 73 74 6d 5f 77 69 64 74 68 3d 6a 51 75 65 72 79 28 74 68 69 73 29 2e 64 61 74 61 28 27 74 69 6d 65 6c 69 6e 65 2d 63 75 74 6f 6d 2d 77 69 64 74 68 27 29 3b 69 66 28 63 73 74 6d 5f 77 69 64 74 68 29 7b 6a 51 75 65 72 79 28 74 68 69 73 29 2e 63 73 73 28 27 77 69 64 74 68 27 2c 28 28 63 73 74 6d 5f 77 69 64 74 68 2a 32 29 2b 34 30 29 2b 27 70 78 27 29 7d 0a 76 61 72 20 77 69 64 74 68 3d 70 61 72 73 65 49 6e 74 28 6a 51 75 65 72 79 28 74 68 69 73 29 2e 77 69 64 74 68 28 29 29 3b 76 61 72 20 62 5f 77 69 64 3d 70 61 72 73 65 49 6e 74 28 6a 51 Data Ascii: mason_des=0},300)}}});$('.smile-icon-timeline-wrap').each(function(){var cstm_width=jQuery(this).data('timeline-cutom-width');if(cstm_width){jQuery(this).css('width',((cstm_width*2)+40)+'px')}var width=parseInt(jQuery(this).width());var b_wid=parseInt(jQ
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: 65 2d 70 6f 73 74 2d 72 69 67 68 74 2e 74 69 6d 65 6c 69 6e 65 2d 62 6c 6f 63 6b 20 6c 27 29 2e 63 73 73 28 27 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 27 2c 62 6c 6f 63 6b 5f 62 67 29 3b 6a 51 75 65 72 79 28 74 68 69 73 29 2e 66 69 6e 64 28 27 2e 66 65 61 74 2d 69 74 65 6d 27 29 2e 63 73 73 28 27 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 27 2c 62 6c 6f 63 6b 5f 62 67 29 3b 69 66 28 6a 51 75 65 72 79 28 74 68 69 73 29 2e 66 69 6e 64 28 27 2e 66 65 61 74 2d 69 74 65 6d 27 29 2e 66 69 6e 64 28 27 2e 66 65 61 74 2d 74 6f 70 27 29 2e 6c 65 6e 67 74 68 3e 30 29 0a 6a 51 75 65 72 79 28 74 68 69 73 29 2e 66 69 6e 64 28 27 2e 66 65 61 74 2d 69 74 65 6d 20 6c 27 29 2e 63 73 73 28 27 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 27 2c 62 6c 6f Data Ascii: e-post-right.timeline-block l').css('border-right-color',block_bg);jQuery(this).find('.feat-item').css('background-color',block_bg);if(jQuery(this).find('.feat-item').find('.feat-top').length>0)jQuery(this).find('.feat-item l').css('border-top-color',blo
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: 63 6f 6c 6f 72 27 2c 73 65 70 5f 63 6f 6c 29 3b 6a 51 75 65 72 79 28 74 68 69 73 29 2e 66 69 6e 64 28 27 2e 74 69 6d 65 6c 69 6e 65 2d 73 65 70 61 72 61 74 6f 72 2d 74 65 78 74 20 2e 73 65 70 2d 74 65 78 74 27 29 2e 63 73 73 28 27 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 27 2c 73 65 70 5f 62 67 29 3b 6a 51 75 65 72 79 28 74 68 69 73 29 2e 66 69 6e 64 28 27 2e 75 6c 74 2d 74 69 6d 65 6c 69 6e 65 2d 61 72 72 6f 77 20 73 27 29 2e 63 73 73 28 27 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 27 2c 27 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 29 20 27 2b 6c 69 6e 65 5f 63 6f 6c 6f 72 29 3b 6a 51 75 65 72 79 28 74 68 69 73 29 2e 66 69 6e 64 28 27 2e 66 65 61 74 2d 69 74 65 6d 20 2e 75 6c 74 2d 74 69 6d 65 6c 69 6e 65 2d 61 72 72 6f 77 20 73 27 Data Ascii: color',sep_col);jQuery(this).find('.timeline-separator-text .sep-text').css('background-color',sep_bg);jQuery(this).find('.ult-timeline-arrow s').css('border-color','rgba(255, 255, 255, 0) '+line_color);jQuery(this).find('.feat-item .ult-timeline-arrow s'
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: 6f 72 64 65 72 2d 68 6f 76 65 72 27 29 21 3d 27 27 29 7b 24 74 68 69 73 2e 63 73 73 28 22 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 22 2c 24 74 68 69 73 2e 64 61 74 61 28 27 62 6f 72 64 65 72 2d 68 6f 76 65 72 27 29 29 7d 0a 69 66 28 24 74 68 69 73 2e 64 61 74 61 28 27 73 68 61 64 6f 77 2d 63 6c 69 63 6b 27 29 21 3d 27 6e 6f 6e 65 27 29 7b 76 61 72 20 74 65 6d 70 5f 61 64 6a 3d 24 74 68 69 73 2e 64 61 74 61 28 27 73 68 64 2d 73 68 61 64 6f 77 27 29 2d 33 3b 69 66 28 24 74 68 69 73 2e 69 73 28 27 2e 73 68 64 2d 6c 65 66 74 27 29 21 3d 27 27 29 0a 24 74 68 69 73 2e 63 73 73 28 7b 27 72 69 67 68 74 27 3a 74 65 6d 70 5f 61 64 6a 7d 29 3b 65 6c 73 65 20 69 66 28 24 74 68 69 73 2e 69 73 28 27 2e 73 68 64 2d 72 69 67 68 74 27 29 21 3d 27 27 29 0a 24 74 68 69 73 2e 63 Data Ascii: order-hover')!=''){$this.css("border-color",$this.data('border-hover'))}if($this.data('shadow-click')!='none'){var temp_adj=$this.data('shd-shadow')-3;if($this.is('.shd-left')!='')$this.css({'right':temp_adj});else if($this.is('.shd-right')!='')$this.c
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: 2d 73 68 61 64 6f 77 22 29 3b 69 66 28 24 74 68 69 73 2e 69 73 28 27 2e 73 68 64 2d 6c 65 66 74 27 29 21 3d 27 27 29 0a 24 74 68 69 73 2e 63 73 73 28 7b 27 72 69 67 68 74 27 3a 24 74 68 69 73 2e 64 61 74 61 28 27 73 68 64 2d 73 68 61 64 6f 77 27 29 2b 27 70 78 27 7d 29 3b 65 6c 73 65 20 69 66 28 24 74 68 69 73 2e 69 73 28 27 2e 73 68 64 2d 72 69 67 68 74 27 29 21 3d 27 27 29 0a 24 74 68 69 73 2e 63 73 73 28 7b 27 6c 65 66 74 27 3a 24 74 68 69 73 2e 64 61 74 61 28 27 73 68 64 2d 73 68 61 64 6f 77 27 29 2b 27 70 78 27 7d 29 3b 65 6c 73 65 20 69 66 28 24 74 68 69 73 2e 69 73 28 27 2e 73 68 64 2d 74 6f 70 27 29 21 3d 27 27 29 0a 24 74 68 69 73 2e 63 73 73 28 7b 27 62 6f 74 74 6f 6d 27 3a 24 74 68 69 73 2e 64 61 74 61 28 27 73 68 64 2d 73 68 61 64 6f 77 27 29 Data Ascii: -shadow");if($this.is('.shd-left')!='')$this.css({'right':$this.data('shd-shadow')+'px'});else if($this.is('.shd-right')!='')$this.css({'left':$this.data('shd-shadow')+'px'});else if($this.is('.shd-top')!='')$this.css({'bottom':$this.data('shd-shadow')

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.11	49926	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:34 UTC	621	OUT	GET /wp-content/cache/min/1/ajax/libs/materialize/0.98.2/js/materialize.min-66862af14e29789fa446a8c55fcdd255.js HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:34 UTC	781	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:34 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 28 Oct 2021 03:54:18 GMT ETag: W/"617a1eea-2451b" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OBNKbRkP38GbBWiRPMbwqiEfFof0DfTcKOnI4oXJ44ICZdDW7tecalXB%2B8g2VwFHo5tiB4E2WJTdpG1DwbZV8tYFSCF%2FsDNrI2fFyZVJ54JMQxM9SavhCS1ScBkyalGvZVw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c9bf9ffdac9-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:34 UTC	588	IN	Data Raw: 37 63 61 34 0d 0a 2f 2a 21 0a 20 2a 20 4d 61 74 65 72 69 61 6c 69 7a 65 20 76 30 2e 39 38 2e 32 20 28 68 74 74 70 3a 2f 2f 6d 61 74 65 72 69 61 6c 69 7a 65 63 73 73 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 2d 32 30 31 35 20 4d 61 74 65 72 69 61 6c 69 7a 65 0a 20 2a 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 68 74 74 70 73 3a 2f 2f 72 61 77 2e 67 69 74 68 75 62 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 44 6f 67 66 61 6c 6f 2f 6d 61 74 65 72 69 61 6c 69 7a 65 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 0a 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 29 7b 76 61 72 20 6a 51 75 65 72 79 3b 6a 51 75 65 72 79 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 Data Ascii: 7ca4/! Materialize v0.98.2 (http://materializecss.com) * Copyright 2014-2015 Materialize * MIT License (https://raw.githubusercontent.com/Dogfalo/materialize/master/LICENSE) */if("undefined"==typeof jQuery){var jQuery;jQuery="function"==typeof r
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: 64 2c 65 29 7b 72 65 74 75 72 6e 28 62 2f 3d 65 2f 32 29 3c 31 3f 64 2f 32 2a 62 2a 62 2b 63 3a 2d 64 2f 32 2a 28 2d 2d 62 2a 28 62 2d 32 29 2d 31 29 2b 63 7d 2c 65 61 73 65 49 6e 43 75 62 69 63 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 72 65 74 75 72 6e 20 64 2a 28 62 2f 3d 65 29 2a 62 2a 62 2b 63 7d 2c 65 61 73 65 4f 75 74 43 75 62 69 63 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 72 65 74 75 72 6e 20 64 2a 28 28 62 3d 62 2f 65 2d 31 29 2a 62 2a 62 2b 31 29 2b 63 7d 2c 65 61 73 65 49 6e 4f 75 74 43 75 62 69 63 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 72 65 74 75 72 6e 28 62 2f 3d 65 2f 32 29 3c 31 3f 64 2f 32 2a 62 2a 62 2a 62 2b 63 3a 64 2f 32 2a 28 28 62 2d 3d 32 29 2a 62 2a 62 2b 32 29 2b Data Ascii: d,e){return(b/=e/2)<1?d/2bb+c:-d/2(--b(b-2)-1)+c},easeInCubic:function(a,b,c,d,e){return d(b/=e)bb+c},easeOutCubic:function(a,b,c,d,e){return d((b=b/e-1)bb+1)+c},easeInOutCubic:function(a,b,c,d,e){return(b/=e/2)<1?d/2bbb+c:d/2((b-=2)bb+2)+
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: 29 3c 31 3f 2d 64 2f 32 2a 28 4d 61 74 68 2e 73 71 72 74 28 31 2d 62 2a 62 29 2d 31 29 2b 63 3a 64 2f 32 2a 28 4d 61 74 68 2e 73 71 72 74 28 31 2d 28 62 2d 3d 32 29 2a 62 29 2b 31 29 2b 63 7d 2c 65 61 73 65 49 6e 45 6c 61 73 74 69 63 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 66 3d 31 2e 37 30 31 35 38 2c 67 3d 30 2c 68 3d 64 3b 69 66 28 30 3d 3d 62 29 72 65 74 75 72 6e 20 63 3b 69 66 28 31 3d 3d 28 62 2f 3d 65 29 29 72 65 74 75 72 6e 20 63 2b 64 3b 69 66 28 67 7c 7c 28 67 3d 2e 33 2a 65 29 2c 68 3c 4d 61 74 68 2e 61 62 73 28 64 29 29 7b 68 3d 64 3b 76 61 72 20 66 3d 67 2f 34 7d 65 6c 73 65 20 76 61 72 20 66 3d 67 2f 28 32 2a 4d 61 74 68 2e 50 49 29 2a 4d 61 74 68 2e 61 73 69 6e 28 64 2f 68 29 3b 72 65 74 75 72 6e 2d 28 68 Data Ascii: )<1?-d/2(Math.sqrt(1-bb)-1)+c:d/2(Math.sqrt(1-(b-=2)b)+1)+c},easeInElastic:function(a,b,c,d,e){var f=1.70158,g=0,h=d;if(0==b)return c;if(1==(b/=e))return c+d;if(g\|\|(g=.3e),h<Math.abs(d)){h=d;var f=g/4}else var f=g/(2Math.PI)*Math.asin(d/h);return-(h
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: 64 2a 28 37 2e 35 36 32 35 2a 62 2a 62 29 2b 63 3a 62 3c 32 2f 32 2e 37 35 3f 64 2a 28 37 2e 35 36 32 35 2a 28 62 2d 3d 31 2e 35 2f 32 2e 37 35 29 2a 62 2b 2e 37 35 29 2b 63 3a 62 3c 32 2e 35 2f 32 2e 37 35 3f 64 2a 28 37 2e 35 36 32 35 2a 28 62 2d 3d 32 2e 32 35 2f 32 2e 37 35 29 2a 62 2b 2e 39 33 37 35 29 2b 63 3a 64 2a 28 37 2e 35 36 32 35 2a 28 62 2d 3d 32 2e 36 32 35 2f 32 2e 37 35 29 2a 62 2b 2e 39 38 34 33 37 35 29 2b 63 7d 2c 65 61 73 65 49 6e 4f 75 74 42 6f 75 6e 63 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 72 65 74 75 72 6e 20 62 3c 65 2f 32 3f 2e 35 2a 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 2e 65 61 73 65 49 6e 42 6f 75 6e 63 65 28 61 2c 32 2a 62 2c 30 2c 64 2c 65 29 2b 63 3a 2e 35 2a 6a 51 75 65 72 79 2e 65 61 73 69 6e Data Ascii: d(7.5625bb)+c:b<2/2.75?d(7.5625(b-=1.5/2.75)b+.75)+c:b<2.5/2.75?d(7.5625(b-=2.25/2.75)b+.9375)+c:d(7.5625(b-=2.625/2.75)b+.984375)+c},easeInOutBounce:function(a,b,c,d,e){return b<e/2?.5jQuery.easing.easeInBounce(a,2b,0,d,e)+c:.5*jQuery.easin
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: 61 70 70 6c 79 28 61 5b 66 5d 2c 64 29 2c 65 21 3d 3d 21 31 29 3b 66 2b 2b 29 3b 65 6c 73 65 20 66 6f 72 28 66 20 69 6e 20 61 29 69 66 28 65 3d 63 2e 61 70 70 6c 79 28 61 5b 66 5d 2c 64 29 2c 65 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 69 66 28 68 29 66 6f 72 28 3b 67 3e 66 26 26 28 65 3d 63 2e 63 61 6c 6c 28 61 5b 66 5d 2c 66 2c 61 5b 66 5d 29 2c 65 21 3d 3d 21 31 29 3b 66 2b 2b 29 3b 65 6c 73 65 20 66 6f 72 28 66 20 69 6e 20 61 29 69 66 28 65 3d 63 2e 63 61 6c 6c 28 61 5b 66 5d 2c 66 2c 61 5b 66 5d 29 2c 65 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 61 7d 2c 63 2e 64 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 65 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 29 7b 76 61 72 20 66 3d 61 5b 63 2e 65 78 70 61 6e 64 6f 5d 2c 67 Data Ascii: apply(a[f],d),e!==!1);f++);else for(f in a)if(e=c.apply(a[f],d),e===!1)break}else if(h)for(;g>f&&(e=c.call(a[f],f,a[f]),e!==!1);f++);else for(f in a)if(e=c.call(a[f],f,a[f]),e===!1)break;return a},c.data=function(a,b,e){if(void 0===e){var f=a[c.expando],g
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 61 2c 64 29 7b 62 3d 62 7c 7c 22 66 78 22 3b 76 61 72 20 65 3d 63 2e 71 75 65 75 65 28 64 2c 62 29 2c 66 3d 65 2e 73 68 69 66 74 28 29 3b 22 69 6e 70 72 6f 67 72 65 73 73 22 3d 3d 3d 66 26 26 28 66 3d 65 2e 73 68 69 66 74 28 29 29 2c 66 26 26 28 22 66 78 22 3d 3d 3d 62 26 26 65 2e 75 6e 73 68 69 66 74 28 22 69 6e 70 72 6f 67 72 65 73 73 22 29 2c 66 2e 63 61 6c 6c 28 64 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 2e 64 65 71 75 65 75 65 28 64 2c 62 29 7d 29 29 7d 29 7d 2c 63 2e 66 6e 3d 63 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 20 74 68 69 73 5b 30 5d 3d 61 2c 74 68 69 73 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4e 6f 74 Data Ascii: nction(a,d){b=b\|\|"fx";var e=c.queue(d,b),f=e.shift();"inprogress"===f&&(f=e.shift()),f&&("fx"===b&&e.unshift("inprogress"),f.call(d,function(){c.dequeue(d,b)}))})},c.fn=c.prototype={init:function(a){if(a.nodeType)return this[0]=a,this;throw new Error("Not
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 61 29 3a 61 28 29 7d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 2d 31 2c 63 3d 61 3f 61 2e 6c 65 6e 67 74 68 3a 30 2c 64 3d 5b 5d 3b 2b 2b 62 3c 63 3b 29 7b 76 61 72 20 65 3d 61 5b 62 5d 3b 65 26 26 64 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 64 7d 66 75 6e 63 74 69 6f 6e 20 66 28 Data Ascii: =typeof module&&"object"==typeof module.exports?module.exports=a():"function"==typeof define&&define.amd?define(a):a()}(function(){return function(a,b,c,d){function e(a){for(var b=-1,c=a?a.length:0,d=[];++b<c;){var e=a[b];e&&d.push(e)}return d}function f(
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: 2c 30 29 3b 76 61 72 20 78 3d 76 3f 6e 65 77 20 46 6c 6f 61 74 33 32 41 72 72 61 79 28 74 29 3a 6e 65 77 20 41 72 72 61 79 28 74 29 2c 79 3d 21 31 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 79 7c 7c 6f 28 29 2c 61 3d 3d 3d 63 26 26 64 3d 3d 3d 65 3f 62 3a 30 3d 3d 3d 62 3f 30 3a 31 3d 3d 3d 62 3f 31 3a 69 28 6e 28 62 29 2c 63 2c 65 29 7d 3b 7a 2e 67 65 74 43 6f 6e 74 72 6f 6c 50 6f 69 6e 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 5b 7b 78 3a 61 2c 79 3a 63 7d 2c 7b 78 3a 64 2c 79 3a 65 7d 5d 7d 3b 76 61 72 20 41 3d 22 67 65 6e 65 72 61 74 65 42 65 7a 69 65 72 28 22 2b 5b 61 2c 63 2c 64 2c 65 5d 2b 22 29 22 3b 72 65 74 75 72 6e 20 7a 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 Data Ascii: ,0);var x=v?new Float32Array(t):new Array(t),y=!1,z=function(b){return y\|\|o(),a===c&&d===e?b:0===b?0:1===b?1:i(n(b),c,e)};z.getControlPoints=function(){return[{x:a,y:c},{x:d,y:e}]};var A="generateBezier("+[a,c,d,e]+")";return z.toString=function(){return
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: 69 66 28 43 3d 44 2e 73 74 61 72 74 56 61 6c 75 65 2b 46 2a 45 28 72 2c 6a 2c 46 29 2c 21 6f 26 26 43 3d 3d 3d 44 2e 63 75 72 72 65 6e 74 56 61 6c 75 65 29 63 6f 6e 74 69 6e 75 65 7d 69 66 28 44 2e 63 75 72 72 65 6e 74 56 61 6c 75 65 3d 43 2c 22 74 77 65 65 6e 22 3d 3d 3d 42 29 71 3d 43 3b 65 6c 73 65 7b 69 66 28 76 2e 48 6f 6f 6b 73 2e 72 65 67 69 73 74 65 72 65 64 5b 42 5d 29 7b 76 61 72 20 47 3d 76 2e 48 6f 6f 6b 73 2e 67 65 74 52 6f 6f 74 28 42 29 2c 48 3d 67 28 79 29 2e 72 6f 6f 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 43 61 63 68 65 5b 47 5d 3b 48 26 26 28 44 2e 72 6f 6f 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 3d 48 29 7d 76 61 72 20 49 3d 76 2e 73 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 79 2c 42 2c 44 2e 63 75 72 72 65 6e 74 56 61 6c 75 Data Ascii: if(C=D.startValue+F*E(r,j,F),!o&&C===D.currentValue)continue}if(D.currentValue=C,"tween"===B)q=C;else{if(v.Hooks.registered[B]){var G=v.Hooks.getRoot(B),H=g(y).rootPropertyValueCache[G];H&&(D.rootPropertyValue=H)}var I=v.setPropertyValue(y,B,D.currentValu
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: 3b 76 61 72 20 6e 3d 21 31 3b 6d 2e 65 61 63 68 28 76 2e 4c 69 73 74 73 2e 74 72 61 6e 73 66 6f 72 6d 73 33 44 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 2f 5e 73 63 61 6c 65 2f 2e 74 65 73 74 28 62 29 3f 31 3a 30 2c 65 3d 67 28 6c 29 2e 74 72 61 6e 73 66 6f 72 6d 43 61 63 68 65 5b 62 5d 3b 67 28 6c 29 2e 74 72 61 6e 73 66 6f 72 6d 43 61 63 68 65 5b 62 5d 21 3d 3d 64 26 26 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 28 22 2b 63 2b 22 5b 5e 2e 5d 22 29 2e 74 65 73 74 28 65 29 26 26 28 6e 3d 21 30 2c 64 65 6c 65 74 65 20 67 28 6c 29 2e 74 72 61 6e 73 66 6f 72 6d 43 61 63 68 65 5b 62 5d 29 7d 29 2c 66 2e 6d 6f 62 69 6c 65 48 41 26 26 28 6e 3d 21 30 2c 64 65 6c 65 74 65 20 67 28 6c 29 2e 74 72 61 6e 73 66 6f 72 6d 43 61 63 68 65 2e 74 72 Data Ascii: ;var n=!1;m.each(v.Lists.transforms3D,function(a,b){var c=/^scale/.test(b)?1:0,e=g(l).transformCache[b];g(l).transformCache[b]!==d&&new RegExp("^\\("+c+"[^.]").test(e)&&(n=!0,delete g(l).transformCache[b])}),f.mobileHA&&(n=!0,delete g(l).transformCache.tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.11	49928	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:34 UTC	617	OUT	GET /wp-content/uploads/2018/10/consulting2.jpg HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:34 UTC	748	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:34 GMT Content-Type: image/jpeg Content-Length: 85608 Connection: close Last-Modified: Tue, 09 Oct 2018 23:43:01 GMT ETag: "5bbd3d05-14e68" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4%2BkJ5A%2FSMJuQudSzaKSYiULokP20CcpP3ytfXeRmtCOJQrANvMrahTOkvyRp4k%2BWhgYruR%2B%2Ffm6WQhYJC%2BP75vCkJgnwHuaTotASWdo0HYhyZOsTJIoVlSAjK%2FXy10ll7kI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c9c69a10a2e-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:34 UTC	621	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 1f 43 6f 6d 70 72 65 73 73 65 64 20 62 79 20 6a 70 65 67 2d 72 65 63 6f 6d 70 72 65 73 73 ff db 00 84 00 04 04 04 04 04 04 05 05 05 05 07 07 06 07 07 0a 09 08 08 09 0a 0f 0a 0b 0a 0b 0a 0f 16 0e 10 0e 0e 10 0e 16 14 18 13 12 13 18 14 23 1c 18 18 1c 23 29 22 20 22 29 31 2c 2c 31 3e 3b 3e 51 51 6d 01 04 04 04 04 04 04 05 05 05 05 07 07 06 07 07 0a 09 08 08 09 0a 0f 0a 0b 0a 0b 0a 0f 16 0e 10 0e 0e 10 0e 16 14 18 13 12 13 18 14 23 1c 18 18 1c 23 29 22 20 22 29 31 2c 2c 31 3e 3b 3e 51 51 6d ff c2 00 11 08 04 00 04 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 00 07 08 09 ff da 00 08 01 01 00 00 00 00 fb 79 e9 dc c8 95 b4 f8 Data Ascii: JFIFCompressed by jpeg-recompress##)" ")1,,1>;>QQm##)" ")1,,1>;>QQm"y
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: 90 86 2a 93 97 b9 55 fd c8 d6 31 9d dd dc e4 e4 67 0c 31 2b f6 6b dc ad 8d 02 9f 31 e5 3e 1d 12 ca 49 48 59 32 a7 16 bf 31 8c c5 62 ea a5 ea 37 5a fd 7e aa f6 ca c6 ca 7b a2 55 56 92 c6 c2 c6 da 61 8a aa e5 e2 3c 85 21 08 f7 af 34 10 e1 c2 88 39 24 8d 0a ab 27 89 cb 3f 5d a4 d2 69 ee e6 19 ca aa 53 98 8f 72 af 39 5c bd cc 60 c2 c5 57 3d ea bc d6 b4 10 eb f6 2e ee 54 8d 02 a7 37 e5 7e 17 5d 69 25 4c 69 12 a7 92 ab 31 8c c5 63 ab 66 e9 f7 9a dd 86 9e ee ca ca ce 6a 46 ab ab 86 5d 1d 9d 94 e9 05 27 72 f2 3c 86 39 48 57 af 28 23 c2 89 10 44 3b 2b eb f3 18 6c 84 6d 0e 9f 4d a9 bc b0 33 93 88 49 27 29 15 ea a4 73 d7 91 a1 0c 71 2b cc 42 91 ce 44 68 61 c0 d5 bb b9 50 10 6a 33 be 61 e1 74 96 b2 1e 43 4a 93 39 d5 39 7c 66 27 1f 0e 76 a7 77 a9 d8 69 ae ec ac 6d 25 Data Ascii: *U1g1+k1>IHY21b7Z~{UVa<!49$'?]iSr9\`W=.T7~]i%Li1cfjF]'r<9HW(#D;+lmM3I')sq+BDhaPj3atCJ99\|f'vwim%
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: 83 bb 9c 9c 08 55 59 ef 34 f0 bc d5 ac 93 48 9d 63 36 0e 7b 1b 83 c3 d4 49 bf d8 ee b6 fa 59 e5 6b 06 38 75 35 70 e2 2f 48 90 41 89 8c 00 8e f0 b5 cf 71 e5 ce b1 b3 b8 b3 92 55 e6 94 e9 5f 9f c5 61 a8 67 ea 36 fa 9b 99 0e 7c a3 c9 97 2c 8e ee 6a a9 5e 52 22 34 71 a2 51 66 72 d9 e6 4d d0 6b b4 b7 36 d6 13 e5 9c 93 1d ce e4 50 c3 ab a0 f3 8f 0d c5 da ca 31 e7 59 ce af a0 c5 61 31 15 32 6f f7 be 91 e8 3a 53 20 a3 c4 83 55 53 49 0a 18 de 43 c8 60 5a c6 31 ea c5 7b 9d 2a 7c eb 1b 0b 5b 39 66 78 f8 d2 92 bf 3d 8b c6 52 da eb 76 ba 4b 72 a3 9e 69 27 31 9a 8d ee 29 8a 52 95 dc 38 d0 68 73 79 1c fb 2c b4 3a fd 15 e5 a5 94 f9 92 4b 3d 79 55 38 71 2b 28 70 1e 1b e7 b6 53 8d 22 6d a4 e8 39 cc 66 0f 13 51 2b 4b e9 1e a3 e8 9a 59 ce e0 44 a9 cf e5 f1 b4 c1 61 b8 d2 46 Data Ascii: UY4Hc6{IYk8u5p/HAqU_ag6\|,j^R"4qQfrMk6P1Ya12o:S USIC`Z1{*\|[9fx=RvKri'1)R8hsy,:K=yU8q+(pS"m9fQ+KYDaF
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: 06 c8 9d 2c a5 7b 9c f2 3c 8f 57 39 ca ee 64 7a ea 6c af 9b e3 34 db 5d 15 94 a7 b6 05 46 4f 0b e6 f8 1c ab 27 da 59 dd e9 b4 ba 3b eb 33 f4 7a ca 3a 3a 6a f1 c9 d0 e9 2e e4 36 34 38 91 23 0b ed 07 f7 2f 2f 36 34 0a 6c b7 90 f8 40 ee 2c e6 da dd ba a7 2b 88 f3 dc 3c 7b 5d 46 cb 59 79 a0 d5 e9 74 b7 d7 13 e6 4a 94 77 af 22 32 34 58 b1 23 a1 65 c9 39 0a f7 b9 ca ee 72 ab b9 ca 80 89 51 43 8c c4 1b 6d a7 b3 94 6e 04 3a 7c ae 17 ce 71 54 d7 ba 2d 36 9b 49 75 6d 61 23 a3 c3 a9 cb 63 e9 60 0e 56 a3 51 75 25 f0 ea 33 74 91 19 f7 93 fb 9c 8b c8 08 15 19 cf 2b f9 fe b2 de d2 75 a5 e1 ea f2 f8 bf 3b c1 43 b2 d2 ec b6 3a 1b 3d 56 8f 49 a0 b9 b3 99 2e 4c a3 39 c8 d4 1c 58 d1 e3 89 f2 25 1c a6 7b d5 57 95 57 9c aa bc c8 b5 f4 b9 ac 75 5e af 57 71 2e 47 34 10 e9 f3 58 Data Ascii: ,{<W9dzl4]FO'Y;3z::j.648#//64l@,+<{]FYytJw"24X#e9rQCmn:\|qT-6Iuma#c`VQu%3t+u;C:=VI.L9X%{WWu^Wq.G4X
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: bc 21 89 88 8a f7 bd ef 73 9c ab dc bc bd dc d0 41 ad a4 a4 ae 3d e5 cd a4 d9 25 7b 42 20 0d aa a4 7b de ae e4 8b 02 97 35 90 c8 55 68 74 7a 2b cb 7b 19 67 7e 89 cb dd ca a8 8e 6c 58 34 b9 6f 23 f9 e6 3e 8a f6 eb 41 75 16 93 25 86 f3 2c 6b ac f4 1a 5d 86 ba ce 4d e5 bd c5 c5 d5 b4 c9 93 64 9c ef 77 72 31 a3 18 da de 23 9e e7 bd ca bc bd dc ab dd c2 89 02 9e 96 9d 96 f7 76 b6 12 8e 44 18 42 21 f2 bd cf 7b 9c bc 18 55 34 39 6c 86 76 4e 93 43 7f 71 69 36 49 b4 8e ee 5e 5e e4 54 0c 2a 9c ef 99 fc fb 89 d0 68 2e 6f b4 5d 53 97 c6 79 df 9d 45 9f 79 a0 d6 eb b4 12 6d ae ad 6e 2e ee 27 4d 99 28 e6 21 39 1a 8d 18 d8 36 2b 9e e7 bd 5c e7 72 f2 f7 77 72 a4 68 75 54 94 b0 e7 5d dc 59 4c 90 4e 41 00 42 4e 7b d5 ce 73 f9 91 6b 69 73 79 2c bc 3b fb dd 1d e5 a5 8c 89 1a Data Ascii: !sA=%{B {5Uhtz+{g~lX4o#>Au%,k]Mdwr1#vDB!{U49lvNCqi6I^^T*h.o]SyEymn.'M(!96+\rwrhuT]YLNABN{skisy,;
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: 69 30 d8 10 d9 58 c9 d3 6c 6f 6d f4 97 17 96 d3 e6 c8 39 9e f7 77 31 88 83 60 da ce 22 bb 97 bb 97 91 3b 93 b9 ce 7a 82 05 5d 35 60 6e ef ed 67 c9 51 c7 8d 12 34 71 b1 88 26 23 5e 63 02 0d 4d 06 73 35 5d 69 79 a3 d3 7d 16 ee 54 e5 67 72 af 22 ab 23 d6 d3 64 bc 77 e7 5a ed 16 82 fb 45 a6 5a dc fd 36 4b cf f3 d3 2c e6 db 6c b4 b6 fa 3b cb ab ab 29 c7 90 52 bb b9 11 a8 88 16 31 11 cf e5 ee ee 54 54 e4 4e e5 73 c8 38 75 b4 d5 50 67 69 2e 2c 64 b9 80 8b 0e 14 70 08 62 63 1a 8e 34 de 0c 0a 1c ee 63 38 4b bd 1e a3 e9 f7 f2 ab 57 91 17 95 17 b8 30 a9 f3 fe 6b f3 cf 99 5e 68 34 17 da 6b 58 94 b9 fa 0c 36 15 2c ac a5 eb 35 d7 3a 0d 15 d5 d5 a5 8c 93 14 8f 56 72 22 73 18 34 6b 5c e5 ee e5 ee 4e e6 f3 13 90 84 32 46 81 53 4d 58 ed 15 dd 9c c7 b4 11 2b e1 41 8c 31 08 Data Ascii: i0Xlom9w1`";z]5`ngQ4q&#^cMs5]iy}Tgr"#dwZEZ6K,l;)R1TTNs8uPgi.,dpbc4c8KW0k^h4kX6,5:Vr"s4k\N2FSMX+A1
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: a2 ba b2 2b 9a ed b1 15 bd dc bd dd dc 9d ca bd dc ad 8b 5d 4b 92 f1 ef 9e f2 37 ba 6d 16 a2 f6 25 26 3e 93 2f 90 49 d7 b7 5a 1d 65 fe ab 43 7d 79 6f 60 f7 34 10 60 40 8a 23 1d ef 18 e3 47 8b 12 38 11 c5 2c 89 12 48 a2 0b 56 44 eb 2b 39 f2 0c d1 b1 a3 45 21 0e 62 b9 fc 2a fa 9c e6 43 15 96 76 97 4d aa d0 5b c9 46 b4 7e 88 fe ee ee ee ee ee ee ee ee ee 55 0c 1a aa 1f 3b f0 6f 0d 93 a1 d2 e9 f4 ce a5 c9 65 a8 f2 30 e4 db e8 2f b5 d7 fa bd 25 ed dd b5 ac 85 51 42 83 59 04 2f 29 b9 82 8e 14 47 10 c7 3c 93 c8 3b c7 0e 04 40 ba 5d 8d ad 84 d3 a0 82 11 a3 8c 69 06 73 d5 a0 ad a8 cb e2 f1 59 db 1d 4e a7 55 79 39 c3 18 22 fa ca bb 93 95 5a bd c8 bc bc 9c bd dd d1 6b a9 f2 1e 47 f3 ce 22 ef 47 a8 d5 c9 ab ca e3 a9 73 35 a5 b1 bf d0 69 34 da dd 3d e5 dd c5 b4 e3 39 Data Ascii: +]K7m%&>/IZeC}yo`4`@#G8,HVD+9E!b*CvM[F~U;oe0/%QBY/)G<;@]isYNUy9"ZkG"Gs5i4=9
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: 64 19 4b e0 bf 27 a9 cf 36 74 b3 1c ee 8d 06 a6 be 33 a5 5c 5c d9 cc 90 f7 bb bb 06 09 77 5b 9b 3f 34 c0 7b b7 af fe 69 79 54 a1 89 58 a9 cc 90 e4 ee e6 35 e8 d5 ee 67 72 f2 22 72 f3 b9 55 e7 e3 cb 92 4b 4b ab 3b 7b bb 1d 1e a7 6f b2 dd 6c 15 53 97 bb b9 39 7b bb bb bb a1 c4 8d 1a e2 65 64 d1 e3 36 1f 31 fc fe f2 cd 9d 24 e6 3a c7 83 57 5d 1d d2 ee 2e 2c e7 1c cf 7b df ee c7 90 79 1c f7 c9 cc fe 5a 57 fb 64 14 64 61 44 86 32 9d c1 8c 18 62 60 43 18 4c 0c 71 08 02 67 33 9f dd ce 63 f4 95 70 9c 79 7a 4c f4 17 cc 99 79 a4 bb d1 6a b7 3f 5e 77 77 77 27 2f 77 77 44 85 02 0d e0 c9 69 09 93 99 57 e5 b4 05 f9 81 4d 2e 6c b3 9c cf 04 2a 9a e8 9d 2e da e6 d2 7c 93 96 41 9f f4 61 79 3b 98 33 64 fe 31 f9 c7 d7 94 46 1b 54 e5 2d 84 a2 72 b9 a6 78 58 e9 26 46 b5 ce 34 Data Ascii: dK'6t3\\w[?4{iyTX5gr"rUKK;{olS9{ed61$:W].,{yZWddaD2b`CLqg3cpyzLyj?^www'/wwDiWM.l*.\|Aay;3d1FT-rxX&F4
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: 74 97 f1 51 ee 55 19 51 78 a0 11 04 16 88 2d 18 51 a2 0e eb d8 ca 81 8c d7 47 87 8e b2 cd f9 e5 94 3a ff 00 4b f1 9d 3f 8e 51 f9 07 9b af a4 7b 03 bd 92 a2 bc bf 44 f8 1f a9 68 be 75 fa 9f c1 7d d7 ca 7d 67 cf f7 f4 36 51 68 11 83 18 c4 c8 d1 a3 57 c6 88 d3 cf 9f 61 3a 4b dc d1 06 2f e7 65 95 95 b4 c9 a7 99 32 4c cb 0b 13 ce 9a db 29 06 7c a9 0d 2b 94 aa 64 7f 31 53 b9 c3 21 c2 e9 05 67 11 ac 22 81 fb 5f 4b 38 84 d8 79 ef 2f f3 9d 5e 9b 33 b8 f1 8f 42 f2 2f 12 c7 f9 f4 dd 47 d8 d9 29 36 9e ad e6 de a9 a6 f9 eb e9 7f 2e b4 f5 1f 03 f6 8f 36 f5 6c 4e d0 37 cf 83 91 ae 63 46 c1 8c 20 8d 1e 1c 78 cf 34 d9 d3 64 9d ca 82 8b 13 e6 62 c4 85 73 74 43 8d 33 19 b8 90 21 44 8a 11 23 1a 84 23 95 c4 9d 22 54 c9 53 24 1c f6 8b 26 61 a6 4f 91 36 49 e4 4e 53 ab 64 fb b5 Data Ascii: tQUQx-QG:K?Q{Dhu}}g6QhWa:K/e2L)\|+d1S!g"_K8y/^3B/G)6.6lN7cF x4dbstC3!D##"TS$&aO6INSd
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: 27 35 39 11 1a d6 08 63 18 c6 d4 44 46 30 11 e1 41 fa 01 c9 c8 c1 82 15 36 7f 25 8c c6 d4 b1 aa de 47 b9 1a 31 41 09 0f 3a 6c c9 72 e5 cb 99 28 ea 9c e7 4e 92 69 46 77 2c fd b8 d6 1c 04 bc d9 3a 8e be 2c 41 86 20 40 8c 5e 14 78 b0 60 8e 4c ab 0b 2b 09 32 ca 42 39 ee 57 72 f3 58 bd cd 62 30 63 18 c6 26 b5 a8 d6 31 b1 a3 c5 83 f4 27 72 23 07 1e 0d 46 6f 23 8a c8 56 47 63 3b 9e e5 e0 45 8f 06 32 9e 64 bb 09 b2 e6 4c 93 2e 4a 27 0d d2 27 4d 9b 20 85 7c 9b 82 99 ee 93 7a e8 71 1a 83 68 a3 80 03 42 a0 e3 c4 87 13 a5 4a b3 b2 97 24 e4 2b d5 ce 5e e5 6f 27 22 34 6d 60 c4 c1 b0 6d 6a 31 82 60 e3 b2 24 2f a0 dc 9c d1 8a 3c 2a 6c c6 5b 17 94 a8 8c 07 22 39 5e d8 d0 61 45 84 b2 a6 4d 9d 69 3a 5c d9 92 ce ad 60 df 2a 74 d9 72 4c 42 1a 69 a4 3d c7 94 55 4e 54 18 63 84 Data Ascii: '59cDF0A6%G1A:lr(NiFw,:,A @^x`L+2B9WrXb0c&1'r#Fo#VGc;E2dL.J''M \|zqhBJ$+^o'"4m`mj1`$/<l["9^aEMi:\`trLBi=UNTc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.11	49927	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:34 UTC	617	OUT	GET /wp-content/uploads/2017/12/Logo-179x64.png HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:34 UTC	734	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:34 GMT Content-Type: image/png Content-Length: 2939 Connection: close Last-Modified: Wed, 03 Oct 2018 23:54:47 GMT ETag: "5bb556c7-b7b" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O9pao2Zph1JLBHjoJOiRtuKncuQKFHprBs4QIl4kmVrxFfVCHb9ufVP1R%2BYzMfMevwaMAaA0UUR1tO2mRwGsC13FFRLkxMBlbnnnu%2BPJIZa0ojzu3fGEApqYmy2YmbLNvE4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c9c79bf67e4-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:34 UTC	635	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b3 00 00 00 40 08 03 00 00 00 66 cc b6 76 00 00 03 78 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: PNGIHDR@fvxiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://w
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: 42 43 30 43 31 35 31 31 45 38 38 32 44 37 45 39 39 37 35 38 33 45 39 30 45 45 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 35 65 33 31 35 62 31 32 2d 38 39 36 34 2d 34 62 32 35 2d 62 37 64 62 2d 64 34 65 35 65 32 36 31 37 33 32 63 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 35 65 33 31 35 62 31 32 2d 38 39 36 34 2d 34 62 32 35 2d 62 37 64 62 2d 64 34 65 35 65 32 36 31 37 33 32 63 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 Data Ascii: BC0C1511E882D7E997583E90EE" xmp:CreatorTool="Adobe Photoshop CC 2017 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5e315b12-8964-4b25-b7db-d4e5e261732c" stRef:documentID="xmp.did:5e315b12-8964-4b25-b7db-d4e5e261732c"/> </rdf:Description> </rd
2024-05-06 16:42:34 UTC	935	IN	Data Raw: e7 1f af da cc 52 d1 54 cd 37 5c aa 3f e1 9b ca f8 a6 56 f3 f8 6d 3f 33 32 33 aa f3 98 e7 42 7b d2 f6 43 fe f1 af 36 b3 70 64 a9 6d 36 33 b5 0f 0d 94 9a fb e5 31 cc e8 bd 98 e9 0a 5b cb 7f 5e 51 b3 b3 6f df 9e 0c 66 36 9b 35 57 b6 b0 01 5d 72 d5 af 1d cd 38 78 fc a2 6a 9e 7f 2e f3 a5 dc 21 84 43 93 e7 55 59 dd 12 93 59 c4 df 88 2d cb 8a c8 dd 92 e6 2d f4 af 50 73 fc a9 cc 43 b6 a4 e2 46 d1 75 6b 31 c7 53 e9 0a 82 79 cb df bc b2 6d 53 a8 f9 73 99 d7 75 12 57 ef ec 84 3c 46 26 33 4b 45 16 3c fc 31 df 58 89 c8 bd 23 bb 52 a8 f9 10 f3 cc dc 51 cf 62 8e 1a d7 60 ed 81 e6 67 b7 15 b6 98 87 32 f3 2b d9 e7 44 9e 56 39 26 b5 c0 55 bf bf 65 d9 e0 b6 3f f8 90 58 e7 71 e6 54 8b 1a 97 76 66 80 a7 cc 77 13 6d c7 65 06 a0 2e 20 98 37 3a 33 31 13 da f7 67 ee b5 f7 c1 81 Data Ascii: RT7\?Vm?323B{C6pdm631[^Qof65W]r8xj.!CUYY--PsCFuk1SymSsuW<F&3KE<1X#RQb`g2+DV9&Ue?XqTvfwme. 7:31g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.11	49929	142.250.64.164	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:34 UTC	654	OUT	GET /recaptcha/api.js?hl=en&render=explicit&ver=6.4.3 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiUocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:34 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Mon, 06 May 2024 16:42:34 GMT Date: Mon, 06 May 2024 16:42:34 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-06 16:42:34 UTC	727	IN	Data Raw: 34 63 38 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 4c8/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-05-06 16:42:34 UTC	504	IN	Data Raw: 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 27 61 6e 6f 6e 79 6d 6f 75 73 27 3b 70 6f 2e 69 6e 74 65 67 72 69 74 79 3d 27 73 68 61 33 38 34 2d 30 6c 4a 6b 4f 56 48 44 79 33 49 74 59 6c 43 Data Ascii: V4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-0lJkOVHDy3ItYlC
2024-05-06 16:42:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.11	49931	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:34 UTC	632	OUT	GET /wp-content/uploads/2018/04/trusted-choice-logo-234x62.png HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:34 UTC	745	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:34 GMT Content-Type: image/png Content-Length: 4204 Connection: close Last-Modified: Wed, 03 Oct 2018 23:54:47 GMT ETag: "5bb556c7-106c" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mtuLQxYzD86%2BU%2B2GoPfBUvX117POnL2sZC187Zi%2Bj4T4dCkFJzOjX%2FxLnoOjZLXUdBFZAHJ4wvrTbrAeoS%2BwM5JO1iZ6rB5DyElu9gtdWCORW9qwF4aP7%2Bq75BGfMLd%2FlFQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6c9de9239ad2-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:34 UTC	624	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ea 00 00 00 52 08 03 00 00 00 6d d3 b8 64 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: PNGIHDRRmd(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://w
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: 31 45 38 41 38 30 35 43 41 41 30 32 44 42 41 43 33 39 43 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 43 45 41 43 39 36 43 32 32 44 32 41 31 31 45 38 41 38 30 35 43 41 41 30 32 44 42 41 43 33 39 43 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 43 45 41 43 39 36 43 33 32 44 32 41 31 31 45 38 41 38 30 35 43 41 41 30 32 44 42 41 43 33 39 43 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 70 c0 d5 3e 00 00 00 bd 50 4c 54 45 47 70 4c 00 00 00 04 04 04 00 00 00 00 00 00 00 00 00 Data Ascii: 1E8A805CAA02DBAC39C"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:CEAC96C22D2A11E8A805CAA02DBAC39C" stRef:documentID="xmp.did:CEAC96C32D2A11E8A805CAA02DBAC39C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>p>PLTEGpL
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: 53 ed 1c f6 ae ca 80 9d d0 7c 2c 70 d5 44 a3 37 51 07 7a 95 e8 5d d4 8d 8d 6b d5 3c 1c a4 a1 50 60 63 ac cd b0 62 97 1c 24 7c 82 70 4e ec ea 0e f5 34 c1 b5 ca bb e3 ac 48 0b b2 1d 7d 10 35 00 48 b2 ef 50 f7 26 20 55 15 89 0d d3 2d ec 3c 09 14 7b b7 3d 36 e7 75 de 16 d8 68 07 5b 3a d5 5a 7d 7f 03 b5 47 d6 30 f8 01 b5 c8 8f 03 1c d6 d6 24 c7 59 52 84 51 e7 a2 22 cc 49 1f 8e 5d d4 a7 11 ae d5 b6 bb 34 26 cf 30 ff 98 02 9f 00 ba f9 b8 a5 34 a8 50 c9 6b 44 4d 39 aa 29 a3 2b ca 88 5b fb 5b 70 e2 7d 8f 2b fc 8a 41 89 ed 1b 37 ff 33 54 d2 d3 fc c9 15 55 bf 53 e0 62 dd e7 26 ce b8 2a 70 4e c8 8c f9 d5 15 55 37 23 dd d0 2e 0a 8c bd 96 8e 6b 7f 40 aa 3e 83 bb ad 83 8b 54 19 ea e7 05 95 4b 15 94 27 2e 0a 50 c4 e2 b4 27 15 83 02 63 ac 35 37 b4 7f 82 4a 93 d3 e8 8a ca Data Ascii: S\|,pD7Qz]k<P`cb$\|pN4H}5HP& U-<{=6uh[:Z}G0$YRQ"I]4&04PkDM9)+[[p}+A73TUSb&*pNU7#.k@>TK'.P'c57J
2024-05-06 16:42:34 UTC	842	IN	Data Raw: ba b4 a3 54 31 61 f4 68 17 95 a4 ff 03 e9 5b 57 ac 4b 80 eb ae 19 0a af bd c5 c3 b9 b8 65 d9 1d 05 2a 2e fb 2d af 3a 88 ec 8e 27 6e 76 55 8d aa fc cd 1d c3 06 95 2c 99 d5 a6 e5 96 8a 19 5f 8b ba e3 52 8d 8c b9 76 16 46 49 41 4b 19 09 54 4c dc e2 de 01 3b 5c fe bf a9 bb 56 3d 86 26 d5 c1 49 59 00 3e 43 e6 7a 4a de 55 60 34 ea a3 da ec a2 a2 83 f9 5d 7a e9 3c df 3e c1 84 f4 12 3d 6c d1 e6 a0 4d 1b a7 79 8b aa 9c 15 50 a6 3c 9b 89 f8 5a 45 b1 3f f9 d6 1a a7 e7 ff ed 5b 6d 93 9a 30 10 0e 90 00 41 79 2d 68 f0 0d 38 8b 40 3d 3d c1 3b af bd 99 e6 ff ff ac 6e 82 2f e7 8d d7 3b 3f 74 3a d8 ee 8c 32 1a 75 f6 71 c3 b3 cf 6e 12 08 48 ea 1a 1f 41 4d 87 e4 b0 e2 6e d2 cc 20 92 4f 7a 4e d6 d2 52 01 b9 23 a4 71 ee 86 b6 63 4a a8 88 2c 45 b2 29 14 7c 80 7a e2 f7 44 71 5d Data Ascii: T1ah[WKe*.-:'nvU,_RvFIAKTL;\V=&IY>CzJU`4]z<>=lMyP<ZE?[m0Ay-h8@==;n/;?t:2uqnHAMn OzNR#qcJ,E)\|zDq]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.11	49933	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:34 UTC	381	OUT	GET /wp-content/uploads/2017/12/Logo-179x64.png HTTP/1.1 Host: fortis-site.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:34 UTC	753	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:34 GMT Content-Type: image/png Content-Length: 2939 Connection: close Last-Modified: Wed, 03 Oct 2018 23:54:47 GMT ETag: "5bb556c7-b7b" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 0 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K9zmWI6RR0Mtzwqo7yb9YNF6EE%2BKXqKhnuzIyOctMYRrPYQuCRlNv%2FiZPayrw%2BQ%2FfIvb7z71CBkSpuT6MTQH5Z2dtmzFNyk%2F%2Bn%2FSS1a9%2FD7fjaLaMg4vj61RUVXmZm419y8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6ca0386e2281-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:34 UTC	616	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b3 00 00 00 40 08 03 00 00 00 66 cc b6 76 00 00 03 78 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: PNGIHDR@fvxiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://w
2024-05-06 16:42:34 UTC	1369	IN	Data Raw: 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 36 34 35 35 44 33 42 43 30 43 31 35 31 31 45 38 38 32 44 37 45 39 39 37 35 38 33 45 39 30 45 45 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 35 65 33 31 35 62 31 32 2d 38 39 36 34 2d 34 62 32 35 2d 62 37 64 62 2d 64 34 65 35 65 32 36 31 37 33 32 63 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 35 65 33 31 35 62 31 32 2d 38 39 36 34 2d 34 62 32 35 2d 62 37 64 62 2d 64 34 65 35 65 32 36 31 37 33 32 63 22 2f 3e 20 3c 2f 72 64 Data Ascii: eID="xmp.iid:6455D3BC0C1511E882D7E997583E90EE" xmp:CreatorTool="Adobe Photoshop CC 2017 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5e315b12-8964-4b25-b7db-d4e5e261732c" stRef:documentID="xmp.did:5e315b12-8964-4b25-b7db-d4e5e261732c"/> </rd
2024-05-06 16:42:34 UTC	954	IN	Data Raw: f5 5c 53 f3 df 25 63 8e 3f 82 99 bf 35 98 17 75 c8 62 a6 e7 1f af da cc 52 d1 54 cd 37 5c aa 3f e1 9b ca f8 a6 56 f3 f8 6d 3f 33 32 33 aa f3 98 e7 42 7b d2 f6 43 fe f1 af 36 b3 70 64 a9 6d 36 33 b5 0f 0d 94 9a fb e5 31 cc e8 bd 98 e9 0a 5b cb 7f 5e 51 b3 b3 6f df 9e 0c 66 36 9b 35 57 b6 b0 01 5d 72 d5 af 1d cd 38 78 fc a2 6a 9e 7f 2e f3 a5 dc 21 84 43 93 e7 55 59 dd 12 93 59 c4 df 88 2d cb 8a c8 dd 92 e6 2d f4 af 50 73 fc a9 cc 43 b6 a4 e2 46 d1 75 6b 31 c7 53 e9 0a 82 79 cb df bc b2 6d 53 a8 f9 73 99 d7 75 12 57 ef ec 84 3c 46 26 33 4b 45 16 3c fc 31 df 58 89 c8 bd 23 bb 52 a8 f9 10 f3 cc dc 51 cf 62 8e 1a d7 60 ed 81 e6 67 b7 15 b6 98 87 32 f3 2b d9 e7 44 9e 56 39 26 b5 c0 55 bf bf 65 d9 e0 b6 3f f8 90 58 e7 71 e6 54 8b 1a 97 76 66 80 a7 cc 77 13 6d c7 Data Ascii: \S%c?5ubRT7\?Vm?323B{C6pdm631[^Qof65W]r8xj.!CUYY--PsCFuk1SymSsuW<F&3KE<1X#RQb`g2+DV9&Ue?XqTvfwm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.11	49932	35.188.55.83	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:34 UTC	626	OUT	GET /wp-content/uploads/2018/10/about.jpg?id=6186 HTTP/1.1 Host: fortissite.wpengine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:35 UTC	326	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 06 May 2024 16:42:35 GMT Content-Type: image/jpeg Content-Length: 43272 Connection: close Last-Modified: Fri, 05 Oct 2018 12:14:29 GMT ETag: "5bb755a5-a908" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-05-06 16:42:35 UTC	16058	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 1f 43 6f 6d 70 72 65 73 73 65 64 20 62 79 20 6a 70 65 67 2d 72 65 63 6f 6d 70 72 65 73 73 ff db 00 84 00 0c 0c 0c 0c 0d 0c 0e 0f 0f 0e 13 15 12 15 13 1c 1a 18 18 1a 1c 2b 1e 21 1e 21 1e 2b 41 28 2f 28 28 2f 28 41 39 45 38 34 38 45 39 67 51 47 47 51 67 77 64 5e 64 77 90 80 80 90 b5 ac b5 ec ec ff 01 0c 0c 0c 0c 0d 0c 0e 0f 0f 0e 13 15 12 15 13 1c 1a 18 18 1a 1c 2b 1e 21 1e 21 1e 2b 41 28 2f 28 28 2f 28 41 39 45 38 34 38 45 39 67 51 47 47 51 67 77 64 5e 64 77 90 80 80 90 b5 ac b5 ec ec ff ff c2 00 11 08 03 b1 08 98 03 01 22 00 02 11 01 03 11 01 ff c4 00 1a 00 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 07 ff da 00 08 01 01 00 00 00 00 fd 4c 1c 23 79 b6 b5 a0 14 8a 00 Data Ascii: JFIFCompressed by jpeg-recompress+!!+A(/((/(A9E848E9gQGGQgwd^dw+!!+A(/((/(A9E848E9gQGGQgwd^dw"L#y
2024-05-06 16:42:35 UTC	16384	IN	Data Raw: 05 bf 82 df c1 cf c1 1e bf c3 35 ce 7c b2 a8 e4 8a ac 91 1e c5 ea b1 c4 d2 68 34 14 51 a5 1a 79 34 f2 24 ac 8a a5 e8 56 55 93 5c 0e 36 38 a1 46 cd 08 d0 8d 23 5c 31 72 97 3b a7 ed 29 1c 1c 14 8a c9 1c 0d 26 ca 29 15 95 2d 9e 05 d1 63 f6 9a e5 14 3d 3f 91 55 23 83 8f c9 c7 e4 e3 f2 3d 3f 93 ed fc 9c 5a ef 76 25 70 71 f0 c5 5f 0c 55 f9 38 fc 9c 1c 7e 4e 0e 3f 27 05 2c b8 2b 3a c9 74 bf c6 cb a1 0c b6 26 59 62 91 6b d5 d4 8d 4b e4 b4 5a 2d 6d 4e ff 00 c0 bc d8 91 48 d2 8d 28 8a 48 91 59 70 70 45 d3 7f e1 9f 79 71 44 79 48 a2 5d 11 5c 0c a1 0b bf 55 e7 45 14 35 95 e5 a7 ee 42 e3 d1 79 be 8d 47 b9 ed 7d 32 1e d5 bb 15 d4 4d 6c d7 f8 2d 1c 16 5e 75 c8 d6 55 79 56 54 84 87 c2 17 42 1f b4 7d 3c a3 d2 2b 63 c9 76 b7 62 22 84 69 aa e4 4b f2 69 34 b3 49 5b 68 79 51 Data Ascii: 5\|h4Qy4$VU\68F#\1r;)&)-c=?U#=?Zv%pq_U8~N?',+:t&YbkKZ-mNH(HYppEyqDyH]\UE5ByG}2Ml-^uUyVTB}<+cvb"iKi4I[hyQ
2024-05-06 16:42:35 UTC	10830	IN	Data Raw: 2d 5d 65 79 b4 9a 65 21 a4 43 8c 45 9e 33 a9 7f c2 cb 74 60 aa c3 5b d0 ba df 1b 47 25 8f a2 f8 2f 67 1b 17 f0 de 73 5f 73 3c e5 05 db cb 11 7d b9 2b 47 39 2e d6 e9 f1 5c 93 eb a3 8c 9e 58 4b ed bd 88 9a fb 4a 2b 25 b7 8d ab d3 97 28 76 72 41 fd c3 f1 fb 25 d6 db 31 27 fd ab b3 ee 1a fc 65 64 39 84 5f e3 f8 93 b4 dd e6 f6 e1 73 26 fd 17 9d ab 7b df 79 c5 dc 57 eb 73 ca 39 f8 c9 76 3e f2 bf 47 17 dc f3 c1 ed bc d6 48 a2 8a 25 9b db c1 c1 c1 48 94 53 8b 1c 51 51 29 65 85 ef ff 00 85 97 96 2a 7a 93 39 39 39 2d 8d fd 91 35 33 5b f9 64 24 e4 e9 b3 11 d6 0a fd 89 dd 9c 89 d2 ca 3c 45 2d ef 39 af b5 8c ae 1e 54 60 7f 76 78 fe ff 00 f8 28 aa 34 9a 79 ec ff 00 b9 56 72 8b 52 62 4d 33 fb e3 4b 3c 64 b5 23 8c a2 aa 29 7e 36 f2 78 17 42 f4 98 ba d9 7e 8a cd e4 bd 1f Data Ascii: -]eye!CE3t`[G%/gs_s<}+G9.\XKJ+%(vrA%1'ed9_s&{yWs9v>GH%HSQQ)e*z999-53[d$<E-9T`vx(4yVrRbM3K<d#)~6xB~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.11	49936	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:34 UTC	857	OUT	GET /wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.slideanims.min.js?version=5.4.6.4 HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.942134464.1715013754; _gid=GA1.2.1562157020.1715013754; _gat_gtag_UA_127514612_1=1
2024-05-06 16:42:35 UTC	782	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:35 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Wed, 03 Oct 2018 23:54:48 GMT ETag: W/"5bb556c8-72db" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WPUcqWzv0h2SoysDdoTs2drdKRIAlzZE5Sdj0mOZw0QH8G2I15kxtLtgfTsOQ9d%2Boa2eHaw5aXd8%2Bkvu7prqIwwdnBop85XzJxxjafr%2Buw8xramzPPeVJZcNDULdt6PXKB4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6ca1a807dafd-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:35 UTC	587	IN	Data Raw: 37 32 64 62 0d 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0d 0a 20 2a 20 52 45 56 4f 4c 55 54 49 4f 4e 20 35 2e 34 2e 36 2e 34 20 45 58 54 45 4e 53 49 4f 4e 20 2d 20 53 4c 49 44 45 20 41 4e 49 4d 41 54 49 4f 4e 53 0d 0a 20 2a 20 40 76 65 72 73 69 6f 6e 3a 20 31 2e 38 20 28 31 37 2e 30 35 2e 32 30 31 37 29 0d 0a 20 2a 20 40 72 65 71 75 69 72 65 73 20 6a 71 75 65 72 79 2e 74 68 65 6d 65 70 75 6e 63 68 2e 72 65 76 6f 6c 75 74 69 6f 6e 2e 6a 73 0d 0a 20 2a 20 40 61 75 74 68 6f 72 20 54 68 65 6d 65 50 75 6e 63 68 0d 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a Data Ascii: 72db/************************************************ * REVOLUTION 5.4.6.4 EXTENSION - SLIDE ANIMATIONS * @version: 1.8 (17.05.2017) * @requires jquery.themepunch.revolution.js * @author ThemePunch**********************************************
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 66 69 6e 64 28 22 2e 64 65 66 61 75 6c 74 69 6d 67 22 29 2c 68 3d 67 2e 64 61 74 61 28 22 6d 65 64 69 61 66 69 6c 74 65 72 22 29 2c 69 3d 66 2e 64 61 74 61 28 22 7a 6f 6f 6d 73 74 61 72 74 22 29 2c 6a 3d 66 2e 64 61 74 61 28 22 72 6f 74 61 74 69 6f 6e 73 74 61 72 74 22 29 3b 76 6f 69 64 20 30 21 3d 67 2e 64 61 74 61 28 22 63 75 72 72 6f 74 61 74 65 22 29 26 26 28 6a 3d 67 2e 64 61 74 61 28 22 63 75 72 72 6f 74 61 74 65 22 29 29 2c 76 6f 69 64 20 30 21 3d 67 2e 64 61 74 61 28 22 63 75 72 73 63 61 6c 65 22 29 26 26 22 62 6f 78 22 3d 3d 65 3f 69 3d 31 30 30 2a 67 2e 64 61 74 61 28 22 63 75 72 73 63 61 6c 65 22 29 3a 76 6f 69 64 20 30 21 3d 67 2e 64 61 74 61 28 22 63 75 72 73 63 61 6c 65 22 29 26 26 28 69 3d 67 2e 64 61 74 61 28 22 63 75 72 73 63 61 6c 65 22 Data Ascii: find(".defaultimg"),h=g.data("mediafilter"),i=f.data("zoomstart"),j=f.data("rotationstart");void 0!=g.data("currotate")&&(j=g.data("currotate")),void 0!=g.data("curscale")&&"box"==e?i=100*g.data("curscale"):void 0!=g.data("curscale")&&(i=g.data("curscale"
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 2e 6c 61 73 74 28 29 2c 7b 72 6f 74 61 74 69 6f 6e 5a 3a 6a 7d 29 3b 76 2b 3d 63 2e 73 6c 6f 74 77 7d 62 72 65 61 6b 3b 63 61 73 65 22 76 65 72 74 69 63 61 6c 22 3a 63 61 73 65 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 3a 69 66 28 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 3d 3d 65 29 7b 69 66 28 21 64 29 76 61 72 20 71 3d 30 2d 63 2e 73 6c 6f 74 77 3b 66 6f 72 28 76 61 72 20 79 3d 30 3b 79 3c 63 2e 73 6c 6f 74 73 3b 79 2b 2b 29 66 2e 61 70 70 65 6e 64 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 6c 6f 74 22 20 73 74 79 6c 65 3d 22 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 27 2b 28 30 2b 70 29 2b 22 70 78 3b 6c 65 66 74 3a 22 2b 28 6f 2b 79 2a 63 2e 73 6c 6f 74 77 29 2b 22 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 Data Ascii: .last(),{rotationZ:j});v+=c.slotw}break;case"vertical":case"horizontal":if("horizontal"==e){if(!d)var q=0-c.slotw;for(var y=0;y<c.slots;y++)f.append('<div class="slot" style="position:absolute;top:'+(0+p)+"px;left:"+(o+y*c.slotw)+"px;overflow:hidden;width
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 72 32 2e 65 61 73 65 49 6e 2c 6a 3d 70 75 6e 63 68 67 73 2e 50 6f 77 65 72 32 2e 65 61 73 65 4f 75 74 2c 6b 3d 70 75 6e 63 68 67 73 2e 50 6f 77 65 72 32 2e 65 61 73 65 49 6e 4f 75 74 2c 6d 3d 28 70 75 6e 63 68 67 73 2e 50 6f 77 65 72 33 2e 65 61 73 65 49 6e 2c 70 75 6e 63 68 67 73 2e 50 6f 77 65 72 33 2e 65 61 73 65 4f 75 74 29 2c 6e 3d 70 75 6e 63 68 67 73 2e 50 6f 77 65 72 33 2e 65 61 73 65 49 6e 4f 75 74 2c 6f 3d 5b 30 2c 31 2c 32 2c 33 2c 34 2c 35 2c 36 2c 37 2c 38 2c 39 2c 31 30 2c 31 31 2c 31 32 2c 31 33 2c 31 34 2c 31 35 2c 32 38 2c 32 39 2c 33 30 2c 33 31 2c 33 32 2c 33 33 2c 33 34 2c 33 35 2c 33 36 2c 33 37 2c 33 38 2c 33 39 2c 34 30 2c 34 31 2c 34 32 2c 34 33 2c 34 34 2c 34 35 5d 2c 70 3d 5b 31 36 2c 31 37 2c 31 38 2c 31 39 2c 32 30 2c 32 31 2c Data Ascii: r2.easeIn,j=punchgs.Power2.easeOut,k=punchgs.Power2.easeInOut,m=(punchgs.Power3.easeIn,punchgs.Power3.easeOut),n=punchgs.Power3.easeInOut,o=[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45],p=[16,17,18,19,20,21,
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 6c 69 64 65 64 6f 77 6e 22 2c 31 34 2c 30 2c 31 2c 30 2c 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 21 30 2c 21 30 2c 31 34 2c 6e 2c 6e 2c 31 65 33 2c 31 5d 2c 5b 22 73 6c 69 64 65 72 69 67 68 74 22 2c 31 35 2c 30 2c 31 2c 30 2c 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 21 30 2c 21 30 2c 31 35 2c 6e 2c 6e 2c 31 65 33 2c 31 5d 2c 5b 22 73 6c 69 64 65 6f 76 65 72 6c 65 66 74 22 2c 31 32 2c 37 2c 31 2c 30 2c 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 21 30 2c 21 30 2c 31 32 2c 6e 2c 6e 2c 31 65 33 2c 31 5d 2c 5b 22 73 6c 69 64 65 6f 76 65 72 75 70 22 2c 31 33 2c 37 2c 31 2c 30 2c 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 21 30 2c 21 30 2c 31 33 2c 6e 2c 6e 2c 31 65 33 2c 31 5d 2c 5b 22 73 6c 69 64 65 6f 76 65 72 64 6f 77 6e 22 2c 31 34 2c 37 2c 31 2c 30 2c 22 68 6f 72 69 Data Ascii: lidedown",14,0,1,0,"horizontal",!0,!0,14,n,n,1e3,1],["slideright",15,0,1,0,"horizontal",!0,!0,15,n,n,1e3,1],["slideoverleft",12,7,1,0,"horizontal",!0,!0,12,n,n,1e3,1],["slideoverup",13,7,1,0,"horizontal",!0,!0,13,n,n,1e3,1],["slideoverdown",14,7,1,0,"hori
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 31 2c 31 2c 30 2c 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 21 30 2c 21 30 2c 32 39 2c 6b 2c 6b 2c 31 65 33 2c 31 5d 2c 5b 22 66 61 64 65 66 72 6f 6d 74 6f 70 22 2c 31 34 2c 31 2c 31 2c 30 2c 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 21 30 2c 21 30 2c 33 30 2c 6b 2c 6b 2c 31 65 33 2c 31 5d 2c 5b 22 66 61 64 65 66 72 6f 6d 62 6f 74 74 6f 6d 22 2c 31 33 2c 31 2c 31 2c 30 2c 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 21 30 2c 21 30 2c 33 31 2c 6b 2c 6b 2c 31 65 33 2c 31 5d 2c 5b 22 66 61 64 65 74 6f 6c 65 66 74 66 61 64 65 66 72 6f 6d 72 69 67 68 74 22 2c 31 32 2c 32 2c 31 2c 30 2c 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 21 30 2c 21 30 2c 33 32 2c 6b 2c 6b 2c 31 65 33 2c 31 5d 2c 5b 22 66 61 64 65 74 6f 72 69 67 68 74 66 61 64 65 66 72 6f 6d 6c 65 66 74 22 2c 31 35 2c Data Ascii: 1,1,0,"horizontal",!0,!0,29,k,k,1e3,1],["fadefromtop",14,1,1,0,"horizontal",!0,!0,30,k,k,1e3,1],["fadefrombottom",13,1,1,0,"horizontal",!0,!0,31,k,k,1e3,1],["fadetoleftfadefromright",12,2,1,0,"horizontal",!0,!0,32,k,k,1e3,1],["fadetorightfadefromleft",15,
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 63 6c 65 73 64 6f 77 6e 22 2c 33 32 2c 30 2c 31 2c 30 2c 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 21 30 2c 21 30 2c 35 32 2c 6b 2c 66 2c 31 35 30 30 2c 31 5d 2c 5b 22 70 61 72 61 6c 6c 61 78 63 69 72 63 6c 65 73 72 69 67 68 74 22 2c 33 33 2c 30 2c 31 2c 30 2c 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 21 30 2c 21 30 2c 35 33 2c 6b 2c 66 2c 31 35 30 30 2c 31 5d 2c 5b 22 70 61 72 61 6c 6c 61 78 63 69 72 63 6c 65 73 6c 65 66 74 22 2c 33 34 2c 30 2c 31 2c 30 2c 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 21 30 2c 21 30 2c 35 34 2c 6b 2c 66 2c 31 35 30 30 2c 31 5d 2c 5b 22 6e 6f 74 72 61 6e 73 69 74 69 6f 6e 22 2c 32 36 2c 30 2c 31 2c 30 2c 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 21 30 2c 6e 75 6c 6c 2c 34 36 2c 6b 2c 69 2c 31 65 33 2c 31 5d 2c 5b 22 70 61 72 61 6c 6c 61 Data Ascii: clesdown",32,0,1,0,"horizontal",!0,!0,52,k,f,1500,1],["parallaxcirclesright",33,0,1,0,"horizontal",!0,!0,53,k,f,1500,1],["parallaxcirclesleft",34,0,1,0,"horizontal",!0,!0,54,k,f,1500,1],["notransition",26,0,1,0,"horizontal",!0,null,46,k,i,1e3,1],["paralla
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 76 65 72 22 2c 22 73 6c 69 64 65 72 65 6d 6f 76 65 22 2c 22 70 61 72 61 6c 6c 61 78 22 2c 22 70 61 72 72 61 6c 61 78 74 6f 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 62 3d 3d 63 2b 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 26 26 28 62 3d 31 21 3d 64 3f 63 2b 22 6c 65 66 74 22 3a 63 2b 22 72 69 67 68 74 22 29 2c 62 3d 3d 63 2b 22 76 65 72 74 69 63 61 6c 22 26 26 28 62 3d 31 21 3d 64 3f 63 2b 22 75 70 22 3a 63 2b 22 64 6f 77 6e 22 29 7d 29 2c 22 72 61 6e 64 6f 6d 22 3d 3d 62 26 26 28 62 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 76 2e 6c 65 6e 67 74 68 2d 31 29 29 3e 76 2e 6c 65 6e 67 74 68 2d 31 26 26 28 62 3d 76 2e 6c 65 6e 67 74 68 2d 31 29 2c 22 72 61 6e 64 6f 6d 2d 73 74 61 74 69 63 22 3d 3d 62 26 26 28 62 3d 4d 61 Data Ascii: ver","slideremove","parallax","parralaxto"],function(a,c){b==c+"horizontal"&&(b=1!=d?c+"left":c+"right"),b==c+"vertical"&&(b=1!=d?c+"up":c+"down")}),"random"==b&&(b=Math.round(Math.random()*v.length-1))>v.length-1&&(b=v.length-1),"random-static"==b&&(b=Ma
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 74 68 3a 6d 2b 22 70 78 22 2c 68 65 69 67 68 74 3a 69 2b 22 70 78 22 2c 74 6f 70 3a 71 2b 22 70 78 22 2c 6c 65 66 74 3a 72 2b 22 70 78 22 2c 62 6f 72 64 65 72 52 61 64 69 75 73 3a 70 7d 2c 74 3d 7b 73 63 61 6c 65 3a 31 2c 74 6f 70 3a 6c 2f 32 2d 69 2f 32 2c 6c 65 66 74 3a 6a 2f 32 2d 6d 2f 32 2c 65 61 73 65 3a 65 7d 2c 75 3d 6f 2c 76 3d 33 33 3d 3d 63 3f 6e 3a 33 34 3d 3d 63 3f 6e 2b 6a 2f 32 3a 6e 2c 77 3d 7b 77 69 64 74 68 3a 6a 2c 68 65 69 67 68 74 3a 6c 2c 61 75 74 6f 41 6c 70 68 61 3a 31 2c 74 6f 70 3a 75 2b 22 70 78 22 2c 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 2c 6c 65 66 74 3a 76 2b 22 70 78 22 7d 2c 78 3d 7b 74 6f 70 3a 6f 2b 22 70 78 22 2c 6c 65 66 74 3a 6e 2b 22 70 78 22 2c 65 61 73 65 3a 65 7d 2c 79 3d 62 2c 7a 3d 30 3b 6b 2e Data Ascii: th:m+"px",height:i+"px",top:q+"px",left:r+"px",borderRadius:p},t={scale:1,top:l/2-i/2,left:j/2-m/2,ease:e},u=o,v=33==c?n:34==c?n+j/2:n,w={width:j,height:l,autoAlpha:1,top:u+"px",position:"absolute",left:v+"px"},x={top:o+"px",left:n+"px",ease:e},y=b,z=0;k.
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 65 39 3f 30 3a 6c 2e 72 6f 74 61 74 65 2c 31 31 21 3d 61 26 26 28 6e 75 6c 6c 21 3d 71 5b 37 5d 26 26 64 28 6a 2c 6c 2c 71 5b 37 5d 2c 71 5b 35 5d 29 2c 6e 75 6c 6c 21 3d 71 5b 36 5d 26 26 64 28 69 2c 6c 2c 71 5b 36 5d 2c 71 5b 35 5d 29 29 2c 6b 2e 61 64 64 28 70 75 6e 63 68 67 73 2e 54 77 65 65 6e 4c 69 74 65 2e 73 65 74 28 69 2e 66 69 6e 64 28 22 2e 64 65 66 61 75 6c 74 76 69 64 22 29 2c 7b 79 3a 30 2c 78 3a 30 2c 74 6f 70 3a 30 2c 6c 65 66 74 3a 30 2c 73 63 61 6c 65 3a 31 7d 29 2c 30 29 2c 6b 2e 61 64 64 28 70 75 6e 63 68 67 73 2e 54 77 65 65 6e 4c 69 74 65 2e 73 65 74 28 6a 2e 66 69 6e 64 28 22 2e 64 65 66 61 75 6c 74 76 69 64 22 29 2c 7b 79 3a 30 2c 78 3a 30 2c 74 6f 70 3a 30 2c 6c 65 66 74 3a 30 2c 73 63 61 6c 65 3a 31 7d 29 2c 30 29 2c 6b 2e 61 64 Data Ascii: e9?0:l.rotate,11!=a&&(null!=q[7]&&d(j,l,q[7],q[5]),null!=q[6]&&d(i,l,q[6],q[5])),k.add(punchgs.TweenLite.set(i.find(".defaultvid"),{y:0,x:0,top:0,left:0,scale:1}),0),k.add(punchgs.TweenLite.set(j.find(".defaultvid"),{y:0,x:0,top:0,left:0,scale:1}),0),k.ad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.11	49939	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:34 UTC	498	OUT	GET /wp-content/uploads/2018/04/trusted-choice-logo-234x62.png HTTP/1.1 Host: fortis-site.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.942134464.1715013754; _gid=GA1.2.1562157020.1715013754; _gat_gtag_UA_127514612_1=1
2024-05-06 16:42:35 UTC	744	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:35 GMT Content-Type: image/png Content-Length: 4204 Connection: close Last-Modified: Wed, 03 Oct 2018 23:54:47 GMT ETag: "5bb556c7-106c" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4bdKpIfr0XC979jdXyN%2BWx8Qrcdhm5GrR89OEM7fqQUUrkm2QnzsynsgjbRekDQcbvS04qmAszc10W63quTmRut4XDZDH1SGFiK1OXEak5WpZ%2FRr3Fx%2BMq5xjFPouacm0p0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6ca1a80bdafd-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:35 UTC	625	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ea 00 00 00 52 08 03 00 00 00 6d d3 b8 64 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: PNGIHDRRmd(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://w
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 45 38 41 38 30 35 43 41 41 30 32 44 42 41 43 33 39 43 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 43 45 41 43 39 36 43 32 32 44 32 41 31 31 45 38 41 38 30 35 43 41 41 30 32 44 42 41 43 33 39 43 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 43 45 41 43 39 36 43 33 32 44 32 41 31 31 45 38 41 38 30 35 43 41 41 30 32 44 42 41 43 33 39 43 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 70 c0 d5 3e 00 00 00 bd 50 4c 54 45 47 70 4c 00 00 00 04 04 04 00 00 00 00 00 00 00 00 00 00 Data Ascii: E8A805CAA02DBAC39C"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:CEAC96C22D2A11E8A805CAA02DBAC39C" stRef:documentID="xmp.did:CEAC96C32D2A11E8A805CAA02DBAC39C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>p>PLTEGpL
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: ed 1c f6 ae ca 80 9d d0 7c 2c 70 d5 44 a3 37 51 07 7a 95 e8 5d d4 8d 8d 6b d5 3c 1c a4 a1 50 60 63 ac cd b0 62 97 1c 24 7c 82 70 4e ec ea 0e f5 34 c1 b5 ca bb e3 ac 48 0b b2 1d 7d 10 35 00 48 b2 ef 50 f7 26 20 55 15 89 0d d3 2d ec 3c 09 14 7b b7 3d 36 e7 75 de 16 d8 68 07 5b 3a d5 5a 7d 7f 03 b5 47 d6 30 f8 01 b5 c8 8f 03 1c d6 d6 24 c7 59 52 84 51 e7 a2 22 cc 49 1f 8e 5d d4 a7 11 ae d5 b6 bb 34 26 cf 30 ff 98 02 9f 00 ba f9 b8 a5 34 a8 50 c9 6b 44 4d 39 aa 29 a3 2b ca 88 5b fb 5b 70 e2 7d 8f 2b fc 8a 41 89 ed 1b 37 ff 33 54 d2 d3 fc c9 15 55 bf 53 e0 62 dd e7 26 ce b8 2a 70 4e c8 8c f9 d5 15 55 37 23 dd d0 2e 0a 8c bd 96 8e 6b 7f 40 aa 3e 83 bb ad 83 8b 54 19 ea e7 05 95 4b 15 94 27 2e 0a 50 c4 e2 b4 27 15 83 02 63 ac 35 37 b4 7f 82 4a 93 d3 e8 8a ca ed Data Ascii: \|,pD7Qz]k<P`cb$\|pN4H}5HP& U-<{=6uh[:Z}G0$YRQ"I]4&04PkDM9)+[[p}+A73TUSb&*pNU7#.k@>TK'.P'c57J
2024-05-06 16:42:35 UTC	841	IN	Data Raw: b4 a3 54 31 61 f4 68 17 95 a4 ff 03 e9 5b 57 ac 4b 80 eb ae 19 0a af bd c5 c3 b9 b8 65 d9 1d 05 2a 2e fb 2d af 3a 88 ec 8e 27 6e 76 55 8d aa fc cd 1d c3 06 95 2c 99 d5 a6 e5 96 8a 19 5f 8b ba e3 52 8d 8c b9 76 16 46 49 41 4b 19 09 54 4c dc e2 de 01 3b 5c fe bf a9 bb 56 3d 86 26 d5 c1 49 59 00 3e 43 e6 7a 4a de 55 60 34 ea a3 da ec a2 a2 83 f9 5d 7a e9 3c df 3e c1 84 f4 12 3d 6c d1 e6 a0 4d 1b a7 79 8b aa 9c 15 50 a6 3c 9b 89 f8 5a 45 b1 3f f9 d6 1a a7 e7 ff ed 5b 6d 93 9a 30 10 0e 90 00 41 79 2d 68 f0 0d 38 8b 40 3d 3d c1 3b af bd 99 e6 ff ff ac 6e 82 2f e7 8d d7 3b 3f 74 3a d8 ee 8c 32 1a 75 f6 71 c3 b3 cf 6e 12 08 48 ea 1a 1f 41 4d 87 e4 b0 e2 6e d2 cc 20 92 4f 7a 4e d6 d2 52 01 b9 23 a4 71 ee 86 b6 63 4a a8 88 2c 45 b2 29 14 7c 80 7a e2 f7 44 71 5d 37 Data Ascii: T1ah[WKe*.-:'nvU,_RvFIAKTL;\V=&IY>CzJU`4]z<>=lMyP<ZE?[m0Ay-h8@==;n/;?t:2uqnHAMn OzNR#qcJ,E)\|zDq]7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.11	49937	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:34 UTC	854	OUT	GET /wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.actions.min.js?version=5.4.6.4 HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.942134464.1715013754; _gid=GA1.2.1562157020.1715013754; _gat_gtag_UA_127514612_1=1
2024-05-06 16:42:35 UTC	782	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:35 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Wed, 03 Oct 2018 23:54:48 GMT ETag: W/"5bb556c8-208b" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bzjmWVIx0rzotGsws8YvWN7s%2FURc8QAyl3ufnrE1RETAlfwx3%2B8MYLelASt1MfJaYU01T94b3zGg0t7TnRiGct%2FjK2YotD2kq92WK0iQNhCjluNTicsSMJw8oILXUJLcQLc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6ca1bc91b3eb-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:35 UTC	587	IN	Data Raw: 32 30 38 62 0d 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0d 0a 20 2a 20 52 45 56 4f 4c 55 54 49 4f 4e 20 35 2e 34 2e 36 2e 34 20 45 58 54 45 4e 53 49 4f 4e 20 2d 20 41 43 54 49 4f 4e 53 0d 0a 20 2a 20 40 76 65 72 73 69 6f 6e 3a 20 32 2e 31 2e 30 20 28 32 32 2e 31 31 2e 32 30 31 37 29 0d 0a 20 2a 20 40 72 65 71 75 69 72 65 73 20 6a 71 75 65 72 79 2e 74 68 65 6d 65 70 75 6e 63 68 2e 72 65 76 6f 6c 75 74 69 6f 6e 2e 6a 73 0d 0a 20 2a 20 40 61 75 74 68 6f 72 20 54 68 65 6d 65 50 75 6e 63 68 0d 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0d 0a 0d 0a 21 66 75 6e 63 74 69 Data Ascii: 208b/******************************************** * REVOLUTION 5.4.6.4 EXTENSION - ACTIONS * @version: 2.1.0 (22.11.2017) * @requires jquery.themepunch.revolution.js * @author ThemePunch*********************************************/!functi
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 69 6e 20 4a 53 22 2c 6e 61 6d 65 3a 22 72 65 76 6f 6c 75 74 69 6f 6e 2e 65 78 74 65 6e 73 69 6f 6e 73 2e 61 63 74 69 6f 6e 73 2e 6d 69 6e 2e 6a 73 22 2c 6d 69 6e 5f 63 6f 72 65 3a 22 35 2e 34 2e 35 22 2c 76 65 72 73 69 6f 6e 3a 22 32 2e 31 2e 30 22 7d 3b 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 21 30 2c 5f 52 2c 7b 63 68 65 63 6b 41 63 74 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 69 66 28 22 73 74 6f 70 22 3d 3d 3d 5f 52 2e 63 6f 6d 70 61 72 65 5f 76 65 72 73 69 6f 6e 28 65 78 74 65 6e 73 69 6f 6e 29 2e 63 68 65 63 6b 29 72 65 74 75 72 6e 21 31 3b 63 68 65 63 6b 41 63 74 69 6f 6e 73 5f 69 6e 74 65 72 6e 28 65 2c 74 2c 6f 29 7d 7d 29 3b 76 61 72 20 63 68 65 63 6b 41 63 74 69 6f 6e 73 5f 69 6e 74 65 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: in JS",name:"revolution.extensions.actions.min.js",min_core:"5.4.5",version:"2.1.0"};jQuery.extend(!0,_R,{checkActions:function(e,t,o){if("stop"===_R.compare_version(extension).check)return!1;checkActions_intern(e,t,o)}});var checkActions_intern=function(
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 2e 64 61 74 61 28 22 76 69 64 65 6f 6d 75 74 65 74 6f 67 67 6c 65 64 62 79 22 29 3b 76 6f 69 64 20 30 3d 3d 61 26 26 28 61 3d 6e 65 77 20 41 72 72 61 79 29 2c 61 2e 70 75 73 68 28 65 29 2c 6f 2e 64 61 74 61 28 22 76 69 64 65 6f 6d 75 74 65 74 6f 67 67 6c 65 64 62 79 22 2c 61 29 7d 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 74 6f 67 67 6c 65 73 6c 69 64 65 72 22 3a 76 6f 69 64 20 30 3d 3d 74 2e 73 6c 69 64 65 72 74 6f 67 67 6c 65 64 62 79 26 26 28 74 2e 73 6c 69 64 65 72 74 6f 67 67 6c 65 64 62 79 3d 6e 65 77 20 41 72 72 61 79 29 2c 74 2e 73 6c 69 64 65 72 74 6f 67 67 6c 65 64 62 79 2e 70 75 73 68 28 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 74 6f 67 67 6c 65 66 75 6c 6c 73 63 72 65 65 6e 22 3a 76 6f 69 64 20 30 3d 3d 74 2e 66 75 6c 6c 73 63 72 65 65 6e 74 6f Data Ascii: .data("videomutetoggledby");void 0==a&&(a=new Array),a.push(e),o.data("videomutetoggledby",a)});break;case"toggleslider":void 0==t.slidertoggledby&&(t.slidertoggledby=new Array),t.slidertoggledby.push(e);break;case"togglefullscreen":void 0==t.fullscreento
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 6d 64 69 72 65 63 74 69 6f 6e 22 29 29 26 26 28 72 2e 61 6e 69 6d 64 69 72 65 63 74 69 6f 6e 3d 22 6f 75 74 22 2c 72 2e 74 72 69 67 67 65 72 65 64 3d 21 30 2c 72 2e 74 72 69 67 67 65 72 73 74 61 74 65 3d 22 6f 66 66 22 2c 5f 52 2e 73 74 6f 70 56 69 64 65 6f 26 26 5f 52 2e 73 74 6f 70 56 69 64 65 6f 28 6f 2c 74 29 2c 5f 52 2e 75 6e 54 6f 67 67 6c 65 53 74 61 74 65 28 72 2e 6c 61 79 65 72 74 6f 67 67 6c 65 64 62 79 29 2c 5f 52 2e 65 6e 64 4d 6f 76 65 43 61 70 74 69 6f 6e 26 26 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 72 2e 74 72 69 67 67 65 72 64 65 6c 61 79 4f 75 74 29 2c 72 2e 74 72 69 67 67 65 72 64 65 6c 61 79 4f 75 74 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 52 2e 70 6c 61 79 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 Data Ascii: mdirection"))&&(r.animdirection="out",r.triggered=!0,r.triggerstate="off",_R.stopVideo&&_R.stopVideo(o,t),_R.unToggleState(r.layertoggledby),_R.endMoveCaption&&(clearTimeout(r.triggerdelayOut),r.triggerdelayOut=setTimeout(function(){_R.playAnimationFrame(
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 73 65 29 3b 76 61 72 20 6f 66 66 3d 67 65 74 4f 66 66 43 6f 6e 74 48 28 6f 70 74 2e 66 75 6c 6c 53 63 72 65 65 6e 4f 66 66 73 65 74 43 6f 6e 74 61 69 6e 65 72 29 7c 7c 30 2c 61 6f 66 3d 70 61 72 73 65 49 6e 74 28 61 2e 6f 66 66 73 65 74 2c 30 29 7c 7c 30 3b 6f 66 66 3d 6f 66 66 2d 61 6f 66 7c 7c 30 2c 6f 70 74 2e 73 63 72 6f 6c 6c 52 6f 6f 74 3d 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 3b 76 61 72 20 73 6f 62 6a 3d 7b 5f 79 3a 6f 70 74 2e 73 63 72 6f 6c 6c 52 6f 6f 74 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 7d 3b 70 75 6e 63 68 67 73 2e 54 77 65 65 6e 4c 69 74 65 2e 74 6f 28 73 6f 62 6a 2c 61 2e 73 70 65 65 64 2f 31 65 33 2c 7b 5f 79 3a 6f 70 74 2e 63 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2b 6a 51 75 65 72 79 28 6f 70 74 2e 6c 69 5b 30 5d 29 2e 68 65 Data Ascii: se);var off=getOffContH(opt.fullScreenOffsetContainer)\|\|0,aof=parseInt(a.offset,0)\|\|0;off=off-aof\|\|0,opt.scrollRoot=jQuery(document);var sobj={_y:opt.scrollRoot.scrollTop()};punchgs.TweenLite.to(sobj,a.speed/1e3,{_y:opt.c.offset().top+jQuery(opt.li[0]).he
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 6f 70 56 69 64 65 6f 26 26 5f 52 2e 73 74 6f 70 56 69 64 65 6f 28 74 6e 63 2c 6f 70 74 29 3a 5f 52 2e 70 6c 61 79 56 69 64 65 6f 28 74 6e 63 2c 6f 70 74 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 6d 75 74 65 76 69 64 65 6f 22 3a 74 6e 63 2e 6c 65 6e 67 74 68 3e 30 26 26 5f 52 2e 6d 75 74 65 56 69 64 65 6f 28 74 6e 63 2c 6f 70 74 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 75 6e 6d 75 74 65 76 69 64 65 6f 22 3a 74 6e 63 2e 6c 65 6e 67 74 68 3e 30 26 26 5f 52 2e 75 6e 4d 75 74 65 56 69 64 65 6f 26 26 5f 52 2e 75 6e 4d 75 74 65 56 69 64 65 6f 28 74 6e 63 2c 6f 70 74 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 74 6f 67 67 6c 65 5f 6d 75 74 65 5f 76 69 64 65 6f 22 3a 74 6e 63 2e 6c 65 6e 67 74 68 3e 30 26 26 28 5f 52 2e 69 73 56 69 64 65 6f 4d 75 74 65 64 28 74 6e 63 2c Data Ascii: opVideo&&_R.stopVideo(tnc,opt):_R.playVideo(tnc,opt));break;case"mutevideo":tnc.length>0&&_R.muteVideo(tnc,opt);break;case"unmutevideo":tnc.length>0&&_R.unMuteVideo&&_R.unMuteVideo(tnc,opt);break;case"toggle_mute_video":tnc.length>0&&(_R.isVideoMuted(tnc,
2024-05-06 16:42:35 UTC	907	IN	Data Raw: 6f 70 74 2e 69 6e 66 75 6c 6c 73 63 72 65 65 6e 6d 6f 64 65 3d 21 31 2c 6f 70 74 2e 63 2e 72 65 76 72 65 64 72 61 77 28 29 2c 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 74 72 69 67 67 65 72 28 22 72 65 73 69 7a 65 22 29 2c 5f 52 2e 75 6e 54 6f 67 67 6c 65 53 74 61 74 65 28 6f 70 74 2e 66 75 6c 6c 73 63 72 65 65 6e 74 6f 67 67 6c 65 64 62 79 29 7d 65 6c 73 65 20 69 66 28 30 3d 3d 6a 51 75 65 72 79 28 22 2e 72 73 2d 67 6f 2d 66 75 6c 6c 73 63 72 65 65 6e 22 29 2e 6c 65 6e 67 74 68 26 26 28 22 74 6f 67 67 6c 65 66 75 6c 6c 73 63 72 65 65 6e 22 3d 3d 61 2e 61 63 74 69 6f 6e 7c 7c 22 67 6f 66 75 6c 6c 73 63 72 65 65 6e 22 3d 3d 61 2e 61 63 74 69 6f 6e 29 29 7b 76 61 72 20 67 66 3d 6f 70 74 2e 63 2e 63 6c 6f 73 65 73 74 28 22 2e 66 6f 72 63 65 66 75 6c 6c 77 Data Ascii: opt.infullscreenmode=!1,opt.c.revredraw(),jQuery(window).trigger("resize"),_R.unToggleState(opt.fullscreentoggledby)}else if(0==jQuery(".rs-go-fullscreen").length&&("togglefullscreen"==a.action\|\|"gofullscreen"==a.action)){var gf=opt.c.closest(".forcefullw
2024-05-06 16:42:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.11	49938	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:34 UTC	861	OUT	GET /wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.layeranimation.min.js?version=5.4.6.4 HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.942134464.1715013754; _gid=GA1.2.1562157020.1715013754; _gat_gtag_UA_127514612_1=1
2024-05-06 16:42:35 UTC	788	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:35 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Wed, 03 Oct 2018 23:54:48 GMT ETag: W/"5bb556c8-da86" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VHUu74UMK56GmHt8YzCsFpO9No2MLfsOE%2Bh%2FsQzmzuXHHewVBEG2E87SfJEGW%2BE0CbdAs3RIDe%2BRYcnCHzIZ3cNadHYN%2BllyJbDuQMEkzZwK3cN5NA8RU29xODn0qR7F%2F1w%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6ca1ae0ad9fd-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:35 UTC	581	IN	Data Raw: 37 63 39 64 0d 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0d 0a 20 2a 20 52 45 56 4f 4c 55 54 49 4f 4e 20 35 2e 34 2e 36 2e 34 20 45 58 54 45 4e 53 49 4f 4e 20 2d 20 4c 41 59 45 52 20 41 4e 49 4d 41 54 49 4f 4e 0d 0a 20 2a 20 40 76 65 72 73 69 6f 6e 3a 20 33 2e 36 2e 34 20 28 32 38 2e 31 31 2e 32 30 31 37 29 0d 0a 20 2a 20 40 72 65 71 75 69 72 65 73 20 6a 71 75 65 72 79 2e 74 68 65 6d 65 70 75 6e 63 68 2e 72 65 76 6f 6c 75 74 69 6f 6e 2e 6a 73 0d 0a 20 2a 20 40 61 75 74 68 6f 72 20 54 68 65 6d 65 50 75 6e 63 68 0d 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a Data Ascii: 7c9d/************************************************ * REVOLUTION 5.4.6.4 EXTENSION - LAYER ANIMATION * @version: 3.6.4 (28.11.2017) * @requires jquery.themepunch.revolution.js * @author ThemePunch*********************************************
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 72 73 69 6f 6e 3a 22 33 2e 36 2e 34 22 7d 29 3b 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 21 30 2c 74 2c 7b 75 70 64 61 74 65 4d 61 72 6b 75 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 76 61 72 20 74 3d 6a 51 75 65 72 79 28 65 29 2e 64 61 74 61 28 29 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 2e 73 74 61 72 74 26 26 21 74 2e 66 72 61 6d 65 73 5f 61 64 64 65 64 26 26 76 6f 69 64 20 30 3d 3d 3d 74 2e 66 72 61 6d 65 73 29 7b 76 61 72 20 61 3d 6e 65 77 20 41 72 72 61 79 2c 6f 3d 5f 28 63 28 29 2c 74 2e 74 72 61 6e 73 66 6f 72 6d 5f 69 6e 2c 76 6f 69 64 20 30 2c 21 31 29 2c 72 3d 5f 28 63 28 29 2c 74 2e 74 72 61 6e 73 66 6f 72 6d 5f 6f 75 74 2c 76 6f 69 64 20 30 2c 21 31 29 2c 6e 3d 5f 28 63 28 29 2c 74 2e 74 72 61 6e 73 66 6f 72 6d 5f 68 6f 76 65 72 2c 76 Data Ascii: rsion:"3.6.4"});jQuery.extend(!0,t,{updateMarkup:function(e,i){var t=jQuery(e).data();if(void 0!==t.start&&!t.frames_added&&void 0===t.frames){var a=new Array,o=_(c(),t.transform_in,void 0,!1),r=_(c(),t.transform_out,void 0,!1),n=_(c(),t.transform_hover,v
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 66 72 61 6d 65 73 5b 73 5d 2e 66 72 61 6d 65 26 26 22 6c 61 73 74 22 21 3d 3d 74 2e 66 72 61 6d 65 73 5b 73 5d 2e 66 72 61 6d 65 26 26 22 65 6e 64 22 21 3d 3d 74 2e 66 72 61 6d 65 73 5b 73 5d 2e 66 72 61 6d 65 7c 7c 28 74 2e 6f 75 74 66 72 61 6d 65 69 6e 64 65 78 3d 73 29 2c 76 6f 69 64 20 30 21 3d 3d 74 2e 66 72 61 6d 65 73 5b 73 5d 2e 73 70 6c 69 74 26 26 74 2e 66 72 61 6d 65 73 5b 73 5d 2e 73 70 6c 69 74 2e 6d 61 74 63 68 28 2f 63 68 61 72 73 7c 77 6f 72 64 73 7c 6c 69 6e 65 73 2f 67 29 26 26 28 74 2e 73 70 6c 69 74 74 65 78 74 3d 21 30 29 3b 74 2e 6f 75 74 66 72 61 6d 65 69 6e 64 65 78 3d 2d 31 3d 3d 3d 74 2e 6f 75 74 66 72 61 6d 65 69 6e 64 65 78 3f 2d 31 3d 3d 3d 74 2e 68 6f 76 65 72 66 72 61 6d 65 69 6e 64 65 78 3f 74 2e 66 72 61 6d 65 73 2e 6c 65 Data Ascii: frames[s].frame&&"last"!==t.frames[s].frame&&"end"!==t.frames[s].frame\|\|(t.outframeindex=s),void 0!==t.frames[s].split&&t.frames[s].split.match(/chars\|words\|lines/g)&&(t.splittext=!0);t.outframeindex=-1===t.outframeindex?-1===t.hoverframeindex?t.frames.le
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 3a 69 2e 77 69 64 74 68 2f 32 2d 69 2e 67 72 69 64 77 69 64 74 68 5b 69 2e 63 75 72 57 69 6e 52 61 6e 67 65 5d 2a 69 2e 62 77 2f 32 2c 6d 3d 6f 2e 64 61 74 61 28 22 69 6e 64 65 78 22 29 3b 69 66 28 69 2e 6c 61 79 65 72 73 3d 69 2e 6c 61 79 65 72 73 7c 7c 6e 65 77 20 4f 62 6a 65 63 74 2c 69 2e 6c 61 79 65 72 73 5b 6d 5d 3d 69 2e 6c 61 79 65 72 73 5b 6d 5d 7c 7c 6f 2e 66 69 6e 64 28 22 2e 74 70 2d 63 61 70 74 69 6f 6e 22 29 2c 69 2e 6c 61 79 65 72 73 2e 73 74 61 74 69 63 3d 69 2e 6c 61 79 65 72 73 2e 73 74 61 74 69 63 7c 7c 69 2e 63 2e 66 69 6e 64 28 22 2e 74 70 2d 73 74 61 74 69 63 2d 6c 61 79 65 72 73 22 29 2e 66 69 6e 64 28 22 2e 74 70 2d 63 61 70 74 69 6f 6e 22 29 2c 76 6f 69 64 20 30 3d 3d 3d 69 2e 74 69 6d 65 6c 69 6e 65 73 26 26 74 2e 63 72 65 61 74 Data Ascii: :i.width/2-i.gridwidth[i.curWinRange]*i.bw/2,m=o.data("index");if(i.layers=i.layers\|\|new Object,i.layers[m]=i.layers[m]\|\|o.find(".tp-caption"),i.layers.static=i.layers.static\|\|i.c.find(".tp-static-layers").find(".tp-caption"),void 0===i.timelines&&t.creat
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 61 29 7b 76 61 72 20 6f 3d 6a 51 75 65 72 79 28 74 68 69 73 29 2c 6e 3d 6f 2e 64 61 74 61 28 29 3b 21 30 21 3d 3d 6e 2e 68 6f 76 65 72 65 64 73 74 61 74 75 73 26 26 21 30 21 3d 3d 6e 2e 69 6e 68 6f 76 65 72 6f 75 74 61 6e 69 6d 61 74 69 6f 6e 3f 28 74 2e 75 70 64 61 74 65 4d 61 72 6b 75 70 28 74 68 69 73 2c 69 29 2c 74 2e 70 72 65 70 61 72 65 53 69 6e 67 6c 65 43 61 70 74 69 6f 6e 28 7b 63 61 70 74 69 6f 6e 3a 6f 2c 6f 70 74 3a 69 2c 6f 66 66 73 65 74 78 3a 6c 2c 6f 66 66 73 65 74 79 3a 30 2c 69 6e 64 65 78 3a 65 2c 72 65 63 61 6c 6c 3a 72 2c 70 72 65 73 65 74 3a 73 7d 29 2c 73 26 26 30 21 3d 3d 64 7c 7c 21 30 3d 3d 3d 6e 2e 76 65 72 79 66 69 72 73 74 73 74 73 74 69 63 7c 7c 28 74 2e 62 75 69 6c 64 46 75 6c 6c 54 69 6d 65 4c 69 6e 65 28 7b 63 61 70 74 69 Data Ascii: a){var o=jQuery(this),n=o.data();!0!==n.hoveredstatus&&!0!==n.inhoveroutanimation?(t.updateMarkup(this,i),t.prepareSingleCaption({caption:o,opt:i,offsetx:l,offsety:0,index:e,recall:r,preset:s}),s&&0!==d\|\|!0===n.veryfirstststic\|\|(t.buildFullTimeLine({capti
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 65 6c 54 69 6d 65 28 22 73 6c 69 64 65 5f 22 2b 61 2e 6c 61 73 74 73 6c 69 64 65 29 2c 6c 3d 6f 2e 73 74 61 74 69 63 5f 6c 61 79 65 72 5f 74 69 6d 65 6c 69 6e 65 5f 74 69 6d 65 2c 6d 3d 22 69 6e 22 3d 3d 3d 6f 2e 61 6e 69 6d 64 69 72 65 63 74 69 6f 6e 7c 7c 22 6f 75 74 22 21 3d 3d 6f 2e 61 6e 69 6d 64 69 72 65 63 74 69 6f 6e 26 26 76 6f 69 64 20 30 2c 63 3d 22 62 79 74 72 69 67 67 65 72 22 3d 3d 3d 6f 2e 66 72 61 6d 65 73 5b 30 5d 2e 64 65 6c 61 79 2c 67 3d 28 6f 2e 66 72 61 6d 65 73 5b 6f 2e 66 72 61 6d 65 73 2e 6c 65 6e 67 74 68 2d 31 5d 2e 64 65 6c 61 79 2c 6f 2e 74 72 69 67 67 65 72 65 64 5f 73 74 61 72 74 73 74 61 74 75 73 29 2c 66 3d 6f 2e 6c 61 73 74 74 72 69 67 67 65 72 73 74 61 74 65 3b 21 30 21 3d 3d 6f 2e 68 6f 76 65 72 65 64 73 74 61 74 75 73 Data Ascii: elTime("slide_"+a.lastslide),l=o.static_layer_timeline_time,m="in"===o.animdirection\|\|"out"!==o.animdirection&&void 0,c="bytrigger"===o.frames[0].delay,g=(o.frames[o.frames.length-1].delay,o.triggered_startstatus),f=o.lasttriggerstate;!0!==o.hoveredstatus
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 3a 72 2e 75 6c 68 2c 6f 2e 5f 6c 69 67 3d 76 6f 69 64 20 30 3d 3d 3d 6f 2e 5f 6c 69 67 3f 61 2e 68 61 73 43 6c 61 73 73 28 22 72 65 76 5f 6c 61 79 65 72 5f 69 6e 5f 67 72 6f 75 70 22 29 3f 61 2e 63 6c 6f 73 65 73 74 28 22 2e 72 65 76 5f 67 72 6f 75 70 22 29 3a 61 2e 68 61 73 43 6c 61 73 73 28 22 72 65 76 5f 6c 61 79 65 72 5f 69 6e 5f 63 6f 6c 75 6d 6e 22 29 3f 61 2e 63 6c 6f 73 65 73 74 28 22 2e 72 65 76 5f 63 6f 6c 75 6d 6e 5f 69 6e 6e 65 72 22 29 3a 61 2e 68 61 73 43 6c 61 73 73 28 22 72 65 76 5f 63 6f 6c 75 6d 6e 5f 69 6e 6e 65 72 22 29 3f 61 2e 63 6c 6f 73 65 73 74 28 22 2e 72 65 76 5f 72 6f 77 22 29 3a 22 6e 6f 6e 65 22 3a 6f 2e 5f 6c 69 67 2c 6f 2e 5f 63 6f 6c 75 6d 6e 3d 76 6f 69 64 20 30 3d 3d 3d 6f 2e 5f 63 6f 6c 75 6d 6e 3f 61 Data Ascii: height:r.ulh,o._lig=void 0===o._lig?a.hasClass("rev_layer_in_group")?a.closest(".rev_group"):a.hasClass("rev_layer_in_column")?a.closest(".rev_column_inner"):a.hasClass("rev_column_inner")?a.closest(".rev_row"):"none":o._lig,o._column=void 0===o._column?a
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 6c 65 6c 69 73 74 65 6e 65 72 73 3d 21 30 2c 76 6f 69 64 20 30 3d 3d 3d 6f 2e 61 63 74 69 6f 6e 73 26 26 61 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 73 77 61 70 74 6f 67 67 6c 65 53 74 61 74 65 28 61 29 7d 29 29 3a 6f 2e 5f 74 6f 67 67 6c 65 6c 69 73 74 65 6e 65 72 73 3d 21 31 2c 22 66 75 6c 6c 73 63 72 65 65 6e 22 3d 3d 72 2e 73 6c 69 64 65 72 4c 61 79 6f 75 74 26 26 28 65 2e 6f 66 66 73 65 74 79 3d 6f 2e 5f 67 68 2f 32 2d 72 2e 67 72 69 64 68 65 69 67 68 74 5b 72 2e 63 75 72 57 69 6e 52 61 6e 67 65 5d 2a 72 2e 62 68 2f 32 29 2c 28 22 6f 6e 22 3d 3d 72 2e 61 75 74 6f 48 65 69 67 68 74 7c 7c 76 6f 69 64 20 30 21 3d 72 2e 6d 69 6e 48 65 69 67 68 74 26 26 72 2e 6d 69 6e 48 65 69 67 68 74 3e 30 29 26 26 28 65 2e 6f 66 66 73 65 74 79 3d 72 Data Ascii: lelisteners=!0,void 0===o.actions&&a.click(function(){t.swaptoggleState(a)})):o._togglelisteners=!1,"fullscreen"==r.sliderLayout&&(e.offsety=o._gh/2-r.gridheight[r.curWinRange]*r.bh/2),("on"==r.autoHeight\|\|void 0!=r.minHeight&&r.minHeight>0)&&(e.offsety=r
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 75 6c 77 3a 72 2e 67 72 69 64 77 69 64 74 68 5b 72 2e 63 75 72 57 69 6e 52 61 6e 67 65 5d 2c 67 3d 22 73 6c 69 64 65 22 3d 3d 6f 2e 5f 62 61 3f 72 2e 75 6c 68 3a 72 2e 67 72 69 64 68 65 69 67 68 74 5b 72 2e 63 75 72 57 69 6e 52 61 6e 67 65 5d 3b 6d 3d 79 28 77 2e 64 61 74 61 28 22 77 77 22 29 2c 72 29 5b 72 2e 63 75 72 57 69 6e 52 61 6e 67 65 5d 7c 7c 79 28 77 2e 64 61 74 61 28 22 77 77 22 29 2c 72 29 7c 7c 22 61 75 74 6f 22 2c 63 3d 79 28 77 2e 64 61 74 61 28 22 68 68 22 29 2c 72 29 5b 72 2e 63 75 72 57 69 6e 52 61 6e 67 65 5d 7c 7c 79 28 77 2e 64 61 74 61 28 22 68 68 22 29 2c 72 29 7c 7c 22 61 75 74 6f 22 3b 76 61 72 20 66 3d 22 66 75 6c 6c 22 3d 3d 3d 6d 7c 7c 22 66 75 6c 6c 2d 70 72 6f 70 6f 72 74 69 6f 6e 61 6c 22 3d 3d 3d 6d 2c 68 3d 22 66 75 6c 6c Data Ascii: ulw:r.gridwidth[r.curWinRange],g="slide"==o._ba?r.ulh:r.gridheight[r.curWinRange];m=y(w.data("ww"),r)[r.curWinRange]\|\|y(w.data("ww"),r)\|\|"auto",c=y(w.data("hh"),r)[r.curWinRange]\|\|y(w.data("hh"),r)\|\|"auto";var f="full"===m\|\|"full-proportional"===m,h="full
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 6f 6e 74 61 6c 5f 61 6c 69 67 6e 29 7b 63 61 73 65 22 63 65 6e 74 65 72 22 3a 65 2e 6f 66 66 73 65 74 78 3d 30 2b 28 72 2e 75 6c 77 2d 72 2e 67 72 69 64 77 69 64 74 68 5b 72 2e 63 75 72 57 69 6e 52 61 6e 67 65 5d 2a 72 2e 62 77 29 2f 32 3b 62 72 65 61 6b 3b 63 61 73 65 22 6c 65 66 74 22 3a 62 72 65 61 6b 3b 63 61 73 65 22 72 69 67 68 74 22 3a 65 2e 6f 66 66 73 65 74 78 3d 72 2e 75 6c 77 2d 72 2e 67 72 69 64 77 69 64 74 68 5b 72 2e 63 75 72 57 69 6e 52 61 6e 67 65 5d 2a 72 2e 62 77 7d 65 2e 6f 66 66 73 65 74 78 3d 65 2e 6f 66 66 73 65 74 78 3c 30 3f 30 3a 65 2e 6f 66 66 73 65 74 78 7d 76 61 72 20 5f 3d 22 68 74 6d 6c 35 22 3d 3d 6f 2e 61 75 64 69 6f 3f 22 61 75 64 69 6f 22 3a 22 76 69 64 65 6f 22 3b 69 66 28 61 2e 68 61 73 43 6c 61 73 73 28 22 74 70 2d 76 Data Ascii: ontal_align){case"center":e.offsetx=0+(r.ulw-r.gridwidth[r.curWinRange]r.bw)/2;break;case"left":break;case"right":e.offsetx=r.ulw-r.gridwidth[r.curWinRange]r.bw}e.offsetx=e.offsetx<0?0:e.offsetx}var _="html5"==o.audio?"audio":"video";if(a.hasClass("tp-v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.11	49941	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:35 UTC	483	OUT	GET /wp-content/uploads/2018/10/consulting2.jpg HTTP/1.1 Host: fortis-site.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.942134464.1715013754; _gid=GA1.2.1562157020.1715013754; _gat_gtag_UA_127514612_1=1
2024-05-06 16:42:35 UTC	743	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:35 GMT Content-Type: image/jpeg Content-Length: 85608 Connection: close Last-Modified: Tue, 09 Oct 2018 23:43:01 GMT ETag: "5bbd3d05-14e68" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wSEDOlKnJFMDf5jXdJ56MFeorCZ6Zj7mGKyS03x8xnYNWZP5vOmAloE0UjPsRGxrQjRdjQUPgOmjtK9bbPbmIOYuueagMgeO7ohXz4ISCaBwXrD7QLm0%2BhvWzuuLgtDJ1vA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6ca248880a0e-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:35 UTC	626	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 1f 43 6f 6d 70 72 65 73 73 65 64 20 62 79 20 6a 70 65 67 2d 72 65 63 6f 6d 70 72 65 73 73 ff db 00 84 00 04 04 04 04 04 04 05 05 05 05 07 07 06 07 07 0a 09 08 08 09 0a 0f 0a 0b 0a 0b 0a 0f 16 0e 10 0e 0e 10 0e 16 14 18 13 12 13 18 14 23 1c 18 18 1c 23 29 22 20 22 29 31 2c 2c 31 3e 3b 3e 51 51 6d 01 04 04 04 04 04 04 05 05 05 05 07 07 06 07 07 0a 09 08 08 09 0a 0f 0a 0b 0a 0b 0a 0f 16 0e 10 0e 0e 10 0e 16 14 18 13 12 13 18 14 23 1c 18 18 1c 23 29 22 20 22 29 31 2c 2c 31 3e 3b 3e 51 51 6d ff c2 00 11 08 04 00 04 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 00 07 08 09 ff da 00 08 01 01 00 00 00 00 fb 79 e9 dc c8 95 b4 f8 Data Ascii: JFIFCompressed by jpeg-recompress##)" ")1,,1>;>QQm##)" ")1,,1>;>QQm"y
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: b9 55 fd c8 d6 31 9d dd dc e4 e4 67 0c 31 2b f6 6b dc ad 8d 02 9f 31 e5 3e 1d 12 ca 49 48 59 32 a7 16 bf 31 8c c5 62 ea a5 ea 37 5a fd 7e aa f6 ca c6 ca 7b a2 55 56 92 c6 c2 c6 da 61 8a aa e5 e2 3c 85 21 08 f7 af 34 10 e1 c2 88 39 24 8d 0a ab 27 89 cb 3f 5d a4 d2 69 ee e6 19 ca aa 53 98 8f 72 af 39 5c bd cc 60 c2 c5 57 3d ea bc d6 b4 10 eb f6 2e ee 54 8d 02 a7 37 e5 7e 17 5d 69 25 4c 69 12 a7 92 ab 31 8c c5 63 ab 66 e9 f7 9a dd 86 9e ee ca ca ce 6a 46 ab ab 86 5d 1d 9d 94 e9 05 27 72 f2 3c 86 39 48 57 af 28 23 c2 89 10 44 3b 2b eb f3 18 6c 84 6d 0e 9f 4d a9 bc b0 33 93 88 49 27 29 15 ea a4 73 d7 91 a1 0c 71 2b cc 42 91 ce 44 68 61 c0 d5 bb b9 50 10 6a 33 be 61 e1 74 96 b2 1e 43 4a 93 39 d5 39 7c 66 27 1f 0e 76 a7 77 a9 d8 69 ae ec ac 6d 25 0c 15 95 30 1b Data Ascii: U1g1+k1>IHY21b7Z~{UVa<!49$'?]iSr9\`W=.T7~]i%Li1cfjF]'r<9HW(#D;+lmM3I')sq+BDhaPj3atCJ99\|f'vwim%0
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 55 59 ef 34 f0 bc d5 ac 93 48 9d 63 36 0e 7b 1b 83 c3 d4 49 bf d8 ee b6 fa 59 e5 6b 06 38 75 35 70 e2 2f 48 90 41 89 8c 00 8e f0 b5 cf 71 e5 ce b1 b3 b8 b3 92 55 e6 94 e9 5f 9f c5 61 a8 67 ea 36 fa 9b 99 0e 7c a3 c9 97 2c 8e ee 6a a9 5e 52 22 34 71 a2 51 66 72 d9 e6 4d d0 6b b4 b7 36 d6 13 e5 9c 93 1d ce e4 50 c3 ab a0 f3 8f 0d c5 da ca 31 e7 59 ce af a0 c5 61 31 15 32 6f f7 be 91 e8 3a 53 20 a3 c4 83 55 53 49 0a 18 de 43 c8 60 5a c6 31 ea c5 7b 9d 2a 7c eb 1b 0b 5b 39 66 78 f8 d2 92 bf 3d 8b c6 52 da eb 76 ba 4b 72 a3 9e 69 27 31 9a 8d ee 29 8a 52 95 dc 38 d0 68 73 79 1c fb 2c b4 3a fd 15 e5 a5 94 f9 92 4b 3d 79 55 38 71 2b 28 70 1e 1b e7 b6 53 8d 22 6d a4 e8 39 cc 66 0f 13 51 2b 4b e9 1e a3 e8 9a 59 ce e0 44 a9 cf e5 f1 b4 c1 61 b8 d2 46 26 8f 98 ae ee Data Ascii: UY4Hc6{IYk8u5p/HAqU_ag6\|,j^R"4qQfrMk6P1Ya12o:S USIC`Z1{*\|[9fx=RvKri'1)R8hsy,:K=yU8q+(pS"m9fQ+KYDaF&
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 7b 9c f2 3c 8f 57 39 ca ee 64 7a ea 6c af 9b e3 34 db 5d 15 94 a7 b6 05 46 4f 0b e6 f8 1c ab 27 da 59 dd e9 b4 ba 3b eb 33 f4 7a ca 3a 3a 6a f1 c9 d0 e9 2e e4 36 34 38 91 23 0b ed 07 f7 2f 2f 36 34 0a 6c b7 90 f8 40 ee 2c e6 da dd ba a7 2b 88 f3 dc 3c 7b 5d 46 cb 59 79 a0 d5 e9 74 b7 d7 13 e6 4a 94 77 af 22 32 34 58 b1 23 a1 65 c9 39 0a f7 b9 ca ee 72 ab b9 ca 80 89 51 43 8c c4 1b 6d a7 b3 94 6e 04 3a 7c ae 17 ce 71 54 d7 ba 2d 36 9b 49 75 6d 61 23 a3 c3 a9 cb 63 e9 60 0e 56 a3 51 75 25 f0 ea 33 74 91 19 f7 93 fb 9c 8b c8 08 15 19 cf 2b f9 fe b2 de d2 75 a5 e1 ea f2 f8 bf 3b c1 43 b2 d2 ec b6 3a 1b 3d 56 8f 49 a0 b9 b3 99 2e 4c a3 39 c8 d4 1c 58 d1 e3 89 f2 25 1c a6 7b d5 57 95 57 9c aa bc c8 b5 f4 b9 ac 75 5e af 57 71 2e 47 34 10 e9 f3 58 ac 95 45 86 97 Data Ascii: {<W9dzl4]FO'Y;3z::j.648#//64l@,+<{]FYytJw"24X#e9rQCmn:\|qT-6Iuma#c`VQu%3t+u;C:=VI.L9X%{WWu^Wq.G4XE
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: f7 bd ef 73 9c ab dc bc bd dc d0 41 ad a4 a4 ae 3d e5 cd a4 d9 25 7b 42 20 0d aa a4 7b de ae e4 8b 02 97 35 90 c8 55 68 74 7a 2b cb 7b 19 67 7e 89 cb dd ca a8 8e 6c 58 34 b9 6f 23 f9 e6 3e 8a f6 eb 41 75 16 93 25 86 f3 2c 6b ac f4 1a 5d 86 ba ce 4d e5 bd c5 c5 d5 b4 c9 93 64 9c ef 77 72 31 a3 18 da de 23 9e e7 bd ca bc bd dc ab dd c2 89 02 9e 96 9d 96 f7 76 b6 12 8e 44 18 42 21 f2 bd cf 7b 9c bc 18 55 34 39 6c 86 76 4e 93 43 7f 71 69 36 49 b4 8e ee 5e 5e e4 54 0c 2a 9c ef 99 fc fb 89 d0 68 2e 6f b4 5d 53 97 c6 79 df 9d 45 9f 79 a0 d6 eb b4 12 6d ae ad 6e 2e ee 27 4d 99 28 e6 21 39 1a 8d 18 d8 36 2b 9e e7 bd 5c e7 72 f2 f7 77 72 a4 68 75 54 94 b0 e7 5d dc 59 4c 90 4e 41 00 42 4e 7b d5 ce 73 f9 91 6b 69 73 79 2c bc 3b fb dd 1d e5 a5 8c 89 1a 97 2f 77 72 aa Data Ascii: sA=%{B {5Uhtz+{g~lX4o#>Au%,k]Mdwr1#vDB!{U49lvNCqi6I^^T*h.o]SyEymn.'M(!96+\rwrhuT]YLNABN{skisy,;/wr
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 58 c9 d3 6c 6f 6d f4 97 17 96 d3 e6 c8 39 9e f7 77 31 88 83 60 da ce 22 bb 97 bb 97 91 3b 93 b9 ce 7a 82 05 5d 35 60 6e ef ed 67 c9 51 c7 8d 12 34 71 b1 88 26 23 5e 63 02 0d 4d 06 73 35 5d 69 79 a3 d3 7d 16 ee 54 e5 67 72 af 22 ab 23 d6 d3 64 bc 77 e7 5a ed 16 82 fb 45 a6 5a dc fd 36 4b cf f3 d3 2c e6 db 6c b4 b6 fa 3b cb ab ab 29 c7 90 52 bb b9 11 a8 88 16 31 11 cf e5 ee ee 54 54 e4 4e e5 73 c8 38 75 b4 d5 50 67 69 2e 2c 64 b9 80 8b 0e 14 70 08 62 63 1a 8e 34 de 0c 0a 1c ee 63 38 4b bd 1e a3 e9 f7 f2 ab 57 91 17 95 17 b8 30 a9 f3 fe 6b f3 cf 99 5e 68 34 17 da 6b 58 94 b9 fa 0c 36 15 2c ac a5 eb 35 d7 3a 0d 15 d5 d5 a5 8c 93 14 8f 56 72 22 73 18 34 6b 5c e5 ee e5 ee 4e e6 f3 13 90 84 32 46 81 53 4d 58 ed 15 dd 9c c7 b4 11 2b e1 41 8c 31 08 23 6f 12 4d 85 Data Ascii: Xlom9w1`";z]5`ngQ4q&#^cMs5]iy}Tgr"#dwZEZ6K,l;)R1TTNs8uPgi.,dpbc4c8KW0k^h4kX6,5:Vr"s4k\N2FSMX+A1#oM
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: ed b1 15 bd dc bd dd dc 9d ca bd dc ad 8b 5d 4b 92 f1 ef 9e f2 37 ba 6d 16 a2 f6 25 26 3e 93 2f 90 49 d7 b7 5a 1d 65 fe ab 43 7d 79 6f 60 f7 34 10 60 40 8a 23 1d ef 18 e3 47 8b 12 38 11 c5 2c 89 12 48 a2 0b 56 44 eb 2b 39 f2 0c d1 b1 a3 45 21 0e 62 b9 fc 2a fa 9c e6 43 15 96 76 97 4d aa d0 5b c9 46 b4 7e 88 fe ee ee ee ee ee ee ee ee ee 55 0c 1a aa 1f 3b f0 6f 0d 93 a1 d2 e9 f4 ce a5 c9 65 a8 f2 30 e4 db e8 2f b5 d7 fa bd 25 ed dd b5 ac 85 51 42 83 59 04 2f 29 b9 82 8e 14 47 10 c7 3c 93 c8 3b c7 0e 04 40 ba 5d 8d ad 84 d3 a0 82 11 a3 8c 69 06 73 d5 a0 ad a8 cb e2 f1 59 db 1d 4e a7 55 79 39 c3 18 22 fa ca bb 93 95 5a bd c8 bc bc 9c bd dd d1 6b a9 f2 1e 47 f3 ce 22 ef 47 a8 d5 c9 ab ca e3 a9 73 35 a5 b1 bf d0 69 34 da dd 3d e5 dd c5 b4 e3 39 b1 2b eb ab a1 Data Ascii: ]K7m%&>/IZeC}yo`4`@#G8,HVD+9E!b*CvM[F~U;oe0/%QBY/)G<;@]isYNUy9"ZkG"Gs5i4=9+
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 27 a9 cf 36 74 b3 1c ee 8d 06 a6 be 33 a5 5c 5c d9 cc 90 f7 bb bb 06 09 77 5b 9b 3f 34 c0 7b b7 af fe 69 79 54 a1 89 58 a9 cc 90 e4 ee e6 35 e8 d5 ee 67 72 f2 22 72 f3 b9 55 e7 e3 cb 92 4b 4b ab 3b 7b bb 1d 1e a7 6f b2 dd 6c 15 53 97 bb b9 39 7b bb bb bb a1 c4 8d 1a e2 65 64 d1 e3 36 1f 31 fc fe f2 cd 9d 24 e6 3a c7 83 57 5d 1d d2 ee 2e 2c e7 1c cf 7b df ee c7 90 79 1c f7 c9 cc fe 5a 57 fb 64 14 64 61 44 86 32 9d c1 8c 18 62 60 43 18 4c 0c 71 08 02 67 33 9f dd ce 63 f4 95 70 9c 79 7a 4c f4 17 cc 99 79 a4 bb d1 6a b7 3f 5e 77 77 77 27 2f 77 77 44 85 02 0d e0 c9 69 09 93 99 57 e5 b4 05 f9 81 4d 2e 6c b3 9c cf 04 2a 9a e8 9d 2e da e6 d2 7c 93 96 41 9f f4 61 79 3b 98 33 64 fe 31 f9 c7 d7 94 46 1b 54 e5 2d 84 a2 72 b9 a6 78 58 e9 26 46 b5 ce 34 64 8c 1e 85 11 Data Ascii: '6t3\\w[?4{iyTX5gr"rUKK;{olS9{ed61$:W].,{yZWddaD2b`CLqg3cpyzLyj?^www'/wwDiWM.l*.\|Aay;3d1FT-rxX&F4d
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 55 19 51 78 a0 11 04 16 88 2d 18 51 a2 0e eb d8 ca 81 8c d7 47 87 8e b2 cd f9 e5 94 3a ff 00 4b f1 9d 3f 8e 51 f9 07 9b af a4 7b 03 bd 92 a2 bc bf 44 f8 1f a9 68 be 75 fa 9f c1 7d d7 ca 7d 67 cf f7 f4 36 51 68 11 83 18 c4 c8 d1 a3 57 c6 88 d3 cf 9f 61 3a 4b dc d1 06 2f e7 65 95 95 b4 c9 a7 99 32 4c cb 0b 13 ce 9a db 29 06 7c a9 0d 2b 94 aa 64 7f 31 53 b9 c3 21 c2 e9 05 67 11 ac 22 81 fb 5f 4b 38 84 d8 79 ef 2f f3 9d 5e 9b 33 b8 f1 8f 42 f2 2f 12 c7 f9 f4 dd 47 d8 d9 29 36 9e ad e6 de a9 a6 f9 eb e9 7f 2e b4 f5 1f 03 f6 8f 36 f5 6c 4e d0 37 cf 83 91 ae 63 46 c1 8c 20 8d 1e 1c 78 cf 34 d9 d3 64 9d ca 82 8b 13 e6 62 c4 85 73 74 43 8d 33 19 b8 90 21 44 8a 11 23 1a 84 23 95 c4 9d 22 54 c9 53 24 1c f6 8b 26 61 a6 4f 91 36 49 e4 4e 53 ab 64 fb b5 af 80 40 3a 6f Data Ascii: UQx-QG:K?Q{Dhu}}g6QhWa:K/e2L)\|+d1S!g"_K8y/^3B/G)6.6lN7cF x4dbstC3!D##"TS$&aO6INSd@:o
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: d6 08 63 18 c6 d4 44 46 30 11 e1 41 fa 01 c9 c8 c1 82 15 36 7f 25 8c c6 d4 b1 aa de 47 b9 1a 31 41 09 0f 3a 6c c9 72 e5 cb 99 28 ea 9c e7 4e 92 69 46 77 2c fd b8 d6 1c 04 bc d9 3a 8e be 2c 41 86 20 40 8c 5e 14 78 b0 60 8e 4c ab 0b 2b 09 32 ca 42 39 ee 57 72 f3 58 bd cd 62 30 63 18 c6 26 b5 a8 d6 31 b1 a3 c5 83 f4 27 72 23 07 1e 0d 46 6f 23 8a c8 56 47 63 3b 9e e5 e0 45 8f 06 32 9e 64 bb 09 b2 e6 4c 93 2e 4a 27 0d d2 27 4d 9b 20 85 7c 9b 82 99 ee 93 7a e8 71 1a 83 68 a3 80 03 42 a0 e3 c4 87 13 a5 4a b3 b2 97 24 e4 2b d5 ce 5e e5 6f 27 22 34 6d 60 c4 c1 b0 6d 6a 31 82 60 e3 b2 24 2f a0 dc 9c d1 8a 3c 2a 6c c6 5b 17 94 a8 8c 07 22 39 5e d8 d0 61 45 84 b2 a6 4d 9d 69 3a 5c d9 92 ce ad 60 df 2a 74 d9 72 4c 42 1a 69 a4 3d c7 94 55 4e 54 18 63 84 42 71 50 71 e3 Data Ascii: cDF0A6%G1A:lr(NiFw,:,A @^x`L+2B9WrXb0c&1'r#Fo#VGc;E2dL.J''M \|zqhBJ$+^o'"4m`mj1`$/<l["9^aEMi:\`trLBi=UNTcBqPq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.11	49943	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:35 UTC	714	OUT	GET /wp-content/uploads/2018/10/about2.jpg HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.942134464.1715013754; _gid=GA1.2.1562157020.1715013754; _gat_gtag_UA_127514612_1=1
2024-05-06 16:42:35 UTC	739	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:35 GMT Content-Type: image/jpeg Content-Length: 18480 Connection: close Last-Modified: Fri, 05 Oct 2018 12:15:42 GMT ETag: "5bb755ee-4830" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I3LRLqiDEfbqeljW8gb3Ssgds2L4cENW%2BioB76nHxefhZM0gYDqwEKgLWICRB9BmSCnhMeZ5Z5EdBlssNu3ys78iiEx1MHJDUk%2BnE%2BuiSTwCzZ086ZxfUToSjSLYGAnJW2c%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6ca5eaba875a-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:35 UTC	630	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 1f 43 6f 6d 70 72 65 73 73 65 64 20 62 79 20 6a 70 65 67 2d 72 65 63 6f 6d 70 72 65 73 73 ff db 00 84 00 12 12 12 12 13 12 14 16 16 14 1c 1e 1b 1e 1c 29 26 22 22 26 29 3e 2c 30 2c 30 2c 3e 5e 3b 45 3b 3b 45 3b 5e 53 65 52 4d 52 65 53 96 76 68 68 76 96 ad 91 8a 91 ad d2 bc bc d2 ff fb ff ff ff ff 01 12 12 12 12 13 12 14 16 16 14 1c 1e 1b 1e 1c 29 26 22 22 26 29 3e 2c 30 2c 30 2c 3e 5e 3b 45 3b 3b 45 3b 5e 53 65 52 4d 52 65 53 96 76 68 68 76 96 ad 91 8a 91 ad d2 bc bc d2 ff fb ff ff ff ff ff c2 00 11 08 03 b1 08 98 03 01 22 00 02 11 01 03 11 01 ff c4 00 19 00 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 06 ff da 00 08 01 01 00 00 00 00 fb 80 60 b2 8b 40 00 00 00 00 00 00 Data Ascii: JFIFCompressed by jpeg-recompress)&""&)>,0,0,>^;E;;E;^SeRMReSvhhv)&""&)>,0,0,>^;E;;E;^SeRMReSvhhv"`@
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 00 00 00 cb 34 b6 80 00 99 aa 13 40 00 00 06 00 40 03 57 19 d8 0d 83 12 80 29 68 00 00 00 00 00 00 00 00 00 00 00 00 00 08 16 23 40 00 00 00 00 65 25 5b 40 00 42 0a 9a 00 00 00 30 08 45 01 75 8c ec b0 6c 26 40 00 ad 00 00 00 00 00 02 50 00 00 00 00 00 00 00 20 29 0a 00 00 00 00 08 c8 69 40 00 91 41 34 00 09 08 ba 06 25 11 01 42 d9 8d 8b 0d 84 c8 00 15 a0 00 00 00 00 00 42 80 00 00 00 00 00 00 04 21 a6 49 b0 00 00 00 00 49 02 ad 00 04 89 44 6c 00 24 94 4d 84 c9 00 80 2d b3 3a a1 1b 09 92 82 01 74 00 00 00 00 00 09 60 a0 00 00 00 00 00 00 08 0a c8 68 00 00 00 00 22 2c 52 80 00 40 4d 00 04 94 46 82 60 00 00 a9 34 54 36 13 2a 00 06 80 00 00 00 00 01 01 15 40 19 01 a0 00 00 00 02 01 59 0d 00 00 00 00 04 45 4a a0 00 45 12 1a 00 0c cb 49 36 13 99 42 54 a0 54 ce Data Ascii: 4@@W)h#@e%[@B0Eul&@P )i@A4%BB!IIDl$M-:t`h",R@MF`4T6*@YEJEI6BTT
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: a8 40 04 5a 82 46 b4 12 2a 80 c8 a2 08 85 a4 82 a9 a0 4c f3 21 d6 80 54 0d 00 00 33 34 09 48 0b 40 07 1c af 70 00 9c 1a cb a6 c0 0a 00 01 99 98 eb 52 c8 34 00 07 3c 1d 91 45 04 00 02 55 04 40 5c ad 42 2c b6 82 42 d0 48 15 02 10 d0 91 68 b4 23 94 b9 3a 68 0a 40 68 00 25 4e 79 9d 36 04 a2 23 4a 00 e1 0d 75 a0 09 38 82 eb 74 05 00 00 ce 64 9d 74 12 1a 00 04 e7 93 a6 a5 0a 08 00 27 39 35 d6 82 08 05 41 34 96 a2 82 46 82 12 88 10 00 4b 66 5d 28 26 32 ca f5 51 00 0d 00 45 8a cf 2b 97 5d 88 22 a4 68 14 39 60 37 d4 02 63 98 02 ef 60 a0 00 19 cc cb a6 c2 13 40 00 9c f2 6b 6a 14 10 00 71 83 5d 88 02 c8 02 59 a4 b4 88 d0 4a 10 00 44 0b 91 57 18 3b 68 23 18 47 4d 00 b0 06 80 20 56 79 4a e9 a5 11 1a 88 a0 26 70 85 5e 9a 03 1c e0 00 5e b4 28 00 0c 49 97 4d 88 14 00 99 Data Ascii: @ZF*L!T34H@pR4<EU@\B,BHh#:h@h%Ny6#Ju8tdt'95A4FKf](&2QE+]"h9`7c`@kjq]YJDW;h#GM VyJ&p^^(IM
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 05 21 61 16 5d 54 2c 41 17 b0 85 00 00 64 05 04 02 50 72 01 dc 19 c1 01 41 ad 01 40 19 ce 17 6b 89 03 7b 50 00 0e 42 01 35 d6 72 04 00 1d 37 00 a1 00 33 88 1a bd 00 01 99 98 5c ed 90 52 e0 a2 50 58 91 46 a8 58 84 8d ee 88 a0 00 12 00 a0 80 01 39 85 3b 03 39 88 0a 2b 54 0a 00 ce 70 bb 5e 65 89 ae a0 00 09 cc 40 23 b3 90 21 44 0d 75 80 a0 08 0e 79 0d 3a 80 01 ce 42 e7 6c 83 43 29 40 17 58 80 35 bc 0d e6 e5 06 ba 00 00 01 20 28 00 20 b0 ce 0a 1d 81 39 99 a2 eb 36 da 00 a0 19 98 5d 2e 10 1d 68 00 06 70 20 2e 5b df 25 84 28 80 ec 05 00 04 73 c8 6d 76 00 09 8c 97 3b 64 a5 12 4a 00 08 06 c4 d3 36 20 d7 40 00 00 25 cd 41 40 04 2a 57 20 0e c0 63 28 1a 17 40 05 00 cc c2 e9 70 80 e9 a0 00 0c 64 40 12 f5 e6 4b 25 00 47 5a 0a 00 06 79 c0 d9 aa 28 01 cf 2b 9d b3 42 8c Data Ascii: !a]T,AdPrA@k{PB5r73\RPXFX9;9+Tp^e@#!Duy:BlC)@X5 ( 96].hp .[%(smv;dJ6 @%A@*W c(@pd@K%GZy(+B
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 58 5b b0 8c 16 e3 7a 63 2a bb 00 03 08 5d 64 5d 19 83 60 8a 04 a9 80 58 08 d6 55 aa 88 0b a4 29 00 a0 0e 70 8b d4 00 02 64 b3 53 02 f4 72 96 6b 36 b5 a0 1c a1 75 ae 46 a5 db 9c 5e bc a1 d6 84 2a 02 80 66 80 0a 22 82 1c f7 05 d0 26 50 9d 2b 39 17 60 00 00 22 88 33 b0 42 80 30 82 c2 a0 81 d1 8a a8 68 50 10 05 06 70 1a d8 00 04 91 27 57 28 3a de 50 d6 47 4d 00 e7 91 bd 73 97 49 b7 3c d7 5e 44 eb a0 25 40 0a 22 58 50 05 00 46 66 88 d5 04 c9 13 a0 cc 35 a0 00 04 05 04 96 4d 82 01 41 84 16 08 a4 0d de 60 ad 52 80 08 01 88 45 e9 40 94 01 89 23 b4 e4 17 af 11 60 e9 a0 1c f2 37 ac 03 6c 66 ce 99 c1 ae a9 44 00 14 44 05 00 a0 09 24 a9 5a a0 ce 56 27 41 84 6b 60 00 01 88 d3 43 38 b2 ec 54 01 43 32 02 58 52 06 ee 20 1b a0 a0 02 03 11 0d 74 04 00 a4 e4 35 d1 ca 07 4e Data Ascii: X[zc]d]`XU)pdSrk6uF^f"&P+9`"3B0hPp'W(:PGMsI<^D%@"XPFf5MA`RE@#`7lfDD$ZV'Ak`C8TC2XR t5N
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 40 21 c5 77 6e 44 cc 37 54 20 b4 19 c1 0d ea c0 01 ca 0a d6 c0 0a 00 23 1b e5 0b d8 13 36 d8 24 66 15 d4 ce 41 a7 34 ad a8 09 88 6f 49 0b b3 12 08 bd 09 54 a2 20 9a 0a 24 01 2a 89 0e 63 6c 17 6d 83 19 1a 06 46 aa 0a 68 04 38 ae f4 c8 c4 1a d4 b4 82 94 26 0c 9d 28 00 98 c8 2f 4a 0b 00 00 27 3b 93 7b 51 24 5d 40 33 82 ba c6 60 46 f9 a6 b6 01 4e 72 35 b7 3a 6b 63 19 82 cd 6e 29 54 84 13 48 b4 48 40 55 19 86 06 d8 2e db 06 32 5a 12 0d 50 0d 00 87 13 a3 59 18 83 5a 29 02 80 39 c3 a5 45 03 18 01 ad 94 0b 00 01 9c 41 d6 d0 91 56 01 9c 0b d6 33 12 6a 2e 53 7a 28 45 63 03 ab 9d ad 55 39 c9 61 d2 ca 0a 10 26 82 86 40 0a 46 49 95 dc 99 5d b6 0c 64 da 0c 85 d0 06 80 44 e4 ba 6f 23 38 56 ec b4 81 40 18 c9 d2 a2 81 8c 00 d6 c0 a2 88 00 e7 91 7a 34 12 2a a5 83 38 0e d1 Data Ascii: @!wnD7T #6$fA4oIT $clmFh8&(/J';{Q$]@3`FNr5:kcn)THH@U.2ZPYZ)9EAV3j.Sz(EcU9a&@FI]dDo#8V@z48
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 54 cc 6b 21 aa b5 95 dd 00 01 9c cc ab 76 e6 45 dd 00 06 39 85 dc e6 bb bb 1c b5 65 92 cc 11 b6 1d af 16 ef 32 ef 98 d8 94 23 74 61 34 96 cd 87 20 2c 94 58 48 00 6b a5 0e 72 c4 6a 63 42 d0 07 40 00 67 14 4c da de 6c a1 93 56 40 c1 01 ad ed 8e 41 6e 4d 48 35 6a d9 aa 00 00 ce 66 57 72 eb 31 2e e8 00 4c f3 0b bc e1 d2 b6 39 69 2c 5c e4 8d 5c 3b 5e 2d b1 1a df 32 ea c0 09 ba 33 26 99 d1 b0 e4 58 11 40 90 00 d7 4a 1c e4 13 4c 83 71 40 e8 00 0c e2 a1 29 bc 6a 50 86 88 33 90 83 5d 8c 72 06 b2 6b 21 ab 5a d0 00 00 67 33 2d 55 d6 60 dd 00 09 8c 05 de 70 ed a0 71 d5 96 2e 72 b9 69 97 79 c9 b9 92 eb 03 61 48 36 19 99 d5 96 cd 87 25 40 82 84 80 06 b7 a0 e7 22 cc ed 8a 1a 50 1b a0 00 c3 2a cd d4 b0 a1 93 41 58 c8 21 ad ed cf 00 d6 0b 03 5a 5d 50 00 00 ce 64 5a 6f 32 Data Ascii: Tk!vE9e2#ta4 ,XHkrjcB@gLlV@AnMH5jfWr1.L9i,\\;^-23&X@JLq@)jP3]rk!Zg3-U`pq.riyaH6%@"P*AX!Z]PdZo2
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 00 a4 15 0a 40 02 a2 a0 02 84 01 50 2c 00 b0 02 91 40 81 61 51 62 c0 00 a2 52 14 20 50 10 00 b0 00 0a 10 00 a8 a8 58 2c 2a 50 4a 02 05 85 45 40 00 28 08 50 21 40 04 05 25 40 01 44 05 22 80 08 b1 49 40 02 00 59 49 40 82 91 44 a2 14 25 85 00 10 2c a0 12 90 a2 00 0a 00 22 a5 25 00 08 16 58 54 50 40 a2 0a 08 50 21 40 04 05 00 02 50 80 05 00 85 40 a0 00 00 21 40 04 29 02 84 28 08 50 01 00 a0 00 00 40 14 00 12 80 00 09 41 14 4a 25 10 a4 a8 a1 0a 02 14 00 40 28 4a 00 00 20 a0 00 8b 14 00 00 02 51 15 14 00 22 84 50 08 50 01 02 ca 12 80 00 04 16 28 02 28 00 00 00 94 04 0a 00 8a 04 50 21 40 04 0b 28 8a 00 25 01 05 00 08 b1 40 4a 00 04 50 09 50 50 22 80 94 08 50 00 82 80 00 08 a0 40 a0 02 2c 52 28 00 94 11 40 25 04 a9 48 a0 00 21 40 04 0a 09 40 02 28 10 50 85 08 a0 Data Ascii: @P,@aQbR PX,*PJE@(P!@%@D"I@YI@D%,"%XTP@P!@P@!@)(P@AJ%@(J Q"PP((P!@(%@JPPP"P@,R(@%H!@@(P
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: 08 15 28 00 00 00 00 00 00 81 40 04 54 50 00 08 14 00 11 50 2a 50 04 a8 0a 00 00 00 00 00 02 05 4a 01 16 28 02 28 20 52 2a 50 20 01 40 22 91 61 40 00 12 80 45 04 52 50 82 90 a0 45 4a 00 85 08 14 8a 95 28 80 02 81 2c a4 a8 58 a0 12 80 00 01 14 4a 40 54 28 41 52 81 02 82 05 21 65 4a 40 00 a0 42 a0 01 52 c0 50 02 50 21 62 80 81 50 51 02 ca 02 01 48 14 45 95 29 00 05 01 0a 80 0a 20 14 20 28 00 4a 4a 40 54 05 41 52 80 20 52 02 91 65 4a 25 80 0a 25 42 a0 02 88 0a 08 01 40 02 51 01 50 15 05 4a 00 08 a8 00 50 08 00 28 10 a8 00 a2 01 42 0a 00 8a 00 40 2a 05 4b 05 00 12 ca 20 01 40 22 c0 0a 02 52 00 28 95 0a 08 50 00 42 80 80 a8 14 41 40 04 b0 a8 00 51 28 80 05 00 94 41 60 a0 4a 02 50 00 10 a0 21 40 45 4a 00 01 2c 2a 00 0a 4a 08 58 0a 02 51 05 82 81 0a 11 40 00 45 Data Ascii: (@TPPPJ(( RP @"a@ERPEJ(,XJ@T(AR!eJ@BRPP!bPQHE) (JJ@TAR ReJ%%B@QPJP(B@K @"R(PBA@Q(A`JP!@EJ,JXQ@E
2024-05-06 16:42:35 UTC	1369	IN	Data Raw: f6 ab 13 a7 42 06 64 38 80 47 6b 68 7f c1 87 64 23 8d e2 6c c8 c4 af 10 8b a7 fa 12 17 38 84 ea f1 30 b9 bd 3a e8 8d 75 1b 03 df de 89 0d 11 c9 19 6a 0c 6e 34 8e d5 1b ef b8 c0 7a 87 49 d3 9f d4 2a 7f a2 19 9e c5 01 73 12 86 b0 bf 5c d9 e4 53 c0 48 4e b9 d3 a1 d1 1f 60 43 84 d0 a6 96 e4 e5 20 1b 8d 23 b4 0b 1c a3 a2 6f f2 64 2a 78 9e a5 5a 85 24 bf d0 88 b6 17 bb dc c8 68 a1 a9 10 9b e8 0d 9a 22 02 75 0e 2e c6 03 43 a2 32 bc 4d 54 af 90 c3 c4 dd 3e 5a b6 6f 4e c6 62 58 1b 8d 23 6a 6a f3 20 e8 18 37 0f 61 d8 ab 53 28 76 9c 7e dc 4d b1 35 cc 59 0f 50 d7 d1 35 c6 51 80 86 b3 9e a8 c8 62 4f 28 da 92 07 bd 27 c5 a4 4b 97 87 c8 a0 5f 25 45 85 de 0e 42 15 a1 50 38 47 40 dc db 85 4e b1 0c d5 6a 34 97 e2 e3 ae e1 1a 9e e2 a6 b0 ec 04 50 d9 43 e9 ca 79 9a 80 5f 3f Data Ascii: Bd8Gkhd#l80:ujn4zIs\SHN`C #odxZ$h"u.C2MT>ZoNbX#jj 7aS(v~M5YP5QbO('K_%EBP8G@Nj4PCy_?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.11	49945	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:35 UTC	552	OUT	GET /wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.slideanims.min.js?version=5.4.6.4 HTTP/1.1 Host: fortis-site.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.942134464.1715013754; _gid=GA1.2.1562157020.1715013754; _gat_gtag_UA_127514612_1=1
2024-05-06 16:42:36 UTC	793	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:36 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Wed, 03 Oct 2018 23:54:48 GMT ETag: W/"5bb556c8-72db" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zFf62eh%2FSTSe%2FjQOlmKeWZpJOgj76PhO2jTk1KzWZ9Ge8U6fJNxYZAvSyLU53gQquhkWK1cuEIAZWt3Tk1BjDRdhyqHCXdn7qa5%2F%2FPZ1ryHQ5xxVXtp8znZk%2FXmee0a6pOY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6ca74de7a521-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:36 UTC	576	IN	Data Raw: 37 32 64 62 0d 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0d 0a 20 2a 20 52 45 56 4f 4c 55 54 49 4f 4e 20 35 2e 34 2e 36 2e 34 20 45 58 54 45 4e 53 49 4f 4e 20 2d 20 53 4c 49 44 45 20 41 4e 49 4d 41 54 49 4f 4e 53 0d 0a 20 2a 20 40 76 65 72 73 69 6f 6e 3a 20 31 2e 38 20 28 31 37 2e 30 35 2e 32 30 31 37 29 0d 0a 20 2a 20 40 72 65 71 75 69 72 65 73 20 6a 71 75 65 72 79 2e 74 68 65 6d 65 70 75 6e 63 68 2e 72 65 76 6f 6c 75 74 69 6f 6e 2e 6a 73 0d 0a 20 2a 20 40 61 75 74 68 6f 72 20 54 68 65 6d 65 50 75 6e 63 68 0d 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a Data Ascii: 72db/************************************************ * REVOLUTION 5.4.6.4 EXTENSION - SLIDE ANIMATIONS * @version: 1.8 (17.05.2017) * @requires jquery.themepunch.revolution.js * @author ThemePunch**********************************************
2024-05-06 16:42:36 UTC	1369	IN	Data Raw: 61 72 20 66 3d 61 2c 67 3d 66 2e 66 69 6e 64 28 22 2e 64 65 66 61 75 6c 74 69 6d 67 22 29 2c 68 3d 67 2e 64 61 74 61 28 22 6d 65 64 69 61 66 69 6c 74 65 72 22 29 2c 69 3d 66 2e 64 61 74 61 28 22 7a 6f 6f 6d 73 74 61 72 74 22 29 2c 6a 3d 66 2e 64 61 74 61 28 22 72 6f 74 61 74 69 6f 6e 73 74 61 72 74 22 29 3b 76 6f 69 64 20 30 21 3d 67 2e 64 61 74 61 28 22 63 75 72 72 6f 74 61 74 65 22 29 26 26 28 6a 3d 67 2e 64 61 74 61 28 22 63 75 72 72 6f 74 61 74 65 22 29 29 2c 76 6f 69 64 20 30 21 3d 67 2e 64 61 74 61 28 22 63 75 72 73 63 61 6c 65 22 29 26 26 22 62 6f 78 22 3d 3d 65 3f 69 3d 31 30 30 2a 67 2e 64 61 74 61 28 22 63 75 72 73 63 61 6c 65 22 29 3a 76 6f 69 64 20 30 21 3d 67 2e 64 61 74 61 28 22 63 75 72 73 63 61 6c 65 22 29 26 26 28 69 3d 67 2e 64 61 74 61 Data Ascii: ar f=a,g=f.find(".defaultimg"),h=g.data("mediafilter"),i=f.data("zoomstart"),j=f.data("rotationstart");void 0!=g.data("currotate")&&(j=g.data("currotate")),void 0!=g.data("curscale")&&"box"==e?i=100*g.data("curscale"):void 0!=g.data("curscale")&&(i=g.data
2024-05-06 16:42:36 UTC	1369	IN	Data Raw: 6e 64 28 22 2e 73 6c 6f 74 22 29 2e 6c 61 73 74 28 29 2c 7b 72 6f 74 61 74 69 6f 6e 5a 3a 6a 7d 29 3b 76 2b 3d 63 2e 73 6c 6f 74 77 7d 62 72 65 61 6b 3b 63 61 73 65 22 76 65 72 74 69 63 61 6c 22 3a 63 61 73 65 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 3a 69 66 28 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 3d 3d 65 29 7b 69 66 28 21 64 29 76 61 72 20 71 3d 30 2d 63 2e 73 6c 6f 74 77 3b 66 6f 72 28 76 61 72 20 79 3d 30 3b 79 3c 63 2e 73 6c 6f 74 73 3b 79 2b 2b 29 66 2e 61 70 70 65 6e 64 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 6c 6f 74 22 20 73 74 79 6c 65 3d 22 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 27 2b 28 30 2b 70 29 2b 22 70 78 3b 6c 65 66 74 3a 22 2b 28 6f 2b 79 2a 63 2e 73 6c 6f 74 77 29 2b 22 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 Data Ascii: nd(".slot").last(),{rotationZ:j});v+=c.slotw}break;case"vertical":case"horizontal":if("horizontal"==e){if(!d)var q=0-c.slotw;for(var y=0;y<c.slots;y++)f.append('<div class="slot" style="position:absolute;top:'+(0+p)+"px;left:"+(o+y*c.slotw)+"px;overflow:h
2024-05-06 16:42:36 UTC	1369	IN	Data Raw: 75 6e 63 68 67 73 2e 50 6f 77 65 72 32 2e 65 61 73 65 49 6e 2c 6a 3d 70 75 6e 63 68 67 73 2e 50 6f 77 65 72 32 2e 65 61 73 65 4f 75 74 2c 6b 3d 70 75 6e 63 68 67 73 2e 50 6f 77 65 72 32 2e 65 61 73 65 49 6e 4f 75 74 2c 6d 3d 28 70 75 6e 63 68 67 73 2e 50 6f 77 65 72 33 2e 65 61 73 65 49 6e 2c 70 75 6e 63 68 67 73 2e 50 6f 77 65 72 33 2e 65 61 73 65 4f 75 74 29 2c 6e 3d 70 75 6e 63 68 67 73 2e 50 6f 77 65 72 33 2e 65 61 73 65 49 6e 4f 75 74 2c 6f 3d 5b 30 2c 31 2c 32 2c 33 2c 34 2c 35 2c 36 2c 37 2c 38 2c 39 2c 31 30 2c 31 31 2c 31 32 2c 31 33 2c 31 34 2c 31 35 2c 32 38 2c 32 39 2c 33 30 2c 33 31 2c 33 32 2c 33 33 2c 33 34 2c 33 35 2c 33 36 2c 33 37 2c 33 38 2c 33 39 2c 34 30 2c 34 31 2c 34 32 2c 34 33 2c 34 34 2c 34 35 5d 2c 70 3d 5b 31 36 2c 31 37 2c 31 Data Ascii: unchgs.Power2.easeIn,j=punchgs.Power2.easeOut,k=punchgs.Power2.easeInOut,m=(punchgs.Power3.easeIn,punchgs.Power3.easeOut),n=punchgs.Power3.easeInOut,o=[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45],p=[16,17,1
2024-05-06 16:42:36 UTC	1369	IN	Data Raw: 2c 31 65 33 2c 31 5d 2c 5b 22 73 6c 69 64 65 64 6f 77 6e 22 2c 31 34 2c 30 2c 31 2c 30 2c 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 21 30 2c 21 30 2c 31 34 2c 6e 2c 6e 2c 31 65 33 2c 31 5d 2c 5b 22 73 6c 69 64 65 72 69 67 68 74 22 2c 31 35 2c 30 2c 31 2c 30 2c 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 21 30 2c 21 30 2c 31 35 2c 6e 2c 6e 2c 31 65 33 2c 31 5d 2c 5b 22 73 6c 69 64 65 6f 76 65 72 6c 65 66 74 22 2c 31 32 2c 37 2c 31 2c 30 2c 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 21 30 2c 21 30 2c 31 32 2c 6e 2c 6e 2c 31 65 33 2c 31 5d 2c 5b 22 73 6c 69 64 65 6f 76 65 72 75 70 22 2c 31 33 2c 37 2c 31 2c 30 2c 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 21 30 2c 21 30 2c 31 33 2c 6e 2c 6e 2c 31 65 33 2c 31 5d 2c 5b 22 73 6c 69 64 65 6f 76 65 72 64 6f 77 6e 22 2c 31 34 2c Data Ascii: ,1e3,1],["slidedown",14,0,1,0,"horizontal",!0,!0,14,n,n,1e3,1],["slideright",15,0,1,0,"horizontal",!0,!0,15,n,n,1e3,1],["slideoverleft",12,7,1,0,"horizontal",!0,!0,12,n,n,1e3,1],["slideoverup",13,7,1,0,"horizontal",!0,!0,13,n,n,1e3,1],["slideoverdown",14,
2024-05-06 16:42:36 UTC	1369	IN	Data Raw: 6f 6d 6c 65 66 74 22 2c 31 35 2c 31 2c 31 2c 30 2c 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 21 30 2c 21 30 2c 32 39 2c 6b 2c 6b 2c 31 65 33 2c 31 5d 2c 5b 22 66 61 64 65 66 72 6f 6d 74 6f 70 22 2c 31 34 2c 31 2c 31 2c 30 2c 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 21 30 2c 21 30 2c 33 30 2c 6b 2c 6b 2c 31 65 33 2c 31 5d 2c 5b 22 66 61 64 65 66 72 6f 6d 62 6f 74 74 6f 6d 22 2c 31 33 2c 31 2c 31 2c 30 2c 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 21 30 2c 21 30 2c 33 31 2c 6b 2c 6b 2c 31 65 33 2c 31 5d 2c 5b 22 66 61 64 65 74 6f 6c 65 66 74 66 61 64 65 66 72 6f 6d 72 69 67 68 74 22 2c 31 32 2c 32 2c 31 2c 30 2c 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 21 30 2c 21 30 2c 33 32 2c 6b 2c 6b 2c 31 65 33 2c 31 5d 2c 5b 22 66 61 64 65 74 6f 72 69 67 68 74 66 61 64 65 66 72 Data Ascii: omleft",15,1,1,0,"horizontal",!0,!0,29,k,k,1e3,1],["fadefromtop",14,1,1,0,"horizontal",!0,!0,30,k,k,1e3,1],["fadefrombottom",13,1,1,0,"horizontal",!0,!0,31,k,k,1e3,1],["fadetoleftfadefromright",12,2,1,0,"horizontal",!0,!0,32,k,k,1e3,1],["fadetorightfadefr
2024-05-06 16:42:36 UTC	1369	IN	Data Raw: 70 61 72 61 6c 6c 61 78 63 69 72 63 6c 65 73 64 6f 77 6e 22 2c 33 32 2c 30 2c 31 2c 30 2c 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 21 30 2c 21 30 2c 35 32 2c 6b 2c 66 2c 31 35 30 30 2c 31 5d 2c 5b 22 70 61 72 61 6c 6c 61 78 63 69 72 63 6c 65 73 72 69 67 68 74 22 2c 33 33 2c 30 2c 31 2c 30 2c 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 21 30 2c 21 30 2c 35 33 2c 6b 2c 66 2c 31 35 30 30 2c 31 5d 2c 5b 22 70 61 72 61 6c 6c 61 78 63 69 72 63 6c 65 73 6c 65 66 74 22 2c 33 34 2c 30 2c 31 2c 30 2c 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 21 30 2c 21 30 2c 35 34 2c 6b 2c 66 2c 31 35 30 30 2c 31 5d 2c 5b 22 6e 6f 74 72 61 6e 73 69 74 69 6f 6e 22 2c 32 36 2c 30 2c 31 2c 30 2c 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 21 30 2c 6e 75 6c 6c 2c 34 36 2c 6b 2c 69 2c 31 65 33 2c 31 Data Ascii: parallaxcirclesdown",32,0,1,0,"horizontal",!0,!0,52,k,f,1500,1],["parallaxcirclesright",33,0,1,0,"horizontal",!0,!0,53,k,f,1500,1],["parallaxcirclesleft",34,0,1,0,"horizontal",!0,!0,54,k,f,1500,1],["notransition",26,0,1,0,"horizontal",!0,null,46,k,i,1e3,1
2024-05-06 16:42:36 UTC	1369	IN	Data Raw: 64 65 22 2c 22 73 6c 69 64 65 6f 76 65 72 22 2c 22 73 6c 69 64 65 72 65 6d 6f 76 65 22 2c 22 70 61 72 61 6c 6c 61 78 22 2c 22 70 61 72 72 61 6c 61 78 74 6f 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 62 3d 3d 63 2b 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 26 26 28 62 3d 31 21 3d 64 3f 63 2b 22 6c 65 66 74 22 3a 63 2b 22 72 69 67 68 74 22 29 2c 62 3d 3d 63 2b 22 76 65 72 74 69 63 61 6c 22 26 26 28 62 3d 31 21 3d 64 3f 63 2b 22 75 70 22 3a 63 2b 22 64 6f 77 6e 22 29 7d 29 2c 22 72 61 6e 64 6f 6d 22 3d 3d 62 26 26 28 62 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 76 2e 6c 65 6e 67 74 68 2d 31 29 29 3e 76 2e 6c 65 6e 67 74 68 2d 31 26 26 28 62 3d 76 2e 6c 65 6e 67 74 68 2d 31 29 2c 22 72 61 6e 64 6f 6d 2d 73 74 61 74 69 63 Data Ascii: de","slideover","slideremove","parallax","parralaxto"],function(a,c){b==c+"horizontal"&&(b=1!=d?c+"left":c+"right"),b==c+"vertical"&&(b=1!=d?c+"up":c+"down")}),"random"==b&&(b=Math.round(Math.random()*v.length-1))>v.length-1&&(b=v.length-1),"random-static
2024-05-06 16:42:36 UTC	1369	IN	Data Raw: 30 25 20 35 30 25 22 2c 77 69 64 74 68 3a 6d 2b 22 70 78 22 2c 68 65 69 67 68 74 3a 69 2b 22 70 78 22 2c 74 6f 70 3a 71 2b 22 70 78 22 2c 6c 65 66 74 3a 72 2b 22 70 78 22 2c 62 6f 72 64 65 72 52 61 64 69 75 73 3a 70 7d 2c 74 3d 7b 73 63 61 6c 65 3a 31 2c 74 6f 70 3a 6c 2f 32 2d 69 2f 32 2c 6c 65 66 74 3a 6a 2f 32 2d 6d 2f 32 2c 65 61 73 65 3a 65 7d 2c 75 3d 6f 2c 76 3d 33 33 3d 3d 63 3f 6e 3a 33 34 3d 3d 63 3f 6e 2b 6a 2f 32 3a 6e 2c 77 3d 7b 77 69 64 74 68 3a 6a 2c 68 65 69 67 68 74 3a 6c 2c 61 75 74 6f 41 6c 70 68 61 3a 31 2c 74 6f 70 3a 75 2b 22 70 78 22 2c 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 2c 6c 65 66 74 3a 76 2b 22 70 78 22 7d 2c 78 3d 7b 74 6f 70 3a 6f 2b 22 70 78 22 2c 6c 65 66 74 3a 6e 2b 22 70 78 22 2c 65 61 73 65 3a 65 7d Data Ascii: 0% 50%",width:m+"px",height:i+"px",top:q+"px",left:r+"px",borderRadius:p},t={scale:1,top:l/2-i/2,left:j/2-m/2,ease:e},u=o,v=33==c?n:34==c?n+j/2:n,w={width:j,height:l,autoAlpha:1,top:u+"px",position:"absolute",left:v+"px"},x={top:o+"px",left:n+"px",ease:e}
2024-05-06 16:42:36 UTC	1369	IN	Data Raw: 65 3d 6c 2e 69 65 7c 7c 6c 2e 69 65 39 3f 30 3a 6c 2e 72 6f 74 61 74 65 2c 31 31 21 3d 61 26 26 28 6e 75 6c 6c 21 3d 71 5b 37 5d 26 26 64 28 6a 2c 6c 2c 71 5b 37 5d 2c 71 5b 35 5d 29 2c 6e 75 6c 6c 21 3d 71 5b 36 5d 26 26 64 28 69 2c 6c 2c 71 5b 36 5d 2c 71 5b 35 5d 29 29 2c 6b 2e 61 64 64 28 70 75 6e 63 68 67 73 2e 54 77 65 65 6e 4c 69 74 65 2e 73 65 74 28 69 2e 66 69 6e 64 28 22 2e 64 65 66 61 75 6c 74 76 69 64 22 29 2c 7b 79 3a 30 2c 78 3a 30 2c 74 6f 70 3a 30 2c 6c 65 66 74 3a 30 2c 73 63 61 6c 65 3a 31 7d 29 2c 30 29 2c 6b 2e 61 64 64 28 70 75 6e 63 68 67 73 2e 54 77 65 65 6e 4c 69 74 65 2e 73 65 74 28 6a 2e 66 69 6e 64 28 22 2e 64 65 66 61 75 6c 74 76 69 64 22 29 2c 7b 79 3a 30 2c 78 3a 30 2c 74 6f 70 3a 30 2c 6c 65 66 74 3a 30 2c 73 63 61 6c 65 3a Data Ascii: e=l.ie\|\|l.ie9?0:l.rotate,11!=a&&(null!=q[7]&&d(j,l,q[7],q[5]),null!=q[6]&&d(i,l,q[6],q[5])),k.add(punchgs.TweenLite.set(i.find(".defaultvid"),{y:0,x:0,top:0,left:0,scale:1}),0),k.add(punchgs.TweenLite.set(j.find(".defaultvid"),{y:0,x:0,top:0,left:0,scale:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.11	49944	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:35 UTC	549	OUT	GET /wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.actions.min.js?version=5.4.6.4 HTTP/1.1 Host: fortis-site.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.942134464.1715013754; _gid=GA1.2.1562157020.1715013754; _gat_gtag_UA_127514612_1=1
2024-05-06 16:42:36 UTC	791	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:36 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Wed, 03 Oct 2018 23:54:48 GMT ETag: W/"5bb556c8-208b" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Bl0oXClCn%2F3Z3zOWBEL41RQ4ONy0VRH91%2F8uh94IYwt9Sw%2B9ciG8tyP5Ffvx5t69McfuRscz%2BMHKrUvbdPKBIkzZZdocJevINju86Feg6q70ALM4t4wD6ZXdxGCpe0JqFp0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6ca74ea667c8-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:36 UTC	578	IN	Data Raw: 32 30 38 62 0d 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0d 0a 20 2a 20 52 45 56 4f 4c 55 54 49 4f 4e 20 35 2e 34 2e 36 2e 34 20 45 58 54 45 4e 53 49 4f 4e 20 2d 20 41 43 54 49 4f 4e 53 0d 0a 20 2a 20 40 76 65 72 73 69 6f 6e 3a 20 32 2e 31 2e 30 20 28 32 32 2e 31 31 2e 32 30 31 37 29 0d 0a 20 2a 20 40 72 65 71 75 69 72 65 73 20 6a 71 75 65 72 79 2e 74 68 65 6d 65 70 75 6e 63 68 2e 72 65 76 6f 6c 75 74 69 6f 6e 2e 6a 73 0d 0a 20 2a 20 40 61 75 74 68 6f 72 20 54 68 65 6d 65 50 75 6e 63 68 0d 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0d 0a 0d 0a 21 66 75 6e 63 74 69 Data Ascii: 208b/******************************************** * REVOLUTION 5.4.6.4 EXTENSION - ACTIONS * @version: 2.1.0 (22.11.2017) * @requires jquery.themepunch.revolution.js * @author ThemePunch*********************************************/!functi
2024-05-06 16:42:36 UTC	1369	IN	Data Raw: 41 63 74 69 6f 6e 73 20 4d 69 6e 20 4a 53 22 2c 6e 61 6d 65 3a 22 72 65 76 6f 6c 75 74 69 6f 6e 2e 65 78 74 65 6e 73 69 6f 6e 73 2e 61 63 74 69 6f 6e 73 2e 6d 69 6e 2e 6a 73 22 2c 6d 69 6e 5f 63 6f 72 65 3a 22 35 2e 34 2e 35 22 2c 76 65 72 73 69 6f 6e 3a 22 32 2e 31 2e 30 22 7d 3b 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 21 30 2c 5f 52 2c 7b 63 68 65 63 6b 41 63 74 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 69 66 28 22 73 74 6f 70 22 3d 3d 3d 5f 52 2e 63 6f 6d 70 61 72 65 5f 76 65 72 73 69 6f 6e 28 65 78 74 65 6e 73 69 6f 6e 29 2e 63 68 65 63 6b 29 72 65 74 75 72 6e 21 31 3b 63 68 65 63 6b 41 63 74 69 6f 6e 73 5f 69 6e 74 65 72 6e 28 65 2c 74 2c 6f 29 7d 7d 29 3b 76 61 72 20 63 68 65 63 6b 41 63 74 69 6f 6e 73 5f 69 6e 74 65 72 6e 3d Data Ascii: Actions Min JS",name:"revolution.extensions.actions.min.js",min_core:"5.4.5",version:"2.1.0"};jQuery.extend(!0,_R,{checkActions:function(e,t,o){if("stop"===_R.compare_version(extension).check)return!1;checkActions_intern(e,t,o)}});var checkActions_intern=
2024-05-06 16:42:36 UTC	1369	IN	Data Raw: 51 75 65 72 79 28 6f 29 29 2e 64 61 74 61 28 22 76 69 64 65 6f 6d 75 74 65 74 6f 67 67 6c 65 64 62 79 22 29 3b 76 6f 69 64 20 30 3d 3d 61 26 26 28 61 3d 6e 65 77 20 41 72 72 61 79 29 2c 61 2e 70 75 73 68 28 65 29 2c 6f 2e 64 61 74 61 28 22 76 69 64 65 6f 6d 75 74 65 74 6f 67 67 6c 65 64 62 79 22 2c 61 29 7d 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 74 6f 67 67 6c 65 73 6c 69 64 65 72 22 3a 76 6f 69 64 20 30 3d 3d 74 2e 73 6c 69 64 65 72 74 6f 67 67 6c 65 64 62 79 26 26 28 74 2e 73 6c 69 64 65 72 74 6f 67 67 6c 65 64 62 79 3d 6e 65 77 20 41 72 72 61 79 29 2c 74 2e 73 6c 69 64 65 72 74 6f 67 67 6c 65 64 62 79 2e 70 75 73 68 28 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 74 6f 67 67 6c 65 66 75 6c 6c 73 63 72 65 65 6e 22 3a 76 6f 69 64 20 30 3d 3d 74 2e 66 75 6c Data Ascii: Query(o)).data("videomutetoggledby");void 0==a&&(a=new Array),a.push(e),o.data("videomutetoggledby",a)});break;case"toggleslider":void 0==t.slidertoggledby&&(t.slidertoggledby=new Array),t.slidertoggledby.push(e);break;case"togglefullscreen":void 0==t.ful
2024-05-06 16:42:36 UTC	1369	IN	Data Raw: 64 61 74 61 28 22 61 6e 69 6d 64 69 72 65 63 74 69 6f 6e 22 29 29 26 26 28 72 2e 61 6e 69 6d 64 69 72 65 63 74 69 6f 6e 3d 22 6f 75 74 22 2c 72 2e 74 72 69 67 67 65 72 65 64 3d 21 30 2c 72 2e 74 72 69 67 67 65 72 73 74 61 74 65 3d 22 6f 66 66 22 2c 5f 52 2e 73 74 6f 70 56 69 64 65 6f 26 26 5f 52 2e 73 74 6f 70 56 69 64 65 6f 28 6f 2c 74 29 2c 5f 52 2e 75 6e 54 6f 67 67 6c 65 53 74 61 74 65 28 72 2e 6c 61 79 65 72 74 6f 67 67 6c 65 64 62 79 29 2c 5f 52 2e 65 6e 64 4d 6f 76 65 43 61 70 74 69 6f 6e 26 26 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 72 2e 74 72 69 67 67 65 72 64 65 6c 61 79 4f 75 74 29 2c 72 2e 74 72 69 67 67 65 72 64 65 6c 61 79 4f 75 74 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 52 2e 70 6c 61 79 41 6e 69 6d 61 74 Data Ascii: data("animdirection"))&&(r.animdirection="out",r.triggered=!0,r.triggerstate="off",_R.stopVideo&&_R.stopVideo(o,t),_R.unToggleState(r.layertoggledby),_R.endMoveCaption&&(clearTimeout(r.triggerdelayOut),r.triggerdelayOut=setTimeout(function(){_R.playAnimat
2024-05-06 16:42:36 UTC	1369	IN	Data Raw: 61 73 65 22 2c 61 2e 65 61 73 65 29 3b 76 61 72 20 6f 66 66 3d 67 65 74 4f 66 66 43 6f 6e 74 48 28 6f 70 74 2e 66 75 6c 6c 53 63 72 65 65 6e 4f 66 66 73 65 74 43 6f 6e 74 61 69 6e 65 72 29 7c 7c 30 2c 61 6f 66 3d 70 61 72 73 65 49 6e 74 28 61 2e 6f 66 66 73 65 74 2c 30 29 7c 7c 30 3b 6f 66 66 3d 6f 66 66 2d 61 6f 66 7c 7c 30 2c 6f 70 74 2e 73 63 72 6f 6c 6c 52 6f 6f 74 3d 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 3b 76 61 72 20 73 6f 62 6a 3d 7b 5f 79 3a 6f 70 74 2e 73 63 72 6f 6c 6c 52 6f 6f 74 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 7d 3b 70 75 6e 63 68 67 73 2e 54 77 65 65 6e 4c 69 74 65 2e 74 6f 28 73 6f 62 6a 2c 61 2e 73 70 65 65 64 2f 31 65 33 2c 7b 5f 79 3a 6f 70 74 2e 63 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2b 6a 51 75 65 72 79 28 6f 70 74 2e Data Ascii: ase",a.ease);var off=getOffContH(opt.fullScreenOffsetContainer)\|\|0,aof=parseInt(a.offset,0)\|\|0;off=off-aof\|\|0,opt.scrollRoot=jQuery(document);var sobj={_y:opt.scrollRoot.scrollTop()};punchgs.TweenLite.to(sobj,a.speed/1e3,{_y:opt.c.offset().top+jQuery(opt.
2024-05-06 16:42:36 UTC	1369	IN	Data Raw: 70 74 29 3f 5f 52 2e 73 74 6f 70 56 69 64 65 6f 26 26 5f 52 2e 73 74 6f 70 56 69 64 65 6f 28 74 6e 63 2c 6f 70 74 29 3a 5f 52 2e 70 6c 61 79 56 69 64 65 6f 28 74 6e 63 2c 6f 70 74 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 6d 75 74 65 76 69 64 65 6f 22 3a 74 6e 63 2e 6c 65 6e 67 74 68 3e 30 26 26 5f 52 2e 6d 75 74 65 56 69 64 65 6f 28 74 6e 63 2c 6f 70 74 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 75 6e 6d 75 74 65 76 69 64 65 6f 22 3a 74 6e 63 2e 6c 65 6e 67 74 68 3e 30 26 26 5f 52 2e 75 6e 4d 75 74 65 56 69 64 65 6f 26 26 5f 52 2e 75 6e 4d 75 74 65 56 69 64 65 6f 28 74 6e 63 2c 6f 70 74 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 74 6f 67 67 6c 65 5f 6d 75 74 65 5f 76 69 64 65 6f 22 3a 74 6e 63 2e 6c 65 6e 67 74 68 3e 30 26 26 28 5f 52 2e 69 73 56 69 64 65 6f 4d Data Ascii: pt)?_R.stopVideo&&_R.stopVideo(tnc,opt):_R.playVideo(tnc,opt));break;case"mutevideo":tnc.length>0&&_R.muteVideo(tnc,opt);break;case"unmutevideo":tnc.length>0&&_R.unMuteVideo&&_R.unMuteVideo(tnc,opt);break;case"toggle_mute_video":tnc.length>0&&(_R.isVideoM
2024-05-06 16:42:36 UTC	916	IN	Data Raw: 69 6e 68 65 69 67 68 74 2c 6f 70 74 2e 69 6e 66 75 6c 6c 73 63 72 65 65 6e 6d 6f 64 65 3d 21 31 2c 6f 70 74 2e 63 2e 72 65 76 72 65 64 72 61 77 28 29 2c 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 74 72 69 67 67 65 72 28 22 72 65 73 69 7a 65 22 29 2c 5f 52 2e 75 6e 54 6f 67 67 6c 65 53 74 61 74 65 28 6f 70 74 2e 66 75 6c 6c 73 63 72 65 65 6e 74 6f 67 67 6c 65 64 62 79 29 7d 65 6c 73 65 20 69 66 28 30 3d 3d 6a 51 75 65 72 79 28 22 2e 72 73 2d 67 6f 2d 66 75 6c 6c 73 63 72 65 65 6e 22 29 2e 6c 65 6e 67 74 68 26 26 28 22 74 6f 67 67 6c 65 66 75 6c 6c 73 63 72 65 65 6e 22 3d 3d 61 2e 61 63 74 69 6f 6e 7c 7c 22 67 6f 66 75 6c 6c 73 63 72 65 65 6e 22 3d 3d 61 2e 61 63 74 69 6f 6e 29 29 7b 76 61 72 20 67 66 3d 6f 70 74 2e 63 2e 63 6c 6f 73 65 73 74 28 22 2e 66 Data Ascii: inheight,opt.infullscreenmode=!1,opt.c.revredraw(),jQuery(window).trigger("resize"),_R.unToggleState(opt.fullscreentoggledby)}else if(0==jQuery(".rs-go-fullscreen").length&&("togglefullscreen"==a.action\|\|"gofullscreen"==a.action)){var gf=opt.c.closest(".f
2024-05-06 16:42:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.11	49947	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:35 UTC	556	OUT	GET /wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.layeranimation.min.js?version=5.4.6.4 HTTP/1.1 Host: fortis-site.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.942134464.1715013754; _gid=GA1.2.1562157020.1715013754; _gat_gtag_UA_127514612_1=1
2024-05-06 16:42:36 UTC	795	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:36 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Wed, 03 Oct 2018 23:54:48 GMT ETag: W/"5bb556c8-da86" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JY2T8%2B8D%2BwDGElBV2FkUHM60HK3kFUuadDGjZPP%2BhaE2Hevz8aRb%2FcocL3AFG%2BiZ9ff3rfVyK4SbMLJ9FS1u515HxaEn6gd64R9GWq6izabTxsSiv9%2BUpT364mYODl7kzlk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6ca75f6131ea-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:36 UTC	574	IN	Data Raw: 37 63 39 36 0d 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0d 0a 20 2a 20 52 45 56 4f 4c 55 54 49 4f 4e 20 35 2e 34 2e 36 2e 34 20 45 58 54 45 4e 53 49 4f 4e 20 2d 20 4c 41 59 45 52 20 41 4e 49 4d 41 54 49 4f 4e 0d 0a 20 2a 20 40 76 65 72 73 69 6f 6e 3a 20 33 2e 36 2e 34 20 28 32 38 2e 31 31 2e 32 30 31 37 29 0d 0a 20 2a 20 40 72 65 71 75 69 72 65 73 20 6a 71 75 65 72 79 2e 74 68 65 6d 65 70 75 6e 63 68 2e 72 65 76 6f 6c 75 74 69 6f 6e 2e 6a 73 0d 0a 20 2a 20 40 61 75 74 68 6f 72 20 54 68 65 6d 65 50 75 6e 63 68 0d 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a Data Ascii: 7c96/************************************************ * REVOLUTION 5.4.6.4 EXTENSION - LAYER ANIMATION * @version: 3.6.4 (28.11.2017) * @requires jquery.themepunch.revolution.js * @author ThemePunch*********************************************
2024-05-06 16:42:36 UTC	1369	IN	Data Raw: 36 2e 34 22 2c 76 65 72 73 69 6f 6e 3a 22 33 2e 36 2e 34 22 7d 29 3b 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 21 30 2c 74 2c 7b 75 70 64 61 74 65 4d 61 72 6b 75 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 76 61 72 20 74 3d 6a 51 75 65 72 79 28 65 29 2e 64 61 74 61 28 29 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 2e 73 74 61 72 74 26 26 21 74 2e 66 72 61 6d 65 73 5f 61 64 64 65 64 26 26 76 6f 69 64 20 30 3d 3d 3d 74 2e 66 72 61 6d 65 73 29 7b 76 61 72 20 61 3d 6e 65 77 20 41 72 72 61 79 2c 6f 3d 5f 28 63 28 29 2c 74 2e 74 72 61 6e 73 66 6f 72 6d 5f 69 6e 2c 76 6f 69 64 20 30 2c 21 31 29 2c 72 3d 5f 28 63 28 29 2c 74 2e 74 72 61 6e 73 66 6f 72 6d 5f 6f 75 74 2c 76 6f 69 64 20 30 2c 21 31 29 2c 6e 3d 5f 28 63 28 29 2c 74 2e 74 72 61 6e 73 66 6f 72 6d 5f Data Ascii: 6.4",version:"3.6.4"});jQuery.extend(!0,t,{updateMarkup:function(e,i){var t=jQuery(e).data();if(void 0!==t.start&&!t.frames_added&&void 0===t.frames){var a=new Array,o=_(c(),t.transform_in,void 0,!1),r=_(c(),t.transform_out,void 0,!1),n=_(c(),t.transform_
2024-05-06 16:42:36 UTC	1369	IN	Data Raw: 74 22 21 3d 3d 74 2e 66 72 61 6d 65 73 5b 73 5d 2e 66 72 61 6d 65 26 26 22 6c 61 73 74 22 21 3d 3d 74 2e 66 72 61 6d 65 73 5b 73 5d 2e 66 72 61 6d 65 26 26 22 65 6e 64 22 21 3d 3d 74 2e 66 72 61 6d 65 73 5b 73 5d 2e 66 72 61 6d 65 7c 7c 28 74 2e 6f 75 74 66 72 61 6d 65 69 6e 64 65 78 3d 73 29 2c 76 6f 69 64 20 30 21 3d 3d 74 2e 66 72 61 6d 65 73 5b 73 5d 2e 73 70 6c 69 74 26 26 74 2e 66 72 61 6d 65 73 5b 73 5d 2e 73 70 6c 69 74 2e 6d 61 74 63 68 28 2f 63 68 61 72 73 7c 77 6f 72 64 73 7c 6c 69 6e 65 73 2f 67 29 26 26 28 74 2e 73 70 6c 69 74 74 65 78 74 3d 21 30 29 3b 74 2e 6f 75 74 66 72 61 6d 65 69 6e 64 65 78 3d 2d 31 3d 3d 3d 74 2e 6f 75 74 66 72 61 6d 65 69 6e 64 65 78 3f 2d 31 3d 3d 3d 74 2e 68 6f 76 65 72 66 72 61 6d 65 69 6e 64 65 78 3f 74 2e 66 72 Data Ascii: t"!==t.frames[s].frame&&"last"!==t.frames[s].frame&&"end"!==t.frames[s].frame\|\|(t.outframeindex=s),void 0!==t.frames[s].split&&t.frames[s].split.match(/chars\|words\|lines/g)&&(t.splittext=!0);t.outframeindex=-1===t.outframeindex?-1===t.hoverframeindex?t.fr
2024-05-06 16:42:36 UTC	1369	IN	Data Raw: 72 54 79 70 65 3f 30 3a 69 2e 77 69 64 74 68 2f 32 2d 69 2e 67 72 69 64 77 69 64 74 68 5b 69 2e 63 75 72 57 69 6e 52 61 6e 67 65 5d 2a 69 2e 62 77 2f 32 2c 6d 3d 6f 2e 64 61 74 61 28 22 69 6e 64 65 78 22 29 3b 69 66 28 69 2e 6c 61 79 65 72 73 3d 69 2e 6c 61 79 65 72 73 7c 7c 6e 65 77 20 4f 62 6a 65 63 74 2c 69 2e 6c 61 79 65 72 73 5b 6d 5d 3d 69 2e 6c 61 79 65 72 73 5b 6d 5d 7c 7c 6f 2e 66 69 6e 64 28 22 2e 74 70 2d 63 61 70 74 69 6f 6e 22 29 2c 69 2e 6c 61 79 65 72 73 2e 73 74 61 74 69 63 3d 69 2e 6c 61 79 65 72 73 2e 73 74 61 74 69 63 7c 7c 69 2e 63 2e 66 69 6e 64 28 22 2e 74 70 2d 73 74 61 74 69 63 2d 6c 61 79 65 72 73 22 29 2e 66 69 6e 64 28 22 2e 74 70 2d 63 61 70 74 69 6f 6e 22 29 2c 76 6f 69 64 20 30 3d 3d 3d 69 2e 74 69 6d 65 6c 69 6e 65 73 26 26 Data Ascii: rType?0:i.width/2-i.gridwidth[i.curWinRange]*i.bw/2,m=o.data("index");if(i.layers=i.layers\|\|new Object,i.layers[m]=i.layers[m]\|\|o.find(".tp-caption"),i.layers.static=i.layers.static\|\|i.c.find(".tp-static-layers").find(".tp-caption"),void 0===i.timelines&&
2024-05-06 16:42:36 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 2c 61 29 7b 76 61 72 20 6f 3d 6a 51 75 65 72 79 28 74 68 69 73 29 2c 6e 3d 6f 2e 64 61 74 61 28 29 3b 21 30 21 3d 3d 6e 2e 68 6f 76 65 72 65 64 73 74 61 74 75 73 26 26 21 30 21 3d 3d 6e 2e 69 6e 68 6f 76 65 72 6f 75 74 61 6e 69 6d 61 74 69 6f 6e 3f 28 74 2e 75 70 64 61 74 65 4d 61 72 6b 75 70 28 74 68 69 73 2c 69 29 2c 74 2e 70 72 65 70 61 72 65 53 69 6e 67 6c 65 43 61 70 74 69 6f 6e 28 7b 63 61 70 74 69 6f 6e 3a 6f 2c 6f 70 74 3a 69 2c 6f 66 66 73 65 74 78 3a 6c 2c 6f 66 66 73 65 74 79 3a 30 2c 69 6e 64 65 78 3a 65 2c 72 65 63 61 6c 6c 3a 72 2c 70 72 65 73 65 74 3a 73 7d 29 2c 73 26 26 30 21 3d 3d 64 7c 7c 21 30 3d 3d 3d 6e 2e 76 65 72 79 66 69 72 73 74 73 74 73 74 69 63 7c 7c 28 74 2e 62 75 69 6c 64 46 75 6c 6c 54 69 6d 65 4c 69 6e 65 Data Ascii: tion(e,a){var o=jQuery(this),n=o.data();!0!==n.hoveredstatus&&!0!==n.inhoveroutanimation?(t.updateMarkup(this,i),t.prepareSingleCaption({caption:o,opt:i,offsetx:l,offsety:0,index:e,recall:r,preset:s}),s&&0!==d\|\|!0===n.veryfirstststic\|\|(t.buildFullTimeLine
2024-05-06 16:42:36 UTC	1369	IN	Data Raw: 2e 67 65 74 4c 61 62 65 6c 54 69 6d 65 28 22 73 6c 69 64 65 5f 22 2b 61 2e 6c 61 73 74 73 6c 69 64 65 29 2c 6c 3d 6f 2e 73 74 61 74 69 63 5f 6c 61 79 65 72 5f 74 69 6d 65 6c 69 6e 65 5f 74 69 6d 65 2c 6d 3d 22 69 6e 22 3d 3d 3d 6f 2e 61 6e 69 6d 64 69 72 65 63 74 69 6f 6e 7c 7c 22 6f 75 74 22 21 3d 3d 6f 2e 61 6e 69 6d 64 69 72 65 63 74 69 6f 6e 26 26 76 6f 69 64 20 30 2c 63 3d 22 62 79 74 72 69 67 67 65 72 22 3d 3d 3d 6f 2e 66 72 61 6d 65 73 5b 30 5d 2e 64 65 6c 61 79 2c 67 3d 28 6f 2e 66 72 61 6d 65 73 5b 6f 2e 66 72 61 6d 65 73 2e 6c 65 6e 67 74 68 2d 31 5d 2e 64 65 6c 61 79 2c 6f 2e 74 72 69 67 67 65 72 65 64 5f 73 74 61 72 74 73 74 61 74 75 73 29 2c 66 3d 6f 2e 6c 61 73 74 74 72 69 67 67 65 72 73 74 61 74 65 3b 21 30 21 3d 3d 6f 2e 68 6f 76 65 72 65 Data Ascii: .getLabelTime("slide_"+a.lastslide),l=o.static_layer_timeline_time,m="in"===o.animdirection\|\|"out"!==o.animdirection&&void 0,c="bytrigger"===o.frames[0].delay,g=(o.frames[o.frames.length-1].delay,o.triggered_startstatus),f=o.lasttriggerstate;!0!==o.hovere
2024-05-06 16:42:36 UTC	1369	IN	Data Raw: 2e 5f 62 61 3f 72 2e 68 65 69 67 68 74 3a 72 2e 75 6c 68 2c 6f 2e 5f 6c 69 67 3d 76 6f 69 64 20 30 3d 3d 3d 6f 2e 5f 6c 69 67 3f 61 2e 68 61 73 43 6c 61 73 73 28 22 72 65 76 5f 6c 61 79 65 72 5f 69 6e 5f 67 72 6f 75 70 22 29 3f 61 2e 63 6c 6f 73 65 73 74 28 22 2e 72 65 76 5f 67 72 6f 75 70 22 29 3a 61 2e 68 61 73 43 6c 61 73 73 28 22 72 65 76 5f 6c 61 79 65 72 5f 69 6e 5f 63 6f 6c 75 6d 6e 22 29 3f 61 2e 63 6c 6f 73 65 73 74 28 22 2e 72 65 76 5f 63 6f 6c 75 6d 6e 5f 69 6e 6e 65 72 22 29 3a 61 2e 68 61 73 43 6c 61 73 73 28 22 72 65 76 5f 63 6f 6c 75 6d 6e 5f 69 6e 6e 65 72 22 29 3f 61 2e 63 6c 6f 73 65 73 74 28 22 2e 72 65 76 5f 72 6f 77 22 29 3a 22 6e 6f 6e 65 22 3a 6f 2e 5f 6c 69 67 2c 6f 2e 5f 63 6f 6c 75 6d 6e 3d 76 6f 69 64 20 30 3d 3d 3d 6f 2e 5f 63 Data Ascii: ._ba?r.height:r.ulh,o._lig=void 0===o._lig?a.hasClass("rev_layer_in_group")?a.closest(".rev_group"):a.hasClass("rev_layer_in_column")?a.closest(".rev_column_inner"):a.hasClass("rev_column_inner")?a.closest(".rev_row"):"none":o._lig,o._column=void 0===o._c
2024-05-06 16:42:36 UTC	1369	IN	Data Raw: 6f 2e 5f 74 6f 67 67 6c 65 6c 69 73 74 65 6e 65 72 73 3d 21 30 2c 76 6f 69 64 20 30 3d 3d 3d 6f 2e 61 63 74 69 6f 6e 73 26 26 61 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 73 77 61 70 74 6f 67 67 6c 65 53 74 61 74 65 28 61 29 7d 29 29 3a 6f 2e 5f 74 6f 67 67 6c 65 6c 69 73 74 65 6e 65 72 73 3d 21 31 2c 22 66 75 6c 6c 73 63 72 65 65 6e 22 3d 3d 72 2e 73 6c 69 64 65 72 4c 61 79 6f 75 74 26 26 28 65 2e 6f 66 66 73 65 74 79 3d 6f 2e 5f 67 68 2f 32 2d 72 2e 67 72 69 64 68 65 69 67 68 74 5b 72 2e 63 75 72 57 69 6e 52 61 6e 67 65 5d 2a 72 2e 62 68 2f 32 29 2c 28 22 6f 6e 22 3d 3d 72 2e 61 75 74 6f 48 65 69 67 68 74 7c 7c 76 6f 69 64 20 30 21 3d 72 2e 6d 69 6e 48 65 69 67 68 74 26 26 72 2e 6d 69 6e 48 65 69 67 68 74 3e 30 29 26 26 28 65 2e 6f 66 Data Ascii: o._togglelisteners=!0,void 0===o.actions&&a.click(function(){t.swaptoggleState(a)})):o._togglelisteners=!1,"fullscreen"==r.sliderLayout&&(e.offsety=o._gh/2-r.gridheight[r.curWinRange]*r.bh/2),("on"==r.autoHeight\|\|void 0!=r.minHeight&&r.minHeight>0)&&(e.of
2024-05-06 16:42:36 UTC	1369	IN	Data Raw: 2e 5f 62 61 3f 72 2e 75 6c 77 3a 72 2e 67 72 69 64 77 69 64 74 68 5b 72 2e 63 75 72 57 69 6e 52 61 6e 67 65 5d 2c 67 3d 22 73 6c 69 64 65 22 3d 3d 6f 2e 5f 62 61 3f 72 2e 75 6c 68 3a 72 2e 67 72 69 64 68 65 69 67 68 74 5b 72 2e 63 75 72 57 69 6e 52 61 6e 67 65 5d 3b 6d 3d 79 28 77 2e 64 61 74 61 28 22 77 77 22 29 2c 72 29 5b 72 2e 63 75 72 57 69 6e 52 61 6e 67 65 5d 7c 7c 79 28 77 2e 64 61 74 61 28 22 77 77 22 29 2c 72 29 7c 7c 22 61 75 74 6f 22 2c 63 3d 79 28 77 2e 64 61 74 61 28 22 68 68 22 29 2c 72 29 5b 72 2e 63 75 72 57 69 6e 52 61 6e 67 65 5d 7c 7c 79 28 77 2e 64 61 74 61 28 22 68 68 22 29 2c 72 29 7c 7c 22 61 75 74 6f 22 3b 76 61 72 20 66 3d 22 66 75 6c 6c 22 3d 3d 3d 6d 7c 7c 22 66 75 6c 6c 2d 70 72 6f 70 6f 72 74 69 6f 6e 61 6c 22 3d 3d 3d 6d 2c Data Ascii: ._ba?r.ulw:r.gridwidth[r.curWinRange],g="slide"==o._ba?r.ulh:r.gridheight[r.curWinRange];m=y(w.data("ww"),r)[r.curWinRange]\|\|y(w.data("ww"),r)\|\|"auto",c=y(w.data("hh"),r)[r.curWinRange]\|\|y(w.data("hh"),r)\|\|"auto";var f="full"===m\|\|"full-proportional"===m,
2024-05-06 16:42:36 UTC	1369	IN	Data Raw: 6c 2e 68 6f 72 69 7a 6f 6e 74 61 6c 5f 61 6c 69 67 6e 29 7b 63 61 73 65 22 63 65 6e 74 65 72 22 3a 65 2e 6f 66 66 73 65 74 78 3d 30 2b 28 72 2e 75 6c 77 2d 72 2e 67 72 69 64 77 69 64 74 68 5b 72 2e 63 75 72 57 69 6e 52 61 6e 67 65 5d 2a 72 2e 62 77 29 2f 32 3b 62 72 65 61 6b 3b 63 61 73 65 22 6c 65 66 74 22 3a 62 72 65 61 6b 3b 63 61 73 65 22 72 69 67 68 74 22 3a 65 2e 6f 66 66 73 65 74 78 3d 72 2e 75 6c 77 2d 72 2e 67 72 69 64 77 69 64 74 68 5b 72 2e 63 75 72 57 69 6e 52 61 6e 67 65 5d 2a 72 2e 62 77 7d 65 2e 6f 66 66 73 65 74 78 3d 65 2e 6f 66 66 73 65 74 78 3c 30 3f 30 3a 65 2e 6f 66 66 73 65 74 78 7d 76 61 72 20 5f 3d 22 68 74 6d 6c 35 22 3d 3d 6f 2e 61 75 64 69 6f 3f 22 61 75 64 69 6f 22 3a 22 76 69 64 65 6f 22 3b 69 66 28 61 2e 68 61 73 43 6c 61 73 Data Ascii: l.horizontal_align){case"center":e.offsetx=0+(r.ulw-r.gridwidth[r.curWinRange]r.bw)/2;break;case"left":break;case"right":e.offsetx=r.ulw-r.gridwidth[r.curWinRange]r.bw}e.offsetx=e.offsetx<0?0:e.offsetx}var _="html5"==o.audio?"audio":"video";if(a.hasClas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.11	49946	35.188.55.83	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:36 UTC	391	OUT	GET /wp-content/uploads/2018/10/about.jpg?id=6186 HTTP/1.1 Host: fortissite.wpengine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:36 UTC	326	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 06 May 2024 16:42:36 GMT Content-Type: image/jpeg Content-Length: 43272 Connection: close Last-Modified: Fri, 05 Oct 2018 12:14:29 GMT ETag: "5bb755a5-a908" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-05-06 16:42:36 UTC	16058	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 1f 43 6f 6d 70 72 65 73 73 65 64 20 62 79 20 6a 70 65 67 2d 72 65 63 6f 6d 70 72 65 73 73 ff db 00 84 00 0c 0c 0c 0c 0d 0c 0e 0f 0f 0e 13 15 12 15 13 1c 1a 18 18 1a 1c 2b 1e 21 1e 21 1e 2b 41 28 2f 28 28 2f 28 41 39 45 38 34 38 45 39 67 51 47 47 51 67 77 64 5e 64 77 90 80 80 90 b5 ac b5 ec ec ff 01 0c 0c 0c 0c 0d 0c 0e 0f 0f 0e 13 15 12 15 13 1c 1a 18 18 1a 1c 2b 1e 21 1e 21 1e 2b 41 28 2f 28 28 2f 28 41 39 45 38 34 38 45 39 67 51 47 47 51 67 77 64 5e 64 77 90 80 80 90 b5 ac b5 ec ec ff ff c2 00 11 08 03 b1 08 98 03 01 22 00 02 11 01 03 11 01 ff c4 00 1a 00 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 07 ff da 00 08 01 01 00 00 00 00 fd 4c 1c 23 79 b6 b5 a0 14 8a 00 Data Ascii: JFIFCompressed by jpeg-recompress+!!+A(/((/(A9E848E9gQGGQgwd^dw+!!+A(/((/(A9E848E9gQGGQgwd^dw"L#y
2024-05-06 16:42:36 UTC	16384	IN	Data Raw: 05 bf 82 df c1 cf c1 1e bf c3 35 ce 7c b2 a8 e4 8a ac 91 1e c5 ea b1 c4 d2 68 34 14 51 a5 1a 79 34 f2 24 ac 8a a5 e8 56 55 93 5c 0e 36 38 a1 46 cd 08 d0 8d 23 5c 31 72 97 3b a7 ed 29 1c 1c 14 8a c9 1c 0d 26 ca 29 15 95 2d 9e 05 d1 63 f6 9a e5 14 3d 3f 91 55 23 83 8f c9 c7 e4 e3 f2 3d 3f 93 ed fc 9c 5a ef 76 25 70 71 f0 c5 5f 0c 55 f9 38 fc 9c 1c 7e 4e 0e 3f 27 05 2c b8 2b 3a c9 74 bf c6 cb a1 0c b6 26 59 62 91 6b d5 d4 8d 4b e4 b4 5a 2d 6d 4e ff 00 c0 bc d8 91 48 d2 8d 28 8a 48 91 59 70 70 45 d3 7f e1 9f 79 71 44 79 48 a2 5d 11 5c 0c a1 0b bf 55 e7 45 14 35 95 e5 a7 ee 42 e3 d1 79 be 8d 47 b9 ed 7d 32 1e d5 bb 15 d4 4d 6c d7 f8 2d 1c 16 5e 75 c8 d6 55 79 56 54 84 87 c2 17 42 1f b4 7d 3c a3 d2 2b 63 c9 76 b7 62 22 84 69 aa e4 4b f2 69 34 b3 49 5b 68 79 51 Data Ascii: 5\|h4Qy4$VU\68F#\1r;)&)-c=?U#=?Zv%pq_U8~N?',+:t&YbkKZ-mNH(HYppEyqDyH]\UE5ByG}2Ml-^uUyVTB}<+cvb"iKi4I[hyQ
2024-05-06 16:42:36 UTC	10830	IN	Data Raw: 2d 5d 65 79 b4 9a 65 21 a4 43 8c 45 9e 33 a9 7f c2 cb 74 60 aa c3 5b d0 ba df 1b 47 25 8f a2 f8 2f 67 1b 17 f0 de 73 5f 73 3c e5 05 db cb 11 7d b9 2b 47 39 2e d6 e9 f1 5c 93 eb a3 8c 9e 58 4b ed bd 88 9a fb 4a 2b 25 b7 8d ab d3 97 28 76 72 41 fd c3 f1 fb 25 d6 db 31 27 fd ab b3 ee 1a fc 65 64 39 84 5f e3 f8 93 b4 dd e6 f6 e1 73 26 fd 17 9d ab 7b df 79 c5 dc 57 eb 73 ca 39 f8 c9 76 3e f2 bf 47 17 dc f3 c1 ed bc d6 48 a2 8a 25 9b db c1 c1 c1 48 94 53 8b 1c 51 51 29 65 85 ef ff 00 85 97 96 2a 7a 93 39 39 39 2d 8d fd 91 35 33 5b f9 64 24 e4 e9 b3 11 d6 0a fd 89 dd 9c 89 d2 ca 3c 45 2d ef 39 af b5 8c ae 1e 54 60 7f 76 78 fe ff 00 f8 28 aa 34 9a 79 ec ff 00 b9 56 72 8b 52 62 4d 33 fb e3 4b 3c 64 b5 23 8c a2 aa 29 7e 36 f2 78 17 42 f4 98 ba d9 7e 8a cd e4 bd 1f Data Ascii: -]eye!CE3t`[G%/gs_s<}+G9.\XKJ+%(vrA%1'ed9_s&{yWs9v>GH%HSQQ)e*z999-53[d$<E-9T`vx(4yVrRbM3K<d#)~6xB~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.11	49949	192.178.50.68	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:36 UTC	971	OUT	GET /recaptcha/api2/anchor?ar=1&k=6Ld7KXUUAAAAAAknjFUvMThz44a8gU2bvUq0YFw-&co=aHR0cHM6Ly9mb3J0aXMtc2l0ZS5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=fwww2nyjhy7o HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiUocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:36 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 06 May 2024 16:42:36 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-32EBNFH4Pz744lChCGPSHA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-06 16:42:36 UTC	364	IN	Data Raw: 32 61 65 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2aee<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-05-06 16:42:36 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-05-06 16:42:36 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-05-06 16:42:36 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-05-06 16:42:36 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-05-06 16:42:36 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-05-06 16:42:36 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 33 32 45 42 4e 46 48 34 50 7a 37 34 34 6c 43 68 43 47 50 53 48 41 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css"><script nonce="32EBNFH4Pz744lChCGPSHA" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-05-06 16:42:36 UTC	1255	IN	Data Raw: 4a 56 52 37 68 72 61 76 42 6d 50 53 63 73 45 63 32 78 6e 51 6b 4e 4c 77 6a 71 74 65 4e 52 74 41 78 5f 76 6e 54 6f 4f 31 76 68 4b 4c 75 39 4d 5f 4b 77 74 43 71 64 6c 75 47 77 78 73 48 52 6e 52 46 58 30 2d 58 53 74 35 66 4b 4a 31 55 63 31 56 61 68 33 6e 37 44 44 78 47 2d 48 63 34 56 47 4a 67 6a 55 36 6d 48 43 58 51 45 51 37 51 41 46 46 34 62 78 33 67 76 71 4d 4a 30 4d 41 63 35 78 42 78 57 64 58 56 45 72 51 72 6f 48 59 72 5f 30 48 76 71 36 6f 43 39 4a 4c 62 74 66 68 35 57 75 4e 56 6a 78 44 4f 74 71 6a 42 48 73 74 67 6c 39 79 5a 78 55 63 77 55 42 77 65 41 46 6b 63 38 61 63 68 6e 66 65 4e 6b 4a 6c 6b 79 4d 52 7a 43 5a 6c 41 61 42 6d 44 44 61 59 54 4b 46 73 42 59 47 48 6b 64 33 4e 35 70 79 63 48 79 57 75 58 32 4d 6a 61 6a 52 4f 32 35 32 37 6d 65 42 45 6e 31 79 Data Ascii: JVR7hravBmPScsEc2xnQkNLwjqteNRtAx_vnToO1vhKLu9M_KwtCqdluGwxsHRnRFX0-XSt5fKJ1Uc1Vah3n7DDxG-Hc4VGJgjU6mHCXQEQ7QAFF4bx3gvqMJ0MAc5xBxWdXVErQroHYr_0Hvq6oC9JLbtfh5WuNVjxDOtqjBHstgl9yZxUcwUBweAFkc8achnfeNkJlkyMRzCZlAaBmDDaYTKFsBYGHkd3N5pycHyWuX2MjajRO2527meBEn1y
2024-05-06 16:42:36 UTC	1255	IN	Data Raw: 2d 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 33 32 45 42 4e 46 48 34 50 7a 37 34 34 6c 43 68 43 47 50 53 48 41 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 6d 65 55 4e 47 4d 32 78 74 62 31 39 50 57 57 35 44 58 7a 6c 79 52 31 64 56 52 69 31 44 5a 56 46 32 64 45 39 46 53 30 74 79 56 46 56 4c 58 31 68 59 55 7a 46 47 5a 44 46 7a 4c 6d 70 7a 5c 78 32 32 2c 5c 78 32 32 5c 78 32 32 2c 5c 78 32 32 54 48 64 46 62 54 5a 47 Data Ascii: -"><script type="text/javascript" nonce="32EBNFH4Pz744lChCGPSHA"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9meUNGM2xtb19PWW5DXzlyR1dVRi1DZVF2dE9FS0tyVFVLX1hYUzFGZDFzLmpz\x22,\x22\x22,\x22THdFbTZG
2024-05-06 16:42:36 UTC	594	IN	Data Raw: 55 6b 6c 47 51 6b 68 6f 57 55 68 55 59 6b 5a 44 54 46 56 74 59 55 67 78 52 57 31 31 57 46 52 45 53 6a 51 30 54 6a 68 74 62 31 68 4b 55 46 42 57 4b 79 39 46 4e 55 52 75 64 45 46 7a 4c 32 39 78 65 43 39 4b 57 48 49 33 4d 48 56 4b 5a 48 70 48 4d 6d 70 7a 4c 32 4a 6e 53 6b 5a 4e 61 48 64 45 64 56 5a 77 63 47 4e 50 52 30 52 4d 56 45 35 72 5a 30 78 6c 59 56 6c 52 5a 58 42 4f 63 54 46 35 64 6d 4e 36 4c 33 45 72 63 58 4d 32 63 55 4a 75 63 33 5a 4e 52 58 4d 31 63 31 52 6a 53 47 34 7a 63 31 52 4c 4d 54 52 56 65 44 5a 6d 52 55 39 50 55 6d 52 69 64 6b 4e 36 62 6c 52 59 63 57 35 4d 4e 55 46 48 61 56 70 53 59 55 6c 58 56 55 38 35 5a 6e 4d 34 62 44 4e 51 56 33 70 74 5a 45 52 79 4e 44 42 36 65 46 59 7a 51 58 6c 5a 65 6b 64 69 59 6a 5a 50 56 32 70 42 4e 33 42 6e 52 7a 5a Data Ascii: UklGQkhoWUhUYkZDTFVtYUgxRW11WFRESjQ0Tjhtb1hKUFBWKy9FNURudEFzL29xeC9KWHI3MHVKZHpHMmpzL2JnSkZNaHdEdVZwcGNPR0RMVE5rZ0xlYVlRZXBOcTF5dmN6L3ErcXM2cUJuc3ZNRXM1c1RjSG4zc1RLMTRVeDZmRU9PUmRidkN6blRYcW5MNUFHaVpSYUlXVU85ZnM4bDNQV3ptZERyNDB6eFYzQXlZekdiYjZPV2pBN3BnRzZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.11	49950	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:36 UTC	478	OUT	GET /wp-content/uploads/2018/10/about2.jpg HTTP/1.1 Host: fortis-site.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.942134464.1715013754; _gid=GA1.2.1562157020.1715013754; _gat_gtag_UA_127514612_1=1
2024-05-06 16:42:36 UTC	746	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:36 GMT Content-Type: image/jpeg Content-Length: 18480 Connection: close Last-Modified: Fri, 05 Oct 2018 12:15:42 GMT ETag: "5bb755ee-4830" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l%2F8K60qXEp5u93j13z%2BfXtrhae3JP%2BjbWgz5TtYQoxoBri5Q2lrU2tDaubmtQw4icD1z4AiITYevBO7qcMRaH8KGdJSrKGwnZWeBXWgCxG5i16cuBKQ52NijmCf8ATQZOsU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6ca9adeea4f8-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:36 UTC	623	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 1f 43 6f 6d 70 72 65 73 73 65 64 20 62 79 20 6a 70 65 67 2d 72 65 63 6f 6d 70 72 65 73 73 ff db 00 84 00 12 12 12 12 13 12 14 16 16 14 1c 1e 1b 1e 1c 29 26 22 22 26 29 3e 2c 30 2c 30 2c 3e 5e 3b 45 3b 3b 45 3b 5e 53 65 52 4d 52 65 53 96 76 68 68 76 96 ad 91 8a 91 ad d2 bc bc d2 ff fb ff ff ff ff 01 12 12 12 12 13 12 14 16 16 14 1c 1e 1b 1e 1c 29 26 22 22 26 29 3e 2c 30 2c 30 2c 3e 5e 3b 45 3b 3b 45 3b 5e 53 65 52 4d 52 65 53 96 76 68 68 76 96 ad 91 8a 91 ad d2 bc bc d2 ff fb ff ff ff ff ff c2 00 11 08 03 b1 08 98 03 01 22 00 02 11 01 03 11 01 ff c4 00 19 00 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 06 ff da 00 08 01 01 00 00 00 00 fb 80 60 b2 8b 40 00 00 00 00 00 00 Data Ascii: JFIFCompressed by jpeg-recompress)&""&)>,0,0,>^;E;;E;^SeRMReSvhhv)&""&)>,0,0,>^;E;;E;^SeRMReSvhhv"`@
2024-05-06 16:42:36 UTC	1369	IN	Data Raw: 00 00 00 10 28 00 00 00 00 00 cb 34 b6 80 00 99 aa 13 40 00 00 06 00 40 03 57 19 d8 0d 83 12 80 29 68 00 00 00 00 00 00 00 00 00 00 00 00 00 08 16 23 40 00 00 00 00 65 25 5b 40 00 42 0a 9a 00 00 00 30 08 45 01 75 8c ec b0 6c 26 40 00 ad 00 00 00 00 00 02 50 00 00 00 00 00 00 00 20 29 0a 00 00 00 00 08 c8 69 40 00 91 41 34 00 09 08 ba 06 25 11 01 42 d9 8d 8b 0d 84 c8 00 15 a0 00 00 00 00 00 42 80 00 00 00 00 00 00 04 21 a6 49 b0 00 00 00 00 49 02 ad 00 04 89 44 6c 00 24 94 4d 84 c9 00 80 2d b3 3a a1 1b 09 92 82 01 74 00 00 00 00 00 09 60 a0 00 00 00 00 00 00 08 0a c8 68 00 00 00 00 22 2c 52 80 00 40 4d 00 04 94 46 82 60 00 00 a9 34 54 36 13 2a 00 06 80 00 00 00 00 01 01 15 40 19 01 a0 00 00 00 02 01 59 0d 00 00 00 00 04 45 4a a0 00 45 12 1a 00 0c cb 49 36 Data Ascii: (4@@W)h#@e%[@B0Eul&@P )i@A4%BB!IIDl$M-:t`h",R@MF`4T6*@YEJEI6
2024-05-06 16:42:36 UTC	1369	IN	Data Raw: 61 bd 91 4a 08 00 00 a8 40 04 5a 82 46 b4 12 2a 80 c8 a2 08 85 a4 82 a9 a0 4c f3 21 d6 80 54 0d 00 00 33 34 09 48 0b 40 07 1c af 70 00 9c 1a cb a6 c0 0a 00 01 99 98 eb 52 c8 34 00 07 3c 1d 91 45 04 00 02 55 04 40 5c ad 42 2c b6 82 42 d0 48 15 02 10 d0 91 68 b4 23 94 b9 3a 68 0a 40 68 00 25 4e 79 9d 36 04 a2 23 4a 00 e1 0d 75 a0 09 38 82 eb 74 05 00 00 ce 64 9d 74 12 1a 00 04 e7 93 a6 a5 0a 08 00 27 39 35 d6 82 08 05 41 34 96 a2 82 46 82 12 88 10 00 4b 66 5d 28 26 32 ca f5 51 00 0d 00 45 8a cf 2b 97 5d 88 22 a4 68 14 39 60 37 d4 02 63 98 02 ef 60 a0 00 19 cc cb a6 c2 13 40 00 9c f2 6b 6a 14 10 00 71 83 5d 88 02 c8 02 59 a4 b4 88 d0 4a 10 00 44 0b 91 57 18 3b 68 23 18 47 4d 00 b0 06 80 20 56 79 4a e9 a5 11 1a 88 a0 26 70 85 5e 9a 03 1c e0 00 5e b4 28 00 0c Data Ascii: aJ@ZF*L!T34H@pR4<EU@\B,BHh#:h@h%Ny6#Ju8tdt'95A4FKf](&2QE+]"h9`7c`@kjq]YJDW;h#GM VyJ&p^^(
2024-05-06 16:42:36 UTC	1369	IN	Data Raw: 63 29 53 72 02 ab 28 05 21 61 16 5d 54 2c 41 17 b0 85 00 00 64 05 04 02 50 72 01 dc 19 c1 01 41 ad 01 40 19 ce 17 6b 89 03 7b 50 00 0e 42 01 35 d6 72 04 00 1d 37 00 a1 00 33 88 1a bd 00 01 99 98 5c ed 90 52 e0 a2 50 58 91 46 a8 58 84 8d ee 88 a0 00 12 00 a0 80 01 39 85 3b 03 39 88 0a 2b 54 0a 00 ce 70 bb 5e 65 89 ae a0 00 09 cc 40 23 b3 90 21 44 0d 75 80 a0 08 0e 79 0d 3a 80 01 ce 42 e7 6c 83 43 29 40 17 58 80 35 bc 0d e6 e5 06 ba 00 00 01 20 28 00 20 b0 ce 0a 1d 81 39 99 a2 eb 36 da 00 a0 19 98 5d 2e 10 1d 68 00 06 70 20 2e 5b df 25 84 28 80 ec 05 00 04 73 c8 6d 76 00 09 8c 97 3b 64 a5 12 4a 00 08 06 c4 d3 36 20 d7 40 00 00 25 cd 41 40 04 2a 57 20 0e c0 63 28 1a 17 40 05 00 cc c2 e9 70 80 e9 a0 00 0c 64 40 12 f5 e6 4b 25 00 47 5a 0a 00 06 79 c0 d9 aa 28 Data Ascii: c)Sr(!a]T,AdPrA@k{PB5r73\RPXFX9;9+Tp^e@#!Duy:BlC)@X5 ( 96].hp .[%(smv;dJ6 @%A@*W c(@pd@K%GZy(
2024-05-06 16:42:36 UTC	1369	IN	Data Raw: a0 ca 80 02 c2 91 84 58 5b b0 8c 16 e3 7a 63 2a bb 00 03 08 5d 64 5d 19 83 60 8a 04 a9 80 58 08 d6 55 aa 88 0b a4 29 00 a0 0e 70 8b d4 00 02 64 b3 53 02 f4 72 96 6b 36 b5 a0 1c a1 75 ae 46 a5 db 9c 5e bc a1 d6 84 2a 02 80 66 80 0a 22 82 1c f7 05 d0 26 50 9d 2b 39 17 60 00 00 22 88 33 b0 42 80 30 82 c2 a0 81 d1 8a a8 68 50 10 05 06 70 1a d8 00 04 91 27 57 28 3a de 50 d6 47 4d 00 e7 91 bd 73 97 49 b7 3c d7 5e 44 eb a0 25 40 0a 22 58 50 05 00 46 66 88 d5 04 c9 13 a0 cc 35 a0 00 04 05 04 96 4d 82 01 41 84 16 08 a4 0d de 60 ad 52 80 08 01 88 45 e9 40 94 01 89 23 b4 e4 17 af 11 60 e9 a0 1c f2 37 ac 03 6c 66 ce 99 c1 ae a9 44 00 14 44 05 00 a0 09 24 a9 5a a0 ce 56 27 41 84 6b 60 00 01 88 d3 43 38 b2 ec 54 01 43 32 02 58 52 06 ee 20 1b a0 a0 02 03 11 0d 74 04 00 Data Ascii: X[zc]d]`XU)pdSrk6uF^f"&P+9`"3B0hPp'W(:PGMsI<^D%@"XPFf5MA`RE@#`7lfDD$ZV'Ak`C8TC2XR t
2024-05-06 16:42:36 UTC	1369	IN	Data Raw: 63 0b 68 32 15 34 a3 40 21 c5 77 6e 44 cc 37 54 20 b4 19 c1 0d ea c0 01 ca 0a d6 c0 0a 00 23 1b e5 0b d8 13 36 d8 24 66 15 d4 ce 41 a7 34 ad a8 09 88 6f 49 0b b3 12 08 bd 09 54 a2 20 9a 0a 24 01 2a 89 0e 63 6c 17 6d 83 19 1a 06 46 aa 0a 68 04 38 ae f4 c8 c4 1a d4 b4 82 94 26 0c 9d 28 00 98 c8 2f 4a 0b 00 00 27 3b 93 7b 51 24 5d 40 33 82 ba c6 60 46 f9 a6 b6 01 4e 72 35 b7 3a 6b 63 19 82 cd 6e 29 54 84 13 48 b4 48 40 55 19 86 06 d8 2e db 06 32 5a 12 0d 50 0d 00 87 13 a3 59 18 83 5a 29 02 80 39 c3 a5 45 03 18 01 ad 94 0b 00 01 9c 41 d6 d0 91 56 01 9c 0b d6 33 12 6a 2e 53 7a 28 45 63 03 ab 9d ad 55 39 c9 61 d2 ca 0a 10 26 82 86 40 0a 46 49 95 dc 99 5d b6 0c 64 da 0c 85 d0 06 80 44 e4 ba 6f 23 38 56 ec b4 81 40 18 c9 d2 a2 81 8c 00 d6 c0 a2 88 00 e7 91 7a 34 Data Ascii: ch24@!wnD7T #6$fA4oIT $*clmFh8&(/J';{Q$]@3`FNr5:kcn)THH@U.2ZPYZ)9EAV3j.Sz(EcU9a&@FI]dDo#8V@z4
2024-05-06 16:42:36 UTC	1369	IN	Data Raw: 41 80 83 5d 8c 72 ad 54 cc 6b 21 aa b5 95 dd 00 01 9c cc ab 76 e6 45 dd 00 06 39 85 dc e6 bb bb 1c b5 65 92 cc 11 b6 1d af 16 ef 32 ef 98 d8 94 23 74 61 34 96 cd 87 20 2c 94 58 48 00 6b a5 0e 72 c4 6a 63 42 d0 07 40 00 67 14 4c da de 6c a1 93 56 40 c1 01 ad ed 8e 41 6e 4d 48 35 6a d9 aa 00 00 ce 66 57 72 eb 31 2e e8 00 4c f3 0b bc e1 d2 b6 39 69 2c 5c e4 8d 5c 3b 5e 2d b1 1a df 32 ea c0 09 ba 33 26 99 d1 b0 e4 58 11 40 90 00 d7 4a 1c e4 13 4c 83 71 40 e8 00 0c e2 a1 29 bc 6a 50 86 88 33 90 83 5d 8c 72 06 b2 6b 21 ab 5a d0 00 00 67 33 2d 55 d6 60 dd 00 09 8c 05 de 70 ed a0 71 d5 96 2e 72 b9 69 97 79 c9 b9 92 eb 03 61 48 36 19 99 d5 96 cd 87 25 40 82 84 80 06 b7 a0 e7 22 cc ed 8a 1a 50 1b a0 00 c3 2a cd d4 b0 a1 93 41 58 c8 21 ad ed cf 00 d6 0b 03 5a 5d 50 Data Ascii: A]rTk!vE9e2#ta4 ,XHkrjcB@gLlV@AnMH5jfWr1.L9i,\\;^-23&X@JLq@)jP3]rk!Zg3-U`pq.riyaH6%@"P*AX!Z]P
2024-05-06 16:42:36 UTC	1369	IN	Data Raw: 05 85 45 8b 00 02 a0 00 a4 15 0a 40 02 a2 a0 02 84 01 50 2c 00 b0 02 91 40 81 61 51 62 c0 00 a2 52 14 20 50 10 00 b0 00 0a 10 00 a8 a8 58 2c 2a 50 4a 02 05 85 45 40 00 28 08 50 21 40 04 05 25 40 01 44 05 22 80 08 b1 49 40 02 00 59 49 40 82 91 44 a2 14 25 85 00 10 2c a0 12 90 a2 00 0a 00 22 a5 25 00 08 16 58 54 50 40 a2 0a 08 50 21 40 04 05 00 02 50 80 05 00 85 40 a0 00 00 21 40 04 29 02 84 28 08 50 01 00 a0 00 00 40 14 00 12 80 00 09 41 14 4a 25 10 a4 a8 a1 0a 02 14 00 40 28 4a 00 00 20 a0 00 8b 14 00 00 02 51 15 14 00 22 84 50 08 50 01 02 ca 12 80 00 04 16 28 02 28 00 00 00 94 04 0a 00 8a 04 50 21 40 04 0b 28 8a 00 25 01 05 00 08 b1 40 4a 00 04 50 09 50 50 22 80 94 08 50 00 82 80 00 08 a0 40 a0 02 2c 52 28 00 94 11 40 25 04 a9 48 a0 00 21 40 04 0a 09 40 Data Ascii: E@P,@aQbR PX,*PJE@(P!@%@D"I@YI@D%,"%XTP@P!@P@!@)(P@AJ%@(J Q"PP((P!@(%@JPPP"P@,R(@%H!@@
2024-05-06 16:42:36 UTC	1369	IN	Data Raw: 45 12 a5 04 52 0a 94 08 15 28 00 00 00 00 00 00 81 40 04 54 50 00 08 14 00 11 50 2a 50 04 a8 0a 00 00 00 00 00 02 05 4a 01 16 28 02 28 20 52 2a 50 20 01 40 22 91 61 40 00 12 80 45 04 52 50 82 90 a0 45 4a 00 85 08 14 8a 95 28 80 02 81 2c a4 a8 58 a0 12 80 00 01 14 4a 40 54 28 41 52 81 02 82 05 21 65 4a 40 00 a0 42 a0 01 52 c0 50 02 50 21 62 80 81 50 51 02 ca 02 01 48 14 45 95 29 00 05 01 0a 80 0a 20 14 20 28 00 4a 4a 40 54 05 41 52 80 20 52 02 91 65 4a 25 80 0a 25 42 a0 02 88 0a 08 01 40 02 51 01 50 15 05 4a 00 08 a8 00 50 08 00 28 10 a8 00 a2 01 42 0a 00 8a 00 40 2a 05 4b 05 00 12 ca 20 01 40 22 c0 0a 02 52 00 28 95 0a 08 50 00 42 80 80 a8 14 41 40 04 b0 a8 00 51 28 80 05 00 94 41 60 a0 4a 02 50 00 10 a0 21 40 45 4a 00 01 2c 2a 00 0a 4a 08 58 0a 02 51 05 Data Ascii: ER(@TPPPJ(( RP @"a@ERPEJ(,XJ@T(AR!eJ@BRPP!bPQHE) (JJ@TAR ReJ%%B@QPJP(B@K @"R(PBA@Q(A`JP!@EJ,JXQ
2024-05-06 16:42:36 UTC	1369	IN	Data Raw: 3a b5 30 5c 74 47 54 f6 ab 13 a7 42 06 64 38 80 47 6b 68 7f c1 87 64 23 8d e2 6c c8 c4 af 10 8b a7 fa 12 17 38 84 ea f1 30 b9 bd 3a e8 8d 75 1b 03 df de 89 0d 11 c9 19 6a 0c 6e 34 8e d5 1b ef b8 c0 7a 87 49 d3 9f d4 2a 7f a2 19 9e c5 01 73 12 86 b0 bf 5c d9 e4 53 c0 48 4e b9 d3 a1 d1 1f 60 43 84 d0 a6 96 e4 e5 20 1b 8d 23 b4 0b 1c a3 a2 6f f2 64 2a 78 9e a5 5a 85 24 bf d0 88 b6 17 bb dc c8 68 a1 a9 10 9b e8 0d 9a 22 02 75 0e 2e c6 03 43 a2 32 bc 4d 54 af 90 c3 c4 dd 3e 5a b6 6f 4e c6 62 58 1b 8d 23 6a 6a f3 20 e8 18 37 0f 61 d8 ab 53 28 76 9c 7e dc 4d b1 35 cc 59 0f 50 d7 d1 35 c6 51 80 86 b3 9e a8 c8 62 4f 28 da 92 07 bd 27 c5 a4 4b 97 87 c8 a0 5f 25 45 85 de 0e 42 15 a1 50 38 47 40 dc db 85 4e b1 0c d5 6a 34 97 e2 e3 ae e1 1a 9e e2 a6 b0 ec 04 50 d9 43 Data Ascii: :0\tGTBd8Gkhd#l80:ujn4zIs\SHN`C #odxZ$h"u.C2MT>ZoNbX#jj 7aS(v~M5YP5QbO('K_%EBP8G@Nj4PC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.11	49955	192.178.50.68	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:38 UTC	852	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiUocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Ld7KXUUAAAAAAknjFUvMThz44a8gU2bvUq0YFw-&co=aHR0cHM6Ly9mb3J0aXMtc2l0ZS5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=fwww2nyjhy7o Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:38 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Mon, 06 May 2024 16:42:38 GMT Date: Mon, 06 May 2024 16:42:38 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-06 16:42:38 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js');
2024-05-06 16:42:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.11	49954	192.178.50.68	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:38 UTC	840	OUT	GET /js/bg/fyCF3lmo_OYnC_9rGWUF-CeQvtOEKKrTUK_XXS1Fd1s.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiUocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Ld7KXUUAAAAAAknjFUvMThz44a8gU2bvUq0YFw-&co=aHR0cHM6Ly9mb3J0aXMtc2l0ZS5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=fwww2nyjhy7o Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:38 UTC	812	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18286 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 01 May 2024 20:11:30 GMT Expires: Thu, 01 May 2025 20:11:30 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 23 Apr 2024 17:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 419468 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-06 16:42:38 UTC	443	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 53 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 4e 29 7b 69 66 28 21 28 61 3d 28 4e 3d 55 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 6e 75 6c 6c 29 2c 4e 29 7c 7c 21 4e 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 61 3b 74 72 79 7b 61 3d 4e 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 6d 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 6d 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 6d 7d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var S=function(a,N){if(!(a=(N=U.trustedTypes,null),N)\|\|!N.createPolicy)return a;try{a=N.createPolicy("bg",{createHTML:m,createScript:m,createScriptURL:m}
2024-05-06 16:42:38 UTC	1255	IN	Data Raw: 72 65 61 74 65 53 63 72 69 70 74 28 79 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 79 29 7b 72 65 74 75 72 6e 22 22 2b 79 7d 7d 28 55 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 5b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 27 2c 0a 27 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 56 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 61 68 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 4e 2c 79 29 7b 72 65 74 75 72 6e 20 4e 2e 74 66 28 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 79 3d 6d 7d 2c 66 61 6c 73 65 2c 61 29 2c 79 7d 2c 79 55 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 4e 2c 79 2c 6d 2c 51 2c 77 29 7b Data Ascii: reateScript(y)}:function(y){return""+y}}(U)(Array(7824Math.random()\|0).join("\n")+['(function(){/','',' SPDX-License-Identifier: Apache-2.0','*/','var V=this\|\|self,ah=function(a,N,y){return N.tf(function(m){y=m},false,a),y},yU=function(a,N,y,m,Q,w){
2024-05-06 16:42:38 UTC	1255	IN	Data Raw: 29 7d 2c 28 75 28 28 75 28 66 75 6e 63 74 69 6f 6e 28 55 29 7b 48 76 28 55 2c 33 29 7d 2c 37 31 2c 28 75 28 66 75 6e 63 74 69 6f 6e 28 55 2c 53 2c 43 29 7b 30 21 3d 5a 28 55 2c 28 53 3d 5a 28 55 2c 28 43 3d 63 28 55 29 2c 53 3d 63 28 55 29 2c 53 29 29 2c 43 29 29 26 26 57 28 31 33 31 2c 55 2c 53 29 7d 2c 28 28 75 28 66 75 6e 63 74 69 6f 6e 28 55 2c 53 2c 43 29 7b 28 53 3d 5a 28 55 2c 28 43 3d 28 53 3d 63 28 55 29 2c 63 28 55 29 29 2c 53 29 29 2c 53 3d 73 70 28 53 29 2c 57 29 28 43 2c 55 2c 53 29 7d 2c 33 34 37 2c 28 57 28 33 33 35 2c 61 2c 28 57 28 32 32 33 2c 61 2c 28 57 28 33 31 35 2c 61 2c 28 57 28 28 28 75 28 28 75 28 66 75 6e 63 74 69 6f 6e 28 55 2c 53 2c 43 29 7b 67 28 66 61 6c 73 65 2c 74 72 75 65 2c 55 2c 53 29 7c 7c 28 53 3d 63 28 55 29 2c 43 3d Data Ascii: )},(u((u(function(U){Hv(U,3)},71,(u(function(U,S,C){0!=Z(U,(S=Z(U,(C=c(U),S=c(U),S)),C))&&W(131,U,S)},((u(function(U,S,C){(S=Z(U,(C=(S=c(U),c(U)),S)),S=sp(S),W)(C,U,S)},347,(W(335,a,(W(223,a,(W(315,a,(W(((u((u(function(U,S,C){g(false,true,U,S)\|\|(S=c(U),C=
2024-05-06 16:42:38 UTC	1255	IN	Data Raw: 28 55 29 7b 4a 52 28 31 2c 55 29 7d 2c 28 28 75 28 66 75 6e 63 74 69 6f 6e 28 55 2c 53 2c 43 2c 59 2c 45 2c 4a 29 7b 67 28 66 61 6c 73 65 2c 74 72 75 65 2c 55 2c 53 29 7c 7c 28 59 3d 45 70 28 55 2e 55 29 2c 4a 3d 59 2e 6f 2c 43 3d 59 2e 43 79 2c 53 3d 59 2e 42 72 2c 59 3d 59 2e 5a 78 2c 45 3d 4a 2e 6c 65 6e 67 74 68 2c 4a 3d 30 3d 3d 45 3f 6e 65 77 20 59 5b 43 5d 3a 31 3d 3d 45 3f 6e 65 77 20 59 5b 43 5d 28 4a 5b 30 5d 29 3a 32 3d 3d 45 3f 6e 65 77 20 59 5b 43 5d 28 4a 5b 30 5d 2c 4a 5b 31 5d 29 3a 33 3d 3d 45 3f 6e 65 77 20 59 5b 43 5d 28 4a 5b 30 5d 2c 4a 5b 31 5d 2c 4a 5b 32 5d 29 3a 34 3d 3d 45 3f 6e 65 77 20 59 5b 43 5d 28 4a 5b 30 5d 2c 4a 5b 31 5d 2c 4a 5b 32 5d 2c 4a 5b 33 5d 29 3a 32 28 29 2c 57 28 53 2c 55 2c 4a 29 29 7d 2c 28 57 28 31 39 33 2c Data Ascii: (U){JR(1,U)},((u(function(U,S,C,Y,E,J){g(false,true,U,S)\|\|(Y=Ep(U.U),J=Y.o,C=Y.Cy,S=Y.Br,Y=Y.Zx,E=J.length,J=0==E?new Y[C]:1==E?new Y[C](J[0]):2==E?new Y[C](J[0],J[1]):3==E?new Y[C](J[0],J[1],J[2]):4==E?new Y[C](J[0],J[1],J[2],J[3]):2(),W(S,U,J))},(W(193,
2024-05-06 16:42:38 UTC	1255	IN	Data Raw: 3d 28 61 2e 59 3d 30 2c 79 29 2c 61 29 2e 6c 6f 3d 66 61 6c 73 65 2c 61 2e 73 3d 28 61 2e 55 49 3d 30 2c 61 2e 46 3d 76 6f 69 64 20 30 2c 61 2e 58 3d 76 6f 69 64 20 30 2c 28 61 2e 4a 3d 66 61 6c 73 65 2c 61 29 2e 44 3d 30 2c 28 61 2e 52 3d 76 6f 69 64 20 30 2c 61 29 2e 6c 3d 30 2c 5b 5d 29 2c 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 7c 7c 7b 7d 29 2c 61 29 2e 62 6f 3d 79 2e 74 69 6d 65 4f 72 69 67 69 6e 7c 7c 28 79 2e 74 69 6d 69 6e 67 7c 7c 7b 7d 29 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 7c 7c 30 2c 61 29 2c 30 29 2c 61 29 2c 30 29 2c 66 75 6e 63 74 69 6f 6e 28 55 2c 53 29 7b 53 3d 5a 28 55 2c 63 28 55 29 29 2c 59 62 28 53 2c 55 2e 55 29 7d 29 2c 31 36 33 2c 61 29 2c 33 39 34 29 2c 61 29 2c 34 30 33 29 2c 61 2c 42 28 34 29 29 2c 61 Data Ascii: =(a.Y=0,y),a).lo=false,a.s=(a.UI=0,a.F=void 0,a.X=void 0,(a.J=false,a).D=0,(a.R=void 0,a).l=0,[]),window.performance\|\|{}),a).bo=y.timeOrigin\|\|(y.timing\|\|{}).navigationStart\|\|0,a),0),a),0),function(U,S){S=Z(U,c(U)),Yb(S,U.U)}),163,a),394),a),403),a,B(4)),a
2024-05-06 16:42:38 UTC	1255	IN	Data Raw: 29 29 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 72 65 74 75 72 6e 21 28 28 57 28 31 33 31 2c 28 61 3d 28 79 2e 65 59 3d 6d 2c 5a 28 79 2c 4e 3f 32 33 37 3a 31 33 31 29 29 2c 79 29 2c 79 2e 6c 29 2c 79 29 2e 53 2e 70 75 73 68 28 5b 5a 49 2c 61 2c 4e 3f 6d 2b 31 3a 6d 2c 79 2e 4e 2c 79 2e 4a 2c 79 2e 4b 2c 79 2e 47 5d 29 2c 79 2e 57 3d 42 76 2c 30 29 7d 2c 74 52 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 4e 2c 79 2c 6d 29 7b 72 65 74 75 72 6e 20 5a 28 61 2c 28 57 28 31 33 31 2c 61 2c 28 62 58 28 79 2c 28 28 6d 3d 5a 28 61 2c 31 33 31 29 2c 61 2e 49 26 26 6d 3c 61 2e 6c 29 3f 28 57 28 31 33 31 2c 61 2c 61 2e 6c 29 2c 59 62 28 4e 2c 61 29 29 3a 57 28 31 33 31 2c 61 2c 4e 29 2c 61 29 29 2c 6d 29 29 2c 33 31 35 29 29 7d 2c 44 3d 7b 70 61 73 73 69 76 65 3a 74 72 75 65 2c Data Ascii: ))return false;return!((W(131,(a=(y.eY=m,Z(y,N?237:131)),y),y.l),y).S.push([ZI,a,N?m+1:m,y.N,y.J,y.K,y.G]),y.W=Bv,0)},tR=function(a,N,y,m){return Z(a,(W(131,a,(bX(y,((m=Z(a,131),a.I&&m<a.l)?(W(131,a,a.l),Yb(N,a)):W(131,a,N),a)),m)),315))},D={passive:true,
2024-05-06 16:42:38 UTC	1255	IN	Data Raw: 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 26 26 21 61 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 28 22 63 61 6c 6c 22 29 29 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 7d 65 6c 73 65 20 72 65 74 75 72 6e 22 6e 75 6c 6c 22 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 4e 26 26 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 61 2e 63 61 6c 6c 29 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3b 72 65 74 75 72 6e 20 4e 7d 2c 72 78 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 4e 29 7b 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 74 68 69 73 2e 69 3d 28 74 68 69 73 2e 6e 3d 30 2c 5b 5d 29 7d 72 65 74 75 72 6e 5b 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 28 61 2e 46 78 28 6d 29 2c 4e 29 2e 46 78 28 6d 29 7d 2c 28 4e 3d 6e 65 77 20 Data Ascii: rtyIsEnumerable&&!a.propertyIsEnumerable("call"))return"function"}else return"null";else if("function"==N&&"undefined"==typeof a.call)return"object";return N},rx=function(a,N){function y(){this.i=(this.n=0,[])}return[function(m){(a.Fx(m),N).Fx(m)},(N=new
2024-05-06 16:42:38 UTC	1255	IN	Data Raw: 72 3a 4e 2c 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 3a 4e 2c 63 61 6c 6c 3a 4e 7d 29 7d 2c 4a 52 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 4e 2c 79 2c 6d 29 7b 71 28 28 6d 3d 28 79 3d 63 28 4e 29 2c 63 28 4e 29 29 2c 6d 29 2c 64 28 5a 28 4e 2c 79 29 2c 61 29 2c 4e 29 7d 2c 59 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 4e 29 7b 31 30 34 3c 4e 2e 73 2e 6c 65 6e 67 74 68 3f 4c 28 4e 2c 30 2c 5b 47 2c 33 36 5d 29 3a 28 4e 2e 73 2e 70 75 73 68 28 4e 2e 76 2e 73 6c 69 63 65 28 29 29 2c 4e 2e 76 5b 31 33 31 5d 3d 76 6f 69 64 20 30 2c 57 28 31 33 31 2c 4e 2c 61 29 29 7d 2c 55 70 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 4e 2c 79 2c 6d 2c 51 29 7b 69 66 28 6d 3d 4e 5b 30 5d 2c 6d 3d 3d 6e 34 29 61 2e 53 59 3d 32 35 2c 61 2e 4a 3d 74 72 75 65 2c 61 2e 6a 28 4e Data Ascii: r:N,propertyIsEnumerable:N,call:N})},JR=function(a,N,y,m){q((m=(y=c(N),c(N)),m),d(Z(N,y),a),N)},Yb=function(a,N){104<N.s.length?L(N,0,[G,36]):(N.s.push(N.v.slice()),N.v[131]=void 0,W(131,N,a))},Up=function(a,N,y,m,Q){if(m=N[0],m==n4)a.SY=25,a.J=true,a.j(N
2024-05-06 16:42:38 UTC	1255	IN	Data Raw: 61 5d 3d 68 52 28 4e 2c 79 2c 61 2c 31 33 34 29 29 3a 4e 2e 76 5b 61 5d 3d 68 52 28 4e 2c 79 2c 61 2c 38 31 29 7d 31 38 3d 3d 61 26 26 28 4e 2e 52 3d 50 28 66 61 6c 73 65 2c 4e 2c 33 32 29 2c 4e 2e 42 3d 76 6f 69 64 20 30 29 7d 2c 52 68 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 2c 45 70 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 4e 2c 79 2c 6d 2c 51 2c 77 29 7b 66 6f 72 28 51 3d 28 77 3d 28 79 3d 28 28 28 6d 3d 28 4e 3d 61 5b 41 52 5d 7c 7c 7b 7d 2c 63 29 28 61 29 2c 4e 29 2e 42 72 3d 63 28 61 29 2c 4e 29 2e 6f 3d 5b 5d 2c 61 2e 55 3d 3d 61 3f 28 4b 28 61 29 7c 30 29 2d 31 3a 31 29 2c 63 28 61 29 29 2c 30 29 3b 51 3c 79 3b 51 2b 2b 29 4e 2e 6f 2e 70 75 73 68 28 63 28 61 29 29 3b 66 6f 72 28 4e 2e 5a 78 3d 5a 28 61 2c 77 29 3b 79 2d 2d 3b Data Ascii: a]=hR(N,y,a,134)):N.v[a]=hR(N,y,a,81)}18==a&&(N.R=P(false,N,32),N.B=void 0)},Rh=function(a){return a},Ep=function(a,N,y,m,Q,w){for(Q=(w=(y=(((m=(N=a[AR]\|\|{},c)(a),N).Br=c(a),N).o=[],a.U==a?(K(a)\|0)-1:1),c(a)),0);Q<y;Q++)N.o.push(c(a));for(N.Zx=Z(a,w);y--;
2024-05-06 16:42:38 UTC	1255	IN	Data Raw: 68 7c 30 29 2b 33 2c 4f 70 28 4e 29 29 2c 61 29 2e 55 2c 61 2e 55 3d 61 3b 74 72 79 7b 71 28 32 31 37 2c 5b 39 35 5d 2c 61 29 2c 71 28 31 37 35 2c 64 28 4e 2e 6c 65 6e 67 74 68 2c 32 29 2e 63 6f 6e 63 61 74 28 4e 29 2c 61 2c 39 29 7d 66 69 6e 61 6c 6c 79 7b 61 2e 55 3d 79 7d 7d 7d 2c 68 52 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 4e 2c 79 2c 6d 2c 51 2c 77 2c 76 2c 55 29 7b 72 65 74 75 72 6e 28 28 55 3d 28 51 3d 28 76 3d 6d 26 37 2c 63 76 29 2c 4e 3d 5b 2d 39 31 2c 2d 32 2c 2d 37 35 2c 2d 33 36 2c 37 38 2c 36 37 2c 4e 2c 35 35 2c 2d 39 31 2c 37 5d 2c 74 5b 61 2e 43 5d 28 61 2e 6d 4f 29 29 2c 55 29 5b 61 2e 43 5d 3d 66 75 6e 63 74 69 6f 6e 28 53 29 7b 76 2b 3d 36 2b 37 2a 6d 2c 77 3d 53 2c 76 26 3d 37 7d 2c 55 29 2e 63 6f 6e 63 61 74 3d 66 75 6e 63 74 69 6f 6e Data Ascii: h\|0)+3,Op(N)),a).U,a.U=a;try{q(217,[95],a),q(175,d(N.length,2).concat(N),a,9)}finally{a.U=y}}},hR=function(a,N,y,m,Q,w,v,U){return((U=(Q=(v=m&7,cv),N=[-91,-2,-75,-36,78,67,N,55,-91,7],t[a.C](a.mO)),U)[a.C]=function(S){v+=6+7*m,w=S,v&=7},U).concat=function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.11	49958	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:38 UTC	730	OUT	GET /wp-content/uploads/2018/10/cropped-identity-32x32.png HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.942134464.1715013754; _gid=GA1.2.1562157020.1715013754; _gat_gtag_UA_127514612_1=1
2024-05-06 16:42:39 UTC	733	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:39 GMT Content-Type: image/png Content-Length: 368 Connection: close Last-Modified: Thu, 04 Oct 2018 21:17:34 GMT ETag: "5bb6836e-170" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8wKsBHl0D%2Bcm1KZXRSpXZ5mlkqDYKTr0G2a7QtK4HDYLC3b2VULShXrUn7qHdWy4Yvw0RgKYT7OAJwLjUdfgYqbbiUX7uctUVS3mh9YK5ydZR%2BrdFVEgQX2X9xTFXIYRJC8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6cba0b9d7424-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:39 UTC	368	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 03 00 00 00 44 a4 8a c6 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 45 50 4c 54 45 47 70 4c 76 0e 08 76 0e 08 76 0e 08 76 0c 06 76 0e 08 76 0e 08 76 0e 08 76 0e 08 76 0e 08 76 0e 08 76 0e 08 76 0e 08 76 0e 08 76 0e 08 76 0e 08 76 0e 08 76 0e 08 76 0e 08 76 0e 08 76 0e 08 76 0e 08 76 0e 08 72 08 8f 70 00 00 00 16 74 52 4e 53 00 3b b2 66 06 a6 49 f9 99 62 f3 25 e2 11 40 6f 8e 57 d0 16 c2 bb f6 b0 2d c0 00 00 00 a7 49 44 41 54 38 cb e5 93 49 12 83 20 10 45 41 20 cc 08 0e dc ff a8 61 28 62 2b e2 2e d9 e4 ad c0 ff aa ed ee 2a 10 fa 29 56 4b 2f 20 5e 9f 62 39 a9 78 86 63 90 e3 9d f3 4b 1e 15 10 82 e9 e2 24 b8 16 d3 60 e2 0d 47 05 5c 73 Data Ascii: PNGIHDR DgAMAasRGBEPLTEGpLvvvvvvvvvvvvvvvvvvvvvvrptRNS;fIb%@oW-IDAT8I EA a(b+.*)VK/ ^b9xcK$`G\s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.11	49959	192.178.50.68	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:39 UTC	866	OUT	GET /recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6Ld7KXUUAAAAAAknjFUvMThz44a8gU2bvUq0YFw- HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiUocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:39 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 06 May 2024 16:42:39 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-U2ThpA7D4hLtW5XVVpCtzw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-06 16:42:39 UTC	364	IN	Data Raw: 31 64 31 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d14<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-05-06 16:42:39 UTC	1255	IN	Data Raw: 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e Data Ascii: v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fon
2024-05-06 16:42:39 UTC	1255	IN	Data Raw: 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 Data Ascii: 20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E0
2024-05-06 16:42:39 UTC	1255	IN	Data Raw: 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b Data Ascii: U+04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-05-06 16:42:39 UTC	1255	IN	Data Raw: 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b Data Ascii: ce { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+
2024-05-06 16:42:39 UTC	1255	IN	Data Raw: 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: tic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight
2024-05-06 16:42:39 UTC	813	IN	Data Raw: 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 55 32 54 68 70 41 37 44 34 68 4c 74 57 35 58 56 56 70 43 74 7a 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f Data Ascii: }</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css"><script nonce="U2ThpA7D4hLtW5XVVpCtzw" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.co
2024-05-06 16:42:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.11	49960	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:39 UTC	494	OUT	GET /wp-content/uploads/2018/10/cropped-identity-32x32.png HTTP/1.1 Host: fortis-site.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.942134464.1715013754; _gid=GA1.2.1562157020.1715013754; _gat_gtag_UA_127514612_1=1
2024-05-06 16:42:39 UTC	748	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:39 GMT Content-Type: image/png Content-Length: 368 Connection: close Last-Modified: Thu, 04 Oct 2018 21:17:34 GMT ETag: "5bb6836e-170" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 0 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n3bfGhpl2F4NfC0oASBlTVil%2BuUKFVeF9n8M%2Fl%2BKr5ktVKYaZ6Rh%2Bb9ZfDpIiUsX4KH3pZSG5fl0wXufzE1wuq87sTIq78HrGtUrWBrd8FjMlclufaWVRQTyC%2Btksenn%2B4Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6cbdda3967da-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:42:39 UTC	368	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 03 00 00 00 44 a4 8a c6 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 45 50 4c 54 45 47 70 4c 76 0e 08 76 0e 08 76 0e 08 76 0c 06 76 0e 08 76 0e 08 76 0e 08 76 0e 08 76 0e 08 76 0e 08 76 0e 08 76 0e 08 76 0e 08 76 0e 08 76 0e 08 76 0e 08 76 0e 08 76 0e 08 76 0e 08 76 0e 08 76 0e 08 76 0e 08 72 08 8f 70 00 00 00 16 74 52 4e 53 00 3b b2 66 06 a6 49 f9 99 62 f3 25 e2 11 40 6f 8e 57 d0 16 c2 bb f6 b0 2d c0 00 00 00 a7 49 44 41 54 38 cb e5 93 49 12 83 20 10 45 41 20 cc 08 0e dc ff a8 61 28 62 2b e2 2e d9 e4 ad c0 ff aa ed ee 2a 10 fa 29 56 4b 2f 20 5e 9f 62 39 a9 78 86 63 90 e3 9d f3 4b 1e 15 10 82 e9 e2 24 b8 16 d3 60 e2 0d 47 05 5c 73 Data Ascii: PNGIHDR DgAMAasRGBEPLTEGpLvvvvvvvvvvvvvvvvvvvvvvrptRNS;fIb%@oW-IDAT8I EA a(b+.*)VK/ ^b9xcK$`G\s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.11	49961	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:40 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=vGNs1atD4sWEptG&MD=6odxzlER HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-05-06 16:42:41 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: 71081241-1ca2-4d54-91b6-f22c98a7ef1a MS-RequestId: 95833724-5089-4795-b333-6a3cf9cb06c3 MS-CV: FB5GT7B6DkOM480A.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 06 May 2024 16:42:40 GMT Connection: close Content-Length: 25457
2024-05-06 16:42:41 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-05-06 16:42:41 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.11	49963	3.217.205.239	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:49 UTC	750	OUT	GET /catalog HTTP/1.1 Host: rmshg.amplified.training Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; login_token=153a9a8f304880470316f98fd745653f
2024-05-06 16:42:49 UTC	558	IN	HTTP/1.1 200 OK date: Mon, 06 May 2024 16:42:49 GMT content-type: text/html; charset=utf-8 transfer-encoding: chunked server: Apache expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache set-cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; expires=Mon, 06-May-2024 19:42:49 GMT; Max-Age=10800; path=/; secure; HttpOnly; SameSite=None x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000; includeSubDomains; preload; connection: close
2024-05-06 16:42:49 UTC	8466	IN	Data Raw: 32 31 30 41 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 77 65 62 73 69 74 65 22 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 72 6d 73 68 67 22 2f 3e 0a 09 09 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 52 4d 53 48 47 20 26 61 6d 70 3b 20 46 72 61 6e 63 68 69 73 65 20 53 65 6c 65 63 74 20 54 72 61 69 6e 69 6e 67 20 50 6f 72 74 61 6c 22 2f 3e 0a 09 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 Data Ascii: 210A<!DOCTYPE html><html lang="en"><head><meta property="og:type" content="website"/><meta property="og:site_name" content="rmshg"/><meta property="og:title" content="RMSHG & Franchise Select Training Portal"/><meta property="og:image"
2024-05-06 16:42:49 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 20 68 72 65 66 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 76 6f 69 64 28 30 29 22 20 64 61 74 61 2d 73 65 6c 65 63 74 2d 73 74 61 74 65 3d 22 61 75 74 68 5f 66 6f 72 6d 5f 76 69 65 77 3a 6c 6f 67 69 6e 22 3e 0a 09 09 09 09 09 4c 6f 67 20 69 6e 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 77 69 74 68 20 79 6f 75 72 20 63 72 65 64 65 6e 74 69 61 6c 73 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 3c 2f 66 6f 72 6d 3e 09 09 3c 2f 64 69 76 3e 0a 09 3c 2f 64 69 76 3e 0a 0a 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 24 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 27 73 74 61 74 65 3a 63 68 61 6e 67 65 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 2c 20 64 61 74 61 29 7b 0a 09 09 76 61 72 20 73 74 61 74 65 53 63 Data Ascii: 3FB8 href="javascript:void(0)" data-select-state="auth_form_view:login">Log in</a>with your credentials</div></form></div></div><script type="text/javascript">$(document).on('state:change', function(e, data){var stateSc
2024-05-06 16:42:49 UTC	1307	IN	Data Raw: 35 31 34 0d 0a 6c 2d 63 61 74 61 6c 6f 67 2d 77 69 64 65 5f 6d 61 69 6e 20 61 6e 69 6d 61 74 65 64 20 66 61 64 65 49 6e 22 3e 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6f 75 74 74 65 72 2d 74 61 62 6c 65 2d 77 72 61 70 70 65 72 22 3e 0a 09 09 3c 74 61 62 6c 65 20 69 64 3d 22 67 72 69 64 5f 63 6f 75 72 73 65 5f 63 61 74 61 6c 6f 67 22 20 63 6c 61 73 73 3d 22 74 61 62 6c 65 20 67 72 69 64 2d 73 74 72 69 70 65 64 20 22 20 63 65 6c 6c 70 61 64 64 69 6e 67 3d 22 30 22 20 63 65 6c 6c 73 70 61 63 69 6e 67 3d 22 30 22 20 62 6f 72 64 65 72 3d 22 30 22 3e 0a 09 09 09 3c 74 68 65 61 64 3e 0a 09 09 09 09 3c 74 72 3e 3c 74 68 3e 3c 2f 74 68 3e 3c 74 68 3e 3c 2f 74 68 3e 3c 74 68 3e 3c 2f 74 68 3e 3c 74 68 3e 3c 2f 74 68 3e 3c 74 68 3e 43 6f 75 72 73 65 3c 2f 74 68 3e Data Ascii: 514l-catalog-wide_main animated fadeIn"><div class="outter-table-wrapper"><table id="grid_course_catalog" class="table grid-striped " cellpadding="0" cellspacing="0" border="0"><thead><tr><th></th><th></th><th></th><th></th><th>Course</th>
2024-05-06 16:42:49 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 76 20 63 6c 61 73 73 3d 22 73 70 61 6e 31 20 63 61 74 61 6c 6f 67 5f 63 6f 75 72 73 65 5f 61 76 61 74 61 72 20 74 65 78 74 2d 63 65 6e 74 65 72 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 6d 73 68 67 2e 61 6d 70 6c 69 66 69 65 64 2e 74 72 61 69 6e 69 6e 67 2f 63 61 74 61 6c 6f 67 2f 69 6e 66 6f 2f 69 64 3a 31 32 35 22 20 3e 3c 69 6d 67 20 63 6c 61 73 73 3d 22 74 6c 2d 63 61 74 61 6c 6f 67 2d 63 6f 75 72 73 65 2d 61 76 61 74 61 72 2d 69 6d 61 67 65 20 61 76 61 74 61 72 2d 73 71 75 61 72 65 20 74 6c 2d 63 6f 75 72 73 65 2d 61 76 61 74 61 72 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 33 6a 30 74 37 76 72 74 72 39 32 64 6b 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 72 6d 73 68 67 2f 31 35 37 36 30 38 39 34 38 39 5f Data Ascii: 3FC0v class="span1 catalog_course_avatar text-center"><a href="https://rmshg.amplified.training/catalog/info/id:125" ><img class="tl-catalog-course-avatar-image avatar-square tl-course-avatar" src="https://d3j0t7vrtr92dk.cloudfront.net/rmshg/1576089489_
2024-05-06 16:42:49 UTC	1585	IN	Data Raw: 36 32 41 0d 0a 61 6c 20 26 6c 74 3b 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 74 6c 2d 63 61 74 65 67 6f 72 79 2d 63 6f 75 72 73 65 73 2d 63 6f 75 6e 74 5c 22 26 67 74 3b 28 35 29 26 6c 74 3b 5c 2f 73 70 61 6e 26 67 74 3b 22 2c 22 74 6f 6f 6c 74 69 70 22 3a 22 47 65 6e 65 72 61 6c 20 28 35 29 22 2c 22 66 75 6c 6c 74 69 74 6c 65 22 3a 22 47 65 6e 65 72 61 6c 20 26 6c 74 3b 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 74 6c 2d 63 61 74 65 67 6f 72 79 2d 63 6f 75 72 73 65 73 2d 63 6f 75 6e 74 5c 22 26 67 74 3b 28 35 29 26 6c 74 3b 5c 2f 73 70 61 6e 26 67 74 3b 22 2c 22 74 79 70 65 22 3a 22 63 61 74 65 67 6f 72 69 65 73 22 2c 22 69 63 6f 6e 22 3a 66 61 6c 73 65 2c 22 65 78 70 61 6e 64 22 3a 74 72 75 65 7d 5d 3c 2f 64 69 76 3e 0a 09 3c 64 69 76 20 64 61 74 61 2d 6c 6f Data Ascii: 62Aal <span class=\"tl-category-courses-count\">(5)<\/span>","tooltip":"General (5)","fulltitle":"General <span class=\"tl-category-courses-count\">(5)<\/span>","type":"categories","icon":false,"expand":true}]</div><div data-lo
2024-05-06 16:42:49 UTC	14756	IN	Data Raw: 32 32 45 44 0d 0a 20 20 76 61 72 20 74 79 70 65 4f 66 42 75 6e 64 6c 65 20 3d 20 24 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 27 74 6c 2d 62 75 6e 64 6c 65 2d 63 61 74 65 67 6f 72 79 27 29 20 3f 20 22 63 61 74 65 67 6f 72 79 22 20 3a 20 22 67 72 6f 75 70 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 62 75 6e 64 6c 65 49 64 20 3d 20 24 28 74 68 69 73 29 2e 64 61 74 61 28 27 69 64 27 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 09 09 7d 29 3b 0a 0a 09 09 24 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 27 6d 6f 75 73 65 6c 65 61 76 65 27 2c 20 27 2e 74 6c 2d 62 75 6e 64 6c 65 2d 74 69 74 6c 65 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 Data Ascii: 22ED var typeOfBundle = $(this).hasClass('tl-bundle-category') ? "category" : "group"; var bundleId = $(this).data('id'); }});$(document).on('mouseleave', '.tl-bundle-title', function(){ i
2024-05-06 16:42:49 UTC	43	IN	Data Raw: 6e 20 28 70 6e 6f 64 65 29 20 7b 0a 09 09 09 09 09 09 09 09 09 69 66 28 70 6e 6f 64 65 2e 64 61 74 61 2e 6b 65 79 20 21 3d 0d 0a Data Ascii: n (pnode) {if(pnode.data.key !=
2024-05-06 16:42:49 UTC	10494	IN	Data Raw: 32 38 46 36 0d 0a 20 22 5f 31 22 29 7b 0a 09 09 09 09 09 09 09 09 09 09 70 6e 6f 64 65 2e 64 61 74 61 2e 61 64 64 43 6c 61 73 73 20 3d 20 22 63 6f 75 72 73 65 5f 63 61 74 61 6c 6f 67 5f 63 61 74 65 67 6f 72 79 22 3b 0a 09 09 09 09 09 09 09 09 09 09 24 28 22 23 64 79 6e 61 74 72 65 65 2d 69 64 2d 22 20 2b 20 70 6e 6f 64 65 2e 64 61 74 61 2e 6b 65 79 29 2e 73 68 6f 77 28 29 3b 0a 0a 09 09 09 09 09 09 09 09 09 09 69 66 28 70 6e 6f 64 65 2e 64 61 74 61 2e 6b 65 79 20 69 6e 20 63 6f 75 72 73 65 73 50 65 72 43 61 74 65 67 6f 72 79 29 7b 0a 09 09 09 09 09 09 09 09 09 09 09 63 6f 75 72 73 65 73 50 65 72 43 61 74 65 67 6f 72 79 5b 70 6e 6f 64 65 2e 64 61 74 61 2e 6b 65 79 5d 20 2b 3d 20 63 6f 75 72 73 65 73 50 65 72 43 61 74 65 67 6f 72 79 5b 64 74 6e 6f 64 65 2e Data Ascii: 28F6 "_1"){pnode.data.addClass = "course_catalog_category";$("#dynatree-id-" + pnode.data.key).show();if(pnode.data.key in coursesPerCategory){coursesPerCategory[pnode.data.key] += coursesPerCategory[dtnode.
2024-05-06 16:42:49 UTC	2259	IN	Data Raw: 38 43 37 0d 0a 74 65 27 3b 0a 09 6d 79 70 6f 72 74 61 6c 2e 61 70 70 2e 74 72 61 6e 73 6c 61 74 69 6f 6e 73 5b 27 65 78 70 69 72 61 74 69 6f 6e 2d 64 61 74 65 27 5d 20 3d 20 27 45 78 70 69 72 61 74 69 6f 6e 20 64 61 74 65 27 3b 0a 09 6d 79 70 6f 72 74 61 6c 2e 61 70 70 2e 74 72 61 6e 73 6c 61 74 69 6f 6e 73 5b 27 74 69 6d 65 2d 6c 69 6d 69 74 27 5d 20 3d 20 27 54 69 6d 65 20 6c 69 6d 69 74 27 3b 0a 09 6d 79 70 6f 72 74 61 6c 2e 61 70 70 2e 74 72 61 6e 73 6c 61 74 69 6f 6e 73 5b 27 73 74 61 72 74 2d 64 61 74 65 2d 61 6e 64 2d 74 69 6d 65 2d 6c 69 6d 69 74 27 5d 20 3d 20 27 53 74 61 72 74 20 64 61 74 65 20 26 20 54 69 6d 65 20 6c 69 6d 69 74 27 3b 0a 09 6d 79 70 6f 72 74 61 6c 2e 61 70 70 2e 74 72 61 6e 73 6c 61 74 69 6f 6e 73 5b 27 64 74 61 62 6c 65 2d 65 Data Ascii: 8C7te';myportal.app.translations['expiration-date'] = 'Expiration date';myportal.app.translations['time-limit'] = 'Time limit';myportal.app.translations['start-date-and-time-limit'] = 'Start date & Time limit';myportal.app.translations['dtable-e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.11	49964	3.217.205.239	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:49 UTC	696	OUT	GET /index/css/fmt:1714566301,tn:51,tv:5,ct:1,rtl:0 HTTP/1.1 Host: rmshg.amplified.training Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://rmshg.amplified.training/catalog Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; login_token=153a9a8f304880470316f98fd745653f
2024-05-06 16:42:49 UTC	601	IN	HTTP/1.1 200 OK date: Mon, 06 May 2024 16:42:49 GMT content-type: text/css;charset=UTF-8 transfer-encoding: chunked server: Apache x-content-type-options: nosniff x-xss-protection: 1; mode=block expires: Mon, 20 May 2024 16:42:49 GMT cache-control: no-store, no-cache, must-revalidate, max-age=0 pragma: no-cache set-cookie: PHPSESSID=elb~4ivebv0bm3d66s8r6pkjd49284; expires=Mon, 06-May-2024 19:42:49 GMT; Max-Age=10800; path=/; secure; HttpOnly; SameSite=None vary: Accept-Encoding,User-Agent strict-transport-security: max-age=31536000; includeSubDomains; preload; connection: close
2024-05-06 16:42:49 UTC	8446	IN	Data Raw: 32 30 46 36 0d 0a 61 72 74 69 63 6c 65 2c 20 61 73 69 64 65 2c 20 64 65 74 61 69 6c 73 2c 20 66 69 67 63 61 70 74 69 6f 6e 2c 20 66 69 67 75 72 65 2c 20 66 6f 6f 74 65 72 2c 20 68 65 61 64 65 72 2c 20 68 67 72 6f 75 70 2c 20 6e 61 76 2c 20 73 65 63 74 69 6f 6e 20 7b 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 20 7d 0a 61 75 64 69 6f 2c 20 63 61 6e 76 61 73 2c 20 76 69 64 65 6f 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 2a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 0a 20 20 2a 7a 6f 6f 6d 3a 31 3b 0a 7d 0a 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 20 7b 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 7d 0a 68 74 6d 6c 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 0a 20 20 2d 77 Data Ascii: 20F6article, aside, details, figcaption, figure, footer, header, hgroup, nav, section { display:block; }audio, canvas, video { display:inline-block; display:inline; zoom:1;}audio:not([controls]) { display:none; }html { font-size:100%; -w
2024-05-06 16:42:50 UTC	16322	IN	Data Raw: 33 46 42 41 0d 0a 6f 6e 74 61 69 6e 65 72 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 22 22 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 0a 7d 0a 2e 63 6f 6e 74 61 69 6e 65 72 3a 61 66 74 65 72 20 7b 20 63 6c 65 61 72 3a 62 6f 74 68 3b 20 7d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 38 30 70 78 29 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 31 30 70 78 20 31 30 70 78 3b 0a 7d 0a 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 30 70 78 3b 0a 20 20 2a 7a 6f 6f 6d 3a 31 3b 0a 7d 0a 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 Data Ascii: 3FBAontainer:after { display:table; content:""; line-height:0;}.container:after { clear:both; }@media screen and (max-width: 480px) { padding:10px 10px;}.container-fluid { padding-right:10px; padding-left:10px; *zoom:1;}.container-f
2024-05-06 16:42:50 UTC	1585	IN	Data Raw: 36 32 41 0d 0a 3b 20 7d 0a 2e 68 65 6c 70 2d 62 6c 6f 63 6b 2c 20 2e 68 65 6c 70 2d 69 6e 6c 69 6e 65 20 7b 20 63 6f 6c 6f 72 3a 23 32 36 32 36 32 36 3b 20 7d 0a 2e 68 65 6c 70 2d 62 6c 6f 63 6b 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 39 70 78 3b 0a 7d 0a 2e 68 65 6c 70 2d 69 6e 6c 69 6e 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 2a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 0a 20 20 2a 7a 6f 6f 6d 3a 31 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 35 70 78 3b 0a 7d 0a 2e 69 6e 70 75 74 2d 61 70 70 65 6e 64 2c 20 2e 69 6e 70 75 74 2d 70 72 65 70 65 6e 64 20 7b Data Ascii: 62A; }.help-block, .help-inline { color:#262626; }.help-block { display:block; margin-bottom:9px;}.help-inline { display:inline-block; display:inline; zoom:1; vertical-align:middle; padding-left:5px;}.input-append, .input-prepend {
2024-05-06 16:42:50 UTC	8957	IN	Data Raw: 32 32 46 35 0d 0a 67 6c 65 2c 20 2e 69 6e 70 75 74 2d 70 72 65 70 65 6e 64 20 2e 61 64 64 2d 6f 6e 2c 20 2e 69 6e 70 75 74 2d 70 72 65 70 65 6e 64 20 2e 62 74 6e 2c 20 2e 69 6e 70 75 74 2d 70 72 65 70 65 6e 64 20 2e 62 74 6e 2d 67 72 6f 75 70 20 3e 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 20 7b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 0a 20 20 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 0a 7d 0a 2e 69 6e 70 75 74 2d 61 70 70 65 6e 64 20 2e 61 63 74 69 76 65 2c 20 2e 69 6e 70 75 74 2d 70 72 65 70 65 6e 64 20 2e 61 63 74 69 76 65 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 Data Ascii: 22F5gle, .input-prepend .add-on, .input-prepend .btn, .input-prepend .btn-group > .dropdown-toggle { vertical-align:top; -webkit-border-radius:0; -moz-border-radius:0; border-radius:0;}.input-append .active, .input-prepend .active { backgrou
2024-05-06 16:42:50 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 3b 0a 20 20 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 62 6f 74 74 6f 6d 72 69 67 68 74 3a 30 3b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 3b 0a 7d 0a 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 20 63 61 70 74 69 6f 6e 20 2b 20 74 68 65 61 64 20 74 72 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 74 68 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 20 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 20 63 61 70 74 69 6f 6e 20 2b 20 74 62 6f 64 79 20 74 72 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 74 64 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 20 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 20 63 Data Ascii: 3FB8ebkit-border-bottom-right-radius:0; -moz-border-radius-bottomright:0; border-bottom-right-radius:0;}.table-bordered caption + thead tr:first-child th:first-child, .table-bordered caption + tbody tr:first-child td:first-child, .table-bordered c
2024-05-06 16:42:50 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 6e 64 2d 63 6f 6c 6f 72 3a 23 39 34 32 61 32 35 20 5c 39 3b 20 7d 0a 2e 62 74 6e 2d 73 75 63 63 65 73 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 0a 20 20 74 65 78 74 2d 73 68 61 64 6f 77 3a 30 20 2d 31 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 32 35 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 62 62 37 35 62 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 36 32 63 34 36 32 2c 23 35 31 61 33 35 31 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 61 72 2c 30 20 30 2c 30 20 31 30 30 25 2c 66 72 6f 6d 28 23 36 32 63 Data Ascii: 3FC0nd-color:#942a25 \9; }.btn-success { color:#ffffff; text-shadow:0 -1px 0 rgba(0,0,0,0.25); background-color:#5bb75b; background-image:-moz-linear-gradient(top,#62c462,#51a351); background-image:-webkit-gradient(linear,0 0,0 100%,from(#62c
2024-05-06 16:42:50 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 0a 7d 0a 2e 74 61 62 73 2d 62 65 6c 6f 77 20 3e 20 2e 6e 61 76 2d 74 61 62 73 20 3e 20 2e 61 63 74 69 76 65 20 3e 20 61 2c 20 2e 74 61 62 73 2d 62 65 6c 6f 77 20 3e 20 2e 6e 61 76 2d 74 61 62 73 20 3e 20 2e 61 63 74 69 76 65 20 3e 20 61 3a 68 6f 76 65 72 2c 20 2e 74 61 62 73 2d 62 65 6c 6f 77 20 3e 20 2e 6e 61 76 2d 74 61 62 73 20 3e 20 2e 61 63 74 69 76 65 20 3e 20 61 3a 66 6f 63 75 73 20 7b 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 23 64 64 64 64 64 64 20 23 64 64 64 64 64 64 20 23 64 64 64 64 64 64 3b 20 7d 0a 2e 74 61 62 73 2d 6c 65 66 74 20 3e 20 2e 6e 61 76 2d 74 61 62 73 20 3e 20 6c 69 2c 20 2e 74 61 62 73 2d 72 69 Data Ascii: 3FB8 border-top-color:#dddddd;}.tabs-below > .nav-tabs > .active > a, .tabs-below > .nav-tabs > .active > a:hover, .tabs-below > .nav-tabs > .active > a:focus { border-color:transparent #dddddd #dddddd #dddddd; }.tabs-left > .nav-tabs > li, .tabs-ri
2024-05-06 16:42:50 UTC	16312	IN	Data Raw: 33 46 42 30 0d 0a 3a 32 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 74 72 61 6e 73 66 6f 72 6d 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 30 2e 31 35 73 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 3b 0a 7d 0a 2e 68 61 6d 62 75 72 67 65 72 2d 69 6e 6e 65 72 3a 62 65 66 6f 72 65 2c 20 2e 68 61 6d 62 75 72 67 65 72 2d 69 6e 6e 65 72 3a 61 66 74 65 72 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 22 22 3b 0a 20 20 64 69 73 70 6c 61 79 3a 62 6c Data Ascii: 3FB0:2px; background-color:black; border-radius:4px; position:absolute; transition-property:transform; transition-duration:0.15s; transition-timing-function:ease;}.hamburger-inner:before, .hamburger-inner:after { content:""; display:bl
2024-05-06 16:42:50 UTC	30	IN	Data Raw: 34 32 0d 0a 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 Data Ascii: 42-moz-box-sizing:border-box
2024-05-06 16:42:50 UTC	42	IN	Data Raw: 3b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 0d 0a Data Ascii: ; box-sizing:border-box; -webkit-tra

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.11	49966	89.187.173.22	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:54 UTC	844	OUT	OPTIONS /api/img-dscr/v2/D0JSP1avgg/3527403/RLqwMG7OTpTSzPtD/alts.json?dto=%7B%22sorted%22%3A%5B%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fservice-2.webp%22%2C%22alt%22%3A%22Insurance%20Coverages%22%2C%22dir%22%3A%22RO%22%7D%5D%2C%22tier%22%3A%22FREE_QUOTA_TIER%22%7D HTTP/1.1 Host: cdn77.api.userway.org Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://www.rmshg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:54 UTC	593	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:54 GMT Transfer-Encoding: chunked Connection: close X-Service-Version: img-dscr-srv-727604a1 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD, PUT, PATCH, POST, DELETE Access-Control-Allow-Headers: * Access-Control-Expose-Headers: Content-Range, Content-Length, ETag, Content-Type Access-Control-Max-Age: 3000 Cache-Control: max-age=604800 X-77-NZT: EggBWbutFQAACAG5O98UAAA X-77-NZT-Ray: 256bf6193cbad3c28e0839661bc01126 X-77-Cache: MISS Server: CDN77-Turbo Alt-Svc: h3=":443"; ma=86400 X-77-POP: miamiUSFL
2024-05-06 16:42:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.11	49967	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:54 UTC	423	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/service-2.webp HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:55 UTC	540	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:54 GMT Content-Type: image/webp Content-Length: 23656 Connection: close Last-Modified: Fri, 08 Sep 2023 11:15:04 GMT ETag: 0x8DBB05CDA2CAADC x-ms-request-id: 095abe2d-f01e-007c-5fd4-9fd65a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164254Z-174c4b644ccblmpbzxbhwbabb4000000023g00000000y2f2 Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-06 16:42:55 UTC	15844	IN	Data Raw: 52 49 46 46 60 5c 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 c1 01 00 0d 01 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFF`\WEBPVP8X ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-05-06 16:42:55 UTC	7812	IN	Data Raw: 2b 79 48 09 8d 9a d2 aa 12 e2 cd 89 09 17 e2 a8 5d 28 4b 58 03 26 3b ee 97 c8 c2 31 a9 03 d0 df e8 0c 83 a2 54 80 7b 97 c6 90 af 00 79 c7 f8 ea 1f 98 79 23 e9 f9 0f 86 9b b3 65 d8 23 e0 9f 2d 8c 7c 67 31 61 36 38 f5 5d f9 23 d0 c1 0f 6f 61 d0 16 c0 f6 f0 b3 6b 25 b3 c0 e5 4d c9 07 c1 9e c7 ee 40 c1 b7 8e c6 7c ff c8 84 25 4d e7 03 25 3f d9 c8 7c af a7 58 b7 b6 c9 b5 c5 09 49 eb 99 1e 1f 9e 51 75 30 9a 7c 29 79 51 6a b2 99 c9 2e 84 84 50 bf 50 3f e9 b0 01 72 f5 d0 ec fa 2e 0d 87 2f da 8b 33 8d 76 45 5f c4 d5 08 af 8b 60 a4 34 ab ce f4 d4 02 0d dd 41 00 9f 64 7a a2 10 0f f3 45 46 6d 29 4f 60 8f d0 a7 73 c5 a8 58 67 df 8b 38 71 ab f1 c4 60 39 e3 83 bb 0f ec a2 d7 20 35 5e 9c 27 0c 31 ba df 45 58 ce 5b 47 8e 12 a5 c1 47 15 6e 26 9a d8 2c 45 e6 30 f5 b4 e8 c9 Data Ascii: +yH](KX&;1T{yy#e#-\|g1a68]#oak%M@\|%M%?\|XIQu0\|)yQj.PP?r./3vE_`4AdzEFm)O`sXg8q`9 5^'1EX[GGn&,E0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.11	49968	89.187.173.22	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:55 UTC	920	OUT	GET /api/img-dscr/v2/D0JSP1avgg/3527403/RLqwMG7OTpTSzPtD/alts.json?dto=%7B%22sorted%22%3A%5B%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fservice-2.webp%22%2C%22alt%22%3A%22Insurance%20Coverages%22%2C%22dir%22%3A%22RO%22%7D%5D%2C%22tier%22%3A%22FREE_QUOTA_TIER%22%7D HTTP/1.1 Host: cdn77.api.userway.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.rmshg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:55 UTC	837	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:55 GMT Content-Type: application/json; charset=utf-8 Content-Length: 265 Connection: close Vary: Accept-Encoding X-Service-Version: img-dscr-srv-727604a1 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD, PUT, PATCH, POST, DELETE Access-Control-Allow-Headers: * Access-Control-Expose-Headers: Content-Range, Content-Length, ETag, Content-Type Access-Control-Max-Age: 3000 Cache-Control: max-age=604800 ETag: W/"109-PEriGJKPscG8V2p70GVk7ic1jZs" Vary: Accept-Encoding X-77-NZT: EggBWbutFQFBDAG5O98UAdf3bAMA X-77-NZT-Ray: 256bf619beac94d58f08396640da2b0c X-Accel-Expires: @1715394072 X-Accel-Date: 1714789272 X-77-Cache: HIT X-77-Age: 224503 Server: CDN77-Turbo Alt-Svc: h3=":443"; ma=86400 X-Cache: MISS X-77-POP: miamiUSFL Accept-Ranges: bytes
2024-05-06 16:42:55 UTC	265	IN	Data Raw: 7b 22 70 61 79 6c 6f 61 64 22 3a 7b 22 6d 69 73 73 69 6e 67 41 6c 74 73 22 3a 5b 7b 22 73 72 63 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 73 74 72 61 74 6f 73 70 68 65 72 65 77 65 62 73 69 74 65 73 2e 63 6f 6d 2f 73 6f 75 72 63 65 2f 73 69 74 65 73 2f 33 63 35 31 37 64 64 36 2d 36 66 61 36 2d 34 33 38 61 2d 38 64 34 37 2d 65 37 61 39 63 64 63 61 33 65 33 62 2f 69 6d 61 67 65 73 2f 73 65 72 76 69 63 65 2d 32 2e 77 65 62 70 22 2c 22 61 6c 74 22 3a 6e 75 6c 6c 2c 22 61 70 70 72 6f 76 65 64 22 3a 66 61 6c 73 65 2c 22 64 65 63 6f 72 61 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 73 6b 69 70 70 65 64 46 6f 72 52 65 61 64 4f 6e 6c 79 22 3a 74 72 75 65 7d 7d 5d 7d 2c 22 70 61 79 6c 6f 61 64 54 79 70 65 22 3a 22 4d 69 73 73 69 6e Data Ascii: {"payload":{"missingAlts":[{"src":"https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/service-2.webp","alt":null,"approved":false,"decorative":false,"metadata":{"skippedForReadOnly":true}}]},"payloadType":"Missin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.11	49970	89.187.173.23	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:56 UTC	688	OUT	GET /api/img-dscr/v2/D0JSP1avgg/3527403/RLqwMG7OTpTSzPtD/alts.json?dto=%7B%22sorted%22%3A%5B%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fservice-2.webp%22%2C%22alt%22%3A%22Insurance%20Coverages%22%2C%22dir%22%3A%22RO%22%7D%5D%2C%22tier%22%3A%22FREE_QUOTA_TIER%22%7D HTTP/1.1 Host: cdn77.api.userway.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:56 UTC	837	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:56 GMT Content-Type: application/json; charset=utf-8 Content-Length: 265 Connection: close Vary: Accept-Encoding X-Service-Version: img-dscr-srv-727604a1 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD, PUT, PATCH, POST, DELETE Access-Control-Allow-Headers: * Access-Control-Expose-Headers: Content-Range, Content-Length, ETag, Content-Type Access-Control-Max-Age: 3000 Cache-Control: max-age=604800 ETag: W/"109-PEriGJKPscG8V2p70GVk7ic1jZs" Vary: Accept-Encoding X-77-NZT: EggBWbutFQFBDAG5O98UAdf4bAMA X-77-NZT-Ray: 256bf619fdceeff590083966949d730b X-Accel-Expires: @1715394072 X-Accel-Date: 1714789272 X-77-Cache: HIT X-77-Age: 224504 Server: CDN77-Turbo Alt-Svc: h3=":443"; ma=86400 X-Cache: MISS X-77-POP: miamiUSFL Accept-Ranges: bytes
2024-05-06 16:42:56 UTC	265	IN	Data Raw: 7b 22 70 61 79 6c 6f 61 64 22 3a 7b 22 6d 69 73 73 69 6e 67 41 6c 74 73 22 3a 5b 7b 22 73 72 63 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 73 74 72 61 74 6f 73 70 68 65 72 65 77 65 62 73 69 74 65 73 2e 63 6f 6d 2f 73 6f 75 72 63 65 2f 73 69 74 65 73 2f 33 63 35 31 37 64 64 36 2d 36 66 61 36 2d 34 33 38 61 2d 38 64 34 37 2d 65 37 61 39 63 64 63 61 33 65 33 62 2f 69 6d 61 67 65 73 2f 73 65 72 76 69 63 65 2d 32 2e 77 65 62 70 22 2c 22 61 6c 74 22 3a 6e 75 6c 6c 2c 22 61 70 70 72 6f 76 65 64 22 3a 66 61 6c 73 65 2c 22 64 65 63 6f 72 61 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 73 6b 69 70 70 65 64 46 6f 72 52 65 61 64 4f 6e 6c 79 22 3a 74 72 75 65 7d 7d 5d 7d 2c 22 70 61 79 6c 6f 61 64 54 79 70 65 22 3a 22 4d 69 73 73 69 6e Data Ascii: {"payload":{"missingAlts":[{"src":"https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/service-2.webp","alt":null,"approved":false,"decorative":false,"metadata":{"skippedForReadOnly":true}}]},"payloadType":"Missin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.11	49978	44.234.218.238	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:42:59 UTC	624	OUT	POST /api/tunings/D0JSP1avgg HTTP/1.1 Host: api.userway.org Connection: keep-alive Content-Length: 1557 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.rmshg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:42:59 UTC	1557	OUT	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 75 73 65 72 77 61 79 2d 73 32 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 64 69 73 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 22 75 73 65 72 77 61 79 2d 73 33 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 64 69 73 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 22 75 73 65 72 77 61 79 2d 73 34 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 64 69 73 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 22 75 73 65 72 77 61 79 2d 73 36 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 64 69 73 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 22 75 73 65 72 77 61 79 2d 73 37 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 64 69 73 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 22 75 73 65 72 77 61 79 2d 73 38 22 Data Ascii: {"settings":{"userway-s2":{"value":false,"disabled":false},"userway-s3":{"value":false,"disabled":false},"userway-s4":{"value":false,"disabled":false},"userway-s6":{"value":false,"disabled":false},"userway-s7":{"value":false,"disabled":false},"userway-s8"
2024-05-06 16:42:59 UTC	550	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:42:59 GMT Content-Type: application/json; charset=utf-8 Content-Length: 516 Connection: close X-Service-Version: uw-pr Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD, PUT, PATCH, POST, DELETE Access-Control-Allow-Headers: * Access-Control-Expose-Headers: Content-Range, Content-Length, ETag, Content-Type Access-Control-Max-Age: 3000 Cache-Control: no-cache, no-store, must-revalidate X-Service-Request-Id: usrebb40bc4a215499 ETag: W/"204-GHC+q1MNV1I1maFF9Af6KcVsqqI"
2024-05-06 16:42:59 UTC	516	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 32 30 30 2c 22 64 61 74 61 22 3a 7b 22 74 75 6e 69 6e 67 73 22 3a 7b 22 77 69 64 67 65 74 5f 63 6f 6c 6f 72 22 3a 6e 75 6c 6c 2c 22 77 69 64 67 65 74 5f 6c 61 6e 67 75 61 67 65 22 3a 6e 75 6c 6c 2c 22 77 69 64 67 65 74 5f 69 63 6f 6e 5f 74 79 70 65 22 3a 6e 75 6c 6c 2c 22 77 69 64 67 65 74 5f 70 6f 73 69 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 77 69 64 67 65 74 5f 69 63 6f 6e 5f 73 69 7a 65 22 3a 6e 75 6c 6c 2c 22 73 69 74 65 5f 6e 61 6d 65 22 3a 22 72 6d 73 68 67 2e 63 6f 6d 22 7d 2c 22 6f 72 67 49 6e 66 6f 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 6e 75 6c 6c 2c 22 61 6c 6c 6f 77 73 22 3a 5b 22 43 52 45 44 45 4e 54 49 41 4c 53 5f 4c 4f 47 49 4e 22 2c 22 53 4f 43 49 41 4c 5f 4c 4f 47 49 4e 22 5d 2c 22 73 73 6f 50 61 74 68 22 3a 6e 75 6c 6c Data Ascii: {"code":200,"data":{"tunings":{"widget_color":null,"widget_language":null,"widget_icon_type":null,"widget_position":null,"widget_icon_size":null,"site_name":"rmshg.com"},"orgInfo":{"domain":null,"allows":["CREDENTIALS_LOGIN","SOCIAL_LOGIN"],"ssoPath":null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.11	49980	34.208.13.132	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:43:00 UTC	361	OUT	GET /api/tunings/D0JSP1avgg HTTP/1.1 Host: api.userway.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:43:00 UTC	555	IN	HTTP/1.1 405 Method Not Allowed Date: Mon, 06 May 2024 16:43:00 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close X-Service-Version: uw-pr Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD, PUT, PATCH, POST, DELETE Access-Control-Allow-Headers: * Access-Control-Expose-Headers: Content-Range, Content-Length, ETag, Content-Type Access-Control-Max-Age: 3000 Cache-Control: no-cache, no-store, must-revalidate X-Service-Request-Id: usr7c40d0b15c60475 ETag: W/"0-2jmj7l5rSw0yVb/vlWAYkK/YBwk"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.11	49982	104.21.49.115	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:43:01 UTC	740	OUT	GET / HTTP/1.1 Host: fortis-site.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.942134464.1715013754; _gid=GA1.2.1562157020.1715013754; _gat_gtag_UA_127514612_1=1
2024-05-06 16:43:01 UTC	999	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:43:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding,Cookie Link: <https://fortis-site.com/wp-json/>; rel="https://api.w.org/" Link: <https://fortis-site.com/wp-json/wp/v2/pages/2347>; rel="alternate"; type="application/json" Link: <https://fortis-site.com/>; rel=shortlink X-Powered-By: WP Engine X-Cacheable: SHORT Cache-Control: max-age=600, must-revalidate X-Cache: HIT: 1 X-Cache-Group: normal CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rBdd1oxyEUiWm5EqitIkJMtXK2hYEX8WEriI9K6pXH1jQYQ6%2FD31FaD4YyHYtjYH4QGBrKlmLq68euJZJYGBTO6BgQR4f%2Fj%2Buu%2B7eCOjrWM2bi3GZ0SbzqOHRpoFyAk5or0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87fa6d46be96a578-MIA alt-svc: h3=":443"; ma=86400
2024-05-06 16:43:01 UTC	370	IN	Data Raw: 37 62 63 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 37 29 20 7c 20 21 28 49 45 20 38 29 20 20 5d 3e 3c 21 2d 2d 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 0a 3c 6d 65 Data Ascii: 7bca<!DOCTYPE html>...[if IE 7]><html class="ie ie7" lang="en-US"><![endif]-->...[if IE 8]><html class="ie ie8" lang="en-US"><![endif]-->...[if !(IE 7) \| !(IE 8) ]>...><html lang="en-US">...<![endif]--><head><meta charset="UTF-8"><me
2024-05-06 16:43:01 UTC	1369	IN	Data Raw: 65 78 2c 20 66 6f 6c 6c 6f 77 2c 20 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 2c 20 6d 61 78 2d 73 6e 69 70 70 65 74 3a 2d 31 2c 20 6d 61 78 2d 76 69 64 65 6f 2d 70 72 65 76 69 65 77 3a 2d 31 22 20 2f 3e 0a 0a 3c 74 69 74 6c 65 3e 46 6f 72 74 69 73 20 53 69 74 65 20 49 6e 73 70 65 63 74 69 6f 6e 73 20 2d 20 4c 6f 73 73 20 43 6f 6e 74 72 6f 6c 20 26 61 6d 70 3b 20 52 69 73 6b 20 4d 61 6e 61 67 65 6d 65 6e 74 20 43 6f 6e 73 75 6c 74 69 6e 67 3c 2f 74 69 74 6c 65 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4f 70 65 6e 25 32 30 53 61 6e 73 25 33 41 33 30 30 25 32 43 72 65 67 75 6c 61 72 Data Ascii: ex, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1" /><title>Fortis Site Inspections - Loss Control & Risk Management Consulting</title><link rel="stylesheet" href="//fonts.googleapis.com/css?family=Open%20Sans%3A300%2Cregular
2024-05-06 16:43:01 UTC	1369	IN	Data Raw: 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 72 74 69 73 2d 73 69 74 65 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 31 38 2f 31 30 2f 68 6f 6d 65 32 2e 6a 70 67 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 3a 77 69 64 74 68 22 20 63 6f 6e 74 65 6e 74 3d 22 31 32 30 30 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 3a 68 65 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 36 33 30 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 63 61 72 64 22 20 63 6f 6e 74 65 6e 74 3d 22 73 75 6d 6d 61 72 79 5f 6c 61 72 67 65 5f 69 6d 61 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 Data Ascii: image" content="https://fortis-site.com/wp-content/uploads/2018/10/home2.jpg" /><meta property="og:image:width" content="1200" /><meta property="og:image:height" content="630" /><meta name="twitter:card" content="summary_large_image" /><meta name="twi
2024-05-06 16:43:01 UTC	1369	IN	Data Raw: 65 50 75 62 6c 69 73 68 65 64 22 3a 22 32 30 31 38 2d 30 31 2d 30 32 54 30 34 3a 33 32 3a 34 35 2b 30 30 3a 30 30 22 2c 22 64 61 74 65 4d 6f 64 69 66 69 65 64 22 3a 22 32 30 31 38 2d 31 30 2d 31 32 54 30 31 3a 34 31 3a 30 31 2b 30 30 3a 30 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 46 6f 72 74 69 73 20 53 69 74 65 20 49 6e 73 70 65 63 74 69 6f 6e 73 20 70 72 6f 76 69 64 65 73 20 6c 6f 73 73 20 63 6f 6e 74 72 6f 6c 20 61 6e 64 20 72 69 73 6b 20 6d 61 6e 61 67 65 6d 65 6e 74 20 63 6f 6e 73 75 6c 74 69 6e 67 20 73 6f 6c 75 74 69 6f 6e 73 20 66 6f 72 20 69 6e 73 75 72 65 72 73 20 61 6e 64 20 74 68 6f 73 65 20 69 6e 20 74 68 65 20 70 72 69 76 61 74 65 20 73 65 63 74 6f 72 20 61 63 72 6f 73 73 20 74 68 65 20 55 2e 53 2e 22 2c 22 62 72 65 61 64 63 72 Data Ascii: ePublished":"2018-01-02T04:32:45+00:00","dateModified":"2018-10-12T01:41:01+00:00","description":"Fortis Site Inspections provides loss control and risk management consulting solutions for insurers and those in the private sector across the U.S.","breadcr
2024-05-06 16:43:01 UTC	1369	IN	Data Raw: 64 65 74 65 63 74 20 6f 70 74 65 64 20 6f 75 74 20 75 73 65 72 73 20 2a 2f 0a 09 09 09 09 66 75 6e 63 74 69 6f 6e 20 5f 5f 67 74 61 67 54 72 61 63 6b 65 72 49 73 4f 70 74 65 64 4f 75 74 28 29 20 7b 0a 09 09 09 09 09 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 69 6e 64 65 78 4f 66 28 20 64 69 73 61 62 6c 65 53 74 72 20 2b 20 27 3d 74 72 75 65 27 20 29 20 3e 20 2d 20 31 3b 0a 09 09 09 09 7d 0a 0a 09 09 09 09 2f 2a 20 44 69 73 61 62 6c 65 20 74 72 61 63 6b 69 6e 67 20 69 66 20 74 68 65 20 6f 70 74 2d 6f 75 74 20 63 6f 6f 6b 69 65 20 65 78 69 73 74 73 2e 20 2a 2f 0a 09 09 09 09 69 66 20 28 20 5f 5f 67 74 61 67 54 72 61 63 6b 65 72 49 73 4f 70 74 65 64 4f 75 74 28 29 20 29 20 7b 0a 09 09 09 09 09 77 69 6e 64 6f 77 5b 64 69 73 61 62 6c Data Ascii: detect opted out users /function __gtagTrackerIsOptedOut() {return document.cookie.indexOf( disableStr + '=true' ) > - 1;}/ Disable tracking if the opt-out cookie exists. */if ( __gtagTrackerIsOptedOut() ) {window[disabl
2024-05-06 16:43:01 UTC	1369	IN	Data Raw: 70 20 3d 20 54 72 61 63 6b 65 72 2e 70 72 6f 74 6f 74 79 70 65 3b 0a 09 09 09 09 09 09 09 70 2e 67 65 74 20 3d 20 6e 6f 6f 70 66 6e 3b 0a 09 09 09 09 09 09 09 70 2e 73 65 74 20 3d 20 6e 6f 6f 70 66 6e 3b 0a 09 09 09 09 09 09 09 70 2e 73 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 7b 0a 09 09 09 09 09 09 09 09 76 61 72 20 61 72 67 73 20 3d 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3b 0a 09 09 09 09 09 09 09 09 61 72 67 73 2e 75 6e 73 68 69 66 74 28 20 27 73 65 6e 64 27 20 29 3b 0a 09 09 09 09 09 09 09 09 5f 5f 67 61 54 72 61 63 6b 65 72 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 20 61 72 67 73 29 3b 0a 09 09 09 09 09 09 09 7d 3b 0a 09 09 09 09 09 09 09 76 61 72 20 5f 5f 67 61 54 72 61 Data Ascii: p = Tracker.prototype;p.get = noopfn;p.set = noopfn;p.send = function (){var args = Array.prototype.slice.call(arguments);args.unshift( 'send' );__gaTracker.apply(null, args);};var __gaTra
2024-05-06 16:43:01 UTC	1369	IN	Data Raw: 74 4f 62 6a 65 63 74 2c 20 61 72 67 75 6d 65 6e 74 73 5b 35 5d 20 29 3b 0a 09 09 09 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 09 09 09 09 69 66 20 28 20 27 75 6e 64 65 66 69 6e 65 64 27 20 21 3d 3d 20 74 79 70 65 6f 66 20 61 72 67 75 6d 65 6e 74 73 5b 31 5d 2e 68 69 74 54 79 70 65 20 29 20 7b 0a 09 09 09 09 09 09 09 09 09 09 09 68 69 74 4f 62 6a 65 63 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3b 0a 09 09 09 09 09 09 09 09 09 09 09 69 66 20 28 20 27 70 61 67 65 76 69 65 77 27 20 3d 3d 3d 20 68 69 74 4f 62 6a 65 63 74 2e 68 69 74 54 79 70 65 20 29 20 7b 0a 09 09 09 09 09 09 09 09 09 09 09 09 68 69 74 4f 62 6a 65 63 74 2e 65 76 65 6e 74 41 63 74 69 6f 6e 20 3d 20 27 70 61 67 65 5f 76 69 65 77 27 3b 0a 09 09 09 09 09 09 09 09 09 09 09 7d 0a 09 09 09 Data Ascii: tObject, arguments[5] );}if ( 'undefined' !== typeof arguments[1].hitType ) {hitObject = arguments[1];if ( 'pageview' === hitObject.hitType ) {hitObject.eventAction = 'page_view';}
2024-05-06 16:43:01 UTC	1369	IN	Data Raw: 09 09 09 09 09 09 74 72 79 20 7b 0a 09 09 09 09 09 09 09 09 09 66 2e 68 69 74 43 61 6c 6c 62 61 63 6b 28 29 3b 0a 09 09 09 09 09 09 09 09 7d 20 63 61 74 63 68 20 28 20 65 78 20 29 20 7b 0a 09 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 09 7d 3b 0a 09 09 09 09 09 09 09 5f 5f 67 61 54 72 61 63 6b 65 72 2e 63 72 65 61 74 65 20 3d 20 6e 65 77 74 72 61 63 6b 65 72 3b 0a 09 09 09 09 09 09 09 5f 5f 67 61 54 72 61 63 6b 65 72 2e 67 65 74 42 79 4e 61 6d 65 20 3d 20 6e 65 77 74 72 61 63 6b 65 72 3b 0a 09 09 09 09 09 09 09 5f 5f 67 61 54 72 61 63 6b 65 72 2e 67 65 74 41 6c 6c 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 09 09 09 09 09 09 09 72 65 74 75 72 6e 20 5b 5d 3b 0a 09 09 09 09 09 09 09 7d 3b 0a 09 09 09 09 09 09 09 5f 5f 67 61 54 72 61 63 6b 65 72 Data Ascii: try {f.hitCallback();} catch ( ex ) {}};__gaTracker.create = newtracker;__gaTracker.getByName = newtracker;__gaTracker.getAll = function () {return [];};__gaTracker
2024-05-06 16:43:01 UTC	1369	IN	Data Raw: 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 22 63 6c 61 73 73 69 63 2d 74 68 65 6d 65 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 32 33 37 33 63 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 39 39 39 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 63 61 6c 63 28 2e 36 Data Ascii: ="text/css" media="all" /><style id="classic-theme-styles-inline-css" type="text/css">/! This file is auto-generated /.wp-block-button__link{color:#fff;background-color:#32373c;border-radius:9999px;box-shadow:none;text-decoration:none;padding:calc(.6
2024-05-06 16:43:01 UTC	1369	IN	Data Raw: 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 74 6f 2d 76 69 76 69 64 2d 72 65 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 61 28 32 35 35 2c 31 30 35 2c 30 2c 31 29 20 30 25 2c 72 67 62 28 32 30 37 2c 34 36 2c 34 36 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 76 65 72 79 2d 6c 69 67 68 74 2d 67 72 61 79 2d 74 6f 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 33 38 2c 32 33 38 2c 32 33 38 29 20 30 25 2c 72 67 62 28 31 36 39 2c 31 38 34 2c 31 39 35 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d Data Ascii: p--preset--gradient--luminous-vivid-orange-to-vivid-red: linear-gradient(135deg,rgba(255,105,0,1) 0%,rgb(207,46,46) 100%);--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray: linear-gradient(135deg,rgb(238,238,238) 0%,rgb(169,184,195) 100%);--wp--

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.11	49989	192.178.50.68	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:43:03 UTC	951	OUT	GET /recaptcha/api2/anchor?ar=1&k=6Ld7KXUUAAAAAAknjFUvMThz44a8gU2bvUq0YFw-&co=aHR0cHM6Ly9mb3J0aXMtc2l0ZS5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=ppya948ml626 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiUocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:43:03 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 06 May 2024 16:43:03 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-JrRxADROhUErugRWo4BvFw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-06 16:43:03 UTC	364	IN	Data Raw: 32 61 65 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2ae8<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-05-06 16:43:03 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-05-06 16:43:03 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-05-06 16:43:03 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-05-06 16:43:03 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-05-06 16:43:03 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-05-06 16:43:03 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 4a 72 52 78 41 44 52 4f 68 55 45 72 75 67 52 57 6f 34 42 76 46 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css"><script nonce="JrRxADROhUErugRWo4BvFw" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-05-06 16:43:03 UTC	1255	IN	Data Raw: 67 52 77 6d 31 48 53 47 53 59 71 51 58 56 66 79 53 50 35 54 42 38 4e 30 6b 33 53 37 50 63 56 30 75 7a 6b 75 66 32 79 45 32 69 50 70 50 4b 64 44 33 44 58 71 75 73 63 66 6d 36 53 48 4f 6a 31 36 77 66 32 38 53 58 43 35 31 55 6f 43 76 37 56 38 30 32 63 39 39 6f 47 7a 57 44 72 75 4e 32 49 56 31 65 72 43 6e 65 59 62 36 52 47 73 59 6a 6d 5a 59 55 47 57 56 36 4a 63 46 42 61 33 56 6d 76 6d 36 7a 59 61 45 43 6a 42 5a 6a 5f 52 75 35 78 38 54 51 33 72 4a 33 61 78 75 4c 59 5f 38 67 4c 4f 6d 51 45 6c 47 52 47 61 4a 6b 48 54 61 6f 56 50 77 66 7a 56 43 43 52 62 70 70 68 58 53 6c 41 46 67 78 78 71 37 56 6c 62 76 6b 33 49 4c 74 74 73 50 37 37 37 63 69 5a 47 65 37 73 4c 30 6e 4c 53 38 63 7a 4d 77 61 6f 63 54 49 76 4d 76 64 52 79 75 65 46 4e 48 43 47 54 6c 49 65 6f 42 43 49 Data Ascii: gRwm1HSGSYqQXVfySP5TB8N0k3S7PcV0uzkuf2yE2iPpPKdD3DXquscfm6SHOj16wf28SXC51UoCv7V802c99oGzWDruN2IV1erCneYb6RGsYjmZYUGWV6JcFBa3Vmvm6zYaECjBZj_Ru5x8TQ3rJ3axuLY_8gLOmQElGRGaJkHTaoVPwfzVCCRbpphXSlAFgxxq7Vlbvk3ILttsP777ciZGe7sL0nLS8czMwaocTIvMvdRyueFNHCGTlIeoBCI
2024-05-06 16:43:03 UTC	1255	IN	Data Raw: 62 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 4a 72 52 78 41 44 52 4f 68 55 45 72 75 67 52 57 6f 34 42 76 46 77 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 6d 65 55 4e 47 4d 32 78 74 62 31 39 50 57 57 35 44 58 7a 6c 79 52 31 64 56 52 69 31 44 5a 56 46 32 64 45 39 46 53 30 74 79 56 46 56 4c 58 31 68 59 55 7a 46 47 5a 44 46 7a 4c 6d 70 7a 5c 78 32 32 2c 5c 78 32 32 5c 78 32 32 2c 5c 78 32 32 54 48 64 46 54 45 70 61 Data Ascii: b"><script type="text/javascript" nonce="JrRxADROhUErugRWo4BvFw"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9meUNGM2xtb19PWW5DXzlyR1dVRi1DZVF2dE9FS0tyVFVLX1hYUzFGZDFzLmpz\x22,\x22\x22,\x22THdFTEpa
2024-05-06 16:43:03 UTC	588	IN	Data Raw: 65 43 74 74 56 33 5a 43 65 47 68 74 53 47 59 72 55 56 45 32 53 54 6c 4f 4e 44 4a 48 52 55 6c 48 55 55 30 32 63 58 4e 48 64 47 56 76 4d 56 68 6f 56 33 56 43 55 6a 4d 79 57 6b 5a 45 64 32 46 4f 5a 55 46 52 4f 58 64 4e 61 44 63 7a 54 56 6c 6b 63 6b 74 4b 4e 6a 4e 58 61 6e 4e 6e 4d 46 4e 46 56 54 45 32 64 6a 68 44 52 6b 39 52 4e 33 6c 35 54 48 5a 69 64 45 35 35 55 44 49 35 53 6e 41 77 5a 57 6c 4d 4d 6c 42 32 62 32 31 4e 4d 31 6b 31 55 45 4e 46 52 33 56 6f 53 58 41 32 53 6c 56 6d 65 6b 51 32 61 6a 64 6f 57 47 6f 35 63 6b 52 55 61 6c 56 78 54 31 46 48 5a 6c 42 76 5a 31 45 35 62 58 68 4c 52 6c 6b 32 61 57 74 4b 54 55 59 72 64 33 49 78 4d 30 46 33 56 46 64 58 4e 6b 78 32 59 6c 64 45 53 55 78 75 4e 6b 6c 76 54 57 78 6f 51 33 5a 30 64 47 5a 33 56 6e 4a 59 55 7a 67 Data Ascii: eCttV3ZCeGhtSGYrUVE2STlONDJHRUlHUU02cXNHdGVvMVhoV3VCUjMyWkZEd2FOZUFROXdNaDczTVlkcktKNjNXanNnMFNFVTE2djhDRk9RN3l5THZidE55UDI5SnAwZWlMMlB2b21NM1k1UENFR3VoSXA2SlVmekQ2ajdoWGo5ckRUalVxT1FHZlBvZ1E5bXhLRlk2aWtKTUYrd3IxM0F3VFdXNkx2YldESUxuNklvTWxoQ3Z0dGZ3VnJYUzg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.11	49990	89.187.173.22	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:43:03 UTC	2829	OUT	OPTIONS /api/img-dscr/v2/D0JSP1avgg/3527403/RLqwMG7OTpTSzPtD/alts.json?dto=%7B%22sorted%22%3A%5B%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fabout-thumb.webp%22%2C%22alt%22%3A%22RMS%20Hospitality%20Group%20Let%20Us%20Take%20Risk%20off%20Your%20Table%22%2C%22dir%22%3A%22RO%22%7D%2C%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fgoogle-review.webp%22%2C%22alt%22%3A%22Leave%20a%20review%20on%20Google%22%2C%22dir%22%3A%22RO%22%7D%2C%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fistock-1350660376.jpg%22%2C%22alt%22%3A%22How%20Can%20Pubs%20Improve%20Safety%3F%20A%20Primer%20for%20Insurance%20Professionals%22%2C%22dir%22%3A%22RO%22%7D%2C%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fistock-1824175 [TRUNCATED] Host: cdn77.api.userway.org Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://www.rmshg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:43:04 UTC	593	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:43:03 GMT Transfer-Encoding: chunked Connection: close X-Service-Version: img-dscr-srv-727604a1 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD, PUT, PATCH, POST, DELETE Access-Control-Allow-Headers: * Access-Control-Expose-Headers: Content-Range, Content-Length, ETag, Content-Type Access-Control-Max-Age: 3000 Cache-Control: max-age=604800 X-77-NZT: EggBWbutFQAACAGckjviAAA X-77-NZT-Ray: 256bf61968af31f097083966b77b6033 X-77-Cache: MISS Server: CDN77-Turbo Alt-Svc: h3=":443"; ma=86400 X-77-POP: miamiUSFL
2024-05-06 16:43:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.11	49992	89.187.173.22	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:43:04 UTC	2905	OUT	GET /api/img-dscr/v2/D0JSP1avgg/3527403/RLqwMG7OTpTSzPtD/alts.json?dto=%7B%22sorted%22%3A%5B%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fabout-thumb.webp%22%2C%22alt%22%3A%22RMS%20Hospitality%20Group%20Let%20Us%20Take%20Risk%20off%20Your%20Table%22%2C%22dir%22%3A%22RO%22%7D%2C%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fgoogle-review.webp%22%2C%22alt%22%3A%22Leave%20a%20review%20on%20Google%22%2C%22dir%22%3A%22RO%22%7D%2C%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fistock-1350660376.jpg%22%2C%22alt%22%3A%22How%20Can%20Pubs%20Improve%20Safety%3F%20A%20Primer%20for%20Insurance%20Professionals%22%2C%22dir%22%3A%22RO%22%7D%2C%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fistock-182417552.j [TRUNCATED] Host: cdn77.api.userway.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.rmshg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:43:05 UTC	815	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:43:05 GMT Content-Type: application/json; charset=utf-8 Content-Length: 2174 Connection: close X-Service-Version: img-dscr-srv-406c249e Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD, PUT, PATCH, POST, DELETE Access-Control-Allow-Headers: * Access-Control-Expose-Headers: Content-Range, Content-Length, ETag, Content-Type Access-Control-Max-Age: 3000 Cache-Control: max-age=604800 ETag: W/"87e-uUX2r1wSlQLD4a/U2JEMvbRHvis" Vary: Accept-Encoding X-77-NZT: EggBWbutFQFBDAGckjviAZYZVwkA X-77-NZT-Ray: 256bf619e9c1851898083966c3fc2f39 X-Accel-Expires: @1715618585 X-Accel-Date: 1714401663 X-77-Cache: HIT X-77-Age: 612121 Server: CDN77-Turbo Alt-Svc: h3=":443"; ma=86400 X-Cache: MISS X-77-POP: miamiUSFL Accept-Ranges: bytes
2024-05-06 16:43:05 UTC	2174	IN	Data Raw: 7b 22 70 61 79 6c 6f 61 64 22 3a 7b 22 6d 69 73 73 69 6e 67 41 6c 74 73 22 3a 5b 7b 22 73 72 63 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 73 74 72 61 74 6f 73 70 68 65 72 65 77 65 62 73 69 74 65 73 2e 63 6f 6d 2f 73 6f 75 72 63 65 2f 73 69 74 65 73 2f 33 63 35 31 37 64 64 36 2d 36 66 61 36 2d 34 33 38 61 2d 38 64 34 37 2d 65 37 61 39 63 64 63 61 33 65 33 62 2f 69 6d 61 67 65 73 2f 61 62 6f 75 74 2d 74 68 75 6d 62 2e 77 65 62 70 22 2c 22 61 6c 74 22 3a 6e 75 6c 6c 2c 22 61 70 70 72 6f 76 65 64 22 3a 66 61 6c 73 65 2c 22 64 65 63 6f 72 61 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 73 6b 69 70 70 65 64 46 6f 72 52 65 61 64 4f 6e 6c 79 22 3a 74 72 75 65 2c 22 66 6f 75 6e 64 43 61 63 68 65 64 52 65 73 70 6f 6e 73 65 22 3a 74 Data Ascii: {"payload":{"missingAlts":[{"src":"https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/about-thumb.webp","alt":null,"approved":false,"decorative":false,"metadata":{"skippedForReadOnly":true,"foundCachedResponse":t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.11	49995	192.178.50.68	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:43:08 UTC	866	OUT	GET /recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6Ld7KXUUAAAAAAknjFUvMThz44a8gU2bvUq0YFw- HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiUocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://fortis-site.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:43:08 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 06 May 2024 16:43:08 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-gDzJRGI6DOtV1Tad-KZzpQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-06 16:43:08 UTC	364	IN	Data Raw: 31 64 31 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d14<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-05-06 16:43:08 UTC	1255	IN	Data Raw: 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e Data Ascii: v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fon
2024-05-06 16:43:08 UTC	1255	IN	Data Raw: 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 Data Ascii: 20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E0
2024-05-06 16:43:08 UTC	1255	IN	Data Raw: 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b Data Ascii: U+04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-05-06 16:43:08 UTC	1255	IN	Data Raw: 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b Data Ascii: ce { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+
2024-05-06 16:43:08 UTC	1255	IN	Data Raw: 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: tic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight
2024-05-06 16:43:08 UTC	813	IN	Data Raw: 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 67 44 7a 4a 52 47 49 36 44 4f 74 56 31 54 61 64 2d 4b 5a 7a 70 51 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f Data Ascii: }</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css"><script nonce="gDzJRGI6DOtV1Tad-KZzpQ" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.co
2024-05-06 16:43:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.11	49998	89.187.173.23	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:43:08 UTC	2673	OUT	GET /api/img-dscr/v2/D0JSP1avgg/3527403/RLqwMG7OTpTSzPtD/alts.json?dto=%7B%22sorted%22%3A%5B%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fabout-thumb.webp%22%2C%22alt%22%3A%22RMS%20Hospitality%20Group%20Let%20Us%20Take%20Risk%20off%20Your%20Table%22%2C%22dir%22%3A%22RO%22%7D%2C%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fgoogle-review.webp%22%2C%22alt%22%3A%22Leave%20a%20review%20on%20Google%22%2C%22dir%22%3A%22RO%22%7D%2C%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fistock-1350660376.jpg%22%2C%22alt%22%3A%22How%20Can%20Pubs%20Improve%20Safety%3F%20A%20Primer%20for%20Insurance%20Professionals%22%2C%22dir%22%3A%22RO%22%7D%2C%7B%22src%22%3A%22https%3A%2F%2Fcdn.stratospherewebsites.com%2Fsource%2Fsites%2F3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b%2Fimages%2Fistock-182417552.j [TRUNCATED] Host: cdn77.api.userway.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:43:08 UTC	810	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:43:08 GMT Content-Type: application/json; charset=utf-8 Content-Length: 2174 Connection: close X-Service-Version: img-dscr-srv-406c249e Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD, PUT, PATCH, POST, DELETE Access-Control-Allow-Headers: * Access-Control-Expose-Headers: Content-Range, Content-Length, ETag, Content-Type Access-Control-Max-Age: 3000 Cache-Control: max-age=604800 ETag: W/"87e-uUX2r1wSlQLD4a/U2JEMvbRHvis" Vary: Accept-Encoding X-77-NZT: EggBWbutFQFBDAGckjviAfcDAAAA X-77-NZT-Ray: 256bf61929add28d9c083966b23ac818 X-Accel-Expires: @1715618585 X-Accel-Date: 1715013785 X-77-Cache: HIT X-77-Age: 3 Server: CDN77-Turbo Alt-Svc: h3=":443"; ma=86400 X-Cache: MISS X-77-POP: miamiUSFL Accept-Ranges: bytes
2024-05-06 16:43:08 UTC	2174	IN	Data Raw: 7b 22 70 61 79 6c 6f 61 64 22 3a 7b 22 6d 69 73 73 69 6e 67 41 6c 74 73 22 3a 5b 7b 22 73 72 63 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 73 74 72 61 74 6f 73 70 68 65 72 65 77 65 62 73 69 74 65 73 2e 63 6f 6d 2f 73 6f 75 72 63 65 2f 73 69 74 65 73 2f 33 63 35 31 37 64 64 36 2d 36 66 61 36 2d 34 33 38 61 2d 38 64 34 37 2d 65 37 61 39 63 64 63 61 33 65 33 62 2f 69 6d 61 67 65 73 2f 61 62 6f 75 74 2d 74 68 75 6d 62 2e 77 65 62 70 22 2c 22 61 6c 74 22 3a 6e 75 6c 6c 2c 22 61 70 70 72 6f 76 65 64 22 3a 66 61 6c 73 65 2c 22 64 65 63 6f 72 61 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 73 6b 69 70 70 65 64 46 6f 72 52 65 61 64 4f 6e 6c 79 22 3a 74 72 75 65 2c 22 66 6f 75 6e 64 43 61 63 68 65 64 52 65 73 70 6f 6e 73 65 22 3a 74 Data Ascii: {"payload":{"missingAlts":[{"src":"https://cdn.stratospherewebsites.com/source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/about-thumb.webp","alt":null,"approved":false,"decorative":false,"metadata":{"skippedForReadOnly":true,"foundCachedResponse":t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.11	49996	44.234.218.238	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:43:08 UTC	617	OUT	GET /api/a11y-data/v0/page/https%3A%2F%2Fwww.rmshg.com%2F/DESKTOP/WIDGET_OFF/status HTTP/1.1 Host: api.userway.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.rmshg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:43:08 UTC	538	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:43:08 GMT Content-Type: application/json; charset=utf-8 Content-Length: 77 Connection: close X-Service-Version: seo-w-fa0246c1 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD, PUT, PATCH, POST, DELETE Access-Control-Allow-Headers: * Access-Control-Expose-Headers: Content-Range, Content-Length, ETag, Content-Type Access-Control-Max-Age: 3000 Cache-Control: no-cache, no-store, must-revalidate ETag: W/"4d-wYLRLrbWidRwnfhEvoB+Y2U04NY" Vary: Accept-Encoding
2024-05-06 16:43:08 UTC	77	IN	Data Raw: 7b 22 70 61 79 6c 6f 61 64 22 3a 7b 22 73 74 61 74 75 73 22 3a 22 43 4f 4e 54 52 49 42 5f 50 52 45 53 45 4e 54 22 7d 2c 22 70 61 79 6c 6f 61 64 54 79 70 65 22 3a 22 50 61 67 65 43 6f 6e 74 72 69 62 53 74 61 74 75 73 44 74 6f 22 7d Data Ascii: {"payload":{"status":"CONTRIB_PRESENT"},"payloadType":"PageContribStatusDto"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.11	50000	34.208.13.132	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:43:09 UTC	417	OUT	GET /api/a11y-data/v0/page/https%3A%2F%2Fwww.rmshg.com%2F/DESKTOP/WIDGET_OFF/status HTTP/1.1 Host: api.userway.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:43:09 UTC	538	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:43:09 GMT Content-Type: application/json; charset=utf-8 Content-Length: 77 Connection: close X-Service-Version: seo-w-fa0246c1 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD, PUT, PATCH, POST, DELETE Access-Control-Allow-Headers: * Access-Control-Expose-Headers: Content-Range, Content-Length, ETag, Content-Type Access-Control-Max-Age: 3000 Cache-Control: no-cache, no-store, must-revalidate ETag: W/"4d-wYLRLrbWidRwnfhEvoB+Y2U04NY" Vary: Accept-Encoding
2024-05-06 16:43:09 UTC	77	IN	Data Raw: 7b 22 70 61 79 6c 6f 61 64 22 3a 7b 22 73 74 61 74 75 73 22 3a 22 43 4f 4e 54 52 49 42 5f 50 52 45 53 45 4e 54 22 7d 2c 22 70 61 79 6c 6f 61 64 54 79 70 65 22 3a 22 50 61 67 65 43 6f 6e 74 72 69 62 53 74 61 74 75 73 44 74 6f 22 7d Data Ascii: {"payload":{"status":"CONTRIB_PRESENT"},"payloadType":"PageContribStatusDto"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.11	50002	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:43:12 UTC	662	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/home-banner-two.webp HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:43:13 UTC	528	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:43:13 GMT Content-Type: image/webp Content-Length: 198018 Connection: close Last-Modified: Fri, 08 Sep 2023 11:15:01 GMT ETag: 0x8DBB05CD8195B5E x-ms-request-id: 1e4e93ee-501e-0017-4ad4-9f51ae000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164312Z-174c4b644ccbnfrj3r328ckevn00000002e000000000rpps Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 69388692 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-06 16:43:13 UTC	15856	IN	Data Raw: 52 49 46 46 7a 05 03 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 7f 07 00 ff 04 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFzWEBPVP8X ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-05-06 16:43:13 UTC	16384	IN	Data Raw: ad 22 1a f0 e5 4f 0b 9a cb 2c 80 b0 50 cb 6f 8f 06 fe 79 be 40 2a 40 ee a1 a3 7e d6 d8 f3 bc 5e 86 14 69 ac 16 3c 46 76 96 11 87 43 91 6c 37 d3 36 bc 4f 76 4d b2 42 4f cf 9c 20 9c a7 b6 ff c9 61 01 f3 79 98 21 db 81 54 f7 c6 75 9b d5 8d b3 ca 3b 7e cc e2 8c e4 6b 3c 1c 1e 62 18 a0 f6 e7 57 44 c0 d4 01 3f 05 e3 83 e8 96 b1 6c c7 8d 91 e4 fa 46 8f e5 6b 33 6e 7f ff e7 73 44 79 40 63 5c 6b 63 c5 1e e1 d7 33 b0 6a 53 65 0e 01 3a 9d 0f 9d c3 a9 fa 02 36 72 ba 2f 54 1e 90 2b cb 4a c1 34 5d db e0 06 33 61 1e 97 a3 1f b3 37 9c dd b0 d0 1b 69 61 6d 4d e5 be 28 23 95 08 47 37 1c 3a 8c a3 f2 0a ef 98 42 8a 97 96 34 fb 44 40 a8 df 93 8b 9d 9f 9a 87 8a 0d c1 73 11 8e 2e 8e a8 5c 3c 9e 8b cd 2f f4 ff f6 a4 12 2a 2c c5 f4 b5 a8 79 78 5c 00 ce cf 0a 33 08 68 f9 ee e3 41 Data Ascii: "O,Poy@@~^i<FvCl76OvMBO ay!Tu;~k<bWD?lFk3nsDy@c\kc3jSe:6r/T+J4]3a7iamM(#G7:B4D@s.\</,yx\3hA
2024-05-06 16:43:13 UTC	16384	IN	Data Raw: 57 8d 98 3b 25 8b 8b 7e 3a 92 ef 1a 59 46 a6 9f 7e 8c ca 3a 39 42 24 72 8c 8c e1 67 8f 57 31 4a be 84 06 3d 39 70 e8 bc 6b 8e 5c 33 6d 07 4e 20 c2 81 51 35 ef d3 ea 67 c9 3a 72 1f d0 b0 e9 75 a0 a0 f3 c5 76 c2 4e c4 15 19 12 c6 5a a8 a3 8b 77 6c db 62 02 b3 aa 9d 30 9a 9c fd 7e 55 20 5a 9f 79 11 7c 5d d7 23 bf 3e 7e 3e ac 14 c4 a9 0c fb 6c 5f 37 5a 6a 75 ff b4 6b 06 a1 a5 14 82 ac ce 42 59 b8 69 7a 3c 84 d9 82 4d c9 ad be 16 92 5c f1 07 9f 5f b9 32 eb 69 8a 2e e6 27 3c 1f 71 f4 60 58 c4 dd 15 6c 3e 98 e2 7e 04 30 ae 2e 6f 33 a2 c0 84 13 03 4e ca f3 de 22 35 58 65 63 4e 12 a6 3a 8c db 7e ae 2a f4 9c f7 c0 c3 87 e2 2e 10 e7 83 f3 a0 5e 1a 95 22 98 2d 55 9a a6 70 96 33 33 87 1d 4f da 75 43 cf 38 6a aa 9a 67 58 38 43 a2 37 64 77 66 f6 80 f9 b1 52 69 87 5b f5 Data Ascii: W;%~:YF~:9B$rgW1J=9pk\3mN Q5g:ruvNZwlb0~U Zy\|]#>~>l_7ZjukBYiz<M\_2i.'<q`Xl>~0.o3N"5XecN:~*.^"-Up33OuC8jgX8C7dwfRi[
2024-05-06 16:43:13 UTC	16384	IN	Data Raw: f5 18 e6 7d 95 f3 70 6f 7a 37 d2 8d 2f 85 8b cc a8 88 a8 15 f2 6a a5 84 68 85 7a a9 de 4e b0 9e 7d 23 e7 5e a7 ff 28 1d bc 42 47 2e c0 2e 9d 4d 36 96 9a d9 32 e7 47 77 59 1c 6d ad 54 f8 2c 08 af fd c2 e0 bd 1f 33 8e 90 4f ad b7 c2 92 7f a1 db bd 36 73 0d e4 c7 4b 7c 60 b9 a1 60 9c 3a e6 63 d8 3b e6 c5 1b d3 2b bc 72 c9 8b c3 92 85 b2 43 5e 5c 1a d2 2d 50 8e 9e 62 32 a5 49 86 44 3a da c3 58 a1 69 d1 4b 2a 61 24 f2 5c a2 b6 7a fc f0 d9 ea df 79 73 03 b3 9f 89 52 e1 ca 9a 53 14 70 a3 e1 51 77 e3 ec aa 4d 19 f8 0e 4c 0e a0 c5 fe 08 31 30 1e 74 b9 da b4 a9 c7 29 e5 f0 3b 5b 7a 2b 9c 3b 5d e0 db 2d c4 16 b1 e3 ff d9 04 53 97 75 92 0d ea a1 79 c4 f0 85 cd 51 6d 28 8e ae 59 d0 48 c4 b2 d5 52 2f 20 b3 c1 d0 c6 8d bf bf fd 0f b3 8d 83 f6 96 ba 88 d4 e4 66 b9 d2 bd Data Ascii: }poz7/jhzN}#^(BG..M62GwYmT,3O6sK\|``:c;+rC^\-Pb2ID:XiK*a$\zysRSpQwML10t);[z+;]-SuyQm(YHR/ f
2024-05-06 16:43:13 UTC	16384	IN	Data Raw: 7a e5 4c 45 75 5a c3 8a ca c5 b9 51 9c 54 d4 88 00 cd 46 b6 10 77 df 11 e4 9c 28 bb d9 28 2b d3 79 08 20 49 4e f5 c3 3d e5 fd d9 68 cb 9a 3f 5b ee 7f e9 00 b7 61 91 78 91 85 c1 82 e5 4a 41 db 9e 01 43 1f f2 10 f5 1a 94 e4 1d d8 f2 a6 9d 02 78 6a 6c a3 0b 95 f2 bc 39 1f a7 fe 84 2b c7 e3 a5 0a 44 b6 f9 7f e1 f4 2a b8 b1 b5 bc 9d fb 59 f7 60 a0 8f 1a 2c 68 60 a3 47 c1 66 39 75 5d 7d 71 fb 45 dd 14 0a 9b fb 83 0b 8f 24 7c ba 65 bd c5 f8 4f 97 52 cd 59 f2 c8 a1 b0 05 1b c5 aa 84 a4 fc 7a ee e2 a8 7d 2f ed 07 98 bd be 3d ff 95 44 5c 45 83 ad f3 fd ca c5 f4 8e 28 94 fe 87 f5 e4 7f 28 1d a5 b8 69 f8 2f 9e 35 2e 65 4e d5 d3 c5 b8 80 b7 41 e7 2d 4c ca b3 18 9b 39 2f 0b a2 a5 b4 28 49 fd 3b 2a 33 fb f6 a6 cd 24 8a 1b ab ba 89 3f 47 e2 89 71 6c 7a 0b 09 0f 67 c7 0f Data Ascii: zLEuZQTFw((+y IN=h?[axJACxjl9+DY`,h`Gf9u]}qE$\|eORYz}/=D\E((i/5.eNA-L9/(I;3$?Gqlzg
2024-05-06 16:43:13 UTC	16384	IN	Data Raw: 23 81 66 ed de 30 b0 12 43 f5 93 1a 77 fc d3 8a 76 10 f9 88 99 8e 02 47 86 fb a3 38 59 13 d6 6d 45 83 4c f0 12 06 c2 d4 a3 d5 cd 31 34 f3 15 09 be 6f e3 8e c9 fc c9 e9 c1 77 a5 0a 34 ac ed fd 14 41 fe 81 7d ee a3 c1 6b be 73 96 2d 85 6e 65 9a 8d 17 f1 61 d9 2d ff c0 9e 63 87 34 c6 89 69 62 c0 7c f9 ea 5d 0f ef 23 0c d7 e3 c4 3b f1 0e 9c fa 4a 6d 08 6c b1 77 62 8d 2c 36 f9 f6 96 a8 1b 61 c9 d0 94 15 0e da 53 c3 9d 85 f6 77 b9 9d 36 22 53 87 92 dc d8 c1 6b 14 9d 21 de fe 05 e9 41 0c 2f e9 af 8a 3e 5f 72 49 b4 de 75 48 ed c4 e6 37 49 2f 4b dc 14 45 a8 3b 60 36 bc ef a7 b8 a7 7b 60 3c 5f 24 e3 ea c0 5f 4a 16 11 67 06 4a 51 37 9a 75 ee 93 3a 4c 30 50 9f e7 20 31 6e b0 e0 f3 6f d3 4c 5c 7e e2 78 57 ef 6a 47 47 cf 39 65 ab 02 b5 0d 56 8e 24 46 cf 88 54 31 97 2f Data Ascii: #f0CwvG8YmEL14ow4A}ks-nea-c4ib\|]#;Jmlwb,6aSw6"Sk!A/>_rIuH7I/KE;`6{`<_$_JgJQ7u:L0P 1noL\~xWjGG9eV$FT1/
2024-05-06 16:43:13 UTC	16384	IN	Data Raw: b1 6e d2 77 18 e9 7c 62 9d a0 65 58 71 c4 11 ab 72 73 88 17 a6 da 3a 18 25 a5 00 96 ef 60 41 4a c9 8e a2 30 1b 4a bf ee cd 1f a3 1c 1e 8f 6c b9 55 62 75 bf f7 ae 0a cf e9 4f 17 ea eb 27 3c 54 2e e8 a0 98 72 ee 92 97 d0 01 e7 5c c6 9f 8a c7 25 c2 37 b1 da 01 8f 15 ed 49 2e 04 48 69 39 41 ba ed e7 36 30 85 c6 e3 ad 98 44 5a 59 ba 0e af 52 ea ca 09 9f d1 d5 6e 3e 2e b5 be 2d f3 95 f2 dc be a3 21 3b 26 0d 41 e3 fd e2 a2 8f 29 6e c0 ca 1e d8 a8 72 c1 11 d4 d2 12 e4 a2 bf b7 39 33 11 4d 06 cb 5a 04 47 cf db 84 6f 39 a6 59 1a e7 31 0f 18 14 00 96 bd 36 4d ff 5f 84 5f b0 f0 7e 0e cf 25 f6 f1 2b f7 c0 33 c5 a3 ba 32 c6 59 77 7f d1 02 50 9b 52 c7 32 3c 56 6b 06 80 e1 84 6c fb 6d de 6e fc e1 47 f4 71 c5 30 f4 a9 2e 79 20 28 a0 d6 90 52 56 30 17 01 eb 31 f5 cc a2 8c Data Ascii: nw\|beXqrs:%`AJ0JlUbuO'<T.r\%7I.Hi9A60DZYRn>.-!;&A)nr93MZGo9Y16M__~%+32YwPR2<VklmnGq0.y (RV01
2024-05-06 16:43:13 UTC	16384	IN	Data Raw: f3 2a 4d db 2b f5 a6 cf 89 7e a3 ac b8 98 98 4b 4c 23 08 bc 57 9c 30 52 00 99 93 3c 9d a5 60 f0 ea 69 6e 7f 82 44 91 a6 7a 23 40 98 29 b6 1b 78 4a 45 5a d2 e9 a9 c8 7e 91 eb b8 0d e1 da c6 ff a8 60 d7 7a f9 4d 5a 72 79 69 43 52 2a 0d 8d 1f a6 bb 82 b3 57 01 7d 80 11 8d 94 83 c8 8b 5b a3 d3 0f bb c4 f4 79 c2 f2 81 2a 0b d8 31 3a f1 33 f8 9f c3 1b 20 01 2e 6d 3a 7e 8c be 0e b5 fa 3a db b1 ab 9e bb 07 16 53 ba bc 7d 25 a9 4d 4b 82 84 4f 6b ca 41 f7 bf ea 04 f8 d5 a2 ce 2f e7 86 84 43 70 11 7a f4 aa 16 86 b6 9f 3d 70 27 5b fa ca 27 10 04 6c 93 0d 58 6f 80 ad f4 53 ac 0b 58 31 92 18 0e 99 d7 13 2f df 07 37 e5 74 43 57 32 ea 8d 81 64 21 0d 98 94 4e 86 b5 59 41 97 06 62 af f0 eb c0 1f dc 3d 67 5e fe 10 8a b7 96 15 73 88 5e 1c cf a9 48 11 2e 8d 6f 48 73 a8 07 19 Data Ascii: M+~KL#W0R<`inDz#@)xJEZ~`zMZryiCRW}[y*1:3 .m:~:S}%MKOkA/Cpz=p'['lXoSX1/7tCW2d!NYAb=g^s^H.oHs
2024-05-06 16:43:13 UTC	16384	IN	Data Raw: 48 af f3 be ee 92 40 d3 ff af ed 90 80 09 dd 28 29 df 55 14 f2 a7 00 10 49 d4 32 2d 54 5a 9d 58 61 ee 93 ef 17 65 32 53 e8 5b 9a 96 7b b7 75 aa 9f 01 92 d3 2e 8f c6 1c b5 b0 d1 c1 31 9e 2c cb be 5e 59 19 bb 88 21 6b 23 60 8a cd 58 f6 51 e6 a6 64 a0 d9 2d aa 9a 1a 45 ad cc 0d 43 21 67 6d 33 36 00 50 5f 56 42 e3 97 8d 59 12 6a ce 25 a1 51 8c 21 2e 66 34 7b d6 82 fd c4 1c e6 38 5a ea ee 28 40 16 53 16 4e d5 3d d2 a0 5c 9a 34 01 20 c5 c6 98 8f d5 2c 76 88 30 53 c2 f6 d4 19 0c c4 42 cf 43 fe be 42 2e 5c 63 8c c8 4f ac 2d 9c 1a 3c 54 45 ff 85 68 78 b0 e2 c2 0c b5 a7 da e0 31 a2 87 1d 4c 24 ec 0f 46 70 7f fc 3c 34 29 65 6e 0b bd d5 c4 8b 9a 29 97 a4 15 35 e3 79 3d d7 d2 4a 2e ef 9d 31 c2 e1 34 7a 29 80 22 38 d3 6c 83 f2 dd 9f 92 2e d9 90 1b 3c d3 be f1 75 f5 26 Data Ascii: H@()UI2-TZXae2S[{u.1,^Y!k#`XQd-EC!gm36P_VBYj%Q!.f4{8Z(@SN=\4 ,v0SBCB.\cO-<TEhx1L$Fp<4)en)5y=J.14z)"8l.<u&
2024-05-06 16:43:13 UTC	16384	IN	Data Raw: 06 52 c3 42 ef 4a ab 02 7b e8 2f 5a 95 90 2e 73 65 7d 37 02 3f fc e4 62 74 fb 92 66 c1 6d 34 67 3a de 5a 01 1b 15 59 a5 54 fd e5 4b 5a 69 32 bf 2a 80 e4 13 d2 53 1a 0f 98 9c 13 76 c8 63 ef e4 91 26 99 55 fc cb 3d 53 53 57 6d f7 97 3d 80 2a 3d 89 7f 02 92 ff a6 d0 13 69 0b 18 00 a5 ff b6 40 71 bd 72 a0 bf 42 81 f3 6a 7e 2f 79 bf ad a6 ab a7 55 83 98 6d d2 e6 41 40 cd 58 5b ed 8c 63 dd 31 be 09 08 8e d5 da 1a 0d 53 6b 6a a7 d3 07 d5 9b fb 79 b6 f7 5e e0 01 38 0d ca 23 d8 8f 0b 5d 49 16 ab 15 f6 9d 44 a7 a5 d2 88 fe 47 d0 4c 3a dd 26 84 81 fd 23 3a 56 84 ce cc 71 4a 93 79 6b f9 ec f3 60 10 ef 52 47 b7 af 6d e4 c9 68 44 d4 86 ca 63 9e a8 91 58 86 59 6e 38 c2 66 c3 8a e9 22 c2 be 11 d9 75 cb e2 d0 e0 32 8f 62 df 8b f2 fc 66 ec 14 46 8e 11 53 a1 11 d7 8b a6 b1 Data Ascii: RBJ{/Z.se}7?btfm4g:ZYTKZi2Svc&U=SSWm==i@qrBj~/yUmA@X[c1Skjy^8#]IDGL:&#:VqJyk`RGmhDcXYn8f"u2bfFS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.11	50001	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:43:12 UTC	665	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/xs-home-banner-two.webp HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.rmshg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:43:13 UTC	520	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:43:13 GMT Content-Type: image/webp Content-Length: 65712 Connection: close Last-Modified: Fri, 08 Sep 2023 11:15:05 GMT ETag: 0x8DBB05CDADE2D7C x-ms-request-id: 3d08f940-801e-0049-06d4-9fba4e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164312Z-174c4b644cc2j2nvnewgssu2c400000000d000000001ncg8 Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-06 16:43:13 UTC	15864	IN	Data Raw: 52 49 46 46 a8 00 01 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 bb 02 00 bb 02 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFWEBPVP8X ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-05-06 16:43:13 UTC	16384	IN	Data Raw: 96 bd c3 5a 2c ae 36 e0 cf 4f 4d d7 4a 28 47 fa 4b a2 ea 37 4b aa 07 4c 92 91 d9 e8 46 62 fc 1b 20 00 ae a8 74 be 75 30 e6 1c 73 8f b8 9b b1 a3 3b 4f e2 b0 e0 5a 00 f1 80 0c 61 3e 88 59 35 fb ee 5d 5a a7 4b 0a 32 9f 6b b3 bd b4 9a 47 59 b6 78 e5 d4 16 aa c3 af 94 b9 dc 69 ee b8 e0 74 23 4e ac 60 bc eb e6 e4 26 23 3c 94 43 fe 76 c3 17 8d ce 27 98 a9 c8 8d b3 86 5a 12 10 cf d9 72 eb 3e 22 80 c6 95 12 3e a6 a2 b0 69 55 e3 6d a6 3b e9 b5 97 00 0e 30 1b 32 45 35 06 ed 4d 5b 70 68 09 bb e2 06 b9 95 32 cb 78 9b 04 89 fc 71 68 da 7c d6 b7 77 d9 b9 12 20 7a 86 8f fe 8a f6 13 67 b0 e4 c5 3c 41 4c 92 cc 96 d7 3a d1 8c 64 91 d1 00 8e f1 d5 15 77 4a db c3 4e 4b 93 91 aa 9b 47 2a bb 5d dc 36 f1 27 41 f8 25 3e fc 87 6a b4 92 2a 20 9e a7 9e 79 02 36 a9 82 a0 e6 44 a3 3f Data Ascii: Z,6OMJ(GK7KLFb tu0s;OZa>Y5]ZK2kGYxit#N`&#<Cv'Zr>">iUm;02E5M[ph2xqh\|w zg<AL:dwJNKG]6'A%>j y6D?
2024-05-06 16:43:13 UTC	16384	IN	Data Raw: 59 ba 29 a7 c5 02 16 ff b6 54 65 70 a8 09 e6 20 3e fa e3 d0 c4 9d 77 42 4e 35 7b 74 88 6a 6e bf 48 84 2f 92 96 54 9d 38 58 5b 68 c9 69 64 f4 ae b3 89 4a 28 90 e0 ab 24 f6 32 c2 0e cd 22 e0 13 de 6e 50 e0 12 09 b3 47 e8 1a 07 4c 37 92 86 f6 71 81 a5 fe b7 d3 74 ee 53 c1 9b 31 70 2d a1 35 a8 e0 14 bd b2 f6 82 e7 41 45 4a ce 5e e4 81 1f 8b 9b 2c e7 bb 35 7d 7b b5 d2 68 48 f0 42 72 cd 79 15 6a 8d aa af 8a 9a 19 e3 a0 08 38 46 2c ea 7b 17 9a ad 3b 13 a2 09 11 ea 0a ea 7f 40 ff 46 b0 29 31 bf 37 bd cc 72 ef 6b ec 9e 8c 6f 33 0c f9 08 76 01 bd 7f 43 df 99 a7 12 a9 73 e6 a7 16 38 42 56 f2 0f 3f fa 46 e8 a1 7e f1 c2 a0 0f e2 c3 57 a5 88 c2 4b 6c 1d fb a8 b2 6e 2a 21 6f 05 a3 84 8a 4e c9 67 43 d5 61 0a 35 fd 34 3b 58 ec 0f 8c 09 b7 64 9a a0 be 87 8e 31 13 36 a4 c9 Data Ascii: Y)Tep >wBN5{tjnH/T8X[hidJ($2"nPGL7qtS1p-5AEJ^,5}{hHBryj8F,{;@F)17rko3vCs8BV?F~WKln*!oNgCa54;Xd16
2024-05-06 16:43:13 UTC	16384	IN	Data Raw: 36 f7 3b db 0d 6d 77 a8 47 78 bf 87 3d 8e d4 47 14 a4 64 5a 87 5f 5e 8f e1 52 be 13 1e a9 77 e8 c9 f7 9d a5 35 ae de 97 17 20 da dc 45 16 d4 d9 3a 6c 00 85 24 00 42 a3 0f 8f 4c b9 52 dd e6 ef 06 4a b3 1e 01 ba d0 88 92 46 43 d7 a6 f7 01 85 e6 cb 97 3c 39 73 f1 48 1a 8f 5f d5 e1 3d 97 9b 2c 85 9a 53 ae ea f7 64 44 9a 59 67 53 d9 70 2c da ba a6 7d e0 00 a5 08 2b 04 5a a9 07 2a 16 49 b9 fa e0 44 eb 9a 79 99 51 19 2d bb c3 8a 07 11 51 9e 94 d2 e9 ab 4b c9 9c 00 2b e3 78 44 3a d2 c9 c8 96 20 62 83 dd 93 80 31 84 88 d4 72 f4 72 3e 53 2a 32 ab 50 60 a9 24 b1 9c ac d2 ee 19 10 65 e6 6e 7a 4e 30 f7 d4 b2 92 6e 19 f3 85 b9 f5 fe 69 a0 0b 48 0e 29 d8 cd 51 1a 98 d1 c2 4f 26 dd 3e 8d 73 7f ed 42 dd 55 64 05 7f 17 1b 29 6b 4a fc 56 4a 63 dc dc 6a da 05 3a fb 5d 22 7b Data Ascii: 6;mwGx=GdZ_^Rw5 E:l$BLRJFC<9sH_=,SdDYgSp,}+ZIDyQ-QK+xD: b1rr>S2P`$enzN0niH)QO&>sBUd)kJVJcj:]"{
2024-05-06 16:43:13 UTC	696	IN	Data Raw: 08 cb 22 11 9a 5b 4b 6f 62 03 ec 56 53 27 9e 24 20 51 f3 8c 83 d6 bc 78 8e c9 77 aa 6d 49 07 7a 08 a0 b6 44 27 d9 59 82 2d d6 a2 80 73 3f eb 4b e8 a1 4b 9d f1 ed 0d b6 46 80 c5 9a 92 b8 db 52 45 e0 fb c8 0b 97 85 0b e2 71 7e ea 1c 24 44 ed 99 c7 72 17 20 97 ed 72 65 20 3c f0 29 b2 ae 8d 5a 8f 4e e8 24 01 7c 73 89 60 96 6a a0 4b 99 05 46 13 2a 61 5d 01 5d 5e 97 fa da 75 3f 7a 57 22 d3 d9 da 5c 41 91 10 7d 7e e5 0a 8e e1 33 41 94 8f 27 1c be 36 05 ff 0d ba 08 4c 17 e7 90 3b 0e dd 16 73 c7 b4 81 2d 92 a1 72 d5 6a 54 9c a4 c3 eb 8a 14 fc 7a 43 a1 19 16 39 c3 9e 45 c7 30 3e b5 48 1b 4d 92 17 63 2a 00 84 13 a3 f9 d8 37 89 46 25 92 50 f3 d0 dd 8e 93 58 be 32 99 c8 e2 ed 58 be e7 c6 53 7c 08 03 ac d8 b8 60 0c 1c f3 6b bc fa 83 8f d7 08 86 c7 dc ac a7 60 24 b3 c8 Data Ascii: "[KobVS'$ QxwmIzD'Y-s?KKFREq~$Dr re <)ZN$\|s`jKFa]]^u?zW"\A}~3A'6L;s-rjTzC9E0>HMc7F%PX2XS\|`k`$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.11	50003	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:43:14 UTC	432	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/xs-home-banner-two.webp HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:43:14 UTC	540	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:43:14 GMT Content-Type: image/webp Content-Length: 65712 Connection: close Last-Modified: Fri, 08 Sep 2023 11:15:05 GMT ETag: 0x8DBB05CDADE2D7C x-ms-request-id: 3d08f940-801e-0049-06d4-9fba4e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164314Z-174c4b644ccs74jgmhzea1yqq00000000180000000000g5v Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-06 16:43:14 UTC	15844	IN	Data Raw: 52 49 46 46 a8 00 01 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 bb 02 00 bb 02 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFWEBPVP8X ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-05-06 16:43:14 UTC	16384	IN	Data Raw: cf 5e d5 48 5c 78 25 81 4a 48 d9 2f 15 95 fc 8e 24 5b 47 d3 96 bd c3 5a 2c ae 36 e0 cf 4f 4d d7 4a 28 47 fa 4b a2 ea 37 4b aa 07 4c 92 91 d9 e8 46 62 fc 1b 20 00 ae a8 74 be 75 30 e6 1c 73 8f b8 9b b1 a3 3b 4f e2 b0 e0 5a 00 f1 80 0c 61 3e 88 59 35 fb ee 5d 5a a7 4b 0a 32 9f 6b b3 bd b4 9a 47 59 b6 78 e5 d4 16 aa c3 af 94 b9 dc 69 ee b8 e0 74 23 4e ac 60 bc eb e6 e4 26 23 3c 94 43 fe 76 c3 17 8d ce 27 98 a9 c8 8d b3 86 5a 12 10 cf d9 72 eb 3e 22 80 c6 95 12 3e a6 a2 b0 69 55 e3 6d a6 3b e9 b5 97 00 0e 30 1b 32 45 35 06 ed 4d 5b 70 68 09 bb e2 06 b9 95 32 cb 78 9b 04 89 fc 71 68 da 7c d6 b7 77 d9 b9 12 20 7a 86 8f fe 8a f6 13 67 b0 e4 c5 3c 41 4c 92 cc 96 d7 3a d1 8c 64 91 d1 00 8e f1 d5 15 77 4a db c3 4e 4b 93 91 aa 9b 47 2a bb 5d dc 36 f1 27 41 f8 25 3e Data Ascii: ^H\x%JH/$[GZ,6OMJ(GK7KLFb tu0s;OZa>Y5]ZK2kGYxit#N`&#<Cv'Zr>">iUm;02E5M[ph2xqh\|w zg<AL:dwJNKG*]6'A%>
2024-05-06 16:43:14 UTC	16384	IN	Data Raw: e2 db d9 84 e4 f7 98 bf d4 04 50 f0 74 b4 d8 31 7f d1 21 84 59 ba 29 a7 c5 02 16 ff b6 54 65 70 a8 09 e6 20 3e fa e3 d0 c4 9d 77 42 4e 35 7b 74 88 6a 6e bf 48 84 2f 92 96 54 9d 38 58 5b 68 c9 69 64 f4 ae b3 89 4a 28 90 e0 ab 24 f6 32 c2 0e cd 22 e0 13 de 6e 50 e0 12 09 b3 47 e8 1a 07 4c 37 92 86 f6 71 81 a5 fe b7 d3 74 ee 53 c1 9b 31 70 2d a1 35 a8 e0 14 bd b2 f6 82 e7 41 45 4a ce 5e e4 81 1f 8b 9b 2c e7 bb 35 7d 7b b5 d2 68 48 f0 42 72 cd 79 15 6a 8d aa af 8a 9a 19 e3 a0 08 38 46 2c ea 7b 17 9a ad 3b 13 a2 09 11 ea 0a ea 7f 40 ff 46 b0 29 31 bf 37 bd cc 72 ef 6b ec 9e 8c 6f 33 0c f9 08 76 01 bd 7f 43 df 99 a7 12 a9 73 e6 a7 16 38 42 56 f2 0f 3f fa 46 e8 a1 7e f1 c2 a0 0f e2 c3 57 a5 88 c2 4b 6c 1d fb a8 b2 6e 2a 21 6f 05 a3 84 8a 4e c9 67 43 d5 61 0a 35 Data Ascii: Pt1!Y)Tep >wBN5{tjnH/T8X[hidJ($2"nPGL7qtS1p-5AEJ^,5}{hHBryj8F,{;@F)17rko3vCs8BV?F~WKln*!oNgCa5
2024-05-06 16:43:14 UTC	16384	IN	Data Raw: 91 cc 9f 72 5b d0 2d ca 83 8b 8f ad 15 14 a4 89 e9 65 79 62 36 f7 3b db 0d 6d 77 a8 47 78 bf 87 3d 8e d4 47 14 a4 64 5a 87 5f 5e 8f e1 52 be 13 1e a9 77 e8 c9 f7 9d a5 35 ae de 97 17 20 da dc 45 16 d4 d9 3a 6c 00 85 24 00 42 a3 0f 8f 4c b9 52 dd e6 ef 06 4a b3 1e 01 ba d0 88 92 46 43 d7 a6 f7 01 85 e6 cb 97 3c 39 73 f1 48 1a 8f 5f d5 e1 3d 97 9b 2c 85 9a 53 ae ea f7 64 44 9a 59 67 53 d9 70 2c da ba a6 7d e0 00 a5 08 2b 04 5a a9 07 2a 16 49 b9 fa e0 44 eb 9a 79 99 51 19 2d bb c3 8a 07 11 51 9e 94 d2 e9 ab 4b c9 9c 00 2b e3 78 44 3a d2 c9 c8 96 20 62 83 dd 93 80 31 84 88 d4 72 f4 72 3e 53 2a 32 ab 50 60 a9 24 b1 9c ac d2 ee 19 10 65 e6 6e 7a 4e 30 f7 d4 b2 92 6e 19 f3 85 b9 f5 fe 69 a0 0b 48 0e 29 d8 cd 51 1a 98 d1 c2 4f 26 dd 3e 8d 73 7f ed 42 dd 55 64 05 Data Ascii: r[-eyb6;mwGx=GdZ_^Rw5 E:l$BLRJFC<9sH_=,SdDYgSp,}+ZIDyQ-QK+xD: b1rr>S2P`$enzN0niH)QO&>sBUd
2024-05-06 16:43:14 UTC	716	IN	Data Raw: d3 01 bf 13 a3 9a 7f 2e 45 3c 74 0a 8a ae ba d7 4d 19 a6 5a 08 cb 22 11 9a 5b 4b 6f 62 03 ec 56 53 27 9e 24 20 51 f3 8c 83 d6 bc 78 8e c9 77 aa 6d 49 07 7a 08 a0 b6 44 27 d9 59 82 2d d6 a2 80 73 3f eb 4b e8 a1 4b 9d f1 ed 0d b6 46 80 c5 9a 92 b8 db 52 45 e0 fb c8 0b 97 85 0b e2 71 7e ea 1c 24 44 ed 99 c7 72 17 20 97 ed 72 65 20 3c f0 29 b2 ae 8d 5a 8f 4e e8 24 01 7c 73 89 60 96 6a a0 4b 99 05 46 13 2a 61 5d 01 5d 5e 97 fa da 75 3f 7a 57 22 d3 d9 da 5c 41 91 10 7d 7e e5 0a 8e e1 33 41 94 8f 27 1c be 36 05 ff 0d ba 08 4c 17 e7 90 3b 0e dd 16 73 c7 b4 81 2d 92 a1 72 d5 6a 54 9c a4 c3 eb 8a 14 fc 7a 43 a1 19 16 39 c3 9e 45 c7 30 3e b5 48 1b 4d 92 17 63 2a 00 84 13 a3 f9 d8 37 89 46 25 92 50 f3 d0 dd 8e 93 58 be 32 99 c8 e2 ed 58 be e7 c6 53 7c 08 03 ac d8 b8 Data Ascii: .E<tMZ"[KobVS'$ QxwmIzD'Y-s?KKFREq~$Dr re <)ZN$\|s`jKFa]]^u?zW"\A}~3A'6L;s-rjTzC9E0>HMc7F%PX2XS\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.11	50004	13.107.246.41	443	2812	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-06 16:43:14 UTC	429	OUT	GET /source/sites/3c517dd6-6fa6-438a-8d47-e7a9cdca3e3b/images/home-banner-two.webp HTTP/1.1 Host: cdn.stratospherewebsites.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-06 16:43:14 UTC	548	IN	HTTP/1.1 200 OK Date: Mon, 06 May 2024 16:43:14 GMT Content-Type: image/webp Content-Length: 198018 Connection: close Last-Modified: Fri, 08 Sep 2023 11:15:01 GMT ETag: 0x8DBB05CD8195B5E x-ms-request-id: 1e4e93ee-501e-0017-4ad4-9f51ae000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240506T164314Z-174c4b644cc2jftdzntyz37er000000002gg00000000duze Cache-Control: public, max-age=31536000 x-fd-int-roxy-purgeid: 69388692 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-06 16:43:14 UTC	15836	IN	Data Raw: 52 49 46 46 7a 05 03 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 7f 07 00 ff 04 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFzWEBPVP8X ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-05-06 16:43:14 UTC	16384	IN	Data Raw: 26 08 9f 12 ff d3 4a 20 04 ee c5 1e 60 a3 e4 64 28 08 cd c9 ad 22 1a f0 e5 4f 0b 9a cb 2c 80 b0 50 cb 6f 8f 06 fe 79 be 40 2a 40 ee a1 a3 7e d6 d8 f3 bc 5e 86 14 69 ac 16 3c 46 76 96 11 87 43 91 6c 37 d3 36 bc 4f 76 4d b2 42 4f cf 9c 20 9c a7 b6 ff c9 61 01 f3 79 98 21 db 81 54 f7 c6 75 9b d5 8d b3 ca 3b 7e cc e2 8c e4 6b 3c 1c 1e 62 18 a0 f6 e7 57 44 c0 d4 01 3f 05 e3 83 e8 96 b1 6c c7 8d 91 e4 fa 46 8f e5 6b 33 6e 7f ff e7 73 44 79 40 63 5c 6b 63 c5 1e e1 d7 33 b0 6a 53 65 0e 01 3a 9d 0f 9d c3 a9 fa 02 36 72 ba 2f 54 1e 90 2b cb 4a c1 34 5d db e0 06 33 61 1e 97 a3 1f b3 37 9c dd b0 d0 1b 69 61 6d 4d e5 be 28 23 95 08 47 37 1c 3a 8c a3 f2 0a ef 98 42 8a 97 96 34 fb 44 40 a8 df 93 8b 9d 9f 9a 87 8a 0d c1 73 11 8e 2e 8e a8 5c 3c 9e 8b cd 2f f4 ff f6 a4 12 Data Ascii: &J `d("O,Poy@*@~^i<FvCl76OvMBO ay!Tu;~k<bWD?lFk3nsDy@c\kc3jSe:6r/T+J4]3a7iamM(#G7:B4D@s.\</
2024-05-06 16:43:15 UTC	16384	IN	Data Raw: 1a 44 de 79 0b 51 99 bd f3 b2 fa ad 70 49 9e 0a 5c 23 43 bb 57 8d 98 3b 25 8b 8b 7e 3a 92 ef 1a 59 46 a6 9f 7e 8c ca 3a 39 42 24 72 8c 8c e1 67 8f 57 31 4a be 84 06 3d 39 70 e8 bc 6b 8e 5c 33 6d 07 4e 20 c2 81 51 35 ef d3 ea 67 c9 3a 72 1f d0 b0 e9 75 a0 a0 f3 c5 76 c2 4e c4 15 19 12 c6 5a a8 a3 8b 77 6c db 62 02 b3 aa 9d 30 9a 9c fd 7e 55 20 5a 9f 79 11 7c 5d d7 23 bf 3e 7e 3e ac 14 c4 a9 0c fb 6c 5f 37 5a 6a 75 ff b4 6b 06 a1 a5 14 82 ac ce 42 59 b8 69 7a 3c 84 d9 82 4d c9 ad be 16 92 5c f1 07 9f 5f b9 32 eb 69 8a 2e e6 27 3c 1f 71 f4 60 58 c4 dd 15 6c 3e 98 e2 7e 04 30 ae 2e 6f 33 a2 c0 84 13 03 4e ca f3 de 22 35 58 65 63 4e 12 a6 3a 8c db 7e ae 2a f4 9c f7 c0 c3 87 e2 2e 10 e7 83 f3 a0 5e 1a 95 22 98 2d 55 9a a6 70 96 33 33 87 1d 4f da 75 43 cf 38 6a Data Ascii: DyQpI\#CW;%~:YF~:9B$rgW1J=9pk\3mN Q5g:ruvNZwlb0~U Zy\|]#>~>l_7ZjukBYiz<M\_2i.'<q`Xl>~0.o3N"5XecN:~*.^"-Up33OuC8j
2024-05-06 16:43:15 UTC	16384	IN	Data Raw: 8d 1f cf f4 45 94 2f 2b 0c 6a dc 8c 01 d1 b7 69 fa 2d 29 ff f5 18 e6 7d 95 f3 70 6f 7a 37 d2 8d 2f 85 8b cc a8 88 a8 15 f2 6a a5 84 68 85 7a a9 de 4e b0 9e 7d 23 e7 5e a7 ff 28 1d bc 42 47 2e c0 2e 9d 4d 36 96 9a d9 32 e7 47 77 59 1c 6d ad 54 f8 2c 08 af fd c2 e0 bd 1f 33 8e 90 4f ad b7 c2 92 7f a1 db bd 36 73 0d e4 c7 4b 7c 60 b9 a1 60 9c 3a e6 63 d8 3b e6 c5 1b d3 2b bc 72 c9 8b c3 92 85 b2 43 5e 5c 1a d2 2d 50 8e 9e 62 32 a5 49 86 44 3a da c3 58 a1 69 d1 4b 2a 61 24 f2 5c a2 b6 7a fc f0 d9 ea df 79 73 03 b3 9f 89 52 e1 ca 9a 53 14 70 a3 e1 51 77 e3 ec aa 4d 19 f8 0e 4c 0e a0 c5 fe 08 31 30 1e 74 b9 da b4 a9 c7 29 e5 f0 3b 5b 7a 2b 9c 3b 5d e0 db 2d c4 16 b1 e3 ff d9 04 53 97 75 92 0d ea a1 79 c4 f0 85 cd 51 6d 28 8e ae 59 d0 48 c4 b2 d5 52 2f 20 b3 c1 Data Ascii: E/+ji-)}poz7/jhzN}#^(BG..M62GwYmT,3O6sK\|``:c;+rC^\-Pb2ID:XiK*a$\zysRSpQwML10t);[z+;]-SuyQm(YHR/
2024-05-06 16:43:15 UTC	16384	IN	Data Raw: bb 10 0d 4d f8 16 f5 66 3b fe dd cb 43 ed 5d 2f 7c 2c 28 eb 7a e5 4c 45 75 5a c3 8a ca c5 b9 51 9c 54 d4 88 00 cd 46 b6 10 77 df 11 e4 9c 28 bb d9 28 2b d3 79 08 20 49 4e f5 c3 3d e5 fd d9 68 cb 9a 3f 5b ee 7f e9 00 b7 61 91 78 91 85 c1 82 e5 4a 41 db 9e 01 43 1f f2 10 f5 1a 94 e4 1d d8 f2 a6 9d 02 78 6a 6c a3 0b 95 f2 bc 39 1f a7 fe 84 2b c7 e3 a5 0a 44 b6 f9 7f e1 f4 2a b8 b1 b5 bc 9d fb 59 f7 60 a0 8f 1a 2c 68 60 a3 47 c1 66 39 75 5d 7d 71 fb 45 dd 14 0a 9b fb 83 0b 8f 24 7c ba 65 bd c5 f8 4f 97 52 cd 59 f2 c8 a1 b0 05 1b c5 aa 84 a4 fc 7a ee e2 a8 7d 2f ed 07 98 bd be 3d ff 95 44 5c 45 83 ad f3 fd ca c5 f4 8e 28 94 fe 87 f5 e4 7f 28 1d a5 b8 69 f8 2f 9e 35 2e 65 4e d5 d3 c5 b8 80 b7 41 e7 2d 4c ca b3 18 9b 39 2f 0b a2 a5 b4 28 49 fd 3b 2a 33 fb f6 a6 Data Ascii: Mf;C]/\|,(zLEuZQTFw((+y IN=h?[axJACxjl9+DY`,h`Gf9u]}qE$\|eORYz}/=D\E((i/5.eNA-L9/(I;3
2024-05-06 16:43:15 UTC	16384	IN	Data Raw: 11 47 1b 95 89 28 58 c5 da 1e e7 30 32 a0 d4 62 0b a2 e2 cc 23 81 66 ed de 30 b0 12 43 f5 93 1a 77 fc d3 8a 76 10 f9 88 99 8e 02 47 86 fb a3 38 59 13 d6 6d 45 83 4c f0 12 06 c2 d4 a3 d5 cd 31 34 f3 15 09 be 6f e3 8e c9 fc c9 e9 c1 77 a5 0a 34 ac ed fd 14 41 fe 81 7d ee a3 c1 6b be 73 96 2d 85 6e 65 9a 8d 17 f1 61 d9 2d ff c0 9e 63 87 34 c6 89 69 62 c0 7c f9 ea 5d 0f ef 23 0c d7 e3 c4 3b f1 0e 9c fa 4a 6d 08 6c b1 77 62 8d 2c 36 f9 f6 96 a8 1b 61 c9 d0 94 15 0e da 53 c3 9d 85 f6 77 b9 9d 36 22 53 87 92 dc d8 c1 6b 14 9d 21 de fe 05 e9 41 0c 2f e9 af 8a 3e 5f 72 49 b4 de 75 48 ed c4 e6 37 49 2f 4b dc 14 45 a8 3b 60 36 bc ef a7 b8 a7 7b 60 3c 5f 24 e3 ea c0 5f 4a 16 11 67 06 4a 51 37 9a 75 ee 93 3a 4c 30 50 9f e7 20 31 6e b0 e0 f3 6f d3 4c 5c 7e e2 78 57 ef Data Ascii: G(X02b#f0CwvG8YmEL14ow4A}ks-nea-c4ib\|]#;Jmlwb,6aSw6"Sk!A/>_rIuH7I/KE;`6{`<_$_JgJQ7u:L0P 1noL\~xW
2024-05-06 16:43:15 UTC	16384	IN	Data Raw: b6 8c 5e 45 7d 48 0c 26 2c 2b 4f 01 0d f8 c3 25 ff 84 37 e2 b1 6e d2 77 18 e9 7c 62 9d a0 65 58 71 c4 11 ab 72 73 88 17 a6 da 3a 18 25 a5 00 96 ef 60 41 4a c9 8e a2 30 1b 4a bf ee cd 1f a3 1c 1e 8f 6c b9 55 62 75 bf f7 ae 0a cf e9 4f 17 ea eb 27 3c 54 2e e8 a0 98 72 ee 92 97 d0 01 e7 5c c6 9f 8a c7 25 c2 37 b1 da 01 8f 15 ed 49 2e 04 48 69 39 41 ba ed e7 36 30 85 c6 e3 ad 98 44 5a 59 ba 0e af 52 ea ca 09 9f d1 d5 6e 3e 2e b5 be 2d f3 95 f2 dc be a3 21 3b 26 0d 41 e3 fd e2 a2 8f 29 6e c0 ca 1e d8 a8 72 c1 11 d4 d2 12 e4 a2 bf b7 39 33 11 4d 06 cb 5a 04 47 cf db 84 6f 39 a6 59 1a e7 31 0f 18 14 00 96 bd 36 4d ff 5f 84 5f b0 f0 7e 0e cf 25 f6 f1 2b f7 c0 33 c5 a3 ba 32 c6 59 77 7f d1 02 50 9b 52 c7 32 3c 56 6b 06 80 e1 84 6c fb 6d de 6e fc e1 47 f4 71 c5 30 Data Ascii: ^E}H&,+O%7nw\|beXqrs:%`AJ0JlUbuO'<T.r\%7I.Hi9A60DZYRn>.-!;&A)nr93MZGo9Y16M__~%+32YwPR2<VklmnGq0
2024-05-06 16:43:15 UTC	16384	IN	Data Raw: d8 82 56 07 4c 68 52 d5 5a 85 11 27 70 2e 86 49 bf 92 a9 fc f3 2a 4d db 2b f5 a6 cf 89 7e a3 ac b8 98 98 4b 4c 23 08 bc 57 9c 30 52 00 99 93 3c 9d a5 60 f0 ea 69 6e 7f 82 44 91 a6 7a 23 40 98 29 b6 1b 78 4a 45 5a d2 e9 a9 c8 7e 91 eb b8 0d e1 da c6 ff a8 60 d7 7a f9 4d 5a 72 79 69 43 52 2a 0d 8d 1f a6 bb 82 b3 57 01 7d 80 11 8d 94 83 c8 8b 5b a3 d3 0f bb c4 f4 79 c2 f2 81 2a 0b d8 31 3a f1 33 f8 9f c3 1b 20 01 2e 6d 3a 7e 8c be 0e b5 fa 3a db b1 ab 9e bb 07 16 53 ba bc 7d 25 a9 4d 4b 82 84 4f 6b ca 41 f7 bf ea 04 f8 d5 a2 ce 2f e7 86 84 43 70 11 7a f4 aa 16 86 b6 9f 3d 70 27 5b fa ca 27 10 04 6c 93 0d 58 6f 80 ad f4 53 ac 0b 58 31 92 18 0e 99 d7 13 2f df 07 37 e5 74 43 57 32 ea 8d 81 64 21 0d 98 94 4e 86 b5 59 41 97 06 62 af f0 eb c0 1f dc 3d 67 5e fe 10 Data Ascii: VLhRZ'p.IM+~KL#W0R<`inDz#@)xJEZ~`zMZryiCRW}[y*1:3 .m:~:S}%MKOkA/Cpz=p'['lXoSX1/7tCW2d!NYAb=g^
2024-05-06 16:43:15 UTC	16384	IN	Data Raw: 68 1d bb 9f 98 ca 88 4a da 98 31 bf b7 a8 ac a8 b3 d7 db 30 48 af f3 be ee 92 40 d3 ff af ed 90 80 09 dd 28 29 df 55 14 f2 a7 00 10 49 d4 32 2d 54 5a 9d 58 61 ee 93 ef 17 65 32 53 e8 5b 9a 96 7b b7 75 aa 9f 01 92 d3 2e 8f c6 1c b5 b0 d1 c1 31 9e 2c cb be 5e 59 19 bb 88 21 6b 23 60 8a cd 58 f6 51 e6 a6 64 a0 d9 2d aa 9a 1a 45 ad cc 0d 43 21 67 6d 33 36 00 50 5f 56 42 e3 97 8d 59 12 6a ce 25 a1 51 8c 21 2e 66 34 7b d6 82 fd c4 1c e6 38 5a ea ee 28 40 16 53 16 4e d5 3d d2 a0 5c 9a 34 01 20 c5 c6 98 8f d5 2c 76 88 30 53 c2 f6 d4 19 0c c4 42 cf 43 fe be 42 2e 5c 63 8c c8 4f ac 2d 9c 1a 3c 54 45 ff 85 68 78 b0 e2 c2 0c b5 a7 da e0 31 a2 87 1d 4c 24 ec 0f 46 70 7f fc 3c 34 29 65 6e 0b bd d5 c4 8b 9a 29 97 a4 15 35 e3 79 3d d7 d2 4a 2e ef 9d 31 c2 e1 34 7a 29 80 Data Ascii: hJ10H@()UI2-TZXae2S[{u.1,^Y!k#`XQd-EC!gm36P_VBYj%Q!.f4{8Z(@SN=\4 ,v0SBCB.\cO-<TEhx1L$Fp<4)en)5y=J.14z)
2024-05-06 16:43:15 UTC	16384	IN	Data Raw: 3b 60 fe 1f a2 2c 5e 31 35 92 e4 fa 7a 32 eb 6c ad 2e dc 8d 06 52 c3 42 ef 4a ab 02 7b e8 2f 5a 95 90 2e 73 65 7d 37 02 3f fc e4 62 74 fb 92 66 c1 6d 34 67 3a de 5a 01 1b 15 59 a5 54 fd e5 4b 5a 69 32 bf 2a 80 e4 13 d2 53 1a 0f 98 9c 13 76 c8 63 ef e4 91 26 99 55 fc cb 3d 53 53 57 6d f7 97 3d 80 2a 3d 89 7f 02 92 ff a6 d0 13 69 0b 18 00 a5 ff b6 40 71 bd 72 a0 bf 42 81 f3 6a 7e 2f 79 bf ad a6 ab a7 55 83 98 6d d2 e6 41 40 cd 58 5b ed 8c 63 dd 31 be 09 08 8e d5 da 1a 0d 53 6b 6a a7 d3 07 d5 9b fb 79 b6 f7 5e e0 01 38 0d ca 23 d8 8f 0b 5d 49 16 ab 15 f6 9d 44 a7 a5 d2 88 fe 47 d0 4c 3a dd 26 84 81 fd 23 3a 56 84 ce cc 71 4a 93 79 6b f9 ec f3 60 10 ef 52 47 b7 af 6d e4 c9 68 44 d4 86 ca 63 9e a8 91 58 86 59 6e 38 c2 66 c3 8a e9 22 c2 be 11 d9 75 cb e2 d0 e0 Data Ascii: ;`,^15z2l.RBJ{/Z.se}7?btfm4g:ZYTKZi2Svc&U=SSWm==i@qrBj~/yUmA@X[c1Skjy^8#]IDGL:&#:VqJyk`RGmhDcXYn8f"u

Target ID:	0
Start time:	18:41:42
Start date:	06/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6a3150000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:41:47
Start date:	06/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2492 --field-trial-handle=2460,i,14899353169943493930,12871650326961900512,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6a3150000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:41:49
Start date:	06/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://rmshg.amplified.training/"
Imagebase:	0x7ff6a3150000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://rmshg.amplified.training/	HTTP Parser: <input type="password" .../> found
Source: https://rmshg.amplified.training/index	HTTP Parser: <input type="password" .../> found
Source: https://rmshg.amplified.training/catalog	HTTP Parser: <input type="password" .../> found

Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Ld7KXUUAAAAAAknjFUvMThz44a8gU2bvUq0YFw-&co=aHR0cHM6Ly9mb3J0aXMtc2l0ZS5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=fwww2nyjhy7o	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6Ld7KXUUAAAAAAknjFUvMThz44a8gU2bvUq0YFw-	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Ld7KXUUAAAAAAknjFUvMThz44a8gU2bvUq0YFw-&co=aHR0cHM6Ly9mb3J0aXMtc2l0ZS5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=ppya948ml626	HTTP Parser: No favicon

Source: https://rmshg.amplified.training/	HTTP Parser: No <meta name="author".. found
Source: https://rmshg.amplified.training/index	HTTP Parser: No <meta name="author".. found
Source: https://rmshg.amplified.training/catalog	HTTP Parser: No <meta name="author".. found
Source: https://rmshg.amplified.training/catalog	HTTP Parser: No <meta name="author".. found
Source: https://fortis-site.com/	HTTP Parser: No <meta name="author".. found
Source: https://fortis-site.com/	HTTP Parser: No <meta name="author".. found
Source: https://fortis-site.com/	HTTP Parser: No <meta name="author".. found
Source: https://fortis-site.com/	HTTP Parser: No <meta name="author".. found
Source: https://fortis-site.com/	HTTP Parser: No <meta name="author".. found
Source: https://fortis-site.com/	HTTP Parser: No <meta name="author".. found

Source: https://rmshg.amplified.training/	HTTP Parser: No <meta name="copyright".. found
Source: https://rmshg.amplified.training/index	HTTP Parser: No <meta name="copyright".. found
Source: https://rmshg.amplified.training/catalog	HTTP Parser: No <meta name="copyright".. found
Source: https://rmshg.amplified.training/catalog	HTTP Parser: No <meta name="copyright".. found
Source: https://fortis-site.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://fortis-site.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://fortis-site.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://fortis-site.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://fortis-site.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://fortis-site.com/	HTTP Parser: No <meta name="copyright".. found

Source: global traffic	DNS traffic detected: DNS query: rmshg.amplified.training
Source: global traffic	DNS traffic detected: DNS query: d3j0t7vrtr92dk.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.rmshg.com
Source: global traffic	DNS traffic detected: DNS query: cdn.stratospherewebsites.com
Source: global traffic	DNS traffic detected: DNS query: kit.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: googletagmanager.com
Source: global traffic	DNS traffic detected: DNS query: cdn.userway.org
Source: global traffic	DNS traffic detected: DNS query: ka-p.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: api.userway.org
Source: global traffic	DNS traffic detected: DNS query: cdn77.api.userway.org
Source: global traffic	DNS traffic detected: DNS query: fortis-site.com
Source: global traffic	DNS traffic detected: DNS query: fortissite.wpengine.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42

Source: chromecache_390.2.dr	String found in binary or memory: <a href="https://www.facebook.com/pages/RMS-Hospitality-Group/820479311345627" title="Facebook" target="_blank"> equals www.facebook.com (Facebook)
Source: chromecache_390.2.dr	String found in binary or memory: <a href="https://www.linkedin.com/company/9205751?trk=tyah&trkInfo=idx%3A2-2-3%2CtarId%3A1424725448600%2Ctas%3ARMS+Hospitality" title="Linkedin" target="_blank"> equals www.linkedin.com (Linkedin)
Source: chromecache_390.2.dr	String found in binary or memory: <a href="https://www.youtube.com/channel/UCRgLZ5OmT9gI7sGPSEUnckA/feed?view_as=public" title="Youtube" target="_blank"> equals www.youtube.com (Youtube)
Source: chromecache_327.2.dr	String found in binary or memory: return b}yC.K="internal.enableAutoEventOnTimer";var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://rmshg.amplified.training/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Chrome Cache Entry: 217

Chrome Cache Entry: 218

Chrome Cache Entry: 219

Chrome Cache Entry: 220

Chrome Cache Entry: 221

Chrome Cache Entry: 222

Chrome Cache Entry: 223

Chrome Cache Entry: 224

Chrome Cache Entry: 225

Chrome Cache Entry: 226

Chrome Cache Entry: 227

Chrome Cache Entry: 228

Chrome Cache Entry: 229

Chrome Cache Entry: 230

Chrome Cache Entry: 231

Chrome Cache Entry: 232

Chrome Cache Entry: 233

Windows Analysis Report
https://rmshg.amplified.training/