Edit tour

Windows Analysis Report
https://trk.klclick3.com/ls/click?upn=bBwYdIep1AJAhlueKA-2FYA-2FiZB25bBJh74wxcvz7MbGRPW8Sumng75RGT1g5XS8cjbfmY-2B36p0K05EHzrwgenVucrqr4wcbtuSTwUvsCLkp7yNipUK-2B-2FNaDgkKPZvGU-2FeFk2oNL8Cwbk73-2FgVgciDWKs7EH5RHkh4JQ7UzYtmcj0T2v97DZCXopI01GYDKBnCGDu5JGSJeb2B-2BC-2BiwvHpQcN7uwZDtFJLVNCcASk2ytPbSbN6DXY3

Overview

General Information

Sample URL:	https://trk.klclick3.com/ls/click?upn=bBwYdIep1AJAhlueKA-2FYA-2FiZB25bBJh74wxcvz7MbGRPW8Sumng75RGT1g5XS8cjbfmY-2B36p0K05EHzrwgenVucrqr4wcbtuSTwUvsCLkp7yNipUK-2B-2FNaDgkKPZvGU-2FeFk2oNL8Cwbk73-2FgVgciD
Analysis ID:	1375721
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Creates files inside the system directory

Found iframes

HTML body contains low number of good links

HTML body contains password input but no form action

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 4884 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://trk.klclick3.com/ls/click?upn=bBwYdIep1AJAhlueKA-2FYA-2FiZB25bBJh74wxcvz7MbGRPW8Sumng75RGT1g5XS8cjbfmY-2B36p0K05EHzrwgenVucrqr4wcbtuSTwUvsCLkp7yNipUK-2B-2FNaDgkKPZvGU-2FeFk2oNL8Cwbk73-2FgVgciDWKs7EH5RHkh4JQ7UzYtmcj0T2v97DZCXopI01GYDKBnCGDu5JGSJeb2B-2BC-2BiwvHpQcN7uwZDtFJLVNCcASk2ytPbSbN6DXY3zGy2QIb4zfVuOOrvJvX4AYss6-2FMGf-2FLtoJ7EVDcQUFASKPodO4SDGaqD6Bmc8P77aL-2FkVxJju4Dgwb1F_PoPSv5Gw7kvm-2FaTPf5isV0F8OzVemx3-2BMda5lKttFwV5hYNASaBIOvhduvo23ZgNxryqZbnFqmZgF2SN317Jd5JsAvLWLiTx01vINjL-2F5lNDaOUHPgjGlCX5KJOQWKvYIEsyEtGsWDE-2FWVvyeRrrk4vCfS2JQMJn5yy-2FO8x3j7XGuUdh-2F6jheAyXeY-2FcbZn5oa9YDlMndYX-2FMs9037sfq0RD4LSVjBHfZJ41mqRz3cMyiWVWiBP-2Fepkutp7Xi6fORoNqe0OXl4XSRoLzjS-2F-2B2BwqUOD8bdrQqvj-2BGxMHjy87MVEE7U79i0WQowFwSCFN MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 4904 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=2072,i,11186840568436156353,11485786068315141287,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 5548 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4212 --field-trial-handle=2072,i,11186840568436156353,11485786068315141287,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://trk.klclick3.com/ls/click?upn=bBwYdIep1AJAhlueKA-2FYA-2FiZB25bBJh74wxcvz7MbGRPW8Sumng75RGT1g5XS8cjbfmY-2B36p0K05EHzrwgenVucrqr4wcbtuSTwUvsCLkp7yNipUK-2B-2FNaDgkKPZvGU-2FeFk2oNL8Cwbk73-2FgVgciDWKs7EH5RHkh4JQ7UzYtmcj0T2v97DZCXopI01GYDKBnCGDu5JGSJeb2B-2BC-2BiwvHpQcN7uwZDtFJLVNCcASk2ytPbSbN6DXY3zGy2QIb4zfVuOOrvJvX4AYss6-2FMGf-2FLtoJ7EVDcQUFASKPodO4SDGaqD6Bmc8P77aL-2FkVxJju4Dgwb1F_PoPSv5Gw7kvm-2FaTPf5isV0F8OzVemx3-2BMda5lKttFwV5hYNASaBIOvhduvo23ZgNxryqZbnFqmZgF2SN317Jd5JsAvLWLiTx01vINjL-2F5lNDaOUHPgjGlCX5KJOQWKvYIEsyEtGsWDE-2FWVvyeRrrk4vCfS2JQMJn5yy-2FO8x3j7XGuUdh-2F6jheAyXeY-2FcbZn5oa9YDlMndYX-2FMs9037sfq0RD4LSVjBHfZJ41mqRz3cMyiWVWiBP-2Fepkutp7Xi6fORoNqe0OXl4XSRoLzjS-2F-2B2BwqUOD8bdrQqvj-2BGxMHjy87MVEE7U79i0WQowFwSCFN

Avira URL Cloud: detection malicious, Label: phishing

Source: https://signable.app/register?country_code=US&_gl=1%2a1aykcz3%2a_gcl_au%2aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%2a_ga%2aMjEzMTUwODYzOS4xNzA1NDQwNzc2%2a_ga_4XE2VYSQ35%2aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-NMPMBWS
Source: https://signable.app/register?country_code=US&_gl=1%2a1aykcz3%2a_gcl_au%2aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%2a_ga%2aMjEzMTUwODYzOS4xNzA1NDQwNzc2%2a_ga_4XE2VYSQ35%2aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.	HTTP Parser: Iframe src: https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html#url=https%3A%2F%2Fsignable.app%2Fregister%3Fcountry_code%3DUS%26_gl%3D11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.&title=Signable&referrer=https%3A%2F%2Fwww.signable.us%2F&muid=NA&sid=NA&version=6&preview=false
Source: https://signable.app/register?country_code=US&_gl=1%2a1aykcz3%2a_gcl_au%2aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%2a_ga%2aMjEzMTUwODYzOS4xNzA1NDQwNzc2%2a_ga_4XE2VYSQ35%2aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-NMPMBWS
Source: https://signable.app/register?country_code=US&_gl=1%2a1aykcz3%2a_gcl_au%2aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%2a_ga%2aMjEzMTUwODYzOS4xNzA1NDQwNzc2%2a_ga_4XE2VYSQ35%2aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.	HTTP Parser: Iframe src: https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html#url=https%3A%2F%2Fsignable.app%2Fregister%3Fcountry_code%3DUS%26_gl%3D11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.&title=Signable&referrer=https%3A%2F%2Fwww.signable.us%2F&muid=NA&sid=NA&version=6&preview=false
Source: https://signable.app/register?country_code=US&_gl=1%2a1aykcz3%2a_gcl_au%2aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%2a_ga%2aMjEzMTUwODYzOS4xNzA1NDQwNzc2%2a_ga_4XE2VYSQ35%2aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-NMPMBWS
Source: https://signable.app/register?country_code=US&_gl=1%2a1aykcz3%2a_gcl_au%2aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%2a_ga%2aMjEzMTUwODYzOS4xNzA1NDQwNzc2%2a_ga_4XE2VYSQ35%2aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.	HTTP Parser: Iframe src: https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html#url=https%3A%2F%2Fsignable.app%2Fregister%3Fcountry_code%3DUS%26_gl%3D11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.&title=Signable&referrer=https%3A%2F%2Fwww.signable.us%2F&muid=NA&sid=NA&version=6&preview=false

Source: https://signable.app/register?country_code=US&_gl=1%2a1aykcz3%2a_gcl_au%2aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%2a_ga%2aMjEzMTUwODYzOS4xNzA1NDQwNzc2%2a_ga_4XE2VYSQ35%2aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.

HTTP Parser: Number of links: 1

HTTP Parser: <input type="password" .../> found but no <form action="...

HTTP Parser: <input type="password" .../> found

Source: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F	HTTP Parser: No favicon
Source: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F	HTTP Parser: No favicon
Source: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1705440768503	HTTP Parser: No favicon
Source: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1705440768503	HTTP Parser: No favicon
Source: https://signable.app/register?country_code=US&_gl=1%2a1aykcz3%2a_gcl_au%2aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%2a_ga%2aMjEzMTUwODYzOS4xNzA1NDQwNzc2%2a_ga_4XE2VYSQ35%2aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.	HTTP Parser: No favicon
Source: https://m.stripe.network/inner.html#url=https%3A%2F%2Fsignable.app%2Fregister%3Fcountry_code%3DUS%26_gl%3D11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.&title=Signable&referrer=https%3A%2F%2Fwww.signable.us%2F&muid=NA&sid=NA&version=6&preview=false	HTTP Parser: No favicon
Source: https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html#url=https%3A%2F%2Fsignable.app%2Fregister%3Fcountry_code%3DUS%26_gl%3D11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.&title=Signable&referrer=https%3A%2F%2Fwww.signable.us%2F&muid=NA&sid=NA&version=6&preview=false	HTTP Parser: No favicon

Source: https://signable.app/register?country_code=US&_gl=1%2a1aykcz3%2a_gcl_au%2aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%2a_ga%2aMjEzMTUwODYzOS4xNzA1NDQwNzc2%2a_ga_4XE2VYSQ35%2aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.	HTTP Parser: No <meta name="author".. found
Source: https://signable.app/register?country_code=US&_gl=1%2a1aykcz3%2a_gcl_au%2aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%2a_ga%2aMjEzMTUwODYzOS4xNzA1NDQwNzc2%2a_ga_4XE2VYSQ35%2aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.	HTTP Parser: No <meta name="author".. found
Source: https://signable.app/register?country_code=US&_gl=1%2a1aykcz3%2a_gcl_au%2aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%2a_ga%2aMjEzMTUwODYzOS4xNzA1NDQwNzc2%2a_ga_4XE2VYSQ35%2aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.	HTTP Parser: No <meta name="author".. found

Source: https://signable.app/register?country_code=US&_gl=1%2a1aykcz3%2a_gcl_au%2aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%2a_ga%2aMjEzMTUwODYzOS4xNzA1NDQwNzc2%2a_ga_4XE2VYSQ35%2aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.	HTTP Parser: No <meta name="copyright".. found
Source: https://signable.app/register?country_code=US&_gl=1%2a1aykcz3%2a_gcl_au%2aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%2a_ga%2aMjEzMTUwODYzOS4xNzA1NDQwNzc2%2a_ga_4XE2VYSQ35%2aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.	HTTP Parser: No <meta name="copyright".. found
Source: https://signable.app/register?country_code=US&_gl=1%2a1aykcz3%2a_gcl_au%2aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%2a_ga%2aMjEzMTUwODYzOS4xNzA1NDQwNzc2%2a_ga_4XE2VYSQ35%2aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 173.222.162.7:443 -> 192.168.2.18:49840 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.18:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.18:50036 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 173.222.162.7:443 -> 192.168.2.18:49840 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.7
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.7
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.7
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.7
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.7
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.7
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.7
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.7
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.7
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.7
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.7
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.7
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.7
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.7
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.7
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.7
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.7
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /ls/click?upn=bBwYdIep1AJAhlueKA-2FYA-2FiZB25bBJh74wxcvz7MbGRPW8Sumng75RGT1g5XS8cjbfmY-2B36p0K05EHzrwgenVucrqr4wcbtuSTwUvsCLkp7yNipUK-2B-2FNaDgkKPZvGU-2FeFk2oNL8Cwbk73-2FgVgciDWKs7EH5RHkh4JQ7UzYtmcj0T2v97DZCXopI01GYDKBnCGDu5JGSJeb2B-2BC-2BiwvHpQcN7uwZDtFJLVNCcASk2ytPbSbN6DXY3zGy2QIb4zfVuOOrvJvX4AYss6-2FMGf-2FLtoJ7EVDcQUFASKPodO4SDGaqD6Bmc8P77aL-2FkVxJju4Dgwb1F_PoPSv5Gw7kvm-2FaTPf5isV0F8OzVemx3-2BMda5lKttFwV5hYNASaBIOvhduvo23ZgNxryqZbnFqmZgF2SN317Jd5JsAvLWLiTx01vINjL-2F5lNDaOUHPgjGlCX5KJOQWKvYIEsyEtGsWDE-2FWVvyeRrrk4vCfS2JQMJn5yy-2FO8x3j7XGuUdh-2F6jheAyXeY-2FcbZn5oa9YDlMndYX-2FMs9037sfq0RD4LSVjBHfZJ41mqRz3cMyiWVWiBP-2Fepkutp7Xi6fORoNqe0OXl4XSRoLzjS-2F-2B2BwqUOD8bdrQqvj-2BGxMHjy87MVEE7U79i0WQowFwSCFN HTTP/1.1Host: trk.klclick3.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.149&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-117.0.5938.149Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.signable.usConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dist/block-library/style.min.css?ver=6.4.2 HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/elements/blocks/content-archive/signable-contentarchive.css?ver=6.4.2 HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/elements/blocks/content-filter/signable-contentfilter.css?ver=6.4.2 HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles.css?ver=4.6.8 HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cookie-notice/css/front.min.css?ver=2.4.13 HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/css/style.css?ver=1701765538 HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/fonts/roboto/roboto-regular-webfont.woff2 HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.signable.ussec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/fonts/roboto/roboto-bold-webfont.woff2 HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.signable.ussec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/fonts/roboto-slab/robotoslab-regular-webfont.woff2 HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.signable.ussec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/fonts/roboto/Roboto-Bold.ttf HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.signable.ussec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.signable.us/wp-content/themes/Signable2019Theme/_/css/style.css?ver=1701765538Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/fonts/roboto-slab/RobotoSlab-VariableFont_wght.ttf HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.signable.ussec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.signable.us/wp-content/themes/Signable2019Theme/_/css/style.css?ver=1701765538Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/fonts/roboto/Roboto-Regular.ttf HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.signable.ussec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.signable.us/wp-content/themes/Signable2019Theme/_/css/style.css?ver=1701765538Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/fonts/roboto/Roboto-Italic.ttf HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.signable.ussec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.signable.us/wp-content/themes/Signable2019Theme/_/css/style.css?ver=1701765538Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/fonts/icomoon/icomoon.woff?t7sq8w HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.signable.ussec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.signable.us/wp-content/themes/Signable2019Theme/_/css/style.css?ver=1701765538Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/fonts/roboto-slab/robotoslab-bold-webfont.woff2 HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.signable.ussec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/img/backgrounds/bg_fingerprint.svg HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/wp-content/themes/Signable2019Theme/_/css/style.css?ver=1701765538Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/signable_esignatures_leading_screenshot.png HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/img/signable_logo.svg HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/img/icon_down_light.svg HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/wp-content/themes/Signable2019Theme/_/css/style.css?ver=1701765538Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/img/backgrounds/bg_fingerprint.svg HTTP/1.1Host: www.signable.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gr?id=-MNNFwoamUG1AtkUIbBv&refurl=&winurl=https%3A%2F%2Fwww.signable.us%2F HTTP/1.1Host: g10102301085.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/img/logos/logo_cyber_essentials.png HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/img/icon_down_light.svg HTTP/1.1Host: www.signable.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gr?id=-MS8X4ftmPqTw1B7FB9q&refurl=&winurl=https%3A%2F%2Fwww.signable.us%2F HTTP/1.1Host: g10102301085.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gr?id=-MS8UqefaxrWlk6E9b1T&refurl=&winurl=https%3A%2F%2Fwww.signable.us%2F HTTP/1.1Host: g10102301085.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/img/signable_logo.svg HTTP/1.1Host: www.signable.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cookie-notice/js/front.min.js?ver=2.4.13 HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /-/sync-cookies.js?ver=1692089186 HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/sitepress-multilingual-cms/res/js/xdomain-data.js?ver=4.6.8 HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fprom.js HTTP/1.1Host: cdn.firstpromoter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/img/icons/icon_facebook.svg HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/img/icons/icon_instagram.svg HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/signable_esignatures_leading_screenshot.png HTTP/1.1Host: www.signable.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/img/icons/icon_twitter.svg HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/img/logos/logo_cyber_essentials.png HTTP/1.1Host: www.signable.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/img/icons/icon_linkedin.svg HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/img/icons/icon_tiktok.svg HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/sg-cachepress/assets/js/lazysizes.min.js?ver=7.4.6 HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/js/responsive-image-maps.min.js?ver=1692089186 HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/img/icons/icon_facebook.svg HTTP/1.1Host: www.signable.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/img/icons/icon_instagram.svg HTTP/1.1Host: www.signable.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/js/vendor/slick.min.js?ver=1692089186 HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/js/functions.out.js?ver=1692089186 HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/img/icons/icon_twitter.svg HTTP/1.1Host: www.signable.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/hotjar-2736869.js?sv=7 HTTP/1.1Host: static.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/js/panel-expanders.min.js?ver=3.4.1 HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/img/icons/icon_linkedin.svg HTTP/1.1Host: www.signable.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/img/icons/icon_tiktok.svg HTTP/1.1Host: www.signable.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/img/backgrounds/signable_squiggle_right_black.svg HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/wp-content/themes/Signable2019Theme/_/css/style.css?ver=1701765538Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/img/icons/icon_star_rating.png HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/wp-content/themes/Signable2019Theme/_/css/style.css?ver=1701765538Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/img/backgrounds/signable_squiggle_left_black.svg HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/wp-content/themes/Signable2019Theme/_/css/style.css?ver=1701765538Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775
Source: global traffic	HTTP traffic detected: GET /include/1705440900000/n9f4k7sdmsma.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/img/backgrounds/bg_app_screen.png HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/wp-content/themes/Signable2019Theme/_/css/style.css?ver=1701765538Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/img/icons/icon_list_tick.svg HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/wp-content/themes/Signable2019Theme/_/css/style.css?ver=1701765538Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/elements/blocks/expanding-panels//_/img/caret-down.svg HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/icon_star_rating_orange.png HTTP/1.1Host: signable.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/img/icons/icon_star_rating.png HTTP/1.1Host: www.signable.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _ga_4XE2VYSQ35=GS1.1.1705440775.1.0.1705440775.60.0.0; _ga=GA1.1.2131508639.1705440776
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/img/backgrounds/squiggle_left_white.svg HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/wp-content/themes/Signable2019Theme/_/css/style.css?ver=1701765538Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _ga_4XE2VYSQ35=GS1.1.1705440775.1.0.1705440775.60.0.0; _ga=GA1.1.2131508639.1705440776
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/img/backgrounds/signable_squiggle_right_black.svg HTTP/1.1Host: www.signable.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _ga_4XE2VYSQ35=GS1.1.1705440775.1.0.1705440775.60.0.0; _ga=GA1.1.2131508639.1705440776
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_krispykreme.png HTTP/1.1Host: signable.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_bodyshop.png HTTP/1.1Host: signable.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/img/backgrounds/signable_squiggle_left_black.svg HTTP/1.1Host: www.signable.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _ga_4XE2VYSQ35=GS1.1.1705440775.1.0.1705440775.60.0.0; _ga=GA1.1.2131508639.1705440776
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_university_of_edinburgh.png HTTP/1.1Host: signable.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /modules.2472296d2d26f0040059.js HTTP/1.1Host: script.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_allegiant.png HTTP/1.1Host: signable.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/img/icons/icon_list_tick.svg HTTP/1.1Host: www.signable.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _ga_4XE2VYSQ35=GS1.1.1705440775.1.0.1705440775.60.0.0; _ga=GA1.1.2131508639.1705440776
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_london_philharmonic_orchestra.png HTTP/1.1Host: signable.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/elements/blocks/expanding-panels//_/img/caret-down.svg HTTP/1.1Host: www.signable.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _ga_4XE2VYSQ35=GS1.1.1705440775.1.0.1705440775.60.0.0; _ga=GA1.1.2131508639.1705440776
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-4XE2VYSQ35&cid=2131508639.1705440776&gtm=45je41a0v875209417z8855770727&aip=1&dma=0&gcd=11l1l1l1l1&z=1021128266 HTTP/1.1Host: www.google.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiTocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/img/backgrounds/bg_app_screen.png HTTP/1.1Host: www.signable.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _ga_4XE2VYSQ35=GS1.1.1705440775.1.0.1705440775.60.0.0; _ga=GA1.1.2131508639.1705440776
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Signable2019Theme/_/img/backgrounds/squiggle_left_white.svg HTTP/1.1Host: www.signable.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _ga_4XE2VYSQ35=GS1.1.1705440775.1.0.1705440775.60.0.0; _ga=GA1.1.2131508639.1705440776
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/icon_star_rating_orange.png HTTP/1.1Host: www.signable.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_krispykreme.png HTTP/1.1Host: www.signable.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/2736869?s=0.25&r=0.07354558351397111 HTTP/1.1Host: vc.hotjar.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.signable.usSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-4XE2VYSQ35&cid=2131508639.1705440776&gtm=45je41a0v875209417z8855770727&aip=1&dma=0&gcd=11l1l1l1l1&z=1021128266 HTTP/1.1Host: www.google.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiTocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_bodyshop.png HTTP/1.1Host: www.signable.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_university_of_edinburgh.png HTTP/1.1Host: www.signable.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_allegiant.png HTTP/1.1Host: www.signable.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_london_philharmonic_orchestra.png HTTP/1.1Host: www.signable.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_hat_trick.png HTTP/1.1Host: signable.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_coop.png HTTP/1.1Host: signable.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_regatta_great_outdoors.png HTTP/1.1Host: signable.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_krispykreme.png HTTP/1.1Host: www.signable.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/icon_star_rating_orange.png HTTP/1.1Host: www.signable.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_bodyshop.png HTTP/1.1Host: www.signable.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_octopus_energy.png HTTP/1.1Host: signable.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_allegiant.png HTTP/1.1Host: www.signable.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_london_philharmonic_orchestra.png HTTP/1.1Host: www.signable.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_aardman.png HTTP/1.1Host: signable.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_university_of_edinburgh.png HTTP/1.1Host: www.signable.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_allsopp_allsopp.png HTTP/1.1Host: signable.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=+Kz8tpYVXzeuwt7&MD=X5Zd6xmD HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_hat_trick.png HTTP/1.1Host: www.signable.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_coop.png HTTP/1.1Host: www.signable.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_regatta_great_outdoors.png HTTP/1.1Host: www.signable.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_octopus_energy.png HTTP/1.1Host: www.signable.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_aardman.png HTTP/1.1Host: www.signable.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_allsopp_allsopp.png HTTP/1.1Host: www.signable.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_river_island.png HTTP/1.1Host: signable.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_hat_trick.png HTTP/1.1Host: www.signable.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_coop.png HTTP/1.1Host: www.signable.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_smart_pension.png HTTP/1.1Host: signable.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_octopus_energy.png HTTP/1.1Host: www.signable.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_aardman.png HTTP/1.1Host: www.signable.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_regatta_great_outdoors.png HTTP/1.1Host: www.signable.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_allsopp_allsopp.png HTTP/1.1Host: www.signable.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_river_island.png HTTP/1.1Host: www.signable.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_smart_pension.png HTTP/1.1Host: www.signable.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_river_island.png HTTP/1.1Host: www.signable.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1705440768503 HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/logo_smart_pension.png HTTP/1.1Host: www.signable.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/runtime~main.bf33b308.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://js.driftt.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/9.4a3e9801.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://js.driftt.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/main~493df0b3.d2a43907.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://js.driftt.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/graphic_document_tracking.png HTTP/1.1Host: signable.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/css/8.7602338c.chunk.css HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/css/16.22abfce0.chunk.css HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/51.558be3c5.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/35.d0f1ccda.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/22.6b9a301a.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/19.6f85b843.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/41.b4fc4de2.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/20.8c21ea18.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/26.04e7f30b.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/14.e24a6190.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/11.639238ba.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/18.9c1bd1fb.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/49.f7274268.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/graphic_document_tracking.png HTTP/1.1Host: www.signable.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/40.31ef8dbf.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/29.31d09948.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/21.b8c41db9.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/8.2d8d67fe.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/16.d3128480.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/24.a37bd669.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/17.4d495840.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/css/28.b5e8f5e1.chunk.css HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/css/25.c695453b.chunk.css HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/css/37.11d2b6a7.chunk.css HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1705440768503Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/0.0b2ebd4a.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/27.01c2bea5.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/28.0bf965fa.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/37.fba521ea.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1705440768503Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/25.cc73c6f2.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/graphic_document_tracking.png HTTP/1.1Host: www.signable.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/css/3.07aa08a5.chunk.css HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1705440768503Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/css/1.12ba17b6.chunk.css HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1705440768503Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/css/34.d13ab69b.chunk.css HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1705440768503Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/3.f50b964b.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1705440768503Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/1.eb95d786.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1705440768503Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/4.c6304c2e.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1705440768503Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/34.cf26c954.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1705440768503Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget_bootstrap/ping/v2 HTTP/1.1Host: bootstrap.api.drift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.signable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _ga_4XE2VYSQ35=GS1.1.1705440775.1.0.1705440775.60.0.0; _ga=GA1.1.2131508639.1705440776; _hjSessionUser_2736869=eyJpZCI6IjVjMmEyNmQ5LTkxN2QtNWFlOC1iNDIwLTg4YmY2ZmI3ZDdhMyIsImNyZWF0ZWQiOjE3MDU0NDA3NzczMzAsImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_2736869=0; _hjSession_2736869=eyJpZCI6IjkyZDM1OTIwLTM5ZTEtNDQ0Ni05YTNmLTM3NWI5MWYxZTEzYiIsImMiOjE3MDU0NDA3NzczMzEsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; drift_campaign_refresh=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189; drift_aid=e76a4160-895e-4b36-a73a-93a2057e9ca0; driftt_aid=e76a4160-895e-4b36-a73a-93a2057e9ca0
Source: global traffic	HTTP traffic detected: GET /monitoring/metrics/widget/init/v3 HTTP/1.1Host: metrics.api.drift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget_bootstrap HTTP/1.1Host: bootstrap.api.drift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVNTAwNjE5MC0yMDcwNDc3Nzk4My00ZAAGb3JnX2lkbQAAAAc1MDA2MTkwZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjA3MDQ3Nzc5ODNkAAl1c2VyX3R5cGVkAARsZWFkbgYACz0xFI0BYgABUYA.XdPj0z867PfHcHAbzwabnWIcGcuEx8ytQB05130QDU0&remote_ip=3.226.111.211&vsn=2.0.0 HTTP/1.1Host: 5006190-40.chat.api.drift.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://js.driftt.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: 7L1qypv2NRoGtHtplJwQjA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.signable.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _ga_4XE2VYSQ35=GS1.1.1705440775.1.0.1705440775.60.0.0; _ga=GA1.1.2131508639.1705440776; _hjSessionUser_2736869=eyJpZCI6IjVjMmEyNmQ5LTkxN2QtNWFlOC1iNDIwLTg4YmY2ZmI3ZDdhMyIsImNyZWF0ZWQiOjE3MDU0NDA3NzczMzAsImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_2736869=0; _hjSession_2736869=eyJpZCI6IjkyZDM1OTIwLTM5ZTEtNDQ0Ni05YTNmLTM3NWI5MWYxZTEzYiIsImMiOjE3MDU0NDA3NzczMzEsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; drift_campaign_refresh=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189; drift_aid=e76a4160-895e-4b36-a73a-93a2057e9ca0; driftt_aid=e76a4160-895e-4b36-a73a-93a2057e9ca0
Source: global traffic	HTTP traffic detected: GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVNTAwNjE5MC0yMDcwNDc3Nzk4My00ZAAGb3JnX2lkbQAAAAc1MDA2MTkwZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjA3MDQ3Nzc5ODNkAAl1c2VyX3R5cGVkAARsZWFkbgYACz0xFI0BYgABUYA.XdPj0z867PfHcHAbzwabnWIcGcuEx8ytQB05130QDU0&remote_ip=3.226.111.211&vsn=2.0.0 HTTP/1.1Host: 5006190-40.chat.api.drift.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://js.driftt.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: QKQtFZTqm4IV84rQMT2FIA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /monitoring/metrics/event3/bulk HTTP/1.1Host: metrics.api.drift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVNTAwNjE5MC0yMDcwNDc3Nzk4My00ZAAGb3JnX2lkbQAAAAc1MDA2MTkwZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjA3MDQ3Nzc5ODNkAAl1c2VyX3R5cGVkAARsZWFkbgYACz0xFI0BYgABUYA.XdPj0z867PfHcHAbzwabnWIcGcuEx8ytQB05130QDU0&remote_ip=3.226.111.211&vsn=2.0.0 HTTP/1.1Host: 5006190-40.chat.api.drift.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://js.driftt.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: 0Cmd+T/uEnnkSbG9cf1KFQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /monitoring/metrics/add/bulk/v2 HTTP/1.1Host: metrics.api.drift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVNTAwNjE5MC0yMDcwNDc3Nzk4My00ZAAGb3JnX2lkbQAAAAc1MDA2MTkwZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjA3MDQ3Nzc5ODNkAAl1c2VyX3R5cGVkAARsZWFkbgYACz0xFI0BYgABUYA.XdPj0z867PfHcHAbzwabnWIcGcuEx8ytQB05130QDU0&remote_ip=3.226.111.211&vsn=2.0.0 HTTP/1.1Host: 5006190-40.chat.api.drift.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://js.driftt.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: zM44Mx2fTBhsdqd4i1GlsQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.signable.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/app.b771bac2.css HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/chunk-vendors.39eafe1e.css HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/app.685e378c.js HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/chunk-vendors.0e57b079.js HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/ HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/chunk-00a20ec4.e88fa9a7.css HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/chunk-1353338a.470369c5.css HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/chunk-1565c410.e2751d66.css HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/chunk-194b1996.b657570a.css HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/chunk-1e9122a3.470369c5.css HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/chunk-280daae3.81389a4a.css HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/signable_squiggle_1_cropped.svg HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signable.app/css/app.b771bac2.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/signable_white_raster.d35aa760.png HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signable.app/register?country_code=US&_gl=1%2a1aykcz3%2a_gcl_au%2aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%2a_ga%2aMjEzMTUwODYzOS4xNzA1NDQwNzc2%2a_ga_4XE2VYSQ35%2aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/signable_squiggle_2_cropped.svg HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signable.app/css/app.b771bac2.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/300342/envelope/?sentry_key=f7d01a52e1b04292834f1daa40ae2ad9&sentry_version=7 HTTP/1.1Host: sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eval/6239d86c177e3a150044c12d/eyJrZXkiOiJhbm9ueW1vdXMtdXNlciIsImtpbmQiOiJ1c2VyIiwiYW5vbnltb3VzIjp0cnVlfQ HTTP/1.1Host: clientstream.launchdarkly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/event-streamCache-Control: no-cachesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://signable.appSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/signable_squiggle_1_cropped.svg HTTP/1.1Host: signable.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775
Source: global traffic	HTTP traffic detected: GET /libs/amplitude-5.2.2-min.gz.js HTTP/1.1Host: cdn.amplitude.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signable.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/signable_squiggle_2_cropped.svg HTTP/1.1Host: signable.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775
Source: global traffic	HTTP traffic detected: GET /img/signable_white_raster.d35aa760.png HTTP/1.1Host: signable.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775
Source: global traffic	HTTP traffic detected: GET /inner.html HTTP/1.1Host: m.stripe.networkConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://js.stripe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /out-4.5.43.js HTTP/1.1Host: m.stripe.networkConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://m.stripe.network/inner.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/hotjar-983768.js?sv=7 HTTP/1.1Host: static.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4564783.js HTTP/1.1Host: js.hs-scripts.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/profitwell.js?auth=a861c1c403b5b01660dfb23936a58d9b HTTP/1.1Host: public.profitwell.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/143547069376485?v=2.9.140&r=stable&domain=signable.app HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /modules.2472296d2d26f0040059.js HTTP/1.1Host: script.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/4564783/banner.js HTTP/1.1Host: js.hs-banner.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /manifest.json HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://signable.app/register?country_code=US&_gl=1%2a1aykcz3%2a_gcl_au%2aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%2a_ga%2aMjEzMTUwODYzOS4xNzA1NDQwNzc2%2a_ga_4XE2VYSQ35%2aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /leadflows.js HTTP/1.1Host: js.hsleadflows.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signable.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/chunk-3fbf9bd4.470369c5.css HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9
Source: global traffic	HTTP traffic detected: GET /analytics/1705440600000/4564783.js HTTP/1.1Host: js.hs-analytics.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/983768?s=0.25&r=0.20914611521171556 HTTP/1.1Host: vc.hotjar.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://signable.appSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/icons/android-chrome-192x192.png HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signable.app/register?country_code=US&_gl=1%2a1aykcz3%2a_gcl_au%2aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%2a_ga%2aMjEzMTUwODYzOS4xNzA1NDQwNzc2%2a_ga_4XE2VYSQ35%2aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /img/icons/favicon-32x32.png HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signable.app/register?country_code=US&_gl=1%2a1aykcz3%2a_gcl_au%2aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%2a_ga%2aMjEzMTUwODYzOS4xNzA1NDQwNzc2%2a_ga_4XE2VYSQ35%2aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /css/chunk-4182be59.49cf84b2.css HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=
Source: global traffic	HTTP traffic detected: GET /css/chunk-45deaaac.5eef7021.css HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=
Source: global traffic	HTTP traffic detected: GET /css/chunk-48100a7b.e3de593f.css HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=
Source: global traffic	HTTP traffic detected: GET /css/chunk-49391346.619a8446.css HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=
Source: global traffic	HTTP traffic detected: GET /lead-flows-config/v1/config/json?portalId=4564783&utk=58b81774595ab88167e6e3d83f5cd4dc&__hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1&__hssc=178014586.1.1705440810544&referrer=https%3A%2F%2Fwww.signable.us%2F&currentUrl=https%3A%2F%2Fsignable.app%2Fregister%3Fcountry_code%3DUS%26_gl%3D1%252a1aykcz3%252a_gcl_au%252aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%252a_ga%252aMjEzMTUwODYzOS4xNzA1NDQwNzc2%252a_ga_4XE2VYSQ35%252aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. HTTP/1.1Host: forms.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://signable.appSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6 HTTP/1.1Host: m.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=0609bac3-d68d-4920-8c06-3a23d99946c22167c7
Source: global traffic	HTTP traffic detected: GET /img/icons/favicon-32x32.png HTTP/1.1Host: signable.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /img/icons/android-chrome-192x192.png HTTP/1.1Host: signable.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /lead-flows-config/v1/config/json?portalId=4564783&utk=58b81774595ab88167e6e3d83f5cd4dc&__hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1&__hssc=178014586.1.1705440810544&referrer=https%3A%2F%2Fwww.signable.us%2F&currentUrl=https%3A%2F%2Fsignable.app%2Fregister%3Fcountry_code%3DUS%26_gl%3D1%252a1aykcz3%252a_gcl_au%252aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%252a_ga%252aMjEzMTUwODYzOS4xNzA1NDQwNzc2%252a_ga_4XE2VYSQ35%252aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. HTTP/1.1Host: forms.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: beacon-v2.helpscout.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/chunk-69b2ef63.470369c5.css HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=4197038910&v=1.1&a=4564783&po=%2Fregister&r=https%3A%2F%2Fwww.signable.us%2F&pu=https%3A%2F%2Fsignable.app%2Fregister%3Fcountry_code%3DUS%26_gl%3D1%252a1aykcz3%252a_gcl_au%252aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%252a_ga%252aMjEzMTUwODYzOS4xNzA1NDQwNzc2%252a_ga_4XE2VYSQ35%252aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.&t=Register+-+Signable&cts=1705440810548&vi=58b81774595ab88167e6e3d83f5cd4dc&nc=true&u=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1&b=178014586.1.1705440810544&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=4197038910&v=1.1&a=4564783&po=%2Fregister&r=https%3A%2F%2Fwww.signable.us%2F&pu=https%3A%2F%2Fsignable.app%2Fregister%3Fcountry_code%3DUS%26_gl%3D1%252a1aykcz3%252a_gcl_au%252aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%252a_ga%252aMjEzMTUwODYzOS4xNzA1NDQwNzc2%252a_ga_4XE2VYSQ35%252aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.&t=Register+-+Signable&cts=1705440810550&vi=58b81774595ab88167e6e3d83f5cd4dc&nc=true&u=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1&b=178014586.1.1705440810544&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__ptbe.gif?n=pe4564783_test___api_key&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=4197038910&v=1.1&a=4564783&po=%2Fregister&r=https%3A%2F%2Fwww.signable.us%2F&pu=https%3A%2F%2Fsignable.app%2Fregister%3Fcountry_code%3DUS%26_gl%3D1%252a1aykcz3%252a_gcl_au%252aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%252a_ga%252aMjEzMTUwODYzOS4xNzA1NDQwNzc2%252a_ga_4XE2VYSQ35%252aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.&t=Register+-+Signable&cts=1705440810551&vi=58b81774595ab88167e6e3d83f5cd4dc&nc=true&u=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1&b=178014586.1.1705440810544&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/chunk-6f4fbc3c.890b69cf.css HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /6 HTTP/1.1Host: m.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=0609bac3-d68d-4920-8c06-3a23d99946c22167c7
Source: global traffic	HTTP traffic detected: GET /static/js/vendor.cd87fe5a.js HTTP/1.1Host: beacon-v2.helpscout.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/main.c0baafe3.js HTTP/1.1Host: beacon-v2.helpscout.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/chunk-6fa298f8.470369c5.css HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=4197038910&v=1.1&a=4564783&po=%2Fregister&r=https%3A%2F%2Fwww.signable.us%2F&pu=https%3A%2F%2Fsignable.app%2Fregister%3Fcountry_code%3DUS%26_gl%3D1%252a1aykcz3%252a_gcl_au%252aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%252a_ga%252aMjEzMTUwODYzOS4xNzA1NDQwNzc2%252a_ga_4XE2VYSQ35%252aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.&t=Register+-+Signable&cts=1705440810550&vi=58b81774595ab88167e6e3d83f5cd4dc&nc=true&u=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1&b=178014586.1.1705440810544&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cfuvid=9vTAK6u3ikCL16cuTSO7dP6SEkSoxM2z4aD_KDunubI-1705440812569-0-604800000; __cf_bm=YZktJnuN7oByQGAPpmkmuQWva6QFR9zUeHhNf27D31c-1705440812-1-AeaUNweCIUrNqprsW1vCTano/rR3eVPVL+DivWAGHhAOAMOm8RPsCsRhcU3PzZmV//IdrqfORHMn7LNn7DvxusI=
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=4197038910&v=1.1&a=4564783&po=%2Fregister&r=https%3A%2F%2Fwww.signable.us%2F&pu=https%3A%2F%2Fsignable.app%2Fregister%3Fcountry_code%3DUS%26_gl%3D1%252a1aykcz3%252a_gcl_au%252aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%252a_ga%252aMjEzMTUwODYzOS4xNzA1NDQwNzc2%252a_ga_4XE2VYSQ35%252aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.&t=Register+-+Signable&cts=1705440810548&vi=58b81774595ab88167e6e3d83f5cd4dc&nc=true&u=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1&b=178014586.1.1705440810544&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cfuvid=9vTAK6u3ikCL16cuTSO7dP6SEkSoxM2z4aD_KDunubI-1705440812569-0-604800000; __cf_bm=YZktJnuN7oByQGAPpmkmuQWva6QFR9zUeHhNf27D31c-1705440812-1-AeaUNweCIUrNqprsW1vCTano/rR3eVPVL+DivWAGHhAOAMOm8RPsCsRhcU3PzZmV//IdrqfORHMn7LNn7DvxusI=
Source: global traffic	HTTP traffic detected: GET /__ptbe.gif?n=pe4564783_test___api_key&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=4197038910&v=1.1&a=4564783&po=%2Fregister&r=https%3A%2F%2Fwww.signable.us%2F&pu=https%3A%2F%2Fsignable.app%2Fregister%3Fcountry_code%3DUS%26_gl%3D1%252a1aykcz3%252a_gcl_au%252aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%252a_ga%252aMjEzMTUwODYzOS4xNzA1NDQwNzc2%252a_ga_4XE2VYSQ35%252aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.&t=Register+-+Signable&cts=1705440810551&vi=58b81774595ab88167e6e3d83f5cd4dc&nc=true&u=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1&b=178014586.1.1705440810544&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=2b_Rc0WREXb4PDG2UsMp3j1WwGPqtAD5ejQcg4JqHA8-1705440812-1-AYaNB6RvIo0jFU2aBDY31kJk8vzFhPiwmJ6QUMm8VaAWl0fQyumtmErAMN69/oMiSz04TXK5pP6Q2D8pIjLIpe8=; _cfuvid=7T0e1yuwr9afJKJ3XWTVqSnGadfWT42NBqfYMNFSfuI-1705440812597-0-604800000
Source: global traffic	HTTP traffic detected: GET /css/chunk-79dc7497.470369c5.css HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /css/chunk-7b758553.470369c5.css HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /css/chunk-85d922d4.4a74123c.css HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=e5f75074-1823-4a3c-84ba-5ca688398a5b; __Host-stripe.mkt.csrf=-kl4xLn5KDvH7fH6FifO1KecnXAJNEhw8EIDtQabof8Oq7lf6puFBzFte4N7K_G4-N7xhRy44TEodcrMHnqVCzw-AcAXe4b2pvKGXYbN_P_xsmpFiAyqEK65JhgPraWNmP2_WpiMgQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /6 HTTP/1.1Host: m.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=0609bac3-d68d-4920-8c06-3a23d99946c22167c7
Source: global traffic	HTTP traffic detected: GET /v1/e0babb59-c246-44d5-8e05-fbd03a64bd6b HTTP/1.1Host: d3hb14vkzrxvla.cloudfront.netConnection: keep-alivecorrelationId: 27946dd2-3759-4f61-b080-4ffacc9d295csec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Helpscout-Release: 2.2.141sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: application/json, text/plain, /Beacon-Device-ID: e83eb0e6-1917-40a9-a740-d67eaf2cc0aaHelpscout-Origin: Beacon-Embedsec-ch-ua-platform: "Windows"Origin: https://signable.appSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/chunk-b047b602.470369c5.css HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /css/chunk-c63e4446.87239537.css HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /css/chunk-c6e20010.e1aaddd4.css HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /css/chunk-c9608798.f20ec259.css HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /css/chunk-e2d611fa.470369c5.css HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /v1/e0babb59-c246-44d5-8e05-fbd03a64bd6b HTTP/1.1Host: d3hb14vkzrxvla.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=e5f75074-1823-4a3c-84ba-5ca688398a5b; __Host-stripe.mkt.csrf=-kl4xLn5KDvH7fH6FifO1KecnXAJNEhw8EIDtQabof8Oq7lf6puFBzFte4N7K_G4-N7xhRy44TEodcrMHnqVCzw-AcAXe4b2pvKGXYbN_P_xsmpFiAyqEK65JhgPraWNmP2_WpiMgQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /js/chunk-00a20ec4.d702e96a.js HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /js/chunk-1353338a.9f80a755.js HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /js/chunk-1565c410.9229aed9.js HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /js/chunk-194b1996.454a30c3.js HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /js/chunk-1c2a00ac.be49cfa2.js HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /js/chunk-1e9122a3.b481b48e.js HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /js/chunk-280daae3.6c402300.js HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /js/chunk-2d0a473d.3aa1d29b.js HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /js/chunk-2d0aa586.d2025c63.js HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /js/chunk-2d0bdf35.22357f66.js HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /js/chunk-2d0c0c56.87919c01.js HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /js/chunk-3fbf9bd4.8a5a0a97.js HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /js/chunk-4182be59.c01703cd.js HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /js/chunk-45deaaac.3f89a712.js HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /js/chunk-48100a7b.a4a30136.js HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /js/chunk-49391346.e23bb207.js HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /js/chunk-69b2ef63.89413b65.js HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /js/chunk-6f4fbc3c.5424774e.js HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /js/chunk-6fa298f8.78122294.js HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /js/chunk-721f270c.bd48f7b1.js HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=+Kz8tpYVXzeuwt7&MD=X5Zd6xmD HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /js/chunk-79dc7497.a630258b.js HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /js/chunk-7b758553.811641ac.js HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /js/chunk-85d922d4.b5344bc9.js HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /js/chunk-b047b602.2652c004.js HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /js/chunk-c63e4446.78767edf.js HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /js/chunk-c6e20010.3ce3091a.js HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /js/chunk-c9608798.4896751f.js HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /js/chunk-e2d611fa.80afcc3a.js HTTP/1.1Host: signable.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
Source: global traffic	HTTP traffic detected: GET /tools/pso/ping?as=chrome&brand=ONGR&pid=&hl=en&events=C1I,C2I,C7I,C1S,C7S&rep=2&rlz=C1:,C2:,C7:&id=00000000000000000000000000000000000000004918395266 HTTP/1.1Host: clients1.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /?utm_source=Klaviyo&utm_medium=campaign&utm_campaign=Email%20Campaign%20-%20Jan%2016%202024%209%3A49%20AM&utm_id=01HM9S7XVNX5KZNJ6BW2ZXKQZ3&utm_term=&_kx=b6kQ3CGiCGpbevw6L-26XQ%3D%3D.VvBFe7 HTTP/1.1Host: newdoc4.easyrecycling.co.zaConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_234.1.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func
Source: chromecache_201.1.dr	String found in binary or memory: /* ]]> */ </script> <script defer type="text/javascript" src="https://www.signable.us/wp-content/plugins/sitepress-multilingual-cms/res/js/xdomain-data.js?ver=4.6.8" id="wpml-xdomain-data-js" defer="defer" data-wp-strategy="defer"></script><link rel="https://api.w.org/" href="https://www.signable.us/wp-json/" /><link rel="alternate" type="application/json" href="https://www.signable.us/wp-json/wp/v2/pages/31030" /><link rel="EditURI" type="application/rsd+xml" title="RSD" href="https://www.signable.us/xmlrpc.php?rsd" /><link rel='shortlink' href='https://www.signable.us/' /><link rel="alternate" type="application/json+oembed" href="https://www.signable.us/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.signable.us%2F" /><link rel="alternate" type="text/xml+oembed" href="https://www.signable.us/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.signable.us%2F&format=xml" /><meta name="generator" content="WPML ver:4.6.8 stt:37,1,65;" /> <!-- This site is optimized with the Schema plugin v1.7.9.6 - https://schema.press --> <script type="application/ld+json">{"@context":"https:\/\/schema.org","@type":"Organization","@id":"https:\/\/signable.co.uk#organization","name":"Signable","url":"https:\/\/signable.co.uk","logo":"https:\/\/www.signable.nl\/wp-content\/uploads\/\/Apple-touch-Icon.png","contactPoint":{"@type":"ContactPoint","telephone":"+44 800 612 6263","url":"https:\/\/signable.co.uk","contactType":"customer support"},"sameAs":["https:\/\/www.facebook.com\/signablehq\/","https:\/\/twitter.com\/signablehq","https:\/\/www.instagram.com\/signablehq\/","https:\/\/www.linkedin.com\/company\/2084196"]}</script><link rel="preload" as="font" href="https://www.signable.us/wp-content/themes/Signable2019Theme/_/fonts/roboto/roboto-regular-webfont.woff2" type="font/woff2" crossorigin="anonymous"><link rel="preload" as="font" href="https://www.signable.us/wp-content/themes/Signable2019Theme/_/fonts/roboto/roboto-bold-webfont.woff2" type="font/woff2" crossorigin="anonymous"><link rel="preload" as="font" href="https://www.signable.us/wp-content/themes/Signable2019Theme/_/fonts/roboto-slab/robotoslab-regular-webfont.woff2" type="font/woff2" crossorigin="anonymous"><link rel="preload" as="font" href="https://www.signable.us/wp-content/themes/Signable2019Theme/_/fonts/roboto-slab/robotoslab-bold-webfont.woff2" type="font/woff2" crossorigin="anonymous"> <!-- This site is optimized with the Schema plugin v1.7.9.6 - https://schema.press --> <script type="application/ld+json">{ equals www.facebook.com (Facebook)
Source: chromecache_201.1.dr	String found in binary or memory: /* ]]> */ </script> <script defer type="text/javascript" src="https://www.signable.us/wp-content/plugins/sitepress-multilingual-cms/res/js/xdomain-data.js?ver=4.6.8" id="wpml-xdomain-data-js" defer="defer" data-wp-strategy="defer"></script><link rel="https://api.w.org/" href="https://www.signable.us/wp-json/" /><link rel="alternate" type="application/json" href="https://www.signable.us/wp-json/wp/v2/pages/31030" /><link rel="EditURI" type="application/rsd+xml" title="RSD" href="https://www.signable.us/xmlrpc.php?rsd" /><link rel='shortlink' href='https://www.signable.us/' /><link rel="alternate" type="application/json+oembed" href="https://www.signable.us/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.signable.us%2F" /><link rel="alternate" type="text/xml+oembed" href="https://www.signable.us/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.signable.us%2F&format=xml" /><meta name="generator" content="WPML ver:4.6.8 stt:37,1,65;" /> <!-- This site is optimized with the Schema plugin v1.7.9.6 - https://schema.press --> <script type="application/ld+json">{"@context":"https:\/\/schema.org","@type":"Organization","@id":"https:\/\/signable.co.uk#organization","name":"Signable","url":"https:\/\/signable.co.uk","logo":"https:\/\/www.signable.nl\/wp-content\/uploads\/\/Apple-touch-Icon.png","contactPoint":{"@type":"ContactPoint","telephone":"+44 800 612 6263","url":"https:\/\/signable.co.uk","contactType":"customer support"},"sameAs":["https:\/\/www.facebook.com\/signablehq\/","https:\/\/twitter.com\/signablehq","https:\/\/www.instagram.com\/signablehq\/","https:\/\/www.linkedin.com\/company\/2084196"]}</script><link rel="preload" as="font" href="https://www.signable.us/wp-content/themes/Signable2019Theme/_/fonts/roboto/roboto-regular-webfont.woff2" type="font/woff2" crossorigin="anonymous"><link rel="preload" as="font" href="https://www.signable.us/wp-content/themes/Signable2019Theme/_/fonts/roboto/roboto-bold-webfont.woff2" type="font/woff2" crossorigin="anonymous"><link rel="preload" as="font" href="https://www.signable.us/wp-content/themes/Signable2019Theme/_/fonts/roboto-slab/robotoslab-regular-webfont.woff2" type="font/woff2" crossorigin="anonymous"><link rel="preload" as="font" href="https://www.signable.us/wp-content/themes/Signable2019Theme/_/fonts/roboto-slab/robotoslab-bold-webfont.woff2" type="font/woff2" crossorigin="anonymous"> <!-- This site is optimized with the Schema plugin v1.7.9.6 - https://schema.press --> <script type="application/ld+json">{ equals www.linkedin.com (Linkedin)
Source: chromecache_201.1.dr	String found in binary or memory: /* ]]> */ </script> <script defer type="text/javascript" src="https://www.signable.us/wp-content/plugins/sitepress-multilingual-cms/res/js/xdomain-data.js?ver=4.6.8" id="wpml-xdomain-data-js" defer="defer" data-wp-strategy="defer"></script><link rel="https://api.w.org/" href="https://www.signable.us/wp-json/" /><link rel="alternate" type="application/json" href="https://www.signable.us/wp-json/wp/v2/pages/31030" /><link rel="EditURI" type="application/rsd+xml" title="RSD" href="https://www.signable.us/xmlrpc.php?rsd" /><link rel='shortlink' href='https://www.signable.us/' /><link rel="alternate" type="application/json+oembed" href="https://www.signable.us/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.signable.us%2F" /><link rel="alternate" type="text/xml+oembed" href="https://www.signable.us/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.signable.us%2F&format=xml" /><meta name="generator" content="WPML ver:4.6.8 stt:37,1,65;" /> <!-- This site is optimized with the Schema plugin v1.7.9.6 - https://schema.press --> <script type="application/ld+json">{"@context":"https:\/\/schema.org","@type":"Organization","@id":"https:\/\/signable.co.uk#organization","name":"Signable","url":"https:\/\/signable.co.uk","logo":"https:\/\/www.signable.nl\/wp-content\/uploads\/\/Apple-touch-Icon.png","contactPoint":{"@type":"ContactPoint","telephone":"+44 800 612 6263","url":"https:\/\/signable.co.uk","contactType":"customer support"},"sameAs":["https:\/\/www.facebook.com\/signablehq\/","https:\/\/twitter.com\/signablehq","https:\/\/www.instagram.com\/signablehq\/","https:\/\/www.linkedin.com\/company\/2084196"]}</script><link rel="preload" as="font" href="https://www.signable.us/wp-content/themes/Signable2019Theme/_/fonts/roboto/roboto-regular-webfont.woff2" type="font/woff2" crossorigin="anonymous"><link rel="preload" as="font" href="https://www.signable.us/wp-content/themes/Signable2019Theme/_/fonts/roboto/roboto-bold-webfont.woff2" type="font/woff2" crossorigin="anonymous"><link rel="preload" as="font" href="https://www.signable.us/wp-content/themes/Signable2019Theme/_/fonts/roboto-slab/robotoslab-regular-webfont.woff2" type="font/woff2" crossorigin="anonymous"><link rel="preload" as="font" href="https://www.signable.us/wp-content/themes/Signable2019Theme/_/fonts/roboto-slab/robotoslab-bold-webfont.woff2" type="font/woff2" crossorigin="anonymous"> <!-- This site is optimized with the Schema plugin v1.7.9.6 - https://schema.press --> <script type="application/ld+json">{ equals www.twitter.com (Twitter)
Source: chromecache_274.1.dr, chromecache_289.1.dr	String found in binary or memory: f\|\|g.length\|\|h.length))return;var n={ah:d,Yg:e,Zg:f,Nh:g,Oh:h,xe:m,qb:b},p=z.YT,q=function(){MC(n)};if(p)return p.ready&&p.ready(q),b;var r=z.onYouTubeIframeAPIReady;z.onYouTubeIframeAPIReady=function(){r&&r();q()};F(function(){for(var t=C.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(PC(w,"iframe_api")\|\|PC(w,"player_api"))return b}for(var x=C.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!GC&&NC(x[A],n.xe))return Jc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_267.1.dr, chromecache_274.1.dr, chromecache_412.1.dr, chromecache_289.1.dr	String found in binary or memory: return b}DC.D="internal.enableAutoEventOnTimer";var xc=ca(["data-gtm-yt-inspected-"]),EC=["www.youtube.com","www.youtube-nocookie.com"],FC,GC=!1; equals www.youtube.com (Youtube)
Source: chromecache_295.1.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_295.1.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)

Source: unknown

DNS traffic detected: queries for: trk.klclick3.com

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=BbHGp70uz66EZ7t8DrcLv9xxfcVljF6d19xSvROL7L8s_kahmrUkGGrzfI7BL5pg1a3XJnFf86rmNUVa2u3nk6kmb5VZimgBNCTkKSuYiNnaMk9c0LDBv3iqBpe7RSG5Qs2LVpVz9UzGN0Pyt1JXMcxIRKWB-Rje1Ftofm22_hQ

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 16 Jan 2024 21:32:51 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Cache-Enabled: FalseX-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=blockLink: <https://www.signable.us/wp-json/>; rel="https://api.w.org/"X-Frame-Options: DENYContent-Security-Policy: frame-ancestors 'none'X-Httpd-Modphp: 1Access-Control-Allow-Origin: *Host-Header: 6b7412fb82ca5edfd0917e3957f05d89X-Proxy-Cache: MISSX-Proxy-Cache-Info: W NC:000000 UP:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 16 Jan 2024 21:32:51 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Cache-Enabled: FalseX-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=blockLink: <https://www.signable.us/wp-json/>; rel="https://api.w.org/"X-Frame-Options: DENYContent-Security-Policy: frame-ancestors 'none'X-Httpd-Modphp: 1Access-Control-Allow-Origin: *Host-Header: 6b7412fb82ca5edfd0917e3957f05d89X-Proxy-Cache: MISSX-Proxy-Cache-Info: W NC:000000 UP:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 16 Jan 2024 21:32:51 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Cache-Enabled: FalseX-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=blockLink: <https://www.signable.us/wp-json/>; rel="https://api.w.org/"X-Frame-Options: DENYContent-Security-Policy: frame-ancestors 'none'X-Httpd-Modphp: 1Access-Control-Allow-Origin: *Host-Header: 6b7412fb82ca5edfd0917e3957f05d89X-Proxy-Cache: MISSX-Proxy-Cache-Info: W NC:000000 UP:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 16 Jan 2024 21:32:52 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Cache-Enabled: FalseX-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=blockLink: <https://www.signable.us/wp-json/>; rel="https://api.w.org/"X-Frame-Options: DENYContent-Security-Policy: frame-ancestors 'none'X-Httpd-Modphp: 1Access-Control-Allow-Origin: *Host-Header: 6b7412fb82ca5edfd0917e3957f05d89X-Proxy-Cache: MISSX-Proxy-Cache-Info: W NC:000000 UP:

Source: chromecache_211.1.dr	String found in binary or memory: http://gist.github.com/413930
Source: chromecache_323.1.dr	String found in binary or memory: http://hubs.ly/H0702_H0
Source: chromecache_287.1.dr	String found in binary or memory: http://mattstow.com
Source: chromecache_201.1.dr	String found in binary or memory: http://schema.org
Source: chromecache_230.1.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: chromecache_279.1.dr, chromecache_268.1.dr, chromecache_212.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_363.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0RobotoSlab-RegularVersion
Source: chromecache_342.1.dr, chromecache_222.1.dr	String found in binary or memory: http://www.hubspot.com
Source: chromecache_232.1.dr	String found in binary or memory: http://www.imagemagick.org
Source: chromecache_267.1.dr, chromecache_412.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_267.1.dr, chromecache_412.1.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_201.1.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_230.1.dr	String found in binary or memory: https://app.productfruits.com/static/script.js
Source: chromecache_260.1.dr	String found in binary or memory: https://assets.ctfassets.net
Source: chromecache_260.1.dr	String found in binary or memory: https://assets.ctfassets.net/fzn2n1nzq965/01hMKr6nEEGVfOuhsaMIXQ/c424849423b5f036a8892afa09ac38c7/fa
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/1a930247.woff2)
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/AnimatedCodeEditor-86776e0635434fc49715.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/AnimatedIcon-0b7478e1f9234aae8838.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/AtlasDashboardGraphic-042f01c5c5f7a5d7ca1a.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/BackgroundGlobe-64953aedea5f231d07b7.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Bootstrapper-P7CHMT3H.js
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/BrandModal-77aed9e8900fc44f1554.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/BrandModalGraphic-e9e1fc8f4c2bf8a9bd44.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CardField-739e285edeecea986ed0.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CaseStudyCard-60f3f5412530e6e993e8.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CheckoutFormGraphic-b2509d821651cbc82709.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditor-6eacb8e42c7465ddd557.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorAsciiLoader-c1a350cb85f7a989f599.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorAutocomplete-dc62d89d9e2121e48baf.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorCursor-517911b19e66c94dafbb.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorLineNumbers-0eded1c84476ec649145.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorStatusBar-24c7c84123b2b6e4f091.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeSyntax-e0768ef33503219c518d.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeTerminal-ca23848effb056969042.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CopyTitle-c641e014b3946628bc95.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CountryPicker-69008988c83026bda6cd.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCardBackground-853f685776c80eaa0089
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCardOverlay-09e527d11b6471566771.cs
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarousel-6ad3f0dce85838a77d8b.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavGroup-41fa77c08914b1b778
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavItem-fd5a8f8fac232f661b3
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavTrack-1380f9c2e275695c5e
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/DevelopersCodeEditor-eadbd8bbcdedd8edbbe3.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/DomGraphic-5a317684eb2b9d1f76d2.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/EnterpriseCarouselAside-b05102a0b81de0c11406.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Field-ea906aa31d4012757deb.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Flag-4eba62f8d934073c9e2c.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Form-401d42df82b6e8482f06.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Frontdoor-118109a04e95921931d9.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorBillingAnimation-fa25c03988d3d1f36a35.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorBillingGraphic-c9e3aeda05ab14a454b1.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorBillingGraphicLogo-2cee099c6b840fb58d86.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorBillingGraphicTier-4d3b73ee5f599b93aa50.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnectAnimation-f4ce77b995975fa55335.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnectFlowDiagram-bcf0320e44c152e1ca03.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnectFlowDiagramOrderNotification-b0f6b26d
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnection-192c60d5ff4ac27dec4f.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorGraphic-ab42746a2bb65d850037.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorGraphicImage-ff4d221174ca6cab4402.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorGraphicOutline-cbb29a27650befdb3913.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorIcon-f22f360dadf72ca61a47.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorIconGrid-f5ddeb3e7d94044a9646.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorIconOutline-2c0929473dcd28db2e99.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorIssuingAnimation-ba03e22ccfea12d68c6c.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorIssuingCard-b80b51aa94acdc8a688e.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorPaymentsAnimation-71bdbfda51a40294b593.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorPaymentsGraphic-45fe2caceea82c749c40.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorStandaloneAnimation-5aefb3912ae346b5293e.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorStickyAnimation-4ea4d6a5e9b414987337.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorSubanimation-b9163916332f2a67d464.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorSuiteAnimation-683958a93f82ca151ea7.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Global-f1eeffae1de3242fcca9.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Globe-b2159f87180df559d2e8.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GradientLegend-f1cabc70fbf82f3e9c05.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GraphicForm-7d75b8ba72e0304da82c.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormField-33f78921d62dc714d424.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormFieldInput-3d704dfad5ff81d0e80b.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormFieldInputGrid-281fa6a92c2e3caa14c9.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormFieldList-5317148749a9268ec04d.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GridLayout-0b90e779a89c0243e739.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/HorizontalOverflowContainer-0b85e8f46a0db21a6ef9.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/HostedInvoiceGraphic-a589a3c1432aa6eb8d38.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Icon-646136cd9e336d8c18d7.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/LanguagePicker-65f801973c66428d8dec.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/List-d4c6ad06c173a7dca2ed.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/LocaleControl-09ce62c550a15bb456e5.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/LowCodeNoCode-de32a3423ce25c839d82.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/PaymentLinksGraphic-753863ac92f9f068a566.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/PaymentLinksPowdurGraphic-9983a18fe02dbcdc092e.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/PaymentLinksReceiptGraphic-68e48fc32d105e52ee0c.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Picture-3f0067e6b392244c9bda.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Prelude-Q2U7OZHZ.js
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/ProductBadge-aa2497ab8abdcc6a3d34.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/ProductFeatureCard-b8fc2abd657c98fece93.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/ProductListing-3e17d7acee941b127dd1.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/RowLayout-9272a8ee72d3dac4a6ef.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/SiteFooterSection-1c0a8e1d30b69be4ef69.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/StartUp-3ebb94fdaa25d9c5cfc2.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Stripe-b3679504f08482f96a0d.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/StripeProductUsed-448c2bc0913c408517f4.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/StripeProductUsedList-4a8c16b5e5f3fa51247d.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/StripeSet-423109ad4bf57a2a011c.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Track-2f2fce741fc3d8fc8450.css
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/ac6713d5.woff)
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/f965fdf4.woff2
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/f965fdf4.woff2)
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/imt-a5199d58a9b8cc8a2427df532d113908.js
Source: chromecache_260.1.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/store-936f0d847a16164e7f6b15d74659c4a9.html
Source: chromecache_260.1.dr	String found in binary or memory: https://buy.stripe.com/aF8fUK
Source: chromecache_267.1.dr, chromecache_274.1.dr, chromecache_412.1.dr, chromecache_289.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_214.1.dr, chromecache_392.1.dr	String found in binary or memory: https://conversation.api.drift.com
Source: chromecache_214.1.dr, chromecache_392.1.dr	String found in binary or memory: https://customer.api.drift.com
Source: chromecache_260.1.dr	String found in binary or memory: https://dashboard.stripe.com/
Source: chromecache_260.1.dr	String found in binary or memory: https://dashboard.stripe.com/register
Source: chromecache_230.1.dr	String found in binary or memory: https://feross.org
Source: chromecache_395.1.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_395.1.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Roboto
Source: chromecache_395.1.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufA5qW54A.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufB5qW54A.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufC5qW54A.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufD5qW54A.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufJ5qW54A.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2)
Source: chromecache_346.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufO5qW54A.woff2)
Source: chromecache_201.1.dr	String found in binary or memory: https://g10102301085.co/gr?id=-MNNFwoamUG1AtkUIbBv&refurl=
Source: chromecache_201.1.dr	String found in binary or memory: https://g10102301085.co/gr?id=-MS8UqefaxrWlk6E9b1T&refurl=
Source: chromecache_201.1.dr	String found in binary or memory: https://g10102301085.co/gr?id=-MS8X4ftmPqTw1B7FB9q&refurl=
Source: chromecache_363.1.dr	String found in binary or memory: https://github.com/googlefonts/robotoslab)
Source: chromecache_412.1.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: chromecache_287.1.dr	String found in binary or memory: https://github.com/stowball/jQuery-rwdImageMaps
Source: chromecache_260.1.dr	String found in binary or memory: https://github.com/stripe-samples
Source: chromecache_412.1.dr	String found in binary or memory: https://google.com/ccm/form-data/
Source: chromecache_412.1.dr	String found in binary or memory: https://google.com/pagead/form-data/
Source: chromecache_412.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/
Source: chromecache_412.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/
Source: chromecache_260.1.dr	String found in binary or memory: https://images.ctfassets.net
Source: chromecache_260.1.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/1ctgMwd2p9euFW9pPSM7jR/451d5e987ca7fa14060526e6b1766a8b/bm
Source: chromecache_260.1.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/1lCtk48IB26AGgXdHsrLrt/ad2816d6a744d5249c19ba66be22b0a6/ch
Source: chromecache_260.1.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/1uqVBqljLGkNwzpkOgV5nK/894009762ee07bc933bfedc9c13a9f46/do
Source: chromecache_260.1.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/2EOOpI2mMZgHYBlbO44zWV/5a6c5d37402652c80567ec942c733a43/fa
Source: chromecache_260.1.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/3AGidihOJl4nH9D1vDjM84/9540155d584be52fc54c443b6efa4ae6/ho
Source: chromecache_260.1.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/4WjxT85Wi0tNWOJie0L7LW/233ec6bd0738bc0fb86ed1ea0a12515a/Po
Source: chromecache_260.1.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/4jq1Wguyus7CA7yc2kxMgn/cf7b01aadf305daef40ac8acab654510/ho
Source: chromecache_260.1.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/4zeFefnpB8yh7U3qSQRktP/d583ee93dd3d8910fa27296748699a0f/bm
Source: chromecache_260.1.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/5C5LvT3YZvRTGYn7uabXGj/7da8063dc77c67b7f66a1479f47409c8/bu
Source: chromecache_260.1.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/5DaqGgXeMbxSIqQj9WSqSF/8142c0c6e15b27a8bb6c8a0f8a5d4dfb/ho
Source: chromecache_260.1.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/5F0uhf7cRg9vhR6NmgWzzI/664e14ddebb91375f89f8dcc75242dc0/ho
Source: chromecache_260.1.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/5JNjy04LAsNrA6xBh7Ao6z/0627f061f30ba1e46b9f2f8e2a0e48c1/fl
Source: chromecache_260.1.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/5epSdhifMhjZWOkOxK9xG8/05715737a672f2069c17903d2acae585/ty
Source: chromecache_260.1.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/5k7VeoAQQDK7032fIF6PEU/25f3670f5f4508103ee77afd92b7e074/ty
Source: chromecache_260.1.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/6c56LuWUxcACbVkv4fqszI/d0a88e48d11a88b97daf896246ac40da/ho
Source: chromecache_260.1.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/6iLtU8qBUtE42tshpmZxY2/ac5b7b7a181524237b942e43620fceef/ch
Source: chromecache_260.1.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/7C4ROeiaqUa0HwwBU9EL9l/205ad1141f35c449a79c7dae1811d9b7/at
Source: chromecache_260.1.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/7jjWJlm9NHgLI7SV98B0Dg/ea1ae753f3764897fa4333311e41f496/ho
Source: chromecache_260.1.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/7szA8TJHWKDIEuCbu6Yblm/4548db61648d063fb7e7dddfca04ab79/ho
Source: chromecache_260.1.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/wEsTNDVgdEqaPAKkFdqnL/c69e1649432f1b772d86d81e423b7e3e/but
Source: chromecache_342.1.dr	String found in binary or memory: https://js-na1.hs-scripts.com/4564783.js
Source: chromecache_214.1.dr, chromecache_392.1.dr	String found in binary or memory: https://js.driftt.com
Source: chromecache_323.1.dr	String found in binary or memory: https://js.hs-analytics.net/analytics/1705440600000/4564783.js
Source: chromecache_222.1.dr	String found in binary or memory: https://js.hs-banner.com/v2
Source: chromecache_323.1.dr	String found in binary or memory: https://js.hs-banner.com/v2/4564783/banner.js
Source: chromecache_323.1.dr	String found in binary or memory: https://js.hsleadflows.net/leadflows.js
Source: chromecache_395.1.dr	String found in binary or memory: https://js.stripe.com/v3/
Source: chromecache_299.1.dr	String found in binary or memory: https://js.stripe.com/v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js
Source: chromecache_323.1.dr	String found in binary or memory: https://js.usemessages.com/conversations-embed.js
Source: chromecache_230.1.dr	String found in binary or memory: https://lodash.com/
Source: chromecache_230.1.dr	String found in binary or memory: https://lodash.com/license
Source: chromecache_217.1.dr	String found in binary or memory: https://m.stripe.network
Source: chromecache_260.1.dr	String found in binary or memory: https://marketplace.stripe.com/
Source: chromecache_214.1.dr, chromecache_392.1.dr	String found in binary or memory: https://metrics.api.drift.com
Source: chromecache_230.1.dr	String found in binary or memory: https://npms.io/search?q=ponyfill.
Source: chromecache_230.1.dr	String found in binary or memory: https://openjsf.org/
Source: chromecache_267.1.dr, chromecache_412.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_412.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/
Source: chromecache_267.1.dr, chromecache_274.1.dr, chromecache_412.1.dr, chromecache_289.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_260.1.dr	String found in binary or memory: https://press.stripe.com/
Source: chromecache_412.1.dr	String found in binary or memory: https://px.ads.linkedin.com/collect?
Source: chromecache_260.1.dr	String found in binary or memory: https://q.stripe.com
Source: chromecache_230.1.dr	String found in binary or memory: https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE
Source: chromecache_260.1.dr	String found in binary or memory: https://sales-live-chat.stripe.com
Source: chromecache_260.1.dr	String found in binary or memory: https://sales-live-chat.stripe.com/render
Source: chromecache_201.1.dr	String found in binary or memory: https://schema.press
Source: chromecache_339.1.dr	String found in binary or memory: https://signable.app/?chris_hj_test=true
Source: chromecache_211.1.dr	String found in binary or memory: https://signable.co.uk
Source: chromecache_201.1.dr	String found in binary or memory: https://signable.co.uk/signable-electronic-signature-api/
Source: chromecache_201.1.dr	String found in binary or memory: https://signable.co.uk/wp-content/uploads/graphic_automatic_reminders.png
Source: chromecache_314.1.dr	String found in binary or memory: https://signable.help/can-i-get-a-document-signed-on-my-website/
Source: chromecache_412.1.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_267.1.dr, chromecache_412.1.dr	String found in binary or memory: https://static.hotjar.com/c/hotjar-
Source: chromecache_274.1.dr, chromecache_289.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_274.1.dr, chromecache_289.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_260.1.dr	String found in binary or memory: https://status.stripe.com/
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ae
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/at
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/au
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/br
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/contact/sales
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/corporate-card
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-ae
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-au
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-be
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-bg
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-br
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-ca
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-ch
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-cy
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-cz
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-dk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-ee
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-es
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-fi
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-fr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-gb
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-gi
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-gr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-hk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-hr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-hu
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-ie
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-in
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-it
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-jp
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-li
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-lt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-lu
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-lv
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-mt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-mx
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-my
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-nl
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-no
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-nz
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-pl
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-pt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-ro
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-se
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-sg
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-si
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-sk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-th
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/de-us
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/docs
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/docs/api
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/docs/billing
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/docs/connect
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/docs/development
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/docs/invoicing/hosted-invoice-page
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/docs/libraries
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/docs/no-code
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/docs/no-code/payment-links
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/docs/no-code/tap-to-pay
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/docs/payments
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/docs/payments/checkout
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/docs/stripe-apps
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/docs/terminal
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/docs/upgrades#api-changelog
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/docs/upgrades#api-versions
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-at
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-au
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-be
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-bg
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-br
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-ca
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-ch
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-cy
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-cz
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-de
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-dk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-ee
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-es
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-fi
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-fr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-ae
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-at
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-be
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-bg
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-ca
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-ch
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-cy
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-cz
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-de
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-dk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-ee
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-es
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-fi
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-fr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-gi
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-gr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-hk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-hr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-hu
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-it
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-li
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-lt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-lu
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-lv
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-mt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-my
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-nl
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-no
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-pl
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-pt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-ro
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-se
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-sg
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-si
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-sk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-th
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gb-us
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gi
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-gr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-hk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-hr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-hu
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-ie
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-in
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-it
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-jp
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-li
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-lt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-lu
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-lv
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-mt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-mx
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-my
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-nl
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-no
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-nz
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-pl
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-pt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-ro
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-se
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-sg
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-si
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-sk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/en-th
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-ae
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-at
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-au
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-be
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-bg
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-br
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-ca
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-ch
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-cy
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-cz
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-de
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-dk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-ee
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-fi
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-fr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-gb
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-gi
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-gr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-hk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-hr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-hu
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-ie
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-in
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-it
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-jp
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-li
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-lt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-lu
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-lv
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-mt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-my
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-nl
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-no
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-nz
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-pl
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-pt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-ro
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-se
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-sg
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-si
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-sk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-th
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-419-us
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/es-us
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-ae
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-at
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-au
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-be
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-bg
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-br
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-ca-ca
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-ca-us
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-ch
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-cy
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-cz
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-de
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-dk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-ee
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-es
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-fi
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-gb
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-gi
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-gr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-hk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-hr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-hu
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-ie
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-in
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-it
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-jp
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-li
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-lt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-lu
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-lv
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-mt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-mx
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-my
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-nl
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-no
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-nz
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-pl
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-pt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-ro
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-se
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-sg
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-si
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-sk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-th
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/fr-us
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/gb
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/guides
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-ae
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-at
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-au
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-be
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-bg
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-br
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-ca
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-ch
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-cy
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-cz
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-de
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-dk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-ee
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-es
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-fi
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-fr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-gb
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-gi
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-gr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-hk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-hr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-hu
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-ie
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-in
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-it
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-jp
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-li
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-lt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-lu
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-lv
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-mt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-mx
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-my
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-nl
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-no
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-nz
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-pl
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-pt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-ro
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-se
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-sg
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-si
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-sk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-th
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/id-us
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ie
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/in
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/issuing
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-ae
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-at
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-au
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-be
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-bg
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-br
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-ca
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-ch
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-cy
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-cz
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-de
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-dk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-ee
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-es
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-fi
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-fr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-gb
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-gi
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-gr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-hk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-hr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-hu
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-ie
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-in
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-jp
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-li
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-lt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-lu
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-lv
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-mt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-mx
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-my
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-nl
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-no
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-nz
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-pl
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-pt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-ro
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-se
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-sg
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-si
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-sk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-th
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/it-us
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-ae
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-at
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-au
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-be
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-bg
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-br
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-ca
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-ch
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-cy
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-cz
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-de
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-dk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-ee
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-es
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-fi
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-fr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-gb
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-gi
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-gr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-hk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-hr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-hu
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-ie
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-in
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-it
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-li
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-lt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-lu
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-lv
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-mt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-mx
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-my
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-nl
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-no
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-nz
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-pl
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-pt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-ro
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-se
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-sg
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-si
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-sk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-th
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/ja-us
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/jobs
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/jp
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/mx
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-ae
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-at
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-au
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-be
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-bg
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-br
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-ca
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-ch
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-cy
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-cz
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-de
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-dk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-ee
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-es
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-fi
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-fr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-gb
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-gi
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-gr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-hk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-hr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-hu
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-ie
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-in
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-it
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-jp
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-li
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-lt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-lu
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-lv
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-mt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-mx
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-my
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-no
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-nz
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-pl
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-pt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-ro
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-se
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-sg
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-si
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-sk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-th
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nl-us
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/nz
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pricing
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/privacy
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-ae
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-at
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-au
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-be
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-bg
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-ca
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-ch
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-cy
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-cz
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-de
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-dk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-ee
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-es
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-fi
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-fr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-gb
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-gi
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-gr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-hk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-hr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-hu
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-ie
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-in
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-it
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-jp
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-li
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-lt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-lu
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-lv
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-mt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-mx
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-my
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-nl
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-no
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-nz
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-pl
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-pt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-ro
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-se
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-sg
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-si
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-sk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-th
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/pt-br-us
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/radar
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/se
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sigma
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/spc/licenses
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-ae
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-at
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-au
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-be
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-bg
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-br
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-ca
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-ch
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-cy
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-cz
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-de
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-dk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-ee
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-es
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-fi
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-fr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-gb
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-gi
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-gr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-hk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-hr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-hu
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-ie
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-in
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-it
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-jp
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-li
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-lt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-lu
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-lv
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-mt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-mx
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-my
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-nl
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-no
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-nz
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-pl
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-pt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-ro
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-sg
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-si
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-sk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-th
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/sv-us
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-ae
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-at
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-au
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-be
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-bg
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-br
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-ca
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-ch
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-cy
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-cz
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-de
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-dk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-ee
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-es
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-fi
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-fr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-gb
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-gi
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-gr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-hk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-hr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-hu
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-ie
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-in
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-it
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-jp
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-li
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-lt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-lu
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-lv
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-mt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-mx
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-my
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-nl
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-no
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-nz
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-pl
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-pt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-ro
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-se
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-sg
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-si
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-sk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/th-us
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/us
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/use-cases/global-businesses
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-ae
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-at
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-au
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-be
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-bg
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-br
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-ca
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-ch
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-cy
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-cz
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-de
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-dk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-ee
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-es
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-fi
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-fr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-gb
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-gi
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-gr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-hk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-hr
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-hu
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-ie
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-in
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-it
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-jp
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-li
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-lt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-lu
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-lv
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-mt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-mx
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-my
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-nl
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-no
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-nz
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-pl
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-pt
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-ro
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-se
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-sg
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-si
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-sk
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-th
Source: chromecache_260.1.dr	String found in binary or memory: https://stripe.com/zh-cn-us
Source: chromecache_260.1.dr	String found in binary or memory: https://stripesessions.com/?utm_medium=owned-surfaces&utm_source=9b65&utm_campaign=US%2FCA_4451&utm_
Source: chromecache_260.1.dr	String found in binary or memory: https://support.stripe.com/?referrerLocale=en-us
Source: chromecache_214.1.dr, chromecache_392.1.dr	String found in binary or memory: https://targeting.api.drift.com
Source: chromecache_267.1.dr, chromecache_274.1.dr, chromecache_412.1.dr, chromecache_289.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_267.1.dr, chromecache_412.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_412.1.dr	String found in binary or memory: https://www.google.com/
Source: chromecache_412.1.dr	String found in binary or memory: https://www.googleadservices.com/
Source: chromecache_267.1.dr, chromecache_274.1.dr, chromecache_412.1.dr, chromecache_289.1.dr	String found in binary or memory: https://www.googletagmanager.com/a?id=
Source: chromecache_201.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_395.1.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-NMPMBWS
Source: chromecache_274.1.dr, chromecache_289.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog/mc/collect
Source: chromecache_412.1.dr	String found in binary or memory: https://www.redditstatic.com/ads/pixel.js
Source: chromecache_339.1.dr	String found in binary or memory: https://www.signable.co.uk/privacy-policy/
Source: chromecache_201.1.dr	String found in binary or memory: https://www.signable.us
Source: chromecache_201.1.dr	String found in binary or memory: https://www.signable.us/
Source: chromecache_201.1.dr	String found in binary or memory: https://www.signable.us/wp-content/plugins/cookie-notice/css/front.min.css?ver=2.4.13
Source: chromecache_201.1.dr	String found in binary or memory: https://www.signable.us/wp-content/plugins/cookie-notice/js/front.min.js?ver=2.4.13
Source: chromecache_201.1.dr	String found in binary or memory: https://www.signable.us/wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles.css?ver
Source: chromecache_201.1.dr	String found in binary or memory: https://www.signable.us/wp-content/plugins/sitepress-multilingual-cms/res/js/xdomain-data.js?ver=4.6
Source: chromecache_201.1.dr	String found in binary or memory: https://www.signable.us/wp-content/themes/Signable2019Theme/_/css/style.css?ver=1701765538
Source: chromecache_201.1.dr	String found in binary or memory: https://www.signable.us/wp-content/themes/Signable2019Theme/_/fonts/roboto-slab/robotoslab-bold-webf
Source: chromecache_201.1.dr	String found in binary or memory: https://www.signable.us/wp-content/themes/Signable2019Theme/_/fonts/roboto-slab/robotoslab-regular-w
Source: chromecache_201.1.dr	String found in binary or memory: https://www.signable.us/wp-content/themes/Signable2019Theme/_/fonts/roboto/roboto-bold-webfont.woff2
Source: chromecache_201.1.dr	String found in binary or memory: https://www.signable.us/wp-content/themes/Signable2019Theme/_/fonts/roboto/roboto-regular-webfont.wo
Source: chromecache_201.1.dr	String found in binary or memory: https://www.signable.us/wp-content/themes/Signable2019Theme/_/img/icons/icon_star_black.png
Source: chromecache_201.1.dr	String found in binary or memory: https://www.signable.us/wp-content/uploads/graphic_automatic_reminders-150x107.png
Source: chromecache_201.1.dr	String found in binary or memory: https://www.signable.us/wp-content/uploads/graphic_automatic_reminders-300x214.png
Source: chromecache_201.1.dr	String found in binary or memory: https://www.signable.us/wp-content/uploads/graphic_automatic_reminders-768x548.png
Source: chromecache_201.1.dr	String found in binary or memory: https://www.signable.us/wp-content/uploads/graphic_automatic_reminders.png
Source: chromecache_201.1.dr	String found in binary or memory: https://www.signable.us/wp-content/uploads/graphic_esignature_sector_education.png
Source: chromecache_201.1.dr	String found in binary or memory: https://www.signable.us/wp-content/uploads/graphic_esignature_sector_finance.png
Source: chromecache_201.1.dr	String found in binary or memory: https://www.signable.us/wp-content/uploads/graphic_esignature_sector_real_estate.png
Source: chromecache_201.1.dr	String found in binary or memory: https://www.signable.us/wp-content/uploads/team_signable_etain-1.jpg
Source: chromecache_201.1.dr	String found in binary or memory: https://www.signable.us/wp-content/uploads/team_signable_larry.jpg
Source: chromecache_201.1.dr	String found in binary or memory: https://www.signable.us/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Source: chromecache_201.1.dr	String found in binary or memory: https://www.signable.us/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Source: chromecache_201.1.dr	String found in binary or memory: https://www.signable.us/wp-json/
Source: chromecache_201.1.dr	String found in binary or memory: https://www.signable.us/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.signable.us%2F
Source: chromecache_201.1.dr	String found in binary or memory: https://www.signable.us/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.signable.us%2F&format=xm
Source: chromecache_201.1.dr	String found in binary or memory: https://www.signable.us/wp-json/wp/v2/pages/31030
Source: chromecache_201.1.dr	String found in binary or memory: https://www.signable.us/xmlrpc.php?rsd
Source: chromecache_201.1.dr	String found in binary or memory: https://www.taxcalc.com/esign
Source: chromecache_274.1.dr, chromecache_289.1.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443

Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.18:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.18:50036 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_BITS_4884_855957713

Jump to behavior

Source: classification engine

Classification label: mal48.win@21/238@134/50

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://trk.klclick3.com/ls/click?upn=bBwYdIep1AJAhlueKA-2FYA-2FiZB25bBJh74wxcvz7MbGRPW8Sumng75RGT1g5XS8cjbfmY-2B36p0K05EHzrwgenVucrqr4wcbtuSTwUvsCLkp7yNipUK-2B-2FNaDgkKPZvGU-2FeFk2oNL8Cwbk73-2FgVgciDWKs7EH5RHkh4JQ7UzYtmcj0T2v97DZCXopI01GYDKBnCGDu5JGSJeb2B-2BC-2BiwvHpQcN7uwZDtFJLVNCcASk2ytPbSbN6DXY3zGy2QIb4zfVuOOrvJvX4AYss6-2FMGf-2FLtoJ7EVDcQUFASKPodO4SDGaqD6Bmc8P77aL-2FkVxJju4Dgwb1F_PoPSv5Gw7kvm-2FaTPf5isV0F8OzVemx3-2BMda5lKttFwV5hYNASaBIOvhduvo23ZgNxryqZbnFqmZgF2SN317Jd5JsAvLWLiTx01vINjL-2F5lNDaOUHPgjGlCX5KJOQWKvYIEsyEtGsWDE-2FWVvyeRrrk4vCfS2JQMJn5yy-2FO8x3j7XGuUdh-2F6jheAyXeY-2FcbZn5oa9YDlMndYX-2FMs9037sfq0RD4LSVjBHfZJ41mqRz3cMyiWVWiBP-2Fepkutp7Xi6fORoNqe0OXl4XSRoLzjS-2F-2B2BwqUOD8bdrQqvj-2BGxMHjy87MVEE7U79i0WQowFwSCFN
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=2072,i,11186840568436156353,11485786068315141287,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4212 --field-trial-handle=2072,i,11186840568436156353,11485786068315141287,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=2072,i,11186840568436156353,11485786068315141287,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4212 --field-trial-handle=2072,i,11186840568436156353,11485786068315141287,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	11 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	4 Non-Application Layer Protocol	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	5 Application Layer Protocol			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Traffic Duplication	3 Ingress Tool Transfer			Data Destruction	Virtual Private Server	Employee Names

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://trk.klclick3.com/ls/click?upn=bBwYdIep1AJAhlueKA-2FYA-2FiZB25bBJh74wxcvz7MbGRPW8Sumng75RGT1g5XS8cjbfmY-2B36p0K05EHzrwgenVucrqr4wcbtuSTwUvsCLkp7yNipUK-2B-2FNaDgkKPZvGU-2FeFk2oNL8Cwbk73-2FgVgciDWKs7EH5RHkh4JQ7UzYtmcj0T2v97DZCXopI01GYDKBnCGDu5JGSJeb2B-2BC-2BiwvHpQcN7uwZDtFJLVNCcASk2ytPbSbN6DXY3zGy2QIb4zfVuOOrvJvX4AYss6-2FMGf-2FLtoJ7EVDcQUFASKPodO4SDGaqD6Bmc8P77aL-2FkVxJju4Dgwb1F_PoPSv5Gw7kvm-2FaTPf5isV0F8OzVemx3-2BMda5lKttFwV5hYNASaBIOvhduvo23ZgNxryqZbnFqmZgF2SN317Jd5JsAvLWLiTx01vINjL-2F5lNDaOUHPgjGlCX5KJOQWKvYIEsyEtGsWDE-2FWVvyeRrrk4vCfS2JQMJn5yy-2FO8x3j7XGuUdh-2F6jheAyXeY-2FcbZn5oa9YDlMndYX-2FMs9037sfq0RD4LSVjBHfZJ41mqRz3cMyiWVWiBP-2Fepkutp7Xi6fORoNqe0OXl4XSRoLzjS-2F-2B2BwqUOD8bdrQqvj-2BGxMHjy87MVEE7U79i0WQowFwSCFN	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label
https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavItem-fd5a8f8fac232f661b3	0%	URL Reputation	safe
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorStickyAnimation-4ea4d6a5e9b414987337.css	0%	URL Reputation	safe
https://b.stripecdn.com/mkt-statics-srv/assets/Field-ea906aa31d4012757deb.css	0%	URL Reputation	safe
https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavTrack-1380f9c2e275695c5e	0%	URL Reputation	safe
https://openjsf.org/	0%	URL Reputation	safe
https://b.stripecdn.com/mkt-statics-srv/assets/Prelude-Q2U7OZHZ.js	0%	URL Reputation	safe
https://b.stripecdn.com/mkt-statics-srv/assets/GridLayout-0b90e779a89c0243e739.css	0%	URL Reputation	safe
https://b.stripecdn.com/mkt-statics-srv/assets/HorizontalOverflowContainer-0b85e8f46a0db21a6ef9.css	0%	URL Reputation	safe
about:blank	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/StripeSet-423109ad4bf57a2a011c.css	0%	Avira URL Cloud	safe
https://www.signable.co.uk/wp-content/uploads/logo_coop.png	0%	Avira URL Cloud	safe
https://signable.app/js/chunk-3fbf9bd4.8a5a0a97.js	0%	Avira URL Cloud	safe
https://signable.app/css/chunk-79dc7497.470369c5.css	0%	Avira URL Cloud	safe
https://signable.app/-/sync-cookies.js?ver=1692089186	0%	Avira URL Cloud	safe
https://www.signable.co.uk/wp-content/uploads/logo_hat_trick.png	0%	Avira URL Cloud	safe
https://www.signable.us/wp-content/themes/Signable2019Theme/_/img/icons/icon_tiktok.svg	0%	Avira URL Cloud	safe
https://signable.app/js/chunk-85d922d4.b5344bc9.js	0%	Avira URL Cloud	safe
https://signable.app/js/chunk-c9608798.4896751f.js	0%	Avira URL Cloud	safe
https://www.signable.co.uk/privacy-policy/	0%	Avira URL Cloud	safe
https://signable.app/img/icons/android-chrome-192x192.png	0%	Avira URL Cloud	safe
https://www.signable.us/wp-content/uploads/graphic_esignature_sector_real_estate.png	0%	Avira URL Cloud	safe
https://signable.app/?chris_hj_test=true	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
d1tcqh4bio8cty.cloudfront.net	18.160.10.74	true	false	high
vc-live-cf.hotjar.io	13.224.214.83	true	false	unknown
forms.hubspot.com	104.19.155.83	true	false	high
www.google.ca	142.250.80.35	true	false	high
afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com	3.94.218.138	true	false	high
ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com	50.16.35.88	true	false	high
events.launchdarkly.com	54.175.64.186	true	false	high
js.hs-analytics.net	104.16.79.186	true	false	unknown
stats.g.doubleclick.net	172.253.62.157	true	false	high
dl7g9llrghqi1.cloudfront.net	18.238.55.7	true	false	high
scontent.xx.fbcdn.net	157.240.241.1	true	false	high
track.hubspot.com	104.19.155.83	true	false	high
script.hotjar.com	18.164.96.87	true	false	high
js.hs-scripts.com	104.16.191.89	true	false	high
newdoc4.easyrecycling.co.za	169.239.217.18	true	false	high
stripe.com	54.187.159.182	true	false	high
www.google.com	142.251.40.100	true	false	high
beacon-v2.helpscout.net	99.84.108.86	true	false	high
signable.co.uk	35.214.8.169	true	false	unknown
d2ycxbs0cq3yaz.cloudfront.net	108.138.106.60	true	false	high
static-cdn.hotjar.com	108.138.106.126	true	false	high
js.hs-banner.com	104.18.34.229	true	false	unknown
accounts.google.com	142.251.16.84	true	false	high
sentry.io	35.186.247.156	true	false	high
clientstream-ga.launchdarkly.com	15.197.213.252	true	false	high
signable.us	35.214.8.169	true	false	unknown
cdn.amplitude.com	52.85.150.185	true	false	high
dna8twue3dlxq.cloudfront.net	18.238.49.122	true	false	high
d3hb14vkzrxvla.cloudfront.net	13.224.208.162	true	false	high
trk.klclick3.com	52.85.151.72	true	false	unknown
stripecdn.map.fastly.net	151.101.192.176	true	false	unknown
js.hsleadflows.net	104.18.123.12	true	false	unknown
analytics-alv.google.com	216.239.36.181	true	false	high
m.stripe.com	34.208.216.197	true	false	high
analytics.google.com	142.250.81.238	true	false	high
clients.l.google.com	142.250.65.174	true	false	high
g10102301085.co	34.120.31.228	true	false	unknown
signable.app	108.138.85.22	true	false	unknown
metrics.api.drift.com	unknown	unknown	false	high
m.stripe.network	unknown	unknown	false	high
cdn.firstpromoter.com	unknown	unknown	false	high
vc.hotjar.io	unknown	unknown	false	unknown
js.driftt.com	unknown	unknown	false	high
clients2.google.com	unknown	unknown	false	high
customer.api.drift.com	unknown	unknown	false	high
static.hotjar.com	unknown	unknown	false	high
www.signable.us	unknown	unknown	false	unknown
conversation.api.drift.com	unknown	unknown	false	high
fast.trychameleon.com	unknown	unknown	false	high
clients1.google.com	unknown	unknown	false	high
clientstream.launchdarkly.com	unknown	unknown	false	high
app.launchdarkly.com	unknown	unknown	false	high
www.signable.co.uk	unknown	unknown	false	unknown
www.linkedin.com	unknown	unknown	false	high
targeting.api.drift.com	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
public.profitwell.com	unknown	unknown	false	high
px.ads.linkedin.com	unknown	unknown	false	high
bootstrap.api.drift.com	unknown	unknown	false	high
js.stripe.com	unknown	unknown	false	high
5006190-40.chat.api.drift.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://analytics.google.com/g/collect?v=2&tid=G-4XE2VYSQ35&gtm=45je41a0v875209417&_p=1705440806590&gcd=11l1l1l1l1&dma=0&cid=2131508639.1705440776&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&_eu=EEA&_s=2&sid=1705440775&sct=1&seg=1&dl=https%3A%2F%2Fsignable.app%2Fregister%3Fcountry_code%3DUS%26_gl%3D1%252a1aykcz3%252a_gcl_au%252aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%252a_ga%252aMjEzMTUwODYzOS4xNzA1NDQwNzc2%252a_ga_4XE2VYSQ35%252aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.&dr=https%3A%2F%2Fwww.signable.us%2F&dt=Register%20-%20Signable&en=scroll&epn.percent_scrolled=90&_et=5&tfd=10296	false		high
https://signable.app/js/chunk-85d922d4.b5344bc9.js	false	Avira URL Cloud: safe	unknown
https://www.signable.co.uk/wp-content/uploads/logo_coop.png	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	low
https://www.signable.co.uk/wp-content/uploads/logo_hat_trick.png	false	Avira URL Cloud: safe	unknown
https://js.driftt.com/core/assets/js/3.f50b964b.chunk.js	false		high
https://signable.app/-/sync-cookies.js?ver=1692089186	false	Avira URL Cloud: safe	unknown
https://js.driftt.com/core/assets/js/4.c6304c2e.chunk.js	false		high
https://signable.app/js/chunk-3fbf9bd4.8a5a0a97.js	false	Avira URL Cloud: safe	unknown
https://signable.app/css/chunk-79dc7497.470369c5.css	false	Avira URL Cloud: safe	unknown
https://www.signable.us/wp-content/themes/Signable2019Theme/_/img/icons/icon_tiktok.svg	false	Avira URL Cloud: safe	unknown
https://track.hubspot.com/__ptbe.gif?n=pe4564783_test___api_key&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=4197038910&v=1.1&a=4564783&po=%2Fregister&r=https%3A%2F%2Fwww.signable.us%2F&pu=https%3A%2F%2Fsignable.app%2Fregister%3Fcountry_code%3DUS%26_gl%3D1%252a1aykcz3%252a_gcl_au%252aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%252a_ga%252aMjEzMTUwODYzOS4xNzA1NDQwNzc2%252a_ga_4XE2VYSQ35%252aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.&t=Register+-+Signable&cts=1705440810551&vi=58b81774595ab88167e6e3d83f5cd4dc&nc=true&u=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1&b=178014586.1.1705440810544&cc=15	false		high
https://signable.app/js/chunk-c9608798.4896751f.js	false	Avira URL Cloud: safe	unknown
https://static.hotjar.com/c/hotjar-2736869.js?sv=7	false		high
https://cdn.firstpromoter.com/fprom.js	false		high
https://js.driftt.com/core/assets/js/37.fba521ea.chunk.js	false		high
https://signable.app/img/icons/android-chrome-192x192.png	false	Avira URL Cloud: safe	unknown
https://js.driftt.com/core/assets/js/41.b4fc4de2.chunk.js	false		high
https://analytics.google.com/g/collect?v=2&tid=G-4XE2VYSQ35&gtm=45je41a0v875209417z879689912&_p=1705440806590&gcd=11l1l1l1l1&dma=0&cid=2131508639.1705440776&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&_eu=EA&_s=1&sid=1705440775&sct=1&seg=1&dl=https%3A%2F%2Fsignable.app%2Fregister%3Fcountry_code%3DUS%26_gl%3D1%252a1aykcz3%252a_gcl_au%252aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%252a_ga%252aMjEzMTUwODYzOS4xNzA1NDQwNzc2%252a_ga_4XE2VYSQ35%252aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.&dr=https%3A%2F%2Fwww.signable.us%2F&dt=Register%20-%20Signable&en=page_view&tfd=5293	false		high
https://track.hubspot.com/__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=4197038910&v=1.1&a=4564783&po=%2Fregister&r=https%3A%2F%2Fwww.signable.us%2F&pu=https%3A%2F%2Fsignable.app%2Fregister%3Fcountry_code%3DUS%26_gl%3D1%252a1aykcz3%252a_gcl_au%252aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%252a_ga%252aMjEzMTUwODYzOS4xNzA1NDQwNzc2%252a_ga_4XE2VYSQ35%252aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.&t=Register+-+Signable&cts=1705440810550&vi=58b81774595ab88167e6e3d83f5cd4dc&nc=true&u=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1&b=178014586.1.1705440810544&cc=15	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stripe.com/de-si	chromecache_260.1.dr	false		high
https://stripe.com/de-sg	chromecache_260.1.dr	false		high
https://stripe.com/pt-br-au	chromecache_260.1.dr	false		high
https://stripe.com/de-sk	chromecache_260.1.dr	false		high
https://stripe.com/id-li	chromecache_260.1.dr	false		high
https://stripe.com/nl-jp	chromecache_260.1.dr	false		high
https://stripe.com/sv-br	chromecache_260.1.dr	false		high
https://stripe.com/pt-br-at	chromecache_260.1.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavItem-fd5a8f8fac232f661b3	chromecache_260.1.dr	false	URL Reputation: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/StripeSet-423109ad4bf57a2a011c.css	chromecache_260.1.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/sv-be	chromecache_260.1.dr	false		high
https://stripe.com/id-lt	chromecache_260.1.dr	false		high
https://stripe.com/sv-bg	chromecache_260.1.dr	false		high
https://stripe.com/id-lu	chromecache_260.1.dr	false		high
https://stripe.com/id-lv	chromecache_260.1.dr	false		high
https://stripe.com/pt-br-bg	chromecache_260.1.dr	false		high
https://stripe.com/pt-br-be	chromecache_260.1.dr	false		high
https://stripe.com/de-th	chromecache_260.1.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorStickyAnimation-4ea4d6a5e9b414987337.css	chromecache_260.1.dr	false	URL Reputation: safe	unknown
https://metrics.api.drift.com	chromecache_214.1.dr, chromecache_392.1.dr	false		high
https://assets.ctfassets.net/fzn2n1nzq965/01hMKr6nEEGVfOuhsaMIXQ/c424849423b5f036a8892afa09ac38c7/fa	chromecache_260.1.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/Field-ea906aa31d4012757deb.css	chromecache_260.1.dr	false	URL Reputation: safe	unknown
https://stripe.com/id-mt	chromecache_260.1.dr	false		high
https://stripe.com/sv-ch	chromecache_260.1.dr	false		high
https://stripe.com/pt-br-ae	chromecache_260.1.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavTrack-1380f9c2e275695c5e	chromecache_260.1.dr	false	URL Reputation: safe	unknown
https://stripe.com/id-mx	chromecache_260.1.dr	false		high
https://stripe.com/sv-ca	chromecache_260.1.dr	false		high
https://stripe.com/id-my	chromecache_260.1.dr	false		high
https://openjsf.org/	chromecache_230.1.dr	false	URL Reputation: safe	unknown
https://stripe.com/fr-us	chromecache_260.1.dr	false		high
https://stripe.com/nl-lt	chromecache_260.1.dr	false		high
https://stripe.com/de-us	chromecache_260.1.dr	false		high
https://stripe.com/nl-lu	chromecache_260.1.dr	false		high
https://stripe.com/nl-lv	chromecache_260.1.dr	false		high
https://stripe.com/id-jp	chromecache_260.1.dr	false		high
https://stripe.com/docs/payments	chromecache_260.1.dr	false		high
https://images.ctfassets.net/fzn2n1nzq965/5F0uhf7cRg9vhR6NmgWzzI/664e14ddebb91375f89f8dcc75242dc0/ho	chromecache_260.1.dr	false		high
https://stripe.com/nl-li	chromecache_260.1.dr	false		high
https://stripe.com/sv-at	chromecache_260.1.dr	false		high
https://stripe.com/sv-au	chromecache_260.1.dr	false		high
https://stripe.com/nl-mt	chromecache_260.1.dr	false		high
https://stripe.com/nl-mx	chromecache_260.1.dr	false		high
https://stripe.com/nl-my	chromecache_260.1.dr	false		high
https://images.ctfassets.net	chromecache_260.1.dr	false		high
https://customer.api.drift.com	chromecache_214.1.dr, chromecache_392.1.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/Prelude-Q2U7OZHZ.js	chromecache_260.1.dr	false	URL Reputation: safe	unknown
https://stripe.com/sv-ae	chromecache_260.1.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/GridLayout-0b90e779a89c0243e739.css	chromecache_260.1.dr	false	URL Reputation: safe	unknown
https://dashboard.stripe.com/	chromecache_260.1.dr	false		high
https://stripe.com/nl-no	chromecache_260.1.dr	false		high
https://npms.io/search?q=ponyfill.	chromecache_230.1.dr	false		high
https://stripe.com/nl-nz	chromecache_260.1.dr	false		high
https://b.stripecdn.com/mkt-statics-srv/assets/HorizontalOverflowContainer-0b85e8f46a0db21a6ef9.css	chromecache_260.1.dr	false	URL Reputation: safe	unknown
https://stripe.com/sv-fr	chromecache_260.1.dr	false		high
https://stripe.com/pt-br-es	chromecache_260.1.dr	false		high
https://googleads.g.doubleclick.net/	chromecache_412.1.dr	false		high
https://stripe.com/sv-fi	chromecache_260.1.dr	false		high
https://stripe.com/id-hr	chromecache_260.1.dr	false		high
https://stripe.com/id-hu	chromecache_260.1.dr	false		high
https://stripe.com/fr-ro	chromecache_260.1.dr	false		high
https://www.signable.co.uk/privacy-policy/	chromecache_339.1.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/pt-br-fi	chromecache_260.1.dr	false		high
https://stripe.com/id-hk	chromecache_260.1.dr	false		high
https://stripe.com/fr-pt	chromecache_260.1.dr	false		high
https://stripe.com/id-ie	chromecache_260.1.dr	false		high
https://stripe.com/sv-gr	chromecache_260.1.dr	false		high
https://stripe.com/de-pl	chromecache_260.1.dr	false		high
https://images.ctfassets.net/fzn2n1nzq965/4WjxT85Wi0tNWOJie0L7LW/233ec6bd0738bc0fb86ed1ea0a12515a/Po	chromecache_260.1.dr	false		high
https://signable.app/?chris_hj_test=true	chromecache_339.1.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/docs/api	chromecache_260.1.dr	false		high
https://stripe.com/sv-gi	chromecache_260.1.dr	false		high
https://stripe.com/de-pt	chromecache_260.1.dr	false		high
https://stripe.com/id-it	chromecache_260.1.dr	false		high
https://www.signable.us/wp-content/uploads/graphic_esignature_sector_real_estate.png	chromecache_201.1.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/pt-br-ee	chromecache_260.1.dr	false		high
https://stripe.com/sv-gb	chromecache_260.1.dr	false		high
https://stripe.com/id-in	chromecache_260.1.dr	false		high
https://stripe.com/nl-pt	chromecache_260.1.dr	false		high
https://stripe.com/pt-br-cy	chromecache_260.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.19.155.83	forms.hubspot.com	United States	13335	CLOUDFLARENETUS	false
108.138.85.3	unknown	United States	16509	AMAZON-02US	false
104.16.79.186	js.hs-analytics.net	United States	13335	CLOUDFLARENETUS	false
108.139.47.2	unknown	United States	16509	AMAZON-02US	false
35.186.247.156	sentry.io	United States	15169	GOOGLEUS	false
50.16.7.188	unknown	United States	14618	AMAZON-AESUS	false
50.16.35.88	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
34.208.216.197	m.stripe.com	United States	16509	AMAZON-02US	false
142.250.81.238	analytics.google.com	United States	15169	GOOGLEUS	false
142.251.40.131	unknown	United States	15169	GOOGLEUS	false
157.240.241.1	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
18.164.96.77	unknown	United States	3	MIT-GATEWAYSUS	false
13.32.207.198	unknown	United States	16509	AMAZON-02US	false
108.138.106.60	d2ycxbs0cq3yaz.cloudfront.net	United States	16509	AMAZON-02US	false
108.138.85.22	signable.app	United States	16509	AMAZON-02US	false
142.250.80.35	www.google.ca	United States	15169	GOOGLEUS	false
104.19.154.83	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.65.174	clients.l.google.com	United States	15169	GOOGLEUS	false
34.120.31.228	g10102301085.co	United States	15169	GOOGLEUS	false
151.101.128.176	unknown	United States	54113	FASTLYUS	false
142.251.40.100	www.google.com	United States	15169	GOOGLEUS	false
142.250.65.206	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
18.164.96.87	script.hotjar.com	United States	3	MIT-GATEWAYSUS	false
108.138.106.126	static-cdn.hotjar.com	United States	16509	AMAZON-02US	false
18.238.49.122	dna8twue3dlxq.cloudfront.net	United States	16509	AMAZON-02US	false
172.253.62.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
151.101.192.176	stripecdn.map.fastly.net	United States	54113	FASTLYUS	false
13.224.214.83	vc-live-cf.hotjar.io	United States	16509	AMAZON-02US	false
18.160.10.74	d1tcqh4bio8cty.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
54.175.64.186	events.launchdarkly.com	United States	14618	AMAZON-AESUS	false
35.214.8.169	signable.co.uk	United States	19527	GOOGLE-2US	false
15.197.213.252	clientstream-ga.launchdarkly.com	United States	7430	TANDEMUS	false
52.85.150.185	cdn.amplitude.com	United States	16509	AMAZON-02US	false
18.164.96.95	unknown	United States	3	MIT-GATEWAYSUS	false
13.224.208.162	d3hb14vkzrxvla.cloudfront.net	United States	16509	AMAZON-02US	false
142.251.16.84	accounts.google.com	United States	15169	GOOGLEUS	false
169.239.217.18	newdoc4.easyrecycling.co.za	South Africa	327979	DIAMATRIXZA	false
52.85.151.72	trk.klclick3.com	United States	16509	AMAZON-02US	false
216.239.36.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
108.138.106.101	unknown	United States	16509	AMAZON-02US	false
104.18.34.229	js.hs-banner.com	United States	13335	CLOUDFLARENETUS	false
54.187.159.182	stripe.com	United States	16509	AMAZON-02US	false
99.84.108.86	beacon-v2.helpscout.net	United States	16509	AMAZON-02US	false
18.238.55.7	dl7g9llrghqi1.cloudfront.net	United States	16509	AMAZON-02US	false
104.16.191.89	js.hs-scripts.com	United States	13335	CLOUDFLARENETUS	false
104.18.123.12	js.hsleadflows.net	United States	13335	CLOUDFLARENETUS	false
3.94.218.138	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false

Private

IP
192.168.2.5
192.168.2.18

General Information

Joe Sandbox version:	38.0.0 Ammolite
Analysis ID:	1375721
Start date and time:	2024-01-16 22:32:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 27s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://trk.klclick3.com/ls/click?upn=bBwYdIep1AJAhlueKA-2FYA-2FiZB25bBJh74wxcvz7MbGRPW8Sumng75RGT1g5XS8cjbfmY-2B36p0K05EHzrwgenVucrqr4wcbtuSTwUvsCLkp7yNipUK-2B-2FNaDgkKPZvGU-2FeFk2oNL8Cwbk73-2FgVgciDWKs7EH5RHkh4JQ7UzYtmcj0T2v97DZCXopI01GYDKBnCGDu5JGSJeb2B-2BC-2BiwvHpQcN7uwZDtFJLVNCcASk2ytPbSbN6DXY3zGy2QIb4zfVuOOrvJvX4AYss6-2FMGf-2FLtoJ7EVDcQUFASKPodO4SDGaqD6Bmc8P77aL-2FkVxJju4Dgwb1F_PoPSv5Gw7kvm-2FaTPf5isV0F8OzVemx3-2BMda5lKttFwV5hYNASaBIOvhduvo23ZgNxryqZbnFqmZgF2SN317Jd5JsAvLWLiTx01vINjL-2F5lNDaOUHPgjGlCX5KJOQWKvYIEsyEtGsWDE-2FWVvyeRrrk4vCfS2JQMJn5yy-2FO8x3j7XGuUdh-2F6jheAyXeY-2FcbZn5oa9YDlMndYX-2FMs9037sfq0RD4LSVjBHfZJ41mqRz3cMyiWVWiBP-2Fepkutp7Xi6fORoNqe0OXl4XSRoLzjS-2F-2B2BwqUOD8bdrQqvj-2BGxMHjy87MVEE7U79i0WQowFwSCFN
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@21/238@134/50
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, audiodg.exe, WMIADAP.exe, SIHClient.exe
Excluded IPs from analysis (whitelisted): 142.251.35.163, 34.104.35.123, 142.250.80.8, 72.21.81.240, 192.229.211.108, 142.250.72.106, 142.250.65.227, 151.101.194.217, 151.101.130.217, 151.101.2.217, 151.101.66.217, 142.250.80.72, 142.250.80.74, 142.250.65.234, 142.250.80.106, 142.250.176.202, 142.250.65.170, 142.250.64.74, 142.251.40.234, 142.250.80.42, 142.251.40.138, 142.251.40.170, 172.217.165.138, 142.250.65.202, 142.251.40.202, 142.250.81.234, 142.250.64.106, 151.101.2.137, 151.101.66.137, 151.101.194.137, 151.101.130.137, 204.79.197.200, 13.107.21.200, 13.107.42.14, 142.251.40.163
Excluded domains from analysis (whitelisted): www-linkedin-com.l-0005.l-msedge.net, fonts.googleapis.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, dual-a-0001.a-msedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, k.sni.global.fastly.net, fe3cr.delivery.mp.microsoft.com, l-0005.l-msedge.net, bat-bing-com.a-0001.a-msedge.net, ocsp.digicert.com, edgedl.me.gvt1.com, www.googletagmanager.com, bat.bing.com, update.googleapis.com, c3.shared.global.fastly.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: https://trk.klclick3.com/ls/click?upn=bBwYdIep1AJAhlueKA-2FYA-2FiZB25bBJh74wxcvz7MbGRPW8Sumng75RGT1g5XS8cjbfmY-2B36p0K05EHzrwgenVucrqr4wcbtuSTwUvsCLkp7yNipUK-2B-2FNaDgkKPZvGU-2FeFk2oNL8Cwbk73-2FgVgciDWKs7EH5RHkh4JQ7UzYtmcj0T2v97DZCXopI01GYDKBnCGDu5JGSJeb2B-2BC-2BiwvHpQcN7uwZDtFJLVNCcASk2ytPbSbN6DXY3zGy2QIb4zfVuOOrvJvX4AYss6-2FMGf-2FLtoJ7EVDcQUFASKPodO4SDGaqD6Bmc8P77aL-2FkVxJju4Dgwb1F_PoPSv5Gw7kvm-2FaTPf5isV0F8OzVemx3-2BMda5lKttFwV5hYNASaBIOvhduvo23ZgNxryqZbnFqmZgF2SN317Jd5JsAvLWLiTx01vINjL-2F5lNDaOUHPgjGlCX5KJOQWKvYIEsyEtGsWDE-2FWVvyeRrrk4vCfS2JQMJn5yy-2FO8x3j7XGuUdh-2F6jheAyXeY-2FcbZn5oa9YDlMndYX-2FMs9037sfq0RD4LSVjBHfZJ41mqRz3cMyiWVWiBP-2Fepkutp7Xi6fORoNqe0OXl4XSRoLzjS-2F-2B2BwqUOD8bdrQqvj-2BGxMHjy87MVEE7U79i0WQowFwSCFN

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Jan 16 20:32:46 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9785009436178584
Encrypted:	false
SSDEEP:	48:8az2d2eT5ZBwTTHRidAKZdA1rehwiZUklqehey+3:8a4VXwTlty
MD5:	C7A20DCCD0726177EA02D3ACC7924B43
SHA1:	F34DC4A948B574EFD2249CB1CA39C33F06268704
SHA-256:	12488265867269A9D490852C79C78FF818EF10A0480F76FBD8ACF6A92772934F
SHA-512:	7F1034BDDF448C91E9BCCC713F7E7C011E3CA263219E40714EF5384E76619A28F25A0D99A76F911735F94CECF2F4D3CBECB1C9611B031C4F451EF3DC621114CF
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....]....H......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.R..PROGRA~1..t......O.I0X......B...............J......Y..P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V0X......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.R..Chrome..>......CW.V0X......M......................pd.C.h.r.o.m.e.....`.1.....FW.R..APPLIC~1..H......CW.V0X.............................pd.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V0X.......#......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........R9.I.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Jan 16 20:32:46 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.990188299203568
Encrypted:	false
SSDEEP:	48:8Nz2d2eT5ZBwTTHRidAKZdA1ceh/iZUkAQkqehdy+2:8N4VXwTJ9Q0y
MD5:	82656E8E4094A52D3F3BD1FA6D1E343A
SHA1:	B7FC96B476DE45EEC81FDA8A0FD1C9B8A882FABA
SHA-256:	48574BDA20B617DF5033A8FF4101D4D02AADF47BA38565B5EC09D30DF5FBEB57
SHA-512:	714B45ECF1302DD7D70DAE2F48E71E0D3507E645DCC5501E6408273AEB908EE3ADA4C1107C21F90611B81C432E46E48A72C087C7D618407F8087A3C6C9373600
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....Bh..H......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.R..PROGRA~1..t......O.I0X......B...............J......Y..P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V0X......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.R..Chrome..>......CW.V0X......M......................pd.C.h.r.o.m.e.....`.1.....FW.R..APPLIC~1..H......CW.V0X.............................pd.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V0X.......#......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........R9.I.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 09:23:19 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2691
Entropy (8bit):	3.999168589807521
Encrypted:	false
SSDEEP:	48:8XRz2d2eT5ZBwTSHRidAKZdA14Aeh7sFiZUkmgqeh7s7y+BX:8h4VXwT0nRy
MD5:	D9ADBDDC2A18CC106B4BFA35ECA65AAF
SHA1:	E7386F2935B6931F6F5D244B943B64EDC1CE41E2
SHA-256:	16FDA8EE6896A9E9ACF2DBB0140F23F6877CB9DC668B44E0757B8CB7B3F45644
SHA-512:	2E9C519EE517DC1739686A5E0CC270F94ACDE288E51835CEB42E99BE4A4BFE1E76EBFD8FCCB1E2A2D2F5033060BC8A46B8A97E9DF760FCC92E1129C5376FEFC7
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....?.4 ?.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.R..PROGRA~1..t......O.I0X......B...............J......Y..P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V0X......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.R..Chrome..>......CW.V0X......M......................pd.C.h.r.o.m.e.....`.1.....FW.R..APPLIC~1..H......CW.V0X.............................pd.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VFW.R.....#......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........R9.I.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Jan 16 20:32:46 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.991279533430432
Encrypted:	false
SSDEEP:	48:8Pz2d2eT5ZBwTTHRidAKZdA1JehDiZUkwqehZy+R:8P4VXwTMjy
MD5:	83FA973930FBBA565FAD6AB04368FF0D
SHA1:	65EC6AE3E38A9BF3738332E1A296D31E51513B9D
SHA-256:	14FAB55F2CC635D3E7C69530956FC523E5CA24C8ECE6D30BDA0F6FB4C749E73C
SHA-512:	D8DABDAE6168A0F5B025F77242C4B9E699D3DACC5A05F4493CB6EAA6A0358CB72E3A362E772B38F7B914479DCF01151D82E7114C218336099D03EFDFC4E43C2C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........H......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.R..PROGRA~1..t......O.I0X......B...............J......Y..P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V0X......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.R..Chrome..>......CW.V0X......M......................pd.C.h.r.o.m.e.....`.1.....FW.R..APPLIC~1..H......CW.V0X.............................pd.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V0X.......#......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........R9.I.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Jan 16 20:32:46 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.976237156763625
Encrypted:	false
SSDEEP:	48:82z2d2eT5ZBwTTHRidAKZdA1XehBiZUk1W1qeh/y+C:824VXwTM9fy
MD5:	F818438B2C304C6DF4035DD368397537
SHA1:	166915FD738FF9805729AB18B7B951239FA9CDAB
SHA-256:	4C83CDEEFA22055136DDFDE3F0E1D7166B446086BE99489C21157A26368E1D9F
SHA-512:	1E06A8771C040013CD3487A2D2778114C4E0BD5A430AF66C23510DEA210BEB6AD3BAD40D018FB9C9F0A2D827106026F657EA036E66B842ECA6B29ACFF261F37E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....h....H......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.R..PROGRA~1..t......O.I0X......B...............J......Y..P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V0X......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.R..Chrome..>......CW.V0X......M......................pd.C.h.r.o.m.e.....`.1.....FW.R..APPLIC~1..H......CW.V0X.............................pd.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V0X.......#......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........R9.I.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Jan 16 20:32:46 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9888611669759233
Encrypted:	false
SSDEEP:	48:84dz2d2eT5ZBwTTHRidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbRy+yT+:8Y4VXwTAT/TbxWOvTbRy7T
MD5:	C55DA4F8D493ACD41713977B046FB04D
SHA1:	A2F1E08573201BE4F14BD2EE92C79D4F2840AA89
SHA-256:	580D6B79EC2A71F7ABBB59D49202E4261343E9B50DB370F08D4C255F951CC8A3
SHA-512:	E7FFECC56513C6B8D7AC3DBE0358817E5637F2AD0AFF0186A0D81A5200EEC323A315598E39C53E5927CF191BBBC9F0966F470EA383F9160F3A9136EA168B92DC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....7...H......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.R..PROGRA~1..t......O.I0X......B...............J......Y..P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V0X......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.R..Chrome..>......CW.V0X......M......................pd.C.h.r.o.m.e.....`.1.....FW.R..APPLIC~1..H......CW.V0X.............................pd.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V0X.......#......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........R9.I.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (8700), with no line terminators
Category:	downloaded
Size (bytes):	8700
Entropy (8bit):	4.901679221068419
Encrypted:	false
SSDEEP:	96:c7FZY7QB0zRHEFjedGgSrWN06CwuEUKj4vZPTxJpEMfHBE6J0/Pn07:uYNzRHIJgSaN06lj4BPl7E6O6JCk
MD5:	38F95416D5F7349B65699F64E6A587FD
SHA1:	2CA6F6F77481C3CDBCAACFC61A56C24F3C933ADE
SHA-256:	08756C47213D461BAA3B01F42448A76D11F524470C7A34F9018733889BD4F49C
SHA-512:	E855AB926916CC3A9AEF67E6BCAC01056180650710804624452F2D2ACB7CE5CE563FBDC5146D51FFE6607FBCDFF8D806765D4FE14C6316AE559BB0C6281EDAFA
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-content/plugins/cookie-notice/js/front.min.js?ver=2.4.13
Preview:	!function(){if("function"==typeof window.CustomEvent)return!1;function e(e,t){t=t\|\|{bubbles:!1,cancelable:!1,detail:void 0};var n=document.createEvent("CustomEvent");return n.initCustomEvent(e,t.bubbles,t.cancelable,t.detail),n}e.prototype=window.Event.prototype,window.CustomEvent=e}(),function(){var e=function(e){return RegExp("(^\| )"+e+"( \|$)")},t=function(e,t,n){for(var i=0;i<e.length;i++)t.call(n,e[i])};function n(e){this.element=e}n.prototype={add:function(){t(arguments,function(e){this.contains(e)\|\|(this.element.className+=this.element.className.length>0?" "+e:e)},this)},remove:function(){t(arguments,function(t){this.element.className=this.element.className.replace(e(t),"")},this)},toggle:function(e){return this.contains(e)?(this.remove(e),!1):(this.add(e),!0)},contains:function(t){return e(t).test(this.element.className)},replace:function(e,t){this.remove(e),this.add(t)}},"classList"in Element.prototype\|\|Object.defineProperty(Element.prototype,"classList",{get:function(){return

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11808), with no line terminators
Category:	downloaded
Size (bytes):	11808
Entropy (8bit):	5.093873861161544
Encrypted:	false
SSDEEP:	192:7Cm/w6kClAgsaFtPrjPFXg5db/oC3AigvNBN6sXIWhBqUkx8Elo9VEMbu3V38Cgg:7CVClAgsqTj+5db/ki/W4bloXERl38C1
MD5:	B0793FA46E8C0AE1846B7BE8A833DA35
SHA1:	5C97555FF1E0B97829E7F1D054B44F6C55B5AE97
SHA-256:	BBA54915DB71FC417BE4D5852EC7D138D7C3FA90356DDEE98B5267A7DB7E6B5B
SHA-512:	F8E37218D871E8F8C0C4B491C25027EB94F85A35B9BC2C9FA154B3A6439AA349A6850B9979F9E8D20FDBFD239892EAEBF746003A8281C7D22D0E64E985E6B289
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/40.31ef8dbf.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[40],{"9OUN":function(e,t,n){"use strict";n.d(t,"e",function(){return createStore}),n.d(t,"c",function(){return combineReducers}),n.d(t,"b",function(){return bindActionCreators}),n.d(t,"a",function(){return applyMiddleware}),n.d(t,"d",function(){return compose});var r=n("hE+J"),o=function randomString(){return Math.random().toString(36).substring(7).split("").join(".")},i={INIT:"@@redux/INIT"+o(),REPLACE:"@@redux/REPLACE"+o(),PROBE_UNKNOWN_ACTION:function PROBE_UNKNOWN_ACTION(){return"@@redux/PROBE_UNKNOWN_ACTION"+o()}};function isPlainObject(e){if("object"!==typeof e\|\|null===e)return!1;for(var t=e;null!==Object.getPrototypeOf(t);)t=Object.getPrototypeOf(t);return Object.getPrototypeOf(e)===t}function createStore(e,t,n){var o;if("function"===typeof t&&"function"===typeof n\|\|"function"===typeof n&&"function"===typeof arguments[3])throw new Error("It looks like you are passing several store enhancers to createStore(). This is not suppor

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54960), with no line terminators
Category:	downloaded
Size (bytes):	54960
Entropy (8bit):	5.247733535708695
Encrypted:	false
SSDEEP:	768:XpFB/1qdB/i/BeMh4yV7y7jydINy+R4R2roBdyEea/o00l8jPW:fLmBgde
MD5:	1AC37BF2B93050F29058B66A9AD43E10
SHA1:	60CD4567C1C895E694BE5A75C24DA7215E43C01E
SHA-256:	D14E287DDAE470B06C4639E73260CA21A4C9B7CFDF56E02965A8F50FB5333B42
SHA-512:	3D540B91AB13CDCE609E4A354E109FD5403E27BB9219E377B60FF2D267540287DF7FF0CD7FE2C81F6E8C92C1589D3AAFB56AF8F4668862DF1A11023B09ECA855
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/3.f50b964b.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[3],{"/mDG":function(e,t,n){var r=n("VBlB");e.exports=function toSpaceCase(e){return r(e).replace(/[\W_]+(.\|$)/g,function(e,t){return t?" "+t:""}).trim()}},"/vf7":function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var r=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e};t.renderViewDefault=function renderViewDefault(e){return o.default.createElement("div",e)},t.renderTrackHorizontalDefault=function renderTrackHorizontalDefault(e){var t=e.style,n=_objectWithoutProperties(e,["style"]),i=r({},t,{right:2,bottom:2,left:2,borderRadius:3});return o.default.createElement("div",r({style:i},n))},t.renderTrackVerticalDefault=function renderTrackVerticalDefault(e){var t=e.style,n=_objectWithoutProperties(e,["style"]),i=r({},t,{right:2,bottom:2,top:2,borderRadius:3});return o.default.createElement("div",r({style

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	408
Entropy (8bit):	4.564820119688623
Encrypted:	false
SSDEEP:	6:YhKQrX7X4wHrEElFSBUwYG78E9wHrEWX7OjxMSBKRBeBi9wHrEElFSBL4Az/4wH4:YcQrLbR+BUOV8LOBceBi8R+BLl/LR+B1
MD5:	FD4F1DF95A7FC2A111E9E200A46C3AE3
SHA1:	4B4D262597EF3EBC4E7CA4C9BD96F24AAD432E12
SHA-256:	3B358ECCA877E30D1607910368506F9418EF2A3EB7B8E0DB5292F602E0820287
SHA-512:	0CC3C2134F7AA0DBAF1E4D426D6832EB37C6BA236BCA9DF81FC4A7C0187494BF5C4EF3594CC35668F54A2668A57480DD98F4E9728E908DDB29E4BA8A192D3046
Malicious:	false
Reputation:	low
URL:	https://app.launchdarkly.com/sdk/evalx/6239d86c177e3a150044c12d/contexts/eyJrZXkiOiJhbm9ueW1vdXMtdXNlciIsImtpbmQiOiJ1c2VyIiwiYW5vbnltb3VzIjp0cnVlfQ
Preview:	{"dropbox-to-v2":{"flagVersion":4,"trackEvents":false,"value":false,"variation":1,"version":329},"envelope-widget-sign-to-v2":{"flagVersion":18,"trackEvents":false,"value":true,"variation":0,"version":329},"moooore-branding":{"flagVersion":2,"trackEvents":false,"value":false,"variation":1,"version":329},"planned-maintenance":{"flagVersion":15,"trackEvents":false,"value":false,"variation":1,"version":329}}

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1543
Entropy (8bit):	4.1767126155264105
Encrypted:	false
SSDEEP:	24:t0WGURuXMMXknAjLQQnsU19RgEmc4ThUaWoPJl8Xp1JCtcSu6w9rSvsxgwsGWx8X:kUnAjLQNUBNV1FoBAlSxWmw7WjS
MD5:	BF572991D7FAED27D5A627471CF63E7C
SHA1:	A26050EB28F8FFEA20E132476FA819A85B96DC4A
SHA-256:	CA690367AB5D6EE7FA581A61271E7A8FBD9E5E02D15CC9EE1D576840CD1726CB
SHA-512:	07D38095D2B1F8F83707C7357CAF7028BDB6DC202121EF1B5BD7813B60BB8D14FA64428382590EFE323F33D180BD994A7143109A20025C662A3CAEA11A9B5F8C
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-content/themes/Signable2019Theme/_/img/backgrounds/signable_squiggle_right_black.svg
Preview:	<svg width="99" height="87" viewBox="0 0 99 87" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M168.871 30.5528C167.659 35.0367 166.499 38.7095 165.863 40.5545L165.381 41.1487C162.417 48.5497 158.067 55.3247 152.557 61.106C146.528 67.4321 139.244 72.4288 131.172 75.7758C111.71 83.7024 87.7107 80.7546 71.1164 67.6337C65.2003 62.9048 60.8556 56.4945 58.655 49.2474C61.6691 46.9856 64.3911 44.3587 66.7588 41.427C73.3512 33.2799 80.359 19.2899 77.8588 8.47444C76.8684 4.15146 73.7315 0.652962 69.1648 0.182726C62.9778 -0.466372 58.3376 4.17255 55.524 9.11641C49.1142 20.2883 48.6331 34.2942 51.5111 46.627C48.2384 48.6054 44.6591 50.0248 40.9201 50.8272C29.7396 53.1817 17.6626 49.2199 11.0729 39.5444C3.94498 29.0062 7.40054 15.4183 10.2924 4.04684L10.3551 3.80023C11.3429 -0.0581316 5.17432 -0.775487 4.20138 3.04439C0.960408 15.8145 -2.04778 30.1346 5.3703 42.0881C11.5425 52.0448 23.022 57.8375 34.6239 57.711C41.1686 57.5929 47.5829 55.8614 53.29

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 714, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	647526
Entropy (8bit):	7.987815801570409
Encrypted:	false
SSDEEP:	12288:9rIiP5JTRgEiP/miEBOKuaQCa/nk9nWkY0XUNVCAyWpSrRXOoNwhqh0SQ:9rzS/mitnCUfCAjeVxNwhqOp
MD5:	14475F53D3A18B32C42E9126E404B018
SHA1:	CC6E79FEBFDEAAB7D086F718B438A716FFA59A77
SHA-256:	5EA34C91122327C3E761BEB165EE13990AAC964EBC382A9B7DBF2B3C58A5ADDA
SHA-512:	8FCE1AAD4B4E0FAA037A1E1801072E33AE4DB42FB2FE6773FD89E963A3A87160616E45D0899EF4278593067BE8C373E2E1FAA8FE55553D4A40846AA71F452E87
Malicious:	false
Reputation:	low
URL:	https://www.signable.co.uk/wp-content/uploads/graphic_document_tracking.png
Preview:	.PNG........IHDR...............{m....pHYs...%...%.IR$.....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2def, 2023/02/02-12:14:24 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 24.5 (Macintosh)" xmp:CreateDate="2023-06-26T15:58:35+01:00" xmp:ModifyDate="2023-06-26T16:02:01+01:00" xmp:MetadataDate="2023-06-26T16:02:01+01:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:7f0203a2-33f1-4f90-879a-c01db1fee118" xmpMM:DocumentID="xmp.did:7f0203a2-33f1-4f90-879a-c01db1fee118" xmpMM:OriginalDocumentID="xmp.did:7f0203a2-33f1-4

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (49388), with LF, NEL line terminators
Category:	downloaded
Size (bytes):	52505
Entropy (8bit):	5.443676659480842
Encrypted:	false
SSDEEP:	768:RCeVrK2ygLGx4i2vEeuh2oKqO5d2m97p3oCiBD1/TYHfd97HI:bk7oGSi2vEeR75bbtq/TiX7HI
MD5:	CE43EB0AE1C5AA89A9235F99CEFB8869
SHA1:	024DCAB5D9A105971A70D16903C31AF056EB7845
SHA-256:	D3F6F42DBD78C487A7253F528CDC4A31AFD989E0268D15F3B2434910B98790B1
SHA-512:	45D0FC31E18CD38DB67DD8EA5A08E5B1FA990E8511144C18C6BCF2C31EEB3BE5523472E3E1651E70298C5C8612BB8835E3F74FBF9979BDFD4DCB079CDD1DD901
Malicious:	false
Reputation:	low
URL:	https://signable.app/-/sync-cookies.js?ver=1692089186
Preview:	var syncCookies=function(t){"use strict";function e(t,e){var r=Object.keys(t);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(t);e&&(n=n.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),r.push.apply(r,n)}return r}function r(t,e,r){return e in t?Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}):t[e]=r,t}function n(t,e){return function(t){if(Array.isArray(t))return t}(t)\|\|function(t,e){var r=null==t?null:"undefined"!=typeof Symbol&&t[Symbol.iterator]\|\|t["@@iterator"];if(null==r)return;var n,o,i=[],a=!0,u=!1;try{for(r=r.call(t);!(a=(n=r.next()).done)&&(i.push(n.value),!e\|\|i.length!==e);a=!0);}catch(t){u=!0,o=t}finally{try{a\|\|null==r.return\|\|r.return()}finally{if(u)throw o}}return i}(t,e)\|\|function(t,e){if(!t)return;if("string"==typeof t)return o(t,e);var r=Object.prototype.toString.call(t).slice(8,-1);"Object"===r&&t.constructor&&(r=t.constructor.name);if("Map"===r\|\|"Set"===r)return Array.from(t);if("Arguments"

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23897), with no line terminators
Category:	downloaded
Size (bytes):	23897
Entropy (8bit):	5.309082182475918
Encrypted:	false
SSDEEP:	384:9iH5aLGGy474znD9oSZXH79WfhaONcgnCXg9:guGGhaXXY5TcgnCXg9
MD5:	FA281FCBE4B2E35558D60FAE3E316367
SHA1:	79223CDC8E803DF8AA51004853244A314D9736AD
SHA-256:	B0AF909B7AE6AD2644BFE2A60D939092AAF113B2CBC4ED2981A892869143B98A
SHA-512:	B954CC4931B3CDEAC44A75E7FF7180CC988433782707DEDFAE7358CFD3BE4C7AD4AC8C8CDA01C30C95E593EFCEA2939A0EE34E0ABCCC2092D42B1CAEDB1FE00D
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/51.558be3c5.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[51],{jrvE:function(e,t,n){"use strict";var r=n("nfbA"),a=n("cgfC"),i=n("a4gb"),o=n("+nxv"),c=n("usiZ"),s=n("nb4r"),u=n("2nP+"),l=n("AHQf"),d=n("jiYP"),p=n("zgdO"),f=n("bTzN"),v=n("jniC"),_=n("uIJS"),h=n("wQh9"),b=n("yvDu"),m=n("LvsC"),O=n("qytN"),g=n("7jL2"),y=n("LfGp"),j=n("uHEx"),E=n("Iwrg"),k=n("+OSO"),S=n("MiOA"),x=n("8dVd"),w=n("26VM"),T=n("mekd"),R=n("3QMb");function exceptionFromError(e,t){var n=parseStackFrames(e,t),r={type:t&&t.name,value:extractMessage(t)};return n.length&&(r.stacktrace={frames:n}),void 0===r.type&&""===r.value&&(r.value="Unrecoverable error caught"),r}function eventFromError(e,t){return{exception:{values:[exceptionFromError(e,t)]}}}function parseStackFrames(e,t){var n=t.stacktrace\|\|t.stack\|\|"",r=function getPopSize(e){if(e){if("number"===typeof e.framesToPop)return e.framesToPop;if(F.test(e.message))return 1}return 0}(t);try{return e(n,r)}catch(a){}return[]}var F=/Minified React error #\d+;/i;function extr

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13063), with no line terminators
Category:	downloaded
Size (bytes):	13063
Entropy (8bit):	5.5914712509986515
Encrypted:	false
SSDEEP:	192:z1FrNYuBWyiwkaCRykTCfWU94NDjQj8+24i6gHueo1CNCfWd9PYEN4Ywi1wl:z3KyW0CRy3T9gjQjywZCNSWrkYwv
MD5:	455157CB49065FB85FED54901DDAEB0E
SHA1:	248D056B36813AE68A2179DF92860E07CECD7A34
SHA-256:	7641F066C35D0CA15D4897BFE49D640ED4C143FF8F04030C2020CBB2ACFA7B0B
SHA-512:	290DF8FB129D5A33135E6332C0EE89BAD8225CAF1FB13872D06AFB277C867718E7C5F970E10A25D55FB9B6A2BB27AD48267F16C1DD62BBD78590F4E99890ECF3
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/29.31d09948.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[29],{"7EA0":function(t,u){t.exports=/[\0-\uD7FF\uE000-\uFFFF]\|[\uD800-\uDBFF][\uDC00-\uDFFF]\|[\uD800-\uDBFF](?![\uDC00-\uDFFF])\|(?:[^\uD800-\uDBFF]\|^)[\uDC00-\uDFFF]/},Ckiu:function(t,u){t.exports=/[ \xA0\u1680\u2000-\u200A\u2028\u2029\u202F\u205F\u3000]/},EfWO:function(t,u,e){"use strict";var r=e("q3/s"),s=e("s+nu");function Url(){this.protocol=null,this.slashes=null,this.auth=null,this.host=null,this.port=null,this.hostname=null,this.hash=null,this.search=null,this.query=null,this.pathname=null,this.path=null,this.href=null}u.parse=urlParse,u.resolve=function urlResolve(t,u){return urlParse(t,!1,!0).resolve(u)},u.resolveObject=function urlResolveObject(t,u){return t?urlParse(t,!1,!0).resolveObject(u):u},u.format=function urlFormat(t){s.isString(t)&&(t=urlParse(t));return t instanceof Url?t.format():Url.prototype.format.call(t)},u.Url=Url;var n=/^([a-z0-9.+-]+:)/i,h=/:[0-9]$/,o=/^(\/\/?(?!\/)[^\?\s])(\?[^\s]*)?$/,a=["{","}","\|","\

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3611)
Category:	downloaded
Size (bytes):	3663
Entropy (8bit):	5.178727704065101
Encrypted:	false
SSDEEP:	96:SVUrEJTEROxXvjx0rW+INF8VQT6pKCImNrWM30:QBvB+S817qp
MD5:	E23BD72D7B68CD047A93A860C220F574
SHA1:	4568B1DE2BE2128FD1E1EA54E691EF50972559F1
SHA-256:	8EDBF860C4DC4E7651A01C6CF0C4B1B0784AE07AD3D5AB6CB3BCDE74FCB0421B
SHA-512:	F2BECB006EF0CEC08BF6DCC92851A0A9E6B300D406B5B4AC96FD698CCA87DA0F609DD76AC8EE2E0F89E919126EE1C0569452336491C050ED85E8D3A18760BAEF
Malicious:	false
Reputation:	low
URL:	https://signable.app/js/chunk-7b758553.811641ac.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-7b758553"],{"0920":function(t,e,a){},"1f73":function(t,e,a){"use strict";a.r(e);a("7f7f");var o=function(){var t=this,e=t._self._c;return e("VModal",{attrs:{name:"delete-apikey-modal",loading:t.loading}},[e("h2",{attrs:{slot:"header"},slot:"header"},[t._v(t._s(t.$t("companySettings.developer.apikeys.delete")))]),e("div",{attrs:{slot:"content"},slot:"content"},[e("p",{attrs:{"data-hj-suppress":""}},[t._v(t._s(t.$t("companySettings.developer.apikeys.deleteWarning",{name:t.item.name})))]),e("VForm",{attrs:{onSubmit:t.validateForm,"data-vv-scope":"apikey-delete"}},[e("div",{attrs:{slot:"formButtons",type:"left"},slot:"formButtons"},[e("VButton",{attrs:{type:"outline-1","data-ec":"delete_api_key_modal","data-et":"cancel_button"},on:{click:t.closeModal}},[e("span",[t._v(t._s(t.$t("functional.cancel")))])])],1),e("div",{attrs:{slot:"formButtons",type:"right"},slot:"formButtons"},[e("VButton",{attrs:{type:"error","data-ec":"dele

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25600), with no line terminators
Category:	downloaded
Size (bytes):	25600
Entropy (8bit):	5.448623548445207
Encrypted:	false
SSDEEP:	768:PYzFZflJreLbrCS9h7vo/TMNt340KrExPdtS9p:0eLP7vobcSr
MD5:	A2ACE4F65AA7B34DEDB884F6CFE9DF8D
SHA1:	6CD6950446B7701A27180647E2DBB74BB90509D4
SHA-256:	EDF1011AD272D21B66AE82A21A9D029186DC81C9F13972203FC3107F75835D4B
SHA-512:	B610EFEDA6E8D071EECBBA4E5966B5A6CAC87ECF64C5C900A81164D36C656886D0B69F7DF88B114EC1A6BA2108C883F714E415F2632E512D13D7846A8BFB169E
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/41.b4fc4de2.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[41],{"1Fob":function(t,e,r){"use strict";var n=new RegExp("%[a-f0-9]{2}","gi"),f=new RegExp("(%[a-f0-9]{2})+","gi");function decodeComponents(t,e){try{return decodeURIComponent(t.join(""))}catch(f){}if(1===t.length)return t;e=e\|\|1;var r=t.slice(0,e),n=t.slice(e);return Array.prototype.concat.call([],decodeComponents(r),decodeComponents(n))}function decode(t){try{return decodeURIComponent(t)}catch(f){for(var e=t.match(n),r=1;r<e.length;r++)e=(t=decodeComponents(e,r).join("")).match(n);return t}}t.exports=function(t){if("string"!==typeof t)throw new TypeError("Expected `encodedURI` to be of type `string`, got `"+typeof t+"`");try{return t=t.replace(/\+/g," "),decodeURIComponent(t)}catch(e){return function customDecodeURIComponent(t){for(var r={"%FE%FF":"\ufffd\ufffd","%FF%FE":"\ufffd\ufffd"},n=f.exec(t);n;){try{r[n[0]]=decodeURIComponent(n[0])}catch(e){var i=decode(n[0]);i!==n[0]&&(r[n[0]]=i)}n=f.exec(t)}r["%C2"]="\ufffd";for(var o=Obj

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "loader.js", last modified: Mon Jan 15 13:37:38 2024, max compression, from Unix, original size modulo 2^32 458
Category:	downloaded
Size (bytes):	325
Entropy (8bit):	7.400580860169021
Encrypted:	false
SSDEEP:	6:XLTpA8U9cMA07Qtcz9lm80UOu1b/wQ20yJV0QYExdGB9PUAfZN:XLS8UqMA07QtglCUO6b4pIETMPZfZN
MD5:	36174CB0DAA627389D7A0D51BEC0C1C0
SHA1:	D3BB95154F81F637E196807E57767ACA56227429
SHA-256:	6AC2C79FCCC8F596F16F5600025605C06BCDE28A8A65727231CC624B4B5D0F3A
SHA-512:	8B52DC785FCD6303E84063CAA8092CE9B0E133D0EF74466C5E303FB566A445DD5711821BF5E9C3AC5C2BA0D1280D37ECF77BDBFE9899FA79913328BA298E794C
Malicious:	false
Reputation:	low
URL:	https://beacon-v2.helpscout.net/
Preview:	...."5.e..loader.js.m..N.1.._Ez m,-h.F..o./...vv).v...B\...C...:..T....{..A.....y.[....7...E...!&..._..9.x.=...O.0'E...F.#...N.$.i.M1..g..`+.&.k]"..'.Z.I&..<.f.(A5..e...O.i.U..I.8.....@!.6..u.......K.1>AB.d,2.'...?[.V.Qt6.L..y..F..t.......9..LM.\C....~......;.6.c..m.7...yFl..f.%@...8p..E..6..X.../..1....

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	31800
Entropy (8bit):	6.241530921054131
Encrypted:	false
SSDEEP:	384:amU5RutP2BNtd5G+miC+HOOAnJNoHjTvok7vW5kJccY69bkz:amMKPMfCYC+uOQoHXocpcC6
MD5:	C281E09C3E4F05AE067DEDAA5A0A9C34
SHA1:	E68172C3E362BFC54D987B28300CB724BB099993
SHA-256:	2166BA7EC17DEDFA340F135A3C24723B5DF08D36167B4620809617356EFD3D38
SHA-512:	8ECE63460F20B4D136AE8BF0D046D137A0EEAEB2D070333D33A7843B40A2E4D6ECEB796EE8206B7BE6A680988A2907F7852ECA5266C28782BDA3C51A10E4CFB5
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/favicon.ico
Preview:	............ .h...V......... ......... .... .....F...00.... ..%............ ..7...D..(....... ..... .........................................E....................E....................................................................................(.........h...}.........................................w...........J............E.......)....."..S......v..:..................E.................k......v...{......f...................................,........1...................................*.................&......................................E......................................1............l.......................................r..............................E..........%..............(..`...............E....................w.....&......~................................)..............

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7352
Entropy (8bit):	7.953520170540011
Encrypted:	false
SSDEEP:	192:c9qRNV91uScrdFnazN6omhJDWX+76Tyl5D/AdUue4:hRNDElhQw3zP5IZe4
MD5:	947F22FA3039702F3A3BF97656796E0E
SHA1:	FAB5E9AE0736C11403FDCFC97F5B54CC6ECF03EA
SHA-256:	9828755ECF6470F340A7B28C51D81B78363CFB4635D7D805AA48FB8695DF1757
SHA-512:	1D95E8B890F87099E5A7DAC538FF5EB6FCF7BE0417109CA170FF59759BCC862CE11C46FD3230368CE68B80667CB30F26E0B7083DD413A5E485E05A84941939E0
Malicious:	false
Reputation:	low
URL:	https://www.signable.co.uk/wp-content/uploads/logo_river_island.png
Preview:	.PNG........IHDR.......<......_iu....tEXtSoftware.Adobe ImageReadyq.e<...ZIDATx..]........^Q.fE....%vE....!.b.$F.M..Clh...1...1.."..(.A V."V...X.EA.."H....~....f....}.g........Wj.@....E..6qZ[.m.-...i.;..i+...i......Nk(..@....wN..ik\|^......yS~..1.......L...]...GN{Rs}O.m.e...:..i..].......#./......q...^ue..@..}.N[...uu.FL..b-....f....S.a.....[[6.5.o..G.k8..9....w.A..M.o1.i.....^u...0t.`...i.(..........{........c..U.....;...N.b]c<K...b=.c;....6..J.f5...y..".._.1.......:m0...>..a.3....._..Wj..Kq..<...4....;a\|.E..yL.G9.R.....p...}0I.~....yD....d.].=B0.I.s.-.....4.eS.h..Z5......(..........-d.._N..i.9.x.\R.+.r..........;]...Kv.{...m.Q....L6.z.-K.I0.ily.a......7<..a.......6!._...1~......4..,.....-.j.{.>....y.f..2.H.p..4...E.....v.N.:....<. ...&.C.M0.is.>{.9.6.f....p.)$*kS2..l..&~.i....'~.V.?k..(.!.'NkUL.:t5...I.Xa.........Hp...V4G:m.41.r..i..8&M.W.{. ....v...8o........n'......<a3...[z...V...?3..@hi...vp.5)...S.]...B...62<...L..<.+..I9.y...;...k

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17065), with no line terminators
Category:	downloaded
Size (bytes):	17065
Entropy (8bit):	5.1089101567430735
Encrypted:	false
SSDEEP:	384:FtDuCrl6xOIVoCM6qbSjbCMTYozln0/s4MXcK/qtQCZ69CmC4yVs:FtDuCrl6x1OCM1SjbCMTYoz10/s4mcKF
MD5:	E28EBC3391B56E8F01EA063DC089E9D3
SHA1:	D0EB0EDDB70199DB3533F492E7F2E22BE890A1FA
SHA-256:	AFBD41E7209FA3AEF6F53C7A5713AA542A7BE54C432FEC2D690E0DFACCD528D1
SHA-512:	A2ED47575F06F20F3C53845F527E5CEF910A85AAB2CC8F07EFD761239C2255920A154CDF432E170207BE23841458D22BFA96C47CD4ECA590BC71A948B8F98F46
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/19.6f85b843.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[19],{"1J7a":function(t,e){t.exports=function _arrayWithHoles(t){if(Array.isArray(t))return t}},"2jbg":function(t,e,r){"use strict";function _setPrototypeOf(t,e){return(_setPrototypeOf=Object.setPrototypeOf\|\|function _setPrototypeOf(t,e){return t.__proto__=e,t})(t,e)}r.d(e,"a",function(){return _setPrototypeOf})},"4+fu":function(t,e,r){"use strict";function _assertThisInitialized(t){if(void 0===t)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return t}r.d(e,"a",function(){return _assertThisInitialized})},"5aO3":function(t,e,r){"use strict";function _arrayLikeToArray(t,e){(null==e\|\|e>t.length)&&(e=t.length);for(var r=0,n=new Array(e);r<e;r++)n[r]=t[r];return n}r.d(e,"a",function(){return _arrayLikeToArray})},"7Ru6":function(t,e){t.exports=function _nonIterableRest(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [S

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	993
Entropy (8bit):	4.179050259881662
Encrypted:	false
SSDEEP:	24:t4lfu4AuDZuvhcUqo5xzXAEZ2NNdn11nkxj+AHvE/fZ6LH2:gHZgv9zXEvYxj+EK6a
MD5:	CB402D4D44A8AA8EF622C2319B0D3DD3
SHA1:	AD5340829DE2974B4FBE73406F626D9DB3EE6B52
SHA-256:	D207C63362D5BEE115B21728A2B672F0FD432916C339B3FAD3EA4F09E1144D44
SHA-512:	FCB10047A6690EDCF81F8E544AAD21393B1E54D0BE0B6497E7EC1422E1A9611D36ADFA617942C17CB80110FC2299350AD985F6E7E73BDC78D1372ED96F341C54
Malicious:	false
Reputation:	low
Preview:	<svg width="28" height="29" viewBox="0 0 28 29" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M8.80545 26.2817C19.3715 26.2817 25.1507 17.2152 25.1507 9.35271C25.1507 9.09523 25.1507 8.83887 25.1339 8.58365C26.2582 7.74134 27.2287 6.69853 28 5.50387C26.9516 5.98503 25.8393 6.30052 24.7005 6.43997C25.8995 5.69662 26.7974 4.52654 27.2261 3.14904C26.0985 3.84203 24.8647 4.3305 23.5782 4.59326C22.492 3.39695 20.975 2.71777 19.3896 2.71777C16.2351 2.71777 13.6394 5.40616 13.6394 8.6732C13.6394 9.12643 13.6894 9.57826 13.7883 10.0197C9.1717 9.78007 4.8644 7.51841 1.94879 3.80329C0.432633 6.50652 1.21712 10.0097 3.72734 11.7458C2.81323 11.7177 1.91877 11.4623 1.12 11.0011V11.0765C1.12077 13.898 3.05851 16.3503 5.72879 16.909C4.8831 17.1478 3.99558 17.1827 3.13491 17.011C3.8856 19.4287 6.05035 21.0953 8.50194 21.143C6.46811 22.7984 3.95429 23.6976 1.36752 23.695C0.910438 23.6941 0.453797 23.6654 0 23.6091C2.62686 25.3551 5.68422 26.2814 8.80545 26.2771" fill="white"/>.</svg>.

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (26272)
Category:	downloaded
Size (bytes):	138690
Entropy (8bit):	5.270370154900673
Encrypted:	false
SSDEEP:	1536:7Gz4z6M5k6StavQC2/S5D9yGfapzZuVGGeXZeREM+Oeab:qK9TSEem5eXZeREM+Y
MD5:	7CFFDA134A6AA2A6334BE30397EFE426
SHA1:	38A5EF0DC71873F35E3D01FE38F5E23E75563E0D
SHA-256:	CB29F90440778183D1C0F5B410FEE4149722CC287DE85BFB1177CE4121144408
SHA-512:	0BEA5A6E08BD1AE1FDD34262FC4300723E3498DE2449EFB59EB6FE7CD6A46897E65E01ADC52F503267C38B00C85C1E66E09BD4950E055B37E6B50F166EB8C1AD
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/
Preview:	<!doctype html><html lang="en-us" class="no-js"><head> Anti-flicker snippet (recommended) --> <style>.async-hide { opacity: 0 !important} </style><meta charset="utf-8" /><title>Signable - eSignature Solution</title><link rel="shortcut icon" href=""><meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta http-equiv="X-UA-Compatible" content="IE=edge"> <script>document.documentElement.className = "js"</script> <script> (function(g,e,o,id,t,a,r,ge,tl,y,s){.g.getElementsByTagName(o)[0].insertAdjacentHTML('afterbegin','<style id="georedirect-MNNFwoamUG1AtkUIbBvstyle">body{opacity:0.0 !important;}</style>');.s=function(){g.getElementById('georedirect-MNNFwoamUG1AtkUIbBvstyle').innerHTML='body{opacity:1.0 !important;}';};.t=g.getElementsByTagName(o)[0];y=g.createElement(e);y.async=true;.y.src='https://g10102301085.co/gr?id=-MNNFwoamUG1AtkUIbBv&refurl='+g.referrer+'&winurl='+encodeURIComponent(window.location);.t.parentNode.insertBefore(y,t);y.onerror=function(){s()

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16394), with no line terminators
Category:	downloaded
Size (bytes):	16394
Entropy (8bit):	5.047295920304867
Encrypted:	false
SSDEEP:	192:iQ0dizqHG3uoRQIsWUq0+DfyvRMRpiyhVAh/qP5SM9/:aC3uoqH9fvRMRpiyhVAh/s571
MD5:	CD2168C34AD30FC16E40BB8888419C0B
SHA1:	0B978F0D5FFE699D43A68AF7BDB0B06316BAE8FE
SHA-256:	7C8B113CCE07A87CA4CB9DC4F1C55D701EFD44834430E1939C27B2E5E1C12AC1
SHA-512:	F4F08F4D5660E619A59BB6FB1B524CA37C55FE0338F3EDEE82BFAA2100F2A49E03345460980699A0BEE4EB651E3E00C1B807A6FF8AB183E6970E06C27EFE0110
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/css/34.d13ab69b.chunk.css
Preview:	.drift-widget-header-top-line{background:#212021;width:100%;position:absolute;top:-3px;left:0;height:8px}.drift-widget-header,.drift-widget-header-top-line{-webkit-border-radius:5px 5px 0 0;-moz-border-radius:5px 5px 0 0;border-radius:5px 5px 0 0}.drift-widget-header{color:#fff}.drift-widget-header:not(.drift-widget-header--collapsed){z-index:1}.drift-widget-close{position:absolute;-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box;top:8px;right:8px;height:16px;width:16px;padding:8px;cursor:pointer;display:none;visibility:hidden}.drift-widget-close svg path{fill:currentColor}.drift-widget-header--collapsed .drift-widget-close svg path{fill:#687882}.drift-widget-close line{stroke:#fff;stroke-width:2px}.drift-widget-chat-wrapper:not(.drift-widget-chat-wrapper__active-conversation) .drift-widget-close line{stroke:#687882}.drift-widget-chat-layout.widget--xs .drift-widget-close,.drift-widget-chat-layout__takeover .drift-widget-header--gdpr-consent .drift-widg

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	160
Entropy (8bit):	4.88033083025857
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5zMcN/CN+lFAATcvUYDl8FuHswFltfOAwRAHFWFA8cXKL8n:tI9mc4slz/nli/UYDyI9Ht3kAHw6ZKI
MD5:	3502D493CADC9EED5E33D18533E97F64
SHA1:	DE68642D9A2590FFB21DF54495C5DB3F9321626D
SHA-256:	761AAC061AD1D5E5481942128DAD468750CBF36BDFC173E4374D9C17F7C9CB0A
SHA-512:	F5EB86659FA5FD4656738A422A405660E62A6D90670FC51B265E2886404899B6388622816C18FD70E3A64670361B33E6EE35FF36405323382373CB305D52F654
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-content/themes/Signable2019Theme/_/img/icon_down_light.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="13" height="8" viewBox="0 0 13 8" fill="none">.<path d="M1 1L6.5 6L12 1" stroke="white" stroke-width="2"/>.</svg>

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8798), with no line terminators
Category:	downloaded
Size (bytes):	8798
Entropy (8bit):	5.089726318453755
Encrypted:	false
SSDEEP:	192:lYRFIAAwwGRfQBMRV04Ip7LZzr9ZVkiiQK:mRFIZwwGRfPRitp7Fzr9ZVkrj
MD5:	C5EFCDC9E465604F32CF24AF10FD6C13
SHA1:	20FB642D2BFA7B5593CCF14AA11FFF2CCC3E8DF8
SHA-256:	862BAE5C822D87DB86D0B893F474177CA1D9A51309354F12CC0AB85CD9BD9CF7
SHA-512:	5D09DAC4F395C8682D3DEC65573CFF441BBF0C22CFC5ABF524DCC54693D0AFDFFDCF00B13010F6995DA81EC4AEC59FE315B5E131523EC2833B86C1A1704D7589
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/0.0b2ebd4a.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[0],{LaGA:function(e,t,n){"use strict";(function(e){var n=function(){if("undefined"!==typeof Map)return Map;function getIndex(e,t){var n=-1;return e.some(function(e,r){return e[0]===t&&(n=r,!0)}),n}return function(){function class_1(){this.__entries__=[]}return Object.defineProperty(class_1.prototype,"size",{get:function get(){return this.__entries__.length},enumerable:!0,configurable:!0}),class_1.prototype.get=function(e){var t=getIndex(this.__entries__,e),n=this.__entries__[t];return n&&n[1]},class_1.prototype.set=function(e,t){var n=getIndex(this.__entries__,e);~n?this.__entries__[n][1]=t:this.__entries__.push([e,t])},class_1.prototype.delete=function(e){var t=this.__entries__,n=getIndex(t,e);~n&&t.splice(n,1)},class_1.prototype.has=function(e){return!!~getIndex(this.__entries__,e)},class_1.prototype.clear=function(){this.__entries__.splice(0)},class_1.prototype.forEach=function(e,t){void 0===t&&(t=null);for(var n=0,r=this.__entrie

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 776, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	681522
Entropy (8bit):	7.986391027924411
Encrypted:	false
SSDEEP:	12288:4F1RQQf52doJfZClXDqGdDv/sFp5vPBeWCuDObosEAtZAO6KcllHm6rq6kq:4F1RQC8oJhClXu+j8eNuDOb79OO6hl5f
MD5:	1CE857FFD8C1D64AEFFEC26CE5C901AE
SHA1:	C1297C90A6FAD6BFA82D3BD377614F5E64BC7563
SHA-256:	5480DE742B7B6387234EA156E8E8B4C6334D8E7CC4D77FF1EB8E276CADE9831A
SHA-512:	7EE2B94BA93CF256C059F224B04BE6CF74F810CF64221D9E09896650398247B315212EAD4E6FE473E68ED25964D068DD2C388B27C9CD444B0AD292287FCA2484
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............[..f..e.IDATx......I.....AK.n.a...x..e..f.efffff..aff^45.(.h.........\)...A_gVJ0.c.1..cZ...N..3...h......z@.Q:..Ai..!..(u ..........a.QT. ....4......X.n..l........c.1..c.q.(.......d'`.T....t.@...u. . <1...s5......P....2..P....q..+0f+...c.1..c.I..\|......=...(......H...t.,0.te...P.~...Pn....... ..-.11.1..c.1.l.bRxw.....De?T...@.Q6sB...E.p.......7......`..11N..c.1..c..<......s..y(n.6.lef.<.....@n.......G.q63....1..c.1...Cx..3.p...m.P7..)....... p1....l...!`.1..c...,.y!..P....$1....j.AD..~4T..T.D....E.1..c.1[..L.. .E8..hTYk.......Ew?.c.3..........3.c.1..c....C..p...Ag.l..7N...%.Tx[.J_.....O.8.l..G.1..c.1.l.R.'p........,..q).\|..Tdex..sD.[.a..1.T.b.X,...b.l.q..H?.......f...n'.......n.....b...../e.X,...b.X.n^5.A.x^.2.M...d..C.....{]\..2.K.b.1..c..<./.ja..........-........E.UeUJ2......"..c.d......\....`...;.lb..c.1.85..t.....8G...lA....R.W.F= .m"t....H.6q...)d]m.B...(h...(EU.Z.....V....S#....G.u.8,(......+..8....c.1..c..'.}@..

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1919), with no line terminators
Category:	downloaded
Size (bytes):	1919
Entropy (8bit):	5.0932328044572355
Encrypted:	false
SSDEEP:	24:H9cj4Ej+mrA3b7ml77bKHDjKqh9HDGPgYfnBKFVDB6Aq16KybQ012oxrh:dcjfjrA3fW2Ii6AqTys0A0F
MD5:	6B34ED69A95FF2DB40A2C944D3FAAA0C
SHA1:	672121879892FD95A887DAE9D442ECA55D601216
SHA-256:	CC828D59A03B75D49ADF88A8D073CC881F02E13EB56C8B4E75FD43E517B87293
SHA-512:	D919FFD5A077E8DA2C8220B73AACEB367D9A7B59F017A6A7E27E84DBFAD9A293A047F91FEEEB22B107DFAFA3C272EEC29F44687038A9CC3C9768A3C283980C28
Malicious:	false
Reputation:	low
URL:	https://signable.app/css/chunk-b047b602.470369c5.css
Preview:	.o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100% - 30px);max-height:calc(100% - 30px);-webkit-box-shadow:0 0 20px 2px #222;box-shadow:0 0 20px 2px #222;-webkit-transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out,-webkit-transform .15s ease-in-out}.o-modal__box__header[data-v-f1eb06a4]{padding:var(--spacing-base);border-bottom:1px solid var(--color-border);margin-bottom:0}.o-modal__box__content[data-v-f1eb06a4]{padding:var(--spacing-base);max-height:calc(100vh - 94px);overflow-y:auto}.o-mod

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7352
Entropy (8bit):	7.953520170540011
Encrypted:	false
SSDEEP:	192:c9qRNV91uScrdFnazN6omhJDWX+76Tyl5D/AdUue4:hRNDElhQw3zP5IZe4
MD5:	947F22FA3039702F3A3BF97656796E0E
SHA1:	FAB5E9AE0736C11403FDCFC97F5B54CC6ECF03EA
SHA-256:	9828755ECF6470F340A7B28C51D81B78363CFB4635D7D805AA48FB8695DF1757
SHA-512:	1D95E8B890F87099E5A7DAC538FF5EB6FCF7BE0417109CA170FF59759BCC862CE11C46FD3230368CE68B80667CB30F26E0B7083DD413A5E485E05A84941939E0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......<......_iu....tEXtSoftware.Adobe ImageReadyq.e<...ZIDATx..]........^Q.fE....%vE....!.b.$F.M..Clh...1...1.."..(.A V."V...X.EA.."H....~....f....}.g........Wj.@....E..6qZ[.m.-...i.;..i+...i......Nk(..@....wN..ik\|^......yS~..1.......L...]...GN{Rs}O.m.e...:..i..].......#./......q...^ue..@..}.N[...uu.FL..b-....f....S.a.....[[6.5.o..G.k8..9....w.A..M.o1.i.....^u...0t.`...i.(..........{........c..U.....;...N.b]c<K...b=.c;....6..J.f5...y..".._.1.......:m0...>..a.3....._..Wj..Kq..<...4....;a\|.E..yL.G9.R.....p...}0I.~....yD....d.].=B0.I.s.-.....4.eS.h..Z5......(..........-d.._N..i.9.x.\R.+.r..........;]...Kv.{...m.Q....L6.z.-K.I0.ily.a......7<..a.......6!._...1~......4..,.....-.j.{.>....y.f..2.H.p..4...E.....v.N.:....<. ...&.C.M0.is.>{.9.6.f....p.)$*kS2..l..&~.i....'~.V.?k..(.!.'NkUL.:t5...I.Xa.........Hp...V4G:m.41.r..i..8&M.W.{. ....v...8o........n'......<a3...[z...V...?3..@hi...vp.5)...S.]...B...62<...L..<.+..I9.y...;...k

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
Preview:	[]

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 83, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	24530
Entropy (8bit):	7.984305505919292
Encrypted:	false
SSDEEP:	384:JDRvA5ACOZYLu0+CW5A49JNErhxdjTamAhVK7jxyUkM/Seu6OxvCloBNjSQdI2aJ:MN7+lFyqTCyQSN6OQli+6INE3BAdvORI
MD5:	FFFCC9D62239AB29EC1F4936773F7A06
SHA1:	492CDBB5519CAE1D805CC08EC35A47C3E9493228
SHA-256:	D836FD7C8CA0AE99C16833CDDB58D56341F0176219615946C4BCD5225EDA59AD
SHA-512:	BF19A22B113E65C2E89E44D9D8A7680A9E06AFB10A3204E9227A785048BAB6BB291A65D66D2DB39C25291AE635565EAC1861D5F2D161802B35053EF381B95487
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......S.....G.......tEXtSoftware.Adobe ImageReadyq.e<.._tIDATx..}..\U....{.m.n.......)..D.QP..,`..X.W.)..S....."...T..{.!$....f..[...9wfgv..n:...fg.S~...>..b.. .......D......#RI.............N.Z..5.&j...`.w..~..r..w...)@s....?;........fB..y.4....M<...7"....{.?.....C.y.:V<.....^.. .l....S.h..=.%S..........A........N..,.r..c.;....`.[l...d.O...........l..;.7..F._.c....6..Z~.E.=.5.. .e..ch...y.M..8..\|.r..U..L......`.......m.....>..~.....:...F...c-..m.E......Sg.=\|..u=...~pl...u3.%..W..w..Y.M..^..0..4...%..!x..3l>c6..(~../87mf.K..o...O..xd5.'..w.<&.....8..^>w#......,..H.+\|.*`.@....<.E0.k..,-... .\|.....y...`.\|>.A~......~..E..#..7v.U.>..teM......... .4[z.j.aY......1.yjm..8..a.8_\_.c...6J`..&...\.p]c.m.T.....w8a...'.qX.....\...s}..%.......{....y..o...s7...8...=.c<a.+...,...:/...rI..f...N._....<...4....;.........7....9..o....g.K..f.5..e8...r..&e.m....B8.5..-.....'y.#.........7h.n....'C.K...8}....D..e.gf.\|.8...c...q...._.{=n.6{".uNN0

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3799), with no line terminators
Category:	downloaded
Size (bytes):	3799
Entropy (8bit):	5.068206712558281
Encrypted:	false
SSDEEP:	96:WLQvIiQ0AAR+lRqDe71aMnxj31brYQszEFe2K7emSlf:WLJ0Ad7dM2
MD5:	1E7DC25289C7125BA28A5C11B742CFE5
SHA1:	13D2915AAB70F6FD11DA858DD31ECC38F1BFA643
SHA-256:	2D649A8AD9E0441BBA48D283B44EEC07BD3D1F2834C218A776D311F4AD0F7D91
SHA-512:	B7057AAA8E54E335C064EBBE6CDEBCD8C73B9CB73B8B4BAFC42C21F81B75FCDB561BA97DCDE2F0E8347397D966A2C272F7AA83FD362790974FDB0702B97A66C2
Malicious:	false
Reputation:	low
URL:	https://signable.app/css/chunk-00a20ec4.e88fa9a7.css
Preview:	.o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100% - 30px);max-height:calc(100% - 30px);-webkit-box-shadow:0 0 20px 2px #222;box-shadow:0 0 20px 2px #222;-webkit-transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out,-webkit-transform .15s ease-in-out}.o-modal__box__header[data-v-f1eb06a4]{padding:var(--spacing-base);border-bottom:1px solid var(--color-border);margin-bottom:0}.o-modal__box__content[data-v-f1eb06a4]{padding:var(--spacing-base);max-height:calc(100vh - 94px);overflow-y:auto}.o-mod

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (462)
Category:	downloaded
Size (bytes):	152013
Entropy (8bit):	4.84330882756473
Encrypted:	false
SSDEEP:	1536:vE7V3ntr7aNLRMEd1qXLVnxhrEVUTW78Y4BqpzGjcHJQ7gvNoMYqCl:vtD10hxJEiQKBDgpFWfll
MD5:	83CDAE3EABAD8A6518EEDEA4F3B4FCCE
SHA1:	1C74309D2AE540573BF15D9911627AAF02D46E2A
SHA-256:	2C1ADDA63EB81D946938B64DAC66DC7CC813F382248075D5BC34E404B2207F14
SHA-512:	0D3210AAFC75440F9E4927B9932EDFF3D8E7B69E5C7078D2343B5A0ED15F6C944AEEAE25308647DE37F06D1A80BCE81077914AFB11A564C300FB18B0E7865F7D
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-content/themes/Signable2019Theme/_/css/style.css?ver=1701765538
Preview:	@charset "UTF-8";./!.Theme Name: Signable 2019.Theme URI: https://signable.co.uk.Description: Custom Development for Signable.Version: 1.0.Author: Team Signable.Text Domain: signable././* Import abstract styles /./ The key colours used in the Domo theme /./ 1. COLOUR DEFINITIONS /./ 2. COLOUR FUNCTIONS /./ 3. COLOUR SCHEMES /./ 4. BUTTON COLOURS /./ 5. GUTENBERG COLOURS /./ 1. COLOUR DEFINITIONS /./ 2. COLOUR FUNCTIONS */..util-fill-primary {. background-color: #0095E6 !important; }...util-fill-primary-dark {. background-color: #00183D !important; }...util-fill-primary-light {. background-color: #3FE4FB !important; }...util-fill-secondary {. background-color: #10DAC1 !important; }...util-fill-brand-aqua {. background-color: #10DAC1 !important; }...util-fill-brand-red {. background-color: #EB4869 !important; }...util-fill-brand-pink {. background-color: #FF73C7 !impo

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 18 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoBoldRoboto BoldVersion 2.137; 2017Roboto-Bo
Category:	downloaded
Size (bytes):	128676
Entropy (8bit):	6.453723608580494
Encrypted:	false
SSDEEP:	3072:gBa9dX3CuiSB1/R7O0aXjC1ZnFAPbXj9K9SINj9V0kXwHXYXXXXXXxoIPi0c:XXaX9jCS3eoIPrc
MD5:	FB6210739C4993C1A86F812E6502E471
SHA1:	3A4A7FF4FDBA5317D6941E2D66E629DF6C3C8CF3
SHA-256:	39A2F9D2C6A99FB8DE9BF674373C4082CDE84253311808CA80DB6582266962EF
SHA-512:	26487B7DF0C38DD128EC9871DCA33498D1F1492F7B5B04AC7BDA91DF98908BABC7CCB85CCAF473432FAE1E8BF24121A471D3DB2248E6107A7E2D5FDFBD8304BF
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-content/themes/Signable2019Theme/_/fonts/roboto/Roboto-Bold.ttf
Preview:	........... GDEFp.m.........GPOSw.\|n...l..VLGSUB..g........OS/2...........`cmapv...... ....cvt +~.........Hfpgm_...........gasp.......t....glyf.,K`...,..j.hdmx.&.....(....head...\..s....6hhea.&.........$hmtx......s.....loca..b...k.....maxp......k.... name..9........~post.m.d...T... prep*v60...`...)...d...(.............P...EX../....>Y..EX../....>Y......9......9......9......9........9......9......01!!.!.......!.5.!.(.<..6......................}.w...x.^.^..^....\|...........<......9.........EX../....>Y..EX../....>Y.....+X!...Y..../01.#.!.2....#"&46...".4.IYYIHYY.....qVCBVV.W...@...O.......&......9........./......9../........01..#.3..#.3..(...E'...v.e.%..e.%....@.............. !..9.........EX../....>Y..EX../....>Y..EX../....>Y..EX../....>Y......9\|../......+X!...Y............../.....+X!...Y...............................01.#.#.#5!.#5!.3.3.3.3.#.3.#.#.3.#...H.H...2...I.I.I.I..2..H.[.2....f.........`...`....f.F......\.).7...-.r.+./..9...EX../....>Y..EX.!/..!.>Y..!...9........!..9

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1068 x 625, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	74559
Entropy (8bit):	7.975820509464517
Encrypted:	false
SSDEEP:	1536:wx6XtbijludzQLHBYChCr3TH78SHETrP5V3sJY0cJk9LqoAoP:zXFylWQbBYCsr3TYSHET7XxkqohP
MD5:	4920052DBBD3A46EC807142625E77C7F
SHA1:	B7AA21A93CF7DB98558A0212F6ACF754D8DEEC29
SHA-256:	54DDD0C955AD00723A0476B26964A698A9434F3B029C2C430B68EF09EBF150CE
SHA-512:	2D2B8CA7225EC035DE2B41CF9586085400440ABDF62F2AA16D10FCF125089E5830B1A4774475A2B9D941EAFDEB93A25689C89C523E3F602F4C49D5A1A37377C3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,...q............gAMA......a.....sRGB.........PLTEGpLFFF!!!'''......(((...???---$$$...[[[........................]]]......ecb......^^^OOO............999.................................M.......................!......................./..2........*................................5.....)..%..$........>..D........,..I..F.................A...........:..'.............................;....................+........&........7........8.....8..s........................................}}}......L..................xxxrrr...L...lll....j^........P...a.T..%.................O....................[.....%..h........@..[.....ccc...{........k..+..............2...........ZZZ.........5....PPP........N.CeEEE.....0..bt.......:::.WJ{..w..9v...L.>-..\.........m-..///...D..?..H....$$$.......w......d.....ll..........GpL.A......tRNS....................&l .j.-aE....Y....................................................................................................................

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1551), with no line terminators
Category:	downloaded
Size (bytes):	1551
Entropy (8bit):	5.1752191950655355
Encrypted:	false
SSDEEP:	24:0E01AZ14iwMsom6ZxDCzZv9Qxl5/sJ5u/swk0xQ75jmlH1X5E1KkC1I:0EG+1pFCzZvKxMTqQ7RmI
MD5:	49A058C120CE76CF44BE0E5074A7AB23
SHA1:	64E14AE5A7B0B80694D3A8F3F8DBF13A8688793D
SHA-256:	80632F84D6B2ECC464EDF94E8AAC0908BE0B9F106C910BB7391571AFEF35E1A8
SHA-512:	426E17BB27D21B6E9BDB10A6DF4441F41DB758D6BC0F5158A325C3E070ABEFA43C72A4AD37D8B928964C8A729FF895E99C59C4023D87DDCF200BCC8F5567F30F
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1705440768503
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefetch" href="https://js.driftt.com" crossorigin><link rel="dns-prefetch" href="https://customer.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://conversation.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://targeting.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://metrics.api.drift.com" crossorigin><title>Drift Widget</title><script type="text/javascript">__ENV__="PRODUCTION",__BUILD_ID__="20240111172457-05a6157",__REGION__=window.location.search.match("[\\?&]region=([^&#])")?window.location.search.match("[\\?&]region=([^&#])")[1]:"US"</script><link rel="preload" href="/core/assets/js/runtime~main.bf33b308.js" as="script" crossorigin="anonymous"><link rel="preload" href="/core/assets/j

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	92674
Entropy (8bit):	5.288414419714851
Encrypted:	false
SSDEEP:	1536:aituX55DPfb/wFG26UtHnbTcCAC0dn4Bs9qatj9N+jpT:Z+hwFGme4nT
MD5:	16D7AE86E21434A32157D3226AC9BB77
SHA1:	6EAA4577EFA2568AA7752B00AA42523BDA14CA95
SHA-256:	6C9C6406C9BD9814CF84974221433003377B67F071EC5411FDDBCBA4EC109BCA
SHA-512:	818A9CBFACFBC15F382F286E9C5B3476C4F508B30F4DAD880309C586C8725C52CA43266E3B04912A9E0423D93DA15997F3EAE563542767EDA63321E1BCEC1DEB
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/14.e24a6190.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[14],{"+WaJ":function(e,t,r){"use strict";function isFunction(e){return"function"===typeof e}r.d(t,"a",function(){return isFunction})},"/V3T":function(e,t,r){"use strict";var n=r("13WS"),o=function(e){function Action(t,r){return e.call(this)\|\|this}return n.a(Action,e),Action.prototype.schedule=function(e,t){return void 0===t&&(t=0),this},Action}(r("LR82").a);r.d(t,"a",function(){return i});var i=function(e){function AsyncAction(t,r){var n=e.call(this,t,r)\|\|this;return n.scheduler=t,n.work=r,n.pending=!1,n}return n.a(AsyncAction,e),AsyncAction.prototype.schedule=function(e,t){if(void 0===t&&(t=0),this.closed)return this;this.state=e;var r=this.id,n=this.scheduler;return null!=r&&(this.id=this.recycleAsyncId(n,r,t)),this.pending=!0,this.delay=t,this.id=this.id\|\|this.requestAsyncId(n,this.id,t),this},AsyncAction.prototype.requestAsyncId=function(e,t,r){return void 0===r&&(r=0),setInterval(e.flush.bind(e,this),r)},AsyncAction.prototype.re

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 514 x 220, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	9588
Entropy (8bit):	7.925169741875755
Encrypted:	false
SSDEEP:	192:IjEqgjuAqw+k9V/02WYspE5QRCf9mb+3IFh90Keky3QGb9a6vciNhg9AkZGk:IMxqwpVcXFpEqRkmb+YoGiPgtMk
MD5:	4344C63479815E9C34FE401B2A5E8B0F
SHA1:	09F8528E80910FD6471EE64C3946539317D4A6B1
SHA-256:	2AD50825F046820075279F01D5D01F47F936A45341147A6B33D6DD681278FCDF
SHA-512:	879BEE3D00672B0E8A399850FF1CA2A1FFB311A59B5E26C653C7A74D28E4052B40AE567A0BF6520156CF23A4835583413DB3DC8B485B5C3F23807194E10F4D44
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............509.....PLTE............................g..w..:..O.....(p.#^.QQ.VW.PP.bd.hi.op.........x.s..w..ve.`k.ds.V[.QP.Jd.=T.?=.9E.ABtZD[.EE.::./0..K..u.....w.".........`..>.#5./..J.6`.0U.3-._....4tRNS.....$60F6)C>h.l....tMx.tnYVt.....................N..}..$>IDATx..].w.L.vX\0.4.......4.y......f.;...j.......<<w.TN.8q...'N.8q...'N.8q...'N.8q...'N.8q...'N.8q...'N.8q...'N.8q...'N.8q...'N.8qr. /l\]]..7...........o\_.<>>=m...D...:..-....^..6...G~tyz.n8:....].[O........+....._..7.~....d."...n.......Z..~...~L. f@.u....... Q.,.......o&.....j_]E..!...........Fp ...@[..........:.Q..G....Q.....A.....?...c..T.Z..r ....... .yl..)j`..#..oh....\$....6.wEbF.~3.[........0.>.<..Q...\|/..yf..0.5...Q..!.B.Nf.U...d..........`...h.`.....,0 y....@W.........g!d...6....]=.\|q....\......[..._U.@.L.=].....JG........v.I.."........y..99N...g.....1<.Qk..T.Xm......1..X:M...En=?.......I..z..g#...@.4.#b................l..=...}.$.p....?.7mO....I\ V2..

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (526), with no line terminators
Category:	downloaded
Size (bytes):	526
Entropy (8bit):	4.844995662196588
Encrypted:	false
SSDEEP:	12:c4GJ0k2lvgyT6d1uOMXUZsCxYADLsdfPw3CgrR5jddeU7nu:c5D2BtT67uOMXUZjxYOLsOCgrN80u
MD5:	D96C709017743C0759CF3853D1806BA5
SHA1:	72E21587610C49C8305A55E71F73FA88ED618205
SHA-256:	BA2338AA6670580269C762F51C4291DAEF913201AA8F4D4FD166C1A878262652
SHA-512:	974E260ED8BD1D99628FC3248F07179F6EA228E37A6B9D3EF906DBA57571F2DF54D73F93D1F3460902D28A90BD4793BCA35477B2EF8FBF424B9112147F04BCCF
Malicious:	false
Reputation:	low
URL:	https://js.stripe.com/v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js
Preview:	!function(){"use strict";var e="https://m.stripe.network",n=window.location.hash,t=/preview=true/.test(n)?"inner-preview.html":"inner.html",o=document.createElement("iframe");o.src="".concat(e,"/").concat(t).concat(n);var i=function(n){if(n.origin===e){var t=window.opener\|\|window.parent\|\|window;if(!t)return;t.postMessage(n.data,"")}else o.contentWindow.postMessage(n.data,"")};window.addEventListener?window.addEventListener("message",i,!1):window.attachEvent("onMessage",i),document.body&&document.body.appendChild(o)}();

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46103), with no line terminators
Category:	downloaded
Size (bytes):	46104
Entropy (8bit):	5.3053668132686145
Encrypted:	false
SSDEEP:	768:OaOFhhRDUHahpROfRys3LzQRo4TYYyDMFWPKQ:OaOFnRrRURtzQy4ISWiQ
MD5:	7F75F159026F3A2C8CCCDA487B43157B
SHA1:	021CF5C854DB063CD79BF0394C24EB994E095640
SHA-256:	5E319852607809336B2534FFEB96F6933F26994DD040F535302C84F59CC0A214
SHA-512:	88276152EE25891D16E7B3B28A9B42CBD48D97E1A7D94C1BF5354612603868D5D537D2BA01A4E2F184E6DC6A492B67619D6A7C02DA992AD604F7D0ABEF27A7A1
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",regex:/^\d{4}-\d{2}-\d{2}$/,error:"{p} value must be in YYYY-MM-DD date

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20125)
Category:	downloaded
Size (bytes):	20177
Entropy (8bit):	5.166769571469715
Encrypted:	false
SSDEEP:	384:zxf11hGEkuK5rOBlIl7tS3N2JM8n/v1cocGDGyoZJKzA7VJOcz:9fvhGEipUlM7YdkX/vSocG6rZciVN
MD5:	D551959119A4AC4EECB98200E493BCC3
SHA1:	44D7F3F1D5456F151172E229E615C9AEA43481A6
SHA-256:	663D3DEA586C42B594322CEA9E7F79F7968241BE243045B4F10DAC49DE4FDDEC
SHA-512:	5DE1230628912560EC6D041AC61192575B4142D5C9113FCF3BC549564946514529E95F34194481FE4FC86C6F39DB778AA049E72E50EC1799770E9E143D23FFDE
Malicious:	false
Reputation:	low
URL:	https://signable.app/js/chunk-45deaaac.3f89a712.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-45deaaac","chunk-1c2a00ac","chunk-721f270c","chunk-2d0bdf35","chunk-2d0c0c56"],{"0d33":function(t,e,a){"use strict";a.r(e);a("7f7f");var o=function(){var t=this,e=t._self._c;return e("TWModal",{attrs:{title:t.$t("groups.createTeam"),loading:t.loading,show:t.show,"allow-outside-click-to-close":!1},on:{close:t.handleClose}},[e("div",{attrs:{slot:"content"},slot:"content"},[e("div",[e("form",{attrs:{"data-vv-scope":"group-create"}},[e("div",{staticClass:"mb-4"},[e("label",{staticClass:"mb-1 inline-block",attrs:{for:"group-name"}},[t._v(t._s(t.$t("groups.name")))]),e("TextInput",{directives:[{name:"validate",rawName:"v-validate",value:"required",expression:"'required'"}],attrs:{id:"group-name",placeholder:"e.g. Finance",value:t.group.name,"has-error":t.errors.has("group-create.name"),"data-ec":"create_group_modal","data-et":"group_name_input","data-vv-name":"name","data-vv-as":"name","data-hj-suppress":""},model:{value:t.gro

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 776, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	681522
Entropy (8bit):	7.986391027924411
Encrypted:	false
SSDEEP:	12288:4F1RQQf52doJfZClXDqGdDv/sFp5vPBeWCuDObosEAtZAO6KcllHm6rq6kq:4F1RQC8oJhClXu+j8eNuDOb79OO6hl5f
MD5:	1CE857FFD8C1D64AEFFEC26CE5C901AE
SHA1:	C1297C90A6FAD6BFA82D3BD377614F5E64BC7563
SHA-256:	5480DE742B7B6387234EA156E8E8B4C6334D8E7CC4D77FF1EB8E276CADE9831A
SHA-512:	7EE2B94BA93CF256C059F224B04BE6CF74F810CF64221D9E09896650398247B315212EAD4E6FE473E68ED25964D068DD2C388B27C9CD444B0AD292287FCA2484
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-content/uploads/signable_esignatures_leading_screenshot.png
Preview:	.PNG........IHDR.............[..f..e.IDATx......I.....AK.n.a...x..e..f.efffff..aff^45.(.h.........\)...A_gVJ0.c.1..cZ...N..3...h......z@.Q:..Ai..!..(u ..........a.QT. ....4......X.n..l........c.1..c.q.(.......d'`.T....t.@...u. . <1...s5......P....2..P....q..+0f+...c.1..c.I..\|......=...(......H...t.,0.te...P.~...Pn....... ..-.11.1..c.1.l.bRxw.....De?T...@.Q6sB...E.p.......7......`..11N..c.1..c..<......s..y(n.6.lef.<.....@n.......G.q63....1..c.1...Cx..3.p...m.P7..)....... p1....l...!`.1..c...,.y!..P....$1....j.AD..~4T..T.D....E.1..c.1[..L.. .E8..hTYk.......Ew?.c.3..........3.c.1..c....C..p...Ag.l..7N...%.Tx[.J_.....O.8.l..G.1..c.1.l.R.'p........,..q).\|..Tdex..sD.[.a..1.T.b.X,...b.l.q..H?.......f...n'.......n.....b...../e.X,...b.X.n^5.A.x^.2.M...d..C.....{]\..2.K.b.1..c..<./.ja..........-........E.UeUJ2......"..c.d......\....`...;.lb..c.1.85..t.....8G...lA....R.W.F= .m"t....H.6q...)d]m.B...(h...(EU.Z.....V....S#....G.u.8,(......+..8....c.1..c..'.}@..

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 514 x 220, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	9588
Entropy (8bit):	7.925169741875755
Encrypted:	false
SSDEEP:	192:IjEqgjuAqw+k9V/02WYspE5QRCf9mb+3IFh90Keky3QGb9a6vciNhg9AkZGk:IMxqwpVcXFpEqRkmb+YoGiPgtMk
MD5:	4344C63479815E9C34FE401B2A5E8B0F
SHA1:	09F8528E80910FD6471EE64C3946539317D4A6B1
SHA-256:	2AD50825F046820075279F01D5D01F47F936A45341147A6B33D6DD681278FCDF
SHA-512:	879BEE3D00672B0E8A399850FF1CA2A1FFB311A59B5E26C653C7A74D28E4052B40AE567A0BF6520156CF23A4835583413DB3DC8B485B5C3F23807194E10F4D44
Malicious:	false
Reputation:	low
URL:	https://www.signable.co.uk/wp-content/uploads/logo_allegiant.png
Preview:	.PNG........IHDR.............509.....PLTE............................g..w..:..O.....(p.#^.QQ.VW.PP.bd.hi.op.........x.s..w..ve.`k.ds.V[.QP.Jd.=T.?=.9E.ABtZD[.EE.::./0..K..u.....w.".........`..>.#5./..J.6`.0U.3-._....4tRNS.....$60F6)C>h.l....tMx.tnYVt.....................N..}..$>IDATx..].w.L.vX\0.4.......4.y......f.;...j.......<<w.TN.8q...'N.8q...'N.8q...'N.8q...'N.8q...'N.8q...'N.8q...'N.8q...'N.8q...'N.8qr. /l\]]..7...........o\_.<>>=m...D...:..-....^..6...G~tyz.n8:....].[O........+....._..7.~....d."...n.......Z..~...~L. f@.u....... Q.,.......o&.....j_]E..!...........Fp ...@[..........:.Q..G....Q.....A.....?...c..T.Z..r ....... .yl..)j`..#..oh....\$....6.wEbF.~3.[........0.>.<..Q...\|/..yf..0.5...Q..!.B.Nf.U...d..........`...h.`.....,0 y....@W.........g!d...6....]=.\|q....\......[..._U.@.L.=].....JG........v.I.."........y..99N...g.....1<.Qk..T.Xm......1..X:M...En=?.......I..z..g#...@.4.#b................l..=...}.$.p....?.7mO....I\ V2..

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64899)
Category:	downloaded
Size (bytes):	67123
Entropy (8bit):	5.421203619716422
Encrypted:	false
SSDEEP:	1536:zyLbzbgk0nJ17QRA3CPvZOx5lcjFDF6Let7YdTZZwqLvaXu4rkp:MOx5lAdFuTZZwS7
MD5:	D1AA89CAD4D40F240E1323D979B974C8
SHA1:	26C70FD579DDE15E2AAC4ECA91FF51A262F57B84
SHA-256:	DA9EA92FE04328C07FAA75212A22BB5A8EB20106042351AFD38E921BA9A25D31
SHA-512:	7CEF0D6BE8D68BA601284E337F95092771DCEDFE1F7BE5BA04615733F4B30D8EDE09EADD42048CB13E8206C4AFD081B6C037AC54A973377498912D39A08781F3
Malicious:	false
Reputation:	low
URL:	https://js.hs-banner.com/v2/4564783/banner.js
Preview:	var _hsp = window['_hsp'] = window['_hsp'] \|\| [];._hsp.push(['setBannerSettings', {}]);._hsp.push(['setCustomizationSettings', {}]);._hsp.push(['addCookieDomain', '.hsforms.com']);._hsp.push(['addCookieDomain', '.signable.co.uk']);._hsp.push(['addCookieDomain', '.hs-sites.com']);._hsp.push(['addCookieDomain', '.hubspot.com']);._hsp.push(['addCookieDomain', '.signable.app']);._hsp.push(['addCookieDomain', '.hubspotpagebuilder.com']);._hsp.push(['addCookieDomain', '.signable.nl']);._hsp.push(['setApiBaseUrl', 'https://js.hs-banner.com/v2']);./*. HubSpot Cookie Banner Code Copyright 2024 HubSpot, Inc. http://www.hubspot.com. */.!function(e){var t={};function n(o){if(t[o])return t[o].exports;var i=t[o]={i:o,l:!1,exports:{}};e[o].call(i.exports,i,i.exports,n);i.l=!0;return i.exports}n.m=e;n.c=t;n.d=function(e,t,o){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:o})};n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6113), with no line terminators
Category:	downloaded
Size (bytes):	6113
Entropy (8bit):	5.422971428958768
Encrypted:	false
SSDEEP:	96:EA4P+s4dMJiF7aGR7I7n+OVkaA+2kllCPmO8xCU6thjl9sYkVTogpG43X6k6z:Qx7gF7NR7I7n+OVkR+2kllCuAU6Djl28
MD5:	34E14B5DEFCDEE7C97EEFA738F7A56A3
SHA1:	70933EAC6922092B2CA2D519648DE07333FA528A
SHA-256:	AB0AE783291320B2D5D3E37FE1445D88CB8E99DEFFDF73B088FA6B611E0CD2C2
SHA-512:	59199A19CE0B735E89544B6B05F21A6C1FBD7466D91621B01CA02068450BB0B666841F3D43AF2A35DABD2E27AF9303CFFB704928CDE854815D2DFFFFDDF2DF70
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/runtime~main.bf33b308.js
Preview:	!function(e){function webpackJsonpCallback(c){for(var r,f,t=c[0],n=c[1],_=c[2],u=0,b=[];u<t.length;u++)f=t[u],d[f]&&b.push(d[f][0]),d[f]=0;for(r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r]);for(o&&o(c);b.length;)b.shift()();return a.push.apply(a,_\|\|[]),checkDeferredModules()}function checkDeferredModules(){for(var e,c=0;c<a.length;c++){for(var r=a[c],f=!0,t=1;t<r.length;t++){var n=r[t];0!==d[n]&&(f=!1)}f&&(a.splice(c--,1),e=__webpack_require__(__webpack_require__.s=r[0]))}return e}var c={},r={6:0},d={6:0},a=[];function __webpack_require__(r){if(c[r])return c[r].exports;var d=c[r]={i:r,l:!1,exports:{}};return e[r].call(d.exports,d,d.exports,__webpack_require__),d.l=!0,d.exports}__webpack_require__.e=function requireEnsure(e){var c=[];r[e]?c.push(r[e]):0!==r[e]&&{1:1,3:1,8:1,16:1,23:1,25:1,28:1,30:1,31:1,32:1,34:1,36:1,37:1,38:1,42:1,43:1,44:1,45:1,46:1,47:1}[e]&&c.push(r[e]=new Promise(function(c,d){for(var a="assets/css/"+({}[e]\|\|e)+"."+{0:"31d6cfe0",1:"12ba17b6",2:"31d6

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, last modified: Fri Mar 29 23:33:31 2019, from Unix, original size modulo 2^32 55079
Category:	downloaded
Size (bytes):	17889
Entropy (8bit):	7.9880447064853515
Encrypted:	false
SSDEEP:	384:Xst1mYcJCJW0MB5AJXLh+nCig7Q/IYPVXJcd/mQoRC+UwGcj74w2hK:XrTt27+Bq+QGC+UwG8oK
MD5:	B568E7B3C9D94DA6A1D4845B18400F7A
SHA1:	E58022B19F4F38C0721C356057BD2311D08C49D6
SHA-256:	8F1FC46D5DDD2FA579F686AC25BCF5D6348B635127DEBC9A6A7B8643D850A60C
SHA-512:	74874E96D0D6C2D4CB3B3C17D4CFF9FE30C5C73E3E3A37ACDA361D5B27913ECA10E3BD7C250FABFA7387E15AEABAEAC064FA1C850BB91C663CA69D5F0200EC37
Malicious:	false
Reputation:	low
URL:	https://cdn.amplitude.com/libs/amplitude-5.2.2-min.gz.js
Preview:	....K..\...kw.H.0.....=.#.A.7."..I.....L.d.y....A"..%....U}S..qf.9.]+1R..........7]....\|........q.9N.."..B.WA.G........'>...zA...A.X7lM.M1.......'}......$ID.S....^..........P.uDQ.zP.H..:1.C..C_..../..................D ..Zl.....8..1.v.G.........E.lY...md#Cd....xP~...Y.Q.c..H.?P..[w.&.o.....]/...0.JSo...w....a.A<r KZ..X.8.B...+.z......G...g.G.U......^,...1 ...b?nL..!.......r...?...Y.f ...xH... .y}.-..z..Js.!.8.V.0..`.S.m..0.:........$...36.F0h...:.O..w...<.......;M.w....:.i.s..&@$o...3x...z.&.:...W.7.On...D3.._..%...v..b.....uM.~...5.5.N..H.As1.>!..`......X3/.D.!Bzj.8.n<r.....G....M..e..!).b@7.@/.kx..v..1.eE?zH..<. D.yBK.... ...>%a...w.u....u.....L..R3o...0.....K...._?........-..4`s.. .....x.......&.8.n......\...g.i.,_s...=i5.^x...f......nb.5.~;..L..a....m%P.c+P...1.T..O;...o.!...D1..5.J..M0L$.m.Y.".v_.sH.....-k.3^..&...9H.2.A>.....X..:....h.-.....x........oN...._..?;...O.........^.Ay..._7......Q.........v.{pxT}.h...P.....G

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35552), with no line terminators
Category:	downloaded
Size (bytes):	35552
Entropy (8bit):	5.272922801597397
Encrypted:	false
SSDEEP:	384:zeUUsSi7WTPK47rBtSTECq0XBkpurOMiQvNvvFJcXkryfGvWzo2t8YnO676kg5+n:pYichBgol0XadAvFgOvHzUW7S
MD5:	C6F58DD3D60F07462254B842DD4F9CA1
SHA1:	62C507FC6CC05F9732BCD5C593F3D8D0E0A3D7E2
SHA-256:	2A8A441D8086F20A64563EDC759ABA1DE84D932E34FF77B8BB0279A730CDB428
SHA-512:	21BF35D36D4859188BF32B21F84B71975B72503C72F5B64D7AB98CEFB58045F3F991960CAF9E8BCC95CDC284C6758DB639B4087750206450076263677CA4513B
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/9.4a3e9801.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[9],{"+MLx":function(t,e,n){var r=n("HAuM");t.exports=function(t,e,n){if(r(t),void 0===e)return t;switch(n){case 0:return function(){return t.call(e)};case 1:return function(n){return t.call(e,n)};case 2:return function(n,r){return t.call(e,n,r)};case 3:return function(n,r,o){return t.call(e,n,r,o)}}return function(){return t.apply(e,arguments)}}},"/GqU":function(t,e,n){var r=n("RK3t"),o=n("HYAF");t.exports=function(t){return r(o(t))}},"07d7":function(t,e,n){var r=n("busE"),o=n("sEFX"),i=Object.prototype;o!==i.toString&&r(i,"toString",o,{unsafe:!0})},"0BK2":function(t,e){t.exports={}},"0Dky":function(t,e){t.exports=function(t){try{return!!t()}catch(e){return!0}}},"0GbY":function(t,e,n){var r=n("Qo9l"),o=n("2oRo"),i=function aFunction(t){return"function"==typeof t?t:void 0};t.exports=function(t,e){return arguments.length<2?i(r[t])\|\|i(o[t]):r[t]&&r[t][e]\|\|o[t]&&o[t][e]}},"0eef":function(t,e,n){"use strict";var r={}.propertyIsEnumerable,

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12809), with no line terminators
Category:	downloaded
Size (bytes):	12809
Entropy (8bit):	5.386643867204713
Encrypted:	false
SSDEEP:	192:k3VRwUrrpwt7Cmzvcb6r3CLV3pfKC3WzDdjA18esVj:k3VhWtZCLV5fKw4Jjg81
MD5:	38156CD1B538AE036F57B23FCBE9CA1F
SHA1:	26E96ED034F7E78D932ED86238A29853564CE996
SHA-256:	DA4A39F6208E897443B5BDA6EF5014E8E2C9477BEAC582EA7E17B2C61391C9F9
SHA-512:	7C818A2C29A5BA8E65C0A13D4FCB7984BEA5DAB4E4D3AABE83B3B1E769CC6DE5B6BCA65811E5DF816E470CE8832FBE7754B3FFC44FF2F31AA4A2751A9E57E999
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/34.cf26c954.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[34],{"1ScA":function(e,t,a){"use strict";a.d(t,"a",function(){return useReflowFrameClassName});var n=a("s8DI"),c=a("QtlZ"),r=a("ILQF"),i=a("g6eD"),s=a("JBtm"),o=a.n(s),u=a("ERkP"),l=a("EQxi"),f=!1;function useReflowFrameClassName(){var e="";if(!f){var t=Object(l.f)(o.a.parse(document.location.search));e=(null===t\|\|void 0===t?void 0:t.isXSScreenSize)?"widget--xs":"",f=!0}var a=Object(u.useState)(e),s=Object(n.a)(a,2),b=s[0],d=s[1],O=Object(u.useState)(void 0),j=Object(n.a)(O,2),v=j[0],h=j[1];return Object(u.useEffect)(function(){Object(r.c)({topic:"CONDUCTOR:reflowFrame",handler:function handler(e){var t=e.data;d(function(){return t.isXSScreenSize?"widget--xs":""}),c.a.dispatch(Object(i.e)(t.isXSScreenSize)),t.clientInnerHeight&&h(function(){return t.clientInnerHeight})}})},[]),{reflowFrameCX:b,clientInnerHeight:v}}},"2uLe":function(e,t,a){"use strict";var n=a("mj2O"),c=a.n(n),r=a("7SM1"),i=a("s8DI"),s=a("8ZCy"),o=a("VkHq"),u=a("ILQF"

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1919), with no line terminators
Category:	downloaded
Size (bytes):	1919
Entropy (8bit):	5.0932328044572355
Encrypted:	false
SSDEEP:	24:H9cj4Ej+mrA3b7ml77bKHDjKqh9HDGPgYfnBKFVDB6Aq16KybQ012oxrh:dcjfjrA3fW2Ii6AqTys0A0F
MD5:	6B34ED69A95FF2DB40A2C944D3FAAA0C
SHA1:	672121879892FD95A887DAE9D442ECA55D601216
SHA-256:	CC828D59A03B75D49ADF88A8D073CC881F02E13EB56C8B4E75FD43E517B87293
SHA-512:	D919FFD5A077E8DA2C8220B73AACEB367D9A7B59F017A6A7E27E84DBFAD9A293A047F91FEEEB22B107DFAFA3C272EEC29F44687038A9CC3C9768A3C283980C28
Malicious:	false
Reputation:	low
URL:	https://signable.app/css/chunk-7b758553.470369c5.css
Preview:	.o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100% - 30px);max-height:calc(100% - 30px);-webkit-box-shadow:0 0 20px 2px #222;box-shadow:0 0 20px 2px #222;-webkit-transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out,-webkit-transform .15s ease-in-out}.o-modal__box__header[data-v-f1eb06a4]{padding:var(--spacing-base);border-bottom:1px solid var(--color-border);margin-bottom:0}.o-modal__box__content[data-v-f1eb06a4]{padding:var(--spacing-base);max-height:calc(100vh - 94px);overflow-y:auto}.o-mod

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 564 x 220, 2-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2771
Entropy (8bit):	7.882902458736908
Encrypted:	false
SSDEEP:	48:PBNgU4m9V8PNdiytKiVoQN4hOTWiIfhK/lcvocI6SOtQGxufmk:5NCPNdRtVVoo4hOCVfhK/qvocUOtQGxI
MD5:	0C230F441EA7A186476641BE0AE2AE57
SHA1:	8BEC78A92A223650EEDB49103BFAF69561128110
SHA-256:	0D1BA33F6124FCFFBA6F817B7BD118D0E6A8C5D7B360FB4392CB55AC314A8E72
SHA-512:	A96DE79D3F27C591F659DE773E22F0D2724BEC89CA7F3E435769425B20C1DC3E67638DCE7491FE8606306A308FEF74D80648AD8677563BB3A6045DFA86AE1F1F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4..........m.V....PLTE..%..%..%..&Q9......tRNS.A.h..4...sIDATx...o....g...E.:.-!.%(r0..B..6.......A9...@..P.%.......)>..D...&.....hr..2.........../..r%r..0....].7o.....F.i..F.i..F.i......Dc..J7..N0..M?.kD.F.d.&..T.$...O.NG....x...`..$.O^.M7.Z$.Uk........V..Y6.Q.x..A]B....u.u.}.1Q.4...?$:...Y.A.V}.3%..L.......s.....R9....4(..G_.,N]J..X...j.....B.....b...n..1....9.........X'.wB^..C.4\|...kE3........).~.....5....km.tU....0T....n.P.\\w.M.......Y.Z.(..h.Q=\w.mM.~.i.u.Y%5.i....kD..0Z}.^.Fg..i.V......6F.s...P4MU..F.T.....Q.`.....`.....a6g.h(.;...r..]Ds.^.......x..TZ.j5...r...i..]...T...{51..)Bc_...X...N.Y+.i.:.N.F.:.....x7.p6....A..h6..A...Z..h.%`.iY.?....j..@.k......;..~....Ch3.F..^.X...O.....L..fWs..(.'....'^...;.._..r..$...........noCs...._..)i.\..6i,.......\q.....EC...V.Svw.......E...[.........G.v+t...-J.~.....w...\..T.u.I..#..4}QP.U...Ec..J4.i..$Z..n-"Q.p.W.g1..p,...^......h.1.4..qg.Vus...43..~o.vc.m....Y>u.l...Z.

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	31800
Entropy (8bit):	6.241530921054131
Encrypted:	false
SSDEEP:	384:amU5RutP2BNtd5G+miC+HOOAnJNoHjTvok7vW5kJccY69bkz:amMKPMfCYC+uOQoHXocpcC6
MD5:	C281E09C3E4F05AE067DEDAA5A0A9C34
SHA1:	E68172C3E362BFC54D987B28300CB724BB099993
SHA-256:	2166BA7EC17DEDFA340F135A3C24723B5DF08D36167B4620809617356EFD3D38
SHA-512:	8ECE63460F20B4D136AE8BF0D046D137A0EEAEB2D070333D33A7843B40A2E4D6ECEB796EE8206B7BE6A680988A2907F7852ECA5266C28782BDA3C51A10E4CFB5
Malicious:	false
Reputation:	low
Preview:	............ .h...V......... ......... .... .....F...00.... ..%............ ..7...D..(....... ..... .........................................E....................E....................................................................................(.........h...}.........................................w...........J............E.......)....."..S......v..:..................E.................k......v...{......f...................................,........1...................................*.................&......................................E......................................1............l.......................................r..............................E..........%..............(..`...............E....................w.....&......~................................)..............

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (10226)
Category:	downloaded
Size (bytes):	6954905
Entropy (8bit):	6.014719415755563
Encrypted:	false
SSDEEP:	49152:15PXFK+oS14q9Ji8ZcVUwXUVgtlGb9scBXMRkVfid+sCd0fJxWi4Uj8yQhuHm6Ly:15P1K1d6dcr4UjxqvslP/w6y
MD5:	EEC3590D978F37C3A4A6723F0EC9FC65
SHA1:	BEE4037A598F247CB2CBD10E15F6BB5CEF40B888
SHA-256:	D60D0DFC32C12EB1CD85CA90DBC3512DFC179AB394110254252EC4389ED4E64A
SHA-512:	C373B8FC744462B41E3D02FC52737B11FB7F279138CDA44CAAF3FE12C13BACA796CC0ED4B064BD95EFA3E30B664A631E82DF1616B998BC53A2A4E73BB40C9D1D
Malicious:	false
Reputation:	low
URL:	https://signable.app/js/chunk-vendors.0e57b079.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-vendors"],{"00ce":function(e,a,n){"use strict";var t,i=SyntaxError,r=Function,o=TypeError,s=function(e){try{return r('"use strict"; return ('+e+").constructor;")()}catch(a){}},l=Object.getOwnPropertyDescriptor;if(l)try{l({},"")}catch(q){l=null}var c=function(){throw new o},u=l?function(){try{return c}catch(e){try{return l(arguments,"callee").get}catch(a){return c}}}():c,d=n("5156")(),p=Object.getPrototypeOf\|\|function(e){return e.__proto__},m={},h="undefined"===typeof Uint8Array?t:p(Uint8Array),b={"%AggregateError%":"undefined"===typeof AggregateError?t:AggregateError,"%Array%":Array,"%ArrayBuffer%":"undefined"===typeof ArrayBuffer?t:ArrayBuffer,"%ArrayIteratorPrototype%":d?p([][Symbol.iterator]()):t,"%AsyncFromSyncIteratorPrototype%":t,"%AsyncFunction%":m,"%AsyncGenerator%":m,"%AsyncGeneratorFunction%":m,"%AsyncIteratorPrototype%":m,"%Atomics%":"undefined"===typeof Atomics?t:Atomics,"%BigInt%":"undefined"===typeof BigInt

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	8825
Entropy (8bit):	4.007185142786084
Encrypted:	false
SSDEEP:	192:GRYgUCiAa/c/qRcwl1OHZrBVkZEJezFeJwa29shyiERK4i97obSrlZ8j:0JqeHnVxSeJEshydfe7obSQj
MD5:	1F523336660CEB036EEC7D540BA75929
SHA1:	CA6E8C8D04290A2DA5AA33A848C2D9A23870EF01
SHA-256:	E18475DAA358D3203E4D613B1D77D5873F42697B6E2D3DF4E6B6B80291F3EF5E
SHA-512:	822CD2756349338C922C96FC20B903B5FD04BC7CA7D262419D0DED9F5EC39691A1116A06BD4ABB1D2C80F3EBC8262AF9FD1A58A8A539F2ED37DEF8FC7060186E
Malicious:	false
Reputation:	low
Preview:	<svg width="619" height="760" viewBox="0 0 619 760" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M357.356 484.43V427.646C357.356 405.256 339.141 387.041 316.751 387.041C294.362 387.041 276.147 405.256 276.147 427.646V478.915C276.147 540.698 253.386 600.016 212.053 645.939L155.067 709.258C150.279 714.578 150.711 722.771 156.031 727.561C161.349 732.349 169.543 731.917 174.332 726.597L231.319 663.278C276.94 612.586 302.065 547.112 302.065 478.915V427.646C302.065 419.547 308.653 412.959 316.751 412.959C324.85 412.959 331.438 419.547 331.438 427.646V484.43C331.438 560.461 303.272 633.315 252.128 689.574L196.579 750.678C191.765 755.972 192.155 764.171 197.451 768.985C199.934 771.243 203.053 772.354 206.163 772.354C209.688 772.354 213.199 770.925 215.756 768.112L271.303 707.008C326.795 645.968 357.356 566.922 357.356 484.43Z" fill="#F3F3F3"/>.<path d="M412.647 427.646C412.647 374.768 369.628 331.75 316.75 331.75C263.872 331.75 220.854 374.768 220.854 427.646V478.915C220.854 527.01

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2230
Entropy (8bit):	7.635001989080968
Encrypted:	false
SSDEEP:	48:ta9vrqLjlMPVS7pCzlhFjBTnRjftzJrQhPWv09k42wvEt7D4FNAnLlVN:+vrSlMPSqHJnRjNt0PY0A7k+
MD5:	99BE73B56C0C713A46FE6C8EF58865E6
SHA1:	82598E12802DB5FD1980C341AA07EC69058B6B8F
SHA-256:	78F5EE99BD21777BDD0EF43F912A94D62F19D6F193294EA4379F71A5B5929E1F
SHA-512:	18EE140761CC4C6026E4554086EE3BBDC749C7EB7C4D849156F27A0836BE9F01123D081C8055043737773AD9976F6527C05DB383606F5DCD161A2514A9B03108
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs...H...H.F.k>...)IDATX..kl[g....{\|.;..8$M.[/i.J.....Q:.1.XF...!.....`..R.HH..IHH.~.cH.......r..@.-[.n..I.4i.../...sy_>..Kb;1..#Y.s...>.....ad.@.=.}.^`[..4....S.9..8.8:.........w.;..&.].2.g.g....)O.w..<.\|...z.+.L.O.'...H.}.w...x.8Tb.5.A.)...GiR..V.7-%...c.h...(......=%l5.l....8.i..Zk..4.S./.f....s9.RT.."...$.:....r.M._.m..........2...(.`G.......m..k@.r......4.o.....Ks.y......d!...W...t...KP...C<...v.99....H..R]....f9:.Qp.....-.F.4x\|_;.uA.....KK$l..59O.V.....n..z..g.w..Q6...e..C.7S..x.,_..u&.......8..r].I...rj"....7.T..?O..n.?.^.V...C.,O.U....r".l...\|.'Y......x'..).!..:\NY.h.pGK...g.:$l.S.IfW.."..Q`.......J;.&r....m.g.Z.d...8.G..T..Bl6...........64.pq...4..Q..l.Hw......ag,H..H.=...#`.W.#..(..f...Z"..Z....6..Z.@..t...d...s9.....qV02z.h..3.CFC( .3.k.....q.....Z....x#..&.s.C.......B.jX.<...gf3..j.x..#;.0...i..I.....%..nR.V.......

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 412 x 220, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3601
Entropy (8bit):	7.913488261896689
Encrypted:	false
SSDEEP:	96:FEgW0iMjyPH4n/IhhbGnsozgnP++L5vgEl:FEpgQYn/G6zW2MtgU
MD5:	451A3CB7E50709A5DC98F55727F57D13
SHA1:	579E6B9C768630D67F21860103BBA5AE2AB4FB32
SHA-256:	A88ECD3B4280CBED5EDA0ABB0A229B580F85D1E74E84ED6EF6A76778874896DA
SHA-512:	ADD8B97A3BD625EF85E2DE9366DF64A462FBEF2E38CE7932E1A4B7CCBC23059AF5E5839570C946F8FDFA822E62C5F60F9C2F6F2CA6725C9AA1025E6C9389A408
Malicious:	false
Reputation:	low
URL:	https://www.signable.co.uk/wp-content/uploads/logo_hat_trick.png
Preview:	.PNG........IHDR..............@......PLTE........................V7.....tRNS..Aj.........IDATx..]Kw.:.6.c....z...[.=Z....V...HB....{..^gph...N...#.j5.H#.4.H#.4.H#.4r............N......$8..].%...%Y.......pA.m\|Yp^..../....p@..pz0e..._cK......=K.97j...U;...#9.....1\|.....\|..u5u...WN9...&...s........-]}#...3....L.N..QW.L.=k..k.cC........?.....l;.!....a..\|.C.....k..UN}-......../.0...\.S..IQ..f.%Fs..\.Ls...FS..o.j.a..._.r"..l...M5.n.........w.j.W..j..,.\.H..h...r\|...Yrh..Fcp..L#V..g...m.N...=.N}K.......-..Z8..E.L.."A6..G.d ..'3..sZ.`>....Z<K/...B......qt.{~.....8..y...Xi;...,.uf.">...~..'..t.$..w#.....D... ..l.7...e.2..h...pZ.\|.R..pR.Il............s.\m.p........(......g'.O8.-.}.....V.ce.).whR.....g.]m....);....../.... ...?.. \|.=.....v....p6t.CI.m..WEc...j.0C..O...D)..C.XE.....{.....`:......,.........>....B....X<.~n......\|.\8I...G....4.3....z.K...."..S........l..X.S.V&.b.S...=..h..<..'..c.d..=..1.%._M..a.Q...11.0....g.....6y~o.........Sc.m....7.\...f.

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64347)
Category:	downloaded
Size (bytes):	217242
Entropy (8bit):	5.456584994835694
Encrypted:	false
SSDEEP:	3072:OK3F1l0NFd+6vOFy0bteuvQ+AMPpgArl0xYu5G5nnsY:OKVv0rrYy0bvQQGArHu5G5nnj
MD5:	873506BFC1A741EB64A9B5891596F20A
SHA1:	0D2E198817D17136185A7CF5DB2CBA35088BE1A9
SHA-256:	0C9CC88C27618B01E95063377382195B9062BDBEF5EB1687E5881D3F318DBE63
SHA-512:	8AAB8C9B117FD5DF954F3954777FCCAF22C34E07E97CA7E9071997F8C72B397F226C885828600E1A5BFEBF08BD27971026D7E61C99969B649E724FACB64F9A14
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.076736927206837
Encrypted:	false
SSDEEP:	6:tnrolfVlGlumc4slBHKmjtZ+LEXIPGFyMm2XST7mVnpV8R0cUHmXmcVDUysKyQq4:trod2lunHKm5Zp4PWCmVn80cUGXmcyQr
MD5:	01249ED73014F93584E45A02925E88D1
SHA1:	7FB95C3BFDEA9E987816789C74AC08BB6FC879FE
SHA-256:	DBE76C06661CB447B470C397AE9102ECF9BC9C5E4E9B6D6499B841108A92B992
SHA-512:	9509ACF7650D7D32D9753EC54D174715EFE13CE43798219553D1CD4FE62BEB391DDE7A9CCC9479AFA568AD310232EACFABF76E0E813EB87B0E45571FD0753D5A
Malicious:	false
Reputation:	low
Preview:	<svg width="46" height="46" viewBox="0 0 46 46" fill="none" xmlns="http://www.w3.org/2000/svg">.<circle cx="23" cy="23" r="23" fill="#0095E6"/>.<path d="M21.0519 30.1276L14.7207 23.6611L15.9361 22.4198L21.0519 27.6449L31.9053 16.5596L33.1207 17.8009L21.0519 30.1276Z" fill="black" stroke="white" stroke-width="2.3"/>.</svg>.

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	993
Entropy (8bit):	4.179050259881662
Encrypted:	false
SSDEEP:	24:t4lfu4AuDZuvhcUqo5xzXAEZ2NNdn11nkxj+AHvE/fZ6LH2:gHZgv9zXEvYxj+EK6a
MD5:	CB402D4D44A8AA8EF622C2319B0D3DD3
SHA1:	AD5340829DE2974B4FBE73406F626D9DB3EE6B52
SHA-256:	D207C63362D5BEE115B21728A2B672F0FD432916C339B3FAD3EA4F09E1144D44
SHA-512:	FCB10047A6690EDCF81F8E544AAD21393B1E54D0BE0B6497E7EC1422E1A9611D36ADFA617942C17CB80110FC2299350AD985F6E7E73BDC78D1372ED96F341C54
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-content/themes/Signable2019Theme/_/img/icons/icon_twitter.svg
Preview:	<svg width="28" height="29" viewBox="0 0 28 29" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M8.80545 26.2817C19.3715 26.2817 25.1507 17.2152 25.1507 9.35271C25.1507 9.09523 25.1507 8.83887 25.1339 8.58365C26.2582 7.74134 27.2287 6.69853 28 5.50387C26.9516 5.98503 25.8393 6.30052 24.7005 6.43997C25.8995 5.69662 26.7974 4.52654 27.2261 3.14904C26.0985 3.84203 24.8647 4.3305 23.5782 4.59326C22.492 3.39695 20.975 2.71777 19.3896 2.71777C16.2351 2.71777 13.6394 5.40616 13.6394 8.6732C13.6394 9.12643 13.6894 9.57826 13.7883 10.0197C9.1717 9.78007 4.8644 7.51841 1.94879 3.80329C0.432633 6.50652 1.21712 10.0097 3.72734 11.7458C2.81323 11.7177 1.91877 11.4623 1.12 11.0011V11.0765C1.12077 13.898 3.05851 16.3503 5.72879 16.909C4.8831 17.1478 3.99558 17.1827 3.13491 17.011C3.8856 19.4287 6.05035 21.0953 8.50194 21.143C6.46811 22.7984 3.95429 23.6976 1.36752 23.695C0.910438 23.6941 0.453797 23.6654 0 23.6091C2.62686 25.3551 5.68422 26.2814 8.80545 26.2771" fill="white"/>.</svg>.

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6778
Entropy (8bit):	4.936601554006818
Encrypted:	false
SSDEEP:	192:aPuu9Wblu4Kr2j6cM1ZOpNYuJmqCoRPSNUCH:aGu9Wblsr2j6r1Z2rmZAPqUCH
MD5:	D7613FF32DC26A84BD55B696DC6BD99F
SHA1:	6552C66623B303C4E652A7629C2E20809966CAEF
SHA-256:	63785B24ACA8368FEAA9C9A5AE6406987EF8BFC11370545822A6B890E3DF23F5
SHA-512:	B3D6289E521DA3836301AD1470FA5C601329D14CCAA9FA83547B5E8DBD8E7A0452FD6E4545FCD8EF3256EC6B931E78CEE39BF08790B3D7ABE99DFE37D90FDE89
Malicious:	false
Reputation:	low
Preview:	{"id":"e0babb59-c246-44d5-8e05-fbd03a64bd6b","name":"Welcome to Signable LiveChat","companyName":"Signable","timezone":"Europe/London","display":{"focusMode":"askFirst","style":"icon","text":"Help","textAlign":"right","iconImage":"message","color":"#2392ec","position":"right","zIndex":1050,"showPoweredBy":true},"docsEnabled":true,"docs":{"siteVisible":true,"domains":["signable.helpscoutdocs.com"]},"messagingEnabled":true,"messaging":{"mailboxId":50105,"expectedResponseTime":"hrs","avatars":"none","chatEnabled":true,"chat":{"customFieldsEnabled":false,"emailTranscriptEnabled":true,"ratingsEnabled":true,"requireEmail":true},"contactForm":{"customFieldsEnabled":false,"showName":true,"showSubject":true,"allowAttachments":true,"showGetInTouch":true},"authType":"basic","secureModeOnly":false},"language":"en-US","messages":[],"labels":{"addReply":"Add a reply","addYourMessageHere":"Add your message here...","answer":"Help Articles","ask":"Ask the Team","attachAFile":"Attach a file","attachmen

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	749
Entropy (8bit):	5.165898702061175
Encrypted:	false
SSDEEP:	12:TMHdNZhK1Wb1NnazKsJKAQKTyxbI/NZ/NPpqFShUlUGGXGsPu8O82G4ksGQefxf0:2d/E1KNHsJKKTya3RaQCVGXHuo4kue58
MD5:	CAD3BE2A64EAA57F8EEB3101A871D88C
SHA1:	0F8321E4924917D6FFD1C174F8ADB6F7B55868EE
SHA-256:	EA5F80E0120B3808A1F81E5776B85C9E1CCE4BE736306D6C9368663776BD94E7
SHA-512:	6A73F4FE5EF41A7E62E776C229E3DBEEC66DE9547C697886FDF1570D49070C9AD7CBA75DC28C2C1C44A545AA833ACAE8F91FFFF472B22FBA848FCF31B5438F1C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_2" data-name="Layer 2" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 3334 3332">. <defs>. <style>. .cls-1 {. fill: #fff;. fill-rule: evenodd;. }. </style>. </defs>. <g id="Layer_1-2" data-name="Layer 1" image-rendering="optimizeQuality" shape-rendering="geometricPrecision" text-rendering="geometricPrecision">. <path class="cls-1" d="M3021,0H313C141,0,0,141,0,312V3020c0,172,141,312,313,312H3021c172,0,313-141,313-312V312c0-172-141-312-313-312Zm-946,623c35,296,200,473,487,492v333c-167,16-313-38-483-141v623c0,792-863,1040-1210,472-223-365-87-1006,629-1032v352c-54,9-113,23-166,40-159,54-249,155-224,332,48,341,674,441,621-225V622h345l1,1Z"/>. </g>.</svg>

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4252)
Category:	downloaded
Size (bytes):	4304
Entropy (8bit):	5.1429874433054765
Encrypted:	false
SSDEEP:	96:NINFp3QTWPKZImNn/Yzr9Ynwxh6hR0LR7PjMsliL:NSpfgYd7PjMx
MD5:	6E5AC7B41F45CECBA5EEAC0B9BA12B2D
SHA1:	4C2F5536A545C01DD0F6A070BA1BA2D506ADCDB7
SHA-256:	5C273B52EA52E5DC2C1483B874A9837314141381F4C06396E9BC5CF243EAC938
SHA-512:	9EB1EDC685EB71246AA093802760DDD32C623CBCDDDB393CC5B01DA7A7C254BD7E253F74D0032E8DC33513573F37942B5BEF51AA980C5678C37E867619031CF3
Malicious:	false
Reputation:	low
URL:	https://signable.app/js/chunk-79dc7497.a630258b.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-79dc7497"],{"0920":function(t,e,s){},"7b7a":function(t,e,s){"use strict";var o=function(){var t=this,e=t._self._c;return e("div",{class:t.classList},[e("div",{staticClass:"o-modal__box"},[t.loading?e("VLoadingSpinner"):t._e(),e("a",{staticClass:"o-modal__box__close",attrs:{href:"#",tabindex:"0"},on:{click:function(e){return e.preventDefault(),t.close.apply(null,arguments)}}},[e("FontIcon",{attrs:{name:"times"}})],1),t._t("header"),e("div",{ref:"content",staticClass:"o-modal__box__content"},[t._t("content")],2)],2),e("div",{staticClass:"o-modal__overlay"})])},a=[],n=s("bd86"),i=(s("7f7f"),s("8b9a")),r=s("f46d"),l={name:"VModal",introduction:"A pop up modal.",components:{VLoadingSpinner:i["a"]},mixins:[r["a"]],props:{name:{type:String,required:!0,note:"The name of the modal to pass to the store."},size:{type:String,note:'The size of the modal (can be "small")'},loading:{type:Boolean,note:"Toggles display of a loading spinn

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57084)
Category:	downloaded
Size (bytes):	110035
Entropy (8bit):	4.919722681423811
Encrypted:	false
SSDEEP:	1536:iLeJ2f9Zk2u5SOV+UQ3Zo/0kxhdRVrkQzE:iLeJgk2u5SOV+UQ3Zo/0kPdvQQzE
MD5:	99AB466E0866C823AE5DB517D59CEBD1
SHA1:	5595A586CBD42B31377681B9D35293278D75D336
SHA-256:	698B89C0DA3D319754D6A837B5E6D4E6A42DC402D9FFD7559B8C4CB29C644340
SHA-512:	D19932F64ADBDB1286B61D472526FE0BE92E5FCDBECF9DF9C9DC607D46E26F8912C74294256F1A6B56D0FB14A774679407187EED011F4B5B7008981AA52F6DF6
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-includes/css/dist/block-library/style.min.css?ver=6.4.2
Preview:	@charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{box-sizing:border-box}.wp-block-audio figcaption{margin-bottom:1em;margin-top:.5em}.wp-block-audio audio{min-width:300px;width:100%}.wp-block-button__link{box-sizing:border-box;cursor:pointer;display:inline-block;text-align:center;word-break:break-word}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}:where(.wp-block-button__link){border-radius:9999px;box-shadow:none;padding:calc(.667em + 2px) calc(1.333em + 2px);text-decoration:none}.wp-block-button[style*=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100%}.wp-bl

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3086
Entropy (8bit):	3.9275860553947677
Encrypted:	false
SSDEEP:	96:A1oGt5AVFtfOe1psO9hXBEO8d1IN8OC9jRRkM:Af5uFBOeTsOzBEO61IUMM
MD5:	608336E8C4DB562C55FBD07765DF51AE
SHA1:	53585FC273D40A0D6D9BDA5BA2A5E5175CBE0B76
SHA-256:	8BD53DA9988758889A9DD96C1FA7DC8011B6112393F21B5EF43F31D6072A6BEA
SHA-512:	046260054961CC75C34B078565AD77BFD4A50DD806428798A15A91AD7B1F9E368DB62C783F3DB5F88D83056EEE6569BA1BB2FAC5B742B93A80CD2DB060684599
Malicious:	false
Reputation:	low
Preview:	<svg width="29" height="29" viewBox="0 0 29 29" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M14.4998 2.12646C11.1394 2.12646 10.718 2.14071 9.39826 2.20092C8.08127 2.26104 7.18181 2.47018 6.39473 2.77607C5.58108 3.09228 4.89105 3.51536 4.20318 4.20323C3.51531 4.8911 3.09223 5.58113 2.77602 6.39478C2.47013 7.18181 2.26099 8.08127 2.20088 9.39826C2.14066 10.718 2.12646 11.1394 2.12646 14.4998C2.12646 17.8601 2.14066 18.2815 2.20088 19.6012C2.26099 20.9182 2.47013 21.8177 2.77602 22.6047C3.09223 23.4184 3.51531 24.1084 4.20318 24.7963C4.89105 25.4842 5.58108 25.9073 6.39473 26.2235C7.18181 26.5293 8.08127 26.7385 9.39826 26.7986C10.718 26.8588 11.1394 26.873 14.4998 26.873C17.8601 26.873 18.2815 26.8588 19.6012 26.7986C20.9182 26.7385 21.8177 26.5293 22.6047 26.2235C23.4184 25.9073 24.1084 25.4842 24.7963 24.7963C25.4842 24.1084 25.9073 23.4184 26.2235 22.6047C26.5293 21.8177 26.7385 20.9182 26.7986 19.6012C26.8588 18.2815 26.873 17.8601 26.873 14.4998C26.873 11.1394 26.8588

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
URL:	https://app.launchdarkly.com/sdk/goals/6239d86c177e3a150044c12d
Preview:	[]

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13479)
Category:	downloaded
Size (bytes):	13577
Entropy (8bit):	5.272065782731947
Encrypted:	false
SSDEEP:	192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp
MD5:	9FFEB32E2D9EFBF8F70CAABDED242267
SHA1:	3AD0C10E501AC2A9BFA18F9CD7E700219B378738
SHA-256:	5274F11E6FB32AE0CF2DFB9F8043272865C397A7C4223B4CFA7D50EA52FBDE89
SHA-512:	8D6BE545508A1C38278B8AD780C3758AE48A25E4E12EEE443375AA56031D9B356F8C90F22D4F251140FA3F65603AF40523165E33CAE2E2D62FC78EC106E3D731
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Preview:	/! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],a=1;a<=3;a++){if(+o[a]<+n[a])return 1;if(+n[a]<+o[a])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.4.1";var t=Object.create(null);s.migrateDisablePatches=function(){for(var e=0;e<arguments.length;e++)t[arguments[e]]=!0},s.migrateEnablePatches=function(){for(var e=0;e<arguments.length;e++)delete t[arguments[e]]},s.migrateIsPatchEnabled=function(e){return!t[e]},n.console&&n.console.log&&(s&&e("3.0.0")&&!e("5.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.x-4.x REQUIRED"),s.migrateWarnings

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	12846
Entropy (8bit):	7.962562270234893
Encrypted:	false
SSDEEP:	384:9lF7DWzZvzyq91YKTQkLDZnp04JSnoZr5:Z0ZS0d3zZ9
MD5:	429564C45BD8D612CE63BE65239E4B34
SHA1:	5C10147CC053FFCF4E23AFE6C60EC2CE5654488C
SHA-256:	99FA7021B3C835BE6795C465BE09645C00E57931378C287768D8BB73817B4364
SHA-512:	2631A58C3D71E587D0A055B052090BEC95F2F119EECF5E8D829D6C858B4FB7CAC0ACDE68828B897724AABD78AC89CD5E24E328D47D4A8189BD1412C3878DCF85
Malicious:	false
Reputation:	low
URL:	https://signable.app/img/icons/android-chrome-192x192.png
Preview:	.PNG........IHDR.............R.l...1.IDATx..y\|.gy.c..ht[..C.r9..s_....8..(K.,..KK..@)G.[.(.lp..n.R.-.R...$1q..b'....)...w...;cI.d.H....\|dY....7......P#wv../.@3..\|......h..=.........]..R@......0.D.A`..g...YG.cK..T..{.%... .ze.k...X....S.... ..9.B......T......,.....j.0.s.....k...U.z.........!.T...q...<...b..LQS.3......6.l.............=.H.O!..i`7."r..9.."......n..[...+.+.&....]$,.y......>v.#.L).K..._AnV/...n.6.]UpO.....v......k.w."%...[2%.^....l.nDzfe.....qz.x.x...0..P..T.s.:.=.'p.p)..{.%.....F.....GT.BT...4sZ..w ...b..L.C..?..E...<.,....U....^.P..V..^....B.9HD.._.f.;..]...f.._c.H...O..3.)sE(o....F........_...3.....b......L.~=..Q.+...C..bH...Bz.b@YBy).......o...{hU...c......PV.P>.0%.......tg..5T&.x....O.(.Q....).:......b...I..).;.1...%(m......?.v ].5J...&....^.JW....u....._..U#'.......;.T..4.@..#...O.1.5..............S&.:...A...(_..w.{.c@I.D...S&..._....b......F~.{)!..4.@....=....F.q..<2..U.JP\....._....E.S!......+..Jc*Z.F.....B).w.......

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	6778
Entropy (8bit):	4.936601554006818
Encrypted:	false
SSDEEP:	192:aPuu9Wblu4Kr2j6cM1ZOpNYuJmqCoRPSNUCH:aGu9Wblsr2j6r1Z2rmZAPqUCH
MD5:	D7613FF32DC26A84BD55B696DC6BD99F
SHA1:	6552C66623B303C4E652A7629C2E20809966CAEF
SHA-256:	63785B24ACA8368FEAA9C9A5AE6406987EF8BFC11370545822A6B890E3DF23F5
SHA-512:	B3D6289E521DA3836301AD1470FA5C601329D14CCAA9FA83547B5E8DBD8E7A0452FD6E4545FCD8EF3256EC6B931E78CEE39BF08790B3D7ABE99DFE37D90FDE89
Malicious:	false
Reputation:	low
URL:	https://d3hb14vkzrxvla.cloudfront.net/v1/e0babb59-c246-44d5-8e05-fbd03a64bd6b
Preview:	{"id":"e0babb59-c246-44d5-8e05-fbd03a64bd6b","name":"Welcome to Signable LiveChat","companyName":"Signable","timezone":"Europe/London","display":{"focusMode":"askFirst","style":"icon","text":"Help","textAlign":"right","iconImage":"message","color":"#2392ec","position":"right","zIndex":1050,"showPoweredBy":true},"docsEnabled":true,"docs":{"siteVisible":true,"domains":["signable.helpscoutdocs.com"]},"messagingEnabled":true,"messaging":{"mailboxId":50105,"expectedResponseTime":"hrs","avatars":"none","chatEnabled":true,"chat":{"customFieldsEnabled":false,"emailTranscriptEnabled":true,"ratingsEnabled":true,"requireEmail":true},"contactForm":{"customFieldsEnabled":false,"showName":true,"showSubject":true,"allowAttachments":true,"showGetInTouch":true},"authType":"basic","secureModeOnly":false},"language":"en-US","messages":[],"labels":{"addReply":"Add a reply","addYourMessageHere":"Add your message here...","answer":"Help Articles","ask":"Ask the Team","attachAFile":"Attach a file","attachmen

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1555
Entropy (8bit):	4.194526038172471
Encrypted:	false
SSDEEP:	48:OnwAvOJrHlRBitTU1oM6eqtX9yFqgLxu0FfS:O8BitTLe7kgn1S
MD5:	D55EE73E0EE13CD2D9D7574AB87117AB
SHA1:	C915B233839C8F037E7C5BC5D28931053E08F23E
SHA-256:	95E489F0A2E1313B25A46D5070706E60FCD3D3C7F6AB49D543C2E41D25F3A479
SHA-512:	B60901DAC78F4F966843022C28D2F9BE241030C47445D14AC1D26549B5513A8220A2D9C62501A6CFC7C2CF717CA9CC452BA0747E422FCA52FB7F4A5B0ADBEFDD
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-content/themes/Signable2019Theme/_/img/backgrounds/signable_squiggle_left_black.svg
Preview:	<svg width="147" height="87" viewBox="0 0 147 87" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M140.871 30.5528C139.659 35.0367 138.499 38.7095 137.863 40.5545L137.381 41.1487C134.417 48.5497 130.067 55.3247 124.557 61.106C118.528 67.4321 111.244 72.4288 103.172 75.7758C83.7103 83.7024 59.7106 80.7546 43.1164 67.6338C37.2003 62.9048 32.8556 56.4945 30.6549 49.2474C33.669 46.9856 36.3911 44.3587 38.7588 41.427C45.3511 33.2799 52.3589 19.2899 49.8588 8.47444C48.8684 4.15146 45.7315 0.652968 41.1648 0.182732C34.9778 -0.466366 30.3376 4.17256 27.5239 9.11642C21.1142 20.2883 20.6331 34.2942 23.5111 46.627C20.2384 48.6054 16.6591 50.0248 12.9201 50.8272C1.73962 53.1817 -10.3375 49.2199 -16.9271 39.5444C-24.055 29.0062 -20.5995 15.4183 -17.7076 4.04684L-17.6449 3.80024C-16.6571 -0.0581247 -22.8257 -0.77548 -23.7986 3.0444C-27.0396 15.8145 -30.0478 30.1346 -22.6297 42.0881C-16.4575 52.0449 -4.97806 57.8375 6.62391 57.711C13.1685 57.593 19.582

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	408
Entropy (8bit):	4.564820119688623
Encrypted:	false
SSDEEP:	6:YhKQrX7X4wHrEElFSBUwYG78E9wHrEWX7OjxMSBKRBeBi9wHrEElFSBL4Az/4wH4:YcQrLbR+BUOV8LOBceBi8R+BLl/LR+B1
MD5:	FD4F1DF95A7FC2A111E9E200A46C3AE3
SHA1:	4B4D262597EF3EBC4E7CA4C9BD96F24AAD432E12
SHA-256:	3B358ECCA877E30D1607910368506F9418EF2A3EB7B8E0DB5292F602E0820287
SHA-512:	0CC3C2134F7AA0DBAF1E4D426D6832EB37C6BA236BCA9DF81FC4A7C0187494BF5C4EF3594CC35668F54A2668A57480DD98F4E9728E908DDB29E4BA8A192D3046
Malicious:	false
Reputation:	low
Preview:	{"dropbox-to-v2":{"flagVersion":4,"trackEvents":false,"value":false,"variation":1,"version":329},"envelope-widget-sign-to-v2":{"flagVersion":18,"trackEvents":false,"value":true,"variation":0,"version":329},"moooore-branding":{"flagVersion":2,"trackEvents":false,"value":false,"variation":1,"version":329},"planned-maintenance":{"flagVersion":15,"trackEvents":false,"value":false,"variation":1,"version":329}}

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5245)
Category:	downloaded
Size (bytes):	5297
Entropy (8bit):	5.161195714948932
Encrypted:	false
SSDEEP:	96:edrc/zTZY8dj9CsIHSr3KBwlik7TQT4/K2WNLg:e2bTZFIHzBwN75o0
MD5:	0CB18392F41820956D309279925607AA
SHA1:	2A2D3736C08D3999B0BA501F6761ABDDC711A61D
SHA-256:	8079F277CDA6FA755185B0374478AD29DC568C7C71334638AD164A329C0407C9
SHA-512:	73C123BDA54C4BA8F7C1D69FFFF399CBE16F6B7E672D600B2F4EC01E8F675644E52E22E56C2F0523C052D6E36B4CD6ACDA8B4E65AB40075F876D688D2FE86C94
Malicious:	false
Reputation:	low
URL:	https://signable.app/js/chunk-1e9122a3.b481b48e.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-1e9122a3"],{"0920":function(e,a,t){},6711:function(e,a,t){"use strict";t.r(a);t("7f7f");var s=function(){var e=this,a=e._self._c;return a("VModal",{staticClass:"modal-party-message",attrs:{name:"save-update-party-message-modal",loading:e.loading},on:{onOpen:e.onOpenModal}},[a("h2",{attrs:{slot:"header"},slot:"header"},[e._v(e._s(e.$t("createEnvelope.documentSetup.partySelection.saveNewMessageTemplate")))]),a("div",{attrs:{slot:"content"},slot:"content"},[a("VForm",{attrs:{onSubmit:e.validateForm,"data-vv-scope":"save-party-message-".concat(e.order)}},[a("div",{attrs:{slot:"row"},slot:"row"},[a("VInput",{directives:[{name:"validate",rawName:"v-validate",value:"required\|min:3",expression:"'required\|min:3'"}],class:{"a-input--error":e.errors.has("save-party-message-".concat(e.order,".message-name"))},attrs:{type:"text",placeholder:"e.g. Welcome Message","data-vv-name":"message-name","data-vv-as":"message name","data-vv-scop

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1091)
Category:	downloaded
Size (bytes):	1143
Entropy (8bit):	5.223387427779697
Encrypted:	false
SSDEEP:	24:lDjp0bZUX8HNA/QNINWhiyxEI5R0xigivrRYOmjiLsydWfYIb/UIBkDAiZkEU3:lD6b7HbJiLdi3iiLs0WfY+/UFDAOkEU3
MD5:	3FF3B6C9470706F2DC7FF826C932D71E
SHA1:	965BE8CB1FF3AEFD16F5AA6F41DE46C97CD7C332
SHA-256:	F04AA7BAD9F8966A79A5DB17B311A5709DD78748CBE89530BDC3B531B419115B
SHA-512:	B9BDABCA94D6B040E4A82B19A2EFB252079B8CF624E7906470523ABCE45F0E46658C994C38E7873EEC6ECEB75040B106060AD2BD993842FAD72F1F01B4EAC1A4
Malicious:	false
Reputation:	low
URL:	https://signable.app/js/chunk-2d0a473d.3aa1d29b.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-2d0a473d"],{"0700":function(t,o,n){"use strict";n.r(o);var e=function(){var t=this,o=t._self._c;return o("TWModal",{attrs:{title:t.$t("LegacyAllItemsDescriptionModal.title"),show:t.value,loading:!1,"auto-focus":!1},on:{close:t.close},scopedSlots:t._u([{key:"content",fn:function(){return[o("p",[t._v(t._s(t.$t("LegacyAllItemsDescriptionModal.description")))]),o("p",[t._v(t._s(t.$t("LegacyAllItemsDescriptionModal.suggestion")))])]},proxy:!0},{key:"controls",fn:function(){return[o("button",{staticClass:"tw-button tw-button-cta",attrs:{type:"button","data-test":"confirm-button","data-ec":"template-share-modal","data-et":"save-button"},on:{click:t.close}},[o("span",[t._v(t._s(t.$t("functional.gotIt")))])])]},proxy:!0}])})},s=[],a=n("70b2"),l={name:"LegacyAllItemsDescriptionModal",components:{TWModal:a["a"]},data:function(){return{isOpen:!1}},props:{value:{type:Boolean,default:!1}},methods:{close:function(){this.$emit("input",!

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 388 x 220, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3250
Entropy (8bit):	7.891477607693575
Encrypted:	false
SSDEEP:	96:bgFTXnjmlXfKx6Hpjh+lboGXdofADV4jjvaRlQ7qAJ/PGTr:bgNncSxuhmo4fDijCHc/P0
MD5:	F812AB0E499BCA90514C37D206A7F0DC
SHA1:	99A4264C6195E2F45B80D4F70342E78DB2B9BC1A
SHA-256:	DE31837F4385B54A053C9590A71CFBF09F9B24F1CC41702942E1F30D9E938040
SHA-512:	AD83AE4FD410C48A612D028DEC9AA67F00A1B112C59EE7FB500C316B349DA0B46960521A873A7CCA070382AC9262588FCCAECB838DC71D7BC8A72694351360B6
Malicious:	false
Reputation:	low
URL:	https://www.signable.co.uk/wp-content/uploads/logo_london_philharmonic_orchestra.png
Preview:	.PNG........IHDR..............9......PLTE....X.-+,.>........ .........T.....tRNS.'G.....8....?IDATx...o.:...@{.e..1.@....W...E .X...o..\.""..~..w.-_)...v..I....C'.c..+V.X.b..+V.X.b..+V.X.r..,f'^Q],..B.....Z..`.,.E....@Z..<.C7....X.e.[...U"@jd......RJ3.Y..9mH.<......0EgL13..f..G`.b.\|..K......./.....7G.Z...k...u(..e....q..r....6..dy.F.P..VD....]h.f..y.LY.Ai..D....(.....D.P....k...KR."..>..........&=.@..n...'>X]....m@pEe;.R.,.D'O..Fh.....".Au.XCs.P.]...djzs...:=Q......d.^&ME...."D.+c.....et<_...6....!...#..SZ@.....)<...[....zX..(-..N......n ....akjA.X.0.7..B.....agj.D ..sW.U.!.....C ..?......B...:.....X0.......B...'.....oO.._...#..xhj...Y^....!.D...-8..#..3T.. tDU.P{.G.h....O.....lycj.I..'..9.9B6..K.<.bjA,....l ...l..?..r..i.K.G.......o....+.gN^..6..D.x........D.(:6..2...........w..d..9B..m.O&#.....8p[.q.N......\|.Wj...Z.;...#..O@.....C#TVa....a.}X..:N.$Nz....:M.&p.~...G..i.}x.G.U.._..Mm..ca.u......8^.+........"....~......j.#..9.ISt..i.

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 337 x 82, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	11377
Entropy (8bit):	7.969565267908396
Encrypted:	false
SSDEEP:	192:uVczVhn9ZwPnwdIz+MR3+cbwib6fCY5WXDK60YQv+dRD0SGpf9mW9x5tE2VduOE:xz1Zwvwi++F7G6Yge6dNDtGvmW9xTt4J
MD5:	34ED7931B81B47DDD3049B0DFC30EFC0
SHA1:	C87436F20D7A85B1AFFAA45B4EC6A5BF20DCC647
SHA-256:	034FD105BB0BEC7E0B36AE517F4B09CC66D1CF8133FEF31AD10BA0F86CB7A66B
SHA-512:	9ED1E434C1D17408E0F8F37CA34741051057EA37F0DF4785742AF0BBEDEC035533DED53EB0613E89C12A7400CAD19EDC23E09F1F14AC5993F3DEE7A631896F21
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-content/themes/Signable2019Theme/_/img/logos/logo_cyber_essentials.png
Preview:	.PNG........IHDR...Q...R.......X....pHYs...%...%.IR$.....sRGB.........gAMA......a...,.IDATx......y.zRKj.B......Yl.C.Y,..l&^bl.^....%3.3.3.....3.d.8......Nl0..lF ..o..K...Hj!..........}...z{......s..~....{....v........}...6..Tf...2..U..lTY..R.%...`.e....X.. ......,Py..!V..PyXe..["..!C..DF.5B.3G.sU.U9Ce.5.M..<d.L.!C.....'.Q.^....?.....?.w..d.6N..<....f.c.._...4C..B[I..&:.qcw..n...{.X.p1....(..v..:i3....$.m.....U.a..Is....I...:.3.HWe....:.-'QO.Hr3E..s...k.t.G.L7G...O.....e.o...Fe..&..>k.js..u..GT...`..wU..}l...2..-#Q.Q.>..Hu...\].R..V........)B}P...-..[.....v.....^.'...B..f.!C..8.z....D-./...o..`...~}.T.~A,...hc.'...pU.Z.D.9lS.E..j...!Cj...z.:E.u......L......$........U:A..sT>.2.F....o*w....!C.T"........O....3....".....{$...!..........XK.J.....d.....2$..HT.A.\.+$.~..w&.-..j.j..a.T.0....j..DJ.....e........k..]S.N-z9...e..n4L............m..WT..e.....J.9.%.?.F...n..b.....e".....t.v.:&......Q......v...{.[.~.Y;#...5..}3..........4i......w..=g.

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3059)
Category:	downloaded
Size (bytes):	3111
Entropy (8bit):	5.16567715242338
Encrypted:	false
SSDEEP:	48:lDf82m68eZoflv4PbpNdQ4fjEPHc3KWEOT8M7waIYUQ+jOXLl0+ztC1Zd6pJ+q/:LDoBQ24ja8JUaHsN6N
MD5:	D5E4C93C7B524431EF2FBB784CEC56E9
SHA1:	C9433F39B9480A073560E0730EC92A2BBFD7F70D
SHA-256:	772A87D4B3F1F7F570CC11510A84EB0F55DDA5462DF9F66D13B68668DD548AA1
SHA-512:	E24BD2302FCC69FACBFD9B09F767DD4550217E439B467FD0D001C1CF6A705C421AC3FCDE3F9A2B90197091082AB1DAA416910E3223C91CBFF3145422EE91D232
Malicious:	false
Reputation:	low
URL:	https://signable.app/js/chunk-2d0aa586.d2025c63.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-2d0aa586"],{"112b":function(e,t,a){"use strict";a.r(t);var n=function(){var e=this,t=e._self._c;return e.showWidget?t("div",{staticClass:"g-sidebar__container",attrs:{id:"languageSwitcher"}},[t("h3",{staticClass:"g-sidebar__container__header"},[t("FontIcon",{attrs:{name:"language",height:"22",width:"22"}}),t("span",[e._v(e._s(e.$t("dashboard.languageSwitcher.header",e.detectedLanguage.value)))])],1),t("p",[e._v(e._s(e.$t("dashboard.languageSwitcher.hello",e.detectedLanguage.value)))]),t("i18n",{attrs:{path:"dashboard.languageSwitcher.theSignableApp",locale:e.detectedLanguage.value,tag:"p"},scopedSlots:e._u([{key:"browserLanguage",fn:function(){return[t("b",[e._v(e._s(e.detectedLanguage.label))])]},proxy:!0}],null,!1,11919495)}),t("i18n",{attrs:{path:"dashboard.languageSwitcher.youCanUpdate",locale:e.detectedLanguage.value,tag:"p"},scopedSlots:e._u([{key:"myProfile",fn:function(){return[t("RouterLink",{attrs:{to:"/my-prof

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1759
Entropy (8bit):	4.064616270376278
Encrypted:	false
SSDEEP:	48:/GrLEWcINo/XyOQ/XrAMXuy8E7JwwTA+KS:/GPEINoaOQ/Xd8E7JwiAFS
MD5:	B73FE1E8EA11CFE74013623E9CD3CFE3
SHA1:	BEF299840294B2019E0A19E3F357CF617872A3D5
SHA-256:	88B1A2677913B7D35B66461FD05B09A8C6DD4243C872AB6AC9236E98C4F6794D
SHA-512:	A28677152F296FCFF3529BE7FEE4A6CE25DBF1D8BB81D14ED520AB8A2FCA35E34E4F4838AE949A71B2CC773C22A1D99BDEFE2BD262FD42C8F5F5E02EF5244C3F
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0.47 0.08 72.79 171.55">.<path d="m28.94 106.5 1.13.9.44-1.4c1.58-5.02 4.55-9.93 8.4-12.86 3.77-2.88 8.4-3.87 13.55-1.13 4.15 2.21 7.33 6.48 6.64 11.25-.72 5.35-5.75 9.07-10.8 10.57a21.52 21.52 0 0 1-14.89-1.07l-1.28-.58-.13 1.42c-.65 7 .22 14.07 2.55 20.67 5.74 16.7 19.77 29.9 36.66 33.27.5.1.77.35.9.62.16.3.2.72.1 1.15-.22.89-.9 1.47-1.82 1.3-25.37-5.03-45.38-32.65-41.13-59.45l.1-.6-.5-.36A32.46 32.46 0 0 1 18.13 97a49.15 49.15 0 0 1-3.3-29.1l.12-.67-.56-.36C7.44 62.34 2.7 53.92 1.71 45.37c-.95-8.3 1.03-15.54 4.15-22.54a141.7 141.7 0 0 1 5.3-10.41l.7-1.29c1.66-3.04 3.35-6.12 4.89-9.28.24-.49.54-.68.82-.74.3-.07.7-.01 1.06.2.76.44 1.15 1.29.72 2.19a149.63 149.63 0 0 1-4.9 9.07c-1.45 2.54-2.9 5.1-4.24 7.71C7.3 26 4.95 32.04 4.54 38.91 3.97 48 7.42 57.99 14.72 63.36l1.07.78.46-1.27a30.54 30.54 0 0 1 3.72-7.18 23.07 23.07 0 0 1 14.66-9.65c2.43-.4 4.84-.25 6.67.63 1.78.85 3.1 2.42 3.4 5.15.64 5.55-2.12 10.34-6.37 13.68-4.27 3.36

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1919), with no line terminators
Category:	downloaded
Size (bytes):	1919
Entropy (8bit):	5.0932328044572355
Encrypted:	false
SSDEEP:	24:H9cj4Ej+mrA3b7ml77bKHDjKqh9HDGPgYfnBKFVDB6Aq16KybQ012oxrh:dcjfjrA3fW2Ii6AqTys0A0F
MD5:	6B34ED69A95FF2DB40A2C944D3FAAA0C
SHA1:	672121879892FD95A887DAE9D442ECA55D601216
SHA-256:	CC828D59A03B75D49ADF88A8D073CC881F02E13EB56C8B4E75FD43E517B87293
SHA-512:	D919FFD5A077E8DA2C8220B73AACEB367D9A7B59F017A6A7E27E84DBFAD9A293A047F91FEEEB22B107DFAFA3C272EEC29F44687038A9CC3C9768A3C283980C28
Malicious:	false
Reputation:	low
URL:	https://signable.app/css/chunk-3fbf9bd4.470369c5.css
Preview:	.o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100% - 30px);max-height:calc(100% - 30px);-webkit-box-shadow:0 0 20px 2px #222;box-shadow:0 0 20px 2px #222;-webkit-transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out,-webkit-transform .15s ease-in-out}.o-modal__box__header[data-v-f1eb06a4]{padding:var(--spacing-base);border-bottom:1px solid var(--color-border);margin-bottom:0}.o-modal__box__content[data-v-f1eb06a4]{padding:var(--spacing-base);max-height:calc(100vh - 94px);overflow-y:auto}.o-mod

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7580)
Category:	downloaded
Size (bytes):	8779
Entropy (8bit):	5.360436493169535
Encrypted:	false
SSDEEP:	96:pnRbvcJH0EmhKuvOzluK/hbsEK1SQUMLRXl7zVDREVbfV4QjYR+ANxqMc0kU0UtN:bbvcZoMblnVMoQLv5Gx4QjYscTlN9Sw
MD5:	280BF0E9948090166CF62C11A0AC474C
SHA1:	0FD2B503696C3813D6DC6097215275E3283E49F5
SHA-256:	25106D348ACCEDF230010F9BFE56F1AF0BC7BB8CC9148A396BA441ADA33C348F
SHA-512:	4472C0C6003DE95BAF41116ED28DC6F81ACB1498AA5F1E7AF2385D3E314742F4C68A97D3E7628C6C76C96DA413022F5C2677F04B405AAE7553EC08B3D410B7A9
Malicious:	false
Reputation:	low
URL:	https://static.hotjar.com/c/hotjar-2736869.js?sv=7
Preview:	window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":2736869,"r":1.0,"rec_value":0.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":true,"session_capture_console_consent":false,"anonymize_digits":true,"anonymize_emails":true,"suppress_all":false,"suppress_all_on_specific_pages":[],"suppress_text":false,"suppress_location":false,"user_attributes_enabled":false,"legal_name":null,"privacy_policy_url":null,"deferred_page_contents":[],"record_targeting_rules":[],"feedback_widgets":[],"heatmaps":[],"polls":[],"integrations":{"optimizely":{"tag_recordings":false},"abtasty":{"tag_recordings":false},"mixpanel":{"send_events":false},"unbounce":{"tag_recordings":false},"google_optimize":{"tag_recordings":false},"hubspot":{"enabled":false,"send_recordings":false,"send_surveys":false}},"features":["feedback.embeddable_widget","feedback.widgetV2","ask.popover_redesign","client_script.compression.pc","survey.embeddable_widg

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Category:	downloaded
Size (bytes):	88751
Entropy (8bit):	5.414296471740167
Encrypted:	false
SSDEEP:	1536:2sHx8vawlWe2XzbStiSc6q1jboAmKum7EqIZ7d+/:2sHx8vzWe2jOtiSg1jboAmKum7EqCp+/
MD5:	69CB7809B5011312E716F29B3D19DCE6
SHA1:	833DABFB546D57065AEBA7190B5EE5A2428DFA47
SHA-256:	E039E607C78306C7E029A7FD0ECDB14F86456F16E1A5CE65AA26B4FDF1D38A3C
SHA-512:	4259C8F940CFE4B7EC384E5ABD855713DA7792A955A7B737B75E45E6559A90292ADE59D7CCAB381EA4C2D0FA5109B4ABD9BFA0887C05C9FB1A27469D5E198A69
Malicious:	false
Reputation:	low
URL:	https://m.stripe.network/out-4.5.43.js
Preview:	var StripeM=function(e){var t={};function n(r){if(t[r])return t[r].exports;var _=t[r]={i:r,l:!1,exports:{}};return e[r].call(_.exports,_,_.exports,n),_.l=!0,_.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var _ in e)n.d(r,_,function(t){return e[t]}.bind(null,_));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=30)}([function(e,t,n){"use strict";(function(e){n.d(t,"a",(function(){retur

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1766), with no line terminators
Category:	downloaded
Size (bytes):	1766
Entropy (8bit):	5.001532433019948
Encrypted:	false
SSDEEP:	48:Jqhk/owmPEVzMK1NVBxyEEV9MTsmHwjsHCSzd:TwE1gEE1ypDd
MD5:	948A22914399223B3C935F8D9D676FA3
SHA1:	FC338E759B4F6C572642648A822666A0FE108435
SHA-256:	3735476412BAECC0FC58DB8693F08F16D07B29C70AD3C94EF83E2E13D6C91448
SHA-512:	6EAE2B6E0EB538FF9FFAE8EA4E5FC07FF49B41EC8D6A2329817F93BFF86030AB6E41F090A60AA9F85BF412EB6D2E509256EFF9FA1B030AD3C85BFBD2A4387999
Malicious:	false
Reputation:	low
URL:	https://signable.app/css/chunk-c9608798.f20ec259.css
Preview:	.document-setup-progress__step[data-v-6ae97a9d]{border:1px solid var(--signable-primary-1);float:left;border-radius:30px;height:45px;width:45px;position:relative;margin-left:var(--spacing-base);-webkit-transition:all .35s ease;transition:all .35s ease}.document-setup-progress__step:hover .document-setup-progress__tooltip[data-v-6ae97a9d]{display:block}.document-setup-progress__step[data-v-6ae97a9d]:first-child{margin-left:0}.document-setup-progress__step svg[data-v-6ae97a9d]{color:var(--signable-primary-1);position:absolute;-webkit-transform:translate3d(-50%,-50%,0);transform:translate3d(-50%,-50%,0);top:50%;left:50%}.document-setup-progress__step__number[data-v-6ae97a9d]{background:var(--signable-secondary-3-shade-1);color:#fff;font-size:12px;position:absolute;width:20px;height:20px;border-radius:30px;pointer-events:none;top:calc(0px - var(--spacing-small));border:1px solid var(--signable-secondary-3)}.document-setup-progress__step__number span[data-v-6ae97a9d]{line-height:2px;height:

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 133, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	67426
Entropy (8bit):	7.969056417690645
Encrypted:	false
SSDEEP:	1536:k/VdMIT65FGvpO25ICniidxQ4qB9KbFAaR2HS1/GSPWare:Gz+5wvpf7niom4qfKb0W5PNi
MD5:	EB444214EEB5EB406D4FE1DF02C6BC4A
SHA1:	84CCD29D84E2B4A3149D3BA1CFE7AFF5121813FD
SHA-256:	110DCBDB36055ADAB5F2EF0D78C084C6D60CF6EAB2C48EB20A313103938F14D8
SHA-512:	2BFFFE5415F126042BCEF34015659BB6AB069EF9FC7B9DD7225724DFEA78AC7327CFDF94FF9909B34035DC358B457E319228ADBAC4532894EB2E94C1F57A2F5E
Malicious:	false
Reputation:	low
URL:	https://www.signable.co.uk/wp-content/uploads/logo_regatta_great_outdoors.png
Preview:	.PNG........IHDR................Z....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:45 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 24.6 (Macintosh)" xmp:CreateDate="2023-07-04T16:10:15+01:00" xmp:ModifyDate="2023-07-04T16:12:03+01:00" xmp:MetadataDate="2023-07-04T16:12:03+01:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:67a5406c-769d-4655-bc12-5af4ceeb188f" xmpMM:DocumentID="xmp.did:67a5406c-769d-4655-bc12-5af4ceeb188f" xmpMM:OriginalDocumentID="xmp.did:67a5406c-769d-46

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4460
Entropy (8bit):	4.0994222788094055
Encrypted:	false
SSDEEP:	96:t9GC8ymfp1wL2ZGPgYeUObnn2FqLdZp4SKeMs+aDdU:iyywL2ZCgpUObnn2Idj4SXMmZU
MD5:	86C85E2E37F32CE7607D83A76EFCC101
SHA1:	DF33BEC3B2E73957D3B9AF3D8997AD87D392828A
SHA-256:	42556F13B17A22AC683139841B7D1072168895D520549B898C7C5D71D3CC2AE7
SHA-512:	95B1A55BE959ADCB95C97366B087C5D1A74E6DFE637AA0B56FE42EC3373E55EA2ADD556AB7388CFA0161A7400345CF7FC427C369C768B5A1E22E481AB0D9B024
Malicious:	false
Reputation:	low
Preview:	<svg width="28" height="29" viewBox="0 0 28 29" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_576_38)">.<path fill-rule="evenodd" clip-rule="evenodd" d="M13.9465 28.9999L13.959 28.9999H13.9547L13.9465 28.9999ZM14.0453 28.9999H14.041L14.0535 28.9999L14.0453 28.9999ZM13.9038 28.9997L13.9173 28.9997H13.9095L13.9038 28.9997ZM14.0905 28.9997H14.0827L14.0963 28.9997L14.0905 28.9997ZM13.8625 28.9993L13.8715 28.9994L13.8643 28.9993H13.8625ZM14.1357 28.9993L14.1285 28.9994L14.1375 28.9993H14.1357ZM14.1809 28.9988L14.1777 28.9989L14.1899 28.9987L14.1809 28.9988ZM13.8101 28.9987L13.8223 28.9989L13.8191 28.9988L13.8101 28.9987ZM14.226 28.9981L14.2186 28.9982L14.2336 28.998L14.226 28.9981ZM13.7664 28.998L13.7814 28.9982L13.774 28.9981L13.7664 28.998ZM14.271 28.9973L14.2611 28.9975L14.275 28.9972L14.271 28.9973ZM13.725 28.9972L13.7389 28.9975L13.729 28.9973L13.725 28.9972ZM13.6738 28.9961L13.6861 28.9964L13.6839 28.9964L13.6738 28.9961ZM14.3161 28.9964L14.3139 28.9964L14.3

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7783)
Category:	dropped
Size (bytes):	2209127
Entropy (8bit):	5.116891748043195
Encrypted:	false
SSDEEP:	6144:Iz0kPtT1jXZZU6NvHa0GNyJ8FoyJ4uhZfWyJ8dIyJmIlR/11f43b:0T1FGNyJ+oyJ8yJKIyJmb
MD5:	24E7B261134A31E420FBA02CB6742422
SHA1:	893E1EEE6363F04E3DBFB1DDCC13395B649A15D7
SHA-256:	97AEC93C30C95F73784BAEF08D5F3C109B5B0A42F3BA60FFAB55B1635A7ED628
SHA-512:	6BA6965AB46D35049C002B14B0BC94C9FFD53C201A526050C684A67757D363EB59EDF92467F84808E26DD9759F2A54923321022D380E8771C0A01E23E4EA62E4
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html. class="MktRoot". lang="en-us". data-js-controller="Page". data-page-id="Home". data-page-title="Stripe \| Financial Infrastructure for the Internet". data-experiments-loading. data-loading.>. <head>. <script>window.__capturedErrors = [];.window.onerror = function (message, url, line, column, error) { __capturedErrors.push(error); };.window.onunhandledrejection = function(evt) { __capturedErrors.push(evt.reason); }.</script>.<meta. name="sentry-config". data-js-dsn="https://7cd38b0eb2b348b39a6002cc768f91c7@errors.stripe.com/376". data-js-release="8daa97f5721edd63b089882d524ac66931dce7ca". data-js-environment="production". data-js-project="mkt".>.. <meta name="experiment-treatments" content="wpp_a_a_smoke_test_home_2.control_test.ursula.0a2adec1-8a4b-4225-ac32-9a76b03eeced">.. . .. <template class="TrackingSandboxTemplate">. <iframe. class="TrackingSandbox". src="/tracking/sandbox". sandbox="allow-same-origin allow-scripts".

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3565), with no line terminators
Category:	downloaded
Size (bytes):	3565
Entropy (8bit):	5.0375941700493385
Encrypted:	false
SSDEEP:	48:dcjfjrA3fW2Ii6AqTys0A09wl3woqeqT9dE3wYkaBnLE/wz4aJwLa1RHSeuaDEwf:WLQvIiQ0AcyDhWEAYuoWPxwf
MD5:	BEE7E2363BBF444904E54CC78739310F
SHA1:	B98D674F9B7C9B14ECD67BDEC44C68C8D08F3936
SHA-256:	6953836F435B3470DF5BF50A93D78B6393694262D9AE4DEA5DB3FC26E4CCD9FB
SHA-512:	FBF1DE5D327237CD971C1B17FDDD68E5BF9F9A695DD8B47159D28D94492044CC234421C6BE07DE025C5348E86B35D5AFDC709460E976D00FE4083BA23C7CA99B
Malicious:	false
Reputation:	low
URL:	https://signable.app/css/chunk-48100a7b.e3de593f.css
Preview:	.o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100% - 30px);max-height:calc(100% - 30px);-webkit-box-shadow:0 0 20px 2px #222;box-shadow:0 0 20px 2px #222;-webkit-transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out,-webkit-transform .15s ease-in-out}.o-modal__box__header[data-v-f1eb06a4]{padding:var(--spacing-base);border-bottom:1px solid var(--color-border);margin-bottom:0}.o-modal__box__content[data-v-f1eb06a4]{padding:var(--spacing-base);max-height:calc(100vh - 94px);overflow-y:auto}.o-mod

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1878952
Entropy (8bit):	5.214701133408406
Encrypted:	false
SSDEEP:	12288:FmV93YUnGJIFmNzUHUaJEHFpS1vohwqNylJ:FmD3YUGJSmNzUHUaf1vQElJ
MD5:	429AF0543938D7F868196F3D5D4EA72B
SHA1:	873911C1916D2849716E33862EFB2A6CC0DF5B38
SHA-256:	2A16819992ECC104661DF5F912D2F83F16A3FE87570FCD96F1FF070DC5E2014B
SHA-512:	D572B55D9BEA2CCA5E48E6CAA5E0427E37AA8D19E9DFFA19DC0FD1BCA885DE18BFD1C5D5DB7A8080080047E2101F3CB2F8CD071288CD0CE1D1FD5DD8E6379E45
Malicious:	false
Reputation:	low
URL:	https://signable.app/js/app.685e378c.js
Preview:	(function(e){function t(t){for(var a,i,s=t[0],l=t[1],c=t[2],d=0,u=[];d<s.length;d++)i=s[d],Object.prototype.hasOwnProperty.call(r,i)&&r[i]&&u.push(r[i][0]),r[i]=0;for(a in l)Object.prototype.hasOwnProperty.call(l,a)&&(e[a]=l[a]);p&&p(t);while(u.length)u.shift()();return o.push.apply(o,c\|\|[]),n()}function n(){for(var e,t=0;t<o.length;t++){for(var n=o[t],a=!0,i=1;i<n.length;i++){var s=n[i];0!==r[s]&&(a=!1)}a&&(o.splice(t--,1),e=l(l.s=n[0]))}return e}var a={},i={app:0},r={app:0},o=[];function s(e){return l.p+"js/"+({}[e]\|\|e)+"."+{"chunk-00a20ec4":"d702e96a","chunk-1353338a":"9f80a755","chunk-1565c410":"9229aed9","chunk-194b1996":"454a30c3","chunk-1c2a00ac":"be49cfa2","chunk-1e9122a3":"b481b48e","chunk-280daae3":"6c402300","chunk-2d0a473d":"3aa1d29b","chunk-2d0aa586":"d2025c63","chunk-2d0bdf35":"22357f66","chunk-2d0c0c56":"87919c01","chunk-3fbf9bd4":"8a5a0a97","chunk-4182be59":"c01703cd","chunk-45deaaac":"3f89a712","chunk-48100a7b":"a4a30136","chunk-49391346":"e23bb207","chunk-69b2ef63":"8

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36085), with no line terminators
Category:	downloaded
Size (bytes):	36085
Entropy (8bit):	4.993167954642314
Encrypted:	false
SSDEEP:	768:uCQdD1Y9MCMPMCMjMCM4MCMwMCM3sVM4N1dl:0Y9MCMPMCMjMCM4MCMwMCM3sVMsdl
MD5:	46939B7586129D3BC153B84C1133375D
SHA1:	E565BEA732E98B3AAFDF8E078219F178818575CB
SHA-256:	F7F8AA0E1FC89AA3BBB9F92090B6BDC2CC1160AE61D691E8F719DA1162692E72
SHA-512:	D474678B6D5E3A26450FA560BEC8A1AB0B6CF9484136C6771C9D47A5EEC2BD4678A61E53C9FB69FC70238F69FED526A60CBCE2F88D7BC9D2D58B0790867C9EC7
Malicious:	false
Reputation:	low
URL:	https://signable.app/css/chunk-vendors.39eafe1e.css
Preview:	fieldset[disabled] .multiselect{pointer-events:none}.multiselect__spinner{position:absolute;right:1px;top:1px;width:40px;height:38px;background:#fff;display:block}.multiselect__spinner:after,.multiselect__spinner:before{position:absolute;content:"";top:50%;left:50%;margin:-8px 0 0 -8px;width:16px;height:16px;border-radius:100%;border:2px solid transparent;border-top-color:#41b883;-webkit-box-shadow:0 0 0 1px transparent;box-shadow:0 0 0 1px transparent}.multiselect__spinner:before{-webkit-animation:spinning 2.4s cubic-bezier(.41,.26,.2,.62);animation:spinning 2.4s cubic-bezier(.41,.26,.2,.62);-webkit-animation-iteration-count:infinite;animation-iteration-count:infinite}.multiselect__spinner:after{-webkit-animation:spinning 2.4s cubic-bezier(.51,.09,.21,.8);animation:spinning 2.4s cubic-bezier(.51,.09,.21,.8);-webkit-animation-iteration-count:infinite;animation-iteration-count:infinite}.multiselect__loading-enter-active,.multiselect__loading-leave-active{-webkit-transition:opacity .4s e

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	107348
Entropy (8bit):	5.2640638308922725
Encrypted:	false
SSDEEP:	1536:DeqhZjvnk1z3vrsja9cxEf6+6Glby/XJ42qbVTE4wLyPe9VAs:D1hZjKJ1y/Z4rbrwLPVAs
MD5:	E268D36B98F0119A2BB1A15F69FD4FFE
SHA1:	34B0337E983A1C5D46BB4ED4F7876D8AA0557235
SHA-256:	6861A320271E0FDA832800E20D53B858EF409F88D9BC9C1A48953888289D1EA3
SHA-512:	39B42BAC8BE666CBC61E1D8A2DFD03670A677C70AF1F3D147F46CF515FF6E22FC64272297C172C2A2ACEE4DAE5DF841011B963BD0C96FB6C9322159B0EDAD5F5
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/49.f7274268.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[49],{"7nmT":function(e,t,n){"use strict";!function checkDCE(){if("undefined"!==typeof __REACT_DEVTOOLS_GLOBAL_HOOK__&&"function"===typeof __REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE)try{__REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE(checkDCE)}catch(e){console.error(e)}}(),e.exports=n("w/UT")},"w/UT":function(n,r,a){"use strict";var i=a("ERkP"),o=a("maj8"),u=a("jiMj");function x(e){for(var t=arguments.length-1,n="https://reactjs.org/docs/error-decoder.html?invariant="+e,r=0;r<t;r++)n+="&args[]="+encodeURIComponent(arguments[r+1]);!function ba(e,t,n,r,l,a,i,o){if(!e){if(e=void 0,void 0===t)e=Error("Minified exception occurred; use the non-minified dev environment for the full error message and additional helpful warnings.");else{var u=[n,r,l,a,i,o],c=0;(e=Error(t.replace(/%s/g,function(){return u[c++]}))).name="Invariant Violation"}throw e.framesToPop=1,e}}(!1,"Minified React error #"+e+"; visit %s for the full message or use the non-minified dev

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15920, version 1.0
Category:	downloaded
Size (bytes):	15920
Entropy (8bit):	7.987786667472439
Encrypted:	false
SSDEEP:	384:sShqOXQlaSchOwK0uFvRqq3xR/xb5OY3aU/lHS9WE2YeK1os:sShJKaScJK0uFvRvxb5OY3aU/lHkmK
MD5:	3A44E06EB954B96AA043227F3534189D
SHA1:	23CEF6993DDB2B2979E8E7647FC3763694E2BA7D
SHA-256:	B019538234514166EC7665359D097403358F8A4C991901983922FB4D56989F1E
SHA-512:	FAB970B250DD88064730BD2603C530F3503ABB0AF4E4095786877F9660A159BF4AD98C5ABEA2E95EB39AE8C13417736B5772FCB9F87941FF5E0F383CB172997F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......>0.......T..=..........................d.....^.`.. .\..<.................6.$.... .... ..S.!.%c.......\|y...6..;.s#.....x_<..o..........l...J.`p.m..6...h....U.pD...R.J.$...W..`7w...[..qD....<P......J.x.+J-^....va...:.KW..Ph...."....{.W4C....p..1..........CH.....P.............Q%.=.F.....1.%J....d..X..J.<AU..b.N...<l...d...f..^Y..]..&...VQ.<.....F..{.....&{.+J;.... .2P.:.5..?.o.\|....V[t..M..#..d.fv...........4..`.).h..h......@u........4......~.....r.B...p1.P.T..<....r....Y..8...GQ1.t.....%..-Wh..:W.....1l-...@..hL}...lN.._.j...D`..sn.=(...W..?.Z..p.52..H...X...)..CJ...V..7.....<\|..i...{...R.M+[..\|..x-..M3...~!\.l6}.T.o.R'$.)..-.W.T....A...5?.{.2.bR.../....*l..;...{..I>.n..MJ.2........U&. ..(L]].%P.$..p59.LD.f.........V.....z.5~.2\......#.4....9_....%wp.OU.0.....CK..../.x. ..A2e...@...(.i..f./.....`1.......!......@....0 vbt.e v./!...N=>:..A...(...f....?.....iH.F..!k.6.O6S..54.^c..2.G.?6....)b......lv.,h....Y.}.?..uk....L.4d.g..6.\.1u..

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 145, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	43286
Entropy (8bit):	7.957793332877362
Encrypted:	false
SSDEEP:	768:e3ZUSySM8iNNU6yqh2ApVpbZSPyIwIsp8ge5X6vt4zGsXAvWMQF+:e3hyr8ifdJ3VdUPyVmT5Et4SsXS5QF+
MD5:	CA9B8D0CD534F6233E0DAE0970AC7AA8
SHA1:	8C1E36E26B67BBC6FF182938E148F2D701C7D7C1
SHA-256:	9EA5EBF8FB430CAF509E4482009DF894F80C4CB243679BA12FA1A98299C59D8E
SHA-512:	B9CFE91BB1DD28AC253ACDECA73CAE1AF9ABAF971198F7EB84DF876DF1D956AA6105A2A1123E5785428822AF80F97BD43DFFF0E6155960D414F5325A95871FF7
Malicious:	false
Reputation:	low
URL:	https://www.signable.co.uk/wp-content/uploads/logo_allsopp_allsopp.png
Preview:	.PNG........IHDR...............kE....pHYs...%...%.IR$.....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2def, 2023/02/02-12:14:24 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 24.5 (Macintosh)" xmp:CreateDate="2023-06-19T13:37:12+01:00" xmp:ModifyDate="2023-06-19T13:43:12+01:00" xmp:MetadataDate="2023-06-19T13:43:12+01:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:e98c0047-4f49-4d09-9b8c-340006aca8bb" xmpMM:DocumentID="xmp.did:e98c0047-4f49-4d09-9b8c-340006aca8bb" xmpMM:OriginalDocumentID="xmp.did:e98c0047-4f49-4

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3065)
Category:	downloaded
Size (bytes):	204634
Entropy (8bit):	5.553233571813659
Encrypted:	false
SSDEEP:	3072:uMOStJ7HC8i4Ttzlw1yptkM/3LpLktV9eQdY6Zvl5v:/RHvNTowtzktV9eUDZtZ
MD5:	5E1FCA5C6201B0820397C4F172AFFB53
SHA1:	31B01076E6F3A4EB03480631E57CB447AED37B2B
SHA-256:	B0E9B5155DC14601B0C697CA09046F04F195DDEB80FC9841C0D711F5682C7107
SHA-512:	C9190B7E4110E02F2AFA967DBCC3606447381FC10C51C2F438E1882A518F23A988F254FAD89469064D084544551C986B5115B6613D7FFCF88F0F256C5F316E59
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-P26882S
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"14",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__d","vtp_elementSelector":"body \u003E main \u003E div.row.blog-options-container","vtp_selectorType":"CSS"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"gtm.timerEventNumber"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"gtm.timerInterval"},{"function":"__jsm","vtp_javascript":["template","(function(){return ",["escape",["macro",4],8,16],"*",["escape",["macro",5],8,16],"\/1E3})();"]},{"function":"__u","vtp_component":"HOST

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 18 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoItalicRoboto ItalicVersion 2.137; 2017Robot
Category:	downloaded
Size (bytes):	130872
Entropy (8bit):	6.463060688940871
Encrypted:	false
SSDEEP:	3072:k60bBiQTD/w00tEXlVT2iGMWdmTFrpy/GmHZNdC5wlLc:kfB/aEBthWuiGm5fCylLc
MD5:	9B6488BDC5881A71F018252AE53CC864
SHA1:	7A1BC639173979E30CFFF371155BACD085229650
SHA-256:	CDD2575CF20113161B945CA72ED3F5D0B2B8A5FF81CFE235B75B3A783BE408B0
SHA-512:	6D95CA699BAED936B8DA5B68216AA44CC7AD01719DB13135C0C87B4760148A2AA112CC612AE6CB2F639FDEA9B6FDCC6106CFC7643D2187616ADC05E53AC27494
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-content/themes/Signable2019Theme/_/fonts/roboto/Roboto-Italic.ttf
Preview:	........... GDEFp.m....t....GPOSd^.....`..N.GSUB..g....L....OS/2...R.......`cmapv...........cvt ..-....h...Rfpgms......h....gasp.......h....glyf..1....,..zXhdmx............head...e.......6hhea...z...h...$hmtx=..\........loca-.....{.....maxp......{.... name..:.........post.a.d...H... prep..]....$...D...d...(.............q......9........................EX../....>Y..EX../....>Y......9......9......9......9..........9......9.......01!!.!.......!.5.!.(.<..6......................}.w...x.^.^..^...C...........@......9.........EX../....>Y..EX../....>Y.....+X!...Y......9../01.#.3.6676.....&.1....O.:0.<<^;....../=..<./;.:.................../......9../........01.......#....SnP..SnP..n...............R...............EX../....>Y..EX../....>Y..EX../....>Y..EX../....>Y......9\|../......+X!...Y............../.....+X!...Y...............................01.#.#.#73.#7!.3.3.3.3.#.3.#.#.3.#...........................4......f....b....`...`.....f.#.b....J.0.<...+.p..,-..9...EX../....>Y..EX."/..".>Y

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 610 x 118, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7193
Entropy (8bit):	7.81772701103758
Encrypted:	false
SSDEEP:	96:PPSwknmWIDKDHJVLaj39smQbRIQ3euUFNO7GSxHNhpDkfh3pjxKkuZZXSRcPWBkt:HSwkntLW9PmenLgvFmZjKkusc+BB6DfH
MD5:	5C322FA86597B500061C1AB1FBB9BC1E
SHA1:	73DD13F9B202246376D695B538DD74F2AECB9D76
SHA-256:	5465F160D2A841E848B341D049A8098A3353E451E3F0061149E22F44CACD2E55
SHA-512:	631382175A12896D0ADB1370319B7AD5B265D1FC6FF7AF61DDE01DA6B7CFCA689985548BFAE57DC0FF6CC3CE0ABD333A7B34E194DEA6DD204EF35A7FC746CA9A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...b...v.....k..B....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:45 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 24.6 (Macintosh)" xmp:CreateDate="2023-06-29T12:18:01+01:00" xmp:ModifyDate="2023-07-04T16:07:32+01:00" xmp:MetadataDate="2023-07-04T16:07:32+01:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:7fc4a4cc-e866-4be3-bd18-3f299cefbe98" xmpMM:DocumentID="xmp.did:7fc4a4cc-e866-4be3-bd18-3f299cefbe98" xmpMM:OriginalDocumentID="xmp.did:7fc4a4cc-e866-4b

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 143, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	70313
Entropy (8bit):	7.99425945018007
Encrypted:	true
SSDEEP:	1536:0Eb5l0zT/Qc4rmcc6UZNPZR6iXFASnbP07qrQZcoQxY:3b52Hfcc6UZNPZR6i1AgbP70cxY
MD5:	AA2F479EADFB1AD825C365C843563D6C
SHA1:	1D3848A6B144083B4606AC4F32957AE6A6483857
SHA-256:	2627F3C8A4E374C7EDD6444DF104FF7F6BF697583FCFBB7BF06032E23979B536
SHA-512:	C26728F6D46C174A4B9601043425C7FAB1DF3ADD9D19AA921BB3FBA616C8EB58CA0FD313FF34BBE4F1DC3484F14FBEB87B479AEE18C8DB49D7292E047BE8E17B
Malicious:	false
Reputation:	low
URL:	https://www.signable.co.uk/wp-content/uploads/logo_university_of_edinburgh.png
Preview:	.PNG........IHDR...X.........&.b....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:45 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 24.6 (Macintosh)" xmp:CreateDate="2023-07-04T16:10:13+01:00" xmp:ModifyDate="2023-07-04T16:14:34+01:00" xmp:MetadataDate="2023-07-04T16:14:34+01:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:16465c0c-62ad-4a67-986f-b553551db6f4" xmpMM:DocumentID="xmp.did:16465c0c-62ad-4a67-986f-b553551db6f4" xmpMM:OriginalDocumentID="xmp.did:16465c0c-62ad-4a

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3602), with no line terminators
Category:	downloaded
Size (bytes):	3602
Entropy (8bit):	5.0104714826423935
Encrypted:	false
SSDEEP:	48:dcjfjrA3fW2Ii6AqTys0A0HPw0ct3w0sBOJpd3xpYkagUknLg6wz4a8h8Ea8VnRv:WLQvIiQ0Ac0/DnYJJ2Jf
MD5:	36E25EE60D7406FAFE933A9104066D0C
SHA1:	9A275C90DC68EDC6213A900363D054E79591F209
SHA-256:	4E79A17F485813C03D00A90D0EC8EC37D738FAA619C05F44EA9EC137ADB54029
SHA-512:	0551BFA732C6FA6708A83018030CCF514A46BACB14146C04E6726FBD294CCB3C50F43680257AA3C02CEC7748D465AFD6AFBF116E1AD0A07D1B5179A9B0784081
Malicious:	false
Reputation:	low
URL:	https://signable.app/css/chunk-c63e4446.87239537.css
Preview:	.o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100% - 30px);max-height:calc(100% - 30px);-webkit-box-shadow:0 0 20px 2px #222;box-shadow:0 0 20px 2px #222;-webkit-transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out,-webkit-transform .15s ease-in-out}.o-modal__box__header[data-v-f1eb06a4]{padding:var(--spacing-base);border-bottom:1px solid var(--color-border);margin-bottom:0}.o-modal__box__content[data-v-f1eb06a4]{padding:var(--spacing-base);max-height:calc(100vh - 94px);overflow-y:auto}.o-mod

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 2768, version 0.0
Category:	downloaded
Size (bytes):	2768
Entropy (8bit):	5.57035950025973
Encrypted:	false
SSDEEP:	48:nu3H8bnruWHGSCE3K8KpF4yMmHaGWZw8+oPqsmhgSlqHnvezWPbp2Dil:nOH5dE3/OF4yMmHaGGw8VSVJSlPV2DG
MD5:	9F8EEFEA32BF3A39E0E343C69FF104B9
SHA1:	60C77DBF5D4BC241C2EF35C628A62958B47B2459
SHA-256:	7664AF5BEA931177776EA1C2B9EE8A6D1B1A29DD745EAECEF21BB4DA710255F5
SHA-512:	6BF64140A2B6213104FA04E5EB67BD4FE852AADE2388718CC34BAD6DA11816FFA58F1BCD024EAEAC91861D63055C5D6DF42935CD2E37666359DA64A10B524171
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-content/themes/Signable2019Theme/_/fonts/icomoon/icomoon.woff?t7sq8w
Preview:	wOFF........................................OS/2.......`...`....cmap...h...\...\..gasp................glyf..............U5head...h...6...6.NE2hhea.......$...$....hmtx.......,..., ...loca.............@..maxp....... ... ....name...(.........J..post....... ... ...............................3...................................@...Z.....@...@............... .................................@............. ...Z......... ...Z..................................................79..................79..................79.........I.%.n.L..%........#"&'..'&'..'&'..'..5467>.7>.32......................32632............%...*..4.(I%.2.$''J ............2............h..,pN....D.....1.. .....2............ I''$.2.%I(.4..)...... ..1.....C....Np+..h................>.B...{......."'.&4?.62...62........X....X.._...././..._.....Y.......^...../..^.........>.`........%.."'..."/.&47.62......._.........._............^.../....^........X...... .....`.....5.;.B.H.N.T.Z.^.e..."&=.463!.%"....32654&....3!...#!"&5.463!.

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6462)
Category:	downloaded
Size (bytes):	6514
Entropy (8bit):	5.207914808894555
Encrypted:	false
SSDEEP:	96:rrskWRsc7dAY2zdI50voa83hGEYbhhhvkLdXvaQTB/wKiMNu1s:cdRsXY8loacQECvcXzluy
MD5:	081290E461439EEFEB8094ECCDE3DA48
SHA1:	EC432FB7A6A7D50D08C4CCA3AA25C7A9EF10ACD7
SHA-256:	32D15ADEB3FA44F241C56934B02B86D3A3E421ADF80BAEAF25B64F073FA2D395
SHA-512:	38AF7F2773C24A8AE27693C36104DAD745929A8AA45EB21C4CF6D36A2FAE109516ABF4919B9EF152BA54422B4FDB03A64CE923B7690AA1A21ED2D95AD1C3EFE4
Malicious:	false
Reputation:	low
URL:	https://signable.app/js/chunk-4182be59.c01703cd.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-4182be59"],{"0920":function(e,t,a){},"355c":function(e,t,a){"use strict";a.r(t);a("7f7f");var s=function(){var e=this,t=e._self._c;return e.apikey?t("VModal",{attrs:{name:"addedit-apikey-modal",loading:e.loading}},[t("h2",{attrs:{slot:"header"},slot:"header"},[e._v(e._s(e.$t("companySettings.developer.apikeys.edit")))]),t("div",{attrs:{slot:"content"},slot:"content"},[t("VForm",{ref:"form",attrs:{onSubmit:e.validateForm,"data-vv-scope":"apikey"}},[t("div",{attrs:{slot:"row"},slot:"row"},[t("VGrid",[t("div",{attrs:{slot:"gridItem",type:"12"},slot:"gridItem"},[t("b",[e._v(e._s(e.$t("companySettings.developer.apikeys.name")))]),t("VInput",{directives:[{name:"validate",rawName:"v-validate",value:"required",expression:"'required'"}],class:{"a-input--error":e.errors.has("apikey.name")},attrs:{type:"text","data-ec":"add_edit_api_key_modal","data-et":"api_key_name_input","data-vv-name":"name","data-vv-as":e.$t("companySettings.d

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7711)
Category:	downloaded
Size (bytes):	278089
Entropy (8bit):	5.569788157932913
Encrypted:	false
SSDEEP:	6144:34FR+vWIMAfDtKOkrH9eUWD4KgB+piujItNv:IiOIMAfhOKgB+piL3
MD5:	78CF298C1ECB876DFF3A11C6409BD570
SHA1:	900CCA0C6F1CE79B62294FCB56F540AD0457720B
SHA-256:	7C83C430F557D16344A9D55661EB4FDDDB5861BE5BD134EEBFB94E0D592F8AA2
SHA-512:	EF9FCD040056C6C48E4C1FC62A3849864C16CDC43D874B7C3B236F3AE274147D790BBFE2FE16EFB742141F157AFF663D3E57E4532AA630ADB406D441CE425F0E
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-4XE2VYSQ35&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"6",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"c"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":"google.ca"},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":24,"vtp_rules":["list","signable\\.co\\.uk","signable\\.app","signable\\.help","^signable\\.us$"],"tag_id":17},{"function":"__ogt_referral_exclusion","priority":14,"vtp_includeConditions":["list","signable\\.app","signable\\.help","signable\\.co\\.uk","app\\.signable","signable\\.nl"],"tag_id":19},{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELE

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1068 x 625, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	74559
Entropy (8bit):	7.975820509464517
Encrypted:	false
SSDEEP:	1536:wx6XtbijludzQLHBYChCr3TH78SHETrP5V3sJY0cJk9LqoAoP:zXFylWQbBYCsr3TYSHET7XxkqohP
MD5:	4920052DBBD3A46EC807142625E77C7F
SHA1:	B7AA21A93CF7DB98558A0212F6ACF754D8DEEC29
SHA-256:	54DDD0C955AD00723A0476B26964A698A9434F3B029C2C430B68EF09EBF150CE
SHA-512:	2D2B8CA7225EC035DE2B41CF9586085400440ABDF62F2AA16D10FCF125089E5830B1A4774475A2B9D941EAFDEB93A25689C89C523E3F602F4C49D5A1A37377C3
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-content/themes/Signable2019Theme/_/img/backgrounds/bg_app_screen.png
Preview:	.PNG........IHDR...,...q............gAMA......a.....sRGB.........PLTEGpLFFF!!!'''......(((...???---$$$...[[[........................]]]......ecb......^^^OOO............999.................................M.......................!......................./..2........*................................5.....)..%..$........>..D........,..I..F.................A...........:..'.............................;....................+........&........7........8.....8..s........................................}}}......L..................xxxrrr...L...lll....j^........P...a.T..%.................O....................[.....%..h........@..[.....ccc...{........k..+..............2...........ZZZ.........5....PPP........N.CeEEE.....0..bt.......:::.WJ{..w..9v...L.>-..\.........m-..///...D..?..H....$$$.......w......d.....ll..........GpL.A......tRNS....................&l .j.-aE....Y....................................................................................................................

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450)
Category:	downloaded
Size (bytes):	224764
Entropy (8bit):	5.379647370757842
Encrypted:	false
SSDEEP:	3072:PW1s9pmHgwV0qimdMw2dGGYbw8yik6Y/4:PW1opmHgw3iu2U0F6Y/4
MD5:	2A8085A6E35DF0D52338B3148CF33F20
SHA1:	0CE3CC2A29BE11C04DF4E53CBDACD17F404907CC
SHA-256:	5BDAA2D2FAC01A05DEE8737EC7B70AD184651961D3A3998C1EFA7CF147AE1BA1
SHA-512:	22A4710DB6CD83DC6DD0F5BFACB7062AC26FB6597279FF32FE52726B26B804387DFEA7EC3FD842720BD2D77DD6AD9C71B96348AACFEB175F51B271C2B5C423ED
Malicious:	false
Reputation:	low
URL:	https://script.hotjar.com/modules.2472296d2d26f0040059.js
Preview:	/! For license information please see modules.2472296d2d26f0040059.js.LICENSE.txt /.!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_recording",TAG_RECORDING:"tag_recording",HEATMAP_HELO:"heatmap_helo",RECORDING_HELO:"recording_helo",REPORT_USER_ID:"report_user_id",MUTATION:"mutation",MOUSE_CLICK:"mouse_click",INPUT_CHOICE_CHANGE:"input_choice_change",KEY_PRESS:"key_press",MOUSE_MOVE:"mouse_move",RELATIVE_MOUSE_MOVE:"relative_mouse_move",CLIPBOARD:"clipboard",PAGE_VISIBILITY:"page_visibility",SCROLL_REACH:"scroll_reach",SCROLL:"scroll",SELECT_CHANGE:"select_change",VIEWPORT_RESIZE:"viewport_resize",SCRIPT_PERFORMANCE:"script_performance",REPORT_CONTENT:"report_content",INSERTED_RULE:"inserted_rule",DELETED_RULE:"deleted_rule"})},6939:function(e,t,n){"use strict";n.d(t,{f:function(){return f},W:function(){return g}});const r=Object.freeze({LIVE:"LIVE",REVIEW_WEBAPP:"REVI

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 31174
Category:	downloaded
Size (bytes):	12484
Entropy (8bit):	7.982210764694567
Encrypted:	false
SSDEEP:	192:KsAHfsCKBBtl8WAREnfE6/7JlAA7elZ/+LTvcOKjo/7oKRDCjrk6WrGwG8SmYEQ6:pAwtl8WXffJ+A7u/Yv+jozDs1wHSmYEJ
MD5:	571F18BADCB3FC0C22EAC40A9D5A5B7D
SHA1:	20DE5F45D279112FA04DD19C9355B684C34ABA0E
SHA-256:	A8A5E6E04415582960B9F1A6E5FFCAC95B727AD680ABF3B7C3C4A5C27793ADE9
SHA-512:	DE66B9FE848667D4B7DDAAB24A0B5AED0FEF26E7E738318F396CD42B5ECD993E85B7BB21F705AE1EF9A17A608D8137E3233629003B29A15BA6798C2968E6EF0A
Malicious:	false
Reputation:	low
URL:	https://beacon-v2.helpscout.net/static/js/main.c0baafe3.js
Preview:	...........}m..F......&..1.<#..v...;..N...{c.%.4..P?..w.......33{_mfLC..S...E...%. .d.Jz...Zz...%M..,...:.....tK7....a9.aj.K.r...S%./.z59:........R.Y}....:...e..".<.q\|.s'}y..SnF.IU].q=:fz".....y..u.K.F..lOy.Q.bOy.Q...S^l..=..f....U-..&WavSN.h...q..[..^LM...Kyu.Ez...dV.y..m!.ET...G.7..$.i.,.L.....M;..F...\|.....?._..).......^J.........g.u....S.q...J..J.......-.\|.eD..P..v.,t.j9..MD9.K...7'`Z..\|QFK6I..my.M....7}.f./.Y.>....E.P.Y....)..nH).......ky..r..........8c..B..R>......yX........r..Qh.CCQ........A..G..Y..K....\|^/.....E.H.A..........TT.P6.50.g.u.v...G7Lg2.(z.`...i.'2S.kl.J[....n.(.^.i-H<a..>fr.l....F.2..\|.l.p..v....v.:...PV..".GBe... d.&E...Y.<ct...U..:..M#....f-.<J....z.....M..Z.V+.''.XR.V....._.W.b.d.qM_Q...,EM..2\WQg..l...uAs.;..9.[...N@W.M.f.:.'..Q.....n......f..i..C.2^Lf.GA.e.e.".P.t>.."?...\|........+'.N.b..h...../lR...h.C..Dr.O3u}..]...y_...I..x.fr..R.$.VYt=...4a/.<}.MY..XL.M.......e4g..J.c2...d.<.\.U}...M8S/....iV=.W.\|.M...h..

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1560
Entropy (8bit):	4.213254479443993
Encrypted:	false
SSDEEP:	48:8094j1baQKkhtwPcfnT9NTBlsW17l9DbR6YX:9Kn/hePcr9N3Ft
MD5:	AFFE0B2C58FDB9E3634F9F97D6D52F30
SHA1:	A7F7B772A90E9CF076CB1868E60756B8C267664E
SHA-256:	40EFF4F091BE0F29BDF58C4B7933CCB3057C9FF124E232D26097510D397B3436
SHA-512:	B8A0427C19F22DB9683318A0257BBB4C10D17A53DE86F6FAA99739A9042396147E69F3A3CB532C429AB6D894B2309302179E1826B9B6D3877FBFA9C93396E994
Malicious:	false
Reputation:	low
Preview:	<svg width="105" height="139" viewBox="0 0 105 139" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M-19.45 136.154C-22.2283 132.431 -24.4007 129.251 -25.4595 127.612L-25.6286 126.865C-29.6194 119.964 -32.2616 112.358 -33.4062 104.454C-34.6586 95.8057 -34.0902 86.9908 -31.7374 78.5747C-25.9531 58.3727 -8.81323 41.317 11.7546 36.3683C19.1276 34.6355 26.8525 35.1772 33.9116 37.9218C33.8292 41.6893 34.2142 45.4525 35.0578 49.1252C37.3945 59.3416 44.0701 73.4932 54.1207 78.206C58.1324 80.0968 62.8213 79.7901 66.0114 76.4887C70.3428 72.0233 69.5598 65.5089 67.409 60.2427C62.5805 48.3019 51.8617 39.2741 40.3844 33.9213C40.8494 30.1256 41.9435 26.4337 43.6215 22.9974C48.6743 12.7497 59.2487 5.6975 70.9282 6.4899C83.6187 7.39161 92.1718 18.5009 99.3297 27.798L99.485 27.9997C101.91 31.1593 106.283 26.7507 103.88 23.6264C95.8373 13.1909 86.4321 1.98131 72.4492 0.433719C60.8063 -0.86063 49.161 4.59083 42.0956 13.7942C38.1466 19.0145 35.5473 25.1288

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 18 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-Regularhtt
Category:	downloaded
Size (bytes):	129584
Entropy (8bit):	6.454639474551763
Encrypted:	false
SSDEEP:	3072:By2g0L/sAQRuzzlPrvR39RB1zMolYE0B5YvPliLg24flLc:1Omp/TnnliLg2wlLc
MD5:	AFE8EACFC0903CC0612DC696881F0480
SHA1:	BA879317ACDC045B8FA78CB8F948650627D0477C
SHA-256:	7277CFB805DEF6410F317129B8E1F78BDD47D1A4E24C233077D06E88A36E57AE
SHA-512:	F6F135748E4D5AFE4F8F05A4A07A51CEEAA5CC250C62305769661C9C61277D961678B03EF1848B660DDE2980028350EC5CBE1090BFC8D7A41E55E64C9693E76B
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-content/themes/Signable2019Theme/_/fonts/roboto/Roboto-Regular.ttf
Preview:	........... GDEFp.m....l....GPOSd^.....X..N.GSUB..g....D....OS/2...........`cmapv...........cvt +......x...Tfpgmw.`....p....gasp.......`....glyf..p6...,..u`hdmx............head.j.z..~....6hhea.......p...$hmtx..3r..~.....loca.j....v.....maxp......v.... name.U9........tpost.m.d...@... prep.f.....,...I...d...(.............q......9........................EX../....>Y..EX../....>Y......9......9......9......9..........9......9.......01!!.!.......!.5.!.(.<..6......................}.w...x.^.^..^.......{.......0...EX../....>Y..EX../....>Y.....+X!...Y......901.#.3.462..."&.[....7l88l7......-==Z;;........#.........../......9../........01..#.3..#.3...o.....o...x...........w...............EX../....>Y..EX../....>Y..EX../....>Y..EX../....>Y......9\|../......+X!...Y............../.....+X!...Y...............................01.!.#.#5!.!5!.3.!.3.3.#.3.#.#.!.!....P.P...E....R.R..R.R..E..P....E.....f....b....`...`.....f.#.b....n.0.....+.i...EX../....>Y..EX."/..".>Y.."...9..................+X!.

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5565)
Category:	downloaded
Size (bytes):	5617
Entropy (8bit):	5.155242173640809
Encrypted:	false
SSDEEP:	96:JINF3TQTKpKZImNzdhrBgfPMcr61o4vZ6+DmTU/Tgg5W2x:JS3fi2f0cr69iTuTgBG
MD5:	630DB75A8A48B15DA0FFB0D573F47923
SHA1:	2F20D45DCE22D47C27D0884D48CEB20B76A38D68
SHA-256:	8BD85994F6B5904813318DF7BEB9B431AB2B28488D1166311414BD931391AA5C
SHA-512:	0172104E88D81C60A2EB80EF51AEF1741339246378BCE1A9653FFE42C595F0AA89641C498EFD2F11ACF994B6F03B07F0D1D6760B94ADD7EB3FA17B0A5182C830
Malicious:	false
Reputation:	low
URL:	https://signable.app/js/chunk-e2d611fa.80afcc3a.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-e2d611fa"],{"0920":function(t,e,a){},"7b7a":function(t,e,a){"use strict";var s=function(){var t=this,e=t._self._c;return e("div",{class:t.classList},[e("div",{staticClass:"o-modal__box"},[t.loading?e("VLoadingSpinner"):t._e(),e("a",{staticClass:"o-modal__box__close",attrs:{href:"#",tabindex:"0"},on:{click:function(e){return e.preventDefault(),t.close.apply(null,arguments)}}},[e("FontIcon",{attrs:{name:"times"}})],1),t._t("header"),e("div",{ref:"content",staticClass:"o-modal__box__content"},[t._t("content")],2)],2),e("div",{staticClass:"o-modal__overlay"})])},o=[],n=a("bd86"),r=(a("7f7f"),a("8b9a")),i=a("f46d"),l={name:"VModal",introduction:"A pop up modal.",components:{VLoadingSpinner:r["a"]},mixins:[i["a"]],props:{name:{type:String,required:!0,note:"The name of the modal to pass to the store."},size:{type:String,note:'The size of the modal (can be "small")'},loading:{type:Boolean,note:"Toggles display of a loading spinn

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1584)
Category:	downloaded
Size (bytes):	1636
Entropy (8bit):	5.151603605748742
Encrypted:	false
SSDEEP:	48:lDTdfMzfA+NVDpIcIVFeuAGX9xZztKx4YUUF3y5yhbHLgfVL:T4r1IcyF0GXDWwylgdL
MD5:	FE9AB0F9135D67EB6DB304C932F631CB
SHA1:	88222F2BB13DEA2F386A1D0C917B78DF5DD65855
SHA-256:	0737269F59C6C86F8B4CE5621DC45CC70D9A9CA35C6E049D8C276924CD7CAF9D
SHA-512:	513B8A192E91ACE278648FCC36DF9076DE64760A8FAFF15A00CD964934ED768419D46E7EFDA46A5B474359C5B66A5B94EA0A0355D6733DBBCBDD1F9B4157E65F
Malicious:	false
Reputation:	low
URL:	https://signable.app/js/chunk-2d0c0c56.87919c01.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-2d0c0c56"],{"42ce":function(t,e,o){"use strict";o.r(e);o("7f7f");var n=function(){var t=this,e=t._self._c;return e("TWModal",{attrs:{title:t.$t("teams.deleteTeam"),loading:t.loading,show:t.show},on:{close:t.close}},[e("div",{attrs:{slot:"content"},slot:"content"},[e("p",{attrs:{"data-hj-suppress":""}},[t._v(t._s(t.$t("teams.removeTeamWarning",{teamName:t.group.name})))])]),e("div",{staticClass:"flex w-full justify-between",attrs:{slot:"controls"},slot:"controls"},[e("button",{staticClass:"tw-button",attrs:{type:"button",id:"group_delete_modal_cancel","data-ec":"delete_group_modal","data-et":"btn_cancel"},on:{click:t.close}},[e("span",[t._v(t._s(t.$t("functional.cancel")))])]),e("button",{staticClass:"tw-button tw-button-error",attrs:{type:"button",id:"group_delete_modal_delete","data-ec":"delete_group_modal","data-et":"btn_delete"},on:{click:t.handleButtonDeleteClick}},[e("FontIcon",{attrs:{name:"trash"}}),e("span",[t._v

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7310)
Category:	downloaded
Size (bytes):	7362
Entropy (8bit):	5.161814868573242
Encrypted:	false
SSDEEP:	192:K+yURmV95cVuS0ajOBnZ+JxhtDXrxIXBq+:KhrX5cVuQOBGhr+s+
MD5:	50B1732C7D1C69468F5BF81833C3A105
SHA1:	A6AD43ED4CAC7F77B54FDA94F8B42DB78248A258
SHA-256:	8799F57068CF7033C1FD78F9E2C4F6A9B26748DB4C161103F6683EE22D27CBB5
SHA-512:	A9F91D2F1B0CC95BD4F74FF6F5D439D934B9ABE281529FA4C15D674DAD8AEF1E50F01CA9061000B92E4F93DE666851D30DFD3F25F1C01647A89D6C8B9F909E26
Malicious:	false
Reputation:	low
URL:	https://signable.app/js/chunk-721f270c.bd48f7b1.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-721f270c","chunk-2d0bdf35"],{"0d33":function(e,t,a){"use strict";a.r(t);a("7f7f");var n=function(){var e=this,t=e._self._c;return t("TWModal",{attrs:{title:e.$t("groups.createTeam"),loading:e.loading,show:e.show,"allow-outside-click-to-close":!1},on:{close:e.handleClose}},[t("div",{attrs:{slot:"content"},slot:"content"},[t("div",[t("form",{attrs:{"data-vv-scope":"group-create"}},[t("div",{staticClass:"mb-4"},[t("label",{staticClass:"mb-1 inline-block",attrs:{for:"group-name"}},[e._v(e._s(e.$t("groups.name")))]),t("TextInput",{directives:[{name:"validate",rawName:"v-validate",value:"required",expression:"'required'"}],attrs:{id:"group-name",placeholder:"e.g. Finance",value:e.group.name,"has-error":e.errors.has("group-create.name"),"data-ec":"create_group_modal","data-et":"group_name_input","data-vv-name":"name","data-vv-as":"name","data-hj-suppress":""},model:{value:e.group.name,callback:function(t){e.$set(e.group,"name",

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	163
Entropy (8bit):	4.962341710673414
Encrypted:	false
SSDEEP:	3:tRBRNqN/CN+lFAATcvUYD7SLvDmJS4RKb58ZSFuHswFltfOA9DoHFmA8cXKL8v:tnr2nli/UYDumc4slvI9Ht39Dol3ZKS
MD5:	534F84977D4313AAA04BF351F69F011C
SHA1:	FA4B28BB4D9C4018ADF063B68955DB75E4901364
SHA-256:	D1F5A483F6555A5B4AE5616DC757CD4C5A12BDBA742723834B3EBD967E723F38
SHA-512:	D5B29637791C590573C4E82B884574EBB6735F49C2557E0D6FE99C484947EBA14F723D0CE1D08012D79DF5B8EE07207617261DB829B1A950DF0C715A62B4D61E
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-content/themes/Signable2019Theme/elements/blocks/expanding-panels//_/img/caret-down.svg
Preview:	<svg width="13" height="8" viewBox="0 0 13 8" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M1 1L6.5 6L12 1" stroke="#263640" stroke-width="2"/>.</svg>.

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	12846
Entropy (8bit):	7.962562270234893
Encrypted:	false
SSDEEP:	384:9lF7DWzZvzyq91YKTQkLDZnp04JSnoZr5:Z0ZS0d3zZ9
MD5:	429564C45BD8D612CE63BE65239E4B34
SHA1:	5C10147CC053FFCF4E23AFE6C60EC2CE5654488C
SHA-256:	99FA7021B3C835BE6795C465BE09645C00E57931378C287768D8BB73817B4364
SHA-512:	2631A58C3D71E587D0A055B052090BEC95F2F119EECF5E8D829D6C858B4FB7CAC0ACDE68828B897724AABD78AC89CD5E24E328D47D4A8189BD1412C3878DCF85
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............R.l...1.IDATx..y\|.gy.c..ht[..C.r9..s_....8..(K.,..KK..@)G.[.(.lp..n.R.-.R...$1q..b'....)...w...;cI.d.H....\|dY....7......P#wv../.@3..\|......h..=.........]..R@......0.D.A`..g...YG.cK..T..{.%... .ze.k...X....S.... ..9.B......T......,.....j.0.s.....k...U.z.........!.T...q...<...b..LQS.3......6.l.............=.H.O!..i`7."r..9.."......n..[...+.+.&....]$,.y......>v.#.L).K..._AnV/...n.6.]UpO.....v......k.w."%...[2%.^....l.nDzfe.....qz.x.x...0..P..T.s.:.=.'p.p)..{.%.....F.....GT.BT...4sZ..w ...b..L.C..?..E...<.,....U....^.P..V..^....B.9HD.._.f.;..]...f.._c.H...O..3.)sE(o....F........_...3.....b......L.~=..Q.+...C..bH...Bz.b@YBy).......o...{hU...c......PV.P>.0%.......tg..5T&.x....O.(.Q....).:......b...I..).;.1...%(m......?.v ].5J...&....^.JW....u....._..U#'.......;.T..4.@..#...O.1.5..............S&.:...A...(_..w.{.c@I.D...S&..._....b......F~.{)!..4.@....=....F.q..<2..U.JP\....._....E.S!......+..Jc*Z.F.....B).w.......

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34592)
Category:	downloaded
Size (bytes):	35730
Entropy (8bit):	5.226602105438823
Encrypted:	false
SSDEEP:	384:C1NpkslDFLmy+/XFsjIPd3w1jr21lKJCngCZyzI56ul6OY9g4+7mZ9kvnTLvPfUz:aLk6q/2jCBlLW+HsESrp
MD5:	40097CDF413C1F1F303C66489742CB44
SHA1:	210051D7B3A5F9E2BB2400793350C0C9C0F9467D
SHA-256:	D19B7AF86A35DFDA3A91657FB0F532541AD1BF34B75C68BB9992A374CD5FD5F2
SHA-512:	9C551182ECAA04E85FD566A2BC5A9B7F16D9993940A0AB0617740EBFFB45BD5B9EC889B70C09A2F2DAB7C5CB1275DB028D6C37E67EA942614AE0D50FB1F4B74B
Malicious:	false
Reputation:	low
URL:	https://public.profitwell.com/js/profitwell.js?auth=a861c1c403b5b01660dfb23936a58d9b
Preview:	!function(){"use strict";var t=function(){function t(){}return t.prototype.trackAnonymousCustomer=function(){},t.prototype.getAnonymousId=function(){return null},t}(),e=function(t,r){return(e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])})(t,r)};./! ****************************************************************************. Copyright (c) Microsoft Corporation... Permission to use, copy, modify, and/or distribute this software for any. purpose with or without fee is hereby granted... THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH. REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY. AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,. INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM. LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 412 x 220, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3601
Entropy (8bit):	7.913488261896689
Encrypted:	false
SSDEEP:	96:FEgW0iMjyPH4n/IhhbGnsozgnP++L5vgEl:FEpgQYn/G6zW2MtgU
MD5:	451A3CB7E50709A5DC98F55727F57D13
SHA1:	579E6B9C768630D67F21860103BBA5AE2AB4FB32
SHA-256:	A88ECD3B4280CBED5EDA0ABB0A229B580F85D1E74E84ED6EF6A76778874896DA
SHA-512:	ADD8B97A3BD625EF85E2DE9366DF64A462FBEF2E38CE7932E1A4B7CCBC23059AF5E5839570C946F8FDFA822E62C5F60F9C2F6F2CA6725C9AA1025E6C9389A408
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............@......PLTE........................V7.....tRNS..Aj.........IDATx..]Kw.:.6.c....z...[.=Z....V...HB....{..^gph...N...#.j5.H#.4.H#.4.H#.4r............N......$8..].%...%Y.......pA.m\|Yp^..../....p@..pz0e..._cK......=K.97j...U;...#9.....1\|.....\|..u5u...WN9...&...s........-]}#...3....L.N..QW.L.=k..k.cC........?.....l;.!....a..\|.C.....k..UN}-......../.0...\.S..IQ..f.%Fs..\.Ls...FS..o.j.a..._.r"..l...M5.n.........w.j.W..j..,.\.H..h...r\|...Yrh..Fcp..L#V..g...m.N...=.N}K.......-..Z8..E.L.."A6..G.d ..'3..sZ.`>....Z<K/...B......qt.{~.....8..y...Xi;...,.uf.">...~..'..t.$..w#.....D... ..l.7...e.2..h...pZ.\|.R..pR.Il............s.\m.p........(......g'.O8.-.}.....V.ce.).whR.....g.]m....);....../.... ...?.. \|.=.....v....p6t.CI.m..WEc...j.0C..O...D)..C.XE.....{.....`:......,.........>....B....X<.~n......\|.\8I...G....4.3....z.K...."..S........l..X.S.V&.b.S...=..h..<..'..c.d..=..1.%._M..a.Q...11.0....g.....6y~o.........Sc.m....7.\...f.

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (790)
Category:	downloaded
Size (bytes):	1119
Entropy (8bit):	5.218594167412336
Encrypted:	false
SSDEEP:	24:UATzYfG2zCtt9KqJrv14NxHOppAddlbXxTiVSJw9K1+DBHWuU4hLtVoBgJn:dTAH0PpAVhEVzMuPaBW
MD5:	6045FDA09F7EEBD617670157581C2DC5
SHA1:	D71D3A51C5E7E28BB25B787500BD852AE1D4A00F
SHA-256:	5EA03EA8363EFEEFE89FBF7481E0B7BF1D0D830A39DDAB03A4B274DDF234F976
SHA-512:	5C955B5EFA4BA04BB38C12109FA10AACFFC25D792079B775C655260EBB88569B7F3C050B4D4C511A58DDB37BB6F7EB7C28F3DC4982D62506E521F95843DC548D
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-content/themes/Signable2019Theme/js/responsive-image-maps.min.js?ver=1692089186
Preview:	/. rwdImageMaps jQuery plugin v1.6.. Allows image maps to be used in a responsive design by recalculating the area coordinates to match the actual image size on load and window.resize.. Copyright (c) 2016 Matt Stow.* https://github.com/stowball/jQuery-rwdImageMaps.* http://mattstow.com.* Licensed under the MIT license./.;(function(a){a.fn.rwdImageMaps=function(){var c=this;var b=function(){c.each(function(){if(typeof(a(this).attr("usemap"))=="undefined"){return}var e=this,d=a(e);a("<img />").on('load',function(){var g="width",m="height",n=d.attr(g),j=d.attr(m);if(!n\|\|!j){var o=new Image();o.src=d.attr("src");if(!n){n=o.width}if(!j){j=o.height}}var f=d.width()/100,k=d.height()/100,i=d.attr("usemap").replace("#",""),l="coords";a('map[name="'+i+'"]').find("area").each(function(){var r=a(this);if(!r.data(l)){r.data(l,r.attr(l))}var q=r.data(l).split(","),p=new Array(q.length);for(var h=0;h<p.length;++h){if(h%2===0){p[h]=parseInt(((q[h]/n)100)f)}else{p[h]=parseInt(((q[h]/j)100)*k)

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1919), with no line terminators
Category:	downloaded
Size (bytes):	1919
Entropy (8bit):	5.0932328044572355
Encrypted:	false
SSDEEP:	24:H9cj4Ej+mrA3b7ml77bKHDjKqh9HDGPgYfnBKFVDB6Aq16KybQ012oxrh:dcjfjrA3fW2Ii6AqTys0A0F
MD5:	6B34ED69A95FF2DB40A2C944D3FAAA0C
SHA1:	672121879892FD95A887DAE9D442ECA55D601216
SHA-256:	CC828D59A03B75D49ADF88A8D073CC881F02E13EB56C8B4E75FD43E517B87293
SHA-512:	D919FFD5A077E8DA2C8220B73AACEB367D9A7B59F017A6A7E27E84DBFAD9A293A047F91FEEEB22B107DFAFA3C272EEC29F44687038A9CC3C9768A3C283980C28
Malicious:	false
Reputation:	low
URL:	https://signable.app/css/chunk-6fa298f8.470369c5.css
Preview:	.o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100% - 30px);max-height:calc(100% - 30px);-webkit-box-shadow:0 0 20px 2px #222;box-shadow:0 0 20px 2px #222;-webkit-transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out,-webkit-transform .15s ease-in-out}.o-modal__box__header[data-v-f1eb06a4]{padding:var(--spacing-base);border-bottom:1px solid var(--color-border);margin-bottom:0}.o-modal__box__content[data-v-f1eb06a4]{padding:var(--spacing-base);max-height:calc(100vh - 94px);overflow-y:auto}.o-mod

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7711)
Category:	downloaded
Size (bytes):	278089
Entropy (8bit):	5.5697121866780375
Encrypted:	false
SSDEEP:	6144:34FR+vWIMDfDtKOkrH9eUWD4KgB+piujItNv:IiOIMDfhOKgB+piL3
MD5:	B7B5A6ED2F565C199EB7361371A392D9
SHA1:	196F0DF514320B13B9D58B7A25040BDE10CF908D
SHA-256:	90BE814C8C7F9C6880681E3D716FDB9BA884BF4F52CBE0C590AD17090DAF094D
SHA-512:	798424426AA7CECB96556C85709306A2A042BFA89B3AFB26DED0DB4BBB10C16C990FDD80544F03439AF726F12371997DECBC248125736693066F23D7AAAC8E31
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-4XE2VYSQ35&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"6",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"c"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":"google.ca"},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":24,"vtp_rules":["list","signable\\.co\\.uk","signable\\.app","signable\\.help","^signable\\.us$"],"tag_id":17},{"function":"__ogt_referral_exclusion","priority":14,"vtp_includeConditions":["list","signable\\.app","signable\\.help","signable\\.co\\.uk","app\\.signable","signable\\.nl"],"tag_id":19},{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELE

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (930), with no line terminators
Category:	downloaded
Size (bytes):	930
Entropy (8bit):	5.12292712843304
Encrypted:	false
SSDEEP:	24:0jHQfOuH41YiLY3WL3QquM32EhEcx+Ps2P2pCgrsLHOII:0EJpNqycBxWACgrsDOt
MD5:	06BFCD88AF438673A8BF9B845A11AA6E
SHA1:	D024A745032CBE115526ABE648D9FA0F0A10A681
SHA-256:	947AC0903521F5ECEEFC90637C066306A8CA67466CCC188BB0107FB7CFB532D1
SHA-512:	6A37EA27F3AD16DE6BCB4C386D9F09962902AE2F2FDF76B6723CFF8155CD0B9D4504D1EA6ED3C4D5C9D49BE9C636EB9386BB13C9A787A71F02640A8EC939D180
Malicious:	false
Reputation:	low
URL:	https://m.stripe.network/inner.html
Preview:	<!doctype html><html><head><meta charset="utf-8"><title>StripeM-Inner</title></head><body><script>!function(){var e=document.createElement("script");e.defer=!0,e.src="out-4.5.43.js",e.onload=function(){var e;window.StripeM&&(e=window.location.hash,/ping=false/.test(e)\|\|(e=(e=e.match(/version=(4\|6)/))?e[1]:"4",window.StripeM.p({t:!0,v:e})),e=function(e){if(window.opener\|\|window.parent\|\|window)try{var i=((t=JSON.parse(e.data)).message\|\|t).action,t=t.message?t.message.payload:t;switch(i){case"ping":window.StripeM.p({t:!0,o:{muid:t.muid,sid:t.sid,referrer:t.referrer,url:t.url,title:t.title,v2:t.v2},v:t.version\|\|"4"});break;case"track":if(!t.source\|\|!t.data)return;window.StripeM.b({muid:t.muid,sid:t.sid,url:t.url,source:t.source,data:t.data},t.version\|\|"4")}}catch(e){}},window.addEventListener?window.addEventListener("message",e,!1):window.attachEvent("onMessage",e))},document.body.appendChild(e)}()</script></body></html>

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 714, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	647526
Entropy (8bit):	7.987815801570409
Encrypted:	false
SSDEEP:	12288:9rIiP5JTRgEiP/miEBOKuaQCa/nk9nWkY0XUNVCAyWpSrRXOoNwhqh0SQ:9rzS/mitnCUfCAjeVxNwhqOp
MD5:	14475F53D3A18B32C42E9126E404B018
SHA1:	CC6E79FEBFDEAAB7D086F718B438A716FFA59A77
SHA-256:	5EA34C91122327C3E761BEB165EE13990AAC964EBC382A9B7DBF2B3C58A5ADDA
SHA-512:	8FCE1AAD4B4E0FAA037A1E1801072E33AE4DB42FB2FE6773FD89E963A3A87160616E45D0899EF4278593067BE8C373E2E1FAA8FE55553D4A40846AA71F452E87
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............{m....pHYs...%...%.IR$.....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2def, 2023/02/02-12:14:24 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 24.5 (Macintosh)" xmp:CreateDate="2023-06-26T15:58:35+01:00" xmp:ModifyDate="2023-06-26T16:02:01+01:00" xmp:MetadataDate="2023-06-26T16:02:01+01:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:7f0203a2-33f1-4f90-879a-c01db1fee118" xmpMM:DocumentID="xmp.did:7f0203a2-33f1-4f90-879a-c01db1fee118" xmpMM:OriginalDocumentID="xmp.did:7f0203a2-33f1-4

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33094), with no line terminators
Category:	downloaded
Size (bytes):	33094
Entropy (8bit):	5.271194779008479
Encrypted:	false
SSDEEP:	384:+MT7wsVvhAfNL2hzOtDENEhe2xZc9KhvpcFvRrfVBejwX:+M/wsVvhAfNL2CEQbc9KVpcFvFVB6y
MD5:	D8739A9FE9A3A42936F5CD86C8727494
SHA1:	4FB60EC9F1C4EFF985C219BF24E4B1F340D62C97
SHA-256:	8F0F8792237470EE661C6AFC32CA68200DD74BCC0D544D0FD54C7777AF362EAE
SHA-512:	3326F37AE1DB03E06E8A1EC7E0B39D4F055C55E0B2DE6386F0677250A48B0146A081B3E17B42E01C194F0CD3FA5B63871FAE86478891644EA41BA1747A647EE5
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/22.6b9a301a.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[22],{"+OSO":function(t,n,e){"use strict";e.d(n,"a",function(){return createClientReportEnvelope});var r=e("8dVd"),i=e("xqFT");function createClientReportEnvelope(t,n,e){var o=[{type:"client_report"},{timestamp:e\|\|Object(i.a)(),discarded_events:t}];return Object(r.c)(n?{dsn:n}:{},[o])}},"/brt":function(t,n,e){"use strict";e.d(n,"a",function(){return severityLevelFromString});var r=["fatal","error","warning","log","info","debug"];function severityLevelFromString(t){return"warn"===t?"warning":r.includes(t)?t:"log"}},"26VM":function(t,n,e){"use strict";e.d(n,"a",function(){return isDOMError}),e.d(n,"b",function(){return isDOMException}),e.d(n,"c",function(){return isElement}),e.d(n,"d",function(){return isError}),e.d(n,"e",function(){return isErrorEvent}),e.d(n,"f",function(){return isEvent}),e.d(n,"g",function(){return isInstanceOf}),e.d(n,"h",function(){return isNaN}),e.d(n,"i",function(){return isPlainObject}),e.d(n,"j",function(){ret

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 651 x 197, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15391
Entropy (8bit):	7.933776151603843
Encrypted:	false
SSDEEP:	384:GvKa2D+khmyZGbzCi/v6yz+pyNpFk8AhZ+++H/LI95YB2udH:GkhgbzRn6g+MQOG5EHH
MD5:	D35AA7605F55DAE20534AAA3CFAD5006
SHA1:	17659437F4052D89225959668F44946A9A9841BC
SHA-256:	2C8B8F882BEC3F2D5D66EC54861A3C160D0E05DCA98B12DEA22DB15113524431
SHA-512:	33AE7C34F61E6F2E26C650CBABB233B0CC01FE8A95F65F63915354DC08415199E1689D01A69BDB3DAB6EC22EA519F22F0D6AF24FC5AC168ACDCA1401EC35B2DB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............<'."....bKGD............;.IDATx..w.W...........(.vP,...Q.aoX0...K......X...AI.]Q...n....J......?V..[..=.....$..sf.\|..s...........+.[...c.3.....8.8....ZP...aEY.....u.,.T.(..;@.`(p..0p9..Z...l&>yX\|t4.J-...$..A...+.......p..#.$.6.++t.(/.]Y^XZY^.....u.....3...........T}.R.bU-....T+.{........./s.g.......cEy.....e.....mk....+...$..#.+.=tT..P\...1A7.R.M#......M....Q.....,"......2-...7."..N-t^a.BIey.....z.b...:B.E.l.i.\|_..p.Z,q..[.o....b...R.`.#..,nqO-+.\..(/<V(..S...O-+<R.H....t.....3.b=.L-...&Z.g....a...n.2.YVlZY^x...p..B...............t.....s..Z.V...oJ.%...L...@...HvX....p......a#.+....}QXWG..(..C.[....L.7.-}s.Z....R.I...@.W.;....l.g~EEa......X..ZM....;..}...f........+.C....u...bQ..E%..o.../n.J..........y....t...bQ..E%I........`.VV.2......t...bQ..E%I...,KP.-.$.I.P......PB...ayya-.....XT..bQI..c.n3.1....@/`.Z..Rn]........S.RKZ.......%!.......R.E..E..J...5.......zG4..../...4l]QQ. ..C.&.....(.U,.XT.

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11065)
Category:	downloaded
Size (bytes):	11117
Entropy (8bit):	5.21487951736615
Encrypted:	false
SSDEEP:	192:+trxDpHW/NGfmhwqs/ObW2mq4SqG1q4iqGRZqWfSiBwQ9tuX4tBKbEY4cEC2XeRP:MrNZkNZffEQA8iT7uXlEY4c6rsLocRmc
MD5:	E03D9AD385B71F492549F85CD3D8C362
SHA1:	ADC5B2A5DE113D08CA0FBF87867F0236D42A75DA
SHA-256:	84D25B1887D55A88E8DC8E24AECFC95C29A504A908372BE321571731074DDB25
SHA-512:	995C688DA4DD71EC1D4B3965E31CC7BA8677829E02A0A6D8F6713316691299B78EFD8098CD2665EBAF78F060CB566463BA3AEA1E5882524B99F58862859478EA
Malicious:	false
Reputation:	low
URL:	https://signable.app/js/chunk-c6e20010.3ce3091a.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-c6e20010"],{"0920":function(e,t,n){},"0eab":function(e,t,n){"use strict";n("a917")},3558:function(e,t,n){"use strict";n.r(t);var a=function(){var e=this,t=e._self._c;return t("VModal",{attrs:{name:"select-plan-modal",loading:!e.selectedPlan\|\|e.loading}},[t("h2",{attrs:{slot:"header"},slot:"header"},[e._v(e._s(e.$t("companySettings.billing.confirmPlan.title")))]),t("div",{attrs:{slot:"content"},slot:"content"},[e.currentPlan?t("VForm",{attrs:{onSubmit:e.switchPlan}},[t("div",[e._v(e._s(e.isDowngradeToPAYG))]),e.voucherApplied\|\|e.paymentMethodPending\|\|e.isDowngradeToPAYG?t("div",{attrs:{slot:"row"},slot:"row"},[e.voucherApplied?t("VMessage",{attrs:{type:"success",fullwidth:!0}},[t("FontIcon",{attrs:{slot:"icon",name:"info-circle"},slot:"icon"}),t("span",{attrs:{slot:"text"},slot:"text"},[e._v(e._s(e.$t("companySettings.billing.tempVouchers.voucherAppliedMain")))])],1):e._e(),e.paymentMethodPending?t("VMessage",{attrs:{type

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51630)
Category:	downloaded
Size (bytes):	136552
Entropy (8bit):	5.449274776412345
Encrypted:	false
SSDEEP:	3072:RN5vc+AMrR9Pcrl0xYuE0Dte4Vens9aAdj8to:RNpcS9crHuE0DVV4s9aAdj8to
MD5:	2D4CEFB6A79F501C79C1EB9ED5B0A404
SHA1:	2FEC354B8680D7A78549D1B3652E0F1F1AD9EA65
SHA-256:	31848E0891A1B44E8CDA425A1E3FCB81CAC8759610691E0CD3A77E954D3BB9B0
SHA-512:	6EC60A4F9E30E40FB7A27E0228D4AB1769C9FF45B45616FD216B5D31969EB469A279DAFAE183C2AE9894E26014BFA10ECC24D159BAB76940A85A26D915C68448
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/143547069376485?v=2.9.140&r=stable&domain=signable.app
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 313 x 44, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4771
Entropy (8bit):	7.929993464328815
Encrypted:	false
SSDEEP:	96:gSCGMag8R9F50j6zTZUas+xtqrLmo1MzmYOyBcw1wLBWa4Eq1lnJOD:gSCGMYYj6zSavxevWBcow9Wqq1lnQD
MD5:	CF7B945DF6E1A4C09215F359F2A801A7
SHA1:	B1F1B1DDCAD82CBFDA6C038D74D21241C4AA95A1
SHA-256:	4093D7F2816722766D144C2639808EEEF4F96C18725F08EB78EA8154DBE61C25
SHA-512:	6608EDD8D91FC8406D862B2590D0897A5FE6AEF40EC45B8FCA80236E2A3FCA50F10F1562D2EA645088E9D3D2813598A704095984179DE45425EDBD4B400AAFFD
Malicious:	false
Reputation:	low
URL:	https://www.signable.co.uk/wp-content/uploads/logo_octopus_energy.png
Preview:	.PNG........IHDR...9...,........m....pHYs.................sRGB.........gAMA......a....8IDATx.....E....3 .(..F3....2..9.........7\....(n..........+.&...(F....AC.....X?....G...~.$...{.;_..]]u..7....-..~..?i..#.p.......F...W....#Fl.....#.j.Ln..[5F&7b!.\|..F.X@.mb..9z......h.P.W.f......a...)G....~.b.........u.L.....}.po<........}......}..>..}..).wt.pmm..lG.........h...................8./..9n.h.p}..+.].h..U....!.....O.........}S.~...@.g.;..v....T.`.GK...p....}K.y..7...B?.q...:.._....m..st........hN.._...P...1.`x......}F..4.q/.:Z......=.L..9.]F..9...v.4Q.q.w...v.8w..cC...".}......,..ey.?.c.}....}I....aE.....yF@{l8..}....~...=.<......w....~.....4.:.\|U~>...g..8.Q~.9-.Y............L.yp.........\|]y..n{F...dr;:zc.v.t<../{.....g#...<.c.{.r..\|.&..W...G?....3....g>.Q).....~...A.[?.W;z.....p...gv1.......5...<l.......n..I...jG............k.x.1.{...]%.yD..-.\...K.`B_6@.C09&l..j.;....,.I=.t...:.gr....U.j.P..t..1.c..\|..:.....H..\E..rb......J.-.%6T...u`.'.~

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10432)
Category:	downloaded
Size (bytes):	10484
Entropy (8bit):	5.170902385480624
Encrypted:	false
SSDEEP:	192:1Rgtn1+PGtXZ8gV20SIJRmPr/BhhZyXuXK/EK8nZrHXFEtII4EtBT6:1RgthZfVMI2PrJxyXuXKWRFEtII4ED6
MD5:	F8E69E4B1F59C0B98FFD7B56D13BD0BB
SHA1:	EC986544908C355751189C299969ED0CD95972C1
SHA-256:	2FE71695A562FE6903FC8992858FF690F7E14E65B9EE83368F225C2B8C7E71DD
SHA-512:	4B3D0EDE9028ECFEC871418E4E5838BB16013BBF46E81B206C07F8CFB162329196678FE6ED9F280F05F051611B78E0CEE9EA7A2DBCADD915765E079ECEFC250E
Malicious:	false
Reputation:	low
URL:	https://signable.app/js/chunk-1c2a00ac.be49cfa2.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-1c2a00ac","chunk-2d0bdf35","chunk-2d0c0c56"],{"2dd1":function(e,t,o){"use strict";o.r(t);o("ac6a"),o("7f7f");var n=function(){var e=this,t=e._self._c;return t("MultiSelect",{attrs:{placeholder:e.placeholder,loading:e.isLoading,options:e.filteredUsers,multiple:!0,searchable:!1,"close-on-select":!1,"track-by":"id",label:"name"},on:{"search-change":e.handleSearchChange,select:function(t){return e.$emit("select",t)},remove:function(t){return e.$emit("remove",t)}},scopedSlots:e._u([{key:"option",fn:function(o){return[t("div",{staticClass:"grid grid-cols-2"},[t("span",{staticClass:"col-span-1 truncate mr-2"},[e._v(e._s(o.option.name))]),t("span",{staticClass:"col-span-1 truncate text-14 font-normal"},[e._v(e._s(o.option.email))])])]}},{key:"selection",fn:function(o){var n=o.values,s=o.isOpen;return e.hidePills?[n.length?t("span",{directives:[{name:"show",rawName:"v-show",value:!s,expression:"!isOpen"}],staticClass:"multiselect

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	160
Entropy (8bit):	4.88033083025857
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5zMcN/CN+lFAATcvUYDl8FuHswFltfOAwRAHFWFA8cXKL8n:tI9mc4slz/nli/UYDyI9Ht3kAHw6ZKI
MD5:	3502D493CADC9EED5E33D18533E97F64
SHA1:	DE68642D9A2590FFB21DF54495C5DB3F9321626D
SHA-256:	761AAC061AD1D5E5481942128DAD468750CBF36BDFC173E4374D9C17F7C9CB0A
SHA-512:	F5EB86659FA5FD4656738A422A405660E62A6D90670FC51B265E2886404899B6388622816C18FD70E3A64670361B33E6EE35FF36405323382373CB305D52F654
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="13" height="8" viewBox="0 0 13 8" fill="none">.<path d="M1 1L6.5 6L12 1" stroke="white" stroke-width="2"/>.</svg>

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	200
Entropy (8bit):	4.942373347667344
Encrypted:	false
SSDEEP:	3:qTkIDZxVsJYkup3XyHFeTrAyTKTWKMrBKblbJ4ZNDpVbz2USrGXI9kBbZ6iF4:qTjxVgYkYv3J/14QpcUAVuB965
MD5:	3437AADDCDF6922D623E172C2D6F9278
SHA1:	F69066CF20141AC93418102D3EEE7C0225B8A623
SHA-256:	35DCC382EB69D00369D708708CDC545F3968B68FA5BBE3E728D11FEDD04F93BB
SHA-512:	2DAE5C5C30C6A0E763D8128F2CE1D467EAD432E582AB4EBB68E23991DB08F57490ABC0EED805FD33FAB5503C1737D9D47D4CC1090AE15D7391593FBB295D66E7
Malicious:	false
Reputation:	low
URL:	https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html
Preview:	<!doctype html><html><head><meta charset="utf-8"/><script defer="defer" src="https://js.stripe.com/v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js"></script></head><body></body></html>

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1543
Entropy (8bit):	4.1767126155264105
Encrypted:	false
SSDEEP:	24:t0WGURuXMMXknAjLQQnsU19RgEmc4ThUaWoPJl8Xp1JCtcSu6w9rSvsxgwsGWx8X:kUnAjLQNUBNV1FoBAlSxWmw7WjS
MD5:	BF572991D7FAED27D5A627471CF63E7C
SHA1:	A26050EB28F8FFEA20E132476FA819A85B96DC4A
SHA-256:	CA690367AB5D6EE7FA581A61271E7A8FBD9E5E02D15CC9EE1D576840CD1726CB
SHA-512:	07D38095D2B1F8F83707C7357CAF7028BDB6DC202121EF1B5BD7813B60BB8D14FA64428382590EFE323F33D180BD994A7143109A20025C662A3CAEA11A9B5F8C
Malicious:	false
Reputation:	low
Preview:	<svg width="99" height="87" viewBox="0 0 99 87" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M168.871 30.5528C167.659 35.0367 166.499 38.7095 165.863 40.5545L165.381 41.1487C162.417 48.5497 158.067 55.3247 152.557 61.106C146.528 67.4321 139.244 72.4288 131.172 75.7758C111.71 83.7024 87.7107 80.7546 71.1164 67.6337C65.2003 62.9048 60.8556 56.4945 58.655 49.2474C61.6691 46.9856 64.3911 44.3587 66.7588 41.427C73.3512 33.2799 80.359 19.2899 77.8588 8.47444C76.8684 4.15146 73.7315 0.652962 69.1648 0.182726C62.9778 -0.466372 58.3376 4.17255 55.524 9.11641C49.1142 20.2883 48.6331 34.2942 51.5111 46.627C48.2384 48.6054 44.6591 50.0248 40.9201 50.8272C29.7396 53.1817 17.6626 49.2199 11.0729 39.5444C3.94498 29.0062 7.40054 15.4183 10.2924 4.04684L10.3551 3.80023C11.3429 -0.0581316 5.17432 -0.775487 4.20138 3.04439C0.960408 15.8145 -2.04778 30.1346 5.3703 42.0881C11.5425 52.0448 23.022 57.8375 34.6239 57.711C41.1686 57.5929 47.5829 55.8614 53.29

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	955
Entropy (8bit):	4.202557135044804
Encrypted:	false
SSDEEP:	24:t4ImpBmtQ2ouEUdq5DdVX7k0U5IInyqnirCyTnscpn:8plWEqCbk0U5IIy9rzZpn
MD5:	E15B9724A0420DA84C2C4D6AADA57141
SHA1:	C161A7C7ED81ABB364397A2ECEF78CD2079186EC
SHA-256:	4B0BDB6FCD53C10C3538A477EDD83403C04D0CD7D50950C0AF2445E0A87B256F
SHA-512:	EA9BA7C27EC57C7B43C6C8A8887C24EB250DDFCE888781285FC0925D8C1DF573315575E04AB5DF749B2DFE7F23D14534FA0D9AC39FDC99A1B630A484A2A3DB71
Malicious:	false
Reputation:	low
URL:	https://signable.app/assets/signable_squiggle_2_cropped.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="-0.04 0 163.33 92.66">.<path d="M11.21 2.53A5.23 5.23 0 0 0 4.36.6C2.26 1.78 1.2 5.04 2.73 7.07c.37.56.9 1 1.5 1.29a4.63 4.63 0 0 0 5.64 1c2.36-1.32 2.73-4.7 1.34-6.83Zm152.08 45.26a62.08 62.08 0 0 1-27.25 31.2c-18.4 10.19-42.53 10.17-60.6-.8a37.45 37.45 0 0 1-14.61-16.74 45.84 45.84 0 0 0 7.09-8.74c5.55-8.89 10.8-23.64 7-34.07-1.51-4.16-5-7.25-9.65-7.17-6.21.11-10.25 5.28-12.44 10.53-5 11.88-3.77 25.83.58 37.72-3 2.37-6.39 4.21-10 5.46-10.81 3.7-23.28 1.24-31-7.56-8.42-9.65-6.56-23.7-5.07-35.39.5-3.94-5.7-3.91-6.2 0-1.66 13.07-2.9 27.65 5.92 38.61C14.4 69.98 26.5 74.32 38 72.78a39.7 39.7 0 0 0 17.92-7.28c11.54 22.07 38.42 30.25 62.49 26.13 18.47-3.17 34.67-15.32 44.84-31.07l.04-12.77ZM57.5 52c-1.42-5.4-1.94-11-1.56-16.58.4-5.27 1.83-14.1 6.88-17 6.14-3.48 7.09 4.8 6.86 8.77a49.06 49.06 0 0 1-4.16 16.76 42.57 42.57 0 0 1-7.14 11.07A48.8 48.8 0 0 1 57.5 52Z" fill="#E0F128"/>.</svg>.

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35483), with no line terminators
Category:	downloaded
Size (bytes):	35483
Entropy (8bit):	5.155920974332391
Encrypted:	false
SSDEEP:	768:0YQPNzPH1/rlgFG1nniX/a1inBncEBCGJxz8fsX/6n+ySGA:hozPpZgeodrXgg
MD5:	04A233A42DCF8C50A83BFECEA8BA552D
SHA1:	F5015AF5678A69C6F2A04C99B96DA11FEE821071
SHA-256:	B13C9311DEC3F49821D88065299E95CC1C4E6C26ACC4B27B4EBDB380D40D8788
SHA-512:	6BD6A7CC876B5AB427885A6C5D9751250D7D32B3DE8BEA1E7429A4AAA736FF7183CBC2067A0B2441BCD9426FC910F480FD5D273E4E75ADBB75EA8B96AE488DE6
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/27.01c2bea5.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[27],{"37Xj":function(e,t,n){"use strict";n.d(t,"a",function(){return _makeFlat});var r=n("wBll");function _makeFlat(e){return function flatt(t){for(var n,o,i,s=[],a=0,c=t.length;a<c;){if(Object(r.a)(t[a]))for(i=0,o=(n=e?flatt(t[a]):t[a]).length;i<o;)s[s.length]=n[i],i+=1;else s[s.length]=t[a];a+=1}return s}}},"3fZ3":function(e,t,n){var r=n("utat");e.exports=function(e,t,n){return void 0===n?r(e,t,!1):r(e,n,!1!==t)}},"3kqR":function(e,t,n){"use strict";var r=n("8s1R"),o=n("p9qs"),i=Object(r.a)(function forEachObjIndexed(e,t){for(var n=Object(o.a)(t),r=0;r<n.length;){var i=n[r];e(t[i],i,t),r+=1}return t});t.a=i},"42TE":function(e,t,n){"use strict";var r=n("Jn/H"),o=Object(r.a)(function not(e){return!e});t.a=o},"4Vr+":function(e,t,n){"use strict";var r=n("8s1R"),o=Object(r.a)(function pickBy(e,t){var n={};for(var r in t)e(t[r],r,t)&&(n[r]=t[r]);return n});t.a=o},"4Zd6":function(e,t,n){"use strict";var r=n("8s1R"),o=n("U/ZD"),i=n("pQZd")

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	75961
Entropy (8bit):	5.284364477342943
Encrypted:	false
SSDEEP:	768:QsOblXdRFlP6SupyNG6jtspnJWuUTzHUBDnBIuqoci+4cW/mK5NtUO6PnUZHBO8n:QDvFlP6Supyqpcu23O/ziSO87QRi8k
MD5:	6D77A76055D81227033363AF2F18CAF8
SHA1:	B1B94517954F8F8889A0822886DEA6F5AD7C931F
SHA-256:	19473EEBFB0672867A4438E2A015DE79FDED34B9F5AE5598BADE57EB01CF0563
SHA-512:	8E576150D0CB1FCB21DA5EC65C73EE2CB2E48A5F762C3926243471CAE4D0334F4D5B464A08C189A223E8E56D47C28323EFA4A053405D06BF35776C5154762FC7
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/20.8c21ea18.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[20],{"11Hm":function(e,t,n){"use strict";function _extends(){return(_extends=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var o in n)Object.prototype.hasOwnProperty.call(n,o)&&(e[o]=n[o])}return e}).apply(this,arguments)}var o=n("QS52"),r=(n("c58o"),n("h7FZ"));function addLeadingSlash(e){return"/"===e.charAt(0)?e:"/"+e}function stripBasename(e,t){return function hasBasename(e,t){return new RegExp("^"+t+"(\\/\|\\?\|#\|$)","i").test(e)}(e,t)?e.substr(t.length):e}function stripTrailingSlash(e){return"/"===e.charAt(e.length-1)?e.slice(0,-1):e}function createPath(e){var t=e.pathname,n=e.search,o=e.hash,r=t\|\|"/";return n&&"?"!==n&&(r+="?"===n.charAt(0)?n:"?"+n),o&&"#"!==o&&(r+="#"===o.charAt(0)?o:"#"+o),r}function createLocation(e,t,n,r){var i;"string"===typeof e?(i=function parsePath(e){var t=e\|\|"/",n="",o="",r=t.indexOf("#");-1!==r&&(o=t.substr(r),t=t.substr(0,r));var i=t.indexOf("?");return-1!==i&&(

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3294)
Category:	downloaded
Size (bytes):	3346
Entropy (8bit):	5.214513604740612
Encrypted:	false
SSDEEP:	96:V3tXrc7xRJCGbn9eWTINFnVQT10rKCImNvRw:VdgjJCMtTSnp1Jw
MD5:	B25AA679D10616C0E5F9DEA243084A84
SHA1:	3FE7EA75B707F754127515237A8A7C9ECF13365E
SHA-256:	4BC302F405CABDA0224B9484A69CEEE0469371E842F8A172952A0E03B2BA4A43
SHA-512:	0F8439C9EE5DC79840D3BE22579B7E6E9EFC7E0758CB06088EABC78E9F2D716BCD289CD08D69261D2A350C03A52356DA3B932610A876C47F8F34BBD3E0415717
Malicious:	false
Reputation:	low
URL:	https://signable.app/js/chunk-1353338a.9f80a755.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-1353338a"],{"0920":function(t,e,o){},5263:function(t,e,o){"use strict";o.r(e);var a=function(){var t=this,e=t._self._c;return e("VModal",{attrs:{name:"remove-payment-method-modal",loading:t.loading}},[e("h2",{attrs:{slot:"header"},slot:"header"},[t._v(t._s(t.$t("companySettings.billing.paymentMethods.removePaymentMethod")))]),e("div",{attrs:{slot:"content"},slot:"content"},[e("VForm",{attrs:{onSubmit:t.deleteMethod}},[e("div",{attrs:{slot:"row"},slot:"row"},[e("p",[t._v(t._s(t.$t("companySettings.billing.paymentMethods.removePaymentMethodMessage")))])]),e("div",{attrs:{slot:"formButtons"},slot:"formButtons"},[e("VButton",{staticClass:"float-right",attrs:{type:"error",subtype:"submit",href:"#","data-ec":"billing_remove_payment_method_modal","data-et":"delete_button"}},[e("FontIcon",{attrs:{name:"trash"}}),e("span",[t._v(t._s(t.$t("functional.delete")))])],1)],1)])],1)])},n=[],s=(o("6b54"),o("42a4")),i=o("eeda"),l=o("7b7a"

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45138), with no line terminators
Category:	downloaded
Size (bytes):	45138
Entropy (8bit):	4.971380621374382
Encrypted:	false
SSDEEP:	768:J0pH3w4JWZdsTvfjsdPlyYVtSxOc9EHV5d2VLuqaUnkdaBK1At:um4otSxOdVunkda9t
MD5:	3B8BA82E1BAC13EE29E9764A55620D99
SHA1:	D68D0E4A43779884F7FDA72C7FEBEE83BA287E0C
SHA-256:	58FDB03FAC3E89E51525A5A45EB777395D1B499BF4483E96201B6BECDDBE516F
SHA-512:	5A873467CF51F97362E289AFC8BFA1D63A118970D89A1F0A0845DE66F7751DAF95652BB0FEC5B6D7D545461DBFE1F2ECBC3FEB4B4D882F10E3B94001B1A97875
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/css/1.12ba17b6.chunk.css
Preview:	.drift-widget-naked-button.drift-widget-emoji-back-button{background:#fff;height:32px;width:32px;padding-top:4px;position:absolute;left:16px;top:-100000px;z-index:2}.drift-widget-composer-emoji-picker{position:absolute;bottom:58px;right:0;height:auto;max-height:114px;left:-16px;width:-webkit-calc(100% + 32px);width:-moz-calc(100% + 32px);width:calc(100% + 32px);opacity:0;visibility:hidden;overflow:hidden;-webkit-transition:opacity .2s ease;-o-transition:opacity .2s ease;-moz-transition:opacity .2s ease;transition:opacity .2s ease;border-bottom:1px solid #eff3f5}.drift-widget-composer-emoji-picker>.emoji-mart{width:100%!important;padding-top:8px;-webkit-border-radius:6px 6px 0 0;-moz-border-radius:6px 6px 0 0;border-radius:6px 6px 0 0;border-color:#eff3f5;border-bottom:none;border-left:none;border-right:none}.drift-widget-composer-emoji-picker .emoji-mart-search input{appearance:searchfield;-moz-appearance:searchfield;-webkit-appearance:searchfield;-webkit-box-sizing:border-box;-moz-box

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (63529), with no line terminators
Category:	downloaded
Size (bytes):	63529
Entropy (8bit):	5.281778375193074
Encrypted:	false
SSDEEP:	768:A1yEnyxQEWJZDb4aJ0hHUaHFLPrW+p0B3zmE7ceIU1xeAGxM9:sJ1ENL4cFMr9
MD5:	02F09379C544BEFA413D22EB57ED41DE
SHA1:	156FF3FBF28D890EB0F79754E436AC3A66B3DE24
SHA-256:	E555F4B34B579E6528D6BBD4819620A634C0759B41DFA99520B7CA5AA5117B11
SHA-512:	C2252DE8C217909D15CBA15F47631751B69FE56DD167716A5BE05A4104DDFE28332764EBFDCFFF0DF2614DC9187E2C70B199B5EAC49D45F7A6DA7FF2F3E4AB8E
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/18.9c1bd1fb.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[18],{"0O9J":function(e,t,n){"use strict";var r=n("lEaq"),o=n.n(r),i=n("ERkP"),a=n.n(i),c=n("aWzz"),s=n.n(c),u=n("11Hm"),l=n("I9iR"),p=n.n(l),f=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e};function _possibleConstructorReturn(e,t){if(!e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return!t\|\|"object"!==typeof t&&"function"!==typeof t?e:t}var d=function(e){function Router(){var t,n;!function _classCallCheck(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}(this,Router);for(var r=arguments.length,o=Array(r),i=0;i<r;i++)o[i]=arguments[i];return t=n=_possibleConstructorReturn(this,e.call.apply(e,[this].concat(o))),n.state={match:n.computeMatch(n.props.history.location.pathname)},_possibleConstructorReturn(n,t)}return function _inherits(e,t){if("functio

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 57, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1803
Entropy (8bit):	7.283421846950444
Encrypted:	false
SSDEEP:	24:hUA1hTWwjx82lY2T3gV5P6ayJ3V/WcVGdDG+jrDKqc2CvFZJX6iw5MsO09JsS87:ie4Nn2scJ30Kgy+jrDKdVFzX6fOmc
MD5:	F84A5F58E0F90FC3955128C7CC4B1A8E
SHA1:	ED087D9732D2E85FC931EDBD4B1C831DC3874417
SHA-256:	1C73E4DF2427F9D6FD6C2265061D018F9DA3DDE2279476F891E8D2CF2C6041EB
SHA-512:	A77D85CE8956579807D433D061E9EC1B4C4959A750EE7C35D55652DD8DB1AECE3D3976533F7D80F33DE4BEBF892032B5C9022F8F807BFE1E25158D6D889BE78F
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-content/themes/Signable2019Theme/_/img/icons/icon_star_rating.png
Preview:	.PNG........IHDR...<...9.....j1H.....tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.1b65a79b4, 2022/06/13-22:01:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 23.5 (Macintosh)" xmpMM:InstanceID="xmp.iid:121B7703326C11EDADD3C39C8B2C9C6E" xmpMM:DocumentID="xmp.did:121B7704326C11EDADD3C39C8B2C9C6E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:121B7701326C11EDADD3C39C8B2C9C6E" stRef:documentID="xmp.did:121B7702326C11EDADD3C39C8B2C9C6E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......yIDATx..Ih.A..+N..z.#j...p...q.k..B..^\@.Q. W....!.4^.Nn......1..cD.(.*D.....h....JwUw.........z.

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7216), with no line terminators
Category:	downloaded
Size (bytes):	7216
Entropy (8bit):	5.7157114225413626
Encrypted:	false
SSDEEP:	192:a0s9r8FRHF6U/Atg28bngH1nlm6AVPhp98evibOEOxWShjulmu/TuVH5coKW8AB6:SVfnz8uN/Tk4
MD5:	E094B276AD2035C3A46871991C258C2D
SHA1:	2B17F43D8BA04B1353F41AB5DA9E136F7660C18A
SHA-256:	481BAFFABB9011AE6FFD10103983908EBC2C06E6F6BE7797D226CCEE04C2172F
SHA-512:	83ECF3760DE1D5814878E0D8395ED824C40CFC241B639100EFB204EAF012F6796A3CDF02D53440D2A7116439F38837E686FAD6AEBAEDAFCB3917B97BD478D46C
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/main~493df0b3.d2a43907.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[5],{"/7QA":function(t,i,E){"use strict";E.r(i),"production"!==E("LeJ0").a.ENV&&E("Cp41");var A=E("9EWH"),_=E("ADGC");Object(_.b)()&&Object(A.b)();!function polyfillKickoff(t){try{[1].includes(1)&&t()}catch(i){Promise.all([E.e(48).then(E.t.bind(null,"imET",7)),Promise.all([E.e(2),E.e(39)]).then(E.t.bind(null,"H+SE",7)),E.e(15).then(E.t.bind(null,"2GZm",7)),Promise.all([E.e(2),E.e(12),E.e(7)]).then(E.t.bind(null,"LSZE",7)),E.e(53).then(E.t.bind(null,"3yYM",7))]).then(function(){t()}).catch(function(t){return console.error("Error importing polyfills",t)})}}(function kickOff(){Promise.all([E.e(51),E.e(35),E.e(22),E.e(19),E.e(41),E.e(20),E.e(26),E.e(14),E.e(11),E.e(18),E.e(49),E.e(40),E.e(29),E.e(21),E.e(8),E.e(16),E.e(24),E.e(17)]).then(E.bind(null,"V+70")).catch(function(t){return console.warn("loading root widget failed",t)})})},0:function(t,i,E){t.exports=E("/7QA")},"91+0":function(t){t.exports={"//WS_CHAT_BASE":"localhost:4000",ENV:"

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1919), with no line terminators
Category:	downloaded
Size (bytes):	1919
Entropy (8bit):	5.0932328044572355
Encrypted:	false
SSDEEP:	24:H9cj4Ej+mrA3b7ml77bKHDjKqh9HDGPgYfnBKFVDB6Aq16KybQ012oxrh:dcjfjrA3fW2Ii6AqTys0A0F
MD5:	6B34ED69A95FF2DB40A2C944D3FAAA0C
SHA1:	672121879892FD95A887DAE9D442ECA55D601216
SHA-256:	CC828D59A03B75D49ADF88A8D073CC881F02E13EB56C8B4E75FD43E517B87293
SHA-512:	D919FFD5A077E8DA2C8220B73AACEB367D9A7B59F017A6A7E27E84DBFAD9A293A047F91FEEEB22B107DFAFA3C272EEC29F44687038A9CC3C9768A3C283980C28
Malicious:	false
Reputation:	low
URL:	https://signable.app/css/chunk-69b2ef63.470369c5.css
Preview:	.o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100% - 30px);max-height:calc(100% - 30px);-webkit-box-shadow:0 0 20px 2px #222;box-shadow:0 0 20px 2px #222;-webkit-transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out,-webkit-transform .15s ease-in-out}.o-modal__box__header[data-v-f1eb06a4]{padding:var(--spacing-base);border-bottom:1px solid var(--color-border);margin-bottom:0}.o-modal__box__content[data-v-f1eb06a4]{padding:var(--spacing-base);max-height:calc(100vh - 94px);overflow-y:auto}.o-mod

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6895)
Category:	downloaded
Size (bytes):	6947
Entropy (8bit):	5.232925432221719
Encrypted:	false
SSDEEP:	192:sbDeL+1LcwczN1gXOHsIlKOhbPICOyGN05t8fNq+RvcBQiT+y:sMICSt/BcaiT+y
MD5:	9F4604AF7CCA604E93FB2E50A8CA4D8B
SHA1:	9BF7E1C899097E7D64069EB76C64E831026F9C94
SHA-256:	26081D7B0599A28C2BCBF3F81613B1BED2C28089031BA912C373D08481DE0167
SHA-512:	1F157D47AC5E28ED45AC1530CD5A916A4403E46C7DB08916C66D34D33317EA92914FCBC7DEDFDA62852D51B6ABBBC959A43481EABDDCE85CD7F7F3304FFDB8E1
Malicious:	false
Reputation:	low
URL:	https://signable.app/js/chunk-b047b602.2652c004.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-b047b602"],{"0920":function(e,t,o){},"2f1b":function(e,t,o){"use strict";o.r(t);var s=function(){var e=this,t=e._self._c;return e.webhook?t("VModal",{attrs:{name:"addedit-webhook-modal",loading:e.loading}},[t("h2",{attrs:{slot:"header"},slot:"header"},[e._v(e._s(e.$t("companySettings.developer.webhooks.edit")))]),t("div",{attrs:{slot:"content"},slot:"content"},[t("VForm",{ref:"form",attrs:{onSubmit:e.validateForm,"data-vv-scope":"webhook"}},[t("div",{attrs:{slot:"row"},slot:"row"},[t("VGrid",[t("div",{attrs:{slot:"gridItem",type:"12"},slot:"gridItem"},[t("b",[e._v(e._s(e.$t("companySettings.developer.webhooks.url")))]),t("VInput",{directives:[{name:"validate",rawName:"v-validate",value:"required",expression:"'required'"}],class:{"a-input--error":e.errors.has("webhook.url")},attrs:{type:"text","data-vv-name":"url","data-vv-as":e.$t("companySettings.developer.webhooks.url"),"data-vv-scope":"webhook","data-hj-suppress":"","

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	225144
Entropy (8bit):	5.317469749760202
Encrypted:	false
SSDEEP:	3072:XmqIrl5phQk+VC2xILRcP2NBYfoSjZkxtxFC2b8L0Hzxrz:gS2DckxtxFo0Tdz
MD5:	3DB5A8A9B4533BE6DD8189A6B1D56D25
SHA1:	6FEB335A93D8AE52219095B899699A1DC0BE6B6D
SHA-256:	90B3FFF54099B262A88138A118A799E4F73786D582A8A1629902747FD73A2A8A
SHA-512:	109B6D5B56324467BEDAF09ABC6DA3E7A3EAED22A015D7DD41A3A7FFCC13234E1C1E95ABC915BF7B71C3B3670C86B4F2564314B8F786F799EF067E013A5D1C27
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/include/1705440900000/n9f4k7sdmsma.js
Preview:	!function(e){function webpackJsonpCallback(t){for(var r,o,i=t[0],s=t[1],c=0,u=[];c<i.length;c++)o=i[c],n[o]&&u.push(n[o][0]),n[o]=0;for(r in s)Object.prototype.hasOwnProperty.call(s,r)&&(e[r]=s[r]);for(a&&a(t);u.length;)u.shift()()}var t={},n={0:0};function __webpack_require__(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,__webpack_require__),r.l=!0,r.exports}__webpack_require__.e=function requireEnsure(e){var t=[],r=n[e];if(0!==r)if(r)t.push(r[2]);else{var o=new Promise(function(t,o){r=n[e]=[t,o]});t.push(r[2]=o);var i,a=document.createElement("script");a.charset="utf-8",a.timeout=120,__webpack_require__.nc&&a.setAttribute("nonce",__webpack_require__.nc),a.src=function jsonpScriptSrc(e){return __webpack_require__.p+"assets/"+({}[e]\|\|e)+"."+{1:"37afe153",2:"2a722653",3:"ee35dea2"}[e]+".chunk.js"}(e);var s=new Error;i=function(t){a.onerror=a.onload=null,clearTimeout(c);var r=n[e];if(0!==r){if(r){var o=t&&("load"===t.type?"missing"

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 564 x 220, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5636
Entropy (8bit):	7.948805601971241
Encrypted:	false
SSDEEP:	96:0BPPPPPEW7DD07+0HJaMupTe9jm91W0ssGbR/z2sic9/09DwH9hCxbdrtIFXtVCV:1WvH0HJepTv1YsGbRL2sh9cmjCxbd+Fi
MD5:	A3F231C986631A400BE7239B2C2C2E5C
SHA1:	CBDE815A196D0D329AB38FD666C6713734424D52
SHA-256:	28F48795700DCF64A9F08F50BF3924D09D8AE0E38FD3DDD8A905242507A2E844
SHA-512:	3300ECFBD255305E358108CFBA6176E667DA33D6E316A42CDDED4100E5FFEBF861BCDE8B40E75AF074D88E50B46224E5037319CE213BE6AE74DE64A637FCDBDF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4..........-&....'PLTE..1.e6..).i8..)...i8........@.j...i8ly.T....tRNS...NP...C/......IDATx..]=O.J.v..... $.-.hQ.4...(.UP.4."J.+.T.(........`..XV.+.....J..^y<........S.db{.9..s..F)..RJ)..RJ)..RJ)..RJ)..RJ)..RJ)..R.Jek.w........a...h........?.-.../+.....Fg..^{.......W....l.......h.d..T......%.!IN..I..l.c8...d........RY........{..\|.\N3A.......A...w.c..$O.......u..lm....Mb..k......D.?...s.m..4T.S.....$0.u.....q...}Zy.C.h..:8gbC.i...F.r...(...vM....s.h...d:...K5.n?V.u...".F.9..w..+O.i.GRlZ....r...7tb7%6z.......1...4.A...q........uGo..Od(..&$.Z.FEl..Y..r98.L.....).G}.m(....p.?...R.....uh.]h.5....p..>./...4..`..:.$`\|a${.!...V...v.g9....A..Olt..^..3V...Y..Umh...-...t.C9...Y.@...u...v...&.e.F..._......h.W.v9.....8O..F......f.O..U0<O....k.....@}H8...i.h...,7...8...............)..hQ.7..~...EQ.f=.P.....S...B9....u...v"...&.k.y=..RM...9.u48..\|.V;....._.=O'.4..f......Nwf.....]...ma#..7.....@`.#wn....i^.*4.\..a...[.<"k

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	83467
Entropy (8bit):	5.538800455258083
Encrypted:	false
SSDEEP:	1536:zHbuej1EjM7FVJKwUCkRf+X3fM3kRTFgKr:fLrZbXvM3kRpj
MD5:	5C86B7FA68FC1813E12F836B69C34341
SHA1:	6454666E39672CA2516B8AA3AAD7036C6F75008F
SHA-256:	A7DAC3A517ADC3534E745926FB8AB8714B35155BC54699060494818E7B28A7CA
SHA-512:	7931040843DEA243B31582FB462F92961A7F06009D40C7B3ECFC40E12C8724B13B7887B8F300E068DAB6C98DA1EE3CAB1C244CAC2997E27386DF8E890C0E80B6
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/8.2d8d67fe.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],{"+/Je":function(e,t,n){"use strict";n.d(t,"a",function(){return r}),n.d(t,"b",function(){return a});var r=-1,a="PRE-RENDER"},"+Kbs":function(e,t,n){"use strict";var r=n("YWhp"),a=n("S0ig"),o=n("ERkP"),c=n.n(o),i=function Attachment(e){var t=e.fill,n=void 0===t?a.a.composerIconColor:t,o=e.height,i=void 0===o?16:o,s=e.width,u=void 0===s?18:s;return c.a.createElement(r.a,{className:"drift-default-icon drift-default-icon--back-arrow",width:u,height:i,viewBox:"0 0 16 18"},c.a.createElement("path",{fill:n,fillRule:"evenodd",d:"M8.078 16a.71.71 0 0 1-.513-.222.784.784 0 0 1 0-1.075l7.53-7.879c.562-.587.871-1.368.871-2.199 0-.83-.31-1.611-.87-2.197a2.883 2.883 0 0 0-4.204 0l-8.735 9.139c-.493.516-.73 1.012-.703 1.476.026.452.298.801.46.968.27.284.563.402.892.358.413-.054.888-.35 1.375-.86l6.854-7.172a.703.703 0 0 1 1.026 0 .784.784 0 0 1 0 1.074l-6.853 7.172c-.728.761-1.475 1.196-2.222 1.293-.783.102-1.509-.172-2.1-.79-.528-.553-.841-1.2

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (5652)
Category:	downloaded
Size (bytes):	5706
Entropy (8bit):	5.142215825529771
Encrypted:	false
SSDEEP:	96:eINF2yTQTKpKZImNStEGuZrBLDcLt7C9ctqK49IcAlDoLZ5lM8n7xUGlu:eSLfiSxuPLD2t7C9ctqK49kuZA8naGE
MD5:	137AE2312F5DBD09B3F011B75549A7FC
SHA1:	E1D25C30DE5520FDD8B17BB82F44FBB3D37D3C23
SHA-256:	FB1A18699432A251A03AED7B66D4C4C12E76A30AF7309FF0CE6E91F9F410609C
SHA-512:	8E72ED77ECD06C877EAE8B6BC4265E91F1F7DFEC404BA1E2F04ADDDB3DD802E1764EBD25B29C2B9FA3D8CFF3C7CF25F7D3B2D8CDAA7D3796B0A4402F92D8A22E
Malicious:	false
Reputation:	low
URL:	https://signable.app/js/chunk-49391346.e23bb207.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-49391346"],{"0920":function(t,e,a){},"6d29":function(t,e,a){"use strict";a("ba13")},"7b7a":function(t,e,a){"use strict";var s=function(){var t=this,e=t._self._c;return e("div",{class:t.classList},[e("div",{staticClass:"o-modal__box"},[t.loading?e("VLoadingSpinner"):t._e(),e("a",{staticClass:"o-modal__box__close",attrs:{href:"#",tabindex:"0"},on:{click:function(e){return e.preventDefault(),t.close.apply(null,arguments)}}},[e("FontIcon",{attrs:{name:"times"}})],1),t._t("header"),e("div",{ref:"content",staticClass:"o-modal__box__content"},[t._t("content")],2)],2),e("div",{staticClass:"o-modal__overlay"})])},i=[],n=a("bd86"),o=(a("7f7f"),a("8b9a")),l=a("f46d"),r={name:"VModal",introduction:"A pop up modal.",components:{VLoadingSpinner:o["a"]},mixins:[l["a"]],props:{name:{type:String,required:!0,note:"The name of the modal to pass to the store."},size:{type:String,note:'The size of the modal (can be "small")'},loading:{type:B

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31332), with no line terminators
Category:	downloaded
Size (bytes):	31332
Entropy (8bit):	5.400627534686883
Encrypted:	false
SSDEEP:	192:KaHMD5DU8gZDYLY/j/KA5YotDREoqNF/DA0YttKREtqIvMCMk2UOZhWUgeyDjAth:K9Dn0YEz5zR+h
MD5:	76D0343F1F9F445C80D5C68C2A35B6E0
SHA1:	E0D7E3C397A4F874BB959ED32F0C63886122CB94
SHA-256:	310DE82EC6BA5948814AB8EC2369AA1D437E84E26AC56967FC79897ACAA99A95
SHA-512:	064E544EAA498C20555A18A0B7C72ADE3F12485B9AA7085720FFADA9FF7593DC3528D1617C036A905FD43F6AA466CB5C8EECBE94D1A466435AB1297AD23D4628
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/css/8.7602338c.chunk.css
Preview:	.drift-widget-avatar{-webkit-border-radius:50%;-moz-border-radius:50%;border-radius:50%;overflow:hidden;border:2px solid #fff;height:56px;width:56px;-webkit-background-size:cover;-moz-background-size:cover;background-size:cover;background-position:50%}.drift-widget-avatar.drift-widget-avatar--small{width:28px;height:28px;-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none}.drift-widget-avatar.drift-widget-avatar--medium{width:46px;height:46px;-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none}.drift-widget-landingpage-layout .drift-widget-avatar.drift-widget-avatar--small{width:42px;height:42px}@font-face{font-family:Brandon;font-style:normal;src:url(https://js.driftt.com/deploy/assets/static/fonts/BrandonText-Regular.woff)}@font-face{font-family:Brandon;font-weight:700;src:url(https://js.driftt.com/deploy/assets/static/fonts/BrandonText-Bold.woff)}@font-face{font-family:Lato;font-style:normal;font-weight:400;font-display:swap;src:url(https://js.driftt.com/deploy/ass

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 610 x 118, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7193
Entropy (8bit):	7.81772701103758
Encrypted:	false
SSDEEP:	96:PPSwknmWIDKDHJVLaj39smQbRIQ3euUFNO7GSxHNhpDkfh3pjxKkuZZXSRcPWBkt:HSwkntLW9PmenLgvFmZjKkusc+BB6DfH
MD5:	5C322FA86597B500061C1AB1FBB9BC1E
SHA1:	73DD13F9B202246376D695B538DD74F2AECB9D76
SHA-256:	5465F160D2A841E848B341D049A8098A3353E451E3F0061149E22F44CACD2E55
SHA-512:	631382175A12896D0ADB1370319B7AD5B265D1FC6FF7AF61DDE01DA6B7CFCA689985548BFAE57DC0FF6CC3CE0ABD333A7B34E194DEA6DD204EF35A7FC746CA9A
Malicious:	false
Reputation:	low
URL:	https://www.signable.co.uk/wp-content/uploads/icon_star_rating_orange.png
Preview:	.PNG........IHDR...b...v.....k..B....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:45 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 24.6 (Macintosh)" xmp:CreateDate="2023-06-29T12:18:01+01:00" xmp:ModifyDate="2023-07-04T16:07:32+01:00" xmp:MetadataDate="2023-07-04T16:07:32+01:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:7fc4a4cc-e866-4be3-bd18-3f299cefbe98" xmpMM:DocumentID="xmp.did:7fc4a4cc-e866-4be3-bd18-3f299cefbe98" xmpMM:OriginalDocumentID="xmp.did:7fc4a4cc-e866-4b

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	163
Entropy (8bit):	4.962341710673414
Encrypted:	false
SSDEEP:	3:tRBRNqN/CN+lFAATcvUYD7SLvDmJS4RKb58ZSFuHswFltfOA9DoHFmA8cXKL8v:tnr2nli/UYDumc4slvI9Ht39Dol3ZKS
MD5:	534F84977D4313AAA04BF351F69F011C
SHA1:	FA4B28BB4D9C4018ADF063B68955DB75E4901364
SHA-256:	D1F5A483F6555A5B4AE5616DC757CD4C5A12BDBA742723834B3EBD967E723F38
SHA-512:	D5B29637791C590573C4E82B884574EBB6735F49C2557E0D6FE99C484947EBA14F723D0CE1D08012D79DF5B8EE07207617261DB829B1A950DF0C715A62B4D61E
Malicious:	false
Reputation:	low
Preview:	<svg width="13" height="8" viewBox="0 0 13 8" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M1 1L6.5 6L12 1" stroke="#263640" stroke-width="2"/>.</svg>.

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 3823
Category:	downloaded
Size (bytes):	1700
Entropy (8bit):	7.882464423370685
Encrypted:	false
SSDEEP:	48:Xd43M+2XoWLK1arZ6dHiHKAzbI44oxNyXVDVEIN:CcT4WLZkZcL0t6NADnN
MD5:	2E1DFE678EB104D7BA2F3C64287AB69A
SHA1:	7EEB125CFA0E60BAEFF8302EBD17FB477A7A16AC
SHA-256:	EF9093AAA97D4B770CBFD21CF82033A9C75874A0EFE1FD28D8596600C1548B85
SHA-512:	8A991BA80C5E8F1F96227929D7327F9325ACE89AD1CE11757725602545ADBB0ABAFBB5A8291E5C6DC2168E4BFACF971469729F143A94D8371A523F9537FC8E1E
Malicious:	false
Reputation:	low
URL:	https://fast.trychameleon.com/messo/S6NPoJtgxcnNlk400q6PRQVRRJX4qtdh0OLSxlBO8DLh0T-1InCUr-BI7AWATzTFEjIIEP/messo.min.js
Preview:	...........Wm....+r.#.....v2&...}h.......#V.\|..........@R.../...`..K....JU.S,b..R..Qs.z.)[...2...<._.q..eU..kc~.'.3...E.lx.....{.f.N.}.#..R.R6j4.Z.i..........f.% .2R..d:....,I.Xq...c)...4o...........l..]..?..9#{k+...N..>.{~..T.ru..(]gk...>kZ..#h......Y,./..KN......b..f..f.\|..Mn_&.~f.n....uk]..q..!.'.y.6F.4.c..[C..?>..wX....M:y.....L.+r.._.R...cl.,..Y..Tf.....L._......AH..x...y.n,.}m....\.;.V...b..wyp......i.YWr.........}2..&W.$.p..n.(inIC.[..A/.3;.Z.r..l#\..c.....&.(>.0......93U!-...(y..w..VG.B..q.a..;..d....<.8.n......x..#.}..=..+.~.a:u.l....'.X..&ci<.....<H.Qj#.z:...Q....X.c.\E8..F.s....c..._.E..\..O...{3.u3!..Nx.../.y.7.SE./.....k...(..~_c[.....u0Tm..V......x....f.Ox'.1.k..\.tqe.l...u....:...>..o.,...~Z...........;y.U#.Q..#9S..&..l...bF...}.....j.`.R..ax.....u.Z..1..1+..~.>......;...W.....-..r{.N.b.X.Um...]}@..R.%....6.R......<.j.<,{......wqO..)....w.../.@ .D}.Bx....X.1.\|.9.1....S.`.m.[...z...@.C.......7...[...".}5...A,..'*......

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1759
Entropy (8bit):	4.064616270376278
Encrypted:	false
SSDEEP:	48:/GrLEWcINo/XyOQ/XrAMXuy8E7JwwTA+KS:/GPEINoaOQ/Xd8E7JwiAFS
MD5:	B73FE1E8EA11CFE74013623E9CD3CFE3
SHA1:	BEF299840294B2019E0A19E3F357CF617872A3D5
SHA-256:	88B1A2677913B7D35B66461FD05B09A8C6DD4243C872AB6AC9236E98C4F6794D
SHA-512:	A28677152F296FCFF3529BE7FEE4A6CE25DBF1D8BB81D14ED520AB8A2FCA35E34E4F4838AE949A71B2CC773C22A1D99BDEFE2BD262FD42C8F5F5E02EF5244C3F
Malicious:	false
Reputation:	low
URL:	https://signable.app/assets/signable_squiggle_1_cropped.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0.47 0.08 72.79 171.55">.<path d="m28.94 106.5 1.13.9.44-1.4c1.58-5.02 4.55-9.93 8.4-12.86 3.77-2.88 8.4-3.87 13.55-1.13 4.15 2.21 7.33 6.48 6.64 11.25-.72 5.35-5.75 9.07-10.8 10.57a21.52 21.52 0 0 1-14.89-1.07l-1.28-.58-.13 1.42c-.65 7 .22 14.07 2.55 20.67 5.74 16.7 19.77 29.9 36.66 33.27.5.1.77.35.9.62.16.3.2.72.1 1.15-.22.89-.9 1.47-1.82 1.3-25.37-5.03-45.38-32.65-41.13-59.45l.1-.6-.5-.36A32.46 32.46 0 0 1 18.13 97a49.15 49.15 0 0 1-3.3-29.1l.12-.67-.56-.36C7.44 62.34 2.7 53.92 1.71 45.37c-.95-8.3 1.03-15.54 4.15-22.54a141.7 141.7 0 0 1 5.3-10.41l.7-1.29c1.66-3.04 3.35-6.12 4.89-9.28.24-.49.54-.68.82-.74.3-.07.7-.01 1.06.2.76.44 1.15 1.29.72 2.19a149.63 149.63 0 0 1-4.9 9.07c-1.45 2.54-2.9 5.1-4.24 7.71C7.3 26 4.95 32.04 4.54 38.91 3.97 48 7.42 57.99 14.72 63.36l1.07.78.46-1.27a30.54 30.54 0 0 1 3.72-7.18 23.07 23.07 0 0 1 14.66-9.65c2.43-.4 4.84-.25 6.67.63 1.78.85 3.1 2.42 3.4 5.15.64 5.55-2.12 10.34-6.37 13.68-4.27 3.36

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23376), with no line terminators
Category:	downloaded
Size (bytes):	23376
Entropy (8bit):	5.652051770390742
Encrypted:	false
SSDEEP:	384:DMg4QrOvl0ktDo26JL/pPEaOlf0lJ7qFocIUvIWYa2vVzOeVC:yQrOOktDoDRE3lslJOzIYNYa2v/VC
MD5:	672C1436035FD059B992723CDEDD3472
SHA1:	C83F20AA2589B35FEF3E6B0089FB261BB2AE50E4
SHA-256:	A55619FD27A0E1C6C940E668707A13EA02BC52953106260A570C28E5A300C070
SHA-512:	EC7F9012FB16473C70BCDF7016784472477EDC489EDE2D5D3FCDE7497A485F30825D384715E01D080B213D62EFFA4899E3D3AA66DC447E5CA14BBA95049EC370
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/4.c6304c2e.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[4],{"+qGC":function(e,t,n){"use strict";n.d(t,"b",function(){return useGetConversationRatingMessage}),n.d(t,"a",function(){return useGetConversationRatedMessage});var r=n("da4L"),a=n("TbSn"),c=n("ERkP"),i=n("0lfv");function useGetConversationRatingMessage(e){return Object(c.useMemo)(function(){if(e&&e.length){var t=Object(a.a)(e);if(!Object(i.m)(t)){if(Object(r.l)(t))return t;if(Object(r.k)(t)&&e.length>1){var n=e[e.length-2];if(Object(r.l)(n))return n}}}return null},[e])}function useGetConversationRatedMessage(e){return Object(c.useMemo)(function(){if(e&&e.length){var t=Object(a.a)(e);if(!Object(i.m)(t)){if(Object(r.f)(t))return t;if(Object(r.k)(t)&&e.length>1){var n=e[e.length-2];if(Object(r.f)(n))return n}}}return null},[e])}},"1b8i":function(e,t,n){"use strict";var r=n("s8DI"),a=n("da4L"),c=n("ERkP");t.a=function useTimedMessages(e,t){var n=Object(c.useState)(function(){return e}),i=Object(r.a)(n,2),u=i[0],o=i[1],s=Object(c.useRe

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1985), with no line terminators
Category:	downloaded
Size (bytes):	1985
Entropy (8bit):	5.096937880977625
Encrypted:	false
SSDEEP:	24:H9cj4Ej+mrA3b7ml77bKHDjKqh9HDGPgYfnBKFVDB6Aq16KybQ012oxrwGS:dcjfjrA3fW2Ii6AqTys0A04
MD5:	F75A488B8F1B1C7ED616F8C6AAC35BDF
SHA1:	5BB53F0A51A5DA35D486B0AF799298EA47985C62
SHA-256:	9D0235B025529C0EC411120986A2FC6AFFEB7F1963032599CAAB47903E966EB7
SHA-512:	ACCFA160E80FEBE8F533404569A3E0DBCE3B152FF2F839217D048C8024531B41C75DCBCD9606A303F8AD96AF674BF9C33045B5CCEBC6436B83963E9754187185
Malicious:	false
Reputation:	low
URL:	https://signable.app/css/chunk-c6e20010.e1aaddd4.css
Preview:	.o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100% - 30px);max-height:calc(100% - 30px);-webkit-box-shadow:0 0 20px 2px #222;box-shadow:0 0 20px 2px #222;-webkit-transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out,-webkit-transform .15s ease-in-out}.o-modal__box__header[data-v-f1eb06a4]{padding:var(--spacing-base);border-bottom:1px solid var(--color-border);margin-bottom:0}.o-modal__box__content[data-v-f1eb06a4]{padding:var(--spacing-base);max-height:calc(100vh - 94px);overflow-y:auto}.o-mod

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15101), with no line terminators
Category:	downloaded
Size (bytes):	15101
Entropy (8bit):	5.349652521226954
Encrypted:	false
SSDEEP:	192:vbUAjnppjJHd8Lq8RTljwXXledVrnL5/UKzqhPb0bjwWGZp/BpdBePvM0S:XjDv8O8RT5CledJnLmhPb0bjwzBpd4XS
MD5:	80F13D7001AAC5B9753482C8CE0C34E1
SHA1:	A004D54953547711D536192828408B814AC4388A
SHA-256:	E65BF744EF27DC33B093F4A9B9C3EEB9049B4361329A8A2DE839B3C4CC447D9A
SHA-512:	29C1CAF91E1AA67B79AB6960BCF7506A30AC466367F555BECA9A4D8BCB036DC8E89BB9E37FD65FA92827B4A7B969BC8949106E201AB59F0F65D4FB30D904578A
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/28.0bf965fa.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[28],{"+MHw":function(e,t,n){"use strict";var c=n("ERkP"),a=n.n(c);t.a=function FillerElement(){return a.a.createElement("div",{"aria-hidden":!0,"aria-label":"exiting drift widget",role:"button",tabIndex:0})}},"3y+j":function(e,t,n){},"BA/U":function(e,t,n){"use strict";n.d(t,"a",function(){return c});var c=function onKeyDownSubmit(e){var t=!(arguments.length>1&&void 0!==arguments[1])\|\|arguments[1];return function(n){(function isEnter(e){return"Enter"===e.key\|\|13===e.keyCode}(n)\|\|t&&function isSpace(e){return"Space"===e.key\|\|32===e.keyCode}(n))&&(n.preventDefault(),e())}}},BY8A:function(e,t,n){"use strict";var c=n("s8DI"),a=n("QtlZ"),o=n("Hvhg"),i=n("ERkP"),r=n.n(i),s=n("rTkt");n("zoZM");t.a=function ThemeStyleSheets(){var e=Object(i.useState)(!1),t=Object(c.a)(e,2),n=t[0],l=t[1],u=Object(o.b)(Object(a.b)());return Object(i.useEffect)(function(){n\|\|(Object(s.a)(u),Object(s.b)(u),l(!0))},[u,n]),r.a.createElement("div",{className:"drift

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (524)
Category:	downloaded
Size (bytes):	1957
Entropy (8bit):	5.232286411400198
Encrypted:	false
SSDEEP:	48:4QquwkY3hMkpwxlx0rkpwkrdx6dkpwZnpcduawmpF:dRwkeHexteV+e7cdudIF
MD5:	E8FE69F26071DBE4C13BE73CE7EDCFA1
SHA1:	EAD32922567DFE21884CF778A31E37841FD69447
SHA-256:	885540ED2A1EAE9D1F4597D7769652D197120981609540C62C7044D866869185
SHA-512:	F89AFACBEA16CC631EF68D3909E31ED8C9BCF205220FFD3B75B4C0CE78886E5F7F610B4204A182E03302C995A9F5E58D5C8829DADD153D674F95B629FAEC2E00
Malicious:	false
Reputation:	low
URL:	https://js.hs-scripts.com/4564783.js
Preview:	// HubSpot Script Loader. Please do not block this resource. See more: http://hubs.ly/H0702_H0..var _hsp = window._hsp = window._hsp \|\| [];. _hsp.push(['addEnabledFeatureGates', []]);.!function(t,e,r){if(!document.getElementById(t)){var n=document.createElement("script");for(var a in n.src="https://js.hs-banner.com/v2/4564783/banner.js",n.type="text/javascript",n.id=t,r)r.hasOwnProperty(a)&&n.setAttribute(a,r[a]);var i=document.getElementsByTagName("script")[0];i.parentNode.insertBefore(n,i)}}("cookieBanner-4564783",0,{"data-cookieconsent":"ignore","data-hs-ignore":true,"data-loader":"hs-scriptloader","data-hsjs-portal":4564783,"data-hsjs-env":"prod","data-hsjs-hublet":"na1"});.!function(t,e,r){if(!document.getElementById(t)){var n=document.createElement("script");for(var a in n.src="https://js.hsleadflows.net/leadflows.js",n.type="text/javascript",n.id=t,r)r.hasOwnProperty(a)&&n.setAttribute(a,r[a]);var i=document.getElementsByTagName("script")[0];i.parentNode.insertBefore(n,i)}}("Lea

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34328, version 1.0
Category:	downloaded
Size (bytes):	34328
Entropy (8bit):	7.992979044306872
Encrypted:	true
SSDEEP:	768:uqpAcq0VxJf84TA7p22MZ1m6wm17Uvm87BfmrrfpoQHzB:HqixJk7YlHmXm1gvm3hoQHzB
MD5:	6581AB53C220B5828E37162349375431
SHA1:	1922912CA5AB6EB5A55DB138B183B38D066E85C8
SHA-256:	A8E429611131E3FDC2018EC943A36100DBABB4AAA788C8DEAD6BDCF927917293
SHA-512:	B8FE079BD4AACD01FA41799999452B27051A4CCB4DBB91D9E1F2662C5D6112032B1633DFB2E31DB71F57FB4511A48B55646D034BD6F81CAF017ED0DACE0603F2
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2
Preview:	wOF2...............D..............................l..H...?HVAR...`?STAT..'...@/l.....p.<....0..F.6.$..(. ............l.V3.....'%6..&...%;N5.!l.@4.[.......}Xw.F....R..z..i"\:.S.v..g..j..s\...E(...B...#43....f..i.ql....\|>6.4..C..\..D\|fmt..C......'./.`..T.........[.3.......}H\.R.8.6w].b.:.]'..x..}/....J tA...V>..w\..5..W..j6..f.Z.b...#( .@bHH..nv....3.;...@......\..v..1Hr.v....=<.._P.......l..#...@....h.kx^....U..t..E.g4K.D....#.1v.7.3VD.....)...jt.yk..s..O.'.U.Z.....y.D....\.b.<!$..!h....x(T.B.!..n....kG.;k...kU).u..jG.."..@..Hc.B..o)ex..?"G.16....F...q.}.z...g.U..(....?...?........E.F1.1P.Ft.....c.w....n3.o.9.Z2..P,5..QNmF+Hv.V..!..!..)....}.z.../ .r.x......db..GY.e.;.....l..k.....h..S.....X.1..y.P.v>..V..h@j.m.......Z..n..am..s>w.C...4.Rl.....s.J..n...1.h..........'.5(..s..Zc..>r.s..G.r6...l.xf,mJ.,........J..4.......>m&.=.u..[v...y37I&K...,~ ..An..A.P1...'l....p.u.U.....k.i..5w.ou..~u._E.`....}?..............BF...(....1**.=2...#q.m?K.YD....y

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52086), with no line terminators
Category:	downloaded
Size (bytes):	52086
Entropy (8bit):	5.329781669630014
Encrypted:	false
SSDEEP:	768:wNH5zYoNbmP+FUJcBtopGTaY/HcAcbcVvwDaTLYqj6cw6aKKQoZjjQXajW2nHBq3:mzPUNW6HBJPkb/
MD5:	65582F3567A286FAB01DAC57127BB2CA
SHA1:	41A519F2BD63E1D7A0A32D3375C99460BA5CF605
SHA-256:	EE4305BA590FDEA230B8B0FAE2638C70FFD4D2B9131C8D1689ECAA750B661836
SHA-512:	29A159F2FB55CFB1C6E39CB40E670D2BFC6EA06B00867B42634D134E1D73BBFE4DC85BA54667E691BB03CEDE2B6E5FF8D80B00AA68372E180AE7EE2E68B9975E
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/24.a37bd669.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[24],{"+f1A":function(e,t,n){"use strict";n.d(t,"q",function(){return s}),n.d(t,"w",function(){return d}),n.d(t,"m",function(){return l}),n.d(t,"b",function(){return f}),n.d(t,"a",function(){return b}),n.d(t,"t",function(){return O}),n.d(t,"u",function(){return p}),n.d(t,"r",function(){return v}),n.d(t,"k",function(){return E}),n.d(t,"s",function(){return g}),n.d(t,"e",function(){return j}),n.d(t,"g",function(){return _}),n.d(t,"h",function(){return I}),n.d(t,"f",function(){return C}),n.d(t,"l",function(){return m}),n.d(t,"p",function(){return h}),n.d(t,"c",function(){return T}),n.d(t,"v",function(){return y}),n.d(t,"o",function(){return S}),n.d(t,"i",function(){return R}),n.d(t,"j",function(){return A}),n.d(t,"n",function(){return N}),n.d(t,"d",function(){return x});var r=n("mj2O"),a=n.n(r),c=n("7SM1"),i=n("QtlZ"),o=n("NFvl"),u=n("LVcX"),s=function getSession(){if(!i.a\|\|!i.a.getState)return{};var e=Object(i.b)().session;return void 0

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3980)
Category:	downloaded
Size (bytes):	4032
Entropy (8bit):	5.214059698767629
Encrypted:	false
SSDEEP:	96:tirnUrm/VQcWS5229IDKMNGTNINFIeQT6pKCImNKUMd:gUwQcWS5G8NSIc73a
MD5:	AAC84E84C6FBF7028818B994931DDA75
SHA1:	ED80EE3333FED60A8741DA18678932B0B7EFEC07
SHA-256:	7C27D7BA0F89153A9B1D4CEDE4FAACCDD68D198B29BCBA9AA96009AA2CDE9C13
SHA-512:	AB950635212548F15C9A91244DE76A597B4BE9055E35E44BE30586B8D53933079A790E470CD3AEA9610833D6DEF4FD804FAD45389E892A146F8ACD20D0D02D93
Malicious:	false
Reputation:	low
URL:	https://signable.app/js/chunk-85d922d4.b5344bc9.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-85d922d4"],{"0920":function(t,e,a){},"1cdc":function(t,e,a){"use strict";a("d593")},"7118d":function(t,e,a){"use strict";a.r(e);var o=function(){var t=this,e=t._self._c;return e("VModal",{attrs:{name:"template-create-modal",loading:t.loading}},[e("h2",{attrs:{slot:"header"},slot:"header"},[t._v("\n "+t._s(t.$t("templates.newTemplate"))+"\n ")]),e("div",{attrs:{slot:"content"},slot:"content"},[e("TWFilePicker",{staticClass:"m-uploader",attrs:{uploaderMessage:t.$t("functional.uploaderMessage"),accept:".pdf,.docx,.doc,.xlsx,.xls","data-ec":"templates_create_template_modal","data-et":"file_uploader"},on:{add:t.uploadHandler}}),e("br"),e("VMessage",{attrs:{type:"info",subtype:"outlined",fullwidth:!0}},[e("FontIcon",{attrs:{slot:"icon",name:"info-circle"},slot:"icon"}),e("span",{attrs:{slot:"text"},slot:"text"},[t._v(t._s(t.$t("templates.onlyFileTypesWarning")))])],1)],1)])},n=[],s=a("768b"),i=(a("96cf"),a("3b8d")),c=(a("5

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34643)
Category:	downloaded
Size (bytes):	34695
Entropy (8bit):	5.1563332046841
Encrypted:	false
SSDEEP:	768:n/RK/m/aU/R+AdPEA9xJazNSrVvN3Oh0P9VOIS:/RKyRlEA9TazNSrVvN3Q0P9Vs
MD5:	0C583598DFE2AB2E1A45B1CC56D006EC
SHA1:	A4CEFB9A6DE3E16EC914636B319794D1C8DF49C1
SHA-256:	68786BB5D55C28B087E06F7770A7C947D8B973C947D652D1294A760C9A94036C
SHA-512:	6755F82E4D10B80EE97CD80472EA1DA91C3493718BA04CE08A68ED0A1B583E7FA2856CAF786C08DB621A572A24B8AC03F20E5A92A35654D882F00FD04A3617F2
Malicious:	false
Reputation:	low
URL:	https://signable.app/js/chunk-280daae3.6c402300.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-280daae3"],{"003b":function(e,t,s){"use strict";s("6925")},"0279":function(e,t,s){"use strict";s("173e")},"173e":function(e,t,s){},"2ba5":function(e,t,s){"use strict";s("76ab")},6925:function(e,t,s){},"76ab":function(e,t,s){},adf2:function(e,t,s){"use strict";var a=function(){var e=this,t=e._self._c;return t("div",{staticClass:"w-full text-error flex"},[t("div",{staticClass:"pt-2 px-2 icon"},[e._t("icon",(function(){return[t("FontIcon",{attrs:{slot:"icon",name:"remove"},slot:"icon"})]}))],2),t("div",{staticClass:"pt-2 pl-0 text-14 text"},[e._t("text")],2)])},r=[],n={name:"ValidationError"},o=n,i=s("0c7c"),l=Object(i["a"])(o,a,r,!1,null,null,null);t["a"]=l.exports},dc02:function(e,t,s){"use strict";s.r(t);s("7f7f");var a=function(){var e=this,t=e._self._c;return t("div",{staticClass:"p-partials-users"},[t("div",{attrs:{slot:"row"},slot:"row"},[e.permissionUsers?t("div",[t("div",{staticClass:"inline-flex gap-base justify-b

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5238), with no line terminators
Category:	downloaded
Size (bytes):	5238
Entropy (8bit):	5.158729811445417
Encrypted:	false
SSDEEP:	96:n52/XV1HWQeE57AFYKDNpxKyhe0l0iQLon9aYRSb0P3GL:XQeE57MpNpNe01ZvGL
MD5:	01F12FAC295911BF89B40DAB839F37DE
SHA1:	C3FF3BB09FF7C1D88408ADB056062365F51CC2FF
SHA-256:	47FA1F531FBDBBE134D56B0BE4C7BF0F6D1C2E82D3C6CADF7D495DC0B4B712F5
SHA-512:	5BA92A15A9C7201DF6B1D22E6B972E62E38C540B2E7148DA4A57B219B5AC54584668FB9FD06D34BA9974BD5696152BCC121553A4EF5D156077A9BCA74E6AEF2A
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-content/themes/Signable2019Theme/_/js/functions.out.js?ver=1692089186
Preview:	!function($){function e(){var e=$(window).scrollTop();e>2&&$(".header-wrapper").addClass("onscroll"),e<2&&$(".header-wrapper").removeClass("onscroll")}function t(){$(".card-stack").addClass("active"),$(".card-item").each((function(){$(this).hasClass("top")?($(this).addClass("anim-top"),$(this).removeClass("top"),$(this).removeClass("anim-middle"),$(this).addClass("bottom")):$(this).hasClass("middle")?($(this).addClass("anim-middle"),$(this).removeClass("middle"),$(this).removeClass("anim-bottom"),$(this).addClass("top")):$(this).hasClass("bottom")&&($(this).addClass("anim-bottom"),$(this).removeClass("bottom"),$(this).removeClass("anim-top"),$(this).addClass("middle"))}))}function s(){intervalID=setInterval(t,3500)}function a(){clearInterval(intervalID)}function i(){$(".grid-setter").each((function(){$(this).find(".block-setter").height("auto");var e=0;$(".block-setter",this).each((function(){$(this).height()>e&&(e=$(this).height())})),$(".block-setter",this).height(e)}))}function o(){

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1919), with no line terminators
Category:	downloaded
Size (bytes):	1919
Entropy (8bit):	5.0932328044572355
Encrypted:	false
SSDEEP:	24:H9cj4Ej+mrA3b7ml77bKHDjKqh9HDGPgYfnBKFVDB6Aq16KybQ012oxrh:dcjfjrA3fW2Ii6AqTys0A0F
MD5:	6B34ED69A95FF2DB40A2C944D3FAAA0C
SHA1:	672121879892FD95A887DAE9D442ECA55D601216
SHA-256:	CC828D59A03B75D49ADF88A8D073CC881F02E13EB56C8B4E75FD43E517B87293
SHA-512:	D919FFD5A077E8DA2C8220B73AACEB367D9A7B59F017A6A7E27E84DBFAD9A293A047F91FEEEB22B107DFAFA3C272EEC29F44687038A9CC3C9768A3C283980C28
Malicious:	false
Reputation:	low
URL:	https://signable.app/css/chunk-1e9122a3.470369c5.css
Preview:	.o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100% - 30px);max-height:calc(100% - 30px);-webkit-box-shadow:0 0 20px 2px #222;box-shadow:0 0 20px 2px #222;-webkit-transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out,-webkit-transform .15s ease-in-out}.o-modal__box__header[data-v-f1eb06a4]{padding:var(--spacing-base);border-bottom:1px solid var(--color-border);margin-bottom:0}.o-modal__box__content[data-v-f1eb06a4]{padding:var(--spacing-base);max-height:calc(100vh - 94px);overflow-y:auto}.o-mod

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5064), with no line terminators
Category:	downloaded
Size (bytes):	5064
Entropy (8bit):	4.893189910695674
Encrypted:	false
SSDEEP:	96:57osUc17WlOajf4mYC8DdLdTJk93ik8oLrWrzrsrT0:571eYC8ZLz
MD5:	216D791E61641ACE57D8D11A12BDE01E
SHA1:	28BDE6D98D1C689A712EFE037A9592E9FA103B09
SHA-256:	029DEDF319BC4536D9C663AE9C0B10C95D1E9F5DD1DE0AA73172E9E89AE254CC
SHA-512:	CD31993E3719A13C971386CBCA73AE88CB95E0833F2E8D9CD8FF9E0D070CEE43589A4DC34FD973A9E2001AEEEB0EA9CF44E96B7536F85F2A31A47F33E6C9FAC8
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-content/plugins/cookie-notice/css/front.min.css?ver=2.4.13
Preview:	#cookie-notice,#cookie-notice .cn-button:not(.cn-button-custom){font-family:-apple-system,BlinkMacSystemFont,Arial,Roboto,"Helvetica Neue",sans-serif;font-weight:400;font-size:13px;text-align:center}#cookie-notice{position:fixed;min-width:100%;height:auto;z-index:100000;letter-spacing:0;line-height:20px;left:0}#cookie-notice,#cookie-notice *{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#cookie-notice.cn-animated{-webkit-animation-duration:.5s!important;animation-duration:.5s!important;-webkit-animation-fill-mode:both;animation-fill-mode:both}#cookie-notice.cn-animated.cn-effect-none{-webkit-animation-duration:1ms!important;animation-duration:1ms!important}#cookie-notice .cookie-notice-container,#cookie-notice .cookie-revoke-container{display:block}#cookie-notice.cookie-notice-hidden .cookie-notice-container,#cookie-notice.cookie-revoke-hidden .cookie-revoke-container{display:none}.cn-position-top{top:0}.cn-position-bottom{bottom:0}.cookie-notice-contai

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2783), with no line terminators
Category:	downloaded
Size (bytes):	2783
Entropy (8bit):	5.030747095760829
Encrypted:	false
SSDEEP:	24:Y1AJ3Hkp/yDWTkk3VyBWTikgCyOHFC5fkIhz0s6X06kCvfkaz046X06vCufkrz0y:YWJUVZnLKB4zxi/8x9A5ApRbSR/k
MD5:	87532C4DB85F1429FA6D759BC3332F36
SHA1:	4E576E680C9843DAE6FBBFBAEA10822B3B70158D
SHA-256:	E40B6EAE9D66C60B9C750DA70DA6B2BC5D35C2AE9689CC1E9547E300FAC4A3BA
SHA-512:	CC961007D9F014C4CD2086C977315B26128EF627F707316FE672F3CBE9688BCEAC40B3D24CD4DCC1D390D5A390208004DD3213A23AE293C5C422DE5F89D192E1
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/css/37.11d2b6a7.chunk.css
Preview:	.drift-widget-loader-balls{width:28px;visibility:hidden}.drift-widget-loader-balls>circle{fill:#474647}.drift-widget-loader-balls--visible{visibility:visible}.drift-widget-loader-balls.drift-widget-loader-balls--visible circle:first-of-type{-webkit-animation:bounce 1s infinite;-moz-animation:bounce 1s infinite;-o-animation:bounce 1s infinite;animation:bounce 1s infinite}.drift-widget-loader-balls.drift-widget-loader-balls--visible circle:nth-of-type(2){-webkit-animation:bounce 1s .1s infinite;-moz-animation:bounce 1s .1s infinite;-o-animation:bounce 1s .1s infinite;animation:bounce 1s .1s infinite}.drift-widget-loader-balls.drift-widget-loader-balls--visible circle:nth-of-type(3){-webkit-animation:bounce 1s .2s infinite;-moz-animation:bounce 1s .2s infinite;-o-animation:bounce 1s .2s infinite;animation:bounce 1s .2s infinite}.drift-widget-loader-balls--small{width:16px}@-webkit-keyframes bounce{0%,25%,50%,75%,to{-webkit-transform:translateY(0);transform:translateY(0)}40%{-webkit-transf

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7862)
Category:	downloaded
Size (bytes):	7888
Entropy (8bit):	5.353138562425097
Encrypted:	false
SSDEEP:	192:xIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxOn:x2kNdcC9J6co91qwLcI6KgkixbdjqBFH
MD5:	5154C9CFEACBA69034CA43D78E1D5FB0
SHA1:	F3F7FA1B40D32A4257D90A2A2196A5E37DF9B24D
SHA-256:	CB34D2EE2A93FD11B734C124A6FC661339585C63382D08EB31BF921B66519EAC
SHA-512:	23F5D6F60E32BD560B13F5817317CC452291FF182F001E712380C43A066E7BEA602AADE7A267D4E30B99EAC72009DCCBE7FAE3552994DA1047357B03BB76DB56
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-content/plugins/sg-cachepress/assets/js/lazysizes.min.js?ver=7.4.6
Preview:	/! lazysizes - v5.3.1 /.!function(e){var t=function(u,D,f){"use strict";var k,H;if(function(){var e;var t={lazyClass:"lazyload",loadedClass:"lazyloaded",loadingClass:"lazyloading",preloadClass:"lazypreload",errorClass:"lazyerror",autosizesClass:"lazyautosizes",fastLoadedClass:"ls-is-cached",iframeLoadMode:1,srcAttr:"data-src",srcsetAttr:"data-srcset",sizesAttr:"data-sizes",minSize:40,customMedia:{},init:true,expFactor:1.5,hFac:.8,loadMode:2,loadHidden:true,ricTimeout:0,throttleDelay:125};H=u.lazySizesConfig\|\|u.lazysizesConfig\|\|{};for(e in t){if(!(e in H)){H[e]=t[e]}}}(),!D\|\|!D.getElementsByClassName){return{init:function(){},cfg:H,noSupport:true}}var O=D.documentElement,i=u.HTMLPictureElement,P="addEventListener",$="getAttribute",q=u[P].bind(u),I=u.setTimeout,U=u.requestAnimationFrame\|\|I,o=u.requestIdleCallback,j=/^picture$/i,r=["load","error","lazyincluded","_lazyloaded"],a={},G=Array.prototype.forEach,J=function(e,t){if(!a[t]){a[t]=new RegExp("(\\s\|^)"+t+"(\\s\|$)")}return a[t].test

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36995), with no line terminators
Category:	downloaded
Size (bytes):	36995
Entropy (8bit):	5.200129010508312
Encrypted:	false
SSDEEP:	384:z90Wjj74oB5Tf1JcNvDIweEzpg3pmAX7XODXWcWLfN5HS8IWpMvyfA+g/v:z90yj74A4pDNpM7XGWRfN51IOfA+2v
MD5:	46FA5A7BC37A22544A908E4AD950309C
SHA1:	7C63D2A96EDDD4BC0D2C1D03947DA197B4625804
SHA-256:	E0C6F8695589DF90E63442FEE1C9CF14E60DFC4FD8CE7296515B1D6DB41E1D3D
SHA-512:	A2A18AE69D4BB9F5D2B8FFD0D4B74ED7F5769E432F5B81DEC8F0DEDF0DDF8AE13144DFDF09098CFEE0B59E44A5381EDE0EE17E96DE88588D40EF8B285EBA04C6
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/35.d0f1ccda.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[35],{"+nxv":function(e,t,n){"use strict";n.d(t,"a",function(){return initAndBind});var r=n("zgdO"),i=n("usiZ");function initAndBind(e,t){!0===t.debug&&("undefined"===typeof __SENTRY_DEBUG__\|\|__SENTRY_DEBUG__?r.c.enable():console.warn("[Sentry] Cannot initialize SDK with `debug` option using a non-debug bundle."));var n=Object(i.a)(),s=n.getScope();s&&s.update(t.initialScope);var a=new e(t);n.bindClient(a)}},"5g57":function(e,t,n){"use strict";n.d(t,"a",function(){return v}),n.d(t,"b",function(){return addGlobalEventProcessor});var r=n("WwEg"),i=n("jm9a"),s=n("nfbA"),a=n("uIJS"),o=n("wQh9"),c=n("26VM"),u=n("xqFT"),_=n("bTzN"),d=n("zgdO"),l=n("Iwrg"),p=n("2nP+"),f=n("Te+l"),v=function(){function Scope(){Object(a.a)(this,Scope),this._notifyingListeners=!1,this._scopeListeners=[],this._eventProcessors=[],this._breadcrumbs=[],this._attachments=[],this._user={},this._tags={},this._extra={},this._contexts={},this._sdkProcessingMetadata={}}r

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 313 x 44, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4771
Entropy (8bit):	7.929993464328815
Encrypted:	false
SSDEEP:	96:gSCGMag8R9F50j6zTZUas+xtqrLmo1MzmYOyBcw1wLBWa4Eq1lnJOD:gSCGMYYj6zSavxevWBcow9Wqq1lnQD
MD5:	CF7B945DF6E1A4C09215F359F2A801A7
SHA1:	B1F1B1DDCAD82CBFDA6C038D74D21241C4AA95A1
SHA-256:	4093D7F2816722766D144C2639808EEEF4F96C18725F08EB78EA8154DBE61C25
SHA-512:	6608EDD8D91FC8406D862B2590D0897A5FE6AEF40EC45B8FCA80236E2A3FCA50F10F1562D2EA645088E9D3D2813598A704095984179DE45425EDBD4B400AAFFD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...9...,........m....pHYs.................sRGB.........gAMA......a....8IDATx.....E....3 .(..F3....2..9.........7\....(n..........+.&...(F....AC.....X?....G...~.$...{.;_..]]u..7....-..~..?i..#.p.......F...W....#Fl.....#.j.Ln..[5F&7b!.\|..F.X@.mb..9z......h.P.W.f......a...)G....~.b.........u.L.....}.po<........}......}..>..}..).wt.pmm..lG.........h...................8./..9n.h.p}..+.].h..U....!.....O.........}S.~...@.g.;..v....T.`.GK...p....}K.y..7...B?.q...:.._....m..st........hN.._...P...1.`x......}F..4.q/.:Z......=.L..9.]F..9...v.4Q.q.w...v.8w..cC...".}......,..ey.?.c.}....}I....aE.....yF@{l8..}....~...=.<......w....~.....4.:.\|U~>...g..8.Q~.9-.Y............L.yp.........\|]y..n{F...dr;:zc.v.t<../{.....g#...<.c.{.r..\|.&..W...G?....3....g>.Q).....~...A.[?.W;z.....p...gv1.......5...<l.......n..I...jG............k.x.1.{...]%.yD..-.\...K.`B_6@.C09&l..j.;....,.I=.t...:.gr....U.j.P..t..1.c..\|..:.....H..\E..rb......J.-.%6T...u`.'.~

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7659)
Category:	downloaded
Size (bytes):	7711
Entropy (8bit):	5.24289701203576
Encrypted:	false
SSDEEP:	96:fWVCj+irY1zNdL3H0xNJGUO1J+lYZPVMVm74x/v/0CUimC2ZkSdz7S6kTHP1wn3I:fWx5QSVMw4jUvfY6kTtc3vc0Di1D
MD5:	7F04402515500EECB675633809763CEA
SHA1:	27F6BE9466255DE0D344A50F08615C3F9233E91B
SHA-256:	334E52AD25228790D8462CF9F7BFF7B47C7BD38CC6F894959C643324054F134B
SHA-512:	93F4511F41D0AD3A691FA677660B415DA235CCEFF9BF702D69B12807DC153F16EDF8E8C5DB813A51BAD5DA90346075D74DE87CEDF2DA89B05BD8CC59E2769487
Malicious:	false
Reputation:	low
URL:	https://signable.app/js/chunk-00a20ec4.d702e96a.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-00a20ec4"],{"0453":function(e,t,o){"use strict";o("8fb1")},"0920":function(e,t,o){},"1ae5":function(e,t,o){"use strict";o.r(t);o("7f7f");var a=function(){var e=this,t=e._self._c;return t("VModal",{staticClass:"add-edit-checkbox-groups-modal",attrs:{name:"add-edit-checkbox-groups-modal",size:"small",loading:e.loading}},[t("h2",{attrs:{slot:"header"},slot:"header"},[e._v(e._s(e.$t("createEnvelope.documentSetup.fieldConfiguration.addEditCheckboxGroupsModal.addOrEdit")))]),t("div",{staticClass:"add-edit-checkbox-groups-modal__box__content",attrs:{slot:"content"},slot:"content"},[t("div",{staticClass:"add-edit-checkbox-groups-modal__search"},[t("VInput",{attrs:{type:"text",placeholder:e.$t("createEnvelope.documentSetup.fieldConfiguration.addEditCheckboxGroupsModal.search"),icon:!0,fluid:!0,clearButton:!0,"data-ec":"add_edit_checkbox_groups_modal","data-et":"search_groups_input"},model:{value:e.searchText,callback:function(t){

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 57, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1803
Entropy (8bit):	7.283421846950444
Encrypted:	false
SSDEEP:	24:hUA1hTWwjx82lY2T3gV5P6ayJ3V/WcVGdDG+jrDKqc2CvFZJX6iw5MsO09JsS87:ie4Nn2scJ30Kgy+jrDKdVFzX6fOmc
MD5:	F84A5F58E0F90FC3955128C7CC4B1A8E
SHA1:	ED087D9732D2E85FC931EDBD4B1C831DC3874417
SHA-256:	1C73E4DF2427F9D6FD6C2265061D018F9DA3DDE2279476F891E8D2CF2C6041EB
SHA-512:	A77D85CE8956579807D433D061E9EC1B4C4959A750EE7C35D55652DD8DB1AECE3D3976533F7D80F33DE4BEBF892032B5C9022F8F807BFE1E25158D6D889BE78F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...9.....j1H.....tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.1b65a79b4, 2022/06/13-22:01:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 23.5 (Macintosh)" xmpMM:InstanceID="xmp.iid:121B7703326C11EDADD3C39C8B2C9C6E" xmpMM:DocumentID="xmp.did:121B7704326C11EDADD3C39C8B2C9C6E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:121B7701326C11EDADD3C39C8B2C9C6E" stRef:documentID="xmp.did:121B7702326C11EDADD3C39C8B2C9C6E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......yIDATx..Ih.A..+N..z.#j...p...q.k..B..^\@.Q. W....!.4^.Nn......1..cD.(.*D.....h....JwUw.........z.

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	4.194526038172471
Encrypted:	false
SSDEEP:	48:OnwAvOJrHlRBitTU1oM6eqtX9yFqgLxu0FfS:O8BitTLe7kgn1S
MD5:	D55EE73E0EE13CD2D9D7574AB87117AB
SHA1:	C915B233839C8F037E7C5BC5D28931053E08F23E
SHA-256:	95E489F0A2E1313B25A46D5070706E60FCD3D3C7F6AB49D543C2E41D25F3A479
SHA-512:	B60901DAC78F4F966843022C28D2F9BE241030C47445D14AC1D26549B5513A8220A2D9C62501A6CFC7C2CF717CA9CC452BA0747E422FCA52FB7F4A5B0ADBEFDD
Malicious:	false
Reputation:	low
Preview:	<svg width="147" height="87" viewBox="0 0 147 87" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M140.871 30.5528C139.659 35.0367 138.499 38.7095 137.863 40.5545L137.381 41.1487C134.417 48.5497 130.067 55.3247 124.557 61.106C118.528 67.4321 111.244 72.4288 103.172 75.7758C83.7103 83.7024 59.7106 80.7546 43.1164 67.6338C37.2003 62.9048 32.8556 56.4945 30.6549 49.2474C33.669 46.9856 36.3911 44.3587 38.7588 41.427C45.3511 33.2799 52.3589 19.2899 49.8588 8.47444C48.8684 4.15146 45.7315 0.652968 41.1648 0.182732C34.9778 -0.466366 30.3376 4.17256 27.5239 9.11642C21.1142 20.2883 20.6331 34.2942 23.5111 46.627C20.2384 48.6054 16.6591 50.0248 12.9201 50.8272C1.73962 53.1817 -10.3375 49.2199 -16.9271 39.5444C-24.055 29.0062 -20.5995 15.4183 -17.7076 4.04684L-17.6449 3.80024C-16.6571 -0.0581247 -22.8257 -0.77548 -23.7986 3.0444C-27.0396 15.8145 -30.0478 30.1346 -22.6297 42.0881C-16.4575 52.0449 -4.97806 57.8375 6.62391 57.711C13.1685 57.593 19.582

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23865), with no line terminators
Category:	downloaded
Size (bytes):	23865
Entropy (8bit):	5.17066773670714
Encrypted:	false
SSDEEP:	384:dEiPYBr8tDTHrmZjlvbbPal9pGh6rk4scHWeqBEcpAODhBwXTzWDg8GUeAwkO06o:OigBgtnQvbbPkGh6Q4scQEcpAODySDig
MD5:	4049F38C00ADD1738DC4806148FF8829
SHA1:	0A631D2CCDE970A13F60E147A5B5AEACB6A1B2E0
SHA-256:	C501DE88FBB90A445F1754A529BC772E7047071BF653C8C3F0330F7BB736D140
SHA-512:	8ADA588F646C3D9456EA5C8F28C994078B6D2F88527E998C3329F53BD915403283F498E31A9532B7488DC23C74F0CB60AFC93F47891D9E73CF6FB96085A97EC1
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/11.639238ba.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[11],{"0B8E":function(t,n,e){"use strict";var r=e("rAc1"),u=e("PYcH");function hasOrAdd(t,n,e){var r,c=typeof t;switch(c){case"string":case"number":return 0===t&&1/t===-1/0?!!e._items["-0"]\|\|(n&&(e._items["-0"]=!0),!1):null!==e._nativeSet?n?(r=e._nativeSet.size,e._nativeSet.add(t),e._nativeSet.size===r):e._nativeSet.has(t):c in e._items?t in e._items[c]\|\|(n&&(e._items[c][t]=!0),!1):(n&&(e._items[c]={},e._items[c][t]=!0),!1);case"boolean":if(c in e._items){var a=t?1:0;return!!e._items[c][a]\|\|(n&&(e._items[c][a]=!0),!1)}return n&&(e._items[c]=t?[!1,!0]:[!0,!1]),!1;case"function":return null!==e._nativeSet?n?(r=e._nativeSet.size,e._nativeSet.add(t),e._nativeSet.size===r):e._nativeSet.has(t):c in e._items?!!Object(u.a)(t,e._items[c])\|\|(n&&e._items[c].push(t),!1):(n&&(e._items[c]=[t]),!1);case"undefined":return!!e._items[c]\|\|(n&&(e._items[c]=!0),!1);case"object":if(null===t)return!!e._items.null\|\|(n&&(e._items.null=!0),!1);default:return(c

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (7579)
Category:	downloaded
Size (bytes):	11192
Entropy (8bit):	5.362099439802581
Encrypted:	false
SSDEEP:	192:i9Pw7TaMrYEZjybvcZamblnVMoQLv5Gx4QjYscTlNxSw:iUTvYJbvcaMkLv50ilNww
MD5:	1BE3722C1E7A6FB48614864BC13815DF
SHA1:	75BFDECCC3D007125D67C0BB7B3414DC33294292
SHA-256:	484F0D3CF70A2BFB52EC776C2ADF998BDCAF2AAB7C87D5F5D8B6D44B8A740E77
SHA-512:	F735F512F4D40A257A8B56E45615503692FEB573240E1F6A38C4976158E19BB4BC30F3584CD1047F42B2D416F2BE7FAB8AA4BFC2A2B44E30CFAA6857375ED595
Malicious:	false
Reputation:	low
URL:	https://static.hotjar.com/c/hotjar-983768.js?sv=7
Preview:	window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":983768,"r":0.3761128711970899,"rec_value":0.01,"state_change_listen_mode":"automatic_with_fragments","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":true,"session_capture_console_consent":false,"anonymize_digits":false,"anonymize_emails":true,"suppress_all":false,"suppress_all_on_specific_pages":[],"suppress_text":false,"suppress_location":false,"user_attributes_enabled":false,"legal_name":"Signable","privacy_policy_url":"https://www.signable.co.uk/privacy-policy/","deferred_page_contents":[],"record_targeting_rules":[],"feedback_widgets":[],"heatmaps":[],"polls":[{"id":693187,"created_epoch_time":1621855115,"skin":"dark","background":"#333333","effective_show_branding":true,"position":"right","content":{"version":2,"questions":[{"answers":[{"comments":false,"text":".. Love"},{"comments":false,"text":".. Like"},{"comments":false,"text":".. Neutral"},{"comments":false,"text":".. Dislike"},

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	downloaded
Size (bytes):	598174
Entropy (8bit):	5.358339010926791
Encrypted:	false
SSDEEP:	12288:I+/FZd4SYsSq2/HfHsHfHz1wd4Mci+bGPBXkD+sR8I4k6inrIo0jvE3tIajcOIYT:fMci1aBCwRHbL4e4J41
MD5:	E4C35B17ABD71C006F39F6CB290C60D0
SHA1:	D1B93FD49D4C7AF12C8B7CC372ACEDD14CEDDC3D
SHA-256:	8AFAB79BFFED064A118EF12A608DD0F0379068E6C74670AF6654F2F1C8B165F1
SHA-512:	504C7E70B658B60D2675C3EA75D8640AFF986839DDB2AC395F2F6180B6792C7F38EDD82E04D7E3FB4E43C8E1CFD4012BFFB78A675B96BA2201443024769A2C6B
Malicious:	false
Reputation:	low
URL:	https://js.stripe.com/v3/
Preview:	!function(){function e(t){var n=o[t];if(void 0!==n)return n.exports;var a=o[t]={id:t,loaded:!1,exports:{}};return r[t](a,a.exports,e),a.loaded=!0,a.exports}var t,n,r={723:function(e,t,n){"use strict";function r(e){l.length\|\|(i(),!0),l[l.length]=e}function o(){for(;d<l.length;){var e=d;if(d+=1,l[e].call(),d>1024){for(var t=0,n=l.length-d;t<n;t++)l[t]=l[t+d];l.length-=d,d=0}}l.length=0,d=0,!1}function a(e){return function(){function t(){clearTimeout(n),clearInterval(r),e()}var n=setTimeout(t,0),r=setInterval(t,50)}}e.exports=r;var i,c,s,u,l=[],d=0,p=void 0!==n.g?n.g:self,m=p.MutationObserver\|\|p.WebKitMutationObserver;"function"==typeof m?(c=1,s=new m(o),u=document.createTextNode(""),s.observe(u,{characterData:!0}),i=function(){c=-c,u.data=c}):i=a(o),r.requestFlush=i,r.makeRequestCallFromTimer=a},5937:function(e,t,n){e.exports=n.p+"fingerprinted/img/abnamro-4445e65420800f96f68cfc67a273f66b.svg"},1520:function(e,t,n){e.exports=n.p+"fingerprinted/img/asn-3d9b1bbff2f8f12105510992dbb37ae8.svg

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2076), with no line terminators
Category:	downloaded
Size (bytes):	2076
Entropy (8bit):	5.105409989685704
Encrypted:	false
SSDEEP:	24:H9cj4Ej+mrA3b7ml77bKHDjKqh9HDGPgYfnBKFVDB6Aq16KybQ012oxrT2rf:dcjfjrA3fW2Ii6AqTys0A0Ef
MD5:	0A31CB6C400184A90A75BBE16744AFA2
SHA1:	42A8E2F91C9ADBD78DE0146AAD0D4CE507010CD6
SHA-256:	3C2D6A4BBA5E74CDB649F7D4FD195CE2E3D97B45E55E7A6F5221A6AFC014DB25
SHA-512:	FA86E9E4EEBCBD6D34EB1F415DC09B105F930908A6E6107227585CF03A19577DC8555C31A5C89FB62F3A06C1CD83BF5E45B6C7A543877E151DDB83A0DDF2EBD9
Malicious:	false
Reputation:	low
URL:	https://signable.app/css/chunk-85d922d4.4a74123c.css
Preview:	.o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100% - 30px);max-height:calc(100% - 30px);-webkit-box-shadow:0 0 20px 2px #222;box-shadow:0 0 20px 2px #222;-webkit-transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out,-webkit-transform .15s ease-in-out}.o-modal__box__header[data-v-f1eb06a4]{padding:var(--spacing-base);border-bottom:1px solid var(--color-border);margin-bottom:0}.o-modal__box__content[data-v-f1eb06a4]{padding:var(--spacing-base);max-height:calc(100vh - 94px);overflow-y:auto}.o-mod

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64330)
Category:	downloaded
Size (bytes):	68089
Entropy (8bit):	5.2999149134458685
Encrypted:	false
SSDEEP:	1536:ww+AikCt5CadeJfVcnZXPNtWbCscVDXXl6lzlIgEXzsjX80CoEFfOpDw6usi5T/n:MNKCYlzlIgEXe4Ie
MD5:	4A23330658A01EF515B77C2A34E14B56
SHA1:	5ABD826E6A94A9FF1C3BBC72959B774D87877B6C
SHA-256:	644C3D85B650A8F5EE349744C4C3125427EC05B58A412D69A71256EDADB103FC
SHA-512:	7EE2FAD67766B769EB3C5582A87327BFC42B73E2A45219274A2D0B0FC9931F610E214D45D8790DE061F74F94C16B835AA16E91E9CE1BED6862D92D9E7C0DDE09
Malicious:	false
Reputation:	low
URL:	https://js.hs-analytics.net/analytics/1705440600000/4564783.js
Preview:	/** . * HubSpot Analytics Tracking Code Build Number 1.590. * Copyright 2024 HubSpot, Inc. http://www.hubspot.com. */.var _hsq = _hsq \|\| [];.var _paq = _paq \|\| [];._hsq.push(['setPortalId', 4564783]);._hsq.push(['trackPageView']);.try {.// 'true' tracks this event on every page view.if (true) {._hsq.push([. 'trackCustomBehavioralEvent',. {. name: "pe4564783_test___api_key",. properties: {. // give each property a value so we know what they mean. . },. },.]);.}.} catch (e) { _hsq.push(['log', 'customJsError', e]); }._hsq.push(['setLegacy', false]);._hsq.push(['addCookieDomain', '.hs-sites.com']);._hsq.push(['addCookieDomain', '.hubspotpagebuilder.com']);._hsq.push(['addCookieDomain', '.hubspot.com']);._hsq.push(['addCookieDomain', '.hsforms.com']);._hsq.push(['addCookieDomain', '.signable.co.uk']);._hsq.push(['addCookieDomain', '.signable.app']);._hsq.push(['addCookieDomain', '.signable.nl']);._hsq.push(['enableAutomaticLinker', true]);._hsq.push(['embedHubSpotScr

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87553
Entropy (8bit):	5.262620498676155
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO
MD5:	826EB77E86B02AB7724FE3D0141FF87C
SHA1:	79CD3587D565AFE290076A8D36C31C305A573D18
SHA-256:	CB6F2D32C49D1C2B25E9FFC9AAAFA3F83075346C01BCD4AE6EB187392A4292CF
SHA-512:	FC79FDB76763025DC39FAC045A215FF155EF2F492A0E9640079D6F089FA6218AF2B3AB7C6EAF636827DEE9294E6939A95AB24554E870C976679C25567AD6374C
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2582), with no line terminators
Category:	downloaded
Size (bytes):	2582
Entropy (8bit):	5.161490460205209
Encrypted:	false
SSDEEP:	48:dFdaIUaICToxi0DYlRjZdMijZ8MikZ8MigUyKZ8Mii:djaIUaICUxi08TjZdMijZ8MikZ8MigUJ
MD5:	9CE610FAE67C22A59184848C3810FD8E
SHA1:	BB33875387FCDBBF310E49580922DDACDEF0A004
SHA-256:	441898D5DB4E5F6DC6035A6788CDA631265F9BA1D9E1043EE657ED71DB5182C1
SHA-512:	2146E7C5A32338F11B7628A9BDEC959EB3114BA7AC6F484C6E6891762C60109ABF0063E3FBF7104894915F00479966F4E87087862B7ADE3DE249668A8D9E3C31
Malicious:	false
Reputation:	low
URL:	https://signable.app/css/chunk-45deaaac.5eef7021.css
Preview:	.card[data-v-6e33619c]{position:relative;width:100%;cursor:pointer;border-radius:.5rem;padding:15px;--tw-shadow:0px 0px 5px -2px #dde2e5}.card[data-v-6e33619c],.card[data-v-6e33619c]:hover{-webkit-box-shadow:var(--tw-ring-offset-shadow,0 0 transparent),var(--tw-ring-shadow,0 0 transparent),var(--tw-shadow);box-shadow:var(--tw-ring-offset-shadow,0 0 transparent),var(--tw-ring-shadow,0 0 transparent),var(--tw-shadow)}.card[data-v-6e33619c]:hover{--tw-shadow:0px 0px 5px 0px #dde2e5}.initials[data-v-6e33619c]{margin-right:15px;display:-webkit-box;display:-ms-flexbox;display:flex;height:28px;width:28px;-webkit-box-align:center;-ms-flex-align:center;align-items:center;-webkit-box-pack:center;-ms-flex-pack:center;justify-content:center;border-radius:60px;--tw-bg-opacity:1;background-color:rgba(61,83,98,var(--tw-bg-opacity));padding:10px;font-size:14px;--tw-text-opacity:1;color:rgba(249,249,249,var(--tw-text-opacity))}.name[data-v-6e33619c]{font-family:Roboto Slab,sans-serif;font-size:24px;lin

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 215, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	21501
Entropy (8bit):	7.961739316275154
Encrypted:	false
SSDEEP:	384:UnA5OpmyBtRDCVEzWSRV5psN96DzkfoICo7t4FrlwG106ttXYbieTa1UWC3M:URppFWqWSPS96zgCUuFrlwHCYXQUWC3M
MD5:	A0949D86F983CB1A3F60A506491B7EF5
SHA1:	8FB564FEE3E936580C1737D21A843C7427176BDC
SHA-256:	7FE12DB1481E25B09E6F825166D4FBA712C8A31A7834B5E4125CE11F1377F030
SHA-512:	489AE034066F1A3659FDE557CF9A76FCB1BDD40EC69C5C39D8EE85772705838D0C060C004FA9535AE1CEE4D8A42B0D404830CA732CB41CD525A1FCF4FDAD2C4F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............4....pHYs...%...%.IR$.....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2def, 2023/02/02-12:14:24 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 24.5 (Macintosh)" xmp:CreateDate="2023-06-19T13:36:58+01:00" xmp:ModifyDate="2023-06-19T13:50:22+01:00" xmp:MetadataDate="2023-06-19T13:50:22+01:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:6dc59530-4203-46c9-8afb-a0389c01714d" xmpMM:DocumentID="xmp.did:6dc59530-4203-46c9-8afb-a0389c01714d" xmpMM:OriginalDocumentID="xmp.did:6dc59530-4203-4

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	16212
Entropy (8bit):	5.46649516939133
Encrypted:	false
SSDEEP:	384:RahIrR2iEkFAXcJrV34UvcbbMi8XndpGmqpB8lJQTPg/6OlIx+PBi3tlXidPyxoV:RGIrciEkWXctV34ucboi8XdpGHpB8/Qi
MD5:	B965E345E4E859EC4BFA24792BDED7AA
SHA1:	B9E598AB3785E63E528BF422DA477675C07383EB
SHA-256:	03EEDFA4B570A9F3AE93616A8E4F7911E1A19881F257D36C242CF744B4B72F21
SHA-512:	01808D16499BB6D9F297CC6164EB65989322EFB37E7B7BCD393F03BB1E704B556E49EF8461D40549F9FFBDD24B8D449E483EDD1595B841478378959AC4477406
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Roboto+Slab:wght@300;400;500&family=Roboto:wght@300;400;500;700&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.g

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4098)
Category:	downloaded
Size (bytes):	4150
Entropy (8bit):	5.20174026530074
Encrypted:	false
SSDEEP:	96:u1vkLd8VQTBPwKuMNwU0r41GdfNwS1rYENNCD72:8vc8KR9dsNfDC32
MD5:	66553734AD611287A310B3F97CB86807
SHA1:	54D1BA325A5BD9725130BE8C50E0B647B2E03A22
SHA-256:	299E9B94A209AA7FEED12BB3DCC7A591582704DFE17147B964F4936284918908
SHA-512:	85239BA7A942ECE526E579501B95CBC1D33FF34E58F6B9B2702FB41B626668CF5C8AB951A26010469B62C80634CE88278AA0015694BCEF473A3065616D2058C5
Malicious:	false
Reputation:	low
URL:	https://signable.app/js/chunk-1565c410.9229aed9.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-1565c410"],{"0920":function(e,t,a){},"36bf":function(e,t,a){},"3d6b":function(e,t,a){"use strict";a("36bf")},"7b7a":function(e,t,a){"use strict";var o=function(){var e=this,t=e._self._c;return t("div",{class:e.classList},[t("div",{staticClass:"o-modal__box"},[e.loading?t("VLoadingSpinner"):e._e(),t("a",{staticClass:"o-modal__box__close",attrs:{href:"#",tabindex:"0"},on:{click:function(t){return t.preventDefault(),e.close.apply(null,arguments)}}},[t("FontIcon",{attrs:{name:"times"}})],1),e._t("header"),t("div",{ref:"content",staticClass:"o-modal__box__content"},[e._t("content")],2)],2),t("div",{staticClass:"o-modal__overlay"})])},n=[],s=a("bd86"),i=(a("7f7f"),a("8b9a")),l=a("f46d"),c={name:"VModal",introduction:"A pop up modal.",components:{VLoadingSpinner:i["a"]},mixins:[l["a"]],props:{name:{type:String,required:!0,note:"The name of the modal to pass to the store."},size:{type:String,note:'The size of the modal (can be "

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	8825
Entropy (8bit):	4.007185142786084
Encrypted:	false
SSDEEP:	192:GRYgUCiAa/c/qRcwl1OHZrBVkZEJezFeJwa29shyiERK4i97obSrlZ8j:0JqeHnVxSeJEshydfe7obSQj
MD5:	1F523336660CEB036EEC7D540BA75929
SHA1:	CA6E8C8D04290A2DA5AA33A848C2D9A23870EF01
SHA-256:	E18475DAA358D3203E4D613B1D77D5873F42697B6E2D3DF4E6B6B80291F3EF5E
SHA-512:	822CD2756349338C922C96FC20B903B5FD04BC7CA7D262419D0DED9F5EC39691A1116A06BD4ABB1D2C80F3EBC8262AF9FD1A58A8A539F2ED37DEF8FC7060186E
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-content/themes/Signable2019Theme/_/img/backgrounds/bg_fingerprint.svg
Preview:	<svg width="619" height="760" viewBox="0 0 619 760" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M357.356 484.43V427.646C357.356 405.256 339.141 387.041 316.751 387.041C294.362 387.041 276.147 405.256 276.147 427.646V478.915C276.147 540.698 253.386 600.016 212.053 645.939L155.067 709.258C150.279 714.578 150.711 722.771 156.031 727.561C161.349 732.349 169.543 731.917 174.332 726.597L231.319 663.278C276.94 612.586 302.065 547.112 302.065 478.915V427.646C302.065 419.547 308.653 412.959 316.751 412.959C324.85 412.959 331.438 419.547 331.438 427.646V484.43C331.438 560.461 303.272 633.315 252.128 689.574L196.579 750.678C191.765 755.972 192.155 764.171 197.451 768.985C199.934 771.243 203.053 772.354 206.163 772.354C209.688 772.354 213.199 770.925 215.756 768.112L271.303 707.008C326.795 645.968 357.356 566.922 357.356 484.43Z" fill="#F3F3F3"/>.<path d="M412.647 427.646C412.647 374.768 369.628 331.75 316.75 331.75C263.872 331.75 220.854 374.768 220.854 427.646V478.915C220.854 527.01

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4893)
Category:	downloaded
Size (bytes):	4945
Entropy (8bit):	5.177996701065879
Encrypted:	false
SSDEEP:	96:eINF5GQTqQKCImN9z2rYT1+py0b11pAIVB/yglHrDH+:eS5ciGpyqBVZbHrDe
MD5:	298DAA54AAAF9876374018FA070678C5
SHA1:	D504728AD3C29B70B429B028134E6A81F1A43CCB
SHA-256:	63B327861669CC92E5F4777942080724C3509E38C6563D3AB5FD4C8D4B0A4EEB
SHA-512:	DA1B7D74F9CC484770CAD6C974ECCBF51D6C022E6B244C0F6ABB53B3BA35CA1B99F87BBE065FB64370689C72853E7DF0460AFE18CAFD80D9D51F3E1B74B0607A
Malicious:	false
Reputation:	low
URL:	https://signable.app/js/chunk-194b1996.454a30c3.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-194b1996"],{"0920":function(t,e,n){},1406:function(t,e,n){"use strict";n("a89a2")},"7b7a":function(t,e,n){"use strict";var o=function(){var t=this,e=t._self._c;return e("div",{class:t.classList},[e("div",{staticClass:"o-modal__box"},[t.loading?e("VLoadingSpinner"):t._e(),e("a",{staticClass:"o-modal__box__close",attrs:{href:"#",tabindex:"0"},on:{click:function(e){return e.preventDefault(),t.close.apply(null,arguments)}}},[e("FontIcon",{attrs:{name:"times"}})],1),t._t("header"),e("div",{ref:"content",staticClass:"o-modal__box__content"},[t._t("content")],2)],2),e("div",{staticClass:"o-modal__overlay"})])},i=[],s=n("bd86"),a=(n("7f7f"),n("8b9a")),c=n("f46d"),d={name:"VModal",introduction:"A pop up modal.",components:{VLoadingSpinner:a["a"]},mixins:[c["a"]],props:{name:{type:String,required:!0,note:"The name of the modal to pass to the store."},size:{type:String,note:'The size of the modal (can be "small")'},loading:{type:Bo

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	132
Entropy (8bit):	4.934858206917399
Encrypted:	false
SSDEEP:	3:zNuSNTsOxdaFyhr5EiPln+SNTsOxdaF5SL6iks5/4jtvx:zNuSZsOxdpNmWsSZsOxdYb
MD5:	5EAEB3FBFAC0933EE5CA0EDAA5E46F31
SHA1:	7D824E662DBBBC160B87B8CDAE44601A0525BA66
SHA-256:	050DB275198E4C4392967BD7EC9110F20F53EC1362AED9C517DD3D1443BF8F5B
SHA-512:	4E46FF52F25E54088EE63A272AB7013DB07158C97EA12E321AEDDF088BD888BF75C9D61D376C66721598A066889D359E97FD896DC0BA0E6B216C57DDACAEE8B2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSMwnlFO3khaFZexIFDZFhlU4SBQ2RYZVOEgUNkWGVThIFDZFhlU4SBQ2RYZVOEgUNNYZUHA==?alt=proto
Preview:	CmEKCw2RYZVOGgQIVhgCCgsNkWGVThoECFYYAgoLDZFhlU4aBAhWGAIKCw2RYZVOGgQIVhgCCgsNkWGVThoECFYYAgoeDTWGVBwaBAhMGAIqEQgKUg0KAyFALhABGP////8P

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3121), with no line terminators
Category:	downloaded
Size (bytes):	3121
Entropy (8bit):	5.2565890064057355
Encrypted:	false
SSDEEP:	48:lD58Fy5a2nLPHMXC9Y1/65gyUV1GZW1nttv+r3SKlTaob8wfsJ3pFWaUGA9oUOkD:e2DHMSS1/RltCRiwYMoUX
MD5:	DEB91ED165197613DA3FAC3D4F67EDF9
SHA1:	B4E3F883A7C11F936F7389E0E065F41A9581AEC2
SHA-256:	B1700A9F05644621FFE3A13F59D5258261F170718EB8A6076E5FC55CD918AFC7
SHA-512:	807E59F12521DAB27A62772C7339EE053B0944953680E97518BBDE972992DA5DA1A26F752EB134138F89B8909A07FC7529FB9001750DF83EF7CD534533EF1E12
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/37.fba521ea.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{"2AO3":function(e,t,a){"use strict";a.r(t);var c=a("mj2O"),n=a.n(c),r=a("7SM1"),i=a("Rqwx"),l=a("QtlZ"),o=a("My8U"),s=a("Bjre"),u=a("ILQF"),d=a("K7i0"),f=a("ERkP"),b=a.n(f),p=a("uDfI"),m=a("ADGC"),h=function forceComposerFocus(){if(Object(m.a)()){var e=document.querySelector("textarea.drift-widget-input:focus");e&&setTimeout(function(){var t=e.value;e.value=" ",e.value=t},50)}},v=a("SkRI"),O=a("Cpup"),w=a("HSQL");l.a.name="chat";var j=Object(f.lazy)(Object(r.a)(n.a.mark(function _callee(){return n.a.wrap(function _callee$(e){for(;;)switch(e.prev=e.next){case 0:return e.abrupt("return",Object(v.a)(function(){return Promise.all([a.e(0),a.e(3),a.e(1),a.e(4),a.e(34)]).then(a.bind(null,"SrLZ"))}));case 1:case"end":return e.stop()}},_callee)})));t.default=function ChatPage(){return Object(f.useEffect)(function(){Object(o.a)({name:"chat",syncWith:"controller",store:l.a}),Object(u.c)({topic:"CONDUCTOR:action-from-plugin",handler:functio

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	452802
Entropy (8bit):	5.127909982301673
Encrypted:	false
SSDEEP:	1536:suMJ4cecBGuILG4ayjM+OJdPpz0u93eSA6dBfsB1bkeayOsNfbdEWy6o0EW+RA4v:suMJ4cHKvob1sIf+pAa/fXJUG59k1h
MD5:	8059181700E10234015B607487BB4C94
SHA1:	7FCC08A17CF43C6789462627207568EB7CC6B794
SHA-256:	1EB3372A67B9601C0DD4B46C196ABC0AEBCE4B4431DC18B518CBC9DF07103302
SHA-512:	1028ACBFDA5CB92D37A0E7697182DF8E7FC38652477B51BB6DD5AF2957F633E25B2FD553530EAC7F94A7F4F6CDC7319D23FAD93A665B2483F44D5B19C624073F
Malicious:	false
Reputation:	low
URL:	https://signable.app/css/app.b771bac2.css
Preview:	.card-button[data-v-07a051c9]{margin-bottom:5px;white-space:nowrap}@media (min-width:768px){.card-button[data-v-07a051c9]{margin-top:5px;margin-bottom:0;margin-right:5px}}.card-button[data-v-07a051c9]:last-child{margin-bottom:0;margin-right:0}.card-button[data-v-0dc16202]{margin:5px;white-space:nowrap}.card-button[data-v-0dc16202]:first-child{margin-top:0}@media (min-width:640px){.card-button[data-v-0dc16202]:first-child{margin-top:5px}}.card-button[data-v-0dc16202]:last-child{margin-bottom:0}@media (min-width:640px){.card-button[data-v-0dc16202]:last-child{margin-bottom:5px;margin-right:0}}.loading-spinner[data-v-7aa38082],.overlay[data-v-7aa38082]{border-radius:inherit}.overlay[data-v-7aa38082]{position:absolute;top:0;left:0;z-index:10;height:100%;width:100%;--tw-bg-opacity:1;background-color:rgba(249,249,249,var(--tw-bg-opacity));opacity:.7}.spinner[data-v-7aa38082]{position:absolute;top:50%;left:50%;z-index:10;width:150px;height:150px;-webkit-transform:translate(-50%,-50%);transfor

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17003), with no line terminators
Category:	downloaded
Size (bytes):	17003
Entropy (8bit):	5.252540905926642
Encrypted:	false
SSDEEP:	384:RxFVDGRHhfiYI8Z3xtsH7aK4N9eke+Kt/y6CtVeAkS486a:RAfM94N9ekjKt/y6WeC
MD5:	65E5C965272E021AE33FF8BC39565EF5
SHA1:	C5A2C0CDF9C821B6EE43A1EEB52680FFEEA15557
SHA-256:	B84595CC8461BB6E8376FE94F0DD23D6657172103B03653534089C5992B058A1
SHA-512:	C177A508A3ED03C91567765E51EFB6E39E9DC20200BC6A30C708B7FA339B1DAC17CC46BEBCA5B5267C9CF10EFD24FE054B078352F8460A3E12422A6AD7CC1B90
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/21.b8c41db9.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[21],{"2SVd":function(e,t,r){"use strict";e.exports=function isAbsoluteURL(e){return/^([a-z][a-z\d\+\-\.]*:)?\/\//i.test(e)}},"5oMp":function(e,t,r){"use strict";e.exports=function combineURLs(e,t){return t?e.replace(/\/+$/,"")+"/"+t.replace(/^\/+/,""):e}},"9rSQ":function(e,t,r){"use strict";var n=r("xTJ+");function InterceptorManager(){this.handlers=[]}InterceptorManager.prototype.use=function use(e,t){return this.handlers.push({fulfilled:e,rejected:t}),this.handlers.length-1},InterceptorManager.prototype.eject=function eject(e){this.handlers[e]&&(this.handlers[e]=null)},InterceptorManager.prototype.forEach=function forEach(e){n.forEach(this.handlers,function forEachHandler(t){null!==t&&e(t)})},e.exports=InterceptorManager},CgaS:function(e,t,r){"use strict";var n=r("JEQr"),o=r("xTJ+"),a=r("9rSQ"),s=r("UnBK");function Axios(e){this.defaults=e,this.interceptors={request:new a,response:new a}}Axios.prototype.request=function request(e){

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54915), with no line terminators
Category:	downloaded
Size (bytes):	54915
Entropy (8bit):	5.367584060055222
Encrypted:	false
SSDEEP:	768:8M47DJ8ncZcw2jm0utJ++56UNFt6ScvfvQy:L47DJ8nUcw2wJpZN+vfz
MD5:	905D835FCC30C0124BB904590C72E394
SHA1:	2CFC5C63A82B1112D9868CC4DDF083D905BE7AAF
SHA-256:	E17ED6F660604EDD30F3FB7D0D9F8FF81897A294451D7C5AD93B730FFCB6E5B9
SHA-512:	1FDF122710929D1AE0DC87E0251069734182C084389B5957430E9683E50D3C1AB3967EC400549EC3A9FF53B1B140CDB809285E250496C0FCB5B276E7FEE9DCA4
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/1.eb95d786.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"+GZi":function(e,t,a){},"2VrW":function(e,t,a){},"8eKL":function(e,t,a){"use strict";var n=a("mj2O"),r=a.n(n),i=a("7SM1"),c=a("s8DI"),o=a("O94r"),s=a.n(o),l=a("7IKl"),d=a("lE29"),u=a("ERkP"),m=a.n(u),f=a("Tr4L"),g=a("uDfI"),b=(a("I4Wp"),function AgentTypingIndicator(){var e=Object(f.a)().t,t=Object(d.a)().messageAuthorTheme,a=Object(g.c)(function(e){return e.conversations.typingIndicators[e.conversations.activeConversation]\|\|{}}),n=a.isTyping,r=void 0!==n&&n,i=a.userId,c=Object(l.a)(i);return r?m.a.createElement("p",{"aria-live":"polite",style:t,className:"agent-typing-indicator"},e("status.agentTyping",{agent:c})):null}),p=a("HXmn"),v=a("nfbA"),j=a("NJA7"),h=a("pYxh"),O=a("fw6E"),E=a("K7i0"),w=a("+oIK"),y=a("da4L"),N=a("+f1A"),k=a("ADGC"),S=a("0lfv"),T=(a("yAze"),Object(u.lazy)(function(){return Promise.all([a.e(33),a.e(13),a.e(52)]).then(a.bind(null,"RR8A"))})),A=function AgentRequestedOptions(e){var t=e.message,a=Object(f.a)(

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2230
Entropy (8bit):	7.635001989080968
Encrypted:	false
SSDEEP:	48:ta9vrqLjlMPVS7pCzlhFjBTnRjftzJrQhPWv09k42wvEt7D4FNAnLlVN:+vrSlMPSqHJnRjNt0PY0A7k+
MD5:	99BE73B56C0C713A46FE6C8EF58865E6
SHA1:	82598E12802DB5FD1980C341AA07EC69058B6B8F
SHA-256:	78F5EE99BD21777BDD0EF43F912A94D62F19D6F193294EA4379F71A5B5929E1F
SHA-512:	18EE140761CC4C6026E4554086EE3BBDC749C7EB7C4D849156F27A0836BE9F01123D081C8055043737773AD9976F6527C05DB383606F5DCD161A2514A9B03108
Malicious:	false
Reputation:	low
URL:	https://signable.app/img/icons/favicon-32x32.png
Preview:	.PNG........IHDR... ... .....szz.....gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs...H...H.F.k>...)IDATX..kl[g....{\|.;..8$M.[/i.J.....Q:.1.XF...!.....`..R.HH..IHH.~.cH.......r..@.-[.n..I.4i.../...sy_>..Kb;1..#Y.s...>.....ad.@.=.}.^`[..4....S.9..8.8:.........w.;..&.].2.g.g....)O.w..<.\|...z.+.L.O.'...H.}.w...x.8Tb.5.A.)...GiR..V.7-%...c.h...(......=%l5.l....8.i..Zk..4.S./.f....s9.RT.."...$.:....r.M._.m..........2...(.`G.......m..k@.r......4.o.....Ks.y......d!...W...t...KP...C<...v.99....H..R]....f9:.Qp.....-.F.4x\|_;.uA.....KK$l..59O.V.....n..z..g.w..Q6...e..C.7S..x.,_..u&.......8..r].I...rj"....7.T..?O..n.?.^.V...C.,O.U....r".l...\|.'Y......x'..).!..:\NY.h.pGK...g.:$l.S.IfW.."..Q`.......J;.&r....m.g.Z.d...8.G..T..Bl6...........64.pq...4..Q..l.Hw......ag,H..H.=...#`.W.#..(..f...Z"..Z....6..Z.@..t...d...s9.....qV02z.h..3.CFC( .3.k.....q.....Z....x#..&.s.C.......B.jX.<...gf3..j.x..#;.0...i..I.....%..nR.V.......

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2011), with no line terminators
Category:	downloaded
Size (bytes):	2011
Entropy (8bit):	5.102917464264755
Encrypted:	false
SSDEEP:	24:H9cj4Ej+mrA3b7ml77bKHDjKqh9HDGPgYfnBKFVDB6Aq16KybQ012oxrJk:dcjfjrA3fW2Ii6AqTys0A0+
MD5:	2A1358B7EE80120D25AE4F89FCBB16CF
SHA1:	1014CBA864ADBE194067480C32FB15B1CEF3B3D3
SHA-256:	AEC0D76C4605F7AECB30BBB0520763C2C675235900916375CD3C55207432ADF5
SHA-512:	649BFD3D83F403BB34E1ACEFFB9EE5827778C9BC74DF0CC76B1DF844F1204FC8A428D7A9D003B3E3BD3C0B652C3EF24785943F2995EA56EF9029C02C273BF761
Malicious:	false
Reputation:	low
URL:	https://signable.app/css/chunk-49391346.619a8446.css
Preview:	.o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100% - 30px);max-height:calc(100% - 30px);-webkit-box-shadow:0 0 20px 2px #222;box-shadow:0 0 20px 2px #222;-webkit-transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out,-webkit-transform .15s ease-in-out}.o-modal__box__header[data-v-f1eb06a4]{padding:var(--spacing-base);border-bottom:1px solid var(--color-border);margin-bottom:0}.o-modal__box__content[data-v-f1eb06a4]{padding:var(--spacing-base);max-height:calc(100vh - 94px);overflow-y:auto}.o-mod

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3426)
Category:	downloaded
Size (bytes):	3478
Entropy (8bit):	5.189090252299898
Encrypted:	false
SSDEEP:	96:YkZ6nKBLnuH3UP+hi3PbqK5XIT+ugK0X9:YkxDn+cTqK5XIqkg
MD5:	6ACA4A7591D22FAEE031810C5F6ACCD0
SHA1:	9D5957EE87F56224C31E674BF0EA85D7515788FA
SHA-256:	926599E2599D6D314FB6EE4DA7888E26A07B8B5DC8A93CCBB07B6B4F9FD471B6
SHA-512:	ED9D11970EF30F791F104A494A08DCE8272DF30CFD8F1740F140848D01EDD343B478F2D3D3C6E2B186F7BBCDE2E684AA3ECBFFE86B755907097D2F3BE24EEFA6
Malicious:	false
Reputation:	low
URL:	https://signable.app/js/chunk-2d0bdf35.22357f66.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-2d0bdf35"],{"2dd1":function(e,t,n){"use strict";n.r(t);n("ac6a"),n("7f7f");var s=function(){var e=this,t=e._self._c;return t("MultiSelect",{attrs:{placeholder:e.placeholder,loading:e.isLoading,options:e.filteredUsers,multiple:!0,searchable:!1,"close-on-select":!1,"track-by":"id",label:"name"},on:{"search-change":e.handleSearchChange,select:function(t){return e.$emit("select",t)},remove:function(t){return e.$emit("remove",t)}},scopedSlots:e._u([{key:"option",fn:function(n){return[t("div",{staticClass:"grid grid-cols-2"},[t("span",{staticClass:"col-span-1 truncate mr-2"},[e._v(e._s(n.option.name))]),t("span",{staticClass:"col-span-1 truncate text-14 font-normal"},[e._v(e._s(n.option.email))])])]}},{key:"selection",fn:function(n){var s=n.values,r=n.isOpen;return e.hidePills?[s.length?t("span",{directives:[{name:"show",rawName:"v-show",value:!r,expression:"!isOpen"}],staticClass:"multiselect__placeholder"},[e._v(e._s(e.place

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1919), with no line terminators
Category:	downloaded
Size (bytes):	1919
Entropy (8bit):	5.0932328044572355
Encrypted:	false
SSDEEP:	24:H9cj4Ej+mrA3b7ml77bKHDjKqh9HDGPgYfnBKFVDB6Aq16KybQ012oxrh:dcjfjrA3fW2Ii6AqTys0A0F
MD5:	6B34ED69A95FF2DB40A2C944D3FAAA0C
SHA1:	672121879892FD95A887DAE9D442ECA55D601216
SHA-256:	CC828D59A03B75D49ADF88A8D073CC881F02E13EB56C8B4E75FD43E517B87293
SHA-512:	D919FFD5A077E8DA2C8220B73AACEB367D9A7B59F017A6A7E27E84DBFAD9A293A047F91FEEEB22B107DFAFA3C272EEC29F44687038A9CC3C9768A3C283980C28
Malicious:	false
Reputation:	low
URL:	https://signable.app/css/chunk-79dc7497.470369c5.css
Preview:	.o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100% - 30px);max-height:calc(100% - 30px);-webkit-box-shadow:0 0 20px 2px #222;box-shadow:0 0 20px 2px #222;-webkit-transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out,-webkit-transform .15s ease-in-out}.o-modal__box__header[data-v-f1eb06a4]{padding:var(--spacing-base);border-bottom:1px solid var(--color-border);margin-bottom:0}.o-modal__box__content[data-v-f1eb06a4]{padding:var(--spacing-base);max-height:calc(100vh - 94px);overflow-y:auto}.o-mod

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (569), with no line terminators
Category:	downloaded
Size (bytes):	569
Entropy (8bit):	4.768528447760294
Encrypted:	false
SSDEEP:	12:EuX76MaNsk3LW0fEEIBrzLW0fEEIBAy5DzLW0qRLEfPr6FLEwDegdcrm2LEqegdh:9G/X7Wy6BTWy6BA0XWDsPrWdDSrvbSrG
MD5:	3AF4A3A0E23BDF8252E56657243C7916
SHA1:	FF02F113BBF3ED3D08D2BD04D40299098B3287A1
SHA-256:	F3F19543B5E5F6964DE668082BE060DC09D607ACF1FF8C7E3B7388F8908612E2
SHA-512:	C4EFA843B0CF18FA0EF1CA77168632FFAE61A8D71692F90074E9EDF2D911C8D3F819CDF19BAB229532932A02E4CE0E2D5544AC071E0894D3D5DD74FCFD291575
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-content/themes/Signable2019Theme/_/js/panel-expanders.min.js?ver=3.4.1
Preview:	!function($){$(document).ready((function(){$(".expanding-panel").each((function(){var n=$(this).find(".expanding-content").attr("data-expheight"),t=$(this).find(".expanding-content").attr("data-expheightexpanded"),i=$(this).find(".expanding-content"),e=$(this).find(".panel-control");i.css({"max-height":n+"px"}),$(this).find(".panel-expander").on("click",(function(){e.toggleClass("active"),i.css({"max-height":t+"px"})})),$(this).find(".panel-contracter").on("click",(function(){e.toggleClass("active"),i.css({"max-height":n+"px"})}))}))}))}(window.jQuery\|\|window.$);

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 145, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	43286
Entropy (8bit):	7.957793332877362
Encrypted:	false
SSDEEP:	768:e3ZUSySM8iNNU6yqh2ApVpbZSPyIwIsp8ge5X6vt4zGsXAvWMQF+:e3hyr8ifdJ3VdUPyVmT5Et4SsXS5QF+
MD5:	CA9B8D0CD534F6233E0DAE0970AC7AA8
SHA1:	8C1E36E26B67BBC6FF182938E148F2D701C7D7C1
SHA-256:	9EA5EBF8FB430CAF509E4482009DF894F80C4CB243679BA12FA1A98299C59D8E
SHA-512:	B9CFE91BB1DD28AC253ACDECA73CAE1AF9ABAF971198F7EB84DF876DF1D956AA6105A2A1123E5785428822AF80F97BD43DFFF0E6155960D414F5325A95871FF7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............kE....pHYs...%...%.IR$.....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2def, 2023/02/02-12:14:24 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 24.5 (Macintosh)" xmp:CreateDate="2023-06-19T13:37:12+01:00" xmp:ModifyDate="2023-06-19T13:43:12+01:00" xmp:MetadataDate="2023-06-19T13:43:12+01:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:e98c0047-4f49-4d09-9b8c-340006aca8bb" xmpMM:DocumentID="xmp.did:e98c0047-4f49-4d09-9b8c-340006aca8bb" xmpMM:OriginalDocumentID="xmp.did:e98c0047-4f49-4

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 564 x 220, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5636
Entropy (8bit):	7.948805601971241
Encrypted:	false
SSDEEP:	96:0BPPPPPEW7DD07+0HJaMupTe9jm91W0ssGbR/z2sic9/09DwH9hCxbdrtIFXtVCV:1WvH0HJepTv1YsGbRL2sh9cmjCxbd+Fi
MD5:	A3F231C986631A400BE7239B2C2C2E5C
SHA1:	CBDE815A196D0D329AB38FD666C6713734424D52
SHA-256:	28F48795700DCF64A9F08F50BF3924D09D8AE0E38FD3DDD8A905242507A2E844
SHA-512:	3300ECFBD255305E358108CFBA6176E667DA33D6E316A42CDDED4100E5FFEBF861BCDE8B40E75AF074D88E50B46224E5037319CE213BE6AE74DE64A637FCDBDF
Malicious:	false
Reputation:	low
URL:	https://www.signable.co.uk/wp-content/uploads/logo_krispykreme.png
Preview:	.PNG........IHDR...4..........-&....'PLTE..1.e6..).i8..)...i8........@.j...i8ly.T....tRNS...NP...C/......IDATx..]=O.J.v..... $.-.hQ.4...(.UP.4."J.+.T.(........`..XV.+.....J..^y<........S.db{.9..s..F)..RJ)..RJ)..RJ)..RJ)..RJ)..RJ)..R.Jek.w........a...h........?.-.../+.....Fg..^{.......W....l.......h.d..T......%.!IN..I..l.c8...d........RY........{..\|.\N3A.......A...w.c..$O.......u..lm....Mb..k......D.?...s.m..4T.S.....$0.u.....q...}Zy.C.h..:8gbC.i...F.r...(...vM....s.h...d:...K5.n?V.u...".F.9..w..+O.i.GRlZ....r...7tb7%6z.......1...4.A...q........uGo..Od(..&$.Z.FEl..Y..r98.L.....).G}.m(....p.?...R.....uh.]h.5....p..>./...4..`..:.$`\|a${.!...V...v.g9....A..Olt..^..3V...Y..Umh...-...t.C9...Y.@...u...v...&.e.F..._......h.W.v9.....8O..F......f.O..U0<O....k.....@}H8...i.h...,7...8...............)..hQ.7..~...EQ.f=.P.....S...B9....u...v"...&.k.y=..RM...9.u48..\|.V;....._.=O'.4..f......Nwf.....]...ma#..7.....@`.#wn....i^.*4.\..a...[.<"k

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1065
Entropy (8bit):	4.695661451624489
Encrypted:	false
SSDEEP:	24:t4lfu4AutcZVplJINGcdxpbUElOAlxNDzNqcGDhiSH0lfQHb:gGrplsxUAO6DzIDgy
MD5:	A3A6A601AB96636288F7BC2B24C051EE
SHA1:	3D96EB242781F2F38B0AF24C5CCF37C49BE308F5
SHA-256:	EC799018AAA9F2E4EC281B2FF19CD9FEFA62EBB6E78C7AC75B4752DBCB81DC8A
SHA-512:	11C0E226A80A0CBE8F16FB55EB7A3A4FF5098852CF37E2C5CC2CD6B2605E01750A37D1E52D7283EA8B63C3695FC20ECA558AFF36404893B1D92D56D81CFA8094
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-content/themes/Signable2019Theme/_/img/icons/icon_linkedin.svg
Preview:	<svg width="28" height="29" viewBox="0 0 28 29" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_576_45)">.<path d="M25.8838 -0.0766602C27.0257 -0.0766602 27.9556 0.85978 27.9556 2.01485V26.8377C27.9556 27.9927 27.0257 28.9308 25.8838 28.9308H2.01493C0.875297 28.9308 -0.0507812 27.9927 -0.0507812 26.8377V2.01485C-0.0507812 0.85978 0.875297 -0.0766602 2.01493 -0.0766602H25.8838ZM23.815 24.6407V17.0489C23.815 13.3207 23.0378 10.4544 18.8319 10.4544C16.8109 10.4544 15.4555 11.6021 14.9017 12.6904H14.8448V10.7979H10.8629V24.6407H15.0119V17.7941C15.0119 15.9882 15.3417 14.2386 17.5031 14.2386C19.6349 14.2386 19.6615 16.3038 19.6615 17.909V24.6407H23.815ZM8.25702 10.7979H4.09891V24.6407H8.25702V10.7979ZM6.17906 3.91673C4.84495 3.91673 3.7692 5.03453 3.7692 6.41158C3.7692 7.78897 4.84495 8.90671 6.17906 8.90671C7.50791 8.90671 8.58673 7.78897 8.58673 6.41158C8.58673 5.03453 7.50791 3.91673 6.17906 3.91673Z" fill="white"/>.</g>.<defs>.<clipPath id="clip0_576_45">.<rect

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 20 tables, 1st "GDEF", 27 names, Microsoft, language 0x409
Category:	downloaded
Size (bytes):	203852
Entropy (8bit):	6.623933379626819
Encrypted:	false
SSDEEP:	6144:zcJAzYlQJLn/S9D6LqUiVX72wBI0RpYHCF:zaA2KL/WD6WUibW0RpYHE
MD5:	A6170C324C4401477173AC34A3D74B9E
SHA1:	93F97477B7CDC351BEA8314534C25A319EBC8BF7
SHA-256:	CB7A900BC6A7145BCE5F4C84B2CB50E302A8EBA5D194D0EDD78B2265D59883E0
SHA-512:	6FFC708B36056D2C7117A7B8C51D23486E30856F13B75F0098EFE5626FB94D488DE63F8B01AB5516A566D7196A584ADBC9D5D29DA8ADBB54B0FC3B3C9C821576
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-content/themes/Signable2019Theme/_/fonts/roboto-slab/RobotoSlab-VariableFont_wght.ttf
Preview:	...........@GDEF..4!... ....GPOSMh....Z.....GSUB3HXL........HVAR@d.T..#....qOS/2t).&.......`STAT..}.........avar>S@.........cmapz.....8....fvar..y....h...~gasp.......T....glyf............gvar`.........?vhead.7b........6hhea.......\|...$hmtx...'........loca~P.Q.......Xmaxp.......\... name............post.r.u..=0....preph......L...............................^.........................b.........h...................................U...............+&f'{333.@.@..........BL..._.<...........Y......Z0.......b.......................3.......3.......d.....................[... ....GOOG.......b.....b.j ........:..... ..................wght.d...................d...................,.............................X................... ....................................wght.........*.6.F.R.^.j.v.........d.......................,.......................................X....................... .......................p....DFLT.Tlatn...J..CAT .6MOL .&ROM ....................................................

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41271), with no line terminators
Category:	downloaded
Size (bytes):	41271
Entropy (8bit):	5.438877235896403
Encrypted:	false
SSDEEP:	384:LOce1Y6/BOBfMkG8C+zNgyk8zN+vF6cdR3B1jQjzJFdN+NDY9IlFCFztuhi+WVg/:KroCly5OK/PGDYqFCFzIi+49SHtQmEW
MD5:	FA217A3B2CFD029B9ED134FEBFB61E2B
SHA1:	326BE47ACE87DB9E62C7FCACE408CF5152A14505
SHA-256:	B309083F45088A4ED1D54BA666BB80F4AB2C551D7951A40EE6E308816A631C2D
SHA-512:	B245E9C8E7DE14C4C07F7B65CB31E475EB095FF7F7377E04748E1519E872C092FD7B72E3CAD0A85DC9B52A81685A8DCDC6B397211EFAE72AF9F97140F8944AD4
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/17.4d495840.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[17],{"+D5C":function(e,t,n){"use strict";n.d(t,"c",function(){return r}),n.d(t,"b",function(){return o}),n.d(t,"a",function(){return a});var r=Object.freeze({CHAT:"chat",USER:"user",PRESENCE:"presence",VISITOR_PRESENCE:"visitor_presence"}),o=Object.freeze({CHAT:"chat",USER:"user",ORG_PUBLIC:"live",LIVE:"live"}),a=Object.freeze({CHAT:"chat",USER:"user",PRESENCE:"presence"})},"+Zvl":function(e,t,n){"use strict";var r=n("QtlZ"),o=n("ILQF"),a=n("H/qh"),c=["__DRIFT_WIDGET_RECEIVE_CHANNEL","REPLACE_STATE"];t.a=function actionSyncMiddleware(){return function(e){return function(t){return t._foreignDispatch\|\|Object(a.a)(t.type,c)\|\|r.a&&r.a.name&&Object(o.a)({topic:"".concat(r.a.name,":action-dispatch"),message:{action:t}}),e(t)}}}},"0lfv":function(e,t,n){"use strict";n.d(t,"j",function(){return T}),n.d(t,"p",function(){return A}),n.d(t,"g",function(){return forceFocus}),n.d(t,"q",function(){return j}),n.d(t,"r",function(){return I}),n.d(t,"e"

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3027), with no line terminators
Category:	downloaded
Size (bytes):	3027
Entropy (8bit):	5.130404147325742
Encrypted:	false
SSDEEP:	48:bd3daIUaIpy9oxi0SEYJdIIMi0MiVsMidUxMi1RASqKH:bLaIUaIIyxi0OAIMi0MiVsMidUxMi1Rx
MD5:	39D6CDD71250A00BED0047CE940F69FB
SHA1:	F3B055AA6E2258AE7DF110FC90ADD5072B8070E0
SHA-256:	7FF3AC264C85FA46409F748A3CEB18C3302D724610E1FAB220DE9EBA68F60AA1
SHA-512:	001E10871DD75D7532F039D5A82EFEDB88729C8CB35CF59916380FDC7C7C36EB17760229C0746EC2AA3DA26488EDEA488B41986570DE9ED71DBB03B6184FBC1A
Malicious:	false
Reputation:	low
URL:	https://signable.app/css/chunk-280daae3.81389a4a.css
Preview:	.card[data-v-7cd9cc70]{position:relative;width:100%;cursor:pointer;border-radius:.5rem;padding:15px;--tw-shadow:0px 0px 5px -2px #dde2e5}.card[data-v-7cd9cc70],.card[data-v-7cd9cc70]:hover{-webkit-box-shadow:var(--tw-ring-offset-shadow,0 0 transparent),var(--tw-ring-shadow,0 0 transparent),var(--tw-shadow);box-shadow:var(--tw-ring-offset-shadow,0 0 transparent),var(--tw-ring-shadow,0 0 transparent),var(--tw-shadow)}.card[data-v-7cd9cc70]:hover{--tw-shadow:0px 0px 5px 0px #dde2e5}.initials[data-v-7cd9cc70]{margin-right:15px;display:-webkit-box;display:-ms-flexbox;display:flex;height:28px;width:28px;-webkit-box-align:center;-ms-flex-align:center;align-items:center;-webkit-box-pack:center;-ms-flex-pack:center;justify-content:center;border-radius:60px;--tw-bg-opacity:1;background-color:rgba(61,83,98,var(--tw-bg-opacity));padding:10px;font-size:14px;--tw-text-opacity:1;color:rgba(249,249,249,var(--tw-text-opacity))}.name[data-v-7cd9cc70]{font-family:Roboto Slab,sans-serif;font-size:24px;lin

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 220, 2-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2439
Entropy (8bit):	7.892408818343656
Encrypted:	false
SSDEEP:	48:3UACbTGmJFK+oqE4ra5EmEu4wDDvc70vm6Fc4XVwSRuH+/YCUeuM:3UAQTGmXdoq/rOXDDvI6Fc4XiSIHHdet
MD5:	B2A265044A8EF37A5F33077DDF30FBB2
SHA1:	D7619CEF1F20E58FD021983AC1D66893041CAD65
SHA-256:	04C78993615818580807041D6639B384D2E4EE8689A8F751D6405E693905463A
SHA-512:	64F1E2CD7E1E2B42A9E8E8173029CCDD47A383217CEF458D5B514AC3A35275BBAE28AE626731C9BD9740C891D9D361C02B45728BB58A298772A81562357891FD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............#<......PLTEJhc.5./$.,!.4.{....tRNS.>......'IDATx.......g....@.9....Vg i...#.0..._q[...G."...3pK..Sd...R.P....[....s.o.pH.....N.x.ZI....7...\.\.\..,.&~',../.{q...I o..:.....0.R......'.V....HJ).&..T...V/...#. ...UD.....StE..=..RF.+...K.v%.v#..'.......aG......D.vO:..K&.....Kr@.+%.....$..q....h..l.._Ii[{.jE.Z.S....j..Cq>).A...t{uWj2..N;....G.aL.$.#&..oM.S6.ZP.y.....W.U=.S`.m.6P>..Ku&.......#..Xy.$.+.........p...r..{.....7.v?.4..-..KcF..X..9.B.U......h..R..A.}g.......A^......E....Z..:7..Y..B...X73..~..O.:.'z.....~~'..Uh....n.>..LR....]..Y#-.39..w..q.........."]yq.l<.8.........xJ.....s1.'.ZP1......M<.p6,..dr..~..F`.uQ.. .`^5.?.... k..\|GY..n...\|.4?'m\+.E.bj3..f.'$..;hg},...1.}.........dy.j.&.........n..UU.b%Z.i..._+g.9.oC..7..Z#n......(Yl.!L(........V. ..ig.<.R.K.)..3........UT..Kd.. .iH..)+....p%..\|....E.Sq...G.!..R~<....G.......Y.ox.e.........a.'.%.H..7L........{..Q.@@..:..=..._1.pm.s#$@....)...+$..f.....0K...F.

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	955
Entropy (8bit):	4.202557135044804
Encrypted:	false
SSDEEP:	24:t4ImpBmtQ2ouEUdq5DdVX7k0U5IInyqnirCyTnscpn:8plWEqCbk0U5IIy9rzZpn
MD5:	E15B9724A0420DA84C2C4D6AADA57141
SHA1:	C161A7C7ED81ABB364397A2ECEF78CD2079186EC
SHA-256:	4B0BDB6FCD53C10C3538A477EDD83403C04D0CD7D50950C0AF2445E0A87B256F
SHA-512:	EA9BA7C27EC57C7B43C6C8A8887C24EB250DDFCE888781285FC0925D8C1DF573315575E04AB5DF749B2DFE7F23D14534FA0D9AC39FDC99A1B630A484A2A3DB71
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="-0.04 0 163.33 92.66">.<path d="M11.21 2.53A5.23 5.23 0 0 0 4.36.6C2.26 1.78 1.2 5.04 2.73 7.07c.37.56.9 1 1.5 1.29a4.63 4.63 0 0 0 5.64 1c2.36-1.32 2.73-4.7 1.34-6.83Zm152.08 45.26a62.08 62.08 0 0 1-27.25 31.2c-18.4 10.19-42.53 10.17-60.6-.8a37.45 37.45 0 0 1-14.61-16.74 45.84 45.84 0 0 0 7.09-8.74c5.55-8.89 10.8-23.64 7-34.07-1.51-4.16-5-7.25-9.65-7.17-6.21.11-10.25 5.28-12.44 10.53-5 11.88-3.77 25.83.58 37.72-3 2.37-6.39 4.21-10 5.46-10.81 3.7-23.28 1.24-31-7.56-8.42-9.65-6.56-23.7-5.07-35.39.5-3.94-5.7-3.91-6.2 0-1.66 13.07-2.9 27.65 5.92 38.61C14.4 69.98 26.5 74.32 38 72.78a39.7 39.7 0 0 0 17.92-7.28c11.54 22.07 38.42 30.25 62.49 26.13 18.47-3.17 34.67-15.32 44.84-31.07l.04-12.77ZM57.5 52c-1.42-5.4-1.94-11-1.56-16.58.4-5.27 1.83-14.1 6.88-17 6.14-3.48 7.09 4.8 6.86 8.77a49.06 49.06 0 0 1-4.16 16.76 42.57 42.57 0 0 1-7.14 11.07A48.8 48.8 0 0 1 57.5 52Z" fill="#E0F128"/>.</svg>.

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 83, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	24530
Entropy (8bit):	7.984305505919292
Encrypted:	false
SSDEEP:	384:JDRvA5ACOZYLu0+CW5A49JNErhxdjTamAhVK7jxyUkM/Seu6OxvCloBNjSQdI2aJ:MN7+lFyqTCyQSN6OQli+6INE3BAdvORI
MD5:	FFFCC9D62239AB29EC1F4936773F7A06
SHA1:	492CDBB5519CAE1D805CC08EC35A47C3E9493228
SHA-256:	D836FD7C8CA0AE99C16833CDDB58D56341F0176219615946C4BCD5225EDA59AD
SHA-512:	BF19A22B113E65C2E89E44D9D8A7680A9E06AFB10A3204E9227A785048BAB6BB291A65D66D2DB39C25291AE635565EAC1861D5F2D161802B35053EF381B95487
Malicious:	false
Reputation:	low
URL:	https://www.signable.co.uk/wp-content/uploads/logo_smart_pension.png
Preview:	.PNG........IHDR.......S.....G.......tEXtSoftware.Adobe ImageReadyq.e<.._tIDATx..}..\U....{.m.n.......)..D.QP..,`..X.W.)..S....."...T..{.!$....f..[...9wfgv..n:...fg.S~...>..b.. .......D......#RI.............N.Z..5.&j...`.w..~..r..w...)@s....?;........fB..y.4....M<...7"....{.?.....C.y.:V<.....^.. .l....S.h..=.%S..........A........N..,.r..c.;....`.[l...d.O...........l..;.7..F._.c....6..Z~.E.=.5.. .e..ch...y.M..8..\|.r..U..L......`.......m.....>..~.....:...F...c-..m.E......Sg.=\|..u=...~pl...u3.%..W..w..Y.M..^..0..4...%..!x..3l>c6..(~../87mf.K..o...O..xd5.'..w.<&.....8..^>w#......,..H.+\|.*`.@....<.E0.k..,-... .\|.....y...`.\|>.A~......~..E..#..7v.U.>..teM......... .4[z.j.aY......1.yjm..8..a.8_\_.c...6J`..&...\.p]c.m.T.....w8a...'.qX.....\...s}..%.......{....y..o...s7...8...=.c<a.+...,...:/...rI..f...N._....<...4....;.........7....9..o....g.K..f.5..e8...r..&e.m....B8.5..-.....'y.#.........7h.n....'C.K...8}....D..e.gf.\|.8...c...q...._.{=n.6{".uNN0

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450)
Category:	downloaded
Size (bytes):	224764
Entropy (8bit):	5.379647370757842
Encrypted:	false
SSDEEP:	3072:PW1s9pmHgwV0qimdMw2dGGYbw8yik6Y/4:PW1opmHgw3iu2U0F6Y/4
MD5:	2A8085A6E35DF0D52338B3148CF33F20
SHA1:	0CE3CC2A29BE11C04DF4E53CBDACD17F404907CC
SHA-256:	5BDAA2D2FAC01A05DEE8737EC7B70AD184651961D3A3998C1EFA7CF147AE1BA1
SHA-512:	22A4710DB6CD83DC6DD0F5BFACB7062AC26FB6597279FF32FE52726B26B804387DFEA7EC3FD842720BD2D77DD6AD9C71B96348AACFEB175F51B271C2B5C423ED
Malicious:	false
Reputation:	low
URL:	https://script.hotjar.com/modules.2472296d2d26f0040059.js
Preview:	/! For license information please see modules.2472296d2d26f0040059.js.LICENSE.txt /.!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_recording",TAG_RECORDING:"tag_recording",HEATMAP_HELO:"heatmap_helo",RECORDING_HELO:"recording_helo",REPORT_USER_ID:"report_user_id",MUTATION:"mutation",MOUSE_CLICK:"mouse_click",INPUT_CHOICE_CHANGE:"input_choice_change",KEY_PRESS:"key_press",MOUSE_MOVE:"mouse_move",RELATIVE_MOUSE_MOVE:"relative_mouse_move",CLIPBOARD:"clipboard",PAGE_VISIBILITY:"page_visibility",SCROLL_REACH:"scroll_reach",SCROLL:"scroll",SELECT_CHANGE:"select_change",VIEWPORT_RESIZE:"viewport_resize",SCRIPT_PERFORMANCE:"script_performance",REPORT_CONTENT:"report_content",INSERTED_RULE:"inserted_rule",DELETED_RULE:"deleted_rule"})},6939:function(e,t,n){"use strict";n.d(t,{f:function(){return f},W:function(){return g}});const r=Object.freeze({LIVE:"LIVE",REVIEW_WEBAPP:"REVI

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1919), with no line terminators
Category:	downloaded
Size (bytes):	1919
Entropy (8bit):	5.0932328044572355
Encrypted:	false
SSDEEP:	24:H9cj4Ej+mrA3b7ml77bKHDjKqh9HDGPgYfnBKFVDB6Aq16KybQ012oxrh:dcjfjrA3fW2Ii6AqTys0A0F
MD5:	6B34ED69A95FF2DB40A2C944D3FAAA0C
SHA1:	672121879892FD95A887DAE9D442ECA55D601216
SHA-256:	CC828D59A03B75D49ADF88A8D073CC881F02E13EB56C8B4E75FD43E517B87293
SHA-512:	D919FFD5A077E8DA2C8220B73AACEB367D9A7B59F017A6A7E27E84DBFAD9A293A047F91FEEEB22B107DFAFA3C272EEC29F44687038A9CC3C9768A3C283980C28
Malicious:	false
Reputation:	low
URL:	https://signable.app/css/chunk-e2d611fa.470369c5.css
Preview:	.o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100% - 30px);max-height:calc(100% - 30px);-webkit-box-shadow:0 0 20px 2px #222;box-shadow:0 0 20px 2px #222;-webkit-transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out,-webkit-transform .15s ease-in-out}.o-modal__box__header[data-v-f1eb06a4]{padding:var(--spacing-base);border-bottom:1px solid var(--color-border);margin-bottom:0}.o-modal__box__content[data-v-f1eb06a4]{padding:var(--spacing-base);max-height:calc(100vh - 94px);overflow-y:auto}.o-mod

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1065
Entropy (8bit):	4.695661451624489
Encrypted:	false
SSDEEP:	24:t4lfu4AutcZVplJINGcdxpbUElOAlxNDzNqcGDhiSH0lfQHb:gGrplsxUAO6DzIDgy
MD5:	A3A6A601AB96636288F7BC2B24C051EE
SHA1:	3D96EB242781F2F38B0AF24C5CCF37C49BE308F5
SHA-256:	EC799018AAA9F2E4EC281B2FF19CD9FEFA62EBB6E78C7AC75B4752DBCB81DC8A
SHA-512:	11C0E226A80A0CBE8F16FB55EB7A3A4FF5098852CF37E2C5CC2CD6B2605E01750A37D1E52D7283EA8B63C3695FC20ECA558AFF36404893B1D92D56D81CFA8094
Malicious:	false
Reputation:	low
Preview:	<svg width="28" height="29" viewBox="0 0 28 29" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_576_45)">.<path d="M25.8838 -0.0766602C27.0257 -0.0766602 27.9556 0.85978 27.9556 2.01485V26.8377C27.9556 27.9927 27.0257 28.9308 25.8838 28.9308H2.01493C0.875297 28.9308 -0.0507812 27.9927 -0.0507812 26.8377V2.01485C-0.0507812 0.85978 0.875297 -0.0766602 2.01493 -0.0766602H25.8838ZM23.815 24.6407V17.0489C23.815 13.3207 23.0378 10.4544 18.8319 10.4544C16.8109 10.4544 15.4555 11.6021 14.9017 12.6904H14.8448V10.7979H10.8629V24.6407H15.0119V17.7941C15.0119 15.9882 15.3417 14.2386 17.5031 14.2386C19.6349 14.2386 19.6615 16.3038 19.6615 17.909V24.6407H23.815ZM8.25702 10.7979H4.09891V24.6407H8.25702V10.7979ZM6.17906 3.91673C4.84495 3.91673 3.7692 5.03453 3.7692 6.41158C3.7692 7.78897 4.84495 8.90671 6.17906 8.90671C7.50791 8.90671 8.58673 7.78897 8.58673 6.41158C8.58673 5.03453 7.50791 3.91673 6.17906 3.91673Z" fill="white"/>.</g>.<defs>.<clipPath id="clip0_576_45">.<rect

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 52052
Category:	downloaded
Size (bytes):	17768
Entropy (8bit):	7.988831576837789
Encrypted:	false
SSDEEP:	384:xO6PyyxJ+TvkhzR0yAUUanXyloS221oHAd2giFTdEsd3lO:86PyLTvkDlZvX4221aAwgolds
MD5:	5080CE4E019C8C43FE25A97A8560A638
SHA1:	96E5091E8DD649E519A7C9511A96467EB11491BA
SHA-256:	376E88E9A82D8D74C0136AF541D6085AD0DE5C9D1D6C4E17C9FC0E737C9713EE
SHA-512:	F455BFEA81404D0428DF7F2C52C34BCF27A7385DB18F05CD6DAF6FDC20E573D9FC91BD2D3FBE3EF15339F697B146A0AEA37C5668E5AE57396840E2F0B2B713EF
Malicious:	false
Reputation:	low
URL:	https://beacon-v2.helpscout.net/static/js/vendor.cd87fe5a.js
Preview:	...........y..F.0.U(<Y.0jR...a.>...._IN&a8\|A.)"..........@..}dgw.{.!...Q]]WW.....)..$.G..+...^..NwUd.{4zrt:f..NO..."..0.m.r.;....WI.g^l..O{..;99>~...2...4.rkp.....?=}...G...S...<>zr..B...CH.!...........!.m.>y...a...N...Q...1.y....>..2.m.t..vi.....}6....3.fl..g.$......n.....7..;...G<...z..9.....4........y.....x....~./D..O\|ua..._....R..,.K...y..+n.8Hf......:.M....Z.`.}..I....H=..A...o/.-.._:....C.S?.j.3.-....)j=..#tz&..z.5._F....b..0n..=.6&...."X.G.fw.n[9..=.....z......e....,..".X.....(.\>7e......,....6.........m68.n...-.%.9.u...j...0%6..}....S....%OC?.....zP[7..<)rX:.bV.G..%...fT....W.]}...`....\.q.n.{......1S.m..0J.v..g.......:...3~.>..y.q.r.f3._.....g.....M.m;.#.`..\|f1.....?.\|u~qu..b.oree<M...*..s.....b5..eaQV.Q....,..J...z...e.....3..@.S+.x...8i..).....HN.8..M?j.... ..p.peT1...}8{s.....).0D..v..Og......Y\|....v......u.#.....jf..B..}.._'.M.?.j....v=.qo.p....a...H........`..Z....v;.........&.F...3.c.X.........j Q.FQ...../C...1n.

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	324
Entropy (8bit):	5.076736927206837
Encrypted:	false
SSDEEP:	6:tnrolfVlGlumc4slBHKmjtZ+LEXIPGFyMm2XST7mVnpV8R0cUHmXmcVDUysKyQq4:trod2lunHKm5Zp4PWCmVn80cUGXmcyQr
MD5:	01249ED73014F93584E45A02925E88D1
SHA1:	7FB95C3BFDEA9E987816789C74AC08BB6FC879FE
SHA-256:	DBE76C06661CB447B470C397AE9102ECF9BC9C5E4E9B6D6499B841108A92B992
SHA-512:	9509ACF7650D7D32D9753EC54D174715EFE13CE43798219553D1CD4FE62BEB391DDE7A9CCC9479AFA568AD310232EACFABF76E0E813EB87B0E45571FD0753D5A
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-content/themes/Signable2019Theme/_/img/icons/icon_list_tick.svg
Preview:	<svg width="46" height="46" viewBox="0 0 46 46" fill="none" xmlns="http://www.w3.org/2000/svg">.<circle cx="23" cy="23" r="23" fill="#0095E6"/>.<path d="M21.0519 30.1276L14.7207 23.6611L15.9361 22.4198L21.0519 27.6449L31.9053 16.5596L33.1207 17.8009L21.0519 30.1276Z" fill="black" stroke="white" stroke-width="2.3"/>.</svg>.

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4460
Entropy (8bit):	4.0994222788094055
Encrypted:	false
SSDEEP:	96:t9GC8ymfp1wL2ZGPgYeUObnn2FqLdZp4SKeMs+aDdU:iyywL2ZCgpUObnn2Idj4SXMmZU
MD5:	86C85E2E37F32CE7607D83A76EFCC101
SHA1:	DF33BEC3B2E73957D3B9AF3D8997AD87D392828A
SHA-256:	42556F13B17A22AC683139841B7D1072168895D520549B898C7C5D71D3CC2AE7
SHA-512:	95B1A55BE959ADCB95C97366B087C5D1A74E6DFE637AA0B56FE42EC3373E55EA2ADD556AB7388CFA0161A7400345CF7FC427C369C768B5A1E22E481AB0D9B024
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-content/themes/Signable2019Theme/_/img/icons/icon_facebook.svg
Preview:	<svg width="28" height="29" viewBox="0 0 28 29" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_576_38)">.<path fill-rule="evenodd" clip-rule="evenodd" d="M13.9465 28.9999L13.959 28.9999H13.9547L13.9465 28.9999ZM14.0453 28.9999H14.041L14.0535 28.9999L14.0453 28.9999ZM13.9038 28.9997L13.9173 28.9997H13.9095L13.9038 28.9997ZM14.0905 28.9997H14.0827L14.0963 28.9997L14.0905 28.9997ZM13.8625 28.9993L13.8715 28.9994L13.8643 28.9993H13.8625ZM14.1357 28.9993L14.1285 28.9994L14.1375 28.9993H14.1357ZM14.1809 28.9988L14.1777 28.9989L14.1899 28.9987L14.1809 28.9988ZM13.8101 28.9987L13.8223 28.9989L13.8191 28.9988L13.8101 28.9987ZM14.226 28.9981L14.2186 28.9982L14.2336 28.998L14.226 28.9981ZM13.7664 28.998L13.7814 28.9982L13.774 28.9981L13.7664 28.998ZM14.271 28.9973L14.2611 28.9975L14.275 28.9972L14.271 28.9973ZM13.725 28.9972L13.7389 28.9975L13.729 28.9973L13.725 28.9972ZM13.6738 28.9961L13.6861 28.9964L13.6839 28.9964L13.6738 28.9961ZM14.3161 28.9964L14.3139 28.9964L14.3

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	77498
Entropy (8bit):	5.934717497951275
Encrypted:	false
SSDEEP:	1536:5UCCSCcqH2ZOUZkEZnNARADp5/l6SYclC68A5jpq9dUyBGI:5UCCSe2Z7kEZnyRADpz6St0zUyh
MD5:	8892BBE937173F102E271909BA19CC6E
SHA1:	34906BC0563CAC2A71E8B2C1E211A68DF916A20E
SHA-256:	B7831F11B0D47B1C2A45A2CA7B382594CAFDA86D1AE67D19B963B0F2AD6C9BAF
SHA-512:	11C9384B1CC6C1B5E0EC32FF860A74BE937499EBD261AEBCF2CC3D6D9DD8A71C08F3C47C5938513F42C1FF3AC09897236DCEB3263FD98C370116DE204AEFE1C0
Malicious:	false
Reputation:	low
Preview:	<svg width="156" height="47" viewBox="0 0 156 47" fill="none" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.<rect width="156" height="47" fill="url(#pattern0)"/>.<defs>.<pattern id="pattern0" patternContentUnits="objectBoundingBox" width="1" height="1">.<use xlink:href="#image0_2_65" transform="translate(-0.0010291) scale(0.000369218 0.00122549)"/>.</pattern>.<image id="image0_2_65" width="2714" height="816" xlink:href="data:image/png;base64,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

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 337 x 82, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	11377
Entropy (8bit):	7.969565267908396
Encrypted:	false
SSDEEP:	192:uVczVhn9ZwPnwdIz+MR3+cbwib6fCY5WXDK60YQv+dRD0SGpf9mW9x5tE2VduOE:xz1Zwvwi++F7G6Yge6dNDtGvmW9xTt4J
MD5:	34ED7931B81B47DDD3049B0DFC30EFC0
SHA1:	C87436F20D7A85B1AFFAA45B4EC6A5BF20DCC647
SHA-256:	034FD105BB0BEC7E0B36AE517F4B09CC66D1CF8133FEF31AD10BA0F86CB7A66B
SHA-512:	9ED1E434C1D17408E0F8F37CA34741051057EA37F0DF4785742AF0BBEDEC035533DED53EB0613E89C12A7400CAD19EDC23E09F1F14AC5993F3DEE7A631896F21
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...Q...R.......X....pHYs...%...%.IR$.....sRGB.........gAMA......a...,.IDATx......y.zRKj.B......Yl.C.Y,..l&^bl.^....%3.3.3.....3.d.8......Nl0..lF ..o..K...Hj!..........}...z{......s..~....{....v........}...6..Tf...2..U..lTY..R.%...`.e....X.. ......,Py..!V..PyXe..["..!C..DF.5B.3G.sU.U9Ce.5.M..<d.L.!C.....'.Q.^....?.....?.w..d.6N..<....f.c.._...4C..B[I..&:.qcw..n...{.X.p1....(..v..:i3....$.m.....U.a..Is....I...:.3.HWe....:.-'QO.Hr3E..s...k.t.G.L7G...O.....e.o...Fe..&..>k.js..u..GT...`..wU..}l...2..-#Q.Q.>..Hu...\].R..V........)B}P...-..[.....v.....^.'...B..f.!C..8.z....D-./...o..`...~}.T.~A,...hc.'...pU.Z.D.9lS.E..j...!Cj...z.:E.u......L......$........U:A..sT>.2.F....o*w....!C.T"........O....3....".....{$...!..........XK.J.....d.....2$..HT.A.\.+$.~..w&.-..j.j..a.T.0....j..DJ.....e........k..]S.N-z9...e..n4L............m..WT..e.....J.9.%.?.F...n..b.....e".....t.v.:&......Q......v...{.[.~.Y;#...5..}3..........4i......w..=g.

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	749
Entropy (8bit):	5.165898702061175
Encrypted:	false
SSDEEP:	12:TMHdNZhK1Wb1NnazKsJKAQKTyxbI/NZ/NPpqFShUlUGGXGsPu8O82G4ksGQefxf0:2d/E1KNHsJKKTya3RaQCVGXHuo4kue58
MD5:	CAD3BE2A64EAA57F8EEB3101A871D88C
SHA1:	0F8321E4924917D6FFD1C174F8ADB6F7B55868EE
SHA-256:	EA5F80E0120B3808A1F81E5776B85C9E1CCE4BE736306D6C9368663776BD94E7
SHA-512:	6A73F4FE5EF41A7E62E776C229E3DBEEC66DE9547C697886FDF1570D49070C9AD7CBA75DC28C2C1C44A545AA833ACAE8F91FFFF472B22FBA848FCF31B5438F1C
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-content/themes/Signable2019Theme/_/img/icons/icon_tiktok.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_2" data-name="Layer 2" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 3334 3332">. <defs>. <style>. .cls-1 {. fill: #fff;. fill-rule: evenodd;. }. </style>. </defs>. <g id="Layer_1-2" data-name="Layer 1" image-rendering="optimizeQuality" shape-rendering="geometricPrecision" text-rendering="geometricPrecision">. <path class="cls-1" d="M3021,0H313C141,0,0,141,0,312V3020c0,172,141,312,313,312H3021c172,0,313-141,313-312V312c0-172-141-312-313-312Zm-946,623c35,296,200,473,487,492v333c-167,16-313-38-483-141v623c0,792-863,1040-1210,472-223-365-87-1006,629-1032v352c-54,9-113,23-166,40-159,54-249,155-224,332,48,341,674,441,621-225V622h345l1,1Z"/>. </g>.</svg>

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 651 x 197, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15391
Entropy (8bit):	7.933776151603843
Encrypted:	false
SSDEEP:	384:GvKa2D+khmyZGbzCi/v6yz+pyNpFk8AhZ+++H/LI95YB2udH:GkhgbzRn6g+MQOG5EHH
MD5:	D35AA7605F55DAE20534AAA3CFAD5006
SHA1:	17659437F4052D89225959668F44946A9A9841BC
SHA-256:	2C8B8F882BEC3F2D5D66EC54861A3C160D0E05DCA98B12DEA22DB15113524431
SHA-512:	33AE7C34F61E6F2E26C650CBABB233B0CC01FE8A95F65F63915354DC08415199E1689D01A69BDB3DAB6EC22EA519F22F0D6AF24FC5AC168ACDCA1401EC35B2DB
Malicious:	false
Reputation:	low
URL:	https://signable.app/img/signable_white_raster.d35aa760.png
Preview:	.PNG........IHDR.............<'."....bKGD............;.IDATx..w.W...........(.vP,...Q.aoX0...K......X...AI.]Q...n....J......?V..[..=.....$..sf.\|..s...........+.[...c.3.....8.8....ZP...aEY.....u.,.T.(..;@.`(p..0p9..Z...l&>yX\|t4.J-...$..A...+.......p..#.$.6.++t.(/.]Y^XZY^.....u.....3...........T}.R.bU-....T+.{........./s.g.......cEy.....e.....mk....+...$..#.+.=tT..P\...1A7.R.M#......M....Q.....,"......2-...7."..N-t^a.BIey.....z.b...:B.E.l.i.\|_..p.Z,q..[.o....b...R.`.#..,nqO-+.\..(/<V(..S...O-+<R.H....t.....3.b=.L-...&Z.g....a...n.2.YVlZY^x...p..B...............t.....s..Z.V...oJ.%...L...@...HvX....p......a#.+....}QXWG..(..C.[....L.7.-}s.Z....R.I...@.W.;....l.g~EEa......X..ZM....;..}...f........+.C....u...bQ..E%..o.../n.J..........y....t...bQ..E%I........`.VV.2......t...bQ..E%I...,KP.-.$.I.P......PB...ayya-.....XT..bQI..c.n3.1....@/`.Z..Rn]........S.RKZ.......%!.......R.E..E..J...5.......zG4..../...4l]QQ. ..C.&.....(.U,.XT.

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	94953
Entropy (8bit):	5.313095247137558
Encrypted:	false
SSDEEP:	768:w9KHUAjOZ0yeI1MyGbqtOZ8uH/CUU6FH/ATdT2BNTO5z/t5DuglBXqKGHp6A+fSP:w90UHV22ttlB38IDDAwQPOeHUcB+1uRX
MD5:	B7CD299466AD81F2EB71BD07B769ADE0
SHA1:	0A5C07E0C50C870D4B039D734CEEBFECFA495AAA
SHA-256:	AA165009A20D3892374751F8176DD8FB91C4BDC1E561EFDCE9D7DA8E069AFF73
SHA-512:	F30C5D172E531BA4465F5A4F11577C498C279E29F63F65DDE04190D46F076DCBC3AAA017E88C2C251C71232E9DB1F6FD42B2EAF4FD016A184F9ABEA5D6DC7036
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/16.d3128480.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[16],{"+Ry9":function(e,t,n){"use strict";var a=n("mj2O"),r=n.n(a),c=n("7SM1"),i=n("nfbA"),o=n("QtlZ"),u=n("SsZN"),s=n("B8JY"),d=n("Hvhg"),l=n("SFoa"),b=n("TDUE"),f=n("da4L"),v=n("hm8b"),p=n("LVcX"),O=n("pqMu"),g=n("PjZB"),m=n("gG69"),E=n("0lfv"),j=n("3DW5"),I=n("uIJS"),C=n("LvsC"),h=n("qytN"),_=n("7jL2"),A=n("K7i0"),y=n("xwTo"),S=n("g6eD"),T=n("7BJg");function _createSuper2(e){return function(){var t,n=Object(_.a)(e);if(function isNativeReflectConstruct(){if("undefined"===typeof Reflect\|\|!Reflect.construct)return!1;if(Reflect.construct.sham)return!1;if("function"===typeof Proxy)return!0;try{return Date.prototype.toString.call(Reflect.construct(Date,[],function(){})),!0}catch(e){return!1}}()){var a=Object(_.a)(this).constructor;t=Reflect.construct(n,arguments,a)}else t=n.apply(this,arguments);return Object(h.a)(this,t)}}var x=100,k=new(function(e){Object(C.a)(AgentMessageEventBuffer,e);var t=_createSuper2(AgentMessageEventBuffer);func

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18820)
Category:	downloaded
Size (bytes):	59240
Entropy (8bit):	4.873494161336656
Encrypted:	false
SSDEEP:	768:qu4BXbuqfvcFoc1qmjJVsDzI3u+uu4BXbuqfvcFD:qXdc1qmjJVsDzI3u+uXY
MD5:	4940E4AE72B6124A6EAB7E97FC8DF1F4
SHA1:	20986CBB9965F176B6C6CCF1ADEFCF783F9E9E9A
SHA-256:	58C855E7EB9B917E71E6B733E73C542C25BACB986F3BA7DF2BE1570200312135
SHA-512:	C7F03DD29CA7BD8EA746477DC3E234FD860B21CC2D6823DBFA48D2BBB28F8BCD3256394AF849B2A5BA2DDB2074D7D9F5BF7053EAE621EFE39B05DCA162517895
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles.css?ver=4.6.8
Preview:	html[dir="rtl"] .wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navigation-submenu .wp-block-navigation-submenu__toggle img{margin-left:12px}html[dir="rtl"] .wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navigation-submenu ul.isHorizontal li{text-align:right}html[dir="rtl"] .wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navigation-submenu ul.isHorizontal li a img{margin-left:12px}.wpml-language-switcher-block{display:flex;box-sizing:border-box;width:100% !important}.wpml-language-switcher-block>.wp-block-navigation-item,.wpml-language-switcher-block>.wp-block-navigation-item>div{display:flex;width:100% !important}.wpml-language-switcher-block .wp-block-navigation__container{background:unset !important}.wpml-language-switcher-block .hide-arrow .wp-block-navigation__submenu-icon{display:none}.wpml-language-switcher-block .wpml-ls-dropdown ul li button{padding:0}.wpml-language-switcher-block .wpml-ls-dropdown ul li button+.isHorizontal{min-wi

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3086
Entropy (8bit):	3.9275860553947677
Encrypted:	false
SSDEEP:	96:A1oGt5AVFtfOe1psO9hXBEO8d1IN8OC9jRRkM:Af5uFBOeTsOzBEO61IUMM
MD5:	608336E8C4DB562C55FBD07765DF51AE
SHA1:	53585FC273D40A0D6D9BDA5BA2A5E5175CBE0B76
SHA-256:	8BD53DA9988758889A9DD96C1FA7DC8011B6112393F21B5EF43F31D6072A6BEA
SHA-512:	046260054961CC75C34B078565AD77BFD4A50DD806428798A15A91AD7B1F9E368DB62C783F3DB5F88D83056EEE6569BA1BB2FAC5B742B93A80CD2DB060684599
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-content/themes/Signable2019Theme/_/img/icons/icon_instagram.svg
Preview:	<svg width="29" height="29" viewBox="0 0 29 29" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M14.4998 2.12646C11.1394 2.12646 10.718 2.14071 9.39826 2.20092C8.08127 2.26104 7.18181 2.47018 6.39473 2.77607C5.58108 3.09228 4.89105 3.51536 4.20318 4.20323C3.51531 4.8911 3.09223 5.58113 2.77602 6.39478C2.47013 7.18181 2.26099 8.08127 2.20088 9.39826C2.14066 10.718 2.12646 11.1394 2.12646 14.4998C2.12646 17.8601 2.14066 18.2815 2.20088 19.6012C2.26099 20.9182 2.47013 21.8177 2.77602 22.6047C3.09223 23.4184 3.51531 24.1084 4.20318 24.7963C4.89105 25.4842 5.58108 25.9073 6.39473 26.2235C7.18181 26.5293 8.08127 26.7385 9.39826 26.7986C10.718 26.8588 11.1394 26.873 14.4998 26.873C17.8601 26.873 18.2815 26.8588 19.6012 26.7986C20.9182 26.7385 21.8177 26.5293 22.6047 26.2235C23.4184 25.9073 24.1084 25.4842 24.7963 24.7963C25.4842 24.1084 25.9073 23.4184 26.2235 22.6047C26.5293 21.8177 26.7385 20.9182 26.7986 19.6012C26.8588 18.2815 26.873 17.8601 26.873 14.4998C26.873 11.1394 26.8588

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3645)
Category:	downloaded
Size (bytes):	3697
Entropy (8bit):	5.178758505878281
Encrypted:	false
SSDEEP:	96:BTINFgVQT10rKCImN/h0y0JredniERdxpvjxsay0oQ:BTSgp1C9gdpvbH
MD5:	E0A443BC8AF074FE1153900E539802DF
SHA1:	7FEF3CD060E577972C2E67A980D22E92F0A635E6
SHA-256:	EF8351E4C7C74423110569258AD8887B37F93845E364936ACF7DFAE7566C7DD1
SHA-512:	142E1A1BB0E8758262EFAA70AC91A8115D1A483081DDF4C3D21CEF7580FDD98E41D9BBAB7BA811AF1A4EAB677F2FD18236C151003FAA892E45A6A4D18E40EB35
Malicious:	false
Reputation:	low
URL:	https://signable.app/js/chunk-6fa298f8.78122294.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-6fa298f8"],{"0920":function(t,e,o){},"7b7a":function(t,e,o){"use strict";var a=function(){var t=this,e=t._self._c;return e("div",{class:t.classList},[e("div",{staticClass:"o-modal__box"},[t.loading?e("VLoadingSpinner"):t._e(),e("a",{staticClass:"o-modal__box__close",attrs:{href:"#",tabindex:"0"},on:{click:function(e){return e.preventDefault(),t.close.apply(null,arguments)}}},[e("FontIcon",{attrs:{name:"times"}})],1),t._t("header"),e("div",{ref:"content",staticClass:"o-modal__box__content"},[t._t("content")],2)],2),e("div",{staticClass:"o-modal__overlay"})])},n=[],s=o("bd86"),i=(o("7f7f"),o("8b9a")),l=o("f46d"),c={name:"VModal",introduction:"A pop up modal.",components:{VLoadingSpinner:i["a"]},mixins:[l["a"]],props:{name:{type:String,required:!0,note:"The name of the modal to pass to the store."},size:{type:String,note:'The size of the modal (can be "small")'},loading:{type:Boolean,note:"Toggles display of a loading spinn

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6748)
Category:	downloaded
Size (bytes):	6800
Entropy (8bit):	5.163623639824283
Encrypted:	false
SSDEEP:	96:firKMNJQ34gNJJyJPmJ7ferw0Tn+Mo1DrbfY6kAiPEpvkLd3pNQQTdoKuMN2k:vgsmJPmRKPY06kAisvc3pnp3
MD5:	AFD08D33B6FDB8733F7E2160B3616036
SHA1:	6389F6AC29235FC33F94F164DFA4BC334CDB5E33
SHA-256:	7F47D756BC4A5C5DBE20A306F019FF0DBA7FBD54F36AA741EDBB48BA7B8DF947
SHA-512:	78FA7EA688BE158C9EA4A50B4C56C37A86ED8B5EB10DABFE18A45A89EA9D371E7401C7FCB315B2BC9CCEA44CE7F3805189911352947707256DC0C31B7FDA7239
Malicious:	false
Reputation:	low
URL:	https://signable.app/js/chunk-c63e4446.78767edf.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-c63e4446"],{"0535":function(e,t,i){"use strict";i.r(t);var a=function(){var e=this,t=e._self._c;return t("VModal",{staticClass:"add-edit-prefill-types-modal",attrs:{name:"add-edit-prefill-types-modal",size:"small",loading:e.loading},on:{onOpen:e.onOpen}},[t("h2",{attrs:{slot:"header"},slot:"header"},[e._v(e._s(e.$t("createEnvelope.documentSetup.fieldConfiguration.addEditPrefillTypesModal.addOrEdit")))]),t("div",{staticClass:"add-edit-prefill-types-modal__box__content",attrs:{slot:"content"},slot:"content"},[t("div",{staticClass:"add-edit-prefill-types-modal__search"},[t("VInput",{attrs:{type:"text",placeholder:e.$t("createEnvelope.documentSetup.fieldConfiguration.addEditPrefillTypesModal.searchPlaceholder"),icon:!0,fluid:!0,"data-ec":"template_edit_add_edit_prefill_types_modal","data-et":"search_input"},model:{value:e.searchText,callback:function(t){e.searchText=t},expression:"searchText"}},[t("FontIcon",{attrs:{name:"se

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	426
Entropy (8bit):	4.664006622057637
Encrypted:	false
SSDEEP:	12:1U/KeU/eBBU8exhcNivBB86TNiiacdprDVUNVUK:yKxZ8esIHTIPcdprDiZ
MD5:	9A512143367D061DFFC8E17D67FE7FB1
SHA1:	62FEE132243D581B2C80E49127E45D0F121C9693
SHA-256:	2177719402386B1A5E1F5B09A373A43E9F697ACA6E474D7626A40C5DA46E76E3
SHA-512:	20607A4C6EE0C55F0A4B846499910A3B036B3A9B2F7521F39B1CF8BC49C6863EB4C130E19155C30A2DFA126A182677FFEED89E7733D61425E1D41E671FA90C0E
Malicious:	false
Reputation:	low
URL:	https://signable.app/manifest.json
Preview:	{. "name": "Signable",. "short_name": "Signable",. "icons": [. {. "src": "/img/icons/android-chrome-192x192.png",. "sizes": "192x192",. "type": "image/png". },. {. "src": "/img/icons/android-chrome-512x512.png",. "sizes": "512x512",. "type": "image/png". }. ],. "start_url": "/index.html",. "display": "standalone",. "background_color": "#0098CE",. "theme_color": "#0098CE".}.

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2030), with no line terminators
Category:	downloaded
Size (bytes):	2030
Entropy (8bit):	5.096888043545354
Encrypted:	false
SSDEEP:	24:H9cj4Ej+mrA3b7ml77bKHDjKqh9HDGPgYfnBKFVDB6Aq16KybQ012oxrrex3q:dcjfjrA3fW2Ii6AqTys0A0HeM
MD5:	8E685085DC50AB5A84EA92152C53E812
SHA1:	9F2951C5E8038AEEE094B169ACA0094DF53D6545
SHA-256:	FA6EA4758BB0030BFD323FE0030DC928DAE1A2D8933EFEB4BD9DC3E5F7FE7F68
SHA-512:	C2ADA2112326813ED5A29542A85E7D46092FDE33AE619A39EEA9ABA1D10EF7981F3CE259E443FFA3A1EB0D7B92A6602CD80922AC252B3DDD6BC17FE7F929B33F
Malicious:	false
Reputation:	low
URL:	https://signable.app/css/chunk-4182be59.49cf84b2.css
Preview:	.o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100% - 30px);max-height:calc(100% - 30px);-webkit-box-shadow:0 0 20px 2px #222;box-shadow:0 0 20px 2px #222;-webkit-transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out,-webkit-transform .15s ease-in-out}.o-modal__box__header[data-v-f1eb06a4]{padding:var(--spacing-base);border-bottom:1px solid var(--color-border);margin-bottom:0}.o-modal__box__content[data-v-f1eb06a4]{padding:var(--spacing-base);max-height:calc(100vh - 94px);overflow-y:auto}.o-mod

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7555), with no line terminators
Category:	downloaded
Size (bytes):	7555
Entropy (8bit):	4.968086769227201
Encrypted:	false
SSDEEP:	192:+vkz1/kwiMULuOsvzo2qKFOb2/gh75uG2m5vnbsW4RZYH8SP:kYG75X5vnbsW4Rc
MD5:	189AEFFD571884559DABABA22C66D75A
SHA1:	7B8BC38FB8A289535FC0C369E16F241D604828FB
SHA-256:	DD09E3BA26066ABE27C4DAD57C8E0C8A63FE23A0BC87E63BCAB94F25E9096459
SHA-512:	1B1BC05A69CB53E252ED017D28AA0709A08C39715A6656D2D9EFF029EDEC8EBDE28B20FFC1C033A769BA66430ABD79B9A8E4F9A4B3E0D9524C939EC25B4B7DE2
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/css/3.07aa08a5.chunk.css
Preview:	.emoji-mart,.emoji-mart *{box-sizing:border-box;line-height:1.15}.emoji-mart{font-family:-apple-system,BlinkMacSystemFont,Helvetica Neue,sans-serif;font-size:16px;display:inline-block;color:#222427;border:1px solid #d9d9d9;border-radius:5px;background:#fff}.emoji-mart .emoji-mart-emoji{padding:6px}.emoji-mart-bar{border:0 solid #d9d9d9}.emoji-mart-bar:first-child{border-bottom-width:1px;border-top-left-radius:5px;border-top-right-radius:5px}.emoji-mart-bar:last-child{border-top-width:1px;border-bottom-left-radius:5px;border-bottom-right-radius:5px}.emoji-mart-anchors{display:flex;flex-direction:row;justify-content:space-between;padding:0 6px;line-height:0}.emoji-mart-anchor{position:relative;display:block;flex:1 1 auto;color:#858585;text-align:center;padding:12px 4px;overflow:hidden;transition:color .1s ease-out;margin:0;box-shadow:none;background:none;border:none}.emoji-mart-anchor:focus{outline:0}.emoji-mart-anchor-selected,.emoji-mart-anchor:focus,.emoji-mart-anchor:hover{color:#464

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	24
Entropy (8bit):	3.8868421881310122
Encrypted:	false
SSDEEP:	3:HE9vZ6n:SMn
MD5:	0C5DAD92482D9A7C7C253510F5082465
SHA1:	534B458F99B4D0BB90C2CF2C4BB3703EF44A52BF
SHA-256:	5DBAF0A4FF0F8AC8C1B67550EEE84390B089604FFAF71183E417636C7E183AC5
SHA-512:	3B889A1DB2E3D3184886111A1B20FC54E6F14B006DB29B1D92741AF5C0A5B8299E78CDF6939437915F2B350E0BFC781BB8E96D4119172FF0CD2CB178487D71E0
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/css/16.22abfce0.chunk.css
Preview:	body{margin:0;padding:0}

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1919), with no line terminators
Category:	downloaded
Size (bytes):	1919
Entropy (8bit):	5.0932328044572355
Encrypted:	false
SSDEEP:	24:H9cj4Ej+mrA3b7ml77bKHDjKqh9HDGPgYfnBKFVDB6Aq16KybQ012oxrh:dcjfjrA3fW2Ii6AqTys0A0F
MD5:	6B34ED69A95FF2DB40A2C944D3FAAA0C
SHA1:	672121879892FD95A887DAE9D442ECA55D601216
SHA-256:	CC828D59A03B75D49ADF88A8D073CC881F02E13EB56C8B4E75FD43E517B87293
SHA-512:	D919FFD5A077E8DA2C8220B73AACEB367D9A7B59F017A6A7E27E84DBFAD9A293A047F91FEEEB22B107DFAFA3C272EEC29F44687038A9CC3C9768A3C283980C28
Malicious:	false
Reputation:	low
URL:	https://signable.app/css/chunk-1353338a.470369c5.css
Preview:	.o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100% - 30px);max-height:calc(100% - 30px);-webkit-box-shadow:0 0 20px 2px #222;box-shadow:0 0 20px 2px #222;-webkit-transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out,-webkit-transform .15s ease-in-out}.o-modal__box__header[data-v-f1eb06a4]{padding:var(--spacing-base);border-bottom:1px solid var(--color-border);margin-bottom:0}.o-modal__box__content[data-v-f1eb06a4]{padding:var(--spacing-base);max-height:calc(100vh - 94px);overflow-y:auto}.o-mod

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8586), with no line terminators
Category:	downloaded
Size (bytes):	8586
Entropy (8bit):	4.980754057922192
Encrypted:	false
SSDEEP:	192:j/c/K/iNadyZ8MUB+lE9Y8MUB+dFVJkEE+Zg23nIXs:ZdyZ8MUB+lE9Y8MUB+Dks13nJ
MD5:	E7107BC29CCB3C6D928F0F8F10A0F22D
SHA1:	7F4B6237B2D74DE5F5A83C77841070A797BA4276
SHA-256:	7849BA1748F8188749DF28E9D59CA4E570A8495684353D8DF4715FA70A81E787
SHA-512:	38A7259987C29A4DC349AC812656318F45BE7D8E34D0C9B39AE7AF13DDADCFA0CCBD624440A09F3C0FB08CD0B9C8014DBE14B29304821072CABAB0AB703ABCB5
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/css/28.b5e8f5e1.chunk.css
Preview:	.drift-widget-message-close-button{margin:2px 0 0;position:absolute;top:-1px;z-index:1;background:#687882;border:1px solid #fff;-webkit-border-radius:50%;-moz-border-radius:50%;border-radius:50%;padding:4px;height:20px;width:20px;line-height:12px;-webkit-box-shadow:0 2px 10px 0 rgba(53,63,69,.15),0 1px 2px 0 rgba(0,0,0,.2);-moz-box-shadow:0 2px 10px 0 rgba(53,63,69,.15),0 1px 2px 0 rgba(0,0,0,.2);box-shadow:0 2px 10px 0 rgba(53,63,69,.15),0 1px 2px 0 rgba(0,0,0,.2);opacity:1}.drift-widget-close-button--align-right{margin-left:-14px}.drift-widget-close-button--align-left{margin-left:4px}.drift-widget-message-close-button svg{display:table-cell;text-align:center}.drift-widget-message-close-button svg path{fill:#fff}.drift-widget-message-close-button:hover{background:#414141}@media (max-width:367px),(min-device-width:320px) and (max-device-width:480px) and (-webkit-min-device-pixel-ratio:2),(min-width:369px) and (max-width:380px){.drift-widget-message-close-button{opacity:1}}.drift-widget

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Category:	downloaded
Size (bytes):	15744
Entropy (8bit):	7.986588355476176
Encrypted:	false
SSDEEP:	384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/
MD5:	15D9F621C3BD1599F0169DCF0BD5E63E
SHA1:	7CA9C5967F3BB8BFFEAB24B639B49C1E7D03FA52
SHA-256:	F6734F8177112C0839B961F96D813FCB189D81B60E96C33278C1983B6F419615
SHA-512:	D35A47162FC160CD5F806C3BB7FEB50EC96FDFC81753660EAD22EF33F89BE6B1BFD63D1135F6B479D35C2E9D30F2360FFC8819EFCA672270E230635BCB206C82
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......=........t..=..........................d..d..^.`.. .T..<.....\|..{........6.$.... ..t. ..I.3.%.....8..&....4Z.\|t .8.........D...$.uNE.P.E.Ak...=.x.9Xz.`.I..R....#F+B`..}.RP\|E...Z\.W[.............C...QB....m...cm.?.F.g.......Q....3......p...L2.[......!+@U..^~.......D.?.......j...U...c..U.l.6{...m.CD].h.t.....Q8.....@P...L.c.....+...ZD..2.K...:..4{g..:..~....v......<..H^.R.'....8....?.;...uy.VW..8=.".F..*.....@E....c....=..Ib.....y8$.a){.......KiIW.&..~.}..1..w.M..{.4......!..{..F.H.5#K...t..5.w...ve;. '......NJ......'(%;...?...D...M.Cq,<.=?.f......._...V..bA.(..37..v....+.uY.C.b.w8AF..3.n.-..'..U%.2....o.l."...^bj..aoF.!`....A....j...'.:Z.u...[..p.GW:U%.Ejq...:I...C........S.C...sJe.6D...<.UM,..&h..z}.y\|..9...D..j...n..B.$..T....?../.Q..=B...C._.f.#.:Bo.@]T.(..v..F..+d...". ......R..R..R....!..~A....X............>!`p..,08. 9.../.....r..Q.......Qpg.\ko...C..3..Y.y..t'.d9..>#\|..3..?.#..$....i........g5.z....S....{3..Sp..S2..w.6........

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1182)
Category:	downloaded
Size (bytes):	1234
Entropy (8bit):	5.236896042304304
Encrypted:	false
SSDEEP:	24:lDjpjkqXxt2t/qJP94t/XP/t/bphdr4wESagJNX91HmDpYx8xrqHI8cAm:lDFx2/qJP9U//1/1rJ7ag7X91HAGx+qi
MD5:	679A91BDBB25EF3441A0590EA2480734
SHA1:	888A176E072AEE7DECD540A6710A8585EE57542A
SHA-256:	261166B1B3A06443E1C0863B37DC4CC965FD46851760DA498939F935AE2D1B4C
SHA-512:	270BBB35C3B47CCCBC61981A0704ED795DF79DF23F599E5B5A160B47B886D1F585EDF1918CE5FC538A3CDB2353CC2424476FA81832EBB8F0C55843FAE03842B5
Malicious:	false
Reputation:	low
URL:	https://signable.app/js/chunk-c9608798.4896751f.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-c9608798"],{"300b":function(e,t,s){"use strict";s.r(t);s("7f7f");var n=function(){var e=this,t=e._self._c;return t("div",{staticClass:"document-setup-progress"},e._l(e.icons,(function(s,n){return t("div",{key:n,class:e.stepClassList(n)},[t("FontIcon",{attrs:{name:s.name,height:"16",width:"16"}}),t("div",{staticClass:"document-setup-progress__step__number"},[t("span",[e._v(e._s(n+1))])]),s.description?t("div",{staticClass:"document-setup-progress__tooltip"},[e._v("\n "+e._s(e.$t("createEnvelope.documentSetupProgress.currentStep",{currentStep:n+1,iconTooltip:s.description}))+"\n ")]):e._e()],1)})),0)},r=[],o=(s("c5f6"),{name:"documentSetupProgress",props:{step:{type:Number,required:!0},icons:{type:Array,required:!1}},methods:{stepClassList:function(e){var t="document-setup-progress__step",s=this.step===e?" document-setup-progress__step--active":"",n=this.step>e?" document-setup-progress__step--complete":"";return t

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1551), with no line terminators
Category:	downloaded
Size (bytes):	1551
Entropy (8bit):	5.1752191950655355
Encrypted:	false
SSDEEP:	24:0E01AZ14iwMsom6ZxDCzZv9Qxl5/sJ5u/swk0xQ75jmlH1X5E1KkC1I:0EG+1pFCzZvKxMTqQ7RmI
MD5:	49A058C120CE76CF44BE0E5074A7AB23
SHA1:	64E14AE5A7B0B80694D3A8F3F8DBF13A8688793D
SHA-256:	80632F84D6B2ECC464EDF94E8AAC0908BE0B9F106C910BB7391571AFEF35E1A8
SHA-512:	426E17BB27D21B6E9BDB10A6DF4441F41DB758D6BC0F5158A325C3E070ABEFA43C72A4AD37D8B928964C8A729FF895E99C59C4023D87DDCF200BCC8F5567F30F
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefetch" href="https://js.driftt.com" crossorigin><link rel="dns-prefetch" href="https://customer.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://conversation.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://targeting.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://metrics.api.drift.com" crossorigin><title>Drift Widget</title><script type="text/javascript">__ENV__="PRODUCTION",__BUILD_ID__="20240111172457-05a6157",__REGION__=window.location.search.match("[\\?&]region=([^&#])")?window.location.search.match("[\\?&]region=([^&#])")[1]:"US"</script><link rel="preload" href="/core/assets/js/runtime~main.bf33b308.js" as="script" crossorigin="anonymous"><link rel="preload" href="/core/assets/j

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	68076
Entropy (8bit):	5.253482511347538
Encrypted:	false
SSDEEP:	1536:bx5P+lx5LhQk+9dSwgx+DFF3rUMFWgqKh20zK5wd:bnmz5LhQk+9d6xwWP0u5+
MD5:	49CE5445DDCF5D24EF3BADC4EB1A11DD
SHA1:	DBE8CF782A53824BAC569AA3EA42992DD21064D6
SHA-256:	D70FA5DC6C8BFE9D7824BE31E669528533D0879A2B1600A7DF68B880F4D44296
SHA-512:	A720C00082E803A92EF54A1829BC845B187CD4544F5B202BC98F234A4FC9401EE76B21F8CB21E4C93F88B8DD8AA63D93A03DFF5A39570DA19EB6D105FFEC6683
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/26.04e7f30b.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[26],{"8Sys":function(e,t,n){"use strict";n.d(t,"a",function(){return r}),n.d(t,"b",function(){return o});var r,o,i="undefined"!==typeof performance&&performance,a=i&&i.now?function(){return i.now()}:function(){return Date.now()};function throwIfEmpty(e){if(!e)throw new Error("name must be non-empty")}if(i&&i.mark)r=function mark(e){throwIfEmpty(e),i.mark("start "+e)},o=function stop(e){throwIfEmpty(e),i.mark("end "+e),i.measure(e,"start "+e,"end "+e);var t=i.getEntriesByName(e);return t[t.length-1]},function getEntries(){return i.getEntriesByType("measure")},function clear(){i.clearMarks(),i.clearMeasures()};else{var s={},c=[];r=function mark(e){throwIfEmpty(e);var t=a();s["$"+e]=t},o=function stop(e){throwIfEmpty(e);var t=a(),n=s["$"+e];if(!n)throw new Error("no known mark: "+e);var r={startTime:n,name:e,duration:t-n,entryType:"measure"};return function insertSorted(e,t){for(var n,r=0,o=e.length;r<o;)e[n=r+o>>>1].startTime<t.startTi

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	563734
Entropy (8bit):	5.674369768251081
Encrypted:	false
SSDEEP:	6144:x/BB2a5axgaLfQuLfQethykggjunRI2MqlL6ojtm03L37GX9in9tYCiTKOnTK8L4:kmaE7YzyOr0d
MD5:	8A35E91DF79EA2127DD121BDBBEF865E
SHA1:	B646ABF56FB24677E6A7BB7C6FF9BC1F9D74553C
SHA-256:	B49A5D05CA41478B31F51CC2539A75937C3F921540AA90116A8F609E094D1811
SHA-512:	85CD01D8A785DBA9AA334E04468B8280AA8F87BA594DBA5A9B75BF8DDA9678FD8CC3FD2FE9CA8C212A0CE566F7601831ED66D60DCE566D719414383C6E8F9CD8
Malicious:	false
Reputation:	low
URL:	https://js.hsleadflows.net/leadflows.js
Preview:	!function(){var e,a,t;null==window.leadflows&&(window.leadflows={});null==(e=window.leadflows).preservedLeadinGlobals&&(e.preservedLeadinGlobals={});null==(a=window.leadflows).preservedOtherGlobals&&(a.preservedOtherGlobals={});t=function(e,a){a[e]=window[e];try{delete window[e];if(window[e])return window[e]=void 0}catch(e){}};window.leadflows.preserveGlobals=function(e,a){var n,i,l,o,s;for(n=0,l=e.length;n<l;n++){s=e[n];t(s,leadflows.preservedLeadinGlobals)}if(a)for(i=0,o=a.length;i<o;i++){s=a[i];t(s,leadflows.preservedOtherGlobals)}}}();leadflows.preserveGlobals(["hns","hns2","jade","I18n","Pikaday","reqwest"],["exports","define"]);window.leadflows=window.leadflows\|\|{};window.leadflows.version="lead-flows-js/static-1.1301/".replace(/\/(static(-\d+\.\d+)?)\//,"-$1");window.MutationObserver=window.MutationObserver\|\|function(e){"use strict";function a(e){this._watched=[];this._listener=e}function t(e){!function t(){var n=e.takeRecords();n.length&&e._listener(n,e);e._timeout=setTimeout(t

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4675), with no line terminators
Category:	downloaded
Size (bytes):	4675
Entropy (8bit):	5.142871672093962
Encrypted:	false
SSDEEP:	48:Yn0YJDNKpxufxR0REUQspSVhIPDi6t8SISuGS0NnAx9eNx7wa:SFWmxqifWGcNnAINx7wa
MD5:	E640F358E29995DF105A5238BEBB2308
SHA1:	997FA08CEC1F107B23387CEDE78AF34D8574F0B0
SHA-256:	6309FCD36A290787D4866906C4F713C4ED8AD24A790BC74DF50E99003CD282DF
SHA-512:	E150AE627FE597DDC2FDACD09516F0EDD74AA3D471E2A52F56613253D58ECF256237FEFA688D854C9CAE35E9ADCF051D30BB1F7DDB46E41624F8BE686D783E08
Malicious:	false
Reputation:	low
URL:	https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.
Preview:	<!DOCTYPE html><html><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=theme-color content=#0098CE><title>Signable</title><link rel=preconnect href=https://fonts.googleapis.com><link rel=preconnect href=https://fonts.gstatic.com crossorigin><link href="https://fonts.googleapis.com/css2?family=Roboto+Slab:wght@300;400;500&family=Roboto:wght@300;400;500;700&display=swap" rel=stylesheet><link rel="shortcut icon" type=image/png href=/img/icons/favicon-32x32.png><script src=https://js.stripe.com/v3/ ></script><link href=/css/chunk-00a20ec4.e88fa9a7.css rel=prefetch><link href=/css/chunk-1353338a.470369c5.css rel=prefetch><link href=/css/chunk-1565c410.e2751d66.css rel=prefetch><link href=/css/chunk-194b1996.b657570a.css rel=prefetch><link href=/css/chunk-1e9122a3.470369c5.css rel=prefetch><link href=/css/chunk-280daae3.81389a4a.css rel=prefetch><link href=/css/chunk-3fbf9bd4.470369c5.css rel=prefetch><link href=/css/chunk-4182be59.49cf84b2

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3373
Entropy (8bit):	5.19501774337593
Encrypted:	false
SSDEEP:	48:gri7A5qmNqcuEBjbLyROAXyHrfsTVQ0YOySjl9MbSykAsDOPV1AOqlcRKrjA:gro8qXEBG4ye83YOxB9KuDOPVGOTUw
MD5:	8291E3AABF2BD77AB63CBA74A5191CCB
SHA1:	1325368BED833C8D69F8CAD44ED354FC9C4CF7C8
SHA-256:	68B324A6179651D56917D3B1F3F5D0A1E71B08550B1468790826DDE5E22B2B56
SHA-512:	415B40A32434B447A2D8B1DF5ED6C9C8C30FDCF5AB049D377FFFF7055D319FBA7F7A18AB0D2DE0612ED95DC10CB1711599C54AD0CFD62BF9B7975B584EAFEEAB
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-content/plugins/sitepress-multilingual-cms/res/js/xdomain-data.js?ver=4.6.8
Preview:	/globals icl_vars, wpml_xdomain_data /..var WPMLCore = WPMLCore \|\| {};..WPMLCore.XdomainData = function() {..this.links = document.querySelectorAll('.' + wpml_xdomain_data.css_selector + ' a');...var self = this;...for(var i = 0; i < this.links.length; i++) {...this.links[i].addEventListener('click', function(e) {....var link = self.getClosestLink(e.target);....var currentUrl = window.location.href;....var targetUrl = link.getAttribute('href');.....if ('#' !== targetUrl && currentUrl !== targetUrl) {.....e.preventDefault();.....self.onLinkClick(link);....}...});..}.};..WPMLCore.XdomainData.prototype = {..getClosestLink: function(maybeLink) {...var tagName = maybeLink.nodeName.toLowerCase();...if(tagName === 'a') {....return maybeLink;...}....return this.getClosestLink(maybeLink.parentNode);..},...onLinkClick: function(link) {...var self = this;...var originalUrl = link.getAttribute('href');...// Filter out xdomain_data if already in the url...originalUrl = originalUrl.replace(/&xdoma

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 143, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70313
Entropy (8bit):	7.99425945018007
Encrypted:	true
SSDEEP:	1536:0Eb5l0zT/Qc4rmcc6UZNPZR6iXFASnbP07qrQZcoQxY:3b52Hfcc6UZNPZR6i1AgbP70cxY
MD5:	AA2F479EADFB1AD825C365C843563D6C
SHA1:	1D3848A6B144083B4606AC4F32957AE6A6483857
SHA-256:	2627F3C8A4E374C7EDD6444DF104FF7F6BF697583FCFBB7BF06032E23979B536
SHA-512:	C26728F6D46C174A4B9601043425C7FAB1DF3ADD9D19AA921BB3FBA616C8EB58CA0FD313FF34BBE4F1DC3484F14FBEB87B479AEE18C8DB49D7292E047BE8E17B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X.........&.b....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:45 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 24.6 (Macintosh)" xmp:CreateDate="2023-07-04T16:10:13+01:00" xmp:ModifyDate="2023-07-04T16:14:34+01:00" xmp:MetadataDate="2023-07-04T16:14:34+01:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:16465c0c-62ad-4a67-986f-b553551db6f4" xmpMM:DocumentID="xmp.did:16465c0c-62ad-4a67-986f-b553551db6f4" xmpMM:OriginalDocumentID="xmp.did:16465c0c-62ad-4a

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42862)
Category:	downloaded
Size (bytes):	42863
Entropy (8bit):	5.085616303270228
Encrypted:	false
SSDEEP:	768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH
MD5:	D5A61C749E44E47159AF8A6579DDA121
SHA1:	3B41B3BC956685015A347A2238E71DB29DFA0DBB
SHA-256:	0C7178CC6CA34FB18E30F070A5E7A1C287B2D7CCFCBA2CFDF06E0F46EDA55740
SHA-512:	5ED98CB4311C373DA3EDE92BB47BCE551E22C30683EA8FC55097BAF99ABE1E0702B24DE48F8B9241047CC1E4364158F5A343E4E8FC182E8866DB4E99CCD7EE6E
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-content/themes/Signable2019Theme/_/js/vendor/slick.min.js?ver=1692089186
Preview:	!function(i){"use strict";"function"==typeof define&&define.amd?define(["jquery"],i):"undefined"!=typeof exports?module.exports=i(require("jquery")):i(jQuery)}(function(i){"use strict";var e=window.Slick\|\|{};(e=function(){var e=0;return function(t,o){var s,n=this;n.defaults={accessibility:!0,adaptiveHeight:!1,appendArrows:i(t),appendDots:i(t),arrows:!0,asNavFor:null,prevArrow:'<button class="slick-prev" aria-label="Previous" type="button">Previous</button>',nextArrow:'<button class="slick-next" aria-label="Next" type="button">Next</button>',autoplay:!1,autoplaySpeed:3e3,centerMode:!1,centerPadding:"50px",cssEase:"ease",customPaging:function(e,t){return i('<button type="button" />').text(t+1)},dots:!1,dotsClass:"slick-dots",draggable:!0,easing:"linear",edgeFriction:.35,fade:!1,focusOnSelect:!1,focusOnChange:!1,infinite:!0,initialSlide:0,lazyLoad:"ondemand",mobileFirst:!1,pauseOnHover:!0,pauseOnFocus:!0,pauseOnDotsHover:!1,respondTo:"window",responsive:null,rows:1,rtl:!1,slide:"",slidesP

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1994), with no line terminators
Category:	downloaded
Size (bytes):	1994
Entropy (8bit):	5.093978972903377
Encrypted:	false
SSDEEP:	24:H9cj4Ej+mrA3b7ml77bKHDjKqh9HDGPgYfnBKFVDB6Aq16KybQ012oxr73h:dcjfjrA3fW2Ii6AqTys0A0f3h
MD5:	8D805D83B096612EB309F1805EB9A636
SHA1:	6A707D1FE69B342F75BFE723CA610B8FDE90D37D
SHA-256:	9A5363A76F7F84E7DEA1B28252FFBC4C3BF1C5E9A4211A487F6796513DD9640C
SHA-512:	5D55E36788E0ED38D03101BD0BDFECC91751ED9D5D486AE8C94D922489F19F8BECF7BD77F93A67D50A8CA128D46D8A4E1A6C8B7AB0FD0E57D251457E20F3752A
Malicious:	false
Reputation:	low
URL:	https://signable.app/css/chunk-6f4fbc3c.890b69cf.css
Preview:	.o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100% - 30px);max-height:calc(100% - 30px);-webkit-box-shadow:0 0 20px 2px #222;box-shadow:0 0 20px 2px #222;-webkit-transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out,-webkit-transform .15s ease-in-out}.o-modal__box__header[data-v-f1eb06a4]{padding:var(--spacing-base);border-bottom:1px solid var(--color-border);margin-bottom:0}.o-modal__box__content[data-v-f1eb06a4]{padding:var(--spacing-base);max-height:calc(100vh - 94px);overflow-y:auto}.o-mod

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 388 x 220, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3250
Entropy (8bit):	7.891477607693575
Encrypted:	false
SSDEEP:	96:bgFTXnjmlXfKx6Hpjh+lboGXdofADV4jjvaRlQ7qAJ/PGTr:bgNncSxuhmo4fDijCHc/P0
MD5:	F812AB0E499BCA90514C37D206A7F0DC
SHA1:	99A4264C6195E2F45B80D4F70342E78DB2B9BC1A
SHA-256:	DE31837F4385B54A053C9590A71CFBF09F9B24F1CC41702942E1F30D9E938040
SHA-512:	AD83AE4FD410C48A612D028DEC9AA67F00A1B112C59EE7FB500C316B349DA0B46960521A873A7CCA070382AC9262588FCCAECB838DC71D7BC8A72694351360B6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............9......PLTE....X.-+,.>........ .........T.....tRNS.'G.....8....?IDATx...o.:...@{.e..1.@....W...E .X...o..\.""..~..w.-_)...v..I....C'.c..+V.X.b..+V.X.b..+V.X.r..,f'^Q],..B.....Z..`.,.E....@Z..<.C7....X.e.[...U"@jd......RJ3.Y..9mH.<......0EgL13..f..G`.b.\|..K......./.....7G.Z...k...u(..e....q..r....6..dy.F.P..VD....]h.f..y.LY.Ai..D....(.....D.P....k...KR."..>..........&=.@..n...'>X]....m@pEe;.R.,.D'O..Fh.....".Au.XCs.P.]...djzs...:=Q......d.^&ME...."D.+c.....et<_...6....!...#..SZ@.....)<...[....zX..(-..N......n ....akjA.X.0.7..B.....agj.D ..sW.U.!.....C ..?......B...:.....X0.......B...'.....oO.._...#..xhj...Y^....!.D...-8..#..3T.. tDU.P{.G.h....O.....lycj.I..'..9.9B6..K.<.bjA,....l ...l..?..r..i.K.G.......o....+.gN^..6..D.x........D.(:6..2...........w..d..9B..m.O&#.....8p[.q.N......\|.Wj...Z.;...#..O@.....C#TVa....a.}X..:N.$Nz....:M.&p.~...G..i.}x.G.U.._..Mm..ca.u......8^.+........"....~......j.#..9.ISt..i.

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5426), with no line terminators
Category:	downloaded
Size (bytes):	5426
Entropy (8bit):	5.271165756929169
Encrypted:	false
SSDEEP:	96:HziZ6ujoPXpqT1+J4ea3qDqykqW2xRPm5EKks974LmHGtqm18dvqQqt/m9pqQqg:HziUujoP5qBC433Ujko/sk2EL3H18pXB
MD5:	4050B7F2106D3693D62497155108E557
SHA1:	B41A6D199FE7F7D93D1714AA71FBFA34120FC01A
SHA-256:	1C9C5272136C7EBB6DF65A9F5F7E30AFE147971EC8D417412E7E5CBC3C51B77C
SHA-512:	4302D83963C399CB6FDDB47B40743B401DFF8F4282B23BA8DB6A922B0AA90BB874D14C2070F262A011298FCC1BD5D13D707C56A319515D901E650A6F0987FEFD
Malicious:	false
Reputation:	low
URL:	https://cdn.firstpromoter.com/fprom.js
Preview:	function fprom_obj_(){($this=this).data={};var l=this.data,n="https://t.firstpromoter.com/track/signup",i="https://t.firstpromoter.com/track/sale",o="https://t.firstpromoter.com/track/new",a="_fprom_track",t="_fprom_subscribe",f="_fprom_code",c="_fprom_signup",s="_fprom_sale",d=86400,p=void 0;function r(e,n){l.cid=e,l.domain=n,l.tid=O(a),l.subscribed=O(t),l.ref_id=O(f),l.signed_up=O(c),l.referrer=document.referrer,l.url_ref_id=function(){var e=function(e){if(0<=e.indexOf("#_offer_")\|\|0<=e.indexOf("#_r_")){var n=e.substring(e.indexOf("#_")+1,e.length);return n}return null}(h());e\|\|(als=m(h(),"fp_ref"),als\|\|(als=m(h(),"fpr")),als\|\|(als=m(h(),"via")),als\|\|(als=m(h(),"deal")),als\|\|(als=m(h(),"_from")),als\|\|(als=m(h(),"_by")),als\|\|(als=m(h(),"_get")),als\|\|(als=m(h(),"_go")),als&&(e="_r_"+als));return e}(),l.url_ref_id&&l.ref_id==l.url_ref_id&&function(e){y(e,"",-1)}(c),l.url=h(),function(){var e=window._fprom\|\|window._fprom\|\|[];if(e.loaded)return!1;for(var n=0;n<e.length;n++)l[e[n][0]]=e[n]

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	94002
Entropy (8bit):	5.264400983301757
Encrypted:	false
SSDEEP:	768:FwqXmyNqONm4Hni/MRScex2FvZNWhtr063Vl6Un5RenNoBYqmRg2D+oAV7tatfW9:F4HngNWz4U6lnNoXmR7ir7tofV854ef
MD5:	5E4D6DE1177F513EC1DA7F274B4849E3
SHA1:	0DEDAF3EB8D5DB4104CED353423EAC46544D9549
SHA-256:	3E62BC9B0D78123E1A13BC7FE4D49CF0DCF25AAFA059BE8649035A80E7368F44
SHA-512:	11C1080743EDD8AA94DC9D1D0A53C85545446C0E0E2E0C81CE7AC5B31AA83BAC131BE3CBEB221D94D117D37914452D857116A40B6FC596467925792FA5F9D701
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/25.cc73c6f2.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[25],{"1kux":function(e,t,n){"use strict";n.d(t,"a",function(){return d});var a=n("mj2O"),r=n.n(a),c=n("7SM1"),o=n("QtlZ"),i=n("ILQF"),s=n("xwTo"),u=n("2XY6"),l=n("LVcX"),d=function(){var e=Object(c.a)(r.a.mark(function _callee(){var e,t,n,a,c;return r.a.wrap(function _callee$(r){for(;;)switch(r.prev=r.next){case 0:if(e=Object(o.b)(),t=Object(l.a)(!1,["embed","configuration","theme","soundNotificationEnabled"],e),n=Object(l.a)(!1,["embed","configuration","theme","notificationOnFirstVisitOnlyEnabled"],e),a=Object(u.c)(e),c=Object(s.a)(e)\|\|null,!t){r.next=8;break}return r.next=8,Object(i.a)({topic:"play-host-notification",message:{chatOpen:a,notificationOnFirstVisitOnly:n,activeConversationId:c}});case 8:case"end":return r.stop()}},_callee)}));return function playSoundNotification(){return e.apply(this,arguments)}}()},"76KI":function(e,t,n){"use strict";n.d(t,"a",function(){return c});var a=n("QtlZ"),r=n("LVcX"),c=function hasGate(e){re

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1560
Entropy (8bit):	4.213254479443993
Encrypted:	false
SSDEEP:	48:8094j1baQKkhtwPcfnT9NTBlsW17l9DbR6YX:9Kn/hePcr9N3Ft
MD5:	AFFE0B2C58FDB9E3634F9F97D6D52F30
SHA1:	A7F7B772A90E9CF076CB1868E60756B8C267664E
SHA-256:	40EFF4F091BE0F29BDF58C4B7933CCB3057C9FF124E232D26097510D397B3436
SHA-512:	B8A0427C19F22DB9683318A0257BBB4C10D17A53DE86F6FAA99739A9042396147E69F3A3CB532C429AB6D894B2309302179E1826B9B6D3877FBFA9C93396E994
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-content/themes/Signable2019Theme/_/img/backgrounds/squiggle_left_white.svg
Preview:	<svg width="105" height="139" viewBox="0 0 105 139" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M-19.45 136.154C-22.2283 132.431 -24.4007 129.251 -25.4595 127.612L-25.6286 126.865C-29.6194 119.964 -32.2616 112.358 -33.4062 104.454C-34.6586 95.8057 -34.0902 86.9908 -31.7374 78.5747C-25.9531 58.3727 -8.81323 41.317 11.7546 36.3683C19.1276 34.6355 26.8525 35.1772 33.9116 37.9218C33.8292 41.6893 34.2142 45.4525 35.0578 49.1252C37.3945 59.3416 44.0701 73.4932 54.1207 78.206C58.1324 80.0968 62.8213 79.7901 66.0114 76.4887C70.3428 72.0233 69.5598 65.5089 67.409 60.2427C62.5805 48.3019 51.8617 39.2741 40.3844 33.9213C40.8494 30.1256 41.9435 26.4337 43.6215 22.9974C48.6743 12.7497 59.2487 5.6975 70.9282 6.4899C83.6187 7.39161 92.1718 18.5009 99.3297 27.798L99.485 27.9997C101.91 31.1593 106.283 26.7507 103.88 23.6264C95.8373 13.1909 86.4321 1.98131 72.4492 0.433719C60.8063 -0.86063 49.161 4.59083 42.0956 13.7942C38.1466 19.0145 35.5473 25.1288

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (365), with no line terminators
Category:	downloaded
Size (bytes):	365
Entropy (8bit):	4.983341365130917
Encrypted:	false
SSDEEP:	6:5zQ4MtMXRSNIQPELV0H0e66GIKELV0H0e3LV0H0e+nOtaLVeVEy0zmAUSrzmczgn:58Bt4RSCQPU+0eeU+0eR+0esOta5eVAy
MD5:	06B2963B029C0824382815165BFEA73E
SHA1:	DE23FB128E2589CF384603CFBB7F6B7BEF969B05
SHA-256:	EC3A84E593065A50CD77CE9FBA273B4196936940C0813CA248B045DF2E2C8EFF
SHA-512:	1CD97E2DB15DD10C65D22E7EF911E6A6DB742F34574F91743A9C6CC7922C7FE0CBCED0AE837EB6C43617D23FAF959FF3C9D1B3ED49F44FE000FC191FFD60C002
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/css/25.c695453b.chunk.css
Preview:	.drift-widget-controller{outline:none;display:block;position:fixed;height:56px;width:56px;cursor:pointer;-webkit-box-shadow:0 0 8px 4px rgba(0,0,0,.16);-moz-box-shadow:0 0 8px 4px rgba(0,0,0,.16);box-shadow:0 0 8px 4px rgba(0,0,0,.16);right:12px;bottom:12px;border:none;padding:0;-webkit-transform:translateZ(0);-moz-transform:translateZ(0);transform:translateZ(0)}

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3686)
Category:	downloaded
Size (bytes):	3738
Entropy (8bit):	5.170747890879751
Encrypted:	false
SSDEEP:	48:lD1Uh3bM1tbDJMNVqAzbtZrcA+ZNtQtYQ8YLt7ipP+ptjyw0F40Yu+N6ugW2ZL7Y:EvrqKvECtz2aHWINFndQT6pKZImNd/Y
MD5:	098634A674D2E72491673E3A3C841E13
SHA1:	38D7831C999783DDBC305AF169173A03938A66E6
SHA-256:	41949A4EC9598BCAC7A83E6D92099631889C5CC496CDE2D611968054E6B60C4C
SHA-512:	81532AF4EC747F9536D43C149A8849E161DDB08DEF6642A42A596D4859B995E497D1449830A151FA5E79862F6BEC017DBBA9231B047A75B3E67CCBA4CDD971EF
Malicious:	false
Reputation:	low
URL:	https://signable.app/js/chunk-69b2ef63.89413b65.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-69b2ef63"],{"0920":function(t,e,a){},3983:function(t,e,a){"use strict";a.r(e);var o=function(){var t=this,e=t._self._c;return e("VModal",{attrs:{name:"template-remove-modal",loading:t.loading}},[e("h2",{attrs:{slot:"header"},slot:"header"},[t._v(t._s(t.$t("template.removeTemplate")))]),e("div",{attrs:{slot:"content"},slot:"content"},[e("p",[t._v(t._s(t.$t("template.removeTemplateWarning")))]),e("VForm",{ref:"form",attrs:{onSubmit:t.validateForm,"data-vv-scope":"reminders-cancel"}},[t.errorMessage?e("div",{attrs:{slot:"row"},slot:"row"},[e("VMessage",{attrs:{type:"error",subtype:"basic"}},[e("FontIcon",{attrs:{slot:"icon",name:"life-ring"},slot:"icon"}),e("span",{attrs:{slot:"text"},slot:"text"},[t._v(t._s(t.errorMessage))])],1)],1):t._e(),e("div",{attrs:{slot:"formButtons"},slot:"formButtons"},[e("VButton",{staticClass:"float-right",attrs:{type:"error",subtype:"submit",href:"#","data-ec":"templates_remove_template_modal"

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6751)
Category:	downloaded
Size (bytes):	6803
Entropy (8bit):	5.166441078660863
Encrypted:	false
SSDEEP:	96:2vkLd3pNQQTdoKuMN2rirKMNJt34CNJHyVtmJ7fezE0TneMo1DrbfY6kAiPIr:2vc3pnpygfkVtmRUz406kAiW
MD5:	0F4B31CA63AED2F338A35642FA08DDFB
SHA1:	2B77E54475470CDE1036C36823BB913955E0189B
SHA-256:	0874CB6850B5F650B3172DB6040E6A6332BD901B836A6E5D13D3A511AA1F26C2
SHA-512:	FA16A260F77A5F87AF4AB62E66A8338DFE691C5B01CEAE64427A887EB3C2E35640A7997B94C26F26FF5EF379F0809FD16545E234DF18D3C359BD9F2D91C28B63
Malicious:	false
Reputation:	low
URL:	https://signable.app/js/chunk-48100a7b.a4a30136.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-48100a7b"],{"0920":function(e,t,i){},3479:function(e,t,i){},"7b7a":function(e,t,i){"use strict";var a=function(){var e=this,t=e._self._c;return t("div",{class:e.classList},[t("div",{staticClass:"o-modal__box"},[e.loading?t("VLoadingSpinner"):e._e(),t("a",{staticClass:"o-modal__box__close",attrs:{href:"#",tabindex:"0"},on:{click:function(t){return t.preventDefault(),e.close.apply(null,arguments)}}},[t("FontIcon",{attrs:{name:"times"}})],1),e._t("header"),t("div",{ref:"content",staticClass:"o-modal__box__content"},[e._t("content")],2)],2),t("div",{staticClass:"o-modal__overlay"})])},l=[],s=i("bd86"),d=(i("7f7f"),i("8b9a")),n=i("f46d"),o={name:"VModal",introduction:"A pop up modal.",components:{VLoadingSpinner:d["a"]},mixins:[n["a"]],props:{name:{type:String,required:!0,note:"The name of the modal to pass to the store."},size:{type:String,note:'The size of the modal (can be "small")'},loading:{type:Boolean,note:"Toggles dis

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 215, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	21501
Entropy (8bit):	7.961739316275154
Encrypted:	false
SSDEEP:	384:UnA5OpmyBtRDCVEzWSRV5psN96DzkfoICo7t4FrlwG106ttXYbieTa1UWC3M:URppFWqWSPS96zgCUuFrlwHCYXQUWC3M
MD5:	A0949D86F983CB1A3F60A506491B7EF5
SHA1:	8FB564FEE3E936580C1737D21A843C7427176BDC
SHA-256:	7FE12DB1481E25B09E6F825166D4FBA712C8A31A7834B5E4125CE11F1377F030
SHA-512:	489AE034066F1A3659FDE557CF9A76FCB1BDD40EC69C5C39D8EE85772705838D0C060C004FA9535AE1CEE4D8A42B0D404830CA732CB41CD525A1FCF4FDAD2C4F
Malicious:	false
Reputation:	low
URL:	https://www.signable.co.uk/wp-content/uploads/logo_coop.png
Preview:	.PNG........IHDR...............4....pHYs...%...%.IR$.....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2def, 2023/02/02-12:14:24 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 24.5 (Macintosh)" xmp:CreateDate="2023-06-19T13:36:58+01:00" xmp:ModifyDate="2023-06-19T13:50:22+01:00" xmp:MetadataDate="2023-06-19T13:50:22+01:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:6dc59530-4203-46c9-8afb-a0389c01714d" xmpMM:DocumentID="xmp.did:6dc59530-4203-46c9-8afb-a0389c01714d" xmpMM:OriginalDocumentID="xmp.did:6dc59530-4203-4

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2076), with no line terminators
Category:	downloaded
Size (bytes):	2076
Entropy (8bit):	5.101587924428021
Encrypted:	false
SSDEEP:	24:H9cj4Ej+mrA3b7ml77bKHDjKqh9HDGPgYfnBKFVDB6Aq16KybQ012oxrhC2rby:dcjfjrA3fW2Ii6AqTys0A0Z2
MD5:	3498698BFE371AD0067B853F221F12BE
SHA1:	715125FEA045E2977749C85C1FC251E0F988F930
SHA-256:	918BD35351DEFCA4520C2208296FDBE26685C0A83528F699CF6A4EF11590B72E
SHA-512:	E4635279C19DE04AF27CAC2CE06A997421B3B7AF9A3D4AA05E521D02C51B19015AD40093066A9D7AE2C9F0EB96C3A4A7E78E42AFEF4F7D6810EED539E2BA135E
Malicious:	false
Reputation:	low
URL:	https://signable.app/css/chunk-1565c410.e2751d66.css
Preview:	.o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100% - 30px);max-height:calc(100% - 30px);-webkit-box-shadow:0 0 20px 2px #222;box-shadow:0 0 20px 2px #222;-webkit-transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out,-webkit-transform .15s ease-in-out}.o-modal__box__header[data-v-f1eb06a4]{padding:var(--spacing-base);border-bottom:1px solid var(--color-border);margin-bottom:0}.o-modal__box__content[data-v-f1eb06a4]{padding:var(--spacing-base);max-height:calc(100vh - 94px);overflow-y:auto}.o-mod

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	77498
Entropy (8bit):	5.934717497951275
Encrypted:	false
SSDEEP:	1536:5UCCSCcqH2ZOUZkEZnNARADp5/l6SYclC68A5jpq9dUyBGI:5UCCSe2Z7kEZnyRADpz6St0zUyh
MD5:	8892BBE937173F102E271909BA19CC6E
SHA1:	34906BC0563CAC2A71E8B2C1E211A68DF916A20E
SHA-256:	B7831F11B0D47B1C2A45A2CA7B382594CAFDA86D1AE67D19B963B0F2AD6C9BAF
SHA-512:	11C9384B1CC6C1B5E0EC32FF860A74BE937499EBD261AEBCF2CC3D6D9DD8A71C08F3C47C5938513F42C1FF3AC09897236DCEB3263FD98C370116DE204AEFE1C0
Malicious:	false
Reputation:	low
URL:	https://www.signable.us/wp-content/themes/Signable2019Theme/_/img/signable_logo.svg
Preview:	<svg width="156" height="47" viewBox="0 0 156 47" fill="none" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.<rect width="156" height="47" fill="url(#pattern0)"/>.<defs>.<pattern id="pattern0" patternContentUnits="objectBoundingBox" width="1" height="1">.<use xlink:href="#image0_2_65" transform="translate(-0.0010291) scale(0.000369218 0.00122549)"/>.</pattern>.<image id="image0_2_65" width="2714" height="816" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAACpoAAAMwCAYAAAA6PyGGAAAACXBIWXMAAC4jAAAuIwF4pT92AAAgAElEQVR42uzd61Ub194H4B+sfIe3AnSgAEgFKBWYVGC5ApMKrFQQXIHlCoIriFxBoAA7ooIDFfB+2DMHQTBXXebyPGuxck4uRrNnNPsyv/2fjevr68ArDaqfH/3/l7pMcnbn751Vfx+gl75/2xgkOah+7polOdvduz7TUgAAAABAAxykPDM6+ME/n1U/U00FQENs5+ZZ3PYP/p3pXB8GAL2wIWjKEwZQ23MLAMPqr4MkO2v+fBdzA7c6gDofTp06hUAXfP+2MUwyqu7BT7n3XiQ5TXKyu3dtggsAAAAArMogyVHKWuabZ/63X1PWNU8juAPAah3k5lnc/jP+u6uq35ommWhGALpM0JR60DTI7V05hx06vq+5CaDOYmcs0ALfv21sVxPa47wu2P85yVjgFAAAAABYomHKWuabBf15X1MCOxNNC8ASjZKMs5giW

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2256), with no line terminators
Category:	downloaded
Size (bytes):	2256
Entropy (8bit):	5.082283715322413
Encrypted:	false
SSDEEP:	24:H9cj4Ej+mrA3b7ml77bKHDjKqh9HDGPgYfnBKFVDB6Aq16KybQ012oxrDoXsw7en:dcjfjrA3fW2Ii6AqTys0A0Nw7e3BoWZ
MD5:	4D8C1E88F99321B8166BD8FD66AF1314
SHA1:	8ED2EC9DD84A03ED16D7BABEB6412CA72F30704F
SHA-256:	BA32437F02608232454C8987C3F36B5928AAD1ABDB1214F512CA590ACBD32450
SHA-512:	B6BD949825B5060421CBB17F1CDB618FDBBD20A7D809ABCC12293D4449373CC43AC72F93D7A8D51F6A1C01B4878187F41C93784E46C656F69620E2DF60EF5B56
Malicious:	false
Reputation:	low
URL:	https://signable.app/css/chunk-194b1996.b657570a.css
Preview:	.o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100% - 30px);max-height:calc(100% - 30px);-webkit-box-shadow:0 0 20px 2px #222;box-shadow:0 0 20px 2px #222;-webkit-transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,-webkit-transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out;transition:opacity .25s ease-in-out,top .25s ease-in-out,transform .15s ease-in-out,-webkit-transform .15s ease-in-out}.o-modal__box__header[data-v-f1eb06a4]{padding:var(--spacing-base);border-bottom:1px solid var(--color-border);margin-bottom:0}.o-modal__box__content[data-v-f1eb06a4]{padding:var(--spacing-base);max-height:calc(100vh - 94px);overflow-y:auto}.o-mod

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 564 x 220, 2-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2771
Entropy (8bit):	7.882902458736908
Encrypted:	false
SSDEEP:	48:PBNgU4m9V8PNdiytKiVoQN4hOTWiIfhK/lcvocI6SOtQGxufmk:5NCPNdRtVVoo4hOCVfhK/qvocUOtQGxI
MD5:	0C230F441EA7A186476641BE0AE2AE57
SHA1:	8BEC78A92A223650EEDB49103BFAF69561128110
SHA-256:	0D1BA33F6124FCFFBA6F817B7BD118D0E6A8C5D7B360FB4392CB55AC314A8E72
SHA-512:	A96DE79D3F27C591F659DE773E22F0D2724BEC89CA7F3E435769425B20C1DC3E67638DCE7491FE8606306A308FEF74D80648AD8677563BB3A6045DFA86AE1F1F
Malicious:	false
Reputation:	low
URL:	https://www.signable.co.uk/wp-content/uploads/logo_aardman.png
Preview:	.PNG........IHDR...4..........m.V....PLTE..%..%..%..&Q9......tRNS.A.h..4...sIDATx...o....g...E.:.-!.%(r0..B..6.......A9...@..P.%.......)>..D...&.....hr..2.........../..r%r..0....].7o.....F.i..F.i..F.i......Dc..J7..N0..M?.kD.F.d.&..T.$...O.NG....x...`..$.O^.M7.Z$.Uk........V..Y6.Q.x..A]B....u.u.}.1Q.4...?$:...Y.A.V}.3%..L.......s.....R9....4(..G_.,N]J..X...j.....B.....b...n..1....9.........X'.wB^..C.4\|...kE3........).~.....5....km.tU....0T....n.P.\\w.M.......Y.Z.(..h.Q=\w.mM.~.i.u.Y%5.i....kD..0Z}.^.Fg..i.V......6F.s...P4MU..F.T.....Q.`.....`.....a6g.h(.;...r..]Ds.^.......x..TZ.j5...r...i..]...T...{51..)Bc_...X...N.Y+.i.:.N.F.:.....x7.p6....A..h6..A...Z..h.%`.iY.?....j..@.k......;..~....Ch3.F..^.X...O.....L..fWs..(.'....'^...;.._..r..$...........noCs...._..)i.\..6i,.......\q.....EC...V.Svw.......E...[.........G.v+t...-J.~.....w...\..T.u.I..#..4}QP.U...Ec..J4.i..$Z..n-"Q.p.W.g1..p,...^......h.1.4..qg.Vus...43..~o.vc.m....Y>u.l...Z.

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14689)
Category:	downloaded
Size (bytes):	281674
Entropy (8bit):	5.567251218238397
Encrypted:	false
SSDEEP:	6144:B+2xdARHvrM8/lteYu0KC246zLVrktV9eUovZj:B+2xezM8/b3u0KC246zLVP1
MD5:	1003D2F2C7C07112E96852DEB9491D7B
SHA1:	72FF6E6405377B1C90659D7AD2BDA2B95A8BB82A
SHA-256:	85C0353DC5AC611944B76B7C2A86064634DA957ABE7462295B043AF0050EA7F0
SHA-512:	B6B640372349AA17CBAA2EF8573511E10DF860555CA8541FE237CFC62FAD87BD1469C745441CA5C734DAA8572731534AD0F79DC6F9DABCF3B625EE71907B00C0
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-NMPMBWS
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"114",. . "macros":[{"function":"__e"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"user_id"},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__v","vtp_name":"gtm.element","vtp_dataLayerVersion":1},{"function":"__jsm","vtp_javascript":["template","(function(){return ",["escape",["macro",3],8,16],".closest(\"[data-et]\").dataset.et})();"]},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"virtualPage"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__jsm","vtp_javascript":["template","(function(){var a=document.evaluate(\"\/html\/body\/div[2]\/div[1]\/div[3]\/div\/div[2]\/div\/div\/div[2]\/div[2]\/div\/form\/div[2]\/input\"

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 133, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	67426
Entropy (8bit):	7.969056417690645
Encrypted:	false
SSDEEP:	1536:k/VdMIT65FGvpO25ICniidxQ4qB9KbFAaR2HS1/GSPWare:Gz+5wvpf7niom4qfKb0W5PNi
MD5:	EB444214EEB5EB406D4FE1DF02C6BC4A
SHA1:	84CCD29D84E2B4A3149D3BA1CFE7AFF5121813FD
SHA-256:	110DCBDB36055ADAB5F2EF0D78C084C6D60CF6EAB2C48EB20A313103938F14D8
SHA-512:	2BFFFE5415F126042BCEF34015659BB6AB069EF9FC7B9DD7225724DFEA78AC7327CFDF94FF9909B34035DC358B457E319228ADBAC4532894EB2E94C1F57A2F5E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................Z....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:45 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 24.6 (Macintosh)" xmp:CreateDate="2023-07-04T16:10:15+01:00" xmp:ModifyDate="2023-07-04T16:12:03+01:00" xmp:MetadataDate="2023-07-04T16:12:03+01:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:67a5406c-769d-4655-bc12-5af4ceeb188f" xmpMM:DocumentID="xmp.did:67a5406c-769d-4655-bc12-5af4ceeb188f" xmpMM:OriginalDocumentID="xmp.did:67a5406c-769d-46

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3575)
Category:	downloaded
Size (bytes):	3627
Entropy (8bit):	5.198659532179966
Encrypted:	false
SSDEEP:	96:lINFp3QTWPKZImNn/dpr9BctbJQRoFPyjMsyqKJ:lSpfgkPyjM91
MD5:	346CD57A05CED0EE97639089F5B1C6A1
SHA1:	1D8C31634015B6F2F497976242ECFE098C339498
SHA-256:	BC698B219D2AB46A9B15DE15793CA2B399B85998CF8E7088391489D3C602905D
SHA-512:	CC2A2C41ABD6C8C3120A46001D03635C68CB6CC94DFA1C5196FC2CDFB9B3C5448FCF0D80A1AF833B70A8B1F759A7CA14AC49F6500AB20191883A8E3571FFF756
Malicious:	false
Reputation:	low
URL:	https://signable.app/js/chunk-3fbf9bd4.8a5a0a97.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-3fbf9bd4"],{"0920":function(t,e,s){},"7b7a":function(t,e,s){"use strict";var o=function(){var t=this,e=t._self._c;return e("div",{class:t.classList},[e("div",{staticClass:"o-modal__box"},[t.loading?e("VLoadingSpinner"):t._e(),e("a",{staticClass:"o-modal__box__close",attrs:{href:"#",tabindex:"0"},on:{click:function(e){return e.preventDefault(),t.close.apply(null,arguments)}}},[e("FontIcon",{attrs:{name:"times"}})],1),t._t("header"),e("div",{ref:"content",staticClass:"o-modal__box__content"},[t._t("content")],2)],2),e("div",{staticClass:"o-modal__overlay"})])},a=[],n=s("bd86"),i=(s("7f7f"),s("8b9a")),r=s("f46d"),l={name:"VModal",introduction:"A pop up modal.",components:{VLoadingSpinner:i["a"]},mixins:[r["a"]],props:{name:{type:String,required:!0,note:"The name of the modal to pass to the store."},size:{type:String,note:'The size of the modal (can be "small")'},loading:{type:Boolean,note:"Toggles display of a loading spinn

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 220, 2-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2439
Entropy (8bit):	7.892408818343656
Encrypted:	false
SSDEEP:	48:3UACbTGmJFK+oqE4ra5EmEu4wDDvc70vm6Fc4XVwSRuH+/YCUeuM:3UAQTGmXdoq/rOXDDvI6Fc4XiSIHHdet
MD5:	B2A265044A8EF37A5F33077DDF30FBB2
SHA1:	D7619CEF1F20E58FD021983AC1D66893041CAD65
SHA-256:	04C78993615818580807041D6639B384D2E4EE8689A8F751D6405E693905463A
SHA-512:	64F1E2CD7E1E2B42A9E8E8173029CCDD47A383217CEF458D5B514AC3A35275BBAE28AE626731C9BD9740C891D9D361C02B45728BB58A298772A81562357891FD
Malicious:	false
Reputation:	low
URL:	https://www.signable.co.uk/wp-content/uploads/logo_bodyshop.png
Preview:	.PNG........IHDR.............#<......PLTEJhc.5./$.,!.4.{....tRNS.>......'IDATx.......g....@.9....Vg i...#.0..._q[...G."...3pK..Sd...R.P....[....s.o.pH.....N.x.ZI....7...\.\.\..,.&~',../.{q...I o..:.....0.R......'.V....HJ).&..T...V/...#. ...UD.....StE..=..RF.+...K.v%.v#..'.......aG......D.vO:..K&.....Kr@.+%.....$..q....h..l.._Ii[{.jE.Z.S....j..Cq>).A...t{uWj2..N;....G.aL.$.#&..oM.S6.ZP.y.....W.U=.S`.m.6P>..Ku&.......#..Xy.$.+.........p...r..{.....7.v?.4..-..KcF..X..9.B.U......h..R..A.}g.......A^......E....Z..:7..Y..B...X73..~..O.:.'z.....~~'..Uh....n.>..LR....]..Y#-.39..w..q.........."]yq.l<.8.........xJ.....s1.'.ZP1......M<.p6,..dr..~..F`.uQ.. .`^5.?.... k..\|GY..n...\|.4?'m\+.E.bj3..f.'$..;hg},...1.}.........dy.j.&.........n..UU.b%Z.i..._+g.9.oC..7..Z#n......(Yl.!L(........V. ..ig.<.R.K.)..3........UT..Kd.. .iH..)+....p%..\|....E.Sq...G.!..R~<....G.......Y.ox.e.........a.'.%.H..7L........{..Q.@@..:..=..._1.pm.s#$@....)...+$..f.....0K...F.

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5337)
Category:	downloaded
Size (bytes):	5389
Entropy (8bit):	5.213200002101269
Encrypted:	false
SSDEEP:	96:wD8rv8WdzA0RPUOMNJp8CEtNQW98YOVYrvkLd3TQTB/wKtMNjYP:dX7RPoNJyPtNF98YOavc3U06
MD5:	4C058D2FADBE090A08038E24B88DA610
SHA1:	136A9DFA7F97FBF0D5883592F49F365AFE661828
SHA-256:	3047CAB14FB556CFCFCC087AEE1D7E3E49053B8A5BD9293930B0F5605F3DB1B7
SHA-512:	D0BADA98ABD92E760CDD28F7F2C9E33D2AFBB08153A69AC4063DF42956635F541461B78C511A2D5F691D55EC3C0EA38F0731CCB6B5901F3B9F8BA5DB50F68336
Malicious:	false
Reputation:	low
URL:	https://signable.app/js/chunk-6f4fbc3c.5424774e.js
Preview:	(window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-6f4fbc3c"],{"0920":function(e,t,a){},"566c":function(e,t,a){"use strict";a.r(t);var s=function(){var e=this,t=e._self._c;return t("VModal",{staticClass:"transfer-modal",attrs:{name:"template-transfer-modal",loading:e.loading}},[t("h2",{attrs:{slot:"header"},slot:"header"},[e._v(e._s(e.$t("template.transferTemplate")))]),t("div",{attrs:{slot:"content"},slot:"content"},[t("p",[e._v(e._s(e.$t("template.transferTemplateWarning")))]),t("VForm",{ref:"form",attrs:{onSubmit:e.validateForm,"data-vv-scope":"reminders-cancel"}},[t("div",{attrs:{slot:"row"},slot:"row"},[e.errorMessage?t("VMessage",{attrs:{type:"error",subtype:"basic"}},[t("FontIcon",{attrs:{slot:"icon",name:"life-ring"},slot:"icon"}),t("span",{attrs:{slot:"text"},slot:"text"},[e._v(e._s(e.errorMessage))])],1):e._e(),e.loading?e._e():t("VGrid",[t("div",{attrs:{slot:"gridItem",type:"6"},slot:"gridItem"},[t("VDropdown",{attrs:{list:e.orderedUsers,map:{title:"name"},"da

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 16, 2024 22:32:45.050298929 CET	49724	443	192.168.2.18	52.85.151.72
Jan 16, 2024 22:32:45.050319910 CET	443	49724	52.85.151.72	192.168.2.18
Jan 16, 2024 22:32:45.050364017 CET	49724	443	192.168.2.18	52.85.151.72
Jan 16, 2024 22:32:45.051544905 CET	49725	443	192.168.2.18	52.85.151.72
Jan 16, 2024 22:32:45.051587105 CET	443	49725	52.85.151.72	192.168.2.18
Jan 16, 2024 22:32:45.051641941 CET	49725	443	192.168.2.18	52.85.151.72
Jan 16, 2024 22:32:45.052042007 CET	49725	443	192.168.2.18	52.85.151.72
Jan 16, 2024 22:32:45.052056074 CET	443	49725	52.85.151.72	192.168.2.18
Jan 16, 2024 22:32:45.052278996 CET	49724	443	192.168.2.18	52.85.151.72
Jan 16, 2024 22:32:45.052289009 CET	443	49724	52.85.151.72	192.168.2.18
Jan 16, 2024 22:32:45.099533081 CET	49726	443	192.168.2.18	142.250.65.174
Jan 16, 2024 22:32:45.099555016 CET	443	49726	142.250.65.174	192.168.2.18
Jan 16, 2024 22:32:45.099603891 CET	49726	443	192.168.2.18	142.250.65.174
Jan 16, 2024 22:32:45.100107908 CET	49726	443	192.168.2.18	142.250.65.174
Jan 16, 2024 22:32:45.100116014 CET	443	49726	142.250.65.174	192.168.2.18
Jan 16, 2024 22:32:45.101083040 CET	49727	443	192.168.2.18	142.251.16.84
Jan 16, 2024 22:32:45.101090908 CET	443	49727	142.251.16.84	192.168.2.18
Jan 16, 2024 22:32:45.101146936 CET	49727	443	192.168.2.18	142.251.16.84
Jan 16, 2024 22:32:45.101339102 CET	49727	443	192.168.2.18	142.251.16.84
Jan 16, 2024 22:32:45.101346970 CET	443	49727	142.251.16.84	192.168.2.18
Jan 16, 2024 22:32:45.267957926 CET	443	49724	52.85.151.72	192.168.2.18
Jan 16, 2024 22:32:45.268301964 CET	49724	443	192.168.2.18	52.85.151.72
Jan 16, 2024 22:32:45.268364906 CET	443	49724	52.85.151.72	192.168.2.18
Jan 16, 2024 22:32:45.269802094 CET	443	49724	52.85.151.72	192.168.2.18
Jan 16, 2024 22:32:45.269898891 CET	49724	443	192.168.2.18	52.85.151.72
Jan 16, 2024 22:32:45.269984007 CET	443	49725	52.85.151.72	192.168.2.18
Jan 16, 2024 22:32:45.270443916 CET	49725	443	192.168.2.18	52.85.151.72
Jan 16, 2024 22:32:45.270503044 CET	443	49725	52.85.151.72	192.168.2.18
Jan 16, 2024 22:32:45.270900965 CET	49724	443	192.168.2.18	52.85.151.72
Jan 16, 2024 22:32:45.270978928 CET	443	49724	52.85.151.72	192.168.2.18
Jan 16, 2024 22:32:45.271127939 CET	49724	443	192.168.2.18	52.85.151.72
Jan 16, 2024 22:32:45.271148920 CET	443	49724	52.85.151.72	192.168.2.18
Jan 16, 2024 22:32:45.271653891 CET	443	49725	52.85.151.72	192.168.2.18
Jan 16, 2024 22:32:45.271723032 CET	49725	443	192.168.2.18	52.85.151.72
Jan 16, 2024 22:32:45.272021055 CET	49725	443	192.168.2.18	52.85.151.72
Jan 16, 2024 22:32:45.272094011 CET	443	49725	52.85.151.72	192.168.2.18
Jan 16, 2024 22:32:45.297935963 CET	443	49726	142.250.65.174	192.168.2.18
Jan 16, 2024 22:32:45.298165083 CET	49726	443	192.168.2.18	142.250.65.174
Jan 16, 2024 22:32:45.298186064 CET	443	49726	142.250.65.174	192.168.2.18
Jan 16, 2024 22:32:45.298563004 CET	443	49726	142.250.65.174	192.168.2.18
Jan 16, 2024 22:32:45.298639059 CET	49726	443	192.168.2.18	142.250.65.174
Jan 16, 2024 22:32:45.299258947 CET	443	49726	142.250.65.174	192.168.2.18
Jan 16, 2024 22:32:45.299325943 CET	49726	443	192.168.2.18	142.250.65.174
Jan 16, 2024 22:32:45.300559998 CET	49726	443	192.168.2.18	142.250.65.174
Jan 16, 2024 22:32:45.300626040 CET	443	49726	142.250.65.174	192.168.2.18
Jan 16, 2024 22:32:45.300751925 CET	49726	443	192.168.2.18	142.250.65.174
Jan 16, 2024 22:32:45.300760984 CET	443	49726	142.250.65.174	192.168.2.18
Jan 16, 2024 22:32:45.312465906 CET	443	49727	142.251.16.84	192.168.2.18
Jan 16, 2024 22:32:45.312694073 CET	49727	443	192.168.2.18	142.251.16.84
Jan 16, 2024 22:32:45.312704086 CET	443	49727	142.251.16.84	192.168.2.18
Jan 16, 2024 22:32:45.314462900 CET	443	49727	142.251.16.84	192.168.2.18
Jan 16, 2024 22:32:45.314537048 CET	49727	443	192.168.2.18	142.251.16.84
Jan 16, 2024 22:32:45.314964056 CET	49724	443	192.168.2.18	52.85.151.72
Jan 16, 2024 22:32:45.315782070 CET	49727	443	192.168.2.18	142.251.16.84
Jan 16, 2024 22:32:45.315790892 CET	49725	443	192.168.2.18	52.85.151.72
Jan 16, 2024 22:32:45.315809965 CET	443	49725	52.85.151.72	192.168.2.18
Jan 16, 2024 22:32:45.315866947 CET	443	49727	142.251.16.84	192.168.2.18
Jan 16, 2024 22:32:45.316165924 CET	49727	443	192.168.2.18	142.251.16.84
Jan 16, 2024 22:32:45.316174984 CET	443	49727	142.251.16.84	192.168.2.18
Jan 16, 2024 22:32:45.346978903 CET	49726	443	192.168.2.18	142.250.65.174
Jan 16, 2024 22:32:45.363059044 CET	49725	443	192.168.2.18	52.85.151.72
Jan 16, 2024 22:32:45.363261938 CET	49727	443	192.168.2.18	142.251.16.84
Jan 16, 2024 22:32:45.472718954 CET	443	49724	52.85.151.72	192.168.2.18
Jan 16, 2024 22:32:45.473066092 CET	443	49724	52.85.151.72	192.168.2.18
Jan 16, 2024 22:32:45.473119020 CET	49724	443	192.168.2.18	52.85.151.72
Jan 16, 2024 22:32:45.473309994 CET	49724	443	192.168.2.18	52.85.151.72
Jan 16, 2024 22:32:45.473325014 CET	443	49724	52.85.151.72	192.168.2.18
Jan 16, 2024 22:32:45.473345995 CET	49724	443	192.168.2.18	52.85.151.72
Jan 16, 2024 22:32:45.473367929 CET	49724	443	192.168.2.18	52.85.151.72
Jan 16, 2024 22:32:45.494761944 CET	443	49726	142.250.65.174	192.168.2.18
Jan 16, 2024 22:32:45.495114088 CET	443	49726	142.250.65.174	192.168.2.18
Jan 16, 2024 22:32:45.495167971 CET	49726	443	192.168.2.18	142.250.65.174
Jan 16, 2024 22:32:45.500607014 CET	49726	443	192.168.2.18	142.250.65.174
Jan 16, 2024 22:32:45.500624895 CET	443	49726	142.250.65.174	192.168.2.18
Jan 16, 2024 22:32:45.530968904 CET	443	49727	142.251.16.84	192.168.2.18
Jan 16, 2024 22:32:45.531526089 CET	443	49727	142.251.16.84	192.168.2.18
Jan 16, 2024 22:32:45.531584978 CET	49727	443	192.168.2.18	142.251.16.84
Jan 16, 2024 22:32:45.533377886 CET	49727	443	192.168.2.18	142.251.16.84
Jan 16, 2024 22:32:45.533390045 CET	443	49727	142.251.16.84	192.168.2.18
Jan 16, 2024 22:32:45.858767986 CET	49728	80	192.168.2.18	169.239.217.18
Jan 16, 2024 22:32:45.998603106 CET	49729	80	192.168.2.18	169.239.217.18
Jan 16, 2024 22:32:46.200704098 CET	80	49728	169.239.217.18	192.168.2.18
Jan 16, 2024 22:32:46.200814962 CET	49728	80	192.168.2.18	169.239.217.18
Jan 16, 2024 22:32:46.201059103 CET	49728	80	192.168.2.18	169.239.217.18
Jan 16, 2024 22:32:46.334250927 CET	80	49729	169.239.217.18	192.168.2.18
Jan 16, 2024 22:32:46.334466934 CET	49729	80	192.168.2.18	169.239.217.18
Jan 16, 2024 22:32:46.538527966 CET	80	49728	169.239.217.18	192.168.2.18
Jan 16, 2024 22:32:47.325742006 CET	80	49728	169.239.217.18	192.168.2.18
Jan 16, 2024 22:32:47.365988016 CET	49728	80	192.168.2.18	169.239.217.18
Jan 16, 2024 22:32:47.423929930 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:47.424015045 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:47.424107075 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:47.424359083 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:47.424380064 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:47.946736097 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:47.947144032 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:47.947207928 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:47.948213100 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:47.948301077 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:47.949186087 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:47.949251890 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:47.949392080 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:47.949409962 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:48.001971960 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:48.608093023 CET	49674	443	192.168.2.18	173.222.162.7
Jan 16, 2024 22:32:48.608105898 CET	49673	443	192.168.2.18	173.222.162.7
Jan 16, 2024 22:32:48.623991013 CET	49672	443	192.168.2.18	173.222.162.7
Jan 16, 2024 22:32:48.863976955 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:48.864010096 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:48.864022017 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:48.864084959 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:48.864111900 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:48.864124060 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:48.864248991 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:48.864248991 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:48.864248991 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:48.864335060 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:48.864367962 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:48.864401102 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:48.864433050 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:48.864459991 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:48.864494085 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:48.864494085 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:48.864494085 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:48.864494085 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:48.864531994 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:48.904422998 CET	49732	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:48.904470921 CET	443	49732	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:48.904529095 CET	49732	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:48.904865980 CET	49733	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:48.904932976 CET	443	49733	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:48.904998064 CET	49733	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:48.905492067 CET	49734	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:48.905554056 CET	443	49734	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:48.905620098 CET	49734	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:48.905755997 CET	49732	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:48.905782938 CET	443	49732	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:48.906071901 CET	49733	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:48.906097889 CET	443	49733	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:48.906254053 CET	49734	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:48.906284094 CET	443	49734	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.032757998 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.032833099 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.032895088 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.032960892 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.032996893 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.033037901 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.033127069 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.033174038 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.033231974 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.033251047 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.033298969 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.033988953 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.034017086 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.034055948 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.034066916 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.034095049 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.034115076 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.038882017 CET	49735	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.038938046 CET	443	49735	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.039022923 CET	49735	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.039479017 CET	49736	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.039562941 CET	443	49736	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.039628029 CET	49736	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.040381908 CET	49735	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.040412903 CET	443	49735	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.040544987 CET	49736	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.040556908 CET	443	49736	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.201644897 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.201677084 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.201778889 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.201812029 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.201853037 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.201937914 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.201956987 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.201993942 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.201999903 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.202029943 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.202248096 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.202265978 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.202291012 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.202296019 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.202321053 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.202337980 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.202478886 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.202528954 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.202533960 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.202578068 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.202614069 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.202744961 CET	49731	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.202759027 CET	443	49731	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.203181982 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.203205109 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.203264952 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.203891039 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.203905106 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.433116913 CET	443	49732	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.433758974 CET	49732	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.433779955 CET	443	49732	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.434302092 CET	443	49732	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.434783936 CET	49732	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.434865952 CET	443	49732	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.435400963 CET	49732	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.442292929 CET	443	49733	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.442507982 CET	49733	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.442569017 CET	443	49733	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.443010092 CET	443	49733	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.443384886 CET	49733	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.443464994 CET	443	49733	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.443542004 CET	49733	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.445106983 CET	443	49734	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.445297003 CET	49734	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.445318937 CET	443	49734	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.446855068 CET	443	49734	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.446948051 CET	49734	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.447206020 CET	49734	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.447298050 CET	443	49734	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.447302103 CET	49734	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.477922916 CET	443	49732	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.485923052 CET	443	49733	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.493904114 CET	443	49734	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.498963118 CET	49734	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.499018908 CET	443	49734	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.503181934 CET	49738	443	192.168.2.18	142.251.40.100
Jan 16, 2024 22:32:49.503271103 CET	443	49738	142.251.40.100	192.168.2.18
Jan 16, 2024 22:32:49.503360987 CET	49738	443	192.168.2.18	142.251.40.100
Jan 16, 2024 22:32:49.507419109 CET	49738	443	192.168.2.18	142.251.40.100
Jan 16, 2024 22:32:49.507443905 CET	443	49738	142.251.40.100	192.168.2.18
Jan 16, 2024 22:32:49.541909933 CET	49734	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.566580057 CET	443	49735	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.566807032 CET	49735	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.566865921 CET	443	49735	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.568536997 CET	443	49735	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.568609953 CET	49735	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.568977118 CET	49735	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.569098949 CET	443	49735	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.569101095 CET	49735	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.571113110 CET	443	49736	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.571331024 CET	49736	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.571352959 CET	443	49736	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.572740078 CET	443	49736	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.572788000 CET	49736	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.573013067 CET	49736	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.573069096 CET	443	49736	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.573101997 CET	49736	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.609925985 CET	443	49735	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.610975981 CET	49735	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.611033916 CET	443	49735	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.613922119 CET	443	49736	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.625941992 CET	49736	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.625956059 CET	443	49736	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.657995939 CET	49735	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.674041033 CET	49736	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.735481024 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.735764980 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.735774994 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.737495899 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.737581968 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.737842083 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.737938881 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.738008022 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.738014936 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.770531893 CET	443	49733	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.770605087 CET	443	49733	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.770687103 CET	49733	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.771224976 CET	49733	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.771266937 CET	443	49733	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.771742105 CET	49739	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.771775961 CET	443	49739	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.771836996 CET	49739	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.772650957 CET	49739	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.772663116 CET	443	49739	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.777210951 CET	443	49734	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.777386904 CET	443	49734	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.777445078 CET	49734	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.778266907 CET	49734	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.778310061 CET	443	49734	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.778337955 CET	49734	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.778386116 CET	49734	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.778665066 CET	49740	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.778750896 CET	443	49740	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.778810978 CET	49740	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.779488087 CET	49740	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.779505014 CET	443	49740	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.785346031 CET	443	49738	142.251.40.100	192.168.2.18
Jan 16, 2024 22:32:49.785532951 CET	49738	443	192.168.2.18	142.251.40.100
Jan 16, 2024 22:32:49.785592079 CET	443	49738	142.251.40.100	192.168.2.18
Jan 16, 2024 22:32:49.785963058 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.787066936 CET	443	49738	142.251.40.100	192.168.2.18
Jan 16, 2024 22:32:49.787156105 CET	49738	443	192.168.2.18	142.251.40.100
Jan 16, 2024 22:32:49.788013935 CET	49738	443	192.168.2.18	142.251.40.100
Jan 16, 2024 22:32:49.788108110 CET	443	49738	142.251.40.100	192.168.2.18
Jan 16, 2024 22:32:49.834001064 CET	49738	443	192.168.2.18	142.251.40.100
Jan 16, 2024 22:32:49.834072113 CET	443	49738	142.251.40.100	192.168.2.18
Jan 16, 2024 22:32:49.882026911 CET	49738	443	192.168.2.18	142.251.40.100
Jan 16, 2024 22:32:49.925039053 CET	443	49736	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.925072908 CET	443	49736	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.925088882 CET	443	49736	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.925159931 CET	443	49736	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.925200939 CET	49736	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.925256968 CET	49736	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.926500082 CET	49736	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.926538944 CET	443	49736	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.926789999 CET	49741	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.926817894 CET	443	49741	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.926870108 CET	49741	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.927782059 CET	49741	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.927798033 CET	443	49741	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.947630882 CET	443	49732	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.947654963 CET	443	49732	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.947669029 CET	443	49732	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.947751045 CET	49732	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.947797060 CET	443	49732	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.947863102 CET	49732	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.950571060 CET	443	49732	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.950589895 CET	443	49732	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.950663090 CET	49732	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:49.950680971 CET	443	49732	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:49.950731993 CET	49732	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.014946938 CET	443	49708	173.222.162.7	192.168.2.18
Jan 16, 2024 22:32:50.015031099 CET	49708	443	192.168.2.18	173.222.162.7
Jan 16, 2024 22:32:50.065756083 CET	443	49735	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.065789938 CET	443	49735	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.065798998 CET	443	49735	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.065869093 CET	443	49735	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.065926075 CET	443	49735	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.065928936 CET	49735	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.065958023 CET	443	49735	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.066009998 CET	49735	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.066009998 CET	49735	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.066009998 CET	49735	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.066021919 CET	443	49735	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.066090107 CET	49735	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.066943884 CET	443	49735	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.066991091 CET	443	49735	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.067025900 CET	49735	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.067059040 CET	443	49735	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.067092896 CET	49735	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.067114115 CET	49735	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.118915081 CET	443	49732	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.119093895 CET	49732	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.119158030 CET	443	49732	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.119227886 CET	49732	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.119965076 CET	443	49732	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.120018005 CET	443	49732	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.120049953 CET	49732	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.120059967 CET	443	49732	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.120070934 CET	49732	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.120100975 CET	49732	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.122531891 CET	443	49732	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.122550011 CET	443	49732	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.122629881 CET	49732	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.122638941 CET	443	49732	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.122674942 CET	49732	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.232923031 CET	443	49735	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.232988119 CET	443	49735	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.233118057 CET	443	49735	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.233171940 CET	443	49735	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.233171940 CET	49735	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.233172894 CET	49735	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.233242035 CET	443	49735	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.233292103 CET	49735	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.233292103 CET	49735	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.233346939 CET	443	49735	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.233405113 CET	49735	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.234035015 CET	49735	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.234069109 CET	443	49735	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.234472990 CET	49742	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.234560013 CET	443	49742	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.234654903 CET	49742	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.235584021 CET	49742	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.235618114 CET	443	49742	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.251601934 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.251632929 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.251643896 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.251662016 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.251694918 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.251717091 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.251766920 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.251791954 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.251791954 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.251791954 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.251823902 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.251825094 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.251837969 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.251852036 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.251890898 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.279253006 CET	443	49739	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.279504061 CET	49739	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.279529095 CET	443	49739	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.279833078 CET	443	49739	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.280100107 CET	49739	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.280153990 CET	443	49739	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.280209064 CET	49739	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.287741899 CET	443	49732	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.287766933 CET	443	49732	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.287815094 CET	443	49732	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.287836075 CET	49732	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.287842989 CET	443	49732	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.287885904 CET	443	49732	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.287914991 CET	443	49732	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.287925005 CET	49732	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.287925005 CET	49732	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.287955999 CET	49732	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.287955999 CET	49732	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.288367987 CET	49732	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.288395882 CET	443	49732	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.288666964 CET	49743	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.288691044 CET	443	49743	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.288741112 CET	49743	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.289480925 CET	49743	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.289494038 CET	443	49743	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.307955027 CET	443	49740	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.310177088 CET	49740	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.310223103 CET	443	49740	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.310688019 CET	443	49740	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.310976982 CET	49740	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.311063051 CET	443	49740	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.311120033 CET	49740	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.321902990 CET	443	49739	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.353905916 CET	443	49740	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.420258999 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.420334101 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.420360088 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.420376062 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.420397997 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.420414925 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.421295881 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.421339035 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.421363115 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.421371937 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.421412945 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.421441078 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.422123909 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.422172070 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.422207117 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.422214985 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.422245026 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.422266960 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.449074030 CET	443	49741	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.449276924 CET	49741	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.449289083 CET	443	49741	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.450324059 CET	443	49741	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.450387001 CET	49741	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.450684071 CET	49741	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.450757027 CET	443	49741	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.451030016 CET	49741	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.451042891 CET	443	49741	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.503942966 CET	49741	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.590023994 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.590058088 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.590125084 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.590141058 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.590173006 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.590198040 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.591064930 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.591084957 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.591130972 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.591144085 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.591164112 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.591181040 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.592210054 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.592228889 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.592274904 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.592283010 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.592304945 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.592334986 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.593239069 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.593259096 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.593305111 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.593316078 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.593360901 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.593553066 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.593615055 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.593622923 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.593645096 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.593696117 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.593904018 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.593904018 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.593918085 CET	443	49737	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.593965054 CET	49737	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.594398022 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.594485044 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.594563961 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.595464945 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.595499992 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.697290897 CET	443	49740	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.697365999 CET	443	49740	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.697407961 CET	443	49740	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.697452068 CET	49740	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.697482109 CET	443	49740	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.697532892 CET	49740	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.697572947 CET	443	49740	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.697622061 CET	49740	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.701282024 CET	49740	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.701302052 CET	443	49740	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.755903959 CET	443	49742	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.756216049 CET	49742	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.756242990 CET	443	49742	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.757690907 CET	443	49742	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.757760048 CET	49742	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.758064032 CET	49742	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.758141994 CET	443	49742	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.758213997 CET	49742	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.758222103 CET	443	49742	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.773328066 CET	443	49739	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.773360014 CET	443	49739	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.773375988 CET	443	49739	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.773456097 CET	49739	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.773467064 CET	443	49739	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.773509979 CET	49739	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.773694038 CET	443	49739	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.773708105 CET	443	49739	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.773752928 CET	49739	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.773757935 CET	443	49739	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.773798943 CET	49739	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.796137094 CET	443	49743	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.796427011 CET	49743	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.796442032 CET	443	49743	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.796745062 CET	443	49743	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.797045946 CET	49743	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.797105074 CET	443	49743	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.797200918 CET	49743	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.807965994 CET	49742	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.837907076 CET	443	49743	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.937206030 CET	443	49739	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.937233925 CET	443	49739	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.937277079 CET	49739	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.937295914 CET	443	49739	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.937331915 CET	49739	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.938179970 CET	443	49739	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.938200951 CET	443	49739	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.938251019 CET	49739	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.938258886 CET	443	49739	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.938292980 CET	49739	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.938311100 CET	49739	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.940835953 CET	443	49739	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.940855026 CET	443	49739	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.940928936 CET	49739	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.940938950 CET	443	49739	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.940974951 CET	49739	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.977469921 CET	443	49739	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.977562904 CET	443	49739	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:50.977560997 CET	49739	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.977607965 CET	49739	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.977960110 CET	49739	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:50.977977037 CET	443	49739	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.046808004 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.046869040 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.046991110 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.047166109 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.047178030 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.047769070 CET	49746	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.047840118 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.047904015 CET	49746	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.048191071 CET	49746	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.048212051 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.114732027 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.115067005 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.115108967 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.115816116 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.116117001 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.116214991 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.116254091 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.157951117 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.158061981 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.287836075 CET	443	49741	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.287858963 CET	443	49741	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.287864923 CET	443	49741	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.287883997 CET	443	49741	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.287899971 CET	443	49741	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.287908077 CET	443	49741	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.288043976 CET	49741	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.288043976 CET	49741	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.288059950 CET	443	49741	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.288106918 CET	49741	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.288228989 CET	443	49741	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.288244963 CET	443	49741	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.288309097 CET	49741	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.288316965 CET	443	49741	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.288351059 CET	49741	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.289998055 CET	49741	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.290026903 CET	49741	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.290544033 CET	49747	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.290594101 CET	443	49747	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.290661097 CET	49747	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.290926933 CET	49747	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.290942907 CET	443	49747	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.550860882 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.551176071 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.551202059 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.551496029 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.551767111 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.551819086 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.551887989 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.558887959 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.559823990 CET	49746	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.559854031 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.560195923 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.560477018 CET	49746	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.560534000 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.560580969 CET	49746	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.593920946 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.597378969 CET	443	49743	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.597404957 CET	443	49743	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.597419024 CET	443	49743	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.597462893 CET	49743	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.597479105 CET	443	49743	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.597523928 CET	49743	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.597949028 CET	443	49743	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.598001003 CET	443	49743	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.598021984 CET	49743	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.598030090 CET	443	49743	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.598057985 CET	49743	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.598069906 CET	49743	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.598953962 CET	49743	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.599023104 CET	443	49743	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.599090099 CET	49743	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.599339962 CET	49748	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.599417925 CET	443	49748	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.599490881 CET	49748	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.599817991 CET	49748	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.599850893 CET	443	49748	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.603976011 CET	443	49742	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.604038000 CET	443	49742	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.604059935 CET	443	49742	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.604104042 CET	443	49742	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.604146004 CET	443	49742	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.604145050 CET	49742	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.604145050 CET	49742	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.604212046 CET	443	49742	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.604254961 CET	49742	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.604254961 CET	49742	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.604281902 CET	49742	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.604326010 CET	443	49742	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.604368925 CET	443	49742	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.604406118 CET	49742	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.604419947 CET	443	49742	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.604449034 CET	49742	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.604468107 CET	49742	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.605199099 CET	49742	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.605277061 CET	443	49742	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.605343103 CET	49742	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.605504036 CET	49749	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.605528116 CET	443	49749	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.605578899 CET	49749	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.605855942 CET	49749	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.605868101 CET	443	49749	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.605911970 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.617683887 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.617746115 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.617769003 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.617808104 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.617810011 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.617844105 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.617861032 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.617862940 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.617882013 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.617940903 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.617940903 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.618074894 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.618115902 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.618154049 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.618171930 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.618201017 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.669970989 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.785856009 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.785949945 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.786015034 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.786045074 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.786084890 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.786084890 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.786456108 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.786509037 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.786542892 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.786559105 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.786582947 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.786606073 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.787117004 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.787159920 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.787190914 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.787204027 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.787231922 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.787256002 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.812760115 CET	443	49747	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.813174009 CET	49747	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.813198090 CET	443	49747	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.813514948 CET	443	49747	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.813946962 CET	49747	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.814019918 CET	443	49747	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.814600945 CET	49747	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.857927084 CET	443	49747	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.949280977 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.949341059 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.949395895 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.949446917 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.949486971 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.949510098 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.951399088 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.951445103 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.951466084 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.951488972 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.951519966 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.951536894 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.952169895 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.952236891 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.952270985 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.952282906 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.952323914 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.952400923 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.952445984 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.952722073 CET	49744	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.952769041 CET	443	49744	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.953167915 CET	49750	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.953197956 CET	443	49750	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:51.953255892 CET	49750	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.954266071 CET	49750	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:51.954282045 CET	443	49750	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.048852921 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.048882008 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.048901081 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.048953056 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.048966885 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.049015045 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.049158096 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.049175024 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.049242973 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.049249887 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.053715944 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.053776979 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.053818941 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.053858995 CET	49746	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.053883076 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.053910971 CET	49746	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.053942919 CET	49746	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.054060936 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.054110050 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.054130077 CET	49746	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.054135084 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.054160118 CET	49746	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.099965096 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.099975109 CET	49746	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.107801914 CET	443	49748	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.108206034 CET	49748	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.108242035 CET	443	49748	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.108690977 CET	443	49748	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.109184980 CET	49748	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.109263897 CET	443	49748	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.109396935 CET	49748	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.119903088 CET	443	49749	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.120378017 CET	49749	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.120390892 CET	443	49749	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.120873928 CET	443	49749	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.121315956 CET	49749	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.121406078 CET	443	49749	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.121483088 CET	49749	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.153902054 CET	443	49748	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.161909103 CET	443	49749	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.213567972 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.213597059 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.213687897 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.213715076 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.213753939 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.214184999 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.214199066 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.214245081 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.214250088 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.214283943 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.215311050 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.215325117 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.215373039 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.215378046 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.215420008 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.215440035 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.217771053 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.217845917 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.217865944 CET	49746	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.217891932 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.217919111 CET	49746	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.217957020 CET	49746	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.218130112 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.218180895 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.218199968 CET	49746	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.218205929 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.218245029 CET	49746	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.218259096 CET	49746	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.218722105 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.218764067 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.218835115 CET	49746	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.218846083 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.218872070 CET	49746	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.218893051 CET	49746	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.323080063 CET	80	49728	169.239.217.18	192.168.2.18
Jan 16, 2024 22:32:52.323216915 CET	49728	80	192.168.2.18	169.239.217.18
Jan 16, 2024 22:32:52.329462051 CET	443	49747	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.329489946 CET	443	49747	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.329505920 CET	443	49747	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.329695940 CET	49747	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.329760075 CET	443	49747	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.329852104 CET	49747	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.332614899 CET	443	49747	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.332633972 CET	443	49747	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.332707882 CET	49747	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.332726955 CET	443	49747	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.332758904 CET	49747	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.381828070 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.381851912 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.381899118 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.381917953 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.381958008 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.381970882 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.382822990 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.382842064 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.382896900 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.382903099 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.382962942 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.383697987 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.383712053 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.383764029 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.383769989 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.383805037 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.384814024 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.384829998 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.384884119 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.384890079 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.384934902 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.384994030 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.385059118 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.385071039 CET	49746	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.385097027 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.385113001 CET	49746	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.385133982 CET	49746	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.385971069 CET	49747	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.386229992 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.386244059 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.386291981 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.386297941 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.386332989 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.387192965 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.387240887 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.387259007 CET	49746	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.387268066 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.387295008 CET	49746	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.387315035 CET	49746	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.388259888 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.388303995 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.388334036 CET	49746	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.388339043 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.388362885 CET	49746	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.388478994 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.388524055 CET	49746	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.388761997 CET	49746	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.388775110 CET	443	49746	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.388783932 CET	49746	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.388818026 CET	49746	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.389298916 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.389329910 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.389394045 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.390871048 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.390892029 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.425431967 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.425451040 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.425487041 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.425502062 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.425524950 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.425545931 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.443460941 CET	443	49748	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.443507910 CET	443	49748	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.443566084 CET	49748	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.443588018 CET	443	49748	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.443661928 CET	443	49748	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.443711996 CET	49748	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.444653988 CET	49748	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.444668055 CET	443	49748	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.445188999 CET	49752	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.445207119 CET	443	49752	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.445264101 CET	49752	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.446386099 CET	49752	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.446398020 CET	443	49752	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.458018064 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.458038092 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.458102942 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.458115101 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.458148003 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.463512897 CET	443	49750	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.463840961 CET	49750	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.463876009 CET	443	49750	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.464365959 CET	443	49750	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.464776039 CET	49750	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.464868069 CET	443	49750	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.464922905 CET	49750	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.500211954 CET	443	49747	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.500235081 CET	443	49747	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.500344992 CET	49747	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.500375986 CET	443	49747	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.500431061 CET	49747	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.500672102 CET	443	49747	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.500690937 CET	443	49747	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.500741959 CET	49747	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.500750065 CET	443	49747	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.500780106 CET	49747	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.500802994 CET	49747	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.501601934 CET	443	49747	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.501617908 CET	443	49747	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.501663923 CET	49747	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.501672983 CET	443	49747	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.501699924 CET	49747	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.501717091 CET	49747	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.502075911 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.502135992 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.502146959 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.502159119 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.502204895 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.502690077 CET	49745	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.502705097 CET	443	49745	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.503135920 CET	49753	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.503179073 CET	443	49753	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.503247023 CET	49753	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.505928040 CET	443	49750	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.514065981 CET	49750	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.514624119 CET	49753	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.514648914 CET	443	49753	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.672178030 CET	443	49747	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.672205925 CET	443	49747	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.672318935 CET	49747	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.672382116 CET	443	49747	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.672458887 CET	49747	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.673238039 CET	443	49747	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.673257113 CET	443	49747	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.673320055 CET	49747	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.673336029 CET	443	49747	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.673405886 CET	49747	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.674496889 CET	443	49747	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.674514055 CET	443	49747	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.674592972 CET	49747	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.674601078 CET	443	49747	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.674657106 CET	49747	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.674958944 CET	49747	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.674985886 CET	443	49747	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.797360897 CET	443	49750	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.797401905 CET	443	49750	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.797411919 CET	443	49750	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.797441006 CET	443	49750	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.797475100 CET	49750	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.797494888 CET	443	49750	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.797511101 CET	443	49750	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.797537088 CET	49750	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.797580004 CET	49750	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.798971891 CET	49750	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.798985958 CET	443	49750	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.805862904 CET	49728	80	192.168.2.18	169.239.217.18
Jan 16, 2024 22:32:52.923458099 CET	49754	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.923499107 CET	443	49754	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.923610926 CET	49754	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.924303055 CET	49754	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.924320936 CET	443	49754	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.926882029 CET	443	49749	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.926912069 CET	443	49749	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.926930904 CET	443	49749	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.926983118 CET	49749	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.926995993 CET	443	49749	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.927010059 CET	443	49749	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.927011967 CET	49749	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.927032948 CET	49749	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.927038908 CET	443	49749	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.927054882 CET	49749	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.927056074 CET	443	49749	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.927071095 CET	49749	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.927076101 CET	443	49749	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.927099943 CET	49749	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.927125931 CET	49749	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.929035902 CET	49749	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.929083109 CET	443	49749	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.929147959 CET	49749	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.993391991 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.993719101 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.993779898 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.995562077 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.995631933 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.996143103 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.996186972 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:52.996195078 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:52.996221066 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.000253916 CET	443	49752	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.000452042 CET	49752	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.000462055 CET	443	49752	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.000981092 CET	443	49752	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.001250029 CET	49752	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.001316071 CET	443	49752	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.001382113 CET	49752	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.020631075 CET	443	49753	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.020869017 CET	49753	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.020896912 CET	443	49753	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.021245003 CET	443	49753	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.021534920 CET	49753	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.021599054 CET	443	49753	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.021668911 CET	49753	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.039979935 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.040004969 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.041909933 CET	443	49752	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.061918020 CET	443	49753	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.087976933 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.143315077 CET	80	49728	169.239.217.18	192.168.2.18
Jan 16, 2024 22:32:53.355941057 CET	443	49753	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.356033087 CET	443	49753	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.356113911 CET	49753	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.356853962 CET	49753	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.356879950 CET	443	49753	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.359226942 CET	49755	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.359299898 CET	443	49755	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.359368086 CET	49755	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.360496044 CET	49755	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.360528946 CET	443	49755	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.362720966 CET	49756	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.362740040 CET	443	49756	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.362790108 CET	49756	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.363023043 CET	49756	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.363034964 CET	443	49756	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.433187962 CET	443	49754	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.433458090 CET	49754	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.433495998 CET	443	49754	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.434628963 CET	443	49754	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.434704065 CET	49754	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.435141087 CET	49754	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.435245991 CET	443	49754	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.435319901 CET	49754	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.435324907 CET	443	49754	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.458327055 CET	49757	443	192.168.2.18	34.120.31.228
Jan 16, 2024 22:32:53.458391905 CET	443	49757	34.120.31.228	192.168.2.18
Jan 16, 2024 22:32:53.458465099 CET	49757	443	192.168.2.18	34.120.31.228
Jan 16, 2024 22:32:53.458765030 CET	49757	443	192.168.2.18	34.120.31.228
Jan 16, 2024 22:32:53.458798885 CET	443	49757	34.120.31.228	192.168.2.18
Jan 16, 2024 22:32:53.485977888 CET	49754	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.487701893 CET	443	49752	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.487725019 CET	443	49752	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.487781048 CET	49752	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.487787008 CET	443	49752	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.487843990 CET	49752	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.488038063 CET	443	49752	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.488059998 CET	443	49752	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.488089085 CET	49752	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.488092899 CET	443	49752	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.488130093 CET	49752	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.488147974 CET	49752	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.491538048 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.491558075 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.491564035 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.491586924 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.491595984 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.491605043 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.491630077 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.491661072 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.491688013 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.491723061 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.491857052 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.491873980 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.491933107 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.491952896 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.491981030 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.533991098 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.647052050 CET	443	49757	34.120.31.228	192.168.2.18
Jan 16, 2024 22:32:53.647341967 CET	49757	443	192.168.2.18	34.120.31.228
Jan 16, 2024 22:32:53.647386074 CET	443	49757	34.120.31.228	192.168.2.18
Jan 16, 2024 22:32:53.648435116 CET	443	49757	34.120.31.228	192.168.2.18
Jan 16, 2024 22:32:53.648505926 CET	49757	443	192.168.2.18	34.120.31.228
Jan 16, 2024 22:32:53.649348974 CET	443	49752	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.649373055 CET	443	49752	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.649442911 CET	49752	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.649452925 CET	443	49752	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.649470091 CET	49752	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.649492979 CET	49752	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.649646044 CET	49757	443	192.168.2.18	34.120.31.228
Jan 16, 2024 22:32:53.649727106 CET	443	49757	34.120.31.228	192.168.2.18
Jan 16, 2024 22:32:53.649959087 CET	49757	443	192.168.2.18	34.120.31.228
Jan 16, 2024 22:32:53.649977922 CET	443	49757	34.120.31.228	192.168.2.18
Jan 16, 2024 22:32:53.650295973 CET	443	49752	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.650311947 CET	443	49752	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.650371075 CET	49752	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.650376081 CET	443	49752	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.650415897 CET	49752	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.650832891 CET	443	49752	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.650890112 CET	49752	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.650902033 CET	443	49752	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.650944948 CET	443	49752	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.650954008 CET	443	49752	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.650969982 CET	49752	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.650994062 CET	49752	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.651313066 CET	49752	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.651324034 CET	443	49752	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.654324055 CET	49758	443	192.168.2.18	34.120.31.228
Jan 16, 2024 22:32:53.654390097 CET	443	49758	34.120.31.228	192.168.2.18
Jan 16, 2024 22:32:53.654468060 CET	49758	443	192.168.2.18	34.120.31.228
Jan 16, 2024 22:32:53.654967070 CET	49759	443	192.168.2.18	34.120.31.228
Jan 16, 2024 22:32:53.655003071 CET	443	49759	34.120.31.228	192.168.2.18
Jan 16, 2024 22:32:53.655060053 CET	49759	443	192.168.2.18	34.120.31.228
Jan 16, 2024 22:32:53.655355930 CET	49759	443	192.168.2.18	34.120.31.228
Jan 16, 2024 22:32:53.655366898 CET	443	49759	34.120.31.228	192.168.2.18
Jan 16, 2024 22:32:53.655574083 CET	49758	443	192.168.2.18	34.120.31.228
Jan 16, 2024 22:32:53.655611038 CET	443	49758	34.120.31.228	192.168.2.18
Jan 16, 2024 22:32:53.656452894 CET	49760	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.656482935 CET	443	49760	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.656531096 CET	49760	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.657124043 CET	49760	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.657140017 CET	443	49760	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.659297943 CET	49761	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.659333944 CET	443	49761	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.659389019 CET	49761	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.659672022 CET	49761	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.659686089 CET	443	49761	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.661628008 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.661633968 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.661648035 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.661679029 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.661694050 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.661731005 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.661748886 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.661777020 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.664551020 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.664566040 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.664642096 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.664652109 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.664699078 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.667063951 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.667083025 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.667129993 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.667139053 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.667186022 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.693972111 CET	49757	443	192.168.2.18	34.120.31.228
Jan 16, 2024 22:32:53.763664007 CET	443	49754	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.763693094 CET	443	49754	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.763700962 CET	443	49754	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.763720036 CET	443	49754	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.763784885 CET	443	49754	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.763787985 CET	49754	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.763859034 CET	49754	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.764995098 CET	49754	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.765016079 CET	443	49754	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.824919939 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.824939013 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.825017929 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.825042009 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.825093985 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.828855991 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.828876019 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.828957081 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.828967094 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.829008102 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.830673933 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.830689907 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.830741882 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.830749989 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.830776930 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.830786943 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.832401991 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.832422972 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.832487106 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.832494020 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.832531929 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.833448887 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.833473921 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.833518028 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.833525896 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.833551884 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.833560944 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.834443092 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.834465027 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.834534883 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.834542990 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.834594965 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.857357979 CET	443	49757	34.120.31.228	192.168.2.18
Jan 16, 2024 22:32:53.857500076 CET	443	49757	34.120.31.228	192.168.2.18
Jan 16, 2024 22:32:53.857578039 CET	49757	443	192.168.2.18	34.120.31.228
Jan 16, 2024 22:32:53.873944998 CET	443	49755	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.880474091 CET	49755	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.880496025 CET	443	49755	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.880949974 CET	49757	443	192.168.2.18	34.120.31.228
Jan 16, 2024 22:32:53.880981922 CET	443	49757	34.120.31.228	192.168.2.18
Jan 16, 2024 22:32:53.881210089 CET	443	49755	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.882236958 CET	49755	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.882421017 CET	443	49755	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.883266926 CET	49755	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.891674995 CET	49762	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.891710997 CET	443	49762	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.891814947 CET	49762	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.892153978 CET	49762	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.892173052 CET	443	49762	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.921490908 CET	443	49756	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.921813011 CET	49756	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.921835899 CET	443	49756	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.923990011 CET	443	49756	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.924057007 CET	49756	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.924376011 CET	49756	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.924493074 CET	49756	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.924595118 CET	443	49756	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.925899029 CET	443	49755	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.934717894 CET	443	49759	34.120.31.228	192.168.2.18
Jan 16, 2024 22:32:53.934958935 CET	49759	443	192.168.2.18	34.120.31.228
Jan 16, 2024 22:32:53.934973001 CET	443	49759	34.120.31.228	192.168.2.18
Jan 16, 2024 22:32:53.935405970 CET	443	49759	34.120.31.228	192.168.2.18
Jan 16, 2024 22:32:53.935537100 CET	443	49758	34.120.31.228	192.168.2.18
Jan 16, 2024 22:32:53.935760021 CET	49759	443	192.168.2.18	34.120.31.228
Jan 16, 2024 22:32:53.935853958 CET	443	49759	34.120.31.228	192.168.2.18
Jan 16, 2024 22:32:53.935926914 CET	49758	443	192.168.2.18	34.120.31.228
Jan 16, 2024 22:32:53.935971022 CET	443	49758	34.120.31.228	192.168.2.18
Jan 16, 2024 22:32:53.936012983 CET	49759	443	192.168.2.18	34.120.31.228
Jan 16, 2024 22:32:53.936642885 CET	443	49758	34.120.31.228	192.168.2.18
Jan 16, 2024 22:32:53.937052965 CET	49758	443	192.168.2.18	34.120.31.228
Jan 16, 2024 22:32:53.937163115 CET	443	49758	34.120.31.228	192.168.2.18
Jan 16, 2024 22:32:53.937175989 CET	49758	443	192.168.2.18	34.120.31.228
Jan 16, 2024 22:32:53.964257002 CET	49756	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.964277029 CET	443	49756	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.977900028 CET	443	49758	34.120.31.228	192.168.2.18
Jan 16, 2024 22:32:53.978987932 CET	49758	443	192.168.2.18	34.120.31.228
Jan 16, 2024 22:32:53.981899977 CET	443	49759	34.120.31.228	192.168.2.18
Jan 16, 2024 22:32:53.988696098 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.988725901 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.988801956 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.988822937 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.988877058 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.989442110 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.989459991 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.989535093 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.989551067 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.989602089 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.992074013 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.992090940 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.992153883 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.992167950 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.992214918 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.994726896 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.994744062 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.994813919 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.994827986 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.994873047 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.996665955 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.996686935 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.996762991 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.996776104 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.996829033 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.997385979 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.997400999 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.997463942 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.997477055 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.997525930 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.998186111 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.998199940 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.998255014 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.998267889 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.998315096 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.998828888 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.998842955 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.998900890 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.998913050 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.998963118 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.999509096 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.999528885 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.999596119 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.999608994 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:53.999636889 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:53.999655008 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.000153065 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.000171900 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.000227928 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.000241041 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.000289917 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.000866890 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.000889063 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.000947952 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.000961065 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.001013041 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.001583099 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.001606941 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.001657963 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.001671076 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.001696110 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.001713991 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.011066914 CET	49756	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.031163931 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.031179905 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.031277895 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.031291962 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.031343937 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.110682964 CET	443	49758	34.120.31.228	192.168.2.18
Jan 16, 2024 22:32:54.110932112 CET	443	49758	34.120.31.228	192.168.2.18
Jan 16, 2024 22:32:54.111028910 CET	49758	443	192.168.2.18	34.120.31.228
Jan 16, 2024 22:32:54.111181974 CET	49758	443	192.168.2.18	34.120.31.228
Jan 16, 2024 22:32:54.111213923 CET	443	49758	34.120.31.228	192.168.2.18
Jan 16, 2024 22:32:54.112205029 CET	443	49759	34.120.31.228	192.168.2.18
Jan 16, 2024 22:32:54.112395048 CET	443	49759	34.120.31.228	192.168.2.18
Jan 16, 2024 22:32:54.112459898 CET	49759	443	192.168.2.18	34.120.31.228
Jan 16, 2024 22:32:54.112646103 CET	49759	443	192.168.2.18	34.120.31.228
Jan 16, 2024 22:32:54.112663984 CET	443	49759	34.120.31.228	192.168.2.18
Jan 16, 2024 22:32:54.117273092 CET	49763	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.117324114 CET	443	49763	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.117404938 CET	49763	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.117867947 CET	49764	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.117930889 CET	443	49764	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.117989063 CET	49764	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.118211031 CET	49763	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.118241072 CET	443	49763	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.118407011 CET	49764	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.118437052 CET	443	49764	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.159919977 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.159938097 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.160123110 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.160183907 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.160244942 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.160309076 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.160321951 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.160371065 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.160393953 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.160420895 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.160445929 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.160788059 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.160800934 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.160865068 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.160878897 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.160943985 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.161283970 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.161298037 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.161365032 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.161379099 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.161433935 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.161784887 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.161798000 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.161858082 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.161871910 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.161917925 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.162344933 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.162359953 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.162426949 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.162440062 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.162491083 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.162828922 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.162842035 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.162906885 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.162919998 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.162971020 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.163266897 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.163280010 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.163341045 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.163352966 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.163400888 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.164539099 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.164552927 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.164630890 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.164643049 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.164695978 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.164988995 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.165004015 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.165083885 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.165096045 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.165143013 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.165518045 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.165533066 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.165585041 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.165596962 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.165627003 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.165657997 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.165747881 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.165760994 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.165805101 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.165817022 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.165863991 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.169003963 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.169018030 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.169091940 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.169106007 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.169163942 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.169394016 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.169406891 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.169460058 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.169472933 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.169522047 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.170687914 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.170701981 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.170768976 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.170782089 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.170833111 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.171518087 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.171531916 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.171597004 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.171610117 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.171658993 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.172410965 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.172424078 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.172481060 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.172493935 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.172542095 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.172817945 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.172849894 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.172873974 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.172885895 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.172911882 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.172939062 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.172962904 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.195050001 CET	49751	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.195110083 CET	443	49751	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.200555086 CET	49765	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.200598001 CET	443	49765	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.200674057 CET	49765	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.201409101 CET	49766	443	192.168.2.18	108.138.85.22
Jan 16, 2024 22:32:54.201448917 CET	443	49766	108.138.85.22	192.168.2.18
Jan 16, 2024 22:32:54.201488972 CET	49766	443	192.168.2.18	108.138.85.22
Jan 16, 2024 22:32:54.203583956 CET	49765	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.203598976 CET	443	49765	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.203978062 CET	49766	443	192.168.2.18	108.138.85.22
Jan 16, 2024 22:32:54.203989029 CET	443	49766	108.138.85.22	192.168.2.18
Jan 16, 2024 22:32:54.204576015 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.204648972 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.204714060 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.204978943 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.205012083 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.230638981 CET	443	49756	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.230698109 CET	443	49756	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.230757952 CET	49756	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.231498957 CET	49756	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.231511116 CET	443	49756	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.245851994 CET	443	49755	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.245876074 CET	443	49755	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.245946884 CET	443	49755	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.245973110 CET	49755	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.245979071 CET	443	49755	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.246021986 CET	49755	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.246021986 CET	49755	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.247169971 CET	49755	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.247203112 CET	443	49755	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.250799894 CET	49769	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.250813007 CET	443	49769	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.250869989 CET	49769	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.251593113 CET	49769	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.251601934 CET	443	49769	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.252335072 CET	49770	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.252368927 CET	443	49770	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.252417088 CET	49770	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.252639055 CET	49770	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.252654076 CET	443	49770	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.262785912 CET	443	49761	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.262998104 CET	49761	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.263019085 CET	443	49761	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.263844013 CET	443	49761	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.264075041 CET	49761	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.264164925 CET	49761	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.264226913 CET	443	49761	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.280318975 CET	443	49760	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.280505896 CET	49760	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.280539036 CET	443	49760	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.281183958 CET	443	49760	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.281424999 CET	49760	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.281511068 CET	443	49760	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.281531096 CET	49760	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.302862883 CET	49771	443	192.168.2.18	108.138.106.60
Jan 16, 2024 22:32:54.302881002 CET	443	49771	108.138.106.60	192.168.2.18
Jan 16, 2024 22:32:54.302943945 CET	49771	443	192.168.2.18	108.138.106.60
Jan 16, 2024 22:32:54.303945065 CET	49771	443	192.168.2.18	108.138.106.60
Jan 16, 2024 22:32:54.303956985 CET	443	49771	108.138.106.60	192.168.2.18
Jan 16, 2024 22:32:54.314976931 CET	49761	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.325939894 CET	443	49760	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.330960035 CET	49760	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.435280085 CET	443	49766	108.138.85.22	192.168.2.18
Jan 16, 2024 22:32:54.435544014 CET	49766	443	192.168.2.18	108.138.85.22
Jan 16, 2024 22:32:54.435551882 CET	443	49766	108.138.85.22	192.168.2.18
Jan 16, 2024 22:32:54.436459064 CET	443	49766	108.138.85.22	192.168.2.18
Jan 16, 2024 22:32:54.436522007 CET	49766	443	192.168.2.18	108.138.85.22
Jan 16, 2024 22:32:54.437324047 CET	49766	443	192.168.2.18	108.138.85.22
Jan 16, 2024 22:32:54.437439919 CET	443	49766	108.138.85.22	192.168.2.18
Jan 16, 2024 22:32:54.437540054 CET	49766	443	192.168.2.18	108.138.85.22
Jan 16, 2024 22:32:54.437544107 CET	443	49766	108.138.85.22	192.168.2.18
Jan 16, 2024 22:32:54.445261955 CET	443	49762	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.445486069 CET	49762	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.445498943 CET	443	49762	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.445784092 CET	443	49762	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.446044922 CET	49762	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.446099043 CET	443	49762	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.446157932 CET	49762	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.488951921 CET	49766	443	192.168.2.18	108.138.85.22
Jan 16, 2024 22:32:54.493907928 CET	443	49762	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.504677057 CET	443	49771	108.138.106.60	192.168.2.18
Jan 16, 2024 22:32:54.504884005 CET	49771	443	192.168.2.18	108.138.106.60
Jan 16, 2024 22:32:54.504895926 CET	443	49771	108.138.106.60	192.168.2.18
Jan 16, 2024 22:32:54.506553888 CET	443	49771	108.138.106.60	192.168.2.18
Jan 16, 2024 22:32:54.506638050 CET	49771	443	192.168.2.18	108.138.106.60
Jan 16, 2024 22:32:54.507381916 CET	49771	443	192.168.2.18	108.138.106.60
Jan 16, 2024 22:32:54.507467031 CET	443	49771	108.138.106.60	192.168.2.18
Jan 16, 2024 22:32:54.507540941 CET	49771	443	192.168.2.18	108.138.106.60
Jan 16, 2024 22:32:54.507545948 CET	443	49771	108.138.106.60	192.168.2.18
Jan 16, 2024 22:32:54.550982952 CET	49771	443	192.168.2.18	108.138.106.60
Jan 16, 2024 22:32:54.600752115 CET	443	49760	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.600810051 CET	443	49760	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.600820065 CET	443	49760	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.600913048 CET	49760	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.600975990 CET	443	49760	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.601038933 CET	49760	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.602442980 CET	49760	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.602473021 CET	443	49760	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.608072042 CET	49772	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.608094931 CET	443	49772	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.608153105 CET	49772	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.608810902 CET	49772	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.608824015 CET	443	49772	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.636867046 CET	443	49764	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.637101889 CET	49764	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.637161970 CET	443	49764	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.638115883 CET	443	49764	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.638192892 CET	49764	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.638426065 CET	49764	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.638506889 CET	443	49764	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.638530970 CET	49764	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.640880108 CET	443	49763	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.641062975 CET	49763	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.641124010 CET	443	49763	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.642693043 CET	443	49763	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.642770052 CET	49763	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.642977953 CET	49763	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.643054962 CET	49763	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.643064976 CET	443	49763	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.679204941 CET	443	49771	108.138.106.60	192.168.2.18
Jan 16, 2024 22:32:54.679240942 CET	443	49771	108.138.106.60	192.168.2.18
Jan 16, 2024 22:32:54.679323912 CET	49771	443	192.168.2.18	108.138.106.60
Jan 16, 2024 22:32:54.679352045 CET	443	49771	108.138.106.60	192.168.2.18
Jan 16, 2024 22:32:54.679833889 CET	443	49771	108.138.106.60	192.168.2.18
Jan 16, 2024 22:32:54.679999113 CET	49771	443	192.168.2.18	108.138.106.60
Jan 16, 2024 22:32:54.680171967 CET	49771	443	192.168.2.18	108.138.106.60
Jan 16, 2024 22:32:54.680198908 CET	443	49771	108.138.106.60	192.168.2.18
Jan 16, 2024 22:32:54.680222034 CET	49771	443	192.168.2.18	108.138.106.60
Jan 16, 2024 22:32:54.680263042 CET	49771	443	192.168.2.18	108.138.106.60
Jan 16, 2024 22:32:54.685905933 CET	443	49764	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.685926914 CET	443	49763	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.692097902 CET	49764	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.692157984 CET	443	49764	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.692213058 CET	49763	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.692270041 CET	443	49763	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.740017891 CET	49763	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.740120888 CET	49764	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.791157961 CET	443	49762	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.791177034 CET	443	49762	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.791239977 CET	443	49762	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.791353941 CET	49762	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.791354895 CET	49762	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.793608904 CET	49762	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.793628931 CET	443	49762	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.797131062 CET	49774	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.797171116 CET	443	49774	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.797247887 CET	49774	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.797450066 CET	49774	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.797465086 CET	443	49774	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.811799049 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.812103987 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.812138081 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.813107014 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.813355923 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.813446045 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.813546896 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.831690073 CET	443	49769	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.831913948 CET	49769	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.831924915 CET	443	49769	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.832669020 CET	443	49770	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.832811117 CET	49770	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.832823038 CET	443	49770	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.833112001 CET	443	49769	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.833170891 CET	49769	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.833374023 CET	443	49770	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.833403111 CET	49769	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.833530903 CET	443	49769	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.833636045 CET	49770	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.833739996 CET	49769	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.833749056 CET	443	49769	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.833796024 CET	49770	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.833862066 CET	443	49770	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.868074894 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.884049892 CET	49769	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.884052038 CET	49770	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.908281088 CET	443	49761	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.908308983 CET	443	49761	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.908318996 CET	443	49761	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.908397913 CET	49761	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.908418894 CET	443	49761	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.908447027 CET	443	49761	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.908457041 CET	443	49761	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.908476114 CET	49761	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.908502102 CET	49761	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.952207088 CET	443	49761	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.952231884 CET	443	49761	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.952342033 CET	49761	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.952363968 CET	443	49761	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.952404976 CET	49761	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.956275940 CET	443	49766	108.138.85.22	192.168.2.18
Jan 16, 2024 22:32:54.956345081 CET	49766	443	192.168.2.18	108.138.85.22
Jan 16, 2024 22:32:54.972495079 CET	443	49766	108.138.85.22	192.168.2.18
Jan 16, 2024 22:32:54.972505093 CET	443	49766	108.138.85.22	192.168.2.18
Jan 16, 2024 22:32:54.972524881 CET	443	49766	108.138.85.22	192.168.2.18
Jan 16, 2024 22:32:54.972565889 CET	443	49766	108.138.85.22	192.168.2.18
Jan 16, 2024 22:32:54.972672939 CET	49766	443	192.168.2.18	108.138.85.22
Jan 16, 2024 22:32:54.972672939 CET	49766	443	192.168.2.18	108.138.85.22
Jan 16, 2024 22:32:54.972672939 CET	49766	443	192.168.2.18	108.138.85.22
Jan 16, 2024 22:32:54.972683907 CET	443	49766	108.138.85.22	192.168.2.18
Jan 16, 2024 22:32:54.972723007 CET	49766	443	192.168.2.18	108.138.85.22
Jan 16, 2024 22:32:54.978705883 CET	443	49764	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.978732109 CET	443	49764	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.978841066 CET	443	49764	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.978857040 CET	49764	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.978863001 CET	443	49764	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.978925943 CET	49764	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.978926897 CET	49764	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.980140924 CET	443	49763	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.980180979 CET	443	49763	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.980245113 CET	49763	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.980276108 CET	443	49763	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.980287075 CET	443	49763	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.980320930 CET	49763	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.980349064 CET	49763	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.981663942 CET	49764	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.981700897 CET	443	49764	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.985025883 CET	443	49766	108.138.85.22	192.168.2.18
Jan 16, 2024 22:32:54.985048056 CET	443	49766	108.138.85.22	192.168.2.18
Jan 16, 2024 22:32:54.985135078 CET	49766	443	192.168.2.18	108.138.85.22
Jan 16, 2024 22:32:54.985143900 CET	443	49766	108.138.85.22	192.168.2.18
Jan 16, 2024 22:32:54.985179901 CET	49766	443	192.168.2.18	108.138.85.22
Jan 16, 2024 22:32:54.986833096 CET	49775	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.986860037 CET	443	49775	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.986955881 CET	49775	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.987405062 CET	49775	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.987421036 CET	443	49775	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.989492893 CET	49763	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.989532948 CET	443	49763	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.993274927 CET	49776	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.993309021 CET	443	49776	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.993417025 CET	49776	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.993628979 CET	49776	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.993643045 CET	443	49776	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.998049021 CET	49777	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.998116970 CET	443	49777	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:54.998182058 CET	49777	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.998492956 CET	49777	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:54.998528004 CET	443	49777	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.006448030 CET	49778	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.006475925 CET	443	49778	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.006551027 CET	49778	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.006763935 CET	49778	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.006781101 CET	443	49778	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.059685946 CET	443	49766	108.138.85.22	192.168.2.18
Jan 16, 2024 22:32:55.059710026 CET	443	49766	108.138.85.22	192.168.2.18
Jan 16, 2024 22:32:55.060019016 CET	49766	443	192.168.2.18	108.138.85.22
Jan 16, 2024 22:32:55.060031891 CET	443	49766	108.138.85.22	192.168.2.18
Jan 16, 2024 22:32:55.060074091 CET	49766	443	192.168.2.18	108.138.85.22
Jan 16, 2024 22:32:55.064794064 CET	443	49766	108.138.85.22	192.168.2.18
Jan 16, 2024 22:32:55.064867020 CET	49766	443	192.168.2.18	108.138.85.22
Jan 16, 2024 22:32:55.064870119 CET	443	49766	108.138.85.22	192.168.2.18
Jan 16, 2024 22:32:55.064925909 CET	49766	443	192.168.2.18	108.138.85.22
Jan 16, 2024 22:32:55.078824997 CET	443	49761	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.078851938 CET	443	49761	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.078916073 CET	49761	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.078942060 CET	443	49761	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.078967094 CET	49761	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.078982115 CET	49761	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.100507021 CET	49766	443	192.168.2.18	108.138.85.22
Jan 16, 2024 22:32:55.100528002 CET	443	49766	108.138.85.22	192.168.2.18
Jan 16, 2024 22:32:55.116014957 CET	443	49761	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.116045952 CET	443	49761	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.116240978 CET	49761	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.116265059 CET	443	49761	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.116308928 CET	49761	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.136390924 CET	443	49772	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.136616945 CET	49772	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.136692047 CET	443	49772	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.137041092 CET	443	49772	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.137304068 CET	49772	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.137378931 CET	443	49772	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.137415886 CET	49772	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.149279118 CET	443	49769	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.149343014 CET	443	49769	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.149403095 CET	49769	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.150466919 CET	49769	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.150482893 CET	443	49769	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.156694889 CET	49780	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.156730890 CET	443	49780	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.156790018 CET	49780	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.157119989 CET	49780	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.157131910 CET	443	49780	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.159537077 CET	49781	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.159619093 CET	443	49781	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.159692049 CET	49781	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.160089970 CET	49781	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.160171032 CET	443	49781	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.181910992 CET	443	49772	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.184999943 CET	49772	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.194982052 CET	443	49770	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.195008039 CET	443	49770	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.195010900 CET	443	49770	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.195130110 CET	49770	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.195154905 CET	443	49770	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.195169926 CET	443	49770	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.195215940 CET	49770	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.195935011 CET	49770	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.195960045 CET	443	49770	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.247262001 CET	443	49761	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.247309923 CET	443	49761	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.247390985 CET	443	49761	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.247420073 CET	49761	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.247420073 CET	49761	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.247442961 CET	49761	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.253566980 CET	49761	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.253593922 CET	443	49761	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.289463043 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.289501905 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.289513111 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.289537907 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.289549112 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.289558887 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.289621115 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.289649963 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.289776087 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.289776087 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.289992094 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.290020943 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.290057898 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.290064096 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.290086985 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.343974113 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.362885952 CET	443	49774	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.363121033 CET	49774	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.363156080 CET	443	49774	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.363528013 CET	443	49774	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.363848925 CET	49774	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.363917112 CET	443	49774	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.364104033 CET	49774	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.388854980 CET	443	49765	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.389111042 CET	49765	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.389152050 CET	443	49765	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.390249014 CET	443	49765	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.390317917 CET	49765	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.390578985 CET	49765	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.390649080 CET	443	49765	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.390707016 CET	49765	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.390721083 CET	443	49765	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.405911922 CET	443	49774	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.439955950 CET	49765	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.463736057 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.463754892 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.463789940 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.463855982 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.463865042 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.463910103 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.463942051 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.463967085 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.464004993 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.464029074 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.464070082 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.464091063 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.464114904 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.464133978 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.464457989 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.464478970 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.464520931 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.464543104 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.464565992 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.464585066 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.476128101 CET	443	49772	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.476203918 CET	443	49772	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.476264000 CET	49772	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.476805925 CET	49772	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.476840019 CET	443	49772	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.479629040 CET	49782	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.479697943 CET	443	49782	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.479767084 CET	49782	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.480117083 CET	49782	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.480153084 CET	443	49782	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.481884956 CET	49783	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.481939077 CET	443	49783	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.482001066 CET	49783	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.482260942 CET	49783	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.482278109 CET	443	49783	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.498308897 CET	443	49776	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.498624086 CET	49776	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.498653889 CET	443	49776	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.499000072 CET	443	49776	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.499279976 CET	49776	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.499341965 CET	443	49776	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.499391079 CET	49776	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.541902065 CET	443	49776	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.544585943 CET	443	49777	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.544794083 CET	49777	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.544804096 CET	443	49777	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.545458078 CET	443	49777	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.545702934 CET	49777	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.545804024 CET	49777	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.545835972 CET	443	49777	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.548288107 CET	443	49778	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.548455000 CET	49778	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.548500061 CET	443	49778	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.548805952 CET	443	49775	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.548949957 CET	49775	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.548962116 CET	443	49775	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.548999071 CET	443	49778	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.549240112 CET	49778	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.549316883 CET	49778	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.549328089 CET	443	49778	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.549784899 CET	443	49775	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.550131083 CET	49775	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.550218105 CET	443	49775	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.550240040 CET	49775	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.593902111 CET	443	49775	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.598943949 CET	49775	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.598963976 CET	49777	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.599056959 CET	49778	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.633327961 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.633366108 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.633547068 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.633579016 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.633637905 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.636924028 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.636954069 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.637010098 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.637033939 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.637062073 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.637087107 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.637629986 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.637660027 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.637718916 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.637733936 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.637790918 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.638238907 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.638261080 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.638315916 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.638329029 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.638386011 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.639163017 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.639189005 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.639231920 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.639244080 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.639271021 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.639291048 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.639960051 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.639978886 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.640033007 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.640044928 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.640101910 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.661597967 CET	443	49780	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.661824942 CET	49780	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.661839008 CET	443	49780	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.662158012 CET	443	49780	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.662494898 CET	49780	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.662516117 CET	49780	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.662547112 CET	443	49780	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.664238930 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.664263964 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.664319038 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.664334059 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.664370060 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.678075075 CET	443	49781	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.678255081 CET	49781	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.678273916 CET	443	49781	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.679147959 CET	443	49781	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.679208040 CET	49781	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.679490089 CET	49781	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.679544926 CET	443	49781	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.679635048 CET	49781	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.679642916 CET	443	49781	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.704924107 CET	49785	443	192.168.2.18	108.138.106.126
Jan 16, 2024 22:32:55.705004930 CET	443	49785	108.138.106.126	192.168.2.18
Jan 16, 2024 22:32:55.705090046 CET	49785	443	192.168.2.18	108.138.106.126
Jan 16, 2024 22:32:55.705497026 CET	49785	443	192.168.2.18	108.138.106.126
Jan 16, 2024 22:32:55.705538988 CET	443	49785	108.138.106.126	192.168.2.18
Jan 16, 2024 22:32:55.710946083 CET	49780	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.712018967 CET	443	49774	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.712096930 CET	443	49774	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.712148905 CET	49774	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.712806940 CET	49774	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.712824106 CET	443	49774	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.716691017 CET	49786	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.716722012 CET	443	49786	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.716793060 CET	49786	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.717083931 CET	49786	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.717097044 CET	443	49786	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.719376087 CET	49787	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.719403982 CET	443	49787	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.719461918 CET	49787	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.719742060 CET	49787	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.719758987 CET	443	49787	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.726970911 CET	49781	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.728408098 CET	443	49765	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.728473902 CET	443	49765	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.728493929 CET	443	49765	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.728526115 CET	49765	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.728538990 CET	443	49765	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.728559971 CET	49765	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.728653908 CET	443	49765	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.728699923 CET	49765	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.729312897 CET	49765	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.729326010 CET	443	49765	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.733300924 CET	49788	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.733330965 CET	443	49788	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.733381033 CET	49788	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.733727932 CET	49788	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.733738899 CET	443	49788	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.801755905 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.801785946 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.801856041 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.801877022 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.801906109 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.801933050 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.803683996 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.803714037 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.803742886 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.803751945 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.803776026 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.803795099 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.805649042 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.805665970 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.805713892 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.805721045 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.805763960 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.809503078 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.809519053 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.809587002 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.809593916 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.809636116 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.810296059 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.810319901 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.810358047 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.810364962 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.810389996 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.810408115 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.810919046 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.810936928 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.810981989 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.810987949 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.811007977 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.811031103 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.811499119 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.811517000 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.811563969 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.811569929 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.811614990 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.812247038 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.812263966 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.812328100 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.812335968 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.812380075 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.813097000 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.813113928 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.813154936 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.813160896 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.813185930 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.813205004 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.813875914 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.813899994 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.813954115 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.813960075 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.813998938 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.815300941 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.815319061 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.815366030 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.815373898 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.815416098 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.836982965 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.836998940 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.837224960 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.837238073 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.837511063 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.837658882 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.837675095 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.837733030 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.837764025 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.837825060 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.838825941 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.838841915 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.838903904 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.838917971 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.838973045 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.840178967 CET	443	49778	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.840209961 CET	443	49778	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.840259075 CET	49778	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.840271950 CET	443	49778	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.840291023 CET	443	49778	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.840322971 CET	49778	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.840347052 CET	49778	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.841284990 CET	49778	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.841311932 CET	443	49778	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.846101046 CET	443	49776	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.846177101 CET	443	49776	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.846241951 CET	49776	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.847363949 CET	49776	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.847379923 CET	443	49776	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.849244118 CET	443	49777	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.849268913 CET	443	49777	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.849277973 CET	443	49777	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.849339008 CET	49777	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.849363089 CET	443	49777	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.849385977 CET	443	49777	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.849437952 CET	49777	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.850554943 CET	49789	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.850635052 CET	443	49789	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.850701094 CET	49789	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.851033926 CET	49789	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.851068974 CET	443	49789	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.852125883 CET	49777	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.852147102 CET	443	49777	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.895848036 CET	443	49785	108.138.106.126	192.168.2.18
Jan 16, 2024 22:32:55.904544115 CET	49785	443	192.168.2.18	108.138.106.126
Jan 16, 2024 22:32:55.904560089 CET	443	49785	108.138.106.126	192.168.2.18
Jan 16, 2024 22:32:55.906227112 CET	443	49785	108.138.106.126	192.168.2.18
Jan 16, 2024 22:32:55.906316042 CET	49785	443	192.168.2.18	108.138.106.126
Jan 16, 2024 22:32:55.907322884 CET	49785	443	192.168.2.18	108.138.106.126
Jan 16, 2024 22:32:55.907411098 CET	443	49785	108.138.106.126	192.168.2.18
Jan 16, 2024 22:32:55.907531023 CET	49785	443	192.168.2.18	108.138.106.126
Jan 16, 2024 22:32:55.907543898 CET	443	49785	108.138.106.126	192.168.2.18
Jan 16, 2024 22:32:55.948976040 CET	49785	443	192.168.2.18	108.138.106.126
Jan 16, 2024 22:32:55.970377922 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.970398903 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.970587015 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.970587015 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.970621109 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.970669985 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.970804930 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.970822096 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.970860004 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.970868111 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.970909119 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.975147009 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.975162029 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.975225925 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.975239992 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.975292921 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.975632906 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.975647926 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.975703001 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.975717068 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.975774050 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.976146936 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.976161957 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.976217031 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.976229906 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.976284027 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.978522062 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.978535891 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.978596926 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.978609085 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.978667021 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.979001999 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.979016066 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.979063988 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.979077101 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.979104996 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.979125023 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.980611086 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.980626106 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.980715990 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.980729103 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.980786085 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.985490084 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.985505104 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.985558033 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.985570908 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.985600948 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.985619068 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.985657930 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.985672951 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.985722065 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.985733986 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.985785007 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.985996008 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.986012936 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.986052036 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.986064911 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.986093044 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.986113071 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.986982107 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.986995935 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.987054110 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.987066031 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.987119913 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.987334967 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.987348080 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.987406015 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.987418890 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.987473011 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.988014936 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.988029957 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.988085985 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.988099098 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.988152981 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.988554955 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.988569021 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.988626003 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.988637924 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.988692045 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.988775015 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.988835096 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.988843918 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.988894939 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.988902092 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.988944054 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.989389896 CET	49767	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.989417076 CET	443	49767	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.992876053 CET	443	49782	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.993083954 CET	49782	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.993103981 CET	443	49782	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.993417025 CET	443	49782	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.993711948 CET	49782	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.993776083 CET	443	49782	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.993849039 CET	49782	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.998181105 CET	443	49780	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.998234034 CET	443	49780	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.998280048 CET	49780	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.998294115 CET	443	49780	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.998302937 CET	443	49780	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:55.998333931 CET	49780	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.998859882 CET	49780	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:55.998871088 CET	443	49780	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.001008034 CET	49790	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.001036882 CET	443	49790	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.001105070 CET	49790	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.001426935 CET	49790	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.001441002 CET	443	49790	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.001832008 CET	443	49783	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.002005100 CET	49783	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.002034903 CET	443	49783	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.003300905 CET	443	49783	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.003355026 CET	49783	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.003639936 CET	49783	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.003700972 CET	443	49783	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.003751040 CET	49783	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.003765106 CET	443	49783	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.013391972 CET	443	49775	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.013458014 CET	443	49775	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.013480902 CET	443	49775	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.013520956 CET	443	49775	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.013528109 CET	49775	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.013550997 CET	443	49775	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.013567924 CET	49775	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.013569117 CET	443	49775	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.013595104 CET	49775	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.013606071 CET	49775	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.013756037 CET	443	49775	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.013798952 CET	443	49775	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.013813019 CET	49775	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.013823032 CET	443	49775	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.013853073 CET	49775	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.013868093 CET	49775	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.021739960 CET	443	49781	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.021800995 CET	443	49781	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.021960974 CET	49781	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.022377014 CET	49781	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.022413969 CET	443	49781	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.037899971 CET	443	49782	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.044063091 CET	49783	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.151743889 CET	443	49785	108.138.106.126	192.168.2.18
Jan 16, 2024 22:32:56.151779890 CET	443	49785	108.138.106.126	192.168.2.18
Jan 16, 2024 22:32:56.151791096 CET	443	49785	108.138.106.126	192.168.2.18
Jan 16, 2024 22:32:56.151840925 CET	443	49785	108.138.106.126	192.168.2.18
Jan 16, 2024 22:32:56.151866913 CET	49785	443	192.168.2.18	108.138.106.126
Jan 16, 2024 22:32:56.151882887 CET	443	49785	108.138.106.126	192.168.2.18
Jan 16, 2024 22:32:56.151940107 CET	49785	443	192.168.2.18	108.138.106.126
Jan 16, 2024 22:32:56.153480053 CET	443	49785	108.138.106.126	192.168.2.18
Jan 16, 2024 22:32:56.153556108 CET	443	49785	108.138.106.126	192.168.2.18
Jan 16, 2024 22:32:56.153620958 CET	49785	443	192.168.2.18	108.138.106.126
Jan 16, 2024 22:32:56.153635979 CET	443	49785	108.138.106.126	192.168.2.18
Jan 16, 2024 22:32:56.153665066 CET	49785	443	192.168.2.18	108.138.106.126
Jan 16, 2024 22:32:56.153665066 CET	49785	443	192.168.2.18	108.138.106.126
Jan 16, 2024 22:32:56.153703928 CET	49785	443	192.168.2.18	108.138.106.126
Jan 16, 2024 22:32:56.177947044 CET	443	49775	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.177978039 CET	443	49775	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.178010941 CET	49775	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.178023100 CET	443	49775	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.178057909 CET	443	49775	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.178076982 CET	49775	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.178100109 CET	49775	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.178316116 CET	49775	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.178323984 CET	443	49775	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.182797909 CET	49791	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.182846069 CET	443	49791	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.182934046 CET	49791	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.183192015 CET	49791	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.183207989 CET	443	49791	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.217426062 CET	443	49787	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.217662096 CET	49787	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.217675924 CET	443	49787	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.218193054 CET	443	49787	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.218492031 CET	49787	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.218581915 CET	443	49787	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.218635082 CET	49787	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.249397039 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.249432087 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.249675989 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.249742031 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.249763012 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.255484104 CET	443	49786	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.255723000 CET	49786	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.255738020 CET	443	49786	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.256603003 CET	443	49786	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.256923914 CET	49786	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.257051945 CET	49786	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.257057905 CET	443	49786	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.257353067 CET	443	49786	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.262526989 CET	443	49788	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.262736082 CET	49788	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.262757063 CET	443	49788	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.263277054 CET	443	49788	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.263537884 CET	49788	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.263622046 CET	443	49788	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.263828039 CET	49788	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.265911102 CET	443	49787	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.299962997 CET	49786	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.309907913 CET	443	49788	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.326400042 CET	443	49782	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.326497078 CET	443	49782	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.326567888 CET	49782	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.327402115 CET	49782	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.327435970 CET	443	49782	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.329385996 CET	49793	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.329410076 CET	443	49793	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.329482079 CET	49793	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.330267906 CET	49793	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.330281973 CET	443	49793	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.341382027 CET	443	49783	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.341461897 CET	443	49783	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.341520071 CET	49783	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.354989052 CET	49783	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.355006933 CET	443	49783	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.369436026 CET	443	49789	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.371479988 CET	49789	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.371509075 CET	443	49789	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.372550964 CET	443	49789	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.372617960 CET	49789	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.384695053 CET	49789	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.384880066 CET	443	49789	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.386137962 CET	49789	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.386156082 CET	443	49789	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.428881884 CET	49789	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.447421074 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.451128006 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.451143980 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.452270985 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.452359915 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.453325987 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.453385115 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.453567982 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.453573942 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.507986069 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.522463083 CET	443	49790	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.522716999 CET	49790	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.522728920 CET	443	49790	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.523039103 CET	443	49790	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.523307085 CET	49790	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.523374081 CET	443	49790	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.523425102 CET	49790	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.542407990 CET	443	49787	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.542505980 CET	443	49787	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.542568922 CET	49787	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.562911034 CET	49794	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.562992096 CET	443	49794	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.563062906 CET	49794	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.563275099 CET	49794	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.563312054 CET	443	49794	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.563927889 CET	49787	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.563977003 CET	443	49787	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.565941095 CET	443	49790	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.584367990 CET	443	49788	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.584404945 CET	443	49788	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.584496975 CET	443	49788	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.584640026 CET	49788	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.584640026 CET	49788	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.586523056 CET	49788	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.586538076 CET	443	49788	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.592166901 CET	49795	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.592187881 CET	443	49795	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.592575073 CET	49795	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.593126059 CET	49795	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.593137980 CET	443	49795	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.596009970 CET	49796	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.596048117 CET	443	49796	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.596112013 CET	49796	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.596431971 CET	49796	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.596453905 CET	443	49796	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.603040934 CET	443	49786	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.603074074 CET	443	49786	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.603116989 CET	49786	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.603131056 CET	443	49786	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.603153944 CET	443	49786	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.603194952 CET	49786	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.606483936 CET	49786	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.606492996 CET	443	49786	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.610641003 CET	49797	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.610661983 CET	443	49797	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.610717058 CET	49797	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.611251116 CET	49798	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.611279964 CET	443	49798	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.611326933 CET	49798	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.611649036 CET	49798	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.611673117 CET	443	49798	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.612080097 CET	49797	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.612097025 CET	443	49797	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.667606115 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.667625904 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.667741060 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.667762995 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.667804956 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.673114061 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.673120975 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.673202038 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.673213005 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.687869072 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.687895060 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.687978029 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.687990904 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.692637920 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.692735910 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.692747116 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.692796946 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.704528093 CET	443	49791	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.704777956 CET	49791	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.704806089 CET	443	49791	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.705820084 CET	443	49791	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.705894947 CET	49791	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.706311941 CET	49791	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.706382036 CET	443	49791	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.706584930 CET	49791	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.706609964 CET	443	49791	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.746956110 CET	49791	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.754648924 CET	443	49789	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.754672050 CET	443	49789	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.754741907 CET	443	49789	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.754765034 CET	49789	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.754817963 CET	49789	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.755441904 CET	49789	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.755465031 CET	443	49789	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.756198883 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.756268024 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.756278992 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.758384943 CET	49799	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.758414984 CET	443	49799	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.758472919 CET	49799	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.759085894 CET	49799	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.759102106 CET	443	49799	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.761428118 CET	49800	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.761454105 CET	443	49800	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.761521101 CET	49800	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.761756897 CET	49800	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.761769056 CET	443	49800	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.763613939 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.763654947 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.763678074 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.763688087 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.763727903 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.770878077 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.770950079 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.778439999 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.778510094 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.778517962 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.785706997 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.785773039 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.785780907 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.802045107 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.802072048 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.802124023 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.802136898 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.802181959 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.842952013 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.848098040 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.848109961 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.848146915 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.848190069 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.848201036 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.848239899 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.851903915 CET	443	49793	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.852221966 CET	49793	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.852237940 CET	443	49793	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.852566004 CET	443	49793	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.852989912 CET	49793	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.853049040 CET	443	49793	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.853142977 CET	49793	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.860867023 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.860883951 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.860972881 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.860976934 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.861012936 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.872720957 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.872735023 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.872807980 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.872823954 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.872884035 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.883050919 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.883099079 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.883127928 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.883138895 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.883160114 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.893929005 CET	443	49793	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.901319027 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.901336908 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.901386023 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.901395082 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.910062075 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.910079002 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.910156012 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.910164118 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.910196066 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.910234928 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.910238981 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.921964884 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.921981096 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.922066927 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.922072887 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.941121101 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.941143036 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.941175938 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.941214085 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.941226959 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.941245079 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.941266060 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.941293955 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.941579103 CET	49792	443	192.168.2.18	18.238.55.7
Jan 16, 2024 22:32:56.941589117 CET	443	49792	18.238.55.7	192.168.2.18
Jan 16, 2024 22:32:56.945710897 CET	49801	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.945795059 CET	443	49801	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:56.945873022 CET	49801	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.946177959 CET	49801	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:56.946213961 CET	443	49801	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.063926935 CET	443	49791	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.064007044 CET	443	49791	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.064074039 CET	49791	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.064723015 CET	49791	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.064744949 CET	443	49791	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.067348003 CET	49802	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.067426920 CET	443	49802	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.067523003 CET	49802	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.067841053 CET	49802	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.067877054 CET	443	49802	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.069219112 CET	49803	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.069253922 CET	443	49803	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.069308043 CET	49803	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.069529057 CET	49803	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.069544077 CET	443	49803	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.086415052 CET	443	49790	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.086448908 CET	443	49790	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.086467981 CET	443	49790	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.086534977 CET	49790	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.086560011 CET	443	49790	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.086604118 CET	49790	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.086644888 CET	49790	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.087306023 CET	443	49790	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.087325096 CET	443	49790	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.087383986 CET	49790	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.087392092 CET	443	49790	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.092024088 CET	443	49794	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.092284918 CET	49794	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.092312098 CET	443	49794	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.093312979 CET	443	49794	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.093380928 CET	49794	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.094340086 CET	49794	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.094403982 CET	443	49794	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.094538927 CET	49794	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.094549894 CET	443	49794	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.118952036 CET	443	49796	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.119179964 CET	49796	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.119206905 CET	443	49796	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.119503975 CET	443	49796	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.119767904 CET	49796	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.119823933 CET	443	49796	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.119879007 CET	49796	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.125701904 CET	443	49795	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.125880003 CET	49795	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.125905991 CET	443	49795	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.126225948 CET	443	49795	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.126457930 CET	49795	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.126517057 CET	443	49795	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.126543045 CET	49795	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.127953053 CET	49790	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.134293079 CET	443	49798	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.134522915 CET	49798	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.134568930 CET	443	49798	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.134886980 CET	443	49798	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.135510921 CET	49798	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.135590076 CET	443	49798	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.135633945 CET	49798	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.142983913 CET	49794	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.161921978 CET	443	49796	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.162650108 CET	443	49797	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.162949085 CET	49797	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.162976980 CET	443	49797	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.164464951 CET	443	49797	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.164542913 CET	49797	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.165003061 CET	49797	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.165149927 CET	443	49797	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.165258884 CET	49797	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.165271997 CET	443	49797	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.173902988 CET	443	49795	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.174981117 CET	49795	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.177917004 CET	443	49798	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.177985907 CET	49798	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.198488951 CET	443	49793	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.198570967 CET	443	49793	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.198635101 CET	49793	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.200278997 CET	49793	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.200299025 CET	443	49793	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.202306986 CET	49804	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.202342033 CET	443	49804	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.202436924 CET	49804	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.203088999 CET	49804	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.203104019 CET	443	49804	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.206244946 CET	49805	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.206278086 CET	443	49805	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.206346035 CET	49805	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.206680059 CET	49805	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.206691980 CET	443	49805	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.206955910 CET	49797	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.258570910 CET	443	49790	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.258596897 CET	443	49790	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.258738995 CET	49790	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.258754015 CET	443	49790	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.258804083 CET	49790	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.260273933 CET	443	49790	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.260294914 CET	443	49790	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.260325909 CET	443	49790	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.260374069 CET	49790	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.260389090 CET	443	49790	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.260433912 CET	443	49790	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.260447979 CET	49790	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.260447979 CET	49790	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.260452032 CET	443	49790	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.260503054 CET	49790	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.261272907 CET	49790	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.261286974 CET	443	49790	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.267175913 CET	49806	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.267272949 CET	443	49806	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.267340899 CET	49806	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.267776966 CET	49806	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.267811060 CET	443	49806	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.279428005 CET	443	49799	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.279701948 CET	49799	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.279711962 CET	443	49799	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.280683041 CET	443	49799	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.280739069 CET	49799	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.281151056 CET	49799	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.281234026 CET	443	49799	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.281296968 CET	49799	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.281306982 CET	443	49799	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.315578938 CET	443	49800	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.315926075 CET	49800	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.315952063 CET	443	49800	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.317435026 CET	443	49800	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.317508936 CET	49800	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.317903996 CET	49800	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.318006992 CET	443	49800	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.318079948 CET	49800	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.318092108 CET	443	49800	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.334985018 CET	49799	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.355664015 CET	49807	443	192.168.2.18	18.164.96.87
Jan 16, 2024 22:32:57.355699062 CET	443	49807	18.164.96.87	192.168.2.18
Jan 16, 2024 22:32:57.355752945 CET	49807	443	192.168.2.18	18.164.96.87
Jan 16, 2024 22:32:57.356312990 CET	49807	443	192.168.2.18	18.164.96.87
Jan 16, 2024 22:32:57.356323004 CET	443	49807	18.164.96.87	192.168.2.18
Jan 16, 2024 22:32:57.367021084 CET	49800	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.455858946 CET	443	49801	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.456234932 CET	49801	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.456298113 CET	443	49801	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.457447052 CET	443	49801	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.457540989 CET	49801	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.457870007 CET	49801	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.457957983 CET	443	49801	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.458056927 CET	49801	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.458072901 CET	443	49801	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.465802908 CET	443	49796	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.465827942 CET	443	49796	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.465903044 CET	443	49796	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.465900898 CET	49796	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.465945005 CET	49796	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.466965914 CET	49796	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.466983080 CET	443	49796	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.473589897 CET	443	49798	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.473614931 CET	443	49798	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.473670006 CET	49798	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.473673105 CET	443	49798	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.473715067 CET	49798	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.474451065 CET	49798	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.474468946 CET	443	49798	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.481306076 CET	443	49795	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.481327057 CET	443	49795	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.481388092 CET	443	49795	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.481405020 CET	49795	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.481430054 CET	49795	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.482395887 CET	49795	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.482404947 CET	443	49795	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.488279104 CET	49808	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.488312006 CET	443	49808	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.488353968 CET	49808	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.488632917 CET	49808	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.488646984 CET	443	49808	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.510966063 CET	49801	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.549540043 CET	443	49807	18.164.96.87	192.168.2.18
Jan 16, 2024 22:32:57.549818993 CET	49807	443	192.168.2.18	18.164.96.87
Jan 16, 2024 22:32:57.549838066 CET	443	49807	18.164.96.87	192.168.2.18
Jan 16, 2024 22:32:57.551323891 CET	443	49807	18.164.96.87	192.168.2.18
Jan 16, 2024 22:32:57.551400900 CET	49807	443	192.168.2.18	18.164.96.87
Jan 16, 2024 22:32:57.552515984 CET	49807	443	192.168.2.18	18.164.96.87
Jan 16, 2024 22:32:57.552644968 CET	443	49807	18.164.96.87	192.168.2.18
Jan 16, 2024 22:32:57.552735090 CET	49807	443	192.168.2.18	18.164.96.87
Jan 16, 2024 22:32:57.552743912 CET	443	49807	18.164.96.87	192.168.2.18
Jan 16, 2024 22:32:57.576461077 CET	49809	443	192.168.2.18	142.250.80.35
Jan 16, 2024 22:32:57.576486111 CET	443	49809	142.250.80.35	192.168.2.18
Jan 16, 2024 22:32:57.576539040 CET	49809	443	192.168.2.18	142.250.80.35
Jan 16, 2024 22:32:57.576864004 CET	49809	443	192.168.2.18	142.250.80.35
Jan 16, 2024 22:32:57.576870918 CET	443	49809	142.250.80.35	192.168.2.18
Jan 16, 2024 22:32:57.579858065 CET	443	49802	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.580080986 CET	49802	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.580115080 CET	443	49802	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.580993891 CET	443	49802	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.581049919 CET	49802	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.581387043 CET	49802	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.581444979 CET	443	49802	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.581511021 CET	49802	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.581521034 CET	443	49802	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.589534998 CET	443	49803	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.589839935 CET	49803	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.589852095 CET	443	49803	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.591253996 CET	443	49803	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.591324091 CET	49803	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.591801882 CET	49803	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.591866970 CET	443	49803	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.591944933 CET	49803	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.591948986 CET	443	49803	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.606952906 CET	49807	443	192.168.2.18	18.164.96.87
Jan 16, 2024 22:32:57.608896017 CET	443	49794	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.608952999 CET	443	49794	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.609021902 CET	49794	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.609339952 CET	49794	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.609339952 CET	49794	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.609370947 CET	443	49794	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.609417915 CET	49794	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.622957945 CET	49802	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.636517048 CET	443	49797	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.636902094 CET	49797	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.636934996 CET	443	49797	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.637010098 CET	49797	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.638942003 CET	49803	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.656084061 CET	443	49800	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.656112909 CET	443	49800	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.656169891 CET	49800	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.656199932 CET	443	49800	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.656219006 CET	443	49800	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.656280994 CET	49800	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.656796932 CET	49800	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.656811953 CET	443	49800	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.703692913 CET	49810	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.703730106 CET	443	49810	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.703778028 CET	49810	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.704005957 CET	49811	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.704040051 CET	443	49811	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.704097033 CET	49811	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.704417944 CET	49810	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.704430103 CET	443	49810	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.704775095 CET	49811	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.704787970 CET	443	49811	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.718954086 CET	443	49804	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.719160080 CET	49804	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.719181061 CET	443	49804	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.720055103 CET	443	49804	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.720112085 CET	49804	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.720369101 CET	49804	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.720422983 CET	443	49804	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.720482111 CET	49804	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.720491886 CET	443	49804	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.741560936 CET	443	49807	18.164.96.87	192.168.2.18
Jan 16, 2024 22:32:57.741590023 CET	443	49807	18.164.96.87	192.168.2.18
Jan 16, 2024 22:32:57.741600990 CET	443	49807	18.164.96.87	192.168.2.18
Jan 16, 2024 22:32:57.741625071 CET	443	49807	18.164.96.87	192.168.2.18
Jan 16, 2024 22:32:57.741638899 CET	443	49807	18.164.96.87	192.168.2.18
Jan 16, 2024 22:32:57.741652966 CET	443	49807	18.164.96.87	192.168.2.18
Jan 16, 2024 22:32:57.741667032 CET	49807	443	192.168.2.18	18.164.96.87
Jan 16, 2024 22:32:57.741683006 CET	443	49807	18.164.96.87	192.168.2.18
Jan 16, 2024 22:32:57.741693020 CET	49807	443	192.168.2.18	18.164.96.87
Jan 16, 2024 22:32:57.741713047 CET	49807	443	192.168.2.18	18.164.96.87
Jan 16, 2024 22:32:57.741730928 CET	49807	443	192.168.2.18	18.164.96.87
Jan 16, 2024 22:32:57.741879940 CET	443	49805	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.742094040 CET	49805	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.742153883 CET	443	49805	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.742660999 CET	443	49805	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.743124962 CET	49805	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.743211985 CET	443	49805	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.743309021 CET	49805	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.758136988 CET	443	49807	18.164.96.87	192.168.2.18
Jan 16, 2024 22:32:57.758162022 CET	443	49807	18.164.96.87	192.168.2.18
Jan 16, 2024 22:32:57.758236885 CET	49807	443	192.168.2.18	18.164.96.87
Jan 16, 2024 22:32:57.758245945 CET	443	49807	18.164.96.87	192.168.2.18
Jan 16, 2024 22:32:57.758318901 CET	49807	443	192.168.2.18	18.164.96.87
Jan 16, 2024 22:32:57.760962009 CET	49804	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.773672104 CET	443	49809	142.250.80.35	192.168.2.18
Jan 16, 2024 22:32:57.773905039 CET	49809	443	192.168.2.18	142.250.80.35
Jan 16, 2024 22:32:57.773924112 CET	443	49809	142.250.80.35	192.168.2.18
Jan 16, 2024 22:32:57.774816990 CET	443	49809	142.250.80.35	192.168.2.18
Jan 16, 2024 22:32:57.774878979 CET	49809	443	192.168.2.18	142.250.80.35
Jan 16, 2024 22:32:57.775697947 CET	49809	443	192.168.2.18	142.250.80.35
Jan 16, 2024 22:32:57.775754929 CET	443	49809	142.250.80.35	192.168.2.18
Jan 16, 2024 22:32:57.775859118 CET	49809	443	192.168.2.18	142.250.80.35
Jan 16, 2024 22:32:57.775866985 CET	443	49809	142.250.80.35	192.168.2.18
Jan 16, 2024 22:32:57.780008078 CET	443	49806	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.780201912 CET	49806	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.780232906 CET	443	49806	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.780554056 CET	443	49806	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.780807018 CET	49806	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.780868053 CET	443	49806	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.780920029 CET	49806	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.785919905 CET	443	49805	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.819832087 CET	443	49799	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.819912910 CET	443	49799	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.819971085 CET	49799	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.820225000 CET	49799	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.820239067 CET	443	49799	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.820256948 CET	49799	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.820314884 CET	49799	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.821511030 CET	49812	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.821540117 CET	443	49812	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.821614027 CET	49812	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.821824074 CET	49812	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.821842909 CET	443	49812	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.821913004 CET	443	49806	35.214.8.169	192.168.2.18
Jan 16, 2024 22:32:57.824958086 CET	49809	443	192.168.2.18	142.250.80.35
Jan 16, 2024 22:32:57.824968100 CET	49806	443	192.168.2.18	35.214.8.169
Jan 16, 2024 22:32:57.826744080 CET	443	49807	18.164.96.87	192.168.2.18
Jan 16, 2024 22:32:57.826775074 CET	443	49807	18.164.96.87	192.168.2.18
Jan 16, 2024 22:32:57.826843977 CET	49807	443	192.168.2.18	18.164.96.87
Jan 16, 2024 22:32:57.826855898 CET	443	49807	18.164.96.87	192.168.2.18
Jan 16, 2024 22:32:57.826905012 CET	49807	443	192.168.2.18	18.164.96.87
Jan 16, 2024 22:32:57.845815897 CET	443	49807	18.164.96.87	192.168.2.18
Jan 16, 2024 22:32:57.845845938 CET	443	49807	18.164.96.87	192.168.2.18
Jan 16, 2024 22:32:57.845917940 CET	49807	443	192.168.2.18	18.164.96.87
Jan 16, 2024 22:32:57.845927000 CET	443	49807	18.164.96.87	192.168.2.18
Jan 16, 2024 22:32:57.845948935 CET	49807	443	192.168.2.18	18.164.96.87
Jan 16, 2024 22:32:57.845999002 CET	49807	443	192.168.2.18	18.164.96.87
Jan 16, 2024 22:32:57.863735914 CET	443	49807	18.164.96.87	192.168.2.18
Jan 16, 2024 22:32:57.863761902 CET	443	49807	18.164.96.87	192.168.2.18
Jan 16, 2024 22:32:57.863831997 CET	49807	443	192.168.2.18	18.164.96.87
Jan 16, 2024 22:32:57.863842964 CET	443	49807	18.164.96.87	192.168.2.18
Jan 16, 2024 22:32:57.863883018 CET	49807	443	192.168.2.18	18.164.96.87
Jan 16, 2024 22:32:57.863902092 CET	49807	443	192.168.2.18	18.164.96.87
Jan 16, 2024 22:32:57.908050060 CET	443	49807	18.164.96.87	192.168.2.18

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 16, 2024 22:32:44.960926056 CET	192.168.2.18	1.1.1.1	0xd31	Standard query (0)	trk.klclick3.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:44.961072922 CET	192.168.2.18	1.1.1.1	0x5317	Standard query (0)	trk.klclick3.com	65	IN (0x0001)	false
Jan 16, 2024 22:32:45.005553007 CET	192.168.2.18	1.1.1.1	0x86b3	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:45.006323099 CET	192.168.2.18	1.1.1.1	0x789c	Standard query (0)	clients2.google.com	65	IN (0x0001)	false
Jan 16, 2024 22:32:45.008276939 CET	192.168.2.18	1.1.1.1	0x2f3	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:45.008855104 CET	192.168.2.18	1.1.1.1	0x44c	Standard query (0)	accounts.google.com	65	IN (0x0001)	false
Jan 16, 2024 22:32:45.479449987 CET	192.168.2.18	1.1.1.1	0xe7db	Standard query (0)	newdoc4.easyrecycling.co.za	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:45.480607033 CET	192.168.2.18	1.1.1.1	0x53c9	Standard query (0)	newdoc4.easyrecycling.co.za	65	IN (0x0001)	false
Jan 16, 2024 22:32:47.327739000 CET	192.168.2.18	1.1.1.1	0xc89e	Standard query (0)	www.signable.us	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:47.327886105 CET	192.168.2.18	1.1.1.1	0xb56b	Standard query (0)	www.signable.us	65	IN (0x0001)	false
Jan 16, 2024 22:32:48.903350115 CET	192.168.2.18	1.1.1.1	0x46f	Standard query (0)	signable.app	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:48.903434992 CET	192.168.2.18	1.1.1.1	0x3610	Standard query (0)	signable.app	65	IN (0x0001)	false
Jan 16, 2024 22:32:49.405401945 CET	192.168.2.18	1.1.1.1	0xed32	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:49.405744076 CET	192.168.2.18	1.1.1.1	0x139d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 16, 2024 22:32:52.806404114 CET	192.168.2.18	1.1.1.1	0x4bf9	Standard query (0)	www.signable.us	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:52.806854010 CET	192.168.2.18	1.1.1.1	0xfff0	Standard query (0)	www.signable.us	65	IN (0x0001)	false
Jan 16, 2024 22:32:53.359783888 CET	192.168.2.18	1.1.1.1	0x70dc	Standard query (0)	g10102301085.co	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:53.360162020 CET	192.168.2.18	1.1.1.1	0x5fc4	Standard query (0)	g10102301085.co	65	IN (0x0001)	false
Jan 16, 2024 22:32:54.202016115 CET	192.168.2.18	1.1.1.1	0x5531	Standard query (0)	cdn.firstpromoter.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:54.202367067 CET	192.168.2.18	1.1.1.1	0x72e4	Standard query (0)	cdn.firstpromoter.com	65	IN (0x0001)	false
Jan 16, 2024 22:32:55.616010904 CET	192.168.2.18	1.1.1.1	0x214	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:55.616312981 CET	192.168.2.18	1.1.1.1	0xb4a6	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Jan 16, 2024 22:32:56.156934977 CET	192.168.2.18	1.1.1.1	0xcb64	Standard query (0)	js.driftt.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:56.157485962 CET	192.168.2.18	1.1.1.1	0xd527	Standard query (0)	js.driftt.com	65	IN (0x0001)	false
Jan 16, 2024 22:32:56.454438925 CET	192.168.2.18	1.1.1.1	0xf7eb	Standard query (0)	signable.co.uk	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:56.454675913 CET	192.168.2.18	1.1.1.1	0xb8c4	Standard query (0)	signable.co.uk	65	IN (0x0001)	false
Jan 16, 2024 22:32:57.266041994 CET	192.168.2.18	1.1.1.1	0xbcab	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:57.266468048 CET	192.168.2.18	1.1.1.1	0xfc96	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
Jan 16, 2024 22:32:57.487135887 CET	192.168.2.18	1.1.1.1	0xe30d	Standard query (0)	www.google.ca	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:57.487427950 CET	192.168.2.18	1.1.1.1	0x1f29	Standard query (0)	www.google.ca	65	IN (0x0001)	false
Jan 16, 2024 22:32:57.610785007 CET	192.168.2.18	1.1.1.1	0x8136	Standard query (0)	www.signable.co.uk	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:57.611099005 CET	192.168.2.18	1.1.1.1	0xa5de	Standard query (0)	www.signable.co.uk	65	IN (0x0001)	false
Jan 16, 2024 22:32:57.972809076 CET	192.168.2.18	1.1.1.1	0xc5d2	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:57.973063946 CET	192.168.2.18	1.1.1.1	0xa644	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Jan 16, 2024 22:32:57.975884914 CET	192.168.2.18	1.1.1.1	0xf705	Standard query (0)	www.google.ca	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:57.976172924 CET	192.168.2.18	1.1.1.1	0x5294	Standard query (0)	www.google.ca	65	IN (0x0001)	false
Jan 16, 2024 22:32:58.006949902 CET	192.168.2.18	1.1.1.1	0xf537	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:58.007157087 CET	192.168.2.18	1.1.1.1	0xb9b5	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Jan 16, 2024 22:32:58.033337116 CET	192.168.2.18	1.1.1.1	0x8cc3	Standard query (0)	vc.hotjar.io	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:58.033648968 CET	192.168.2.18	1.1.1.1	0xa27a	Standard query (0)	vc.hotjar.io	65	IN (0x0001)	false
Jan 16, 2024 22:32:58.624118090 CET	192.168.2.18	1.1.1.1	0x9bd5	Standard query (0)	www.signable.co.uk	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:58.624398947 CET	192.168.2.18	1.1.1.1	0xd8d7	Standard query (0)	www.signable.co.uk	65	IN (0x0001)	false
Jan 16, 2024 22:33:02.465590000 CET	192.168.2.18	1.1.1.1	0xf7c5	Standard query (0)	js.driftt.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:02.466095924 CET	192.168.2.18	1.1.1.1	0x8bce	Standard query (0)	js.driftt.com	65	IN (0x0001)	false
Jan 16, 2024 22:33:03.006433964 CET	192.168.2.18	1.1.1.1	0xdca3	Standard query (0)	customer.api.drift.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:03.006807089 CET	192.168.2.18	1.1.1.1	0xd940	Standard query (0)	customer.api.drift.com	65	IN (0x0001)	false
Jan 16, 2024 22:33:03.007587910 CET	192.168.2.18	1.1.1.1	0x49e9	Standard query (0)	conversation.api.drift.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:03.008050919 CET	192.168.2.18	1.1.1.1	0x5bb2	Standard query (0)	conversation.api.drift.com	65	IN (0x0001)	false
Jan 16, 2024 22:33:03.008900881 CET	192.168.2.18	1.1.1.1	0xed36	Standard query (0)	metrics.api.drift.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:03.009146929 CET	192.168.2.18	1.1.1.1	0x9220	Standard query (0)	metrics.api.drift.com	65	IN (0x0001)	false
Jan 16, 2024 22:33:03.118612051 CET	192.168.2.18	1.1.1.1	0x9a6b	Standard query (0)	targeting.api.drift.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:03.119038105 CET	192.168.2.18	1.1.1.1	0x26ff	Standard query (0)	targeting.api.drift.com	65	IN (0x0001)	false
Jan 16, 2024 22:33:06.300229073 CET	192.168.2.18	1.1.1.1	0xf595	Standard query (0)	bootstrap.api.drift.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:06.300460100 CET	192.168.2.18	1.1.1.1	0x4b32	Standard query (0)	bootstrap.api.drift.com	65	IN (0x0001)	false
Jan 16, 2024 22:33:07.135540009 CET	192.168.2.18	1.1.1.1	0x141f	Standard query (0)	bootstrap.api.drift.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:07.135691881 CET	192.168.2.18	1.1.1.1	0xdb2	Standard query (0)	bootstrap.api.drift.com	65	IN (0x0001)	false
Jan 16, 2024 22:33:07.655539989 CET	192.168.2.18	1.1.1.1	0xdd1a	Standard query (0)	metrics.api.drift.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:07.655793905 CET	192.168.2.18	1.1.1.1	0x508d	Standard query (0)	metrics.api.drift.com	65	IN (0x0001)	false
Jan 16, 2024 22:33:07.789036036 CET	192.168.2.18	1.1.1.1	0xeeb2	Standard query (0)	5006190-40.chat.api.drift.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:07.789186954 CET	192.168.2.18	1.1.1.1	0xcfc1	Standard query (0)	5006190-40.chat.api.drift.com	65	IN (0x0001)	false
Jan 16, 2024 22:33:23.972735882 CET	192.168.2.18	1.1.1.1	0x7a4	Standard query (0)	signable.app	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:23.972776890 CET	192.168.2.18	1.1.1.1	0xfcee	Standard query (0)	signable.app	65	IN (0x0001)	false
Jan 16, 2024 22:33:25.190819979 CET	192.168.2.18	1.1.1.1	0x1b91	Standard query (0)	js.stripe.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:25.191203117 CET	192.168.2.18	1.1.1.1	0xb6f8	Standard query (0)	js.stripe.com	65	IN (0x0001)	false
Jan 16, 2024 22:33:27.296272039 CET	192.168.2.18	1.1.1.1	0xc8e1	Standard query (0)	sentry.io	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:27.296545029 CET	192.168.2.18	1.1.1.1	0x23e9	Standard query (0)	sentry.io	65	IN (0x0001)	false
Jan 16, 2024 22:33:27.388817072 CET	192.168.2.18	1.1.1.1	0x4c1c	Standard query (0)	app.launchdarkly.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:27.389034986 CET	192.168.2.18	1.1.1.1	0x18dc	Standard query (0)	app.launchdarkly.com	65	IN (0x0001)	false
Jan 16, 2024 22:33:27.723644972 CET	192.168.2.18	1.1.1.1	0x7a8	Standard query (0)	js.stripe.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:27.723835945 CET	192.168.2.18	1.1.1.1	0xa0a6	Standard query (0)	js.stripe.com	65	IN (0x0001)	false
Jan 16, 2024 22:33:27.803657055 CET	192.168.2.18	1.1.1.1	0x2335	Standard query (0)	sentry.io	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:27.803841114 CET	192.168.2.18	1.1.1.1	0xebf7	Standard query (0)	sentry.io	65	IN (0x0001)	false
Jan 16, 2024 22:33:28.286537886 CET	192.168.2.18	1.1.1.1	0x9228	Standard query (0)	app.launchdarkly.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:28.286537886 CET	192.168.2.18	1.1.1.1	0xab54	Standard query (0)	app.launchdarkly.com	65	IN (0x0001)	false
Jan 16, 2024 22:33:28.407258987 CET	192.168.2.18	1.1.1.1	0x219f	Standard query (0)	clientstream.launchdarkly.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:28.407433033 CET	192.168.2.18	1.1.1.1	0x5ab4	Standard query (0)	clientstream.launchdarkly.com	65	IN (0x0001)	false
Jan 16, 2024 22:33:28.488014936 CET	192.168.2.18	1.1.1.1	0x3d3f	Standard query (0)	signable.app	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:28.488090038 CET	192.168.2.18	1.1.1.1	0xf068	Standard query (0)	signable.app	65	IN (0x0001)	false
Jan 16, 2024 22:33:28.519074917 CET	192.168.2.18	1.1.1.1	0x9671	Standard query (0)	cdn.amplitude.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:28.519428015 CET	192.168.2.18	1.1.1.1	0x8430	Standard query (0)	cdn.amplitude.com	65	IN (0x0001)	false
Jan 16, 2024 22:33:28.519901037 CET	192.168.2.18	1.1.1.1	0xa450	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:28.520081043 CET	192.168.2.18	1.1.1.1	0xac52	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Jan 16, 2024 22:33:28.556175947 CET	192.168.2.18	1.1.1.1	0x84	Standard query (0)	fast.trychameleon.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:28.556334019 CET	192.168.2.18	1.1.1.1	0x5be6	Standard query (0)	fast.trychameleon.com	65	IN (0x0001)	false
Jan 16, 2024 22:33:28.627470016 CET	192.168.2.18	1.1.1.1	0x58a0	Standard query (0)	m.stripe.network	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:28.627739906 CET	192.168.2.18	1.1.1.1	0x5ac1	Standard query (0)	m.stripe.network	65	IN (0x0001)	false
Jan 16, 2024 22:33:29.067523003 CET	192.168.2.18	1.1.1.1	0xbc24	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:29.067806959 CET	192.168.2.18	1.1.1.1	0xfce9	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Jan 16, 2024 22:33:29.200913906 CET	192.168.2.18	1.1.1.1	0x4095	Standard query (0)	js.hs-scripts.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:29.201066017 CET	192.168.2.18	1.1.1.1	0xfbc7	Standard query (0)	js.hs-scripts.com	65	IN (0x0001)	false
Jan 16, 2024 22:33:29.335438013 CET	192.168.2.18	1.1.1.1	0x7a89	Standard query (0)	public.profitwell.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:29.335623980 CET	192.168.2.18	1.1.1.1	0x6bbc	Standard query (0)	public.profitwell.com	65	IN (0x0001)	false
Jan 16, 2024 22:33:29.375663042 CET	192.168.2.18	1.1.1.1	0x8f99	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:29.375910044 CET	192.168.2.18	1.1.1.1	0x656e	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Jan 16, 2024 22:33:29.795804977 CET	192.168.2.18	1.1.1.1	0x56b2	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:29.795964956 CET	192.168.2.18	1.1.1.1	0xc277	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
Jan 16, 2024 22:33:29.820537090 CET	192.168.2.18	1.1.1.1	0x41c8	Standard query (0)	js.hs-banner.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:29.820700884 CET	192.168.2.18	1.1.1.1	0x7d31	Standard query (0)	js.hs-banner.com	65	IN (0x0001)	false
Jan 16, 2024 22:33:30.248735905 CET	192.168.2.18	1.1.1.1	0x5332	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:30.248913050 CET	192.168.2.18	1.1.1.1	0x394a	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Jan 16, 2024 22:33:30.255251884 CET	192.168.2.18	1.1.1.1	0x3141	Standard query (0)	m.stripe.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:30.255431890 CET	192.168.2.18	1.1.1.1	0x22d4	Standard query (0)	m.stripe.com	65	IN (0x0001)	false
Jan 16, 2024 22:33:30.436619997 CET	192.168.2.18	1.1.1.1	0x4956	Standard query (0)	js.hsleadflows.net	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:30.436789989 CET	192.168.2.18	1.1.1.1	0xf3c4	Standard query (0)	js.hsleadflows.net	65	IN (0x0001)	false
Jan 16, 2024 22:33:30.457545996 CET	192.168.2.18	1.1.1.1	0x9f2a	Standard query (0)	js.hs-analytics.net	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:30.457756042 CET	192.168.2.18	1.1.1.1	0x37e1	Standard query (0)	js.hs-analytics.net	65	IN (0x0001)	false
Jan 16, 2024 22:33:30.563287973 CET	192.168.2.18	1.1.1.1	0x621	Standard query (0)	vc.hotjar.io	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:30.563523054 CET	192.168.2.18	1.1.1.1	0xf1d0	Standard query (0)	vc.hotjar.io	65	IN (0x0001)	false
Jan 16, 2024 22:33:31.217822075 CET	192.168.2.18	1.1.1.1	0x6643	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:31.218077898 CET	192.168.2.18	1.1.1.1	0xf75a	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Jan 16, 2024 22:33:31.239582062 CET	192.168.2.18	1.1.1.1	0x72a4	Standard query (0)	events.launchdarkly.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:31.239789009 CET	192.168.2.18	1.1.1.1	0x926b	Standard query (0)	events.launchdarkly.com	65	IN (0x0001)	false
Jan 16, 2024 22:33:31.249406099 CET	192.168.2.18	1.1.1.1	0x5b85	Standard query (0)	m.stripe.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:31.249670029 CET	192.168.2.18	1.1.1.1	0x1b54	Standard query (0)	m.stripe.com	65	IN (0x0001)	false
Jan 16, 2024 22:33:31.345515013 CET	192.168.2.18	1.1.1.1	0x539f	Standard query (0)	forms.hubspot.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:31.345701933 CET	192.168.2.18	1.1.1.1	0xd073	Standard query (0)	forms.hubspot.com	65	IN (0x0001)	false
Jan 16, 2024 22:33:31.915514946 CET	192.168.2.18	1.1.1.1	0x9a15	Standard query (0)	forms.hubspot.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:31.915851116 CET	192.168.2.18	1.1.1.1	0x92e0	Standard query (0)	forms.hubspot.com	65	IN (0x0001)	false
Jan 16, 2024 22:33:31.998272896 CET	192.168.2.18	1.1.1.1	0x1465	Standard query (0)	beacon-v2.helpscout.net	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:31.998332024 CET	192.168.2.18	1.1.1.1	0x74f0	Standard query (0)	beacon-v2.helpscout.net	65	IN (0x0001)	false
Jan 16, 2024 22:33:32.062432051 CET	192.168.2.18	1.1.1.1	0x6d21	Standard query (0)	stripe.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:32.062561989 CET	192.168.2.18	1.1.1.1	0x7ce8	Standard query (0)	stripe.com	65	IN (0x0001)	false
Jan 16, 2024 22:33:32.068173885 CET	192.168.2.18	1.1.1.1	0x9417	Standard query (0)	track.hubspot.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:32.068485022 CET	192.168.2.18	1.1.1.1	0x6919	Standard query (0)	track.hubspot.com	65	IN (0x0001)	false
Jan 16, 2024 22:33:32.620507956 CET	192.168.2.18	1.1.1.1	0x95ee	Standard query (0)	track.hubspot.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:32.620810986 CET	192.168.2.18	1.1.1.1	0xe433	Standard query (0)	track.hubspot.com	65	IN (0x0001)	false
Jan 16, 2024 22:33:33.067918062 CET	192.168.2.18	1.1.1.1	0xe766	Standard query (0)	d3hb14vkzrxvla.cloudfront.net	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:33.068237066 CET	192.168.2.18	1.1.1.1	0xa9d1	Standard query (0)	d3hb14vkzrxvla.cloudfront.net	65	IN (0x0001)	false
Jan 16, 2024 22:33:34.022449017 CET	192.168.2.18	1.1.1.1	0x5348	Standard query (0)	d3hb14vkzrxvla.cloudfront.net	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:34.022793055 CET	192.168.2.18	1.1.1.1	0xd58f	Standard query (0)	d3hb14vkzrxvla.cloudfront.net	65	IN (0x0001)	false
Jan 16, 2024 22:33:38.541465044 CET	192.168.2.18	1.1.1.1	0xc906	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:38.541731119 CET	192.168.2.18	1.1.1.1	0x504d	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Jan 16, 2024 22:34:14.413431883 CET	192.168.2.18	1.1.1.1	0x3eee	Standard query (0)	clients1.google.com	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:34:14.413693905 CET	192.168.2.18	1.1.1.1	0x9a0a	Standard query (0)	clients1.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 16, 2024 22:32:45.049559116 CET	1.1.1.1	192.168.2.18	0xd31	No error (0)	trk.klclick3.com		52.85.151.72	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:45.049559116 CET	1.1.1.1	192.168.2.18	0xd31	No error (0)	trk.klclick3.com		52.85.151.90	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:45.049559116 CET	1.1.1.1	192.168.2.18	0xd31	No error (0)	trk.klclick3.com		52.85.151.86	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:45.049559116 CET	1.1.1.1	192.168.2.18	0xd31	No error (0)	trk.klclick3.com		52.85.151.61	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:45.098562002 CET	1.1.1.1	192.168.2.18	0x86b3	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:32:45.098562002 CET	1.1.1.1	192.168.2.18	0x86b3	No error (0)	clients.l.google.com		142.250.65.174	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:45.098998070 CET	1.1.1.1	192.168.2.18	0x789c	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:32:45.100358009 CET	1.1.1.1	192.168.2.18	0x2f3	No error (0)	accounts.google.com		142.251.16.84	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:45.797919035 CET	1.1.1.1	192.168.2.18	0xe7db	No error (0)	newdoc4.easyrecycling.co.za		169.239.217.18	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:47.421457052 CET	1.1.1.1	192.168.2.18	0xb56b	No error (0)	www.signable.us	signable.us		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:32:47.423224926 CET	1.1.1.1	192.168.2.18	0xc89e	No error (0)	www.signable.us	signable.us		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:32:47.423224926 CET	1.1.1.1	192.168.2.18	0xc89e	No error (0)	signable.us		35.214.8.169	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:49.042659998 CET	1.1.1.1	192.168.2.18	0x46f	No error (0)	signable.app		108.138.85.22	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:49.042659998 CET	1.1.1.1	192.168.2.18	0x46f	No error (0)	signable.app		108.138.85.117	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:49.042659998 CET	1.1.1.1	192.168.2.18	0x46f	No error (0)	signable.app		108.138.85.3	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:49.042659998 CET	1.1.1.1	192.168.2.18	0x46f	No error (0)	signable.app		108.138.85.53	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:49.497160912 CET	1.1.1.1	192.168.2.18	0x139d	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 16, 2024 22:32:49.497175932 CET	1.1.1.1	192.168.2.18	0xed32	No error (0)	www.google.com		142.251.40.100	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:52.910037041 CET	1.1.1.1	192.168.2.18	0xfff0	No error (0)	www.signable.us	signable.us		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:32:52.922764063 CET	1.1.1.1	192.168.2.18	0x4bf9	No error (0)	www.signable.us	signable.us		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:32:52.922764063 CET	1.1.1.1	192.168.2.18	0x4bf9	No error (0)	signable.us		35.214.8.169	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:53.454821110 CET	1.1.1.1	192.168.2.18	0x70dc	No error (0)	g10102301085.co		34.120.31.228	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:54.294513941 CET	1.1.1.1	192.168.2.18	0x72e4	No error (0)	cdn.firstpromoter.com	d2ycxbs0cq3yaz.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:32:54.300913095 CET	1.1.1.1	192.168.2.18	0x5531	No error (0)	cdn.firstpromoter.com	d2ycxbs0cq3yaz.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:32:54.300913095 CET	1.1.1.1	192.168.2.18	0x5531	No error (0)	d2ycxbs0cq3yaz.cloudfront.net		108.138.106.60	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:54.300913095 CET	1.1.1.1	192.168.2.18	0x5531	No error (0)	d2ycxbs0cq3yaz.cloudfront.net		108.138.106.121	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:54.300913095 CET	1.1.1.1	192.168.2.18	0x5531	No error (0)	d2ycxbs0cq3yaz.cloudfront.net		108.138.106.47	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:54.300913095 CET	1.1.1.1	192.168.2.18	0x5531	No error (0)	d2ycxbs0cq3yaz.cloudfront.net		108.138.106.13	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:55.704087973 CET	1.1.1.1	192.168.2.18	0x214	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:32:55.704087973 CET	1.1.1.1	192.168.2.18	0x214	No error (0)	static-cdn.hotjar.com		108.138.106.126	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:55.704087973 CET	1.1.1.1	192.168.2.18	0x214	No error (0)	static-cdn.hotjar.com		108.138.106.101	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:55.704087973 CET	1.1.1.1	192.168.2.18	0x214	No error (0)	static-cdn.hotjar.com		108.138.106.49	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:55.704087973 CET	1.1.1.1	192.168.2.18	0x214	No error (0)	static-cdn.hotjar.com		108.138.106.124	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:55.704194069 CET	1.1.1.1	192.168.2.18	0xb4a6	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:32:56.246332884 CET	1.1.1.1	192.168.2.18	0xcb64	No error (0)	js.driftt.com	dl7g9llrghqi1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:32:56.246332884 CET	1.1.1.1	192.168.2.18	0xcb64	No error (0)	dl7g9llrghqi1.cloudfront.net		18.238.55.7	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:56.246332884 CET	1.1.1.1	192.168.2.18	0xcb64	No error (0)	dl7g9llrghqi1.cloudfront.net		18.238.55.115	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:56.246332884 CET	1.1.1.1	192.168.2.18	0xcb64	No error (0)	dl7g9llrghqi1.cloudfront.net		18.238.55.6	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:56.246332884 CET	1.1.1.1	192.168.2.18	0xcb64	No error (0)	dl7g9llrghqi1.cloudfront.net		18.238.55.127	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:56.248931885 CET	1.1.1.1	192.168.2.18	0xd527	No error (0)	js.driftt.com	dl7g9llrghqi1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:32:56.557205915 CET	1.1.1.1	192.168.2.18	0xf7eb	No error (0)	signable.co.uk		35.214.8.169	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:57.354408026 CET	1.1.1.1	192.168.2.18	0xbcab	No error (0)	script.hotjar.com		18.164.96.87	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:57.354408026 CET	1.1.1.1	192.168.2.18	0xbcab	No error (0)	script.hotjar.com		18.164.96.90	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:57.354408026 CET	1.1.1.1	192.168.2.18	0xbcab	No error (0)	script.hotjar.com		18.164.96.77	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:57.354408026 CET	1.1.1.1	192.168.2.18	0xbcab	No error (0)	script.hotjar.com		18.164.96.46	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:57.575186968 CET	1.1.1.1	192.168.2.18	0xe30d	No error (0)	www.google.ca		142.250.80.35	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:57.575880051 CET	1.1.1.1	192.168.2.18	0x1f29	No error (0)	www.google.ca			65	IN (0x0001)	false
Jan 16, 2024 22:32:57.702903986 CET	1.1.1.1	192.168.2.18	0x8136	No error (0)	www.signable.co.uk	signable.co.uk		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:32:57.702903986 CET	1.1.1.1	192.168.2.18	0x8136	No error (0)	signable.co.uk		35.214.8.169	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:57.703197956 CET	1.1.1.1	192.168.2.18	0xa5de	No error (0)	www.signable.co.uk	signable.co.uk		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:32:58.067653894 CET	1.1.1.1	192.168.2.18	0xc5d2	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:32:58.067653894 CET	1.1.1.1	192.168.2.18	0xc5d2	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:58.067653894 CET	1.1.1.1	192.168.2.18	0xc5d2	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:58.067653894 CET	1.1.1.1	192.168.2.18	0xc5d2	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:58.067653894 CET	1.1.1.1	192.168.2.18	0xc5d2	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:58.072652102 CET	1.1.1.1	192.168.2.18	0x5294	No error (0)	www.google.ca			65	IN (0x0001)	false
Jan 16, 2024 22:32:58.072670937 CET	1.1.1.1	192.168.2.18	0xf705	No error (0)	www.google.ca		142.251.40.131	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:58.097223043 CET	1.1.1.1	192.168.2.18	0xf537	No error (0)	stats.g.doubleclick.net		172.253.62.157	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:58.097223043 CET	1.1.1.1	192.168.2.18	0xf537	No error (0)	stats.g.doubleclick.net		172.253.62.154	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:58.121254921 CET	1.1.1.1	192.168.2.18	0xa27a	No error (0)	vc.hotjar.io	vc-live-cf.hotjar.io		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:32:58.121800900 CET	1.1.1.1	192.168.2.18	0x8cc3	No error (0)	vc.hotjar.io	vc-live-cf.hotjar.io		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:32:58.121800900 CET	1.1.1.1	192.168.2.18	0x8cc3	No error (0)	vc-live-cf.hotjar.io		13.224.214.83	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:58.121800900 CET	1.1.1.1	192.168.2.18	0x8cc3	No error (0)	vc-live-cf.hotjar.io		13.224.214.85	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:58.121800900 CET	1.1.1.1	192.168.2.18	0x8cc3	No error (0)	vc-live-cf.hotjar.io		13.224.214.90	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:58.121800900 CET	1.1.1.1	192.168.2.18	0x8cc3	No error (0)	vc-live-cf.hotjar.io		13.224.214.39	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:32:58.714818954 CET	1.1.1.1	192.168.2.18	0xd8d7	No error (0)	www.signable.co.uk	signable.co.uk		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:32:58.820118904 CET	1.1.1.1	192.168.2.18	0x9bd5	No error (0)	www.signable.co.uk	signable.co.uk		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:32:58.820118904 CET	1.1.1.1	192.168.2.18	0x9bd5	No error (0)	signable.co.uk		35.214.8.169	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:02.556632996 CET	1.1.1.1	192.168.2.18	0xf7c5	No error (0)	js.driftt.com	dl7g9llrghqi1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:02.556632996 CET	1.1.1.1	192.168.2.18	0xf7c5	No error (0)	dl7g9llrghqi1.cloudfront.net		18.238.55.7	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:02.556632996 CET	1.1.1.1	192.168.2.18	0xf7c5	No error (0)	dl7g9llrghqi1.cloudfront.net		18.238.55.115	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:02.556632996 CET	1.1.1.1	192.168.2.18	0xf7c5	No error (0)	dl7g9llrghqi1.cloudfront.net		18.238.55.6	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:02.556632996 CET	1.1.1.1	192.168.2.18	0xf7c5	No error (0)	dl7g9llrghqi1.cloudfront.net		18.238.55.127	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:02.557506084 CET	1.1.1.1	192.168.2.18	0x8bce	No error (0)	js.driftt.com	dl7g9llrghqi1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:03.098489046 CET	1.1.1.1	192.168.2.18	0xdca3	No error (0)	customer.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:03.098489046 CET	1.1.1.1	192.168.2.18	0xdca3	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:03.098489046 CET	1.1.1.1	192.168.2.18	0xdca3	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:03.098489046 CET	1.1.1.1	192.168.2.18	0xdca3	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:03.098489046 CET	1.1.1.1	192.168.2.18	0xdca3	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:03.098545074 CET	1.1.1.1	192.168.2.18	0x5bb2	No error (0)	conversation.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:03.098545074 CET	1.1.1.1	192.168.2.18	0x5bb2	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:03.104425907 CET	1.1.1.1	192.168.2.18	0x9220	No error (0)	metrics.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:03.104425907 CET	1.1.1.1	192.168.2.18	0x9220	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:03.114954948 CET	1.1.1.1	192.168.2.18	0xed36	No error (0)	metrics.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:03.114954948 CET	1.1.1.1	192.168.2.18	0xed36	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:03.114954948 CET	1.1.1.1	192.168.2.18	0xed36	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:03.114954948 CET	1.1.1.1	192.168.2.18	0xed36	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:03.114954948 CET	1.1.1.1	192.168.2.18	0xed36	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:03.114954948 CET	1.1.1.1	192.168.2.18	0xed36	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:03.122634888 CET	1.1.1.1	192.168.2.18	0xd940	No error (0)	customer.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:03.140842915 CET	1.1.1.1	192.168.2.18	0x49e9	No error (0)	conversation.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:03.140842915 CET	1.1.1.1	192.168.2.18	0x49e9	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:03.140842915 CET	1.1.1.1	192.168.2.18	0x49e9	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:03.140842915 CET	1.1.1.1	192.168.2.18	0x49e9	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:03.140842915 CET	1.1.1.1	192.168.2.18	0x49e9	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:03.140842915 CET	1.1.1.1	192.168.2.18	0x49e9	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:03.209661961 CET	1.1.1.1	192.168.2.18	0x26ff	No error (0)	targeting.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:03.209661961 CET	1.1.1.1	192.168.2.18	0x26ff	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:03.250747919 CET	1.1.1.1	192.168.2.18	0x9a6b	No error (0)	targeting.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:03.250747919 CET	1.1.1.1	192.168.2.18	0x9a6b	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:03.250747919 CET	1.1.1.1	192.168.2.18	0x9a6b	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:03.250747919 CET	1.1.1.1	192.168.2.18	0x9a6b	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:03.250747919 CET	1.1.1.1	192.168.2.18	0x9a6b	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:03.250747919 CET	1.1.1.1	192.168.2.18	0x9a6b	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:06.395509958 CET	1.1.1.1	192.168.2.18	0xf595	No error (0)	bootstrap.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:06.395509958 CET	1.1.1.1	192.168.2.18	0xf595	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:06.395509958 CET	1.1.1.1	192.168.2.18	0xf595	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:06.395509958 CET	1.1.1.1	192.168.2.18	0xf595	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:06.395509958 CET	1.1.1.1	192.168.2.18	0xf595	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:06.395509958 CET	1.1.1.1	192.168.2.18	0xf595	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:06.402478933 CET	1.1.1.1	192.168.2.18	0x4b32	No error (0)	bootstrap.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:06.402478933 CET	1.1.1.1	192.168.2.18	0x4b32	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:07.228656054 CET	1.1.1.1	192.168.2.18	0xdb2	No error (0)	bootstrap.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:07.228656054 CET	1.1.1.1	192.168.2.18	0xdb2	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:07.228802919 CET	1.1.1.1	192.168.2.18	0x141f	No error (0)	bootstrap.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:07.228802919 CET	1.1.1.1	192.168.2.18	0x141f	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:07.228802919 CET	1.1.1.1	192.168.2.18	0x141f	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:07.228802919 CET	1.1.1.1	192.168.2.18	0x141f	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:07.228802919 CET	1.1.1.1	192.168.2.18	0x141f	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:07.228802919 CET	1.1.1.1	192.168.2.18	0x141f	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:07.749383926 CET	1.1.1.1	192.168.2.18	0xdd1a	No error (0)	metrics.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:07.749383926 CET	1.1.1.1	192.168.2.18	0xdd1a	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:07.749383926 CET	1.1.1.1	192.168.2.18	0xdd1a	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:07.749383926 CET	1.1.1.1	192.168.2.18	0xdd1a	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:07.749383926 CET	1.1.1.1	192.168.2.18	0xdd1a	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:07.749383926 CET	1.1.1.1	192.168.2.18	0xdd1a	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:07.749486923 CET	1.1.1.1	192.168.2.18	0x508d	No error (0)	metrics.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:07.749486923 CET	1.1.1.1	192.168.2.18	0x508d	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:07.916517019 CET	1.1.1.1	192.168.2.18	0xcfc1	No error (0)	5006190-40.chat.api.drift.com	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:07.917248964 CET	1.1.1.1	192.168.2.18	0xeeb2	No error (0)	5006190-40.chat.api.drift.com	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:07.917248964 CET	1.1.1.1	192.168.2.18	0xeeb2	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		50.16.35.88	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:07.917248964 CET	1.1.1.1	192.168.2.18	0xeeb2	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		44.198.64.140	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:07.917248964 CET	1.1.1.1	192.168.2.18	0xeeb2	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		52.21.5.158	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:07.917248964 CET	1.1.1.1	192.168.2.18	0xeeb2	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		44.193.27.146	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:07.917248964 CET	1.1.1.1	192.168.2.18	0xeeb2	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		18.232.244.110	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:07.917248964 CET	1.1.1.1	192.168.2.18	0xeeb2	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		3.213.164.161	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:07.917248964 CET	1.1.1.1	192.168.2.18	0xeeb2	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		44.217.66.4	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:07.917248964 CET	1.1.1.1	192.168.2.18	0xeeb2	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		3.233.166.149	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:24.061366081 CET	1.1.1.1	192.168.2.18	0x7a4	No error (0)	signable.app		108.138.85.3	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:24.061366081 CET	1.1.1.1	192.168.2.18	0x7a4	No error (0)	signable.app		108.138.85.117	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:24.061366081 CET	1.1.1.1	192.168.2.18	0x7a4	No error (0)	signable.app		108.138.85.22	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:24.061366081 CET	1.1.1.1	192.168.2.18	0x7a4	No error (0)	signable.app		108.138.85.53	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:25.279202938 CET	1.1.1.1	192.168.2.18	0x1b91	No error (0)	js.stripe.com	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:25.279202938 CET	1.1.1.1	192.168.2.18	0x1b91	No error (0)	stripecdn.map.fastly.net		151.101.192.176	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:25.279202938 CET	1.1.1.1	192.168.2.18	0x1b91	No error (0)	stripecdn.map.fastly.net		151.101.0.176	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:25.279202938 CET	1.1.1.1	192.168.2.18	0x1b91	No error (0)	stripecdn.map.fastly.net		151.101.128.176	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:25.279202938 CET	1.1.1.1	192.168.2.18	0x1b91	No error (0)	stripecdn.map.fastly.net		151.101.64.176	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:25.279241085 CET	1.1.1.1	192.168.2.18	0xb6f8	No error (0)	js.stripe.com	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:27.384744883 CET	1.1.1.1	192.168.2.18	0xc8e1	No error (0)	sentry.io		35.186.247.156	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:27.477099895 CET	1.1.1.1	192.168.2.18	0x18dc	No error (0)	app.launchdarkly.com	c3.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:27.477313042 CET	1.1.1.1	192.168.2.18	0x4c1c	No error (0)	app.launchdarkly.com	c3.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:27.816442013 CET	1.1.1.1	192.168.2.18	0xa0a6	No error (0)	js.stripe.com	dexeqbeb7giwr.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:27.816495895 CET	1.1.1.1	192.168.2.18	0x7a8	No error (0)	js.stripe.com	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:27.816495895 CET	1.1.1.1	192.168.2.18	0x7a8	No error (0)	stripecdn.map.fastly.net		151.101.128.176	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:27.816495895 CET	1.1.1.1	192.168.2.18	0x7a8	No error (0)	stripecdn.map.fastly.net		151.101.0.176	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:27.816495895 CET	1.1.1.1	192.168.2.18	0x7a8	No error (0)	stripecdn.map.fastly.net		151.101.64.176	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:27.816495895 CET	1.1.1.1	192.168.2.18	0x7a8	No error (0)	stripecdn.map.fastly.net		151.101.192.176	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:27.890983105 CET	1.1.1.1	192.168.2.18	0x2335	No error (0)	sentry.io		35.186.247.156	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:28.378736019 CET	1.1.1.1	192.168.2.18	0x9228	No error (0)	app.launchdarkly.com	c3.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:28.378881931 CET	1.1.1.1	192.168.2.18	0xab54	No error (0)	app.launchdarkly.com	c3.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:28.495104074 CET	1.1.1.1	192.168.2.18	0x219f	No error (0)	clientstream.launchdarkly.com	clientstream-ga.launchdarkly.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:28.495104074 CET	1.1.1.1	192.168.2.18	0x219f	No error (0)	clientstream-ga.launchdarkly.com		15.197.213.252	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:28.495104074 CET	1.1.1.1	192.168.2.18	0x219f	No error (0)	clientstream-ga.launchdarkly.com		3.33.235.18	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:28.495378017 CET	1.1.1.1	192.168.2.18	0x5ab4	No error (0)	clientstream.launchdarkly.com	clientstream-ga.launchdarkly.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:28.586272955 CET	1.1.1.1	192.168.2.18	0x3d3f	No error (0)	signable.app		108.139.47.2	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:28.586272955 CET	1.1.1.1	192.168.2.18	0x3d3f	No error (0)	signable.app		108.139.47.24	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:28.586272955 CET	1.1.1.1	192.168.2.18	0x3d3f	No error (0)	signable.app		108.139.47.106	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:28.586272955 CET	1.1.1.1	192.168.2.18	0x3d3f	No error (0)	signable.app		108.139.47.72	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:28.613377094 CET	1.1.1.1	192.168.2.18	0x9671	No error (0)	cdn.amplitude.com		52.85.150.185	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:28.613377094 CET	1.1.1.1	192.168.2.18	0x9671	No error (0)	cdn.amplitude.com		52.85.150.163	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:28.613377094 CET	1.1.1.1	192.168.2.18	0x9671	No error (0)	cdn.amplitude.com		52.85.150.230	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:28.613377094 CET	1.1.1.1	192.168.2.18	0x9671	No error (0)	cdn.amplitude.com		52.85.150.135	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:28.613740921 CET	1.1.1.1	192.168.2.18	0xa450	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:28.613740921 CET	1.1.1.1	192.168.2.18	0xa450	No error (0)	scontent.xx.fbcdn.net		157.240.241.1	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:28.613776922 CET	1.1.1.1	192.168.2.18	0xac52	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:28.644311905 CET	1.1.1.1	192.168.2.18	0x84	No error (0)	fast.trychameleon.com	k.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:28.647027969 CET	1.1.1.1	192.168.2.18	0x5be6	No error (0)	fast.trychameleon.com	k.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:28.721353054 CET	1.1.1.1	192.168.2.18	0x58a0	No error (0)	m.stripe.network	d1tcqh4bio8cty.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:28.721353054 CET	1.1.1.1	192.168.2.18	0x58a0	No error (0)	d1tcqh4bio8cty.cloudfront.net		18.160.10.74	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:28.721353054 CET	1.1.1.1	192.168.2.18	0x58a0	No error (0)	d1tcqh4bio8cty.cloudfront.net		18.160.10.8	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:28.721353054 CET	1.1.1.1	192.168.2.18	0x58a0	No error (0)	d1tcqh4bio8cty.cloudfront.net		18.160.10.62	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:28.721353054 CET	1.1.1.1	192.168.2.18	0x58a0	No error (0)	d1tcqh4bio8cty.cloudfront.net		18.160.10.111	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:28.723922968 CET	1.1.1.1	192.168.2.18	0x5ac1	No error (0)	m.stripe.network	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:29.156127930 CET	1.1.1.1	192.168.2.18	0xbc24	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:29.156127930 CET	1.1.1.1	192.168.2.18	0xbc24	No error (0)	static-cdn.hotjar.com		108.138.106.101	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:29.156127930 CET	1.1.1.1	192.168.2.18	0xbc24	No error (0)	static-cdn.hotjar.com		108.138.106.49	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:29.156127930 CET	1.1.1.1	192.168.2.18	0xbc24	No error (0)	static-cdn.hotjar.com		108.138.106.124	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:29.156127930 CET	1.1.1.1	192.168.2.18	0xbc24	No error (0)	static-cdn.hotjar.com		108.138.106.126	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:29.156620026 CET	1.1.1.1	192.168.2.18	0xfce9	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:29.290580988 CET	1.1.1.1	192.168.2.18	0x4095	No error (0)	js.hs-scripts.com		104.16.191.89	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:29.290580988 CET	1.1.1.1	192.168.2.18	0x4095	No error (0)	js.hs-scripts.com		104.16.188.89	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:29.290580988 CET	1.1.1.1	192.168.2.18	0x4095	No error (0)	js.hs-scripts.com		104.16.190.89	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:29.290580988 CET	1.1.1.1	192.168.2.18	0x4095	No error (0)	js.hs-scripts.com		104.16.187.89	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:29.290580988 CET	1.1.1.1	192.168.2.18	0x4095	No error (0)	js.hs-scripts.com		104.16.189.89	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:29.291480064 CET	1.1.1.1	192.168.2.18	0xfbc7	No error (0)	js.hs-scripts.com			65	IN (0x0001)	false
Jan 16, 2024 22:33:29.423892021 CET	1.1.1.1	192.168.2.18	0x7a89	No error (0)	public.profitwell.com	dna8twue3dlxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:29.423892021 CET	1.1.1.1	192.168.2.18	0x7a89	No error (0)	dna8twue3dlxq.cloudfront.net		18.238.49.122	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:29.423892021 CET	1.1.1.1	192.168.2.18	0x7a89	No error (0)	dna8twue3dlxq.cloudfront.net		18.238.49.117	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:29.423892021 CET	1.1.1.1	192.168.2.18	0x7a89	No error (0)	dna8twue3dlxq.cloudfront.net		18.238.49.45	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:29.423892021 CET	1.1.1.1	192.168.2.18	0x7a89	No error (0)	dna8twue3dlxq.cloudfront.net		18.238.49.111	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:29.424582005 CET	1.1.1.1	192.168.2.18	0x6bbc	No error (0)	public.profitwell.com	dna8twue3dlxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:29.463788033 CET	1.1.1.1	192.168.2.18	0x656e	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:29.463788033 CET	1.1.1.1	192.168.2.18	0x656e	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:29.464123011 CET	1.1.1.1	192.168.2.18	0x8f99	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:29.464123011 CET	1.1.1.1	192.168.2.18	0x8f99	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:29.883369923 CET	1.1.1.1	192.168.2.18	0x56b2	No error (0)	script.hotjar.com		18.164.96.77	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:29.883369923 CET	1.1.1.1	192.168.2.18	0x56b2	No error (0)	script.hotjar.com		18.164.96.87	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:29.883369923 CET	1.1.1.1	192.168.2.18	0x56b2	No error (0)	script.hotjar.com		18.164.96.90	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:29.883369923 CET	1.1.1.1	192.168.2.18	0x56b2	No error (0)	script.hotjar.com		18.164.96.46	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:29.908339977 CET	1.1.1.1	192.168.2.18	0x7d31	No error (0)	js.hs-banner.com			65	IN (0x0001)	false
Jan 16, 2024 22:33:29.908905983 CET	1.1.1.1	192.168.2.18	0x41c8	No error (0)	js.hs-banner.com		104.18.34.229	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:29.908905983 CET	1.1.1.1	192.168.2.18	0x41c8	No error (0)	js.hs-banner.com		172.64.153.27	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:30.337258101 CET	1.1.1.1	192.168.2.18	0x5332	No error (0)	www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:30.337362051 CET	1.1.1.1	192.168.2.18	0x394a	No error (0)	www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:30.344400883 CET	1.1.1.1	192.168.2.18	0x3141	No error (0)	m.stripe.com		34.208.216.197	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:30.344400883 CET	1.1.1.1	192.168.2.18	0x3141	No error (0)	m.stripe.com		54.201.135.255	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:30.344400883 CET	1.1.1.1	192.168.2.18	0x3141	No error (0)	m.stripe.com		44.238.119.32	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:30.344400883 CET	1.1.1.1	192.168.2.18	0x3141	No error (0)	m.stripe.com		34.208.13.71	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:30.344400883 CET	1.1.1.1	192.168.2.18	0x3141	No error (0)	m.stripe.com		44.236.139.182	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:30.344400883 CET	1.1.1.1	192.168.2.18	0x3141	No error (0)	m.stripe.com		34.210.100.189	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:30.344400883 CET	1.1.1.1	192.168.2.18	0x3141	No error (0)	m.stripe.com		44.236.240.28	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:30.344400883 CET	1.1.1.1	192.168.2.18	0x3141	No error (0)	m.stripe.com		34.211.13.104	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:30.524470091 CET	1.1.1.1	192.168.2.18	0x4956	No error (0)	js.hsleadflows.net		104.18.123.12	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:30.524470091 CET	1.1.1.1	192.168.2.18	0x4956	No error (0)	js.hsleadflows.net		104.18.126.12	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:30.524470091 CET	1.1.1.1	192.168.2.18	0x4956	No error (0)	js.hsleadflows.net		104.18.122.12	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:30.524470091 CET	1.1.1.1	192.168.2.18	0x4956	No error (0)	js.hsleadflows.net		104.18.124.12	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:30.524470091 CET	1.1.1.1	192.168.2.18	0x4956	No error (0)	js.hsleadflows.net		104.18.125.12	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:30.525399923 CET	1.1.1.1	192.168.2.18	0xf3c4	No error (0)	js.hsleadflows.net			65	IN (0x0001)	false
Jan 16, 2024 22:33:30.545986891 CET	1.1.1.1	192.168.2.18	0x9f2a	No error (0)	js.hs-analytics.net		104.16.79.186	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:30.545986891 CET	1.1.1.1	192.168.2.18	0x9f2a	No error (0)	js.hs-analytics.net		104.16.76.186	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:30.545986891 CET	1.1.1.1	192.168.2.18	0x9f2a	No error (0)	js.hs-analytics.net		104.16.77.186	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:30.545986891 CET	1.1.1.1	192.168.2.18	0x9f2a	No error (0)	js.hs-analytics.net		104.16.78.186	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:30.545986891 CET	1.1.1.1	192.168.2.18	0x9f2a	No error (0)	js.hs-analytics.net		104.16.80.186	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:30.546037912 CET	1.1.1.1	192.168.2.18	0x37e1	No error (0)	js.hs-analytics.net			65	IN (0x0001)	false
Jan 16, 2024 22:33:30.653538942 CET	1.1.1.1	192.168.2.18	0x621	No error (0)	vc.hotjar.io	vc-live-cf.hotjar.io		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:30.653538942 CET	1.1.1.1	192.168.2.18	0x621	No error (0)	vc-live-cf.hotjar.io		18.164.96.95	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:30.653538942 CET	1.1.1.1	192.168.2.18	0x621	No error (0)	vc-live-cf.hotjar.io		18.164.96.52	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:30.653538942 CET	1.1.1.1	192.168.2.18	0x621	No error (0)	vc-live-cf.hotjar.io		18.164.96.54	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:30.653538942 CET	1.1.1.1	192.168.2.18	0x621	No error (0)	vc-live-cf.hotjar.io		18.164.96.97	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:30.654007912 CET	1.1.1.1	192.168.2.18	0xf1d0	No error (0)	vc.hotjar.io	vc-live-cf.hotjar.io		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:31.305596113 CET	1.1.1.1	192.168.2.18	0x6643	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:31.305596113 CET	1.1.1.1	192.168.2.18	0x6643	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:31.309987068 CET	1.1.1.1	192.168.2.18	0xf75a	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:31.309987068 CET	1.1.1.1	192.168.2.18	0xf75a	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:33:31.327912092 CET	1.1.1.1	192.168.2.18	0x72a4	No error (0)	events.launchdarkly.com		54.175.64.186	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:31.327912092 CET	1.1.1.1	192.168.2.18	0x72a4	No error (0)	events.launchdarkly.com		54.234.71.121	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:31.327912092 CET	1.1.1.1	192.168.2.18	0x72a4	No error (0)	events.launchdarkly.com		18.213.222.105	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:31.327912092 CET	1.1.1.1	192.168.2.18	0x72a4	No error (0)	events.launchdarkly.com		204.236.237.132	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:31.327912092 CET	1.1.1.1	192.168.2.18	0x72a4	No error (0)	events.launchdarkly.com		54.196.208.134	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:31.327912092 CET	1.1.1.1	192.168.2.18	0x72a4	No error (0)	events.launchdarkly.com		52.72.242.104	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:31.327912092 CET	1.1.1.1	192.168.2.18	0x72a4	No error (0)	events.launchdarkly.com		23.23.137.6	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:31.327912092 CET	1.1.1.1	192.168.2.18	0x72a4	No error (0)	events.launchdarkly.com		35.153.82.190	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:31.337312937 CET	1.1.1.1	192.168.2.18	0x5b85	No error (0)	m.stripe.com		34.208.216.197	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:31.337312937 CET	1.1.1.1	192.168.2.18	0x5b85	No error (0)	m.stripe.com		44.236.139.182	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:31.337312937 CET	1.1.1.1	192.168.2.18	0x5b85	No error (0)	m.stripe.com		44.235.220.138	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:31.337312937 CET	1.1.1.1	192.168.2.18	0x5b85	No error (0)	m.stripe.com		34.211.13.104	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:31.337312937 CET	1.1.1.1	192.168.2.18	0x5b85	No error (0)	m.stripe.com		44.238.119.32	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:31.337312937 CET	1.1.1.1	192.168.2.18	0x5b85	No error (0)	m.stripe.com		34.213.170.160	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:31.337312937 CET	1.1.1.1	192.168.2.18	0x5b85	No error (0)	m.stripe.com		54.201.135.255	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:31.337312937 CET	1.1.1.1	192.168.2.18	0x5b85	No error (0)	m.stripe.com		34.215.162.111	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:31.435060024 CET	1.1.1.1	192.168.2.18	0x539f	No error (0)	forms.hubspot.com		104.19.155.83	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:31.435060024 CET	1.1.1.1	192.168.2.18	0x539f	No error (0)	forms.hubspot.com		104.19.154.83	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:31.435075045 CET	1.1.1.1	192.168.2.18	0xd073	No error (0)	forms.hubspot.com			65	IN (0x0001)	false
Jan 16, 2024 22:33:32.004205942 CET	1.1.1.1	192.168.2.18	0x9a15	No error (0)	forms.hubspot.com		104.19.154.83	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:32.004205942 CET	1.1.1.1	192.168.2.18	0x9a15	No error (0)	forms.hubspot.com		104.19.155.83	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:32.005798101 CET	1.1.1.1	192.168.2.18	0x92e0	No error (0)	forms.hubspot.com			65	IN (0x0001)	false
Jan 16, 2024 22:33:32.094836950 CET	1.1.1.1	192.168.2.18	0x1465	No error (0)	beacon-v2.helpscout.net		99.84.108.86	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:32.094836950 CET	1.1.1.1	192.168.2.18	0x1465	No error (0)	beacon-v2.helpscout.net		99.84.108.59	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:32.094836950 CET	1.1.1.1	192.168.2.18	0x1465	No error (0)	beacon-v2.helpscout.net		99.84.108.95	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:32.094836950 CET	1.1.1.1	192.168.2.18	0x1465	No error (0)	beacon-v2.helpscout.net		99.84.108.69	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:32.151978016 CET	1.1.1.1	192.168.2.18	0x6d21	No error (0)	stripe.com		54.187.159.182	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:32.151978016 CET	1.1.1.1	192.168.2.18	0x6d21	No error (0)	stripe.com		54.186.23.98	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:32.151978016 CET	1.1.1.1	192.168.2.18	0x6d21	No error (0)	stripe.com		54.187.119.242	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:32.157381058 CET	1.1.1.1	192.168.2.18	0x9417	No error (0)	track.hubspot.com		104.19.155.83	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:32.157381058 CET	1.1.1.1	192.168.2.18	0x9417	No error (0)	track.hubspot.com		104.19.154.83	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:32.157479048 CET	1.1.1.1	192.168.2.18	0x6919	No error (0)	track.hubspot.com			65	IN (0x0001)	false
Jan 16, 2024 22:33:32.708887100 CET	1.1.1.1	192.168.2.18	0x95ee	No error (0)	track.hubspot.com		104.19.155.83	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:32.708887100 CET	1.1.1.1	192.168.2.18	0x95ee	No error (0)	track.hubspot.com		104.19.154.83	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:32.709338903 CET	1.1.1.1	192.168.2.18	0xe433	No error (0)	track.hubspot.com			65	IN (0x0001)	false
Jan 16, 2024 22:33:33.165491104 CET	1.1.1.1	192.168.2.18	0xe766	No error (0)	d3hb14vkzrxvla.cloudfront.net		13.224.208.162	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:33.165491104 CET	1.1.1.1	192.168.2.18	0xe766	No error (0)	d3hb14vkzrxvla.cloudfront.net		13.224.208.77	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:33.165491104 CET	1.1.1.1	192.168.2.18	0xe766	No error (0)	d3hb14vkzrxvla.cloudfront.net		13.224.208.79	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:33.165491104 CET	1.1.1.1	192.168.2.18	0xe766	No error (0)	d3hb14vkzrxvla.cloudfront.net		13.224.208.114	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:34.120544910 CET	1.1.1.1	192.168.2.18	0x5348	No error (0)	d3hb14vkzrxvla.cloudfront.net		13.32.207.198	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:34.120544910 CET	1.1.1.1	192.168.2.18	0x5348	No error (0)	d3hb14vkzrxvla.cloudfront.net		13.32.207.28	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:34.120544910 CET	1.1.1.1	192.168.2.18	0x5348	No error (0)	d3hb14vkzrxvla.cloudfront.net		13.32.207.95	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:34.120544910 CET	1.1.1.1	192.168.2.18	0x5348	No error (0)	d3hb14vkzrxvla.cloudfront.net		13.32.207.216	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:33:38.631091118 CET	1.1.1.1	192.168.2.18	0xc906	No error (0)	analytics.google.com		142.250.81.238	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:34:14.503298998 CET	1.1.1.1	192.168.2.18	0x3eee	No error (0)	clients1.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2024 22:34:14.503298998 CET	1.1.1.1	192.168.2.18	0x3eee	No error (0)	clients.l.google.com		142.250.65.206	A (IP address)	IN (0x0001)	false
Jan 16, 2024 22:34:14.504065990 CET	1.1.1.1	192.168.2.18	0x9a0a	No error (0)	clients1.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.18	49728	169.239.217.18	80	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 16, 2024 22:32:46.201059103 CET	631	OUT	GET /?utm_source=Klaviyo&utm_medium=campaign&utm_campaign=Email%20Campaign%20-%20Jan%2016%202024%209%3A49%20AM&utm_id=01HM9S7XVNX5KZNJ6BW2ZXKQZ3&utm_term=&_kx=b6kQ3CGiCGpbevw6L-26XQ%3D%3D.VvBFe7 HTTP/1.1 Host: newdoc4.easyrecycling.co.za Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 16, 2024 22:32:47.325742006 CET	385	IN	HTTP/1.1 302 Moved Temporarily Date: Tue, 16 Jan 2024 21:32:46 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Location: https://www.signable.us/ Cache-Control: max-age=86400 Expires: Wed, 17 Jan 2024 21:32:46 GMT Vary: User-Agent X-XSS-Protection: 1; mode=block Content-Length: 0 Keep-Alive: timeout=5, max=100 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.18	49729	169.239.217.18	80	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 16, 2024 22:33:31.341053963 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.18	49724	52.85.151.72	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:45 UTC	1365	OUT	GET /ls/click?upn=bBwYdIep1AJAhlueKA-2FYA-2FiZB25bBJh74wxcvz7MbGRPW8Sumng75RGT1g5XS8cjbfmY-2B36p0K05EHzrwgenVucrqr4wcbtuSTwUvsCLkp7yNipUK-2B-2FNaDgkKPZvGU-2FeFk2oNL8Cwbk73-2FgVgciDWKs7EH5RHkh4JQ7UzYtmcj0T2v97DZCXopI01GYDKBnCGDu5JGSJeb2B-2BC-2BiwvHpQcN7uwZDtFJLVNCcASk2ytPbSbN6DXY3zGy2QIb4zfVuOOrvJvX4AYss6-2FMGf-2FLtoJ7EVDcQUFASKPodO4SDGaqD6Bmc8P77aL-2FkVxJju4Dgwb1F_PoPSv5Gw7kvm-2FaTPf5isV0F8OzVemx3-2BMda5lKttFwV5hYNASaBIOvhduvo23ZgNxryqZbnFqmZgF2SN317Jd5JsAvLWLiTx01vINjL-2F5lNDaOUHPgjGlCX5KJOQWKvYIEsyEtGsWDE-2FWVvyeRrrk4vCfS2JQMJn5yy-2FO8x3j7XGuUdh-2F6jheAyXeY-2FcbZn5oa9YDlMndYX-2FMs9037sfq0RD4LSVjBHfZJ41mqRz3cMyiWVWiBP-2Fepkutp7Xi6fORoNqe0OXl4XSRoLzjS-2F-2B2BwqUOD8bdrQqvj-2BGxMHjy87MVEE7U79i0WQowFwSCFN HTTP/1.1 Host: trk.klclick3.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:45 UTC	620	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 267 Connection: close Server: nginx Date: Tue, 16 Jan 2024 21:32:45 GMT Location: http://newdoc4.easyrecycling.co.za/?utm_source=Klaviyo&utm_medium=campaign&utm_campaign=Email%20Campaign%20-%20Jan%2016%202024%209%3A49%20AM&utm_id=01HM9S7XVNX5KZNJ6BW2ZXKQZ3&utm_term=&_kx=b6kQ3CGiCGpbevw6L-26XQ%3D%3D.VvBFe7 X-Robots-Tag: noindex, nofollow X-Cache: Miss from cloudfront Via: 1.1 de2ed3c94563fee614f35f9bc3f52d1c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C3 X-Amz-Cf-Id: rlqi_9gQcfDa0I9FLm4RPRvq-vZP1YevLcW7sv4A3WmtH7Ey5xhBNg==
2024-01-16 21:32:45 UTC	267	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 65 77 64 6f 63 34 2e 65 61 73 79 72 65 63 79 63 6c 69 6e 67 2e 63 6f 2e 7a 61 2f 3f 75 74 6d 5f 73 6f 75 72 63 65 3d 4b 6c 61 76 69 79 6f 26 61 6d 70 3b 75 74 6d 5f 6d 65 64 69 75 6d 3d 63 61 6d 70 61 69 67 6e 26 61 6d 70 3b 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 45 6d 61 69 6c 25 32 30 43 61 6d 70 61 69 67 6e 25 32 30 2d 25 32 30 4a 61 6e 25 32 30 31 36 25 32 30 32 30 32 34 25 32 30 39 25 33 41 34 39 25 32 30 41 4d 26 61 6d 70 3b 75 74 6d 5f 69 64 3d 30 31 48 4d 39 53 37 58 56 4e 58 35 4b 5a 4e 4a 36 42 57 32 5a 58 4b 51 5a 33 26 61 6d 70 3b 75 74 6d 5f 74 65 72 6d 3d 26 61 6d 70 3b 5f 6b 78 3d 62 36 6b 51 33 43 47 69 43 47 70 62 65 76 77 36 4c 2d 32 36 58 51 25 33 44 25 33 44 2e 56 76 42 46 65 37 22 3e Data Ascii: <a href="http://newdoc4.easyrecycling.co.za/?utm_source=Klaviyo&utm_medium=campaign&utm_campaign=Email%20Campaign%20-%20Jan%2016%202024%209%3A49%20AM&utm_id=01HM9S7XVNX5KZNJ6BW2ZXKQZ3&utm_term=&_kx=b6kQ3CGiCGpbevw6L-26XQ%3D%3D.VvBFe7">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.18	49726	142.250.65.174	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:45 UTC	752	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.149&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-117.0.5938.149 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:45 UTC	732	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-3pzNBRN2cn-FD14DapsTCw' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 16 Jan 2024 21:32:45 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 6224 X-Daystart: 48765 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-16 21:32:45 UTC	520	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 32 32 34 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 34 38 37 36 35 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6224" elapsed_seconds="48765"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2024-01-16 21:32:45 UTC	200	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2024-01-16 21:32:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.18	49727	142.251.16.84	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:45 UTC	680	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=BbHGp70uz66EZ7t8DrcLv9xxfcVljF6d19xSvROL7L8s_kahmrUkGGrzfI7BL5pg1a3XJnFf86rmNUVa2u3nk6kmb5VZimgBNCTkKSuYiNnaMk9c0LDBv3iqBpe7RSG5Qs2LVpVz9UzGN0Pyt1JXMcxIRKWB-Rje1Ftofm22_hQ
2024-01-16 21:32:45 UTC	1	OUT	Data Raw: 20 Data Ascii:
2024-01-16 21:32:45 UTC	1627	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 16 Jan 2024 21:32:45 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-BOz9Uhe8SprPxnO8cFbiJA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-16 21:32:45 UTC	23	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2024-01-16 21:32:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.18	49731	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:47 UTC	658	OUT	GET / HTTP/1.1 Host: www.signable.us Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:48 UTC	717	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Cache-Enabled: False X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Link: <https://www.signable.us/wp-json/>; rel="https://api.w.org/" Link: <https://www.signable.us/wp-json/wp/v2/pages/31030>; rel="alternate"; type="application/json" Link: <https://www.signable.us/>; rel=shortlink X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: W NC:000000 UP:
2024-01-16 21:32:48 UTC	15667	IN	Data Raw: 66 63 35 66 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 3c 68 65 61 64 3e 20 3c 21 2d 2d 20 41 6e 74 69 2d 66 6c 69 63 6b 65 72 20 73 6e 69 70 70 65 74 20 28 72 65 63 6f 6d 6d 65 6e 64 65 64 29 20 20 2d 2d 3e 20 3c 73 74 79 6c 65 3e 2e 61 73 79 6e 63 2d 68 69 64 65 20 7b 20 6f 70 61 63 69 74 79 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 7d 20 3c 2f 73 74 79 6c 65 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 74 69 74 6c 65 3e 53 69 67 6e 61 62 6c 65 20 2d 20 65 53 69 67 6e 61 74 75 72 65 20 53 6f 6c 75 74 69 6f 6e 3c 2f 74 69 74 6c 65 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 Data Ascii: fc5f<!doctype html><html lang="en-us" class="no-js"><head> ... Anti-flicker snippet (recommended) --> <style>.async-hide { opacity: 0 !important} </style><meta charset="utf-8" /><title>Signable - eSignature Solution</title><link rel="shortcut icon" hr
2024-01-16 21:32:48 UTC	16384	IN	Data Raw: 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 75 69 2d 66 6f 6f 74 65 72 3a 65 6d 70 74 79 2c 2e 75 69 2d 68 65 61 64 65 72 3a 65 6d 70 74 79 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 32 2e 36 38 37 35 65 6d 7d 2e 75 69 2d 66 6f 6f 74 65 72 20 2e 75 69 2d 74 69 74 6c 65 2c 2e 75 69 2d 68 65 61 64 65 72 20 2e 75 69 2d 74 69 74 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 2e 31 65 6d 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 30 20 33 30 25 3b 70 61 64 64 69 6e 67 3a 2e 37 65 6d 20 30 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 Data Ascii: r-style:solid;position:relative}.ui-footer:empty,.ui-header:empty{min-height:2.6875em}.ui-footer .ui-title,.ui-header .ui-title{font-size:1em;min-height:1.1em;text-align:center;display:block;margin:0 30%;padding:.7em 0;text-overflow:ellipsis;overflow:hidd
2024-01-16 21:32:49 UTC	16384	IN	Data Raw: 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 Data Ascii: lor: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-border-color{border-color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-border-color{border-color: var(--wp--preset--color--vivid-green-c
2024-01-16 21:32:49 UTC	16384	IN	Data Raw: 41 49 42 52 41 41 37 22 20 64 61 74 61 2d 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 69 67 6e 61 62 6c 65 2e 63 6f 2e 75 6b 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 6c 6f 67 6f 5f 6b 72 69 73 70 79 6b 72 65 6d 65 2e 70 6e 67 22 20 61 6c 74 3d 22 22 20 63 6c 61 73 73 3d 22 77 70 2d 69 6d 61 67 65 2d 34 31 30 36 37 20 6c 61 7a 79 6c 6f 61 64 22 2f 3e 3c 6e 6f 73 63 72 69 70 74 3e 3c 69 6d 67 20 64 65 63 6f 64 69 6e 67 3d 22 61 73 79 6e 63 22 20 77 69 64 74 68 3d 22 35 36 34 22 20 68 65 69 67 68 74 3d 22 32 32 30 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 69 67 6e 61 62 6c 65 2e 63 6f 2e 75 6b 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 6c 6f 67 6f 5f 6b 72 69 73 70 79 6b 72 65 6d 65 2e 70 6e 67 22 20 61 6c 74 3d 22 22 Data Ascii: AIBRAA7" data-src="https://signable.co.uk/wp-content/uploads/logo_krispykreme.png" alt="" class="wp-image-41067 lazyload"/><noscript><img decoding="async" width="564" height="220" src="https://signable.co.uk/wp-content/uploads/logo_krispykreme.png" alt=""
2024-01-16 21:32:49 UTC	16384	IN	Data Raw: 4c 41 41 41 41 41 41 42 41 41 45 41 41 41 49 42 52 41 41 37 22 20 64 61 74 61 2d 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 69 67 6e 61 62 6c 65 2e 63 6f 2e 75 6b 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 67 72 61 70 68 69 63 5f 75 6e 6c 69 6d 69 74 65 64 5f 75 73 65 72 73 2e 70 6e 67 22 20 61 6c 74 3d 22 22 20 63 6c 61 73 73 3d 22 77 70 2d 69 6d 61 67 65 2d 34 31 31 32 36 20 6c 61 7a 79 6c 6f 61 64 22 2f 3e 3c 6e 6f 73 63 72 69 70 74 3e 3c 69 6d 67 20 64 65 63 6f 64 69 6e 67 3d 22 61 73 79 6e 63 22 20 77 69 64 74 68 3d 22 31 30 30 30 22 20 68 65 69 67 68 74 3d 22 37 31 34 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 69 67 6e 61 62 6c 65 2e 63 6f 2e 75 6b 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 67 72 61 70 68 69 63 Data Ascii: LAAAAAABAAEAAAIBRAA7" data-src="https://signable.co.uk/wp-content/uploads/graphic_unlimited_users.png" alt="" class="wp-image-41126 lazyload"/><noscript><img decoding="async" width="1000" height="714" src="https://signable.co.uk/wp-content/uploads/graphic
2024-01-16 21:32:49 UTC	16384	IN	Data Raw: 22 3e 3c 68 33 20 63 6c 61 73 73 3d 22 77 70 2d 62 6c 6f 63 6b 2d 68 65 61 64 69 6e 67 20 6e 6f 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 22 20 69 64 3d 22 68 2d 67 6f 6f 67 6c 65 2d 64 6f 63 73 22 3e 3c 61 20 68 72 65 66 3d 22 2f 69 6e 74 65 67 72 61 74 69 6f 6e 73 2f 67 6f 6f 67 6c 65 2d 64 6f 63 73 2f 22 3e 47 6f 6f 67 6c 65 20 44 6f 63 73 3c 2f 61 3e 3c 2f 68 33 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 30 2e 35 65 6d 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 63 6c 61 73 73 3d 22 77 70 2d 62 6c 6f 63 6b 2d 73 70 61 63 65 72 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 75 74 65 6e 62 65 72 67 2d 61 63 66 2d 65 78 70 61 6e 64 61 62 6c 65 2d 62 6c 6f 63 6b 20 6f 6e Data Ascii: "><h3 class="wp-block-heading nomargin-bottom" id="h-google-docs"><a href="/integrations/google-docs/">Google Docs</a></h3></div></div><div style="height:0.5em" aria-hidden="true" class="wp-block-spacer"></div><div class="gutenberg-acf-expandable-block on
2024-01-16 21:32:49 UTC	16384	IN	Data Raw: 70 73 3a 2f 2f 77 77 77 2e 73 69 67 6e 61 62 6c 65 2e 75 73 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 74 65 61 6d 5f 73 69 67 6e 61 62 6c 65 5f 64 61 6e 2d 31 2e 6a 70 67 22 20 61 6c 74 3d 27 27 20 74 69 74 6c 65 3d 27 74 65 61 6d 5f 73 69 67 6e 61 62 6c 65 5f 64 61 6e 27 20 2f 3e 3c 6e 6f 73 63 72 69 70 74 3e 3c 69 6d 67 20 63 6c 61 73 73 3d 22 6c 61 7a 79 6c 6f 61 64 22 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 69 67 6e 61 62 6c 65 2e 75 73 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 74 65 61 6d 5f 73 69 67 6e 61 62 6c 65 5f 64 61 6e 2d 31 2e 6a 70 67 27 20 61 6c 74 3d 27 27 20 74 69 74 6c 65 3d 27 74 65 61 6d 5f 73 69 67 6e 61 62 6c 65 5f 64 61 6e 27 20 2f 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 73 70 61 Data Ascii: ps://www.signable.us/wp-content/uploads/team_signable_dan-1.jpg" alt='' title='team_signable_dan' /><noscript><img class="lazyload" src='https://www.signable.us/wp-content/uploads/team_signable_dan-1.jpg' alt='' title='team_signable_dan' /></noscript><spa
2024-01-16 21:32:49 UTC	16384	IN	Data Raw: 69 6e 67 20 68 61 73 2d 74 65 78 74 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 20 68 61 73 2d 62 6c 61 63 6b 2d 63 6f 6c 6f 72 20 68 61 73 2d 74 65 78 74 2d 63 6f 6c 6f 72 22 20 69 64 3d 22 68 2d 77 65 2d 72 65 2d 6d 6f 72 65 2d 74 68 61 6e 2d 6a 75 73 74 2d 61 2d 67 72 65 61 74 2d 70 72 6f 64 75 63 74 22 3e 57 65 e2 80 99 72 65 20 6d 6f 72 65 20 74 68 61 6e 20 6a 75 73 74 20 61 20 67 72 65 61 74 20 70 72 6f 64 75 63 74 2e 3c 2f 68 32 3e 3c 70 20 63 6c 61 73 73 3d 22 68 61 73 2d 74 65 78 74 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 20 68 61 73 2d 62 6c 61 63 6b 2d 63 6f 6c 6f 72 20 68 61 73 2d 74 65 78 74 2d 63 6f 6c 6f 72 22 3e 47 72 65 61 74 20 70 72 6f 64 75 63 74 2e 20 47 72 65 61 74 20 74 65 61 6d 2e 20 47 72 65 61 74 20 63 6f 6d 70 61 6e 79 2e 20 57 65 20 Data Ascii: ing has-text-align-center has-black-color has-text-color" id="h-we-re-more-than-just-a-great-product">Were more than just a great product.</h2><p class="has-text-align-center has-black-color has-text-color">Great product. Great team. Great company. We
2024-01-16 21:32:49 UTC	8357	IN	Data Raw: 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 27 3e 54 65 72 6d 73 20 26 20 63 6f 6e 64 69 74 69 6f 6e 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 27 2f 67 64 70 72 2f 27 20 74 61 72 67 65 74 3d 27 27 20 72 65 6c 3d 27 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 27 3e 47 44 50 52 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 27 2f 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 2f 27 20 74 61 72 67 65 74 3d 27 27 20 72 65 6c 3d 27 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 27 3e 50 72 69 76 61 63 79 20 70 6f 6c 69 63 79 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 27 2f 63 6f 6d 70 6c 69 61 6e 63 65 2d 61 6e 64 2d 64 61 74 61 2d 73 65 63 75 72 69 74 79 2f 27 20 74 61 72 67 65 Data Ascii: pener noreferrer'>Terms & conditions</a></li><li><a href='/gdpr/' target='' rel='noopener noreferrer'>GDPR</a></li><li><a href='/privacy-policy/' target='' rel='noopener noreferrer'>Privacy policy</a></li><li><a href='/compliance-and-data-security/' targe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.18	49732	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:49 UTC	587	OUT	GET /wp-includes/css/dist/block-library/style.min.css?ver=6.4.2 HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:49 UTC	376	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:49 GMT Content-Type: text/css Content-Length: 110035 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 09 Nov 2023 00:55:24 GMT ETag: "1add3-609ada8ac9d1c" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:49 UTC	16008	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 20 69 6d 67 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 Data Ascii: @charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-a
2024-01-16 21:32:49 UTC	16384	IN	Data Raw: 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 37 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 29 3a 62 65 66 6f 72 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 37 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 37 30 20 2e Data Ascii: -background,.wp-block-cover-image.has-background-dim.has-background-dim-70:not(.has-background-gradient):before,.wp-block-cover.has-background-dim.has-background-dim-70 .wp-block-cover__background,.wp-block-cover.has-background-dim.has-background-dim-70 .
2024-01-16 21:32:50 UTC	16384	IN	Data Raw: 2d 20 31 65 6d 29 7d 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 6d 61 67 65 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 32 6e 29 2c 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 74 65 6d 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 32 6e 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 6d 61 67 65 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 32 6e 29 2c 2e 77 70 Data Ascii: - 1em)}.blocks-gallery-grid:not(.has-nested-images) .blocks-gallery-image:nth-of-type(2n),.blocks-gallery-grid:not(.has-nested-images) .blocks-gallery-item:nth-of-type(2n),.wp-block-gallery:not(.has-nested-images) .blocks-gallery-image:nth-of-type(2n),.wp
2024-01-16 21:32:50 UTC	16384	IN	Data Raw: 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 6d 61 73 6b 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 7d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 20 3a 77 68 65 72 65 28 2e 68 61 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 7b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 20 3a 77 68 65 72 65 28 5b 73 74 79 6c 65 2a 3d 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 5d 29 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 20 3a 77 68 65 72 65 28 5b 73 74 79 6c 65 2a 3d 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 5d 29 7b 62 6f 72 64 65 72 2d 72 Data Ascii: epeat:no-repeat;-webkit-mask-size:contain;mask-size:contain}}.wp-block-image :where(.has-border-color){border-style:solid}.wp-block-image :where([style=border-top-color]){border-top-style:solid}.wp-block-image :where([style=border-right-color]){border-r
2024-01-16 21:32:50 UTC	16384	IN	Data Raw: 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6c 6f 73 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 61 69 6e 65 72 2d 63 6f 6e 74 65 6e 74 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 64 69 61 6c 6f 67 7b 67 61 70 3a 69 6e 68 65 72 69 74 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 69 74 65 6d 20 61 3a 6e 6f 74 28 2e 77 70 2d 65 6c 65 6d 65 6e 74 2d 62 Data Ascii: on__responsive-close,.wp-block-navigation__responsive-container,.wp-block-navigation__responsive-container-content,.wp-block-navigation__responsive-dialog{gap:inherit}:where(.wp-block-navigation.has-background .wp-block-navigation-item a:not(.wp-element-b
2024-01-16 21:32:50 UTC	16384	IN	Data Raw: 6c 6f 63 6b 2d 70 6f 73 74 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 69 6e 6b 20 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 69 6e 6b 5f 5f 61 72 72 6f 77 2d 70 72 65 76 69 6f 75 73 3a 6e 6f 74 28 2e 69 73 2d 61 72 72 6f 77 2d 63 68 65 76 72 6f 6e 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 69 6e 6b 20 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 69 6e 6b 5f 5f 61 72 72 6f 77 2d 6e 65 78 74 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 63 68 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 69 Data Ascii: lock-post-navigation-link .wp-block-post-navigation-link__arrow-previous:not(.is-arrow-chevron){transform:scaleX(1)}.wp-block-post-navigation-link .wp-block-post-navigation-link__arrow-next{display:inline-block;margin-left:1ch}.wp-block-post-navigation-li
2024-01-16 21:32:50 UTC	12107	IN	Data Raw: 73 2d 6f 6e 6c 79 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 64 65 76 69 61 6e 74 61 72 74 7b 63 6f 6c 6f 72 3a 23 30 32 65 34 39 62 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 64 72 69 62 62 62 6c 65 7b 63 6f 6c 6f 72 3a 23 65 39 34 63 38 39 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 64 72 6f 70 62 6f 78 7b 63 6f 6c 6f 72 3a 23 34 32 38 30 66 66 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 20 2e Data Ascii: s-only .wp-social-link-deviantart{color:#02e49b}.wp-block-social-links.is-style-logos-only .wp-social-link-dribbble{color:#e94c89}.wp-block-social-links.is-style-logos-only .wp-social-link-dropbox{color:#4280ff}.wp-block-social-links.is-style-logos-only .

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.18	49733	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:49 UTC	634	OUT	GET /wp-content/themes/Signable2019Theme/elements/blocks/content-archive/signable-contentarchive.css?ver=6.4.2 HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:49 UTC	344	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:49 GMT Content-Type: text/css Content-Length: 0 Connection: close Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "0-602f236e26fca" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.18	49734	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:49 UTC	632	OUT	GET /wp-content/themes/Signable2019Theme/elements/blocks/content-filter/signable-contentfilter.css?ver=6.4.2 HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:49 UTC	344	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:49 GMT Content-Type: text/css Content-Length: 0 Connection: close Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "0-602f236e26fca" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.18	49735	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:49 UTC	611	OUT	GET /wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles.css?ver=4.6.8 HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:50 UTC	374	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:49 GMT Content-Type: text/css Content-Length: 59240 Connection: close Vary: Accept-Encoding Last-Modified: Fri, 15 Dec 2023 14:22:18 GMT ETag: "e768-60c8d20b2cca4" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:50 UTC	16010	IN	Data Raw: 68 74 6d 6c 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 77 70 6d 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 2d 62 6c 6f 63 6b 20 2e 77 70 6d 6c 2d 6c 73 2d 64 72 6f 70 64 6f 77 6e 20 75 6c 20 6c 69 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 75 62 6d 65 6e 75 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 75 62 6d 65 6e 75 5f 5f 74 6f 67 67 6c 65 20 69 6d 67 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 32 70 78 7d 68 74 6d 6c 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 77 70 6d 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 2d 62 6c 6f 63 6b 20 2e 77 70 6d 6c 2d 6c 73 2d 64 72 6f 70 64 6f 77 6e 20 75 6c 20 6c 69 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 75 62 6d 65 6e 75 20 75 Data Ascii: html[dir="rtl"] .wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navigation-submenu .wp-block-navigation-submenu__toggle img{margin-left:12px}html[dir="rtl"] .wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navigation-submenu u
2024-01-16 21:32:50 UTC	16384	IN	Data Raw: 6e 2c 2e 61 6e 74 2d 69 6e 70 75 74 2d 6e 75 6d 62 65 72 2d 68 61 6e 64 6c 65 72 2d 75 70 2d 69 6e 6e 65 72 20 2e 61 6e 74 2d 69 6e 70 75 74 2d 6e 75 6d 62 65 72 2d 68 61 6e 64 6c 65 72 2d 64 6f 77 6e 2d 69 6e 6e 65 72 2d 69 63 6f 6e 2c 2e 61 6e 74 2d 69 6e 70 75 74 2d 6e 75 6d 62 65 72 2d 68 61 6e 64 6c 65 72 2d 64 6f 77 6e 2d 69 6e 6e 65 72 20 2e 61 6e 74 2d 69 6e 70 75 74 2d 6e 75 6d 62 65 72 2d 68 61 6e 64 6c 65 72 2d 75 70 2d 69 6e 6e 65 72 2d 69 63 6f 6e 2c 2e 61 6e 74 2d 69 6e 70 75 74 2d 6e 75 6d 62 65 72 2d 68 61 6e 64 6c 65 72 2d 64 6f 77 6e 2d 69 6e 6e 65 72 20 2e 61 6e 74 2d 69 6e 70 75 74 2d 6e 75 6d 62 65 72 2d 68 61 6e 64 6c 65 72 2d 64 6f 77 6e 2d 69 6e 6e 65 72 2d 69 63 6f 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 61 6e 74 2d 69 Data Ascii: n,.ant-input-number-handler-up-inner .ant-input-number-handler-down-inner-icon,.ant-input-number-handler-down-inner .ant-input-number-handler-up-inner-icon,.ant-input-number-handler-down-inner .ant-input-number-handler-down-inner-icon{display:block}.ant-i
2024-01-16 21:32:50 UTC	16384	IN	Data Raw: 3a 6f 70 74 69 6d 69 7a 65 4c 65 67 69 62 69 6c 69 74 79 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 33 25 3b 72 69 67 68 74 3a 31 31 70 78 3b 77 69 64 74 68 3a 31 32 70 78 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 36 70 78 3b 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 32 35 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d Data Ascii: :optimizeLegibility;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;position:absolute;top:53%;right:11px;width:12px;height:12px;margin-top:-6px;color:rgba(0,0,0,0.25);font-size:12px;line-height:1;text-align:center;pointer-events:none}
2024-01-16 21:32:50 UTC	10462	IN	Data Raw: 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 73 75 62 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 69 74 65 6d 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 70 6d 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 2d 62 6c 6f 63 6b 20 75 6c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 73 75 62 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 69 74 65 6d 20 61 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6d 69 6e 2d 77 69 64 74 68 3a 6d 61 78 2d 63 6f 6e 74 65 6e 74 3b 70 61 64 64 69 6e 67 3a 31 70 78 7d 2e 77 70 6d 6c 2d Data Ascii: navigation__submenu-container .wp-block-navigation-item{border-radius:0 !important}.wpml-language-switcher-block ul.wp-block-navigation__submenu-container .wp-block-navigation-item a{display:flex;align-items:center;min-width:max-content;padding:1px}.wpml-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.18	49736	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:49 UTC	590	OUT	GET /wp-content/plugins/cookie-notice/css/front.min.css?ver=2.4.13 HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:49 UTC	373	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:49 GMT Content-Type: text/css Content-Length: 5064 Connection: close Vary: Accept-Encoding Last-Modified: Fri, 01 Dec 2023 15:38:59 GMT ETag: "13c8-60b74912756b6" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:49 UTC	5064	IN	Data Raw: 23 63 6f 6f 6b 69 65 2d 6e 6f 74 69 63 65 2c 23 63 6f 6f 6b 69 65 2d 6e 6f 74 69 63 65 20 2e 63 6e 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 63 6e 2d 62 75 74 74 6f 6e 2d 63 75 73 74 6f 6d 29 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 41 72 69 61 6c 2c 52 6f 62 6f 74 6f 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 63 6f 6f 6b 69 65 2d 6e 6f 74 69 63 65 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 6d 69 6e 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f Data Ascii: #cookie-notice,#cookie-notice .cn-button:not(.cn-button-custom){font-family:-apple-system,BlinkMacSystemFont,Arial,Roboto,"Helvetica Neue",sans-serif;font-weight:400;font-size:13px;text-align:center}#cookie-notice{position:fixed;min-width:100%;height:auto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.18	49737	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:49 UTC	595	OUT	GET /wp-content/themes/Signable2019Theme/_/css/style.css?ver=1701765538 HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:50 UTC	376	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:49 GMT Content-Type: text/css Content-Length: 152013 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 05 Dec 2023 08:38:58 GMT ETag: "251cd-60bbf2a65618c" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:50 UTC	16008	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 2f 2a 21 0a 54 68 65 6d 65 20 4e 61 6d 65 3a 20 20 20 20 20 53 69 67 6e 61 62 6c 65 20 32 30 31 39 0a 54 68 65 6d 65 20 55 52 49 3a 20 20 20 20 20 20 68 74 74 70 73 3a 2f 2f 73 69 67 6e 61 62 6c 65 2e 63 6f 2e 75 6b 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 20 20 20 43 75 73 74 6f 6d 20 44 65 76 65 6c 6f 70 6d 65 6e 74 20 66 6f 72 20 53 69 67 6e 61 62 6c 65 0a 56 65 72 73 69 6f 6e 3a 20 20 20 20 20 20 20 20 31 2e 30 0a 41 75 74 68 6f 72 3a 20 20 20 20 20 20 20 20 20 54 65 61 6d 20 53 69 67 6e 61 62 6c 65 0a 54 65 78 74 20 44 6f 6d 61 69 6e 3a 20 20 20 20 73 69 67 6e 61 62 6c 65 0a 2a 2f 0a 2f 2a 20 49 6d 70 6f 72 74 20 61 62 73 74 72 61 63 74 20 73 74 79 6c 65 73 20 2a 2f 0a 2f 2a 20 54 68 65 20 6b 65 Data Ascii: @charset "UTF-8";/!Theme Name: Signable 2019Theme URI: https://signable.co.ukDescription: Custom Development for SignableVersion: 1.0Author: Team SignableText Domain: signable//* Import abstract styles // The ke
2024-01-16 21:32:50 UTC	16384	IN	Data Raw: 20 7d 0a 0a 2e 6e 6f 70 61 64 64 69 6e 67 2d 74 6f 70 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 0a 2e 6e 6f 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 0a 2e 6e 6f 70 61 64 64 69 6e 67 2d 6c 65 66 74 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 0a 2e 6e 6f 70 61 64 64 69 6e 67 2d 72 69 67 68 74 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 0a 2e 74 72 61 6e 73 2c 20 2e 66 6f 6f 74 65 72 2d 6d 61 69 6e 3a 62 65 66 6f 72 65 2c 20 2e 67 66 69 65 6c 64 20 69 6e 70 75 74 5b Data Ascii: }.nopadding-top { padding-top: 0 !important; }.nopadding-bottom { padding-bottom: 0 !important; }.nopadding-left { padding-left: 0 !important; }.nopadding-right { padding-right: 0 !important; }.trans, .footer-main:before, .gfield input[
2024-01-16 21:32:50 UTC	16384	IN	Data Raw: 20 20 2e 70 61 67 65 2d 63 6f 6e 74 65 6e 74 20 75 6c 2e 66 65 61 74 75 72 65 73 2d 6c 69 73 74 2e 61 6c 74 20 6c 69 3a 6c 61 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 20 7d 0a 20 20 20 20 20 20 20 20 2e 70 61 67 65 2d 63 6f 6e 74 65 6e 74 20 75 6c 2e 66 65 61 74 75 72 65 73 2d 6c 69 73 74 2e 61 6c 74 20 6c 69 3a 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 33 36 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 33 36 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 74 6f 70 3a 20 2d 33 70 78 3b 20 7d 0a 20 20 2e 70 61 67 65 2d 63 6f 6e 74 65 6e 74 20 75 6c 2e 74 61 62 73 2d 6c 69 73 74 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 Data Ascii: .page-content ul.features-list.alt li:last-child { margin-bottom: 0; } .page-content ul.features-list.alt li::before { width: 36px; height: 36px; top: -3px; } .page-content ul.tabs-list { margin-left
2024-01-16 21:32:50 UTC	16384	IN	Data Raw: 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 39 35 45 36 3b 20 7d 0a 20 20 20 20 20 20 2e 66 69 6c 74 65 72 2d 70 61 6e 65 6c 20 75 6c 20 6c 69 20 73 70 61 6e 2e 74 6f 70 2d 6c 61 62 65 6c 20 7b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 22 5f 2f 69 6d 67 2f 69 63 6f 6e 5f 64 6f 77 6e 5f 64 61 72 6b 2e 73 76 67 22 29 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 72 69 67 68 74 20 31 35 70 78 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 31 32 70 78 3b 20 7d 0a 20 Data Ascii: er { color: #0095E6; } .filter-panel ul li span.top-label { background-image: url("_/img/icon_down_dark.svg"); background-repeat: no-repeat; background-position: right 15px center; background-size: 12px; }
2024-01-16 21:32:50 UTC	16384	IN	Data Raw: 65 74 2d 63 6f 6c 6f 72 2d 62 6f 78 2e 6f 72 61 6e 67 65 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 44 39 41 30 35 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 20 20 2e 6f 66 66 73 65 74 2d 63 6f 6c 6f 72 2d 62 6f 78 2e 73 69 67 6e 61 62 6c 65 2d 70 75 72 70 6c 65 2d 6f 66 66 73 65 74 2d 63 6f 6c 6f 72 2c 20 2e 6f 66 66 73 65 74 2d 63 6f 6c 6f 72 2d 62 6f 78 2e 70 75 72 70 6c 65 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 39 36 36 34 46 46 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 20 20 2e 6f 66 66 73 65 74 2d 63 6f 6c 6f 72 2d 62 6f 78 2e 73 69 67 6e 61 62 6c 65 2d 70 69 6e 6b 2d 6f 66 66 73 65 74 2d 63 6f 6c 6f 72 2c 20 2e 6f 66 66 73 65 74 2d 63 6f 6c 6f 72 2d 62 6f 78 2e 70 69 Data Ascii: et-color-box.orange { background-color: #FD9A05 !important; } .offset-color-box.signable-purple-offset-color, .offset-color-box.purple { background-color: #9664FF !important; } .offset-color-box.signable-pink-offset-color, .offset-color-box.pi
2024-01-16 21:32:50 UTC	16384	IN	Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 2e 63 6f 75 6e 74 2d 64 65 73 63 72 69 70 74 69 6f 6e 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 0a 2e 77 70 2d 70 61 67 65 6e 61 76 69 2c 20 2e 70 61 67 69 6e 61 74 69 6f 6e 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 32 65 6d 20 30 20 33 2e 35 65 6d 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 7d 0a 20 20 2e 77 70 2d 70 61 67 65 6e 61 76 69 20 2e 70 61 Data Ascii: ---------------------------------------*/.count-description { margin-top: 3em !important; text-align: center; display: block !important; }.wp-pagenavi, .pagination { width: 100%; margin: 2em 0 3.5em; text-align: center; } .wp-pagenavi .pa
2024-01-16 21:32:50 UTC	16384	IN	Data Raw: 74 61 6c 69 7a 65 3b 20 7d 0a 20 20 20 20 20 20 20 20 20 20 2e 70 72 69 63 69 6e 67 2d 74 61 62 6c 65 5f 5f 63 6f 6e 74 61 69 6e 65 72 20 2e 74 61 62 6c 65 2d 63 6f 6c 75 6d 6e 20 2e 63 6f 6c 75 6d 6e 2d 72 6f 77 2e 65 6e 76 65 6c 6f 70 65 2d 72 6f 77 20 2e 6d 6f 64 61 6c 2d 74 72 69 67 67 65 72 2e 6e 6f 6d 61 72 67 69 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 3b 20 7d 0a 20 20 20 20 20 20 20 20 20 20 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 30 30 30 70 78 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 70 72 69 63 69 6e 67 2d 74 61 62 6c 65 5f 5f 63 6f 6e 74 61 69 6e 65 72 20 2e 74 61 62 6c 65 2d 63 6f 6c Data Ascii: talize; } .pricing-table__container .table-column .column-row.envelope-row .modal-trigger.nomargin { margin-top: 0; margin-left: 0; } @media (min-width: 1000px) { .pricing-table__container .table-col
2024-01-16 21:32:50 UTC	16384	IN	Data Raw: 61 64 64 69 6e 67 3a 20 32 35 70 78 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 52 6f 62 6f 74 6f 20 73 6c 61 62 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 63 6c 61 6d 70 28 31 2e 33 72 65 6d 2c 20 35 76 77 2c 20 31 2e 37 36 72 65 6d 29 3b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 61 32 61 39 61 64 3b 20 7d 0a 0a 2e 6d 6f 64 61 6c 20 62 75 74 74 6f 6e 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 35 70 78 3b 20 7d 0a 0a 2f 2a 20 4d 6f 64 61 6c 20 63 6f 6e 74 65 6e 74 20 73 74 79 6c 65 73 20 2a 2f 0a 2e 66 75 6c 6c 63 6f 6c 2e 6d 6f 64 61 6c 2d 66 75 6c 6c 63 6f 6c 20 7b 0a 20 20 6f 76 Data Ascii: adding: 25px; font-family: "Roboto slab", sans-serif; font-size: clamp(1.3rem, 5vw, 1.76rem); border-bottom: 1px solid #a2a9ad; }.modal button { margin-top: 25px; margin-bottom: 25px; }/* Modal content styles */.fullcol.modal-fullcol { ov
2024-01-16 21:32:50 UTC	16384	IN	Data Raw: 30 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 20 7d 0a 20 20 2e 66 69 6c 74 65 72 2d 70 61 6e 65 6c 20 2e 66 69 6c 74 65 72 2d 62 6f 78 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 20 7d 0a 20 20 20 20 2e 66 69 6c 74 65 72 2d 70 61 6e 65 6c 20 2e 66 69 6c 74 65 72 2d 62 6f 78 2e 66 69 72 73 74 20 7b 0a 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 30 3b 20 7d 0a 20 20 2e 66 69 6c 74 65 72 2d 70 61 6e 65 6c 20 2e 66 69 6c 74 65 72 2d 6c 69 73 74 2d 69 74 65 6d 2e 61 63 74 69 76 65 20 Data Ascii: 0; display: block; text-align: left; } .filter-panel .filter-box { width: 100%; background-color: #FFF; display: inline-block; } .filter-panel .filter-box.first { margin-right: 0; } .filter-panel .filter-list-item.active
2024-01-16 21:32:50 UTC	4933	IN	Data Raw: 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 20 7d 0a 0a 2e 73 6c 69 63 6b 2d 6c 69 73 74 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 20 7d 0a 20 20 2e 73 6c 69 63 6b 2d 6c 69 73 74 3a 66 6f 63 75 73 20 7b 0a 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 20 7d 0a 20 20 2e 73 6c 69 63 6b 2d 6c 69 73 74 2e 64 72 61 67 67 69 6e 67 20 7b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 68 61 6e 64 3b 20 7d 0a 0a 2e Data Ascii: kit-tap-highlight-color: transparent; }.slick-list { position: relative; overflow: hidden; display: block; margin: 0; padding: 0; } .slick-list:focus { outline: none; } .slick-list.dragging { cursor: pointer; cursor: hand; }.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.18	49739	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:50 UTC	560	OUT	GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:50 UTC	389	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:50 GMT Content-Type: application/javascript Content-Length: 87553 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 09 Nov 2023 00:55:24 GMT ETag: "15601-609ada8abfcf1" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:50 UTC	15995	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-01-16 21:32:50 UTC	16384	IN	Data Raw: 79 70 65 3c 36 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 70 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 62 2e 70 73 65 75 64 6f 73 2e 65 6d 70 74 79 28 65 29 7d 2c 68 65 61 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 71 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 69 6e 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 62 75 74 74 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 22 62 75 74 74 6f 6e 22 3d 3d 3d 65 2e 74 79 70 65 7c 7c 66 65 28 65 2c 22 62 75 74 74 6f 6e 22 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b Data Ascii: ype<6)return!1;return!0},parent:function(e){return!b.pseudos.empty(e)},header:function(e){return q.test(e.nodeName)},input:function(e){return N.test(e.nodeName)},button:function(e){return fe(e,"input")&&"button"===e.type\|\|fe(e,"button")},text:function(e){
2024-01-16 21:32:50 UTC	16384	IN	Data Raw: 74 69 6f 6e 28 29 7b 63 65 2e 64 65 71 75 65 75 65 28 65 2c 74 29 7d 2c 6f 29 29 2c 21 72 26 26 6f 26 26 6f 2e 65 6d 70 74 79 2e 66 69 72 65 28 29 7d 2c 5f 71 75 65 75 65 48 6f 6f 6b 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 2b 22 71 75 65 75 65 48 6f 6f 6b 73 22 3b 72 65 74 75 72 6e 20 5f 2e 67 65 74 28 65 2c 6e 29 7c 7c 5f 2e 61 63 63 65 73 73 28 65 2c 6e 2c 7b 65 6d 70 74 79 3a 63 65 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2e 61 64 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 2e 72 65 6d 6f 76 65 28 65 2c 5b 74 2b 22 71 75 65 75 65 22 2c 6e 5d 29 7d 29 7d 29 7d 7d 29 2c 63 65 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 65 3d 32 3b Data Ascii: tion(){ce.dequeue(e,t)},o)),!r&&o&&o.empty.fire()},_queueHooks:function(e,t){var n=t+"queueHooks";return _.get(e,n)\|\|_.access(e,n,{empty:ce.Callbacks("once memory").add(function(){_.remove(e,[t+"queue",n])})})}}),ce.fn.extend({queue:function(t,n){var e=2;
2024-01-16 21:32:50 UTC	16384	IN	Data Raw: 28 74 2c 21 31 29 29 2c 74 2e 69 6e 6e 65 72 48 54 4d 4c 3d 65 29 3b 74 3d 30 7d 63 61 74 63 68 28 65 29 7b 7d 7d 74 26 26 74 68 69 73 2e 65 6d 70 74 79 28 29 2e 61 70 70 65 6e 64 28 65 29 7d 2c 6e 75 6c 6c 2c 65 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 72 65 70 6c 61 63 65 57 69 74 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 5b 5d 3b 72 65 74 75 72 6e 20 24 65 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 63 65 2e 69 6e 41 72 72 61 79 28 74 68 69 73 2c 6e 29 3c 30 26 26 28 63 65 2e 63 6c 65 61 6e 44 61 74 61 28 53 65 28 74 68 69 73 29 29 2c 74 26 26 74 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 65 2c 74 68 69 73 29 29 7d Data Ascii: (t,!1)),t.innerHTML=e);t=0}catch(e){}}t&&this.empty().append(e)},null,e,arguments.length)},replaceWith:function(){var n=[];return $e(this,arguments,function(e){var t=this.parentNode;ce.inArray(this,n)<0&&(ce.cleanData(Se(this)),t&&t.replaceChild(e,this))}
2024-01-16 21:32:50 UTC	16384	IN	Data Raw: 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 20 31 3d 3d 3d 6f 26 26 63 65 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 74 3d 63 65 2e 70 72 6f 70 46 69 78 5b 74 5d 7c 7c 74 2c 69 3d 63 65 2e 70 72 6f 70 48 6f 6f 6b 73 5b 74 5d 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 69 26 26 22 73 65 74 22 69 6e 20 69 26 26 76 6f 69 64 20 30 21 3d 3d 28 72 3d 69 2e 73 65 74 28 65 2c 6e 2c 74 29 29 3f 72 3a 65 5b 74 5d 3d 6e 3a 69 26 26 22 67 65 74 22 69 6e 20 69 26 26 6e 75 6c 6c 21 3d 3d 28 72 3d 69 2e 67 65 74 28 65 2c 74 29 29 3f 72 3a 65 5b 74 5d 7d 2c 70 72 6f 70 48 6f 6f 6b 73 3a 7b 74 61 62 49 6e 64 65 78 Data Ascii: op:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return 1===o&&ce.isXMLDoc(e)\|\|(t=ce.propFix[t]\|\|t,i=ce.propHooks[t]),void 0!==n?i&&"set"in i&&void 0!==(r=i.set(e,n,t))?r:e[t]=n:i&&"get"in i&&null!==(r=i.get(e,t))?r:e[t]},propHooks:{tabIndex
2024-01-16 21:32:50 UTC	6022	IN	Data Raw: 3b 76 61 72 20 4a 74 2c 4b 74 3d 5b 5d 2c 5a 74 3d 2f 28 3d 29 5c 3f 28 3f 3d 26 7c 24 29 7c 5c 3f 5c 3f 2f 3b 63 65 2e 61 6a 61 78 53 65 74 75 70 28 7b 6a 73 6f 6e 70 3a 22 63 61 6c 6c 62 61 63 6b 22 2c 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 4b 74 2e 70 6f 70 28 29 7c 7c 63 65 2e 65 78 70 61 6e 64 6f 2b 22 5f 22 2b 6a 74 2e 67 75 69 64 2b 2b 3b 72 65 74 75 72 6e 20 74 68 69 73 5b 65 5d 3d 21 30 2c 65 7d 7d 29 2c 63 65 2e 61 6a 61 78 50 72 65 66 69 6c 74 65 72 28 22 6a 73 6f 6e 20 6a 73 6f 6e 70 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 3d 21 31 21 3d 3d 65 2e 6a 73 6f 6e 70 26 26 28 5a 74 2e 74 65 73 74 28 65 2e 75 72 6c 29 3f 22 75 72 6c 22 3a 22 73 74 72 Data Ascii: ;var Jt,Kt=[],Zt=/(=)\?(?=&\|$)\|\?\?/;ce.ajaxSetup({jsonp:"callback",jsonpCallback:function(){var e=Kt.pop()\|\|ce.expando+"_"+jt.guid++;return this[e]=!0,e}}),ce.ajaxPrefilter("json jsonp",function(e,t,n){var r,i,o,a=!1!==e.jsonp&&(Zt.test(e.url)?"url":"str

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.18	49740	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:50 UTC	568	OUT	GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:50 UTC	388	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:50 GMT Content-Type: application/javascript Content-Length: 13577 Connection: close Vary: Accept-Encoding Last-Modified: Wed, 09 Aug 2023 22:56:18 GMT ETag: "3509-6028563321ca4" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:50 UTC	13577	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 Data Ascii: /! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.18	49741	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:50 UTC	622	OUT	GET /wp-content/themes/Signable2019Theme/_/fonts/roboto/roboto-regular-webfont.woff2 HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.signable.us sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:51 UTC	667	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 16 Jan 2024 21:32:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Cache-Enabled: False X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Link: <https://www.signable.us/wp-json/>; rel="https://api.w.org/" X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: W NC:000000 UP:
2024-01-16 21:32:51 UTC	15717	IN	Data Raw: 62 63 34 32 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 3c 68 65 61 64 3e 20 3c 21 2d 2d 20 41 6e 74 69 2d 66 6c 69 63 6b 65 72 20 73 6e 69 70 70 65 74 20 28 72 65 63 6f 6d 6d 65 6e 64 65 64 29 20 20 2d 2d 3e 20 3c 73 74 79 6c 65 3e 2e 61 73 79 6e 63 2d 68 69 64 65 20 7b 20 6f 70 61 63 69 74 79 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 7d 20 3c 2f 73 74 79 6c 65 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 74 69 74 6c 65 3e 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 20 2d 20 53 69 67 6e 61 62 6c 65 3c 2f 74 69 74 6c 65 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 22 Data Ascii: bc42<!doctype html><html lang="en-us" class="no-js"><head> ... Anti-flicker snippet (recommended) --> <style>.async-hide { opacity: 0 !important} </style><meta charset="utf-8" /><title>Page not found - Signable</title><link rel="shortcut icon" href=""
2024-01-16 21:32:51 UTC	16384	IN	Data Raw: 68 3a 36 30 70 78 3b 68 65 69 67 68 74 3a 36 30 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 33 70 78 7d 7d 2e 75 69 2d 73 6c 69 64 65 72 2d 74 72 61 63 6b 20 2e 75 69 2d 62 74 6e 2e 75 69 2d 73 6c 69 64 65 72 2d 68 61 6e 64 6c 65 3a 61 63 74 69 76 65 2c 2e 75 69 2d 73 6c 69 64 65 72 2d 74 72 61 63 6b 20 2e 75 69 2d 62 74 6e 2e 75 69 2d 73 6c 69 64 65 72 2d 68 61 6e 64 6c 65 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 30 7d 20 3c 2f 73 74 79 6c 65 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 61 63 66 2d 73 69 67 6e 61 62 6c 65 2d 61 72 63 68 69 76 65 2d 73 74 79 6c 65 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 69 67 6e 61 62 6c Data Ascii: h:60px;height:60px;margin-left:-30px;margin-top:-23px}}.ui-slider-track .ui-btn.ui-slider-handle:active,.ui-slider-track .ui-btn.ui-slider-handle:focus{outline:0} </style><link rel='stylesheet' id='acf-signable-archive-style-css' href='https://www.signabl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.18	49742	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:50 UTC	619	OUT	GET /wp-content/themes/Signable2019Theme/_/fonts/roboto/roboto-bold-webfont.woff2 HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.signable.us sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:51 UTC	667	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 16 Jan 2024 21:32:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Cache-Enabled: False X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Link: <https://www.signable.us/wp-json/>; rel="https://api.w.org/" X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: W NC:000000 UP:
2024-01-16 21:32:51 UTC	15717	IN	Data Raw: 62 63 34 35 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 3c 68 65 61 64 3e 20 3c 21 2d 2d 20 41 6e 74 69 2d 66 6c 69 63 6b 65 72 20 73 6e 69 70 70 65 74 20 28 72 65 63 6f 6d 6d 65 6e 64 65 64 29 20 20 2d 2d 3e 20 3c 73 74 79 6c 65 3e 2e 61 73 79 6e 63 2d 68 69 64 65 20 7b 20 6f 70 61 63 69 74 79 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 7d 20 3c 2f 73 74 79 6c 65 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 74 69 74 6c 65 3e 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 20 2d 20 53 69 67 6e 61 62 6c 65 3c 2f 74 69 74 6c 65 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 22 Data Ascii: bc45<!doctype html><html lang="en-us" class="no-js"><head> ... Anti-flicker snippet (recommended) --> <style>.async-hide { opacity: 0 !important} </style><meta charset="utf-8" /><title>Page not found - Signable</title><link rel="shortcut icon" href=""
2024-01-16 21:32:51 UTC	16384	IN	Data Raw: 68 3a 36 30 70 78 3b 68 65 69 67 68 74 3a 36 30 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 33 70 78 7d 7d 2e 75 69 2d 73 6c 69 64 65 72 2d 74 72 61 63 6b 20 2e 75 69 2d 62 74 6e 2e 75 69 2d 73 6c 69 64 65 72 2d 68 61 6e 64 6c 65 3a 61 63 74 69 76 65 2c 2e 75 69 2d 73 6c 69 64 65 72 2d 74 72 61 63 6b 20 2e 75 69 2d 62 74 6e 2e 75 69 2d 73 6c 69 64 65 72 2d 68 61 6e 64 6c 65 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 30 7d 20 3c 2f 73 74 79 6c 65 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 61 63 66 2d 73 69 67 6e 61 62 6c 65 2d 61 72 63 68 69 76 65 2d 73 74 79 6c 65 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 69 67 6e 61 62 6c Data Ascii: h:60px;height:60px;margin-left:-30px;margin-top:-23px}}.ui-slider-track .ui-btn.ui-slider-handle:active,.ui-slider-track .ui-btn.ui-slider-handle:focus{outline:0} </style><link rel='stylesheet' id='acf-signable-archive-style-css' href='https://www.signabl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.18	49743	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:50 UTC	631	OUT	GET /wp-content/themes/Signable2019Theme/_/fonts/roboto-slab/robotoslab-regular-webfont.woff2 HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.signable.us sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:51 UTC	667	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 16 Jan 2024 21:32:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Cache-Enabled: False X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Link: <https://www.signable.us/wp-json/>; rel="https://api.w.org/" X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: W NC:000000 UP:
2024-01-16 21:32:51 UTC	15717	IN	Data Raw: 62 63 33 39 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 3c 68 65 61 64 3e 20 3c 21 2d 2d 20 41 6e 74 69 2d 66 6c 69 63 6b 65 72 20 73 6e 69 70 70 65 74 20 28 72 65 63 6f 6d 6d 65 6e 64 65 64 29 20 20 2d 2d 3e 20 3c 73 74 79 6c 65 3e 2e 61 73 79 6e 63 2d 68 69 64 65 20 7b 20 6f 70 61 63 69 74 79 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 7d 20 3c 2f 73 74 79 6c 65 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 74 69 74 6c 65 3e 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 20 2d 20 53 69 67 6e 61 62 6c 65 3c 2f 74 69 74 6c 65 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 22 Data Ascii: bc39<!doctype html><html lang="en-us" class="no-js"><head> ... Anti-flicker snippet (recommended) --> <style>.async-hide { opacity: 0 !important} </style><meta charset="utf-8" /><title>Page not found - Signable</title><link rel="shortcut icon" href=""
2024-01-16 21:32:51 UTC	16384	IN	Data Raw: 68 3a 36 30 70 78 3b 68 65 69 67 68 74 3a 36 30 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 33 70 78 7d 7d 2e 75 69 2d 73 6c 69 64 65 72 2d 74 72 61 63 6b 20 2e 75 69 2d 62 74 6e 2e 75 69 2d 73 6c 69 64 65 72 2d 68 61 6e 64 6c 65 3a 61 63 74 69 76 65 2c 2e 75 69 2d 73 6c 69 64 65 72 2d 74 72 61 63 6b 20 2e 75 69 2d 62 74 6e 2e 75 69 2d 73 6c 69 64 65 72 2d 68 61 6e 64 6c 65 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 30 7d 20 3c 2f 73 74 79 6c 65 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 61 63 66 2d 73 69 67 6e 61 62 6c 65 2d 61 72 63 68 69 76 65 2d 73 74 79 6c 65 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 69 67 6e 61 62 6c Data Ascii: h:60px;height:60px;margin-left:-30px;margin-top:-23px}}.ui-slider-track .ui-btn.ui-slider-handle:active,.ui-slider-track .ui-btn.ui-slider-handle:focus{outline:0} </style><link rel='stylesheet' id='acf-signable-archive-style-css' href='https://www.signabl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.18	49744	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:51 UTC	675	OUT	GET /wp-content/themes/Signable2019Theme/_/fonts/roboto/Roboto-Bold.ttf HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.signable.us sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.signable.us/wp-content/themes/Signable2019Theme/_/css/style.css?ver=1701765538 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:51 UTC	353	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:51 GMT Content-Type: font/ttf Content-Length: 128676 Connection: close Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "1f6a4-602f236e12f74" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:51 UTC	16031	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 47 44 45 46 70 b4 6d d8 00 01 93 80 00 00 01 ea 47 50 4f 53 77 d5 7c 6e 00 01 95 6c 00 00 56 4c 47 53 55 42 91 e9 67 c4 00 01 eb b8 00 00 0a ea 4f 53 2f 32 98 ae b1 a9 00 01 83 c8 00 00 00 60 63 6d 61 70 76 c7 f8 15 00 01 88 20 00 00 06 82 63 76 74 20 2b 7e 04 b5 00 01 91 8c 00 00 00 48 66 70 67 6d 5f f2 1a ab 00 01 8e a4 00 00 01 bc 67 61 73 70 00 08 00 13 00 01 93 74 00 00 00 0c 67 6c 79 66 cf 2c 4b 60 00 00 01 2c 00 01 6a 94 68 64 6d 78 1c 26 0d 17 00 01 84 28 00 00 03 f8 68 65 61 64 fc d7 d2 5c 00 01 73 bc 00 00 00 36 68 68 65 61 0b 26 09 b8 00 01 83 a4 00 00 00 24 68 6d 74 78 fa 96 d4 c7 00 01 73 f4 00 00 0f b0 6c 6f 63 61 c1 1f 62 f6 00 01 6b e0 00 00 07 da 6d 61 78 70 06 1c 03 11 00 01 6b c0 00 00 00 20 6e 61 6d Data Ascii: GDEFpmGPOSw\|nlVLGSUBgOS/2`cmapv cvt +~Hfpgm_gasptglyf,K`,jhdmx&(head\s6hhea&$hmtxslocabkmaxpk nam
2024-01-16 21:32:51 UTC	16384	IN	Data Raw: 25 34 02 24 23 22 04 02 10 12 04 20 24 12 25 11 23 11 21 32 16 15 14 07 16 16 14 16 17 15 23 26 35 34 26 23 27 33 32 36 35 34 26 27 23 56 bb 01 4b 01 80 01 4b bb be fe b7 bf c1 fe b7 bc 05 11 96 fe ee a3 9f fe ef 9c 9b 01 11 01 40 01 13 98 fd 25 97 01 19 97 ae 71 3d 31 07 0a 9b 0d 42 4d 9e 88 4a 5f 47 5d 8d 02 d9 ca 01 5a c7 c7 fe a6 ca cc fe a5 c6 c8 01 5a cb a6 01 1d ab a4 fe e0 fe ac fe e0 a7 aa 01 20 5b fe af 03 52 89 7e 70 3e 1f 6f a4 44 17 10 22 a0 4c 43 86 40 34 46 3b 01 00 01 00 a8 05 07 03 5a 05 ae 00 03 00 19 b2 00 04 05 11 12 39 00 b0 02 2f b1 00 02 b0 0a 2b 58 21 d8 1b f4 59 30 31 01 21 35 21 03 5a fd 4e 02 b2 05 07 a7 00 02 00 7e 03 a0 02 9a 05 c4 00 0a 00 14 00 31 00 b0 00 45 58 b0 03 2f 1b b1 03 18 3e 59 b0 0b d0 b0 0b 2f b1 08 02 b0 0a 2b Data Ascii: %4$#" $%#!2#&54&#'32654&'#VKK@%q=1BMJ_G]ZZ [R~p>oD"LC@4F;Z9/+X!Y01!5!ZN~1EX/>Y/+
2024-01-16 21:32:51 UTC	16384	IN	Data Raw: 04 d0 b0 02 10 b1 06 01 b0 0a 2b 58 21 d8 1b f4 59 b0 0d d0 b0 0e d0 b0 0f d0 b0 10 d0 b0 0b 10 b1 11 01 b0 0a 2b 58 21 d8 1b f4 59 30 31 01 21 11 21 11 21 03 33 36 12 37 13 21 11 33 21 21 11 21 03 02 05 c8 fe eb fc 92 fe e4 10 6e 59 61 11 2a 03 ba aa fb ff 02 2b fe 8f 19 1e fe 9a 01 66 fe 9b 02 56 4a 01 1f d4 02 82 fb 41 03 cc fe 81 fe 7f 00 00 01 00 11 00 00 07 fa 05 b0 00 15 00 8c 00 b0 00 45 58 b0 09 2f 1b b1 09 18 3e 59 b0 00 45 58 b0 0d 2f 1b b1 0d 18 3e 59 b0 00 45 58 b0 11 2f 1b b1 11 18 3e 59 b0 00 45 58 b0 02 2f 1b b1 02 0c 3e 59 b0 00 45 58 b0 06 2f 1b b1 06 0c 3e 59 b0 00 45 58 b0 14 2f 1b b1 14 0c 3e 59 b0 02 10 b0 10 d0 b0 10 2f b2 df 10 01 5d b2 6f 10 01 5d b2 40 10 01 5d b1 00 01 b0 0a 2b 58 21 d8 1b f4 59 b0 04 d0 b2 08 10 00 11 12 39 b0 Data Ascii: +X!Y+X!Y01!!!367!3!!!nYa*+fVJAEX/>YEX/>YEX/>YEX/>YEX/>YEX/>Y/]o]@]+X!Y9
2024-01-16 21:32:51 UTC	16384	IN	Data Raw: 1b f4 59 30 31 01 21 11 33 20 00 11 14 06 07 06 23 27 32 36 35 12 21 23 11 21 11 21 04 3d fd 73 a4 01 23 01 3d 47 49 90 ff 01 7e 81 02 fe c0 a5 fe d4 03 b9 04 bd fe 87 fe cd fe e8 7e e1 50 9e dd b2 af 01 6e fd a8 05 b0 00 01 00 6c fe e2 03 f7 04 3a 00 15 00 4c b2 0a 16 17 11 12 39 00 b0 09 2f b0 00 45 58 b0 14 2f 1b b1 14 14 3e 59 b0 00 45 58 b0 12 2f 1b b1 12 0c 3e 59 b0 14 10 b1 00 01 b0 0a 2b 58 21 d8 1b f4 59 b2 03 14 12 11 12 39 b0 03 2f b1 10 01 b0 0a 2b 58 21 d8 1b f4 59 30 31 01 21 15 33 20 00 15 16 02 07 27 36 36 37 34 26 23 23 11 21 11 21 03 4d fe 40 2f 01 0e 01 2b 02 ce a8 78 61 69 01 94 7f 34 fe df 02 e1 03 50 b7 fe ff e6 93 fe fb 38 c1 2c 80 63 7e 7d fe 53 04 3a 00 ff ff 00 11 fe 9b 08 7d 05 b0 00 26 00 da 00 00 00 07 01 e0 07 02 00 00 ff ff Data Ascii: Y01!3 #'265!#!!=s#=GI~~Pnl:L9/EX/>YEX/>Y+X!Y9/+X!Y01!3 '6674&##!!M@/+xai4P8,c~}S:}&
2024-01-16 21:32:51 UTC	16384	IN	Data Raw: b2 00 09 01 5d b2 70 09 01 5d 30 31 00 00 02 00 1f 00 00 03 f7 05 b0 00 05 00 09 00 38 b2 08 0a 0b 11 12 39 b0 08 10 b0 01 d0 00 b0 00 45 58 b0 00 2f 1b b1 00 18 3e 59 b0 00 45 58 b0 03 2f 1b b1 03 0c 3e 59 b2 06 00 03 11 12 39 b2 08 00 03 11 12 39 30 31 01 33 01 01 23 01 01 03 13 13 01 8f f7 01 71 fe 90 f7 fe 8f 01 eb cc ce cb 05 b0 fd 27 fd 29 02 d7 01 a9 fe 57 fe 58 01 a8 00 ff ff 00 8a 00 af 01 d1 05 16 00 27 00 12 00 0c 00 ba 00 07 00 12 00 0c 03 ed 00 02 00 5a 02 8d 02 37 04 39 00 03 00 07 00 2c 00 b0 00 45 58 b0 02 2f 1b b1 02 14 3e 59 b0 00 45 58 b0 06 2f 1b b1 06 14 3e 59 b0 02 10 b0 00 d0 b0 00 2f b0 04 d0 b0 05 d0 30 31 13 23 11 33 01 23 11 33 fd a3 a3 01 3a a3 a3 02 8d 01 ac fe 54 01 ac 00 00 01 00 34 ff 6b 01 54 01 13 00 08 00 1e 00 b0 09 2f Data Ascii: ]p]0189EX/>YEX/>Y99013#q')WX'Z79,EX/>YEX/>Y/01#3#3:T4kT/
2024-01-16 21:32:51 UTC	16384	IN	Data Raw: 1d 00 6a b2 14 1e 1f 11 12 39 00 b0 00 45 58 b0 00 2f 1b b1 00 14 3e 59 b0 00 45 58 b0 05 2f 1b b1 05 14 3e 59 b0 00 45 58 b0 0f 2f 1b b1 0f 0e 3e 59 b0 00 45 58 b0 15 2f 1b b1 15 0e 3e 59 b2 04 05 0f 11 12 39 b0 0f 10 b1 0b 01 b0 0a 2b 58 21 d8 1b f4 59 b2 14 05 0f 11 12 39 b0 00 10 b1 1a 01 b0 0a 2b 58 21 d8 1b f4 59 30 31 13 32 16 17 17 13 21 01 13 16 17 17 37 07 06 07 06 26 26 27 27 03 21 01 03 26 23 07 27 36 b6 6d 96 32 61 ce 01 25 fe 98 bd 2d 48 20 21 19 1d 24 58 6f 67 40 40 e2 fe e2 01 77 ac 2e 7f 41 06 4f 04 4a 68 75 db 01 a8 fd 22 fe 59 65 0f 04 01 e5 07 02 05 33 82 9c 91 fe 33 03 04 01 88 73 06 da 17 00 ff ff ff ac ff f5 02 a8 05 bf 02 26 00 c3 00 00 00 07 00 6a ff 4e ff eb ff ff 00 71 ff eb 04 10 05 cf 02 26 00 cb 00 00 00 06 00 6a 58 fb ff ff Data Ascii: j9EX/>YEX/>YEX/>YEX/>Y9+X!Y9+X!Y012!7&&''!&#'6m2a%-H !$Xog@@w.AOJhu"Ye33s&jNq&jX
2024-01-16 21:32:51 UTC	16384	IN	Data Raw: 07 05 1b 00 82 04 80 00 82 04 d9 00 49 05 a7 00 82 02 55 00 95 05 14 00 82 07 02 00 82 05 a6 00 82 05 86 00 56 05 29 00 82 04 f3 00 28 04 f2 00 02 05 15 00 16 02 55 ff ad 04 f2 00 02 04 82 00 49 04 73 00 5f 04 84 00 6c 02 b2 00 8a 04 5e 00 71 04 b8 00 82 04 86 00 42 04 ed 00 8b 04 0b 00 0d 04 12 00 15 02 b2 ff ac 04 5e 00 71 04 86 00 42 04 5e 00 71 06 91 00 53 04 80 00 82 04 75 00 84 04 eb 00 45 02 55 00 95 02 55 ff ad 04 78 00 28 05 2b 00 84 05 14 00 82 05 0d 00 1f 05 62 00 07 05 1b 00 82 04 75 00 84 04 80 00 82 05 9a 00 78 07 02 00 82 05 a7 00 82 05 86 00 56 05 a9 00 84 05 29 00 82 05 3c 00 56 04 f3 00 28 05 15 00 16 04 4a 00 44 04 53 00 48 04 8a 00 6f 04 86 00 42 04 81 00 6f 04 2c 00 42 04 04 00 03 04 12 00 15 04 53 00 48 03 5a 00 6f 04 1d 00 38 02 1f Data Ascii: IUV)(UIs_l^qB^qB^qSuEUUx(+buxV)<V(JDSHoBo,BSHZo8
2024-01-16 21:32:51 UTC	14341	IN	Data Raw: e1 00 f0 ff e1 00 f1 ff e1 00 f3 ff e1 00 f4 ff e1 00 f5 ff e1 00 f6 ff df 00 f8 ff e1 00 fa ff e1 00 fb ff e1 00 fe ff e1 01 00 ff e1 01 05 ff e1 01 09 ff ed 01 1a ff ef 01 20 ff eb 01 2b ff e1 01 36 ff e1 01 39 ff be 01 3a ff df 01 3c ff e1 01 3e ff e1 01 45 ff be 01 4c ff e9 01 53 ff e1 01 55 ff e1 01 57 ff e1 01 5c ff e1 01 63 ff f5 01 6d ff e0 02 1d ff e1 02 27 ff ef 02 28 ff ef 02 65 ff e1 02 67 ff e1 02 69 ff e1 02 6a ff e1 02 81 ff be 02 83 ff be 02 85 ff be 02 96 ff ef 02 bc ff e1 02 c2 ff ef 02 dd ff be 02 e1 ff e1 02 e3 ff e1 02 e5 ff ef 02 e8 ff e1 02 ed ff e1 02 ee ff ef 02 f6 ff ef 02 fd ff e1 03 03 ff e1 03 07 ff ef 03 0f ff ef 03 24 ff e1 03 26 ff e1 03 30 ff ef 03 32 ff ef 03 34 ff ef 03 38 ff e1 03 8d ff ef 03 8f ff ef 03 91 ff ef 03 93 Data Ascii: +69:<>ELSUW\cm'(egij$&0248

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.18	49745	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:51 UTC	697	OUT	GET /wp-content/themes/Signable2019Theme/_/fonts/roboto-slab/RobotoSlab-VariableFont_wght.ttf HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.signable.us sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.signable.us/wp-content/themes/Signable2019Theme/_/css/style.css?ver=1701765538 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:52 UTC	353	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:51 GMT Content-Type: font/ttf Content-Length: 203852 Connection: close Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "31c4c-602f236e0d983" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:52 UTC	16031	IN	Data Raw: 00 01 00 00 00 14 01 00 00 04 00 40 47 44 45 46 81 c5 34 21 00 00 0c 20 00 00 06 be 47 50 4f 53 4d 68 12 b3 00 00 5a f0 00 00 b0 fc 47 53 55 42 33 48 58 4c 00 00 03 88 00 00 04 08 48 56 41 52 40 64 0c 54 00 00 23 10 00 00 0b 71 4f 53 2f 32 74 29 82 26 00 00 02 08 00 00 00 60 53 54 41 54 83 18 7d f9 00 00 02 e8 00 00 00 9e 61 76 61 72 3e 53 40 01 00 00 01 a0 00 00 00 2e 63 6d 61 70 7a d3 a9 d9 00 00 1a 38 00 00 08 d6 66 76 61 72 91 1d 79 b0 00 00 02 68 00 00 00 7e 67 61 73 70 00 00 00 10 00 00 01 54 00 00 00 08 67 6c 79 66 90 17 86 19 00 01 0b ec 00 00 d0 e8 67 76 61 72 60 a6 b9 c3 00 01 dc d4 00 01 3f 76 68 65 61 64 1c 37 62 fd 00 00 01 d0 00 00 00 36 68 68 65 61 10 dd 05 d8 00 00 01 7c 00 00 00 24 68 6d 74 78 05 f5 00 27 00 00 2e 84 00 00 0e ac 6c 6f 63 Data Ascii: @GDEF4! GPOSMhZGSUB3HXLHVAR@dT#qOS/2t)&`STAT}avar>S@.cmapz8fvaryh~gaspTglyfgvar`?vhead7b6hhea\|$hmtx'.loc
2024-01-16 21:32:52 UTC	16384	IN	Data Raw: 3b 00 3c 00 eb 01 6b 00 bb 01 6c 01 6d 01 6e 01 6f 00 3d 01 70 00 e6 01 71 00 44 00 69 01 72 01 73 01 74 01 75 01 76 01 77 00 6b 01 78 01 79 01 7a 01 7b 01 7c 00 6c 01 7d 00 6a 01 7e 01 7f 01 80 00 6e 01 81 01 82 00 6d 00 a0 01 83 00 45 00 46 00 fe 01 00 00 6f 01 84 01 85 00 47 00 ea 01 86 01 01 00 48 00 70 01 87 01 88 00 72 01 89 01 8a 01 8b 01 8c 01 8d 00 73 01 8e 01 8f 00 71 01 90 01 91 01 92 01 93 01 94 00 49 00 4a 00 f9 01 95 01 96 01 97 00 4b 01 98 01 99 00 4c 00 d7 00 74 01 9a 00 76 00 77 01 9b 00 75 01 9c 01 9d 01 9e 01 9f 01 a0 00 4d 01 a1 01 a2 01 a3 00 4e 01 a4 01 a5 00 4f 01 a6 01 a7 01 a8 01 a9 00 e3 00 50 01 aa 00 51 01 ab 01 ac 01 ad 01 ae 01 af 00 78 00 52 00 79 01 b0 00 7b 01 b1 01 b2 01 b3 01 b4 01 b5 00 7c 01 b6 00 7a 01 b7 01 b8 01 b9 Data Ascii: ;<klmno=pqDirstuvwkxyz{\|l}j~nmEFoGHprsqIJKLtvwuMNOPQxRy{\|z
2024-01-16 21:32:52 UTC	16384	IN	Data Raw: 00 00 0a 00 00 00 03 00 4f 80 00 00 03 01 44 05 b0 00 0a 00 00 00 03 00 3f 80 00 00 03 01 3e 07 26 00 34 00 00 00 03 01 5f 04 d0 00 0a 01 26 00 03 00 87 80 00 00 03 02 92 00 00 00 0a 00 00 00 03 00 a0 80 00 00 03 01 3e 05 b0 00 0a 00 00 00 03 00 36 80 00 00 03 02 49 05 ef 00 34 00 0a 00 07 00 0e 80 00 00 03 02 49 05 b0 00 24 00 00 00 03 02 2b fe 60 00 0a 44 6a 00 03 01 0d 80 00 00 03 02 49 04 3a 00 0a 00 00 00 03 00 8d 80 00 00 03 01 6b 00 00 00 0a 00 00 00 03 00 d8 80 00 00 03 01 e3 05 b0 00 10 00 0a 00 02 00 01 80 00 00 06 00 00 80 00 00 03 02 18 05 b0 00 86 60 2a 00 03 02 18 06 19 00 0a 01 8e 00 03 01 03 80 00 00 03 02 18 06 18 00 6c 01 94 00 03 02 18 05 b0 00 62 7e 62 00 03 02 1b fe 72 00 0a 0a 4a 00 03 00 e5 80 00 00 03 02 18 06 18 00 48 00 00 00 03 Data Ascii: OD?>&4_&>6I4I$+`DjI:k`*lb~brJH
2024-01-16 21:32:52 UTC	16384	IN	Data Raw: 00 02 99 ff f3 00 00 02 a4 00 0d 00 00 03 a5 ff f3 00 00 03 a7 ff f3 00 00 03 a9 ff f3 00 00 00 0a 03 07 ff f5 4c f8 03 08 ff f5 4c f8 03 09 ff f5 4c f8 03 0a ff f5 4c f8 03 0b ff f5 4c f8 03 10 ff f5 4c f8 03 11 ff f5 4c f8 03 51 ff f5 4c f8 03 52 ff f5 4c f8 03 5e ff f5 4c f8 00 35 00 f4 00 00 05 3a 01 0e 00 00 05 3a 01 0f 00 00 05 3a 01 10 00 00 05 3a 01 11 00 00 05 3a 01 12 00 00 05 3a 01 13 00 00 05 3a 01 14 00 00 05 3a 01 16 00 00 05 3a 01 30 00 00 05 3a 01 f7 00 00 05 3a 01 f8 00 00 05 3a 02 00 00 00 05 3a 02 01 00 00 05 3a 02 02 00 00 05 3a 02 03 00 00 05 3a 02 04 00 00 05 3a 02 05 00 00 05 3a 02 07 00 00 05 3a 02 08 00 00 05 3a 02 0a 00 00 05 3a 02 0b 00 00 05 3a 02 0d ff ba 05 a2 02 12 ff d9 05 9c 02 13 00 00 05 3a 02 14 00 00 05 3a 02 15 00 00 Data Ascii: LLLLLLLQLRL^L5:::::::::0:::::::::::::::
2024-01-16 21:32:52 UTC	16384	IN	Data Raw: a0 ff e4 00 00 00 a1 ff ec 00 bc 00 a2 ff ec 00 bc 00 a3 ff ec 00 bc 00 a4 ff ec 00 bc 00 a5 ff ec 00 bc 00 a7 ff dd 00 00 00 a8 ff dd 00 00 00 a9 ff dd 00 00 00 aa ff dd 00 00 00 ab ff dd 00 00 00 ac ff dd 00 00 00 ad ff dd 00 00 00 ae ff dd 00 00 01 8a ff d5 0d 56 01 9f ff d5 0d 56 01 a2 ff d5 0d 56 01 ad ff e4 00 00 01 ae ff e4 00 00 01 b7 ff d5 0d 56 01 bd ff d5 0d 56 01 be ff dd 00 00 01 bf ff dd 00 00 01 c1 ff d5 0d 56 02 8a ff dd 00 00 02 94 ff dd 00 00 02 97 ff dd 00 00 00 01 00 37 80 00 00 08 00 19 ff 9f 00 44 01 3f 00 0e 00 00 01 77 ff a8 00 3e 01 e7 ff e3 00 38 01 fa ff ca 00 32 02 9d ff f5 0c 70 02 a4 ff de 0b 4c 02 aa ff e5 0c 70 00 04 00 0e 80 00 00 01 00 1d 80 00 00 04 00 0b 80 00 00 04 00 02 80 00 00 01 01 58 ff a4 0b 1a 00 16 01 58 ff c1 Data Ascii: VVVVVV7D?w>82pLpXX
2024-01-16 21:32:52 UTC	16384	IN	Data Raw: 2b 7d 11 8d 9b 02 91 92 01 05 fe fb 92 fd 6f 4e 4a 0d 05 81 0d 14 00 ff ff 00 17 ff ef 02 a6 05 3f 02 26 01 3f 00 00 00 06 03 77 ef b6 ff ff 00 18 ff ef 02 e5 06 18 02 26 01 3f 00 00 00 07 03 65 01 c3 00 00 ff ff 00 18 fe 4d 02 a6 05 3f 02 26 01 3f 00 00 00 07 03 75 01 0d 00 00 ff ff 00 18 fd e7 02 a6 05 3f 02 26 01 3f 00 00 00 07 03 74 00 e3 00 00 00 01 00 34 ff eb 04 9d 04 3a 00 1b 00 00 05 22 26 35 11 27 35 33 33 11 14 16 33 32 36 37 11 27 35 33 33 11 17 15 21 27 06 06 02 26 b0 c6 7c 7c c5 66 6c 69 89 23 91 91 c5 7c fe d3 0d 33 a1 15 e2 ef 01 e3 1c 7f fd 80 ad 82 55 4e 02 71 1c 7f fc 60 1c 7e a0 57 5e 00 ff ff 00 34 ff eb 04 9d 06 18 02 26 01 44 00 00 00 07 03 63 01 bd 00 00 ff ff 00 34 ff eb 04 9d 06 18 02 26 01 44 00 00 00 07 03 68 00 ff 00 00 ff ff Data Ascii: +}oNJ?&?w&?eM?&?u?&?t4:"&5'5333267'533!'&\|\|fli#\|3UNq`~W^4&Dc4&Dh
2024-01-16 21:32:52 UTC	16384	IN	Data Raw: 7e 01 cb fe cf 1c 7e ff ff 00 61 fe 99 05 13 04 3a 02 26 02 08 00 00 00 07 03 99 04 26 00 00 00 01 00 55 00 00 05 fe 04 3a 00 1f 00 00 33 35 37 11 27 35 3b 02 15 07 11 21 11 27 35 21 11 23 27 23 11 17 15 21 35 37 11 21 11 17 15 55 a3 a3 a3 c5 a3 a3 01 e1 a3 03 03 a9 0f e2 a3 fd f4 a3 fe 1f a3 7e 1c 03 05 1c 7f 7f 1c fe c7 01 39 1c 7f fe bf a5 fc fc 1c 7e 7e 1c 01 32 fe ce 1c 7e 00 01 00 55 fe e4 06 c7 04 3a 00 27 00 00 01 27 3e 02 35 26 26 23 23 11 17 15 21 35 37 11 21 11 17 15 21 35 37 11 27 35 33 21 15 07 11 33 32 16 16 15 0e 02 05 44 33 55 6b 31 02 b6 96 50 a3 fd f5 a3 fe 1e a3 fd f5 a3 a3 a3 04 0f a3 50 9d ef 87 01 58 ab fe e4 95 17 55 79 4c 93 a5 fe b8 1c 7e 7e 1c 03 04 fc fc 1c 7e 7e 1c 03 05 1c 7f 7f 1c fe e8 74 d6 93 5c c0 93 00 00 02 00 70 ff eb Data Ascii: ~~a:&&U:357'5;!'5!#'#!57!U~9~~2~U:''>5&&##!57!!57'53!32D3Uk1PPXUyL~~~~t\p
2024-01-16 21:32:52 UTC	16384	IN	Data Raw: 32 36 35 35 34 26 23 22 06 15 15 14 16 01 a6 6d 02 c7 6d 31 5c 88 4a 4a 87 5b 5b 88 4b 4a 87 5b 4a 50 52 4a 4a 50 51 fd 8a 5b 88 4b 4a 87 5b 5c 88 4a 4a 87 5b 49 51 52 4a 4a 50 51 6e 43 04 72 43 fb 0b 4f 88 55 4e 54 88 50 4f 88 55 4e 55 88 4f 7a 67 4b 4e 4a 68 68 4a 4e 4b 67 02 bb 4f 87 55 4d 55 88 50 4f 89 55 4d 55 87 4f 7a 66 4b 4d 4a 69 69 4a 4d 4a 67 00 06 00 4c ff eb 07 61 05 c5 00 03 00 15 00 23 00 41 00 4f 00 5d 00 00 25 27 01 17 01 22 26 26 35 35 34 36 36 33 32 16 16 15 15 14 06 06 27 32 36 35 35 34 26 23 22 06 15 15 14 16 01 22 26 26 35 35 34 36 36 33 32 16 17 36 36 33 32 16 16 15 15 14 06 06 23 22 26 27 06 06 27 32 36 35 35 34 26 23 22 06 15 15 14 16 21 32 36 35 35 34 26 23 22 06 15 15 14 16 01 ba 6d 02 c7 6d fc f9 5b 88 4b 4a 87 5b 5c 88 4a 4a Data Ascii: 26554&#"mm1\JJ[[KJ[JPRJJPQ[KJ[\JJ[IQRJJPQnCrCOUNTPOUNUOzgKNJhhJNKgOUMUPOUMUOzfKMJiiJMJgLa#AO]%'"&&5546632'26554&#""&&55466326632#"&''26554&#"!26554&#"mm[KJ[\JJ
2024-01-16 21:32:52 UTC	16384	IN	Data Raw: 00 02 01 01 02 00 63 40 00 89 01 e1 00 00 13 40 00 9a 01 ec 00 80 02 00 0c 00 08 00 01 00 08 00 00 02 01 01 02 00 75 40 00 89 01 e1 00 00 f4 40 00 9a 01 ec 00 80 02 00 0c 00 08 00 01 00 08 00 00 02 01 01 02 00 76 40 00 89 01 e1 00 00 f6 40 00 9a 01 ec 00 80 02 00 0c 00 0a 00 01 00 0c 20 00 03 02 01 01 02 00 75 41 00 88 00 89 00 e1 81 02 01 01 03 00 f4 40 00 9a 01 ec 00 00 80 02 00 0c 00 08 00 01 00 08 00 00 02 01 01 02 41 00 b6 00 89 01 e1 00 00 c2 40 00 9a 01 ec 00 80 02 00 0c 00 08 00 01 00 08 00 00 02 01 01 02 00 75 40 00 89 01 e1 00 00 f5 40 00 9a 01 ec 00 80 02 00 0c 00 08 00 01 00 08 00 00 02 01 01 02 00 75 40 00 89 01 e1 00 00 f8 40 00 9a 01 ec 00 80 02 00 0c 00 08 00 01 00 08 00 00 02 01 01 02 41 00 b4 00 89 01 e1 00 00 fa 40 00 9a 01 ec 00 80 02 Data Ascii: c@@u@@v@@ uA@A@u@@u@@A@
2024-01-16 21:32:52 UTC	16384	IN	Data Raw: 01 01 02 01 5b dc 01 e1 00 01 c1 03 01 ec 00 80 02 00 0c 00 06 00 01 00 06 00 00 02 01 01 02 01 64 dc 01 e1 00 01 af 03 01 ec 00 80 02 00 0c 00 93 00 01 00 bc 00 00 00 81 00 f0 40 00 95 26 fe e8 e1 dc df eb f4 f9 eb d0 b4 a4 8d 80 80 04 2b 2b 2b 2b 9d 9d 9d 9d bb 3f 3e 23 0b ef d4 c7 cc d4 e0 e3 de d7 c2 40 ff 35 05 de cf cf 5a 5a 7c 40 00 82 09 99 9d 9d 9d 9d 2b 2b 2b 2b 34 43 ff 4d ff 52 ff 74 ff 74 80 00 eb 81 80 0b b8 a3 ee 67 7b 76 76 76 72 6e 12 09 82 06 0b 20 31 e5 e5 65 49 81 05 49 65 e5 e5 31 19 82 0b 09 12 6e 72 76 76 76 7b 67 f4 a3 b8 81 06 b8 ab ab 56 56 9c b8 81 06 b8 9c 56 56 ac ab b8 84 17 d9 d9 d7 93 17 07 fe 07 0d 18 1d 06 0c 2a 3c 4f 5c 5e 61 fa 08 08 13 13 44 00 97 00 97 00 a2 00 a2 00 a3 04 35 33 40 5b 6e 4c 00 88 00 90 00 7c 00 81 00 Data Ascii: [d@&++++?>#@5ZZ\|@++++4CMRttg{vvvrn 1eIIe1nrvvv{gVVVV*<O\^aD53@[nL\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.18	49746	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:51 UTC	678	OUT	GET /wp-content/themes/Signable2019Theme/_/fonts/roboto/Roboto-Regular.ttf HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.signable.us sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.signable.us/wp-content/themes/Signable2019Theme/_/css/style.css?ver=1701765538 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:52 UTC	353	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:51 GMT Content-Type: font/ttf Content-Length: 129584 Connection: close Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "1fa30-602f236e13b2d" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:52 UTC	16031	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 47 44 45 46 70 b4 6d d8 00 01 9e 6c 00 00 01 ea 47 50 4f 53 64 5e 8a a1 00 01 a0 58 00 00 4e ea 47 53 55 42 91 e9 67 c4 00 01 ef 44 00 00 0a ea 4f 53 2f 32 97 82 b1 a8 00 01 8e 94 00 00 00 60 63 6d 61 70 76 c7 f8 15 00 01 92 ec 00 00 06 82 63 76 74 20 2b a8 07 9d 00 01 9c 78 00 00 00 54 66 70 67 6d 77 f8 60 ab 00 01 99 70 00 00 01 bc 67 61 73 70 00 08 00 13 00 01 9e 60 00 00 00 0c 67 6c 79 66 c4 df 70 36 00 00 01 2c 00 01 75 60 68 64 6d 78 f6 09 e4 e7 00 01 8e f4 00 00 03 f8 68 65 61 64 fc 6a d2 7a 00 01 7e 88 00 00 00 36 68 68 65 61 0a ba 09 8c 00 01 8e 70 00 00 00 24 68 6d 74 78 9c ce 33 72 00 01 7e c0 00 00 0f b0 6c 6f 63 61 e0 6a 7f c2 00 01 76 ac 00 00 07 da 6d 61 78 70 06 1c 03 09 00 01 76 8c 00 00 00 20 6e 61 6d Data Ascii: GDEFpmlGPOSd^XNGSUBgDOS/2`cmapvcvt +xTfpgmw`pgasp`glyfp6,u`hdmxheadjz~6hheap$hmtx3r~locajvmaxpv nam
2024-01-16 21:32:52 UTC	16384	IN	Data Raw: 14 9d 9d fe ec a1 a0 fe ec 9f 01 c0 8d 01 14 99 a9 80 7a 01 11 91 0e 03 10 73 b0 9c 48 58 4e 64 8a 02 d9 ca 01 5a c7 c7 fe a6 ca c5 fe a8 d1 cf 01 58 c7 ac fe db a6 a9 01 22 ac ab 01 21 a7 a5 fe dc f5 fe ae 03 51 83 7d 7b 41 32 9a 3d 56 26 10 24 b9 11 60 04 80 02 42 36 49 3d 00 00 01 00 8e 05 16 03 2e 05 a5 00 03 00 19 b2 01 04 05 11 12 39 00 b0 02 2f b1 00 10 b0 0a 2b 58 21 d8 1b f4 59 30 31 01 21 35 21 03 2e fd 60 02 a0 05 16 8f 00 02 00 82 03 c0 02 7c 05 c4 00 0b 00 16 00 31 00 b0 00 45 58 b0 03 2f 1b b1 03 1e 3e 59 b0 0c d0 b0 0c 2f b1 09 02 b0 0a 2b 58 21 d8 1b f4 59 b0 03 10 b1 12 02 b0 0a 2b 58 21 d8 1b f4 59 30 31 13 34 36 33 32 16 15 14 06 23 22 26 17 32 36 35 34 26 23 22 06 14 16 82 95 6a 68 93 93 68 69 96 ff 36 4a 4a 36 37 4b 4b 04 c0 68 9c 9b Data Ascii: zsHXNdZX"!Q}{A2=V&$`B6I=.9/+X!Y01!5!.`\|1EX/>Y/+X!Y+X!Y014632#"&2654&#"jhhi6JJ67KKh
2024-01-16 21:32:52 UTC	16384	IN	Data Raw: 02 03 6a 01 65 d5 02 6f fa ed 04 75 fe 54 fb fe 9e 00 01 00 1b 00 00 07 35 05 b0 00 15 00 87 00 b0 00 45 58 b0 09 2f 1b b1 09 1e 3e 59 b0 00 45 58 b0 0d 2f 1b b1 0d 1e 3e 59 b0 00 45 58 b0 11 2f 1b b1 11 1e 3e 59 b0 00 45 58 b0 02 2f 1b b1 02 12 3e 59 b0 00 45 58 b0 06 2f 1b b1 06 12 3e 59 b0 00 45 58 b0 14 2f 1b b1 14 12 3e 59 b0 02 10 b0 10 d0 b0 10 2f b2 2f 10 01 5d b2 cf 10 01 5d b1 00 01 b0 0a 2b 58 21 d8 1b f4 59 b0 04 d0 b2 08 10 00 11 12 39 b0 10 10 b0 0b d0 b2 13 00 10 11 12 39 30 31 01 23 11 23 11 23 01 23 01 01 33 01 33 11 33 11 33 01 33 01 01 23 04 a8 9c c0 a5 fe 64 f0 01 ea fe 3c e3 01 83 a5 c0 9e 01 83 e2 fe 3c 01 ea ef 02 98 fd 68 02 98 fd 68 03 00 02 b0 fd 88 02 78 fd 88 02 78 fd 51 fc ff 00 00 01 00 50 ff ec 04 6a 05 c4 00 28 00 75 b2 03 Data Ascii: jeouT5EX/>YEX/>YEX/>YEX/>YEX/>YEX/>Y//]]+X!Y9901####33333#d<<hhxxQPj(u
2024-01-16 21:32:52 UTC	16384	IN	Data Raw: ab 52 3c 66 6e 5a 32 02 11 ee 97 7d 66 7b 38 7d fd f7 05 da 78 8c fe da fe fa 04 b7 d4 95 fd fb 94 27 73 67 67 62 00 00 01 00 a2 00 00 04 23 07 00 00 09 00 36 b2 03 0a 0b 11 12 39 00 b0 08 2f b0 00 45 58 b0 06 2f 1b b1 06 1e 3e 59 b0 00 45 58 b0 04 2f 1b b1 04 12 3e 59 b0 06 10 b1 02 01 b0 0a 2b 58 21 d8 1b f4 59 30 31 01 23 15 21 11 23 11 21 11 33 04 23 03 fd 42 c0 02 c8 b9 05 18 06 fa ee 05 b0 01 50 00 01 00 91 00 00 03 42 05 76 00 07 00 2f 00 b0 06 2f b0 00 45 58 b0 04 2f 1b b1 04 1a 3e 59 b0 00 45 58 b0 02 2f 1b b1 02 12 3e 59 b0 04 10 b1 00 01 b0 0a 2b 58 21 d8 1b f4 59 30 31 01 21 11 23 11 21 11 33 03 42 fe 09 ba 01 f8 b9 03 a1 fc 5f 04 3a 01 3c 00 00 01 00 b1 fe df 04 7c 05 b0 00 15 00 5e b2 0a 16 17 11 12 39 00 b0 09 2f b0 00 45 58 b0 14 2f 1b b1 Data Ascii: R<fnZ2}f{8}x'sggb#69/EX/>YEX/>Y+X!Y01#!#!3#BPBv//EX/>YEX/>Y+X!Y01!#!3B_:<\|^9/EX/
2024-01-16 21:32:52 UTC	16384	IN	Data Raw: 50 a6 88 72 b9 34 0b 18 72 92 50 86 a6 05 f7 a6 85 73 bc 35 09 16 75 90 50 88 a5 02 0f 93 ff 00 91 b8 b1 b3 b6 8f 01 00 97 18 93 01 00 92 b7 b3 b1 b9 fe c1 f3 0d b1 dc bc a3 27 2a 63 c0 61 dc b9 08 ae df bd a8 1f 2a 61 c5 60 de b8 00 01 ff b0 fe 4b 02 8e 06 15 00 15 00 3f b2 02 16 17 11 12 39 00 b0 00 45 58 b0 0e 2f 1b b1 0e 20 3e 59 b0 00 45 58 b0 03 2f 1b b1 03 14 3e 59 b1 08 01 b0 0a 2b 58 21 d8 1b f4 59 b0 0e 10 b1 13 01 b0 0a 2b 58 21 d8 1b f4 59 30 31 05 14 06 23 22 27 37 16 33 32 35 11 34 36 33 32 17 07 26 23 22 15 01 65 a4 9e 39 3a 12 2e 21 9b b1 a1 3c 54 18 25 36 b6 6b a2 a8 14 91 0d b1 05 19 aa be 15 8e 0b db 00 02 00 65 01 18 04 0b 03 f4 00 15 00 2b 00 91 b2 1c 2c 2d 11 12 39 b0 1c 10 b0 05 d0 00 b0 03 2f b2 0f 03 01 5d b0 0d d0 b0 0d 2f b2 00 Data Ascii: Pr4rPs5uP'caa`K?9EX/ >YEX/>Y+X!Y+X!Y01#"'73254632&#"e9:.!<T%6ke+,-9/]/
2024-01-16 21:32:52 UTC	16384	IN	Data Raw: 30 31 21 07 06 15 14 33 32 37 17 06 23 22 26 35 34 37 27 06 23 22 26 27 11 33 11 14 33 32 37 11 33 11 03 d2 3a 71 4e 30 34 0d 46 5a 59 67 a6 04 6c d1 ad b5 01 b9 c8 d4 46 b9 2d 5b 56 48 1a 79 2c 68 56 8f 6a 65 7f c9 c5 02 c0 fd 45 f6 9e 03 13 fb c6 ff ff 00 3d 00 00 06 ed 07 36 02 26 00 3b 00 00 01 07 00 9e 01 c5 01 36 00 14 00 b0 00 45 58 b0 03 2f 1b b1 03 1e 3e 59 b1 17 06 f4 30 31 ff ff 00 2b 00 00 05 d3 06 00 02 26 00 5b 00 00 01 07 00 9e 01 24 00 00 00 14 00 b0 00 45 58 b0 0c 2f 1b b1 0c 1a 3e 59 b1 0f 01 f4 30 31 ff ff 00 0f 00 00 04 bb 07 36 02 26 00 3d 00 00 01 07 00 9e 00 92 01 36 00 14 00 b0 00 45 58 b0 01 2f 1b b1 01 1e 3e 59 b1 0b 06 f4 30 31 ff ff 00 16 fe 4b 03 b0 06 00 02 26 00 5d 00 00 01 06 00 9e 25 00 00 14 00 b0 00 45 58 b0 0f 2f 1b b1 Data Ascii: 01!327#"&547'#"&'33273:qN04FZYglF-[VHy,hVjeE=6&;6EX/>Y01+&[$EX/>Y016&=6EX/>Y01K&]%EX/
2024-01-16 21:32:52 UTC	16384	IN	Data Raw: 00 c4 f0 11 2e 00 00 00 00 d5 01 52 f4 fa 1b fd d5 09 30 08 73 00 00 00 09 00 02 00 00 00 00 00 00 03 8c 00 64 00 00 00 00 00 00 00 00 01 fb 00 00 01 fb 00 00 02 0f 00 a0 02 8f 00 88 04 ed 00 77 04 7e 00 6e 05 dc 00 69 04 f9 00 65 01 65 00 67 02 bc 00 85 02 c8 00 26 03 72 00 1c 04 89 00 4e 01 92 00 1d 02 35 00 25 02 1b 00 90 03 4c 00 12 04 7e 00 73 04 7e 00 aa 04 7e 00 5d 04 7e 00 5e 04 7e 00 35 04 7e 00 9a 04 7e 00 84 04 7e 00 4d 04 7e 00 70 04 7e 00 64 01 f0 00 86 01 b1 00 29 04 11 00 48 04 64 00 98 04 2e 00 86 03 c7 00 4b 07 2f 00 6a 05 38 00 1c 04 fb 00 a9 05 35 00 77 05 3f 00 a9 04 8c 00 a9 04 6c 00 a9 05 73 00 7a 05 b4 00 a9 02 2d 00 b7 04 6a 00 35 05 04 00 a9 04 4e 00 a9 06 fc 00 a9 05 b4 00 a9 05 80 00 76 05 0c 00 a9 05 80 00 6d 04 ed 00 a8 04 bf Data Ascii: .R0sdw~nieeg&rN5%L~s~~]~^~5~~~M~p~d)Hd.K/j85w?lsz-j5Nvm
2024-01-16 21:32:52 UTC	15249	IN	Data Raw: da 02 14 ff f0 02 15 ff f0 02 16 ff f0 02 17 ff f0 02 18 ff f0 02 23 ff ef 02 24 ff ef 02 25 ff ef 02 26 ff ef 02 27 ff dc 02 28 ff dc 02 30 ff f0 02 32 ff f0 02 34 ff f0 02 36 ff f0 02 38 ff f0 02 3a ff f0 02 3c ff f0 02 3e ff f0 02 40 ff f0 02 42 ff f0 02 44 ff f0 02 46 ff f0 02 48 ff f0 02 4a ff f0 02 88 ff ef 02 8a ff ef 02 8c ff ef 02 8e ff ef 02 90 ff ef 02 92 ff ef 02 96 ff dc 02 ba ff f0 02 be ff ef 02 c2 ff dc 02 c5 ff ef 02 c7 ff ef 02 e0 ff f0 02 e4 ff f0 02 e5 ff dc 02 e7 ff f0 02 ee ff dc 02 f6 ff dc 02 f7 ff da 02 f8 ff da 02 fb ff da 03 02 ff f0 03 07 ff dc 03 08 ff f0 03 0d ff f0 03 0f ff dc 03 1b ff f0 03 1d ff f0 03 1e ff f0 03 2a ff f0 03 30 ff dc 03 32 ff dc 03 34 ff dc 03 39 ff f0 03 53 ff f0 03 55 ff f0 03 57 ff f0 03 59 ff f0 03 5b Data Ascii: #$%&'(02468:<>@BDFHJ*0249SUWY[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.18	49747	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:51 UTC	677	OUT	GET /wp-content/themes/Signable2019Theme/_/fonts/roboto/Roboto-Italic.ttf HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.signable.us sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.signable.us/wp-content/themes/Signable2019Theme/_/css/style.css?ver=1701765538 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:52 UTC	353	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:52 GMT Content-Type: font/ttf Content-Length: 130872 Connection: close Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "1ff38-602f236e13745" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:52 UTC	16031	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 47 44 45 46 70 b4 6d d8 00 01 a3 74 00 00 01 ea 47 50 4f 53 64 5e 8a a1 00 01 a5 60 00 00 4e ea 47 53 55 42 91 e9 67 c4 00 01 f4 4c 00 00 0a ea 4f 53 2f 32 97 82 b1 52 00 01 93 8c 00 00 00 60 63 6d 61 70 76 c7 f8 15 00 01 97 e4 00 00 06 82 63 76 74 20 04 bb 2d da 00 01 a1 68 00 00 00 52 66 70 67 6d 73 f7 1f ab 00 01 9e 68 00 00 01 bc 67 61 73 70 00 08 00 13 00 01 a3 68 00 00 00 0c 67 6c 79 66 1f 0d 31 83 00 00 01 2c 00 01 7a 58 68 64 6d 78 e7 ee dd d4 00 01 93 ec 00 00 03 f8 68 65 61 64 fc a5 d2 65 00 01 83 80 00 00 00 36 68 68 65 61 0c a6 11 7a 00 01 93 68 00 00 00 24 68 6d 74 78 3d 1e b2 5c 00 01 83 b8 00 00 0f b0 6c 6f 63 61 2d 03 ca d6 00 01 7b a4 00 00 07 da 6d 61 78 70 06 1c 03 02 00 01 7b 84 00 00 00 20 6e 61 6d Data Ascii: GDEFpmtGPOSd^`NGSUBgLOS/2R`cmapvcvt -hRfpgmshgasphglyf1,zXhdmxheade6hheazh$hmtx=\loca-{maxp{ nam
2024-01-16 21:32:52 UTC	16384	IN	Data Raw: 0d 08 86 77 7b 8d cf e1 0c b4 08 84 7c 87 b7 0f 0b 60 01 0f 47 01 0d fe 14 9a a7 16 0e 4b 32 01 02 41 ae 16 0b 5f 77 01 b7 bf 60 67 a9 ae cc 02 04 e6 c7 01 55 7e 45 01 02 36 63 45 4d 6f 59 26 73 ec b8 67 6a a6 6c ad 2f 30 02 04 e5 c6 7e 96 04 02 75 69 51 6d 54 1f 74 07 34 2f 97 64 3d 29 51 19 34 93 49 70 2a 00 02 00 da 04 ee 03 51 05 c7 00 0b 00 17 00 1e 00 b0 09 2f b1 03 05 b0 0a 2b 58 21 d8 1b f4 59 b0 0f d0 b0 09 10 b0 15 d0 b0 15 2f 30 31 13 36 36 37 36 16 07 14 06 07 06 26 25 36 36 37 36 16 07 14 06 07 06 26 da 01 3a 30 2e 3d 01 3c 2f 2f 3b 01 a1 01 3a 2f 30 3c 01 3c 2f 2e 3d 05 59 2e 3d 02 01 3b 2f 2e 3c 02 01 3a 2d 2e 3e 02 01 3b 30 2f 3b 02 01 3a 00 03 00 62 ff ea 05 ed 05 c8 00 1b 00 29 00 3a 00 86 00 b0 00 45 58 b0 2e 2f 1b b1 2e 1d 3e 59 b0 00 Data Ascii: w{\|`GK2A_w`gU~E6cEMoY&sgjl/0~uiQmTt4/d=)Q4Ip*Q/+X!Y/016676&%6676&:0.=<//;:/0<</.=Y.=;/.<:-.>;0/;:b):EX./.>Y
2024-01-16 21:32:52 UTC	16384	IN	Data Raw: 5b 0a 02 72 12 0d b7 d2 73 70 05 03 75 d0 7f 01 4e 02 fe af 38 35 56 64 03 03 9d 90 a9 26 01 14 c5 10 9a c7 04 04 ce a4 fe 9e 0b 0e 01 50 80 b9 25 01 58 48 8d 02 02 69 59 00 01 00 67 00 00 04 d8 05 c1 00 1a 00 4a b2 00 1b 1c 11 12 39 00 b0 00 45 58 b0 04 2f 1b b1 04 1d 3e 59 b0 00 45 58 b0 17 2f 1b b1 17 1d 3e 59 b0 00 45 58 b0 0d 2f 1b b1 0d 11 3e 59 b2 00 04 0d 11 12 39 b0 04 10 b1 09 01 b0 0a 2b 58 21 d8 1b f4 59 b0 12 d0 30 31 01 01 36 36 17 32 17 07 26 23 26 07 01 03 23 13 03 26 27 26 07 27 36 33 16 16 17 02 2d 01 2d 36 79 4f 40 40 2f 1d 15 42 36 fe 6a 61 ba 65 ad 1a 3b 0f 26 15 36 3e 4b 64 20 03 08 01 fb 66 58 02 1c 97 09 02 53 fd 6b fd d1 02 48 02 7b 49 03 01 08 99 19 02 57 60 00 02 00 66 ff e4 06 44 04 3a 00 16 00 2c 00 6c b2 09 2d 2e 11 12 39 b0 Data Ascii: [rspuN85Vd&P%XHiYgJ9EX/>YEX/>YEX/>Y9+X!Y01662&#&#&'&'63--6yO@@/B6jae;&6>Kd fXSkH{IW`fD:,l-.9
2024-01-16 21:32:52 UTC	16384	IN	Data Raw: 27 06 27 26 26 37 13 33 03 06 17 16 16 17 16 36 37 13 33 03 06 16 17 16 36 37 13 25 37 21 07 21 07 23 37 06 e3 b4 1b f6 b3 0e 6d 9a 20 8d db ab b4 13 b4 bc b3 05 04 07 52 45 6b 9a 16 b4 c2 b3 0c 5e 5e 64 8e 15 b6 fc 87 13 03 15 12 fe bf 16 a4 16 05 b0 fb dd c0 e2 01 02 60 4f b9 08 06 e7 b6 04 23 fb dc 2d 2d 4e 5a 03 05 8a 80 04 24 fb dc 78 8a 03 03 86 77 04 2f e8 6b 6b 7d 7d 00 00 02 00 4f ff e6 05 df 05 b0 00 20 00 28 00 62 00 b0 00 45 58 b0 17 2f 1b b1 17 19 3e 59 b0 00 45 58 b0 08 2f 1b b1 08 11 3e 59 b0 04 d0 b0 17 10 b0 0d d0 b0 08 10 b1 13 01 b0 0a 2b 58 21 d8 1b f4 59 b0 1c d0 b0 17 10 b0 20 d0 b0 17 10 b0 27 d0 b0 27 2f b0 28 d0 b0 28 2f b1 22 06 b0 0a 2b 58 21 d8 1b f4 59 b0 28 10 b0 25 d0 b0 25 2f 30 31 01 03 06 06 27 26 27 06 27 26 26 37 13 33 Data Ascii: ''&&7367367%7!!#7m REk^^d`O#--NZ$xw/kk}}O (bEX/>YEX/>Y+X!Y ''/((/"+X!Y(%%/01'&''&&73
2024-01-16 21:32:52 UTC	16384	IN	Data Raw: 0e 02 72 74 02 cb 01 9e 5d 64 04 01 9e 00 01 00 0a ff e9 04 14 05 b0 00 1e 00 90 00 b0 00 45 58 b0 11 2f 1b b1 11 1d 3e 59 b0 00 45 58 b0 05 2f 1b b1 05 11 3e 59 b2 13 11 05 11 12 39 b0 13 2f b0 17 d0 b0 17 2f b2 00 17 01 5d b1 18 01 b0 0a 2b 58 21 d8 1b f4 59 b0 19 d0 b0 08 d0 b0 09 d0 b0 17 10 b0 16 d0 b0 0b d0 b0 0a d0 b0 13 10 b1 14 01 b0 0a 2b 58 21 d8 1b f4 59 b0 15 d0 b0 0c d0 b0 0d d0 b0 13 10 b0 12 d0 b0 0f d0 b0 0e d0 b0 05 10 b1 1a 01 b0 0a 2b 58 21 d8 1b f4 59 b2 1e 05 11 11 12 39 b0 1e 2f 30 31 01 07 06 02 04 27 26 27 13 05 3f 02 05 37 25 13 33 07 25 07 05 07 25 07 05 03 36 12 37 37 04 14 0a 1b c1 fe e5 ae 4a 72 62 fe ff 22 ff 1a fe ff 21 01 00 3b bc 2d 01 08 21 fe f9 19 01 08 21 fe f9 61 bf f3 25 0e 03 03 4e d5 fe b3 aa 02 02 13 02 54 6e bc Data Ascii: rt]dEX/>YEX/>Y9//]+X!Y+X!Y+X!Y9/01'&'?7%3%%677Jrb"!;-!!a%NTn
2024-01-16 21:32:52 UTC	16384	IN	Data Raw: 30 00 00 01 07 01 ba 02 9a 04 c2 00 10 00 b0 00 45 58 b0 0a 2f 1b b1 0a 1d 3e 59 30 31 ff ff 00 2f 00 00 03 3b 06 02 00 26 00 50 00 00 00 07 01 ba 02 2c 05 13 ff ff 00 3b 00 00 03 b1 05 b0 02 26 00 30 00 00 00 07 00 a2 01 4c fd c5 ff ff 00 2f 00 00 02 ac 06 00 00 26 00 50 00 00 00 07 00 a2 00 c9 fd b6 ff ff 00 3b 00 00 05 77 07 36 02 26 00 32 00 00 01 07 00 75 02 27 01 36 00 09 00 b0 05 2f b0 0c dc 30 31 00 ff ff 00 1f 00 00 04 02 06 00 02 26 00 52 00 00 01 07 00 75 01 5c 00 00 00 09 00 b0 03 2f b0 15 dc 30 31 00 ff ff 00 3b fe 09 05 77 05 b0 02 26 00 32 00 00 00 07 01 ba 01 86 fe aa ff ff 00 1f fe 09 03 e3 04 52 02 26 00 52 00 00 00 07 01 ba 00 ee fe aa ff ff 00 3b 00 00 05 77 07 38 02 26 00 32 00 00 01 07 00 9f 01 41 01 37 00 13 00 b0 00 45 58 b0 06 2f Data Ascii: 0EX/>Y01/;&P,;&0L/&P;w6&2u'6/01&Ru\/01;w&2R&R;w8&2A7EX/
2024-01-16 21:32:52 UTC	16384	IN	Data Raw: 66 76 66 76 66 76 6e 76 76 76 80 76 8a 76 c0 76 df 76 fd 77 1c 77 3c 77 48 77 54 77 86 77 c7 78 2d 78 52 78 5e 78 6e 78 96 79 6c 79 88 79 a5 79 b8 79 cc 7a 16 7a a4 7b 47 7b d6 7b e2 7c cc 7d 28 7d b0 7e 5d 7e c0 7f 44 7f a2 80 15 80 c5 81 32 81 c6 82 28 82 92 82 ac 82 c6 82 e0 82 fa 83 6e 83 97 83 d2 83 ee 84 23 84 ad 84 f4 85 6d 85 af 85 bd 85 cb 86 04 86 11 86 38 86 51 86 b5 87 0f 87 a4 88 30 88 30 89 b1 8a 0e 8a 5e 8a 89 8a dd 8b 4f 8b 92 8b f4 8c 55 8c 83 8d 0e 8d 72 8d 89 8d e5 8e 35 8e 4f 8e 8f 8f 0b 8f 4e 8f 98 90 04 90 77 90 e6 91 39 91 4d 91 61 91 73 91 87 91 99 91 b0 91 c4 92 29 92 3f 92 6e 92 76 92 7e 92 86 92 8e 92 96 92 a1 92 a9 92 da 92 e2 92 e2 92 ea 93 5a 93 ca 94 2c 94 73 94 dc 94 f3 95 0a 95 21 95 38 95 50 95 63 95 6f 95 7b 95 92 95 a4 Data Ascii: fvfvfvnvvvvvvvww<wHwTwwx-xRx^xnxylyyyyzz{G{{\|}(}~]~D2(n#m8Q00^OUr5ONw9Mas)?nv~Z,s!8Pco{
2024-01-16 21:32:52 UTC	16384	IN	Data Raw: 3d ff d3 00 b2 ff e4 00 b4 ff e4 00 c4 ff e2 00 da ff d2 01 0d ff e4 01 33 ff d2 01 43 ff d2 01 5d ff d2 01 f2 ff e4 01 f3 ff e4 01 f4 ff e4 01 f5 ff e4 01 f6 ff e4 01 f7 ff e4 01 f8 ff e4 02 0c ff d3 02 29 ff e4 02 2b ff e4 02 2d ff e4 02 95 ff d3 02 97 ff d3 02 a2 ff e4 02 a7 ff d3 02 aa ff e4 02 b6 ff d3 02 b7 ff d2 02 b9 ff d3 02 d2 ff e4 02 de ff d2 02 f5 ff d3 02 fe ff e4 03 0e ff d3 03 11 ff d2 03 14 ff e4 03 16 ff e4 03 1f ff d2 03 3a ff e4 03 3c ff e4 03 3e ff e4 03 40 ff e4 03 42 ff e4 03 44 ff e4 03 46 ff e4 03 48 ff e4 03 4a ff e4 03 4c ff e4 03 4e ff e4 03 50 ff e4 03 8c ff d3 03 8e ff d3 03 90 ff d3 03 a2 ff d3 03 b5 ff e4 00 28 00 10 ff 1e 00 12 ff 1e 00 25 ff cd 00 b2 ff cd 00 b4 ff cd 00 c7 ff f2 01 0d ff cd 01 86 ff 1e 01 8a ff 1e 01 8e Data Ascii: =3C])+-:<>@BDFHJLNP(%
2024-01-16 21:32:52 UTC	153	IN	Data Raw: 89 00 02 00 aa 03 c1 00 02 00 a9 01 bd 00 03 00 4a 00 4d 01 bb 00 02 00 4d 01 be 00 03 00 4a 00 50 01 bc 00 02 00 50 00 02 00 11 00 25 00 29 00 00 00 2b 00 2d 00 05 00 2f 00 34 00 08 00 36 00 3b 00 0e 00 3d 00 3e 00 14 00 45 00 49 00 16 00 4b 00 4d 00 1b 00 4f 00 54 00 1e 00 56 00 5b 00 24 00 5d 00 5e 00 2a 00 81 00 81 00 2c 00 83 00 83 00 2d 00 86 00 86 00 2e 00 89 00 89 00 2f 00 8d 00 8d 00 30 00 98 00 9b 00 31 00 d0 00 d0 00 35 00 01 00 01 00 4a 00 00 Data Ascii: JMMJPP%)+-/46;=>EIKMOTV[$]^*,-./015J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.18	49748	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:52 UTC	680	OUT	GET /wp-content/themes/Signable2019Theme/_/fonts/icomoon/icomoon.woff?t7sq8w HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.signable.us sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.signable.us/wp-content/themes/Signable2019Theme/_/css/style.css?ver=1701765538 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:52 UTC	350	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:52 GMT Content-Type: font/woff Content-Length: 2768 Connection: close Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "ad0-602f236e0c5fb" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:52 UTC	2768	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 0a d0 00 0b 00 00 00 00 0a 84 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 08 00 00 00 60 00 00 00 60 0f 12 0d 06 63 6d 61 70 00 00 01 68 00 00 00 5c 00 00 00 5c f0 96 e9 bc 67 61 73 70 00 00 01 c4 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 01 cc 00 00 06 9c 00 00 06 9c bc cd 55 35 68 65 61 64 00 00 08 68 00 00 00 36 00 00 00 36 1a 4e 45 32 68 68 65 61 00 00 08 a0 00 00 00 24 00 00 00 24 07 b6 03 d7 68 6d 74 78 00 00 08 c4 00 00 00 2c 00 00 00 2c 20 0c 00 b3 6c 6f 63 61 00 00 08 f0 00 00 00 18 00 00 00 18 05 40 06 ea 6d 61 78 70 00 00 09 08 00 00 00 20 00 00 00 20 00 17 00 95 6e 61 6d 65 00 00 09 28 00 00 01 86 00 00 01 86 99 4a 09 fb 70 6f 73 74 00 00 0a b0 00 00 00 Data Ascii: wOFFOS/2``cmaph\\gaspglyfU5headh66NE2hhea$$hmtx,, loca@maxp name(Jpost

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.18	49749	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:52 UTC	628	OUT	GET /wp-content/themes/Signable2019Theme/_/fonts/roboto-slab/robotoslab-bold-webfont.woff2 HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.signable.us sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:52 UTC	667	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 16 Jan 2024 21:32:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Cache-Enabled: False X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Link: <https://www.signable.us/wp-json/>; rel="https://api.w.org/" X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: W NC:000000 UP:
2024-01-16 21:32:52 UTC	15717	IN	Data Raw: 62 63 33 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 3c 68 65 61 64 3e 20 3c 21 2d 2d 20 41 6e 74 69 2d 66 6c 69 63 6b 65 72 20 73 6e 69 70 70 65 74 20 28 72 65 63 6f 6d 6d 65 6e 64 65 64 29 20 20 2d 2d 3e 20 3c 73 74 79 6c 65 3e 2e 61 73 79 6e 63 2d 68 69 64 65 20 7b 20 6f 70 61 63 69 74 79 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 7d 20 3c 2f 73 74 79 6c 65 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 74 69 74 6c 65 3e 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 20 2d 20 53 69 67 6e 61 62 6c 65 3c 2f 74 69 74 6c 65 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 22 Data Ascii: bc3c<!doctype html><html lang="en-us" class="no-js"><head> ... Anti-flicker snippet (recommended) --> <style>.async-hide { opacity: 0 !important} </style><meta charset="utf-8" /><title>Page not found - Signable</title><link rel="shortcut icon" href=""
2024-01-16 21:32:52 UTC	16384	IN	Data Raw: 68 3a 36 30 70 78 3b 68 65 69 67 68 74 3a 36 30 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 33 70 78 7d 7d 2e 75 69 2d 73 6c 69 64 65 72 2d 74 72 61 63 6b 20 2e 75 69 2d 62 74 6e 2e 75 69 2d 73 6c 69 64 65 72 2d 68 61 6e 64 6c 65 3a 61 63 74 69 76 65 2c 2e 75 69 2d 73 6c 69 64 65 72 2d 74 72 61 63 6b 20 2e 75 69 2d 62 74 6e 2e 75 69 2d 73 6c 69 64 65 72 2d 68 61 6e 64 6c 65 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 30 7d 20 3c 2f 73 74 79 6c 65 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 61 63 66 2d 73 69 67 6e 61 62 6c 65 2d 61 72 63 68 69 76 65 2d 73 74 79 6c 65 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 69 67 6e 61 62 6c Data Ascii: h:60px;height:60px;margin-left:-30px;margin-top:-23px}}.ui-slider-track .ui-btn.ui-slider-handle:active,.ui-slider-track .ui-btn.ui-slider-handle:focus{outline:0} </style><link rel='stylesheet' id='acf-signable-archive-style-css' href='https://www.signabl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.18	49750	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:52 UTC	713	OUT	GET /wp-content/themes/Signable2019Theme/_/img/backgrounds/bg_fingerprint.svg HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/wp-content/themes/Signable2019Theme/_/css/style.css?ver=1701765538 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:52 UTC	378	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:52 GMT Content-Type: image/svg+xml Content-Length: 8825 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "2279-602f236e1ac77" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:52 UTC	8825	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 36 31 39 22 20 68 65 69 67 68 74 3d 22 37 36 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 31 39 20 37 36 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 33 35 37 2e 33 35 36 20 34 38 34 2e 34 33 56 34 32 37 2e 36 34 36 43 33 35 37 2e 33 35 36 20 34 30 35 2e 32 35 36 20 33 33 39 2e 31 34 31 20 33 38 37 2e 30 34 31 20 33 31 36 2e 37 35 31 20 33 38 37 2e 30 34 31 43 32 39 34 2e 33 36 32 20 33 38 37 2e 30 34 31 20 32 37 36 2e 31 34 37 20 34 30 35 2e 32 35 36 20 32 37 36 2e 31 34 37 20 34 32 37 2e 36 34 36 56 34 37 38 2e 39 31 35 43 32 37 36 2e 31 34 37 20 35 34 30 2e 36 39 38 20 32 35 Data Ascii: <svg width="619" height="760" viewBox="0 0 619 760" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M357.356 484.43V427.646C357.356 405.256 339.141 387.041 316.751 387.041C294.362 387.041 276.147 405.256 276.147 427.646V478.915C276.147 540.698 25

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.18	49751	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:52 UTC	637	OUT	GET /wp-content/uploads/signable_esignatures_leading_screenshot.png HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:53 UTC	354	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:53 GMT Content-Type: image/png Content-Length: 681522 Connection: close Last-Modified: Wed, 02 Aug 2023 13:19:47 GMT ETag: "a6632-601f0848e3211" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:53 UTC	16030	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 03 08 08 06 00 00 00 5b e7 cf 66 00 0a 65 f9 49 44 41 54 78 01 ec dd 05 90 1b 49 96 c6 f1 ff cb 2a 41 4b cd 6e d3 90 61 da c3 cc 78 b7 9e 65 de 1d 66 bc 65 66 66 66 66 66 c6 81 e5 61 66 66 5e 34 35 83 28 f3 9d ac 68 c5 ca 8a b2 c6 d4 c6 f7 8b f8 5c 29 aa b2 dd 41 5f 67 56 4a 30 06 63 8c 31 c6 18 63 5a eb be ff b2 4e 90 d9 a0 33 11 ba 91 68 06 81 1d c1 cf 02 7a 40 ba 51 3a 11 ed 41 69 07 14 21 0f b5 28 75 20 80 a2 0c 00 1e 91 11 94 09 84 61 d0 51 54 96 20 0c e2 dc 12 34 fc 0b d5 e5 a8 0c e0 58 0e 6e 05 a0 6c a5 8c 89 bb 1f b8 92 1a 63 8c 31 c6 18 63 8c 71 c4 28 07 11 c2 1e a8 f6 e3 64 27 60 07 54 b7 07 9d 0d 74 a0 40 a8 80 08 75 a0 20 d4 20 3c 31 a1 ab f9 73 35 a2 d4 f8 86 f3 8b 16 50 fe 03 Data Ascii: PNGIHDR[feIDATxI*AKnaxefefffffaff^45(h\)A_gVJ0c1cZN3hz@Q:Ai!(u aQT 4Xnlc1cq(d'`Tt@u <1s5P
2024-01-16 21:32:53 UTC	16384	IN	Data Raw: 12 66 7c e2 c3 24 fc cd 38 e6 9f bb 57 f2 9c 7c af cd 7d 6e 89 35 9e 25 6c ad e2 ed 8e a4 63 1c fd 76 56 f2 56 51 38 b7 db d0 4a ca db 2d ee ae 05 b7 c5 33 1e c5 42 91 4a 7d 16 8d 05 eb cd 88 4b 7f f9 20 3f bf ec 87 9c 7d ce b9 3c fe dc 8b b8 fb be fb 19 1d 1f b7 44 bc 5e ab 5b cb 70 a9 a7 87 de 52 91 1d b2 82 c6 0d fa 7b bb 58 32 d4 c7 d2 a5 03 b2 99 60 bc 90 20 c8 a4 a4 79 88 4c d0 a4 56 69 80 97 a5 1e 97 69 34 eb 4c 8d cd 32 32 b6 8f c9 e9 19 fa bb ba d3 6d 05 c6 26 27 e6 d2 76 05 d6 f5 dd c3 50 28 75 a5 fb 62 2b 1a 97 24 31 c6 c4 56 84 ce 78 3e 95 a8 0a 5e 86 e5 bd fd 3c f9 fc a7 52 ea ca 61 72 75 6e bd f9 2e f2 c5 3c f7 de f7 20 e3 e3 d7 b3 7b fb 19 74 75 f7 b2 f6 84 75 3c b8 69 2b e5 5a 99 fb ef b9 8d 7d 13 13 6c 1b 19 25 11 f1 af d7 a8 56 02 c6 c6 Data Ascii: f\|$8W\|}n5%lcvVVQ8J-3BJ}K ?}<D^[pR{X2` yLVii4L22m&'vP(ub+$1Vx>^<Rarun.< {tuu<i+Z}l%V
2024-01-16 21:32:53 UTC	16384	IN	Data Raw: 05 8a 45 d4 82 c2 78 a3 41 b3 11 80 09 31 9e e1 d8 e2 31 c6 b3 04 2b 96 b3 26 77 97 bf 1b cf b2 6d eb 0c bb 76 ec a6 3d 35 45 bf b7 c6 e6 e9 16 12 18 34 53 d6 ba b3 c4 cd 98 b1 ce 24 82 41 c9 28 a9 be 7f 01 a9 82 03 11 d5 aa 72 2e 54 a0 0a 46 40 37 16 d0 a7 96 de 3e 12 dc 56 bd bf ea 2d 07 d0 93 da d5 4f 86 02 b2 61 2a bb f3 f3 06 81 87 82 80 9c 48 b8 57 bd e8 af 06 7e 0d 78 a3 2b d0 81 17 bc e3 1d ef 78 05 f0 d6 62 b4 f4 ff 9d 1a ff d3 9f fe 34 35 5f 3a 8a 9e d6 bc 97 9c 9f fd d9 9f e5 87 7e e8 87 24 4f d3 d5 b7 bc e5 2d 45 25 5d f3 5e 0c f2 94 f6 62 2e 7a 29 c6 af bc f2 4a 29 46 b1 19 63 34 5f c5 85 5e cc 45 27 7f 4f 91 d8 ae f9 4c 74 33 3e 3e 5e fe bc 7e 6e e5 8b 4e 4d 4d 4d 14 45 55 4f 7a 96 65 58 6b 51 d5 51 2b 5a 4d 4d 4d 4d cd 97 50 a0 b7 55 78 2c Data Ascii: ExA11+&wmv=5E4S$A(r.TF@7>V-Oa*HW~x+xb45_:~$O-E%]^b.z)J)Fc4_^E'OLt3>>^~nNMMMEUOzeXkQQ+ZMMMMPUx,
2024-01-16 21:32:53 UTC	16384	IN	Data Raw: 3d c2 22 a3 9d aa 5f 86 12 bc 1f 69 72 2d 9c 36 a1 33 20 82 31 b1 77 63 b7 47 6f 44 0f 7e 01 bb 78 02 5b 48 20 a7 e7 30 51 03 ed ae 91 ae 9c c4 14 20 ba d9 44 0b 00 de 5b 63 fd e4 11 6e bd e5 f3 ec 98 db ca 39 ab a7 20 1d 90 1f 3f c2 7d f7 de cd 30 17 1a 8d 29 96 7b 6e 1d f8 d0 f6 38 68 a0 92 63 b1 64 99 65 c3 6d 6b 1b 21 0e 20 23 63 71 79 81 ed 53 6d 4c 0a 83 e1 90 46 43 30 12 d2 68 fa f0 66 86 ae fd cc da 2a 6a 42 a2 8b 2f 67 f0 c5 cf 91 2c 66 84 cd 90 dc b5 0f 11 b6 ec de 49 7f 59 d8 c8 32 0c 86 c5 95 2e eb 1b 6b 0c 93 01 7d cd 89 8b 50 ea 6e 4a fa b1 8f 10 9d b3 87 4b af 79 26 f1 f6 7d 68 ab 83 66 19 e9 a9 13 b4 b7 ec 61 76 df 85 1e 3c 36 3a 73 90 0d 08 8d b2 e5 a2 4b 91 20 44 fb eb 4c b7 9a a8 2a d6 e6 48 18 03 ca 46 77 83 40 02 9e e4 5c e0 ef ba f5 Data Ascii: ="_ir-63 1wcGoD~x[H 0Q D[cn9 ?}0){n8hcdemk! #cqySmLFC0hfjB/g,fIY2.k}PnJKy&}hfav<6:sK DLHFw@\
2024-01-16 21:32:53 UTC	16384	IN	Data Raw: 28 54 8b b4 2b 52 58 97 91 d0 98 a9 50 65 94 49 f9 c6 d7 60 60 27 10 b8 67 c8 ae 8a 28 43 db 70 35 a6 65 06 44 26 3d a3 78 0d 11 b0 63 69 c8 ca ed 63 c9 88 1a 8b 24 da e0 5f 8e be 98 ff 3d f1 0d 5c 39 fd 65 9e 32 ff 05 1e 3b 7d 2b 97 4f dd ce 81 d6 61 02 c9 7d df 3b 1b a7 3c 5b 6e 35 20 d1 88 c4 46 7c 79 e3 22 6e 59 7f 0c b7 ac 5d c5 a7 97 af f6 9f 39 21 d3 e1 06 91 f4 40 74 ec a9 95 00 ab 02 c6 6f 87 92 66 5f ce 30 a7 77 69 f8 54 03 cc 09 0b e3 fd 6a 75 df 75 a4 3b e3 17 53 02 b8 e5 35 e3 80 77 ec 77 5d 2a 43 48 2a de d9 b1 31 3d f6 0d a9 11 69 57 11 85 72 66 67 a9 60 04 19 7b 2f 36 d1 ba c5 58 41 6c 8d a8 55 f1 75 04 ca 04 b4 6c 5e a8 0f c9 98 22 42 99 1d 2f 7f 02 60 02 c4 84 08 10 64 7d a4 77 0a 59 ba 8f a8 bf 40 f7 d8 41 0e 7f f6 23 64 89 a5 d9 2e 4c Data Ascii: (T+RXPeI``'g(Cp5eD&=xcic$_=\9e2;}+Oa};<[n5 F\|y"nY]9!@tof_0wiTjuu;S5ww]CH1=iWrfg`{/6XAlUul^"B/`d}wY@A#d.L
2024-01-16 21:32:53 UTC	16384	IN	Data Raw: b6 e4 01 b7 82 73 a7 80 3e 38 bc fb e7 74 99 cd 9d 4b 0c f6 77 c8 47 63 52 9d a3 49 42 bd b5 14 e4 f3 ad b8 45 60 f1 13 58 6a ad 51 6b b4 7d fb 5b 18 31 60 84 25 13 b3 d2 f2 ed 36 96 89 d2 24 8c 65 6b 67 cb 63 92 3d 76 f7 f7 b8 78 f5 62 98 17 1a 73 be d6 58 9f 81 f4 38 30 f8 f1 6c e1 41 ef 13 e2 c2 bd b2 52 0c 63 12 e0 da 3d 33 73 27 7e 58 59 5b d9 62 61 f3 86 dc cb de 9f 6b 91 41 ef fa 7b 34 01 34 dc 17 c5 50 1e ff f0 0d df f0 0d 1a 83 8e c7 4f 4e b1 13 10 14 2d 8a ad 66 9b 86 17 2b 39 1a 40 bb 1a 80 03 bc f0 85 2f 14 cf ae 03 84 14 db 80 03 f8 be ef fb be 27 34 48 8f 79 72 6e 32 7b d5 98 70 65 a8 35 d6 5b 0d dd 34 fd 99 4a ca d5 c5 dd 28 b0 56 03 38 05 d3 ba ca a2 0f cd 1b bc 05 a9 c3 2c 3d 9a fb af ff f5 bf e2 a5 e8 f2 13 3f f1 13 ce bb b7 a3 b2 78 40 Data Ascii: s>8tKwGcRIBE`XjQk}[1`%6$ekgc=vxbsX80lARc=3s'~XY[bakA{44PON-f+9@/'4Hyrn2{pe5[4J(V8,=?x@
2024-01-16 21:32:53 UTC	16384	IN	Data Raw: 9b a5 59 c3 b7 19 c2 89 9f c8 5b ac 03 7c 12 6d 2a 87 08 a0 18 70 2a 1b 57 a9 b9 da f3 df 7d f7 dd 78 b3 36 fe ef ff fd bf 61 45 c5 b3 e8 9a c4 5e 01 b6 1a ca a9 fc 5d 1f 88 4a da 55 0a a1 b6 fb fa b0 9c 82 63 8d 27 d7 95 19 05 d2 7e a5 46 99 74 8d 47 57 e3 82 00 ce 35 15 9b 07 c8 1a 5b 1e 5c 03 b5 bf ef f8 8e ef c0 83 e5 90 07 5d 44 d4 35 50 fb 57 40 1d a4 e7 ea 20 ef 81 76 70 1e f4 f7 38 8c c7 e7 f2 73 7e e2 90 e7 b9 f8 55 20 a7 a6 70 ce 39 5d 54 50 70 ae 13 2b ac 16 f9 31 89 3f 2f a4 87 d3 fd ea 44 18 45 91 f1 6d a8 5c c3 69 ba 35 55 06 f8 f3 ec 22 1b 64 8a 7f e9 4c d9 df e8 0a b3 34 07 22 87 ff e3 cf 94 fe cb a0 0c c5 0a a6 f0 0f bd b2 56 a5 9c ae 2b c8 1f ab c3 ff aa b7 43 d8 43 dc c2 3b c1 94 f5 e3 ca f3 b8 22 55 cc 5a 75 f0 9f 59 4c fa 2e 87 99 3d Data Ascii: Y[\|mpW}x6aE^]JUc'~FtGW5[\]D5PW@ vp8s~U p9]TPp+1?/DEm\i5U"dL4"V+CC;"UZuYL.=
2024-01-16 21:32:53 UTC	16384	IN	Data Raw: 09 fb 82 24 7e 79 03 7c bb 2a 71 8f 82 ab 7b 8d d5 56 83 7a d2 a7 3f cd 83 fb fe b0 3f a1 b7 b3 cf 46 6f 0f 93 e5 d0 d4 fb 38 04 72 02 48 b7 d9 b5 3c bd 01 c0 4f c1 69 a9 87 31 84 62 73 88 12 22 b1 c4 c1 14 4d 90 22 b3 5c 08 d5 32 84 23 38 27 85 98 73 59 90 a1 87 ff c1 02 2c 67 ee b8 6e 70 6e 51 35 b8 18 e2 b9 10 9d 77 88 3c 2f 8c 61 81 7e 17 e7 e6 4d b9 59 1b 46 66 ed ce e6 94 99 d5 b5 41 ad e1 60 7e ad 0b b9 d6 c5 cd d3 26 c6 51 4c 92 a7 e4 92 85 fc f6 39 96 f1 d4 81 83 93 cd 0d fe 9f b7 bc e5 77 01 f5 f6 8a d4 34 1b c8 bd 32 7a c3 63 a8 a7 b3 b0 79 a2 f2 6f ac b5 23 4f 94 36 bc 62 78 e2 5f 95 60 0d 8a e5 57 bf fa d5 9a 2d 4b b1 92 e2 3e 0d f3 d5 74 6b 41 96 ae 98 cd 17 eb 31 5b 50 40 7f d9 97 7d 99 7a 8e 39 c5 8b fe 3c 34 4e fd 35 af 79 8d 53 ac a6 86 Data Ascii: $~y\|*q{Vz??Fo8rH<Oi1bs"M"\2#8'sY,gnpnQ5w</a~MYFfA`~&QL9w42zcyo#O6bx_`W-K>tkA1[P@}z9<4N5yS
2024-01-16 21:32:53 UTC	16384	IN	Data Raw: c2 fc 65 e6 1a b7 f3 c6 5d a6 ae 5b 55 75 87 7b 3d 80 db 5e 30 40 35 1f f5 b8 4a e0 46 cf 71 c1 9a 33 c3 03 88 a7 20 22 c7 71 54 dd 99 35 e2 25 e0 65 a6 5f 0c 30 40 dc b9 f5 55 d3 2f 2f 4d 34 43 9c 0e b7 76 03 2c 85 19 2f b4 5a 36 fe a3 83 59 94 b3 30 1f 54 38 bd e3 74 a5 67 5e b9 ad 77 6c 54 7a d9 75 63 fd c6 b5 bb 09 f4 ca 37 ee 59 87 07 5e cf fb c0 b6 0e 0e 9c 9e fe a0 95 34 c3 8d f7 39 ec f6 bb ad cd 2f 7d 70 47 af bc 61 ac 47 18 c2 fe 82 a3 03 3d d7 ea 7e c3 bd cc 1d 6d 62 e0 e9 4c 9d fa 31 7c ad cd 2a ea 7f bd 73 4b 97 ff ed 86 de 63 f5 99 c5 3e 9e e3 c3 99 c5 e6 f8 ef dd 38 d6 37 df 7b c9 fa 77 7a a7 b1 f1 30 e7 b7 8d 83 fe cc 26 09 9e 63 cc ba 6d 6a ad c7 ec b7 b4 45 db 71 b0 e3 51 ab a5 d7 86 b5 df b5 7d bb 3b 08 8d 48 97 d8 49 4f cd 82 6e d8 8d Data Ascii: e][Uu{=^0@5JFq3 "qT5%e_0@U//M4Cv,/Z6Y0T8tg^wlTzuc7Y^49/}pGaG=~mbL1\|*sKc>87{wz0&cmjEqQ};HIOn
2024-01-16 21:32:53 UTC	16384	IN	Data Raw: e4 49 d4 01 72 7e ca 3c 47 c5 5d 79 70 21 7c 87 51 00 53 96 a3 f1 54 12 dd 2b 25 f5 6f 58 54 f4 30 34 04 1b aa 33 9c 7a ef 38 89 a3 62 7e 16 93 0e d2 d8 48 a4 d3 12 09 35 4e 05 ce 85 8e 64 d8 8f a3 a2 83 cb 5b 1e c7 6e 5d 01 f1 de 80 d5 39 f5 f2 50 5d ff ea af fe 6a 1d c9 e1 1b ef 7f 69 4e dd ca 06 01 b0 1e 01 e6 54 cd 71 48 aa 53 5d 27 ad 06 f2 01 e7 00 d4 40 6f 01 6f 36 ef 00 73 e4 41 3c 00 75 dd f3 77 47 25 03 a8 06 94 01 73 b6 ee 88 04 38 57 a7 3a 67 3b ef 17 87 87 da c5 c8 80 a9 8f 4f ca bb bd 57 db 30 13 10 a5 05 55 c8 08 00 1b 17 46 5f 54 b9 ae cb d3 40 3c 69 39 4e cf 08 80 e7 fd b0 ae 21 6c a1 e3 38 8d a3 72 8f a3 e3 fb ec a5 36 59 99 b8 ee 87 e9 3c d2 6b 4e 4e fa 6e 8e 5b 7d 1e b4 7f ac 6e ae 85 bc b1 39 5a 5d 59 32 4c 1f ee f3 98 93 4d 5b 66 90 Data Ascii: Ir~<G]yp!\|QST+%oXT043z8b~H5Nd[n]9P]jiNTqHS]'@oo6sA<uwG%s8W:g;OW0UF_T@<i9N!l8r6Y<kNNn[}n9Z]Y2LM[f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.18	49752	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:52 UTC	634	OUT	GET /wp-content/themes/Signable2019Theme/_/img/signable_logo.svg HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:53 UTC	380	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:53 GMT Content-Type: image/svg+xml Content-Length: 77498 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "12eba-602f236e1c7cf" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:53 UTC	16004	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 35 36 22 20 68 65 69 67 68 74 3d 22 34 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 36 20 34 37 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 35 36 22 20 68 65 69 67 68 74 3d 22 34 37 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 70 61 74 74 65 72 6e 30 29 22 2f 3e 0a 3c 64 65 66 73 3e 0a 3c 70 61 74 74 65 72 6e 20 69 64 3d 22 70 61 74 74 65 72 6e 30 22 20 70 61 74 74 65 72 6e 43 6f 6e 74 65 6e 74 55 6e 69 74 73 3d 22 6f 62 6a 65 63 74 42 6f 75 Data Ascii: <svg width="156" height="47" viewBox="0 0 156 47" fill="none" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><rect width="156" height="47" fill="url(#pattern0)"/><defs><pattern id="pattern0" patternContentUnits="objectBou
2024-01-16 21:32:53 UTC	16384	IN	Data Raw: 76 53 54 41 41 30 61 6d 33 77 79 4e 6f 46 47 2b 5a 51 65 68 30 30 33 46 2f 42 6e 71 47 70 36 57 31 33 64 39 45 68 54 41 45 42 6e 48 43 53 5a 52 63 55 66 61 4b 4a 36 73 56 6e 59 46 42 61 72 33 6d 43 68 69 67 38 38 7a 31 5a 4b 51 46 75 2f 52 42 4f 4e 55 78 62 44 67 57 62 32 48 39 4d 49 30 63 41 36 6a 66 53 54 30 50 68 2b 63 71 51 70 41 48 4e 34 6f 41 46 36 47 7a 5a 64 52 4e 44 30 4c 4d 6c 6e 31 39 41 74 4f 30 6e 2b 6a 49 55 68 41 4f 67 43 72 77 79 47 35 6c 50 5a 41 42 62 76 4a 44 5a 59 77 47 76 36 70 56 50 4e 51 4d 4e 4d 55 6a 62 49 41 38 32 31 6c 56 4a 4a 63 61 51 70 59 4f 56 47 45 65 53 41 4e 76 53 54 76 61 34 67 42 70 6a 44 41 34 33 79 4b 53 55 51 33 69 75 62 43 2f 70 7a 6a 70 4e 63 75 59 62 2b 35 54 42 6c 59 57 67 53 72 30 30 44 67 44 59 61 52 63 67 55 Data Ascii: vSTAA0am3wyNoFG+ZQeh003F/BnqGp6W13d9EhTAEBnHCSZRcUfaKJ6sVnYFBar3mChig88z1ZKQFu/RBONUxbDgWb2H9MI0cA6jfST0Ph+cqQpAHN4oAF6GzZdRND0LMln19AtO0n+jIUhAOgCrwyG5lPZABbvJDZYwGv6pVPNQMNMUjbIA821lVJJcaQpYOVGEeSANvSTva4gBpjDA43yKSUQ3iubC/pzjpNcuYb+5TBlYWgSr00DgDYaRcgU
2024-01-16 21:32:53 UTC	16384	IN	Data Raw: 30 30 41 41 41 44 4e 4f 74 55 45 77 49 43 35 48 68 67 41 41 41 44 59 43 59 6d 6d 77 4b 70 6d 71 66 4e 71 74 6e 4e 64 43 79 38 6d 4d 52 73 41 41 42 44 58 41 4f 79 50 69 73 59 41 41 41 44 41 54 6b 67 30 42 64 5a 52 59 31 58 54 73 57 36 46 46 31 50 35 42 77 41 41 41 41 41 41 41 41 43 67 63 68 4a 4e 67 58 58 4d 6b 31 78 58 39 6b 77 71 6d 67 49 41 41 41 41 41 77 48 42 64 61 77 49 41 41 49 44 4e 6b 6d 67 4b 72 47 74 61 32 66 4d 63 52 70 56 47 41 41 41 41 41 41 41 41 41 41 43 41 4a 42 4a 4e 67 66 58 4e 55 39 2f 70 34 4c 46 75 42 51 41 41 41 41 41 41 41 41 41 41 4b 6e 66 33 6b 6a 38 6b 30 52 54 59 68 47 6c 6c 7a 7a 50 57 70 51 41 41 41 41 41 41 41 41 41 41 51 4f 55 57 4c 2f 6c 44 45 6b 32 42 54 5a 67 6e 75 61 33 6f 65 63 61 36 46 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: 00AAADNOtUEwIC5HhgAAADYCYmmwKpmqfNqtnNdCy8mMRsAABDXAOyPisYAAADATkg0BdZRY1XTsW6FF1P5BwAAAAAAAACgchJNgXXMk1xX9kwqmgIAAAAAwHBdawIAAIDNkmgKrGta2fMcRpVGAAAAAAAAAACAJBJNgfXNU9/p4LFuBQAAAAAAAAAAKnf3kj8k0RTYhGllzzPWpQAAAAAAAAAAQOUWL/lDEk2BTZgnua3oeca6FAAAAAAAAAAA
2024-01-16 21:32:53 UTC	16384	IN	Data Raw: 4c 70 37 41 71 31 63 4e 47 50 70 56 4a 57 47 5a 74 2f 39 5a 31 2b 50 43 51 4d 4d 75 6a 59 4f 4d 62 47 6a 7a 37 35 6e 56 53 33 64 45 34 4b 4d 54 64 6e 7a 2f 74 76 38 41 4e 59 74 30 74 2f 71 44 6f 35 6e 54 6e 6b 75 4c 43 4a 45 51 37 2f 31 37 61 5a 55 6e 2f 74 38 35 79 76 76 79 37 35 64 39 65 52 33 6e 4d 5a 39 53 50 71 74 2f 54 44 47 51 6e 50 67 2f 50 55 6d 74 34 34 6a 54 75 67 69 31 58 31 4a 71 7a 38 7a 46 42 36 43 4f 53 42 42 30 39 32 61 4a 2f 41 74 59 38 48 51 66 45 31 31 41 55 4f 6e 79 71 45 6d 63 4d 75 65 2f 74 37 51 74 58 46 49 4d 37 48 37 71 6a 6e 6f 6b 64 75 34 77 41 78 39 48 6c 74 38 6a 33 41 34 62 48 4f 6c 4c 34 4a 58 48 7a 76 54 56 47 45 39 36 4a 4d 2b 58 6a 2f 74 36 37 6e 71 4e 70 61 4a 37 66 49 34 59 74 6e 6a 33 37 30 50 6d 76 75 51 76 38 52 39 Data Ascii: Lp7Aq1cNGPpVJWGZt/9Z1+PCQMMujYOMbGjz75nVS3dE4KMTdnz/tv8ANYt0t/qDo5nTnkuLCJEQ7/17aZUn/t85yvvy75d9eR3nMZ9SPqt/TDGQnPg/PUmt44jTugi1X1Jqz8zFB6COSBB092aJ/AtY8HQfE11AUOnyqEmcMue/t7QtXFIM7H7qjnokdu4wAx9Hlt8j3A4bHOlL4JXHzvTVGE96JM+Xj/t67nqNpaJ7fI4Ytnj370PmvuQv8R9
2024-01-16 21:32:53 UTC	12342	IN	Data Raw: 6e 7a 33 65 52 67 2b 6e 57 59 39 55 7a 4b 4c 46 58 43 37 71 6b 77 45 54 52 6d 75 53 61 6f 6e 42 2f 37 55 46 44 74 39 54 56 58 42 64 4b 45 70 32 4b 4d 69 36 38 46 53 67 77 41 59 6c 72 75 73 56 79 65 39 4d 59 47 43 62 6b 7a 73 41 41 41 41 41 41 41 41 39 71 53 4d 31 55 6c 33 2b 5a 49 71 6a 38 54 62 4c 65 72 74 57 2b 74 6e 73 36 79 48 54 36 31 63 33 5a 30 2b 51 64 43 55 51 54 70 50 46 61 41 55 63 4e 74 4f 77 4a 52 39 6d 57 51 39 57 47 71 67 43 63 4f 78 7a 43 70 45 32 6c 51 6f 4c 54 55 4c 41 31 52 6f 41 67 41 41 41 41 41 41 67 44 55 4b 7a 54 79 30 54 46 58 46 39 4a 75 6d 4f 50 68 6e 62 2f 50 7a 56 32 53 39 36 71 6c 71 75 38 66 56 46 4b 4d 53 4e 47 56 51 69 69 52 58 4f 70 53 64 42 45 78 35 71 2b 6e 47 43 64 79 54 49 7a 41 4d 31 31 6d 76 54 6e 71 54 61 75 6b 43 Data Ascii: nz3eRg+nWY9UzKLFXC7qkwETRmuSaonB/7UFDt9TVXBdKEp2KMi68FSgwAYlrusVye9MYGCbkzsAAAAAAAA9qSM1Ul3+ZIqj8TbLertW+tns6yHT61c3Z0+QdCUQTpPFaAUcNtOwJR9mWQ9WGqgCcOxzCpE2lQoLTULA1RoAgAAAAAAgDUKzTy0TFXF9JumOPhnb/PzV2S96qlqu8fVFKMSNGVQiiRXOpSdBEx5q+nGCdyTIzAM11mvTnqTaukC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.18	49753	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:53 UTC	702	OUT	GET /wp-content/themes/Signable2019Theme/_/img/icon_down_light.svg HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/wp-content/themes/Signable2019Theme/_/css/style.css?ver=1701765538 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:53 UTC	375	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:53 GMT Content-Type: image/svg+xml Content-Length: 160 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "a0-602f236e1b05f" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:53 UTC	160	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 33 22 20 68 65 69 67 68 74 3d 22 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 20 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 20 31 4c 36 2e 35 20 36 4c 31 32 20 31 22 20 73 74 72 6f 6b 65 3d 22 77 68 69 74 65 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 32 22 2f 3e 0a 3c 2f 73 76 67 3e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="13" height="8" viewBox="0 0 13 8" fill="none"><path d="M1 1L6.5 6L12 1" stroke="white" stroke-width="2"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.18	49754	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:53 UTC	411	OUT	GET /wp-content/themes/Signable2019Theme/_/img/backgrounds/bg_fingerprint.svg HTTP/1.1 Host: www.signable.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:53 UTC	378	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:53 GMT Content-Type: image/svg+xml Content-Length: 8825 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "2279-602f236e1ac77" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:53 UTC	8825	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 36 31 39 22 20 68 65 69 67 68 74 3d 22 37 36 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 31 39 20 37 36 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 33 35 37 2e 33 35 36 20 34 38 34 2e 34 33 56 34 32 37 2e 36 34 36 43 33 35 37 2e 33 35 36 20 34 30 35 2e 32 35 36 20 33 33 39 2e 31 34 31 20 33 38 37 2e 30 34 31 20 33 31 36 2e 37 35 31 20 33 38 37 2e 30 34 31 43 32 39 34 2e 33 36 32 20 33 38 37 2e 30 34 31 20 32 37 36 2e 31 34 37 20 34 30 35 2e 32 35 36 20 32 37 36 2e 31 34 37 20 34 32 37 2e 36 34 36 56 34 37 38 2e 39 31 35 43 32 37 36 2e 31 34 37 20 35 34 30 2e 36 39 38 20 32 35 Data Ascii: <svg width="619" height="760" viewBox="0 0 619 760" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M357.356 484.43V427.646C357.356 405.256 339.141 387.041 316.751 387.041C294.362 387.041 276.147 405.256 276.147 427.646V478.915C276.147 540.698 25

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.18	49757	34.120.31.228	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:53 UTC	588	OUT	GET /gr?id=-MNNFwoamUG1AtkUIbBv&refurl=&winurl=https%3A%2F%2Fwww.signable.us%2F HTTP/1.1 Host: g10102301085.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:53 UTC	432	IN	HTTP/1.1 200 OK x-powered-by: Express content-type: application/javascript; charset=utf-8 cache-control: private, no-cache, no-store, must-revalidate etag: W/"160-AwH4GM4aJXx7U3c1iq+WyKOIyYo" X-Cloud-Trace-Context: b1cab76875fe888cc995837b65e3a498 Date: Tue, 16 Jan 2024 21:32:53 GMT Server: Google Frontend Content-Length: 352 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-16 21:32:53 UTC	352	IN	Data Raw: 69 66 20 28 74 79 70 65 6f 66 20 67 65 6f 72 65 64 69 72 65 63 74 31 36 30 36 37 32 34 38 36 35 34 39 33 6c 6f 61 64 65 64 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 29 20 7b 20 67 65 6f 72 65 64 69 72 65 63 74 31 36 30 36 37 32 34 38 36 35 34 39 33 6c 6f 61 64 65 64 28 29 3b 20 7d 69 66 20 28 74 79 70 65 6f 66 20 67 65 6f 72 65 64 69 72 65 63 74 4c 6f 61 64 65 64 20 21 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 20 26 26 20 74 79 70 65 6f 66 20 67 65 6f 72 65 64 69 72 65 63 74 4c 6f 61 64 65 64 5b 22 2d 4d 4e 4e 46 77 6f 61 6d 55 47 31 41 74 6b 55 49 62 42 76 22 5d 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 29 20 7b 20 67 65 6f 72 65 64 69 72 65 63 74 4c 6f 61 64 65 64 5b 22 2d 4d 4e 4e 46 77 6f 61 6d 55 47 31 41 74 6b 55 49 62 42 76 22 5d 28 29 3b 20 Data Ascii: if (typeof georedirect1606724865493loaded === "function") { georedirect1606724865493loaded(); }if (typeof georedirectLoaded !== "undefined" && typeof georedirectLoaded["-MNNFwoamUG1AtkUIbBv"] === "function") { georedirectLoaded["-MNNFwoamUG1AtkUIbBv"]();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.18	49755	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:53 UTC	648	OUT	GET /wp-content/themes/Signable2019Theme/_/img/logos/logo_cyber_essentials.png HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:54 UTC	352	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:54 GMT Content-Type: image/png Content-Length: 11377 Connection: close Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "2c71-602f236e1c3e7" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:54 UTC	11377	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 51 00 00 00 52 08 06 00 00 00 ed 95 e7 58 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 2c 06 49 44 41 54 78 01 ed 9d 09 94 1d d5 79 e7 bf 7a 52 4b 6a ed 42 08 90 c4 d2 12 92 59 6c b3 43 b0 59 2c 0c c6 6c 26 5e 62 6c 0f 5e b0 93 89 e3 25 33 9e 33 e3 33 93 99 89 c3 c4 89 33 c9 64 e2 38 ce ea d8 01 db 09 4e 6c 30 8b c1 6c 46 20 16 b1 6f 12 02 4b 08 09 b1 48 6a 21 b5 b6 96 d4 da de cb ff f7 ee 7d ad ea ea 7a 7b bd d7 f5 e4 fa 9f 73 cf eb 7e af ea d6 ad aa 7b ff f7 bb df 76 03 cb d0 14 0a 85 c2 18 7d 1c a1 f2 36 95 e3 54 66 ab 1c aa 32 95 9f 55 b6 aa 6c 54 59 ab b2 52 e5 25 fe 0e 82 60 af 65 c8 Data Ascii: PNGIHDRQRXpHYs%%IR$sRGBgAMAa,IDATxyzRKjBYlCY,l&^bl^%3333d8Nl0lF oKHj!}z{s~{v}6Tf2UlTYR%`e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.18	49756	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:53 UTC	400	OUT	GET /wp-content/themes/Signable2019Theme/_/img/icon_down_light.svg HTTP/1.1 Host: www.signable.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:54 UTC	375	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:54 GMT Content-Type: image/svg+xml Content-Length: 160 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "a0-602f236e1b05f" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:54 UTC	160	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 33 22 20 68 65 69 67 68 74 3d 22 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 20 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 20 31 4c 36 2e 35 20 36 4c 31 32 20 31 22 20 73 74 72 6f 6b 65 3d 22 77 68 69 74 65 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 32 22 2f 3e 0a 3c 2f 73 76 67 3e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="13" height="8" viewBox="0 0 13 8" fill="none"><path d="M1 1L6.5 6L12 1" stroke="white" stroke-width="2"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.18	49759	34.120.31.228	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:53 UTC	588	OUT	GET /gr?id=-MS8X4ftmPqTw1B7FB9q&refurl=&winurl=https%3A%2F%2Fwww.signable.us%2F HTTP/1.1 Host: g10102301085.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:54 UTC	432	IN	HTTP/1.1 200 OK x-powered-by: Express content-type: application/javascript; charset=utf-8 cache-control: private, no-cache, no-store, must-revalidate etag: W/"160-3RtSHomzEriembTe8oo2cO6zH6w" X-Cloud-Trace-Context: a33f44108de3262dbcb9432ef1dfc459 Date: Tue, 16 Jan 2024 21:32:54 GMT Server: Google Frontend Content-Length: 352 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-16 21:32:54 UTC	352	IN	Data Raw: 69 66 20 28 74 79 70 65 6f 66 20 67 65 6f 72 65 64 69 72 65 63 74 31 36 31 31 38 34 36 34 30 39 31 30 36 6c 6f 61 64 65 64 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 29 20 7b 20 67 65 6f 72 65 64 69 72 65 63 74 31 36 31 31 38 34 36 34 30 39 31 30 36 6c 6f 61 64 65 64 28 29 3b 20 7d 69 66 20 28 74 79 70 65 6f 66 20 67 65 6f 72 65 64 69 72 65 63 74 4c 6f 61 64 65 64 20 21 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 20 26 26 20 74 79 70 65 6f 66 20 67 65 6f 72 65 64 69 72 65 63 74 4c 6f 61 64 65 64 5b 22 2d 4d 53 38 58 34 66 74 6d 50 71 54 77 31 42 37 46 42 39 71 22 5d 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 29 20 7b 20 67 65 6f 72 65 64 69 72 65 63 74 4c 6f 61 64 65 64 5b 22 2d 4d 53 38 58 34 66 74 6d 50 71 54 77 31 42 37 46 42 39 71 22 5d 28 29 3b 20 Data Ascii: if (typeof georedirect1611846409106loaded === "function") { georedirect1611846409106loaded(); }if (typeof georedirectLoaded !== "undefined" && typeof georedirectLoaded["-MS8X4ftmPqTw1B7FB9q"] === "function") { georedirectLoaded["-MS8X4ftmPqTw1B7FB9q"]();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.18	49758	34.120.31.228	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:53 UTC	588	OUT	GET /gr?id=-MS8UqefaxrWlk6E9b1T&refurl=&winurl=https%3A%2F%2Fwww.signable.us%2F HTTP/1.1 Host: g10102301085.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:54 UTC	432	IN	HTTP/1.1 200 OK x-powered-by: Express content-type: application/javascript; charset=utf-8 cache-control: private, no-cache, no-store, must-revalidate etag: W/"160-t6Qt43NFQK+x3hPD6BS8y0VBd0Q" X-Cloud-Trace-Context: b82ab151ecd787cbb6adfb2cd7d3d967 Date: Tue, 16 Jan 2024 21:32:54 GMT Server: Google Frontend Content-Length: 352 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-16 21:32:54 UTC	352	IN	Data Raw: 69 66 20 28 74 79 70 65 6f 66 20 67 65 6f 72 65 64 69 72 65 63 74 31 36 31 31 38 34 35 38 32 33 33 30 33 6c 6f 61 64 65 64 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 29 20 7b 20 67 65 6f 72 65 64 69 72 65 63 74 31 36 31 31 38 34 35 38 32 33 33 30 33 6c 6f 61 64 65 64 28 29 3b 20 7d 69 66 20 28 74 79 70 65 6f 66 20 67 65 6f 72 65 64 69 72 65 63 74 4c 6f 61 64 65 64 20 21 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 20 26 26 20 74 79 70 65 6f 66 20 67 65 6f 72 65 64 69 72 65 63 74 4c 6f 61 64 65 64 5b 22 2d 4d 53 38 55 71 65 66 61 78 72 57 6c 6b 36 45 39 62 31 54 22 5d 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 29 20 7b 20 67 65 6f 72 65 64 69 72 65 63 74 4c 6f 61 64 65 64 5b 22 2d 4d 53 38 55 71 65 66 61 78 72 57 6c 6b 36 45 39 62 31 54 22 5d 28 29 3b 20 Data Ascii: if (typeof georedirect1611845823303loaded === "function") { georedirect1611845823303loaded(); }if (typeof georedirectLoaded !== "undefined" && typeof georedirectLoaded["-MS8UqefaxrWlk6E9b1T"] === "function") { georedirectLoaded["-MS8UqefaxrWlk6E9b1T"]();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.18	49761	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:54 UTC	398	OUT	GET /wp-content/themes/Signable2019Theme/_/img/signable_logo.svg HTTP/1.1 Host: www.signable.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:54 UTC	380	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:54 GMT Content-Type: image/svg+xml Content-Length: 77498 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "12eba-602f236e1c7cf" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:54 UTC	16004	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 35 36 22 20 68 65 69 67 68 74 3d 22 34 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 36 20 34 37 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 35 36 22 20 68 65 69 67 68 74 3d 22 34 37 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 70 61 74 74 65 72 6e 30 29 22 2f 3e 0a 3c 64 65 66 73 3e 0a 3c 70 61 74 74 65 72 6e 20 69 64 3d 22 70 61 74 74 65 72 6e 30 22 20 70 61 74 74 65 72 6e 43 6f 6e 74 65 6e 74 55 6e 69 74 73 3d 22 6f 62 6a 65 63 74 42 6f 75 Data Ascii: <svg width="156" height="47" viewBox="0 0 156 47" fill="none" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><rect width="156" height="47" fill="url(#pattern0)"/><defs><pattern id="pattern0" patternContentUnits="objectBou
2024-01-16 21:32:54 UTC	16384	IN	Data Raw: 76 53 54 41 41 30 61 6d 33 77 79 4e 6f 46 47 2b 5a 51 65 68 30 30 33 46 2f 42 6e 71 47 70 36 57 31 33 64 39 45 68 54 41 45 42 6e 48 43 53 5a 52 63 55 66 61 4b 4a 36 73 56 6e 59 46 42 61 72 33 6d 43 68 69 67 38 38 7a 31 5a 4b 51 46 75 2f 52 42 4f 4e 55 78 62 44 67 57 62 32 48 39 4d 49 30 63 41 36 6a 66 53 54 30 50 68 2b 63 71 51 70 41 48 4e 34 6f 41 46 36 47 7a 5a 64 52 4e 44 30 4c 4d 6c 6e 31 39 41 74 4f 30 6e 2b 6a 49 55 68 41 4f 67 43 72 77 79 47 35 6c 50 5a 41 42 62 76 4a 44 5a 59 77 47 76 36 70 56 50 4e 51 4d 4e 4d 55 6a 62 49 41 38 32 31 6c 56 4a 4a 63 61 51 70 59 4f 56 47 45 65 53 41 4e 76 53 54 76 61 34 67 42 70 6a 44 41 34 33 79 4b 53 55 51 33 69 75 62 43 2f 70 7a 6a 70 4e 63 75 59 62 2b 35 54 42 6c 59 57 67 53 72 30 30 44 67 44 59 61 52 63 67 55 Data Ascii: vSTAA0am3wyNoFG+ZQeh003F/BnqGp6W13d9EhTAEBnHCSZRcUfaKJ6sVnYFBar3mChig88z1ZKQFu/RBONUxbDgWb2H9MI0cA6jfST0Ph+cqQpAHN4oAF6GzZdRND0LMln19AtO0n+jIUhAOgCrwyG5lPZABbvJDZYwGv6pVPNQMNMUjbIA821lVJJcaQpYOVGEeSANvSTva4gBpjDA43yKSUQ3iubC/pzjpNcuYb+5TBlYWgSr00DgDYaRcgU
2024-01-16 21:32:55 UTC	16384	IN	Data Raw: 30 30 41 41 41 44 4e 4f 74 55 45 77 49 43 35 48 68 67 41 41 41 44 59 43 59 6d 6d 77 4b 70 6d 71 66 4e 71 74 6e 4e 64 43 79 38 6d 4d 52 73 41 41 42 44 58 41 4f 79 50 69 73 59 41 41 41 44 41 54 6b 67 30 42 64 5a 52 59 31 58 54 73 57 36 46 46 31 50 35 42 77 41 41 41 41 41 41 41 41 43 67 63 68 4a 4e 67 58 58 4d 6b 31 78 58 39 6b 77 71 6d 67 49 41 41 41 41 41 77 48 42 64 61 77 49 41 41 49 44 4e 6b 6d 67 4b 72 47 74 61 32 66 4d 63 52 70 56 47 41 41 41 41 41 41 41 41 41 41 43 41 4a 42 4a 4e 67 66 58 4e 55 39 2f 70 34 4c 46 75 42 51 41 41 41 41 41 41 41 41 41 41 4b 6e 66 33 6b 6a 38 6b 30 52 54 59 68 47 6c 6c 7a 7a 50 57 70 51 41 41 41 41 41 41 41 41 41 41 51 4f 55 57 4c 2f 6c 44 45 6b 32 42 54 5a 67 6e 75 61 33 6f 65 63 61 36 46 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: 00AAADNOtUEwIC5HhgAAADYCYmmwKpmqfNqtnNdCy8mMRsAABDXAOyPisYAAADATkg0BdZRY1XTsW6FF1P5BwAAAAAAAACgchJNgXXMk1xX9kwqmgIAAAAAwHBdawIAAIDNkmgKrGta2fMcRpVGAAAAAAAAAACAJBJNgfXNU9/p4LFuBQAAAAAAAAAAKnf3kj8k0RTYhGllzzPWpQAAAAAAAAAAQOUWL/lDEk2BTZgnua3oeca6FAAAAAAAAAAA
2024-01-16 21:32:55 UTC	16384	IN	Data Raw: 4c 70 37 41 71 31 63 4e 47 50 70 56 4a 57 47 5a 74 2f 39 5a 31 2b 50 43 51 4d 4d 75 6a 59 4f 4d 62 47 6a 7a 37 35 6e 56 53 33 64 45 34 4b 4d 54 64 6e 7a 2f 74 76 38 41 4e 59 74 30 74 2f 71 44 6f 35 6e 54 6e 6b 75 4c 43 4a 45 51 37 2f 31 37 61 5a 55 6e 2f 74 38 35 79 76 76 79 37 35 64 39 65 52 33 6e 4d 5a 39 53 50 71 74 2f 54 44 47 51 6e 50 67 2f 50 55 6d 74 34 34 6a 54 75 67 69 31 58 31 4a 71 7a 38 7a 46 42 36 43 4f 53 42 42 30 39 32 61 4a 2f 41 74 59 38 48 51 66 45 31 31 41 55 4f 6e 79 71 45 6d 63 4d 75 65 2f 74 37 51 74 58 46 49 4d 37 48 37 71 6a 6e 6f 6b 64 75 34 77 41 78 39 48 6c 74 38 6a 33 41 34 62 48 4f 6c 4c 34 4a 58 48 7a 76 54 56 47 45 39 36 4a 4d 2b 58 6a 2f 74 36 37 6e 71 4e 70 61 4a 37 66 49 34 59 74 6e 6a 33 37 30 50 6d 76 75 51 76 38 52 39 Data Ascii: Lp7Aq1cNGPpVJWGZt/9Z1+PCQMMujYOMbGjz75nVS3dE4KMTdnz/tv8ANYt0t/qDo5nTnkuLCJEQ7/17aZUn/t85yvvy75d9eR3nMZ9SPqt/TDGQnPg/PUmt44jTugi1X1Jqz8zFB6COSBB092aJ/AtY8HQfE11AUOnyqEmcMue/t7QtXFIM7H7qjnokdu4wAx9Hlt8j3A4bHOlL4JXHzvTVGE96JM+Xj/t67nqNpaJ7fI4Ytnj370PmvuQv8R9
2024-01-16 21:32:55 UTC	12342	IN	Data Raw: 6e 7a 33 65 52 67 2b 6e 57 59 39 55 7a 4b 4c 46 58 43 37 71 6b 77 45 54 52 6d 75 53 61 6f 6e 42 2f 37 55 46 44 74 39 54 56 58 42 64 4b 45 70 32 4b 4d 69 36 38 46 53 67 77 41 59 6c 72 75 73 56 79 65 39 4d 59 47 43 62 6b 7a 73 41 41 41 41 41 41 41 41 39 71 53 4d 31 55 6c 33 2b 5a 49 71 6a 38 54 62 4c 65 72 74 57 2b 74 6e 73 36 79 48 54 36 31 63 33 5a 30 2b 51 64 43 55 51 54 70 50 46 61 41 55 63 4e 74 4f 77 4a 52 39 6d 57 51 39 57 47 71 67 43 63 4f 78 7a 43 70 45 32 6c 51 6f 4c 54 55 4c 41 31 52 6f 41 67 41 41 41 41 41 41 67 44 55 4b 7a 54 79 30 54 46 58 46 39 4a 75 6d 4f 50 68 6e 62 2f 50 7a 56 32 53 39 36 71 6c 71 75 38 66 56 46 4b 4d 53 4e 47 56 51 69 69 52 58 4f 70 53 64 42 45 78 35 71 2b 6e 47 43 64 79 54 49 7a 41 4d 31 31 6d 76 54 6e 71 54 61 75 6b 43 Data Ascii: nz3eRg+nWY9UzKLFXC7qkwETRmuSaonB/7UFDt9TVXBdKEp2KMi68FSgwAYlrusVye9MYGCbkzsAAAAAAAA9qSM1Ul3+ZIqj8TbLertW+tns6yHT61c3Z0+QdCUQTpPFaAUcNtOwJR9mWQ9WGqgCcOxzCpE2lQoLTULA1RoAgAAAAAAgDUKzTy0TFXF9JumOPhnb/PzV2S96qlqu8fVFKMSNGVQiiRXOpSdBEx5q+nGCdyTIzAM11mvTnqTaukC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.18	49760	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:54 UTC	574	OUT	GET /wp-content/plugins/cookie-notice/js/front.min.js?ver=2.4.13 HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:54 UTC	387	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:54 GMT Content-Type: application/javascript Content-Length: 8700 Connection: close Vary: Accept-Encoding Last-Modified: Fri, 01 Dec 2023 15:38:59 GMT ETag: "21fc-60b7491278d66" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:54 UTC	8700	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 43 75 73 74 6f 6d 45 76 65 6e 74 29 72 65 74 75 72 6e 21 31 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 74 3d 74 7c 7c 7b 62 75 62 62 6c 65 73 3a 21 31 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 21 31 2c 64 65 74 61 69 6c 3a 76 6f 69 64 20 30 7d 3b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 6e 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 28 65 2c 74 2e 62 75 62 62 6c 65 73 2c 74 2e 63 61 6e 63 65 6c 61 62 6c 65 2c 74 2e 64 65 74 61 69 6c 29 2c 6e 7d 65 2e 70 72 6f 74 6f 74 79 70 65 3d 77 69 6e 64 6f 77 2e 45 76 65 6e 74 2e 70 72 Data Ascii: !function(){if("function"==typeof window.CustomEvent)return!1;function e(e,t){t=t\|\|{bubbles:!1,cancelable:!1,detail:void 0};var n=document.createEvent("CustomEvent");return n.initCustomEvent(e,t.bubbles,t.cancelable,t.detail),n}e.prototype=window.Event.pr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.18	49766	108.138.85.22	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:54 UTC	543	OUT	GET /-/sync-cookies.js?ver=1692089186 HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:54 UTC	2526	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 52505 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:00 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:32:55 GMT ETag: "ce43eb0ae1c5aa89a9235f99cefb8869" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 70b043d52df382dd62760368de89949e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: iE4XhmEJPre1xZmftWXcQEYpCYh4244A4OMhuXmbUpLx0SIMDbQBYA== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:32:54 UTC	16384	IN	Data Raw: 76 61 72 20 73 79 6e 63 43 6f 6f 6b 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 65 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 74 29 3b 65 26 26 28 6e 3d 6e 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 65 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 29 2c 72 2e 70 75 73 68 2e 61 70 70 6c 79 28 72 2c 6e 29 7d 72 Data Ascii: var syncCookies=function(t){"use strict";function e(t,e){var r=Object.keys(t);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(t);e&&(n=n.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),r.push.apply(r,n)}r
2024-01-16 21:32:54 UTC	16384	IN	Data Raw: 74 29 29 72 65 74 75 72 6e 20 79 61 28 53 61 2c 74 2c 65 29 3b 74 68 72 6f 77 20 4f 61 28 22 52 65 67 45 78 70 23 65 78 65 63 20 63 61 6c 6c 65 64 20 6f 6e 20 69 6e 63 6f 6d 70 61 74 69 62 6c 65 20 72 65 63 65 69 76 65 72 22 29 7d 2c 50 61 3d 64 69 2c 52 61 3d 67 2c 45 61 3d 6a 2c 6a 61 3d 52 69 2c 4c 61 3d 6b 69 2c 6b 61 3d 43 65 2c 41 61 3d 71 2c 49 61 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 2c 6e 3d 59 69 28 74 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 6e 7c 7c 6e 75 6c 6c 3d 3d 28 72 3d 59 69 28 6e 29 5b 57 69 5d 29 3f 65 3a 4b 69 28 72 29 7d 2c 55 61 3d 61 61 2c 54 61 3d 72 6e 2c 43 61 3d 61 6f 2c 5f 61 3d 53 74 2c 4d 61 3d 64 61 2c 42 61 3d 78 61 2c 44 61 3d 6c 69 2c 71 61 3d 63 2c Data Ascii: t))return ya(Sa,t,e);throw Oa("RegExp#exec called on incompatible receiver")},Pa=di,Ra=g,Ea=j,ja=Ri,La=ki,ka=Ce,Aa=q,Ia=function(t,e){var r,n=Yi(t).constructor;return void 0===n\|\|null==(r=Yi(n)[Wi])?e:Ki(r)},Ua=aa,Ta=rn,Ca=ao,_a=St,Ma=da,Ba=xa,Da=li,qa=c,
2024-01-16 21:32:55 UTC	16384	IN	Data Raw: 2c 6f 3d 30 3b 6f 3c 6e 2e 6c 65 6e 67 74 68 3b 29 28 65 3d 6e 5b 6f 2b 2b 5d 29 2e 6c 65 6e 67 74 68 26 26 28 72 3d 6f 70 28 65 2c 22 3d 22 29 2c 74 70 28 74 68 69 73 2e 65 6e 74 72 69 65 73 2c 7b 6b 65 79 3a 66 70 28 72 70 28 72 29 29 2c 76 61 6c 75 65 3a 66 70 28 5a 68 28 72 2c 22 3d 22 29 29 7d 29 29 7d 2c 73 65 72 69 61 6c 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 2c 65 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 2c 72 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 29 74 3d 65 5b 6e 2b 2b 5d 2c 74 70 28 72 2c 67 70 28 74 2e 6b 65 79 29 2b 22 3d 22 2b 67 70 28 74 2e 76 61 6c 75 65 29 29 3b 72 65 74 75 72 6e 20 5a 68 28 72 2c 22 26 22 29 7d 2c 75 70 64 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 65 6e Data Ascii: ,o=0;o<n.length;)(e=n[o++]).length&&(r=op(e,"="),tp(this.entries,{key:fp(rp(r)),value:fp(Zh(r,"="))}))},serialize:function(){for(var t,e=this.entries,r=[],n=0;n<e.length;)t=e[n++],tp(r,gp(t.key)+"="+gp(t.value));return Zh(r,"&")},update:function(){this.en
2024-01-16 21:32:55 UTC	3353	IN	Data Raw: 70 28 22 5e 22 2b 41 76 2b 41 76 2b 22 2a 22 29 2c 55 76 3d 52 65 67 45 78 70 28 41 76 2b 41 76 2b 22 2a 24 22 29 2c 54 76 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 4c 76 28 6a 76 28 65 29 29 3b 72 65 74 75 72 6e 20 31 26 74 26 26 28 72 3d 6b 76 28 72 2c 49 76 2c 22 22 29 29 2c 32 26 74 26 26 28 72 3d 6b 76 28 72 2c 55 76 2c 22 22 29 29 2c 72 7d 7d 2c 43 76 3d 7b 73 74 61 72 74 3a 54 76 28 31 29 2c 65 6e 64 3a 54 76 28 32 29 2c 74 72 69 6d 3a 54 76 28 33 29 7d 2c 5f 76 3d 5f 72 2e 50 52 4f 50 45 52 2c 4d 76 3d 63 2c 42 76 3d 45 76 2c 44 76 3d 43 76 2e 74 72 69 6d 3b 59 6e 28 7b 74 61 72 67 65 74 3a 22 53 74 72 69 6e 67 22 2c 70 72 6f 74 6f 3a 21 30 2c 66 6f 72 63 65 64 3a 66 75 6e 63 Data Ascii: p("^"+Av+Av+""),Uv=RegExp(Av+Av+"$"),Tv=function(t){return function(e){var r=Lv(jv(e));return 1&t&&(r=kv(r,Iv,"")),2&t&&(r=kv(r,Uv,"")),r}},Cv={start:Tv(1),end:Tv(2),trim:Tv(3)},_v=_r.PROPER,Mv=c,Bv=Ev,Dv=Cv.trim;Yn({target:"String",proto:!0,forced:func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.18	49762	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:54 UTC	593	OUT	GET /wp-content/plugins/sitepress-multilingual-cms/res/js/xdomain-data.js?ver=4.6.8 HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:54 UTC	386	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:54 GMT Content-Type: application/javascript Content-Length: 3373 Connection: close Vary: Accept-Encoding Last-Modified: Fri, 15 Dec 2023 14:22:18 GMT ETag: "d2d-60c8d20af3a92" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:54 UTC	3373	IN	Data Raw: 2f 2a 67 6c 6f 62 61 6c 73 20 69 63 6c 5f 76 61 72 73 2c 20 77 70 6d 6c 5f 78 64 6f 6d 61 69 6e 5f 64 61 74 61 20 2a 2f 0a 0a 76 61 72 20 57 50 4d 4c 43 6f 72 65 20 3d 20 57 50 4d 4c 43 6f 72 65 20 7c 7c 20 7b 7d 3b 0a 0a 57 50 4d 4c 43 6f 72 65 2e 58 64 6f 6d 61 69 6e 44 61 74 61 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 74 68 69 73 2e 6c 69 6e 6b 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 2e 27 20 2b 20 77 70 6d 6c 5f 78 64 6f 6d 61 69 6e 5f 64 61 74 61 2e 63 73 73 5f 73 65 6c 65 63 74 6f 72 20 2b 20 27 20 61 27 29 3b 0a 0a 09 76 61 72 20 73 65 6c 66 20 3d 20 74 68 69 73 3b 0a 0a 09 66 6f 72 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 74 68 69 73 2e 6c 69 6e 6b 73 2e 6c 65 6e 67 74 68 3b 20 Data Ascii: /globals icl_vars, wpml_xdomain_data /var WPMLCore = WPMLCore \|\| {};WPMLCore.XdomainData = function() {this.links = document.querySelectorAll('.' + wpml_xdomain_data.css_selector + ' a');var self = this;for(var i = 0; i < this.links.length;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.18	49771	108.138.106.60	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:54 UTC	528	OUT	GET /fprom.js HTTP/1.1 Host: cdn.firstpromoter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:54 UTC	530	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 5426 Connection: close Date: Tue, 16 Jan 2024 20:38:44 GMT Last-Modified: Sun, 16 May 2021 12:18:56 GMT ETag: "4050b7f2106d3693d62497155108e557" Cache-Control: public, max-age=7200 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 153c5cd2b3e635613d0a2fa0f107993a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: Yjlnnb9Za-Ohr6ximqLzbtOTMVKUATfSOQlm95jIYplB7iP1XSPxBQ== Age: 3251
2024-01-16 21:32:54 UTC	5426	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 66 70 72 6f 6d 5f 6f 62 6a 5f 28 29 7b 28 24 74 68 69 73 3d 74 68 69 73 29 2e 64 61 74 61 3d 7b 7d 3b 76 61 72 20 6c 3d 74 68 69 73 2e 64 61 74 61 2c 6e 3d 22 68 74 74 70 73 3a 2f 2f 74 2e 66 69 72 73 74 70 72 6f 6d 6f 74 65 72 2e 63 6f 6d 2f 74 72 61 63 6b 2f 73 69 67 6e 75 70 22 2c 69 3d 22 68 74 74 70 73 3a 2f 2f 74 2e 66 69 72 73 74 70 72 6f 6d 6f 74 65 72 2e 63 6f 6d 2f 74 72 61 63 6b 2f 73 61 6c 65 22 2c 6f 3d 22 68 74 74 70 73 3a 2f 2f 74 2e 66 69 72 73 74 70 72 6f 6d 6f 74 65 72 2e 63 6f 6d 2f 74 72 61 63 6b 2f 6e 65 77 22 2c 61 3d 22 5f 66 70 72 6f 6d 5f 74 72 61 63 6b 22 2c 74 3d 22 5f 66 70 72 6f 6d 5f 73 75 62 73 63 72 69 62 65 22 2c 66 3d 22 5f 66 70 72 6f 6d 5f 63 6f 64 65 22 2c 63 3d 22 5f 66 70 72 6f 6d 5f 73 69 Data Ascii: function fprom_obj_(){($this=this).data={};var l=this.data,n="https://t.firstpromoter.com/track/signup",i="https://t.firstpromoter.com/track/sale",o="https://t.firstpromoter.com/track/new",a="_fprom_track",t="_fprom_subscribe",f="_fprom_code",c="_fprom_si

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.18	49764	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:54 UTC	640	OUT	GET /wp-content/themes/Signable2019Theme/_/img/icons/icon_facebook.svg HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:54 UTC	378	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:54 GMT Content-Type: image/svg+xml Content-Length: 4460 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "116c-602f236e1b447" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:54 UTC	4460	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 38 22 20 68 65 69 67 68 74 3d 22 32 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 38 20 32 39 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 35 37 36 5f 33 38 29 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 33 2e 39 34 36 35 20 32 38 2e 39 39 39 39 4c 31 33 2e 39 35 39 20 32 38 2e 39 39 39 39 48 31 33 2e 39 35 34 37 4c 31 33 2e 39 34 36 35 20 32 38 2e 39 39 39 39 5a 4d 31 34 2e 30 34 35 33 20 32 38 2e 39 39 39 39 48 31 34 Data Ascii: <svg width="28" height="29" viewBox="0 0 28 29" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0_576_38)"><path fill-rule="evenodd" clip-rule="evenodd" d="M13.9465 28.9999L13.959 28.9999H13.9547L13.9465 28.9999ZM14.0453 28.9999H14

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.18	49763	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:54 UTC	641	OUT	GET /wp-content/themes/Signable2019Theme/_/img/icons/icon_instagram.svg HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:54 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:54 GMT Content-Type: image/svg+xml Content-Length: 3086 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "c0e-602f236e1b447" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:54 UTC	3086	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 39 22 20 68 65 69 67 68 74 3d 22 32 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 39 20 32 39 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 34 2e 34 39 39 38 20 32 2e 31 32 36 34 36 43 31 31 2e 31 33 39 34 20 32 2e 31 32 36 34 36 20 31 30 2e 37 31 38 20 32 2e 31 34 30 37 31 20 39 2e 33 39 38 32 36 20 32 2e 32 30 30 39 32 43 38 2e 30 38 31 32 37 20 32 2e 32 36 31 30 34 20 37 2e 31 38 31 38 31 20 32 2e 34 37 30 31 38 20 36 2e 33 39 34 37 33 20 32 2e 37 37 36 30 37 43 35 2e 35 38 31 30 38 20 33 2e 30 39 32 32 38 20 34 2e 38 39 31 30 35 20 33 2e 35 31 35 33 36 20 34 2e 32 30 33 31 Data Ascii: <svg width="29" height="29" viewBox="0 0 29 29" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M14.4998 2.12646C11.1394 2.12646 10.718 2.14071 9.39826 2.20092C8.08127 2.26104 7.18181 2.47018 6.39473 2.77607C5.58108 3.09228 4.89105 3.51536 4.2031

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.18	49767	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:54 UTC	401	OUT	GET /wp-content/uploads/signable_esignatures_leading_screenshot.png HTTP/1.1 Host: www.signable.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:55 UTC	354	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:55 GMT Content-Type: image/png Content-Length: 681522 Connection: close Last-Modified: Wed, 02 Aug 2023 13:19:47 GMT ETag: "a6632-601f0848e3211" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:55 UTC	16030	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 03 08 08 06 00 00 00 5b e7 cf 66 00 0a 65 f9 49 44 41 54 78 01 ec dd 05 90 1b 49 96 c6 f1 ff cb 2a 41 4b cd 6e d3 90 61 da c3 cc 78 b7 9e 65 de 1d 66 bc 65 66 66 66 66 66 c6 81 e5 61 66 66 5e 34 35 83 28 f3 9d ac 68 c5 ca 8a b2 c6 d4 c6 f7 8b f8 5c 29 aa b2 dd 41 5f 67 56 4a 30 06 63 8c 31 c6 18 63 5a eb be ff b2 4e 90 d9 a0 33 11 ba 91 68 06 81 1d c1 cf 02 7a 40 ba 51 3a 11 ed 41 69 07 14 21 0f b5 28 75 20 80 a2 0c 00 1e 91 11 94 09 84 61 d0 51 54 96 20 0c e2 dc 12 34 fc 0b d5 e5 a8 0c e0 58 0e 6e 05 a0 6c a5 8c 89 bb 1f b8 92 1a 63 8c 31 c6 18 63 8c 71 c4 28 07 11 c2 1e a8 f6 e3 64 27 60 07 54 b7 07 9d 0d 74 a0 40 a8 80 08 75 a0 20 d4 20 3c 31 a1 ab f9 73 35 a2 d4 f8 86 f3 8b 16 50 fe 03 Data Ascii: PNGIHDR[feIDATxI*AKnaxefefffffaff^45(h\)A_gVJ0c1cZN3hz@Q:Ai!(u aQT 4Xnlc1cq(d'`Tt@u <1s5P
2024-01-16 21:32:55 UTC	16384	IN	Data Raw: 12 66 7c e2 c3 24 fc cd 38 e6 9f bb 57 f2 9c 7c af cd 7d 6e 89 35 9e 25 6c ad e2 ed 8e a4 63 1c fd 76 56 f2 56 51 38 b7 db d0 4a ca db 2d ee ae 05 b7 c5 33 1e c5 42 91 4a 7d 16 8d 05 eb cd 88 4b 7f f9 20 3f bf ec 87 9c 7d ce b9 3c fe dc 8b b8 fb be fb 19 1d 1f b7 44 bc 5e ab 5b cb 70 a9 a7 87 de 52 91 1d b2 82 c6 0d fa 7b bb 58 32 d4 c7 d2 a5 03 b2 99 60 bc 90 20 c8 a4 a4 79 88 4c d0 a4 56 69 80 97 a5 1e 97 69 34 eb 4c 8d cd 32 32 b6 8f c9 e9 19 fa bb ba d3 6d 05 c6 26 27 e6 d2 76 05 d6 f5 dd c3 50 28 75 a5 fb 62 2b 1a 97 24 31 c6 c4 56 84 ce 78 3e 95 a8 0a 5e 86 e5 bd fd 3c f9 fc a7 52 ea ca 61 72 75 6e bd f9 2e f2 c5 3c f7 de f7 20 e3 e3 d7 b3 7b fb 19 74 75 f7 b2 f6 84 75 3c b8 69 2b e5 5a 99 fb ef b9 8d 7d 13 13 6c 1b 19 25 11 f1 af d7 a8 56 02 c6 c6 Data Ascii: f\|$8W\|}n5%lcvVVQ8J-3BJ}K ?}<D^[pR{X2` yLVii4L22m&'vP(ub+$1Vx>^<Rarun.< {tuu<i+Z}l%V
2024-01-16 21:32:55 UTC	16384	IN	Data Raw: 05 8a 45 d4 82 c2 78 a3 41 b3 11 80 09 31 9e e1 d8 e2 31 c6 b3 04 2b 96 b3 26 77 97 bf 1b cf b2 6d eb 0c bb 76 ec a6 3d 35 45 bf b7 c6 e6 e9 16 12 18 34 53 d6 ba b3 c4 cd 98 b1 ce 24 82 41 c9 28 a9 be 7f 01 a9 82 03 11 d5 aa 72 2e 54 a0 0a 46 40 37 16 d0 a7 96 de 3e 12 dc 56 bd bf ea 2d 07 d0 93 da d5 4f 86 02 b2 61 2a bb f3 f3 06 81 87 82 80 9c 48 b8 57 bd e8 af 06 7e 0d 78 a3 2b d0 81 17 bc e3 1d ef 78 05 f0 d6 62 b4 f4 ff 9d 1a ff d3 9f fe 34 35 5f 3a 8a 9e d6 bc 97 9c 9f fd d9 9f e5 87 7e e8 87 24 4f d3 d5 b7 bc e5 2d 45 25 5d f3 5e 0c f2 94 f6 62 2e 7a 29 c6 af bc f2 4a 29 46 b1 19 63 34 5f c5 85 5e cc 45 27 7f 4f 91 d8 ae f9 4c 74 33 3e 3e 5e fe bc 7e 6e e5 8b 4e 4d 4d 4d 14 45 55 4f 7a 96 65 58 6b 51 d5 51 2b 5a 4d 4d 4d 4d cd 97 50 a0 b7 55 78 2c Data Ascii: ExA11+&wmv=5E4S$A(r.TF@7>V-Oa*HW~x+xb45_:~$O-E%]^b.z)J)Fc4_^E'OLt3>>^~nNMMMEUOzeXkQQ+ZMMMMPUx,
2024-01-16 21:32:55 UTC	16384	IN	Data Raw: 3d c2 22 a3 9d aa 5f 86 12 bc 1f 69 72 2d 9c 36 a1 33 20 82 31 b1 77 63 b7 47 6f 44 0f 7e 01 bb 78 02 5b 48 20 a7 e7 30 51 03 ed ae 91 ae 9c c4 14 20 ba d9 44 0b 00 de 5b 63 fd e4 11 6e bd e5 f3 ec 98 db ca 39 ab a7 20 1d 90 1f 3f c2 7d f7 de cd 30 17 1a 8d 29 96 7b 6e 1d f8 d0 f6 38 68 a0 92 63 b1 64 99 65 c3 6d 6b 1b 21 0e 20 23 63 71 79 81 ed 53 6d 4c 0a 83 e1 90 46 43 30 12 d2 68 fa f0 66 86 ae fd cc da 2a 6a 42 a2 8b 2f 67 f0 c5 cf 91 2c 66 84 cd 90 dc b5 0f 11 b6 ec de 49 7f 59 d8 c8 32 0c 86 c5 95 2e eb 1b 6b 0c 93 01 7d cd 89 8b 50 ea 6e 4a fa b1 8f 10 9d b3 87 4b af 79 26 f1 f6 7d 68 ab 83 66 19 e9 a9 13 b4 b7 ec 61 76 df 85 1e 3c 36 3a 73 90 0d 08 8d b2 e5 a2 4b 91 20 44 fb eb 4c b7 9a a8 2a d6 e6 48 18 03 ca 46 77 83 40 02 9e e4 5c e0 ef ba f5 Data Ascii: ="_ir-63 1wcGoD~x[H 0Q D[cn9 ?}0){n8hcdemk! #cqySmLFC0hfjB/g,fIY2.k}PnJKy&}hfav<6:sK DLHFw@\
2024-01-16 21:32:55 UTC	16384	IN	Data Raw: 28 54 8b b4 2b 52 58 97 91 d0 98 a9 50 65 94 49 f9 c6 d7 60 60 27 10 b8 67 c8 ae 8a 28 43 db 70 35 a6 65 06 44 26 3d a3 78 0d 11 b0 63 69 c8 ca ed 63 c9 88 1a 8b 24 da e0 5f 8e be 98 ff 3d f1 0d 5c 39 fd 65 9e 32 ff 05 1e 3b 7d 2b 97 4f dd ce 81 d6 61 02 c9 7d df 3b 1b a7 3c 5b 6e 35 20 d1 88 c4 46 7c 79 e3 22 6e 59 7f 0c b7 ac 5d c5 a7 97 af f6 9f 39 21 d3 e1 06 91 f4 40 74 ec a9 95 00 ab 02 c6 6f 87 92 66 5f ce 30 a7 77 69 f8 54 03 cc 09 0b e3 fd 6a 75 df 75 a4 3b e3 17 53 02 b8 e5 35 e3 80 77 ec 77 5d 2a 43 48 2a de d9 b1 31 3d f6 0d a9 11 69 57 11 85 72 66 67 a9 60 04 19 7b 2f 36 d1 ba c5 58 41 6c 8d a8 55 f1 75 04 ca 04 b4 6c 5e a8 0f c9 98 22 42 99 1d 2f 7f 02 60 02 c4 84 08 10 64 7d a4 77 0a 59 ba 8f a8 bf 40 f7 d8 41 0e 7f f6 23 64 89 a5 d9 2e 4c Data Ascii: (T+RXPeI``'g(Cp5eD&=xcic$_=\9e2;}+Oa};<[n5 F\|y"nY]9!@tof_0wiTjuu;S5ww]CH1=iWrfg`{/6XAlUul^"B/`d}wY@A#d.L
2024-01-16 21:32:55 UTC	16384	IN	Data Raw: b6 e4 01 b7 82 73 a7 80 3e 38 bc fb e7 74 99 cd 9d 4b 0c f6 77 c8 47 63 52 9d a3 49 42 bd b5 14 e4 f3 ad b8 45 60 f1 13 58 6a ad 51 6b b4 7d fb 5b 18 31 60 84 25 13 b3 d2 f2 ed 36 96 89 d2 24 8c 65 6b 67 cb 63 92 3d 76 f7 f7 b8 78 f5 62 98 17 1a 73 be d6 58 9f 81 f4 38 30 f8 f1 6c e1 41 ef 13 e2 c2 bd b2 52 0c 63 12 e0 da 3d 33 73 27 7e 58 59 5b d9 62 61 f3 86 dc cb de 9f 6b 91 41 ef fa 7b 34 01 34 dc 17 c5 50 1e ff f0 0d df f0 0d 1a 83 8e c7 4f 4e b1 13 10 14 2d 8a ad 66 9b 86 17 2b 39 1a 40 bb 1a 80 03 bc f0 85 2f 14 cf ae 03 84 14 db 80 03 f8 be ef fb be 27 34 48 8f 79 72 6e 32 7b d5 98 70 65 a8 35 d6 5b 0d dd 34 fd 99 4a ca d5 c5 dd 28 b0 56 03 38 05 d3 ba ca a2 0f cd 1b bc 05 a9 c3 2c 3d 9a fb af ff f5 bf e2 a5 e8 f2 13 3f f1 13 ce bb b7 a3 b2 78 40 Data Ascii: s>8tKwGcRIBE`XjQk}[1`%6$ekgc=vxbsX80lARc=3s'~XY[bakA{44PON-f+9@/'4Hyrn2{pe5[4J(V8,=?x@
2024-01-16 21:32:55 UTC	16384	IN	Data Raw: 9b a5 59 c3 b7 19 c2 89 9f c8 5b ac 03 7c 12 6d 2a 87 08 a0 18 70 2a 1b 57 a9 b9 da f3 df 7d f7 dd 78 b3 36 fe ef ff fd bf 61 45 c5 b3 e8 9a c4 5e 01 b6 1a ca a9 fc 5d 1f 88 4a da 55 0a a1 b6 fb fa b0 9c 82 63 8d 27 d7 95 19 05 d2 7e a5 46 99 74 8d 47 57 e3 82 00 ce 35 15 9b 07 c8 1a 5b 1e 5c 03 b5 bf ef f8 8e ef c0 83 e5 90 07 5d 44 d4 35 50 fb 57 40 1d a4 e7 ea 20 ef 81 76 70 1e f4 f7 38 8c c7 e7 f2 73 7e e2 90 e7 b9 f8 55 20 a7 a6 70 ce 39 5d 54 50 70 ae 13 2b ac 16 f9 31 89 3f 2f a4 87 d3 fd ea 44 18 45 91 f1 6d a8 5c c3 69 ba 35 55 06 f8 f3 ec 22 1b 64 8a 7f e9 4c d9 df e8 0a b3 34 07 22 87 ff e3 cf 94 fe cb a0 0c c5 0a a6 f0 0f bd b2 56 a5 9c ae 2b c8 1f ab c3 ff aa b7 43 d8 43 dc c2 3b c1 94 f5 e3 ca f3 b8 22 55 cc 5a 75 f0 9f 59 4c fa 2e 87 99 3d Data Ascii: Y[\|mpW}x6aE^]JUc'~FtGW5[\]D5PW@ vp8s~U p9]TPp+1?/DEm\i5U"dL4"V+CC;"UZuYL.=
2024-01-16 21:32:55 UTC	16384	IN	Data Raw: 09 fb 82 24 7e 79 03 7c bb 2a 71 8f 82 ab 7b 8d d5 56 83 7a d2 a7 3f cd 83 fb fe b0 3f a1 b7 b3 cf 46 6f 0f 93 e5 d0 d4 fb 38 04 72 02 48 b7 d9 b5 3c bd 01 c0 4f c1 69 a9 87 31 84 62 73 88 12 22 b1 c4 c1 14 4d 90 22 b3 5c 08 d5 32 84 23 38 27 85 98 73 59 90 a1 87 ff c1 02 2c 67 ee b8 6e 70 6e 51 35 b8 18 e2 b9 10 9d 77 88 3c 2f 8c 61 81 7e 17 e7 e6 4d b9 59 1b 46 66 ed ce e6 94 99 d5 b5 41 ad e1 60 7e ad 0b b9 d6 c5 cd d3 26 c6 51 4c 92 a7 e4 92 85 fc f6 39 96 f1 d4 81 83 93 cd 0d fe 9f b7 bc e5 77 01 f5 f6 8a d4 34 1b c8 bd 32 7a c3 63 a8 a7 b3 b0 79 a2 f2 6f ac b5 23 4f 94 36 bc 62 78 e2 5f 95 60 0d 8a e5 57 bf fa d5 9a 2d 4b b1 92 e2 3e 0d f3 d5 74 6b 41 96 ae 98 cd 17 eb 31 5b 50 40 7f d9 97 7d 99 7a 8e 39 c5 8b fe 3c 34 4e fd 35 af 79 8d 53 ac a6 86 Data Ascii: $~y\|*q{Vz??Fo8rH<Oi1bs"M"\2#8'sY,gnpnQ5w</a~MYFfA`~&QL9w42zcyo#O6bx_`W-K>tkA1[P@}z9<4N5yS
2024-01-16 21:32:55 UTC	16384	IN	Data Raw: c2 fc 65 e6 1a b7 f3 c6 5d a6 ae 5b 55 75 87 7b 3d 80 db 5e 30 40 35 1f f5 b8 4a e0 46 cf 71 c1 9a 33 c3 03 88 a7 20 22 c7 71 54 dd 99 35 e2 25 e0 65 a6 5f 0c 30 40 dc b9 f5 55 d3 2f 2f 4d 34 43 9c 0e b7 76 03 2c 85 19 2f b4 5a 36 fe a3 83 59 94 b3 30 1f 54 38 bd e3 74 a5 67 5e b9 ad 77 6c 54 7a d9 75 63 fd c6 b5 bb 09 f4 ca 37 ee 59 87 07 5e cf fb c0 b6 0e 0e 9c 9e fe a0 95 34 c3 8d f7 39 ec f6 bb ad cd 2f 7d 70 47 af bc 61 ac 47 18 c2 fe 82 a3 03 3d d7 ea 7e c3 bd cc 1d 6d 62 e0 e9 4c 9d fa 31 7c ad cd 2a ea 7f bd 73 4b 97 ff ed 86 de 63 f5 99 c5 3e 9e e3 c3 99 c5 e6 f8 ef dd 38 d6 37 df 7b c9 fa 77 7a a7 b1 f1 30 e7 b7 8d 83 fe cc 26 09 9e 63 cc ba 6d 6a ad c7 ec b7 b4 45 db 71 b0 e3 51 ab a5 d7 86 b5 df b5 7d bb 3b 08 8d 48 97 d8 49 4f cd 82 6e d8 8d Data Ascii: e][Uu{=^0@5JFq3 "qT5%e_0@U//M4Cv,/Z6Y0T8tg^wlTzuc7Y^49/}pGaG=~mbL1\|*sKc>87{wz0&cmjEqQ};HIOn
2024-01-16 21:32:55 UTC	16384	IN	Data Raw: e4 49 d4 01 72 7e ca 3c 47 c5 5d 79 70 21 7c 87 51 00 53 96 a3 f1 54 12 dd 2b 25 f5 6f 58 54 f4 30 34 04 1b aa 33 9c 7a ef 38 89 a3 62 7e 16 93 0e d2 d8 48 a4 d3 12 09 35 4e 05 ce 85 8e 64 d8 8f a3 a2 83 cb 5b 1e c7 6e 5d 01 f1 de 80 d5 39 f5 f2 50 5d ff ea af fe 6a 1d c9 e1 1b ef 7f 69 4e dd ca 06 01 b0 1e 01 e6 54 cd 71 48 aa 53 5d 27 ad 06 f2 01 e7 00 d4 40 6f 01 6f 36 ef 00 73 e4 41 3c 00 75 dd f3 77 47 25 03 a8 06 94 01 73 b6 ee 88 04 38 57 a7 3a 67 3b ef 17 87 87 da c5 c8 80 a9 8f 4f ca bb bd 57 db 30 13 10 a5 05 55 c8 08 00 1b 17 46 5f 54 b9 ae cb d3 40 3c 69 39 4e cf 08 80 e7 fd b0 ae 21 6c a1 e3 38 8d a3 72 8f a3 e3 fb ec a5 36 59 99 b8 ee 87 e9 3c d2 6b 4e 4e fa 6e 8e 5b 7d 1e b4 7f ac 6e ae 85 bc b1 39 5a 5d 59 32 4c 1f ee f3 98 93 4d 5b 66 90 Data Ascii: Ir~<G]yp!\|QST+%oXT043z8b~H5Nd[n]9P]jiNTqHS]'@oo6sA<uwG%s8W:g;OW0UF_T@<i9N!l8r6Y<kNNn[}n9Z]Y2LM[f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.18	49769	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:54 UTC	639	OUT	GET /wp-content/themes/Signable2019Theme/_/img/icons/icon_twitter.svg HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:55 UTC	376	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:55 GMT Content-Type: image/svg+xml Content-Length: 993 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "3e1-602f236e1c3e7" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:55 UTC	993	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 38 22 20 68 65 69 67 68 74 3d 22 32 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 38 20 32 39 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 38 2e 38 30 35 34 35 20 32 36 2e 32 38 31 37 43 31 39 2e 33 37 31 35 20 32 36 2e 32 38 31 37 20 32 35 2e 31 35 30 37 20 31 37 2e 32 31 35 32 20 32 35 2e 31 35 30 37 20 39 2e 33 35 32 37 31 43 32 35 2e 31 35 30 37 20 39 2e 30 39 35 32 33 20 32 35 2e 31 35 30 37 20 38 2e 38 33 38 38 37 20 32 35 2e 31 33 33 39 20 38 2e 35 38 33 36 35 43 32 36 2e 32 35 38 32 20 37 2e 37 34 31 33 34 20 32 37 2e 32 32 38 37 20 36 2e 36 39 38 35 33 20 32 38 20 35 2e Data Ascii: <svg width="28" height="29" viewBox="0 0 28 29" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M8.80545 26.2817C19.3715 26.2817 25.1507 17.2152 25.1507 9.35271C25.1507 9.09523 25.1507 8.83887 25.1339 8.58365C26.2582 7.74134 27.2287 6.69853 28 5.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.18	49770	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:54 UTC	412	OUT	GET /wp-content/themes/Signable2019Theme/_/img/logos/logo_cyber_essentials.png HTTP/1.1 Host: www.signable.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:55 UTC	352	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:55 GMT Content-Type: image/png Content-Length: 11377 Connection: close Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "2c71-602f236e1c3e7" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:55 UTC	11377	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 51 00 00 00 52 08 06 00 00 00 ed 95 e7 58 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 2c 06 49 44 41 54 78 01 ed 9d 09 94 1d d5 79 e7 bf 7a 52 4b 6a ed 42 08 90 c4 d2 12 92 59 6c b3 43 b0 59 2c 0c c6 6c 26 5e 62 6c 0f 5e b0 93 89 e3 25 33 9e 33 e3 33 93 99 89 c3 c4 89 33 c9 64 e2 38 ce ea d8 01 db 09 4e 6c 30 8b c1 6c 46 20 16 b1 6f 12 02 4b 08 09 b1 48 6a 21 b5 b6 96 d4 da de cb ff f7 ee 7d ad ea ea 7a 7b bd d7 f5 e4 fa 9f 73 cf eb 7e af ea d6 ad aa 7b ff f7 bb df 76 03 cb d0 14 0a 85 c2 18 7d 1c a1 f2 36 95 e3 54 66 ab 1c aa 32 95 9f 55 b6 aa 6c 54 59 ab b2 52 e5 25 fe 0e 82 60 af 65 c8 Data Ascii: PNGIHDRQRXpHYs%%IR$sRGBgAMAa,IDATxyzRKjBYlCY,l&^bl^%3333d8Nl0lF oKHj!}z{s~{v}6Tf2UlTYR%`e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.18	49772	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:55 UTC	640	OUT	GET /wp-content/themes/Signable2019Theme/_/img/icons/icon_linkedin.svg HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:55 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:55 GMT Content-Type: image/svg+xml Content-Length: 1065 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "429-602f236e1b447" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:55 UTC	1065	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 38 22 20 68 65 69 67 68 74 3d 22 32 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 38 20 32 39 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 35 37 36 5f 34 35 29 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 35 2e 38 38 33 38 20 2d 30 2e 30 37 36 36 36 30 32 43 32 37 2e 30 32 35 37 20 2d 30 2e 30 37 36 36 36 30 32 20 32 37 2e 39 35 35 36 20 30 2e 38 35 39 37 38 20 32 37 2e 39 35 35 36 20 32 2e 30 31 34 38 35 56 32 36 2e 38 33 37 37 43 32 37 2e 39 35 35 36 20 32 37 2e 39 39 32 37 20 32 37 2e 30 32 35 37 20 32 38 2e 39 33 30 38 20 32 35 2e 38 Data Ascii: <svg width="28" height="29" viewBox="0 0 28 29" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0_576_45)"><path d="M25.8838 -0.0766602C27.0257 -0.0766602 27.9556 0.85978 27.9556 2.01485V26.8377C27.9556 27.9927 27.0257 28.9308 25.8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.18	49774	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:55 UTC	638	OUT	GET /wp-content/themes/Signable2019Theme/_/img/icons/icon_tiktok.svg HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:55 UTC	376	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:55 GMT Content-Type: image/svg+xml Content-Length: 749 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "2ed-602f236e1bfff" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:55 UTC	749	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 33 33 34 20 33 33 33 32 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_2" data-name="Layer 2" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 3334 3332"> <defs> <style> .cls-1 { fill: #fff; fill-rule: evenodd; } </style> </defs> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.18	49765	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:55 UTC	584	OUT	GET /wp-content/plugins/sg-cachepress/assets/js/lazysizes.min.js?ver=7.4.6 HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:55 UTC	387	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:55 GMT Content-Type: application/javascript Content-Length: 7888 Connection: close Vary: Accept-Encoding Last-Modified: Fri, 12 Jan 2024 12:12:32 GMT ETag: "1ed0-60ebe94218692" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:55 UTC	7888	IN	Data Raw: 2f 2a 21 20 6c 61 7a 79 73 69 7a 65 73 20 2d 20 76 35 2e 33 2e 31 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 75 2c 44 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6b 2c 48 3b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 76 61 72 20 74 3d 7b 6c 61 7a 79 43 6c 61 73 73 3a 22 6c 61 7a 79 6c 6f 61 64 22 2c 6c 6f 61 64 65 64 43 6c 61 73 73 3a 22 6c 61 7a 79 6c 6f 61 64 65 64 22 2c 6c 6f 61 64 69 6e 67 43 6c 61 73 73 3a 22 6c 61 7a 79 6c 6f 61 64 69 6e 67 22 2c 70 72 65 6c 6f 61 64 43 6c 61 73 73 3a 22 6c 61 7a 79 70 72 65 6c 6f 61 64 22 2c 65 72 72 6f 72 43 6c 61 73 73 3a 22 6c 61 7a 79 65 72 72 6f 72 22 2c 61 75 74 6f 73 69 7a 65 73 43 6c 61 73 73 3a 22 6c 61 7a 79 61 75 74 Data Ascii: /! lazysizes - v5.3.1 /!function(e){var t=function(u,D,f){"use strict";var k,H;if(function(){var e;var t={lazyClass:"lazyload",loadedClass:"lazyloaded",loadingClass:"lazyloading",preloadClass:"lazypreload",errorClass:"lazyerror",autosizesClass:"lazyaut

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.18	49776	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:55 UTC	597	OUT	GET /wp-content/themes/Signable2019Theme/js/responsive-image-maps.min.js?ver=1692089186 HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:55 UTC	386	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:55 GMT Content-Type: application/javascript Content-Length: 1119 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "45f-602f236e2ae4b" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:55 UTC	1119	IN	Data Raw: 2f 2a 0a 2a 20 72 77 64 49 6d 61 67 65 4d 61 70 73 20 6a 51 75 65 72 79 20 70 6c 75 67 69 6e 20 76 31 2e 36 0a 2a 0a 2a 20 41 6c 6c 6f 77 73 20 69 6d 61 67 65 20 6d 61 70 73 20 74 6f 20 62 65 20 75 73 65 64 20 69 6e 20 61 20 72 65 73 70 6f 6e 73 69 76 65 20 64 65 73 69 67 6e 20 62 79 20 72 65 63 61 6c 63 75 6c 61 74 69 6e 67 20 74 68 65 20 61 72 65 61 20 63 6f 6f 72 64 69 6e 61 74 65 73 20 74 6f 20 6d 61 74 63 68 20 74 68 65 20 61 63 74 75 61 6c 20 69 6d 61 67 65 20 73 69 7a 65 20 6f 6e 20 6c 6f 61 64 20 61 6e 64 20 77 69 6e 64 6f 77 2e 72 65 73 69 7a 65 0a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 36 20 4d 61 74 74 20 53 74 6f 77 0a 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 73 74 6f 77 62 61 6c 6c 2f 6a 51 75 65 Data Ascii: / rwdImageMaps jQuery plugin v1.6 Allows image maps to be used in a responsive design by recalculating the area coordinates to match the actual image size on load and window.resize** Copyright (c) 2016 Matt Stow* https://github.com/stowball/jQue

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.18	49777	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:55 UTC	404	OUT	GET /wp-content/themes/Signable2019Theme/_/img/icons/icon_facebook.svg HTTP/1.1 Host: www.signable.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:55 UTC	378	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:55 GMT Content-Type: image/svg+xml Content-Length: 4460 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "116c-602f236e1b447" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:55 UTC	4460	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 38 22 20 68 65 69 67 68 74 3d 22 32 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 38 20 32 39 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 35 37 36 5f 33 38 29 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 33 2e 39 34 36 35 20 32 38 2e 39 39 39 39 4c 31 33 2e 39 35 39 20 32 38 2e 39 39 39 39 48 31 33 2e 39 35 34 37 4c 31 33 2e 39 34 36 35 20 32 38 2e 39 39 39 39 5a 4d 31 34 2e 30 34 35 33 20 32 38 2e 39 39 39 39 48 31 34 Data Ascii: <svg width="28" height="29" viewBox="0 0 28 29" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0_576_38)"><path fill-rule="evenodd" clip-rule="evenodd" d="M13.9465 28.9999L13.959 28.9999H13.9547L13.9465 28.9999ZM14.0453 28.9999H14

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.18	49778	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:55 UTC	405	OUT	GET /wp-content/themes/Signable2019Theme/_/img/icons/icon_instagram.svg HTTP/1.1 Host: www.signable.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:55 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:55 GMT Content-Type: image/svg+xml Content-Length: 3086 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "c0e-602f236e1b447" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:55 UTC	3086	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 39 22 20 68 65 69 67 68 74 3d 22 32 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 39 20 32 39 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 34 2e 34 39 39 38 20 32 2e 31 32 36 34 36 43 31 31 2e 31 33 39 34 20 32 2e 31 32 36 34 36 20 31 30 2e 37 31 38 20 32 2e 31 34 30 37 31 20 39 2e 33 39 38 32 36 20 32 2e 32 30 30 39 32 43 38 2e 30 38 31 32 37 20 32 2e 32 36 31 30 34 20 37 2e 31 38 31 38 31 20 32 2e 34 37 30 31 38 20 36 2e 33 39 34 37 33 20 32 2e 37 37 36 30 37 43 35 2e 35 38 31 30 38 20 33 2e 30 39 32 32 38 20 34 2e 38 39 31 30 35 20 33 2e 35 31 35 33 36 20 34 2e 32 30 33 31 Data Ascii: <svg width="29" height="29" viewBox="0 0 29 29" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M14.4998 2.12646C11.1394 2.12646 10.718 2.14071 9.39826 2.20092C8.08127 2.26104 7.18181 2.47018 6.39473 2.77607C5.58108 3.09228 4.89105 3.51536 4.2031

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.18	49775	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:55 UTC	590	OUT	GET /wp-content/themes/Signable2019Theme/_/js/vendor/slick.min.js?ver=1692089186 HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:56 UTC	388	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:55 GMT Content-Type: application/javascript Content-Length: 42863 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "a76f-602f236e1d387" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:56 UTC	15996	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 69 29 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 69 28 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 29 3a 69 28 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 53 6c 69 63 6b 7c 7c 7b 7d 3b 28 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 76 61 72 20 Data Ascii: !function(i){"use strict";"function"==typeof define&&define.amd?define(["jquery"],i):"undefined"!=typeof exports?module.exports=i(require("jquery")):i(jQuery)}(function(i){"use strict";var e=window.Slick\|\|{};(e=function(){var e=0;return function(t,o){var
2024-01-16 21:32:56 UTC	16384	IN	Data Raw: 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 26 26 28 73 3d 2d 32 29 29 2c 72 3d 74 2a 6e 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 2a 73 29 2c 6e 2e 73 6c 69 64 65 43 6f 75 6e 74 25 6e 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 63 72 6f 6c 6c 21 3d 30 26 26 69 2b 6e 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 63 72 6f 6c 6c 3e 6e 2e 73 6c 69 64 65 43 6f 75 6e 74 26 26 6e 2e 73 6c 69 64 65 43 6f 75 6e 74 3e 6e 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 26 26 28 69 3e 6e 2e 73 6c 69 64 65 43 6f 75 6e 74 3f 28 6e 2e 73 6c 69 64 65 4f 66 66 73 65 74 3d 28 6e 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 2d 28 69 2d 6e 2e 73 6c 69 64 65 43 6f 75 6e 74 29 29 2a 6e 2e 73 Data Ascii: ptions.slidesToShow&&(s=-2)),r=tn.options.slidesToShows),n.slideCount%n.options.slidesToScroll!=0&&i+n.options.slidesToScroll>n.slideCount&&n.slideCount>n.options.slidesToShow&&(i>n.slideCount?(n.slideOffset=(n.options.slidesToShow-(i-n.slideCount))*n.s
2024-01-16 21:32:56 UTC	10483	IN	Data Raw: 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 22 2c 69 2e 74 72 61 6e 73 69 74 69 6f 6e 54 79 70 65 3d 22 77 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 22 2c 76 6f 69 64 20 30 3d 3d 3d 65 2e 70 65 72 73 70 65 63 74 69 76 65 50 72 6f 70 65 72 74 79 26 26 76 6f 69 64 20 30 3d 3d 3d 65 2e 77 65 62 6b 69 74 50 65 72 73 70 65 63 74 69 76 65 26 26 28 69 2e 61 6e 69 6d 54 79 70 65 3d 21 31 29 29 2c 76 6f 69 64 20 30 21 3d 3d 65 2e 6d 73 54 72 61 6e 73 66 6f 72 6d 26 26 28 69 2e 61 6e 69 6d 54 79 70 65 3d 22 6d 73 54 72 61 6e 73 66 6f 72 6d 22 2c 69 2e 74 72 61 6e 73 66 6f 72 6d 54 79 70 65 3d 22 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 22 2c 69 2e 74 72 61 6e 73 69 74 69 6f 6e 54 79 70 65 3d 22 6d 73 54 72 61 6e 73 69 74 69 6f 6e 22 2c 76 6f 69 64 20 30 3d 3d 3d 65 Data Ascii: bkit-transform",i.transitionType="webkitTransition",void 0===e.perspectiveProperty&&void 0===e.webkitPerspective&&(i.animType=!1)),void 0!==e.msTransform&&(i.animType="msTransform",i.transformType="-ms-transform",i.transitionType="msTransition",void 0===e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.18	49780	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:55 UTC	587	OUT	GET /wp-content/themes/Signable2019Theme/_/js/functions.out.js?ver=1692089186 HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:55 UTC	387	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:55 GMT Content-Type: application/javascript Content-Length: 5238 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "1476-602f236e1cf9f" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:55 UTC	5238	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 24 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 65 3d 24 28 77 69 6e 64 6f 77 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 3b 65 3e 32 26 26 24 28 22 2e 68 65 61 64 65 72 2d 77 72 61 70 70 65 72 22 29 2e 61 64 64 43 6c 61 73 73 28 22 6f 6e 73 63 72 6f 6c 6c 22 29 2c 65 3c 32 26 26 24 28 22 2e 68 65 61 64 65 72 2d 77 72 61 70 70 65 72 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 6f 6e 73 63 72 6f 6c 6c 22 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 24 28 22 2e 63 61 72 64 2d 73 74 61 63 6b 22 29 2e 61 64 64 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 2c 24 28 22 2e 63 61 72 64 2d 69 74 65 6d 22 29 2e 65 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 22 74 6f 70 22 Data Ascii: !function($){function e(){var e=$(window).scrollTop();e>2&&$(".header-wrapper").addClass("onscroll"),e<2&&$(".header-wrapper").removeClass("onscroll")}function t(){$(".card-stack").addClass("active"),$(".card-item").each((function(){$(this).hasClass("top"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.18	49781	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:55 UTC	403	OUT	GET /wp-content/themes/Signable2019Theme/_/img/icons/icon_twitter.svg HTTP/1.1 Host: www.signable.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:56 UTC	376	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:55 GMT Content-Type: image/svg+xml Content-Length: 993 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "3e1-602f236e1c3e7" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:56 UTC	993	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 38 22 20 68 65 69 67 68 74 3d 22 32 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 38 20 32 39 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 38 2e 38 30 35 34 35 20 32 36 2e 32 38 31 37 43 31 39 2e 33 37 31 35 20 32 36 2e 32 38 31 37 20 32 35 2e 31 35 30 37 20 31 37 2e 32 31 35 32 20 32 35 2e 31 35 30 37 20 39 2e 33 35 32 37 31 43 32 35 2e 31 35 30 37 20 39 2e 30 39 35 32 33 20 32 35 2e 31 35 30 37 20 38 2e 38 33 38 38 37 20 32 35 2e 31 33 33 39 20 38 2e 35 38 33 36 35 43 32 36 2e 32 35 38 32 20 37 2e 37 34 31 33 34 20 32 37 2e 32 32 38 37 20 36 2e 36 39 38 35 33 20 32 38 20 35 2e Data Ascii: <svg width="28" height="29" viewBox="0 0 28 29" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M8.80545 26.2817C19.3715 26.2817 25.1507 17.2152 25.1507 9.35271C25.1507 9.09523 25.1507 8.83887 25.1339 8.58365C26.2582 7.74134 27.2287 6.69853 28 5.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.18	49785	108.138.106.126	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:55 UTC	540	OUT	GET /c/hotjar-2736869.js?sv=7 HTTP/1.1 Host: static.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:56 UTC	633	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Tue, 16 Jan 2024 21:32:56 GMT Access-Control-Allow-Origin: * Cache-Control: max-age=60 Cross-Origin-Resource-Policy: cross-origin ETag: W/280bf0e9948090166cf62c11a0ac474c Strict-Transport-Security: max-age=2592000; includeSubDomains X-Cache-Hit: 1 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 5a8a3f9dea8033ff97627e0a0c6df032.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: cnSrYHn8HIKOUDD6KCdP4rA0UKo9RwTLxRScEvXy4434bFxishd6rw==
2024-01-16 21:32:56 UTC	8787	IN	Data Raw: 32 32 34 62 0d 0a 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 3d 20 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 7c 7c 20 7b 22 73 69 74 65 5f 69 64 22 3a 32 37 33 36 38 36 39 2c 22 72 22 3a 31 2e 30 2c 22 72 65 63 5f 76 61 6c 75 65 22 3a 30 2e 30 2c 22 73 74 61 74 65 5f 63 68 61 6e 67 65 5f 6c 69 73 74 65 6e 5f 6d 6f 64 65 22 3a 22 61 75 74 6f 6d 61 74 69 63 22 2c 22 72 65 63 6f 72 64 22 3a 74 72 75 65 2c 22 63 6f 6e 74 69 6e 75 6f 75 73 5f 63 61 70 74 75 72 65 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 72 65 63 6f 72 64 69 6e 67 5f 63 61 70 74 75 72 65 5f 6b 65 79 73 74 72 6f 6b 65 73 22 3a 74 72 75 65 2c 22 73 65 73 73 69 6f 6e 5f 63 61 70 74 75 72 65 5f 63 6f 6e 73 6f 6c 65 5f 63 6f 6e 73 65 6e 74 22 3a Data Ascii: 224bwindow.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":2736869,"r":1.0,"rec_value":0.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":true,"session_capture_console_consent":
2024-01-16 21:32:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.18	49782	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:55 UTC	588	OUT	GET /wp-content/themes/Signable2019Theme/_/js/panel-expanders.min.js?ver=3.4.1 HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:56 UTC	385	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:56 GMT Content-Type: application/javascript Content-Length: 569 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "239-602f236e1d387" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:56 UTC	569	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 24 29 7b 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 22 2e 65 78 70 61 6e 64 69 6e 67 2d 70 61 6e 65 6c 22 29 2e 65 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 24 28 74 68 69 73 29 2e 66 69 6e 64 28 22 2e 65 78 70 61 6e 64 69 6e 67 2d 63 6f 6e 74 65 6e 74 22 29 2e 61 74 74 72 28 22 64 61 74 61 2d 65 78 70 68 65 69 67 68 74 22 29 2c 74 3d 24 28 74 68 69 73 29 2e 66 69 6e 64 28 22 2e 65 78 70 61 6e 64 69 6e 67 2d 63 6f 6e 74 65 6e 74 22 29 2e 61 74 74 72 28 22 64 61 74 61 2d 65 78 70 68 65 69 67 68 74 65 78 70 61 6e 64 65 64 22 29 2c 69 3d 24 28 74 68 69 73 29 2e 66 69 6e 64 28 22 2e 65 78 70 61 6e 64 69 6e 67 2d 63 6f 6e 74 65 6e 74 22 29 2c 65 3d 24 28 Data Ascii: !function($){$(document).ready((function(){$(".expanding-panel").each((function(){var n=$(this).find(".expanding-content").attr("data-expheight"),t=$(this).find(".expanding-content").attr("data-expheightexpanded"),i=$(this).find(".expanding-content"),e=$(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.18	49783	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:55 UTC	404	OUT	GET /wp-content/themes/Signable2019Theme/_/img/icons/icon_linkedin.svg HTTP/1.1 Host: www.signable.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:56 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:56 GMT Content-Type: image/svg+xml Content-Length: 1065 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "429-602f236e1b447" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:56 UTC	1065	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 38 22 20 68 65 69 67 68 74 3d 22 32 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 38 20 32 39 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 35 37 36 5f 34 35 29 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 35 2e 38 38 33 38 20 2d 30 2e 30 37 36 36 36 30 32 43 32 37 2e 30 32 35 37 20 2d 30 2e 30 37 36 36 36 30 32 20 32 37 2e 39 35 35 36 20 30 2e 38 35 39 37 38 20 32 37 2e 39 35 35 36 20 32 2e 30 31 34 38 35 56 32 36 2e 38 33 37 37 43 32 37 2e 39 35 35 36 20 32 37 2e 39 39 32 37 20 32 37 2e 30 32 35 37 20 32 38 2e 39 33 30 38 20 32 35 2e 38 Data Ascii: <svg width="28" height="29" viewBox="0 0 28 29" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0_576_45)"><path d="M25.8838 -0.0766602C27.0257 -0.0766602 27.9556 0.85978 27.9556 2.01485V26.8377C27.9556 27.9927 27.0257 28.9308 25.8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.18	49787	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:56 UTC	444	OUT	GET /wp-content/themes/Signable2019Theme/_/img/icons/icon_tiktok.svg HTTP/1.1 Host: www.signable.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775
2024-01-16 21:32:56 UTC	376	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:56 GMT Content-Type: image/svg+xml Content-Length: 749 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "2ed-602f236e1bfff" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:56 UTC	749	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 33 33 34 20 33 33 33 32 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_2" data-name="Layer 2" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 3334 3332"> <defs> <style> .cls-1 { fill: #fff; fill-rule: evenodd; } </style> </defs> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.18	49786	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:56 UTC	770	OUT	GET /wp-content/themes/Signable2019Theme/_/img/backgrounds/signable_squiggle_right_black.svg HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/wp-content/themes/Signable2019Theme/_/css/style.css?ver=1701765538 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775
2024-01-16 21:32:56 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:56 GMT Content-Type: image/svg+xml Content-Length: 1543 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "607-602f236e1ac77" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:56 UTC	1543	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 39 39 22 20 68 65 69 67 68 74 3d 22 38 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 39 39 20 38 37 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 36 38 2e 38 37 31 20 33 30 2e 35 35 32 38 43 31 36 37 2e 36 35 39 20 33 35 2e 30 33 36 37 20 31 36 36 2e 34 39 39 20 33 38 2e 37 30 39 35 20 31 36 35 2e 38 36 33 20 34 30 2e 35 35 34 35 4c 31 36 35 2e 33 38 31 20 34 31 2e 31 34 38 37 43 31 36 32 2e 34 31 37 20 34 38 2e 35 34 39 37 20 31 35 38 2e 30 36 37 20 35 35 2e 33 32 Data Ascii: <svg width="99" height="87" viewBox="0 0 99 87" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M168.871 30.5528C167.659 35.0367 166.499 38.7095 165.863 40.5545L165.381 41.1487C162.417 48.5497 158.067 55.32

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.18	49788	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:56 UTC	751	OUT	GET /wp-content/themes/Signable2019Theme/_/img/icons/icon_star_rating.png HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/wp-content/themes/Signable2019Theme/_/css/style.css?ver=1701765538 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775
2024-01-16 21:32:56 UTC	350	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:56 GMT Content-Type: image/png Content-Length: 1803 Connection: close Last-Modified: Tue, 05 Dec 2023 08:38:58 GMT ETag: "70b-60bbf2a656574" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:56 UTC	1803	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 39 08 06 00 00 00 6a 31 48 c1 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 32 2d 63 30 30 30 20 37 39 2e 31 62 36 35 61 37 39 62 34 2c 20 32 30 32 32 2f 30 36 2f 31 33 2d 32 32 3a 30 31 3a 30 Data Ascii: PNGIHDR<9j1HtEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.1b65a79b4, 2022/06/13-22:01:0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.18	49789	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:56 UTC	769	OUT	GET /wp-content/themes/Signable2019Theme/_/img/backgrounds/signable_squiggle_left_black.svg HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/wp-content/themes/Signable2019Theme/_/css/style.css?ver=1701765538 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775
2024-01-16 21:32:56 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:56 GMT Content-Type: image/svg+xml Content-Length: 1555 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "613-602f236e1ac77" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:56 UTC	1555	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 34 37 22 20 68 65 69 67 68 74 3d 22 38 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 37 20 38 37 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 34 30 2e 38 37 31 20 33 30 2e 35 35 32 38 43 31 33 39 2e 36 35 39 20 33 35 2e 30 33 36 37 20 31 33 38 2e 34 39 39 20 33 38 2e 37 30 39 35 20 31 33 37 2e 38 36 33 20 34 30 2e 35 35 34 35 4c 31 33 37 2e 33 38 31 20 34 31 2e 31 34 38 37 43 31 33 34 2e 34 31 37 20 34 38 2e 35 34 39 37 20 31 33 30 2e 30 36 37 20 35 35 2e Data Ascii: <svg width="147" height="87" viewBox="0 0 147 87" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M140.871 30.5528C139.659 35.0367 138.499 38.7095 137.863 40.5545L137.381 41.1487C134.417 48.5497 130.067 55.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.18	49792	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:56 UTC	549	OUT	GET /include/1705440900000/n9f4k7sdmsma.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:56 UTC	973	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 225144 Connection: close Server: istio-envoy Date: Tue, 16 Jan 2024 21:32:56 GMT Last-Modified: Thu, 11 Jan 2024 23:20:41 GMT ETag: "3db5a8a9b4533be6dd8189a6b1d56d25" x-amz-server-side-encryption: AES256 x-amz-version-id: 5EBO5JUKNKRTDOPCXcVgN_pC3BUz4UIw Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: no-cache x-envoy-upstream-service-time: 28 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 694f0c51ec6e4c7f413de59a8f819960.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: Hx3mOuEyVdMwigUrbscaZ509A97iSPGJ0GQfOaESNcD0OpCnxM7VHA==
2024-01-16 21:32:56 UTC	3615	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 77 65 62 70 61 63 6b 4a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 28 74 29 7b 66 6f 72 28 76 61 72 20 72 2c 6f 2c 69 3d 74 5b 30 5d 2c 73 3d 74 5b 31 5d 2c 63 3d 30 2c 75 3d 5b 5d 3b 63 3c 69 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 6f 3d 69 5b 63 5d 2c 6e 5b 6f 5d 26 26 75 2e 70 75 73 68 28 6e 5b 6f 5d 5b 30 5d 29 2c 6e 5b 6f 5d 3d 30 3b 66 6f 72 28 72 20 69 6e 20 73 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 73 2c 72 29 26 26 28 65 5b 72 5d 3d 73 5b 72 5d 29 3b 66 6f 72 28 61 26 26 61 28 74 29 3b 75 2e 6c 65 6e 67 74 68 3b 29 75 2e 73 68 69 66 74 28 29 28 29 7d 76 61 72 20 74 3d 7b 7d 2c 6e 3d 7b 30 3a 30 7d 3b 66 75 6e 63 74 69 Data Ascii: !function(e){function webpackJsonpCallback(t){for(var r,o,i=t[0],s=t[1],c=0,u=[];c<i.length;c++)o=i[c],n[o]&&u.push(n[o][0]),n[o]=0;for(r in s)Object.prototype.hasOwnProperty.call(s,r)&&(e[r]=s[r]);for(a&&a(t);u.length;)u.shift()()}var t={},n={0:0};functi
2024-01-16 21:32:56 UTC	8949	IN	Data Raw: 67 2c 65 73 63 61 70 65 29 3b 76 61 72 20 61 3d 22 22 3b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 72 29 72 5b 73 5d 26 26 28 61 2b 3d 22 3b 20 22 2b 73 2c 21 30 21 3d 3d 72 5b 73 5d 26 26 28 61 2b 3d 22 3d 22 2b 72 5b 73 5d 29 29 3b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 74 2b 22 3d 22 2b 6e 2b 61 7d 74 7c 7c 28 6f 3d 7b 7d 29 3b 66 6f 72 28 76 61 72 20 63 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3f 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 20 22 29 3a 5b 5d 2c 75 3d 2f 28 25 5b 30 2d 39 41 2d 5a 5d 7b 32 7d 29 2b 2f 67 2c 66 3d 30 3b 66 3c 63 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 7b 76 61 72 20 6c 3d 63 5b 66 5d 2e 73 70 6c 69 74 28 22 3d 22 29 2c 64 3d 6c 2e 73 6c 69 63 65 28 31 29 2e 6a 6f Data Ascii: g,escape);var a="";for(var s in r)r[s]&&(a+="; "+s,!0!==r[s]&&(a+="="+r[s]));return document.cookie=t+"="+n+a}t\|\|(o={});for(var c=document.cookie?document.cookie.split("; "):[],u=/(%[0-9A-Z]{2})+/g,f=0;f<c.length;f++){var l=c[f].split("="),d=l.slice(1).jo
2024-01-16 21:32:56 UTC	16384	IN	Data Raw: 6b 65 57 69 74 68 4d 65 74 68 6f 64 41 6e 64 41 72 67 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 61 79 62 65 49 6e 76 6f 6b 65 44 65 6c 65 67 61 74 65 28 65 2c 6e 29 7b 76 61 72 20 72 3d 65 2e 69 74 65 72 61 74 6f 72 5b 6e 2e 6d 65 74 68 6f 64 5d 3b 69 66 28 72 3d 3d 3d 74 29 7b 69 66 28 6e 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 22 74 68 72 6f 77 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 7b 69 66 28 65 2e 69 74 65 72 61 74 6f 72 2e 72 65 74 75 72 6e 26 26 28 6e 2e 6d 65 74 68 6f 64 3d 22 72 65 74 75 72 6e 22 2c 6e 2e 61 72 67 3d 74 2c 6d 61 79 62 65 49 6e 76 6f 6b 65 44 65 6c 65 67 61 74 65 28 65 2c 6e 29 2c 22 74 68 72 6f 77 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 29 72 65 74 75 72 6e 20 64 3b 6e 2e 6d 65 74 68 6f 64 3d 22 74 68 72 6f 77 22 2c 6e 2e 61 Data Ascii: keWithMethodAndArg()}}function maybeInvokeDelegate(e,n){var r=e.iterator[n.method];if(r===t){if(n.delegate=null,"throw"===n.method){if(e.iterator.return&&(n.method="return",n.arg=t,maybeInvokeDelegate(e,n),"throw"===n.method))return d;n.method="throw",n.a
2024-01-16 21:32:56 UTC	3339	IN	Data Raw: 75 65 7d 6f 28 69 2c 5a 61 6c 67 6f 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 61 29 2c 74 29 7d 72 65 74 75 72 6e 20 30 3d 3d 3d 6e 26 26 74 2e 72 65 73 6f 6c 76 65 28 72 29 2c 74 7d 2c 5a 61 6c 67 6f 50 72 6f 6d 69 73 65 2e 68 61 73 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 2c 6e 3d 5b 5d 2c 72 3d 66 75 6e 63 74 69 6f 6e 20 5f 6c 6f 6f 70 28 72 29 7b 69 66 28 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 72 29 29 7b 76 61 72 20 6f 3d 65 5b 72 5d 3b 75 74 69 6c 73 5f 69 73 50 72 6f 6d 69 73 65 28 6f 29 3f 6e 2e 70 75 73 68 28 6f 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 5b 72 5d 3d 65 7d 29 29 3a 74 5b 72 5d 3d 6f 7d 7d 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 65 29 72 28 6f 29 3b 72 65 74 75 72 6e 20 5a Data Ascii: ue}o(i,ZalgoPromise.resolve(a),t)}return 0===n&&t.resolve(r),t},ZalgoPromise.hash=function(e){var t={},n=[],r=function _loop(r){if(e.hasOwnProperty(r)){var o=e[r];utils_isPromise(o)?n.push(o.then(function(e){t[r]=e})):t[r]=o}};for(var o in e)r(o);return Z
2024-01-16 21:32:56 UTC	8192	IN	Data Raw: 65 2e 67 65 74 4f 72 53 65 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 68 69 73 2e 68 61 73 28 65 29 29 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 28 65 29 3b 76 61 72 20 6e 3d 74 28 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 65 74 28 65 2c 6e 29 2c 6e 7d 2c 43 72 6f 73 73 44 6f 6d 61 69 6e 53 61 66 65 57 65 61 6b 4d 61 70 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 67 65 74 46 75 6e 63 74 69 6f 6e 4e 61 6d 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 7c 7c 65 2e 5f 5f 6e 61 6d 65 5f 5f 7c 7c 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 22 61 6e 6f 6e 79 6d 6f 75 73 22 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 46 75 6e 63 74 69 6f 6e 4e 61 6d 65 28 65 2c 74 29 7b 74 72 79 7b 64 65 6c 65 74 65 20 65 2e 6e 61 6d 65 2c 65 2e 6e 61 6d 65 Data Ascii: e.getOrSet=function(e,t){if(this.has(e))return this.get(e);var n=t();return this.set(e,n),n},CrossDomainSafeWeakMap}();function getFunctionName(e){return e.name\|\|e.__name__\|\|e.displayName\|\|"anonymous"}function setFunctionName(e,t){try{delete e.name,e.name
2024-01-16 21:32:56 UTC	8949	IN	Data Raw: 3d 6e 65 77 20 45 72 72 6f 72 28 65 2e 6d 65 73 73 61 67 65 29 3b 72 65 74 75 72 6e 20 6f 2e 63 6f 64 65 3d 6e 2c 72 26 26 28 6f 2e 64 61 74 61 3d 72 29 2c 6f 2e 73 74 61 63 6b 3d 74 2b 22 5c 6e 5c 6e 22 2b 6f 2e 73 74 61 63 6b 2c 6f 7d 2c 45 2e 70 72 6f 6d 69 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 20 73 65 72 69 61 6c 69 7a 61 74 69 6f 6e 20 69 73 20 6e 6f 74 20 69 6d 70 6c 65 6d 65 6e 74 65 64 3b 20 6e 6f 74 68 69 6e 67 20 74 6f 20 64 65 73 65 72 69 61 6c 69 7a 65 22 29 7d 2c 45 2e 72 65 67 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 52 65 67 45 78 70 28 65 29 7d 2c 45 2e 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e Data Ascii: =new Error(e.message);return o.code=n,r&&(o.data=r),o.stack=t+"\n\n"+o.stack,o},E.promise=function(){throw new Error("Promise serialization is not implemented; nothing to deserialize")},E.regex=function(e){return new RegExp(e)},E.date=function(e){return n
2024-01-16 21:32:56 UTC	7435	IN	Data Raw: 61 6c 69 7a 65 28 65 2c 7b 73 65 6e 64 3a 61 7d 29 29 3a 65 7d 2c 6f 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 65 73 65 72 69 61 6c 69 7a 65 4d 65 73 73 61 67 65 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 6f 2c 69 3d 72 2e 73 65 6e 64 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 4f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 65 29 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 70 61 72 73 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 69 73 53 65 72 69 61 6c 69 7a 65 64 54 79 70 65 28 74 68 69 73 29 29 72 65 74 75 72 6e 20 6e 3b 76 61 72 20 72 2c 6f 3b 69 66 28 69 73 53 65 72 69 61 6c 69 7a 65 64 54 79 70 65 28 6e 29 3f 28 72 3d 6e 2e 5f 5f 74 79 70 65 5f 5f 2c 6f 3d 6e 2e 5f Data Ascii: alize(e,{send:a})):e},o))}function deserializeMessage(e,t,n,r){var o,i=r.send;return function(e,t){if(void 0===t&&(t=O),"undefined"!==e)return JSON.parse(e,function(e,n){if(isSerializedType(this))return n;var r,o;if(isSerializedType(n)?(r=n.__type__,o=n._
2024-01-16 21:32:56 UTC	8949	IN	Data Raw: 64 22 3a 22 73 70 65 63 69 66 69 65 64 22 29 2b 22 20 77 69 6e 64 6f 77 22 29 3a 73 3f 6e 65 77 20 45 72 72 6f 72 28 22 52 65 71 75 65 73 74 20 6c 69 73 74 65 6e 65 72 20 61 6c 72 65 61 64 79 20 65 78 69 73 74 73 20 66 6f 72 20 22 2b 6e 2b 22 20 66 6f 72 20 22 2b 28 73 3d 3d 3d 67 65 74 57 69 6c 64 63 61 72 64 28 29 3f 22 77 69 6c 64 63 61 72 64 22 3a 22 73 70 65 63 69 66 69 65 64 22 29 2b 22 20 77 69 6e 64 6f 77 22 29 3a 6f 3f 6e 65 77 20 45 72 72 6f 72 28 22 52 65 71 75 65 73 74 20 6c 69 73 74 65 6e 65 72 20 61 6c 72 65 61 64 79 20 65 78 69 73 74 73 20 66 6f 72 20 22 2b 6e 2b 22 20 6f 6e 20 64 6f 6d 61 69 6e 20 22 2b 6f 2e 74 6f 53 74 72 69 6e 67 28 29 29 3a 6e 65 77 20 45 72 72 6f 72 28 22 52 65 71 75 65 73 74 20 6c 69 73 74 65 6e 65 72 20 61 6c 72 65 Data Ascii: d":"specified")+" window"):s?new Error("Request listener already exists for "+n+" for "+(s===getWildcard()?"wildcard":"specified")+" window"):o?new Error("Request listener already exists for "+n+" on domain "+o.toString()):new Error("Request listener alre
2024-01-16 21:32:56 UTC	7435	IN	Data Raw: 72 20 6c 61 72 67 65 72 20 74 68 61 6e 20 6d 61 78 69 6d 75 6d 20 73 69 7a 65 3a 20 30 78 22 2b 6b 4d 61 78 4c 65 6e 67 74 68 28 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2b 22 20 62 79 74 65 73 22 29 3b 72 65 74 75 72 6e 20 30 7c 65 7d 66 75 6e 63 74 69 6f 6e 20 62 79 74 65 4c 65 6e 67 74 68 28 65 2c 74 29 7b 69 66 28 42 75 66 66 65 72 2e 69 73 42 75 66 66 65 72 28 65 29 29 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 26 26 28 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 28 65 29 7c 7c 65 20 69 6e 73 74 61 6e 63 65 6f 66 Data Ascii: r larger than maximum size: 0x"+kMaxLength().toString(16)+" bytes");return 0\|e}function byteLength(e,t){if(Buffer.isBuffer(e))return e.length;if("undefined"!==typeof ArrayBuffer&&"function"===typeof ArrayBuffer.isView&&(ArrayBuffer.isView(e)\|\|e instanceof
2024-01-16 21:32:56 UTC	16384	IN	Data Raw: 20 74 68 69 73 3d 3d 3d 65 7c 7c 30 3d 3d 3d 42 75 66 66 65 72 2e 63 6f 6d 70 61 72 65 28 74 68 69 73 2c 65 29 7d 2c 42 75 66 66 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 73 70 65 63 74 3d 66 75 6e 63 74 69 6f 6e 20 69 6e 73 70 65 63 74 28 29 7b 76 61 72 20 65 3d 22 22 2c 6e 3d 74 2e 49 4e 53 50 45 43 54 5f 4d 41 58 5f 42 59 54 45 53 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 65 6e 67 74 68 3e 30 26 26 28 65 3d 74 68 69 73 2e 74 6f 53 74 72 69 6e 67 28 22 68 65 78 22 2c 30 2c 6e 29 2e 6d 61 74 63 68 28 2f 2e 7b 32 7d 2f 67 29 2e 6a 6f 69 6e 28 22 20 22 29 2c 74 68 69 73 2e 6c 65 6e 67 74 68 3e 6e 26 26 28 65 2b 3d 22 20 2e 2e 2e 20 22 29 29 2c 22 3c 42 75 66 66 65 72 20 22 2b 65 2b 22 3e 22 7d 2c 42 75 66 66 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f Data Ascii: this===e\|\|0===Buffer.compare(this,e)},Buffer.prototype.inspect=function inspect(){var e="",n=t.INSPECT_MAX_BYTES;return this.length>0&&(e=this.toString("hex",0,n).match(/.{2}/g).join(" "),this.length>n&&(e+=" ... ")),"<Buffer "+e+">"},Buffer.prototype.co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.18	49790	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:56 UTC	754	OUT	GET /wp-content/themes/Signable2019Theme/_/img/backgrounds/bg_app_screen.png HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/wp-content/themes/Signable2019Theme/_/css/style.css?ver=1701765538 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775
2024-01-16 21:32:57 UTC	353	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:56 GMT Content-Type: image/png Content-Length: 74559 Connection: close Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "1233f-602f236e1ac77" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:57 UTC	16031	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 2c 00 00 02 71 08 03 00 00 00 be 0c d3 b1 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 03 00 50 4c 54 45 47 70 4c 46 46 46 21 21 21 27 27 27 7f 7f 7f 00 00 00 28 28 28 ff ff ff 3f 3f 3f 2d 2d 2d 24 24 24 1d 1d 1d 5b 5b 5b 1c 1c 1c 1c 1c 1c d5 d5 d5 e9 e9 e9 18 18 18 ce ce ce c2 c2 c2 06 06 06 5d 5d 5d 0e 0e 0e 13 13 13 65 63 62 db cc c7 11 11 11 5e 5e 5e 4f 4f 4f 8a 8a 8a bd bd bd a5 a5 a5 bb bb bb 39 39 39 e3 e3 e3 f3 f3 f3 f8 f1 e8 ff ff ff f8 f8 f8 f1 f1 f1 01 ab e8 eb eb eb 00 ab e8 e8 e8 e8 fa f9 f9 4d df ff f6 f6 f7 f5 f5 f6 f7 f7 f7 ef ef ef fe ff ff fe fe fe fb fb fb 21 c2 f2 1f c0 f1 f3 f2 f2 fc fd fd e4 e4 e4 f0 f0 f1 13 b8 ee 0d b4 ec 2f cb Data Ascii: PNGIHDR,qgAMAasRGBPLTEGpLFFF!!!'''(((???---$$$[[[]]]ecb^^^OOO999M!/
2024-01-16 21:32:57 UTC	16384	IN	Data Raw: 45 10 ed a1 42 ad 72 8a 29 f2 f1 a9 5e a9 10 bc f8 1e de f5 d7 e8 94 e5 3a ab f7 3c 5d a4 3a 82 88 71 e2 87 b1 52 0c 54 51 3a e6 18 ed 28 d1 de 84 61 a9 28 13 69 f8 e4 a7 13 41 84 81 20 bc a7 13 cb 69 bc 06 5b 00 36 c8 31 e0 16 fc 85 20 5e 49 27 12 f0 d2 02 b0 2d e3 cd 8e 6a 06 61 28 c9 be a6 bf 72 95 7b bf cd 9a 30 61 c3 8b 7b d6 d7 bd 31 c1 c2 e6 e4 0d 07 53 10 4a a0 28 0b bf 08 9d 61 cc 0d 41 a4 98 40 55 d6 05 c3 fa 06 91 02 e5 de 24 0b 41 ac b8 8a 0a 4e 7b e9 b4 a7 8f 3e 95 64 15 da 7b c8 29 b9 83 f8 8c 7c 10 cf 0b 2a 27 d6 8d ee d1 43 5a e4 20 9e 10 0a e5 62 2e 12 8f 13 f3 1b 0a 23 08 74 b8 89 c7 73 b9 7c b9 20 94 4a 3c 27 4b d8 96 41 4b b2 5a 28 70 80 27 72 39 e9 da 9f 15 8b 9b a1 45 dc 09 0f 32 29 51 a1 32 9c 0a ff 02 93 5a cf a4 22 99 c8 16 1c a5 Data Ascii: EBr)^:<]:qRTQ:(a(iA i[61 ^I'-ja(r{0a{1SJ(aA@U$AN{>d{)\|*'CZ b.#ts\| J<'KAKZ(p'r9E2)Q2Z"
2024-01-16 21:32:57 UTC	16384	IN	Data Raw: ac 99 e8 8d 6a ac 06 d5 7d d0 25 8c e8 ef 38 e9 52 1c d3 93 94 b3 46 fa 59 8c cc e4 de 42 b4 c2 fd d4 3e 29 eb f3 c5 cb be a7 69 43 46 d7 2c 64 fd 72 45 df 29 8b 1f 23 b2 b0 28 21 7c 0b ea 74 cc c8 e2 d9 de 33 22 db 7b 86 b3 f7 e6 3a a7 62 1e 22 f1 eb 1d 5c e0 44 58 b1 21 ce 1f 35 db eb 9b cf 94 89 a0 c8 62 54 81 53 a7 d1 34 9b 60 30 11 90 c8 02 f8 4f c0 1b db 32 a9 f0 8d b5 42 2c 8c c0 c2 13 c0 39 bc 3f 1f 48 18 fc 47 b0 7e 08 61 36 4f 1f c4 c0 51 88 ed 82 ab f4 81 f5 83 b1 c4 e6 e0 b8 14 3a fd 17 8c 04 0b 6c cb a9 9a ce 9c 3d 35 f1 c0 40 92 a6 8f 11 84 3c 69 c3 60 78 79 78 1a 95 7a bc 97 a4 1a e4 69 49 8d 7b ba de 49 d5 03 bd 4c a7 b0 a8 c9 5c 91 a6 61 7e b3 b7 37 ce b3 2e 2f a7 ec 67 21 30 bc 65 62 bb 54 36 37 27 cc 02 e0 2b 15 b2 b9 65 a1 77 da f3 d3 Data Ascii: j}%8RFYB>)iCF,drE)#(!\|t3"{:b"\DX!5bTS4`0O2B,9?HG~a6OQ:l=5@<i`xyxziI{IL\a~7./g!0ebT67'+ew
2024-01-16 21:32:57 UTC	16384	IN	Data Raw: 30 b8 a4 e9 54 a7 d5 d3 2a 38 ef 2b 58 84 36 b3 2c b0 ed 81 c5 3d 67 ca f2 c0 62 cb 6e 08 d3 ed 83 38 1c 66 54 9e 5e e3 26 53 ea c7 00 d3 1e 71 8d a7 17 c3 54 9e de 38 ae 6d bb 60 75 f6 de 52 4d 59 74 b7 29 f2 93 ee a0 cf 75 3e a8 35 b7 f1 49 c3 e4 02 8e 63 57 5b 16 e9 cd 52 a7 3a 51 96 c1 78 a3 53 65 f9 f4 dc 69 c0 25 5d 68 f0 f5 6a da e9 7a da 54 2b e1 b4 f2 20 36 b7 b7 df 02 8b 03 8d de db 48 9d de 6b 37 24 76 73 cb e2 cd a6 60 b1 80 0c 71 22 76 cb 0f 69 da e0 e0 2c a5 b6 fe f9 0f 11 a8 07 16 db 05 8b be 20 01 2b 36 4e 8a 63 e9 b8 19 65 f3 fd 93 9e 9c 09 5f 5e 4a d0 1c 8b 11 5e ae 2b 53 38 a2 28 f7 d2 95 6a 33 de 1b 9e 0c 27 87 7c 95 c5 e0 98 28 4e 67 c4 45 df b1 af 46 bd fc 21 07 44 37 0f 30 6c ff dc ac 73 8d a6 1c 95 79 b9 d3 bc da b2 d8 30 c0 e9 c8 Data Ascii: 0T*8+X6,=gbn8fT^&SqT8m`uRMYt)u>5IcW[R:QxSei%]hjzT+ 6Hk7$vs`q"vi, +6Nce_^J^+S8(j3'\|(NgEF!D70lsy0
2024-01-16 21:32:57 UTC	9376	IN	Data Raw: 60 91 ca dc ca 52 0a 2c 3e a3 28 8b 8b 21 13 21 32 3f e3 e1 a4 b9 53 2e 8d 4c bc 10 da a4 6e 8d 59 f0 d4 69 90 cc 2b ee 09 0e 4e 87 bb 21 61 1b 31 0b 05 16 0e 06 8b f0 6d eb c8 e3 63 19 05 16 fd 80 85 d4 98 ee 17 13 0b 54 69 01 41 83 a7 42 e8 4b 80 cb 9d d2 32 0b 88 14 21 4f 77 72 6f 97 88 0c 19 86 72 43 5c 0b 16 89 64 3c 9c b8 dd 19 52 7a dc 50 60 d1 97 1b 42 f2 a5 5c e0 94 f9 24 24 1d 42 f8 b1 24 1f c4 83 d5 0b 69 df 69 88 72 7b 73 ad 53 c9 0f a1 4e 88 3b 14 c9 fa 73 43 7e 7c d5 db f4 30 fe 16 85 46 7e ee 36 07 5e 5b 7f a4 80 a0 0f b0 18 43 7f f7 13 3f 4d dc ee 24 e9 31 05 16 fd a4 4e 35 96 02 a1 44 16 22 87 aa 79 a5 16 32 2c 75 4a 73 a7 14 2c 68 9d 45 d0 d3 36 b3 f0 09 ee 1b 17 f0 59 e8 fd ba 21 4f 9e 3e 79 b2 d0 e3 eb c9 dc dc df cc a8 69 2e 3c 5d 48 Data Ascii: `R,>(!!2?S.LnYi+N!a1mcTiABK2!OwrorC\d<RzP`B\$$B$iir{sSN;sC~\|0F~6^[C?M$1N5D"y2,uJs,hE6Y!O>yi.<]H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.18	49791	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:56 UTC	749	OUT	GET /wp-content/themes/Signable2019Theme/_/img/icons/icon_list_tick.svg HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/wp-content/themes/Signable2019Theme/_/css/style.css?ver=1701765538 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775
2024-01-16 21:32:57 UTC	376	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:56 GMT Content-Type: image/svg+xml Content-Length: 324 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "144-602f236e1b447" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:57 UTC	324	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 36 22 20 68 65 69 67 68 74 3d 22 34 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 36 20 34 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 63 69 72 63 6c 65 20 63 78 3d 22 32 33 22 20 63 79 3d 22 32 33 22 20 72 3d 22 32 33 22 20 66 69 6c 6c 3d 22 23 30 30 39 35 45 36 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 31 2e 30 35 31 39 20 33 30 2e 31 32 37 36 4c 31 34 2e 37 32 30 37 20 32 33 2e 36 36 31 31 4c 31 35 2e 39 33 36 31 20 32 32 2e 34 31 39 38 4c 32 31 2e 30 35 31 39 20 32 37 2e 36 34 34 39 4c 33 31 2e 39 30 35 33 20 31 36 2e 35 35 39 36 4c 33 33 2e 31 32 30 37 20 31 37 2e 38 30 30 39 4c 32 31 2e 30 35 Data Ascii: <svg width="46" height="46" viewBox="0 0 46 46" fill="none" xmlns="http://www.w3.org/2000/svg"><circle cx="23" cy="23" r="23" fill="#0095E6"/><path d="M21.0519 30.1276L14.7207 23.6611L15.9361 22.4198L21.0519 27.6449L31.9053 16.5596L33.1207 17.8009L21.05

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.18	49793	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:56 UTC	707	OUT	GET /wp-content/themes/Signable2019Theme/elements/blocks/expanding-panels//_/img/caret-down.svg HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775
2024-01-16 21:32:57 UTC	375	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:57 GMT Content-Type: image/svg+xml Content-Length: 163 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "a3-602f236e273b2" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:57 UTC	163	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 33 22 20 68 65 69 67 68 74 3d 22 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 20 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 20 31 4c 36 2e 35 20 36 4c 31 32 20 31 22 20 73 74 72 6f 6b 65 3d 22 23 32 36 33 36 34 30 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 32 22 2f 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: <svg width="13" height="8" viewBox="0 0 13 8" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M1 1L6.5 6L12 1" stroke="#263640" stroke-width="2"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.18	49794	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:57 UTC	619	OUT	GET /wp-content/uploads/icon_star_rating_orange.png HTTP/1.1 Host: signable.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:57 UTC	378	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 16 Jan 2024 21:32:57 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 281 Connection: close Location: https://www.signable.co.uk/wp-content/uploads/icon_star_rating_orange.png Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0301 NC:000000 UP: X-CDN-C: all
2024-01-16 21:32:57 UTC	281	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 69 67 6e 61 62 6c 65 2e 63 6f 2e 75 6b 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 69 63 6f 6e 5f 73 74 61 72 5f 72 61 74 69 6e 67 5f 6f 72 61 6e 67 65 2e 70 6e 67 22 3e 68 65 72 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.signable.co.uk/wp-content/uploads/icon_star_rating_orange.png">her

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.18	49796	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:57 UTC	537	OUT	GET /wp-content/themes/Signable2019Theme/_/img/icons/icon_star_rating.png HTTP/1.1 Host: www.signable.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _ga_4XE2VYSQ35=GS1.1.1705440775.1.0.1705440775.60.0.0; _ga=GA1.1.2131508639.1705440776
2024-01-16 21:32:57 UTC	350	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:57 GMT Content-Type: image/png Content-Length: 1803 Connection: close Last-Modified: Tue, 05 Dec 2023 08:38:58 GMT ETag: "70b-60bbf2a656574" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:57 UTC	1803	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 39 08 06 00 00 00 6a 31 48 c1 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 32 2d 63 30 30 30 20 37 39 2e 31 62 36 35 61 37 39 62 34 2c 20 32 30 32 32 2f 30 36 2f 31 33 2d 32 32 3a 30 31 3a 30 Data Ascii: PNGIHDR<9j1HtEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.1b65a79b4, 2022/06/13-22:01:0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.18	49795	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:57 UTC	848	OUT	GET /wp-content/themes/Signable2019Theme/_/img/backgrounds/squiggle_left_white.svg HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/wp-content/themes/Signable2019Theme/_/css/style.css?ver=1701765538 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _ga_4XE2VYSQ35=GS1.1.1705440775.1.0.1705440775.60.0.0; _ga=GA1.1.2131508639.1705440776
2024-01-16 21:32:57 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:57 GMT Content-Type: image/svg+xml Content-Length: 1560 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "618-602f236e1b05f" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:57 UTC	1560	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 35 22 20 68 65 69 67 68 74 3d 22 31 33 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 35 20 31 33 39 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 2d 31 39 2e 34 35 20 31 33 36 2e 31 35 34 43 2d 32 32 2e 32 32 38 33 20 31 33 32 2e 34 33 31 20 2d 32 34 2e 34 30 30 37 20 31 32 39 2e 32 35 31 20 2d 32 35 2e 34 35 39 35 20 31 32 37 2e 36 31 32 4c 2d 32 35 2e 36 32 38 36 20 31 32 36 2e 38 36 35 43 2d 32 39 2e 36 31 39 34 20 31 31 39 2e 39 36 34 20 2d 33 32 2e 32 Data Ascii: <svg width="105" height="139" viewBox="0 0 105 139" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M-19.45 136.154C-22.2283 132.431 -24.4007 129.251 -25.4595 127.612L-25.6286 126.865C-29.6194 119.964 -32.2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.18	49798	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:57 UTC	556	OUT	GET /wp-content/themes/Signable2019Theme/_/img/backgrounds/signable_squiggle_right_black.svg HTTP/1.1 Host: www.signable.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _ga_4XE2VYSQ35=GS1.1.1705440775.1.0.1705440775.60.0.0; _ga=GA1.1.2131508639.1705440776
2024-01-16 21:32:57 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:57 GMT Content-Type: image/svg+xml Content-Length: 1543 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "607-602f236e1ac77" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:57 UTC	1543	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 39 39 22 20 68 65 69 67 68 74 3d 22 38 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 39 39 20 38 37 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 36 38 2e 38 37 31 20 33 30 2e 35 35 32 38 43 31 36 37 2e 36 35 39 20 33 35 2e 30 33 36 37 20 31 36 36 2e 34 39 39 20 33 38 2e 37 30 39 35 20 31 36 35 2e 38 36 33 20 34 30 2e 35 35 34 35 4c 31 36 35 2e 33 38 31 20 34 31 2e 31 34 38 37 43 31 36 32 2e 34 31 37 20 34 38 2e 35 34 39 37 20 31 35 38 2e 30 36 37 20 35 35 2e 33 32 Data Ascii: <svg width="99" height="87" viewBox="0 0 99 87" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M168.871 30.5528C167.659 35.0367 166.499 38.7095 165.863 40.5545L165.381 41.1487C162.417 48.5497 158.067 55.32

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.18	49797	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:57 UTC	612	OUT	GET /wp-content/uploads/logo_krispykreme.png HTTP/1.1 Host: signable.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:57 UTC	371	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 16 Jan 2024 21:32:57 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 274 Connection: close Location: https://www.signable.co.uk/wp-content/uploads/logo_krispykreme.png Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0301 NC:000000 UP: X-CDN-C: all
2024-01-16 21:32:57 UTC	274	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 69 67 6e 61 62 6c 65 2e 63 6f 2e 75 6b 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 6c 6f 67 6f 5f 6b 72 69 73 70 79 6b 72 65 6d 65 2e 70 6e 67 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.signable.co.uk/wp-content/uploads/logo_krispykreme.png">here</a>.<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.18	49799	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:57 UTC	609	OUT	GET /wp-content/uploads/logo_bodyshop.png HTTP/1.1 Host: signable.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:57 UTC	368	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 16 Jan 2024 21:32:57 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 271 Connection: close Location: https://www.signable.co.uk/wp-content/uploads/logo_bodyshop.png Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0301 NC:000000 UP: X-CDN-C: all
2024-01-16 21:32:57 UTC	271	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 69 67 6e 61 62 6c 65 2e 63 6f 2e 75 6b 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 6c 6f 67 6f 5f 62 6f 64 79 73 68 6f 70 2e 70 6e 67 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.signable.co.uk/wp-content/uploads/logo_bodyshop.png">here</a>.</p>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.18	49800	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:57 UTC	555	OUT	GET /wp-content/themes/Signable2019Theme/_/img/backgrounds/signable_squiggle_left_black.svg HTTP/1.1 Host: www.signable.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _ga_4XE2VYSQ35=GS1.1.1705440775.1.0.1705440775.60.0.0; _ga=GA1.1.2131508639.1705440776
2024-01-16 21:32:57 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:57 GMT Content-Type: image/svg+xml Content-Length: 1555 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "613-602f236e1ac77" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:57 UTC	1555	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 34 37 22 20 68 65 69 67 68 74 3d 22 38 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 37 20 38 37 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 34 30 2e 38 37 31 20 33 30 2e 35 35 32 38 43 31 33 39 2e 36 35 39 20 33 35 2e 30 33 36 37 20 31 33 38 2e 34 39 39 20 33 38 2e 37 30 39 35 20 31 33 37 2e 38 36 33 20 34 30 2e 35 35 34 35 4c 31 33 37 2e 33 38 31 20 34 31 2e 31 34 38 37 43 31 33 34 2e 34 31 37 20 34 38 2e 35 34 39 37 20 31 33 30 2e 30 36 37 20 35 35 2e Data Ascii: <svg width="147" height="87" viewBox="0 0 147 87" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M140.871 30.5528C139.659 35.0367 138.499 38.7095 137.863 40.5545L137.381 41.1487C134.417 48.5497 130.067 55.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.18	49801	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:57 UTC	624	OUT	GET /wp-content/uploads/logo_university_of_edinburgh.png HTTP/1.1 Host: signable.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:57 UTC	383	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 16 Jan 2024 21:32:57 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 286 Connection: close Location: https://www.signable.co.uk/wp-content/uploads/logo_university_of_edinburgh.png Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0301 NC:000000 UP: X-CDN-C: all
2024-01-16 21:32:57 UTC	286	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 69 67 6e 61 62 6c 65 2e 63 6f 2e 75 6b 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 6c 6f 67 6f 5f 75 6e 69 76 65 72 73 69 74 79 5f 6f 66 5f 65 64 69 6e 62 75 72 67 68 2e 70 6e 67 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.signable.co.uk/wp-content/uploads/logo_university_of_edinburgh.png

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.18	49807	18.164.96.87	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:57 UTC	547	OUT	GET /modules.2472296d2d26f0040059.js HTTP/1.1 Host: script.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:57 UTC	719	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 224764 Connection: close Date: Mon, 15 Jan 2024 14:36:14 GMT Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin ETag: "2a8085a6e35df0d52338b3148cf33f20" Last-Modified: Mon, 15 Jan 2024 14:36:02 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 fa503ecd9278a874859948f3b586c782.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 X-Amz-Cf-Id: CuVS6_PqAlMjGRcnZ0nZTbD60mQ8cb7SP6vxV1H1Xn3f6-Jsxdywmw== Age: 111403
2024-01-16 21:32:57 UTC	15665	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 6f 64 75 6c 65 73 2e 32 34 37 32 32 39 36 64 32 64 32 36 66 30 30 34 30 30 35 39 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 37 38 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 63 6f 6e 73 74 20 72 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 49 44 45 4e 54 49 46 59 5f 55 53 45 52 3a 22 69 64 65 6e 74 69 66 79 5f 75 73 65 72 22 2c 41 55 54 4f 54 41 47 5f 52 45 43 4f 52 44 49 4e 47 3a 22 61 75 74 6f 74 61 67 5f 72 65 63 6f Data Ascii: /! For license information please see modules.2472296d2d26f0040059.js.LICENSE.txt /!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_reco
2024-01-16 21:32:57 UTC	16384	IN	Data Raw: 67 4e 61 6d 65 43 68 61 72 61 63 74 65 72 73 52 45 2c 22 22 29 7d 3b 72 65 74 75 72 6e 20 70 28 74 29 7d 76 61 72 20 70 3d 7b 32 3a 7b 69 67 6e 6f 72 65 43 6c 61 73 73 4c 69 73 74 3a 5b 22 6f 76 65 72 22 2c 22 68 6f 76 65 72 22 2c 22 61 63 74 69 76 65 22 2c 22 73 65 6c 65 63 74 65 64 22 2c 22 73 63 72 6f 6c 6c 65 64 22 5d 2c 69 67 6e 6f 72 65 42 6f 64 79 43 6c 61 73 73 65 73 3a 21 30 2c 69 67 6e 6f 72 65 55 55 49 44 43 6c 61 73 73 65 73 3a 21 30 2c 6d 61 78 43 6c 61 73 73 65 73 41 6c 6c 6f 77 65 64 3a 35 2c 64 69 73 61 6c 6c 6f 77 65 64 54 61 67 4e 61 6d 65 43 68 61 72 61 63 74 65 72 73 52 45 3a 2f 5b 5e 61 2d 7a 41 2d 5a 30 2d 39 2d 5f 5d 2f 67 7d 7d 2c 76 3d 7b 32 3a 74 28 74 28 7b 7d 2c 70 5b 32 5d 29 2c 7b 7d 2c 7b 67 65 74 46 75 6c 6c 53 65 6c 65 63 Data Ascii: gNameCharactersRE,"")};return p(t)}var p={2:{ignoreClassList:["over","hover","active","selected","scrolled"],ignoreBodyClasses:!0,ignoreUUIDClasses:!0,maxClassesAllowed:5,disallowedTagNameCharactersRE:/[^a-zA-Z0-9-_]/g}},v={2:t(t({},p[2]),{},{getFullSelec
2024-01-16 21:32:57 UTC	16384	IN	Data Raw: 6e 64 22 29 7d 2c 44 3d 7b 73 65 74 75 70 3a 21 31 2c 6c 69 73 74 65 6e 3a 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 44 2e 73 65 74 75 70 7c 7c 28 68 6a 2e 61 64 6f 70 74 65 64 53 74 79 6c 65 53 68 65 65 74 73 2e 69 6e 69 74 28 29 2c 68 6a 2e 61 64 6f 70 74 65 64 53 74 79 6c 65 53 68 65 65 74 73 2e 72 65 67 69 73 74 65 72 28 44 2e 73 65 6e 64 2e 62 69 6e 64 28 44 2c 22 61 64 6f 70 74 65 64 5f 73 74 79 6c 65 5f 73 68 65 65 74 73 22 29 2c 21 30 29 2c 44 2e 73 65 74 75 70 3d 21 30 29 7d 29 2c 22 62 65 68 61 76 69 6f 72 2d 64 61 74 61 2e 61 64 6f 70 74 65 64 53 74 79 6c 65 53 68 65 65 74 73 2e 6c 69 73 74 65 6e 22 29 2c 73 65 6e 64 3a 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 26 26 73 65 Data Ascii: nd")},D={setup:!1,listen:hj.tryCatch((function(){D.setup\|\|(hj.adoptedStyleSheets.init(),hj.adoptedStyleSheets.register(D.send.bind(D,"adopted_style_sheets"),!0),D.setup=!0)}),"behavior-data.adoptedStyleSheets.listen"),send:hj.tryCatch((function(e,t){t&&se
2024-01-16 21:32:57 UTC	16384	IN	Data Raw: 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6f 2e 63 68 69 6c 64 4c 69 73 74 43 68 61 6e 67 65 4d 61 70 2c 6e 3d 74 2e 67 65 74 28 65 29 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 6e 3d 6e 65 77 20 43 2c 74 2e 73 65 74 28 65 2c 6e 29 29 2c 6e 7d 29 2c 22 4d 75 74 61 74 69 6f 6e 50 72 6f 6a 65 63 74 69 6f 6e 2e 67 65 74 43 68 69 6c 64 6c 69 73 74 43 68 61 6e 67 65 22 29 2c 74 68 69 73 2e 70 72 6f 63 65 73 73 43 68 69 6c 64 6c 69 73 74 43 68 61 6e 67 65 73 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 2e 63 68 69 6c 64 4c 69 73 74 43 68 61 6e 67 65 4d 61 70 7c 7c 28 6f 2e 63 68 69 6c 64 4c 69 73 74 43 68 61 6e 67 65 4d 61 70 3d 6e 65 77 20 53 2c 6f 2e 6d 75 74 61 74 69 6f 6e 73 2e 66 Data Ascii: hj.tryCatch((function(e){var t=o.childListChangeMap,n=t.get(e);return n\|\|(n=new C,t.set(e,n)),n}),"MutationProjection.getChildlistChange"),this.processChildlistChanges=hj.tryCatch((function(){o.childListChangeMap\|\|(o.childListChangeMap=new S,o.mutations.f
2024-01-16 21:32:57 UTC	16384	IN	Data Raw: 20 30 3b 76 61 72 20 65 2c 74 2c 6e 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 76 61 72 20 6e 3d 68 28 6e 3d 65 5b 30 5d 2c 69 3d 65 5b 31 5d 2c 6f 3d 65 5b 32 5d 2c 72 3d 65 5b 33 5d 2c 74 5b 30 5d 2c 37 2c 2d 36 38 30 38 37 36 39 33 36 29 2c 72 3d 68 28 72 2c 6e 2c 69 2c 6f 2c 74 5b 31 5d 2c 31 32 2c 2d 33 38 39 35 36 34 35 38 36 29 2c 6f 3d 68 28 6f 2c 72 2c 6e 2c 69 2c 74 5b 32 5d 2c 31 37 2c 36 30 36 31 30 35 38 31 39 29 2c 69 3d 68 28 69 2c 6f 2c 72 2c 6e 2c 74 5b 33 5d 2c 32 32 2c 2d 31 30 34 34 35 32 35 33 33 30 29 3b 6e 3d 68 28 6e 2c 69 2c 6f 2c 72 2c 74 5b 34 5d 2c 37 2c 2d 31 37 36 34 31 38 38 39 37 29 2c 72 3d 68 28 72 2c 6e 2c 69 2c 6f 2c 74 5b 35 5d 2c 31 32 2c 31 32 30 30 30 38 30 34 32 36 29 2c 6f 3d 68 28 6f 2c 72 2c 6e 2c 69 2c Data Ascii: 0;var e,t,n;function u(e,t){var n=h(n=e[0],i=e[1],o=e[2],r=e[3],t[0],7,-680876936),r=h(r,n,i,o,t[1],12,-389564586),o=h(o,r,n,i,t[2],17,606105819),i=h(i,o,r,n,t[3],22,-1044525330);n=h(n,i,o,r,t[4],7,-176418897),r=h(r,n,i,o,t[5],12,1200080426),o=h(o,r,n,i,
2024-01-16 21:32:57 UTC	16384	IN	Data Raw: 22 29 29 7d 29 2c 22 63 6f 6d 6d 6f 6e 22 29 2c 65 2e 65 6e 61 62 6c 65 53 63 72 6f 6c 6c 69 6e 67 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 6a 2e 68 71 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 66 66 28 22 73 63 72 6f 6c 6c 2e 68 6f 74 6a 61 72 44 69 73 61 62 6c 65 22 29 2c 68 6a 2e 68 71 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 66 66 28 22 72 65 73 69 7a 65 2e 68 6f 74 6a 61 72 44 69 73 61 62 6c 65 22 29 2c 68 6a 2e 68 71 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 66 66 28 22 6d 6f 75 73 65 77 68 65 65 6c 2e 68 6f 74 6a 61 72 44 69 73 61 62 6c 65 22 29 2c 68 6a 2e 68 71 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 66 66 28 22 44 4f 4d 4d 6f 75 73 65 53 63 72 6f 6c 6c 2e 68 6f 74 6a 61 72 44 69 73 61 62 6c 65 22 29 2c 68 6a 2e 68 71 28 64 6f 63 Data Ascii: "))}),"common"),e.enableScrolling=hj.tryCatch((function(){hj.hq(document).off("scroll.hotjarDisable"),hj.hq(document).off("resize.hotjarDisable"),hj.hq(document).off("mousewheel.hotjarDisable"),hj.hq(document).off("DOMMouseScroll.hotjarDisable"),hj.hq(doc
2024-01-16 21:32:57 UTC	16384	IN	Data Raw: 61 74 63 68 28 65 29 7b 68 6a 2e 6c 6f 67 2e 64 65 62 75 67 28 22 54 68 65 20 57 65 62 20 53 6f 63 6b 65 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 61 73 20 72 65 66 75 73 65 64 2e 20 5c 6e 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 7d 72 65 74 75 72 6e 21 30 7d 29 2c 22 64 61 74 61 2e 48 6f 74 6a 61 72 57 65 62 53 6f 63 6b 65 74 2e 63 6f 6e 6e 65 63 74 22 29 2c 79 2e 70 72 6f 74 6f 74 79 70 65 2e 75 70 64 61 74 65 4c 61 73 74 55 73 65 72 41 63 74 69 76 69 74 79 54 69 6d 65 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 6c 61 73 74 55 73 65 72 41 63 74 69 76 69 74 79 54 69 6d 65 3d 28 6e 65 77 20 69 2e 66 5f 29 2e 67 65 74 54 69 6d 65 28 29 7d 29 2c 22 64 61 74 61 2e 48 6f 74 6a 61 72 57 65 62 53 6f 63 6b 65 74 Data Ascii: atch(e){hj.log.debug("The Web Socket connection was refused. \n ".concat(e))}}return!0}),"data.HotjarWebSocket.connect"),y.prototype.updateLastUserActivityTime=hj.tryCatch((function(){this._lastUserActivityTime=(new i.f_).getTime()}),"data.HotjarWebSocket
2024-01-16 21:32:57 UTC	16384	IN	Data Raw: 64 2c 22 2f 63 6f 6e 73 65 6e 74 22 29 2e 63 6f 6e 63 61 74 28 6f 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 74 2e 67 72 61 6e 74 65 64 3d 21 21 65 2e 73 75 63 63 65 73 73 26 26 2d 31 21 3d 3d 65 2e 73 63 6f 70 65 73 2e 69 6e 64 65 78 4f 66 28 22 61 73 73 6f 63 69 61 74 65 22 29 2c 74 2e 69 6e 50 72 6f 67 72 65 73 73 3d 21 31 3b 72 3d 74 2e 63 61 6c 6c 62 61 63 6b 73 2e 70 6f 70 28 29 3b 29 68 6a 2e 74 72 79 43 61 74 63 68 28 72 2c 22 43 6f 6e 73 65 6e 74 44 61 74 61 22 29 28 74 2e 67 72 61 6e 74 65 64 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 74 2e 67 72 61 6e 74 65 64 3d 21 31 2c 74 2e 69 6e 50 72 6f 67 72 65 73 73 3d 21 31 3b 72 3d 74 2e 63 61 6c 6c 62 61 63 6b 73 2e 70 6f 70 28 29 3b 29 68 6a 2e 74 72 79 43 61 74 63 68 Data Ascii: d,"/consent").concat(o),(function(e){for(t.granted=!!e.success&&-1!==e.scopes.indexOf("associate"),t.inProgress=!1;r=t.callbacks.pop();)hj.tryCatch(r,"ConsentData")(t.granted)}),(function(){for(t.granted=!1,t.inProgress=!1;r=t.callbacks.pop();)hj.tryCatch
2024-01-16 21:32:57 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 67 65 74 4b 65 79 28 29 7d 7d 7d 7d 2c 31 36 31 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 55 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 30 2c 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 31 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: unction(){return t.getKey()}}}},1613:function(e,t,n){"use strict";n.d(t,{U:function(){return r}});var r=function(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:0,t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:1;return function(){
2024-01-16 21:32:57 UTC	16384	IN	Data Raw: 28 65 29 3b 74 26 26 28 72 3d 72 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 74 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 72 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3a 7b 7d 3b 74 25 32 3f 41 28 4f 62 6a 65 63 74 28 6e 29 2c 21 30 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 50 28 65 2c 74 Data Ascii: (e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function k(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?A(Object(n),!0).forEach((function(t){P(e,t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.18	49802	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:57 UTC	610	OUT	GET /wp-content/uploads/logo_allegiant.png HTTP/1.1 Host: signable.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:57 UTC	369	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 16 Jan 2024 21:32:57 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 272 Connection: close Location: https://www.signable.co.uk/wp-content/uploads/logo_allegiant.png Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0301 NC:000000 UP: X-CDN-C: all
2024-01-16 21:32:57 UTC	272	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 69 67 6e 61 62 6c 65 2e 63 6f 2e 75 6b 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 6c 6f 67 6f 5f 61 6c 6c 65 67 69 61 6e 74 2e 70 6e 67 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.signable.co.uk/wp-content/uploads/logo_allegiant.png">here</a>.</p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.18	49803	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:57 UTC	535	OUT	GET /wp-content/themes/Signable2019Theme/_/img/icons/icon_list_tick.svg HTTP/1.1 Host: www.signable.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _ga_4XE2VYSQ35=GS1.1.1705440775.1.0.1705440775.60.0.0; _ga=GA1.1.2131508639.1705440776
2024-01-16 21:32:57 UTC	376	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:57 GMT Content-Type: image/svg+xml Content-Length: 324 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "144-602f236e1b447" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:57 UTC	324	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 36 22 20 68 65 69 67 68 74 3d 22 34 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 36 20 34 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 63 69 72 63 6c 65 20 63 78 3d 22 32 33 22 20 63 79 3d 22 32 33 22 20 72 3d 22 32 33 22 20 66 69 6c 6c 3d 22 23 30 30 39 35 45 36 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 31 2e 30 35 31 39 20 33 30 2e 31 32 37 36 4c 31 34 2e 37 32 30 37 20 32 33 2e 36 36 31 31 4c 31 35 2e 39 33 36 31 20 32 32 2e 34 31 39 38 4c 32 31 2e 30 35 31 39 20 32 37 2e 36 34 34 39 4c 33 31 2e 39 30 35 33 20 31 36 2e 35 35 39 36 4c 33 33 2e 31 32 30 37 20 31 37 2e 38 30 30 39 4c 32 31 2e 30 35 Data Ascii: <svg width="46" height="46" viewBox="0 0 46 46" fill="none" xmlns="http://www.w3.org/2000/svg"><circle cx="23" cy="23" r="23" fill="#0095E6"/><path d="M21.0519 30.1276L14.7207 23.6611L15.9361 22.4198L21.0519 27.6449L31.9053 16.5596L33.1207 17.8009L21.05

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.18	49804	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:57 UTC	630	OUT	GET /wp-content/uploads/logo_london_philharmonic_orchestra.png HTTP/1.1 Host: signable.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:58 UTC	389	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 16 Jan 2024 21:32:57 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 292 Connection: close Location: https://www.signable.co.uk/wp-content/uploads/logo_london_philharmonic_orchestra.png Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0301 NC:000000 UP: X-CDN-C: all
2024-01-16 21:32:58 UTC	292	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 69 67 6e 61 62 6c 65 2e 63 6f 2e 75 6b 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 6c 6f 67 6f 5f 6c 6f 6e 64 6f 6e 5f 70 68 69 6c 68 61 72 6d 6f 6e 69 63 5f 6f 72 63 68 65 73 74 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.signable.co.uk/wp-content/uploads/logo_london_philharmonic_orchest

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.18	49805	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:57 UTC	559	OUT	GET /wp-content/themes/Signable2019Theme/elements/blocks/expanding-panels//_/img/caret-down.svg HTTP/1.1 Host: www.signable.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _ga_4XE2VYSQ35=GS1.1.1705440775.1.0.1705440775.60.0.0; _ga=GA1.1.2131508639.1705440776
2024-01-16 21:32:58 UTC	375	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:58 GMT Content-Type: image/svg+xml Content-Length: 163 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "a3-602f236e273b2" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:58 UTC	163	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 33 22 20 68 65 69 67 68 74 3d 22 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 20 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 20 31 4c 36 2e 35 20 36 4c 31 32 20 31 22 20 73 74 72 6f 6b 65 3d 22 23 32 36 33 36 34 30 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 32 22 2f 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: <svg width="13" height="8" viewBox="0 0 13 8" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M1 1L6.5 6L12 1" stroke="#263640" stroke-width="2"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.18	49809	142.250.80.35	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:57 UTC	825	OUT	GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-4XE2VYSQ35&cid=2131508639.1705440776&gtm=45je41a0v875209417z8855770727&aip=1&dma=0&gcd=11l1l1l1l1&z=1021128266 HTTP/1.1 Host: www.google.ca Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiTocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:57 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Jan 2024 21:32:57 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-16 21:32:57 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.18	49806	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:57 UTC	540	OUT	GET /wp-content/themes/Signable2019Theme/_/img/backgrounds/bg_app_screen.png HTTP/1.1 Host: www.signable.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _ga_4XE2VYSQ35=GS1.1.1705440775.1.0.1705440775.60.0.0; _ga=GA1.1.2131508639.1705440776
2024-01-16 21:32:58 UTC	353	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:58 GMT Content-Type: image/png Content-Length: 74559 Connection: close Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "1233f-602f236e1ac77" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:58 UTC	16031	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 2c 00 00 02 71 08 03 00 00 00 be 0c d3 b1 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 03 00 50 4c 54 45 47 70 4c 46 46 46 21 21 21 27 27 27 7f 7f 7f 00 00 00 28 28 28 ff ff ff 3f 3f 3f 2d 2d 2d 24 24 24 1d 1d 1d 5b 5b 5b 1c 1c 1c 1c 1c 1c d5 d5 d5 e9 e9 e9 18 18 18 ce ce ce c2 c2 c2 06 06 06 5d 5d 5d 0e 0e 0e 13 13 13 65 63 62 db cc c7 11 11 11 5e 5e 5e 4f 4f 4f 8a 8a 8a bd bd bd a5 a5 a5 bb bb bb 39 39 39 e3 e3 e3 f3 f3 f3 f8 f1 e8 ff ff ff f8 f8 f8 f1 f1 f1 01 ab e8 eb eb eb 00 ab e8 e8 e8 e8 fa f9 f9 4d df ff f6 f6 f7 f5 f5 f6 f7 f7 f7 ef ef ef fe ff ff fe fe fe fb fb fb 21 c2 f2 1f c0 f1 f3 f2 f2 fc fd fd e4 e4 e4 f0 f0 f1 13 b8 ee 0d b4 ec 2f cb Data Ascii: PNGIHDR,qgAMAasRGBPLTEGpLFFF!!!'''(((???---$$$[[[]]]ecb^^^OOO999M!/
2024-01-16 21:32:58 UTC	16384	IN	Data Raw: 45 10 ed a1 42 ad 72 8a 29 f2 f1 a9 5e a9 10 bc f8 1e de f5 d7 e8 94 e5 3a ab f7 3c 5d a4 3a 82 88 71 e2 87 b1 52 0c 54 51 3a e6 18 ed 28 d1 de 84 61 a9 28 13 69 f8 e4 a7 13 41 84 81 20 bc a7 13 cb 69 bc 06 5b 00 36 c8 31 e0 16 fc 85 20 5e 49 27 12 f0 d2 02 b0 2d e3 cd 8e 6a 06 61 28 c9 be a6 bf 72 95 7b bf cd 9a 30 61 c3 8b 7b d6 d7 bd 31 c1 c2 e6 e4 0d 07 53 10 4a a0 28 0b bf 08 9d 61 cc 0d 41 a4 98 40 55 d6 05 c3 fa 06 91 02 e5 de 24 0b 41 ac b8 8a 0a 4e 7b e9 b4 a7 8f 3e 95 64 15 da 7b c8 29 b9 83 f8 8c 7c 10 cf 0b 2a 27 d6 8d ee d1 43 5a e4 20 9e 10 0a e5 62 2e 12 8f 13 f3 1b 0a 23 08 74 b8 89 c7 73 b9 7c b9 20 94 4a 3c 27 4b d8 96 41 4b b2 5a 28 70 80 27 72 39 e9 da 9f 15 8b 9b a1 45 dc 09 0f 32 29 51 a1 32 9c 0a ff 02 93 5a cf a4 22 99 c8 16 1c a5 Data Ascii: EBr)^:<]:qRTQ:(a(iA i[61 ^I'-ja(r{0a{1SJ(aA@U$AN{>d{)\|*'CZ b.#ts\| J<'KAKZ(p'r9E2)Q2Z"
2024-01-16 21:32:58 UTC	16384	IN	Data Raw: ac 99 e8 8d 6a ac 06 d5 7d d0 25 8c e8 ef 38 e9 52 1c d3 93 94 b3 46 fa 59 8c cc e4 de 42 b4 c2 fd d4 3e 29 eb f3 c5 cb be a7 69 43 46 d7 2c 64 fd 72 45 df 29 8b 1f 23 b2 b0 28 21 7c 0b ea 74 cc c8 e2 d9 de 33 22 db 7b 86 b3 f7 e6 3a a7 62 1e 22 f1 eb 1d 5c e0 44 58 b1 21 ce 1f 35 db eb 9b cf 94 89 a0 c8 62 54 81 53 a7 d1 34 9b 60 30 11 90 c8 02 f8 4f c0 1b db 32 a9 f0 8d b5 42 2c 8c c0 c2 13 c0 39 bc 3f 1f 48 18 fc 47 b0 7e 08 61 36 4f 1f c4 c0 51 88 ed 82 ab f4 81 f5 83 b1 c4 e6 e0 b8 14 3a fd 17 8c 04 0b 6c cb a9 9a ce 9c 3d 35 f1 c0 40 92 a6 8f 11 84 3c 69 c3 60 78 79 78 1a 95 7a bc 97 a4 1a e4 69 49 8d 7b ba de 49 d5 03 bd 4c a7 b0 a8 c9 5c 91 a6 61 7e b3 b7 37 ce b3 2e 2f a7 ec 67 21 30 bc 65 62 bb 54 36 37 27 cc 02 e0 2b 15 b2 b9 65 a1 77 da f3 d3 Data Ascii: j}%8RFYB>)iCF,drE)#(!\|t3"{:b"\DX!5bTS4`0O2B,9?HG~a6OQ:l=5@<i`xyxziI{IL\a~7./g!0ebT67'+ew
2024-01-16 21:32:58 UTC	16384	IN	Data Raw: 30 b8 a4 e9 54 a7 d5 d3 2a 38 ef 2b 58 84 36 b3 2c b0 ed 81 c5 3d 67 ca f2 c0 62 cb 6e 08 d3 ed 83 38 1c 66 54 9e 5e e3 26 53 ea c7 00 d3 1e 71 8d a7 17 c3 54 9e de 38 ae 6d bb 60 75 f6 de 52 4d 59 74 b7 29 f2 93 ee a0 cf 75 3e a8 35 b7 f1 49 c3 e4 02 8e 63 57 5b 16 e9 cd 52 a7 3a 51 96 c1 78 a3 53 65 f9 f4 dc 69 c0 25 5d 68 f0 f5 6a da e9 7a da 54 2b e1 b4 f2 20 36 b7 b7 df 02 8b 03 8d de db 48 9d de 6b 37 24 76 73 cb e2 cd a6 60 b1 80 0c 71 22 76 cb 0f 69 da e0 e0 2c a5 b6 fe f9 0f 11 a8 07 16 db 05 8b be 20 01 2b 36 4e 8a 63 e9 b8 19 65 f3 fd 93 9e 9c 09 5f 5e 4a d0 1c 8b 11 5e ae 2b 53 38 a2 28 f7 d2 95 6a 33 de 1b 9e 0c 27 87 7c 95 c5 e0 98 28 4e 67 c4 45 df b1 af 46 bd fc 21 07 44 37 0f 30 6c ff dc ac 73 8d a6 1c 95 79 b9 d3 bc da b2 d8 30 c0 e9 c8 Data Ascii: 0T*8+X6,=gbn8fT^&SqT8m`uRMYt)u>5IcW[R:QxSei%]hjzT+ 6Hk7$vs`q"vi, +6Nce_^J^+S8(j3'\|(NgEF!D70lsy0
2024-01-16 21:32:58 UTC	9376	IN	Data Raw: 60 91 ca dc ca 52 0a 2c 3e a3 28 8b 8b 21 13 21 32 3f e3 e1 a4 b9 53 2e 8d 4c bc 10 da a4 6e 8d 59 f0 d4 69 90 cc 2b ee 09 0e 4e 87 bb 21 61 1b 31 0b 05 16 0e 06 8b f0 6d eb c8 e3 63 19 05 16 fd 80 85 d4 98 ee 17 13 0b 54 69 01 41 83 a7 42 e8 4b 80 cb 9d d2 32 0b 88 14 21 4f 77 72 6f 97 88 0c 19 86 72 43 5c 0b 16 89 64 3c 9c b8 dd 19 52 7a dc 50 60 d1 97 1b 42 f2 a5 5c e0 94 f9 24 24 1d 42 f8 b1 24 1f c4 83 d5 0b 69 df 69 88 72 7b 73 ad 53 c9 0f a1 4e 88 3b 14 c9 fa 73 43 7e 7c d5 db f4 30 fe 16 85 46 7e ee 36 07 5e 5b 7f a4 80 a0 0f b0 18 43 7f f7 13 3f 4d dc ee 24 e9 31 05 16 fd a4 4e 35 96 02 a1 44 16 22 87 aa 79 a5 16 32 2c 75 4a 73 a7 14 2c 68 9d 45 d0 d3 36 b3 f0 09 ee 1b 17 f0 59 e8 fd ba 21 4f 9e 3e 79 b2 d0 e3 eb c9 dc dc df cc a8 69 2e 3c 5d 48 Data Ascii: `R,>(!!2?S.LnYi+N!a1mcTiABK2!OwrorC\d<RzP`B\$$B$iir{sSN;sC~\|0F~6^[C?M$1N5D"y2,uJs,hE6Y!O>yi.<]H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.18	49808	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:58 UTC	546	OUT	GET /wp-content/themes/Signable2019Theme/_/img/backgrounds/squiggle_left_white.svg HTTP/1.1 Host: www.signable.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _ga_4XE2VYSQ35=GS1.1.1705440775.1.0.1705440775.60.0.0; _ga=GA1.1.2131508639.1705440776
2024-01-16 21:32:58 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:58 GMT Content-Type: image/svg+xml Content-Length: 1560 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "618-602f236e1b05f" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:32:58 UTC	1560	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 35 22 20 68 65 69 67 68 74 3d 22 31 33 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 35 20 31 33 39 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 2d 31 39 2e 34 35 20 31 33 36 2e 31 35 34 43 2d 32 32 2e 32 32 38 33 20 31 33 32 2e 34 33 31 20 2d 32 34 2e 34 30 30 37 20 31 32 39 2e 32 35 31 20 2d 32 35 2e 34 35 39 35 20 31 32 37 2e 36 31 32 4c 2d 32 35 2e 36 32 38 36 20 31 32 36 2e 38 36 35 43 2d 32 39 2e 36 31 39 34 20 31 31 39 2e 39 36 34 20 2d 33 32 2e 32 Data Ascii: <svg width="105" height="139" viewBox="0 0 105 139" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M-19.45 136.154C-22.2283 132.431 -24.4007 129.251 -25.4595 127.612L-25.6286 126.865C-29.6194 119.964 -32.2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.18	49810	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:58 UTC	623	OUT	GET /wp-content/uploads/icon_star_rating_orange.png HTTP/1.1 Host: www.signable.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:58 UTC	365	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:58 GMT Content-Type: image/png Content-Length: 7193 Connection: close Last-Modified: Wed, 02 Aug 2023 13:19:57 GMT ETag: "1c19-601f0851a6334" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT X-CDN-C: all Accept-Ranges: bytes
2024-01-16 21:32:58 UTC	7193	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 62 00 00 00 76 08 06 00 00 00 6b 8e ff 42 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 04 f4 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 61 38 64 34 37 35 33 34 39 2c 20 32 30 32 33 2f 30 33 2f 32 33 2d 31 33 3a 30 35 3a 34 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 Data Ascii: PNGIHDRbvkBpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:45 "> <rdf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.18	49811	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:58 UTC	616	OUT	GET /wp-content/uploads/logo_krispykreme.png HTTP/1.1 Host: www.signable.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:58 UTC	365	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:58 GMT Content-Type: image/png Content-Length: 5636 Connection: close Last-Modified: Wed, 02 Aug 2023 13:19:56 GMT ETag: "1604-601f0850a2e7d" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT X-CDN-C: all Accept-Ranges: bytes
2024-01-16 21:32:58 UTC	5636	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 34 00 00 00 dc 04 03 00 00 00 95 2d 26 f6 00 00 00 27 50 4c 54 45 b0 16 31 0a 65 36 cc 0e 29 00 69 38 cd 0e 29 cd 0e 2a 00 69 38 cd 0f 2a fe fe fe b0 d0 c1 40 8f 6a cd 0f 2a 00 69 38 6c 79 8b 54 00 00 00 08 74 52 4e 53 00 18 1b 4e 50 95 d9 e2 43 2f 1c c3 00 00 15 84 49 44 41 54 78 da ed 5d 3d 4f e3 4a 17 76 8c 9d 14 f7 16 20 24 aa 2d a2 68 51 8a 34 8b 90 a8 28 a2 55 50 8a 34 11 22 4a e1 86 2b a4 54 14 28 02 a5 f0 1f 08 ab fb 03 60 c5 0f 58 56 14 2b 94 c8 85 9b f7 ea 4a e8 82 f2 a3 5e 79 3c 1f e7 8c c7 c9 f8 0b 02 eb 53 ec 92 64 62 7b 9e 39 1f cf 9c 73 ec 18 46 29 a5 94 52 4a 29 a5 94 52 4a 29 a5 94 52 4a 29 a5 94 52 4a 29 a5 94 52 4a 29 a5 94 52 4a 29 a5 94 52 ca 9a 4a 65 6b f3 77 9b f2 d6 d6 fe d9 Data Ascii: PNGIHDR4-&'PLTE1e6)i8)i8@j*i8lyTtRNSNPC/IDATx]=OJv $-hQ4(UP4"J+T(`XV+J^y<Sdb{9sF)RJ)RJ)RJ)RJ)RJ)RJ)RJekw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.18	49816	216.239.36.181	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:58 UTC	1334	OUT	POST /g/collect?v=2&tid=G-4XE2VYSQ35&gtm=45je41a0v875209417z8855770727&_p=1705440770354&_gaz=1&gcd=11l1l1l1l1&dma=0&cid=2131508639.1705440776&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&_s=1&dl=https%3A%2F%2Fwww.signable.us%2F&sid=1705440775&sct=1&seg=0&dt=Signable%20-%20eSignature%20Solution&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=11932 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.signable.us X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiTocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=BbHGp70uz66EZ7t8DrcLv9xxfcVljF6d19xSvROL7L8s_kahmrUkGGrzfI7BL5pg1a3XJnFf86rmNUVa2u3nk6kmb5VZimgBNCTkKSuYiNnaMk9c0LDBv3iqBpe7RSG5Qs2LVpVz9UzGN0Pyt1JXMcxIRKWB-Rje1Ftofm22_hQ
2024-01-16 21:32:58 UTC	449	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.signable.us Date: Tue, 16 Jan 2024 21:32:58 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.18	49818	172.253.62.157	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:58 UTC	788	OUT	POST /g/collect?v=2&tid=G-4XE2VYSQ35&cid=2131508639.1705440776&gtm=45je41a0v875209417z8855770727&aip=1&dma=0&gcd=11l1l1l1l1 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.signable.us X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiTocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:58 UTC	449	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.signable.us Date: Tue, 16 Jan 2024 21:32:58 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.18	49819	13.224.214.83	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:58 UTC	585	OUT	GET /sessions/2736869?s=0.25&r=0.07354558351397111 HTTP/1.1 Host: vc.hotjar.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.signable.us Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:58 UTC	371	IN	HTTP/1.1 204 No Content Connection: close Access-Control-Allow-Origin: * Cache-Control: no-store Date: Tue, 16 Jan 2024 21:32:58 GMT Server: Python/3.8 aiohttp/3.8.4 X-Cache: Miss from cloudfront Via: 1.1 2f0b2738cc23726bda17eb28418ee9c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: PHL50-C1 X-Amz-Cf-Id: 12H7ZmWcjXDyN18fEZ2-0hdzBoHNPmY6Dw1-MO4Ax5_kma4SaTytEw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.18	49817	142.251.40.131	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:58 UTC	590	OUT	GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-4XE2VYSQ35&cid=2131508639.1705440776&gtm=45je41a0v875209417z8855770727&aip=1&dma=0&gcd=11l1l1l1l1&z=1021128266 HTTP/1.1 Host: www.google.ca Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiTocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:58 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Jan 2024 21:32:58 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-16 21:32:58 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.18	49812	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:58 UTC	613	OUT	GET /wp-content/uploads/logo_bodyshop.png HTTP/1.1 Host: www.signable.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:58 UTC	364	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:58 GMT Content-Type: image/png Content-Length: 2439 Connection: close Last-Modified: Wed, 02 Aug 2023 13:19:50 GMT ETag: "987-601f084bc7e6d" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT X-CDN-C: all Accept-Ranges: bytes
2024-01-16 21:32:58 UTC	2439	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 00 dc 02 03 00 00 00 23 3c 1f fc 00 00 00 0c 50 4c 54 45 4a 68 63 09 35 2a 03 2f 24 00 2c 21 aa 34 a4 7b 00 00 00 03 74 52 4e 53 00 3e cb b7 05 c4 9b 00 00 09 27 49 44 41 54 78 da ed 9c bf 8e db c8 19 c0 67 a8 ac 88 84 40 b6 39 1b 8b 15 10 56 67 20 69 f8 08 e6 23 b8 30 0f 89 dd 5f 71 5b f0 11 c8 47 d8 22 97 fa 8a 33 70 4b 17 ee 53 64 fc 08 aa 52 ab 50 80 b3 03 04 5b b0 a0 0c 93 73 98 6f fe 70 48 89 92 c2 ef db 4e 03 78 bd 5a 49 f3 9b f9 fe cd 37 ff c8 d8 a5 5c ca a5 5c ca a5 5c ca a5 cc 2c af 26 7e 27 2c fc 87 2f a9 7b 71 db fd fd 49 20 6f a5 dc 3a a0 90 dd fd 13 30 96 52 ca d6 be 08 a4 94 bb 27 10 56 2e a5 ec ec ab 48 4a 29 7f 26 87 ac 54 b5 d2 be ba 56 2f ba 94 ba 23 02 20 a9 0f e9 55 44 Data Ascii: PNGIHDR#<PLTEJhc5*/$,!4{tRNS>'IDATxg@9Vg i#0_q[G"3pKSdRP[sopHNxZI7\\\,&~',/{qI o:0R'V.HJ)&TV/# UD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.18	49814	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:58 UTC	628	OUT	GET /wp-content/uploads/logo_university_of_edinburgh.png HTTP/1.1 Host: www.signable.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:58 UTC	367	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:58 GMT Content-Type: image/png Content-Length: 70313 Connection: close Last-Modified: Wed, 02 Aug 2023 13:21:01 GMT ETag: "112a9-601f088f7161a" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT X-CDN-C: all Accept-Ranges: bytes
2024-01-16 21:32:58 UTC	16017	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 00 8f 08 06 00 00 00 26 c2 a5 62 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 04 f4 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 61 38 64 34 37 35 33 34 39 2c 20 32 30 32 33 2f 30 33 2f 32 33 2d 31 33 3a 30 35 3a 34 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 Data Ascii: PNGIHDRX&bpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:45 "> <rdf
2024-01-16 21:32:58 UTC	16384	IN	Data Raw: a4 dd ad 3d 3a 76 86 6c f6 fc 10 a2 4b f8 21 23 58 9a af 52 10 31 52 db 43 66 e3 29 9b 78 7b ad d5 44 b4 f6 59 c2 d6 7f b0 c2 9f 1a 42 ed cd 88 be d9 84 b7 0a bc d9 b0 cd 92 45 10 db 07 91 0d 1d e9 c2 8d 7f 80 a4 e0 1d b5 95 eb 3f 11 7d 36 98 cc f1 5c 6b 73 0a 05 57 f4 12 1c f7 87 2d cf 32 bc f7 37 75 1f c4 92 52 6f 36 28 f7 3f 9a ff 7e c7 db 11 27 9c f9 d6 c5 8d e6 cf ff ce 87 59 71 f8 bd 19 1e 19 e2 f4 57 3c 83 67 be f4 2d bc ff 3f 5e c6 a9 6f 7a 3f 1f fc f4 ff f2 84 53 ee 0f 69 0b 47 1c 7e 30 bf bf e0 32 0e da 7f 2d 1f 7b df 6b 38 fe be 4f 46 63 64 fd e1 77 62 eb 8d 5b b8 ec a2 0b 18 1d 98 bf 08 f5 71 ca 13 5f c2 17 3f f6 51 f2 83 8e ae d4 94 bb 42 ae 00 11 c1 52 a2 d3 a9 16 db 3c cf 40 8d 56 6f 5a 5d 8b e7 f9 d6 e5 db 04 be 29 39 41 94 5c f4 f3 79 a1 Data Ascii: =:vlK!#XR1RCf)x{DYBE?}6\ksW-27uRo6(?~'YqW<g-?^oz?SiG~02-{k8OFcdwb[q_?QBR<@VoZ])9A\y
2024-01-16 21:32:59 UTC	16384	IN	Data Raw: 9a 46 55 59 75 c7 1a 9e 76 e2 31 1c 7e c8 7e 7c ea f3 5f 87 ca c4 e0 16 63 2d a3 5b b6 c2 96 3b f9 f4 17 3f cd f3 9f f1 c4 39 f7 71 db f0 28 ce 59 b2 a2 88 d1 84 3b 88 40 9a 08 cb 09 38 94 02 41 bd dd 1f d1 ab 21 1a 48 e2 f2 ac 1d 52 46 ba d7 eb b9 c0 f5 9d 94 56 70 65 58 f1 42 03 3d 41 d0 ad 75 23 1f 34 ea b7 06 0d 1b 67 dc 1d 94 8a d1 62 79 6e d2 2d 8d 4a df 94 b6 88 58 82 19 86 62 5b 97 e9 ad fb fe f4 93 04 73 21 a2 6b 99 e8 05 3f b1 41 68 9f d8 64 05 ca 55 74 c5 6e 89 06 0a 93 52 b8 2a 13 a3 0b 2d 95 62 e4 a2 aa cf be e7 c5 6c 62 36 cf 68 e8 35 3e 2c 69 f4 ed 71 ad b7 75 ac 1f a3 a7 b9 19 44 68 61 de ef 85 8f 89 b2 71 c6 f6 85 4e 1b 67 a9 22 f6 76 82 89 06 4d 45 e4 e6 79 4d cf e0 31 2e 2d 2d 74 73 8f 99 10 03 92 87 df 14 43 ab 1f 66 fa f6 7a 84 71 d5 Data Ascii: FUYuv1~~\|_c-[;?9q(Y;@8A!HRFVpeXB=Au#4gbyn-JXb[s!k?AhdUtnR*-blb6h5>,iquDhaqNg"vMEyM1.--tsCfzq
2024-01-16 21:32:59 UTC	16384	IN	Data Raw: 09 6a f0 41 30 32 33 39 a7 02 a9 97 f7 09 72 b3 8a 26 d3 5e 34 37 29 54 74 f7 7f c6 f4 18 07 59 91 d8 37 d1 f0 cf 50 a5 ed b4 b8 91 3b 96 c5 7f 89 b9 b6 32 38 74 69 75 f1 f0 3f 7c 61 de 0b 7c 03 d8 06 ec 07 1c 27 c2 19 78 2a d9 70 fd 91 21 ad 8f 81 01 df 80 64 7d b9 20 0a 99 26 ef ab e1 3e 30 82 e1 53 92 72 ac 16 db cd 35 14 34 40 25 21 84 c0 d6 6d c3 30 87 5c 84 0b 21 8d 3b d7 f0 b0 c7 1e c3 4f be 3f 7f 8b c9 17 3e fe 56 0e d8 6f 05 67 be f9 43 c8 92 c5 d8 64 1e 19 87 e6 2b 0a a6 d4 02 8c 8e 36 a0 e8 68 60 b6 77 1b 3d 04 3e 2e 15 1a 18 6a 08 22 e6 7d f5 d2 27 a7 10 41 c5 22 6a 6e 55 cf f2 90 6f cb 8c 1d 38 3e 48 72 9a 58 7f ac f5 d9 ab 08 ad 57 a9 c8 f5 aa f2 85 54 5c aa c1 dd 12 bc 39 7f a1 ba 26 b6 87 6c dd 6d f8 c6 02 3b 04 eb 28 ae d2 fb 2a 93 64 1f Data Ascii: jA0239r&^47)TtY7P;28tiu?\|a\|'xp!d} &>0Sr54@%!m0\!;O?>VogCd+6h`w=>.j"}'A"jnUo8>HrXWT\9&lm;(d
2024-01-16 21:32:59 UTC	5144	IN	Data Raw: 94 4b 77 e0 1c b9 ef 08 24 45 1d 17 53 a2 84 07 34 81 a3 13 03 d8 6a 69 e9 4b 93 91 6a c0 4d 86 58 65 76 29 c2 1b 4b b5 95 82 da 0f 0b e6 be 8f 59 a5 f4 c4 fa 27 2f dc ac a8 a8 a8 f8 67 c1 61 ef 29 5b 21 48 d6 03 45 93 ce 9d d7 10 5a 1b 4a 5d 93 de 43 e5 99 01 cd 0d dc ba 57 e9 54 dc b7 0e 37 7b fc 54 ed 14 cf 29 6c 76 44 70 b5 2b 25 06 8c 8d eb fd d8 c0 31 d1 84 cb d3 fe d6 5e e2 6b 6f 74 49 0f 51 3d 65 17 78 43 0c 9d 2b d4 37 9f 22 8d 39 47 13 fd 07 7b 24 ee d1 06 7e 2a 09 3f 95 84 27 ab e7 35 e4 3c 5f 0b 96 12 68 63 18 ea 06 3b 53 1f ad 1e d8 84 b0 a9 1b f4 64 0a cf 09 1d 9e 33 b7 ce 57 d9 83 57 7f f6 4c f6 bf f1 36 7e f2 cd d3 38 e8 11 7b f1 ca 97 3c 97 27 fd eb 1b 20 1f 81 a5 07 b0 6b 91 f3 2d 6d f2 44 0a 02 c2 aa ee 7e ee 2a b7 31 f1 4c ee 47 99 43 Data Ascii: Kw$ES4jiKjMXev)KY'/ga)[!HEZJ]CWT7{T)lvDp+%1^kotIQ=exC+7"9G{$~?'5<_hc;Sd3WWL6~8{<' k-mD~1LGC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.18	49813	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:58 UTC	614	OUT	GET /wp-content/uploads/logo_allegiant.png HTTP/1.1 Host: www.signable.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:58 UTC	365	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:58 GMT Content-Type: image/png Content-Length: 9588 Connection: close Last-Modified: Wed, 02 Aug 2023 13:19:51 GMT ETag: "2574-601f084be6e8e" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT X-CDN-C: all Accept-Ranges: bytes
2024-01-16 21:32:58 UTC	9588	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 02 00 00 00 dc 08 03 00 00 00 35 30 39 88 00 00 00 b1 50 4c 54 45 e4 ea ec d2 dd e2 b9 ca ce a1 b5 d8 b2 cd b8 b9 d0 c2 c3 d9 c9 8e b8 88 a6 c7 9f aa be d7 84 92 cb 8d 90 c9 67 b7 e2 77 c5 eb 3a 99 d3 4f a6 da 1f bf f3 28 70 ba 23 5e b0 51 51 aa 56 57 ac 50 50 a9 62 64 b3 68 69 b6 6f 70 ba 85 86 c4 85 99 a4 9d c1 93 78 aa 73 82 b0 77 85 b2 76 65 9f 60 6b a1 64 73 a7 56 5b 99 51 50 92 4a 64 9e 3d 54 93 3f 3d 87 39 45 8c 41 42 74 5a 44 5b 82 45 45 a3 3a 3a 9e 2f 30 99 02 4b a7 00 75 c4 01 8a d6 10 77 c2 22 88 cb 01 a2 e9 15 ac eb 00 60 b5 12 3e a1 23 35 9d 2f 2e 98 4a 8c 36 60 9d 30 55 95 33 2d a6 5f a7 00 00 00 34 74 52 4e 53 00 0b 13 1a 1a 24 36 30 46 36 29 43 3e 68 96 6c 8b 9b ce bc 9c 74 4d 78 98 Data Ascii: PNGIHDR509PLTEgw:O(p#^QQVWPPbdhiopxswve`kdsV[QPJd=T?=9EABtZD[EE::/0Kuw"`>#5/.J6`0U3-_4tRNS$60F6)C>hltMx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.18	49815	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:58 UTC	634	OUT	GET /wp-content/uploads/logo_london_philharmonic_orchestra.png HTTP/1.1 Host: www.signable.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:58 UTC	364	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:58 GMT Content-Type: image/png Content-Length: 3250 Connection: close Last-Modified: Wed, 02 Aug 2023 13:20:01 GMT ETag: "cb2-601f085622b71" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT X-CDN-C: all Accept-Ranges: bytes
2024-01-16 21:32:58 UTC	3250	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 84 00 00 00 dc 04 03 00 00 00 82 39 cb ce 00 00 00 1b 50 4c 54 45 b3 8a a7 c8 58 9f 2d 2b 2c cd 3e 9c 1c 1c 1c 0c 0c 0c d2 20 97 d9 0f 98 00 00 00 1e f0 54 86 00 00 00 07 74 52 4e 53 00 27 47 8e 9f e0 ec a9 15 38 f5 00 00 0c 3f 49 44 41 54 78 da ed 9d cd 6f e2 3a 10 c0 e3 40 7b 0e 65 e1 ed 31 8d 40 e2 08 8a 04 57 16 81 c4 b1 45 20 e5 58 84 14 ae 6f 85 94 5c df 22 22 f9 cf 7e 9a f1 77 08 2d 5f 29 b0 f2 1c 76 e3 d8 49 fc f3 d8 9e b1 43 27 8e 63 c5 8a 15 2b 56 ac 58 b1 62 c5 8a 15 2b 56 ac 58 b1 62 c5 8a 15 2b 56 ac 58 b1 72 15 99 2c 66 27 5e 51 5d 2c fc bb 42 98 d2 dd a9 08 94 5a 04 8b 60 11 2c 82 45 b0 08 8f 83 40 5a 8b c5 3c c0 43 37 f0 1d a7 b5 58 8c 65 8d 5b 93 c5 fc 55 22 40 6a 64 94 9c bf de 03 Data Ascii: PNGIHDR9PLTEX-+,> TtRNS'G8?IDATxo:@{e1@WE Xo\""~w-_)vIC'c+VXb+VXb+VXr,f'^Q],BZ`,E@Z<C7Xe[U"@jd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.18	49820	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:59 UTC	610	OUT	GET /wp-content/uploads/logo_hat_trick.png HTTP/1.1 Host: signable.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:59 UTC	369	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 16 Jan 2024 21:32:59 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 272 Connection: close Location: https://www.signable.co.uk/wp-content/uploads/logo_hat_trick.png Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0301 NC:000000 UP: X-CDN-C: all
2024-01-16 21:32:59 UTC	272	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 69 67 6e 61 62 6c 65 2e 63 6f 2e 75 6b 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 6c 6f 67 6f 5f 68 61 74 5f 74 72 69 63 6b 2e 70 6e 67 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.signable.co.uk/wp-content/uploads/logo_hat_trick.png">here</a>.</p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.18	49821	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:59 UTC	605	OUT	GET /wp-content/uploads/logo_coop.png HTTP/1.1 Host: signable.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:59 UTC	364	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 16 Jan 2024 21:32:59 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 267 Connection: close Location: https://www.signable.co.uk/wp-content/uploads/logo_coop.png Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0301 NC:000000 UP: X-CDN-C: all
2024-01-16 21:32:59 UTC	267	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 69 67 6e 61 62 6c 65 2e 63 6f 2e 75 6b 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 6c 6f 67 6f 5f 63 6f 6f 70 2e 70 6e 67 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.signable.co.uk/wp-content/uploads/logo_coop.png">here</a>.</p></b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.18	49822	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:59 UTC	623	OUT	GET /wp-content/uploads/logo_regatta_great_outdoors.png HTTP/1.1 Host: signable.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:59 UTC	382	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 16 Jan 2024 21:32:59 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 285 Connection: close Location: https://www.signable.co.uk/wp-content/uploads/logo_regatta_great_outdoors.png Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0301 NC:000000 UP: X-CDN-C: all
2024-01-16 21:32:59 UTC	285	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 69 67 6e 61 62 6c 65 2e 63 6f 2e 75 6b 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 6c 6f 67 6f 5f 72 65 67 61 74 74 61 5f 67 72 65 61 74 5f 6f 75 74 64 6f 6f 72 73 2e 70 6e 67 22 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.signable.co.uk/wp-content/uploads/logo_regatta_great_outdoors.png"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.18	49825	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:59 UTC	381	OUT	GET /wp-content/uploads/logo_krispykreme.png HTTP/1.1 Host: www.signable.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:59 UTC	365	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:59 GMT Content-Type: image/png Content-Length: 5636 Connection: close Last-Modified: Wed, 02 Aug 2023 13:19:56 GMT ETag: "1604-601f0850a2e7d" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT X-CDN-C: all Accept-Ranges: bytes
2024-01-16 21:32:59 UTC	5636	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 34 00 00 00 dc 04 03 00 00 00 95 2d 26 f6 00 00 00 27 50 4c 54 45 b0 16 31 0a 65 36 cc 0e 29 00 69 38 cd 0e 29 cd 0e 2a 00 69 38 cd 0f 2a fe fe fe b0 d0 c1 40 8f 6a cd 0f 2a 00 69 38 6c 79 8b 54 00 00 00 08 74 52 4e 53 00 18 1b 4e 50 95 d9 e2 43 2f 1c c3 00 00 15 84 49 44 41 54 78 da ed 5d 3d 4f e3 4a 17 76 8c 9d 14 f7 16 20 24 aa 2d a2 68 51 8a 34 8b 90 a8 28 a2 55 50 8a 34 11 22 4a e1 86 2b a4 54 14 28 02 a5 f0 1f 08 ab fb 03 60 c5 0f 58 56 14 2b 94 c8 85 9b f7 ea 4a e8 82 f2 a3 5e 79 3c 1f e7 8c c7 c9 f8 0b 02 eb 53 ec 92 64 62 7b 9e 39 1f cf 9c 73 ec 18 46 29 a5 94 52 4a 29 a5 94 52 4a 29 a5 94 52 4a 29 a5 94 52 4a 29 a5 94 52 4a 29 a5 94 52 4a 29 a5 94 52 ca 9a 4a 65 6b f3 77 9b f2 d6 d6 fe d9 Data Ascii: PNGIHDR4-&'PLTE1e6)i8)i8@j*i8lyTtRNSNPC/IDATx]=OJv $-hQ4(UP4"J+T(`XV+J^y<Sdb{9sF)RJ)RJ)RJ)RJ)RJ)RJ)RJekw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.18	49824	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:59 UTC	388	OUT	GET /wp-content/uploads/icon_star_rating_orange.png HTTP/1.1 Host: www.signable.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:59 UTC	365	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:59 GMT Content-Type: image/png Content-Length: 7193 Connection: close Last-Modified: Wed, 02 Aug 2023 13:19:57 GMT ETag: "1c19-601f0851a6334" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT X-CDN-C: all Accept-Ranges: bytes
2024-01-16 21:32:59 UTC	7193	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 62 00 00 00 76 08 06 00 00 00 6b 8e ff 42 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 04 f4 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 61 38 64 34 37 35 33 34 39 2c 20 32 30 32 33 2f 30 33 2f 32 33 2d 31 33 3a 30 35 3a 34 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 Data Ascii: PNGIHDRbvkBpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:45 "> <rdf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.18	49827	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:59 UTC	378	OUT	GET /wp-content/uploads/logo_bodyshop.png HTTP/1.1 Host: www.signable.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:59 UTC	364	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:59 GMT Content-Type: image/png Content-Length: 2439 Connection: close Last-Modified: Wed, 02 Aug 2023 13:19:50 GMT ETag: "987-601f084bc7e6d" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT X-CDN-C: all Accept-Ranges: bytes
2024-01-16 21:32:59 UTC	2439	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 00 dc 02 03 00 00 00 23 3c 1f fc 00 00 00 0c 50 4c 54 45 4a 68 63 09 35 2a 03 2f 24 00 2c 21 aa 34 a4 7b 00 00 00 03 74 52 4e 53 00 3e cb b7 05 c4 9b 00 00 09 27 49 44 41 54 78 da ed 9c bf 8e db c8 19 c0 67 a8 ac 88 84 40 b6 39 1b 8b 15 10 56 67 20 69 f8 08 e6 23 b8 30 0f 89 dd 5f 71 5b f0 11 c8 47 d8 22 97 fa 8a 33 70 4b 17 ee 53 64 fc 08 aa 52 ab 50 80 b3 03 04 5b b0 a0 0c 93 73 98 6f fe 70 48 89 92 c2 ef db 4e 03 78 bd 5a 49 f3 9b f9 fe cd 37 ff c8 d8 a5 5c ca a5 5c ca a5 5c ca a5 cc 2c af 26 7e 27 2c fc 87 2f a9 7b 71 db fd fd 49 20 6f a5 dc 3a a0 90 dd fd 13 30 96 52 ca d6 be 08 a4 94 bb 27 10 56 2e a5 ec ec ab 48 4a 29 7f 26 87 ac 54 b5 d2 be ba 56 2f ba 94 ba 23 02 20 a9 0f e9 55 44 Data Ascii: PNGIHDR#<PLTEJhc5*/$,!4{tRNS>'IDATxg@9Vg i#0_q[G"3pKSdRP[sopHNxZI7\\\,&~',/{qI o:0R'V.HJ)&TV/# UD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.18	49826	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:59 UTC	615	OUT	GET /wp-content/uploads/logo_octopus_energy.png HTTP/1.1 Host: signable.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:59 UTC	374	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 16 Jan 2024 21:32:59 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 277 Connection: close Location: https://www.signable.co.uk/wp-content/uploads/logo_octopus_energy.png Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0301 NC:000000 UP: X-CDN-C: all
2024-01-16 21:32:59 UTC	277	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 69 67 6e 61 62 6c 65 2e 63 6f 2e 75 6b 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 6c 6f 67 6f 5f 6f 63 74 6f 70 75 73 5f 65 6e 65 72 67 79 2e 70 6e 67 22 3e 68 65 72 65 3c 2f 61 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.signable.co.uk/wp-content/uploads/logo_octopus_energy.png">here</a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.18	49823	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:59 UTC	379	OUT	GET /wp-content/uploads/logo_allegiant.png HTTP/1.1 Host: www.signable.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:59 UTC	365	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:59 GMT Content-Type: image/png Content-Length: 9588 Connection: close Last-Modified: Wed, 02 Aug 2023 13:19:51 GMT ETag: "2574-601f084be6e8e" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT X-CDN-C: all Accept-Ranges: bytes
2024-01-16 21:32:59 UTC	9588	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 02 00 00 00 dc 08 03 00 00 00 35 30 39 88 00 00 00 b1 50 4c 54 45 e4 ea ec d2 dd e2 b9 ca ce a1 b5 d8 b2 cd b8 b9 d0 c2 c3 d9 c9 8e b8 88 a6 c7 9f aa be d7 84 92 cb 8d 90 c9 67 b7 e2 77 c5 eb 3a 99 d3 4f a6 da 1f bf f3 28 70 ba 23 5e b0 51 51 aa 56 57 ac 50 50 a9 62 64 b3 68 69 b6 6f 70 ba 85 86 c4 85 99 a4 9d c1 93 78 aa 73 82 b0 77 85 b2 76 65 9f 60 6b a1 64 73 a7 56 5b 99 51 50 92 4a 64 9e 3d 54 93 3f 3d 87 39 45 8c 41 42 74 5a 44 5b 82 45 45 a3 3a 3a 9e 2f 30 99 02 4b a7 00 75 c4 01 8a d6 10 77 c2 22 88 cb 01 a2 e9 15 ac eb 00 60 b5 12 3e a1 23 35 9d 2f 2e 98 4a 8c 36 60 9d 30 55 95 33 2d a6 5f a7 00 00 00 34 74 52 4e 53 00 0b 13 1a 1a 24 36 30 46 36 29 43 3e 68 96 6c 8b 9b ce bc 9c 74 4d 78 98 Data Ascii: PNGIHDR509PLTEgw:O(p#^QQVWPPbdhiopxswve`kdsV[QPJd=T?=9EABtZD[EE::/0Kuw"`>#5/.J6`0U3-_4tRNS$60F6)C>hltMx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.18	49829	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:59 UTC	399	OUT	GET /wp-content/uploads/logo_london_philharmonic_orchestra.png HTTP/1.1 Host: www.signable.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:59 UTC	364	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:59 GMT Content-Type: image/png Content-Length: 3250 Connection: close Last-Modified: Wed, 02 Aug 2023 13:20:01 GMT ETag: "cb2-601f085622b71" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT X-CDN-C: all Accept-Ranges: bytes
2024-01-16 21:32:59 UTC	3250	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 84 00 00 00 dc 04 03 00 00 00 82 39 cb ce 00 00 00 1b 50 4c 54 45 b3 8a a7 c8 58 9f 2d 2b 2c cd 3e 9c 1c 1c 1c 0c 0c 0c d2 20 97 d9 0f 98 00 00 00 1e f0 54 86 00 00 00 07 74 52 4e 53 00 27 47 8e 9f e0 ec a9 15 38 f5 00 00 0c 3f 49 44 41 54 78 da ed 9d cd 6f e2 3a 10 c0 e3 40 7b 0e 65 e1 ed 31 8d 40 e2 08 8a 04 57 16 81 c4 b1 45 20 e5 58 84 14 ae 6f 85 94 5c df 22 22 f9 cf 7e 9a f1 77 08 2d 5f 29 b0 f2 1c 76 e3 d8 49 fc f3 d8 9e b1 43 27 8e 63 c5 8a 15 2b 56 ac 58 b1 62 c5 8a 15 2b 56 ac 58 b1 62 c5 8a 15 2b 56 ac 58 b1 72 15 99 2c 66 27 5e 51 5d 2c fc bb 42 98 d2 dd a9 08 94 5a 04 8b 60 11 2c 82 45 b0 08 8f 83 40 5a 8b c5 3c c0 43 37 f0 1d a7 b5 58 8c 65 8d 5b 93 c5 fc 55 22 40 6a 64 94 9c bf de 03 Data Ascii: PNGIHDR9PLTEX-+,> TtRNS'G8?IDATxo:@{e1@WE Xo\""~w-_)vIC'c+VXb+VXb+VXr,f'^Q],BZ`,E@Z<C7Xe[U"@jd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.18	49828	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:59 UTC	608	OUT	GET /wp-content/uploads/logo_aardman.png HTTP/1.1 Host: signable.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:32:59 UTC	367	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 16 Jan 2024 21:32:59 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 270 Connection: close Location: https://www.signable.co.uk/wp-content/uploads/logo_aardman.png Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0301 NC:000000 UP: X-CDN-C: all
2024-01-16 21:32:59 UTC	270	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 69 67 6e 61 62 6c 65 2e 63 6f 2e 75 6b 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 6c 6f 67 6f 5f 61 61 72 64 6d 61 6e 2e 70 6e 67 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.signable.co.uk/wp-content/uploads/logo_aardman.png">here</a>.</p>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.18	49831	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:59 UTC	393	OUT	GET /wp-content/uploads/logo_university_of_edinburgh.png HTTP/1.1 Host: www.signable.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:00 UTC	367	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:32:59 GMT Content-Type: image/png Content-Length: 70313 Connection: close Last-Modified: Wed, 02 Aug 2023 13:21:01 GMT ETag: "112a9-601f088f7161a" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT X-CDN-C: all Accept-Ranges: bytes
2024-01-16 21:33:00 UTC	16017	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 00 8f 08 06 00 00 00 26 c2 a5 62 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 04 f4 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 61 38 64 34 37 35 33 34 39 2c 20 32 30 32 33 2f 30 33 2f 32 33 2d 31 33 3a 30 35 3a 34 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 Data Ascii: PNGIHDRX&bpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:45 "> <rdf
2024-01-16 21:33:00 UTC	16384	IN	Data Raw: a4 dd ad 3d 3a 76 86 6c f6 fc 10 a2 4b f8 21 23 58 9a af 52 10 31 52 db 43 66 e3 29 9b 78 7b ad d5 44 b4 f6 59 c2 d6 7f b0 c2 9f 1a 42 ed cd 88 be d9 84 b7 0a bc d9 b0 cd 92 45 10 db 07 91 0d 1d e9 c2 8d 7f 80 a4 e0 1d b5 95 eb 3f 11 7d 36 98 cc f1 5c 6b 73 0a 05 57 f4 12 1c f7 87 2d cf 32 bc f7 37 75 1f c4 92 52 6f 36 28 f7 3f 9a ff 7e c7 db 11 27 9c f9 d6 c5 8d e6 cf ff ce 87 59 71 f8 bd 19 1e 19 e2 f4 57 3c 83 67 be f4 2d bc ff 3f 5e c6 a9 6f 7a 3f 1f fc f4 ff f2 84 53 ee 0f 69 0b 47 1c 7e 30 bf bf e0 32 0e da 7f 2d 1f 7b df 6b 38 fe be 4f 46 63 64 fd e1 77 62 eb 8d 5b b8 ec a2 0b 18 1d 98 bf 08 f5 71 ca 13 5f c2 17 3f f6 51 f2 83 8e ae d4 94 bb 42 ae 00 11 c1 52 a2 d3 a9 16 db 3c cf 40 8d 56 6f 5a 5d 8b e7 f9 d6 e5 db 04 be 29 39 41 94 5c f4 f3 79 a1 Data Ascii: =:vlK!#XR1RCf)x{DYBE?}6\ksW-27uRo6(?~'YqW<g-?^oz?SiG~02-{k8OFcdwb[q_?QBR<@VoZ])9A\y
2024-01-16 21:33:00 UTC	16384	IN	Data Raw: 9a 46 55 59 75 c7 1a 9e 76 e2 31 1c 7e c8 7e 7c ea f3 5f 87 ca c4 e0 16 63 2d a3 5b b6 c2 96 3b f9 f4 17 3f cd f3 9f f1 c4 39 f7 71 db f0 28 ce 59 b2 a2 88 d1 84 3b 88 40 9a 08 cb 09 38 94 02 41 bd dd 1f d1 ab 21 1a 48 e2 f2 ac 1d 52 46 ba d7 eb b9 c0 f5 9d 94 56 70 65 58 f1 42 03 3d 41 d0 ad 75 23 1f 34 ea b7 06 0d 1b 67 dc 1d 94 8a d1 62 79 6e d2 2d 8d 4a df 94 b6 88 58 82 19 86 62 5b 97 e9 ad fb fe f4 93 04 73 21 a2 6b 99 e8 05 3f b1 41 68 9f d8 64 05 ca 55 74 c5 6e 89 06 0a 93 52 b8 2a 13 a3 0b 2d 95 62 e4 a2 aa cf be e7 c5 6c 62 36 cf 68 e8 35 3e 2c 69 f4 ed 71 ad b7 75 ac 1f a3 a7 b9 19 44 68 61 de ef 85 8f 89 b2 71 c6 f6 85 4e 1b 67 a9 22 f6 76 82 89 06 4d 45 e4 e6 79 4d cf e0 31 2e 2d 2d 74 73 8f 99 10 03 92 87 df 14 43 ab 1f 66 fa f6 7a 84 71 d5 Data Ascii: FUYuv1~~\|_c-[;?9q(Y;@8A!HRFVpeXB=Au#4gbyn-JXb[s!k?AhdUtnR*-blb6h5>,iquDhaqNg"vMEyM1.--tsCfzq
2024-01-16 21:33:00 UTC	16384	IN	Data Raw: 09 6a f0 41 30 32 33 39 a7 02 a9 97 f7 09 72 b3 8a 26 d3 5e 34 37 29 54 74 f7 7f c6 f4 18 07 59 91 d8 37 d1 f0 cf 50 a5 ed b4 b8 91 3b 96 c5 7f 89 b9 b6 32 38 74 69 75 f1 f0 3f 7c 61 de 0b 7c 03 d8 06 ec 07 1c 27 c2 19 78 2a d9 70 fd 91 21 ad 8f 81 01 df 80 64 7d b9 20 0a 99 26 ef ab e1 3e 30 82 e1 53 92 72 ac 16 db cd 35 14 34 40 25 21 84 c0 d6 6d c3 30 87 5c 84 0b 21 8d 3b d7 f0 b0 c7 1e c3 4f be 3f 7f 8b c9 17 3e fe 56 0e d8 6f 05 67 be f9 43 c8 92 c5 d8 64 1e 19 87 e6 2b 0a a6 d4 02 8c 8e 36 a0 e8 68 60 b6 77 1b 3d 04 3e 2e 15 1a 18 6a 08 22 e6 7d f5 d2 27 a7 10 41 c5 22 6a 6e 55 cf f2 90 6f cb 8c 1d 38 3e 48 72 9a 58 7f ac f5 d9 ab 08 ad 57 a9 c8 f5 aa f2 85 54 5c aa c1 dd 12 bc 39 7f a1 ba 26 b6 87 6c dd 6d f8 c6 02 3b 04 eb 28 ae d2 fb 2a 93 64 1f Data Ascii: jA0239r&^47)TtY7P;28tiu?\|a\|'xp!d} &>0Sr54@%!m0\!;O?>VogCd+6h`w=>.j"}'A"jnUo8>HrXWT\9&lm;(d
2024-01-16 21:33:00 UTC	5144	IN	Data Raw: 94 4b 77 e0 1c b9 ef 08 24 45 1d 17 53 a2 84 07 34 81 a3 13 03 d8 6a 69 e9 4b 93 91 6a c0 4d 86 58 65 76 29 c2 1b 4b b5 95 82 da 0f 0b e6 be 8f 59 a5 f4 c4 fa 27 2f dc ac a8 a8 a8 f8 67 c1 61 ef 29 5b 21 48 d6 03 45 93 ce 9d d7 10 5a 1b 4a 5d 93 de 43 e5 99 01 cd 0d dc ba 57 e9 54 dc b7 0e 37 7b fc 54 ed 14 cf 29 6c 76 44 70 b5 2b 25 06 8c 8d eb fd d8 c0 31 d1 84 cb d3 fe d6 5e e2 6b 6f 74 49 0f 51 3d 65 17 78 43 0c 9d 2b d4 37 9f 22 8d 39 47 13 fd 07 7b 24 ee d1 06 7e 2a 09 3f 95 84 27 ab e7 35 e4 3c 5f 0b 96 12 68 63 18 ea 06 3b 53 1f ad 1e d8 84 b0 a9 1b f4 64 0a cf 09 1d 9e 33 b7 ce 57 d9 83 57 7f f6 4c f6 bf f1 36 7e f2 cd d3 38 e8 11 7b f1 ca 97 3c 97 27 fd eb 1b 20 1f 81 a5 07 b0 6b 91 f3 2d 6d f2 44 0a 02 c2 aa ee 7e ee 2a b7 31 f1 4c ee 47 99 43 Data Ascii: Kw$ES4jiKjMXev)KY'/ga)[!HEZJ]CWT7{T)lvDp+%1^kotIQ=exC+7"9G{$~?'5<_hc;Sd3WWL6~8{<' k-mD~1LGC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.18	49830	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:59 UTC	616	OUT	GET /wp-content/uploads/logo_allsopp_allsopp.png HTTP/1.1 Host: signable.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:00 UTC	375	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 16 Jan 2024 21:32:59 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 278 Connection: close Location: https://www.signable.co.uk/wp-content/uploads/logo_allsopp_allsopp.png Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0301 NC:000000 UP: X-CDN-C: all
2024-01-16 21:33:00 UTC	278	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 69 67 6e 61 62 6c 65 2e 63 6f 2e 75 6b 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 6c 6f 67 6f 5f 61 6c 6c 73 6f 70 70 5f 61 6c 6c 73 6f 70 70 2e 70 6e 67 22 3e 68 65 72 65 3c 2f Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.signable.co.uk/wp-content/uploads/logo_allsopp_allsopp.png">here</

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.18	49832	40.68.123.157	443

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:59 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=+Kz8tpYVXzeuwt7&MD=X5Zd6xmD HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-01-16 21:33:00 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: d7957082-a919-4fe2-b765-d8f7f220d03a MS-RequestId: bff1a9a9-fbaa-4ac1-b6b0-b7c4dcb5a4a0 MS-CV: /cJLiY1Q1U2WLGXt.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 16 Jan 2024 21:32:59 GMT Connection: close Content-Length: 24490
2024-01-16 21:33:00 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-01-16 21:33:00 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.18	49833	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:32:59 UTC	614	OUT	GET /wp-content/uploads/logo_hat_trick.png HTTP/1.1 Host: www.signable.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:00 UTC	364	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:33:00 GMT Content-Type: image/png Content-Length: 3601 Connection: close Last-Modified: Wed, 02 Aug 2023 13:19:51 GMT ETag: "e11-601f084c8ea54" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT X-CDN-C: all Accept-Ranges: bytes
2024-01-16 21:33:00 UTC	3601	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 9c 00 00 00 dc 04 03 00 00 00 b6 40 0a d2 00 00 00 18 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 56 37 1c 2a 00 00 00 07 74 52 4e 53 00 13 41 6a 9c cc f1 b8 d2 e7 af 00 00 0d a1 49 44 41 54 78 da ed 5d 4b 77 aa 3a 14 36 e0 b9 63 b4 d2 b1 da ea 99 7a d4 ea b4 0f 5b a6 3d 5a cb b8 b6 c2 fc 56 c9 df bf 0b 48 42 12 92 10 04 7b c1 c5 5e 67 70 68 cb e3 cb 4e f6 fe f6 23 d0 6a 35 d2 48 23 8d 34 d2 48 23 8d 34 d2 48 23 8d 34 72 f9 02 06 17 05 c7 fc b2 2e 09 ce 18 4e 2e 09 ce 12 fe bd 24 38 0e dc 5d 92 25 f0 e1 f7 25 59 02 08 0f 17 04 c7 86 f0 70 41 a6 6d 7c 59 70 5e 2e 0a 0e f0 2f 0a 8e 01 d3 70 40 a7 b6 70 7a 30 65 d9 c0 dd be 5f 63 4b c0 c3 19 f9 f5 a5 3d 4b 08 39 Data Ascii: PNGIHDR@PLTEV7*tRNSAjIDATx]Kw:6cz[=ZVHB{^gphN#j5H#4H#4H#4r.N.$8]%%YpAm\|Yp^./p@pz0e_cK=K9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.18	49834	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:00 UTC	609	OUT	GET /wp-content/uploads/logo_coop.png HTTP/1.1 Host: www.signable.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:00 UTC	366	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:33:00 GMT Content-Type: image/png Content-Length: 21501 Connection: close Last-Modified: Wed, 02 Aug 2023 13:20:44 GMT ETag: "53fd-601f087f1e639" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT X-CDN-C: all Accept-Ranges: bytes
2024-01-16 21:33:00 UTC	16018	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 00 d7 08 06 00 00 00 c2 dc 82 34 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 04 f5 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 30 2d 63 30 30 31 20 37 39 2e 63 30 32 30 34 62 32 64 65 66 2c 20 32 30 32 33 2f 30 32 2f 30 32 2d 31 32 3a 31 34 3a 32 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 Data Ascii: PNGIHDR4pHYs%%IR$iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2def, 2023/02/02-12:14:24 "> <rd
2024-01-16 21:33:00 UTC	5483	IN	Data Raw: 96 7a 39 b9 83 bd c3 f7 f3 d0 c9 85 f7 ed 4b a0 94 42 85 e2 9a 2f e6 b6 4e dc a3 6c 7b 71 dc 42 08 28 b9 bb ac 34 88 42 db 8b b6 45 22 73 12 05 38 d2 c1 08 f0 0f 42 72 5f 73 f9 34 6a 0c d7 8a 22 53 69 0e 9c 41 cd 20 19 87 52 00 b7 48 87 d6 d8 4f d0 77 50 cb 05 b8 04 61 da 72 3b 33 fc bb 33 d4 6a af 1c 03 e5 f7 d0 17 c2 8c 87 81 39 08 80 60 8b c0 7b c8 17 b8 b1 06 d4 02 d8 28 94 0f 41 69 71 6f 4f 96 df 49 48 0f 01 bb 16 75 40 24 d2 06 a2 00 47 3a 18 07 ca 1f 25 54 47 9a 4f 68 35 a0 06 3e a5 88 ca 4e 71 8d 05 8c d6 8a e4 a1 9b 0f 02 a1 d0 85 ca 62 67 58 19 f4 b8 87 28 5b ab 27 65 95 41 67 4e 7d 41 d3 2f 4c eb 93 8e ea c0 8e 70 3f e7 d4 a0 b6 c8 70 ef c4 c3 51 02 3c 9a c2 91 32 a4 b3 ed 18 a0 d7 c1 6d 87 00 41 29 5f 7c 62 b3 6c 1f 96 3c 4c 14 e0 48 07 13 05 Data Ascii: z9KB/Nl{qB(4BE"s8Br_s4j"SiA RHOwPar;33j9`{(AiqoOIHu@$G:%TGOh5>NqbgX(['eAgN}A/Lp?pQ<2mA)_\|bl<LH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.18	49835	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:00 UTC	627	OUT	GET /wp-content/uploads/logo_regatta_great_outdoors.png HTTP/1.1 Host: www.signable.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:00 UTC	367	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:33:00 GMT Content-Type: image/png Content-Length: 67426 Connection: close Last-Modified: Wed, 02 Aug 2023 13:20:57 GMT ETag: "10762-601f088badf00" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT X-CDN-C: all Accept-Ranges: bytes
2024-01-16 21:33:00 UTC	16017	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 00 85 08 06 00 00 00 ad df 0a 5a 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 04 f4 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 61 38 64 34 37 35 33 34 39 2c 20 32 30 32 33 2f 30 33 2f 32 33 2d 31 33 3a 30 35 3a 34 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 Data Ascii: PNGIHDRZpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:45 "> <rdf
2024-01-16 21:33:00 UTC	16384	IN	Data Raw: 27 44 06 22 b7 01 72 18 ae 16 bc a7 94 c6 0d ac 3a 3e e0 e4 01 c1 bf 46 1a 1f ff 11 e6 9e fa 08 ec b9 f7 0a 2b bb 1b f6 64 cd 55 0b 7b de 6d cc 7f f4 fe a5 f8 a2 7f 53 1a 75 04 1a 4f 90 60 fb f7 21 d7 7c 91 38 a9 0b c2 49 03 4e e1 3a 12 b9 4f e0 5e 22 24 37 af d6 ac 13 cd 9d d3 40 af 5b 69 c0 74 10 b5 09 22 7f 18 a2 70 16 a4 e6 11 90 a6 f7 02 6c 16 70 e6 5c 1e 90 55 80 34 00 d6 b4 e7 39 81 b7 81 ba 4e a3 0f 49 80 a2 00 7e 92 f9 6a 3e ec 7d 89 a4 b9 b9 b9 3d 20 e4 2d 00 02 55 09 d5 8b b3 17 0a 05 e5 f8 f1 e3 75 a3 a3 a3 5b 1d c7 d9 31 33 33 f3 80 ae eb d1 40 20 50 71 41 9f 0f cb b2 d0 da d6 f6 54 4d 3c fe d2 d0 d0 10 6c db 46 3e 9f 47 61 1d ed 53 01 40 91 65 59 08 21 b3 c5 a2 28 f3 c9 7b fe df fd 05 69 a9 df 2d fe 3c 21 75 83 83 83 bf d6 d9 d1 f1 74 38 1a Data Ascii: 'D"r:>F+dU{mSuO`!\|8IN:O^"$7@[it"plp\U49NI~j>}= -Uu[133@ PqATM<lF>GaS@eY!({i-<!ut8
2024-01-16 21:33:00 UTC	16384	IN	Data Raw: 4b 05 b7 03 00 59 67 38 56 00 34 21 e1 e8 a1 69 3c f3 92 01 aa c4 e1 70 09 e1 20 45 76 65 15 aa 1b 8e 15 13 ba ef 66 b5 2c 0b 13 13 13 e8 ed ed f5 93 4e 56 7c 31 7f 51 0f 87 c3 98 4b 26 71 65 70 10 3d dd dd 2b aa ad f5 e3 80 b2 24 21 9d 4e c3 76 1c 14 0a 05 14 0a 05 50 4f c8 c2 32 0c e4 f3 79 14 f3 79 d4 78 b5 a7 7e dc d6 4f 2e 6a 6c 6e 46 26 9d 86 6d db 70 6c 1b d9 79 e5 53 be 8b b1 5a 1c d9 af d5 de b1 7d 3b 40 29 f2 d9 ac ff cb f9 37 5a 96 4c 3d 7d f2 24 28 a5 18 1f 1b 83 6d db 15 89 7c 31 6c db 46 43 43 03 32 e9 b4 1b df 5e 83 28 89 1f 07 f6 9f 91 e4 d5 ae cb 5e c2 d3 72 0b 9b a2 aa 70 18 c3 e4 c4 04 0c 5d 47 24 1a 45 40 d3 60 e8 3a ae a4 52 c8 66 32 c8 e5 72 48 a5 52 68 ac af 77 ab 73 16 f5 81 f7 9f b9 2c cb 08 85 42 30 3c 77 ab 2c cb 2b 22 f2 c5 58 Data Ascii: KYg8V4!i<p Evef,NV\|1QK&qep=+$!NvPO2yyx~O.jlnF&mplySZ};@)7ZL=}$(m\|1lFCC2^(^rp]G$E@`:Rf2rHRhws,B0<w,+"X
2024-01-16 21:33:00 UTC	16384	IN	Data Raw: ca 82 20 54 96 da e4 96 96 96 c6 56 32 25 51 b1 1d 07 42 a1 10 b4 34 37 6f 1a a5 8b 31 2e e5 13 6c 1b 16 3c f0 d7 f8 f8 38 14 0a 85 72 68 f9 c5 e3 c7 01 61 0c db b7 6f 87 78 75 35 28 aa 0a a9 54 6a 53 c0 88 8d 8c 39 15 ba 29 0d 5d 87 68 38 ec 9f 9d 99 f9 65 55 55 23 74 f3 d8 25 f6 b9 49 d7 75 2f 29 aa 5a 66 bc db 48 4c d3 b4 6f bb fd 76 a7 a6 ba 7a d3 61 f6 cd 08 dd ac 71 0f c0 55 29 1e e9 0b 3f 3f 37 77 af a2 28 c1 70 38 5c 0e b7 0b 82 90 e9 dd b1 e3 9b e9 74 ba fc be 62 b1 48 e7 66 b4 b7 b7 f7 b1 53 a7 4f ff ba 58 91 73 cf e7 f3 b7 2b 8a d2 87 10 ba b0 52 89 d0 ff 7f a9 8c 90 6d db c0 f3 3c b4 b6 b5 c1 dc ec 2c d8 b6 0d a2 28 c2 d4 e4 e4 96 80 91 0c c3 ec 34 0c a3 9a 36 78 f0 94 b7 11 ab ae 3e 16 08 04 cc f5 14 52 28 12 01 dd b2 e0 c8 d1 a3 30 3a 3c bc Data Ascii: TV2%QB47o1.l<8rhaoxu5(TjS9)]h8eUU#t%Iu/)ZfHLovzaqU)??7w(p8\tbHfSOXs+Rm<,(46x>R(0:<
2024-01-16 21:33:00 UTC	2257	IN	Data Raw: e9 99 d9 d9 37 16 0a 85 b7 19 86 b1 c7 23 15 41 2b f7 f4 6a 7b b9 72 ad 3d b6 39 47 10 84 b9 f6 f6 f6 af 77 75 75 7d 6e 78 68 68 14 21 b4 e5 1b d3 ca 67 20 8c 89 2c cb 27 bb 7b 7a de e9 f3 fb 3f 78 e9 e2 c5 77 62 8c 23 95 37 1f 80 ab 8a 62 ad b3 e7 94 40 78 0e c7 71 33 7b f7 ee fd 78 7d 43 c3 97 55 55 d5 89 57 ba b3 de 18 30 c3 80 e0 11 7d ac 27 1c c7 39 00 e0 50 65 ec f1 54 13 8e e3 2c aa 2f 56 0a c3 30 c0 8b 22 58 a5 fd b1 e6 30 14 55 25 e8 3a e7 92 3a 80 8e e3 10 d7 75 5d 8e e3 0a 3e 9f ef c5 1d 3b 77 3e 1a 0a 04 be 7f ea d4 a9 59 86 61 9c 9b 71 7e 2b 9f 07 84 4c c7 e3 f1 df 6b 69 69 f9 4e 26 93 f9 25 5d d7 5f e3 12 12 62 19 06 af 77 d9 59 29 d4 00 79 4d 53 0a 3c cf 3f 59 53 5d fd af e1 70 f8 29 cb b2 54 fa cc 9b 34 6e 13 00 1e b9 f3 ce 3b cf 0e 0e 0d Data Ascii: 7#A+j{r=9Gwuu}nxhh!g ,'{z?xwb#7b@xq3{x}CUUW0}'9PeT,/V0"X0U%::u]>;w>Yaq~+LkiiN&%]_bwY)yMS<?YS]p)T4n;

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.18	49840	173.222.162.7	443

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:00 UTC	2228	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900B03D X-BM-CBT: 1696588684 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: E7AABE4883434523955E8D3E8BEB8439 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900B03D X-MSEdge-ExternalExp: d-thshld42,d-thshldspcl40,dissbtophit_1,fliptrat6,wsbfixcache1,wsbqfasmsall_c,wsbqfminiserp_c,wsbref-c X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 516 Connection: Keep-Alive Cache-Control: no-cache Cookie: SRCHUID=V=2&GUID=98AE0F56B27744B8ABF61F3A94603951&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231006; SRCHHPGUSR=SRCHLANG=en&HV=1696588463&IPMH=a9482148&IPMID=1696588684033&LUT=1696588683922; CortanaAppUID=206269CC221215D479A7A388F7433ACF; MUID=BC76BB0020D345C1A049A4820CB4C03C; _SS=SID=33E2508DD3486FEA31D7432FD26A6E9C&CPID=1696588684527&AC=1&CPH=1a233f7e&CBV=39996767; _EDGE_S=SID=33E2508DD3486FEA31D7432FD26A6E9C; MUIDB=BC76BB0020D345C1A049A4820CB4C03C
2024-01-16 21:33:00 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-01-16 21:33:00 UTC	515	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 42 43 37 36 42 42 30 30 32 30 44 33 34 35 43 31 41 30 34 39 41 34 38 32 30 43 42 34 43 30 33 43 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 36 30 39 36 46 46 38 46 37 38 44 35 34 38 41 34 39 38 45 46 39 42 34 32 34 43 42 36 44 43 36 36 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>BC76BB0020D345C1A049A4820CB4C03C</CID><Events><E><T>Event.ClientInst</T><IG>6096FF8F78D548A498EF9B424CB6DC66</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-01-16 21:33:00 UTC	475	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 6411B6E6BF6D461E91A50750CCBEC685 Ref B: LAXEDGE2012 Ref C: 2024-01-16T21:33:00Z Date: Tue, 16 Jan 2024 21:33:00 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.07a6dc17.1705440780.2da1256

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.18	49837	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:00 UTC	619	OUT	GET /wp-content/uploads/logo_octopus_energy.png HTTP/1.1 Host: www.signable.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:00 UTC	365	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:33:00 GMT Content-Type: image/png Content-Length: 4771 Connection: close Last-Modified: Wed, 02 Aug 2023 13:20:13 GMT ETag: "12a3-601f086185f36" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT X-CDN-C: all Accept-Ranges: bytes
2024-01-16 21:33:00 UTC	4771	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 39 00 00 00 2c 08 06 00 00 00 1e 8d cf 6d 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 12 38 49 44 41 54 78 01 ed 9d 09 b4 1e 45 95 c7 ff 0e 33 20 20 c8 a0 28 88 9a 46 33 e2 82 02 8e c3 32 8c e6 39 b8 e3 cc 99 05 c7 85 19 f3 18 15 37 5c 8f a2 82 9a 28 6e 04 f7 0d f7 17 15 f5 a8 e0 82 2b a2 26 a0 e0 0e 28 46 05 91 f7 14 41 43 04 b7 08 18 81 58 3f ab fa a4 cf 47 dd ee aa ea 7e 8f 24 f6 ff 9c 7b de 3b 5f d7 d2 5d 5d 75 eb ae d5 37 d3 d6 83 1d 1c 2d 8a fc 7e b1 a3 3f 69 c4 88 11 23 b6 70 fc a3 a3 8d 11 ba 8f 46 8c 18 f1 57 8b bf d1 88 11 23 46 6c c5 18 99 dc 88 11 23 b6 6a 8c 4c 6e c4 88 11 5b Data Ascii: PNGIHDR9,mpHYssRGBgAMAa8IDATxE3 (F3297\(n+&(FACX?G~${;_]]u7-~?i#pFW#Fl#jLn[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.18	49838	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:00 UTC	612	OUT	GET /wp-content/uploads/logo_aardman.png HTTP/1.1 Host: www.signable.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:00 UTC	364	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:33:00 GMT Content-Type: image/png Content-Length: 2771 Connection: close Last-Modified: Wed, 02 Aug 2023 13:20:11 GMT ETag: "ad3-601f085f267ce" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT X-CDN-C: all Accept-Ranges: bytes
2024-01-16 21:33:00 UTC	2771	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 34 00 00 00 dc 02 03 00 00 00 1a 6d d3 56 00 00 00 0c 50 4c 54 45 e3 1b 25 e1 1e 25 e2 1e 25 e2 1f 26 51 39 8e d4 00 00 00 03 74 52 4e 53 00 41 ca 68 a5 91 34 00 00 0a 73 49 44 41 54 78 da ed 9c cd 6f dc c6 15 c0 67 b8 da a5 9d 45 bb 3a c8 ae 2d 21 e6 25 28 72 30 b0 7f 42 98 8f 36 87 1e a2 02 a2 0e f2 41 39 e8 d0 c8 40 f7 e2 83 50 04 25 ed fe 03 0a e0 04 c8 29 3e d8 01 44 03 d1 a5 97 26 80 b8 7f c2 16 68 72 de 00 32 9a e8 d0 e8 c0 a2 94 bc e4 14 9c 2f be e1 72 25 72 e3 d5 30 00 df c5 bb da 5d f2 37 6f de d7 bc 19 1a a1 46 1a 69 a4 91 46 1a 69 a4 91 46 1a 69 a4 91 b2 82 f7 eb 44 63 9c d5 4a 37 c4 ab 13 4e 30 ae 13 4d 3f b1 6b 44 b3 46 ea 64 c7 26 a9 d3 54 19 24 aa 95 19 4f 1b 4e 47 9f 9f b9 e4 78 ca Data Ascii: PNGIHDR4mVPLTE%%%&Q9tRNSAh4sIDATxogE:-!%(r0B6A9@P%)>D&hr2/r%r0]7oFiFiFiDcJ7N0M?kDFd&T$ONGx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.18	49839	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:00 UTC	620	OUT	GET /wp-content/uploads/logo_allsopp_allsopp.png HTTP/1.1 Host: www.signable.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:01 UTC	366	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:33:00 GMT Content-Type: image/png Content-Length: 43286 Connection: close Last-Modified: Wed, 02 Aug 2023 13:20:05 GMT ETag: "a916-601f0859fc9f1" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT X-CDN-C: all Accept-Ranges: bytes
2024-01-16 21:33:01 UTC	16018	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 00 91 08 06 00 00 00 1b dd 6b 45 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 04 f5 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 30 2d 63 30 30 31 20 37 39 2e 63 30 32 30 34 62 32 64 65 66 2c 20 32 30 32 33 2f 30 32 2f 30 32 2d 31 32 3a 31 34 3a 32 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 Data Ascii: PNGIHDRkEpHYs%%IR$iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2def, 2023/02/02-12:14:24 "> <rd
2024-01-16 21:33:01 UTC	16384	IN	Data Raw: ad 10 88 a2 18 24 84 7c 3e 93 c9 74 4f 16 93 24 cb 32 3c 1e 0f 0e 1f 3e 8c f1 f1 71 b4 b5 b5 4d ab 31 1f 0b 2c 5f be 1c 0d 0d 0d 88 46 a3 c8 64 32 50 55 f5 e8 a8 37 a7 c2 cb 15 a6 69 2e 9e ec 21 05 41 40 20 10 b8 f7 f0 e1 c3 05 47 bb 72 c2 19 8d 46 73 03 1c e6 04 7c 53 02 48 36 34 34 bc 9f 52 4a e2 f1 f8 85 a5 78 21 4e 9e 70 4d 4f 4f cf 9f 9b 9b 9b df 21 8a e2 c3 a5 2e d6 91 4e a7 11 08 04 70 fd f5 d7 a3 a3 a3 a3 e8 26 e8 93 41 55 55 ec dc b9 b3 69 68 68 28 5b 1c dd eb f5 76 f7 f4 f4 04 81 fc 18 04 2f 13 b8 79 f3 66 50 4a 51 5b 5b 9b 17 01 77 0e 3e ba ba ba 3e 18 8d 46 3d fc 33 51 14 ef 58 b8 70 e1 3f 35 4d cb ba 36 26 63 8a 84 90 6c 97 a5 9e 9e 9e 5f 24 12 89 37 0b 82 50 0d 00 82 20 2c 38 7c f8 f0 1b 6b 6b 6b 7f 99 4f d5 1d 27 82 fa b8 62 be c7 42 03 2e Data Ascii: $\|>tO$2<>qM1,_Fd2PU7i.!A@ GrFs\|SH644RJx!NpMOO!.Np&AUUihh([v/yfPJQ[[w>>F=3QXp?5M6&cl_$7P ,8\|kkkO'bB.
2024-01-16 21:33:01 UTC	10884	IN	Data Raw: 14 cd 25 45 cb b2 6a b7 6d db 76 b7 61 18 1f 11 45 f1 d6 7f 37 ff 17 3f cc b9 d2 b1 aa aa d0 34 0d 87 0f 1f ce 4a 5e 99 4c 06 55 55 55 98 28 dc f0 03 ff d5 af 7e 15 67 9e 79 e6 f7 ae bf fe fa d4 a1 43 87 7e 5a 6c 65 27 1e 7d 39 3c 3c fc dd aa aa 2a 55 d3 b4 af ff 3b 10 7d de ba 30 14 0a 65 ad 0d c5 80 39 25 51 2d cb ba 9c 10 92 95 7a 08 21 77 76 75 75 8d f2 88 70 a7 9f eb 5f 53 a9 d4 56 d3 34 b3 da 02 63 ec ad bb 77 ef 7e ae dc df 75 6e 20 49 12 0e 1c 38 90 77 24 fe 54 60 8c 85 ab aa aa 5e 92 24 69 45 4e 74 ed 6b 00 7c 59 10 84 ff ce 93 41 82 52 8a 86 86 06 f0 7a d1 c1 60 f0 65 69 2d 84 90 6c fa 9e 2c cb 85 10 fd 76 cb b2 4e e6 7f 38 cc ff 4f 6f 78 c3 1b 42 17 5e 78 e1 cb 52 75 18 63 38 78 f0 e0 b4 79 b8 7c 7f 4b 92 84 b6 b6 36 84 c3 61 54 56 56 e2 c2 0b Data Ascii: %EjmvaE7?4J^LUUU(~gyC~Zle'}9<<*U;}0e9%Q-z!wvuup_SV4cw~un I8w$T`^$iENtk\|YARz`ei-l,vN8OoxB^xRuc8xy\|K6aTVV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.18	49841	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:00 UTC	613	OUT	GET /wp-content/uploads/logo_river_island.png HTTP/1.1 Host: signable.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:01 UTC	372	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 16 Jan 2024 21:33:01 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 275 Connection: close Location: https://www.signable.co.uk/wp-content/uploads/logo_river_island.png Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0301 NC:000000 UP: X-CDN-C: all
2024-01-16 21:33:01 UTC	275	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 69 67 6e 61 62 6c 65 2e 63 6f 2e 75 6b 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 6c 6f 67 6f 5f 72 69 76 65 72 5f 69 73 6c 61 6e 64 2e 70 6e 67 22 3e 68 65 72 65 3c 2f 61 3e 2e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.signable.co.uk/wp-content/uploads/logo_river_island.png">here</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.18	49842	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:00 UTC	379	OUT	GET /wp-content/uploads/logo_hat_trick.png HTTP/1.1 Host: www.signable.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:01 UTC	364	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:33:01 GMT Content-Type: image/png Content-Length: 3601 Connection: close Last-Modified: Wed, 02 Aug 2023 13:19:51 GMT ETag: "e11-601f084c8ea54" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT X-CDN-C: all Accept-Ranges: bytes
2024-01-16 21:33:01 UTC	3601	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 9c 00 00 00 dc 04 03 00 00 00 b6 40 0a d2 00 00 00 18 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 56 37 1c 2a 00 00 00 07 74 52 4e 53 00 13 41 6a 9c cc f1 b8 d2 e7 af 00 00 0d a1 49 44 41 54 78 da ed 5d 4b 77 aa 3a 14 36 e0 b9 63 b4 d2 b1 da ea 99 7a d4 ea b4 0f 5b a6 3d 5a cb b8 b6 c2 fc 56 c9 df bf 0b 48 42 12 92 10 04 7b c1 c5 5e 67 70 68 cb e3 cb 4e f6 fe f6 23 d0 6a 35 d2 48 23 8d 34 d2 48 23 8d 34 d2 48 23 8d 34 72 f9 02 06 17 05 c7 fc b2 2e 09 ce 18 4e 2e 09 ce 12 fe bd 24 38 0e dc 5d 92 25 f0 e1 f7 25 59 02 08 0f 17 04 c7 86 f0 70 41 a6 6d 7c 59 70 5e 2e 0a 0e f0 2f 0a 8e 01 d3 70 40 a7 b6 70 7a 30 65 d9 c0 dd be 5f 63 4b c0 c3 19 f9 f5 a5 3d 4b 08 39 Data Ascii: PNGIHDR@PLTEV7*tRNSAjIDATx]Kw:6cz[=ZVHB{^gphN#j5H#4H#4H#4r.N.$8]%%YpAm\|Yp^./p@pz0e_cK=K9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.18	49844	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:01 UTC	374	OUT	GET /wp-content/uploads/logo_coop.png HTTP/1.1 Host: www.signable.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:01 UTC	366	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:33:01 GMT Content-Type: image/png Content-Length: 21501 Connection: close Last-Modified: Wed, 02 Aug 2023 13:20:44 GMT ETag: "53fd-601f087f1e639" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT X-CDN-C: all Accept-Ranges: bytes
2024-01-16 21:33:01 UTC	16018	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 00 d7 08 06 00 00 00 c2 dc 82 34 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 04 f5 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 30 2d 63 30 30 31 20 37 39 2e 63 30 32 30 34 62 32 64 65 66 2c 20 32 30 32 33 2f 30 32 2f 30 32 2d 31 32 3a 31 34 3a 32 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 Data Ascii: PNGIHDR4pHYs%%IR$iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2def, 2023/02/02-12:14:24 "> <rd
2024-01-16 21:33:01 UTC	5483	IN	Data Raw: 96 7a 39 b9 83 bd c3 f7 f3 d0 c9 85 f7 ed 4b a0 94 42 85 e2 9a 2f e6 b6 4e dc a3 6c 7b 71 dc 42 08 28 b9 bb ac 34 88 42 db 8b b6 45 22 73 12 05 38 d2 c1 08 f0 0f 42 72 5f 73 f9 34 6a 0c d7 8a 22 53 69 0e 9c 41 cd 20 19 87 52 00 b7 48 87 d6 d8 4f d0 77 50 cb 05 b8 04 61 da 72 3b 33 fc bb 33 d4 6a af 1c 03 e5 f7 d0 17 c2 8c 87 81 39 08 80 60 8b c0 7b c8 17 b8 b1 06 d4 02 d8 28 94 0f 41 69 71 6f 4f 96 df 49 48 0f 01 bb 16 75 40 24 d2 06 a2 00 47 3a 18 07 ca 1f 25 54 47 9a 4f 68 35 a0 06 3e a5 88 ca 4e 71 8d 05 8c d6 8a e4 a1 9b 0f 02 a1 d0 85 ca 62 67 58 19 f4 b8 87 28 5b ab 27 65 95 41 67 4e 7d 41 d3 2f 4c eb 93 8e ea c0 8e 70 3f e7 d4 a0 b6 c8 70 ef c4 c3 51 02 3c 9a c2 91 32 a4 b3 ed 18 a0 d7 c1 6d 87 00 41 29 5f 7c 62 b3 6c 1f 96 3c 4c 14 e0 48 07 13 05 Data Ascii: z9KB/Nl{qB(4BE"s8Br_s4j"SiA RHOwPar;33j9`{(AiqoOIHu@$G:%TGOh5>NqbgX(['eAgN}A/Lp?pQ<2mA)_\|bl<LH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.18	49843	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:01 UTC	614	OUT	GET /wp-content/uploads/logo_smart_pension.png HTTP/1.1 Host: signable.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:01 UTC	373	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 16 Jan 2024 21:33:01 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 276 Connection: close Location: https://www.signable.co.uk/wp-content/uploads/logo_smart_pension.png Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0301 NC:000000 UP: X-CDN-C: all
2024-01-16 21:33:01 UTC	276	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 69 67 6e 61 62 6c 65 2e 63 6f 2e 75 6b 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 6c 6f 67 6f 5f 73 6d 61 72 74 5f 70 65 6e 73 69 6f 6e 2e 70 6e 67 22 3e 68 65 72 65 3c 2f 61 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.signable.co.uk/wp-content/uploads/logo_smart_pension.png">here</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.18	49846	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:01 UTC	384	OUT	GET /wp-content/uploads/logo_octopus_energy.png HTTP/1.1 Host: www.signable.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:01 UTC	365	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:33:01 GMT Content-Type: image/png Content-Length: 4771 Connection: close Last-Modified: Wed, 02 Aug 2023 13:20:13 GMT ETag: "12a3-601f086185f36" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT X-CDN-C: all Accept-Ranges: bytes
2024-01-16 21:33:01 UTC	4771	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 39 00 00 00 2c 08 06 00 00 00 1e 8d cf 6d 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 12 38 49 44 41 54 78 01 ed 9d 09 b4 1e 45 95 c7 ff 0e 33 20 20 c8 a0 28 88 9a 46 33 e2 82 02 8e c3 32 8c e6 39 b8 e3 cc 99 05 c7 85 19 f3 18 15 37 5c 8f a2 82 9a 28 6e 04 f7 0d f7 17 15 f5 a8 e0 82 2b a2 26 a0 e0 0e 28 46 05 91 f7 14 41 43 04 b7 08 18 81 58 3f ab fa a4 cf 47 dd ee aa ea 7e 8f 24 f6 ff 9c 7b de 3b 5f d7 d2 5d 5d 75 eb ae d5 37 d3 d6 83 1d 1c 2d 8a fc 7e b1 a3 3f 69 c4 88 11 23 b6 70 fc a3 a3 8d 11 ba 8f 46 8c 18 f1 57 8b bf d1 88 11 23 46 6c c5 18 99 dc 88 11 23 b6 6a 8c 4c 6e c4 88 11 5b Data Ascii: PNGIHDR9,mpHYssRGBgAMAa8IDATxE3 (F3297\(n+&(FACX?G~${;_]]u7-~?i#pFW#Fl#jLn[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.18	49845	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:01 UTC	377	OUT	GET /wp-content/uploads/logo_aardman.png HTTP/1.1 Host: www.signable.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:01 UTC	364	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:33:01 GMT Content-Type: image/png Content-Length: 2771 Connection: close Last-Modified: Wed, 02 Aug 2023 13:20:11 GMT ETag: "ad3-601f085f267ce" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT X-CDN-C: all Accept-Ranges: bytes
2024-01-16 21:33:01 UTC	2771	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 34 00 00 00 dc 02 03 00 00 00 1a 6d d3 56 00 00 00 0c 50 4c 54 45 e3 1b 25 e1 1e 25 e2 1e 25 e2 1f 26 51 39 8e d4 00 00 00 03 74 52 4e 53 00 41 ca 68 a5 91 34 00 00 0a 73 49 44 41 54 78 da ed 9c cd 6f dc c6 15 c0 67 b8 da a5 9d 45 bb 3a c8 ae 2d 21 e6 25 28 72 30 b0 7f 42 98 8f 36 87 1e a2 02 a2 0e f2 41 39 e8 d0 c8 40 f7 e2 83 50 04 25 ed fe 03 0a e0 04 c8 29 3e d8 01 44 03 d1 a5 97 26 80 b8 7f c2 16 68 72 de 00 32 9a e8 d0 e8 c0 a2 94 bc e4 14 9c 2f be e1 72 25 72 e3 d5 30 00 df c5 bb da 5d f2 37 6f de d7 bc 19 1a a1 46 1a 69 a4 91 46 1a 69 a4 91 46 1a 69 a4 91 b2 82 f7 eb 44 63 9c d5 4a 37 c4 ab 13 4e 30 ae 13 4d 3f b1 6b 44 b3 46 ea 64 c7 26 a9 d3 54 19 24 aa 95 19 4f 1b 4e 47 9f 9f b9 e4 78 ca Data Ascii: PNGIHDR4mVPLTE%%%&Q9tRNSAh4sIDATxogE:-!%(r0B6A9@P%)>D&hr2/r%r0]7oFiFiFiDcJ7N0M?kDFd&T$ONGx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.18	49847	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:01 UTC	392	OUT	GET /wp-content/uploads/logo_regatta_great_outdoors.png HTTP/1.1 Host: www.signable.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:01 UTC	367	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:33:01 GMT Content-Type: image/png Content-Length: 67426 Connection: close Last-Modified: Wed, 02 Aug 2023 13:20:57 GMT ETag: "10762-601f088badf00" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT X-CDN-C: all Accept-Ranges: bytes
2024-01-16 21:33:01 UTC	16017	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 00 85 08 06 00 00 00 ad df 0a 5a 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 04 f4 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 61 38 64 34 37 35 33 34 39 2c 20 32 30 32 33 2f 30 33 2f 32 33 2d 31 33 3a 30 35 3a 34 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 Data Ascii: PNGIHDRZpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:45 "> <rdf
2024-01-16 21:33:01 UTC	16384	IN	Data Raw: 27 44 06 22 b7 01 72 18 ae 16 bc a7 94 c6 0d ac 3a 3e e0 e4 01 c1 bf 46 1a 1f ff 11 e6 9e fa 08 ec b9 f7 0a 2b bb 1b f6 64 cd 55 0b 7b de 6d cc 7f f4 fe a5 f8 a2 7f 53 1a 75 04 1a 4f 90 60 fb f7 21 d7 7c 91 38 a9 0b c2 49 03 4e e1 3a 12 b9 4f e0 5e 22 24 37 af d6 ac 13 cd 9d d3 40 af 5b 69 c0 74 10 b5 09 22 7f 18 a2 70 16 a4 e6 11 90 a6 f7 02 6c 16 70 e6 5c 1e 90 55 80 34 00 d6 b4 e7 39 81 b7 81 ba 4e a3 0f 49 80 a2 00 7e 92 f9 6a 3e ec 7d 89 a4 b9 b9 b9 3d 20 e4 2d 00 02 55 09 d5 8b b3 17 0a 05 e5 f8 f1 e3 75 a3 a3 a3 5b 1d c7 d9 31 33 33 f3 80 ae eb d1 40 20 50 71 41 9f 0f cb b2 d0 da d6 f6 54 4d 3c fe d2 d0 d0 10 6c db 46 3e 9f 47 61 1d ed 53 01 40 91 65 59 08 21 b3 c5 a2 28 f3 c9 7b fe df fd 05 69 a9 df 2d fe 3c 21 75 83 83 83 bf d6 d9 d1 f1 74 38 1a Data Ascii: 'D"r:>F+dU{mSuO`!\|8IN:O^"$7@[it"plp\U49NI~j>}= -Uu[133@ PqATM<lF>GaS@eY!({i-<!ut8
2024-01-16 21:33:02 UTC	16384	IN	Data Raw: 4b 05 b7 03 00 59 67 38 56 00 34 21 e1 e8 a1 69 3c f3 92 01 aa c4 e1 70 09 e1 20 45 76 65 15 aa 1b 8e 15 13 ba ef 66 b5 2c 0b 13 13 13 e8 ed ed f5 93 4e 56 7c 31 7f 51 0f 87 c3 98 4b 26 71 65 70 10 3d dd dd 2b aa ad f5 e3 80 b2 24 21 9d 4e c3 76 1c 14 0a 05 14 0a 05 50 4f c8 c2 32 0c e4 f3 79 14 f3 79 d4 78 b5 a7 7e dc d6 4f 2e 6a 6c 6e 46 26 9d 86 6d db 70 6c 1b d9 79 e5 53 be 8b b1 5a 1c d9 af d5 de b1 7d 3b 40 29 f2 d9 ac ff cb f9 37 5a 96 4c 3d 7d f2 24 28 a5 18 1f 1b 83 6d db 15 89 7c 31 6c db 46 43 43 03 32 e9 b4 1b df 5e 83 28 89 1f 07 f6 9f 91 e4 d5 ae cb 5e c2 d3 72 0b 9b a2 aa 70 18 c3 e4 c4 04 0c 5d 47 24 1a 45 40 d3 60 e8 3a ae a4 52 c8 66 32 c8 e5 72 48 a5 52 68 ac af 77 ab 73 16 f5 81 f7 9f b9 2c cb 08 85 42 30 3c 77 ab 2c cb 2b 22 f2 c5 58 Data Ascii: KYg8V4!i<p Evef,NV\|1QK&qep=+$!NvPO2yyx~O.jlnF&mplySZ};@)7ZL=}$(m\|1lFCC2^(^rp]G$E@`:Rf2rHRhws,B0<w,+"X
2024-01-16 21:33:02 UTC	16384	IN	Data Raw: ca 82 20 54 96 da e4 96 96 96 c6 56 32 25 51 b1 1d 07 42 a1 10 b4 34 37 6f 1a a5 8b 31 2e e5 13 6c 1b 16 3c f0 d7 f8 f8 38 14 0a 85 72 68 f9 c5 e3 c7 01 61 0c db b7 6f 87 78 75 35 28 aa 0a a9 54 6a 53 c0 88 8d 8c 39 15 ba 29 0d 5d 87 68 38 ec 9f 9d 99 f9 65 55 55 23 74 f3 d8 25 f6 b9 49 d7 75 2f 29 aa 5a 66 bc db 48 4c d3 b4 6f bb fd 76 a7 a6 ba 7a d3 61 f6 cd 08 dd ac 71 0f c0 55 29 1e e9 0b 3f 3f 37 77 af a2 28 c1 70 38 5c 0e b7 0b 82 90 e9 dd b1 e3 9b e9 74 ba fc be 62 b1 48 e7 66 b4 b7 b7 f7 b1 53 a7 4f ff ba 58 91 73 cf e7 f3 b7 2b 8a d2 87 10 ba b0 52 89 d0 ff 7f a9 8c 90 6d db c0 f3 3c b4 b6 b5 c1 dc ec 2c d8 b6 0d a2 28 c2 d4 e4 e4 96 80 91 0c c3 ec 34 0c a3 9a 36 78 f0 94 b7 11 ab ae 3e 16 08 04 cc f5 14 52 28 12 01 dd b2 e0 c8 d1 a3 30 3a 3c bc Data Ascii: TV2%QB47o1.l<8rhaoxu5(TjS9)]h8eUU#t%Iu/)ZfHLovzaqU)??7w(p8\tbHfSOXs+Rm<,(46x>R(0:<
2024-01-16 21:33:02 UTC	2257	IN	Data Raw: e9 99 d9 d9 37 16 0a 85 b7 19 86 b1 c7 23 15 41 2b f7 f4 6a 7b b9 72 ad 3d b6 39 47 10 84 b9 f6 f6 f6 af 77 75 75 7d 6e 78 68 68 14 21 b4 e5 1b d3 ca 67 20 8c 89 2c cb 27 bb 7b 7a de e9 f3 fb 3f 78 e9 e2 c5 77 62 8c 23 95 37 1f 80 ab 8a 62 ad b3 e7 94 40 78 0e c7 71 33 7b f7 ee fd 78 7d 43 c3 97 55 55 d5 89 57 ba b3 de 18 30 c3 80 e0 11 7d ac 27 1c c7 39 00 e0 50 65 ec f1 54 13 8e e3 2c aa 2f 56 0a c3 30 c0 8b 22 58 a5 fd b1 e6 30 14 55 25 e8 3a e7 92 3a 80 8e e3 10 d7 75 5d 8e e3 0a 3e 9f ef c5 1d 3b 77 3e 1a 0a 04 be 7f ea d4 a9 59 86 61 9c 9b 71 7e 2b 9f 07 84 4c c7 e3 f1 df 6b 69 69 f9 4e 26 93 f9 25 5d d7 5f e3 12 12 62 19 06 af 77 d9 59 29 d4 00 79 4d 53 0a 3c cf 3f 59 53 5d fd af e1 70 f8 29 cb b2 54 fa cc 9b 34 6e 13 00 1e b9 f3 ce 3b cf 0e 0e 0d Data Ascii: 7#A+j{r=9Gwuu}nxhh!g ,'{z?xwb#7b@xq3{x}CUUW0}'9PeT,/V0"X0U%::u]>;w>Yaq~+LkiiN&%]_bwY)yMS<?YS]p)T4n;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.18	49848	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:01 UTC	385	OUT	GET /wp-content/uploads/logo_allsopp_allsopp.png HTTP/1.1 Host: www.signable.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:02 UTC	366	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:33:01 GMT Content-Type: image/png Content-Length: 43286 Connection: close Last-Modified: Wed, 02 Aug 2023 13:20:05 GMT ETag: "a916-601f0859fc9f1" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT X-CDN-C: all Accept-Ranges: bytes
2024-01-16 21:33:02 UTC	16018	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 00 91 08 06 00 00 00 1b dd 6b 45 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 04 f5 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 30 2d 63 30 30 31 20 37 39 2e 63 30 32 30 34 62 32 64 65 66 2c 20 32 30 32 33 2f 30 32 2f 30 32 2d 31 32 3a 31 34 3a 32 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 Data Ascii: PNGIHDRkEpHYs%%IR$iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2def, 2023/02/02-12:14:24 "> <rd
2024-01-16 21:33:02 UTC	16384	IN	Data Raw: ad 10 88 a2 18 24 84 7c 3e 93 c9 74 4f 16 93 24 cb 32 3c 1e 0f 0e 1f 3e 8c f1 f1 71 b4 b5 b5 4d ab 31 1f 0b 2c 5f be 1c 0d 0d 0d 88 46 a3 c8 64 32 50 55 f5 e8 a8 37 a7 c2 cb 15 a6 69 2e 9e ec 21 05 41 40 20 10 b8 f7 f0 e1 c3 05 47 bb 72 c2 19 8d 46 73 03 1c e6 04 7c 53 02 48 36 34 34 bc 9f 52 4a e2 f1 f8 85 a5 78 21 4e 9e 70 4d 4f 4f cf 9f 9b 9b 9b df 21 8a e2 c3 a5 2e d6 91 4e a7 11 08 04 70 fd f5 d7 a3 a3 a3 a3 e8 26 e8 93 41 55 55 ec dc b9 b3 69 68 68 28 5b 1c dd eb f5 76 f7 f4 f4 04 81 fc 18 04 2f 13 b8 79 f3 66 50 4a 51 5b 5b 9b 17 01 77 0e 3e ba ba ba 3e 18 8d 46 3d fc 33 51 14 ef 58 b8 70 e1 3f 35 4d cb ba 36 26 63 8a 84 90 6c 97 a5 9e 9e 9e 5f 24 12 89 37 0b 82 50 0d 00 82 20 2c 38 7c f8 f0 1b 6b 6b 6b 7f 99 4f d5 1d 27 82 fa b8 62 be c7 42 03 2e Data Ascii: $\|>tO$2<>qM1,_Fd2PU7i.!A@ GrFs\|SH644RJx!NpMOO!.Np&AUUihh([v/yfPJQ[[w>>F=3QXp?5M6&cl_$7P ,8\|kkkO'bB.
2024-01-16 21:33:02 UTC	10884	IN	Data Raw: 14 cd 25 45 cb b2 6a b7 6d db 76 b7 61 18 1f 11 45 f1 d6 7f 37 ff 17 3f cc b9 d2 b1 aa aa d0 34 0d 87 0f 1f ce 4a 5e 99 4c 06 55 55 55 98 28 dc f0 03 ff d5 af 7e 15 67 9e 79 e6 f7 ae bf fe fa d4 a1 43 87 7e 5a 6c 65 27 1e 7d 39 3c 3c fc dd aa aa 2a 55 d3 b4 af ff 3b 10 7d de ba 30 14 0a 65 ad 0d c5 80 39 25 51 2d cb ba 9c 10 92 95 7a 08 21 77 76 75 75 8d f2 88 70 a7 9f eb 5f 53 a9 d4 56 d3 34 b3 da 02 63 ec ad bb 77 ef 7e ae dc df 75 6e 20 49 12 0e 1c 38 90 77 24 fe 54 60 8c 85 ab aa aa 5e 92 24 69 45 4e 74 ed 6b 00 7c 59 10 84 ff ce 93 41 82 52 8a 86 86 06 f0 7a d1 c1 60 f0 65 69 2d 84 90 6c fa 9e 2c cb 85 10 fd 76 cb b2 4e e6 7f 38 cc ff 4f 6f 78 c3 1b 42 17 5e 78 e1 cb 52 75 18 63 38 78 f0 e0 b4 79 b8 7c 7f 4b 92 84 b6 b6 36 84 c3 61 54 56 56 e2 c2 0b Data Ascii: %EjmvaE7?4J^LUUU(~gyC~Zle'}9<<*U;}0e9%Q-z!wvuup_SV4cw~un I8w$T`^$iENtk\|YARz`ei-l,vN8OoxB^xRuc8xy\|K6aTVV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.18	49849	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:01 UTC	617	OUT	GET /wp-content/uploads/logo_river_island.png HTTP/1.1 Host: www.signable.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:02 UTC	365	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:33:02 GMT Content-Type: image/png Content-Length: 7352 Connection: close Last-Modified: Wed, 02 Aug 2023 13:19:58 GMT ETag: "1cb8-601f085345c17" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT X-CDN-C: all Accept-Ranges: bytes
2024-01-16 21:33:02 UTC	7352	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 00 3c 08 06 00 00 00 be 5f 69 75 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 1c 5a 49 44 41 54 78 da ec 5d 07 b8 15 c5 d9 fe ee e5 5e 51 90 66 45 8d 8a 04 8d 25 76 45 b1 0b 08 a2 21 a0 62 c1 24 46 13 4d a2 06 43 6c 68 0c 8a 05 31 bf 1a 8d 31 88 8a 22 fa 83 28 a8 41 20 56 94 22 56 c0 1e a3 58 b0 45 41 01 e1 22 48 bd ff be ff 7e 07 8f c7 9d f9 66 db ec ee d9 7d 9f 67 1e e5 9e d9 dd d9 d9 99 af cd 57 6a a8 40 81 02 05 be 45 8d d3 36 71 5a 5b a7 6d e3 b4 2d 9c d6 d2 69 eb 3b ad d1 69 2b 9d b6 d4 69 0b 9d f6 19 b7 f9 4e 6b 28 a6 ae 40 01 ff 9b ed 77 4e db c0 69 6b 7c 5e bb 86 db 0a de 90 8b 79 53 7e e0 b4 05 31 8f fb 10 a7 Data Ascii: PNGIHDR<_iutEXtSoftwareAdobe ImageReadyqe<ZIDATx]^QfE%vE!b$FMClh11"(A V"VXEA"H~f}gWj@E6qZ[m-i;i+iNk(@wNik\|^yS~1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.18	49850	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:01 UTC	618	OUT	GET /wp-content/uploads/logo_smart_pension.png HTTP/1.1 Host: www.signable.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:02 UTC	366	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:33:02 GMT Content-Type: image/png Content-Length: 24530 Connection: close Last-Modified: Wed, 02 Aug 2023 13:20:01 GMT ETag: "5fd2-601f0855e62a0" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT X-CDN-C: all Accept-Ranges: bytes
2024-01-16 21:33:02 UTC	16018	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 00 53 08 06 00 00 00 47 fd d4 fa 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 5f 74 49 44 41 54 78 da ec 7d 07 9c 5c 55 bd ff f7 dc 7b a7 6d c9 6e b2 e9 bd 00 a1 85 de 05 29 8a f2 44 11 51 50 ec a2 f8 2c 60 e5 09 58 b0 57 14 29 a2 e8 53 11 10 de 13 fe 22 a2 08 f2 54 90 de 7b 08 21 24 a4 90 b2 c9 66 fb ee b4 5b fe df df 39 77 66 67 76 ca ce 6e 3a cc c9 e7 66 67 e6 b6 53 7e e7 d7 8b c2 3e a7 a3 62 0b 02 20 de c0 bf 2e 8f 0c e0 44 00 cf e7 09 05 f0 23 52 49 e0 e8 05 c0 c4 09 c0 9d 0f f1 1c af 8f 4e 03 5a ba 81 35 bc 26 6a 01 b1 0e 60 f1 77 80 bd 7e 0f bc 72 b4 b9 77 ea ef 80 c1 29 40 73 1a f0 d1 00 3f 3b 07 81 da 1b ca d9 Data Ascii: PNGIHDRSGtEXtSoftwareAdobe ImageReadyqe<_tIDATx}\U{mn)DQP,`XW)S"T{!$f[9wfgvn:fgS~>b .D#RINZ5&j`w~rw)@s?;
2024-01-16 21:33:02 UTC	8512	IN	Data Raw: 28 0b b6 5a 05 3d 1b a9 de e6 12 64 14 a8 4d c8 79 54 a9 11 7a 3f 22 81 1d fb 9e 71 e0 04 52 02 f0 21 f2 02 bb 06 01 b6 d4 75 d8 6c dd a5 b5 3c 7d 04 f4 43 a6 52 6a 68 32 89 05 44 e7 ef 79 52 c6 ee cc 1d d0 af 65 64 64 36 8e 58 8a 30 7f bd 64 17 22 0c 7f f4 83 5b b6 f3 05 b0 9b 1a c3 f4 aa 61 c8 4b 59 a3 6c e8 bd 18 cd 9a 84 f0 c0 f5 04 c2 63 cb 24 75 9f cc 63 aa 21 c0 aa 3a d4 55 f3 8c dd 99 7c fa 04 47 8b e7 73 44 67 b0 22 c7 a3 7e 54 9e 39 e0 1a 7a d6 bb 88 d4 9f 29 21 44 39 46 5b 12 d0 5b 9c be a6 bd 80 a9 27 01 9b 56 34 63 e3 0b ad 5b 44 80 25 ab 56 43 26 85 71 03 95 d3 e2 89 40 27 79 ce 93 0d a3 8b 8d 2c 43 66 cb 13 f7 9c d7 b5 3b 8c 08 ab ad 43 28 cb f5 63 8b 89 b0 38 23 35 97 9b 33 a9 c6 b5 99 e3 2a 36 dc 89 e4 15 89 2c c2 b8 66 c1 13 c4 19 7d e6 Data Ascii: (Z=dMyTz?"qR!ul<}CRjh2DyRedd6X0d"[aKYlc$uc!:U\|GsDg"~T9z)!D9F[['V4c[D%VC&q@'y,Cf;C(c8#53*6,f}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.18	49851	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:02 UTC	382	OUT	GET /wp-content/uploads/logo_river_island.png HTTP/1.1 Host: www.signable.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:02 UTC	365	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:33:02 GMT Content-Type: image/png Content-Length: 7352 Connection: close Last-Modified: Wed, 02 Aug 2023 13:19:58 GMT ETag: "1cb8-601f085345c17" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT X-CDN-C: all Accept-Ranges: bytes
2024-01-16 21:33:02 UTC	7352	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 00 3c 08 06 00 00 00 be 5f 69 75 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 1c 5a 49 44 41 54 78 da ec 5d 07 b8 15 c5 d9 fe ee e5 5e 51 90 66 45 8d 8a 04 8d 25 76 45 b1 0b 08 a2 21 a0 62 c1 24 46 13 4d a2 06 43 6c 68 0c 8a 05 31 bf 1a 8d 31 88 8a 22 fa 83 28 a8 41 20 56 94 22 56 c0 1e a3 58 b0 45 41 01 e1 22 48 bd ff be ff 7e 07 8f c7 9d f9 66 db ec ee d9 7d 9f 67 1e e5 9e d9 dd d9 d9 99 af cd 57 6a a8 40 81 02 05 be 45 8d d3 36 71 5a 5b a7 6d e3 b4 2d 9c d6 d2 69 eb 3b ad d1 69 2b 9d b6 d4 69 0b 9d f6 19 b7 f9 4e 6b 28 a6 ae 40 01 ff 9b ed 77 4e db c0 69 6b 7c 5e bb 86 db 0a de 90 8b 79 53 7e e0 b4 05 31 8f fb 10 a7 Data Ascii: PNGIHDR<_iutEXtSoftwareAdobe ImageReadyqe<ZIDATx]^QfE%vE!b$FMClh11"(A V"VXEA"H~f}gWj@E6qZ[m-i;i+iNk(@wNik\|^yS~1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.18	49854	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:02 UTC	1040	OUT	GET /core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:02 UTC	964	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 1551 Connection: close Server: istio-envoy Last-Modified: Thu, 11 Jan 2024 23:20:20 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: TvqzNUwkNpTzjCHLpvpAGNs.QR_clEp0 Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains x-envoy-upstream-service-time: 18 Date: Tue, 16 Jan 2024 21:33:02 GMT Cache-Control: no-cache ETag: "49a058c120ce76cf44be0e5074a7ab23" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 687bf9bb2353af127d0a3c49056e960c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: oq0VOr_3MBr5c6pW_OdPGyGXN_ckB93xTEp-zqmLXnNglc2HBWRteA==
2024-01-16 21:33:02 UTC	1551	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 2f 63 6f 72 65 2f 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.18	49853	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:02 UTC	751	OUT	GET /core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1705440768503 HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:02 UTC	964	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 1551 Connection: close Server: istio-envoy Last-Modified: Thu, 11 Jan 2024 23:20:20 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: TvqzNUwkNpTzjCHLpvpAGNs.QR_clEp0 Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains x-envoy-upstream-service-time: 18 Date: Tue, 16 Jan 2024 21:33:02 GMT Cache-Control: no-cache ETag: "49a058c120ce76cf44be0e5074a7ab23" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 c079338af747d912717239089fea0484.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: GUXU7ov8_SxBlGcIVMkJlCLsmBEXgtGFjN08J2wfPvF9SW7KG6yjrA==
2024-01-16 21:33:02 UTC	1551	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 2f 63 6f 72 65 2f 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.18	49852	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:02 UTC	383	OUT	GET /wp-content/uploads/logo_smart_pension.png HTTP/1.1 Host: www.signable.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:03 UTC	366	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:33:03 GMT Content-Type: image/png Content-Length: 24530 Connection: close Last-Modified: Wed, 02 Aug 2023 13:20:01 GMT ETag: "5fd2-601f0855e62a0" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT X-CDN-C: all Accept-Ranges: bytes
2024-01-16 21:33:03 UTC	16018	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 00 53 08 06 00 00 00 47 fd d4 fa 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 5f 74 49 44 41 54 78 da ec 7d 07 9c 5c 55 bd ff f7 dc 7b a7 6d c9 6e b2 e9 bd 00 a1 85 de 05 29 8a f2 44 11 51 50 ec a2 f8 2c 60 e5 09 58 b0 57 14 29 a2 e8 53 11 10 de 13 fe 22 a2 08 f2 54 90 de 7b 08 21 24 a4 90 b2 c9 66 fb ee b4 5b fe df df 39 77 66 67 76 ca ce 6e 3a cc c9 e7 66 67 e6 b6 53 7e e7 d7 8b c2 3e a7 a3 62 0b 02 20 de c0 bf 2e 8f 0c e0 44 00 cf e7 09 05 f0 23 52 49 e0 e8 05 c0 c4 09 c0 9d 0f f1 1c af 8f 4e 03 5a ba 81 35 bc 26 6a 01 b1 0e 60 f1 77 80 bd 7e 0f bc 72 b4 b9 77 ea ef 80 c1 29 40 73 1a f0 d1 00 3f 3b 07 81 da 1b ca d9 Data Ascii: PNGIHDRSGtEXtSoftwareAdobe ImageReadyqe<_tIDATx}\U{mn)DQP,`XW)S"T{!$f[9wfgvn:fgS~>b .D#RINZ5&j`w~rw)@s?;
2024-01-16 21:33:03 UTC	8512	IN	Data Raw: 28 0b b6 5a 05 3d 1b a9 de e6 12 64 14 a8 4d c8 79 54 a9 11 7a 3f 22 81 1d fb 9e 71 e0 04 52 02 f0 21 f2 02 bb 06 01 b6 d4 75 d8 6c dd a5 b5 3c 7d 04 f4 43 a6 52 6a 68 32 89 05 44 e7 ef 79 52 c6 ee cc 1d d0 af 65 64 64 36 8e 58 8a 30 7f bd 64 17 22 0c 7f f4 83 5b b6 f3 05 b0 9b 1a c3 f4 aa 61 c8 4b 59 a3 6c e8 bd 18 cd 9a 84 f0 c0 f5 04 c2 63 cb 24 75 9f cc 63 aa 21 c0 aa 3a d4 55 f3 8c dd 99 7c fa 04 47 8b e7 73 44 67 b0 22 c7 a3 7e 54 9e 39 e0 1a 7a d6 bb 88 d4 9f 29 21 44 39 46 5b 12 d0 5b 9c be a6 bd 80 a9 27 01 9b 56 34 63 e3 0b ad 5b 44 80 25 ab 56 43 26 85 71 03 95 d3 e2 89 40 27 79 ce 93 0d a3 8b 8d 2c 43 66 cb 13 f7 9c d7 b5 3b 8c 08 ab ad 43 28 cb f5 63 8b 89 b0 38 23 35 97 9b 33 a9 c6 b5 99 e3 2a 36 dc 89 e4 15 89 2c c2 b8 66 c1 13 c4 19 7d e6 Data Ascii: (Z=dMyTz?"qR!ul<}CRjh2DyRedd6X0d"[aKYlc$uc!:U\|GsDg"~T9z)!D9F[['V4c[D%VC&q@'y,Cf;C(c8#53*6,f}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.18	49855	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:03 UTC	943	OUT	GET /core/assets/js/runtime~main.bf33b308.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://js.driftt.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:03 UTC	991	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 6113 Connection: close Server: istio-envoy Date: Thu, 11 Jan 2024 23:23:20 GMT Last-Modified: Thu, 11 Jan 2024 17:27:47 GMT ETag: "34e14b5defcdee7c97eefa738f7a56a3" x-amz-server-side-encryption: AES256 x-amz-version-id: xS27j4SonL8fR6V6j0yfk5iMq549Mekk Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 18 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 a5ec1cc448d0ca618712f253b7a7adba.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: j44-fXW5yj1NBRUNs31oKZ_df63Dc8u_AsAdb7CaQ5LyB1n7_l6zLw== Age: 425383
2024-01-16 21:33:03 UTC	6113	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 77 65 62 70 61 63 6b 4a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 28 63 29 7b 66 6f 72 28 76 61 72 20 72 2c 66 2c 74 3d 63 5b 30 5d 2c 6e 3d 63 5b 31 5d 2c 5f 3d 63 5b 32 5d 2c 75 3d 30 2c 62 3d 5b 5d 3b 75 3c 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 66 3d 74 5b 75 5d 2c 64 5b 66 5d 26 26 62 2e 70 75 73 68 28 64 5b 66 5d 5b 30 5d 29 2c 64 5b 66 5d 3d 30 3b 66 6f 72 28 72 20 69 6e 20 6e 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 72 29 26 26 28 65 5b 72 5d 3d 6e 5b 72 5d 29 3b 66 6f 72 28 6f 26 26 6f 28 63 29 3b 62 2e 6c 65 6e 67 74 68 3b 29 62 2e 73 68 69 66 74 28 29 28 29 3b 72 65 74 75 72 6e 20 61 2e 70 75 73 68 2e 61 70 Data Ascii: !function(e){function webpackJsonpCallback(c){for(var r,f,t=c[0],n=c[1],_=c[2],u=0,b=[];u<t.length;u++)f=t[u],d[f]&&b.push(d[f][0]),d[f]=0;for(r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r]);for(o&&o(c);b.length;)b.shift()();return a.push.ap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.18	49856	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:03 UTC	938	OUT	GET /core/assets/js/9.4a3e9801.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://js.driftt.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:03 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 35552 Connection: close Server: istio-envoy Date: Mon, 30 Oct 2023 08:14:47 GMT Last-Modified: Fri, 27 Oct 2023 17:57:50 GMT ETag: "c6f58dd3d60f07462254b842dd4f9ca1" x-amz-server-side-encryption: AES256 x-amz-version-id: YNAevH5XGDT_1BSTS5VP7tkUkKCLQc0I Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 18 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 13123a343330dc5aacb74d5b3c4fdf0e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: vwOELq-9GEnn7GWfFxPfN0_WpZ3d4JFt21-HT-W-9Jp7LMvHbNZRAQ== Age: 6787096
2024-01-16 21:33:03 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 5d 2c 7b 22 2b 4d 4c 78 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 22 48 41 75 4d 22 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 69 66 28 72 28 74 29 2c 76 6f 69 64 20 30 3d 3d 3d 65 29 72 65 74 75 72 6e 20 74 3b 73 77 69 74 63 68 28 6e 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 29 7d 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 2c 6e 29 7d 3b 63 61 73 65 20 32 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[9],{"+MLx":function(t,e,n){var r=n("HAuM");t.exports=function(t,e,n){if(r(t),void 0===e)return t;switch(n){case 0:return function(){return t.call(e)};case 1:return function(n){return t.call(e,n)};case 2
2024-01-16 21:33:03 UTC	16384	IN	Data Raw: 20 65 20 69 6e 20 70 28 74 29 7d 2c 6f 77 6e 4b 65 79 73 3a 66 75 6e 63 74 69 6f 6e 20 6f 77 6e 4b 65 79 73 28 74 29 7b 72 65 74 75 72 6e 20 52 65 66 6c 65 63 74 2e 6f 77 6e 4b 65 79 73 28 70 28 74 29 29 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 20 73 65 74 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 49 28 70 28 74 29 2c 65 29 3b 69 66 28 6e 75 6c 6c 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 73 65 74 29 72 65 74 75 72 6e 20 72 2e 73 65 74 2e 63 61 6c 6c 28 74 2e 6b 2c 6e 29 2c 21 30 3b 69 66 28 21 74 2e 50 29 7b 76 61 72 20 6f 3d 7a 28 70 28 74 29 2c 65 29 2c 69 3d 6e 75 6c 6c 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 5b 51 5d 3b 69 66 28 69 26 26 69 2e 74 3d 3d 3d 6e 29 72 65 74 75 72 6e 20 74 2e 6f 5b 65 5d 3d 6e 2c 74 2e 44 5b 65 5d 3d 21 31 2c 21 30 3b 69 66 28 Data Ascii: e in p(t)},ownKeys:function ownKeys(t){return Reflect.ownKeys(p(t))},set:function set(t,e,n){var r=I(p(t),e);if(null==r?void 0:r.set)return r.set.call(t.k,n),!0;if(!t.P){var o=z(p(t),e),i=null==o?void 0:o[Q];if(i&&i.t===n)return t.o[e]=n,t.D[e]=!1,!0;if(
2024-01-16 21:33:03 UTC	3777	IN	Data Raw: 30 5d 29 3a 76 6f 69 64 20 30 2c 65 3d 4d 28 74 29 3b 72 65 74 75 72 6e 20 75 26 26 65 74 26 26 6e 74 28 55 2c 65 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 20 73 65 74 74 65 72 28 74 29 7b 74 68 69 73 3d 3d 3d 55 26 26 73 65 74 74 65 72 2e 63 61 6c 6c 28 71 2c 74 29 2c 61 28 74 68 69 73 2c 46 29 26 26 61 28 74 68 69 73 5b 46 5d 2c 65 29 26 26 28 74 68 69 73 5b 46 5d 5b 65 5d 3d 21 31 29 2c 6e 74 28 74 68 69 73 2c 65 2c 64 28 31 2c 74 29 29 7d 7d 29 2c 72 74 28 65 2c 74 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 2c 22 74 6f 53 74 72 69 6e 67 22 2c 66 75 6e 63 74 69 6f 6e 20 74 6f 53 74 72 69 6e 67 28 29 7b 72 65 74 75 72 6e 20 42 28 74 68 69 73 29 2e 74 61 67 7d 29 2c 6a 2e 66 3d 63 74 2c 53 2e 66 3d 69 74 2c 50 Data Ascii: 0]):void 0,e=M(t);return u&&et&&nt(U,e,{configurable:!0,set:function setter(t){this===U&&setter.call(q,t),a(this,F)&&a(this[F],e)&&(this[F][e]=!1),nt(this,e,d(1,t))}}),rt(e,t)}).prototype,"toString",function toString(){return B(this).tag}),j.f=ct,S.f=it,P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.18	49857	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:03 UTC	950	OUT	GET /core/assets/js/main~493df0b3.d2a43907.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://js.driftt.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:03 UTC	992	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 7216 Connection: close Server: istio-envoy Date: Mon, 06 Nov 2023 17:28:12 GMT Last-Modified: Fri, 03 Nov 2023 16:05:59 GMT ETag: "e094b276ad2035c3a46871991c258c2d" x-amz-server-side-encryption: AES256 x-amz-version-id: 4aP.Q5BT_.UwejISfdPIuhnegeaMbVZC Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 37 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 93d4768fcd6983151de614ccc8b5605e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: DHuc_IYcYz8yOAr2jmM5NdL2lp0rUuuDJy7KGVcFIffVMKceNrhw3A== Age: 6149091
2024-01-16 21:33:03 UTC	7216	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 5d 2c 7b 22 2f 37 51 41 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 45 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 45 2e 72 28 69 29 2c 22 70 72 6f 64 75 63 74 69 6f 6e 22 21 3d 3d 45 28 22 4c 65 4a 30 22 29 2e 61 2e 45 4e 56 26 26 45 28 22 43 70 34 31 22 29 3b 76 61 72 20 41 3d 45 28 22 39 45 57 48 22 29 2c 5f 3d 45 28 22 41 44 47 43 22 29 3b 4f 62 6a 65 63 74 28 5f 2e 62 29 28 29 26 26 4f 62 6a 65 63 74 28 41 2e 62 29 28 29 3b 21 66 75 6e 63 74 69 6f 6e 20 70 6f 6c 79 66 69 6c 6c 4b 69 63 6b 6f 66 66 28 74 29 7b 74 72 79 7b 5b 31 5d 2e 69 6e 63 6c 75 64 65 73 28 31 29 26 26 74 28 29 7d 63 61 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[5],{"/7QA":function(t,i,E){"use strict";E.r(i),"production"!==E("LeJ0").a.ENV&&E("Cp41");var A=E("9EWH"),_=E("ADGC");Object(_.b)()&&Object(A.b)();!function polyfillKickoff(t){try{[1].includes(1)&&t()}ca

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.18	49858	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:03 UTC	621	OUT	GET /wp-content/uploads/graphic_document_tracking.png HTTP/1.1 Host: signable.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:03 UTC	380	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 16 Jan 2024 21:33:03 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 283 Connection: close Location: https://www.signable.co.uk/wp-content/uploads/graphic_document_tracking.png Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0301 NC:000000 UP: X-CDN-C: all
2024-01-16 21:33:03 UTC	283	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 69 67 6e 61 62 6c 65 2e 63 6f 2e 75 6b 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 67 72 61 70 68 69 63 5f 64 6f 63 75 6d 65 6e 74 5f 74 72 61 63 6b 69 6e 67 2e 70 6e 67 22 3e 68 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.signable.co.uk/wp-content/uploads/graphic_document_tracking.png">h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.18	49859	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:03 UTC	926	OUT	GET /core/assets/css/8.7602338c.chunk.css HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:03 UTC	964	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 31332 Connection: close Server: istio-envoy Date: Mon, 06 Nov 2023 17:28:13 GMT Last-Modified: Fri, 03 Nov 2023 16:05:55 GMT ETag: "76d0343f1f9f445c80d5c68c2a35b6e0" x-amz-server-side-encryption: AES256 x-amz-version-id: 04R_FXo6fw4U5OXhE_UnFdwSIBeCner_ Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 41 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ac80986150818f9f0ab3b6abae9b03e0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: 1umT0MRDTxfzd4y6YA5PZi0pEWGjQZfirjqYp_rFvDfI-KEADtdgJQ== Age: 6149090
2024-01-16 21:33:03 UTC	15420	IN	Data Raw: 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 61 76 61 74 61 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 62 6f 72 64 65 72 3a 32 70 78 20 73 6f 6c 69 64 20 23 66 66 66 3b 68 65 69 67 68 74 3a 35 36 70 78 3b 77 69 64 74 68 3a 35 36 70 78 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 2d 6d 6f 7a 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 35 30 25 7d 2e 64 72 Data Ascii: .drift-widget-avatar{-webkit-border-radius:50%;-moz-border-radius:50%;border-radius:50%;overflow:hidden;border:2px solid #fff;height:56px;width:56px;-webkit-background-size:cover;-moz-background-size:cover;background-size:cover;background-position:50%}.dr
2024-01-16 21:33:03 UTC	15912	IN	Data Raw: 66 2c 55 2b 32 31 31 33 2c 55 2b 32 63 36 30 2d 32 63 37 66 2c 55 2b 61 37 32 30 2d 61 37 66 66 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 20 53 6c 61 62 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 6a 73 2e 64 72 69 66 74 74 2e 63 6f 6d 2f 64 65 70 6c 6f 79 2f 61 73 73 65 74 73 2f 73 74 61 74 69 63 2f 66 6f 6e 74 73 2f 42 6e 67 4d 55 58 5a 59 54 58 50 49 76 49 42 67 4a 4a 53 62 36 75 66 4e 35 71 57 72 34 78 43 43 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 30 3f 3f 2c 55 Data Ascii: f,U+2113,U+2c60-2c7f,U+a720-a7ff}@font-face{font-family:Roboto Slab;font-style:normal;font-weight:400;font-display:swap;src:url(https://js.driftt.com/deploy/assets/static/fonts/BngMUXZYTXPIvIBgJJSb6ufN5qWr4xCC.woff2) format("woff2");unicode-range:U+00??,U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.18	49860	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:03 UTC	927	OUT	GET /core/assets/css/16.22abfce0.chunk.css HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:03 UTC	938	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 24 Connection: close Server: istio-envoy Date: Mon, 23 Oct 2023 13:37:39 GMT Last-Modified: Wed, 18 Oct 2023 18:16:50 GMT ETag: "0c5dad92482d9a7c7c253510f5082465" x-amz-server-side-encryption: AES256 x-amz-version-id: NsgVFJi2zQu9z_p_0WDb9lCvgGl9N44V Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 13 X-Cache: Hit from cloudfront Via: 1.1 1466638cc0a1aa93138e5454e3ed52fa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: pA0eTnzivhdF_8otD8pewhpyJeCMsM9HT8rP7n3XKL1rZLPKeAvDxw== Age: 7372524
2024-01-16 21:33:03 UTC	24	IN	Data Raw: 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d Data Ascii: body{margin:0;padding:0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.18	49862	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:03 UTC	911	OUT	GET /core/assets/js/51.558be3c5.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:03 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 23897 Connection: close Server: istio-envoy Date: Mon, 06 Nov 2023 17:28:12 GMT Last-Modified: Fri, 03 Nov 2023 16:05:58 GMT ETag: "fa281fcbe4b2e35558d60fae3e316367" x-amz-server-side-encryption: AES256 x-amz-version-id: 2Bt5qG5M8FsE79D4ShcJBNBfZpqBYZ5A Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 16 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 687bf9bb2353af127d0a3c49056e960c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: 1yfh8IARQqpfQXTbCE2g8p-Vp-Msf5z8kiZYZSqaI8jdepZq2rKXoA== Age: 6149091
2024-01-16 21:33:03 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 31 5d 2c 7b 6a 72 76 45 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 22 6e 66 62 41 22 29 2c 61 3d 6e 28 22 63 67 66 43 22 29 2c 69 3d 6e 28 22 61 34 67 62 22 29 2c 6f 3d 6e 28 22 2b 6e 78 76 22 29 2c 63 3d 6e 28 22 75 73 69 5a 22 29 2c 73 3d 6e 28 22 6e 62 34 72 22 29 2c 75 3d 6e 28 22 32 6e 50 2b 22 29 2c 6c 3d 6e 28 22 41 48 51 66 22 29 2c 64 3d 6e 28 22 6a 69 59 50 22 29 2c 70 3d 6e 28 22 7a 67 64 4f 22 29 2c 66 3d 6e 28 22 62 54 7a 4e 22 29 2c 76 3d 6e 28 22 6a 6e 69 43 22 29 2c 5f 3d 6e 28 22 75 49 4a 53 22 29 2c 68 3d 6e Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[51],{jrvE:function(e,t,n){"use strict";var r=n("nfbA"),a=n("cgfC"),i=n("a4gb"),o=n("+nxv"),c=n("usiZ"),s=n("nb4r"),u=n("2nP+"),l=n("AHQf"),d=n("jiYP"),p=n("zgdO"),f=n("bTzN"),v=n("jniC"),_=n("uIJS"),h=n
2024-01-16 21:33:03 UTC	7513	IN	Data Raw: 76 6f 69 64 20 30 2c 69 2c 21 30 29 3b 63 2e 6c 65 76 65 6c 3d 22 65 72 72 6f 72 22 2c 61 64 64 4d 65 63 68 61 6e 69 73 6d 41 6e 64 43 61 70 74 75 72 65 28 72 2c 6f 2c 63 2c 22 6f 6e 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 29 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 65 6e 68 61 6e 63 65 45 76 65 6e 74 57 69 74 68 49 6e 69 74 69 61 6c 46 72 61 6d 65 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 61 3d 65 2e 65 78 63 65 70 74 69 6f 6e 3d 65 2e 65 78 63 65 70 74 69 6f 6e 7c 7c 7b 7d 2c 69 3d 61 2e 76 61 6c 75 65 73 3d 61 2e 76 61 6c 75 65 73 7c 7c 5b 5d 2c 6f 3d 69 5b 30 5d 3d 69 5b 30 5d 7c 7c 7b 7d 2c 63 3d 6f 2e 73 74 61 63 6b 74 72 61 63 65 3d 6f 2e 73 74 61 63 6b 74 72 61 63 65 7c 7c 7b 7d 2c 73 3d 63 2e 66 72 61 6d 65 73 3d 63 2e 66 72 61 Data Ascii: void 0,i,!0);c.level="error",addMechanismAndCapture(r,o,c,"onunhandledrejection")}})}function _enhanceEventWithInitialFrame(e,t,n,r){var a=e.exception=e.exception\|\|{},i=a.values=a.values\|\|[],o=i[0]=i[0]\|\|{},c=o.stacktrace=o.stacktrace\|\|{},s=c.frames=c.fra

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.18	49861	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:03 UTC	911	OUT	GET /core/assets/js/35.d0f1ccda.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:03 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 36995 Connection: close Server: istio-envoy Date: Mon, 30 Oct 2023 14:21:11 GMT Last-Modified: Fri, 27 Oct 2023 17:57:49 GMT ETag: "46fa5a7bc37a22544a908e4ad950309c" x-amz-server-side-encryption: AES256 x-amz-version-id: ugODpWCLtsTQf05E2RGcl4eR0QvJNWsW Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 36 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 4416a31c9d77f8f8b877d81f840c88c8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: jNt4jFw6fROkccs0Mqi6jEKRi4N3LImGYgHr9KOiiGHhbxxEE3-IIA== Age: 6765112
2024-01-16 21:33:03 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 35 5d 2c 7b 22 2b 6e 78 76 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 6e 69 74 41 6e 64 42 69 6e 64 7d 29 3b 76 61 72 20 72 3d 6e 28 22 7a 67 64 4f 22 29 2c 69 3d 6e 28 22 75 73 69 5a 22 29 3b 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 41 6e 64 42 69 6e 64 28 65 2c 74 29 7b 21 30 3d 3d 3d 74 2e 64 65 62 75 67 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 5f 5f 53 45 4e 54 52 59 5f 44 45 42 55 47 5f 5f 7c 7c 5f 5f 53 45 4e 54 52 59 5f 44 45 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[35],{"+nxv":function(e,t,n){"use strict";n.d(t,"a",function(){return initAndBind});var r=n("zgdO"),i=n("usiZ");function initAndBind(e,t){!0===t.debug&&("undefined"===typeof __SENTRY_DEBUG__\|\|__SENTRY_DE
2024-01-16 21:33:03 UTC	16384	IN	Data Raw: 72 73 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 5f 67 65 74 45 76 65 6e 74 46 69 6c 74 65 72 55 72 6c 28 65 29 7b 74 72 79 7b 76 61 72 20 74 3b 74 72 79 7b 74 3d 65 2e 65 78 63 65 70 74 69 6f 6e 2e 76 61 6c 75 65 73 5b 30 5d 2e 73 74 61 63 6b 74 72 61 63 65 2e 66 72 61 6d 65 73 7d 63 61 74 63 68 28 6e 29 7b 7d 72 65 74 75 72 6e 20 74 3f 66 75 6e 63 74 69 6f 6e 20 5f 67 65 74 4c 61 73 74 56 61 6c 69 64 55 72 6c 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 5b 5d 2c 74 3d 65 2e 6c 65 6e 67 74 68 2d 31 3b 74 3e 3d 30 3b 74 2d 2d 29 7b 76 61 72 20 6e 3d 65 5b 74 5d 3b 69 66 28 6e 26 26 22 3c 61 6e 6f 6e 79 Data Ascii: rs}();function _getEventFilterUrl(e){try{var t;try{t=e.exception.values[0].stacktrace.frames}catch(n){}return t?function _getLastValidUrl(){for(var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:[],t=e.length-1;t>=0;t--){var n=e[t];if(n&&"<anony
2024-01-16 21:33:03 UTC	5220	IN	Data Raw: 61 63 6b 2e 6c 65 6e 67 74 68 2d 31 5d 7d 7d 2c 7b 6b 65 79 3a 22 63 61 70 74 75 72 65 45 78 63 65 70 74 69 6f 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 63 61 70 74 75 72 65 45 78 63 65 70 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 6c 61 73 74 45 76 65 6e 74 49 64 3d 74 26 26 74 2e 65 76 65 6e 74 5f 69 64 3f 74 2e 65 76 65 6e 74 5f 69 64 3a 4f 62 6a 65 63 74 28 61 2e 66 29 28 29 2c 69 3d 6e 65 77 20 45 72 72 6f 72 28 22 53 65 6e 74 72 79 20 73 79 6e 74 68 65 74 69 63 45 78 63 65 70 74 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 77 69 74 68 43 6c 69 65 6e 74 28 66 75 6e 63 74 69 6f 6e 28 73 2c 61 29 7b 73 2e 63 61 70 74 75 72 65 45 78 63 65 70 74 69 6f 6e 28 65 2c 4f 62 6a 65 63 74 28 72 2e 61 29 28 4f 62 6a Data Ascii: ack.length-1]}},{key:"captureException",value:function captureException(e,t){var n=this._lastEventId=t&&t.event_id?t.event_id:Object(a.f)(),i=new Error("Sentry syntheticException");return this._withClient(function(s,a){s.captureException(e,Object(r.a)(Obj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.18	49863	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:03 UTC	911	OUT	GET /core/assets/js/22.6b9a301a.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:03 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 33094 Connection: close Server: istio-envoy Date: Mon, 06 Nov 2023 07:18:41 GMT Last-Modified: Fri, 03 Nov 2023 16:05:57 GMT ETag: "d8739a9fe9a3a42936f5cd86c8727494" x-amz-server-side-encryption: AES256 x-amz-version-id: nRfY7jMGk5_y3vSx4s7EWEWUAo.PnMIr Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 15 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 93d4768fcd6983151de614ccc8b5605e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: h3s8sIVYRx6zxSGTg9ypiiGYU3kcX_P4UCTejuyTcmZNDmouXWbffw== Age: 6185662
2024-01-16 21:33:03 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 32 5d 2c 7b 22 2b 4f 53 4f 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 64 28 6e 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 72 65 61 74 65 43 6c 69 65 6e 74 52 65 70 6f 72 74 45 6e 76 65 6c 6f 70 65 7d 29 3b 76 61 72 20 72 3d 65 28 22 38 64 56 64 22 29 2c 69 3d 65 28 22 78 71 46 54 22 29 3b 66 75 6e 63 74 69 6f 6e 20 63 72 65 61 74 65 43 6c 69 65 6e 74 52 65 70 6f 72 74 45 6e 76 65 6c 6f 70 65 28 74 2c 6e 2c 65 29 7b 76 61 72 20 6f 3d 5b 7b 74 79 70 65 3a 22 63 6c 69 65 6e 74 5f 72 65 70 6f 72 74 22 7d 2c 7b 74 69 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[22],{"+OSO":function(t,n,e){"use strict";e.d(n,"a",function(){return createClientReportEnvelope});var r=e("8dVd"),i=e("xqFT");function createClientReportEnvelope(t,n,e){var o=[{type:"client_report"},{ti
2024-01-16 21:33:03 UTC	16384	IN	Data Raw: 6c 28 74 68 69 73 29 2c 53 79 6e 63 50 72 6f 6d 69 73 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 69 6e 69 74 34 2e 63 61 6c 6c 28 74 68 69 73 29 2c 53 79 6e 63 50 72 6f 6d 69 73 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 69 6e 69 74 35 2e 63 61 6c 6c 28 74 68 69 73 29 2c 53 79 6e 63 50 72 6f 6d 69 73 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 69 6e 69 74 36 2e 63 61 6c 6c 28 74 68 69 73 29 3b 74 72 79 7b 74 28 74 68 69 73 2e 5f 72 65 73 6f 6c 76 65 2c 74 68 69 73 2e 5f 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6e 29 7b 74 68 69 73 2e 5f 72 65 6a 65 63 74 28 6e 29 7d 7d 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 6f 2e 61 29 28 53 79 6e 63 50 72 6f 6d 69 73 65 2c 5b 7b 6b 65 79 3a 22 5f 5f 69 6e 69 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 5f 5f 69 Data Ascii: l(this),SyncPromise.prototype.__init4.call(this),SyncPromise.prototype.__init5.call(this),SyncPromise.prototype.__init6.call(this);try{t(this._resolve,this._reject)}catch(n){this._reject(n)}}return Object(o.a)(SyncPromise,[{key:"__init",value:function __i
2024-01-16 21:33:03 UTC	1319	IN	Data Raw: 72 28 29 7d 2c 7a 71 68 6a 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 64 28 6e 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 73 52 61 74 65 4c 69 6d 69 74 65 64 7d 29 2c 65 2e 64 28 6e 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 70 64 61 74 65 52 61 74 65 4c 69 6d 69 74 73 7d 29 3b 76 61 72 20 72 3d 65 28 22 73 38 44 49 22 29 2c 69 3d 65 28 22 6e 66 62 41 22 29 2c 6f 3d 36 65 34 3b 66 75 6e 63 74 69 6f 6e 20 69 73 52 61 74 65 4c 69 6d 69 74 65 64 28 74 2c 6e 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 44 61 Data Ascii: r()},zqhj:function(t,n,e){"use strict";e.d(n,"a",function(){return isRateLimited}),e.d(n,"b",function(){return updateRateLimits});var r=e("s8DI"),i=e("nfbA"),o=6e4;function isRateLimited(t,n){var e=arguments.length>2&&void 0!==arguments[2]?arguments[2]:Da

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.18	49864	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:03 UTC	911	OUT	GET /core/assets/js/19.6f85b843.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:03 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 17065 Connection: close Server: istio-envoy Date: Sun, 01 Oct 2023 18:44:51 GMT Last-Modified: Fri, 29 Sep 2023 23:27:53 GMT ETag: "e28ebc3391b56e8f01ea063dc089e9d3" x-amz-server-side-encryption: AES256 x-amz-version-id: nGUI4V8PwhzuQOZpdzkWHgAal5ik30Kz Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 19 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f26a1d19b20e4cf5dd8998779bc5b1fc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: tV_bw-yeF8n-BsvTWom_Do45n6y5jl2_pobf0hrzdEPIDxFvVMSd3w== Age: 9254892
2024-01-16 21:33:03 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 39 5d 2c 7b 22 31 4a 37 61 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 5f 61 72 72 61 79 57 69 74 68 48 6f 6c 65 73 28 74 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 29 72 65 74 75 72 6e 20 74 7d 7d 2c 22 32 6a 62 67 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 65 29 7b 72 65 74 75 72 6e 28 5f 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[19],{"1J7a":function(t,e){t.exports=function _arrayWithHoles(t){if(Array.isArray(t))return t}},"2jbg":function(t,e,r){"use strict";function _setPrototypeOf(t,e){return(_setPrototypeOf=Object.setPrototyp
2024-01-16 21:33:03 UTC	1674	IN	Data Raw: 2c 6f 3d 21 31 2c 69 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 61 2c 75 3d 74 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 3b 21 28 6e 3d 28 61 3d 75 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 72 2e 70 75 73 68 28 61 2e 76 61 6c 75 65 29 2c 21 65 7c 7c 72 2e 6c 65 6e 67 74 68 21 3d 3d 65 29 3b 6e 3d 21 30 29 3b 7d 63 61 74 63 68 28 63 29 7b 6f 3d 21 30 2c 69 3d 63 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 6e 7c 7c 6e 75 6c 6c 3d 3d 75 2e 72 65 74 75 72 6e 7c 7c 75 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 6f 29 74 68 72 6f 77 20 69 7d 7d 72 65 74 75 72 6e 20 72 7d 7d 7d 2c 76 4d 4e 55 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 5f 64 65 66 69 Data Ascii: ,o=!1,i=void 0;try{for(var a,u=t[Symbol.iterator]();!(n=(a=u.next()).done)&&(r.push(a.value),!e\|\|r.length!==e);n=!0);}catch(c){o=!0,i=c}finally{try{n\|\|null==u.return\|\|u.return()}finally{if(o)throw i}}return r}}},vMNU:function(t,e){t.exports=function _defi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.18	49865	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:04 UTC	911	OUT	GET /core/assets/js/41.b4fc4de2.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:04 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 25600 Connection: close Server: istio-envoy Date: Mon, 09 Oct 2023 01:22:55 GMT Last-Modified: Thu, 21 Sep 2023 18:21:36 GMT ETag: "a2ace4f65aa7b34dedb884f6cfe9df8d" x-amz-server-side-encryption: AES256 x-amz-version-id: ESbgNWzIRR1AFbSvSMf.KU01SU0FWrST Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 20 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 13123a343330dc5aacb74d5b3c4fdf0e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: q-xwRU7Ey0Db6TZ8BySP0UZB-SRb5mUtd_OReiImRCjd89ecAy7yNA== Age: 8626209
2024-01-16 21:33:04 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 31 5d 2c 7b 22 31 46 6f 62 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 6e 65 77 20 52 65 67 45 78 70 28 22 25 5b 61 2d 66 30 2d 39 5d 7b 32 7d 22 2c 22 67 69 22 29 2c 66 3d 6e 65 77 20 52 65 67 45 78 70 28 22 28 25 5b 61 2d 66 30 2d 39 5d 7b 32 7d 29 2b 22 2c 22 67 69 22 29 3b 66 75 6e 63 74 69 6f 6e 20 64 65 63 6f 64 65 43 6f 6d 70 6f 6e 65 6e 74 73 28 74 2c 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 2e 6a 6f 69 6e 28 22 22 29 29 7d 63 61 74 63 68 28 66 29 7b 7d 69 66 28 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[41],{"1Fob":function(t,e,r){"use strict";var n=new RegExp("%[a-f0-9]{2}","gi"),f=new RegExp("(%[a-f0-9]{2})+","gi");function decodeComponents(t,e){try{return decodeURIComponent(t.join(""))}catch(f){}if(
2024-01-16 21:33:04 UTC	10209	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 7c 7c 63 68 65 63 6b 4f 66 66 73 65 74 28 74 2c 31 2c 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 74 68 69 73 5b 74 5d 7d 2c 42 75 66 66 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 61 64 55 49 6e 74 31 36 4c 45 3d 66 75 6e 63 74 69 6f 6e 20 72 65 61 64 55 49 6e 74 31 36 4c 45 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 7c 7c 63 68 65 63 6b 4f 66 66 73 65 74 28 74 2c 32 2c 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 74 68 69 73 5b 74 5d 7c 74 68 69 73 5b 74 2b 31 5d 3c 3c 38 7d 2c 42 75 66 66 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 61 64 55 49 6e 74 31 36 42 45 3d 66 75 6e 63 74 69 6f 6e 20 72 65 61 64 55 49 6e 74 31 36 42 45 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 7c 7c 63 68 65 63 6b 4f 66 66 73 65 74 28 74 2c 32 2c 74 68 69 73 Data Ascii: ){return e\|\|checkOffset(t,1,this.length),this[t]},Buffer.prototype.readUInt16LE=function readUInt16LE(t,e){return e\|\|checkOffset(t,2,this.length),this[t]\|this[t+1]<<8},Buffer.prototype.readUInt16BE=function readUInt16BE(t,e){return e\|\|checkOffset(t,2,this

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.18	49866	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:04 UTC	911	OUT	GET /core/assets/js/20.8c21ea18.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:04 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 75961 Connection: close Server: istio-envoy Date: Thu, 28 Dec 2023 13:37:40 GMT Last-Modified: Tue, 19 Dec 2023 18:34:37 GMT ETag: "6d77a76055d81227033363af2f18caf8" x-amz-server-side-encryption: AES256 x-amz-version-id: 4VyxTF9cOmpvyHPO7jaWSto1hTdtU.sl Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 28 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1f1744cc287fbe3723d548ac02f36c6a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: wM6AHdpf6WQxnO3Xi1o3hBa_X4ECasq2ll33jfrm5F0T4GCRzYpYeg== Age: 1670124
2024-01-16 21:33:04 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 30 5d 2c 7b 22 31 31 48 6d 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 65 78 74 65 6e 64 73 28 29 7b 72 65 74 75 72 6e 28 5f 65 78 74 65 6e 64 73 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 6e 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[20],{"11Hm":function(e,t,n){"use strict";function _extends(){return(_extends=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var o in n)Object.prototype.hasOwnPrope
2024-01-16 21:33:04 UTC	16384	IN	Data Raw: 61 6c 6c 28 65 29 7d 7d 2c 54 4c 39 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 70 70 6c 79 46 6f 63 75 73 56 69 73 69 62 6c 65 50 6f 6c 79 66 69 6c 6c 28 65 29 7b 76 61 72 20 74 3d 21 30 2c 6e 3d 21 31 2c 6f 3d 6e 75 6c 6c 2c 72 3d 7b 74 65 78 74 3a 21 30 2c 73 65 61 72 63 68 3a 21 30 2c 75 72 6c 3a 21 30 2c 74 65 6c 3a 21 30 2c 65 6d 61 69 6c 3a 21 30 2c 70 61 73 73 77 6f 72 64 3a 21 30 2c 6e 75 6d 62 65 72 3a 21 30 2c 64 61 74 65 3a 21 30 2c 6d 6f 6e 74 68 3a 21 30 2c 77 65 65 6b 3a 21 30 2c 74 69 6d 65 3a 21 30 2c 64 61 74 65 74 69 6d 65 3a 21 30 2c 22 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 22 3a 21 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 Data Ascii: all(e)}},TL9e:function(e,t,n){!function(){"use strict";function applyFocusVisiblePolyfill(e){var t=!0,n=!1,o=null,r={text:!0,search:!0,url:!0,tel:!0,email:!0,password:!0,number:!0,date:!0,month:!0,week:!0,time:!0,datetime:!0,"datetime-local":!0};function
2024-01-16 21:33:04 UTC	16384	IN	Data Raw: 74 6f 72 3f 74 2e 6b 65 79 53 65 70 61 72 61 74 6f 72 3a 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6b 65 79 53 65 70 61 72 61 74 6f 72 2c 72 3d 74 2e 6e 73 7c 7c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 65 66 61 75 6c 74 4e 53 3b 69 66 28 6e 26 26 65 2e 69 6e 64 65 78 4f 66 28 6e 29 3e 2d 31 29 7b 76 61 72 20 69 3d 65 2e 73 70 6c 69 74 28 6e 29 3b 28 6e 21 3d 3d 6f 7c 7c 6e 3d 3d 3d 6f 26 26 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6e 73 2e 69 6e 64 65 78 4f 66 28 69 5b 30 5d 29 3e 2d 31 29 26 26 28 72 3d 69 2e 73 68 69 66 74 28 29 29 2c 65 3d 69 2e 6a 6f 69 6e 28 6f 29 7d 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 72 26 26 28 72 3d 5b 72 5d 29 2c 7b 6b 65 79 3a 65 2c 6e 61 6d 65 73 70 61 63 65 73 3a 72 7d 7d 7d 2c 7b 6b 65 79 3a Data Ascii: tor?t.keySeparator:this.options.keySeparator,r=t.ns\|\|this.options.defaultNS;if(n&&e.indexOf(n)>-1){var i=e.split(n);(n!==o\|\|n===o&&this.options.ns.indexOf(i[0])>-1)&&(r=i.shift()),e=i.join(o)}return"string"===typeof r&&(r=[r]),{key:e,namespaces:r}}},{key:
2024-01-16 21:33:04 UTC	16384	IN	Data Raw: 63 6f 6e 63 61 74 28 65 29 29 2c 69 3d 22 22 3b 65 6c 73 65 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 69 7c 7c 74 68 69 73 2e 75 73 65 52 61 77 56 61 6c 75 65 54 6f 45 73 63 61 70 65 7c 7c 28 69 3d 6d 61 6b 65 53 74 72 69 6e 67 28 69 29 29 3b 69 66 28 69 3d 74 68 69 73 2e 65 73 63 61 70 65 56 61 6c 75 65 3f 72 65 67 65 78 53 61 66 65 28 74 68 69 73 2e 65 73 63 61 70 65 28 69 29 29 3a 72 65 67 65 78 53 61 66 65 28 69 29 2c 65 3d 65 2e 72 65 70 6c 61 63 65 28 72 5b 30 5d 2c 69 29 2c 74 68 69 73 2e 72 65 67 65 78 70 2e 6c 61 73 74 49 6e 64 65 78 3d 30 2c 2b 2b 61 3e 3d 74 68 69 73 2e 6d 61 78 52 65 70 6c 61 63 65 73 29 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 65 7d 7d 2c 7b 6b 65 79 3a 22 6e 65 73 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e Data Ascii: concat(e)),i="";else"string"===typeof i\|\|this.useRawValueToEscape\|\|(i=makeString(i));if(i=this.escapeValue?regexSafe(this.escape(i)):regexSafe(i),e=e.replace(r[0],i),this.regexp.lastIndex=0,++a>=this.maxReplaces)break}return e}},{key:"nest",value:function
2024-01-16 21:33:04 UTC	10425	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3d 6e 28 22 6b 76 56 7a 22 29 2c 72 3d 7b 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 64 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 30 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 21 30 2c 67 65 74 44 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 30 2c 67 65 74 44 65 72 69 76 65 64 53 74 61 74 65 46 72 6f 6d 45 72 72 6f 72 3a 21 30 2c 67 65 74 44 65 72 69 76 65 64 53 74 61 74 65 46 72 6f 6d 50 72 6f 70 73 3a 21 30 2c 6d 69 78 69 6e 73 3a 21 30 2c 70 72 6f 70 54 79 70 65 73 3a 21 30 2c 74 79 70 65 3a 21 30 7d 2c 69 3d 7b 6e 61 6d 65 3a 21 30 2c 6c 65 6e 67 74 68 3a 21 30 2c Data Ascii: tion(e,t,n){"use strict";var o=n("kvVz"),r={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDerivedStateFromError:!0,getDerivedStateFromProps:!0,mixins:!0,propTypes:!0,type:!0},i={name:!0,length:!0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.18	49867	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:04 UTC	911	OUT	GET /core/assets/js/26.04e7f30b.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:04 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 68076 Connection: close Server: istio-envoy Date: Sat, 30 Dec 2023 18:36:36 GMT Last-Modified: Fri, 29 Dec 2023 19:54:13 GMT ETag: "49ce5445ddcf5d24ef3badc4eb1a11dd" x-amz-server-side-encryption: AES256 x-amz-version-id: y6zttos3ioTeFP6rzSgto2PcGmt3z85g Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 33 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 a09be795efaa72bd6adbcee7b35c4d1c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: P6REVWIB7dNMO2PZOhdizbEuPgjD0S0lQpI0JqN9puslZm3_kT208Q== Age: 1479388
2024-01-16 21:33:04 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 36 5d 2c 7b 22 38 53 79 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 29 3b 76 61 72 20 72 2c 6f 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2c 61 3d 69 26 26 69 2e 6e 6f 77 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 2e 6e 6f 77 28 29 7d 3a 66 75 6e Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[26],{"8Sys":function(e,t,n){"use strict";n.d(t,"a",function(){return r}),n.d(t,"b",function(){return o});var r,o,i="undefined"!==typeof performance&&performance,a=i&&i.now?function(){return i.now()}:fun
2024-01-16 21:33:04 UTC	16384	IN	Data Raw: 20 6e 3d 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 74 6f 53 74 72 69 6e 67 3f 65 2e 74 6f 53 74 72 69 6e 67 28 29 3a 7b 7d 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 3b 65 3d 6e 65 77 20 45 72 72 6f 72 28 22 45 78 70 65 63 74 65 64 20 72 65 6a 65 63 74 20 74 6f 20 62 65 20 63 61 6c 6c 65 64 20 77 69 74 68 20 45 72 72 6f 72 2c 20 67 6f 74 20 22 2b 6e 29 7d 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 6a 65 63 74 65 64 3d 21 30 2c 74 68 69 73 2e 65 72 72 6f 72 3d 65 2c 74 68 69 73 2e 65 72 72 6f 72 48 61 6e 64 6c 65 64 7c 7c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 65 72 72 6f 72 48 61 6e 64 6c 65 64 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 2d 31 3d 3d 3d 63 2e 69 6e 64 65 78 Data Ascii: n=e&&"function"==typeof e.toString?e.toString():{}.toString.call(e);e=new Error("Expected reject to be called with Error, got "+n)}return this.rejected=!0,this.error=e,this.errorHandled\|\|setTimeout(function(){t.errorHandled\|\|function(e,t){if(-1===c.index
2024-01-16 21:33:04 UTC	16384	IN	Data Raw: 69 6e 67 69 66 79 28 74 29 29 3b 69 66 28 22 70 6f 73 74 22 3d 3d 3d 69 29 72 65 74 75 72 6e 20 73 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 20 6e 6f 74 20 70 6f 73 74 20 74 6f 20 77 69 6e 64 6f 77 20 77 69 74 68 6f 75 74 20 74 61 72 67 65 74 20 6e 61 6d 65 22 29 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 75 72 6c 2c 6e 3d 65 2e 74 61 72 67 65 74 2c 72 3d 65 2e 62 6f 64 79 2c 6f 3d 65 2e 6d 65 74 68 6f 64 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 6f 3f 22 70 6f 73 74 22 3a 6f 2c 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 6f 72 6d 22 29 3b 69 66 28 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 72 67 Data Ascii: ingify(t));if("post"===i)return s().then(function(e){if(!e)throw new Error("Can not post to window without target name");!function(e){var t=e.url,n=e.target,r=e.body,o=e.method,i=void 0===o?"post":o,a=document.createElement("form");if(a.setAttribute("targ
2024-01-16 21:33:04 UTC	16384	IN	Data Raw: 7d 69 66 28 67 65 74 50 61 72 65 6e 74 28 65 29 3d 3d 3d 65 29 72 65 74 75 72 6e 20 65 3b 74 72 79 7b 69 66 28 69 73 41 6e 63 65 73 74 6f 72 50 61 72 65 6e 74 28 77 69 6e 64 6f 77 2c 65 29 26 26 77 69 6e 64 6f 77 2e 74 6f 70 29 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 74 6f 70 7d 63 61 74 63 68 28 6f 29 7b 7d 74 72 79 7b 69 66 28 69 73 41 6e 63 65 73 74 6f 72 50 61 72 65 6e 74 28 65 2c 77 69 6e 64 6f 77 29 26 26 77 69 6e 64 6f 77 2e 74 6f 70 29 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 74 6f 70 7d 63 61 74 63 68 28 6f 29 7b 7d 66 6f 72 28 76 61 72 20 74 3d 30 2c 6e 3d 66 75 6e 63 74 69 6f 6e 20 67 65 74 41 6c 6c 43 68 69 6c 64 46 72 61 6d 65 73 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 2c 72 3d 67 65 74 46 72 61 6d 65 73 28 65 29 3b 6e Data Ascii: }if(getParent(e)===e)return e;try{if(isAncestorParent(window,e)&&window.top)return window.top}catch(o){}try{if(isAncestorParent(e,window)&&window.top)return window.top}catch(o){}for(var t=0,n=function getAllChildFrames(e){for(var t=[],n=0,r=getFrames(e);n
2024-01-16 21:33:04 UTC	3533	IN	Data Raw: 70 65 72 74 79 28 69 2c 6c 29 3f 72 28 69 5b 6c 5d 29 3f 69 5b 6c 5d 2e 70 75 73 68 28 68 29 3a 69 5b 6c 5d 3d 5b 69 5b 6c 5d 2c 68 5d 3a 69 5b 6c 5d 3d 68 7d 72 65 74 75 72 6e 20 69 7d 3b 76 61 72 20 72 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 7d 7d 2c 76 6e 31 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 74 2e 73 72 63 5f 41 6e 79 3d 6e 28 22 37 45 41 30 22 29 2e 73 6f 75 72 63 65 2c 74 2e 73 72 63 5f Data Ascii: perty(i,l)?r(i[l])?i[l].push(h):i[l]=[i[l],h]:i[l]=h}return i};var r=Array.isArray\|\|function(e){return"[object Array]"===Object.prototype.toString.call(e)}},vn14:function(e,t,n){"use strict";e.exports=function(e){var t={};t.src_Any=n("7EA0").source,t.src_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.18	49868	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:04 UTC	911	OUT	GET /core/assets/js/14.e24a6190.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:04 UTC	994	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 92674 Connection: close Server: istio-envoy Date: Mon, 18 Sep 2023 02:34:57 GMT Last-Modified: Fri, 15 Sep 2023 20:51:06 GMT ETag: "16d7ae86e21434a32157d3226ac9bb77" x-amz-server-side-encryption: AES256 x-amz-version-id: CKPumg.9ph.ZbNFCEgS_blv0AlpmDF8w Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 25 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c079338af747d912717239089fea0484.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: aeOUARqJ63aR7s4b1Mw6TSW2kKx6ZX44-aB27-1TqgTydyQqMPQ7ag== Age: 10436287
2024-01-16 21:33:04 UTC	15390	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 34 5d 2c 7b 22 2b 57 61 4a 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 73 46 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 65 7d 72 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 73 46 75 6e 63 74 69 6f 6e 7d 29 7d 2c 22 2f 56 33 54 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 22 31 33 57 53 22 29 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[14],{"+WaJ":function(e,t,r){"use strict";function isFunction(e){return"function"===typeof e}r.d(t,"a",function(){return isFunction})},"/V3T":function(e,t,r){"use strict";var n=r("13WS"),o=function(e){fu
2024-01-16 21:33:04 UTC	16384	IN	Data Raw: 31 31 2f 73 61 6d 6f 61 22 2c 22 2d 31 30 7c 6e 22 3a 22 31 31 2f 68 6f 6e 6f 6c 75 6c 75 2c 31 31 2f 6a 6f 68 6e 73 74 6f 6e 2c 31 31 2f 72 61 72 6f 74 6f 6e 67 61 2c 31 31 2f 74 61 68 69 74 69 22 7d 7d 29 29 2c 73 3d 7b 7d 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 75 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 73 70 6c 69 74 28 22 7c 22 29 2c 72 3d 7b 6f 66 66 73 65 74 3a 4e 75 6d 62 65 72 28 74 5b 30 5d 29 2c 68 65 6d 3a 74 5b 31 5d 7d 3b 74 5b 32 5d 26 26 28 72 2e 64 73 74 3d 74 5b 32 5d 29 2c 75 5b 65 5d 2e 73 70 6c 69 74 28 22 2c 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 65 2e 72 65 70 6c 61 63 65 28 2f 28 5e 5b 30 2d 39 5d 2b 29 5c 2f 2f 2c 66 75 6e 63 74 69 6f 6e 28 65 2c Data Ascii: 11/samoa","-10\|n":"11/honolulu,11/johnston,11/rarotonga,11/tahiti"}})),s={};Object.keys(u).forEach(function(e){var t=e.split("\|"),r={offset:Number(t[0]),hem:t[1]};t[2]&&(r.dst=t[2]),u[e].split(",").forEach(function(e){e=e.replace(/(^[0-9]+)\//,function(e,
2024-01-16 21:33:04 UTC	16384	IN	Data Raw: 2c 73 3d 74 65 28 65 29 3b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 74 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 6e 2c 22 54 22 29 2e 63 6f 6e 63 61 74 28 6f 2c 22 3a 22 29 2e 63 6f 6e 63 61 74 28 69 2c 22 3a 22 29 2e 63 6f 6e 63 61 74 28 61 2c 22 2e 22 29 2e 63 6f 6e 63 61 74 28 75 29 2e 63 6f 6e 63 61 74 28 73 29 7d 2c 22 69 73 6f 2d 73 68 6f 72 74 22 3a 66 75 6e 63 74 69 6f 6e 20 69 73 6f 53 68 6f 72 74 28 65 29 7b 76 61 72 20 74 3d 43 2e 7a 65 72 6f 50 61 64 28 65 2e 6d 6f 6e 74 68 28 29 2b 31 29 2c 72 3d 43 2e 7a 65 72 6f 50 61 64 28 65 2e 64 61 74 65 28 29 29 3b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 65 2e 79 65 61 72 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 74 2c 22 2d 22 29 2e 63 6f 6e 63 Data Ascii: ,s=te(e);return"".concat(t,"-").concat(r,"-").concat(n,"T").concat(o,":").concat(i,":").concat(a,".").concat(u).concat(s)},"iso-short":function isoShort(e){var t=C.zeroPad(e.month()+1),r=C.zeroPad(e.date());return"".concat(e.year(),"-").concat(t,"-").conc
2024-01-16 21:33:04 UTC	16384	IN	Data Raw: 72 31 32 3d 74 2e 67 65 74 48 6f 75 72 73 28 29 3b 72 65 74 75 72 6e 20 68 6f 75 72 31 32 3e 31 32 26 26 28 68 6f 75 72 31 32 2d 3d 31 32 29 2c 30 3d 3d 3d 68 6f 75 72 31 32 26 26 28 68 6f 75 72 31 32 3d 31 32 29 2c 68 6f 75 72 31 32 7d 2c 74 69 6d 65 3a 66 75 6e 63 74 69 6f 6e 20 74 69 6d 65 28 65 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 63 6c 6f 6e 65 28 29 3b 72 65 74 75 72 6e 20 65 3d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 74 72 69 6d 28 29 2c 74 2e 65 70 6f 63 68 3d 59 65 28 74 2c 65 29 2c 74 7d 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 68 31 32 28 29 2c 22 3a 22 29 2e 63 6f 6e 63 61 74 28 43 2e 7a 65 72 6f 50 61 64 28 74 68 69 73 2e 6d 69 6e 75 74 65 28 29 29 29 2e 63 6f 6e 63 Data Ascii: r12=t.getHours();return hour12>12&&(hour12-=12),0===hour12&&(hour12=12),hour12},time:function time(e){if(void 0!==e){var t=this.clone();return e=e.toLowerCase().trim(),t.epoch=Ye(t,e),t}return"".concat(this.h12(),":").concat(C.zeroPad(this.minute())).conc
2024-01-16 21:33:04 UTC	16384	IN	Data Raw: 69 73 53 74 6f 70 70 65 64 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 70 61 72 65 6e 74 53 75 62 73 63 72 69 62 65 72 2c 72 3d 73 2e 61 2e 75 73 65 44 65 70 72 65 63 61 74 65 64 53 79 6e 63 68 72 6f 6e 6f 75 73 45 72 72 6f 72 48 61 6e 64 6c 69 6e 67 3b 69 66 28 74 68 69 73 2e 5f 65 72 72 6f 72 29 72 26 26 74 2e 73 79 6e 63 45 72 72 6f 72 54 68 72 6f 77 61 62 6c 65 3f 28 74 68 69 73 2e 5f 5f 74 72 79 4f 72 53 65 74 45 72 72 6f 72 28 74 2c 74 68 69 73 2e 5f 65 72 72 6f 72 2c 65 29 2c 74 68 69 73 2e 75 6e 73 75 62 73 63 72 69 62 65 28 29 29 3a 28 74 68 69 73 2e 5f 5f 74 72 79 4f 72 55 6e 73 75 62 28 74 68 69 73 2e 5f 65 72 72 6f 72 2c 65 29 2c 74 68 69 73 2e 75 6e 73 75 62 73 63 72 69 62 65 28 29 29 3b 65 6c 73 65 20 69 66 28 74 2e 73 79 6e 63 45 72 72 6f 72 Data Ascii: isStopped){var t=this._parentSubscriber,r=s.a.useDeprecatedSynchronousErrorHandling;if(this._error)r&&t.syncErrorThrowable?(this.__tryOrSetError(t,this._error,e),this.unsubscribe()):(this.__tryOrUnsub(this._error,e),this.unsubscribe());else if(t.syncError
2024-01-16 21:33:04 UTC	11748	IN	Data Raw: 29 2c 61 2e 61 2e 45 4d 50 54 59 29 3a 74 68 69 73 2e 69 73 53 74 6f 70 70 65 64 3f 28 65 2e 63 6f 6d 70 6c 65 74 65 28 29 2c 61 2e 61 2e 45 4d 50 54 59 29 3a 28 74 68 69 73 2e 6f 62 73 65 72 76 65 72 73 2e 70 75 73 68 28 65 29 2c 6e 65 77 20 73 28 74 68 69 73 2c 65 29 29 7d 2c 53 75 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 61 73 4f 62 73 65 72 76 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6e 65 77 20 6f 2e 61 3b 72 65 74 75 72 6e 20 65 2e 73 6f 75 72 63 65 3d 74 68 69 73 2c 65 7d 2c 53 75 62 6a 65 63 74 2e 63 72 65 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 68 28 65 2c 74 29 7d 2c 53 75 62 6a 65 63 74 7d 28 6f 2e 61 29 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 Data Ascii: ),a.a.EMPTY):this.isStopped?(e.complete(),a.a.EMPTY):(this.observers.push(e),new s(this,e))},Subject.prototype.asObservable=function(){var e=new o.a;return e.source=this,e},Subject.create=function(e,t){return new h(e,t)},Subject}(o.a),h=function(e){functi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.18	49869	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:04 UTC	911	OUT	GET /core/assets/js/11.639238ba.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:04 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 23865 Connection: close Server: istio-envoy Date: Sun, 15 Oct 2023 18:13:30 GMT Last-Modified: Mon, 09 Oct 2023 15:15:44 GMT ETag: "4049f38c00add1738dc4806148ff8829" x-amz-server-side-encryption: AES256 x-amz-version-id: vQRUIXgfcaIP4_A8RupW.qf6zMR9oMes Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 20 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b88fe06cb643513c120238beec43283e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: ZIUvj22MADEEBHA70PAOP6YBYWgL_ITCLicBD1q_1kHg4ZkPEQ7OCA== Age: 8047174
2024-01-16 21:33:04 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 31 5d 2c 7b 22 30 42 38 45 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 65 28 22 72 41 63 31 22 29 2c 75 3d 65 28 22 50 59 63 48 22 29 3b 66 75 6e 63 74 69 6f 6e 20 68 61 73 4f 72 41 64 64 28 74 2c 6e 2c 65 29 7b 76 61 72 20 72 2c 63 3d 74 79 70 65 6f 66 20 74 3b 73 77 69 74 63 68 28 63 29 7b 63 61 73 65 22 73 74 72 69 6e 67 22 3a 63 61 73 65 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 30 3d 3d 3d 74 26 26 31 2f 74 3d 3d 3d 2d 31 2f 30 3f 21 21 65 2e 5f 69 74 65 6d 73 5b 22 2d 30 22 5d 7c 7c 28 6e 26 26 28 65 2e 5f 69 74 65 6d Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[11],{"0B8E":function(t,n,e){"use strict";var r=e("rAc1"),u=e("PYcH");function hasOrAdd(t,n,e){var r,c=typeof t;switch(c){case"string":case"number":return 0===t&&1/t===-1/0?!!e._items["-0"]\|\|(n&&(e._item
2024-01-16 21:33:04 UTC	7481	IN	Data Raw: 63 74 22 3b 76 61 72 20 72 3d 65 28 22 38 73 31 52 22 29 2c 75 3d 65 28 22 52 68 45 4c 22 29 2c 63 3d 65 28 22 55 2f 5a 44 22 29 2c 61 3d 65 28 22 30 4c 31 56 22 29 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 58 44 72 6f 70 28 74 2c 6e 29 7b 74 68 69 73 2e 78 66 3d 6e 2c 74 68 69 73 2e 6e 3d 74 7d 72 65 74 75 72 6e 20 58 44 72 6f 70 2e 70 72 6f 74 6f 74 79 70 65 5b 22 40 40 74 72 61 6e 73 64 75 63 65 72 2f 69 6e 69 74 22 5d 3d 61 2e 61 2e 69 6e 69 74 2c 58 44 72 6f 70 2e 70 72 6f 74 6f 74 79 70 65 5b 22 40 40 74 72 61 6e 73 64 75 63 65 72 2f 72 65 73 75 6c 74 22 5d 3d 61 2e 61 2e 72 65 73 75 6c 74 2c 58 44 72 6f 70 2e 70 72 6f 74 6f 74 79 70 65 5b 22 40 40 74 72 61 6e 73 64 75 63 65 72 2f 73 74 65 70 22 5d 3d 66 75 6e 63 74 69 6f Data Ascii: ct";var r=e("8s1R"),u=e("RhEL"),c=e("U/ZD"),a=e("0L1V"),i=function(){function XDrop(t,n){this.xf=n,this.n=t}return XDrop.prototype["@@transducer/init"]=a.a.init,XDrop.prototype["@@transducer/result"]=a.a.result,XDrop.prototype["@@transducer/step"]=functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.18	49870	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:04 UTC	911	OUT	GET /core/assets/js/18.9c1bd1fb.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:04 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 63529 Connection: close Server: istio-envoy Date: Mon, 23 Oct 2023 13:37:40 GMT Last-Modified: Wed, 18 Oct 2023 18:16:52 GMT ETag: "02f09379c544befa413d22eb57ed41de" x-amz-server-side-encryption: AES256 x-amz-version-id: Q1eGDTu8UVOB0l1ZofZ4q0KSSP1djSlD Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 23 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 2c8fc98e914dd92124c9f02bae44cffc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: AOM_502EdnmchfeF4AvQADQJUNScHvolEzu5W8Eiw1omBNyfOFCQZw== Age: 7372524
2024-01-16 21:33:04 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 38 5d 2c 7b 22 30 4f 39 4a 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 22 6c 45 61 71 22 29 2c 6f 3d 6e 2e 6e 28 72 29 2c 69 3d 6e 28 22 45 52 6b 50 22 29 2c 61 3d 6e 2e 6e 28 69 29 2c 63 3d 6e 28 22 61 57 7a 7a 22 29 2c 73 3d 6e 2e 6e 28 63 29 2c 75 3d 6e 28 22 31 31 48 6d 22 29 2c 6c 3d 6e 28 22 49 39 69 52 22 29 2c 70 3d 6e 2e 6e 28 6c 29 2c 66 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[18],{"0O9J":function(e,t,n){"use strict";var r=n("lEaq"),o=n.n(r),i=n("ERkP"),a=n.n(i),c=n("aWzz"),s=n.n(c),u=n("11Hm"),l=n("I9iR"),p=n.n(l),f=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t
2024-01-16 21:33:04 UTC	16384	IN	Data Raw: 2e 70 61 74 74 65 72 6e 2b 22 29 24 22 29 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 66 6f 72 28 76 61 72 20 69 3d 22 22 2c 61 3d 6e 7c 7c 7b 7d 2c 63 3d 28 6f 7c 7c 7b 7d 29 2e 70 72 65 74 74 79 3f 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 50 72 65 74 74 79 3a 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 2c 73 3d 30 3b 73 3c 65 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 76 61 72 20 75 3d 65 5b 73 5d 3b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 3d 74 79 70 65 6f 66 20 75 29 7b 76 61 72 20 6c 2c 70 3d 61 5b 75 2e 6e 61 6d 65 5d 3b 69 66 28 6e 75 6c 6c 3d 3d 70 29 7b 69 66 28 75 2e 6f 70 74 69 6f 6e 61 6c 29 7b 75 2e 70 61 72 74 69 61 6c 26 26 28 69 2b 3d 75 2e 70 72 65 66 69 78 29 3b 63 6f 6e 74 69 6e 75 65 7d 74 68 Data Ascii: .pattern+")$"));return function(n,o){for(var i="",a=n\|\|{},c=(o\|\|{}).pretty?encodeURIComponentPretty:encodeURIComponent,s=0;s<e.length;s++){var u=e[s];if("string"!==typeof u){var l,p=a[u.name];if(null==p){if(u.optional){u.partial&&(i+=u.prefix);continue}th
2024-01-16 21:33:04 UTC	16384	IN	Data Raw: 2e 75 70 64 61 74 65 72 2e 65 6e 71 75 65 75 65 46 6f 72 63 65 55 70 64 61 74 65 28 74 68 69 73 2c 65 2c 22 66 6f 72 63 65 55 70 64 61 74 65 22 29 7d 2c 46 2e 70 72 6f 74 6f 74 79 70 65 3d 45 2e 70 72 6f 74 6f 74 79 70 65 3b 76 61 72 20 4f 3d 47 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 46 3b 4f 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 47 2c 72 28 4f 2c 45 2e 70 72 6f 74 6f 74 79 70 65 29 2c 4f 2e 69 73 50 75 72 65 52 65 61 63 74 43 6f 6d 70 6f 6e 65 6e 74 3d 21 30 3b 76 61 72 20 77 3d 7b 63 75 72 72 65 6e 74 3a 6e 75 6c 6c 7d 2c 78 3d 7b 63 75 72 72 65 6e 74 3a 6e 75 6c 6c 7d 2c 50 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6a 3d 7b 6b 65 79 3a 21 30 2c 72 65 66 3a 21 30 2c 5f 5f 73 65 6c 66 3a 21 Data Ascii: .updater.enqueueForceUpdate(this,e,"forceUpdate")},F.prototype=E.prototype;var O=G.prototype=new F;O.constructor=G,r(O,E.prototype),O.isPureReactComponent=!0;var w={current:null},x={current:null},P=Object.prototype.hasOwnProperty,j={key:!0,ref:!0,__self:!
2024-01-16 21:33:04 UTC	15370	IN	Data Raw: 31 38 6e 3a 22 6c 61 6e 67 75 61 67 65 43 68 61 6e 67 65 64 22 2c 62 69 6e 64 49 31 38 6e 53 74 6f 72 65 3a 22 22 2c 74 72 61 6e 73 45 6d 70 74 79 4e 6f 64 65 56 61 6c 75 65 3a 22 22 2c 74 72 61 6e 73 53 75 70 70 6f 72 74 42 61 73 69 63 48 74 6d 6c 4e 6f 64 65 73 3a 21 30 2c 74 72 61 6e 73 4b 65 65 70 42 61 73 69 63 48 74 6d 6c 4e 6f 64 65 73 46 6f 72 3a 5b 22 62 72 22 2c 22 73 74 72 6f 6e 67 22 2c 22 69 22 2c 22 70 22 5d 2c 75 73 65 53 75 73 70 65 6e 73 65 3a 21 30 7d 2c 66 3d 6e 2e 6e 28 75 29 2e 61 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 29 3b 66 75 6e 63 74 69 6f 6e 20 73 65 74 44 65 66 61 75 6c 74 73 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 Data Ascii: 18n:"languageChanged",bindI18nStore:"",transEmptyNodeValue:"",transSupportBasicHtmlNodes:!0,transKeepBasicHtmlNodesFor:["br","strong","i","p"],useSuspense:!0},f=n.n(u).a.createContext();function setDefaults(){var e=arguments.length>0&&void 0!==arguments[0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.18	49872	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:04 UTC	911	OUT	GET /core/assets/js/49.f7274268.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:04 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 107348 Connection: close Server: istio-envoy Date: Sun, 07 Jan 2024 18:47:32 GMT Last-Modified: Wed, 03 Jan 2024 21:36:01 GMT ETag: "e268d36b98f0119a2bb1a15f69fd4ffe" x-amz-server-side-encryption: AES256 x-amz-version-id: no7NXASMe8PDkuLxBImNpIpY42Gz_GWX Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 21 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1466638cc0a1aa93138e5454e3ed52fa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: L4ugslUdCX8ZWJ6ogG9CmlUGKn0e2UPMsg965KYYOUAZPjjMXGWv9Q== Age: 787532
2024-01-16 21:33:04 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 39 5d 2c 7b 22 37 6e 6d 54 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 21 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 44 43 45 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 5f 5f 52 45 41 43 54 5f 44 45 56 54 4f 4f 4c 53 5f 47 4c 4f 42 41 4c 5f 48 4f 4f 4b 5f 5f 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 5f 5f 52 45 41 43 54 5f 44 45 56 54 4f 4f 4c 53 5f 47 4c 4f 42 41 4c 5f 48 4f 4f 4b 5f 5f 2e 63 68 65 63 6b 44 43 45 29 74 72 79 7b 5f 5f 52 45 41 43 54 5f 44 45 56 54 4f 4f 4c 53 5f 47 4c 4f Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[49],{"7nmT":function(e,t,n){"use strict";!function checkDCE(){if("undefined"!==typeof __REACT_DEVTOOLS_GLOBAL_HOOK__&&"function"===typeof __REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE)try{__REACT_DEVTOOLS_GLO
2024-01-16 21:33:04 UTC	16384	IN	Data Raw: 26 26 28 6e 75 6c 6c 21 3d 3d 6e 3f 21 6e 2e 61 63 63 65 70 74 73 42 6f 6f 6c 65 61 6e 73 3a 22 64 61 74 61 2d 22 21 3d 3d 28 65 3d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 73 6c 69 63 65 28 30 2c 35 29 29 26 26 22 61 72 69 61 2d 22 21 3d 3d 65 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 21 31 7d 7d 28 65 2c 74 2c 6e 2c 72 29 29 72 65 74 75 72 6e 21 30 3b 69 66 28 72 29 72 65 74 75 72 6e 21 31 3b 69 66 28 6e 75 6c 6c 21 3d 3d 6e 29 73 77 69 74 63 68 28 6e 2e 74 79 70 65 29 7b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 21 74 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 21 31 3d 3d 3d 74 3b 63 61 73 65 20 35 3a 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 74 29 3b 63 61 73 65 20 36 3a 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 74 29 7c 7c 31 3e 74 7d 72 65 74 75 Data Ascii: &&(null!==n?!n.acceptsBooleans:"data-"!==(e=e.toLowerCase().slice(0,5))&&"aria-"!==e);default:return!1}}(e,t,n,r))return!0;if(r)return!1;if(null!==n)switch(n.type){case 3:return!t;case 4:return!1===t;case 5:return isNaN(t);case 6:return isNaN(t)\|\|1>t}retu
2024-01-16 21:33:04 UTC	5608	IN	Data Raw: 65 7c 7c 22 75 72 6c 22 3d 3d 3d 65 2e 74 79 70 65 7c 7c 22 70 61 73 73 77 6f 72 64 22 3d 3d 3d 65 2e 74 79 70 65 29 7c 7c 22 74 65 78 74 61 72 65 61 22 3d 3d 3d 74 7c 7c 22 74 72 75 65 22 3d 3d 3d 65 2e 63 6f 6e 74 65 6e 74 45 64 69 74 61 62 6c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 51 64 28 65 29 7b 76 61 72 20 74 3d 4e 64 28 29 2c 6e 3d 65 2e 66 6f 63 75 73 65 64 45 6c 65 6d 2c 72 3d 65 2e 73 65 6c 65 63 74 69 6f 6e 52 61 6e 67 65 3b 69 66 28 74 21 3d 3d 6e 26 26 6e 26 26 6e 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 26 26 66 75 6e 63 74 69 6f 6e 20 4d 64 28 65 2c 74 29 7b 72 65 74 75 72 6e 21 28 21 65 7c 7c 21 74 29 26 26 28 65 3d 3d 3d 74 7c 7c 28 21 65 7c 7c 33 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 26 26 28 74 26 26 33 3d 3d 3d 74 2e 6e 6f 64 65 54 Data Ascii: e\|\|"url"===e.type\|\|"password"===e.type)\|\|"textarea"===t\|\|"true"===e.contentEditable)}function Qd(e){var t=Nd(),n=e.focusedElem,r=e.selectionRange;if(t!==n&&n&&n.ownerDocument&&function Md(e,t){return!(!e\|\|!t)&&(e===t\|\|(!e\|\|3!==e.nodeType)&&(t&&3===t.nodeT
2024-01-16 21:33:04 UTC	16384	IN	Data Raw: 21 30 2c 77 69 64 6f 77 73 3a 21 30 2c 7a 49 6e 64 65 78 3a 21 30 2c 7a 6f 6f 6d 3a 21 30 2c 66 69 6c 6c 4f 70 61 63 69 74 79 3a 21 30 2c 66 6c 6f 6f 64 4f 70 61 63 69 74 79 3a 21 30 2c 73 74 6f 70 4f 70 61 63 69 74 79 3a 21 30 2c 73 74 72 6f 6b 65 44 61 73 68 61 72 72 61 79 3a 21 30 2c 73 74 72 6f 6b 65 44 61 73 68 6f 66 66 73 65 74 3a 21 30 2c 73 74 72 6f 6b 65 4d 69 74 65 72 6c 69 6d 69 74 3a 21 30 2c 73 74 72 6f 6b 65 4f 70 61 63 69 74 79 3a 21 30 2c 73 74 72 6f 6b 65 57 69 64 74 68 3a 21 30 7d 2c 45 6e 3d 5b 22 57 65 62 6b 69 74 22 2c 22 6d 73 22 2c 22 4d 6f 7a 22 2c 22 4f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 6e 65 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 7c 7c 22 62 6f 6f 6c 65 61 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 74 7c 7c Data Ascii: !0,widows:!0,zIndex:!0,zoom:!0,fillOpacity:!0,floodOpacity:!0,stopOpacity:!0,strokeDasharray:!0,strokeDashoffset:!0,strokeMiterlimit:!0,strokeOpacity:!0,strokeWidth:!0},En=["Webkit","ms","Moz","O"];function ne(e,t,n){return null==t\|\|"boolean"===typeof t\|\|
2024-01-16 21:33:04 UTC	16384	IN	Data Raw: 6d 6f 69 7a 65 64 53 74 61 74 65 3a 28 69 72 3d 6f 72 29 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 2c 62 61 73 65 53 74 61 74 65 3a 69 72 2e 62 61 73 65 53 74 61 74 65 2c 71 75 65 75 65 3a 69 72 2e 71 75 65 75 65 2c 62 61 73 65 55 70 64 61 74 65 3a 69 72 2e 62 61 73 65 55 70 64 61 74 65 2c 6e 65 78 74 3a 6e 75 6c 6c 7d 3b 63 72 3d 6e 75 6c 6c 3d 3d 3d 63 72 3f 75 72 3d 65 3a 63 72 2e 6e 65 78 74 3d 65 2c 6f 72 3d 69 72 2e 6e 65 78 74 7d 72 65 74 75 72 6e 20 63 72 7d 66 75 6e 63 74 69 6f 6e 20 6f 67 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 74 3f 74 28 65 29 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 70 67 28 65 29 7b 76 61 72 20 74 3d 6e 67 28 29 2c 6e 3d 74 2e 71 75 65 75 65 3b 69 66 28 6e 75 6c 6c 3d 3d 3d Data Ascii: moizedState:(ir=or).memoizedState,baseState:ir.baseState,queue:ir.queue,baseUpdate:ir.baseUpdate,next:null};cr=null===cr?ur=e:cr.next=e,or=ir.next}return cr}function og(e,t){return"function"===typeof t?t(e):t}function pg(e){var t=ng(),n=t.queue;if(null===
2024-01-16 21:33:04 UTC	16384	IN	Data Raw: 5f 72 3d 5f 72 2e 6e 65 78 74 3d 74 29 2c 65 2e 5f 63 75 72 72 65 6e 74 56 61 6c 75 65 7d 76 61 72 20 4e 72 3d 30 2c 4f 72 3d 31 2c 4d 72 3d 32 2c 44 72 3d 33 2c 49 72 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 62 68 28 65 29 7b 72 65 74 75 72 6e 7b 62 61 73 65 53 74 61 74 65 3a 65 2c 66 69 72 73 74 55 70 64 61 74 65 3a 6e 75 6c 6c 2c 6c 61 73 74 55 70 64 61 74 65 3a 6e 75 6c 6c 2c 66 69 72 73 74 43 61 70 74 75 72 65 64 55 70 64 61 74 65 3a 6e 75 6c 6c 2c 6c 61 73 74 43 61 70 74 75 72 65 64 55 70 64 61 74 65 3a 6e 75 6c 6c 2c 66 69 72 73 74 45 66 66 65 63 74 3a 6e 75 6c 6c 2c 6c 61 73 74 45 66 66 65 63 74 3a 6e 75 6c 6c 2c 66 69 72 73 74 43 61 70 74 75 72 65 64 45 66 66 65 63 74 3a 6e 75 6c 6c 2c 6c 61 73 74 43 61 70 74 75 72 65 64 45 66 66 65 63 74 3a 6e 75 Data Ascii: _r=_r.next=t),e._currentValue}var Nr=0,Or=1,Mr=2,Dr=3,Ir=!1;function bh(e){return{baseState:e,firstUpdate:null,lastUpdate:null,firstCapturedUpdate:null,lastCapturedUpdate:null,firstEffect:null,lastEffect:null,firstCapturedEffect:null,lastCapturedEffect:nu
2024-01-16 21:33:04 UTC	16384	IN	Data Raw: 65 6e 74 29 3b 69 66 28 61 3d 74 2e 74 79 70 65 2c 6e 75 6c 6c 21 3d 3d 6c 26 26 6e 75 6c 6c 21 3d 74 2e 73 74 61 74 65 4e 6f 64 65 29 46 72 28 6c 2c 74 2c 61 2c 69 2c 75 29 2c 6c 2e 72 65 66 21 3d 3d 74 2e 72 65 66 26 26 28 74 2e 65 66 66 65 63 74 54 61 67 7c 3d 31 32 38 29 3b 65 6c 73 65 20 69 66 28 69 29 7b 76 61 72 20 63 3d 49 66 28 51 6e 2e 63 75 72 72 65 6e 74 29 3b 69 66 28 45 67 28 74 29 29 7b 6c 3d 28 69 3d 74 29 2e 73 74 61 74 65 4e 6f 64 65 3b 76 61 72 20 73 3d 69 2e 74 79 70 65 2c 66 3d 69 2e 6d 65 6d 6f 69 7a 65 64 50 72 6f 70 73 2c 64 3d 75 3b 73 77 69 74 63 68 28 6c 5b 71 5d 3d 69 2c 6c 5b 59 5d 3d 66 2c 61 3d 76 6f 69 64 20 30 2c 75 3d 73 29 7b 63 61 73 65 22 69 66 72 61 6d 65 22 3a 63 61 73 65 22 6f 62 6a 65 63 74 22 3a 45 28 22 6c 6f 61 Data Ascii: ent);if(a=t.type,null!==l&&null!=t.stateNode)Fr(l,t,a,i,u),l.ref!==t.ref&&(t.effectTag\|=128);else if(i){var c=If(Qn.current);if(Eg(t)){l=(i=t).stateNode;var s=i.type,f=i.memoizedProps,d=u;switch(l[q]=i,l[Y]=f,a=void 0,u=s){case"iframe":case"object":E("loa
2024-01-16 21:33:04 UTC	3436	IN	Data Raw: 2e 5f 64 65 66 65 72 3d 21 31 7d 2c 4e 69 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 6f 6e 43 6f 6d 70 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 74 68 69 73 2e 5f 64 69 64 43 6f 6d 70 6c 65 74 65 29 7b 74 68 69 73 2e 5f 64 69 64 43 6f 6d 70 6c 65 74 65 3d 21 30 3b 76 61 72 20 65 3d 74 68 69 73 2e 5f 63 61 6c 6c 62 61 63 6b 73 3b 69 66 28 6e 75 6c 6c 21 3d 3d 65 29 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 28 30 2c 65 5b 74 5d 29 28 29 7d 7d 2c 4f 69 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 68 69 73 2e 5f 64 69 64 43 6f 6d 6d 69 74 29 65 28 29 3b 65 6c 73 65 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 63 61 6c 6c 62 61 63 6b 73 3b 6e 75 6c 6c 3d 3d 3d 74 26 Data Ascii: ._defer=!1},Ni.prototype._onComplete=function(){if(!this._didComplete){this._didComplete=!0;var e=this._callbacks;if(null!==e)for(var t=0;t<e.length;t++)(0,e[t])()}},Oi.prototype.then=function(e){if(this._didCommit)e();else{var t=this._callbacks;null===t&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.18	49871	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:04 UTC	625	OUT	GET /wp-content/uploads/graphic_document_tracking.png HTTP/1.1 Host: www.signable.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:04 UTC	368	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:33:04 GMT Content-Type: image/png Content-Length: 647526 Connection: close Last-Modified: Wed, 02 Aug 2023 13:20:12 GMT ETag: "9e166-601f0860367a9" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT X-CDN-C: all Accept-Ranges: bytes
2024-01-16 21:33:04 UTC	16016	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 02 ca 08 06 00 00 00 a1 b0 7b 6d 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 04 f5 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 30 2d 63 30 30 31 20 37 39 2e 63 30 32 30 34 62 32 64 65 66 2c 20 32 30 32 33 2f 30 32 2f 30 32 2d 31 32 3a 31 34 3a 32 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 Data Ascii: PNGIHDR{mpHYs%%IR$iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2def, 2023/02/02-12:14:24 "> <rd
2024-01-16 21:33:04 UTC	16384	IN	Data Raw: b2 e4 39 27 4c 53 c6 34 49 09 ba cd 66 ab a0 55 4a bc 39 2f ae d7 20 60 8c 11 2f 5e be c2 61 fc 51 bc fc f8 eb 78 fc f4 29 1e bd f7 15 5c bd f9 0e 76 57 4f 41 c3 16 9c 0f 5a bb 5c e2 e5 a1 bc 50 32 86 37 9b 67 54 4f 9c d6 6a 6b 87 5e 45 4c d8 ca f4 a1 cc 61 d0 43 85 61 d8 48 82 3e 2f 9e 05 56 5e cd 0e 7c 00 cd a8 ae c2 6d 72 6d fb e3 51 fe 03 dd a7 2c 8b b9 65 71 2f f9 37 34 24 c8 f8 0f ca d3 96 30 d2 ac f1 ed 78 ed 73 79 07 52 37 3e 78 8f cd 66 2b 73 ed 03 86 4d c0 66 08 70 de 63 73 71 89 dd ee 42 5c da 7d 40 f0 62 39 df 6c 06 b8 e0 f5 d0 42 33 bf 7b 49 04 e7 e8 18 9c 3b 93 53 ed f7 e8 e0 52 0f 4c ad 8c 9a 85 32 25 3d 3c 89 53 75 65 8f 9a b8 4f f6 36 2b c9 89 e6 80 0d 8d 7c db bc da 0a 8b bc a6 4c b2 e7 96 3f 66 66 dd a7 a3 77 73 66 cf 9c ff 17 ce e1 39 Data Ascii: 9'LS4IfUJ9/ `/^aQx)\vWOAZ\P27gTOjk^ELaCaH>/V^\|mrmQ,eq/74$0xsyR7>xf+sMfpcsqB\}@b9lB3{I;SRL2%=<SueO6+\|L?ffwsf9
2024-01-16 21:33:05 UTC	16384	IN	Data Raw: af ae 65 3e 7c d0 5a f0 1e 5f 7e e7 6d 04 22 3c be 7a 8c af 7d f8 1c 2f 5f de 22 67 60 a3 79 3c 64 7b ac bc ca a0 7a b8 85 1a 06 63 15 04 c4 82 2c e1 11 52 8e 4f d6 33 b3 e4 08 48 60 2d a7 a8 a1 18 26 c3 2c 96 6e 62 29 a1 77 b4 26 ca 93 44 04 f2 04 e7 07 0c 9b 6d 29 9b 26 de 14 41 4b f5 79 58 d9 4d af f9 46 3c 79 dd eb 21 21 24 44 c8 54 bd 26 ac 0f 71 52 e1 e6 ef 80 6d 12 fa 77 84 9b bf 28 6a 49 97 64 85 b9 b8 b8 5b f6 7a cb 9f 30 c5 a4 fc 2d 7b b4 84 52 50 b9 77 1c 1a c4 a5 cf 5c ac e4 4e e7 92 cb 9e 24 04 d6 43 4f 3b 50 29 a1 32 54 b3 b7 5b 89 35 db fb 64 0f 92 c3 08 e3 63 22 c2 34 de e3 d7 fe da 5f 8f ef fc 75 ff 28 7e f8 3f f8 f7 00 7f 07 8c 2f b0 72 fd 77 01 fc 16 00 7f 08 c0 df 5d 7b f0 17 fa 6a 01 fa 6f 25 a2 7f 00 c0 69 a5 ef 94 52 34 6f 63 fe ce Data Ascii: e>\|Z_~m"<z}/_"g`y<d{zc,RO3H`-&,nb)w&Dm)&AKyXMF<y!!$DT&qRmw(jId[z0-{RPw\N$CO;P)2T[5dc"4_u(~?/rw]{jo%iR4oc
2024-01-16 21:33:05 UTC	16384	IN	Data Raw: 7e c5 00 24 eb cd 68 35 8e 2c 22 85 66 10 77 8c e0 a5 71 b2 22 43 cc ae 16 ff 4b 4e f1 20 28 0b 62 1c ba b3 3d d6 49 9a 40 eb ac 10 c4 79 17 51 32 3e ce f9 01 36 9f f6 7a bc 87 e8 ed 1f b8 2f 44 99 0d 23 03 9c 00 3d f2 46 90 d7 fb 76 38 10 d9 48 36 36 92 e6 50 25 c2 c8 30 14 06 e3 6b 18 38 51 20 a1 a7 e2 00 f9 80 10 a7 c2 a4 2e c5 8b fe 75 f4 73 10 e3 44 79 0c 8b ef c1 cd 8f f7 5d f1 3f 01 fe 93 bf fd b7 ff 76 ff c3 1f fe 30 87 b2 94 65 f9 35 1f 78 b8 6c fb da bf ae a0 f6 31 02 e7 b7 5d be a9 67 7d 8c f2 f6 75 eb fd a6 0c 21 5f 47 39 f9 98 3a ff 38 df df 43 cb b7 d1 e7 3f ee f2 6d 29 59 7f 92 fa ff c7 b5 6e be ad 7a 1f d7 e3 c3 ca e3 7a dc 5f d7 e8 ef d8 3b 92 e4 76 b2 10 e5 49 b1 83 e2 88 08 e0 15 d6 3a ba ae a5 2c 0b 8c 29 71 4e bc 0a 1a 85 0b 10 b4 26 Data Ascii: ~$h5,"fwq"CKN (b=I@yQ2>6z/D#=Fv8H66P%0k8Q .usDy]?v0e5xl1]g}u!_G9:8C?m)Ynzz_;vI:,)qN&
2024-01-16 21:33:05 UTC	16384	IN	Data Raw: 99 12 2a 04 61 74 27 0c 0c f3 21 44 38 71 9c b3 c9 38 a4 55 66 cd 57 80 32 7a f0 b6 c6 67 a6 f7 21 97 49 e8 8b 52 60 ad 43 29 89 43 96 94 6f d0 28 43 55 75 94 75 41 55 48 5a b5 e4 fd 57 3a e4 36 d9 5e 62 d7 9d 17 4f b1 eb 7a bc 9d b3 38 5e 70 74 34 67 6a 27 ac 8a 46 c8 e0 7c a0 34 0a 61 27 97 b1 0f ce d1 3a 8b 2f 13 a9 1d d4 75 cd 62 21 39 cd 37 eb 0d ab cd 86 db d5 86 2f df 5c e0 f1 7c 27 04 ce ce cf a2 37 58 3c e1 21 04 9a f5 0a ef 3c c7 4f 9f f1 d9 77 bf c3 cf 7f f4 87 14 75 c1 93 67 4f 68 36 1b 14 81 ba ae a8 8c a6 ae 2a 36 4d 1b 3d c7 81 f5 7a cd e9 d9 29 55 59 d0 76 3d 7f f4 b3 5b 7e e7 77 fe 15 bf f5 5b 7f 81 e9 64 c2 cd d5 05 4a 2b ea c9 04 db 77 2c 6f af 30 85 e1 e8 e9 13 6e 6f 6e b8 7e f3 86 67 2f 3f a3 ed 5a 8e 8f a6 fc ca 0f 3e e7 7a b5 a1 73 Data Ascii: at'!D8q8UfW2zg!IR`C)Co(CUuuAUHZW:6^bOz8^pt4gj'F\|4a':/ub!97/\\|'7X<!<OwugOh66M=z)UYv=[~w[dJ+w,o0non~g/?Z>zs
2024-01-16 21:33:05 UTC	16384	IN	Data Raw: 1c 4f 67 8a a2 e4 1c ce ac b7 2b ea a6 62 b3 7d 03 c0 f3 d3 13 9b ed 96 37 6f b6 84 10 f9 f2 e5 0b 22 86 e5 6a 89 35 96 d7 d7 5d 3b ef a6 a9 b5 dc 99 b1 84 94 cc cf 27 ab b7 31 96 90 12 9e c5 54 56 2c 4a 6c e9 27 2b 26 ae 28 52 9c bc 68 1c b9 2f 94 87 50 1c fb 64 65 b6 46 cb 8b 15 de b0 2a 4b ca d2 e3 bd c7 1b 43 59 68 79 2c 89 42 e9 2d 8b b2 c0 9a 52 95 6f 4c cb 1c 1a 2b 6b 00 87 59 6a e4 71 f6 04 89 31 10 f2 9a 8b e0 6c d4 b2 73 8b 82 fd f1 4c 68 22 65 e1 33 2b 70 ac 1a aa 3a e8 21 83 08 4d 8a 19 5f 16 5e 79 c5 26 4b 79 8c 1a 7f ef 34 cc 23 a6 79 46 0c 22 9a c4 8c 68 28 8a a5 66 8d 4f 4a 62 44 63 f8 63 54 ab 36 de 13 43 83 f1 3a 87 26 85 27 e8 c1 9f 6b 0f f5 42 20 65 90 af 10 f1 29 6c 25 72 f8 cb 17 ac 18 b6 f7 1b 7e f7 c7 df 02 86 a2 34 c4 f8 9e d3 f9 Data Ascii: Og+b}7o"j5];'1TV,Jl'+&(Rh/PdeF*KCYhy,B-RoL+kYjq1lsLh"e3+p:!M_^y&Ky4#yF"h(fOJbDccT6C:&'kB e)l%r~4
2024-01-16 21:33:05 UTC	16384	IN	Data Raw: 39 85 70 0e df 7d d8 a6 de ef b7 19 eb f3 9a 12 d0 6f 33 07 d3 b5 7b df 32 87 3e 3f ce e1 6c ac 4d 9f 1f 87 7d ff 12 7e 1c eb 6f ec ba c6 13 fd 7b 43 58 86 70 fe 35 f9 71 8e e7 e6 70 78 ed f3 d8 1c 86 f7 6f e5 c7 a9 fd af ff 7c 4c 39 35 cc c3 07 5f 8f f7 ad fc 38 c7 cf c3 36 63 74 35 35 df b1 b6 73 df c7 e6 f0 2d fc 78 6d cf fd 25 70 0c df b5 0c de 33 74 8a a0 e9 dc aa b3 bb 6b 6b f9 cc 96 33 db 25 4d 1b ba ce aa 70 a6 c2 73 2e 69 96 d5 2f ed 23 12 a3 b9 88 0d cf fd 85 10 92 40 d8 41 d7 cf dc de b7 52 0c ff eb 5f 7d 85 bb 9d 7b 4f 51 1f c2 9c 63 e1 fb 89 8d da 18 68 d3 9f a3 e9 59 48 a4 75 0f ee e3 11 a1 55 90 f2 b8 b6 a7 b4 66 a5 34 27 c1 b3 a9 46 af 31 06 d7 0a 79 19 de 5e bf 0a 6c b7 90 d2 cd 0b 0c 88 24 0b 8f a1 f5 2e 6f 09 be 47 0d 46 e3 4f d5 0b 40 Data Ascii: 9p}o3{2>?lM}~o{CXp5qpxo\|L95_86ct55s-xm%p3tkk3%Mps.i/#@AR_}{OQchYHuUf4'F1y^l$.oGFO@
2024-01-16 21:33:05 UTC	16384	IN	Data Raw: 74 78 d1 c3 85 60 22 d6 aa 35 dc 90 43 29 74 6c e7 1c 55 dd 28 3e 53 62 3a ef 3d 4d 15 89 29 d1 a4 b5 a8 e5 55 84 ba a9 29 0b 75 a5 06 e1 5c 07 f6 87 23 12 85 ed dd 9a bb bb 2d a7 53 c5 e1 70 a2 a9 e1 b5 f4 6c d7 2b 56 cb 15 21 36 84 a6 c6 96 65 b2 0a 7b b6 9b 35 22 ea 32 ef 62 a9 b8 89 35 ab f5 86 d8 14 9c 8e 07 7e fe f4 09 ac e1 37 45 01 ce 72 78 3d 60 9f 1e 59 6e ef 30 18 de 7e 78 0b 12 68 ce 15 45 e9 d9 dc 6f d3 7e 65 f1 85 e3 70 3c 51 2e 17 6c ef 36 7c fe e9 67 0e bb 03 c7 c3 2b 7e bd 52 3a cc 49 35 45 d2 01 91 4d 87 4d 10 69 da 43 4c 83 25 45 e6 a4 3d 91 36 ef 86 ba 95 77 f5 cd 23 81 68 23 12 b4 a4 9a 20 34 b1 21 48 45 a0 22 4a d3 56 8c 28 92 72 ab b9 05 22 4d de cf 8d 60 8d a1 f0 05 85 f3 78 e7 29 ec 02 2b 9e d2 6a a6 75 ef 92 f5 5c b4 74 1a ce a4 Data Ascii: tx`"5C)tlU(>Sb:=M)U)u\#-Spl+V!6e{5"2b5~7Erx=`Yn0~xhEo~ep<Q.l6\|g+~R:I5EMMiCL%E=6w#h# 4!HE"JV(r"M`x)+ju\t
2024-01-16 21:33:05 UTC	16384	IN	Data Raw: a7 13 fb fd 8e dd 66 c3 fe e6 86 e3 e0 e9 4f 1d 29 e8 58 0f c3 90 43 8c 09 c7 be e7 c3 c3 91 fb 9b 27 b6 9b 16 44 63 be 47 93 68 37 3b bc 1f 88 29 d1 b6 3b 48 81 e3 f1 c0 4d 7c c5 fe f6 9e a1 1b f0 de 93 42 62 7f 73 cb f1 d4 91 22 0c 9d c7 b8 c0 ee e6 96 38 74 c4 21 b2 dd 35 c4 10 68 9b 96 94 34 da c1 d6 3a 4c df d3 7d f8 81 1e 04 dc dc e3 84 2c 84 aa bb 51 a4 7c 07 f4 a0 36 96 f6 93 60 82 e4 2f a9 88 d3 da b1 3a 3c e6 2c 4c a4 51 10 7d 05 7c 33 6a da 2e c9 64 6d b4 1e 00 ca 64 1f 2a b8 14 50 16 c7 b8 97 8d 87 44 79 16 a6 c9 b3 9c 57 eb b4 d5 62 47 b2 1b 04 26 61 73 58 b8 14 63 dd b1 53 b6 42 19 0f ce a4 ac 42 8a db 8e 1e e0 18 24 c6 7a 98 54 0f 90 29 a0 a5 e3 fe ff 65 48 66 89 d9 98 33 73 f3 e7 2f a5 25 61 89 c9 bd e9 ef 25 86 78 29 ff 1a 03 7d 89 89 5e Data Ascii: fO)XC'DcGh7;);HM\|Bbs"8t!5h4:L},Q\|6`/:<,LQ}\|3j.dmd*PDyWbG&asXcSBB$zT)eHf3s/%a%x)}^
2024-01-16 21:33:05 UTC	16384	IN	Data Raw: 74 a6 1f 1c 32 b3 92 19 b5 a9 56 77 4e d7 bc 6d 45 e3 3d 02 ab 7d fc 85 3b 07 66 9b 54 9d e6 39 e7 e5 14 dd ae 54 9f f0 54 f2 4c 7a aa b0 97 52 05 c0 91 b1 aa 6d 9b f6 9b 8c ef 91 e9 9f b6 75 6a 11 70 c6 ec 71 de 2f 63 df 9d 33 8f 32 79 36 35 1e 67 fa 9a 8c f5 4f cb 9a 17 ff 11 13 38 a3 2b 31 d2 37 37 ee 29 da 6e 15 b2 67 94 14 0b 86 2c f9 5f 5c 0b 32 21 4f ce 48 55 c6 bf 68 a7 26 da 31 28 fd 38 8e 79 69 f7 14 70 50 44 d8 6c b6 3c 3f 08 fb fd 2d fb fd 3e 97 25 55 a0 8c c5 57 d7 58 42 e8 54 3b 9d 53 d7 79 f5 3d 4e 4a 5c 39 10 6a 9a 16 e7 9a ac 71 97 da 5f 22 6a f2 6e 8d 68 18 32 62 d6 e8 93 d7 86 ce 0c fc 80 1f 3a 92 1f 20 c7 d8 2e 6d 31 62 88 de 13 bd 0a 7c 71 18 14 28 6e e8 49 3e 83 8f a5 54 91 e7 8d cb 3e e1 a8 86 3a 04 21 f9 93 f6 88 71 88 6b 88 4a 00 Data Ascii: t2VwNmE=};fT9TTLzRmujpq/c32y65gO8+177)ng,_\2!OHUh&1(8yipPDl<?->%UWXBT;Sy=NJ\9jq_"jnh2b: .m1b\|q(nI>T>:!qkJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.18	49873	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:04 UTC	911	OUT	GET /core/assets/js/40.31ef8dbf.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:04 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 11808 Connection: close Server: istio-envoy Date: Mon, 06 Nov 2023 17:28:13 GMT Last-Modified: Fri, 03 Nov 2023 16:05:58 GMT ETag: "b0793fa46e8c0ae1846b7be8a833da35" x-amz-server-side-encryption: AES256 x-amz-version-id: 0hWnj4ApWgeD4NgdDELNM9kbK8jcdaEN Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 31 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 616cc46c05372de12125d489da3bca56.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: yHnwfWxrwUl8bfedbB_HWQp2MmBO_-rB2SNkYrZW0oQBM6bpKnTexw== Age: 6149091
2024-01-16 21:33:04 UTC	11808	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 30 5d 2c 7b 22 39 4f 55 4e 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 72 65 61 74 65 53 74 6f 72 65 7d 29 2c 6e 2e 64 28 74 2c 22 63 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 6f 6d 62 69 6e 65 52 65 64 75 63 65 72 73 7d 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 69 6e 64 41 63 74 69 6f 6e 43 72 65 61 74 6f 72 73 7d 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[40],{"9OUN":function(e,t,n){"use strict";n.d(t,"e",function(){return createStore}),n.d(t,"c",function(){return combineReducers}),n.d(t,"b",function(){return bindActionCreators}),n.d(t,"a",function(){ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.18	49874	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:04 UTC	911	OUT	GET /core/assets/js/29.31d09948.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:04 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 13063 Connection: close Server: istio-envoy Date: Mon, 30 Oct 2023 14:21:15 GMT Last-Modified: Fri, 27 Oct 2023 17:57:48 GMT ETag: "455157cb49065fb85fed54901ddaeb0e" x-amz-server-side-encryption: AES256 x-amz-version-id: S6a4e..svY_IWi_62J4Pmxpc6aKpyflw Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 27 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 93d4768fcd6983151de614ccc8b5605e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: RI-9J1-alxQF0DtVnc-t-eAIG1QxQ2-rQU6mWv_hV42bE-rzbqlNDA== Age: 6765109
2024-01-16 21:33:04 UTC	13063	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 39 5d 2c 7b 22 37 45 41 30 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 75 29 7b 74 2e 65 78 70 6f 72 74 73 3d 2f 5b 5c 30 2d 5c 75 44 37 46 46 5c 75 45 30 30 30 2d 5c 75 46 46 46 46 5d 7c 5b 5c 75 44 38 30 30 2d 5c 75 44 42 46 46 5d 5b 5c 75 44 43 30 30 2d 5c 75 44 46 46 46 5d 7c 5b 5c 75 44 38 30 30 2d 5c 75 44 42 46 46 5d 28 3f 21 5b 5c 75 44 43 30 30 2d 5c 75 44 46 46 46 5d 29 7c 28 3f 3a 5b 5e 5c 75 44 38 30 30 2d 5c 75 44 42 46 46 5d 7c 5e 29 5b 5c 75 44 43 30 30 2d 5c 75 44 46 46 46 5d 2f 7d 2c 43 6b 69 75 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 75 29 7b 74 2e 65 78 70 6f 72 74 73 3d 2f 5b 20 5c 78 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[29],{"7EA0":function(t,u){t.exports=/[\0-\uD7FF\uE000-\uFFFF]\|[\uD800-\uDBFF][\uDC00-\uDFFF]\|[\uD800-\uDBFF](?![\uDC00-\uDFFF])\|(?:[^\uD800-\uDBFF]\|^)[\uDC00-\uDFFF]/},Ckiu:function(t,u){t.exports=/[ \x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.18	49875	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:04 UTC	911	OUT	GET /core/assets/js/21.b8c41db9.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:04 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 17003 Connection: close Server: istio-envoy Date: Mon, 09 Oct 2023 01:22:56 GMT Last-Modified: Thu, 05 Oct 2023 15:35:43 GMT ETag: "65e5c965272e021ae33ff8bc39565ef5" x-amz-server-side-encryption: AES256 x-amz-version-id: dCPcHLBUIkMsFUzeo_YZHEUuIEudcAXM Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 23 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 4416a31c9d77f8f8b877d81f840c88c8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: eRBFSDdF5GjUrtH-wcMViCeNVyQzhkOOp1-LubNphKKpNxWBqCwcAw== Age: 8626208
2024-01-16 21:33:04 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 31 5d 2c 7b 22 32 53 56 64 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 69 73 41 62 73 6f 6c 75 74 65 55 52 4c 28 65 29 7b 72 65 74 75 72 6e 2f 5e 28 5b 61 2d 7a 5d 5b 61 2d 7a 5c 64 5c 2b 5c 2d 5c 2e 5d 2a 3a 29 3f 5c 2f 5c 2f 2f 69 2e 74 65 73 74 28 65 29 7d 7d 2c 22 35 6f 4d 70 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 63 6f 6d 62 69 6e 65 55 52 4c 73 28 65 2c 74 29 7b 72 65 74 75 72 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[21],{"2SVd":function(e,t,r){"use strict";e.exports=function isAbsoluteURL(e){return/^([a-z][a-z\d\+\-\.]*:)?\/\//i.test(e)}},"5oMp":function(e,t,r){"use strict";e.exports=function combineURLs(e,t){retur
2024-01-16 21:33:04 UTC	1612	IN	Data Raw: 65 29 7d 2c 69 73 46 69 6c 65 3a 66 75 6e 63 74 69 6f 6e 20 69 73 46 69 6c 65 28 65 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 46 69 6c 65 5d 22 3d 3d 3d 61 2e 63 61 6c 6c 28 65 29 7d 2c 69 73 42 6c 6f 62 3a 66 75 6e 63 74 69 6f 6e 20 69 73 42 6c 6f 62 28 65 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 42 6c 6f 62 5d 22 3d 3d 3d 61 2e 63 61 6c 6c 28 65 29 7d 2c 69 73 46 75 6e 63 74 69 6f 6e 3a 69 73 46 75 6e 63 74 69 6f 6e 2c 69 73 53 74 72 65 61 6d 3a 66 75 6e 63 74 69 6f 6e 20 69 73 53 74 72 65 61 6d 28 65 29 7b 72 65 74 75 72 6e 20 69 73 4f 62 6a 65 63 74 28 65 29 26 26 69 73 46 75 6e 63 74 69 6f 6e 28 65 2e 70 69 70 65 29 7d 2c 69 73 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3a 66 75 6e 63 74 69 6f 6e 20 69 73 55 52 4c 53 65 61 72 63 Data Ascii: e)},isFile:function isFile(e){return"[object File]"===a.call(e)},isBlob:function isBlob(e){return"[object Blob]"===a.call(e)},isFunction:isFunction,isStream:function isStream(e){return isObject(e)&&isFunction(e.pipe)},isURLSearchParams:function isURLSearc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.18	49876	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:04 UTC	910	OUT	GET /core/assets/js/8.2d8d67fe.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:04 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 83467 Connection: close Server: istio-envoy Date: Wed, 03 Jan 2024 22:27:31 GMT Last-Modified: Wed, 03 Jan 2024 21:36:02 GMT ETag: "5c86b7fa68fc1813e12f836b69c34341" x-amz-server-side-encryption: AES256 x-amz-version-id: fFs9ODet.fyPXS2Dm_Ors2fDtDA1rfKE Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 41 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c1ba88066bcaf9ff8fd777e3d54f5c7e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: 930cLoGXt3K68bpXM7TRfK1vfRFHgt9-My5J7IutqlAIAVfi7L0aVA== Age: 1119933
2024-01-16 21:33:04 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 5d 2c 7b 22 2b 2f 4a 65 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 29 3b 76 61 72 20 72 3d 2d 31 2c 61 3d 22 50 52 45 2d 52 45 4e 44 45 52 22 7d 2c 22 2b 4b 62 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 22 59 57 68 70 22 29 2c 61 3d 6e 28 22 53 30 69 67 22 29 2c 6f 3d 6e 28 22 45 52 6b 50 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],{"+/Je":function(e,t,n){"use strict";n.d(t,"a",function(){return r}),n.d(t,"b",function(){return a});var r=-1,a="PRE-RENDER"},"+Kbs":function(e,t,n){"use strict";var r=n("YWhp"),a=n("S0ig"),o=n("ERkP
2024-01-16 21:33:04 UTC	599	IN	Data Raw: 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 64 72 69 66 74 2d 67 64 70 72 2d 61 63 74 69 6f 6e 2d 2d 74 65 78 74 22 7d 2c 63 29 29 29 29 7d 2c 6b 3d 28 6e 28 22 73 5a 42 74 22 29 2c 66 75 6e 63 74 69 6f 6e 20 44 65 63 6c 69 6e 65 64 43 6f 6e 73 65 6e 74 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 6f 6e 73 65 6e 74 4d 65 73 73 61 67 65 2c 6e 3d 65 2e 63 6f 70 79 53 74 79 6c 65 2c 72 3d 76 6f 69 64 20 30 3d 3d 3d 6e 3f 7b 7d 3a 6e 3b 72 65 74 75 72 6e 20 45 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 64 72 69 66 74 2d 77 69 64 67 65 74 2d 67 64 70 72 2d 63 6f 6e 73 65 6e 74 2d 2d 63 6f 70 79 22 2c 73 74 79 6c 65 3a 72 7d 2c 74 29 7d 29 2c 53 3d 66 75 6e 63 74 69 6f 6e 20 49 6e 71 75 69 72 65 43 6f 6e 73 65 6e 74 28 Data Ascii: {className:"drift-gdpr-action--text"},c))))},k=(n("sZBt"),function DeclinedConsent(e){var t=e.consentMessage,n=e.copyStyle,r=void 0===n?{}:n;return E.a.createElement("p",{className:"drift-widget-gdpr-consent--copy",style:r},t)}),S=function InquireConsent(
2024-01-16 21:33:04 UTC	16384	IN	Data Raw: 72 6e 20 65 2e 73 65 73 73 69 6f 6e 7d 29 2c 4e 3d 41 2e 65 6e 64 55 73 65 72 2c 4d 3d 41 2e 67 64 70 72 2c 4c 3d 28 76 6f 69 64 20 30 3d 3d 3d 4d 3f 7b 7d 3a 4d 29 2e 64 65 63 6c 69 6e 65 64 43 6f 6e 73 65 6e 74 2c 5f 3d 4f 62 6a 65 63 74 28 66 2e 61 29 28 29 3b 4f 62 6a 65 63 74 28 68 2e 75 73 65 4c 61 79 6f 75 74 45 66 66 65 63 74 29 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4c 26 26 6e 28 29 7d 2c 5b 4c 2c 6e 5d 29 2c 4f 62 6a 65 63 74 28 68 2e 75 73 65 45 66 66 65 63 74 29 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4f 62 6a 65 63 74 28 77 2e 61 29 28 43 2e 62 2e 47 44 50 52 5f 52 45 51 55 45 53 54 45 44 29 7d 2c 5b 5d 29 3b 76 61 72 20 78 3d 4f 62 6a 65 63 74 28 76 2e 61 29 28 29 2c 44 3d 78 2e 61 63 74 69 76 65 43 6f 6c 6f 72 2c 42 3d 78 2e 67 64 70 72 43 6f 70 Data Ascii: rn e.session}),N=A.endUser,M=A.gdpr,L=(void 0===M?{}:M).declinedConsent,_=Object(f.a)();Object(h.useLayoutEffect)(function(){L&&n()},[L,n]),Object(h.useEffect)(function(){Object(w.a)(C.b.GDPR_REQUESTED)},[]);var x=Object(v.a)(),D=x.activeColor,B=x.gdprCop
2024-01-16 21:33:04 UTC	16384	IN	Data Raw: 74 69 6f 6e 22 2c 43 4f 4e 56 45 52 53 41 54 49 4f 4e 5f 50 4c 41 59 42 4f 4f 4b 5f 43 4c 49 43 4b 45 44 3a 22 64 72 69 66 74 3a 3a 63 6f 6e 76 65 72 73 61 74 69 6f 6e 3a 70 6c 61 79 62 6f 6f 6b 43 6c 69 63 6b 65 64 22 2c 43 4f 4e 56 45 52 53 41 54 49 4f 4e 5f 50 4c 41 59 42 4f 4f 4b 5f 46 49 52 45 44 3a 22 64 72 69 66 74 3a 3a 63 6f 6e 76 65 72 73 61 74 69 6f 6e 3a 70 6c 61 79 62 6f 6f 6b 46 69 72 65 64 22 2c 43 4f 4e 56 45 52 53 41 54 49 4f 4e 5f 50 4c 41 59 42 4f 4f 4b 5f 44 49 53 4d 49 53 53 45 44 3a 22 64 72 69 66 74 3a 3a 63 6f 6e 76 65 72 73 61 74 69 6f 6e 3a 70 6c 61 79 62 6f 6f 6b 44 69 73 6d 69 73 73 65 64 22 7d 2c 2e 2e 2e 7b 4d 45 45 54 49 4e 47 5f 52 45 51 55 45 53 54 45 44 3a 22 64 72 69 66 74 3a 3a 73 63 68 65 64 75 6c 69 6e 67 3a 72 65 71 Data Ascii: tion",CONVERSATION_PLAYBOOK_CLICKED:"drift::conversation:playbookClicked",CONVERSATION_PLAYBOOK_FIRED:"drift::conversation:playbookFired",CONVERSATION_PLAYBOOK_DISMISSED:"drift::conversation:playbookDismissed"},...{MEETING_REQUESTED:"drift::scheduling:req
2024-01-16 21:33:04 UTC	16384	IN	Data Raw: 63 74 28 72 2e 61 29 28 7b 7d 2c 5b 22 63 61 6d 70 61 69 67 6e 73 22 2c 22 61 63 74 69 76 65 43 61 6d 70 61 69 67 6e 22 5d 2c 65 29 7d 29 2c 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 76 6f 69 64 20 30 3d 3d 3d 74 3f 7b 7d 3a 74 3b 72 65 74 75 72 6e 7b 69 64 3a 65 2e 69 64 2c 70 6c 61 79 62 6f 6f 6b 49 64 3a 4f 62 6a 65 63 74 28 72 2e 61 29 28 6e 75 6c 6c 2c 5b 22 70 6c 61 79 62 6f 6f 6b 49 64 22 5d 2c 6e 29 2c 63 74 61 54 79 70 65 3a 4f 62 6a 65 63 74 28 72 2e 61 29 28 6e 75 6c 6c 2c 5b 22 63 74 61 22 2c 22 43 74 61 54 79 70 65 22 5d 2c 6e 29 2c 63 74 61 43 6f 70 79 3a 4f 62 6a 65 63 74 28 72 2e 61 29 28 22 22 2c 5b 22 63 74 61 22 2c 22 63 6f 70 79 22 5d 2c 6e 29 2c 63 74 61 55 72 6c 3a 4f 62 6a 65 63 74 28 72 2e 61 29 28 22 22 2c 5b 22 63 74 61 Data Ascii: ct(r.a)({},["campaigns","activeCampaign"],e)}),t=e.attributes,n=void 0===t?{}:t;return{id:e.id,playbookId:Object(r.a)(null,["playbookId"],n),ctaType:Object(r.a)(null,["cta","CtaType"],n),ctaCopy:Object(r.a)("",["cta","copy"],n),ctaUrl:Object(r.a)("",["cta
2024-01-16 21:33:04 UTC	16384	IN	Data Raw: 28 29 7d 2c 22 72 2f 78 44 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 29 2c 6e 2e 64 28 74 2c 22 63 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 29 3b 63 6f 6e 73 74 20 72 3d 22 64 72 69 66 74 45 6e 61 62 6c 65 4c 6f 67 22 2c 61 3d 7b 66 6f 72 63 65 4c 6f 67 67 69 6e 67 3a 21 31 2c 6c 69 6d 69 74 3a 2e 30 35 2c 73 65 6e 74 72 79 4c 6f 67 67 69 6e 67 45 6e 61 62 6c 65 64 3a 21 30 7d 2c 6f 3d 7b 65 6e 61 62 6c 65 64 53 68 61 72 64 73 3a 5b 5d 7d 7d 2c 73 5a 42 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c Data Ascii: ()},"r/xD":function(e,t,n){"use strict";n.d(t,"a",function(){return r}),n.d(t,"c",function(){return a}),n.d(t,"b",function(){return o});const r="driftEnableLog",a={forceLogging:!1,limit:.05,sentryLoggingEnabled:!0},o={enabledShards:[]}},sZBt:function(e,t,
2024-01-16 21:33:04 UTC	1941	IN	Data Raw: 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6f 2e 61 2c 7b 73 69 7a 65 3a 72 2c 69 6d 61 67 65 3a 63 2c 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 22 22 2e 63 6f 6e 63 61 74 28 69 2c 22 20 61 76 61 74 61 72 22 29 2c 63 6c 61 73 73 4e 61 6d 65 3a 6e 7d 29 29 7d 29 2c 67 3d 66 75 6e 63 74 69 6f 6e 20 44 65 66 61 75 6c 74 42 6f 74 41 76 61 74 61 72 28 65 29 7b 76 61 72 20 74 3d 65 2e 73 69 7a 65 2c 6e 3d 65 2e 6e 61 6d 65 2c 72 3d 65 2e 73 74 79 6c 65 3b 72 65 74 75 72 6e 20 73 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 73 74 79 6c 65 3a 72 2c 63 6c 61 73 73 4e 61 6d 65 3a 61 28 29 28 22 64 72 69 66 74 2d 77 69 64 67 65 74 2d 64 65 66 61 75 6c 74 2d 62 6f 74 2d 61 76 61 74 61 72 20 64 72 69 66 74 2d 77 69 64 67 65 74 2d 72 65 63 69 Data Ascii: .createElement(o.a,{size:r,image:c,"aria-label":"".concat(i," avatar"),className:n}))}),g=function DefaultBotAvatar(e){var t=e.size,n=e.name,r=e.style;return s.a.createElement("div",{style:r,className:a()("drift-widget-default-bot-avatar drift-widget-reci

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.18	49877	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:04 UTC	911	OUT	GET /core/assets/js/16.d3128480.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:04 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 94953 Connection: close Server: istio-envoy Date: Wed, 03 Jan 2024 22:27:30 GMT Last-Modified: Wed, 03 Jan 2024 21:36:00 GMT ETag: "b7cd299466ad81f2eb71bd07b769ade0" x-amz-server-side-encryption: AES256 x-amz-version-id: tezK6xNHmqfxUKFu3ffkFW9ILB8OsmOz Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 19 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 3f3479c6387cb9e42ecda1d46e66eddc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: csNJX2JgykZP53ixnWIxteLVHoE8LUqf67jte_LuFdqb3rsnmGz2fQ== Age: 1119934
2024-01-16 21:33:04 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 36 5d 2c 7b 22 2b 52 79 39 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 6e 28 22 6d 6a 32 4f 22 29 2c 72 3d 6e 2e 6e 28 61 29 2c 63 3d 6e 28 22 37 53 4d 31 22 29 2c 69 3d 6e 28 22 6e 66 62 41 22 29 2c 6f 3d 6e 28 22 51 74 6c 5a 22 29 2c 75 3d 6e 28 22 53 73 5a 4e 22 29 2c 73 3d 6e 28 22 42 38 4a 59 22 29 2c 64 3d 6e 28 22 48 76 68 67 22 29 2c 6c 3d 6e 28 22 53 46 6f 61 22 29 2c 62 3d 6e 28 22 54 44 55 45 22 29 2c 66 3d 6e 28 22 64 61 34 4c 22 29 2c 76 3d 6e 28 22 68 6d 38 62 22 29 2c 70 3d 6e 28 22 4c 56 63 58 22 29 2c 4f 3d 6e 28 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[16],{"+Ry9":function(e,t,n){"use strict";var a=n("mj2O"),r=n.n(a),c=n("7SM1"),i=n("nfbA"),o=n("QtlZ"),u=n("SsZN"),s=n("B8JY"),d=n("Hvhg"),l=n("SFoa"),b=n("TDUE"),f=n("da4L"),v=n("hm8b"),p=n("LVcX"),O=n(
2024-01-16 21:33:04 UTC	16384	IN	Data Raw: 65 61 64 41 67 65 6e 74 4d 65 73 73 61 67 65 73 5b 69 2e 62 5d 3d 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 7d 29 2c 6e 2e 63 6f 6e 76 65 72 73 61 74 69 6f 6e 73 5b 69 2e 62 5d 3d 7b 63 6f 6e 76 65 72 73 61 74 69 6f 6e 3a 7b 69 64 3a 69 2e 62 2c 75 70 64 61 74 65 64 41 74 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 2c 6c 61 73 74 4d 65 73 73 61 67 65 3a 4f 62 6a 65 63 74 28 64 2e 61 29 28 73 29 2c 6c 61 73 74 41 67 65 6e 74 4d 65 73 73 61 67 65 3a 4f 62 6a 65 63 74 28 64 2e 61 29 28 73 29 2c 75 6e 72 65 61 64 4d 65 73 73 61 67 65 73 3a 73 2e 6c 65 6e 67 74 68 7d 2c 6e 2e 72 65 73 75 6d 65 46 6c 6f 77 43 6f 6e 74 65 78 74 3d 6f 2c 6e 2e 61 63 74 69 76 65 43 6f 6e 76 65 72 73 61 74 69 6f 6e 3d 69 2e 62 2c 6e 2e 65 78 63 Data Ascii: eadAgentMessages[i.b]=s.map(function(e){return e.id}),n.conversations[i.b]={conversation:{id:i.b,updatedAt:Date.now()},lastMessage:Object(d.a)(s),lastAgentMessage:Object(d.a)(s),unreadMessages:s.length},n.resumeFlowContext=o,n.activeConversation=i.b,n.exc
2024-01-16 21:33:04 UTC	16384	IN	Data Raw: 69 66 28 74 3d 4f 62 6a 65 63 74 28 50 2e 61 29 28 65 2c 5b 22 6d 65 73 73 61 67 65 22 5d 2c 22 22 29 2c 6e 3d 4f 62 6a 65 63 74 28 50 2e 61 29 28 65 2c 5b 22 61 75 74 6f 6d 61 74 69 63 53 65 6e 64 65 72 22 5d 2c 21 31 29 2c 61 3d 4f 62 6a 65 63 74 28 50 2e 61 29 28 65 2c 5b 22 73 65 6e 64 65 72 49 64 22 5d 2c 6e 75 6c 6c 29 2c 72 3d 4f 62 6a 65 63 74 28 50 2e 61 29 28 65 2c 5b 22 73 65 6e 64 65 72 49 6e 66 6f 22 5d 2c 22 22 29 2c 63 3d 4f 62 6a 65 63 74 28 50 2e 61 29 28 65 2c 5b 22 63 74 61 22 2c 22 43 74 61 54 79 70 65 22 5d 2c 6e 75 6c 6c 29 2c 69 3d 21 21 63 26 26 63 3d 3d 3d 6b 2e 61 2e 53 43 48 45 44 55 4c 45 5f 4d 45 45 54 49 4e 47 26 26 21 61 2c 6f 3d 6e 75 6c 6c 21 3d 3d 74 2e 6d 61 74 63 68 28 46 29 2c 21 28 6f 7c 7c 6e 7c 7c 69 29 29 7b 75 2e Data Ascii: if(t=Object(P.a)(e,["message"],""),n=Object(P.a)(e,["automaticSender"],!1),a=Object(P.a)(e,["senderId"],null),r=Object(P.a)(e,["senderInfo"],""),c=Object(P.a)(e,["cta","CtaType"],null),i=!!c&&c===k.a.SCHEDULE_MEETING&&!a,o=null!==t.match(F),!(o\|\|n\|\|i)){u.
2024-01-16 21:33:04 UTC	16384	IN	Data Raw: 20 65 3d 4f 62 6a 65 63 74 28 63 2e 61 29 28 72 2e 61 2e 6d 61 72 6b 28 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 37 28 65 29 7b 76 61 72 20 74 2c 6e 2c 61 2c 63 2c 69 2c 6f 2c 75 2c 73 3b 72 65 74 75 72 6e 20 72 2e 61 2e 77 72 61 70 28 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 37 24 28 72 29 7b 66 6f 72 28 3b 3b 29 73 77 69 74 63 68 28 72 2e 70 72 65 76 3d 72 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 74 3d 65 2e 69 64 2c 6e 3d 65 2e 65 6d 61 69 6c 2c 61 3d 65 2e 75 73 65 72 4a 77 74 2c 63 3d 65 2e 61 6e 6f 6e 79 6d 6f 75 73 49 64 2c 69 3d 65 2e 73 69 67 6e 65 64 49 64 65 6e 74 69 74 79 52 65 71 75 69 72 65 64 53 74 61 74 75 73 2c 6f 3d 7b 7d 2c 75 3d 4f 62 6a 65 63 74 28 6c 2e 62 29 28 69 29 26 26 21 61 2c 73 3d 59 28 74 Data Ascii: e=Object(c.a)(r.a.mark(function _callee7(e){var t,n,a,c,i,o,u,s;return r.a.wrap(function _callee7$(r){for(;;)switch(r.prev=r.next){case 0:return t=e.id,n=e.email,a=e.userJwt,c=e.anonymousId,i=e.signedIdentityRequiredStatus,o={},u=Object(l.b)(i)&&!a,s=Y(t
2024-01-16 21:33:04 UTC	16384	IN	Data Raw: 73 65 22 65 6e 64 22 3a 72 65 74 75 72 6e 20 72 2e 73 74 6f 70 28 29 7d 7d 2c 5f 63 61 6c 6c 65 65 34 29 7d 29 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 72 65 6d 6f 76 65 53 65 6e 64 49 64 46 72 6f 6d 53 74 6f 72 65 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 28 29 2c 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 4f 62 6a 65 63 74 28 6f 2e 61 29 28 69 2e 61 2e 6d 61 72 6b 28 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 35 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 20 69 2e 61 2e 77 72 61 70 28 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 35 24 28 61 29 7b 66 6f 72 28 3b 3b 29 73 77 69 74 63 68 28 61 2e 70 72 65 76 3d 61 2e 6e 65 78 74 29 7b 63 61 73 65 Data Ascii: se"end":return r.stop()}},_callee4)}));return function removeSendIdFromStore(t){return e.apply(this,arguments)}}(),D=function(){var e=Object(o.a)(i.a.mark(function _callee5(e){var t,n;return i.a.wrap(function _callee5$(a){for(;;)switch(a.prev=a.next){case
2024-01-16 21:33:04 UTC	14026	IN	Data Raw: 6e 28 29 7b 76 61 72 20 65 3d 4f 62 6a 65 63 74 28 69 2e 61 29 28 63 2e 61 2e 6d 61 72 6b 28 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 37 28 65 29 7b 76 61 72 20 74 2c 6e 2c 61 2c 72 2c 69 2c 73 2c 6c 2c 66 2c 70 2c 4f 2c 67 3b 72 65 74 75 72 6e 20 63 2e 61 2e 77 72 61 70 28 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 37 24 28 63 29 7b 66 6f 72 28 3b 3b 29 73 77 69 74 63 68 28 63 2e 70 72 65 76 3d 63 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 74 3d 65 2e 69 6e 74 65 72 61 63 74 69 6f 6e 49 64 2c 6e 3d 65 2e 6c 6f 63 61 6c 65 2c 61 3d 76 6f 69 64 20 30 3d 3d 3d 6e 3f 22 22 3a 6e 2c 72 3d 65 2e 67 6f 54 6f 43 6f 6e 76 65 72 73 61 74 69 6f 6e 2c 69 3d 65 2e 69 73 46 72 6f 6d 43 6f 6e 76 65 72 73 61 74 69 6f 6e 61 6c 4c 61 6e 64 Data Ascii: n(){var e=Object(i.a)(c.a.mark(function _callee7(e){var t,n,a,r,i,s,l,f,p,O,g;return c.a.wrap(function _callee7$(c){for(;;)switch(c.prev=c.next){case 0:return t=e.interactionId,n=e.locale,a=void 0===n?"":n,r=e.goToConversation,i=e.isFromConversationalLand

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.18	49878	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:04 UTC	911	OUT	GET /core/assets/js/24.a37bd669.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:05 UTC	992	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 52086 Connection: close Server: istio-envoy Date: Thu, 11 Jan 2024 23:23:21 GMT Last-Modified: Thu, 11 Jan 2024 17:27:45 GMT ETag: "65582f3567a286fab01dac57127bb2ca" x-amz-server-side-encryption: AES256 x-amz-version-id: HlT_bLh7eAjFRmOEYqE7najtfqV4hXJB Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 16 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 616cc46c05372de12125d489da3bca56.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: CvU-OdkzgqMLKc6sbGMGaA4ccRIJt37RB2PepxGo16MTxyRMp5MDrg== Age: 425384
2024-01-16 21:33:05 UTC	15392	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 34 5d 2c 7b 22 2b 66 31 41 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 71 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 29 2c 6e 2e 64 28 74 2c 22 77 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 29 2c 6e 2e 64 28 74 2c 22 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 7d 29 2c 6e Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[24],{"+f1A":function(e,t,n){"use strict";n.d(t,"q",function(){return s}),n.d(t,"w",function(){return d}),n.d(t,"m",function(){return l}),n.d(t,"b",function(){return f}),n.d(t,"a",function(){return b}),n
2024-01-16 21:33:05 UTC	16384	IN	Data Raw: 73 73 61 67 65 53 65 6e 74 28 65 29 7b 76 61 72 20 74 2c 6e 2c 72 3d 65 2e 61 63 74 69 6f 6e 2c 61 3d 65 2e 64 72 61 66 74 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 28 6e 3d 28 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 72 2e 70 61 79 6c 6f 61 64 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 6d 65 73 73 61 67 65 29 7c 7c 7b 7d 29 2e 61 74 74 72 69 62 75 74 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 72 65 6c 61 74 65 64 43 61 6d 70 61 69 67 6e 49 64 29 72 65 74 75 72 6e 20 45 28 7b 61 63 74 69 6f 6e 3a 4f 62 6a 65 63 74 28 76 2e 63 29 28 22 6d 65 65 74 69 6e 67 5f 73 63 68 65 64 75 6c 65 72 5f 72 74 74 22 2c 44 61 74 65 2e 6e 6f 77 28 29 29 2c 64 72 61 66 74 3a 61 7d 29 7d 2c 44 45 4c 45 54 45 5f 4d 41 52 4b 45 44 5f 54 Data Ascii: ssageSent(e){var t,n,r=e.action,a=e.draft;if(null===(n=((null===(t=r.payload)\|\|void 0===t?void 0:t.message)\|\|{}).attributes)\|\|void 0===n?void 0:n.relatedCampaignId)return E({action:Object(v.c)("meeting_scheduler_rtt",Date.now()),draft:a})},DELETE_MARKED_T
2024-01-16 21:33:05 UTC	16384	IN	Data Raw: 6f 3b 72 65 74 75 72 6e 21 4f 62 6a 65 63 74 28 62 2e 61 29 28 6e 29 7c 7c 21 4f 62 6a 65 63 74 28 62 2e 61 29 28 72 29 7c 7c 21 4f 62 6a 65 63 74 28 62 2e 61 29 28 61 29 7c 7c 21 4f 62 6a 65 63 74 28 62 2e 61 29 28 63 29 7d 2c 53 3d 66 75 6e 63 74 69 6f 6e 20 69 73 53 4d 53 4e 75 6d 62 65 72 52 65 71 75 65 73 74 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6f 6e 74 65 6e 74 54 79 70 65 3d 3d 3d 45 2e 63 2e 53 4d 53 5f 4e 55 4d 42 45 52 5f 52 45 51 55 45 53 54 45 44 7d 2c 52 3d 66 75 6e 63 74 69 6f 6e 20 69 73 53 4d 53 4e 75 6d 62 65 72 53 75 63 63 65 73 73 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6f 6e 74 65 6e 74 54 79 70 65 3d 3d 3d 45 2e 63 2e 53 4d 53 5f 4e 55 4d 42 45 52 5f 53 55 43 43 45 53 53 7d 2c 41 3d 66 75 6e 63 74 69 6f 6e 20 67 65 74 4d 65 73 Data Ascii: o;return!Object(b.a)(n)\|\|!Object(b.a)(r)\|\|!Object(b.a)(a)\|\|!Object(b.a)(c)},S=function isSMSNumberRequest(e){return e.contentType===E.c.SMS_NUMBER_REQUESTED},R=function isSMSNumberSuccess(e){return e.contentType===E.c.SMS_NUMBER_SUCCESS},A=function getMes
2024-01-16 21:33:05 UTC	3926	IN	Data Raw: 63 61 73 65 20 39 3a 72 65 74 75 72 6e 20 74 2e 61 62 72 75 70 74 28 22 72 65 74 75 72 6e 22 2c 65 29 3b 63 61 73 65 20 31 30 3a 72 65 74 75 72 6e 20 74 2e 61 62 72 75 70 74 28 22 72 65 74 75 72 6e 22 2c 76 6f 69 64 20 30 29 3b 63 61 73 65 20 31 31 3a 63 61 73 65 22 65 6e 64 22 3a 72 65 74 75 72 6e 20 74 2e 73 74 6f 70 28 29 7d 7d 2c 5f 63 61 6c 6c 65 65 33 29 7d 29 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 67 65 74 55 73 65 72 4a 77 74 46 72 6f 6d 43 6f 6f 6b 69 65 28 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 28 29 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 4f 62 6a 65 63 74 28 63 2e 61 29 28 61 2e 61 2e 6d 61 72 6b 28 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 Data Ascii: case 9:return t.abrupt("return",e);case 10:return t.abrupt("return",void 0);case 11:case"end":return t.stop()}},_callee3)}));return function getUserJwtFromCookie(){return e.apply(this,arguments)}}(),j=function(){var e=Object(c.a)(a.a.mark(function _callee

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.18	49879	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:04 UTC	911	OUT	GET /core/assets/js/17.4d495840.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:05 UTC	992	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 41271 Connection: close Server: istio-envoy Date: Thu, 11 Jan 2024 23:23:21 GMT Last-Modified: Thu, 11 Jan 2024 17:27:45 GMT ETag: "fa217a3b2cfd029b9ed134febfb61e2b" x-amz-server-side-encryption: AES256 x-amz-version-id: 5Kshs7.RVaz9CpqePsfuj49TdXW7Nk3Y Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 16 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 acbc16f609c0c9804b8a2c3d38d3023e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: lEmZ-kuIimM0NIb0He2H_b2Bdc-RKfF-8x_zVGr5WQW4X5brRN45Mw== Age: 425384
2024-01-16 21:33:05 UTC	15392	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 5d 2c 7b 22 2b 44 35 43 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 63 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 29 3b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 43 48 41 54 3a 22 63 68 61 74 22 2c 55 53 45 52 3a 22 75 73 65 72 22 2c 50 52 45 53 45 4e 43 45 3a 22 70 72 65 73 65 6e 63 65 22 2c Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[17],{"+D5C":function(e,t,n){"use strict";n.d(t,"c",function(){return r}),n.d(t,"b",function(){return o}),n.d(t,"a",function(){return a});var r=Object.freeze({CHAT:"chat",USER:"user",PRESENCE:"presence",
2024-01-16 21:33:05 UTC	16384	IN	Data Raw: 63 61 74 28 6f 2e 75 72 6c 2c 27 22 20 27 29 2e 63 6f 6e 63 61 74 28 61 2c 27 22 3e 27 29 2e 63 6f 6e 63 61 74 28 6f 2e 74 65 78 74 2c 22 3c 2f 61 3e 22 29 3b 6e 3d 4f 62 6a 65 63 74 28 66 2e 74 29 28 6f 2e 69 6e 64 65 78 2c 6f 2e 6c 61 73 74 49 6e 64 65 78 2c 6e 2c 63 29 7d 72 65 74 75 72 6e 20 6e 7d 2c 41 3d 66 75 6e 63 74 69 6f 6e 20 74 72 79 44 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 7b 76 61 72 20 74 3d 6e 75 6c 6c 3b 74 72 79 7b 74 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 7d 63 61 74 63 68 28 6e 29 7b 7d 72 65 74 75 72 6e 20 74 7d 7d 2c 46 38 76 4a 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: cat(o.url,'" ').concat(a,'">').concat(o.text,"</a>");n=Object(f.t)(o.index,o.lastIndex,n,c)}return n},A=function tryDecodeURIComponent(e){var t=null;try{t=decodeURIComponent(e)}catch(n){}return t}},F8vJ:function(e,t,n){"use strict";n.d(t,"a",function(){re
2024-01-16 21:33:05 UTC	9495	IN	Data Raw: 6e 75 6c 6c 2c 22 78 57 30 63 22 2c 33 29 29 3b 63 61 73 65 22 70 6c 22 3a 72 65 74 75 72 6e 20 6e 2e 65 28 37 31 29 2e 74 68 65 6e 28 6e 2e 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 22 6c 57 68 7a 22 2c 33 29 29 3b 63 61 73 65 22 70 74 22 3a 63 61 73 65 22 70 74 2d 50 54 22 3a 72 65 74 75 72 6e 20 6e 2e 65 28 37 33 29 2e 74 68 65 6e 28 6e 2e 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 22 32 6e 42 64 22 2c 33 29 29 3b 63 61 73 65 22 70 74 2d 42 52 22 3a 72 65 74 75 72 6e 20 6e 2e 65 28 37 32 29 2e 74 68 65 6e 28 6e 2e 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 22 2b 39 34 54 22 2c 33 29 29 3b 63 61 73 65 22 72 6f 22 3a 72 65 74 75 72 6e 20 6e 2e 65 28 37 34 29 2e 74 68 65 6e 28 6e 2e 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 22 74 44 42 53 22 2c 33 29 29 3b 63 61 73 65 22 72 75 22 Data Ascii: null,"xW0c",3));case"pl":return n.e(71).then(n.t.bind(null,"lWhz",3));case"pt":case"pt-PT":return n.e(73).then(n.t.bind(null,"2nBd",3));case"pt-BR":return n.e(72).then(n.t.bind(null,"+94T",3));case"ro":return n.e(74).then(n.t.bind(null,"tDBS",3));case"ru"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.18	49880	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:05 UTC	927	OUT	GET /core/assets/css/28.b5e8f5e1.chunk.css HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:05 UTC	963	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 8586 Connection: close Server: istio-envoy Date: Mon, 09 Oct 2023 01:22:58 GMT Last-Modified: Thu, 21 Sep 2023 18:21:33 GMT ETag: "e7107bc29ccb3c6d928f0f8f10a0f22d" x-amz-server-side-encryption: AES256 x-amz-version-id: MvqP9DnCIC5qP3I8QrGl5hKPi.vF1lXl Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 65 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 687bf9bb2353af127d0a3c49056e960c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: pjtJHLbijeWOwz7LFayjitwQ1KA_kN1aEzpqWvJT52RPA8_xNCnjlw== Age: 8626207
2024-01-16 21:33:05 UTC	8586	IN	Data Raw: 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6d 65 73 73 61 67 65 2d 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 3a 32 70 78 20 30 20 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 31 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 36 38 37 38 38 32 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 66 66 66 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 70 61 64 64 69 6e 67 3a 34 70 78 3b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 32 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 32 70 78 3b 2d 77 65 62 6b 69 74 2d Data Ascii: .drift-widget-message-close-button{margin:2px 0 0;position:absolute;top:-1px;z-index:1;background:#687882;border:1px solid #fff;-webkit-border-radius:50%;-moz-border-radius:50%;border-radius:50%;padding:4px;height:20px;width:20px;line-height:12px;-webkit-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.18	49881	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:05 UTC	927	OUT	GET /core/assets/css/25.c695453b.chunk.css HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:05 UTC	939	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 365 Connection: close Server: istio-envoy Date: Sat, 04 Nov 2023 22:01:52 GMT Last-Modified: Fri, 03 Nov 2023 16:05:55 GMT ETag: "06b2963b029c0824382815165bfea73e" x-amz-server-side-encryption: AES256 x-amz-version-id: BsH2q5K4OmBE5g6X7UvWtkPnsOrtessF Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 56 X-Cache: Hit from cloudfront Via: 1.1 a09be795efaa72bd6adbcee7b35c4d1c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: A2mvg456NSAAMA7TAWA-FGD-c7znuuhD5xgLZ7sMca8XkhUCWl9Zow== Age: 6305473
2024-01-16 21:33:05 UTC	365	IN	Data Raw: 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 63 6f 6e 74 72 6f 6c 6c 65 72 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 68 65 69 67 68 74 3a 35 36 70 78 3b 77 69 64 74 68 3a 35 36 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 38 70 78 20 34 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 36 29 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 38 70 78 20 34 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 36 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 38 70 78 20 34 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 36 29 3b 72 69 67 68 74 3a 31 32 70 78 3b 62 6f 74 74 6f 6d 3a 31 32 Data Ascii: .drift-widget-controller{outline:none;display:block;position:fixed;height:56px;width:56px;cursor:pointer;-webkit-box-shadow:0 0 8px 4px rgba(0,0,0,.16);-moz-box-shadow:0 0 8px 4px rgba(0,0,0,.16);box-shadow:0 0 8px 4px rgba(0,0,0,.16);right:12px;bottom:12

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.18	49882	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:05 UTC	638	OUT	GET /core/assets/css/37.11d2b6a7.chunk.css HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1705440768503 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:05 UTC	963	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 2783 Connection: close Server: istio-envoy Date: Mon, 06 Nov 2023 17:28:13 GMT Last-Modified: Fri, 03 Nov 2023 16:05:55 GMT ETag: "87532c4db85f1429fa6d759bc3332f36" x-amz-server-side-encryption: AES256 x-amz-version-id: 10PWALx1zJTztL2WnODgv3I7I9sim9to Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 37 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8df8d5dfeb782c83ceeb5679f78a9e4e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: juhmu2zaHJ6jTjuVHRHWccOrqekdzZEEgWDLxz8E8ddJ1s8qkKe2Yw== Age: 6149092
2024-01-16 21:33:05 UTC	2783	IN	Data Raw: 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6c 6f 61 64 65 72 2d 62 61 6c 6c 73 7b 77 69 64 74 68 3a 32 38 70 78 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6c 6f 61 64 65 72 2d 62 61 6c 6c 73 3e 63 69 72 63 6c 65 7b 66 69 6c 6c 3a 23 34 37 34 36 34 37 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6c 6f 61 64 65 72 2d 62 61 6c 6c 73 2d 2d 76 69 73 69 62 6c 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6c 6f 61 64 65 72 2d 62 61 6c 6c 73 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6c 6f 61 64 65 72 2d 62 61 6c 6c 73 2d 2d 76 69 73 69 62 6c 65 20 63 69 72 63 6c 65 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 Data Ascii: .drift-widget-loader-balls{width:28px;visibility:hidden}.drift-widget-loader-balls>circle{fill:#474647}.drift-widget-loader-balls--visible{visibility:visible}.drift-widget-loader-balls.drift-widget-loader-balls--visible circle:first-of-type{-webkit-animat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.18	49884	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:05 UTC	910	OUT	GET /core/assets/js/0.0b2ebd4a.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:05 UTC	992	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 8798 Connection: close Server: istio-envoy Date: Sat, 04 Nov 2023 22:01:52 GMT Last-Modified: Fri, 03 Nov 2023 16:05:56 GMT ETag: "c5efcdc9e465604f32cf24af10fd6c13" x-amz-server-side-encryption: AES256 x-amz-version-id: 1JXVsDt8MqcRySC6MKzu.JsiRxDElWu8 Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 66 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 071f5fea9cc276d1769e252ea33022fa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: Wu6ZAtq6DMRJpGrliIhBkBMhEGQ38zzKansiawETwZfEE2T1MEoJSQ== Age: 6305473
2024-01-16 21:33:05 UTC	8798	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 30 5d 2c 7b 4c 61 47 41 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 4d 61 70 29 72 65 74 75 72 6e 20 4d 61 70 3b 66 75 6e 63 74 69 6f 6e 20 67 65 74 49 6e 64 65 78 28 65 2c 74 29 7b 76 61 72 20 6e 3d 2d 31 3b 72 65 74 75 72 6e 20 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 5b 30 5d 3d 3d 3d 74 26 26 28 6e 3d 72 2c 21 30 29 7d 29 2c 6e 7d 72 65 74 75 72 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[0],{LaGA:function(e,t,n){"use strict";(function(e){var n=function(){if("undefined"!==typeof Map)return Map;function getIndex(e,t){var n=-1;return e.some(function(e,r){return e[0]===t&&(n=r,!0)}),n}retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.18	49883	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:05 UTC	911	OUT	GET /core/assets/js/27.01c2bea5.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:05 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 35483 Connection: close Server: istio-envoy Date: Sun, 05 Nov 2023 16:07:56 GMT Last-Modified: Fri, 03 Nov 2023 16:05:57 GMT ETag: "04a233a42dcf8c50a83bfecea8ba552d" x-amz-server-side-encryption: AES256 x-amz-version-id: lnP1ic02CooYqfXmclE4HZd_B3HetLMN Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 95 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f52a6d89da5cd85d46c2c4e4af9acf1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: KTCZcsk9hwwCZyTb32jn31wBqy_eiT1zx5M6VlNwvSammipk5N56hw== Age: 6240309
2024-01-16 21:33:05 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 37 5d 2c 7b 22 33 37 58 6a 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 6d 61 6b 65 46 6c 61 74 7d 29 3b 76 61 72 20 72 3d 6e 28 22 77 42 6c 6c 22 29 3b 66 75 6e 63 74 69 6f 6e 20 5f 6d 61 6b 65 46 6c 61 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 66 6c 61 74 74 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 6f 2c 69 2c 73 3d 5b 5d 2c 61 3d 30 2c 63 3d 74 2e 6c 65 6e 67 74 68 3b 61 3c 63 3b 29 7b 69 66 28 4f 62 6a 65 63 74 28 72 2e 61 29 28 74 5b 61 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[27],{"37Xj":function(e,t,n){"use strict";n.d(t,"a",function(){return _makeFlat});var r=n("wBll");function _makeFlat(e){return function flatt(t){for(var n,o,i,s=[],a=0,c=t.length;a<c;){if(Object(r.a)(t[a
2024-01-16 21:33:05 UTC	16384	IN	Data Raw: 72 3b 73 77 69 74 63 68 28 6e 29 7b 63 61 73 65 20 74 68 69 73 2e 4b 49 4e 44 53 2e 70 75 73 68 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 64 65 63 6f 64 65 50 75 73 68 28 65 2c 74 2c 72 29 3b 63 61 73 65 20 74 68 69 73 2e 4b 49 4e 44 53 2e 72 65 70 6c 79 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 64 65 63 6f 64 65 52 65 70 6c 79 28 65 2c 74 2c 72 29 3b 63 61 73 65 20 74 68 69 73 2e 4b 49 4e 44 53 2e 62 72 6f 61 64 63 61 73 74 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 64 65 63 6f 64 65 42 72 6f 61 64 63 61 73 74 28 65 2c 74 2c 72 29 7d 7d 2c 64 65 63 6f 64 65 50 75 73 68 3a 66 75 6e 63 74 69 6f 6e 20 64 65 63 6f 64 65 50 75 73 68 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 74 2e 67 65 74 55 69 6e 74 38 28 31 29 2c 6f 3d 74 2e 67 65 74 55 69 6e 74 38 28 32 29 2c 69 3d Data Ascii: r;switch(n){case this.KINDS.push:return this.decodePush(e,t,r);case this.KINDS.reply:return this.decodeReply(e,t,r);case this.KINDS.broadcast:return this.decodeBroadcast(e,t,r)}},decodePush:function decodePush(e,t,n){var r=t.getUint8(1),o=t.getUint8(2),i=
2024-01-16 21:33:05 UTC	2715	IN	Data Raw: 72 6f 70 73 2c 74 3d 65 2e 6d 65 73 73 61 67 65 2c 72 3d 65 5b 22 61 72 69 61 2d 6c 69 76 65 22 5d 2c 6f 3d 65 2e 61 6e 6e 6f 75 6e 63 65 41 73 73 65 72 74 69 76 65 2c 69 3d 65 2e 61 6e 6e 6f 75 6e 63 65 50 6f 6c 69 74 65 3b 22 61 73 73 65 72 74 69 76 65 22 3d 3d 3d 72 26 26 6f 28 74 7c 7c 22 22 2c 70 28 29 28 29 29 2c 22 70 6f 6c 69 74 65 22 3d 3d 3d 72 26 26 69 28 74 7c 7c 22 22 2c 70 28 29 28 29 29 7d 2c 41 6e 6e 6f 75 6e 63 65 72 4d 65 73 73 61 67 65 5f 70 6f 73 73 69 62 6c 65 43 6f 6e 73 74 72 75 63 74 6f 72 52 65 74 75 72 6e 28 6e 2c 74 29 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 41 6e 6e 6f 75 6e 63 65 72 4d 65 73 73 61 67 65 5f 69 6e 68 65 72 69 74 73 28 65 2c 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 Data Ascii: rops,t=e.message,r=e["aria-live"],o=e.announceAssertive,i=e.announcePolite;"assertive"===r&&o(t\|\|"",p()()),"polite"===r&&i(t\|\|"",p()())},AnnouncerMessage_possibleConstructorReturn(n,t)}return function AnnouncerMessage_inherits(e,t){if("function"!==typeof

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.18	49885	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:05 UTC	911	OUT	GET /core/assets/js/28.0bf965fa.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:05 UTC	992	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 15101 Connection: close Server: istio-envoy Date: Thu, 11 Jan 2024 23:23:21 GMT Last-Modified: Thu, 11 Jan 2024 23:20:33 GMT ETag: "80f13d7001aac5b9753482c8ce0c34e1" x-amz-server-side-encryption: AES256 x-amz-version-id: 3WVu8gQc9AXsqIDUf8489ibBEY.n2dci Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 16 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e4063174e49a72dbf23ed047ff7d7c56.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: PQjmDTIouhtsUlYDVRVqZEitAcE4j7_h77LKA6kCiIRSM5hjunZEaA== Age: 425384
2024-01-16 21:33:05 UTC	15101	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 38 5d 2c 7b 22 2b 4d 48 77 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 3d 6e 28 22 45 52 6b 50 22 29 2c 61 3d 6e 2e 6e 28 63 29 3b 74 2e 61 3d 66 75 6e 63 74 69 6f 6e 20 46 69 6c 6c 65 72 45 6c 65 6d 65 6e 74 28 29 7b 72 65 74 75 72 6e 20 61 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 22 61 72 69 61 2d 68 69 64 64 65 6e 22 3a 21 30 2c 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 22 65 78 69 74 69 6e 67 20 64 72 69 66 74 20 77 69 64 67 65 74 22 2c 72 6f 6c 65 3a 22 62 75 74 74 6f 6e 22 2c 74 61 62 49 6e 64 65 78 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[28],{"+MHw":function(e,t,n){"use strict";var c=n("ERkP"),a=n.n(c);t.a=function FillerElement(){return a.a.createElement("div",{"aria-hidden":!0,"aria-label":"exiting drift widget",role:"button",tabIndex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.18	49887	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:05 UTC	622	OUT	GET /core/assets/js/37.fba521ea.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1705440768503 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:06 UTC	992	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 3121 Connection: close Server: istio-envoy Date: Tue, 19 Dec 2023 17:25:02 GMT Last-Modified: Tue, 19 Dec 2023 16:15:24 GMT ETag: "deb91ed165197613da3fac3d4f67edf9" x-amz-server-side-encryption: AES256 x-amz-version-id: yjKQYZO7C1D0av2terpN.3WV3CPoW8Ab Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 19 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 6ecf35677ede41c0a96f262ec39b4894.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: KxOSfJiDGoIPRGMw0E5gqp2k_R6H1OQUko43l3jSxHpsvgHnDFhLVw== Age: 2434084
2024-01-16 21:33:06 UTC	3121	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 37 5d 2c 7b 22 32 41 4f 33 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 72 28 74 29 3b 76 61 72 20 63 3d 61 28 22 6d 6a 32 4f 22 29 2c 6e 3d 61 2e 6e 28 63 29 2c 72 3d 61 28 22 37 53 4d 31 22 29 2c 69 3d 61 28 22 52 71 77 78 22 29 2c 6c 3d 61 28 22 51 74 6c 5a 22 29 2c 6f 3d 61 28 22 4d 79 38 55 22 29 2c 73 3d 61 28 22 42 6a 72 65 22 29 2c 75 3d 61 28 22 49 4c 51 46 22 29 2c 64 3d 61 28 22 4b 37 69 30 22 29 2c 66 3d 61 28 22 45 52 6b 50 22 29 2c 62 3d 61 2e 6e 28 66 29 2c 70 3d 61 28 22 75 44 66 49 22 29 2c 6d 3d 61 28 22 41 44 47 43 22 29 2c Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{"2AO3":function(e,t,a){"use strict";a.r(t);var c=a("mj2O"),n=a.n(c),r=a("7SM1"),i=a("Rqwx"),l=a("QtlZ"),o=a("My8U"),s=a("Bjre"),u=a("ILQF"),d=a("K7i0"),f=a("ERkP"),b=a.n(f),p=a("uDfI"),m=a("ADGC"),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.18	49888	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:05 UTC	911	OUT	GET /core/assets/js/25.cc73c6f2.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n9f4k7sdmsma&eId=n9f4k7sdmsma&region=US&forceShow=false&skipCampaigns=false&sessionId=e0d13678-d33f-4096-b643-f55f18875d7b&sessionStarted=1705440781.741&campaignRefreshToken=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189&hideController=false&pageLoadStartTime=1705440768503&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.signable.us%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:06 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 94002 Connection: close Server: istio-envoy Date: Wed, 20 Dec 2023 02:32:25 GMT Last-Modified: Tue, 19 Dec 2023 16:15:24 GMT ETag: "5e4d6de1177f513ec1da7f274b4849e3" x-amz-server-side-encryption: AES256 x-amz-version-id: N6sZxMaFNrahq2FYpdj.znFvH42iiNZc Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 67 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 81f6e2ac3fa39dd60cef7bf9b26cb306.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: iwf7QBqdMOkJTasKzX9VEwh9wre5Sm0vXVBcgZEkNsn24ZdmhbsluA== Age: 2401241
2024-01-16 21:33:06 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 35 5d 2c 7b 22 31 6b 75 78 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 29 3b 76 61 72 20 61 3d 6e 28 22 6d 6a 32 4f 22 29 2c 72 3d 6e 2e 6e 28 61 29 2c 63 3d 6e 28 22 37 53 4d 31 22 29 2c 6f 3d 6e 28 22 51 74 6c 5a 22 29 2c 69 3d 6e 28 22 49 4c 51 46 22 29 2c 73 3d 6e 28 22 78 77 54 6f 22 29 2c 75 3d 6e 28 22 32 58 59 36 22 29 2c 6c 3d 6e 28 22 4c 56 63 58 22 29 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 4f 62 6a 65 63 74 28 63 2e 61 29 28 72 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[25],{"1kux":function(e,t,n){"use strict";n.d(t,"a",function(){return d});var a=n("mj2O"),r=n.n(a),c=n("7SM1"),o=n("QtlZ"),i=n("ILQF"),s=n("xwTo"),u=n("2XY6"),l=n("LVcX"),d=function(){var e=Object(c.a)(r
2024-01-16 21:33:06 UTC	16384	IN	Data Raw: 3d 4f 62 6a 65 63 74 28 43 65 2e 61 29 28 63 29 3f 76 6f 69 64 20 30 3a 63 2c 6c 3d 4f 62 6a 65 63 74 28 65 65 2e 61 29 28 22 22 2c 5b 22 70 61 67 65 22 2c 22 68 72 65 66 22 5d 2c 6f 29 2c 64 3d 4f 62 6a 65 63 74 28 65 65 2e 61 29 28 7b 7d 2c 5b 22 63 6f 6e 76 65 72 73 61 74 69 6f 6e 73 22 5d 2c 6e 29 3b 72 65 74 75 72 6e 7b 73 65 73 73 69 6f 6e 49 64 3a 72 2c 6c 6f 63 61 74 69 6f 6e 3a 75 2c 70 61 67 65 55 72 6c 3a 6c 2c 61 73 73 69 67 6e 65 64 41 67 65 6e 74 49 64 3a 69 2c 68 61 73 48 61 64 43 6f 6e 76 65 72 73 61 74 69 6f 6e 73 3a 21 4f 62 6a 65 63 74 28 43 65 2e 61 29 28 64 29 2c 69 6e 62 6f 78 49 64 3a 4f 62 6a 65 63 74 28 65 65 2e 61 29 28 76 6f 69 64 20 30 2c 5b 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 2c 22 69 6e 62 6f 78 49 64 22 5d 2c 61 29 Data Ascii: =Object(Ce.a)(c)?void 0:c,l=Object(ee.a)("",["page","href"],o),d=Object(ee.a)({},["conversations"],n);return{sessionId:r,location:u,pageUrl:l,assignedAgentId:i,hasHadConversations:!Object(Ce.a)(d),inboxId:Object(ee.a)(void 0,["configuration","inboxId"],a)
2024-01-16 21:33:06 UTC	16384	IN	Data Raw: 65 63 74 28 65 65 2e 61 29 28 22 22 2c 5b 22 70 61 67 65 22 2c 22 68 72 65 66 22 5d 2c 74 29 2c 72 65 66 65 72 72 65 72 3a 4f 62 6a 65 63 74 28 65 65 2e 61 29 28 22 22 2c 5b 22 70 61 67 65 22 2c 22 72 65 66 65 72 72 65 72 22 5d 2c 74 29 2c 74 69 74 6c 65 3a 4f 62 6a 65 63 74 28 65 65 2e 61 29 28 22 22 2c 5b 22 70 61 67 65 22 2c 22 74 69 74 6c 65 22 5d 2c 74 29 2c 70 61 67 65 4e 61 6d 65 3a 65 7c 7c 22 22 7d 2c 4f 62 6a 65 63 74 28 54 2e 62 29 28 6e 29 3b 63 61 73 65 20 35 3a 63 61 73 65 22 65 6e 64 22 3a 72 65 74 75 72 6e 20 61 2e 73 74 6f 70 28 29 7d 7d 2c 5f 63 61 6c 6c 65 65 32 29 7d 29 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 74 72 61 63 6b 50 61 67 65 4c 6f 61 64 45 76 65 6e 74 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 74 Data Ascii: ect(ee.a)("",["page","href"],t),referrer:Object(ee.a)("",["page","referrer"],t),title:Object(ee.a)("",["page","title"],t),pageName:e\|\|""},Object(T.b)(n);case 5:case"end":return a.stop()}},_callee2)}));return function trackPageLoadEvent(t){return e.apply(t
2024-01-16 21:33:06 UTC	16384	IN	Data Raw: 22 77 61 72 6e 22 7d 29 3b 63 61 73 65 20 31 36 3a 63 61 73 65 22 65 6e 64 22 3a 72 65 74 75 72 6e 20 63 2e 73 74 6f 70 28 29 7d 7d 2c 5f 63 61 6c 6c 65 65 36 2c 6e 75 6c 6c 2c 5b 5b 33 2c 31 33 5d 5d 29 7d 29 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 69 64 65 6e 74 69 66 79 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 28 29 2c 64 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 4f 62 6a 65 63 74 28 6f 2e 61 29 28 63 2e 61 2e 6d 61 72 6b 28 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 37 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 63 2e 61 2e 77 72 61 70 28 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 37 24 28 6e 29 7b 66 6f 72 28 3b 3b 29 73 77 69 74 63 68 28 Data Ascii: "warn"});case 16:case"end":return c.stop()}},_callee6,null,[[3,13]])}));return function identify(t){return e.apply(this,arguments)}}(),dn=function(){var e=Object(o.a)(c.a.mark(function _callee7(e){var t;return c.a.wrap(function _callee7$(n){for(;;)switch(
2024-01-16 21:33:06 UTC	16384	IN	Data Raw: 68 61 6e 6e 65 6c 4e 61 6d 65 3a 74 68 69 73 2e 5f 63 68 61 6e 6e 65 6c 4e 61 6d 65 2c 6f 72 67 49 64 3a 74 2c 73 6f 63 6b 65 74 41 75 74 68 3a 61 7d 29 3b 63 61 73 65 20 31 39 3a 69 66 28 74 68 69 73 2e 5f 63 68 61 6e 6e 65 6c 3d 63 2e 73 65 6e 74 2c 74 68 69 73 2e 5f 66 69 72 65 43 68 61 6e 6e 65 6c 43 6f 6e 6e 65 63 74 65 64 45 76 65 6e 74 28 22 75 73 65 72 22 2c 74 68 69 73 2e 5f 63 6f 6e 6e 65 63 74 69 6f 6e 54 79 70 65 2c 74 68 69 73 2e 5f 63 68 61 6e 6e 65 6c 29 2c 21 74 68 69 73 2e 5f 63 68 61 6e 6e 65 6c 29 7b 63 2e 6e 65 78 74 3d 32 34 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 74 68 69 73 2e 70 6f 73 74 43 6f 6e 6e 65 63 74 28 29 2c 63 2e 61 62 72 75 70 74 28 22 72 65 74 75 72 6e 22 2c 74 68 69 73 2e 5f 73 6f 63 6b 65 74 29 3b 63 61 73 65 20 32 Data Ascii: hannelName:this._channelName,orgId:t,socketAuth:a});case 19:if(this._channel=c.sent,this._fireChannelConnectedEvent("user",this._connectionType,this._channel),!this._channel){c.next=24;break}return this.postConnect(),c.abrupt("return",this._socket);case 2
2024-01-16 21:33:06 UTC	13075	IN	Data Raw: 74 69 6f 6e 28 29 2c 69 3d 21 4f 62 6a 65 63 74 28 7a 2e 6d 29 28 74 29 2c 72 3f 65 2e 5f 64 69 73 70 61 74 63 68 28 4f 62 6a 65 63 74 28 57 2e 6b 29 28 7b 64 65 62 75 67 4c 6f 67 3a 22 46 69 72 65 64 20 61 20 6e 65 77 20 64 72 69 66 74 6c 69 6e 6b 20 63 6f 6e 76 65 72 73 61 74 69 6f 6e 2c 20 77 69 6c 6c 20 73 6b 69 70 20 70 6c 61 79 62 6f 6f 6b 20 74 61 72 67 65 74 69 6e 67 22 2c 6f 72 64 65 72 3a 31 7d 29 29 3a 65 2e 65 76 61 6c 75 61 74 65 41 63 74 69 76 65 43 6f 6e 76 65 72 73 61 74 69 6f 6e 44 61 74 61 28 74 2c 6e 29 2c 73 3d 65 2e 5f 70 61 72 61 6d 73 2e 73 6b 69 70 43 61 6d 70 61 69 67 6e 73 7c 7c 72 7c 7c 6f 7c 7c 69 2c 63 2e 6e 65 78 74 3d 31 32 2c 65 2e 65 78 65 63 75 74 65 57 69 64 67 65 74 54 61 72 67 65 74 69 6e 67 28 6e 75 6c 6c 3d 3d 3d 61 Data Ascii: tion(),i=!Object(z.m)(t),r?e._dispatch(Object(W.k)({debugLog:"Fired a new driftlink conversation, will skip playbook targeting",order:1})):e.evaluateActiveConversationData(t,n),s=e._params.skipCampaigns\|\|r\|\|o\|\|i,c.next=12,e.executeWidgetTargeting(null===a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.18	49886	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:06 UTC	390	OUT	GET /wp-content/uploads/graphic_document_tracking.png HTTP/1.1 Host: www.signable.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:06 UTC	368	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:33:06 GMT Content-Type: image/png Content-Length: 647526 Connection: close Last-Modified: Wed, 02 Aug 2023 13:20:12 GMT ETag: "9e166-601f0860367a9" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT X-CDN-C: all Accept-Ranges: bytes
2024-01-16 21:33:06 UTC	16016	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 02 ca 08 06 00 00 00 a1 b0 7b 6d 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 04 f5 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 30 2d 63 30 30 31 20 37 39 2e 63 30 32 30 34 62 32 64 65 66 2c 20 32 30 32 33 2f 30 32 2f 30 32 2d 31 32 3a 31 34 3a 32 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 Data Ascii: PNGIHDR{mpHYs%%IR$iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2def, 2023/02/02-12:14:24 "> <rd
2024-01-16 21:33:06 UTC	16384	IN	Data Raw: b2 e4 39 27 4c 53 c6 34 49 09 ba cd 66 ab a0 55 4a bc 39 2f ae d7 20 60 8c 11 2f 5e be c2 61 fc 51 bc fc f8 eb 78 fc f4 29 1e bd f7 15 5c bd f9 0e 76 57 4f 41 c3 16 9c 0f 5a bb 5c e2 e5 a1 bc 50 32 86 37 9b 67 54 4f 9c d6 6a 6b 87 5e 45 4c d8 ca f4 a1 cc 61 d0 43 85 61 d8 48 82 3e 2f 9e 05 56 5e cd 0e 7c 00 cd a8 ae c2 6d 72 6d fb e3 51 fe 03 dd a7 2c 8b b9 65 71 2f f9 37 34 24 c8 f8 0f ca d3 96 30 d2 ac f1 ed 78 ed 73 79 07 52 37 3e 78 8f cd 66 2b 73 ed 03 86 4d c0 66 08 70 de 63 73 71 89 dd ee 42 5c da 7d 40 f0 62 39 df 6c 06 b8 e0 f5 d0 42 33 bf 7b 49 04 e7 e8 18 9c 3b 93 53 ed f7 e8 e0 52 0f 4c ad 8c 9a 85 32 25 3d 3c 89 53 75 65 8f 9a b8 4f f6 36 2b c9 89 e6 80 0d 8d 7c db bc da 0a 8b bc a6 4c b2 e7 96 3f 66 66 dd a7 a3 77 73 66 cf 9c ff 17 ce e1 39 Data Ascii: 9'LS4IfUJ9/ `/^aQx)\vWOAZ\P27gTOjk^ELaCaH>/V^\|mrmQ,eq/74$0xsyR7>xf+sMfpcsqB\}@b9lB3{I;SRL2%=<SueO6+\|L?ffwsf9
2024-01-16 21:33:06 UTC	16384	IN	Data Raw: af ae 65 3e 7c d0 5a f0 1e 5f 7e e7 6d 04 22 3c be 7a 8c af 7d f8 1c 2f 5f de 22 67 60 a3 79 3c 64 7b ac bc ca a0 7a b8 85 1a 06 63 15 04 c4 82 2c e1 11 52 8e 4f d6 33 b3 e4 08 48 60 2d a7 a8 a1 18 26 c3 2c 96 6e 62 29 a1 77 b4 26 ca 93 44 04 f2 04 e7 07 0c 9b 6d 29 9b 26 de 14 41 4b f5 79 58 d9 4d af f9 46 3c 79 dd eb 21 21 24 44 c8 54 bd 26 ac 0f 71 52 e1 e6 ef 80 6d 12 fa 77 84 9b bf 28 6a 49 97 64 85 b9 b8 b8 5b f6 7a cb 9f 30 c5 a4 fc 2d 7b b4 84 52 50 b9 77 1c 1a c4 a5 cf 5c ac e4 4e e7 92 cb 9e 24 04 d6 43 4f 3b 50 29 a1 32 54 b3 b7 5b 89 35 db fb 64 0f 92 c3 08 e3 63 22 c2 34 de e3 d7 fe da 5f 8f ef fc 75 ff 28 7e f8 3f f8 f7 00 7f 07 8c 2f b0 72 fd 77 01 fc 16 00 7f 08 c0 df 5d 7b f0 17 fa 6a 01 fa 6f 25 a2 7f 00 c0 69 a5 ef 94 52 34 6f 63 fe ce Data Ascii: e>\|Z_~m"<z}/_"g`y<d{zc,RO3H`-&,nb)w&Dm)&AKyXMF<y!!$DT&qRmw(jId[z0-{RPw\N$CO;P)2T[5dc"4_u(~?/rw]{jo%iR4oc
2024-01-16 21:33:06 UTC	16384	IN	Data Raw: 7e c5 00 24 eb cd 68 35 8e 2c 22 85 66 10 77 8c e0 a5 71 b2 22 43 cc ae 16 ff 4b 4e f1 20 28 0b 62 1c ba b3 3d d6 49 9a 40 eb ac 10 c4 79 17 51 32 3e ce f9 01 36 9f f6 7a bc 87 e8 ed 1f b8 2f 44 99 0d 23 03 9c 00 3d f2 46 90 d7 fb 76 38 10 d9 48 36 36 92 e6 50 25 c2 c8 30 14 06 e3 6b 18 38 51 20 a1 a7 e2 00 f9 80 10 a7 c2 a4 2e c5 8b fe 75 f4 73 10 e3 44 79 0c 8b ef c1 cd 8f f7 5d f1 3f 01 fe 93 bf fd b7 ff 76 ff c3 1f fe 30 87 b2 94 65 f9 35 1f 78 b8 6c fb da bf ae a0 f6 31 02 e7 b7 5d be a9 67 7d 8c f2 f6 75 eb fd a6 0c 21 5f 47 39 f9 98 3a ff 38 df df 43 cb b7 d1 e7 3f ee f2 6d 29 59 7f 92 fa ff c7 b5 6e be ad 7a 1f d7 e3 c3 ca e3 7a dc 5f d7 e8 ef d8 3b 92 e4 76 b2 10 e5 49 b1 83 e2 88 08 e0 15 d6 3a ba ae a5 2c 0b 8c 29 71 4e bc 0a 1a 85 0b 10 b4 26 Data Ascii: ~$h5,"fwq"CKN (b=I@yQ2>6z/D#=Fv8H66P%0k8Q .usDy]?v0e5xl1]g}u!_G9:8C?m)Ynzz_;vI:,)qN&
2024-01-16 21:33:06 UTC	16384	IN	Data Raw: 99 12 2a 04 61 74 27 0c 0c f3 21 44 38 71 9c b3 c9 38 a4 55 66 cd 57 80 32 7a f0 b6 c6 67 a6 f7 21 97 49 e8 8b 52 60 ad 43 29 89 43 96 94 6f d0 28 43 55 75 94 75 41 55 48 5a b5 e4 fd 57 3a e4 36 d9 5e 62 d7 9d 17 4f b1 eb 7a bc 9d b3 38 5e 70 74 34 67 6a 27 ac 8a 46 c8 e0 7c a0 34 0a 61 27 97 b1 0f ce d1 3a 8b 2f 13 a9 1d d4 75 cd 62 21 39 cd 37 eb 0d ab cd 86 db d5 86 2f df 5c e0 f1 7c 27 04 ce ce cf a2 37 58 3c e1 21 04 9a f5 0a ef 3c c7 4f 9f f1 d9 77 bf c3 cf 7f f4 87 14 75 c1 93 67 4f 68 36 1b 14 81 ba ae a8 8c a6 ae 2a 36 4d 1b 3d c7 81 f5 7a cd e9 d9 29 55 59 d0 76 3d 7f f4 b3 5b 7e e7 77 fe 15 bf f5 5b 7f 81 e9 64 c2 cd d5 05 4a 2b ea c9 04 db 77 2c 6f af 30 85 e1 e8 e9 13 6e 6f 6e b8 7e f3 86 67 2f 3f a3 ed 5a 8e 8f a6 fc ca 0f 3e e7 7a b5 a1 73 Data Ascii: at'!D8q8UfW2zg!IR`C)Co(CUuuAUHZW:6^bOz8^pt4gj'F\|4a':/ub!97/\\|'7X<!<OwugOh66M=z)UYv=[~w[dJ+w,o0non~g/?Z>zs
2024-01-16 21:33:07 UTC	16384	IN	Data Raw: 1c 4f 67 8a a2 e4 1c ce ac b7 2b ea a6 62 b3 7d 03 c0 f3 d3 13 9b ed 96 37 6f b6 84 10 f9 f2 e5 0b 22 86 e5 6a 89 35 96 d7 d7 5d 3b ef a6 a9 b5 dc 99 b1 84 94 cc cf 27 ab b7 31 96 90 12 9e c5 54 56 2c 4a 6c e9 27 2b 26 ae 28 52 9c bc 68 1c b9 2f 94 87 50 1c fb 64 65 b6 46 cb 8b 15 de b0 2a 4b ca d2 e3 bd c7 1b 43 59 68 79 2c 89 42 e9 2d 8b b2 c0 9a 52 95 6f 4c cb 1c 1a 2b 6b 00 87 59 6a e4 71 f6 04 89 31 10 f2 9a 8b e0 6c d4 b2 73 8b 82 fd f1 4c 68 22 65 e1 33 2b 70 ac 1a aa 3a e8 21 83 08 4d 8a 19 5f 16 5e 79 c5 26 4b 79 8c 1a 7f ef 34 cc 23 a6 79 46 0c 22 9a c4 8c 68 28 8a a5 66 8d 4f 4a 62 44 63 f8 63 54 ab 36 de 13 43 83 f1 3a 87 26 85 27 e8 c1 9f 6b 0f f5 42 20 65 90 af 10 f1 29 6c 25 72 f8 cb 17 ac 18 b6 f7 1b 7e f7 c7 df 02 86 a2 34 c4 f8 9e d3 f9 Data Ascii: Og+b}7o"j5];'1TV,Jl'+&(Rh/PdeF*KCYhy,B-RoL+kYjq1lsLh"e3+p:!M_^y&Ky4#yF"h(fOJbDccT6C:&'kB e)l%r~4
2024-01-16 21:33:07 UTC	16384	IN	Data Raw: 39 85 70 0e df 7d d8 a6 de ef b7 19 eb f3 9a 12 d0 6f 33 07 d3 b5 7b df 32 87 3e 3f ce e1 6c ac 4d 9f 1f 87 7d ff 12 7e 1c eb 6f ec ba c6 13 fd 7b 43 58 86 70 fe 35 f9 71 8e e7 e6 70 78 ed f3 d8 1c 86 f7 6f e5 c7 a9 fd af ff 7c 4c 39 35 cc c3 07 5f 8f f7 ad fc 38 c7 cf c3 36 63 74 35 35 df b1 b6 73 df c7 e6 f0 2d fc 78 6d cf fd 25 70 0c df b5 0c de 33 74 8a a0 e9 dc aa b3 bb 6b 6b f9 cc 96 33 db 25 4d 1b ba ce aa 70 a6 c2 73 2e 69 96 d5 2f ed 23 12 a3 b9 88 0d cf fd 85 10 92 40 d8 41 d7 cf dc de b7 52 0c ff eb 5f 7d 85 bb 9d 7b 4f 51 1f c2 9c 63 e1 fb 89 8d da 18 68 d3 9f a3 e9 59 48 a4 75 0f ee e3 11 a1 55 90 f2 b8 b6 a7 b4 66 a5 34 27 c1 b3 a9 46 af 31 06 d7 0a 79 19 de 5e bf 0a 6c b7 90 d2 cd 0b 0c 88 24 0b 8f a1 f5 2e 6f 09 be 47 0d 46 e3 4f d5 0b 40 Data Ascii: 9p}o3{2>?lM}~o{CXp5qpxo\|L95_86ct55s-xm%p3tkk3%Mps.i/#@AR_}{OQchYHuUf4'F1y^l$.oGFO@
2024-01-16 21:33:07 UTC	16384	IN	Data Raw: 74 78 d1 c3 85 60 22 d6 aa 35 dc 90 43 29 74 6c e7 1c 55 dd 28 3e 53 62 3a ef 3d 4d 15 89 29 d1 a4 b5 a8 e5 55 84 ba a9 29 0b 75 a5 06 e1 5c 07 f6 87 23 12 85 ed dd 9a bb bb 2d a7 53 c5 e1 70 a2 a9 e1 b5 f4 6c d7 2b 56 cb 15 21 36 84 a6 c6 96 65 b2 0a 7b b6 9b 35 22 ea 32 ef 62 a9 b8 89 35 ab f5 86 d8 14 9c 8e 07 7e fe f4 09 ac e1 37 45 01 ce 72 78 3d 60 9f 1e 59 6e ef 30 18 de 7e 78 0b 12 68 ce 15 45 e9 d9 dc 6f d3 7e 65 f1 85 e3 70 3c 51 2e 17 6c ef 36 7c fe e9 67 0e bb 03 c7 c3 2b 7e bd 52 3a cc 49 35 45 d2 01 91 4d 87 4d 10 69 da 43 4c 83 25 45 e6 a4 3d 91 36 ef 86 ba 95 77 f5 cd 23 81 68 23 12 b4 a4 9a 20 34 b1 21 48 45 a0 22 4a d3 56 8c 28 92 72 ab b9 05 22 4d de cf 8d 60 8d a1 f0 05 85 f3 78 e7 29 ec 02 2b 9e d2 6a a6 75 ef 92 f5 5c b4 74 1a ce a4 Data Ascii: tx`"5C)tlU(>Sb:=M)U)u\#-Spl+V!6e{5"2b5~7Erx=`Yn0~xhEo~ep<Q.l6\|g+~R:I5EMMiCL%E=6w#h# 4!HE"JV(r"M`x)+ju\t
2024-01-16 21:33:07 UTC	16384	IN	Data Raw: a7 13 fb fd 8e dd 66 c3 fe e6 86 e3 e0 e9 4f 1d 29 e8 58 0f c3 90 43 8c 09 c7 be e7 c3 c3 91 fb 9b 27 b6 9b 16 44 63 be 47 93 68 37 3b bc 1f 88 29 d1 b6 3b 48 81 e3 f1 c0 4d 7c c5 fe f6 9e a1 1b f0 de 93 42 62 7f 73 cb f1 d4 91 22 0c 9d c7 b8 c0 ee e6 96 38 74 c4 21 b2 dd 35 c4 10 68 9b 96 94 34 da c1 d6 3a 4c df d3 7d f8 81 1e 04 dc dc e3 84 2c 84 aa bb 51 a4 7c 07 f4 a0 36 96 f6 93 60 82 e4 2f a9 88 d3 da b1 3a 3c e6 2c 4c a4 51 10 7d 05 7c 33 6a da 2e c9 64 6d b4 1e 00 ca 64 1f 2a b8 14 50 16 c7 b8 97 8d 87 44 79 16 a6 c9 b3 9c 57 eb b4 d5 62 47 b2 1b 04 26 61 73 58 b8 14 63 dd b1 53 b6 42 19 0f ce a4 ac 42 8a db 8e 1e e0 18 24 c6 7a 98 54 0f 90 29 a0 a5 e3 fe ff 65 48 66 89 d9 98 33 73 f3 e7 2f a5 25 61 89 c9 bd e9 ef 25 86 78 29 ff 1a 03 7d 89 89 5e Data Ascii: fO)XC'DcGh7;);HM\|Bbs"8t!5h4:L},Q\|6`/:<,LQ}\|3j.dmd*PDyWbG&asXcSBB$zT)eHf3s/%a%x)}^
2024-01-16 21:33:07 UTC	16384	IN	Data Raw: 74 a6 1f 1c 32 b3 92 19 b5 a9 56 77 4e d7 bc 6d 45 e3 3d 02 ab 7d fc 85 3b 07 66 9b 54 9d e6 39 e7 e5 14 dd ae 54 9f f0 54 f2 4c 7a aa b0 97 52 05 c0 91 b1 aa 6d 9b f6 9b 8c ef 91 e9 9f b6 75 6a 11 70 c6 ec 71 de 2f 63 df 9d 33 8f 32 79 36 35 1e 67 fa 9a 8c f5 4f cb 9a 17 ff 11 13 38 a3 2b 31 d2 37 37 ee 29 da 6e 15 b2 67 94 14 0b 86 2c f9 5f 5c 0b 32 21 4f ce 48 55 c6 bf 68 a7 26 da 31 28 fd 38 8e 79 69 f7 14 70 50 44 d8 6c b6 3c 3f 08 fb fd 2d fb fd 3e 97 25 55 a0 8c c5 57 d7 58 42 e8 54 3b 9d 53 d7 79 f5 3d 4e 4a 5c 39 10 6a 9a 16 e7 9a ac 71 97 da 5f 22 6a f2 6e 8d 68 18 32 62 d6 e8 93 d7 86 ce 0c fc 80 1f 3a 92 1f 20 c7 d8 2e 6d 31 62 88 de 13 bd 0a 7c 71 18 14 28 6e e8 49 3e 83 8f a5 54 91 e7 8d cb 3e e1 a8 86 3a 04 21 f9 93 f6 88 71 88 6b 88 4a 00 Data Ascii: t2VwNmE=};fT9TTLzRmujpq/c32y65gO8+177)ng,_\2!OHUh&1(8yipPDl<?->%UWXBT;Sy=NJ\9jq_"jnh2b: .m1b\|q(nI>T>:!qkJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.18	49889	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:06 UTC	637	OUT	GET /core/assets/css/3.07aa08a5.chunk.css HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1705440768503 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:06 UTC	963	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 7555 Connection: close Server: istio-envoy Date: Mon, 06 Nov 2023 13:25:12 GMT Last-Modified: Fri, 03 Nov 2023 16:05:55 GMT ETag: "189aeffd571884559dababa22c66d75a" x-amz-server-side-encryption: AES256 x-amz-version-id: I.gSjqIhr6nVmyfX14JQ3JhDJy2DazIm Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 22 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 687bf9bb2353af127d0a3c49056e960c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: xlE3PRcQPEozEXQqXICFnyqIgtvoj02W_PQiZk46OC4SoBZf7ENGag== Age: 6163674
2024-01-16 21:33:06 UTC	7555	IN	Data Raw: 2e 65 6d 6f 6a 69 2d 6d 61 72 74 2c 2e 65 6d 6f 6a 69 2d 6d 61 72 74 20 2a 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 7d 2e 65 6d 6f 6a 69 2d 6d 61 72 74 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 63 6f 6c 6f 72 3a 23 32 32 32 34 32 37 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 39 64 39 64 39 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 Data Ascii: .emoji-mart,.emoji-mart *{box-sizing:border-box;line-height:1.15}.emoji-mart{font-family:-apple-system,BlinkMacSystemFont,Helvetica Neue,sans-serif;font-size:16px;display:inline-block;color:#222427;border:1px solid #d9d9d9;border-radius:5px;background:#ff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.18	49892	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:06 UTC	637	OUT	GET /core/assets/css/1.12ba17b6.chunk.css HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1705440768503 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:06 UTC	965	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 45138 Connection: close Server: istio-envoy Date: Mon, 04 Sep 2023 15:31:38 GMT Last-Modified: Sat, 02 Sep 2023 21:37:05 GMT ETag: "3b8ba82e1bac13ee29e9764a55620d99" x-amz-server-side-encryption: AES256 x-amz-version-id: QR3WFQmFdb5S4LqsAqqLYvsu9fq15z26 Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 20 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 590897dc65a5ea6dcbac1c8ea98c65c4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: ACDFQ9m1C6E4iuqb8Ocw5rJKr1MMWLH4R47YjobBoAqVe6fIASo3Vg== Age: 11599288
2024-01-16 21:33:06 UTC	15419	IN	Data Raw: 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6e 61 6b 65 64 2d 62 75 74 74 6f 6e 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 65 6d 6f 6a 69 2d 62 61 63 6b 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 68 65 69 67 68 74 3a 33 32 70 78 3b 77 69 64 74 68 3a 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 34 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 31 36 70 78 3b 74 6f 70 3a 2d 31 30 30 30 30 30 70 78 3b 7a 2d 69 6e 64 65 78 3a 32 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 63 6f 6d 70 6f 73 65 72 2d 65 6d 6f 6a 69 2d 70 69 63 6b 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 74 74 6f 6d 3a 35 38 70 78 3b 72 69 67 68 74 3a 30 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 61 78 2d Data Ascii: .drift-widget-naked-button.drift-widget-emoji-back-button{background:#fff;height:32px;width:32px;padding-top:4px;position:absolute;left:16px;top:-100000px;z-index:2}.drift-widget-composer-emoji-picker{position:absolute;bottom:58px;right:0;height:auto;max-
2024-01-16 21:33:06 UTC	16384	IN	Data Raw: 7a 2d 62 6f 78 2d 66 6c 65 78 3a 31 3b 2d 6d 73 2d 66 6c 65 78 3a 31 20 31 3b 66 6c 65 78 3a 31 20 31 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 63 6f 6d 70 6f 73 65 72 2d 2d 74 65 78 74 2d 61 72 65 61 2c 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 63 6f 6d 70 6f 73 65 72 2d 61 63 74 69 6f 6e 73 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 63 6f 6d 70 6f 73 65 72 2d 61 63 74 69 6f 6e 73 7b 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 2d 6d 6f 7a 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 2d 6d 73 2d 66 Data Ascii: z-box-flex:1;-ms-flex:1 1;flex:1 1}.drift-widget-composer--text-area,.drift-widget-composer-actions{display:-webkit-flex;display:-moz-box;display:-ms-flexbox;display:flex}.drift-widget-composer-actions{-webkit-align-items:flex-end;-moz-box-align:end;-ms-f
2024-01-16 21:33:06 UTC	13335	IN	Data Raw: 6f 72 2d 74 79 70 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 37 31 65 62 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6d 65 73 73 61 67 65 2d 73 65 6e 64 65 72 2d 2d 41 47 45 4e 54 20 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6d 65 73 73 61 67 65 2d 2d 6d 65 74 61 2d 61 75 74 68 6f 72 2d 74 79 70 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 35 66 38 66 61 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6d 65 73 73 61 67 65 2d 2d 6d 65 74 61 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6d 65 73 73 61 67 65 2d 73 65 6e 64 65 72 2d 2d 45 4e 44 5f 55 53 45 52 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6d 65 73 73 61 67 65 2d 73 65 6e 64 65 72 2d 2d 45 4e 44 5f 55 53 45 52 2e 64 72 69 66 74 2d 77 69 64 67 65 Data Ascii: or-type{background:#0071eb}.drift-widget-message-sender--AGENT .drift-widget-message--meta-author-type{background:#f5f8fa}.drift-widget-message--meta.drift-widget-message-sender--END_USER{text-align:right}.drift-widget-message-sender--END_USER.drift-widge

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.18	49893	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:06 UTC	638	OUT	GET /core/assets/css/34.d13ab69b.chunk.css HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1705440768503 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:06 UTC	964	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 16394 Connection: close Server: istio-envoy Date: Fri, 03 Nov 2023 17:20:38 GMT Last-Modified: Fri, 03 Nov 2023 16:05:55 GMT ETag: "cd2168c34ad30fc16e40bb8888419c0b" x-amz-server-side-encryption: AES256 x-amz-version-id: pFWMvJB2j2wrLwpXYClAbSTx9Ncr0bnJ Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 30 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 46b3f244fe2a22dff3a717bf9da34d86.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: N4LEnVj2mvW6EKyERA7qhYSeAS145jM6nYT44KQzl8EOBmlfwhJbLg== Age: 6408748
2024-01-16 21:33:06 UTC	15420	IN	Data Raw: 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 68 65 61 64 65 72 2d 74 6f 70 2d 6c 69 6e 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 32 31 32 30 32 31 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 33 70 78 3b 6c 65 66 74 3a 30 3b 68 65 69 67 68 74 3a 38 70 78 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 68 65 61 64 65 72 2c 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 68 65 61 64 65 72 2d 74 6f 70 2d 6c 69 6e 65 7b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 20 35 70 78 20 30 20 30 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 20 35 70 78 20 30 20 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 20 35 70 78 20 30 20 30 7d 2e 64 72 69 66 74 2d 77 Data Ascii: .drift-widget-header-top-line{background:#212021;width:100%;position:absolute;top:-3px;left:0;height:8px}.drift-widget-header,.drift-widget-header-top-line{-webkit-border-radius:5px 5px 0 0;-moz-border-radius:5px 5px 0 0;border-radius:5px 5px 0 0}.drift-w
2024-01-16 21:33:06 UTC	974	IN	Data Raw: 74 65 58 28 31 30 30 25 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 31 30 30 25 29 3b 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 31 30 30 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 31 30 30 25 29 3b 6f 70 61 63 69 74 79 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 33 73 20 65 61 73 65 2c 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 33 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 36 35 2c 2e 38 34 2c 2e 34 34 2c 31 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 33 73 20 65 61 73 65 2c 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 Data Ascii: teX(100%);-ms-transform:translateX(100%);-o-transform:translateX(100%);transform:translateX(100%);opacity:0;background:#fff;-webkit-transition:opacity .3s ease,-webkit-transform .3s cubic-bezier(.165,.84,.44,1);transition:opacity .3s ease,-webkit-transfor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.18	49891	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:06 UTC	621	OUT	GET /core/assets/js/3.f50b964b.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1705440768503 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:06 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 54960 Connection: close Server: istio-envoy Date: Mon, 30 Oct 2023 14:21:16 GMT Last-Modified: Fri, 27 Oct 2023 17:57:48 GMT ETag: "1ac37bf2b93050f29058b66a9ad43e10" x-amz-server-side-encryption: AES256 x-amz-version-id: WnoLxDJxBJk0FP8juOJngYNhz0cuCuCX Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 19 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 28fca7284ad6e07382ad05b79a20cd6a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: 75I93qgBxUZBsDVH3c_OBKENaBAEbf_Z23m5VA7gQ6c5fXJrivDWLQ== Age: 6765110
2024-01-16 21:33:06 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 5d 2c 7b 22 2f 6d 44 47 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 22 56 42 6c 42 22 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 74 6f 53 70 61 63 65 43 61 73 65 28 65 29 7b 72 65 74 75 72 6e 20 72 28 65 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 57 5f 5d 2b 28 2e 7c 24 29 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3f 22 20 22 2b 74 3a 22 22 7d 29 2e 74 72 69 6d 28 29 7d 7d 2c 22 2f 76 66 37 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[3],{"/mDG":function(e,t,n){var r=n("VBlB");e.exports=function toSpaceCase(e){return r(e).replace(/[\W_]+(.\|$)/g,function(e,t){return t?" "+t:""}).trim()}},"/vf7":function(e,t,n){"use strict";Object.defi
2024-01-16 21:33:06 UTC	16384	IN	Data Raw: 2c 77 69 64 74 68 3a 22 31 70 78 22 2c 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 7d 29 2c 61 3d 66 75 6e 63 74 69 6f 6e 20 4d 65 73 73 61 67 65 42 6c 6f 63 6b 28 65 29 7b 76 61 72 20 74 3d 65 2e 6d 65 73 73 61 67 65 2c 6e 3d 65 5b 22 61 72 69 61 2d 6c 69 76 65 22 5d 3b 72 65 74 75 72 6e 20 6f 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 73 74 79 6c 65 3a 69 2c 72 6f 6c 65 3a 22 6c 6f 67 22 2c 22 61 72 69 61 2d 6c 69 76 65 22 3a 6e 7d 2c 74 7c 7c 22 22 29 7d 3b 61 2e 70 72 6f 70 54 79 70 65 73 3d 7b 7d 3b 76 61 72 20 6c 3d 61 3b 66 75 6e 63 74 69 6f 6e 20 5f 70 6f 73 73 69 62 6c 65 43 6f 6e 73 74 72 75 63 74 6f 72 52 65 74 75 72 6e 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 Data Ascii: ,width:"1px",position:"absolute"}),a=function MessageBlock(e){var t=e.message,n=e["aria-live"];return o.a.createElement("div",{style:i,role:"log","aria-live":n},t\|\|"")};a.propTypes={};var l=a;function _possibleConstructorReturn(e,t){if(!e)throw new Refere
2024-01-16 21:33:06 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 50 2e 63 75 72 72 65 6e 74 26 26 28 50 2e 63 75 72 72 65 6e 74 2e 66 69 6c 65 73 2e 6c 65 6e 67 74 68 7c 7c 28 4c 28 7b 74 79 70 65 3a 22 63 6c 6f 73 65 44 69 61 6c 6f 67 22 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 77 26 26 77 28 29 29 29 7d 2c 33 30 30 29 7d 3b 4f 62 6a 65 63 74 28 72 2e 75 73 65 45 66 66 65 63 74 29 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 66 6f 63 75 73 22 2c 56 2c 21 31 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 66 6f 63 75 73 22 2c 56 2c 21 31 29 7d 7d 2c 5b 50 2c 7a 2c 77 5d 29 3b 76 61 72 20 49 3d 4f Data Ascii: (function(){P.current&&(P.current.files.length\|\|(L({type:"closeDialog"}),"function"===typeof w&&w()))},300)};Object(r.useEffect)(function(){return window.addEventListener("focus",V,!1),function(){window.removeEventListener("focus",V,!1)}},[P,z,w]);var I=O
2024-01-16 21:33:06 UTC	6801	IN	Data Raw: 4f 76 65 72 3d 21 30 2c 74 68 69 73 2e 68 61 6e 64 6c 65 54 72 61 63 6b 4d 6f 75 73 65 45 6e 74 65 72 41 75 74 6f 48 69 64 65 28 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 54 72 61 63 6b 4d 6f 75 73 65 45 6e 74 65 72 41 75 74 6f 48 69 64 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 54 72 61 63 6b 4d 6f 75 73 65 45 6e 74 65 72 41 75 74 6f 48 69 64 65 28 29 7b 74 68 69 73 2e 70 72 6f 70 73 2e 61 75 74 6f 48 69 64 65 26 26 74 68 69 73 2e 73 68 6f 77 54 72 61 63 6b 73 28 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 54 72 61 63 6b 4d 6f 75 73 65 4c 65 61 76 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 54 72 61 63 6b 4d 6f 75 73 65 4c 65 61 76 65 28 29 7b 74 68 69 73 2e 74 72 61 63 6b 4d 6f 75 73 65 Data Ascii: Over=!0,this.handleTrackMouseEnterAutoHide()}},{key:"handleTrackMouseEnterAutoHide",value:function handleTrackMouseEnterAutoHide(){this.props.autoHide&&this.showTracks()}},{key:"handleTrackMouseLeave",value:function handleTrackMouseLeave(){this.trackMouse

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.18	49890	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:06 UTC	621	OUT	GET /core/assets/js/1.eb95d786.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1705440768503 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:06 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 54915 Connection: close Server: istio-envoy Date: Wed, 20 Dec 2023 02:32:25 GMT Last-Modified: Tue, 19 Dec 2023 16:15:23 GMT ETag: "905d835fcc30c0124bb904590c72e394" x-amz-server-side-encryption: AES256 x-amz-version-id: YGOZv4GUsbVyX.Gl6Fw8unhF7wdE_LTN Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 23 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f26a1d19b20e4cf5dd8998779bc5b1fc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: 0NOpvTaA-xtED1RzSj0-y0IpbBx5e4A3KSQLNiB1C5duVHgOh2Skug== Age: 2401241
2024-01-16 21:33:06 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 5d 2c 7b 22 2b 47 5a 69 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 7d 2c 22 32 56 72 57 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 7d 2c 22 38 65 4b 4c 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 61 28 22 6d 6a 32 4f 22 29 2c 72 3d 61 2e 6e 28 6e 29 2c 69 3d 61 28 22 37 53 4d 31 22 29 2c 63 3d 61 28 22 73 38 44 49 22 29 2c 6f 3d 61 28 22 4f 39 34 72 22 29 2c 73 3d 61 2e 6e 28 6f 29 2c 6c 3d 61 28 22 37 49 4b 6c 22 29 2c 64 3d 61 28 22 6c 45 32 39 22 29 2c 75 3d 61 28 22 45 52 6b 50 22 29 2c 6d 3d 61 2e 6e 28 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"+GZi":function(e,t,a){},"2VrW":function(e,t,a){},"8eKL":function(e,t,a){"use strict";var n=a("mj2O"),r=a.n(n),i=a("7SM1"),c=a("s8DI"),o=a("O94r"),s=a.n(o),l=a("7IKl"),d=a("lE29"),u=a("ERkP"),m=a.n(
2024-01-16 21:33:06 UTC	16384	IN	Data Raw: 7c 61 2e 63 6f 6e 74 65 6e 74 54 79 70 65 3d 3d 3d 5a 2e 63 2e 53 4d 53 5f 4e 55 4d 42 45 52 5f 52 45 51 55 45 53 54 45 44 7c 7c 61 2e 63 6f 6e 74 65 6e 74 54 79 70 65 3d 3d 3d 5a 2e 63 2e 53 4d 53 5f 4e 55 4d 42 45 52 5f 53 55 43 43 45 53 53 2c 57 3d 21 21 61 2e 62 6f 64 79 7c 7c 4a 2c 24 3d 43 26 26 4f 2c 65 65 3d 61 2e 61 74 74 61 63 68 6d 65 6e 74 73 26 26 61 2e 61 74 74 61 63 68 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 3b 69 66 28 21 57 26 26 21 24 26 26 21 65 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 61 65 3d 4f 62 6a 65 63 74 28 4b 2e 61 29 28 6e 75 6c 6c 2c 5b 22 63 72 65 61 74 65 64 41 74 22 5d 29 28 61 29 2c 6e 65 3d 4f 62 6a 65 63 74 28 4b 2e 61 29 28 6e 75 6c 6c 2c 5b 22 61 74 74 72 69 62 75 74 65 73 22 2c 22 67 65 6e 65 72 61 74 Data Ascii: \|a.contentType===Z.c.SMS_NUMBER_REQUESTED\|\|a.contentType===Z.c.SMS_NUMBER_SUCCESS,W=!!a.body\|\|J,$=C&&O,ee=a.attachments&&a.attachments.length>0;if(!W&&!$&&!ee)return null;var ae=Object(K.a)(null,["createdAt"])(a),ne=Object(K.a)(null,["attributes","generat
2024-01-16 21:33:06 UTC	16384	IN	Data Raw: 29 7d 7d 28 29 28 29 7d 2c 5b 74 2c 4e 5d 29 2c 4f 62 6a 65 63 74 28 62 2e 61 29 28 45 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 28 65 29 7d 29 3b 72 65 74 75 72 6e 20 6d 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 72 65 66 3a 45 2c 63 6c 61 73 73 4e 61 6d 65 3a 73 28 29 28 22 64 72 69 66 74 2d 77 69 64 67 65 74 2d 63 6f 6d 70 6f 73 65 72 2d 65 6d 6f 6a 69 2d 70 69 63 6b 65 72 22 2c 7b 22 64 72 69 66 74 2d 77 69 64 67 65 74 2d 63 6f 6d 70 6f 73 65 72 2d 65 6d 6f 6a 69 2d 70 69 63 6b 65 72 2d 2d 6f 70 65 6e 22 3a 74 2c 22 64 72 69 66 74 2d 77 69 64 67 65 74 2d 63 6f 6d 70 6f 73 65 72 2d 65 6d 6f 6a 69 2d 70 69 63 6b 65 72 2d 2d 66 75 6c 6c 22 3a 6a 2c 22 64 72 69 66 74 2d 77 69 64 67 65 74 2d 63 6f 6d 70 6f 73 65 72 2d 65 6d 6f Data Ascii: )}}()()},[t,N]),Object(b.a)(E,function(e){o(e)});return m.a.createElement("div",{ref:E,className:s()("drift-widget-composer-emoji-picker",{"drift-widget-composer-emoji-picker--open":t,"drift-widget-composer-emoji-picker--full":j,"drift-widget-composer-emo
2024-01-16 21:33:06 UTC	6756	IN	Data Raw: 74 2e 76 61 6c 75 65 29 2c 72 2e 6f 6e 43 68 61 6e 67 65 26 26 72 2e 6f 6e 43 68 61 6e 67 65 28 65 29 7d 2c 64 69 73 61 62 6c 65 64 3a 72 2e 64 69 73 61 62 6c 65 64 7d 29 29 2c 21 72 2e 64 69 73 61 62 6c 65 64 26 26 21 63 26 26 6d 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 2e 61 2c 7b 72 65 66 3a 6a 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 64 72 69 66 74 2d 77 69 64 67 65 74 2d 74 65 78 74 61 72 65 61 2d 2d 65 6d 6f 6a 69 2d 74 6f 67 67 6c 65 22 2c 6f 6e 43 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 20 6f 6e 45 6d 6f 6a 69 42 75 74 74 6f 6e 43 6c 69 63 6b 28 29 7b 72 2e 64 69 73 61 62 6c 65 64 7c 7c 76 28 21 70 29 7d 2c 64 69 73 61 62 6c 65 64 3a 72 2e 64 69 73 61 62 6c 65 64 2c 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 3a 70 2c 22 61 72 69 61 2d 6c Data Ascii: t.value),r.onChange&&r.onChange(e)},disabled:r.disabled})),!r.disabled&&!c&&m.a.createElement(s.a,{ref:j,className:"drift-widget-textarea--emoji-toggle",onClick:function onEmojiButtonClick(){r.disabled\|\|v(!p)},disabled:r.disabled,"aria-expanded":p,"aria-l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.18	49894	50.16.7.188	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:06 UTC	672	OUT	POST /widget_bootstrap/ping/v2 HTTP/1.1 Host: bootstrap.api.drift.com Connection: keep-alive Content-Length: 110 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:06 UTC	110	OUT	Data Raw: 70 69 6e 67 5f 63 6f 6e 74 65 78 74 3d 25 37 42 25 32 32 65 6d 62 65 64 49 64 25 32 32 25 33 41 25 32 32 6e 39 66 34 6b 37 73 64 6d 73 6d 61 25 32 32 25 32 43 25 32 32 70 61 67 65 55 72 6c 25 32 32 25 33 41 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 73 69 67 6e 61 62 6c 65 2e 75 73 25 32 46 25 32 32 25 37 44 Data Ascii: ping_context=%7B%22embedId%22%3A%22n9f4k7sdmsma%22%2C%22pageUrl%22%3A%22https%3A%2F%2Fwww.signable.us%2F%22%7D
2024-01-16 21:33:06 UTC	691	IN	HTTP/1.1 200 OK date: Tue, 16 Jan 2024 21:33:06 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: aec097a3936f4232 vary: Accept-Encoding content-length: 208 x-envoy-upstream-service-time: 2 server: istio-envoy connection: close
2024-01-16 21:33:06 UTC	208	IN	Data Raw: 7b 22 65 6d 62 65 64 49 64 22 3a 22 6e 39 66 34 6b 37 73 64 6d 73 6d 61 22 2c 22 66 61 6c 6c 62 61 63 6b 22 3a 74 72 75 65 2c 22 74 61 72 67 65 74 69 6e 67 45 76 61 6c 75 61 74 65 64 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 65 64 49 64 65 6e 74 69 74 79 53 74 61 74 75 73 22 3a 22 52 45 51 55 49 52 45 44 22 2c 22 64 65 6d 61 6e 64 42 61 73 65 54 6f 6b 65 6e 22 3a 6e 75 6c 6c 2c 22 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 73 22 3a 6e 75 6c 6c 2c 22 64 72 69 66 74 45 6e 67 61 67 65 56 65 72 69 66 69 63 61 74 69 6f 6e 55 55 49 44 22 3a 6e 75 6c 6c 2c 22 64 72 69 66 74 45 6e 67 61 67 65 44 6f 6d 61 69 6e 73 22 3a 6e 75 6c 6c 7d Data Ascii: {"embedId":"n9f4k7sdmsma","fallback":true,"targetingEvaluated":false,"signedIdentityStatus":"REQUIRED","demandBaseToken":null,"cookieDomains":null,"driftEngageVerificationUUID":null,"driftEngageDomains":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.18	49896	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:06 UTC	621	OUT	GET /core/assets/js/4.c6304c2e.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1705440768503 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:06 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 23376 Connection: close Server: istio-envoy Date: Tue, 19 Dec 2023 17:25:03 GMT Last-Modified: Tue, 19 Dec 2023 16:15:24 GMT ETag: "672c1436035fd059b992723cdedd3472" x-amz-server-side-encryption: AES256 x-amz-version-id: bmPbjvWFoSkY1.hjaxiT.CojmYdamaBg Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 17 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f5386598f013dd093e17be33d361f408.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: VSefWVVJd68e2rBY_FaGhaCH8VaqGnIE3FxQGWtO4iQ12r1f23n1iQ== Age: 2434083
2024-01-16 21:33:06 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 5d 2c 7b 22 2b 71 47 43 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 73 65 47 65 74 43 6f 6e 76 65 72 73 61 74 69 6f 6e 52 61 74 69 6e 67 4d 65 73 73 61 67 65 7d 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 73 65 47 65 74 43 6f 6e 76 65 72 73 61 74 69 6f 6e 52 61 74 65 64 4d 65 73 73 61 67 65 7d 29 3b 76 61 72 20 72 3d 6e 28 22 64 61 34 4c 22 29 2c 61 3d 6e 28 22 54 62 53 6e 22 29 2c 63 3d 6e 28 22 45 52 6b 50 22 29 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[4],{"+qGC":function(e,t,n){"use strict";n.d(t,"b",function(){return useGetConversationRatingMessage}),n.d(t,"a",function(){return useGetConversationRatedMessage});var r=n("da4L"),a=n("TbSn"),c=n("ERkP")
2024-01-16 21:33:06 UTC	6992	IN	Data Raw: 61 2e 77 72 61 70 28 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 24 28 6e 29 7b 66 6f 72 28 3b 3b 29 73 77 69 74 63 68 28 6e 2e 70 72 65 76 3d 6e 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 6e 2e 70 72 65 76 3d 30 2c 6e 2e 6e 65 78 74 3d 33 2c 62 2e 61 2e 67 65 74 28 6c 2e 63 29 3b 63 61 73 65 20 33 3a 65 3d 6e 2e 73 65 6e 74 2c 74 3d 65 2e 64 61 74 61 2c 72 28 4f 62 6a 65 63 74 28 64 2e 6d 29 28 74 29 3f 21 6e 65 65 64 73 4e 65 77 4c 69 6e 65 28 29 3a 74 29 2c 6e 2e 6e 65 78 74 3d 31 31 3b 62 72 65 61 6b 3b 63 61 73 65 20 38 3a 6e 2e 70 72 65 76 3d 38 2c 6e 2e 74 30 3d 6e 2e 63 61 74 63 68 28 30 29 2c 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 6e 2e 74 30 29 3b 63 61 73 65 20 31 31 3a 63 61 73 65 22 65 6e 64 22 3a 72 65 74 75 72 6e 20 Data Ascii: a.wrap(function _callee$(n){for(;;)switch(n.prev=n.next){case 0:return n.prev=0,n.next=3,b.a.get(l.c);case 3:e=n.sent,t=e.data,r(Object(d.m)(t)?!needsNewLine():t),n.next=11;break;case 8:n.prev=8,n.t0=n.catch(0),console.warn(n.t0);case 11:case"end":return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.18	49895	18.238.55.7	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:06 UTC	622	OUT	GET /core/assets/js/34.cf26c954.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1705440768503 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:06 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 12809 Connection: close Server: istio-envoy Date: Tue, 19 Dec 2023 17:25:03 GMT Last-Modified: Tue, 19 Dec 2023 16:15:24 GMT ETag: "38156cd1b538ae036f57b23fcbe9ca1f" x-amz-server-side-encryption: AES256 x-amz-version-id: vDZG3LONqVoMI.mvhT.p2kopNVOIoQ1y Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 16 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 071f5fea9cc276d1769e252ea33022fa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: VGlOlW4IXwwYtbZwP4aaNSZjp8xnXmtJuggHESP_lKWBDjvXYrplnA== Age: 2434083
2024-01-16 21:33:06 UTC	12809	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 34 5d 2c 7b 22 31 53 63 41 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 73 65 52 65 66 6c 6f 77 46 72 61 6d 65 43 6c 61 73 73 4e 61 6d 65 7d 29 3b 76 61 72 20 6e 3d 61 28 22 73 38 44 49 22 29 2c 63 3d 61 28 22 51 74 6c 5a 22 29 2c 72 3d 61 28 22 49 4c 51 46 22 29 2c 69 3d 61 28 22 67 36 65 44 22 29 2c 73 3d 61 28 22 4a 42 74 6d 22 29 2c 6f 3d 61 2e 6e 28 73 29 2c 75 3d 61 28 22 45 52 6b 50 22 29 2c 6c 3d 61 28 22 45 51 78 69 22 29 2c 66 3d 21 31 3b 66 75 6e 63 74 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[34],{"1ScA":function(e,t,a){"use strict";a.d(t,"a",function(){return useReflowFrameClassName});var n=a("s8DI"),c=a("QtlZ"),r=a("ILQF"),i=a("g6eD"),s=a("JBtm"),o=a.n(s),u=a("ERkP"),l=a("EQxi"),f=!1;funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.18	49897	50.16.7.188	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:07 UTC	679	OUT	POST /monitoring/metrics/widget/init/v3 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 561 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:07 UTC	561	OUT	Data Raw: 69 6e 69 74 5f 65 76 65 6e 74 3d 25 37 42 25 32 32 65 76 65 6e 74 4e 61 6d 65 25 32 32 25 33 41 25 32 32 25 35 42 56 32 25 35 44 25 32 30 2d 25 32 30 69 6e 69 74 25 32 32 25 32 43 25 32 32 65 6d 62 65 64 49 64 25 32 32 25 33 41 25 32 32 6e 39 66 34 6b 37 73 64 6d 73 6d 61 25 32 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 49 64 25 32 32 25 33 41 25 32 32 65 30 64 31 33 36 37 38 2d 64 33 33 66 2d 34 30 39 36 2d 62 36 34 33 2d 66 35 35 66 31 38 38 37 35 64 37 62 25 32 32 25 32 43 25 32 32 69 6e 73 74 61 6e 63 65 49 64 25 32 32 25 33 41 25 32 32 32 31 64 32 35 33 32 30 2d 64 33 65 34 2d 34 31 30 62 2d 62 63 31 33 2d 30 35 37 35 37 62 61 36 38 64 65 33 25 32 32 25 32 43 25 32 32 63 6f 6e 74 65 78 74 25 32 32 25 33 41 25 37 42 25 32 32 75 72 6c 25 32 32 25 33 41 Data Ascii: init_event=%7B%22eventName%22%3A%22%5BV2%5D%20-%20init%22%2C%22embedId%22%3A%22n9f4k7sdmsma%22%2C%22sessionId%22%3A%22e0d13678-d33f-4096-b643-f55f18875d7b%22%2C%22instanceId%22%3A%2221d25320-d3e4-410b-bc13-05757ba68de3%22%2C%22context%22%3A%7B%22url%22%3A
2024-01-16 21:33:07 UTC	691	IN	HTTP/1.1 200 OK date: Tue, 16 Jan 2024 21:33:07 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: 5cc4fb6be5975a4e vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 14 server: istio-envoy connection: close
2024-01-16 21:33:07 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.18	49898	50.16.7.188	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:07 UTC	664	OUT	POST /widget_bootstrap HTTP/1.1 Host: bootstrap.api.drift.com Connection: keep-alive Content-Length: 455 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:07 UTC	455	OUT	Data Raw: 65 6d 62 65 64 5f 69 64 3d 6e 39 66 34 6b 37 73 64 6d 73 6d 61 26 63 6c 69 65 6e 74 5f 69 64 3d 66 36 7a 75 69 7a 64 79 68 78 72 6d 37 72 26 63 6f 6e 73 65 6e 74 5f 69 64 3d 68 61 73 5f 63 6f 6e 73 65 6e 74 26 6c 65 61 64 5f 69 64 3d 65 37 36 61 34 31 36 30 2d 38 39 35 65 2d 34 62 33 36 2d 61 37 33 61 2d 39 33 61 32 30 35 37 65 39 63 61 30 26 69 6e 74 65 67 72 61 74 69 6f 6e 73 3d 25 37 42 25 37 44 26 73 65 73 73 69 6f 6e 53 74 61 72 74 65 64 3d 31 37 30 35 34 34 30 37 38 31 26 74 61 72 67 65 74 69 6e 67 5f 63 6f 6e 74 65 78 74 3d 25 37 42 25 32 32 73 65 73 73 69 6f 6e 49 64 25 32 32 25 33 41 25 32 32 64 36 63 66 65 32 62 39 2d 62 64 64 62 2d 34 61 30 31 2d 61 36 64 31 2d 39 64 37 30 66 34 34 34 32 31 38 39 25 32 32 25 32 43 25 32 32 70 61 67 65 55 72 6c Data Ascii: embed_id=n9f4k7sdmsma&client_id=f6zuizdyhxrm7r&consent_id=has_consent&lead_id=e76a4160-895e-4b36-a73a-93a2057e9ca0&integrations=%7B%7D&sessionStarted=1705440781&targeting_context=%7B%22sessionId%22%3A%22d6cfe2b9-bddb-4a01-a6d1-9d70f4442189%22%2C%22pageUrl
2024-01-16 21:33:07 UTC	699	IN	HTTP/1.1 200 OK date: Tue, 16 Jan 2024 21:33:07 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: d399b5f866d0fc2 vary: Accept-Encoding x-envoy-upstream-service-time: 144 server: istio-envoy connection: close transfer-encoding: chunked
2024-01-16 21:33:07 UTC	8923	IN	Data Raw: 32 32 63 65 0d 0a 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 7b 22 69 70 22 3a 22 31 35 34 2e 31 36 2e 31 39 32 2e 31 39 33 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 73 75 62 64 69 76 69 73 69 6f 6e 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 67 64 70 72 41 70 70 6c 69 63 61 62 6c 65 22 3a 66 61 6c 73 65 2c 22 6d 65 74 72 6f 43 6f 64 65 22 3a 35 30 31 2c 22 70 6f 73 74 61 6c 43 6f 64 65 22 3a 22 31 30 31 31 38 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 34 30 2e 37 31 32 33 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 37 34 2e 30 30 36 38 7d 2c 22 74 6f 6b 65 6e 52 65 73 75 6c 74 22 3a 7b 22 61 63 63 65 73 73 54 6f 6b Data Ascii: 22ce{"location":{"ip":"154.16.192.193","city":"New York","subdivision":"New York","country":"US","countryName":"United States","gdprApplicable":false,"metroCode":501,"postalCode":"10118","latitude":40.7123,"longitude":-74.0068},"tokenResult":{"accessTok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.18	49900	3.94.218.138	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:07 UTC	371	OUT	GET /widget_bootstrap/ping/v2 HTTP/1.1 Host: bootstrap.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:07 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: driftd5f07fa494f95ed9d12cce17c35 cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 460 x-envoy-upstream-service-time: 1 date: Tue, 16 Jan 2024 21:33:07 GMT server: istio-envoy connection: close
2024-01-16 21:33:07 UTC	460	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 77 69 64 67 65 74 5f 62 6f 6f 74 73 74 72 61 70 2f 70 69 6e 67 2f 76 32 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/widget_bootstrap/ping/v2</td></tr><tr><th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.18	49899	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:07 UTC	1222	OUT	GET /favicon.ico HTTP/1.1 Host: www.signable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _ga_4XE2VYSQ35=GS1.1.1705440775.1.0.1705440775.60.0.0; _ga=GA1.1.2131508639.1705440776; _hjSessionUser_2736869=eyJpZCI6IjVjMmEyNmQ5LTkxN2QtNWFlOC1iNDIwLTg4YmY2ZmI3ZDdhMyIsImNyZWF0ZWQiOjE3MDU0NDA3NzczMzAsImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_2736869=0; _hjSession_2736869=eyJpZCI6IjkyZDM1OTIwLTM5ZTEtNDQ0Ni05YTNmLTM3NWI5MWYxZTEzYiIsImMiOjE3MDU0NDA3NzczMzEsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; drift_campaign_refresh=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189; drift_aid=e76a4160-895e-4b36-a73a-93a2057e9ca0; driftt_aid=e76a4160-895e-4b36-a73a-93a2057e9ca0
2024-01-16 21:33:08 UTC	355	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:33:07 GMT Content-Type: image/x-icon Content-Length: 31800 Connection: close Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "7c38-602f236e0ae8a" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:33:08 UTC	16029	IN	Data Raw: 00 00 01 00 05 00 10 10 00 00 01 00 20 00 68 04 00 00 56 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 be 04 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 46 0e 00 00 30 30 00 00 01 00 20 00 a8 25 00 00 ee 1e 00 00 00 00 00 00 01 00 20 00 a2 37 00 00 96 44 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ce 98 00 00 ce 98 00 06 ce 98 00 45 ce 98 00 a3 ce 98 00 e0 ce 98 00 f8 ce 98 00 f8 ce 98 00 e0 ce 98 00 a3 ce 98 00 45 cc 94 00 06 cd 97 00 00 00 00 00 00 00 00 00 00 ce 98 00 00 ce 98 00 00 ce 98 00 16 ce 97 00 8e ce 97 00 ed ce 98 00 ff ce 98 00 ff ce 98 01 ff d1 9e 10 ff ce 98 04 ff cd 97 00 ff cf 99 04 ed d1 9f 11 8e d0 9c 0b 16 d0 9d 0d 00 ce 98 00 00 ce Data Ascii: hV F00 % 7D( EE
2024-01-16 21:33:08 UTC	15771	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ce 98 00 00 ce 98 00 02 ce 98 00 53 ce 98 00 dc ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 97 00 ff cd 96 00 ff cf 99 06 ff d1 9e 13 ff d2 a1 19 ff d1 9f 16 ff cf 9b 0a ff cd 97 01 ff cd 96 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 dc ce 98 00 53 ce 98 00 02 ce 98 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ce 98 00 00 ce 98 00 00 ce 98 00 32 ce 98 00 b5 ce 98 00 fb ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 Data Ascii: SS2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.18	49901	50.16.7.188	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:08 UTC	378	OUT	GET /monitoring/metrics/widget/init/v3 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:08 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drifta134b6c48a49b574b60ead1941b cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 469 x-envoy-upstream-service-time: 1 date: Tue, 16 Jan 2024 21:33:08 GMT server: istio-envoy connection: close
2024-01-16 21:33:08 UTC	469	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 77 69 64 67 65 74 2f 69 6e 69 74 2f 76 33 3c 2f 74 64 3e 3c 2f 74 72 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/widget/init/v3</td></tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.18	49902	3.94.218.138	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:08 UTC	363	OUT	GET /widget_bootstrap HTTP/1.1 Host: bootstrap.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:08 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift7a5ecb446eda80ba3e876d11ce3 cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 452 x-envoy-upstream-service-time: 1 date: Tue, 16 Jan 2024 21:33:07 GMT server: istio-envoy connection: close
2024-01-16 21:33:08 UTC	452	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 77 69 64 67 65 74 5f 62 6f 6f 74 73 74 72 61 70 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 3e 53 54 41 54 55 53 3a Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/widget_bootstrap</td></tr><tr><th>STATUS:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.18	49903	50.16.35.88	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:08 UTC	806	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVNTAwNjE5MC0yMDcwNDc3Nzk4My00ZAAGb3JnX2lkbQAAAAc1MDA2MTkwZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjA3MDQ3Nzc5ODNkAAl1c2VyX3R5cGVkAARsZWFkbgYACz0xFI0BYgABUYA.XdPj0z867PfHcHAbzwabnWIcGcuEx8ytQB05130QDU0&remote_ip=3.226.111.211&vsn=2.0.0 HTTP/1.1 Host: 5006190-40.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: 7L1qypv2NRoGtHtplJwQjA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-01-16 21:33:08 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Tue, 16 Jan 2024 21:33:08 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.18	49904	35.214.8.169	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:08 UTC	986	OUT	GET /favicon.ico HTTP/1.1 Host: www.signable.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _ga_4XE2VYSQ35=GS1.1.1705440775.1.0.1705440775.60.0.0; _ga=GA1.1.2131508639.1705440776; _hjSessionUser_2736869=eyJpZCI6IjVjMmEyNmQ5LTkxN2QtNWFlOC1iNDIwLTg4YmY2ZmI3ZDdhMyIsImNyZWF0ZWQiOjE3MDU0NDA3NzczMzAsImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_2736869=0; _hjSession_2736869=eyJpZCI6IjkyZDM1OTIwLTM5ZTEtNDQ0Ni05YTNmLTM3NWI5MWYxZTEzYiIsImMiOjE3MDU0NDA3NzczMzEsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; drift_campaign_refresh=d6cfe2b9-bddb-4a01-a6d1-9d70f4442189; drift_aid=e76a4160-895e-4b36-a73a-93a2057e9ca0; driftt_aid=e76a4160-895e-4b36-a73a-93a2057e9ca0
2024-01-16 21:33:09 UTC	355	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:33:08 GMT Content-Type: image/x-icon Content-Length: 31800 Connection: close Last-Modified: Tue, 15 Aug 2023 08:46:26 GMT ETag: "7c38-602f236e0ae8a" X-Httpd-Modphp: 1 Access-Control-Allow-Origin: * Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-01-16 21:33:09 UTC	16029	IN	Data Raw: 00 00 01 00 05 00 10 10 00 00 01 00 20 00 68 04 00 00 56 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 be 04 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 46 0e 00 00 30 30 00 00 01 00 20 00 a8 25 00 00 ee 1e 00 00 00 00 00 00 01 00 20 00 a2 37 00 00 96 44 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ce 98 00 00 ce 98 00 06 ce 98 00 45 ce 98 00 a3 ce 98 00 e0 ce 98 00 f8 ce 98 00 f8 ce 98 00 e0 ce 98 00 a3 ce 98 00 45 cc 94 00 06 cd 97 00 00 00 00 00 00 00 00 00 00 ce 98 00 00 ce 98 00 00 ce 98 00 16 ce 97 00 8e ce 97 00 ed ce 98 00 ff ce 98 00 ff ce 98 01 ff d1 9e 10 ff ce 98 04 ff cd 97 00 ff cf 99 04 ed d1 9f 11 8e d0 9c 0b 16 d0 9d 0d 00 ce 98 00 00 ce Data Ascii: hV F00 % 7D( EE
2024-01-16 21:33:09 UTC	15771	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ce 98 00 00 ce 98 00 02 ce 98 00 53 ce 98 00 dc ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 97 00 ff cd 96 00 ff cf 99 06 ff d1 9e 13 ff d2 a1 19 ff d1 9f 16 ff cf 9b 0a ff cd 97 01 ff cd 96 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 dc ce 98 00 53 ce 98 00 02 ce 98 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ce 98 00 00 ce 98 00 00 ce 98 00 32 ce 98 00 b5 ce 98 00 fb ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 00 ff ce 98 Data Ascii: SS2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.18	49905	50.16.35.88	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:09 UTC	806	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVNTAwNjE5MC0yMDcwNDc3Nzk4My00ZAAGb3JnX2lkbQAAAAc1MDA2MTkwZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjA3MDQ3Nzc5ODNkAAl1c2VyX3R5cGVkAARsZWFkbgYACz0xFI0BYgABUYA.XdPj0z867PfHcHAbzwabnWIcGcuEx8ytQB05130QDU0&remote_ip=3.226.111.211&vsn=2.0.0 HTTP/1.1 Host: 5006190-40.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: QKQtFZTqm4IV84rQMT2FIA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-01-16 21:33:09 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Tue, 16 Jan 2024 21:33:09 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.18	49906	50.16.7.188	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:10 UTC	676	OUT	POST /monitoring/metrics/event3/bulk HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 620 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:10 UTC	620	OUT	Data Raw: 6d 65 74 72 69 63 5f 70 61 79 6c 6f 61 64 3d 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 35 36 35 66 33 63 64 65 2d 61 37 62 36 2d 34 39 65 39 2d 61 34 39 39 2d 61 63 33 33 62 33 62 66 64 34 35 39 25 32 32 25 32 43 25 32 32 65 76 65 6e 74 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 65 76 65 6e 74 4e 61 6d 65 25 32 32 25 33 41 25 32 32 25 35 42 56 32 25 35 44 25 32 30 2d 25 32 30 65 6e 64 75 73 65 72 5f 62 6f 6f 74 73 74 72 61 70 25 32 32 25 32 43 25 32 32 6f 72 67 49 64 25 32 32 25 33 41 35 30 30 36 31 39 30 25 32 43 25 32 32 65 6d 62 65 64 49 64 25 32 32 25 33 41 25 32 32 6e 39 66 34 6b 37 73 64 6d 73 6d 61 25 32 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 49 64 25 32 32 25 33 41 25 32 32 65 30 64 31 33 36 37 38 2d 64 33 33 66 2d 34 30 39 36 2d Data Ascii: metric_payload=%7B%22id%22%3A%22565f3cde-a7b6-49e9-a499-ac33b3bfd459%22%2C%22events%22%3A%5B%7B%22eventName%22%3A%22%5BV2%5D%20-%20enduser_bootstrap%22%2C%22orgId%22%3A5006190%2C%22embedId%22%3A%22n9f4k7sdmsma%22%2C%22sessionId%22%3A%22e0d13678-d33f-4096-
2024-01-16 21:33:10 UTC	691	IN	HTTP/1.1 200 OK date: Tue, 16 Jan 2024 21:33:10 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: 74364c5050110271 vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 20 server: istio-envoy connection: close
2024-01-16 21:33:10 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.18	49907	50.16.7.188	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:10 UTC	375	OUT	GET /monitoring/metrics/event3/bulk HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:10 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift72b4e0d4517967137f5c9a47371 cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 466 x-envoy-upstream-service-time: 1 date: Tue, 16 Jan 2024 21:33:10 GMT server: istio-envoy connection: close
2024-01-16 21:33:10 UTC	466	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 65 76 65 6e 74 33 2f 62 75 6c 6b 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/event3/bulk</td></tr><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.18	49908	50.16.35.88	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:11 UTC	806	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVNTAwNjE5MC0yMDcwNDc3Nzk4My00ZAAGb3JnX2lkbQAAAAc1MDA2MTkwZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjA3MDQ3Nzc5ODNkAAl1c2VyX3R5cGVkAARsZWFkbgYACz0xFI0BYgABUYA.XdPj0z867PfHcHAbzwabnWIcGcuEx8ytQB05130QDU0&remote_ip=3.226.111.211&vsn=2.0.0 HTTP/1.1 Host: 5006190-40.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: 0Cmd+T/uEnnkSbG9cf1KFQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-01-16 21:33:12 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Tue, 16 Jan 2024 21:33:12 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.18	49909	50.16.7.188	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:13 UTC	676	OUT	POST /monitoring/metrics/add/bulk/v2 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 335 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:13 UTC	335	OUT	Data Raw: 6d 65 74 72 69 63 73 3d 25 35 42 25 37 42 25 32 32 76 61 6c 75 65 25 32 32 25 33 41 36 38 34 2e 33 30 30 30 30 30 30 30 30 30 31 37 35 25 32 43 25 32 32 64 69 6d 65 6e 73 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 79 70 65 25 32 32 25 33 41 25 32 32 62 75 63 6b 65 74 25 32 32 25 32 43 25 32 32 62 75 63 6b 65 74 73 25 32 32 25 33 41 25 32 32 35 30 30 25 32 43 25 32 30 38 30 30 25 32 43 25 32 30 31 30 30 30 25 32 43 25 32 30 31 32 30 30 25 32 43 25 32 30 31 35 30 30 25 32 43 25 32 30 32 30 30 30 25 32 43 25 32 30 33 30 30 30 25 32 43 25 32 30 35 30 30 30 25 32 43 25 32 30 36 30 30 30 25 32 43 25 32 30 37 30 30 30 25 32 43 25 32 30 38 30 30 30 25 32 43 25 32 30 39 30 30 30 25 32 43 25 32 30 31 30 30 30 30 25 32 43 25 32 30 31 31 30 30 30 25 32 43 25 Data Ascii: metrics=%5B%7B%22value%22%3A684.3000000000175%2C%22dimensions%22%3A%7B%22type%22%3A%22bucket%22%2C%22buckets%22%3A%22500%2C%20800%2C%201000%2C%201200%2C%201500%2C%202000%2C%203000%2C%205000%2C%206000%2C%207000%2C%208000%2C%209000%2C%2010000%2C%2011000%2C%
2024-01-16 21:33:13 UTC	690	IN	HTTP/1.1 200 OK date: Tue, 16 Jan 2024 21:33:13 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: 1f6c1efc3c30df9b vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 0 server: istio-envoy connection: close
2024-01-16 21:33:13 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.18	49910	50.16.7.188	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:13 UTC	375	OUT	GET /monitoring/metrics/add/bulk/v2 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:13 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift71b464c449a9e1b7d88ced0fcef cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 466 x-envoy-upstream-service-time: 1 date: Tue, 16 Jan 2024 21:33:13 GMT server: istio-envoy connection: close
2024-01-16 21:33:13 UTC	466	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 61 64 64 2f 62 75 6c 6b 2f 76 32 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/add/bulk/v2</td></tr><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.18	49911	50.16.35.88	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:17 UTC	806	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVNTAwNjE5MC0yMDcwNDc3Nzk4My00ZAAGb3JnX2lkbQAAAAc1MDA2MTkwZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjA3MDQ3Nzc5ODNkAAl1c2VyX3R5cGVkAARsZWFkbgYACz0xFI0BYgABUYA.XdPj0z867PfHcHAbzwabnWIcGcuEx8ytQB05130QDU0&remote_ip=3.226.111.211&vsn=2.0.0 HTTP/1.1 Host: 5006190-40.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: zM44Mx2fTBhsdqd4i1GlsQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-01-16 21:33:17 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Tue, 16 Jan 2024 21:33:17 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.18	49912	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:24 UTC	864	OUT	GET /register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:25 UTC	2507	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 4675 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:26 GMT ETag: "e640f358e29995df105a5238bebb2308" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 878742d0ad1850cbfc7910a5c4919ed0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: Lc77Le1gNuzIZiJanRkBYhXb8Gcw51hn7Wn4y6GPuTozDfq2nDYpIw== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:25 UTC	3198	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 74 68 65 6d 65 2d 63 6f 6c 6f 72 20 63 6f 6e 74 65 6e 74 3d 23 30 30 39 38 43 45 3e 3c 74 69 74 6c 65 3e 53 69 67 6e 61 62 6c 65 3c 2f 74 69 74 6c 65 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 70 72 65 63 6f 6e 6e 65 63 74 20 68 72 65 66 3d 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 70 72 65 63 6f 6e 6e 65 63 74 20 68 72 65 66 3d Data Ascii: <!DOCTYPE html><html><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><meta name=theme-color content=#0098CE><title>Signable</title><link rel=preconnect href=https://fonts.googleapis.com><link rel=preconnect href=
2024-01-16 21:33:25 UTC	1477	IN	Data Raw: 72 65 66 3d 2f 6a 73 2f 63 68 75 6e 6b 2d 63 36 65 32 30 30 31 30 2e 33 63 65 33 30 39 31 61 2e 6a 73 20 72 65 6c 3d 70 72 65 66 65 74 63 68 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 2f 6a 73 2f 63 68 75 6e 6b 2d 63 39 36 30 38 37 39 38 2e 34 38 39 36 37 35 31 66 2e 6a 73 20 72 65 6c 3d 70 72 65 66 65 74 63 68 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 2f 6a 73 2f 63 68 75 6e 6b 2d 65 32 64 36 31 31 66 61 2e 38 30 61 66 63 63 33 61 2e 6a 73 20 72 65 6c 3d 70 72 65 66 65 74 63 68 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 2f 63 73 73 2f 61 70 70 2e 62 37 37 31 62 61 63 32 2e 63 73 73 20 72 65 6c 3d 70 72 65 6c 6f 61 64 20 61 73 3d 73 74 79 6c 65 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 2f 63 73 73 2f 63 68 75 6e 6b 2d 76 65 6e 64 6f 72 73 2e 33 39 65 61 66 65 31 65 2e 63 73 73 20 Data Ascii: ref=/js/chunk-c6e20010.3ce3091a.js rel=prefetch><link href=/js/chunk-c9608798.4896751f.js rel=prefetch><link href=/js/chunk-e2d611fa.80afcc3a.js rel=prefetch><link href=/css/app.b771bac2.css rel=preload as=style><link href=/css/chunk-vendors.39eafe1e.css

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.18	49913	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:25 UTC	711	OUT	GET /css/app.b771bac2.css HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:25 UTC	2513	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 452802 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:00 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:26 GMT ETag: "8059181700e10234015b607487bb4c94" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 e7f87e384798b4a94964cbcf8e4db94c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: 5lyoYZ8lxrg6WwKuhYj3oILZ7vDM4uBlk687kQHzXMSlrdWeMpU66A== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:25 UTC	16384	IN	Data Raw: 2e 63 61 72 64 2d 62 75 74 74 6f 6e 5b 64 61 74 61 2d 76 2d 30 37 61 30 35 31 63 39 5d 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 63 61 72 64 2d 62 75 74 74 6f 6e 5b 64 61 74 61 2d 76 2d 30 37 61 30 35 31 63 39 5d 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 7d 7d 2e 63 61 72 64 2d 62 75 74 74 6f 6e 5b 64 61 74 61 2d 76 2d 30 37 61 30 35 31 63 39 5d 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 63 61 72 64 2d 62 75 74 74 6f 6e Data Ascii: .card-button[data-v-07a051c9]{margin-bottom:5px;white-space:nowrap}@media (min-width:768px){.card-button[data-v-07a051c9]{margin-top:5px;margin-bottom:0;margin-right:5px}}.card-button[data-v-07a051c9]:last-child{margin-bottom:0;margin-right:0}.card-button
2024-01-16 21:33:25 UTC	1514	IN	Data Raw: 77 61 72 6e 69 6e 67 5b 64 61 74 61 2d 76 2d 36 35 31 36 61 30 35 61 5d 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 77 61 72 6e 69 6e 67 2d 64 61 72 6b 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 77 61 72 6e 69 6e 67 2d 64 61 72 6b 29 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 61 2d 62 75 74 74 6f 6e 2d 2d 65 72 72 6f 72 5b 64 61 74 61 2d 76 2d 36 35 31 36 61 30 35 61 5d 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 33 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 33 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c Data Ascii: warning[data-v-6516a05a]:hover{background:var(--color-warning-dark);border-color:var(--color-warning-dark);color:#fff}.a-button--error[data-v-6516a05a]{border:1px solid transparent;-webkit-box-shadow:0 0 3px 0 rgba(0,0,0,.2);box-shadow:0 0 3px 0 rgba(0,0,
2024-01-16 21:33:25 UTC	16384	IN	Data Raw: 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 31 70 78 7d 2e 61 2d 62 75 74 74 6f 6e 2d 2d 67 72 6f 75 70 69 6e 67 2d 72 69 67 68 74 5b 64 61 74 61 2d 76 2d 36 35 31 36 61 30 35 61 5d 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 7d 2e 61 2d 62 75 74 74 6f 6e 2d 2d 67 72 6f 75 70 69 6e 67 2d 6d 69 64 64 6c 65 5b 64 61 74 61 2d 76 2d 36 35 31 36 61 30 35 61 5d 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 61 2d 62 75 74 74 6f 6e 2d Data Ascii: radius:0;border-bottom-right-radius:0;border-left-width:1px}.a-button--grouping-right[data-v-6516a05a]{border-top-left-radius:0;border-bottom-left-radius:0}.a-button--grouping-middle[data-v-6516a05a]{border-radius:0;margin-left:0;margin-right:0}.a-button-
2024-01-16 21:33:25 UTC	16384	IN	Data Raw: 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 34 35 30 70 78 29 7b 2e 6f 2d 67 72 69 64 5b 64 61 74 61 2d 76 2d 30 36 31 61 37 64 30 30 5d 7b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 31 30 30 25 7d 7d 7d 2e 6d 2d 70 65 72 73 6f 6e 2d 63 61 72 64 5b 64 61 74 61 2d 76 2d 61 37 61 64 66 63 31 32 5d 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 73 70 61 63 69 6e 67 2d 62 61 73 65 29 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 62 6f 72 64 65 72 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 70 78 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 2d 77 65 62 6b 69 Data Ascii: n and (max-width:450px){.o-grid[data-v-061a7d00]{grid-template-columns:100%}}}.m-person-card[data-v-a7adfc12]{position:relative;padding:var(--spacing-base);border:1px solid var(--color-border);border-radius:9px;height:100%;width:100%;cursor:pointer;-webki
2024-01-16 21:33:25 UTC	12398	IN	Data Raw: 72 79 2d 31 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 2e 6d 2d 63 61 72 64 5b 64 61 74 61 2d 76 2d 36 30 34 37 39 35 63 63 5d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 37 35 70 78 7d 2e 70 2d 74 65 6d 70 6c 61 74 65 73 5f 5f 63 72 65 61 74 65 2d 62 75 74 74 6f 6e 5b 64 61 74 61 2d 76 2d 36 30 34 37 39 35 63 63 5d 7b 6d 61 72 67 69 6e 3a 30 20 30 20 76 61 72 28 2d 2d 73 70 61 63 69 6e 67 2d 62 61 73 65 29 20 76 61 72 28 2d 2d 73 70 61 63 69 6e 67 2d 62 61 73 65 29 7d 2e 70 2d 74 65 6d 70 6c 61 74 65 73 5f 5f 6e 6f 2d 74 65 6d 70 6c 61 74 65 73 5b 64 61 74 61 2d 76 2d 36 30 34 37 39 35 63 63 5d 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 76 61 72 28 2d 2d 73 70 61 63 69 6e Data Ascii: ry-1);border-radius:0}.m-card[data-v-604795cc]{min-height:75px}.p-templates__create-button[data-v-604795cc]{margin:0 0 var(--spacing-base) var(--spacing-base)}.p-templates__no-templates[data-v-604795cc]{clear:both;text-align:center;margin-top:var(--spacin
2024-01-16 21:33:25 UTC	1474	IN	Data Raw: 36 31 30 34 5d 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 2e 64 6f 63 75 6d 65 6e 74 2d 73 65 74 75 70 5f 5f 68 65 61 64 65 72 5f 5f 61 63 74 69 6f 6e 2d 62 75 74 74 6f 6e 5b 64 61 74 61 2d 76 2d 31 33 35 63 36 31 30 34 5d 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 73 70 61 63 69 6e 67 2d 62 61 73 65 29 7d 2e 64 6f 63 75 6d 65 6e 74 2d 73 65 74 75 70 5f 5f 66 69 65 6c 64 2d 63 6f 6e 74 72 6f 6c 5b 64 61 74 61 2d 76 2d 31 33 35 63 36 31 30 34 5d 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 76 61 72 28 2d 2d 73 70 61 63 69 6e 67 2d 6c 61 72 Data Ascii: 6104]{display:inline-block;font-size:11px;text-align:right}.document-setup__header__action-button[data-v-135c6104]{display:inline-block;margin-left:var(--spacing-base)}.document-setup__field-control[data-v-135c6104]{position:absolute;top:var(--spacing-lar
2024-01-16 21:33:25 UTC	16384	IN	Data Raw: 6f 63 75 6d 65 6e 74 2d 73 65 74 75 70 5f 5f 63 6f 6e 74 61 69 6e 65 72 5b 64 61 74 61 2d 76 2d 31 33 35 63 36 31 30 34 5d 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 36 39 70 78 29 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 64 6f 63 75 6d 65 6e 74 2d 73 65 74 75 70 5f 5f 65 6e 76 65 6c 6f 70 65 2d 6e 61 76 5b 64 61 74 61 2d 76 2d 31 33 35 63 36 31 30 34 5d 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 35 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 35 70 78 3b 62 6f 72 64 65 72 2d 6c 65 66 Data Ascii: ocument-setup__container[data-v-135c6104]{height:calc(100% - 69px);display:-webkit-box;display:-ms-flexbox;display:flex}.document-setup__envelope-nav[data-v-135c6104]{display:inline-block;vertical-align:middle;padding-left:15px;margin-left:15px;border-lef
2024-01-16 21:33:25 UTC	16384	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 6c 69 73 74 5f 5f 69 74 65 6d 5f 5f 64 65 74 61 69 6c 73 5b 64 61 74 61 2d 76 2d 64 32 65 61 37 66 65 36 5d 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 73 70 61 63 69 6e 67 2d 78 73 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 32 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f Data Ascii: document-list__item__details[data-v-d2ea7fe6]{text-align:center;background:#222;padding:var(--spacing-xs);font-size:14px;font-weight:700;position:absolute;bottom:0;left:0;width:100%;pointer-events:none;color:#fff;border-bottom-left-radius:2px;border-botto
2024-01-16 21:33:25 UTC	15202	IN	Data Raw: 6f 6e 3a 61 6c 6c 20 2e 32 35 73 20 65 61 73 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 35 73 20 65 61 73 65 7d 2e 70 61 72 74 79 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 63 6f 6e 74 65 6e 74 5f 5f 65 78 74 72 61 5b 64 61 74 61 2d 76 2d 38 30 38 65 65 65 34 32 5d 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 70 61 72 74 79 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 63 6f 6e 74 65 6e 74 5f 5f 65 78 74 72 61 2d 2d 61 63 74 69 76 65 5b 64 61 74 61 2d 76 2d 38 30 38 65 65 65 34 32 5d 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 69 6e 69 74 69 61 6c 3b 6f 70 61 63 69 74 79 3a 31 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 76 61 72 28 2d 2d 73 70 61 63 69 6e 67 Data Ascii: on:all .25s ease;transition:all .25s ease}.party-selection__content__extra[data-v-808eee42]:after{content:"";display:block;clear:both}.party-selection__content__extra--active[data-v-808eee42]{height:100%;overflow:initial;opacity:1;margin-top:var(--spacing
2024-01-16 21:33:25 UTC	1182	IN	Data Raw: 72 65 7d 2e 70 2d 65 6e 76 65 6c 6f 70 65 2d 73 74 61 74 75 73 5f 5f 73 74 61 74 75 73 5b 64 61 74 61 2d 76 2d 32 65 39 66 63 36 34 30 5d 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 70 2d 65 6e 76 65 6c 6f 70 65 2d 73 74 61 74 75 73 5f 5f 70 72 65 76 69 65 77 5b 64 61 74 61 2d 76 2d 32 65 39 66 63 36 34 30 5d 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 62 6f 72 64 65 72 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 73 70 61 63 69 6e 67 2d 78 73 29 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 33 70 78 20 33 70 78 20 31 30 70 78 20 2d 32 70 78 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 62 6f 72 64 65 72 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 33 70 78 20 33 Data Ascii: re}.p-envelope-status__status[data-v-2e9fc640]{display:inline-block}.p-envelope-status__preview[data-v-2e9fc640]{border:1px solid var(--color-border);border-radius:var(--spacing-xs);-webkit-box-shadow:3px 3px 10px -2px var(--color-border);box-shadow:3px 3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.18	49916	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:25 UTC	721	OUT	GET /css/chunk-vendors.39eafe1e.css HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:25 UTC	2512	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 36085 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:00 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:26 GMT ETag: "46939b7586129d3bc153b84c1133375d" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 b7f525be96cecf61bbec66a423b622b0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: V1zhTMrq4WD3CDmo2VMB67Hulc-1CyWFH-Gu0C9uO9QX6qKJF0NFvQ== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:25 UTC	13872	IN	Data Raw: 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 6d 75 6c 74 69 73 65 6c 65 63 74 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 2e 6d 75 6c 74 69 73 65 6c 65 63 74 5f 5f 73 70 69 6e 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 31 70 78 3b 74 6f 70 3a 31 70 78 3b 77 69 64 74 68 3a 34 30 70 78 3b 68 65 69 67 68 74 3a 33 38 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 6d 75 6c 74 69 73 65 6c 65 63 74 5f 5f 73 70 69 6e 6e 65 72 3a 61 66 74 65 72 2c 2e 6d 75 6c 74 69 73 65 6c 65 63 74 5f 5f 73 70 69 6e 6e 65 72 3a 62 65 66 6f 72 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 74 6f 70 3a 35 30 Data Ascii: fieldset[disabled] .multiselect{pointer-events:none}.multiselect__spinner{position:absolute;right:1px;top:1px;width:40px;height:38px;background:#fff;display:block}.multiselect__spinner:after,.multiselect__spinner:before{position:absolute;content:"";top:50
2024-01-16 21:33:25 UTC	16384	IN	Data Raw: 61 28 30 2c 30 2c 30 2c 2e 39 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 25 7d 2e 64 72 6f 70 7a 6f 6e 65 20 2e 64 7a 2d 70 72 65 76 69 65 77 20 2e 64 7a 2d 64 65 74 61 69 6c 73 20 2e 64 7a 2d 73 69 7a 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 7d 2e 64 72 6f 70 7a 6f 6e 65 20 2e 64 7a 2d 70 72 65 76 69 65 77 20 2e 64 7a 2d 64 65 74 61 69 6c 73 20 2e 64 7a 2d 66 69 6c 65 6e 61 6d 65 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 64 72 6f 70 7a 6f 6e 65 20 2e 64 7a 2d 70 72 65 76 69 65 77 20 2e 64 7a 2d 64 65 74 61 69 6c 73 20 2e 64 7a 2d 66 69 6c 65 6e 61 6d 65 3a 68 6f 76 65 72 20 73 70 61 6e 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 68 73 6c 61 28 30 2c 30 25 Data Ascii: a(0,0,0,.9);line-height:150%}.dropzone .dz-preview .dz-details .dz-size{margin-bottom:1em;font-size:16px}.dropzone .dz-preview .dz-details .dz-filename{white-space:nowrap}.dropzone .dz-preview .dz-details .dz-filename:hover span{border:1px solid hsla(0,0%
2024-01-16 21:33:25 UTC	5829	IN	Data Raw: 61 74 65 59 28 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 68 65 69 67 68 74 2c 2d 2e 35 65 6d 29 29 7d 35 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 6c 61 6e 64 2d 73 63 61 6c 65 2d 78 2c 31 2e 30 35 29 2c 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 6c 61 6e 64 2d 73 63 61 6c 65 2d 79 2c 2e 39 35 29 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 6c 61 6e 64 2d 73 63 61 6c 65 2d 78 2c 31 2e 30 35 29 2c 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 6c 61 6e 64 2d 73 63 61 6c 65 2d 79 2c 2e 39 35 29 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 35 37 25 7b 2d 77 65 Data Ascii: ateY(var(--fa-bounce-height,-.5em))}50%{-webkit-transform:scale(var(--fa-bounce-land-scale-x,1.05),var(--fa-bounce-land-scale-y,.95)) translateY(0);transform:scale(var(--fa-bounce-land-scale-x,1.05),var(--fa-bounce-land-scale-y,.95)) translateY(0)}57%{-we

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.18	49914	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:25 UTC	695	OUT	GET /js/app.685e378c.js HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:25 UTC	2528	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1878952 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:26 GMT ETag: "429af0543938d7f868196f3d5d4ea72b" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 5e5b56398a1fcf5517d27e383d71ef9a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: MqsVOC53eLWJKLtckxpbZFvJnmEEylgztLdVf9oy3ymkzOi3V_UciA== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:25 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 61 2c 69 2c 73 3d 74 5b 30 5d 2c 6c 3d 74 5b 31 5d 2c 63 3d 74 5b 32 5d 2c 64 3d 30 2c 75 3d 5b 5d 3b 64 3c 73 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 69 3d 73 5b 64 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 69 29 26 26 72 5b 69 5d 26 26 75 2e 70 75 73 68 28 72 5b 69 5d 5b 30 5d 29 2c 72 5b 69 5d 3d 30 3b 66 6f 72 28 61 20 69 6e 20 6c 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6c 2c 61 29 26 26 28 65 5b 61 5d 3d 6c 5b 61 5d 29 3b 70 26 26 70 28 74 29 3b 77 68 69 6c 65 28 75 2e 6c 65 6e 67 74 68 29 75 2e 73 Data Ascii: (function(e){function t(t){for(var a,i,s=t[0],l=t[1],c=t[2],d=0,u=[];d<s.length;d++)i=s[d],Object.prototype.hasOwnProperty.call(r,i)&&r[i]&&u.push(r[i][0]),r[i]=0;for(a in l)Object.prototype.hasOwnProperty.call(l,a)&&(e[a]=l[a]);p&&p(t);while(u.length)u.s
2024-01-16 21:33:25 UTC	16384	IN	Data Raw: 50 52 45 56 49 45 57 5f 4b 45 59 22 29 7d 2c 6d 65 74 68 6f 64 73 3a 7b 63 61 6e 55 70 64 61 74 65 50 61 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 76 69 65 77 69 6e 67 45 6e 76 65 6c 6f 70 65 2e 73 74 61 74 75 73 2c 6e 3d 5b 22 75 6e 73 65 6e 74 22 2c 22 75 6e 73 65 6e 74 44 72 61 66 74 22 2c 22 71 75 65 75 65 64 22 2c 22 75 6e 73 65 6e 74 41 77 61 69 74 69 6e 67 22 2c 22 73 65 6e 74 22 2c 22 62 6f 75 6e 63 65 64 22 5d 3b 72 65 74 75 72 6e 28 22 73 65 6e 74 22 3d 3d 3d 74 7c 7c 22 64 72 61 66 74 22 3d 3d 3d 74 29 26 26 21 28 21 6e 2e 69 6e 63 6c 75 64 65 73 28 65 2e 73 74 61 74 75 73 2e 63 6f 6d 70 75 74 65 64 5f 73 74 61 74 75 73 29 7c 7c 21 74 68 69 73 2e 63 61 6e 45 64 69 74 52 65 73 6f 75 72 63 65 28 74 68 69 73 Data Ascii: PREVIEW_KEY")},methods:{canUpdateParty:function(e){var t=this.viewingEnvelope.status,n=["unsent","unsentDraft","queued","unsentAwaiting","sent","bounced"];return("sent"===t\|\|"draft"===t)&&!(!n.includes(e.status.computed_status)\|\|!this.canEditResource(this
2024-01-16 21:33:26 UTC	16384	IN	Data Raw: 65 50 72 65 76 69 65 77 2e 74 6f 74 61 6c 22 29 7d 7d 2c 69 6e 76 6f 69 63 65 49 74 65 6d 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 24 73 74 6f 72 65 2e 67 65 74 74 65 72 73 5b 22 70 61 79 67 49 6e 76 6f 69 63 65 50 72 65 76 69 65 77 2f 70 72 65 76 69 65 77 22 5d 2e 69 74 65 6d 73 3b 69 66 28 65 29 7b 76 61 72 20 74 3d 65 2c 6e 3d 5b 5d 2e 63 6f 6e 63 61 74 28 4f 62 6a 65 63 74 28 6f 5b 22 61 22 5d 29 28 74 29 2c 5b 74 68 69 73 2e 73 75 62 74 6f 74 61 6c 2c 74 68 69 73 2e 74 61 78 2c 74 68 69 73 2e 74 6f 74 61 6c 5d 29 3b 72 65 74 75 72 6e 20 6e 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 6d 65 74 68 6f 64 73 3a 7b 77 61 69 74 41 6e 64 55 70 64 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 77 69 6e Data Ascii: ePreview.total")}},invoiceItems:function(){var e=this.$store.getters["paygInvoicePreview/preview"].items;if(e){var t=e,n=[].concat(Object(o["a"])(t),[this.subtotal,this.tax,this.total]);return n}return[]}}),methods:{waitAndUpdate:function(){var e=this;win
2024-01-16 21:33:26 UTC	16384	IN	Data Raw: 50 65 72 73 6f 6e 61 6c 4d 65 73 73 61 67 65 54 65 6d 70 6c 61 74 65 53 65 6c 65 63 74 6f 72 22 2c 61 74 74 72 73 3a 7b 6f 70 74 69 6f 6e 73 3a 6e 2e 6d 65 73 73 61 67 65 73 2c 63 61 6e 43 6c 65 61 72 3a 21 31 2c 6c 61 62 65 6c 50 72 6f 70 3a 22 6e 61 6d 65 22 2c 76 61 6c 75 65 50 72 6f 70 3a 22 69 64 22 2c 70 6c 61 63 65 68 6f 6c 64 65 72 3a 65 2e 24 74 28 22 63 72 65 61 74 65 45 6e 76 65 6c 6f 70 65 2e 70 65 72 73 6f 6e 61 6c 4d 65 73 73 61 67 65 2e 73 65 6c 65 63 74 6f 72 2e 70 6c 61 63 65 68 6f 6c 64 65 72 22 29 2c 6e 6f 4f 70 74 69 6f 6e 73 3a 65 2e 24 74 28 22 63 72 65 61 74 65 45 6e 76 65 6c 6f 70 65 2e 70 65 72 73 6f 6e 61 6c 4d 65 73 73 61 67 65 2e 73 65 6c 65 63 74 6f 72 2e 6e 6f 4f 70 74 69 6f 6e 73 22 29 2c 6e 6f 52 65 73 75 6c 74 73 3a 65 2e Data Ascii: PersonalMessageTemplateSelector",attrs:{options:n.messages,canClear:!1,labelProp:"name",valueProp:"id",placeholder:e.$t("createEnvelope.personalMessage.selector.placeholder"),noOptions:e.$t("createEnvelope.personalMessage.selector.noOptions"),noResults:e.
2024-01-16 21:33:26 UTC	16384	IN	Data Raw: 67 53 70 69 6e 6e 65 72 22 2c 7b 61 74 74 72 73 3a 7b 73 69 7a 65 3a 22 6c 61 72 67 65 22 7d 7d 29 5d 2c 31 29 3a 74 28 22 64 69 76 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 70 2d 74 65 6d 70 6c 61 74 65 2d 75 70 64 61 74 65 20 67 2d 70 61 67 65 20 68 2d 66 75 6c 6c 22 7d 2c 5b 74 28 22 56 44 6f 63 75 6d 65 6e 74 53 65 74 75 70 22 2c 7b 61 74 74 72 73 3a 7b 73 61 76 69 6e 67 3a 65 2e 73 61 76 69 6e 67 2c 64 6f 63 3a 65 2e 74 65 6d 70 6c 61 74 65 2c 66 69 65 6c 64 73 3a 65 2e 66 69 65 6c 64 73 7d 7d 29 5d 2c 31 29 7d 2c 69 3d 5b 5d 2c 72 3d 28 6e 28 22 38 65 36 65 22 29 2c 6e 28 22 61 63 36 61 22 29 2c 6e 28 22 34 35 36 64 22 29 2c 6e 28 22 62 64 38 36 22 29 29 2c 6f 3d 6e 28 22 32 66 36 32 22 29 2c 73 3d 6e 28 22 38 62 39 61 22 29 2c 6c 3d 6e 28 22 Data Ascii: gSpinner",{attrs:{size:"large"}})],1):t("div",{staticClass:"p-template-update g-page h-full"},[t("VDocumentSetup",{attrs:{saving:e.saving,doc:e.template,fields:e.fields}})],1)},i=[],r=(n("8e6e"),n("ac6a"),n("456d"),n("bd86")),o=n("2f62"),s=n("8b9a"),l=n("
2024-01-16 21:33:26 UTC	16384	IN	Data Raw: 6d 61 6e 61 67 65 5f 70 6c 61 6e 5f 62 75 74 74 6f 6e 22 7d 7d 2c 5b 74 28 22 46 6f 6e 74 49 63 6f 6e 22 2c 7b 61 74 74 72 73 3a 7b 6e 61 6d 65 3a 22 61 72 72 6f 77 2d 63 69 72 63 6c 65 2d 75 70 22 7d 7d 29 2c 74 28 22 73 70 61 6e 22 2c 5b 65 2e 5f 76 28 65 2e 5f 73 28 65 2e 24 74 28 22 74 65 61 6d 73 2e 6d 61 6e 61 67 65 50 6c 61 6e 22 29 29 29 5d 29 5d 2c 31 29 5d 2c 31 29 5d 29 7d 2c 69 3d 5b 5d 2c 72 3d 6e 28 22 34 32 61 34 22 29 2c 6f 3d 7b 6e 61 6d 65 3a 22 56 50 6c 61 6e 50 65 72 6d 69 73 73 69 6f 6e 42 6c 6f 63 6b 65 72 22 2c 70 72 6f 70 73 3a 7b 65 63 3a 53 74 72 69 6e 67 2c 70 6c 61 6e 53 69 7a 65 3a 7b 74 79 70 65 3a 53 74 72 69 6e 67 2c 72 65 71 75 69 72 65 64 3a 21 30 7d 2c 62 6c 6f 63 6b 65 64 46 65 61 74 75 72 65 3a 7b 74 79 70 65 3a 53 74 Data Ascii: manage_plan_button"}},[t("FontIcon",{attrs:{name:"arrow-circle-up"}}),t("span",[e._v(e._s(e.$t("teams.managePlan")))])],1)],1)])},i=[],r=n("42a4"),o={name:"VPlanPermissionBlocker",props:{ec:String,planSize:{type:String,required:!0},blockedFeature:{type:St
2024-01-16 21:33:26 UTC	16384	IN	Data Raw: 79 20 77 2d 68 65 61 64 65 72 44 72 6f 70 64 6f 77 6e 57 20 7a 2d 31 30 20 62 67 2d 77 68 69 74 65 4f 76 65 72 72 69 64 65 20 72 6f 75 6e 64 65 64 2d 6c 67 22 2c 61 74 74 72 73 3a 7b 65 63 3a 22 68 65 61 64 65 72 22 2c 65 74 3a 22 6d 65 6e 75 22 2c 22 64 61 74 61 2d 74 65 73 74 22 3a 22 68 65 61 64 65 72 2d 64 72 6f 70 64 6f 77 6e 22 7d 7d 2c 5b 74 28 22 64 69 76 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 77 2d 62 61 73 65 20 68 2d 62 61 73 65 20 62 67 2d 77 68 69 74 65 4f 76 65 72 72 69 64 65 20 72 6f 74 61 74 65 2d 34 35 20 61 62 73 6f 6c 75 74 65 20 2d 74 6f 70 2d 78 73 20 72 69 67 68 74 2d 74 68 69 72 74 79 4f 6e 65 22 7d 29 2c 74 28 22 75 6c 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 6c 69 73 74 2d 6e 6f 6e 65 20 70 2d 6e 6f 6e 65 20 6d 2d Data Ascii: y w-headerDropdownW z-10 bg-whiteOverride rounded-lg",attrs:{ec:"header",et:"menu","data-test":"header-dropdown"}},[t("div",{staticClass:"w-base h-base bg-whiteOverride rotate-45 absolute -top-xs right-thirtyOne"}),t("ul",{staticClass:"list-none p-none m-
2024-01-16 21:33:26 UTC	15291	IN	Data Raw: 74 3d 64 2e 76 61 6c 75 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 74 26 26 6e 75 6c 6c 21 3d 3d 28 6e 3d 74 2e 69 6e 74 65 72 6e 61 6c 56 61 6c 75 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 6e 26 26 6e 5b 6f 2e 76 61 6c 75 65 5d 26 26 21 65 2e 69 6e 63 6c 75 64 65 73 28 6e 75 6c 6c 3d 3d 3d 28 61 3d 64 2e 76 61 6c 75 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 28 69 3d 61 2e 69 6e 74 65 72 6e 61 6c 56 61 6c 75 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 5b 6f 2e 76 61 6c 75 65 5d 29 26 26 64 2e 76 61 6c 75 65 2e 63 6c 65 61 72 28 29 7d 29 29 3b 76 61 72 20 76 3d 6c 28 29 2c 66 3d 22 63 6f 6d 62 6f 2d 22 2e 63 6f 6e 63 61 74 28 76 28 29 29 2c 62 3d 4f 62 6a 65 63 74 28 72 5b 22 63 6f 6d 70 75 74 65 64 22 5d 29 28 Data Ascii: t=d.value)&&void 0!==t&&null!==(n=t.internalValue)&&void 0!==n&&n[o.value]&&!e.includes(null===(a=d.value)\|\|void 0===a\|\|null===(i=a.internalValue)\|\|void 0===i?void 0:i[o.value])&&d.value.clear()}));var v=l(),f="combo-".concat(v()),b=Object(r["computed"])(
2024-01-16 21:33:26 UTC	16384	IN	Data Raw: 63 74 69 6f 6e 28 74 29 7b 65 2e 24 73 65 74 28 65 2e 63 6f 6e 66 69 67 75 72 65 46 69 65 6c 64 2c 22 70 61 72 74 79 5f 69 64 22 2c 74 29 7d 2c 65 78 70 72 65 73 73 69 6f 6e 3a 22 63 6f 6e 66 69 67 75 72 65 46 69 65 6c 64 2e 70 61 72 74 79 5f 69 64 22 7d 7d 2c 65 2e 5f 6c 28 65 2e 73 69 67 6e 69 6e 67 50 61 72 74 69 65 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 28 22 45 6c 4f 70 74 69 6f 6e 22 2c 7b 6b 65 79 3a 65 2e 69 64 2c 61 74 74 72 73 3a 7b 6c 61 62 65 6c 3a 65 2e 74 69 74 6c 65 2c 76 61 6c 75 65 3a 65 2e 69 64 7d 7d 29 7d 29 29 2c 31 29 3a 65 2e 5f 65 28 29 5d 2c 31 29 2c 22 63 68 65 63 6b 62 6f 78 22 3d 3d 3d 65 2e 66 69 65 6c 64 2e 74 79 70 65 3f 74 28 22 64 69 76 22 2c 7b 61 74 74 72 73 3a 7b 73 6c 6f 74 3a 22 67 72 69 Data Ascii: ction(t){e.$set(e.configureField,"party_id",t)},expression:"configureField.party_id"}},e._l(e.signingParties,(function(e){return t("ElOption",{key:e.id,attrs:{label:e.title,value:e.id}})})),1):e._e()],1),"checkbox"===e.field.type?t("div",{attrs:{slot:"gri
2024-01-16 21:33:26 UTC	16384	IN	Data Raw: 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 28 22 73 70 61 6e 22 2c 7b 6b 65 79 3a 6e 2c 61 74 74 72 73 3a 7b 69 64 3a 22 70 6c 61 6e 2d 63 61 72 64 2d 66 65 61 74 75 72 65 73 2d 22 2e 63 6f 6e 63 61 74 28 6e 29 7d 7d 2c 5b 65 2e 5f 76 28 22 5c 6e 20 20 20 20 20 20 20 20 20 20 22 2b 65 2e 5f 73 28 65 2e 24 74 28 22 63 6f 6d 70 61 6e 79 53 65 74 74 69 6e 67 73 2e 62 69 6c 6c 69 6e 67 2e 70 6c 61 6e 2e 66 65 61 74 75 72 65 73 2e 22 2e 63 6f 6e 63 61 74 28 6e 29 29 29 2b 22 2c 5c 6e 20 20 20 20 20 20 20 20 22 29 5d 29 7d 29 29 2c 74 28 22 73 70 61 6e 22 2c 5b 65 2e 5f 76 28 65 2e 5f 73 28 65 2e 24 74 28 22 63 6f 6d 70 61 6e 79 53 65 74 74 69 6e 67 73 2e 62 69 6c 6c 69 6e 67 2e 70 6c 61 6e 2e 66 65 61 74 75 72 65 73 2e 74 65 6d 70 6c 61 74 65 73 22 29 29 29 Data Ascii: ion(n){return t("span",{key:n,attrs:{id:"plan-card-features-".concat(n)}},[e._v("\n "+e._s(e.$t("companySettings.billing.plan.features.".concat(n)))+",\n ")])})),t("span",[e._v(e._s(e.$t("companySettings.billing.plan.features.templates")))

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.18	49917	216.239.36.181	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:25 UTC	1313	OUT	POST /g/collect?v=2&tid=G-4XE2VYSQ35&gtm=45je41a0v875209417&_p=1705440770354&gcd=11l1l1l1l1&dma=0&cid=2131508639.1705440776&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&_s=2&dl=https%3A%2F%2Fwww.signable.us%2F&sid=1705440775&sct=1&seg=1&dt=Signable%20-%20eSignature%20Solution&en=user_engagement&_et=28716&tfd=40662 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.signable.us X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiTocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.signable.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=BbHGp70uz66EZ7t8DrcLv9xxfcVljF6d19xSvROL7L8s_kahmrUkGGrzfI7BL5pg1a3XJnFf86rmNUVa2u3nk6kmb5VZimgBNCTkKSuYiNnaMk9c0LDBv3iqBpe7RSG5Qs2LVpVz9UzGN0Pyt1JXMcxIRKWB-Rje1Ftofm22_hQ
2024-01-16 21:33:25 UTC	449	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.signable.us Date: Tue, 16 Jan 2024 21:33:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.18	49915	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:25 UTC	705	OUT	GET /js/chunk-vendors.0e57b079.js HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:25 UTC	2528	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6954905 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:26 GMT ETag: "eec3590d978f37c3a4a6723f0ec9fc65" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 db50275fc6a3d1f557e22016322e2ba2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: 85KfbCM5AKGDv1ogTaYfGqGYHxYaLUQ-6wQtMj70Y9q0jpBBAj9dXA== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:25 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 76 65 6e 64 6f 72 73 22 5d 2c 7b 22 30 30 63 65 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 69 3d 53 79 6e 74 61 78 45 72 72 6f 72 2c 72 3d 46 75 6e 63 74 69 6f 6e 2c 6f 3d 54 79 70 65 45 72 72 6f 72 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 72 28 27 22 75 73 65 20 73 74 72 69 63 74 22 3b 20 72 65 74 75 72 6e 20 28 27 2b 65 2b 22 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 22 29 28 29 7d 63 61 74 63 68 28 61 29 7b 7d 7d 2c 6c 3d 4f 62 6a 65 63 74 2e 67 65 74 4f Data Ascii: (window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-vendors"],{"00ce":function(e,a,n){"use strict";var t,i=SyntaxError,r=Function,o=TypeError,s=function(e){try{return r('"use strict"; return ('+e+").constructor;")()}catch(a){}},l=Object.getO
2024-01-16 21:33:25 UTC	16384	IN	Data Raw: e0 b4 b7 e0 b4 82 22 2c 79 79 3a 22 25 64 20 e0 b4 b5 e0 b5 bc e0 b4 b7 e0 b4 82 22 7d 2c 6d 65 72 69 64 69 65 6d 50 61 72 73 65 3a 2f e0 b4 b0 e0 b4 be e0 b4 a4 e0 b5 8d e0 b4 b0 e0 b4 bf 7c e0 b4 b0 e0 b4 be e0 b4 b5 e0 b4 bf e0 b4 b2 e0 b5 86 7c e0 b4 89 e0 b4 9a e0 b5 8d e0 b4 9a 20 e0 b4 95 e0 b4 b4 e0 b4 bf e0 b4 9e e0 b5 8d e0 b4 9e e0 b5 8d 7c e0 b4 b5 e0 b5 88 e0 b4 95 e0 b5 81 e0 b4 a8 e0 b5 8d e0 b4 a8 e0 b5 87 e0 b4 b0 e0 b4 82 7c e0 b4 b0 e0 b4 be e0 b4 a4 e0 b5 8d e0 b4 b0 e0 b4 bf 2f 69 2c 6d 65 72 69 64 69 65 6d 48 6f 75 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 72 65 74 75 72 6e 20 31 32 3d 3d 3d 65 26 26 28 65 3d 30 29 2c 22 e0 b4 b0 e0 b4 be e0 b4 a4 e0 b5 8d e0 b4 b0 e0 b4 bf 22 3d 3d 3d 61 26 26 65 3e 3d 34 7c 7c 22 e0 b4 89 e0 Data Ascii: ",yy:"%d "},meridiemParse:/\|\| \|\|/i,meridiemHour:function(e,a){return 12===e&&(e=0),""===a&&e>=4\|\|"
2024-01-16 21:33:26 UTC	16384	IN	Data Raw: 45 4e 54 52 59 5f 5f 2e 65 78 74 65 6e 73 69 6f 6e 73 2e 74 72 61 63 65 48 65 61 64 65 72 73 7c 7c 28 65 2e 5f 5f 53 45 4e 54 52 59 5f 5f 2e 65 78 74 65 6e 73 69 6f 6e 73 2e 74 72 61 63 65 48 65 61 64 65 72 73 3d 6d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 28 69 5b 22 63 22 5d 29 28 29 3b 69 66 28 61 2e 5f 5f 53 45 4e 54 52 59 5f 5f 29 7b 76 61 72 20 6e 3d 7b 6d 6f 6e 67 6f 64 62 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 28 73 5b 22 61 22 5d 29 28 65 2c 22 2e 2f 69 6e 74 65 67 72 61 74 69 6f 6e 73 2f 6e 6f 64 65 2f 6d 6f 6e 67 6f 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 61 2e 4d 6f 6e 67 6f 7d 2c 6d 6f 6e 67 6f 6f 73 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 4f 62 6a Data Ascii: ENTRY__.extensions.traceHeaders\|\|(e.__SENTRY__.extensions.traceHeaders=m))}function g(){var a=Object(i["c"])();if(a.__SENTRY__){var n={mongodb:function(){var a=Object(s["a"])(e,"./integrations/node/mongo");return new a.Mongo},mongoose:function(){var a=Obj
2024-01-16 21:33:26 UTC	16384	IN	Data Raw: 6f 69 64 20 30 21 3d 3d 61 2e 75 74 63 4f 66 66 73 65 74 29 7b 76 61 72 20 72 3d 61 2e 5f 7a 3b 61 2e 75 74 63 4f 66 66 73 65 74 28 2d 74 2c 6e 29 2c 61 2e 5f 7a 3d 72 7d 65 6c 73 65 20 61 2e 7a 6f 6e 65 28 74 2c 6e 29 7d 2c 45 2e 74 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 6e 29 7b 69 66 28 61 29 7b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 3d 74 79 70 65 6f 66 20 61 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 54 69 6d 65 20 7a 6f 6e 65 20 6e 61 6d 65 20 6d 75 73 74 20 62 65 20 61 20 73 74 72 69 6e 67 2c 20 67 6f 74 20 22 2b 61 2b 22 20 5b 22 2b 74 79 70 65 6f 66 20 61 2b 22 5d 22 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 7a 3d 71 28 61 29 2c 74 68 69 73 2e 5f 7a 3f 65 2e 75 70 64 61 74 65 4f 66 66 73 65 74 28 74 68 69 73 2c 6e 29 3a 44 28 22 4d Data Ascii: oid 0!==a.utcOffset){var r=a._z;a.utcOffset(-t,n),a._z=r}else a.zone(t,n)},E.tz=function(a,n){if(a){if("string"!==typeof a)throw new Error("Time zone name must be a string, got "+a+" ["+typeof a+"]");return this._z=q(a),this._z?e.updateOffset(this,n):D("M
2024-01-16 21:33:26 UTC	16384	IN	Data Raw: 7d 29 29 2c 6e 2e 64 28 61 2c 22 66 61 43 6f 6d 70 61 73 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6e 7d 29 29 2c 6e 2e 64 28 61 2c 22 66 61 53 71 75 61 72 65 43 61 72 65 74 44 6f 77 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 6e 7d 29 29 2c 6e 2e 64 28 61 2c 22 66 61 43 61 72 65 74 53 71 75 61 72 65 44 6f 77 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 6e 7d 29 29 2c 6e 2e 64 28 61 2c 22 66 61 46 69 6c 65 43 69 72 63 6c 65 51 75 65 73 74 69 6f 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 6e 7d 29 29 2c 6e 2e 64 28 61 2c 22 66 61 4c 61 70 74 6f 70 43 6f 64 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 52 6e 7d 29 29 2c 6e 2e 64 28 61 2c Data Ascii: })),n.d(a,"faCompass",(function(){return Bn})),n.d(a,"faSquareCaretDown",(function(){return jn})),n.d(a,"faCaretSquareDown",(function(){return Tn})),n.d(a,"faFileCircleQuestion",(function(){return Nn})),n.d(a,"faLaptopCode",(function(){return Rn})),n.d(a,
2024-01-16 21:33:26 UTC	16384	IN	Data Raw: 7d 29 29 2c 6e 2e 64 28 61 2c 22 66 61 42 61 74 74 65 72 79 43 61 72 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 63 7d 29 29 2c 6e 2e 64 28 61 2c 22 66 61 47 69 66 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 63 7d 29 29 2c 6e 2e 64 28 61 2c 22 66 61 44 69 63 65 54 77 6f 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 63 7d 29 29 2c 6e 2e 64 28 61 2c 22 66 61 43 68 65 73 73 51 75 65 65 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 63 7d 29 29 2c 6e 2e 64 28 61 2c 22 66 61 47 6c 61 73 73 65 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 63 7d 29 29 2c 6e 2e 64 28 61 2c 22 66 61 43 68 65 73 73 42 6f 61 72 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: })),n.d(a,"faBatteryCar",(function(){return uc})),n.d(a,"faGift",(function(){return dc})),n.d(a,"faDiceTwo",(function(){return pc})),n.d(a,"faChessQueen",(function(){return mc})),n.d(a,"faGlasses",(function(){return hc})),n.d(a,"faChessBoard",(function(){
2024-01-16 21:33:26 UTC	16384	IN	Data Raw: 73 65 46 6c 6f 6f 64 57 61 74 65 72 43 69 72 63 6c 65 41 72 72 6f 77 52 69 67 68 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 48 62 7d 29 29 2c 6e 2e 64 28 61 2c 22 66 61 53 71 75 61 72 65 50 6f 6c 6c 48 6f 72 69 7a 6f 6e 74 61 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 78 62 7d 29 29 2c 6e 2e 64 28 61 2c 22 66 61 50 6f 6c 6c 48 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 62 7d 29 29 2c 6e 2e 64 28 61 2c 22 66 61 43 69 72 63 6c 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 44 62 7d 29 29 2c 6e 2e 64 28 61 2c 22 66 61 42 61 63 6b 77 61 72 64 46 61 73 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 56 62 7d 29 29 2c 6e 2e 64 28 61 2c 22 66 61 46 61 73 74 Data Ascii: seFloodWaterCircleArrowRight",(function(){return Hb})),n.d(a,"faSquarePollHorizontal",(function(){return xb})),n.d(a,"faPollH",(function(){return Pb})),n.d(a,"faCircle",(function(){return Db})),n.d(a,"faBackwardFast",(function(){return Vb})),n.d(a,"faFast
2024-01-16 21:33:26 UTC	15281	IN	Data Raw: 65 72 79 33 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 79 7d 29 29 2c 6e 2e 64 28 61 2c 22 66 61 4d 6f 75 6e 74 61 69 6e 43 69 74 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 79 7d 29 29 2c 6e 2e 64 28 61 2c 22 66 61 43 6f 69 6e 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 79 7d 29 29 2c 6e 2e 64 28 61 2c 22 66 61 4b 68 61 6e 64 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 79 7d 29 29 2c 6e 2e 64 28 61 2c 22 66 61 53 6c 69 64 65 72 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 79 7d 29 29 2c 6e 2e 64 28 61 2c 22 66 61 53 6c 69 64 65 72 73 48 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 7a 79 7d 29 29 2c 6e 2e 64 28 61 2c Data Ascii: ery3",(function(){return py})),n.d(a,"faMountainCity",(function(){return my})),n.d(a,"faCoins",(function(){return hy})),n.d(a,"faKhanda",(function(){return by})),n.d(a,"faSliders",(function(){return fy})),n.d(a,"faSlidersH",(function(){return zy})),n.d(a,
2024-01-16 21:33:26 UTC	16384	IN	Data Raw: 43 68 61 6c 6b 62 6f 61 72 64 54 65 61 63 68 65 72 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 77 7d 29 29 2c 6e 2e 64 28 61 2c 22 66 61 50 65 73 6f 53 69 67 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 77 7d 29 29 2c 6e 2e 64 28 61 2c 22 66 61 42 75 69 6c 64 69 6e 67 53 68 69 65 6c 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 41 77 7d 29 29 2c 6e 2e 64 28 61 2c 22 66 61 42 61 62 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 77 7d 29 29 2c 6e 2e 64 28 61 2c 22 66 61 55 73 65 72 73 4c 69 6e 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 77 7d 29 29 2c 6e 2e 64 28 61 2c 22 66 61 51 75 6f 74 65 4c 65 66 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: ChalkboardTeacher",(function(){return yw})),n.d(a,"faPesoSign",(function(){return Ow})),n.d(a,"faBuildingShield",(function(){return Aw})),n.d(a,"faBaby",(function(){return Sw})),n.d(a,"faUsersLine",(function(){return _w})),n.d(a,"faQuoteLeft",(function(){
2024-01-16 21:33:26 UTC	16384	IN	Data Raw: 2c 6e 2e 64 28 61 2c 22 66 61 48 61 6e 64 73 68 61 6b 65 53 69 6d 70 6c 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 52 7d 29 29 2c 6e 2e 64 28 61 2c 22 66 61 48 61 6e 64 73 68 61 6b 65 41 6c 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 52 7d 29 29 2c 6e 2e 64 28 61 2c 22 66 61 4a 65 74 46 69 67 68 74 65 72 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 52 7d 29 29 2c 6e 2e 64 28 61 2c 22 66 61 46 69 67 68 74 65 72 4a 65 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 52 7d 29 29 2c 6e 2e 64 28 61 2c 22 66 61 53 71 75 61 72 65 53 68 61 72 65 4e 6f 64 65 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 52 7d 29 29 2c 6e 2e 64 28 61 2c 22 66 61 53 68 Data Ascii: ,n.d(a,"faHandshakeSimple",(function(){return aR})),n.d(a,"faHandshakeAlt",(function(){return nR})),n.d(a,"faJetFighter",(function(){return tR})),n.d(a,"faFighterJet",(function(){return iR})),n.d(a,"faSquareShareNodes",(function(){return rR})),n.d(a,"faSh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.18	49918	151.101.192.176	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:25 UTC	480	OUT	GET /v3/ HTTP/1.1 Host: js.stripe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:26 UTC	625	IN	HTTP/1.1 200 OK Connection: close Content-Length: 598174 Last-Modified: Tue, 16 Jan 2024 20:14:14 GMT ETag: "e4c35b17abd71c006f39f6cb290c60d0" Cache-Control: max-age=60 Content-Type: text/javascript; charset=utf-8 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Date: Tue, 16 Jan 2024 21:33:25 GMT Via: 1.1 varnish Age: 0 X-Request-ID: 5dbf47ef-5b37-4942-913b-307d289e48e5 X-Served-By: cache-ewr18160-EWR X-Cache: HIT X-Cache-Hits: 1 Vary: Accept-Encoding Timing-Allow-Origin: *
2024-01-16 21:33:26 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 6e 3d 6f 5b 74 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 6f 5b 74 5d 3d 7b 69 64 3a 74 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 72 5b 74 5d 28 61 2c 61 2e 65 78 70 6f 72 74 73 2c 65 29 2c 61 2e 6c 6f 61 64 65 64 3d 21 30 2c 61 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 74 2c 6e 2c 72 3d 7b 37 32 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 6c 2e 6c 65 6e 67 74 68 7c 7c 28 69 28 29 2c 21 30 29 2c 6c 5b 6c 2e 6c 65 6e 67 74 68 5d 3d 65 7d 66 75 6e 63 74 69 6f 6e Data Ascii: !function(){function e(t){var n=o[t];if(void 0!==n)return n.exports;var a=o[t]={id:t,loaded:!1,exports:{}};return r[t](a,a.exports,e),a.loaded=!0,a.exports}var t,n,r={723:function(e,t,n){"use strict";function r(e){l.length\|\|(i(),!0),l[l.length]=e}function
2024-01-16 21:33:26 UTC	16384	IN	Data Raw: 56 22 2c 53 58 3a 22 53 58 22 2c 53 5a 3a 22 53 5a 22 2c 54 41 3a 22 54 41 22 2c 54 43 3a 22 54 43 22 2c 54 44 3a 22 54 44 22 2c 54 46 3a 22 54 46 22 2c 54 47 3a 22 54 47 22 2c 54 48 3a 22 54 48 22 2c 54 4a 3a 22 54 4a 22 2c 54 4b 3a 22 54 4b 22 2c 54 4c 3a 22 54 4c 22 2c 54 4d 3a 22 54 4d 22 2c 54 4e 3a 22 54 4e 22 2c 54 4f 3a 22 54 4f 22 2c 54 52 3a 22 54 52 22 2c 54 54 3a 22 54 54 22 2c 54 56 3a 22 54 56 22 2c 54 57 3a 22 54 57 22 2c 54 5a 3a 22 54 5a 22 2c 55 41 3a 22 55 41 22 2c 55 47 3a 22 55 47 22 2c 55 53 3a 22 55 53 22 2c 55 59 3a 22 55 59 22 2c 55 5a 3a 22 55 5a 22 2c 56 41 3a 22 56 41 22 2c 56 43 3a 22 56 43 22 2c 56 45 3a 22 56 45 22 2c 56 47 3a 22 56 47 22 2c 56 4e 3a 22 56 4e 22 2c 56 55 3a 22 56 55 22 2c 57 46 3a 22 57 46 22 2c 57 53 3a 22 Data Ascii: V",SX:"SX",SZ:"SZ",TA:"TA",TC:"TC",TD:"TD",TF:"TF",TG:"TG",TH:"TH",TJ:"TJ",TK:"TK",TL:"TL",TM:"TM",TN:"TN",TO:"TO",TR:"TR",TT:"TT",TV:"TV",TW:"TW",TZ:"TZ",UA:"UA",UG:"UG",US:"US",UY:"UY",UZ:"UZ",VA:"VA",VC:"VC",VE:"VE",VG:"VG",VN:"VN",VU:"VU",WF:"WF",WS:"
2024-01-16 21:33:26 UTC	16384	IN	Data Raw: 29 29 2c 70 61 79 6d 65 6e 74 4d 65 74 68 6f 64 4f 72 64 65 72 3a 28 30 2c 69 2e 6a 74 29 28 28 30 2c 69 2e 43 54 29 28 69 2e 5a 5f 29 29 7d 29 29 2c 4e 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 28 30 2c 61 2e 5a 29 28 28 30 2c 61 2e 5a 29 28 7b 7d 2c 41 29 2c 7b 7d 2c 7b 62 75 74 74 6f 6e 54 68 65 6d 65 3a 28 30 2c 69 2e 6a 74 29 28 28 30 2c 69 2e 6d 43 29 28 76 29 29 2c 62 75 74 74 6f 6e 54 79 70 65 3a 28 30 2c 69 2e 6a 74 29 28 28 30 2c 69 2e 6d 43 29 28 67 29 29 2c 77 61 6c 6c 65 74 73 3a 28 30 2c 69 2e 6a 74 29 28 28 30 2c 69 2e 6d 43 29 28 79 29 29 7d 29 29 2c 49 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 6e 61 6d 65 3a 69 2e 5a 5f 2c 61 6d 6f 75 6e 74 3a 69 2e 42 69 7d 29 2c 52 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 75 6e 69 74 3a Data Ascii: )),paymentMethodOrder:(0,i.jt)((0,i.CT)(i.Z_))})),N=Object.freeze((0,a.Z)((0,a.Z)({},A),{},{buttonTheme:(0,i.jt)((0,i.mC)(v)),buttonType:(0,i.jt)((0,i.mC)(g)),wallets:(0,i.jt)((0,i.mC)(y))})),I=Object.freeze({name:i.Z_,amount:i.Bi}),R=Object.freeze({unit:
2024-01-16 21:33:26 UTC	16384	IN	Data Raw: 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 61 3d 6f 2e 73 61 76 65 50 61 79 6d 65 6e 74 4d 65 74 68 6f 64 3b 69 66 28 21 61 29 72 65 74 75 72 6e 7b 73 61 76 65 50 61 79 6d 65 6e 74 4d 65 74 68 6f 64 54 72 75 6e 63 61 74 65 64 3a 6e 75 6c 6c 2c 77 61 72 6e 69 6e 67 73 3a 5b 5d 7d 3b 69 66 28 6e 75 6c 6c 3d 3d 61 7c 7c 21 61 2e 6d 65 73 73 61 67 65 73 29 72 65 74 75 72 6e 7b 73 61 76 65 50 61 79 6d 65 6e 74 4d 65 74 68 6f 64 54 72 75 6e 63 61 74 65 64 3a 61 2c 77 61 72 6e 69 6e 67 73 3a 5b 5d 7d 3b 76 61 72 20 69 3d 5b 5d 2c 63 3d 6e 75 6c 6c 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 28 65 3d 61 2e 6d 65 73 73 61 67 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 Data Ascii: &&void 0!==arguments[0]?arguments[0]:{},a=o.savePaymentMethod;if(!a)return{savePaymentMethodTruncated:null,warnings:[]};if(null==a\|\|!a.messages)return{savePaymentMethodTruncated:a,warnings:[]};var i=[],c=null==a\|\|null===(e=a.messages)\|\|void 0===e?void 0:e
2024-01-16 21:33:26 UTC	16384	IN	Data Raw: 72 6f 70 2e 64 6f 6d 45 6c 65 6d 65 6e 74 29 2c 6f 2e 5f 62 61 63 6b 64 72 6f 70 2e 6d 6f 75 6e 74 28 29 7d 2c 6f 2e 73 68 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 2e 5f 62 61 63 6b 64 72 6f 70 2e 73 68 6f 77 28 29 2c 28 30 2c 67 2e 79 71 29 28 6f 2e 5f 69 66 72 61 6d 65 2c 50 29 2c 6f 2e 69 73 56 69 73 69 62 6c 65 3d 21 30 7d 2c 6f 2e 66 61 64 65 49 6e 42 61 63 6b 64 72 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 2e 5f 62 61 63 6b 64 72 6f 70 2e 66 61 64 65 49 6e 28 29 7d 2c 6f 2e 5f 62 61 63 6b 64 72 6f 70 46 61 64 65 6f 75 74 50 72 6f 6d 69 73 65 3d 6e 75 6c 6c 2c 6f 2e 66 61 64 65 4f 75 74 42 61 63 6b 64 72 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 62 61 63 6b 64 72 6f 70 46 61 64 65 6f 75 74 50 72 6f 6d 69 73 65 7c Data Ascii: rop.domElement),o._backdrop.mount()},o.show=function(){o._backdrop.show(),(0,g.yq)(o._iframe,P),o.isVisible=!0},o.fadeInBackdrop=function(){o._backdrop.fadeIn()},o._backdropFadeoutPromise=null,o.fadeOutBackdrop=function(){return o._backdropFadeoutPromise\|
2024-01-16 21:33:26 UTC	16384	IN	Data Raw: 61 70 73 53 65 72 76 69 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 77 69 6e 64 6f 77 2e 67 6d 5f 61 75 74 68 46 61 69 6c 75 72 65 3b 77 69 6e 64 6f 77 2e 67 6d 5f 61 75 74 68 46 61 69 6c 75 72 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 26 26 74 28 29 2c 55 3d 21 30 7d 3b 76 61 72 20 6e 3d 6e 65 77 20 65 2e 41 75 74 6f 63 6f 6d 70 6c 65 74 65 53 65 72 76 69 63 65 2c 72 3d 6e 65 77 20 65 2e 41 75 74 6f 63 6f 6d 70 6c 65 74 65 53 65 73 73 69 6f 6e 54 6f 6b 65 6e 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 72 65 74 75 72 6e 7b 61 75 74 6f 63 6f 6d 70 6c 65 74 65 53 65 72 76 69 63 65 3a 6e 2c 73 65 73 73 69 6f 6e 54 6f 6b 65 6e 3a 72 2c 70 6c 61 63 65 53 65 72 76 69 63 65 3a 6e 65 77 20 Data Ascii: apsService=function(e){var t=window.gm_authFailure;window.gm_authFailure=function(){t&&t(),U=!0};var n=new e.AutocompleteService,r=new e.AutocompleteSessionToken,o=document.createElement("div");return{autocompleteService:n,sessionToken:r,placeService:new
2024-01-16 21:33:26 UTC	16384	IN	Data Raw: 2c 6e 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 2b 29 7b 76 61 72 20 6f 3d 65 5b 72 5d 3b 6f 2e 76 61 6c 75 65 2e 74 72 69 6d 28 29 26 26 6e 2e 70 75 73 68 28 62 28 6f 29 29 7d 72 65 74 75 72 6e 20 6e 7d 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 3d 6e 75 6c 6c 3d 3d 3d 28 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 5b 63 6c 61 73 73 2a 3d 22 43 75 73 74 6f 6d 65 72 49 6e 66 6f 53 65 63 74 69 6f 6e 2d 65 6d 61 69 6c 2d 22 5d 27 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 65 2e 74 65 78 74 43 6f 6e 74 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 74 72 69 6d 28 29 3b 72 65 74 75 72 6e 20 6e 26 26 63 2e 43 55 2e 74 65 73 74 28 6e 29 Data Ascii: ,n=[],r=0;r<t;r++){var o=e[r];o.value.trim()&&n.push(b(o))}return n},y=function(){var e,t,n=null===(e=document.querySelector('[class*="CustomerInfoSection-email-"]'))\|\|void 0===e\|\|null===(t=e.textContent)\|\|void 0===t?void 0:t.trim();return n&&c.CU.test(n)
2024-01-16 21:33:26 UTC	16384	IN	Data Raw: 74 5f 62 65 74 61 5f 31 3a 22 65 63 65 5f 61 70 70 6c 65 5f 70 61 79 5f 62 69 6c 6c 69 6e 67 5f 61 64 64 72 65 73 73 5f 65 76 65 6e 74 5f 62 65 74 61 5f 31 22 2c 74 77 69 6e 74 5f 70 6d 5f 62 65 74 61 5f 31 3a 22 74 77 69 6e 74 5f 70 6d 5f 62 65 74 61 5f 31 22 2c 64 69 73 61 62 6c 65 5f 6c 69 6e 6b 5f 70 61 73 73 74 68 72 6f 75 67 68 5f 62 65 74 61 5f 31 3a 22 64 69 73 61 62 6c 65 5f 6c 69 6e 6b 5f 70 61 73 73 74 68 72 6f 75 67 68 5f 62 65 74 61 5f 31 22 7d 2c 73 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 6e 65 74 62 61 6e 6b 69 6e 67 42 61 6e 6b 3a 22 6e 65 74 62 61 6e 6b 69 6e 67 5f 62 61 6e 6b 5f 62 65 74 61 5f 31 22 2c 73 68 69 70 70 69 6e 67 41 64 64 72 65 73 73 3a 5b 22 73 68 69 70 70 69 6e 67 5f 61 64 64 72 65 73 73 5f 65 6c 65 6d 65 6e 74 5f Data Ascii: t_beta_1:"ece_apple_pay_billing_address_event_beta_1",twint_pm_beta_1:"twint_pm_beta_1",disable_link_passthrough_beta_1:"disable_link_passthrough_beta_1"},s=Object.freeze({netbankingBank:"netbanking_bank_beta_1",shippingAddress:["shipping_address_element_
2024-01-16 21:33:26 UTC	16384	IN	Data Raw: 79 3a 22 69 73 50 65 6e 64 69 6e 67 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 70 65 6e 64 69 6e 67 22 3d 3d 3d 74 68 69 73 2e 5f 73 74 61 74 65 7d 7d 5d 29 2c 65 7d 28 29 7d 2c 33 35 33 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 48 62 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 2c 51 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 7d 2c 53 56 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 2c 58 71 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 2c 64 33 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 7d 2c 6d 62 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d Data Ascii: y:"isPending",value:function(){return"pending"===this._state}}]),e}()},3534:function(e,t,n){"use strict";n.d(t,{Hb:function(){return l},Ql:function(){return p},SV:function(){return u},Xq:function(){return d},d3:function(){return h},mb:function(){return i}
2024-01-16 21:33:26 UTC	16384	IN	Data Raw: 22 3a 72 65 74 75 72 6e 7b 63 64 6e 4e 61 6d 65 3a 72 2c 63 64 6e 50 6f 70 44 63 3a 6e 75 6c 6c 3d 3d 3d 28 6e 3d 65 2e 67 65 74 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 28 22 58 2d 53 65 72 76 65 64 2d 42 79 22 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 73 70 6c 69 74 28 22 2c 20 22 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 3b 72 65 74 75 72 6e 20 74 5b 74 2e 6c 65 6e 67 74 68 2d 31 5d 7d 29 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 7d 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 7d 7d 28 65 29 29 3a 74 7d 29 29 7d 29 29 7d 2c 5a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c Data Ascii: ":return{cdnName:r,cdnPopDc:null===(n=e.getResponseHeader("X-Served-By"))\|\|void 0===n?void 0:n.split(", ").map((function(e){var t=e.split("-");return t[t.length-1]})).join(", ")};default:return}}(e)):t}))}))},Z=function(){function e(t,n){var r=arguments.l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.18	49922	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:26 UTC	858	OUT	GET /css/chunk-00a20ec4.e88fa9a7.css HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:27 UTC	2511	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 3799 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:00 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:28 GMT ETag: "1e7dc25289c7125ba28a5c11b742cfe5" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 878742d0ad1850cbfc7910a5c4919ed0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: 1hJzJ71tf6Q6DdAEdPjxSe279g-Q9AnOMlWUtoTbs_-VqvDHPpDDKQ== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:27 UTC	3799	IN	Data Raw: 2e 6f 2d 6d 6f 64 61 6c 5f 5f 62 6f 78 5b 64 61 74 61 2d 76 2d 66 31 65 62 30 36 61 34 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 34 35 25 3b 6c 65 66 74 3a 35 30 25 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 70 78 3b 6f 70 61 63 69 74 79 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 36 35 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 Data Ascii: .o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.18	49921	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:26 UTC	858	OUT	GET /css/chunk-1353338a.470369c5.css HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:27 UTC	2511	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 1919 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:00 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:28 GMT ETag: "6b34ed69a95ff2db40a2c944d3faaa0c" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 b4f7307b0bd82e33fcc14ab1b84bcd7c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: bqNDqQhW7IuCCTFdRMKvHyWEkpS87JuyuSspV4UhwHVZE84vU_RPXw== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:27 UTC	1919	IN	Data Raw: 2e 6f 2d 6d 6f 64 61 6c 5f 5f 62 6f 78 5b 64 61 74 61 2d 76 2d 66 31 65 62 30 36 61 34 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 34 35 25 3b 6c 65 66 74 3a 35 30 25 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 70 78 3b 6f 70 61 63 69 74 79 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 36 35 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 Data Ascii: .o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.18	49924	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:26 UTC	858	OUT	GET /css/chunk-1565c410.e2751d66.css HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:27 UTC	2511	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 2076 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:00 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:28 GMT ETag: "3498698bfe371ad0067b853f221f12be" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 22ab92a35add26b3d8027870bbb6c672.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: H7V7cdfReOt8IP8wu19EzOWajvr0WSCMvkSyTX3MwMOSQKzNAVL17Q== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:27 UTC	2076	IN	Data Raw: 2e 6f 2d 6d 6f 64 61 6c 5f 5f 62 6f 78 5b 64 61 74 61 2d 76 2d 66 31 65 62 30 36 61 34 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 34 35 25 3b 6c 65 66 74 3a 35 30 25 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 70 78 3b 6f 70 61 63 69 74 79 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 36 35 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 Data Ascii: .o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.18	49923	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:26 UTC	858	OUT	GET /css/chunk-194b1996.b657570a.css HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:27 UTC	2511	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 2256 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:00 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:28 GMT ETag: "4d8c1e88f99321b8166bd8fd66af1314" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 f0a9678a89ea6fb10debcb7507e49828.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: dPAakIwTXoZTnQC2Sgo-pqzKJiDENJ9Am4ircf1f2vwLHuTXMcopPQ== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:27 UTC	2256	IN	Data Raw: 2e 6f 2d 6d 6f 64 61 6c 5f 5f 62 6f 78 5b 64 61 74 61 2d 76 2d 66 31 65 62 30 36 61 34 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 34 35 25 3b 6c 65 66 74 3a 35 30 25 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 70 78 3b 6f 70 61 63 69 74 79 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 36 35 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 Data Ascii: .o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.18	49925	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:26 UTC	858	OUT	GET /css/chunk-1e9122a3.470369c5.css HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:27 UTC	2511	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 1919 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:00 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:28 GMT ETag: "6b34ed69a95ff2db40a2c944d3faaa0c" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 55545918b0c914bb8f5282930649df4c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: hDtlKr39qcOcGLzCVkUkBjbLV1mv0v_Ua0opZwEya3W1jH54SmAkHw== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:27 UTC	1919	IN	Data Raw: 2e 6f 2d 6d 6f 64 61 6c 5f 5f 62 6f 78 5b 64 61 74 61 2d 76 2d 66 31 65 62 30 36 61 34 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 34 35 25 3b 6c 65 66 74 3a 35 30 25 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 70 78 3b 6f 70 61 63 69 74 79 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 36 35 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 Data Ascii: .o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.18	49926	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:27 UTC	858	OUT	GET /css/chunk-280daae3.81389a4a.css HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:27 UTC	2511	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 3027 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:00 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:28 GMT ETag: "39d6cdd71250a00bed0047ce940f69fb" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 0fd782cbc1c3c43778f2ac89b2bfb444.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: pyF_EHDiLdAEy0PIneicpdmk2Iicu69pxMTTTw7OI4Af2x-dwER8Ew== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:27 UTC	3027	IN	Data Raw: 2e 63 61 72 64 5b 64 61 74 61 2d 76 2d 37 63 64 39 63 63 37 30 5d 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 35 72 65 6d 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 3b 2d 2d 74 77 2d 73 68 61 64 6f 77 3a 30 70 78 20 30 70 78 20 35 70 78 20 2d 32 70 78 20 23 64 64 65 32 65 35 7d 2e 63 61 72 64 5b 64 61 74 61 2d 76 2d 37 63 64 39 63 63 37 30 5d 2c 2e 63 61 72 64 5b 64 61 74 61 2d 76 2d 37 63 64 39 63 63 37 30 5d 3a 68 6f 76 65 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 76 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 6f 66 66 73 65 74 2d 73 68 61 64 6f 77 2c 30 20 30 20 74 72 61 6e 73 70 61 72 65 6e 74 29 2c 76 61 Data Ascii: .card[data-v-7cd9cc70]{position:relative;width:100%;cursor:pointer;border-radius:.5rem;padding:15px;--tw-shadow:0px 0px 5px -2px #dde2e5}.card[data-v-7cd9cc70],.card[data-v-7cd9cc70]:hover{-webkit-box-shadow:var(--tw-ring-offset-shadow,0 0 transparent),va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.18	49927	35.186.247.156	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:27 UTC	674	OUT	POST /api/300342/envelope/?sentry_key=f7d01a52e1b04292834f1daa40ae2ad9&sentry_version=7 HTTP/1.1 Host: sentry.io Connection: keep-alive Content-Length: 456 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://signable.app Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://signable.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:27 UTC	456	OUT	Data Raw: 7b 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 30 31 2d 31 36 54 32 31 3a 33 33 3a 32 36 2e 35 38 38 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 76 75 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 36 2e 31 39 2e 37 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 73 65 73 73 69 6f 6e 22 7d 0a 7b 22 73 69 64 22 3a 22 34 65 37 61 32 31 61 66 32 30 32 62 34 35 35 32 61 30 31 37 37 34 30 30 66 39 33 30 64 61 61 63 22 2c 22 69 6e 69 74 22 3a 74 72 75 65 2c 22 73 74 61 72 74 65 64 22 3a 22 32 30 32 34 2d 30 31 2d 31 36 54 32 31 3a 33 33 3a 32 36 2e 35 38 37 5a 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 31 2d 31 36 54 32 31 3a 33 33 3a 32 36 2e 35 38 37 5a 22 2c 22 73 74 61 74 75 73 22 3a Data Ascii: {"sent_at":"2024-01-16T21:33:26.588Z","sdk":{"name":"sentry.javascript.vue","version":"6.19.7"}}{"type":"session"}{"sid":"4e7a21af202b4552a0177400f930daac","init":true,"started":"2024-01-16T21:33:26.587Z","timestamp":"2024-01-16T21:33:26.587Z","status":
2024-01-16 21:33:27 UTC	553	IN	HTTP/1.1 200 OK server: nginx date: Tue, 16 Jan 2024 21:33:27 GMT content-type: application/json Content-Length: 2 access-control-allow-origin: * vary: origin,access-control-request-method,access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin x-envoy-upstream-service-time: 0 strict-transport-security: max-age=31536000; includeSubDomains; preload via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-16 21:33:27 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.18	49935	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:27 UTC	627	OUT	GET /assets/signable_squiggle_1_cropped.svg HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signable.app/css/app.b771bac2.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:28 UTC	2516	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1759 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:00 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:29 GMT ETag: "b73fe1e8ea11cfe74013623e9cd3cfe3" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 22ab92a35add26b3d8027870bbb6c672.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: 8qTwUTlWGycDgNGwexlf9GighgQorxzOPZQUDCLyrg-mEhLnUQeXVw== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:28 UTC	1759	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 76 69 65 77 42 6f 78 3d 22 30 2e 34 37 20 30 2e 30 38 20 37 32 2e 37 39 20 31 37 31 2e 35 35 22 3e 0a 3c 70 61 74 68 20 64 3d 22 6d 32 38 2e 39 34 20 31 30 36 2e 35 20 31 2e 31 33 2e 39 2e 34 34 2d 31 2e 34 63 31 2e 35 38 2d 35 2e 30 32 20 34 2e 35 35 2d 39 2e 39 33 20 38 2e 34 2d 31 32 2e 38 36 20 33 2e 37 37 2d 32 2e 38 38 20 38 2e 34 2d 33 2e 38 37 20 31 33 2e 35 35 2d 31 2e 31 33 20 34 2e 31 35 20 32 2e 32 31 20 37 2e 33 33 20 36 2e 34 38 20 36 2e 36 34 20 31 31 2e 32 35 2d 2e 37 32 20 35 2e 33 35 2d 35 2e 37 35 20 39 2e 30 37 2d 31 30 2e 38 20 31 30 2e 35 37 61 32 31 2e 35 32 20 32 31 2e 35 32 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0.47 0.08 72.79 171.55"><path d="m28.94 106.5 1.13.9.44-1.4c1.58-5.02 4.55-9.93 8.4-12.86 3.77-2.88 8.4-3.87 13.55-1.13 4.15 2.21 7.33 6.48 6.64 11.25-.72 5.35-5.75 9.07-10.8 10.57a21.52 21.52

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.18	49934	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:28 UTC	789	OUT	GET /img/signable_white_raster.d35aa760.png HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signable.app/register?country_code=US&_gl=1%2a1aykcz3%2a_gcl_au%2aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%2a_ga%2aMjEzMTUwODYzOS4xNzA1NDQwNzc2%2a_ga_4XE2VYSQ35%2aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:28 UTC	2513	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 15391 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:29 GMT ETag: "d35aa7605f55dae20534aaa3cfad5006" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 878742d0ad1850cbfc7910a5c4919ed0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: j4t76rxoNMC0ZoNvJIO_YhVA-m4b8u2YGERohSxEqo2ixpfs0CGH8A== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:28 UTC	13871	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 8b 00 00 00 c5 08 06 00 00 00 3c 27 b8 22 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 3b d4 49 44 41 54 78 da ed 9d 77 98 57 c5 f5 87 bf bb f4 8e 0a 88 88 a8 a8 28 0a 76 50 2c b1 81 a8 51 b0 61 6f 58 30 f6 8e 1a 4b ec bd c4 d8 c0 82 85 58 82 12 bb 41 49 88 5d 51 c4 12 1b 6e 01 15 c4 0a 4a af fb fe fe 98 b3 3f 56 dc f2 9d 5b e7 ce 3d ef f3 ec c3 f3 24 ee de 99 73 66 ee 7c ee cc 99 73 0a 85 94 00 1a 01 eb 03 fd 81 e3 81 2b 80 5b 81 91 c0 63 f2 33 12 b8 13 b8 06 38 03 38 00 e8 07 ac 5a 50 ea a4 b2 b2 b0 61 45 59 e1 b2 ca 8a c2 e8 8a b2 c2 75 d3 be 2c f4 54 ab 28 8a e2 3b 40 1b 60 28 70 17 f0 30 70 39 b0 b9 5a c6 19 ff 6c 26 3e 79 58 7c 74 34 d0 4a 2d a3 d4 1c 24 ad 80 41 c0 8d c0 2b c0 Data Ascii: PNGIHDR<'"bKGD;IDATxwW(vP,QaoX0KXAI]QnJ?V[=$sf\|s+[c388ZPaEYu,T(;@`(p0p9Zl&>yX\|t4J-$A+
2024-01-16 21:33:28 UTC	1520	IN	Data Raw: 0e c5 6c 83 4b ac a5 d5 cd a8 9c 8c cf 53 6c 6f bb e9 ac 56 14 45 51 94 e8 16 e2 cd 81 f7 83 66 12 07 b6 08 f9 fc e6 c0 6e c0 35 72 91 26 8b a9 6c be 14 61 78 2a b0 6d d0 f8 08 a0 8b 88 6f 1b b6 cb c1 18 b5 1d 9f 1a af a8 28 8a a2 28 11 2c c0 cd 25 11 f5 e2 00 e2 e8 53 60 48 88 67 77 07 86 c9 8e e4 9c 8c 09 c3 f9 98 32 78 b7 c9 f1 78 a7 88 fd 62 7b f3 fc 19 cf c7 e9 9e 01 7c b4 85 ce 70 45 51 14 45 09 b7 00 6f 2f 57 c9 83 dc 70 3e d2 36 0d 8e 24 c2 3e 0a 18 1d 32 57 63 1a 54 60 4a e1 9d 0a 6c 19 77 8e a6 00 47 ae 55 40 6f 8f c7 ea 1b b6 f9 3c 75 86 2b 8a a2 28 4a f0 85 b7 99 54 60 b1 4d 87 33 0f b8 a8 d8 1b ce 40 4b 4c ad c4 9b 09 5f 3b 3a 49 16 48 09 a1 eb a5 ca cc ea 29 f8 a8 63 80 d2 40 e3 3d 1d af 83 03 f8 70 b8 ce 74 45 51 14 45 09 b6 f0 6e 69 99 ed Data Ascii: lKSloVEQfn5r&lax*mo((,%S`Hgw2xxb{\|pEQEo/Wp>6$>2WcT`JlwGU@o<u+(JT`M3@KL_;:IH)c@=ptEQEni

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.18	49933	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:28 UTC	627	OUT	GET /assets/signable_squiggle_2_cropped.svg HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signable.app/css/app.b771bac2.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:28 UTC	2515	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 955 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:00 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:29 GMT ETag: "e15b9724a0420da84c2c4d6aada57141" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 71c1b7cb74a6a3840a4f2be73ffddc84.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: wzbc4Ynb4NAFSnQC8pZrmePBLakuMUchTIuOHBIrLkfLH4RapyaVQQ== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:28 UTC	955	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 76 69 65 77 42 6f 78 3d 22 2d 30 2e 30 34 20 30 20 31 36 33 2e 33 33 20 39 32 2e 36 36 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 31 2e 32 31 20 32 2e 35 33 41 35 2e 32 33 20 35 2e 32 33 20 30 20 30 20 30 20 34 2e 33 36 2e 36 43 32 2e 32 36 20 31 2e 37 38 20 31 2e 32 20 35 2e 30 34 20 32 2e 37 33 20 37 2e 30 37 63 2e 33 37 2e 35 36 2e 39 20 31 20 31 2e 35 20 31 2e 32 39 61 34 2e 36 33 20 34 2e 36 33 20 30 20 30 20 30 20 35 2e 36 34 20 31 63 32 2e 33 36 2d 31 2e 33 32 20 32 2e 37 33 2d 34 2e 37 20 31 2e 33 34 2d 36 2e 38 33 5a 6d 31 35 32 2e 30 38 20 34 35 2e 32 36 61 36 32 2e 30 38 20 36 32 2e 30 38 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="-0.04 0 163.33 92.66"><path d="M11.21 2.53A5.23 5.23 0 0 0 4.36.6C2.26 1.78 1.2 5.04 2.73 7.07c.37.56.9 1 1.5 1.29a4.63 4.63 0 0 0 5.64 1c2.36-1.32 2.73-4.7 1.34-6.83Zm152.08 45.26a62.08 62.08

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.18	49936	151.101.128.176	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:28 UTC	688	OUT	GET /v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html HTTP/1.1 Host: js.stripe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:28 UTC	1325	IN	HTTP/1.1 200 OK Connection: close Content-Length: 200 Last-Modified: Mon, 08 Jan 2024 21:41:59 GMT ETag: "3437aaddcdf6922d623e172c2d6f9278" Cache-Control: max-age=31536000 Content-Type: text/html; charset=utf-8 content-security-policy: base-uri 'none'; connect-src 'self' https://r.stripe.com; default-src 'self'; font-src 'none'; form-action 'none'; frame-src https://m.stripe.network; img-src https://q.stripe.com; media-src 'none'; object-src 'none'; script-src 'self'; style-src 'self'; worker-src 'none'; report-uri https://q.stripe.com/csp-report content-security-policy-report-only: base-uri 'none'; connect-src 'self' https://r.stripe.com; default-src 'self'; font-src 'none'; form-action 'none'; frame-src https://m.stripe.network; img-src https://q.stripe.com; media-src 'none'; object-src 'none'; script-src 'self'; style-src 'self'; worker-src 'none'; report-uri https://q.stripe.com/csp-report strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Date: Tue, 16 Jan 2024 21:33:28 GMT Via: 1.1 varnish Age: 640993 X-Request-ID: 00cf40d4-967a-4e7c-9fea-a0ee60b593d2 X-Served-By: cache-ewr18149-EWR X-Cache: HIT X-Cache-Hits: 1 Vary: Accept-Encoding Timing-Allow-Origin: *
2024-01-16 21:33:28 UTC	200	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 73 63 72 69 70 74 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 73 74 72 69 70 65 2e 63 6f 6d 2f 76 33 2f 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 6a 73 2f 6d 2d 6f 75 74 65 72 2d 31 35 61 32 62 34 30 61 30 35 38 64 64 66 66 31 63 66 66 64 62 36 33 37 37 39 66 65 33 64 65 31 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html><head><meta charset="utf-8"/><script defer="defer" src="https://js.stripe.com/v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js"></script></head><body></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.18	49938	35.186.247.156	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:28 UTC	414	OUT	GET /api/300342/envelope/?sentry_key=f7d01a52e1b04292834f1daa40ae2ad9&sentry_version=7 HTTP/1.1 Host: sentry.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:28 UTC	550	IN	HTTP/1.1 405 Method Not Allowed server: nginx date: Tue, 16 Jan 2024 21:33:28 GMT Content-Length: 0 access-control-allow-origin: * vary: origin,access-control-request-method,access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST x-envoy-upstream-service-time: 0 strict-transport-security: max-age=31536000; includeSubDomains; preload via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.18	49941	151.101.128.176	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:28 UTC	622	OUT	GET /v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js HTTP/1.1 Host: js.stripe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:28 UTC	634	IN	HTTP/1.1 200 OK Connection: close Content-Length: 526 Last-Modified: Tue, 02 Jan 2024 21:07:17 GMT ETag: "d96c709017743c0759cf3853d1806ba5" Cache-Control: max-age=31536000 Content-Type: text/javascript; charset=utf-8 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Date: Tue, 16 Jan 2024 21:33:28 GMT Via: 1.1 varnish Age: 1161973 X-Request-ID: eff00848-59c6-424f-ae21-214b4f4a1029 X-Served-By: cache-lga21951-LGA X-Cache: HIT X-Cache-Hits: 1 Vary: Accept-Encoding Timing-Allow-Origin: *
2024-01-16 21:33:28 UTC	526	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 22 68 74 74 70 73 3a 2f 2f 6d 2e 73 74 72 69 70 65 2e 6e 65 74 77 6f 72 6b 22 2c 6e 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 2c 74 3d 2f 70 72 65 76 69 65 77 3d 74 72 75 65 2f 2e 74 65 73 74 28 6e 29 3f 22 69 6e 6e 65 72 2d 70 72 65 76 69 65 77 2e 68 74 6d 6c 22 3a 22 69 6e 6e 65 72 2e 68 74 6d 6c 22 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 6f 2e 73 72 63 3d 22 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 29 2e 63 6f 6e 63 61 74 28 6e 29 3b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 2e 6f 72 69 67 69 6e 3d 3d 3d 65 29 7b 76 61 Data Ascii: !function(){"use strict";var e="https://m.stripe.network",n=window.location.hash,t=/preview=true/.test(n)?"inner-preview.html":"inner.html",o=document.createElement("iframe");o.src="".concat(e,"/").concat(t).concat(n);var i=function(n){if(n.origin===e){va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.18	49951	157.240.241.1	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:28 UTC	501	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:28 UTC	1810	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top permissions-policy-report-only: autoplay=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(), picture-in-picture=(), xr-spatial-tracking=() permissions-policy: accelerometer=(), ambient-light-sensor=(), bluetooth=(), camera=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=() cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin-allow-popups Pragma: public Cache-Control: public, max-age=1200 Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: DENY Strict-Transport-Security: max-age=31536000; preload; includeSubDomains X-FB-Debug: zMcCcq3sgstJYUe1qXBuh/4x4FF3VJ82Z+2ufHVRF6MMhZwIvbQeFQVCfyfzfnNEwcQeZOJn5fqEiG03kAmr4A== Date: Tue, 16 Jan 2024 21:33:28 GMT Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 217242
2024-01-16 21:33:28 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-01-16 21:33:29 UTC	15879	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-01-16 21:33:29 UTC	16384	IN	Data Raw: 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4c 6f 67 67 69 6e 67 22 29 2c 62 3d 61 2e 6c 6f 67 55 73 65 72 45 72 72 6f 72 3b 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 3b 76 61 72 20 63 3d 61 2e 54 79 70 65 64 2c 64 3d 61 2e 63 6f 65 72 63 65 3b 66 75 6e 63 74 69 6f 6e 20 65 28 61 29 7b 61 3d 64 28 61 2c 63 2e 66 62 69 64 28 29 29 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 7b 76 61 Data Ascii: ction(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsLogging"),b=a.logUserError;a=f.getFbeventsModules("SignalsFBEventsTyped");var c=a.Typed,d=a.coerce;function e(a){a=d(a,c.fbid());if(a==null){va
2024-01-16 21:33:29 UTC	16384	IN	Data Raw: 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 21 31 3b 69 66 28 74 79 70 65 6f 66 20 62 21 3d 3d 22 73 74 72 69 6e 67 22 7c 7c 21 4f 28 62 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 49 6e 76 61 6c 69 64 20 41 72 67 75 6d 65 6e 74 3a 20 22 27 2b 62 2b 27 22 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 6f 70 74 2d 69 6e 20 66 65 61 74 75 72 65 27 29 3b 4f 28 62 29 26 26 28 74 68 69 73 2e 6f 70 74 49 6e 73 2e 6f 70 74 49 6e 28 61 2c 62 2c 64 29 2c 45 28 5b 62 5d 2e 63 6f 6e 63 61 74 28 6d 28 4d 5b 62 5d 7c 7c 5b 5d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 4e 5b 61 5d 26 26 45 28 4e 5b 61 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 2e 66 62 71 2e 6c 6f 61 64 50 6c 75 67 69 6e 28 61 29 7d 29 7d 29 29 3b 72 65 74 75 72 6e 20 Data Ascii: arguments[2]:!1;if(typeof b!=="string"\|\|!O(b))throw new Error('Invalid Argument: "'+b+'" is not a valid opt-in feature');O(b)&&(this.optIns.optIn(a,b,d),E([b].concat(m(M[b]\|\|[])),function(a){N[a]&&E(N[a],function(a){return c.fbq.loadPlugin(a)})}));return
2024-01-16 21:33:29 UTC	16384	IN	Data Raw: 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4c 6f 67 67 69 6e 67 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 62 3d 61 2e 69 73 41 72 72 61 79 2c 63 3d 61 2e 69 73 49 6e 73 74 61 6e 63 65 4f 66 2c 64 3d 61 2e 6d 61 70 2c 65 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 61 72 61 6d 4c 69 73 74 22 29 2c 68 3d 66 2e 67 65 Data Ascii: ed("SignalsFBEventsLogging",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsUtils"),b=a.isArray,c=a.isInstanceOf,d=a.map,e=f.getFbeventsModules("SignalsParamList"),h=f.ge
2024-01-16 21:33:29 UTC	1500	IN	Data Raw: 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 42 61 73 65 45 76 65 6e 74 22 29 3b 66 75 6e 63 74 69 6f 6e 20 62 28 61 29 7b 61 3d 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 61 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 3f 5b 61 5d 3a 6e 75 6c 6c 7d 6b 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 61 28 62 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 6c 75 67 69 6e 4d 61 6e 61 67 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 Data Ascii: beventsModules("SignalsFBEventsBaseEvent");function b(a){a=a!=null&&typeof a==="string"?a:null;return a!=null?[a]:null}k.exports=new a(b)})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsPluginManager",function(){return function(g
2024-01-16 21:33:29 UTC	14884	IN	Data Raw: 67 69 6e 73 5b 62 5d 29 72 65 74 75 72 6e 21 30 3b 69 66 28 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 28 62 29 29 7b 74 68 69 73 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 28 62 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 62 29 29 3b 72 65 74 75 72 6e 21 30 7d 61 3d 64 2e 43 4f 4e 46 49 47 2e 43 44 4e 5f 42 41 53 45 5f 55 52 4c 2b 22 73 69 67 6e 61 6c 73 2f 70 6c 75 67 69 6e 73 2f 22 2b 61 2b 22 2e 6a 73 3f 76 3d 22 2b 66 2e 76 65 72 73 69 6f 6e 3b 69 66 28 21 74 68 69 73 2e 5f 6c 6f 61 64 65 64 50 6c 75 67 69 6e 73 5b 62 5d 29 7b 74 68 69 73 2e 5f 6c 6f 63 6b 2e 6c 6f 63 6b 50 6c 75 67 69 6e 28 62 29 3b 64 2e 6c 6f 61 64 4a 53 46 69 6c 65 28 61 29 3b 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 7d 5d 29 3b 72 Data Ascii: gins[b])return!0;if(f.fbIsModuleLoaded(b)){this.registerPlugin(b,f.getFbeventsModules(b));return!0}a=d.CONFIG.CDN_BASE_URL+"signals/plugins/"+a+".js?v="+f.version;if(!this._loadedPlugins[b]){this._lock.lockPlugin(b);d.loadJSFile(a);return!0}return!1}}]);r
2024-01-16 21:33:29 UTC	16384	IN	Data Raw: 65 73 2c 6b 3d 64 28 68 29 3b 69 66 28 6b 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 6c 3d 63 28 6a 2c 65 29 3b 72 65 74 75 72 6e 5b 7b 72 75 6c 65 73 3a 6c 2c 70 69 78 65 6c 49 44 3a 6b 7d 5d 7d 62 3d 6e 65 77 20 61 28 67 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 62 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 74 45 53 54 52 75 6c 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 6a 2c 6b 29 7b 76 61 72 20 6c 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6c 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 Data Ascii: es,k=d(h);if(k==null)return null;var l=c(j,e);return[{rules:l,pixelID:k}]}b=new a(g);l.exports=b})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsSetESTRules",function(){return function(g,h,j,k){var l={exports:{}};l.exports;(funct
2024-01-16 21:33:29 UTC	16384	IN	Data Raw: 6c 6c 28 62 2c 63 29 29 7b 76 61 72 20 64 3d 61 2b 22 5b 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 63 29 2b 22 5d 22 3b 74 68 69 73 2e 5f 72 65 6d 6f 76 65 4b 65 79 28 64 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 5f 61 70 70 65 6e 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 66 2c 67 29 7b 76 61 72 20 68 3d 62 2e 6e 61 6d 65 3b 62 3d 62 2e 76 61 6c 75 65 3b 69 66 28 62 21 3d 6e 75 6c 6c 29 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 63 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 6a 3d 63 5b 69 5d 3b 6a 3d 3d 3d 68 26 26 74 68 69 73 2e 5f 72 65 6d 6f 76 65 4b 65 79 28 68 29 7d 65 28 62 29 3f 74 68 69 73 2e 5f 61 70 70 65 6e 64 50 72 69 6d 69 74 69 76 65 28 68 2c 62 2c 67 29 3a 66 3d 3d 3d 61 3f 74 68 69 73 2e 5f 61 70 70 65 Data Ascii: ll(b,c)){var d=a+"["+encodeURIComponent(c)+"]";this._removeKey(d)}}},{key:"_append",value:function(b,f,g){var h=b.name;b=b.value;if(b!=null)for(var i=0;i<c.length;i++){var j=c[i];j===h&&this._removeKey(h)}e(b)?this._appendPrimitive(h,b,g):f===a?this._appe
2024-01-16 21:33:29 UTC	14884	IN	Data Raw: 2c 62 2c 63 29 7b 61 2e 65 78 70 6f 72 74 73 3d 63 28 39 35 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 65 78 70 6f 72 74 73 3d 22 6f 62 6a 65 63 74 22 3d 3d 28 74 79 70 65 6f 66 20 66 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 68 28 66 29 29 26 26 66 26 26 66 2e 4d 61 74 68 3d 3d 4d 61 74 68 3f 66 3a 22 6f 62 6a 65 63 74 22 3d 3d 28 74 79 70 65 6f 66 20 73 65 6c 66 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 68 28 73 65 6c 66 29 29 26 26 73 65 6c 66 26 26 73 65 6c 66 2e 4d 61 74 68 3d 3d 4d 61 74 68 3f 73 65 6c 66 3a 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 22 75 73 65 20 73 74 72 Data Ascii: ,b,c){a.exports=c(95)},function(a,b){a.exports="object"==(typeof f==="undefined"?"undefined":h(f))&&f&&f.Math==Math?f:"object"==(typeof self==="undefined"?"undefined":h(self))&&self&&self.Math==Math?self:Function("return this")()},function(a,b,c){"use str

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.18	49944	15.197.213.252	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:28 UTC	662	OUT	GET /eval/6239d86c177e3a150044c12d/eyJrZXkiOiJhbm9ueW1vdXMtdXNlciIsImtpbmQiOiJ1c2VyIiwiYW5vbnltb3VzIjp0cnVlfQ HTTP/1.1 Host: clientstream.launchdarkly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: text/event-stream Cache-Control: no-cache sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://signable.app Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:28 UTC	582	IN	HTTP/1.1 200 OK Date: Tue, 16 Jan 2024 21:33:28 GMT Content-Type: text/event-stream; charset=utf-8 Transfer-Encoding: chunked Connection: close Accept-Ranges: bytes Access-Control-Allow-Headers: Accept,Content-Type,Content-Length,Accept-Encoding,Cache-Control,X-Requested-With,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Wrapper Access-Control-Allow-Methods: GET,OPTIONS Access-Control-Allow-Origin: * Access-Control-Max-Age: 300 Cache-Control: no-cache, no-store, must-revalidate Ld-Region: us-east-1 Strict-Transport-Security: max-age=31536000 X-Content-Length: 1394
2024-01-16 21:33:28 UTC	432	IN	Data Raw: 31 61 39 0d 0a 65 76 65 6e 74 3a 70 75 74 0a 64 61 74 61 3a 7b 22 70 6c 61 6e 6e 65 64 2d 6d 61 69 6e 74 65 6e 61 6e 63 65 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 33 32 39 2c 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 31 35 2c 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 31 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 7d 2c 22 64 72 6f 70 62 6f 78 2d 74 6f 2d 76 32 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 33 32 39 2c 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 34 2c 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 31 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 7d 2c 22 65 6e 76 65 6c 6f 70 65 2d 77 69 64 67 65 74 2d 73 69 67 6e 2d 74 6f 2d 76 32 22 3a 7b 22 76 65 72 73 Data Ascii: 1a9event:putdata:{"planned-maintenance":{"version":329,"flagVersion":15,"value":false,"variation":1,"trackEvents":false},"dropbox-to-v2":{"version":329,"flagVersion":4,"value":false,"variation":1,"trackEvents":false},"envelope-widget-sign-to-v2":{"vers
2024-01-16 21:33:28 UTC	7	IN	Data Raw: 32 0d 0a 3a 0a 0d 0a Data Ascii: 2:
2024-01-16 21:33:28 UTC	7	IN	Data Raw: 32 0d 0a 3a 0a 0d 0a Data Ascii: 2:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.18	49949	35.186.247.156	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:28 UTC	676	OUT	POST /api/300342/envelope/?sentry_key=f7d01a52e1b04292834f1daa40ae2ad9&sentry_version=7 HTTP/1.1 Host: sentry.io Connection: keep-alive Content-Length: 18014 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://signable.app Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://signable.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:28 UTC	16384	OUT	Data Raw: 7b 22 65 76 65 6e 74 5f 69 64 22 3a 22 39 36 36 35 35 65 39 30 33 65 39 35 34 66 37 63 61 63 31 38 62 33 61 39 31 33 31 38 65 32 63 30 22 2c 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 30 31 2d 31 36 54 32 31 3a 33 33 3a 32 37 2e 39 30 37 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 76 75 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 36 2e 31 39 2e 37 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 74 72 61 6e 73 61 63 74 69 6f 6e 22 2c 22 73 61 6d 70 6c 65 5f 72 61 74 65 73 22 3a 5b 7b 7d 5d 7d 0a 7b 22 63 6f 6e 74 65 78 74 73 22 3a 7b 22 74 72 61 63 65 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 61 72 61 6d 73 22 3a 7b 7d 2c 22 71 75 65 72 79 22 3a 7b 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 55 53 Data Ascii: {"event_id":"96655e903e954f7cac18b3a91318e2c0","sent_at":"2024-01-16T21:33:27.907Z","sdk":{"name":"sentry.javascript.vue","version":"6.19.7"}}{"type":"transaction","sample_rates":[{}]}{"contexts":{"trace":{"data":{"params":{},"query":{"country_code":"US
2024-01-16 21:33:28 UTC	1630	OUT	Data Raw: 4e 44 51 77 4e 7a 63 32 25 32 61 5f 67 61 5f 34 58 45 32 56 59 53 51 33 35 25 32 61 4d 54 63 77 4e 54 51 30 4d 44 63 33 4e 53 34 78 4c 6a 41 75 4d 54 63 77 4e 54 51 30 4d 44 63 33 4e 53 34 32 4d 43 34 77 4c 6a 41 2e 22 7d 7d 2c 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 30 35 34 34 30 38 30 37 2e 35 37 35 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 78 68 72 22 2c 22 64 61 74 61 22 3a 7b 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 70 2e 6c 61 75 6e 63 68 64 61 72 6b 6c 79 2e 63 6f 6d 2f 73 64 6b 2f 67 6f 61 6c 73 2f 36 32 33 39 64 38 36 63 31 37 37 65 33 61 31 35 30 30 34 34 63 31 32 64 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 7d 2c 22 74 79 70 65 22 3a 22 68 74 74 70 22 7d 2c 7b 22 74 69 6d Data Ascii: NDQwNzc2%2a_ga_4XE2VYSQ35%2aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA."}},{"timestamp":1705440807.575,"category":"xhr","data":{"method":"GET","url":"https://app.launchdarkly.com/sdk/goals/6239d86c177e3a150044c12d","status_code":200},"type":"http"},{"tim
2024-01-16 21:33:29 UTC	673	IN	HTTP/1.1 429 Too Many Requests server: nginx date: Tue, 16 Jan 2024 21:33:28 GMT content-type: application/json Content-Length: 198 retry-after: 60 x-sentry-rate-limits: 60:transaction;profile:organization:transaction_usage_exceeded access-control-allow-origin: * vary: origin,access-control-request-method,access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin x-envoy-upstream-service-time: 0 strict-transport-security: max-age=31536000; includeSubDomains; preload via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-16 21:33:29 UTC	198	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 53 65 6e 74 72 79 20 64 72 6f 70 70 65 64 20 64 61 74 61 20 64 75 65 20 74 6f 20 61 20 71 75 6f 74 61 20 6f 72 20 69 6e 74 65 72 6e 61 6c 20 72 61 74 65 20 6c 69 6d 69 74 20 62 65 69 6e 67 20 72 65 61 63 68 65 64 2e 20 54 68 69 73 20 77 69 6c 6c 20 6e 6f 74 20 61 66 66 65 63 74 20 79 6f 75 72 20 61 70 70 6c 69 63 61 74 69 6f 6e 2e 20 53 65 65 20 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 73 65 6e 74 72 79 2e 69 6f 2f 70 72 6f 64 75 63 74 2f 61 63 63 6f 75 6e 74 73 2f 71 75 6f 74 61 73 2f 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 22 7d Data Ascii: {"detail":"Sentry dropped data due to a quota or internal rate limit being reached. This will not affect your application. See https://docs.sentry.io/product/accounts/quotas/ for more information."}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.18	49946	108.139.47.2	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:28 UTC	416	OUT	GET /assets/signable_squiggle_1_cropped.svg HTTP/1.1 Host: signable.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775
2024-01-16 21:33:29 UTC	2509	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1759 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:00 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:29 GMT ETag: "b73fe1e8ea11cfe74013623e9cd3cfe3" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 aea539314dea6e591d10d79d61e42090.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P1 X-Amz-Cf-Id: 5LKIcZsxP6vZC8h6DuM3wnrGx0xUfV07U4JjWXh5_ymNN06kyjsgwQ== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:29 UTC	1759	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 76 69 65 77 42 6f 78 3d 22 30 2e 34 37 20 30 2e 30 38 20 37 32 2e 37 39 20 31 37 31 2e 35 35 22 3e 0a 3c 70 61 74 68 20 64 3d 22 6d 32 38 2e 39 34 20 31 30 36 2e 35 20 31 2e 31 33 2e 39 2e 34 34 2d 31 2e 34 63 31 2e 35 38 2d 35 2e 30 32 20 34 2e 35 35 2d 39 2e 39 33 20 38 2e 34 2d 31 32 2e 38 36 20 33 2e 37 37 2d 32 2e 38 38 20 38 2e 34 2d 33 2e 38 37 20 31 33 2e 35 35 2d 31 2e 31 33 20 34 2e 31 35 20 32 2e 32 31 20 37 2e 33 33 20 36 2e 34 38 20 36 2e 36 34 20 31 31 2e 32 35 2d 2e 37 32 20 35 2e 33 35 2d 35 2e 37 35 20 39 2e 30 37 2d 31 30 2e 38 20 31 30 2e 35 37 61 32 31 2e 35 32 20 32 31 2e 35 32 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0.47 0.08 72.79 171.55"><path d="m28.94 106.5 1.13.9.44-1.4c1.58-5.02 4.55-9.93 8.4-12.86 3.77-2.88 8.4-3.87 13.55-1.13 4.15 2.21 7.33 6.48 6.64 11.25-.72 5.35-5.75 9.07-10.8 10.57a21.52 21.52

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.18	49950	52.85.150.185	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:28 UTC	538	OUT	GET /libs/amplitude-5.2.2-min.gz.js HTTP/1.1 Host: cdn.amplitude.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signable.app sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:29 UTC	748	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 17889 Connection: close Date: Tue, 16 Jan 2024 21:33:30 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Last-Modified: Mon, 21 Oct 2019 15:45:34 GMT ETag: "b568e7b3c9d94da6a1d4845b18400f7a" Cache-Control: max-age=31536000 Content-Encoding: gzip x-amz-version-id: aZB1RIRJqET7nosqRtOBVideRuh0jIV6 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 4db130e87be66fce9731567ae0669c56.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C3 X-Amz-Cf-Id: 5evVnVzD-I8VvymhJEbZJLQRkc3kwY0t4LDZis2CiaYd02NkG9xt-A==
2024-01-16 21:33:29 UTC	15636	IN	Data Raw: 1f 8b 08 00 4b ab 9e 5c 00 03 cd bd 6b 77 da 48 b3 30 fa fd fc 0a ac 3d db 23 05 41 10 37 db 22 0a cb 49 9c 8c 9f 89 9d 4c ec 64 e6 79 80 f1 92 a1 01 8d 41 22 92 f0 25 16 fb b7 bf 55 7d 53 eb 02 71 66 f6 39 e7 5d 2b 31 52 ab ba ba bb aa ba aa ba fa b6 37 5d fb e3 d8 0b 7c 9d 98 b1 f1 a8 05 d7 7f 91 71 ac 39 4e fc b0 22 c1 b4 42 ee 57 41 18 47 fb fb da da 9f 90 a9 e7 93 89 b6 27 3e 2e 83 c9 7a 41 fa ec a7 ce 41 9d 58 37 6c 4d a0 4d 31 b1 dc fb fb ec b7 ee 2e 27 7d f6 a8 c7 86 ad 13 87 24 49 44 16 53 03 be ac 16 5e bc 9e 10 c4 b4 d1 e3 b9 17 99 b2 96 50 c5 75 44 2a 51 1c 7a 50 cd 9e 48 af c4 3a 31 1e 43 12 af 43 5f 8f 9d 92 e2 2f 1e 96 d7 c1 02 da 11 d1 87 fc 87 ba 17 93 d0 8d 83 b0 9f 12 44 20 ac 08 5a 6c ec 92 8f d0 a4 1d c5 91 fa 38 f0 a1 b6 eb 31 e0 76 Data Ascii: K\kwH0=#A7"ILdyA"%U}Sqf9]+1R7]\|q9N"BWAG'>.zAAX7lMM1.'}$IDS^PuD*QzPH:1CC_/D Zl81v
2024-01-16 21:33:29 UTC	1594	IN	Data Raw: fb 7b 59 77 05 ad 7f ae d1 63 10 ec 70 5b b3 cb 5b 5d 92 05 db 5d 70 b5 28 dc f1 62 a1 97 78 4d cc 6d 3a cb bb 4d 72 b5 31 bd 9d 22 56 26 de 7c 31 f1 06 de f1 00 3f e0 35 06 25 53 6e 74 12 99 4f b9 01 4a 06 a8 4c b6 c9 9b 0b b2 5e 90 27 97 a0 7d 57 c5 c9 66 60 9b f3 7e 1e c1 29 c7 3c 5b b4 ab af 1a 1d 7e 3b 67 84 ab 36 bc 56 c1 24 ea 16 93 29 93 b1 ec 6a 2c b2 55 b7 49 09 c9 04 cd 4b 15 e4 76 24 39 f5 88 8a b6 6c 06 53 6f e0 21 3b 95 90 df e3 c6 16 98 82 33 82 07 81 d9 f8 05 f1 57 c4 15 ac 95 40 e2 d7 36 ec 72 b5 4a 61 4a 52 10 b1 82 9b da 62 7a 5b 52 bd 72 42 ef 43 22 93 8a b0 e5 fc 5e a4 ca 35 80 44 ee 1d bf 3a c9 30 7f bc 92 3b ca 85 4a d2 b0 cb 8f 23 3d fe 78 5a 01 36 55 bc a8 82 b7 87 42 bf d3 0a 0e 29 b5 7e a7 65 d2 25 d7 2c 16 24 2c 93 47 88 59 6a Data Ascii: {Ywcp[[]]p(bxMm:Mr1"V&\|1?5%SntOJL^'}Wf`~)<[~;g6V$)j,UIKv$9lSo!;3W@6rJaJRbz[RrBC"^5D:0;J#=xZ6UB)~e%,$,GYj
2024-01-16 21:33:29 UTC	659	IN	Data Raw: d4 b1 25 62 f6 04 54 45 eb 9e 8f 65 6d 11 e6 6d 83 06 1c 08 34 a0 1b d5 2c d4 a4 20 e0 35 90 05 ae 49 5f 10 7e 6d 38 6e 5b 0d 5f 96 ef f6 e4 b0 20 d0 fe cb 92 bd ad 72 68 31 d5 d7 30 58 4a 47 54 da 19 54 14 9d 57 06 57 71 fd 34 9c 1a 99 15 bc 4f 51 50 0d 3f 89 78 28 d0 70 ee c2 30 97 5b 62 cd e8 5d 03 6d 6e 36 6e df 73 f4 d2 5d b8 78 85 b9 21 0d 81 bd ee 07 79 c0 74 af 69 98 85 dd 4b 57 a2 f2 c1 ba e6 95 ed 49 18 f8 23 b1 01 3a 9f 5e cf 21 28 df 85 8b a6 2a 07 f8 d4 f6 3c b9 35 26 df bb 12 89 41 dc a3 aa a8 ec d8 4c f5 9c ed 99 19 2d 67 07 65 cb 00 16 c1 b5 bb d8 31 4b 2a e6 7c 73 d3 83 c5 f0 eb 15 3f 37 e9 ea ca b9 24 d4 98 bc 25 85 c9 e3 dc c1 1c 25 87 68 08 d7 30 82 91 ed a6 f7 76 db a9 12 99 0f ca a9 12 99 74 5c c1 ce d1 65 07 b2 5b ce 39 e9 a9 1b dc Data Ascii: %bTEemm4, 5I_~m8n[_ rh10XJGTTWWq4OQP?x(p0[b]mn6ns]x!ytiKWI#:^!(<5&AL-ge1K\|s?7$%%h0vt\e[9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.18	49947	108.139.47.2	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:28 UTC	416	OUT	GET /assets/signable_squiggle_2_cropped.svg HTTP/1.1 Host: signable.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775
2024-01-16 21:33:29 UTC	2516	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 955 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:00 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:29 GMT ETag: "e15b9724a0420da84c2c4d6aada57141" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 500a5a4e72d986068e53ce22c8372bde.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P1 X-Amz-Cf-Id: E7EJStm4k5PotkOfob4_gYHJu0k41jj4yBaHpHSlT2KC5Ti0ucqC1A== Age: 1 X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:29 UTC	955	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 76 69 65 77 42 6f 78 3d 22 2d 30 2e 30 34 20 30 20 31 36 33 2e 33 33 20 39 32 2e 36 36 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 31 2e 32 31 20 32 2e 35 33 41 35 2e 32 33 20 35 2e 32 33 20 30 20 30 20 30 20 34 2e 33 36 2e 36 43 32 2e 32 36 20 31 2e 37 38 20 31 2e 32 20 35 2e 30 34 20 32 2e 37 33 20 37 2e 30 37 63 2e 33 37 2e 35 36 2e 39 20 31 20 31 2e 35 20 31 2e 32 39 61 34 2e 36 33 20 34 2e 36 33 20 30 20 30 20 30 20 35 2e 36 34 20 31 63 32 2e 33 36 2d 31 2e 33 32 20 32 2e 37 33 2d 34 2e 37 20 31 2e 33 34 2d 36 2e 38 33 5a 6d 31 35 32 2e 30 38 20 34 35 2e 32 36 61 36 32 2e 30 38 20 36 32 2e 30 38 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="-0.04 0 163.33 92.66"><path d="M11.21 2.53A5.23 5.23 0 0 0 4.36.6C2.26 1.78 1.2 5.04 2.73 7.07c.37.56.9 1 1.5 1.29a4.63 4.63 0 0 0 5.64 1c2.36-1.32 2.73-4.7 1.34-6.83Zm152.08 45.26a62.08 62.08

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.18	49948	108.139.47.2	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:28 UTC	416	OUT	GET /img/signable_white_raster.d35aa760.png HTTP/1.1 Host: signable.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775
2024-01-16 21:33:29 UTC	2514	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 15391 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:29 GMT ETag: "d35aa7605f55dae20534aaa3cfad5006" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 3e7fb742ce78adbb687505d8440bf99c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P1 X-Amz-Cf-Id: UKM-OI1MrQiicwba0tcUG0BjL7HZ_OogCeB-Yz_d_INfS02LtmYJyQ== Age: 1 X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:29 UTC	13870	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 8b 00 00 00 c5 08 06 00 00 00 3c 27 b8 22 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 3b d4 49 44 41 54 78 da ed 9d 77 98 57 c5 f5 87 bf bb f4 8e 0a 88 88 a8 a8 28 0a 76 50 2c b1 81 a8 51 b0 61 6f 58 30 f6 8e 1a 4b ec bd c4 d8 c0 82 85 58 82 12 bb 41 49 88 5d 51 c4 12 1b 6e 01 15 c4 0a 4a af fb fe fe 98 b3 3f 56 dc f2 9d 5b e7 ce 3d ef f3 ec c3 f3 24 ee de 99 73 66 ee 7c ee cc 99 73 0a 85 94 00 1a 01 eb 03 fd 81 e3 81 2b 80 5b 81 91 c0 63 f2 33 12 b8 13 b8 06 38 03 38 00 e8 07 ac 5a 50 ea a4 b2 b2 b0 61 45 59 e1 b2 ca 8a c2 e8 8a b2 c2 75 d3 be 2c f4 54 ab 28 8a e2 3b 40 1b 60 28 70 17 f0 30 70 39 b0 b9 5a c6 19 ff 6c 26 3e 79 58 7c 74 34 d0 4a 2d a3 d4 1c 24 ad 80 41 c0 8d c0 2b c0 Data Ascii: PNGIHDR<'"bKGD;IDATxwW(vP,QaoX0KXAI]QnJ?V[=$sf\|s+[c388ZPaEYu,T(;@`(p0p9Zl&>yX\|t4J-$A+
2024-01-16 21:33:29 UTC	1521	IN	Data Raw: eb 0e c5 6c 83 4b ac a5 d5 cd a8 9c 8c cf 53 6c 6f bb e9 ac 56 14 45 51 94 e8 16 e2 cd 81 f7 83 66 12 07 b6 08 f9 fc e6 c0 6e c0 35 72 91 26 8b a9 6c be 14 61 78 2a b0 6d d0 f8 08 a0 8b 88 6f 1b b6 cb c1 18 b5 1d 9f 1a af a8 28 8a a2 28 11 2c c0 cd 25 11 f5 e2 00 e2 e8 53 60 48 88 67 77 07 86 c9 8e e4 9c 8c 09 c3 f9 98 32 78 b7 c9 f1 78 a7 88 fd 62 7b f3 fc 19 cf c7 e9 9e 01 7c b4 85 ce 70 45 51 14 45 09 b7 00 6f 2f 57 c9 83 dc 70 3e d2 36 0d 8e 24 c2 3e 0a 18 1d 32 57 63 1a 54 60 4a e1 9d 0a 6c 19 77 8e a6 00 47 ae 55 40 6f 8f c7 ea 1b b6 f9 3c 75 86 2b 8a a2 28 4a f0 85 b7 99 54 60 b1 4d 87 33 0f b8 a8 d8 1b ce 40 4b 4c ad c4 9b 09 5f 3b 3a 49 16 48 09 a1 eb a5 ca cc ea 29 f8 a8 63 80 d2 40 e3 3d 1d af 83 03 f8 70 b8 ce 74 45 51 14 45 09 b6 f0 6e 69 99 Data Ascii: lKSloVEQfn5r&lax*mo((,%S`Hgw2xxb{\|pEQEo/Wp>6$>2WcT`JlwGU@o<u+(JT`M3@KL_;:IH)c@=ptEQEni

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.18	49954	18.160.10.74	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:28 UTC	686	OUT	GET /inner.html HTTP/1.1 Host: m.stripe.network Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://js.stripe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:29 UTC	1155	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 930 Connection: close Last-Modified: Fri, 30 Jun 2023 14:32:28 GMT Accept-Ranges: bytes Server: Cloudfront Date: Tue, 16 Jan 2024 21:32:17 GMT Cache-Control: max-age=300, public Etag: "06bfcd88af438673a8bf9b845a11aa6e" Vary: Accept-Encoding, Origin Via: 1.1 06c1d28e93bdae8f6401a12c10b2f570.cloudfront.net (CloudFront) Age: 135 Content-Security-Policy: base-uri 'none'; connect-src https://m.stripe.network https://m.stripe.com; default-src 'none'; font-src https://m.stripe.network https://fonts.gstatic.com; form-action 'none'; frame-src https://m.stripe.network https://js.stripe.com; img-src https://m.stripe.network https://m.stripe.com https://b.stripecdn.com; script-src https://m.stripe.network 'sha256-/5Guo2nzv5n/w6ukZpOBZOtTJBJPSkJ6mhHpnBgm3Ls='; style-src https://m.stripe.network; report-uri https://q.stripe.com/csp-report Strict-Transport-Security: max-age=31556926; includeSubDomains; preload X-Content-Type-Options: nosniff X-Cache: Hit from cloudfront X-Amz-Cf-Pop: IAD12-P3 X-Amz-Cf-Id: 2oyuDLJOPykGO4BcZ_NUafmkfYjaftdFyqLheBJMUU4A-rUA-gE0tA==
2024-01-16 21:33:29 UTC	930	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 74 69 74 6c 65 3e 53 74 72 69 70 65 4d 2d 49 6e 6e 65 72 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 65 2e 64 65 66 65 72 3d 21 30 2c 65 2e 73 72 63 3d 22 6f 75 74 2d 34 2e 35 2e 34 33 2e 6a 73 22 2c 65 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 77 69 6e 64 6f 77 2e 53 74 72 69 70 65 4d 26 26 28 65 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 2c 2f 70 69 6e 67 3d 66 Data Ascii: <!doctype html><html><head><meta charset="utf-8"><title>StripeM-Inner</title></head><body><script>!function(){var e=document.createElement("script");e.defer=!0,e.src="out-4.5.43.js",e.onload=function(){var e;window.StripeM&&(e=window.location.hash,/ping=f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.18	49955	18.160.10.74	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:29 UTC	540	OUT	GET /out-4.5.43.js HTTP/1.1 Host: m.stripe.network Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://m.stripe.network/inner.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:29 UTC	653	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 88751 Connection: close Last-Modified: Fri, 30 Jun 2023 14:32:28 GMT Accept-Ranges: bytes Server: Cloudfront Date: Tue, 16 Jan 2024 21:29:10 GMT Cache-Control: max-age=300, public Etag: "69cb7809b5011312e716f29b3d19dce6" Vary: Accept-Encoding, Origin Via: 1.1 736ad67f05a9a5a8fd5ed8cba30196f4.cloudfront.net (CloudFront) Age: 279 Strict-Transport-Security: max-age=31556926; includeSubDomains; preload X-Content-Type-Options: nosniff X-Cache: Hit from cloudfront X-Amz-Cf-Pop: IAD12-P3 X-Amz-Cf-Id: fjuZVkUTWbRlVbM9lgtg8Em2qUbvk7Zjkl11sKQ7uIvF6msnaCmpmg==
2024-01-16 21:33:29 UTC	16384	IN	Data Raw: 76 61 72 20 53 74 72 69 70 65 4d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 5f 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 5f 2e 65 78 70 6f 72 74 73 2c 5f 2c 5f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 5f 2e 6c 3d 21 30 2c 5f 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 Data Ascii: var StripeM=function(e){var t={};function n(r){if(t[r])return t[r].exports;var _=t[r]={i:r,l:!1,exports:{}};return e[r].call(_.exports,_,_.exports,n),_.l=!0,_.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!
2024-01-16 21:33:29 UTC	16384	IN	Data Raw: 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 68 28 65 29 7d 28 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 6e 75 6c 6c 21 3d 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 6e 75 6c 6c 21 3d 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 7d 28 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 68 28 65 2c 74 29 3b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 70 72 Data Ascii: (e){return function(e){if(Array.isArray(e))return h(e)}(e)\|\|function(e){if("undefined"!=typeof Symbol&&null!=e[Symbol.iterator]\|\|null!=e["@@iterator"])return Array.from(e)}(e)\|\|function(e,t){if(!e)return;if("string"==typeof e)return h(e,t);var n=Object.pr
2024-01-16 21:33:29 UTC	16384	IN	Data Raw: 7b 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 6f 72 69 67 69 6e 61 74 69 6e 67 53 63 72 69 70 74 3a 22 6d 22 2c 70 61 79 6c 6f 61 64 3a 65 7d 29 2c 22 2a 22 29 7d 7d 63 61 74 63 68 28 65 29 7b 7d 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 62 74 6f 61 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 7d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 Data Ascii: {t.postMessage(JSON.stringify({originatingScript:"m",payload:e}),"*")}}catch(e){}},f=function(){return window.btoa\|\|function(e){return e}},s=function(e){var t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:function(){},n=arguments.length>2&&void 0
2024-01-16 21:33:29 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 28 74 29 7b 6e 5b 74 5d 3d 65 5b 74 5d 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 62 28 65 29 7d 29 29 7d 29 3a 28 6e 5b 65 5d 3d 76 6f 69 64 20 30 3d 3d 3d 74 3f 45 3a 74 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 62 28 65 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 76 61 72 20 74 3d 79 28 29 3b 64 65 6c 65 74 65 20 74 5b 65 5d 2c 30 3d 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 6c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 6c 28 29 5b 73 5d 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 29 7b 76 61 72 20 74 3d 79 28 29 2c 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2c 72 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 5f 28 29 7b 6e Data Ascii: nction(t){n[t]=e[t]})),function(){Object.keys(e).forEach((function(t){b(e)}))}):(n[e]=void 0===t?E:t,function(){b(e)})}function b(e){var t=y();delete t[e],0==Object.keys(t).length&&delete l()[s]}function R(e){var t=y(),n=Object.keys(e),r={};function _(){n
2024-01-16 21:33:29 UTC	16384	IN	Data Raw: 65 6e 64 65 6e 63 79 5f 5f 22 2c 62 29 2c 4c 28 22 5f 5f 52 65 77 69 72 65 5f 5f 22 2c 52 29 2c 4c 28 22 5f 5f 73 65 74 5f 5f 22 2c 52 29 2c 4c 28 22 5f 5f 72 65 73 65 74 5f 5f 22 2c 70 29 2c 4c 28 22 5f 5f 52 65 73 65 74 44 65 70 65 6e 64 65 6e 63 79 5f 5f 22 2c 70 29 2c 4c 28 22 5f 5f 77 69 74 68 5f 5f 22 2c 6d 29 2c 4c 28 22 5f 5f 52 65 77 69 72 65 41 50 49 5f 5f 22 2c 64 29 29 7d 29 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 28 33 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 6e 28 32 29 2c 5f 3d 6e 28 31 29 2c 6f 3d 6e 28 30 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 72 65 74 75 72 6e 20 69 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f Data Ascii: endency__",b),L("__Rewire__",R),L("__set__",R),L("__reset__",p),L("__ResetDependency__",p),L("__with__",m),L("__RewireAPI__",d))}).call(this,n(3))},function(e,t,n){"use strict";(function(e){var r=n(2),_=n(1),o=n(0);function i(e){return i="function"==typeo
2024-01-16 21:33:29 UTC	6831	IN	Data Raw: 70 52 65 71 75 65 73 74 29 3b 74 72 79 7b 5f 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 21 30 7d 63 61 74 63 68 28 65 29 7b 7d 76 61 72 20 6f 3b 6f 3d 22 68 74 74 70 73 3a 2f 2f 6d 2e 73 74 72 69 70 65 2e 63 6f 6d 2f 22 2b 74 3b 76 61 72 20 69 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 28 29 7d 29 2c 32 65 33 29 3b 5f 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 5f 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 3d 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2e 44 4f 4e 45 26 26 68 28 22 77 69 6e 22 29 2e 53 74 72 69 70 65 4d 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 69 29 3b 76 61 72 20 65 3d 5f 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 3b 32 30 30 3d 3d 3d 5f 2e 73 74 Data Ascii: pRequest);try{_.withCredentials=!0}catch(e){}var o;o="https://m.stripe.com/"+t;var i=setTimeout((function(){r()}),2e3);_.onreadystatechange=function(){if(_.readyState===XMLHttpRequest.DONE&&h("win").StripeM){clearTimeout(i);var e=_.responseText;200===_.st

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.18	49956	108.138.106.101	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:29 UTC	504	OUT	GET /c/hotjar-983768.js?sv=7 HTTP/1.1 Host: static.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:29 UTC	633	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Tue, 16 Jan 2024 21:33:29 GMT Access-Control-Allow-Origin: * Cache-Control: max-age=60 Cross-Origin-Resource-Policy: cross-origin ETag: W/1be3722c1e7a6fb48614864bc13815df Strict-Transport-Security: max-age=2592000; includeSubDomains X-Cache-Hit: 1 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 8ef35b07fe667674a2922c9d83a75c52.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: ds5AydeI_EwiGUhifDYINZK6gUvRl8NDtdZKPGm0mekFxTEdqSjmrg==
2024-01-16 21:33:29 UTC	11200	IN	Data Raw: 32 62 62 38 0d 0a 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 3d 20 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 7c 7c 20 7b 22 73 69 74 65 5f 69 64 22 3a 39 38 33 37 36 38 2c 22 72 22 3a 30 2e 33 37 36 31 31 32 38 37 31 31 39 37 30 38 39 39 2c 22 72 65 63 5f 76 61 6c 75 65 22 3a 30 2e 30 31 2c 22 73 74 61 74 65 5f 63 68 61 6e 67 65 5f 6c 69 73 74 65 6e 5f 6d 6f 64 65 22 3a 22 61 75 74 6f 6d 61 74 69 63 5f 77 69 74 68 5f 66 72 61 67 6d 65 6e 74 73 22 2c 22 72 65 63 6f 72 64 22 3a 74 72 75 65 2c 22 63 6f 6e 74 69 6e 75 6f 75 73 5f 63 61 70 74 75 72 65 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 72 65 63 6f 72 64 69 6e 67 5f 63 61 70 74 75 72 65 5f 6b 65 79 73 74 72 6f 6b 65 73 22 3a 74 72 75 65 2c 22 73 65 73 Data Ascii: 2bb8window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":983768,"r":0.3761128711970899,"rec_value":0.01,"state_change_listen_mode":"automatic_with_fragments","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":true,"ses
2024-01-16 21:33:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.18	49957	104.16.191.89	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:29 UTC	491	OUT	GET /4564783.js HTTP/1.1 Host: js.hs-scripts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:29 UTC	938	IN	HTTP/1.1 200 OK Date: Tue, 16 Jan 2024 21:33:29 GMT Content-Type: application/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close X-Trace: 2BA935B63AA637F9C9DD832C2E442AA1C38B270D9A000000000000000000 Cache-Control: public, max-age=90 Vary: origin Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Access-Control-Max-Age: 3600 x-envoy-upstream-service-time: 11 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-evy-trace-served-by-pod: iad02/hubapi-td/envoy-proxy-fcdc68c87-shqw7 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all X-HubSpot-Correlation-Id: bcda5511-4941-42a4-8475-0508e1fc50e8 x-request-id: bcda5511-4941-42a4-8475-0508e1fc50e8 CF-Cache-Status: EXPIRED Last-Modified: Tue, 16 Jan 2024 21:19:23 GMT Expires: Tue, 16 Jan 2024 21:34:59 GMT Server: cloudflare CF-RAY: 84697a2449710f80-EWR
2024-01-16 21:33:29 UTC	431	IN	Data Raw: 37 61 35 0d 0a 2f 2f 20 48 75 62 53 70 6f 74 20 53 63 72 69 70 74 20 4c 6f 61 64 65 72 2e 20 50 6c 65 61 73 65 20 64 6f 20 6e 6f 74 20 62 6c 6f 63 6b 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 20 53 65 65 20 6d 6f 72 65 3a 20 68 74 74 70 3a 2f 2f 68 75 62 73 2e 6c 79 2f 48 30 37 30 32 5f 48 30 0a 0a 76 61 72 20 5f 68 73 70 20 3d 20 77 69 6e 64 6f 77 2e 5f 68 73 70 20 3d 20 77 69 6e 64 6f 77 2e 5f 68 73 70 20 7c 7c 20 5b 5d 3b 0a 20 5f 68 73 70 2e 70 75 73 68 28 5b 27 61 64 64 45 6e 61 62 6c 65 64 46 65 61 74 75 72 65 47 61 74 65 73 27 2c 20 5b 5d 5d 29 3b 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 Data Ascii: 7a5// HubSpot Script Loader. Please do not block this resource. See more: http://hubs.ly/H0702_H0var _hsp = window._hsp = window._hsp \|\| []; _hsp.push(['addEnabledFeatureGates', []]);!function(t,e,r){if(!document.getElementById(t)){var n=document.cr
2024-01-16 21:33:29 UTC	1369	IN	Data Raw: 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 69 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6e 2c 69 29 7d 7d 28 22 63 6f 6f 6b 69 65 42 61 6e 6e 65 72 2d 34 35 36 34 37 38 33 22 2c 30 2c 7b 22 64 61 74 61 2d 63 6f 6f 6b 69 65 63 6f 6e 73 65 6e 74 22 3a 22 69 67 6e 6f 72 65 22 2c 22 64 61 74 61 2d 68 73 2d 69 67 6e 6f 72 65 22 3a 74 72 75 65 2c 22 64 61 74 61 2d 6c 6f 61 64 65 72 22 3a 22 68 73 2d 73 63 72 69 70 74 6c 6f 61 64 65 72 22 2c 22 64 61 74 61 2d 68 73 6a 73 2d 70 6f 72 74 61 6c 22 3a 34 35 36 34 37 38 33 2c 22 64 61 74 61 2d 68 73 6a 73 2d 65 6e 76 22 3a 22 70 72 6f 64 22 2c 22 64 61 74 61 2d 68 73 6a 73 2d 68 75 62 6c 65 74 22 3a 22 6e 61 Data Ascii: ument.getElementsByTagName("script")[0];i.parentNode.insertBefore(n,i)}}("cookieBanner-4564783",0,{"data-cookieconsent":"ignore","data-hs-ignore":true,"data-loader":"hs-scriptloader","data-hsjs-portal":4564783,"data-hsjs-env":"prod","data-hsjs-hublet":"na
2024-01-16 21:33:29 UTC	164	IN	Data Raw: 79 74 69 63 73 2f 31 37 30 35 34 34 30 36 30 30 30 30 30 2f 34 35 36 34 37 38 33 2e 6a 73 22 2c 63 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 63 2e 69 64 3d 65 3b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 63 2c 6e 29 7d 7d 28 22 68 73 2d 61 6e 61 6c 79 74 69 63 73 22 29 3b 0d 0a Data Ascii: ytics/1705440600000/4564783.js",c.type="text/javascript",c.id=e;var n=document.getElementsByTagName("script")[0];n.parentNode.insertBefore(c,n)}}("hs-analytics");
2024-01-16 21:33:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.18	49959	18.238.49.122	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:29 UTC	539	OUT	GET /js/profitwell.js?auth=a861c1c403b5b01660dfb23936a58d9b HTTP/1.1 Host: public.profitwell.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:29 UTC	584	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 35730 Connection: close Date: Tue, 16 Jan 2024 20:30:08 GMT Last-Modified: Thu, 21 Dec 2023 14:58:22 GMT ETag: "40097cdf413c1f1f303c66489742cb44" x-amz-server-side-encryption: AES256 x-amz-version-id: uxIt1SCydrYnaOCuzhsDaHENAdMuSyNO Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 08c35fba3c05c07f78b1292e4a5f949a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: ZpowB2z-BCj_yQE89-GKnWaTkR7bsK4QjsaUd-XzjyuSrtUARU2kKA== Age: 3802
2024-01-16 21:33:29 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 61 63 6b 41 6e 6f 6e 79 6d 6f 75 73 43 75 73 74 6f 6d 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 41 6e 6f 6e 79 6d 6f 75 73 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 74 7d 28 29 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 72 65 74 75 72 6e 28 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e Data Ascii: !function(){"use strict";var t=function(){function t(){}return t.prototype.trackAnonymousCustomer=function(){},t.prototype.getAnonymousId=function(){return null},t}(),e=function(t,r){return(e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function
2024-01-16 21:33:29 UTC	16384	IN	Data Raw: 65 20 32 3a 72 65 74 75 72 6e 20 73 3d 69 2e 73 65 6e 74 28 29 2c 72 28 73 29 2c 5b 33 2c 33 5d 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 5b 32 5d 7d 7d 29 29 7d 29 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 64 69 67 65 73 74 53 63 72 69 70 74 44 61 74 61 41 74 74 72 69 62 75 74 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 70 72 6f 66 69 74 77 65 6c 6c 2d 6a 73 22 29 3b 6e 75 6c 6c 21 3d 3d 74 26 26 74 68 69 73 2e 64 69 67 65 73 74 41 75 74 68 44 61 74 61 41 74 74 72 69 62 75 74 65 28 74 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 79 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 63 75 73 74 6f 6d 53 74 79 6c 65 73 2e 73 65 74 43 75 73 74 6f Data Ascii: e 2:return s=i.sent(),r(s),[3,3];case 3:return[2]}}))}))},t.prototype.digestScriptDataAttributes=function(){var t=document.getElementById("profitwell-js");null!==t&&this.digestAuthDataAttribute(t)},t.prototype.styles=function(t){this.customStyles.setCusto
2024-01-16 21:33:29 UTC	2962	IN	Data Raw: 4a 73 56 31 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 74 61 69 6e 55 72 6c 2b 22 64 6f 74 6a 73 2f 76 31 2f 22 2b 74 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 62 75 69 6c 64 53 65 6e 73 69 6e 67 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 65 6e 73 69 6e 67 55 72 6c 2b 22 64 6f 74 6a 73 2f 76 31 2f 22 2b 74 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 43 75 73 74 6f 6d 53 74 79 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 74 2e 69 6e 63 6c 75 64 65 73 28 22 3f 22 29 3f 22 26 22 3a 22 3f 22 3b 72 65 74 75 72 6e 22 22 2b 74 2b 72 2b 22 63 75 73 74 6f 6d 5f 73 74 79 6c 65 73 3d 22 2b 65 7d 2c 74 7d 28 29 2c 4f 3d 66 75 6e 63 74 69 6f 6e Data Ascii: JsV1Url=function(t){return this.retainUrl+"dotjs/v1/"+t},t.prototype.buildSensingUrl=function(t){return this.sensingUrl+"dotjs/v1/"+t},t.prototype.addCustomStyles=function(t,e){var r=t.includes("?")?"&":"?";return""+t+r+"custom_styles="+e},t}(),O=function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.18	49962	157.240.241.1	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:29 UTC	553	OUT	GET /signals/config/143547069376485?v=2.9.140&r=stable&domain=signable.app HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:30 UTC	1851	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top permissions-policy-report-only: autoplay=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(), picture-in-picture=(), xr-spatial-tracking=() permissions-policy: accelerometer=(), ambient-light-sensor=(), bluetooth=(), camera=(), fullscreen=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=() cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin-allow-popups Pragma: public Cache-Control: public, max-age=1200 Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: DENY origin-agent-cluster: ?0 Strict-Transport-Security: max-age=31536000; preload; includeSubDomains X-FB-Debug: P5L5RMx99vLG810OYKG0/hCwPfg4VC8A1+NTZabl6HqBLZTFnjxWUm/pGp8BJRDr03gC7PLzeevvtmdru8K0zw== Date: Tue, 16 Jan 2024 21:33:30 GMT Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 136552
2024-01-16 21:33:30 UTC	1153	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-01-16 21:33:30 UTC	1500	IN	Data Raw: 72 66 6f 72 6d 61 6e 63 65 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 69 66 28 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 61 2e 70 6f 73 74 4d 65 73 73 61 67 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 69 66 28 21 66 29 7b 62 28 7b 61 63 74 69 6f 6e 3a 22 46 42 5f 4c 4f 47 22 2c 6c 6f 67 54 79 70 65 3a 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 22 2c 6c 6f 67 4d 65 73 73 61 67 65 3a 22 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 7d 2c 22 2a 22 29 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 Data Ascii: rformance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"*");"error"in console&&console.er
2024-01-16 21:33:30 UTC	1500	IN	Data Raw: 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 62 26 26 28 74 79 70 65 6f 66 20 62 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 62 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 62 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 61 2c 62 29 7b 69 66 28 74 79 70 65 6f 66 20 62 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 62 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 62 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 Data Ascii: ised - super() hasn't been called");return b&&(typeof b==="object"\|\|typeof b==="function")?b:a}function k(a,b){if(typeof b!=="function"&&b!==null)throw new TypeError("Super expression must either be null or a function, not "+typeof b);a.prototype=Object.c
2024-01-16 21:33:30 UTC	1500	IN	Data Raw: 6d 61 6c 69 7a 65 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 6e 75 6d 54 79 70 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 68 61 72 65 64 22 29 2c 62 3d 61 2e 75 6e 69 63 6f 64 65 53 61 66 65 54 72 75 6e 63 61 74 65 3b 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 56 61 6c 69 64 61 74 69 6f 6e 55 74 69 6c 73 22 29 3b Data Ascii: malizeSignalsFBEventsEnumType",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsShared"),b=a.unicodeSafeTruncate;a=f.getFbeventsModules("SignalsFBEventsValidationUtils");
2024-01-16 21:33:30 UTC	1500	IN	Data Raw: 54 79 70 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 56 61 6c 69 64 61 74 69 6f 6e 55 74 69 6c 73 22 29 2c 62 3d 61 2e 6c 6f 6f 6b 73 4c 69 6b 65 48 61 73 68 65 64 2c 63 3d 61 2e 74 72 69 6d 3b 66 75 6e 63 74 69 6f 6e 20 64 28 61 29 7b 76 61 72 20 64 3d 6e 75 6c 6c 3b 69 66 28 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 29 69 66 28 62 28 61 29 29 64 3d 61 Data Ascii: Type",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsValidationUtils"),b=a.looksLikeHashed,c=a.trim;function d(a){var d=null;if(a!=null&&typeof a==="string")if(b(a))d=a
2024-01-16 21:33:30 UTC	1500	IN	Data Raw: 61 74 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 69 29 7b 76 61 72 20 6a 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6a 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 31 3b 62 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 63 3d 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 Data Ascii: ata",function(){return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a=Object.assign\|\|function(a){for(var b=1;b<arguments.length;b++){var c=arguments[b];for(var d in c)Object.prototype.hasOwnProperty.call(c,d)&&(a[d]=c[d])}r
2024-01-16 21:33:30 UTC	1500	IN	Data Raw: 67 3a 61 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 3d 7b 7d 3b 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 29 26 26 61 2e 70 6c 61 63 65 68 6f 6c 64 65 72 21 3d 3d 22 22 26 26 28 64 2e 70 6c 61 63 65 68 6f 6c 64 65 72 3d 61 2e 70 6c 61 63 65 68 6f 6c 64 65 72 29 3b 69 66 28 64 2e 74 61 67 3d 3d 3d 22 69 6e 70 75 74 22 29 7b 64 2e 69 6e 70 75 74 54 79 70 65 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 3b 69 66 28 63 26 26 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 Data Ascii: g:a.tagName.toLowerCase()},e={};(a instanceof HTMLInputElement\|\|a instanceof HTMLTextAreaElement)&&a.placeholder!==""&&(d.placeholder=a.placeholder);if(d.tag==="input"){d.inputType=a.getAttribute("type");if(c&&(a instanceof HTMLInputElement\|\|a instanceof
2024-01-16 21:33:30 UTC	1500	IN	Data Raw: 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 68 61 72 65 64 22 29 2c 62 3d 61 2e 75 6e 69 63 6f 64 65 53 61 66 65 54 72 75 6e 63 61 74 65 2c 63 3d 35 30 30 3b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 76 61 72 20 61 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 74 69 74 6c 65 22 29 3b 61 3d 62 28 61 26 26 61 2e 74 65 78 74 2c 63 29 3b 72 65 74 75 72 6e 7b 74 69 74 6c 65 3a 61 7d 7d 6b 2e 65 78 70 6f 72 74 73 3d 64 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 Data Ascii: {var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsShared"),b=a.unicodeSafeTruncate,c=500;function d(){var a=h.querySelector("title");a=b(a&&a.text,c);return{title:a}}k.exports=d})();return k.exports}(a,b,c,d
2024-01-16 21:33:30 UTC	1500	IN	Data Raw: 4f 72 44 6f 6d 61 69 6e 3d 3d 3d 22 64 6f 6d 61 69 6e 22 26 26 61 2e 6c 61 73 74 44 6f 74 49 6e 64 65 78 21 3d 6e 75 6c 6c 26 26 61 2e 6c 61 73 74 44 6f 74 49 6e 64 65 78 21 3d 3d 62 2d 31 26 26 61 2e 73 74 61 72 74 21 3d 6e 75 6c 6c 26 26 61 2e 65 6e 64 21 3d 6e 75 6c 6c 26 26 61 2e 65 6e 64 21 3d 3d 61 2e 6c 61 73 74 44 6f 74 49 6e 64 65 78 7d 66 75 6e 63 74 69 6f 6e 20 69 28 61 29 7b 76 61 72 20 62 3d 6e 75 6c 6c 2c 64 3d 61 3b 61 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 64 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 62 3d 67 28 65 2c 64 5b 65 5d 2c 62 29 2c 62 21 3d 6e 75 6c 6c 26 26 28 68 28 62 2c 64 2e 6c 65 6e 67 74 68 29 3f 61 2e 70 75 73 68 28 62 29 3a 65 3d 3d 3d 64 2e 6c 65 6e 67 74 68 2d 31 26 26 28 62 2e 65 6e 64 3d 65 2c 68 28 62 2c 64 Data Ascii: OrDomain==="domain"&&a.lastDotIndex!=null&&a.lastDotIndex!==b-1&&a.start!=null&&a.end!=null&&a.end!==a.lastDotIndex}function i(a){var b=null,d=a;a=[];for(var e=0;e<d.length;e++)b=g(e,d[e],b),b!=null&&(h(b,d.length)?a.push(b):e===d.length-1&&(b.end=e,h(b,d
2024-01-16 21:33:30 UTC	1500	IN	Data Raw: 61 6e 64 5f 70 75 6e 63 74 75 61 74 69 6f 6e 22 7d 7d 2c 6c 6e 3a 7b 74 79 70 65 3a 22 73 74 72 69 6e 67 22 2c 74 79 70 65 50 61 72 61 6d 73 3a 7b 6c 6f 77 65 72 63 61 73 65 3a 21 30 2c 73 74 72 69 70 3a 22 77 68 69 74 65 73 70 61 63 65 5f 61 6e 64 5f 70 75 6e 63 74 75 61 74 69 6f 6e 22 7d 7d 2c 7a 70 3a 7b 74 79 70 65 3a 22 70 6f 73 74 61 6c 5f 63 6f 64 65 22 7d 2c 63 74 3a 7b 74 79 70 65 3a 22 73 74 72 69 6e 67 22 2c 74 79 70 65 50 61 72 61 6d 73 3a 7b 6c 6f 77 65 72 63 61 73 65 3a 21 30 2c 73 74 72 69 70 3a 22 61 6c 6c 5f 6e 6f 6e 5f 6c 61 74 69 6e 5f 61 6c 70 68 61 5f 6e 75 6d 65 72 69 63 22 2c 74 65 73 74 3a 22 5e 5b 61 2d 7a 5d 2b 22 7d 7d 2c 73 74 3a 7b 74 79 70 65 3a 22 73 74 72 69 6e 67 22 2c 74 79 70 65 50 61 72 61 6d 73 3a 7b 6c 6f 77 65 72 63 Data Ascii: and_punctuation"}},ln:{type:"string",typeParams:{lowercase:!0,strip:"whitespace_and_punctuation"}},zp:{type:"postal_code"},ct:{type:"string",typeParams:{lowercase:!0,strip:"all_non_latin_alpha_numeric",test:"^[a-z]+"}},st:{type:"string",typeParams:{lowerc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.18	49964	18.164.96.77	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:30 UTC	512	OUT	GET /modules.2472296d2d26f0040059.js HTTP/1.1 Host: script.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:30 UTC	719	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 224764 Connection: close Date: Mon, 15 Jan 2024 14:36:14 GMT Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin ETag: "2a8085a6e35df0d52338b3148cf33f20" Last-Modified: Mon, 15 Jan 2024 14:36:02 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 6ea9421ec132e3640100792ef9535494.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 X-Amz-Cf-Id: BNphGgZKbZXTcY3on4u08PhBaHvc2yuuch3eyMoMPy3kPfa7wb6efw== Age: 111436
2024-01-16 21:33:30 UTC	15665	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 6f 64 75 6c 65 73 2e 32 34 37 32 32 39 36 64 32 64 32 36 66 30 30 34 30 30 35 39 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 37 38 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 63 6f 6e 73 74 20 72 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 49 44 45 4e 54 49 46 59 5f 55 53 45 52 3a 22 69 64 65 6e 74 69 66 79 5f 75 73 65 72 22 2c 41 55 54 4f 54 41 47 5f 52 45 43 4f 52 44 49 4e 47 3a 22 61 75 74 6f 74 61 67 5f 72 65 63 6f Data Ascii: /! For license information please see modules.2472296d2d26f0040059.js.LICENSE.txt /!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_reco
2024-01-16 21:33:30 UTC	16384	IN	Data Raw: 67 4e 61 6d 65 43 68 61 72 61 63 74 65 72 73 52 45 2c 22 22 29 7d 3b 72 65 74 75 72 6e 20 70 28 74 29 7d 76 61 72 20 70 3d 7b 32 3a 7b 69 67 6e 6f 72 65 43 6c 61 73 73 4c 69 73 74 3a 5b 22 6f 76 65 72 22 2c 22 68 6f 76 65 72 22 2c 22 61 63 74 69 76 65 22 2c 22 73 65 6c 65 63 74 65 64 22 2c 22 73 63 72 6f 6c 6c 65 64 22 5d 2c 69 67 6e 6f 72 65 42 6f 64 79 43 6c 61 73 73 65 73 3a 21 30 2c 69 67 6e 6f 72 65 55 55 49 44 43 6c 61 73 73 65 73 3a 21 30 2c 6d 61 78 43 6c 61 73 73 65 73 41 6c 6c 6f 77 65 64 3a 35 2c 64 69 73 61 6c 6c 6f 77 65 64 54 61 67 4e 61 6d 65 43 68 61 72 61 63 74 65 72 73 52 45 3a 2f 5b 5e 61 2d 7a 41 2d 5a 30 2d 39 2d 5f 5d 2f 67 7d 7d 2c 76 3d 7b 32 3a 74 28 74 28 7b 7d 2c 70 5b 32 5d 29 2c 7b 7d 2c 7b 67 65 74 46 75 6c 6c 53 65 6c 65 63 Data Ascii: gNameCharactersRE,"")};return p(t)}var p={2:{ignoreClassList:["over","hover","active","selected","scrolled"],ignoreBodyClasses:!0,ignoreUUIDClasses:!0,maxClassesAllowed:5,disallowedTagNameCharactersRE:/[^a-zA-Z0-9-_]/g}},v={2:t(t({},p[2]),{},{getFullSelec
2024-01-16 21:33:30 UTC	16384	IN	Data Raw: 6e 64 22 29 7d 2c 44 3d 7b 73 65 74 75 70 3a 21 31 2c 6c 69 73 74 65 6e 3a 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 44 2e 73 65 74 75 70 7c 7c 28 68 6a 2e 61 64 6f 70 74 65 64 53 74 79 6c 65 53 68 65 65 74 73 2e 69 6e 69 74 28 29 2c 68 6a 2e 61 64 6f 70 74 65 64 53 74 79 6c 65 53 68 65 65 74 73 2e 72 65 67 69 73 74 65 72 28 44 2e 73 65 6e 64 2e 62 69 6e 64 28 44 2c 22 61 64 6f 70 74 65 64 5f 73 74 79 6c 65 5f 73 68 65 65 74 73 22 29 2c 21 30 29 2c 44 2e 73 65 74 75 70 3d 21 30 29 7d 29 2c 22 62 65 68 61 76 69 6f 72 2d 64 61 74 61 2e 61 64 6f 70 74 65 64 53 74 79 6c 65 53 68 65 65 74 73 2e 6c 69 73 74 65 6e 22 29 2c 73 65 6e 64 3a 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 26 26 73 65 Data Ascii: nd")},D={setup:!1,listen:hj.tryCatch((function(){D.setup\|\|(hj.adoptedStyleSheets.init(),hj.adoptedStyleSheets.register(D.send.bind(D,"adopted_style_sheets"),!0),D.setup=!0)}),"behavior-data.adoptedStyleSheets.listen"),send:hj.tryCatch((function(e,t){t&&se
2024-01-16 21:33:30 UTC	16384	IN	Data Raw: 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6f 2e 63 68 69 6c 64 4c 69 73 74 43 68 61 6e 67 65 4d 61 70 2c 6e 3d 74 2e 67 65 74 28 65 29 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 6e 3d 6e 65 77 20 43 2c 74 2e 73 65 74 28 65 2c 6e 29 29 2c 6e 7d 29 2c 22 4d 75 74 61 74 69 6f 6e 50 72 6f 6a 65 63 74 69 6f 6e 2e 67 65 74 43 68 69 6c 64 6c 69 73 74 43 68 61 6e 67 65 22 29 2c 74 68 69 73 2e 70 72 6f 63 65 73 73 43 68 69 6c 64 6c 69 73 74 43 68 61 6e 67 65 73 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 2e 63 68 69 6c 64 4c 69 73 74 43 68 61 6e 67 65 4d 61 70 7c 7c 28 6f 2e 63 68 69 6c 64 4c 69 73 74 43 68 61 6e 67 65 4d 61 70 3d 6e 65 77 20 53 2c 6f 2e 6d 75 74 61 74 69 6f 6e 73 2e 66 Data Ascii: hj.tryCatch((function(e){var t=o.childListChangeMap,n=t.get(e);return n\|\|(n=new C,t.set(e,n)),n}),"MutationProjection.getChildlistChange"),this.processChildlistChanges=hj.tryCatch((function(){o.childListChangeMap\|\|(o.childListChangeMap=new S,o.mutations.f
2024-01-16 21:33:30 UTC	16384	IN	Data Raw: 20 30 3b 76 61 72 20 65 2c 74 2c 6e 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 76 61 72 20 6e 3d 68 28 6e 3d 65 5b 30 5d 2c 69 3d 65 5b 31 5d 2c 6f 3d 65 5b 32 5d 2c 72 3d 65 5b 33 5d 2c 74 5b 30 5d 2c 37 2c 2d 36 38 30 38 37 36 39 33 36 29 2c 72 3d 68 28 72 2c 6e 2c 69 2c 6f 2c 74 5b 31 5d 2c 31 32 2c 2d 33 38 39 35 36 34 35 38 36 29 2c 6f 3d 68 28 6f 2c 72 2c 6e 2c 69 2c 74 5b 32 5d 2c 31 37 2c 36 30 36 31 30 35 38 31 39 29 2c 69 3d 68 28 69 2c 6f 2c 72 2c 6e 2c 74 5b 33 5d 2c 32 32 2c 2d 31 30 34 34 35 32 35 33 33 30 29 3b 6e 3d 68 28 6e 2c 69 2c 6f 2c 72 2c 74 5b 34 5d 2c 37 2c 2d 31 37 36 34 31 38 38 39 37 29 2c 72 3d 68 28 72 2c 6e 2c 69 2c 6f 2c 74 5b 35 5d 2c 31 32 2c 31 32 30 30 30 38 30 34 32 36 29 2c 6f 3d 68 28 6f 2c 72 2c 6e 2c 69 2c Data Ascii: 0;var e,t,n;function u(e,t){var n=h(n=e[0],i=e[1],o=e[2],r=e[3],t[0],7,-680876936),r=h(r,n,i,o,t[1],12,-389564586),o=h(o,r,n,i,t[2],17,606105819),i=h(i,o,r,n,t[3],22,-1044525330);n=h(n,i,o,r,t[4],7,-176418897),r=h(r,n,i,o,t[5],12,1200080426),o=h(o,r,n,i,
2024-01-16 21:33:30 UTC	16384	IN	Data Raw: 22 29 29 7d 29 2c 22 63 6f 6d 6d 6f 6e 22 29 2c 65 2e 65 6e 61 62 6c 65 53 63 72 6f 6c 6c 69 6e 67 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 6a 2e 68 71 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 66 66 28 22 73 63 72 6f 6c 6c 2e 68 6f 74 6a 61 72 44 69 73 61 62 6c 65 22 29 2c 68 6a 2e 68 71 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 66 66 28 22 72 65 73 69 7a 65 2e 68 6f 74 6a 61 72 44 69 73 61 62 6c 65 22 29 2c 68 6a 2e 68 71 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 66 66 28 22 6d 6f 75 73 65 77 68 65 65 6c 2e 68 6f 74 6a 61 72 44 69 73 61 62 6c 65 22 29 2c 68 6a 2e 68 71 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 66 66 28 22 44 4f 4d 4d 6f 75 73 65 53 63 72 6f 6c 6c 2e 68 6f 74 6a 61 72 44 69 73 61 62 6c 65 22 29 2c 68 6a 2e 68 71 28 64 6f 63 Data Ascii: "))}),"common"),e.enableScrolling=hj.tryCatch((function(){hj.hq(document).off("scroll.hotjarDisable"),hj.hq(document).off("resize.hotjarDisable"),hj.hq(document).off("mousewheel.hotjarDisable"),hj.hq(document).off("DOMMouseScroll.hotjarDisable"),hj.hq(doc
2024-01-16 21:33:30 UTC	16384	IN	Data Raw: 61 74 63 68 28 65 29 7b 68 6a 2e 6c 6f 67 2e 64 65 62 75 67 28 22 54 68 65 20 57 65 62 20 53 6f 63 6b 65 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 61 73 20 72 65 66 75 73 65 64 2e 20 5c 6e 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 7d 72 65 74 75 72 6e 21 30 7d 29 2c 22 64 61 74 61 2e 48 6f 74 6a 61 72 57 65 62 53 6f 63 6b 65 74 2e 63 6f 6e 6e 65 63 74 22 29 2c 79 2e 70 72 6f 74 6f 74 79 70 65 2e 75 70 64 61 74 65 4c 61 73 74 55 73 65 72 41 63 74 69 76 69 74 79 54 69 6d 65 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 6c 61 73 74 55 73 65 72 41 63 74 69 76 69 74 79 54 69 6d 65 3d 28 6e 65 77 20 69 2e 66 5f 29 2e 67 65 74 54 69 6d 65 28 29 7d 29 2c 22 64 61 74 61 2e 48 6f 74 6a 61 72 57 65 62 53 6f 63 6b 65 74 Data Ascii: atch(e){hj.log.debug("The Web Socket connection was refused. \n ".concat(e))}}return!0}),"data.HotjarWebSocket.connect"),y.prototype.updateLastUserActivityTime=hj.tryCatch((function(){this._lastUserActivityTime=(new i.f_).getTime()}),"data.HotjarWebSocket
2024-01-16 21:33:30 UTC	16384	IN	Data Raw: 64 2c 22 2f 63 6f 6e 73 65 6e 74 22 29 2e 63 6f 6e 63 61 74 28 6f 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 74 2e 67 72 61 6e 74 65 64 3d 21 21 65 2e 73 75 63 63 65 73 73 26 26 2d 31 21 3d 3d 65 2e 73 63 6f 70 65 73 2e 69 6e 64 65 78 4f 66 28 22 61 73 73 6f 63 69 61 74 65 22 29 2c 74 2e 69 6e 50 72 6f 67 72 65 73 73 3d 21 31 3b 72 3d 74 2e 63 61 6c 6c 62 61 63 6b 73 2e 70 6f 70 28 29 3b 29 68 6a 2e 74 72 79 43 61 74 63 68 28 72 2c 22 43 6f 6e 73 65 6e 74 44 61 74 61 22 29 28 74 2e 67 72 61 6e 74 65 64 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 74 2e 67 72 61 6e 74 65 64 3d 21 31 2c 74 2e 69 6e 50 72 6f 67 72 65 73 73 3d 21 31 3b 72 3d 74 2e 63 61 6c 6c 62 61 63 6b 73 2e 70 6f 70 28 29 3b 29 68 6a 2e 74 72 79 43 61 74 63 68 Data Ascii: d,"/consent").concat(o),(function(e){for(t.granted=!!e.success&&-1!==e.scopes.indexOf("associate"),t.inProgress=!1;r=t.callbacks.pop();)hj.tryCatch(r,"ConsentData")(t.granted)}),(function(){for(t.granted=!1,t.inProgress=!1;r=t.callbacks.pop();)hj.tryCatch
2024-01-16 21:33:30 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 67 65 74 4b 65 79 28 29 7d 7d 7d 7d 2c 31 36 31 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 55 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 30 2c 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 31 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: unction(){return t.getKey()}}}},1613:function(e,t,n){"use strict";n.d(t,{U:function(){return r}});var r=function(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:0,t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:1;return function(){
2024-01-16 21:33:30 UTC	16384	IN	Data Raw: 28 65 29 3b 74 26 26 28 72 3d 72 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 74 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 72 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3a 7b 7d 3b 74 25 32 3f 41 28 4f 62 6a 65 63 74 28 6e 29 2c 21 30 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 50 28 65 2c 74 Data Ascii: (e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function k(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?A(Object(n),!0).forEach((function(t){P(e,t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.18	49965	104.18.34.229	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:30 UTC	500	OUT	GET /v2/4564783/banner.js HTTP/1.1 Host: js.hs-banner.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:30 UTC	1278	IN	HTTP/1.1 200 OK Date: Tue, 16 Jan 2024 21:33:30 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-amz-id-2: W5+3Vmag/7RQ+4kB/GSeQjbe9XArSSfo6wh7JoETp4eRkirHlU3Z4nax0ZkWLX45aQw2UcyQ4Mw= x-amz-request-id: AZBWDAPKM7SH46MN Last-Modified: Thu, 11 Jan 2024 22:24:53 GMT ETag: W/"d1aa89cad4d40f240e1323d979b974c8" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300,public x-amz-version-id: 15x_AtI.fjCR6vJd1AzOHJubpzez91Ib Access-Control-Allow-Methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Charset, Accept-Encoding, X-Override-Internal-Permissions, X-Properties-Source, X-Properties-SourceId, X-Properties-Flag, X-Hubspot-User-Id, X-Hubspot-Trace, X-Hubspot-Callee, X-Hubspot-Offset, X-Hubspot-No-Trace, X-HubSpot-Static-App-Info, X-HubSpot-Messages-Uri, X-HubSpot-Request-Source, X-HubSpot-Request-Reason, Subscription-Billing-Auth-Token, X-App-CSRF, X-Tools-CSRF, Online-Payment-Signing-UUID, X-Source, X-SourceId, X-Origin-UserId, X-Biden-Request-Source, X-HubSpot-CSRF-hubspotapi, X-Force-Cookie-Refresh, X-Force-Cookie-Refresh-No-Cache, X-HS-User-Request, X-Application-Id, X-HS-Referer, X-HubSpot-Correlation-Id
2024-01-16 21:33:30 UTC	761	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6c 61 73 74 2d 6d 6f 64 69 66 69 65 64 2d 74 69 6d 65 73 74 61 6d 70 2c 20 58 2d 48 75 62 53 70 6f 74 2d 4e 6f 74 46 6f 75 6e 64 2c 20 58 2d 48 53 2d 55 73 65 72 2d 52 65 71 75 65 73 74 2c 20 4c 69 6e 6b 2c 20 53 65 72 76 65 72 2d 54 69 6d 69 6e 67 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 43 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 4d 61 78 2d 41 67 65 3a 20 36 30 34 38 30 30 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 56 61 72 79 3a 20 6f 72 69 67 69 6e 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 31 36 20 4a 61 6e 20 32 30 32 34 20 32 Data Ascii: Access-Control-Expose-Headers: x-last-modified-timestamp, X-HubSpot-NotFound, X-HS-User-Request, Link, Server-TimingAccess-Control-Allow-Credentials: trueAccess-Control-Max-Age: 604800Timing-Allow-Origin: *Vary: originExpires: Tue, 16 Jan 2024 2
2024-01-16 21:33:30 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 76 61 72 20 5f 68 73 70 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 68 73 70 27 5d 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 68 73 70 27 5d 20 7c 7c 20 5b 5d 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 73 65 74 42 61 6e 6e 65 72 53 65 74 74 69 6e 67 73 27 2c 20 7b 7d 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 73 65 74 43 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 53 65 74 74 69 6e 67 73 27 2c 20 7b 7d 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 61 64 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 2e 68 73 66 6f 72 6d 73 2e 63 6f 6d 27 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 61 64 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 2e 73 69 67 6e 61 62 6c 65 2e 63 6f 2e 75 6b 27 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 61 64 64 43 6f Data Ascii: 7ff9var _hsp = window['_hsp'] = window['_hsp'] \|\| [];_hsp.push(['setBannerSettings', {}]);_hsp.push(['setCustomizationSettings', {}]);_hsp.push(['addCookieDomain', '.hsforms.com']);_hsp.push(['addCookieDomain', '.signable.co.uk']);_hsp.push(['addCo
2024-01-16 21:33:30 UTC	1369	IN	Data Raw: 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 6e 2e 64 28 74 2c 22 61 22 2c 74 29 3b 72 65 74 75 72 6e 20 74 7d 3b 6e 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 7d 3b 6e 2e 70 3d 22 2f 2f 73 74 61 74 69 63 2e 68 73 61 70 70 73 74 61 74 69 63 2e 6e 65 74 2f 63 6f 6f 6b 69 65 2d 62 61 6e 6e 65 72 2d 6a 73 2f 73 74 61 74 69 63 2d 31 2e 31 36 37 31 2f 22 3b 6e 28 6e 2e 73 3d 34 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c Data Ascii: n(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};n.d(t,"a",t);return t};n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)};n.p="//static.hsappstatic.net/cookie-banner-js/static-1.1671/";n(n.s=4)}([function(e,t,
2024-01-16 21:33:30 UTC	1369	IN	Data Raw: 3b 74 68 69 73 2e 77 68 69 74 65 6c 69 73 74 5f 6e 6f 64 65 73 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 66 6f 72 28 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 74 5b 6e 5d 3d 3d 65 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 76 61 72 20 65 2c 74 2c 6e 3d 5b 5d 2c 6f 3d 7b 7d 3b 66 6f 72 28 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 66 28 61 72 67 75 6d 65 6e 74 73 5b 65 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 65 5d 2e 6c 65 6e 67 74 68 29 66 6f 72 28 74 3d 30 3b 74 3c 61 72 67 75 6d 65 6e 74 73 5b 65 5d 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 69 66 28 21 6f 5b 61 72 67 75 6d 65 6e 74 73 5b 65 5d 5b 74 5d 5d 29 Data Ascii: ;this.whitelist_nodes=[];function n(e,t){var n;for(n=0;n<t.length;n++)if(t[n]==e)return n;return-1}function o(){var e,t,n=[],o={};for(e=0;e<arguments.length;e++)if(arguments[e]&&arguments[e].length)for(t=0;t<arguments[e].length;t++)if(!o[arguments[e][t]])
2024-01-16 21:33:30 UTC	1369	IN	Data Raw: 2e 76 61 6c 75 65 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 61 64 64 5f 61 74 74 72 69 62 75 74 65 73 5b 61 5d 5b 64 5d 3b 74 68 69 73 2e 63 75 72 72 65 6e 74 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 75 29 7d 7d 65 6c 73 65 20 69 66 28 2d 31 21 3d 6e 28 65 2c 74 68 69 73 2e 77 68 69 74 65 6c 69 73 74 5f 6e 6f 64 65 73 29 29 7b 74 68 69 73 2e 63 75 72 72 65 6e 74 5f 65 6c 65 6d 65 6e 74 3d 65 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 30 29 3b 66 6f 72 28 3b 74 68 69 73 2e 63 75 72 72 65 6e 74 5f 65 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 3e 30 3b 29 74 68 69 73 2e 63 75 72 72 65 6e 74 5f 65 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 63 75 72 72 65 6e 74 5f 65 6c 65 6d Data Ascii: .value=this.config.add_attributes[a][d];this.current_element.setAttributeNode(u)}}else if(-1!=n(e,this.whitelist_nodes)){this.current_element=e.cloneNode(!0);for(;this.current_element.childNodes.length>0;)this.current_element.removeChild(this.current_elem
2024-01-16 21:33:30 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 73 7d 2e 61 70 70 6c 79 28 74 2c 5b 5d 29 29 26 26 28 65 2e 65 78 70 6f 72 74 73 3d 6f 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 27 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4c 61 74 6f 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 4c 61 74 6f 2d 52 65 67 75 6c 61 72 22 29 2c 75 72 6c 28 68 74 74 70 73 3a 2f 2f 61 70 69 5f 62 61 73 65 5f 75 72 6c 2f 66 6f 6e 74 73 2f 4c 61 74 6f 2f 4c 61 74 6f 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 68 74 74 70 73 3a 2f 2f 61 70 69 5f 62 61 73 65 5f 75 72 6c 2f 66 6f 6e 74 73 2f 4c 61 74 6f 2f 4c 61 74 6f 2d 52 65 67 75 6c 61 72 Data Ascii: eturn s}.apply(t,[]))&&(e.exports=o)},function(e,t){e.exports='@font-face{font-family:Lato;font-display:swap;src:local("Lato-Regular"),url(https://api_base_url/fonts/Lato/Lato-Regular.woff2) format("woff2"),url(https://api_base_url/fonts/Lato/Lato-Regular
2024-01-16 21:33:30 UTC	1369	IN	Data Raw: 2d 68 65 69 67 68 74 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 36 34 70 78 29 3b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 3b 69 6e 73 65 74 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 69 6e 73 65 74 2c 33 32 70 78 20 30 20 61 75 74 6f 20 35 30 25 29 3b 7a 2d 69 6e 64 65 78 3a 33 30 30 30 30 30 30 30 30 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 74 72 61 6e 73 6c 61 74 65 2d 78 2c 2d 35 30 25 29 2c 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 74 72 61 6e 73 6c 61 74 65 2d 79 2c 30 29 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 74 72 61 6e 73 6c 61 74 65 2d 78 2c 2d 35 30 25 29 2c 76 61 72 Data Ascii: -height:calc(100% - 64px);overflow:auto;inset:var(--hs-banner-inset,32px 0 auto 50%);z-index:3000000000;transform:translate(var(--hs-banner-translate-x,-50%),var(--hs-banner-translate-y,0));-webkit-transform:translate(var(--hs-banner-translate-x,-50%),var
2024-01-16 21:33:30 UTC	1369	IN	Data Raw: 35 30 25 29 2c 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 74 72 61 6e 73 6c 61 74 65 2d 79 2c 30 29 29 20 74 72 61 6e 73 6c 61 74 65 5a 28 33 30 30 30 30 30 30 30 30 30 70 78 29 7d 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 2d 69 6e 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 67 61 70 3a 31 65 6d 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 70 61 64 64 69 6e 67 2c 32 2e 32 65 6d 29 7d 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 Data Ascii: 50%),var(--hs-banner-translate-y,0)) translateZ(3000000000px)}#hs-eu-cookie-confirmation #hs-eu-cookie-confirmation-inner{display:flex;gap:1em;flex-direction:column;padding:var(--hs-banner-padding,2.2em)}#hs-eu-cookie-confirmation #hs-eu-cookie-confirmati
2024-01-16 21:33:30 UTC	1369	IN	Data Raw: 2d 77 69 64 74 68 3a 31 31 65 6d 3b 68 65 69 67 68 74 3a 33 2e 33 65 6d 7d 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 23 68 73 2d 65 75 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 2d 62 75 74 74 6f 6e 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 61 63 63 65 70 74 2d 74 65 78 74 2d 63 6f 6c 6f 72 2c 23 66 66 66 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 61 63 63 65 70 74 2d 63 6f 6c 6f 72 2c 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 61 63 63 65 6e 74 43 6f 6c 6f 72 2c 23 34 32 35 62 37 36 29 29 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 61 63 63 65 70 74 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 Data Ascii: -width:11em;height:3.3em}#hs-eu-cookie-confirmation #hs-eu-confirmation-button{color:var(--hs-banner-accept-text-color,#fff);background:var(--hs-banner-accept-color,var(--hs-banner-accentColor,#425b76));border:1px solid var(--hs-banner-accept-border-color
2024-01-16 21:33:30 UTC	1369	IN	Data Raw: 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 63 6f 6c 6f 72 2c 23 66 61 66 62 66 66 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 63 6f 72 6e 65 72 73 2c 31 32 70 78 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 38 70 78 20 32 38 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 38 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 66 6f 6e 74 2d 73 69 7a 65 2c 31 34 70 78 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4c 61 74 6f 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 35 65 6d 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d Data Ascii: d-color:var(--hs-banner-modal-color,#fafbff);border-radius:var(--hs-banner-modal-corners,12px);box-shadow:0 8px 28px rgba(0,0,0,.28);font-size:var(--hs-banner-modal-font-size,14px);font-family:Lato;font-weight:400;line-height:1.75em;color:var(--hs-banner-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.18	49966	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:30 UTC	703	OUT	GET /manifest.json HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://signable.app/register?country_code=US&_gl=1%2a1aykcz3%2a_gcl_au%2aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%2a_ga%2aMjEzMTUwODYzOS4xNzA1NDQwNzc2%2a_ga_4XE2VYSQ35%2aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:30 UTC	2518	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 426 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:31 GMT ETag: "9a512143367d061dffc8e17d67fe7fb1" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 b63906e2da6fa6b0ef48be29690d7a98.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: DUl2rJrBm1ZNxwGyM-BKryFEh0TGhY1L6oQMT8lSNdvWIByYQ1irAQ== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:30 UTC	426	IN	Data Raw: 7b 0a 20 20 22 6e 61 6d 65 22 3a 20 22 53 69 67 6e 61 62 6c 65 22 2c 0a 20 20 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 20 22 53 69 67 6e 61 62 6c 65 22 2c 0a 20 20 22 69 63 6f 6e 73 22 3a 20 5b 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 2f 69 6d 67 2f 69 63 6f 6e 73 2f 61 6e 64 72 6f 69 64 2d 63 68 72 6f 6d 65 2d 31 39 32 78 31 39 32 2e 70 6e 67 22 2c 0a 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 31 39 32 78 31 39 32 22 2c 0a 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 70 6e 67 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 2f 69 6d 67 2f 69 63 6f 6e 73 2f 61 6e 64 72 6f 69 64 2d 63 68 72 6f 6d 65 2d 35 31 32 78 35 31 32 2e 70 6e 67 22 2c 0a 20 20 20 20 20 20 22 73 69 7a 65 Data Ascii: { "name": "Signable", "short_name": "Signable", "icons": [ { "src": "/img/icons/android-chrome-192x192.png", "sizes": "192x192", "type": "image/png" }, { "src": "/img/icons/android-chrome-512x512.png", "size

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.18	49969	104.18.123.12	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:30 UTC	521	OUT	GET /leadflows.js HTTP/1.1 Host: js.hsleadflows.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signable.app sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:30 UTC	1353	IN	HTTP/1.1 200 OK Date: Tue, 16 Jan 2024 21:33:30 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Wed, 03 Jan 2024 10:02:41 UTC x-amz-server-side-encryption: AES256 x-amz-version-id: z6CxNR7tOyvY9WtgJDh3TL771JIvwERG ETag: W/"8a35e91df79ea2127dd121bdbbef865e" Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 3c43e000c50d5633eb558057710f3c54.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P3 X-Amz-Cf-Id: EljiKJeyOFTNTg7GQD6206vNFYeSOSd7f7ibBo0HWBkBk-bEn7ZHAw== Age: 20505 Content-Security-Policy-Report-Only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=lead-flows-js/static-1.1301/bundle/main/lead-flows-release.js&cfRay=8467858e6a4d1a17-EWR Cache-Control: s-maxage=86400, max-age=0 X-HS-Target-Asset: lead-flows-js/static-1.1301/bundle/main/lead-flows-release.js X-Content-Type-Options: nosniff X-HS-Cache-Status: MISS x-envoy-upstream-service-time: 10 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-bf946f66b-tgh6w
2024-01-16 21:33:30 UTC	353	IN	Data Raw: 78 2d 65 76 79 2d 74 72 61 63 65 2d 6c 69 73 74 65 6e 65 72 3a 20 6c 69 73 74 65 6e 65 72 5f 68 74 74 70 73 0d 0a 78 2d 65 76 79 2d 74 72 61 63 65 2d 72 6f 75 74 65 2d 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 20 6c 69 73 74 65 6e 65 72 5f 68 74 74 70 73 2f 61 6c 6c 0d 0a 78 2d 68 75 62 73 70 6f 74 2d 63 6f 72 72 65 6c 61 74 69 6f 6e 2d 69 64 3a 20 65 39 33 61 66 65 63 36 2d 61 62 30 30 2d 34 39 63 63 2d 62 66 36 34 2d 32 35 35 33 65 33 32 38 66 32 64 36 0d 0a 78 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 65 39 33 61 66 65 63 36 2d 61 62 30 30 2d 34 39 63 63 2d 62 66 36 34 2d 32 35 35 33 65 33 32 38 66 32 64 36 0d 0a 63 61 63 68 65 2d 74 61 67 3a 20 73 74 61 74 69 63 6a 73 61 70 70 2d 6c 65 61 64 2d 66 6c 6f 77 73 2d 63 6c 6f 75 64 66 6c 61 72 65 2d 77 65 62 Data Ascii: x-evy-trace-listener: listener_httpsx-evy-trace-route-configuration: listener_https/allx-hubspot-correlation-id: e93afec6-ab00-49cc-bf64-2553e328f2d6x-request-id: e93afec6-ab00-49cc-bf64-2553e328f2d6cache-tag: staticjsapp-lead-flows-cloudflare-web
2024-01-16 21:33:30 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 61 2c 74 3b 6e 75 6c 6c 3d 3d 77 69 6e 64 6f 77 2e 6c 65 61 64 66 6c 6f 77 73 26 26 28 77 69 6e 64 6f 77 2e 6c 65 61 64 66 6c 6f 77 73 3d 7b 7d 29 3b 6e 75 6c 6c 3d 3d 28 65 3d 77 69 6e 64 6f 77 2e 6c 65 61 64 66 6c 6f 77 73 29 2e 70 72 65 73 65 72 76 65 64 4c 65 61 64 69 6e 47 6c 6f 62 61 6c 73 26 26 28 65 2e 70 72 65 73 65 72 76 65 64 4c 65 61 64 69 6e 47 6c 6f 62 61 6c 73 3d 7b 7d 29 3b 6e 75 6c 6c 3d 3d 28 61 3d 77 69 6e 64 6f 77 2e 6c 65 61 64 66 6c 6f 77 73 29 2e 70 72 65 73 65 72 76 65 64 4f 74 68 65 72 47 6c 6f 62 61 6c 73 26 26 28 61 2e 70 72 65 73 65 72 76 65 64 4f 74 68 65 72 47 6c 6f 62 61 6c 73 3d 7b 7d 29 3b 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 61 5b 65 5d 3d Data Ascii: 7ffa!function(){var e,a,t;null==window.leadflows&&(window.leadflows={});null==(e=window.leadflows).preservedLeadinGlobals&&(e.preservedLeadinGlobals={});null==(a=window.leadflows).preservedOtherGlobals&&(a.preservedOtherGlobals={});t=function(e,a){a[e]=
2024-01-16 21:33:30 UTC	1369	IN	Data Raw: 65 5b 61 5d 3d 21 30 3b 72 65 74 75 72 6e 20 65 7d 29 2c 7b 7d 29 29 3b 6c 2e 70 75 73 68 28 7b 74 61 72 3a 65 2c 66 6e 3a 69 28 65 2c 6e 29 7d 29 3b 74 68 69 73 2e 5f 74 69 6d 65 6f 75 74 7c 7c 74 28 74 68 69 73 29 7d 2c 74 61 6b 65 52 65 63 6f 72 64 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 61 3d 74 68 69 73 2e 5f 77 61 74 63 68 65 64 2c 74 3d 30 3b 74 3c 61 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 61 5b 74 5d 2e 66 6e 28 65 29 3b 72 65 74 75 72 6e 20 65 7d 2c 64 69 73 63 6f 6e 6e 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 77 61 74 63 68 65 64 3d 5b 5d 3b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 5f 74 69 6d 65 6f 75 74 29 3b 74 68 69 73 2e 5f 74 69 6d 65 6f 75 74 3d 6e 75 6c 6c 7d 7d 3b 66 Data Ascii: e[a]=!0;return e}),{}));l.push({tar:e,fn:i(e,n)});this._timeout\|\|t(this)},takeRecords:function(){for(var e=[],a=this._watched,t=0;t<a.length;t++)a[t].fn(e);return e},disconnect:function(){this._watched=[];clearTimeout(this._timeout);this._timeout=null}};f
2024-01-16 21:33:30 UTC	1369	IN	Data Raw: 65 2e 70 6f 70 28 29 3b 29 7b 66 3d 69 5b 6d 2e 69 5d 3b 75 3d 6f 5b 6d 2e 6a 5d 3b 69 66 28 6c 2e 6b 69 64 73 26 26 70 26 26 4d 61 74 68 2e 61 62 73 28 6d 2e 69 2d 6d 2e 6a 29 3e 3d 63 29 7b 61 2e 70 75 73 68 28 6e 28 7b 74 79 70 65 3a 22 63 68 69 6c 64 4c 69 73 74 22 2c 74 61 72 67 65 74 3a 74 2c 61 64 64 65 64 4e 6f 64 65 73 3a 5b 66 5d 2c 72 65 6d 6f 76 65 64 4e 6f 64 65 73 3a 5b 66 5d 2c 6e 65 78 74 53 69 62 6c 69 6e 67 3a 66 2e 6e 65 78 74 53 69 62 6c 69 6e 67 2c 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 3a 66 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 7d 29 29 3b 70 2d 2d 7d 6c 2e 61 74 74 72 26 26 75 2e 61 74 74 72 26 26 72 28 61 2c 66 2c 75 2e 61 74 74 72 2c 6c 2e 61 66 69 6c 74 65 72 29 3b 6c 2e 63 68 61 72 44 61 74 61 26 26 33 3d 3d 3d Data Ascii: e.pop();){f=i[m.i];u=o[m.j];if(l.kids&&p&&Math.abs(m.i-m.j)>=c){a.push(n({type:"childList",target:t,addedNodes:[f],removedNodes:[f],nextSibling:f.nextSibling,previousSibling:f.previousSibling}));p--}l.attr&&u.attr&&r(a,f,u.attr,l.afilter);l.charData&&3===
2024-01-16 21:33:30 UTC	1369	IN	Data Raw: 31 3d 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 26 26 28 69 2e 61 74 74 72 3d 62 28 6e 2e 61 74 74 72 69 62 75 74 65 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 61 2e 61 66 69 6c 74 65 72 26 26 21 61 2e 61 66 69 6c 74 65 72 5b 74 2e 6e 61 6d 65 5d 7c 7c 28 65 5b 74 2e 6e 61 6d 65 5d 3d 64 28 6e 2c 74 29 29 3b 72 65 74 75 72 6e 20 65 7d 29 2c 7b 7d 29 29 3b 74 26 26 28 61 2e 6b 69 64 73 7c 7c 61 2e 63 68 61 72 44 61 74 61 7c 7c 61 2e 61 74 74 72 26 26 61 2e 64 65 73 63 65 6e 64 65 6e 74 73 29 26 26 28 69 2e 6b 69 64 73 3d 5f 28 6e 2e 63 68 69 6c 64 4e 6f 64 65 73 2c 65 29 29 3b 74 3d 61 2e 64 65 73 63 65 6e 64 65 6e 74 73 7d 65 6c 73 65 20 69 2e 63 68 61 72 44 61 74 61 3d 6e 2e 6e 6f 64 65 56 61 6c 75 65 3b 72 65 74 75 72 6e 20 69 7d 28 65 29 7d 66 75 6e Data Ascii: 1===n.nodeType&&(i.attr=b(n.attributes,(function(e,t){a.afilter&&!a.afilter[t.name]\|\|(e[t.name]=d(n,t));return e}),{}));t&&(a.kids\|\|a.charData\|\|a.attr&&a.descendents)&&(i.kids=_(n.childNodes,e));t=a.descendents}else i.charData=n.nodeValue;return i}(e)}fun
2024-01-16 21:33:30 UTC	1369	IN	Data Raw: 63 65 5b 6d 5d 2e 6e 6f 64 65 54 79 70 65 3f 6c 2e 71 54 61 72 67 65 74 5b 6d 5d 3d 6c 2e 71 53 6f 75 72 63 65 5b 6d 5d 3a 6c 2e 71 53 6f 75 72 63 65 5b 6d 5d 21 3d 3d 6c 2e 71 54 61 72 67 65 74 5b 6d 5d 26 26 69 2e 70 75 73 68 28 7b 71 53 6f 75 72 63 65 3a 6c 2e 71 53 6f 75 72 63 65 5b 6d 5d 2c 71 54 61 72 67 65 74 3a 6c 2e 71 54 61 72 67 65 74 5b 6d 5d 7d 29 29 7d 7d 65 6c 73 65 20 6e 5b 75 5d 3d 61 5b 75 5d 7d 65 6c 73 65 20 73 5b 74 5d 3d 61 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 68 75 62 73 70 6f 74 26 26 68 75 62 73 70 6f 74 2e 75 70 64 61 74 65 44 65 70 65 6e 64 65 6e 63 69 65 73 26 26 68 75 62 73 70 6f 74 2e 75 70 64 61 74 65 44 65 70 65 6e 64 65 6e 63 69 65 73 28 65 29 3b 72 65 74 75 72 6e 20 73 5b 74 5d 7d 3b 68 6e 73 28 Data Ascii: ce[m].nodeType?l.qTarget[m]=l.qSource[m]:l.qSource[m]!==l.qTarget[m]&&i.push({qSource:l.qSource[m],qTarget:l.qTarget[m]}))}}else n[u]=a[u]}else s[t]=a;"undefined"!=typeof hubspot&&hubspot.updateDependencies&&hubspot.updateDependencies(e);return s[t]};hns(
2024-01-16 21:33:30 UTC	1369	IN	Data Raw: 61 79 3d 3d 21 31 26 26 28 74 3d 5b 74 5d 29 3b 72 65 74 75 72 6e 20 74 7d 3b 65 2e 6c 6f 63 61 6c 65 73 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 74 2c 6e 3d 5b 5d 2c 69 3d 5b 5d 3b 61 26 26 6e 2e 70 75 73 68 28 61 29 3b 21 61 26 26 65 2e 6c 6f 63 61 6c 65 26 26 6e 2e 70 75 73 68 28 65 2e 6c 6f 63 61 6c 65 29 3b 65 2e 66 61 6c 6c 62 61 63 6b 73 26 26 65 2e 64 65 66 61 75 6c 74 4c 6f 63 61 6c 65 26 26 6e 2e 70 75 73 68 28 65 2e 64 65 66 61 75 6c 74 4c 6f 63 61 6c 65 29 3b 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 3d 61 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3b 7e 69 2e 69 6e 64 65 78 4f 66 28 61 29 7c 7c 69 2e 70 75 73 68 28 61 29 3b 65 2e 66 61 6c 6c 62 61 63 6b 73 26 26 74 26 26 74 21 3d Data Ascii: ay==!1&&(t=[t]);return t};e.locales.default=function(a){var t,n=[],i=[];a&&n.push(a);!a&&e.locale&&n.push(e.locale);e.fallbacks&&e.defaultLocale&&n.push(e.defaultLocale);n.forEach((function(a){t=a.split("-")[0];~i.indexOf(a)\|\|i.push(a);e.fallbacks&&t&&t!=
2024-01-16 21:33:30 UTC	1369	IN	Data Raw: 66 28 6e 75 6c 6c 3d 3d 6e 29 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 69 73 73 69 6e 67 54 72 61 6e 73 6c 61 74 69 6f 6e 28 61 2c 74 29 3b 69 66 28 6e 75 6c 6c 3d 3d 6e 29 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 69 73 73 69 6e 67 54 72 61 6e 73 6c 61 74 69 6f 6e 28 61 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 6e 3d 74 68 69 73 2e 69 6e 74 65 72 70 6f 6c 61 74 65 28 6e 2c 74 29 3b 65 6c 73 65 20 69 66 28 66 28 6e 29 26 26 74 68 69 73 2e 69 73 53 65 74 28 74 2e 63 6f 75 6e 74 29 26 26 76 6f 69 64 20 30 3d 3d 3d 28 6e 3d 74 68 69 73 2e 70 6c 75 72 61 6c 69 7a 65 28 74 2e 63 6f 75 6e 74 2c 6e 2c 74 29 29 26 26 74 2e 6c 6f 63 61 6c 65 21 3d 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 4c 6f 63 61 6c 65 29 72 65 74 75 72 6e 20 65 2e 74 72 Data Ascii: f(null==n)return this.missingTranslation(a,t);if(null==n)return this.missingTranslation(a);if("string"==typeof n)n=this.interpolate(n,t);else if(f(n)&&this.isSet(t.count)&&void 0===(n=this.pluralize(t.count,n,t))&&t.locale!==this.defaultLocale)return e.tr
2024-01-16 21:33:30 UTC	1369	IN	Data Raw: 28 65 3d 65 2e 72 65 70 6c 61 63 65 28 75 2e 73 69 6e 67 6c 65 51 75 6f 74 52 65 5f 2c 22 26 23 78 32 37 3b 22 29 29 3b 72 65 74 75 72 6e 20 65 7d 3b 65 2e 6d 69 73 73 69 6e 67 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 76 61 72 20 74 3d 22 5b 6d 69 73 73 69 6e 67 20 22 2b 61 2b 22 20 76 61 6c 75 65 20 66 72 6f 6d 20 22 2b 65 2b 22 5d 22 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 49 31 38 6e 3a 20 4d 69 73 73 69 6e 67 20 74 65 6d 70 6c 61 74 65 20 70 6c 61 63 65 68 6f 6c 64 65 72 20 76 61 6c 75 65 20 28 22 2b 74 68 69 73 2e 63 75 72 72 65 6e 74 4c 6f 63 61 6c 65 28 29 2b 22 29 3a 20 22 2b 61 2b 22 20 76 61 6c 75 65 20 66 72 6f 6d 20 22 2b 65 29 3b 72 65 74 75 72 6e 20 74 7d 3b 65 2e 70 6c 75 72 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e Data Ascii: (e=e.replace(u.singleQuotRe_,"'"));return e};e.missingValue=function(e,a){var t="[missing "+a+" value from "+e+"]";console.warn("I18n: Missing template placeholder value ("+this.currentLocale()+"): "+a+" value from "+e);return t};e.pluralize=function
2024-01-16 21:33:30 UTC	1369	IN	Data Raw: 7d 29 2c 74 68 69 73 2e 6c 6f 6f 6b 75 70 28 22 6e 75 6d 62 65 72 2e 66 6f 72 6d 61 74 22 2c 7b 6c 6f 63 61 6c 65 3a 6e 7d 29 2c 6f 29 3b 69 66 28 69 2e 61 62 62 72 65 76 69 61 74 65 29 7b 76 61 72 20 6c 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 69 2e 61 62 62 72 65 76 69 61 74 65 3f 69 2e 61 62 62 72 65 76 69 61 74 65 3a 22 73 68 6f 72 74 22 2c 73 3d 65 2e 70 72 65 70 61 72 65 4f 70 74 69 6f 6e 73 28 7b 74 79 70 65 3a 6c 2c 70 72 65 63 69 73 69 6f 6e 3a 76 6f 69 64 20 30 21 3d 3d 74 2e 70 72 65 63 69 73 69 6f 6e 3f 74 2e 70 72 65 63 69 73 69 6f 6e 3a 30 7d 2c 69 29 3b 61 3d 74 68 69 73 2e 61 62 62 72 65 76 69 61 74 65 4e 75 6d 62 65 72 28 61 2c 73 29 7d 65 6c 73 65 20 61 3d 74 68 69 73 2e 74 6f 4e 75 6d 62 65 72 28 61 2c 69 29 3b 69 2e 63 75 Data Ascii: }),this.lookup("number.format",{locale:n}),o);if(i.abbreviate){var l="string"==typeof i.abbreviate?i.abbreviate:"short",s=e.prepareOptions({type:l,precision:void 0!==t.precision?t.precision:0},i);a=this.abbreviateNumber(a,s)}else a=this.toNumber(a,i);i.cu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.18	49970	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:30 UTC	1376	OUT	GET /css/chunk-3fbf9bd4.470369c5.css HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9
2024-01-16 21:33:31 UTC	2511	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 1919 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:00 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:32 GMT ETag: "6b34ed69a95ff2db40a2c944d3faaa0c" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 c59b5a542015c208c95d2ed3c65cdbcc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: K3xgXXOD6asoI_poqwTvOnt0c-N2vIfAIsajwv2OYrajgcuHC6ZiPg== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:31 UTC	1919	IN	Data Raw: 2e 6f 2d 6d 6f 64 61 6c 5f 5f 62 6f 78 5b 64 61 74 61 2d 76 2d 66 31 65 62 30 36 61 34 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 34 35 25 3b 6c 65 66 74 3a 35 30 25 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 70 78 3b 6f 70 61 63 69 74 79 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 36 35 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 Data Ascii: .o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.18	49971	104.16.79.186	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:30 UTC	517	OUT	GET /analytics/1705440600000/4564783.js HTTP/1.1 Host: js.hs-analytics.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:30 UTC	1058	IN	HTTP/1.1 200 OK Date: Tue, 16 Jan 2024 21:33:30 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close x-amz-id-2: ND2NuV/UPVwwxq8jNbc2UU/nQXObiUX0KZNVlck0uuMxJPN5FTmWr/W4Yk/yb9wdfk7FaeJG5PtAA2Fn71ZTS+ic/D6WddAPDbfXEvDtpv4= x-amz-request-id: BEKGWC96X5BW8CB4 Last-Modified: Wed, 03 Jan 2024 16:31:02 GMT ETag: W/"4a23330658a01ef515b77c2a34e14b56" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300,public x-amz-version-id: null Access-Control-Allow-Credentials: false Vary: origin Expires: Tue, 16 Jan 2024 21:38:30 GMT x-envoy-upstream-service-time: 20 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-evy-trace-served-by-pod: iad02/analytics-js-proxy-td/envoy-proxy-855d6bfb88-8jbvm x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-hubspot-correlation-id: b801b73e-df97-4191-bc78-1e777c6424e6 x-request-id: b801b73e-df97-4191-bc78-1e777c6424e6 CF-Cache-Status: MISS Server: cloudflare CF-RAY: 84697a2c2e676a55-EWR
2024-01-16 21:33:30 UTC	311	IN	Data Raw: 37 62 38 30 0d 0a 2f 2a 2a 20 0a 20 2a 20 48 75 62 53 70 6f 74 20 41 6e 61 6c 79 74 69 63 73 20 54 72 61 63 6b 69 6e 67 20 43 6f 64 65 20 42 75 69 6c 64 20 4e 75 6d 62 65 72 20 31 2e 35 39 30 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 48 75 62 53 70 6f 74 2c 20 49 6e 63 2e 20 20 68 74 74 70 3a 2f 2f 77 77 77 2e 68 75 62 73 70 6f 74 2e 63 6f 6d 0a 20 2a 2f 0a 76 61 72 20 5f 68 73 71 20 3d 20 5f 68 73 71 20 7c 7c 20 5b 5d 3b 0a 76 61 72 20 5f 70 61 71 20 3d 20 5f 70 61 71 20 7c 7c 20 5b 5d 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 73 65 74 50 6f 72 74 61 6c 49 64 27 2c 20 34 35 36 34 37 38 33 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 74 72 61 63 6b 50 61 67 65 56 69 65 77 27 5d 29 3b 0a 74 72 79 20 7b 0a 2f 2f 20 27 74 72 75 65 27 20 74 Data Ascii: 7b80/** * HubSpot Analytics Tracking Code Build Number 1.590 * Copyright 2024 HubSpot, Inc. http://www.hubspot.com */var _hsq = _hsq \|\| [];var _paq = _paq \|\| [];_hsq.push(['setPortalId', 4564783]);_hsq.push(['trackPageView']);try {// 'true' t
2024-01-16 21:33:30 UTC	1369	IN	Data Raw: 68 28 5b 0a 20 20 27 74 72 61 63 6b 43 75 73 74 6f 6d 42 65 68 61 76 69 6f 72 61 6c 45 76 65 6e 74 27 2c 0a 20 20 7b 0a 20 20 20 20 6e 61 6d 65 3a 20 22 70 65 34 35 36 34 37 38 33 5f 74 65 73 74 5f 5f 5f 61 70 69 5f 6b 65 79 22 2c 0a 20 20 20 20 70 72 6f 70 65 72 74 69 65 73 3a 20 7b 0a 20 20 20 20 20 20 2f 2f 20 67 69 76 65 20 65 61 63 68 20 70 72 6f 70 65 72 74 79 20 61 20 76 61 6c 75 65 20 73 6f 20 77 65 20 6b 6e 6f 77 20 77 68 61 74 20 74 68 65 79 20 6d 65 61 6e 0a 20 20 20 20 20 20 0a 20 20 20 20 7d 2c 0a 20 20 7d 2c 0a 5d 29 3b 0a 7d 0a 7d 20 63 61 74 63 68 20 28 65 29 20 7b 20 5f 68 73 71 2e 70 75 73 68 28 5b 27 6c 6f 67 27 2c 20 27 63 75 73 74 6f 6d 4a 73 45 72 72 6f 72 27 2c 20 65 5d 29 3b 20 7d 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 73 65 74 4c Data Ascii: h([ 'trackCustomBehavioralEvent', { name: "pe4564783_test___api_key", properties: { // give each property a value so we know what they mean }, },]);}} catch (e) { _hsq.push(['log', 'customJsError', e]); }_hsq.push(['setL
2024-01-16 21:33:30 UTC	1369	IN	Data Raw: 63 65 28 2f 5b 78 79 5d 2f 67 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 69 3d 28 74 2b 31 36 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 25 31 36 7c 30 3b 74 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 2f 31 36 29 3b 72 65 74 75 72 6e 28 22 78 22 3d 3d 3d 65 3f 69 3a 33 26 69 7c 38 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 7d 29 29 7d 2c 5f 63 72 79 70 74 6f 55 75 69 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 7c 7c 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 2c 65 3d 6e 65 77 20 55 69 6e 74 31 36 41 72 72 61 79 28 38 29 3b 74 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 65 29 3b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 74 6f 53 74 72 69 6e Data Ascii: ce(/[xy]/g,(function(e){var i=(t+16*Math.random())%16\|0;t=Math.floor(t/16);return("x"===e?i:3&i\|8).toString(16)}))},_cryptoUuid:function(){var t=window.crypto\|\|window.msCrypto,e=new Uint16Array(8);t.getRandomValues(e);var i=function(t){for(var e=t.toStrin
2024-01-16 21:33:30 UTC	1369	IN	Data Raw: 3b 68 73 74 63 2e 67 6c 6f 62 61 6c 2e 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 4c 6f 63 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 63 7d 3b 68 73 74 63 2e 67 6c 6f 62 61 6c 2e 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 48 6f 73 74 4e 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 63 2e 68 6f 73 74 6e 61 6d 65 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 64 6f 63 2e 64 6f 6d 61 69 6e 7d 7d 3b 68 73 74 63 2e 67 6c 6f 62 61 6c 2e 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 50 61 74 68 4e 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 63 Data Ascii: ;hstc.global.Context.prototype.getLocation=function(){return this.loc};hstc.global.Context.prototype.getHostName=function(){try{return this.loc.hostname}catch(t){return this.doc.domain}};hstc.global.Context.prototype.getPathName=function(){return this.loc
2024-01-16 21:33:30 UTC	1369	IN	Data Raw: 30 3d 3d 69 3f 37 3a 37 2d 69 29 3b 72 65 74 75 72 6e 20 68 73 74 63 2e 75 74 69 6c 73 2e 63 6c 65 61 72 54 69 6d 65 50 61 72 74 28 6e 65 77 20 44 61 74 65 28 65 2e 73 65 74 44 61 74 65 28 6e 29 29 29 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 67 65 74 4e 65 78 74 4d 6f 6e 74 68 53 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 7c 7c 6e 65 77 20 44 61 74 65 2c 69 3d 65 2e 67 65 74 4d 6f 6e 74 68 28 29 3b 69 3d 3d 65 2e 67 65 74 4d 6f 6e 74 68 28 29 3b 29 7b 30 3b 65 2e 73 65 74 44 61 74 65 28 65 2e 67 65 74 44 61 74 65 28 29 2b 31 29 7d 72 65 74 75 72 6e 20 68 73 74 63 2e 75 74 69 6c 73 2e 63 6c 65 61 72 54 69 6d 65 50 61 72 74 28 65 29 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 63 6c 65 61 72 54 69 6d 65 50 61 72 74 3d 66 75 Data Ascii: 0==i?7:7-i);return hstc.utils.clearTimePart(new Date(e.setDate(n)))};hstc.utils.getNextMonthStart=function(t){for(var e=t\|\|new Date,i=e.getMonth();i==e.getMonth();){0;e.setDate(e.getDate()+1)}return hstc.utils.clearTimePart(e)};hstc.utils.clearTimePart=fu
2024-01-16 21:33:30 UTC	1369	IN	Data Raw: 7b 65 3d 74 68 69 73 3b 2d 2d 69 7d 66 6f 72 28 3b 69 3c 6e 3b 69 2b 2b 29 69 66 28 6e 75 6c 6c 21 3d 28 74 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 29 29 66 6f 72 28 76 61 72 20 73 20 69 6e 20 74 29 7b 76 61 72 20 6f 3d 65 5b 73 5d 2c 63 3d 74 5b 73 5d 3b 65 21 3d 3d 63 26 26 28 72 26 26 63 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 21 63 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 73 5d 3d 68 73 74 63 2e 75 74 69 6c 73 2e 65 78 74 65 6e 64 28 72 2c 6f 7c 7c 28 6e 75 6c 6c 21 3d 3d 63 2e 6c 65 6e 67 74 68 3f 5b 5d 3a 7b 7d 29 2c 63 29 3a 76 6f 69 64 20 30 21 3d 3d 63 26 26 28 65 5b 73 5d 3d 63 29 29 7d 72 65 74 75 72 6e 20 65 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 65 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e Data Ascii: {e=this;--i}for(;i<n;i++)if(null!=(t=arguments[i]))for(var s in t){var o=e[s],c=t[s];e!==c&&(r&&c&&"object"==typeof c&&!c.nodeType?e[s]=hstc.utils.extend(r,o\|\|(null!==c.length?[]:{}),c):void 0!==c&&(e[s]=c))}return e};hstc.utils.each=function(t,e){var i,n
2024-01-16 21:33:30 UTC	1369	IN	Data Raw: 65 6e 74 3b 72 65 74 75 72 6e 20 69 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 75 6e 63 74 69 6f 6e 3f 65 3f 65 6e 63 6f 64 65 55 52 49 28 74 29 3a 69 28 74 29 3a 65 73 63 61 70 65 28 74 29 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 64 65 63 6f 64 65 50 61 72 61 6d 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 3b 74 3d 74 2e 73 70 6c 69 74 28 22 2b 22 29 2e 6a 6f 69 6e 28 22 20 22 29 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 75 6e 63 74 69 6f 6e 29 74 72 79 7b 69 3d 65 3f 64 65 63 6f 64 65 55 52 49 28 74 29 3a 6e 28 74 29 7d 63 61 74 63 68 28 65 29 7b 69 3d 75 6e 65 73 63 61 70 65 28 74 29 7d 65 6c 73 65 20 69 3d 75 6e 65 73 63 61 70 65 28 74 29 3b 72 65 74 75 72 6e 20 69 7d Data Ascii: ent;return i instanceof Function?e?encodeURI(t):i(t):escape(t)};hstc.utils.decodeParam=function(t,e){var i,n=decodeURIComponent;t=t.split("+").join(" ");if(n instanceof Function)try{i=e?decodeURI(t):n(t)}catch(e){i=unescape(t)}else i=unescape(t);return i}
2024-01-16 21:33:30 UTC	1369	IN	Data Raw: 6c 61 63 65 28 2f 5c 5d 24 2f 2c 22 22 29 3b 6c 3d 28 75 3d 75 2e 73 68 69 66 74 28 29 2e 73 70 6c 69 74 28 22 5b 22 29 2e 63 6f 6e 63 61 74 28 75 29 29 2e 6c 65 6e 67 74 68 2d 31 7d 65 6c 73 65 20 6c 3d 30 3b 69 66 28 32 3d 3d 3d 6f 2e 6c 65 6e 67 74 68 29 7b 73 3d 68 73 74 63 2e 75 74 69 6c 73 2e 64 65 63 6f 64 65 50 61 72 61 6d 28 6f 5b 31 5d 29 3b 65 26 26 28 73 3d 73 26 26 21 69 73 4e 61 4e 28 73 29 3f 2b 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 73 3f 76 6f 69 64 20 30 3a 76 6f 69 64 20 30 21 3d 3d 6e 5b 73 5d 3f 6e 5b 73 5d 3a 73 29 3b 69 66 28 6c 29 66 6f 72 28 3b 68 3c 3d 6c 3b 68 2b 2b 29 7b 63 3d 22 22 3d 3d 3d 75 5b 68 5d 3f 61 2e 6c 65 6e 67 74 68 3a 75 5b 68 5d 3b 61 3d 61 5b 63 3d 73 61 6e 69 74 69 7a 65 4b 65 79 28 63 29 5d 3d 68 3c Data Ascii: lace(/\]$/,"");l=(u=u.shift().split("[").concat(u)).length-1}else l=0;if(2===o.length){s=hstc.utils.decodeParam(o[1]);e&&(s=s&&!isNaN(s)?+s:"undefined"===s?void 0:void 0!==n[s]?n[s]:s);if(l)for(;h<=l;h++){c=""===u[h]?a.length:u[h];a=a[c=sanitizeKey(c)]=h<
2024-01-16 21:33:30 UTC	1369	IN	Data Raw: 28 21 65 29 72 65 74 75 72 6e 20 65 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 65 29 74 5b 69 5d 3d 65 5b 69 5d 3b 72 65 74 75 72 6e 20 74 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 68 61 73 43 6c 61 73 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 74 26 26 74 2e 63 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 68 73 74 63 2e 75 74 69 6c 73 2e 69 6e 41 72 72 61 79 28 65 2c 74 2e 63 6c 61 73 73 4e 61 6d 65 2e 73 70 6c 69 74 28 22 20 22 29 29 3e 2d 31 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 73 74 72 69 70 4e 75 6d 65 72 69 63 42 72 61 63 6b 65 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 28 5e 2e 2b 3f 29 5c 5b 28 2e 2b 3f 29 5c 5d 2f 2c 22 24 31 5f 24 32 22 29 7d 3b 68 73 74 63 2e Data Ascii: (!e)return e;for(var i in e)t[i]=e[i];return t};hstc.utils.hasClass=function(t,e){if(t&&t.className)return hstc.utils.inArray(e,t.className.split(" "))>-1};hstc.utils.stripNumericBrackets=function(t){return(t\|\|"").replace(/(^.+?)\[(.+?)\]/,"$1_$2")};hstc.
2024-01-16 21:33:30 UTC	1369	IN	Data Raw: 28 74 2e 69 73 45 71 75 61 6c 26 26 5f 2e 69 73 46 75 6e 63 74 69 6f 6e 28 74 2e 69 73 45 71 75 61 6c 29 29 72 65 74 75 72 6e 20 74 2e 69 73 45 71 75 61 6c 28 65 29 3b 69 66 28 65 2e 69 73 45 71 75 61 6c 26 26 5f 2e 69 73 46 75 6e 63 74 69 6f 6e 28 65 2e 69 73 45 71 75 61 6c 29 29 72 65 74 75 72 6e 20 65 2e 69 73 45 71 75 61 6c 28 74 29 3b 76 61 72 20 6e 3d 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 74 29 3b 69 66 28 6e 21 3d 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 29 72 65 74 75 72 6e 21 31 3b 73 77 69 74 63 68 28 6e 29 7b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 53 74 72 69 6e 67 5d 22 3a 72 65 74 75 72 6e 20 74 3d 3d 53 74 72 69 6e 67 28 65 29 3b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 4e 75 6d 62 65 72 5d 22 3a 72 65 74 75 72 6e 20 74 21 3d 2b 74 Data Ascii: (t.isEqual&&_.isFunction(t.isEqual))return t.isEqual(e);if(e.isEqual&&_.isFunction(e.isEqual))return e.isEqual(t);var n=toString.call(t);if(n!=toString.call(e))return!1;switch(n){case"[object String]":return t==String(e);case"[object Number]":return t!=+t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.18	49972	18.164.96.95	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:30 UTC	546	OUT	GET /sessions/983768?s=0.25&r=0.20914611521171556 HTTP/1.1 Host: vc.hotjar.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://signable.app Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:31 UTC	371	IN	HTTP/1.1 204 No Content Connection: close Access-Control-Allow-Origin: * Cache-Control: no-store Date: Tue, 16 Jan 2024 21:33:31 GMT Server: Python/3.8 aiohttp/3.8.4 X-Cache: Miss from cloudfront Via: 1.1 f8b0654d6e6bbf12f54a635de5db7ee4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 X-Amz-Cf-Id: I1ltMowEyNAwDuoj8z5kV39sUpRPmn_uuaPjpD99iPqXA28qKiECcg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.18	49968	34.208.216.197	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:30 UTC	606	OUT	POST /6 HTTP/1.1 Host: m.stripe.com Connection: keep-alive Content-Length: 3652 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://m.stripe.network Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://m.stripe.network/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:30 UTC	3652	OUT	Data Raw: 4a 54 64 43 4a 54 49 79 64 6a 49 6c 4d 6a 49 6c 4d 30 45 78 4a 54 4a 44 4a 54 49 79 61 57 51 6c 4d 6a 49 6c 4d 30 45 6c 4d 6a 49 77 59 54 6c 6a 5a 57 4a 6c 59 7a 59 33 5a 57 4d 31 5a 47 56 6b 4f 54 5a 6b 5a 54 64 6c 59 57 4d 31 4d 6d 45 35 4d 47 52 69 5a 53 55 79 4d 69 55 79 51 79 55 79 4d 6e 51 6c 4d 6a 49 6c 4d 30 45 31 4e 54 63 75 4d 53 55 79 51 79 55 79 4d 6e 52 68 5a 79 55 79 4d 69 55 7a 51 53 55 79 4d 6a 51 75 4e 53 34 30 4d 79 55 79 4d 69 55 79 51 79 55 79 4d 6e 4e 79 59 79 55 79 4d 69 55 7a 51 53 55 79 4d 6d 70 7a 4a 54 49 79 4a 54 4a 44 4a 54 49 79 59 53 55 79 4d 69 55 7a 51 53 55 33 51 69 55 79 4d 6d 45 6c 4d 6a 49 6c 4d 30 45 6c 4e 30 49 6c 4d 6a 4a 32 4a 54 49 79 4a 54 4e 42 4a 54 49 79 64 48 4a 31 5a 53 55 79 4d 69 55 79 51 79 55 79 4d 6e 51 Data Ascii: JTdCJTIydjIlMjIlM0ExJTJDJTIyaWQlMjIlM0ElMjIwYTljZWJlYzY3ZWM1ZGVkOTZkZTdlYWM1MmE5MGRiZSUyMiUyQyUyMnQlMjIlM0E1NTcuMSUyQyUyMnRhZyUyMiUzQSUyMjQuNS40MyUyMiUyQyUyMnNyYyUyMiUzQSUyMmpzJTIyJTJDJTIyYSUyMiUzQSU3QiUyMmElMjIlM0ElN0IlMjJ2JTIyJTNBJTIydHJ1ZSUyMiUyQyUyMnQ
2024-01-16 21:33:31 UTC	730	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:33:31 GMT Content-Length: 156 Connection: close set-cookie: m=0609bac3-d68d-4920-8c06-3a23d99946c22167c7;Expires=Thu, 15-Jan-2026 21:33:31 GMT;Secure;HttpOnly; SameSite=None x-content-type-options: nosniff x-stripe-server-envoy-start-time-us: 1705440811151538 x-stripe-server-envoy-upstream-service-time-ms: 2 x-stripe-bg-intended-route-color: blue x-stripe-client-envoy-start-time-us: 1705440811150957 Access-Control-Allow-Origin: https://m.stripe.network Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Content-Type: application/json;charset=utf-8
2024-01-16 21:33:31 UTC	156	IN	Data Raw: 7b 22 6d 75 69 64 22 3a 22 37 33 30 34 65 35 36 61 2d 66 62 64 31 2d 34 31 64 31 2d 61 36 61 30 2d 36 37 62 34 63 64 36 38 39 35 32 38 33 39 38 34 31 66 22 2c 22 67 75 69 64 22 3a 22 30 36 30 39 62 61 63 33 2d 64 36 38 64 2d 34 39 32 30 2d 38 63 30 36 2d 33 61 32 33 64 39 39 39 34 36 63 32 32 31 36 37 63 37 22 2c 22 73 69 64 22 3a 22 32 66 32 65 64 33 65 65 2d 37 36 66 37 2d 34 64 39 33 2d 38 63 61 36 2d 66 37 35 38 30 36 61 39 64 65 39 36 62 30 30 31 30 36 22 7d Data Ascii: {"muid":"7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f","guid":"0609bac3-d68d-4920-8c06-3a23d99946c22167c7","sid":"2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.18	49975	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:31 UTC	1949	OUT	GET /img/icons/android-chrome-192x192.png HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signable.app/register?country_code=US&_gl=1%2a1aykcz3%2a_gcl_au%2aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%2a_ga%2aMjEzMTUwODYzOS4xNzA1NDQwNzc2%2a_ga_4XE2VYSQ35%2aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:31 UTC	2513	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 12846 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:32 GMT ETag: "429564c45bd8d612ce63be65239e4b34" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 33aa60037dccf2345c8ade9dffbf1192.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: XrXyZNgtTpu4jTEU59HK6mmUEszNwooGxPUgMQuF1KvRm-VEqGi_HA== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:31 UTC	12846	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 06 00 00 00 52 dc 6c 07 00 00 31 f5 49 44 41 54 78 da ed 9d 79 7c dc 67 79 e0 bf bf 63 2e cd 68 74 5b 96 e4 43 be 72 39 0e 8e 73 5f 84 90 80 03 38 9c e5 28 4b 0b 2c 87 cd b2 4b 4b cb 92 b4 40 29 47 bb 5b 12 28 a5 6c 70 ba 85 6e 81 52 8e 2d 9f 52 c2 12 08 24 31 71 82 1d 62 27 ce e1 d8 f1 29 cb ba cf b9 e7 77 be fb c7 3b 63 49 b6 64 cf 48 1a cd f9 fd 7c 64 59 d2 1c ef ef 37 cf f3 be cf fb bc cf a1 50 23 77 76 ee 9f eb 2f 8d 40 33 10 ca 7c b5 01 cb 81 06 a0 09 68 c9 fc 3d 0c 04 81 00 e0 05 d4 cc f3 5d c0 04 52 40 02 88 02 e3 c0 18 30 01 44 80 41 60 04 88 67 be c6 81 c9 59 47 b3 63 4b b1 ef 54 d9 a0 14 7b 00 25 c9 dc 82 ae 20 85 7a 65 e6 6b 05 b0 0a 58 9d f9 7f 0b 53 02 ef 9f e5 b9 f9 Data Ascii: PNGIHDRRl1IDATxy\|gyc.ht[Cr9s_8(K,KK@)G[(lpnR-R$1qb')w;cIdH\|dY7P#wv/@3\|h=]R@0DA`gYGcKT{% zekXS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.18	49974	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:31 UTC	1940	OUT	GET /img/icons/favicon-32x32.png HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signable.app/register?country_code=US&_gl=1%2a1aykcz3%2a_gcl_au%2aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%2a_ga%2aMjEzMTUwODYzOS4xNzA1NDQwNzc2%2a_ga_4XE2VYSQ35%2aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:31 UTC	2512	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 2230 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:32 GMT ETag: "99be73b56c0c713a46fe6c8ef58865e6" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 878742d0ad1850cbfc7910a5c4919ed0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: A1voygQxbJSKO7bZ2YQ8vQ5jhZt3ws3tg1cmzU2oKyojbfdZQjsWdQ== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:31 UTC	2230	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 00 48 00 00 00 48 00 46 c9 6b 3e 00 00 06 29 49 44 41 54 58 c3 9d 97 6b 6c 5b 67 19 c7 7f ef 7b 7c 1c 3b 8e 9d 38 24 4d 9a 5b 2f 69 a8 4a 96 c0 b2 a9 97 51 3a 94 31 86 58 46 b9 15 a4 21 86 a6 01 a9 c6 60 12 12 52 19 48 48 f0 81 49 48 48 85 7e 08 63 48 8c 81 04 a8 d3 8a 98 80 72 19 eb 40 a2 2d 5b d8 ba 6e 19 b4 49 ba 34 69 9a a4 89 2f b1 e3 e3 73 79 5f 3e 1c bb Data Ascii: PNGIHDR szzgAMAasRGB cHRMz&u0`:pQ<bKGDpHYsHHFk>)IDATXkl[g{\|;8$M[/iJQ:1XF!`RHHIHH~cHr@-[nI4i/sy_>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.18	49976	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:31 UTC	1721	OUT	GET /css/chunk-4182be59.49cf84b2.css HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=
2024-01-16 21:33:31 UTC	2511	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 2030 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:00 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:32 GMT ETag: "8e685085dc50ab5a84ea92152c53e812" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 7e2fab32e11703f7384de4d8fef36848.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: AScVBYNV_oyQJlPO6GggBxDIZjwq1-bqk_ValDE1E3NcduSRd-E-Eg== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:31 UTC	2030	IN	Data Raw: 2e 6f 2d 6d 6f 64 61 6c 5f 5f 62 6f 78 5b 64 61 74 61 2d 76 2d 66 31 65 62 30 36 61 34 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 34 35 25 3b 6c 65 66 74 3a 35 30 25 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 70 78 3b 6f 70 61 63 69 74 79 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 36 35 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 Data Ascii: .o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.18	49977	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:31 UTC	1721	OUT	GET /css/chunk-45deaaac.5eef7021.css HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=
2024-01-16 21:33:31 UTC	2511	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 2582 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:00 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:32 GMT ETag: "9ce610fae67c22a59184848c3810fd8e" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 0286f8e6d2ddfae7e9a56c7cc839488c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: XVrNWH81TS9dCjMGCvJzsyQBTG4WNbviF7s89Bb5_2_6u3Ew0vPB4A== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:31 UTC	2582	IN	Data Raw: 2e 63 61 72 64 5b 64 61 74 61 2d 76 2d 36 65 33 33 36 31 39 63 5d 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 35 72 65 6d 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 3b 2d 2d 74 77 2d 73 68 61 64 6f 77 3a 30 70 78 20 30 70 78 20 35 70 78 20 2d 32 70 78 20 23 64 64 65 32 65 35 7d 2e 63 61 72 64 5b 64 61 74 61 2d 76 2d 36 65 33 33 36 31 39 63 5d 2c 2e 63 61 72 64 5b 64 61 74 61 2d 76 2d 36 65 33 33 36 31 39 63 5d 3a 68 6f 76 65 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 76 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 6f 66 66 73 65 74 2d 73 68 61 64 6f 77 2c 30 20 30 20 74 72 61 6e 73 70 61 72 65 6e 74 29 2c 76 61 Data Ascii: .card[data-v-6e33619c]{position:relative;width:100%;cursor:pointer;border-radius:.5rem;padding:15px;--tw-shadow:0px 0px 5px -2px #dde2e5}.card[data-v-6e33619c],.card[data-v-6e33619c]:hover{-webkit-box-shadow:var(--tw-ring-offset-shadow,0 0 transparent),va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.18	49978	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:31 UTC	1721	OUT	GET /css/chunk-48100a7b.e3de593f.css HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=
2024-01-16 21:33:31 UTC	2511	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 3565 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:00 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:32 GMT ETag: "bee7e2363bbf444904e54cc78739310f" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 7e2fab32e11703f7384de4d8fef36848.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: d_DrNbSoIhGkZL4TSbF65R0jJZidJx1OW6MhVJAPuDizlv5csyG1rg== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:31 UTC	3565	IN	Data Raw: 2e 6f 2d 6d 6f 64 61 6c 5f 5f 62 6f 78 5b 64 61 74 61 2d 76 2d 66 31 65 62 30 36 61 34 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 34 35 25 3b 6c 65 66 74 3a 35 30 25 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 70 78 3b 6f 70 61 63 69 74 79 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 36 35 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 Data Ascii: .o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.18	49979	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:31 UTC	1721	OUT	GET /css/chunk-49391346.619a8446.css HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=
2024-01-16 21:33:32 UTC	2511	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 2011 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:00 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:32 GMT ETag: "2a1358b7ee80120d25ae4f89fcbb16cf" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 c6bba20dc3ec8526b729f039a2fdf7ae.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: RlVOaQee_jxb2thStq4FzndwKfSbouNYRvgTfwRggntQFzDXCKdrAw== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:32 UTC	2011	IN	Data Raw: 2e 6f 2d 6d 6f 64 61 6c 5f 5f 62 6f 78 5b 64 61 74 61 2d 76 2d 66 31 65 62 30 36 61 34 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 34 35 25 3b 6c 65 66 74 3a 35 30 25 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 70 78 3b 6f 70 61 63 69 74 79 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 36 35 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 Data Ascii: .o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.18	49982	54.175.64.186	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:31 UTC	538	OUT	OPTIONS /events/diagnostic/6239d86c177e3a150044c12d HTTP/1.1 Host: events.launchdarkly.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-launchdarkly-user-agent Origin: https://signable.app User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:31 UTC	507	IN	HTTP/1.1 204 No Content Date: Tue, 16 Jan 2024 21:33:31 GMT Content-Type: application/json Connection: close Access-Control-Allow-Headers: Accept,Content-Type,Content-Length,Accept-Encoding,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Payload-ID,X-LaunchDarkly-Wrapper,X-LaunchDarkly-Tags Access-Control-Allow-Methods: POST,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Date Access-Control-Max-Age: 300 Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.18	49984	104.19.155.83	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:31 UTC	1007	OUT	GET /lead-flows-config/v1/config/json?portalId=4564783&utk=58b81774595ab88167e6e3d83f5cd4dc&__hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1&__hssc=178014586.1.1705440810544&referrer=https%3A%2F%2Fwww.signable.us%2F&currentUrl=https%3A%2F%2Fsignable.app%2Fregister%3Fcountry_code%3DUS%26_gl%3D1%252a1aykcz3%252a_gcl_au%252aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%252a_ga%252aMjEzMTUwODYzOS4xNzA1NDQwNzc2%252a_ga_4XE2VYSQ35%252aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. HTTP/1.1 Host: forms.hubspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://signable.app Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:31 UTC	1284	IN	HTTP/1.1 200 OK Date: Tue, 16 Jan 2024 21:33:31 GMT Content-Type: application/json;charset=utf-8 Content-Length: 178 Connection: close Vary: origin Access-Control-Allow-Credentials: false X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://signable.app Access-Control-Allow-Methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD Access-Control-Allow-Headers: Accept, Accept-Charset, Accept-Encoding, Accept-Language, Content-Type, Host, Origin, Referer, User-Agent Access-Control-Max-Age: 180 Cache-Control: max-age=0, no-cache, no-store X-Robots-Tag: none x-envoy-upstream-service-time: 42 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-547b899f8d-jbr9r x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all X-HubSpot-Correlation-Id: 1ac97055-e72c-4751-ad5b-895e706efa8a x-request-id: 1ac97055-e72c-4751-ad5b-895e706efa8a CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=sAxIPSqL8C.6RD11g7w_0e3Rhe7EC58BnuslUUV5og4-1705440811-1-AWtpV0XmdeKbBVlIR1QAaA6ud7DI+N8395O+7jW3RhdRmtgKb0i/wtredMPvQlgCliWtvBVZQmVGa9I4nDSxBFY=; path=/; expires=Tue, 16-Jan-24 22:03:31 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
2024-01-16 21:33:31 UTC	612	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 33 3f 73 3d 69 59 34 43 70 4c 30 66 6d 32 45 6a 50 6c 6a 78 71 25 32 42 44 57 79 51 77 65 67 41 6b 78 30 73 6a 76 52 52 76 51 4a 6f 6d 71 68 7a 6f 71 32 6f 56 75 55 53 56 59 62 77 4c 25 32 42 66 68 4d 25 32 42 72 75 67 48 32 34 77 31 43 76 25 32 46 6b 32 39 67 33 73 32 51 41 56 70 64 38 59 32 32 45 51 30 74 4c 6c 77 32 4c 4f 51 45 30 50 47 67 76 25 32 42 39 56 57 36 54 4e 78 6e 39 25 32 46 72 53 76 65 35 53 74 46 64 71 73 55 66 59 4d 25 32 42 35 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iY4CpL0fm2EjPljxq%2BDWyQwegAkx0sjvRRvQJomqhzoq2oVuUSVYbwL%2BfhM%2BrugH24w1Cv%2Fk29g3s2QAVpd8Y22EQ0tLlw2LOQE0PGgv%2B9VW6TNxn9%2FrSve5StFdqsUfYM%2B5"}],"group":"cf-nel","max_age":
2024-01-16 21:33:31 UTC	178	IN	Data Raw: 7b 22 6c 65 61 64 46 6c 6f 77 73 22 3a 5b 5d 2c 22 62 72 61 6e 64 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 30 35 34 34 30 38 31 31 38 35 37 2c 22 73 75 62 6d 69 74 74 69 6e 67 54 6f 46 6f 72 6d 73 4e 65 78 74 22 3a 74 72 75 65 2c 22 65 78 70 65 72 69 6d 65 6e 74 73 22 3a 7b 22 75 73 65 4e 65 77 50 72 69 6f 72 69 74 69 7a 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 75 73 65 41 75 64 69 65 6e 63 65 54 61 72 67 65 74 69 6e 67 22 3a 74 72 75 65 7d 2c 22 67 61 74 65 73 22 3a 7b 7d 7d Data Ascii: {"leadFlows":[],"brandingEnabled":false,"timestamp":1705440811857,"submittingToFormsNext":true,"experiments":{"useNewPrioritization":true,"useAudienceTargeting":true},"gates":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.18	49980	34.208.216.197	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:31 UTC	659	OUT	POST /6 HTTP/1.1 Host: m.stripe.com Connection: keep-alive Content-Length: 792 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://m.stripe.network Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://m.stripe.network/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: m=0609bac3-d68d-4920-8c06-3a23d99946c22167c7
2024-01-16 21:33:31 UTC	792	OUT	Data Raw: 4a 54 64 43 4a 54 49 79 62 58 56 70 5a 43 55 79 4d 69 55 7a 51 53 55 79 4d 6a 63 7a 4d 44 52 6c 4e 54 5a 68 4c 57 5a 69 5a 44 45 74 4e 44 46 6b 4d 53 31 68 4e 6d 45 77 4c 54 59 33 59 6a 52 6a 5a 44 59 34 4f 54 55 79 4f 44 4d 35 4f 44 51 78 5a 69 55 79 4d 69 55 79 51 79 55 79 4d 6e 4e 70 5a 43 55 79 4d 69 55 7a 51 53 55 79 4d 6a 4a 6d 4d 6d 56 6b 4d 32 56 6c 4c 54 63 32 5a 6a 63 74 4e 47 51 35 4d 79 30 34 59 32 45 32 4c 57 59 33 4e 54 67 77 4e 6d 45 35 5a 47 55 35 4e 6d 49 77 4d 44 45 77 4e 69 55 79 4d 69 55 79 51 79 55 79 4d 6e 56 79 62 43 55 79 4d 69 55 7a 51 53 55 79 4d 6d 68 30 64 48 42 7a 4a 54 4e 42 4a 54 4a 47 4a 54 4a 47 56 47 73 32 54 6a 64 36 4d 32 59 7a 64 6c 70 4a 61 31 46 6b 63 44 4e 76 57 6d 6c 6c 64 32 70 6a 4f 47 6f 77 5a 6c 70 69 5a 31 46 Data Ascii: JTdCJTIybXVpZCUyMiUzQSUyMjczMDRlNTZhLWZiZDEtNDFkMS1hNmEwLTY3YjRjZDY4OTUyODM5ODQxZiUyMiUyQyUyMnNpZCUyMiUzQSUyMjJmMmVkM2VlLTc2ZjctNGQ5My04Y2E2LWY3NTgwNmE5ZGU5NmIwMDEwNiUyMiUyQyUyMnVybCUyMiUzQSUyMmh0dHBzJTNBJTJGJTJGVGs2Tjd6M2YzdlpJa1FkcDNvWmlld2pjOGowZlpiZ1F
2024-01-16 21:33:32 UTC	730	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:33:32 GMT Content-Length: 156 Connection: close set-cookie: m=0609bac3-d68d-4920-8c06-3a23d99946c22167c7;Expires=Thu, 15-Jan-2026 21:33:32 GMT;Secure;HttpOnly; SameSite=None x-content-type-options: nosniff x-stripe-server-envoy-start-time-us: 1705440812154159 x-stripe-server-envoy-upstream-service-time-ms: 3 x-stripe-bg-intended-route-color: blue x-stripe-client-envoy-start-time-us: 1705440812153589 Access-Control-Allow-Origin: https://m.stripe.network Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Content-Type: application/json;charset=utf-8
2024-01-16 21:33:32 UTC	156	IN	Data Raw: 7b 22 6d 75 69 64 22 3a 22 37 33 30 34 65 35 36 61 2d 66 62 64 31 2d 34 31 64 31 2d 61 36 61 30 2d 36 37 62 34 63 64 36 38 39 35 32 38 33 39 38 34 31 66 22 2c 22 67 75 69 64 22 3a 22 30 36 30 39 62 61 63 33 2d 64 36 38 64 2d 34 39 32 30 2d 38 63 30 36 2d 33 61 32 33 64 39 39 39 34 36 63 32 32 31 36 37 63 37 22 2c 22 73 69 64 22 3a 22 32 66 32 65 64 33 65 65 2d 37 36 66 37 2d 34 64 39 33 2d 38 63 61 36 2d 66 37 35 38 30 36 61 39 64 65 39 36 62 30 30 31 30 36 22 7d Data Ascii: {"muid":"7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f","guid":"0609bac3-d68d-4920-8c06-3a23d99946c22167c7","sid":"2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.18	49983	34.208.216.197	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:31 UTC	391	OUT	GET /6 HTTP/1.1 Host: m.stripe.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: m=0609bac3-d68d-4920-8c06-3a23d99946c22167c7
2024-01-16 21:33:32 UTC	439	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 16 Jan 2024 21:33:31 GMT Content-Type: text/html Content-Length: 138 Connection: close Location: https://stripe.com Access-Control-Allow-Origin: https://m.stripe.network Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Content-Type: application/json;charset=utf-8
2024-01-16 21:33:32 UTC	138	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.18	49986	54.175.64.186	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:31 UTC	652	OUT	POST /events/diagnostic/6239d86c177e3a150044c12d HTTP/1.1 Host: events.launchdarkly.com Connection: keep-alive Content-Length: 743 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json X-LaunchDarkly-User-Agent: JSClient/3.1.4 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://signable.app Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:31 UTC	743	OUT	Data Raw: 7b 22 6b 69 6e 64 22 3a 22 64 69 61 67 6e 6f 73 74 69 63 2d 63 6f 6d 62 69 6e 65 64 22 2c 22 69 64 22 3a 7b 22 64 69 61 67 6e 6f 73 74 69 63 49 64 22 3a 22 65 32 32 66 34 33 65 30 2d 62 34 62 36 2d 31 31 65 65 2d 62 66 39 63 2d 36 31 31 62 33 62 35 63 61 38 35 32 22 2c 22 73 64 6b 4b 65 79 53 75 66 66 69 78 22 3a 22 34 34 63 31 32 64 22 7d 2c 22 63 72 65 61 74 69 6f 6e 44 61 74 65 22 3a 31 37 30 35 34 34 30 38 31 30 35 33 38 2c 22 64 61 74 61 53 69 6e 63 65 44 61 74 65 22 3a 31 37 30 35 34 34 30 38 30 36 36 38 36 2c 22 64 72 6f 70 70 65 64 45 76 65 6e 74 73 22 3a 30 2c 22 65 76 65 6e 74 73 49 6e 4c 61 73 74 42 61 74 63 68 22 3a 30 2c 22 73 74 72 65 61 6d 49 6e 69 74 73 22 3a 5b 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 30 35 34 34 30 38 30 37 37 30 34 Data Ascii: {"kind":"diagnostic-combined","id":{"diagnosticId":"e22f43e0-b4b6-11ee-bf9c-611b3b5ca852","sdkKeySuffix":"44c12d"},"creationDate":1705440810538,"dataSinceDate":1705440806686,"droppedEvents":0,"eventsInLastBatch":0,"streamInits":[{"timestamp":1705440807704
2024-01-16 21:33:32 UTC	524	IN	HTTP/1.1 202 Accepted Date: Tue, 16 Jan 2024 21:33:32 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Headers: Accept,Content-Type,Content-Length,Accept-Encoding,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Payload-ID,X-LaunchDarkly-Wrapper,X-LaunchDarkly-Tags Access-Control-Allow-Methods: POST,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Date Access-Control-Max-Age: 300 Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.18	49987	108.139.47.2	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:32 UTC	1525	OUT	GET /img/icons/favicon-32x32.png HTTP/1.1 Host: signable.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:32 UTC	2513	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 2230 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:32 GMT ETag: "99be73b56c0c713a46fe6c8ef58865e6" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 fa46ec88710e6374e08eeaa473342090.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P1 X-Amz-Cf-Id: M_2Eivu32gc2gCIbQAAi1viTECgH2xr2S71f7glHagWg7dA4FcyzSw== Age: 1 X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:32 UTC	2230	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 00 48 00 00 00 48 00 46 c9 6b 3e 00 00 06 29 49 44 41 54 58 c3 9d 97 6b 6c 5b 67 19 c7 7f ef 7b 7c 1c 3b 8e 9d 38 24 4d 9a 5b 2f 69 a8 4a 96 c0 b2 a9 97 51 3a 94 31 86 58 46 b9 15 a4 21 86 a6 01 a9 c6 60 12 12 52 19 48 48 f0 81 49 48 48 85 7e 08 63 48 8c 81 04 a8 d3 8a 98 80 72 19 eb 40 a2 2d 5b d8 ba 6e 19 b4 49 ba 34 69 9a a4 89 2f b1 e3 e3 73 79 5f 3e 1c bb Data Ascii: PNGIHDR szzgAMAasRGB cHRMz&u0`:pQ<bKGDpHYsHHFk>)IDATXkl[g{\|;8$M[/iJQ:1XF!`RHHIHH~cHr@-[nI4i/sy_>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.18	49988	108.139.47.2	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:32 UTC	1534	OUT	GET /img/icons/android-chrome-192x192.png HTTP/1.1 Host: signable.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:32 UTC	2514	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 12846 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:32 GMT ETag: "429564c45bd8d612ce63be65239e4b34" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b9fa5c33e059fb3ed603bd8fcb9d4aea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P1 X-Amz-Cf-Id: SVbdVDuuOsH-i0DP1H7sS3xlt0QXPqeKvTRkGldYghe-mf9vJebDsg== Age: 1 X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:32 UTC	12846	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 06 00 00 00 52 dc 6c 07 00 00 31 f5 49 44 41 54 78 da ed 9d 79 7c dc 67 79 e0 bf bf 63 2e cd 68 74 5b 96 e4 43 be 72 39 0e 8e 73 5f 84 90 80 03 38 9c e5 28 4b 0b 2c 87 cd b2 4b 4b cb 92 b4 40 29 47 bb 5b 12 28 a5 6c 70 ba 85 6e 81 52 8e 2d 9f 52 c2 12 08 24 31 71 82 1d 62 27 ce e1 d8 f1 29 cb ba cf b9 e7 77 be fb c7 3b 63 49 b6 64 cf 48 1a cd f9 fd 7c 64 59 d2 1c ef ef 37 cf f3 be cf fb bc cf a1 50 23 77 76 ee 9f eb 2f 8d 40 33 10 ca 7c b5 01 cb 81 06 a0 09 68 c9 fc 3d 0c 04 81 00 e0 05 d4 cc f3 5d c0 04 52 40 02 88 02 e3 c0 18 30 01 44 80 41 60 04 88 67 be c6 81 c9 59 47 b3 63 4b b1 ef 54 d9 a0 14 7b 00 25 c9 dc 82 ae 20 85 7a 65 e6 6b 05 b0 0a 58 9d f9 7f 0b 53 02 ef 9f e5 b9 f9 Data Ascii: PNGIHDRRl1IDATxy\|gyc.ht[Cr9s_8(K,KK@)G[(lpnR-R$1qb')w;cIdH\|dY7P#wv/@3\|h=]R@0DA`gYGcKT{% zekXS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.18	49985	34.208.216.197	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:32 UTC	660	OUT	POST /6 HTTP/1.1 Host: m.stripe.com Connection: keep-alive Content-Length: 1612 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://m.stripe.network Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://m.stripe.network/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: m=0609bac3-d68d-4920-8c06-3a23d99946c22167c7
2024-01-16 21:33:32 UTC	1612	OUT	Data Raw: 4a 54 64 43 4a 54 49 79 64 6a 49 6c 4d 6a 49 6c 4d 30 45 78 4a 54 4a 44 4a 54 49 79 61 57 51 6c 4d 6a 49 6c 4d 30 45 6c 4d 6a 49 77 59 54 6c 6a 5a 57 4a 6c 59 7a 59 33 5a 57 4d 31 5a 47 56 6b 4f 54 5a 6b 5a 54 64 6c 59 57 4d 31 4d 6d 45 35 4d 47 52 69 5a 53 55 79 4d 69 55 79 51 79 55 79 4d 6e 51 6c 4d 6a 49 6c 4d 30 45 30 4c 6a 45 6c 4d 6b 4d 6c 4d 6a 4a 30 59 57 63 6c 4d 6a 49 6c 4d 30 45 6c 4d 6a 49 30 4c 6a 55 75 4e 44 4d 6c 4d 6a 49 6c 4d 6b 4d 6c 4d 6a 4a 7a 63 6d 4d 6c 4d 6a 49 6c 4d 30 45 6c 4d 6a 4a 71 63 79 55 79 4d 69 55 79 51 79 55 79 4d 6d 45 6c 4d 6a 49 6c 4d 30 46 75 64 57 78 73 4a 54 4a 44 4a 54 49 79 59 69 55 79 4d 69 55 7a 51 53 55 33 51 69 55 79 4d 6d 45 6c 4d 6a 49 6c 4d 30 45 6c 4d 6a 4a 6f 64 48 52 77 63 79 55 7a 51 53 55 79 52 69 55 Data Ascii: JTdCJTIydjIlMjIlM0ExJTJDJTIyaWQlMjIlM0ElMjIwYTljZWJlYzY3ZWM1ZGVkOTZkZTdlYWM1MmE5MGRiZSUyMiUyQyUyMnQlMjIlM0E0LjElMkMlMjJ0YWclMjIlM0ElMjI0LjUuNDMlMjIlMkMlMjJzcmMlMjIlM0ElMjJqcyUyMiUyQyUyMmElMjIlM0FudWxsJTJDJTIyYiUyMiUzQSU3QiUyMmElMjIlM0ElMjJodHRwcyUzQSUyRiU
2024-01-16 21:33:32 UTC	730	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:33:32 GMT Content-Length: 156 Connection: close set-cookie: m=0609bac3-d68d-4920-8c06-3a23d99946c22167c7;Expires=Thu, 15-Jan-2026 21:33:32 GMT;Secure;HttpOnly; SameSite=None x-content-type-options: nosniff x-stripe-server-envoy-start-time-us: 1705440812466310 x-stripe-server-envoy-upstream-service-time-ms: 3 x-stripe-bg-intended-route-color: blue x-stripe-client-envoy-start-time-us: 1705440812465735 Access-Control-Allow-Origin: https://m.stripe.network Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Content-Type: application/json;charset=utf-8
2024-01-16 21:33:32 UTC	156	IN	Data Raw: 7b 22 6d 75 69 64 22 3a 22 37 33 30 34 65 35 36 61 2d 66 62 64 31 2d 34 31 64 31 2d 61 36 61 30 2d 36 37 62 34 63 64 36 38 39 35 32 38 33 39 38 34 31 66 22 2c 22 67 75 69 64 22 3a 22 30 36 30 39 62 61 63 33 2d 64 36 38 64 2d 34 39 32 30 2d 38 63 30 36 2d 33 61 32 33 64 39 39 39 34 36 63 32 32 31 36 37 63 37 22 2c 22 73 69 64 22 3a 22 32 66 32 65 64 33 65 65 2d 37 36 66 37 2d 34 64 39 33 2d 38 63 61 36 2d 66 37 35 38 30 36 61 39 64 65 39 36 62 30 30 31 30 36 22 7d Data Ascii: {"muid":"7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f","guid":"0609bac3-d68d-4920-8c06-3a23d99946c22167c7","sid":"2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.18	49989	104.19.154.83	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:32 UTC	841	OUT	GET /lead-flows-config/v1/config/json?portalId=4564783&utk=58b81774595ab88167e6e3d83f5cd4dc&__hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1&__hssc=178014586.1.1705440810544&referrer=https%3A%2F%2Fwww.signable.us%2F&currentUrl=https%3A%2F%2Fsignable.app%2Fregister%3Fcountry_code%3DUS%26_gl%3D1%252a1aykcz3%252a_gcl_au%252aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%252a_ga%252aMjEzMTUwODYzOS4xNzA1NDQwNzc2%252a_ga_4XE2VYSQ35%252aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. HTTP/1.1 Host: forms.hubspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:32 UTC	1233	IN	HTTP/1.1 200 OK Date: Tue, 16 Jan 2024 21:33:32 GMT Content-Type: application/json;charset=utf-8 Content-Length: 178 Connection: close Vary: origin Access-Control-Allow-Credentials: false X-Content-Type-Options: nosniff Access-Control-Allow-Methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD Access-Control-Allow-Headers: Accept, Accept-Charset, Accept-Encoding, Accept-Language, Content-Type, Host, Origin, Referer, User-Agent Access-Control-Max-Age: 180 Cache-Control: max-age=0, no-cache, no-store X-Robots-Tag: none x-envoy-upstream-service-time: 22 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-547b899f8d-qz6tr x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all X-HubSpot-Correlation-Id: 7b751fd8-1b8a-4314-8212-4f83c47cfbac x-request-id: 7b751fd8-1b8a-4314-8212-4f83c47cfbac CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=nS61dA1GMzpA8jQw1w9rlrhNLpfbI_i6upsxYumrKk8-1705440812-1-AVsLs0k/M05Afr7Lxz2/g54yzs882r1prx/LJaJiihLdj3Fdsa3snVdI2uYLMg+icBWIYcgv02W4svXzNPZIzq8=; path=/; expires=Tue, 16-Jan-24 22:03:32 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
2024-01-16 21:33:32 UTC	606	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 33 3f 73 3d 78 59 70 36 37 65 55 79 58 62 67 58 6e 6c 69 64 57 55 5a 33 78 69 67 72 4a 76 36 49 6d 4b 62 77 42 37 4c 64 54 74 25 32 46 67 64 79 41 37 38 49 5a 67 46 49 72 7a 69 78 31 36 44 68 6b 64 4e 55 41 35 7a 48 52 4c 5a 37 71 35 4d 65 25 32 46 53 58 34 37 41 66 62 69 70 72 30 70 6a 4f 25 32 46 57 50 30 62 70 65 56 25 32 42 4a 65 64 7a 37 6e 72 37 49 47 7a 59 75 74 62 77 42 41 6f 48 4c 4d 34 6d 30 68 51 7a 6a 6b 44 47 35 7a 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xYp67eUyXbgXnlidWUZ3xigrJv6ImKbwB7LdTt%2FgdyA78IZgFIrzix16DhkdNUA5zHRLZ7q5Me%2FSX47Afbipr0pjO%2FWP0bpeV%2BJedz7nr7IGzYutbwBAoHLM4m0hQzjkDG5z"}],"group":"cf-nel","max_age":604800
2024-01-16 21:33:32 UTC	178	IN	Data Raw: 7b 22 6c 65 61 64 46 6c 6f 77 73 22 3a 5b 5d 2c 22 62 72 61 6e 64 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 30 35 34 34 30 38 31 32 37 32 31 2c 22 73 75 62 6d 69 74 74 69 6e 67 54 6f 46 6f 72 6d 73 4e 65 78 74 22 3a 74 72 75 65 2c 22 65 78 70 65 72 69 6d 65 6e 74 73 22 3a 7b 22 75 73 65 4e 65 77 50 72 69 6f 72 69 74 69 7a 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 75 73 65 41 75 64 69 65 6e 63 65 54 61 72 67 65 74 69 6e 67 22 3a 74 72 75 65 7d 2c 22 67 61 74 65 73 22 3a 7b 7d 7d Data Ascii: {"leadFlows":[],"brandingEnabled":false,"timestamp":1705440812721,"submittingToFormsNext":true,"experiments":{"useNewPrioritization":true,"useAudienceTargeting":true},"gates":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.18	49990	99.84.108.86	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:32 UTC	487	OUT	GET / HTTP/1.1 Host: beacon-v2.helpscout.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:32 UTC	571	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 325 Connection: close Date: Tue, 16 Jan 2024 21:33:33 GMT Last-Modified: Mon, 15 Jan 2024 13:37:41 GMT ETag: "36174cb0daa627389d7a0d51bec0c1c0" x-amz-server-side-encryption: AES256 Cache-Control: max-age=120, s-maxage=120, public Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 2d5ae77baf1e996b29b17b6541abf9c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD79-C2 X-Amz-Cf-Id: dzcl9T1rk0XFjJKnMbHS4m0TUm0BNKb7XQSBg51KjNotbweRQEaAAw==
2024-01-16 21:33:32 UTC	325	IN	Data Raw: 1f 8b 08 08 22 35 a5 65 02 03 6c 6f 61 64 65 72 2e 6a 73 00 6d 90 c1 4e 02 31 10 86 5f 45 7a 20 6d 2c 2d 68 8c 46 dc 83 18 6f 06 2f de 8c 87 d9 76 76 29 81 76 d3 ce ee 42 5c de dd a2 18 43 e2 ad 99 ff fb 3a 93 7f 54 b5 de 90 0b 9e 7b f1 d9 41 bc 80 c2 ab 1a e9 79 83 5b f4 94 16 fb 37 a8 97 b0 45 ce 92 89 ae 21 26 de a7 1f f3 5f eb 02 39 fe 78 94 3d 13 11 08 4f ea 9f 30 27 45 fb 06 0b 46 b8 23 bd 86 0e 4e 89 24 05 69 ef 4d 31 9a e5 67 8a a6 60 2b a2 26 dd 6b 5d 22 98 e0 27 dd 95 5a e1 a6 49 26 b4 a4 3c 92 66 97 28 41 35 10 f3 86 65 b0 a8 9c 4f 18 69 81 55 88 c8 49 82 38 9c ae 81 ce d5 40 21 aa 36 03 8f 75 e6 c7 e3 7f 86 8a c2 4b e8 31 3e 41 42 2e 64 2c 32 c6 27 b3 07 ca 3f 5b dc bd 56 9c 51 74 36 93 4c 0c c3 79 80 b6 46 cd 84 90 74 b4 ce b3 d2 f9 ba 89 d8 Data Ascii: "5eloader.jsmN1_Ez m,-hFo/vv)vB\C:T{Ay[7E!&_9x=O0'EF#N$iM1g`+&k]"'ZI&<f(A5eOiUI8@!6uK1>AB.d,2'?[VQt6LyFt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.18	49991	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:32 UTC	2020	OUT	GET /css/chunk-69b2ef63.470369c5.css HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:32 UTC	2511	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 1919 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:00 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:33 GMT ETag: "6b34ed69a95ff2db40a2c944d3faaa0c" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 0286f8e6d2ddfae7e9a56c7cc839488c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: 1iScqcpa8ADBNRb3a5bmVE7jhcZNxsZa7orQ3oOuHGleIaZHsYDcUQ== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:32 UTC	1919	IN	Data Raw: 2e 6f 2d 6d 6f 64 61 6c 5f 5f 62 6f 78 5b 64 61 74 61 2d 76 2d 66 31 65 62 30 36 61 34 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 34 35 25 3b 6c 65 66 74 3a 35 30 25 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 70 78 3b 6f 70 61 63 69 74 79 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 36 35 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 Data Ascii: .o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.18	49993	104.19.155.83	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:32 UTC	1120	OUT	GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=4197038910&v=1.1&a=4564783&po=%2Fregister&r=https%3A%2F%2Fwww.signable.us%2F&pu=https%3A%2F%2Fsignable.app%2Fregister%3Fcountry_code%3DUS%26_gl%3D1%252a1aykcz3%252a_gcl_au%252aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%252a_ga%252aMjEzMTUwODYzOS4xNzA1NDQwNzc2%252a_ga_4XE2VYSQ35%252aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.&t=Register+-+Signable&cts=1705440810548&vi=58b81774595ab88167e6e3d83f5cd4dc&nc=true&u=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1&b=178014586.1.1705440810544&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:32 UTC	1120	IN	HTTP/1.1 200 OK Date: Tue, 16 Jan 2024 21:33:32 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 84697a3658b4188d-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin Access-Control-Allow-Credentials: false P3P: CP="NOI CUR ADM OUR NOR STA NID" X-Content-Type-Options: nosniff x-envoy-upstream-service-time: 10 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-865d96945d-cm5tv x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: afb41476-5d28-4f58-b453-a6176b22ff4e x-request-id: afb41476-5d28-4f58-b453-a6176b22ff4e X-Robots-Tag: none Set-Cookie: __cf_bm=YZktJnuN7oByQGAPpmkmuQWva6QFR9zUeHhNf27D31c-1705440812-1-AeaUNweCIUrNqprsW1vCTano/rR3eVPVL+DivWAGHhAOAMOm8RPsCsRhcU3PzZmV//IdrqfORHMn7LNn7DvxusI=; path=/; expires=Tue, 16-Jan-24 22:03:32 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
2024-01-16 21:33:32 UTC	505	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 33 3f 73 3d 76 53 75 44 48 4a 45 38 70 45 77 4c 57 6e 6d 71 49 58 6d 6d 32 48 36 47 4b 78 70 45 52 71 6f 54 25 32 42 77 6e 59 50 59 4b 6c 33 76 45 6f 4f 49 71 38 57 64 75 54 74 4f 4f 31 62 75 57 61 31 53 45 4e 7a 50 4b 71 66 70 78 57 79 38 41 48 7a 53 69 6b 73 30 5a 79 74 48 64 50 71 4a 6f 37 36 57 50 4f 35 25 32 46 58 71 53 41 46 42 69 59 76 25 32 46 4f 47 4a 57 6c 53 55 6d 76 78 69 4c 25 32 42 75 61 56 48 67 25 32 42 77 57 36 59 68 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vSuDHJE8pEwLWnmqIXmm2H6GKxpERqoT%2BwnYPYKl3vEoOIq8WduTtOO1buWa1SENzPKqfpxWy8AHzSiks0ZytHdPqJo76WPO5%2FXqSAFBiYv%2FOGJWlSUmvxiL%2BuaVHg%2BwW6Yh"}],"group":"cf-nel","max_age":6048
2024-01-16 21:33:32 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.18	49995	104.19.155.83	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:32 UTC	1120	OUT	GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=4197038910&v=1.1&a=4564783&po=%2Fregister&r=https%3A%2F%2Fwww.signable.us%2F&pu=https%3A%2F%2Fsignable.app%2Fregister%3Fcountry_code%3DUS%26_gl%3D1%252a1aykcz3%252a_gcl_au%252aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%252a_ga%252aMjEzMTUwODYzOS4xNzA1NDQwNzc2%252a_ga_4XE2VYSQ35%252aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.&t=Register+-+Signable&cts=1705440810550&vi=58b81774595ab88167e6e3d83f5cd4dc&nc=true&u=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1&b=178014586.1.1705440810544&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:32 UTC	1119	IN	HTTP/1.1 200 OK Date: Tue, 16 Jan 2024 21:33:32 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 84697a365c3a42bb-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin Access-Control-Allow-Credentials: false P3P: CP="NOI CUR ADM OUR NOR STA NID" X-Content-Type-Options: nosniff x-envoy-upstream-service-time: 5 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-865d96945d-pd7ht x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: 08955f21-30c6-4d95-acf8-783135f995ca x-request-id: 08955f21-30c6-4d95-acf8-783135f995ca X-Robots-Tag: none Set-Cookie: __cf_bm=uDf9NQ83ttOTLFxtIrO9V8R2ySHK7ezG6VrcifIFYKY-1705440812-1-AXjKUAv3oIdJ0/TzEchssU4EexNZClX5FrXPTdYto3VXmg7PCiP5XHUB3x36oGK0DgSlGWAgzGOflomB1ve1n1w=; path=/; expires=Tue, 16-Jan-24 22:03:32 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
2024-01-16 21:33:32 UTC	509	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 33 3f 73 3d 42 57 6a 79 58 68 65 6a 6a 25 32 42 6a 71 25 32 46 4a 4b 5a 68 6a 6d 4c 77 48 77 4e 68 62 25 32 42 6c 51 25 32 42 64 54 47 71 59 72 36 66 42 64 63 4d 5a 6b 4c 72 47 74 35 59 51 7a 4d 58 7a 33 49 56 4c 59 4b 34 78 6b 72 38 4b 6f 25 32 46 53 49 6a 77 45 48 63 6f 33 30 69 34 66 56 47 55 4e 55 6b 78 48 44 25 32 46 63 51 4d 41 63 31 67 36 39 63 51 71 4d 67 36 4e 41 25 32 46 30 6b 47 65 6e 41 57 6c 35 39 77 6a 70 62 67 79 76 50 6d 39 38 45 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BWjyXhejj%2Bjq%2FJKZhjmLwHwNhb%2BlQ%2BdTGqYr6fBdcMZkLrGt5YQzMXz3IVLYK4xkr8Ko%2FSIjwEHco30i4fVGUNUkxHD%2FcQMAc1g69cQqMg6NA%2F0kGenAWl59wjpbgyvPm98E"}],"group":"cf-nel","max_age":
2024-01-16 21:33:32 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.18	49994	104.19.155.83	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:32 UTC	1144	OUT	GET /__ptbe.gif?n=pe4564783_test___api_key&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=4197038910&v=1.1&a=4564783&po=%2Fregister&r=https%3A%2F%2Fwww.signable.us%2F&pu=https%3A%2F%2Fsignable.app%2Fregister%3Fcountry_code%3DUS%26_gl%3D1%252a1aykcz3%252a_gcl_au%252aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%252a_ga%252aMjEzMTUwODYzOS4xNzA1NDQwNzc2%252a_ga_4XE2VYSQ35%252aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.&t=Register+-+Signable&cts=1705440810551&vi=58b81774595ab88167e6e3d83f5cd4dc&nc=true&u=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1&b=178014586.1.1705440810544&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:32 UTC	1120	IN	HTTP/1.1 200 OK Date: Tue, 16 Jan 2024 21:33:32 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 84697a366ada41df-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin Access-Control-Allow-Credentials: false P3P: CP="NOI CUR ADM OUR NOR STA NID" X-Content-Type-Options: nosniff x-envoy-upstream-service-time: 15 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-865d96945d-cm5tv x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: cf4f3e02-4b48-4d11-b8d3-aa1e8c878ced x-request-id: cf4f3e02-4b48-4d11-b8d3-aa1e8c878ced X-Robots-Tag: none Set-Cookie: __cf_bm=2b_Rc0WREXb4PDG2UsMp3j1WwGPqtAD5ejQcg4JqHA8-1705440812-1-AYaNB6RvIo0jFU2aBDY31kJk8vzFhPiwmJ6QUMm8VaAWl0fQyumtmErAMN69/oMiSz04TXK5pP6Q2D8pIjLIpe8=; path=/; expires=Tue, 16-Jan-24 22:03:32 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
2024-01-16 21:33:32 UTC	499	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 33 3f 73 3d 54 71 47 38 67 35 54 79 74 49 59 50 53 46 47 6b 33 4d 78 47 4b 59 32 63 4f 66 6b 71 32 66 4e 62 70 79 4c 6d 6f 38 57 25 32 46 62 55 49 68 36 6d 52 70 47 4f 6a 4f 46 4a 4b 48 76 6c 57 74 54 67 61 68 6a 73 61 34 55 72 48 55 49 52 36 65 64 64 55 42 39 63 6f 6c 75 67 55 4e 50 6b 54 4c 35 61 30 54 62 55 50 6a 4b 6e 6d 43 33 52 72 63 25 32 46 61 4d 6e 4a 30 77 69 44 56 4b 63 6f 38 5a 4a 39 69 47 76 51 42 6a 42 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 4e Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TqG8g5TytIYPSFGk3MxGKY2cOfkq2fNbpyLmo8W%2FbUIh6mRpGOjOFJKHvlWtTgahjsa4UrHUIR6eddUB9colugUNPkTL5a0TbUPjKnmC3Rrc%2FaMnJ0wiDVKco8ZJ9iGvQBjB"}],"group":"cf-nel","max_age":604800}N
2024-01-16 21:33:32 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.18	49992	54.187.159.182	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:32 UTC	334	OUT	GET / HTTP/1.1 Host: stripe.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:32 UTC	4785	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:33:32 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2209127 Connection: close Vary: Accept-Encoding x-mkt-cache: HIT set-cookie: cid=e5f75074-1823-4a3c-84ba-5ca688398a5b; domain=stripe.com; path=/; expires=Mon, 15 Apr 2024 21:33:32 GMT; secure; SameSite=Lax set-cookie: __Host-stripe.mkt.csrf=-kl4xLn5KDvH7fH6FifO1KecnXAJNEhw8EIDtQabof8Oq7lf6puFBzFte4N7K_G4-N7xhRy44TEodcrMHnqVCzw-AcAXe4b2pvKGXYbN_P_xsmpFiAyqEK65JhgPraWNmP2_WpiMgQ%3D%3D; path=/; secure; HttpOnly; SameSite=Strict content-security-policy-report-only: report-uri /csp-report?p=; block-all-mixed-content; default-src 'none'; base-uri 'none'; img-src 'self' https://b.stripecdn.com https://q.stripe.com https://images.ctfassets.net https://assets.ctfassets.net data:; style-src 'unsafe-inline' 'self' https://b.stripecdn.com; connect-src 'self' https://stripe.com blob: https://stripe-images.s3.us-west-1.amazonaws.com https://errors.stripe.com https://b.stripecdn.com https://climate.stripe.com https://ext.stripe.com https://r.stripe.com https://c.increment.com https://c.stripe.dev https://c.stripe.global https://c.stripe.partners https://sales-live-chat.stripe.com https://y4pfttj91h-dsn.algolia.net/1/indexes/mkt_partners/query https://y4pfttj91h-1.algolianet.com/1/indexes/mkt_partners/query https://y4pfttj91h-2.algolianet.com/1/indexes/mkt_partners/query https://y4pfttj91h-3.algolianet.com/1/indexes/mkt_partners/query; font-src 'self' https://b.stripecdn.com; form-action 'self' https://stripe.com https://climate.stripe.com; frame-src 'self' https://js.stripe.com https://register.stripesessions.com https://b.stripecdn.com https://crypto-js.stripe.com https://sales-live-chat.stripe.com; media-src 'self' https://b.stripecdn.com https://videos.ctfassets.net https://assets.ctfassets.net; script-src 'self' https://js.stripe.com 'sha256-qAoigsbVsoqQigwSGiMYuTbAdza9vdqvOsA4UNSB54A=' 'sha256-cCM0Z4lzGkzQnmbdVw+ouz0JRawyaKcZ4yiqzqYS7ek=' 'sha256-5LtzXhT7UFn+GqP5pKEMGL08UNZsrzANHFEBW/mQHGw=' 'sha256-3aWvb9tRBjmz1OjR3n7mwiTm94+s4iki4mMZF82asmc=' 'sha256-4HwZEt/y+k0EIqGfaNZ1MRmRCUbC03K3G03imkZ/EyA=' 'sha256-T9Iq7ZVmxSNDo0MtKOVaMklBUMHeY5FCy6zb50dqr28=' 'sha256-eNaGg+YMox6LtUAMUegc8RPYMvlgqKfr5wXhQq7t0rU=' 'sha256-T7wrECq1xn0YM2QLoh1E2M9Uqf6wfmt2noqlHUzD+xk=' 'sha256-beLzNcen8LrazzSCRjAapoIMTgJI0osPWGNSX7aK6lc=' https://b.stripecdn.com https://crypto-js.stripe.com 'report-sample'; frame-ancestors 'self' https://app.contentful.com content-security-policy: report-uri /csp-report?p=; block-all-mixed-content; default-src 'none'; base-uri 'none'; img-src 'self' https://b.stripecdn.com https://q.stripe.com https://images.ctfassets.net https://assets.ctfassets.net data:; style-src 'unsafe-inline' 'self' https://b.stripecdn.com; connect-src 'self' https://stripe.com blob: https://stripe-images.s3.us-west-1.amazonaws.com https://errors.stripe.com https://b.stripecdn.com https://climate.stripe.com https://ext.stripe.com https://r.stripe.com https://c.increment.com https://c.stripe.dev https://c.stripe.global https://c.stripe.partners https://sales-live-chat.stripe.com https://y4pfttj91h-dsn.algolia.net/1/indexes/mkt_partners/query https://y4pfttj91h-1.algolianet.com/1/indexes/mkt_partners/query https://y4pfttj91h-2.algolianet.com/1/indexes/mkt_partners/query https://y4pfttj91h-3.algolianet.com/1/indexes/mkt_partners/query; font-src 'self' https://b.stripecdn.com; form-action 'self' https://stripe.com https://climate.stripe.com; frame-src 'self' https://js.stripe.com https://register.stripesessions.com https://b.stripecdn.com https://crypto-js.stripe.com https://sales-live-chat.stripe.com; media-src 'self' https://b.stripecdn.com https://videos.ctfassets.net https://assets.ctfassets.net; script-src 'self' https://js.stripe.com 'sha256-qAoigsbVsoqQigwSGiMYuTbAdza9vdqvOsA4UNSB54A=' 'sha256-cCM0Z4lzGkzQnmbdVw+ouz0JRawyaKcZ4yiqzqYS7ek=' 'sha256-5LtzXhT7UFn+GqP5pKEMGL08UNZsrzANHFEBW/mQHGw=' 'sha256-3aWvb9tRBjmz1OjR3n7mwiTm94+s4iki4mMZF82asmc=' 'sha256-4HwZEt/y+k0EIqGfaNZ1MRmRCUbC03K3G03imkZ/EyA=' 'sha256-T9Iq7ZVmxSNDo0MtKOVaMklBUMHeY5FCy6zb50dqr28=' 'sha256-eNaGg+YMox6LtUAMUegc8RPYMvlgqKfr5wXhQq7t0rU=' 'sha256-T7wrECq1xn0YM2QLoh1E2M9Uqf6wfmt2noqlHUzD+xk=' 'sha256-beLzNcen8LrazzSCRjAapoIMTgJI0osPWGNSX7aK6lc=' https://b.stripecdn.com https://crypto-js.stripe.com 'report-sample'; frame-ancestors 'self' https://app.contentful.com x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-envoy-upstream-service-time: 22 x-stripe-server-envoy-start-time-us: 1705440812789510 x-stripe-server-envoy-upstream-service-time-ms: 21 x-stripe-bg-intended-route-color: green x-stripe-client-envoy-start-time-us: 1705440812789164 Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
2024-01-16 21:33:32 UTC	11599	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 0a 20 20 63 6c 61 73 73 3d 22 4d 6b 74 52 6f 6f 74 22 0a 20 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 0a 20 20 64 61 74 61 2d 6a 73 2d 63 6f 6e 74 72 6f 6c 6c 65 72 3d 22 50 61 67 65 22 0a 20 20 64 61 74 61 2d 70 61 67 65 2d 69 64 3d 22 48 6f 6d 65 22 0a 20 20 64 61 74 61 2d 70 61 67 65 2d 74 69 74 6c 65 3d 22 53 74 72 69 70 65 20 7c 20 46 69 6e 61 6e 63 69 61 6c 20 49 6e 66 72 61 73 74 72 75 63 74 75 72 65 20 66 6f 72 20 74 68 65 20 49 6e 74 65 72 6e 65 74 22 0a 20 20 64 61 74 61 2d 65 78 70 65 72 69 6d 65 6e 74 73 2d 6c 6f 61 64 69 6e 67 0a 20 20 64 61 74 61 2d 6c 6f 61 64 69 6e 67 0a 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 5f 5f 63 61 70 74 75 Data Ascii: <!DOCTYPE html><html class="MktRoot" lang="en-us" data-js-controller="Page" data-page-id="Home" data-page-title="Stripe \| Financial Infrastructure for the Internet" data-experiments-loading data-loading> <head> <script>window.__captu
2024-01-16 21:33:33 UTC	16384	IN	Data Raw: 22 20 68 72 65 66 6c 61 6e 67 3d 22 64 65 2d 45 45 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 72 69 70 65 2e 63 6f 6d 2f 65 6e 2d 67 62 2d 65 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 65 6e 2d 45 45 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 72 69 70 65 2e 63 6f 6d 2f 65 73 2d 34 31 39 2d 65 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 65 73 2d 45 45 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 72 69 70 65 2e 63 6f 6d 2f 66 72 2d 65 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 66 72 2d 45 45 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 Data Ascii: " hreflang="de-EE"><link rel="alternate" href="https://stripe.com/en-gb-ee" hreflang="en-EE"><link rel="alternate" href="https://stripe.com/es-419-ee" hreflang="es-EE"><link rel="alternate" href="https://stripe.com/fr-ee" hreflang="fr-EE"><link rel="a
2024-01-16 21:33:33 UTC	25	IN	Data Raw: 73 3a 2f 2f 73 74 72 69 70 65 2e 63 6f 6d 2f 74 68 2d 6d 78 22 20 68 72 65 Data Ascii: s://stripe.com/th-mx" hre
2024-01-16 21:33:33 UTC	16384	IN	Data Raw: 66 6c 61 6e 67 3d 22 74 68 2d 4d 58 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 72 69 70 65 2e 63 6f 6d 2f 70 74 2d 62 72 2d 6d 78 22 20 68 72 65 66 6c 61 6e 67 3d 22 70 74 2d 4d 58 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 72 69 70 65 2e 63 6f 6d 2f 7a 68 2d 63 6e 2d 6d 78 22 20 68 72 65 66 6c 61 6e 67 3d 22 7a 68 2d 4d 58 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 72 69 70 65 2e 63 6f 6d 2f 64 65 2d 6e 6c 22 20 68 72 65 66 6c 61 6e 67 3d 22 64 65 2d 4e 4c 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 Data Ascii: flang="th-MX"><link rel="alternate" href="https://stripe.com/pt-br-mx" hreflang="pt-MX"><link rel="alternate" href="https://stripe.com/zh-cn-mx" hreflang="zh-MX"><link rel="alternate" href="https://stripe.com/de-nl" hreflang="de-NL"><link rel="alterna
2024-01-16 21:33:33 UTC	16384	IN	Data Raw: 74 22 3e 0a 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 65 3d 3e 7b 66 6f 72 28 63 6f 6e 73 74 20 64 20 6f 66 20 65 29 69 66 28 64 2e 61 64 64 65 64 4e 6f 64 65 73 29 66 6f 72 28 63 6f 6e 73 74 20 65 20 6f 66 20 64 2e 61 64 64 65 64 4e 6f 64 65 73 29 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 4c 69 6e 6b 45 6c 65 6d 65 6e 74 26 26 76 6f 69 64 20 30 21 3d 3d 65 2e 64 61 74 61 73 65 74 2e 6a 73 4c 61 7a 79 53 74 79 6c 65 26 26 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6d 65 64 69 61 3d 22 61 6c 6c 22 7d 29 7d 29 2e 6f 62 73 65 72 76 65 28 64 6f 63 75 6d 65 6e 74 Data Ascii: t"> <script>new MutationObserver(e=>{for(const d of e)if(d.addedNodes)for(const e of d.addedNodes)e instanceof HTMLLinkElement&&void 0!==e.dataset.jsLazyStyle&&e.addEventListener("load",function(){this.media="all"})}).observe(document
2024-01-16 21:33:33 UTC	16384	IN	Data Raw: 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 76 61 72 28 2d 2d 73 69 74 65 4d 6f 62 69 6c 65 4d 65 6e 75 54 72 61 6e 73 69 74 69 6f 6e 4f 75 74 29 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 4d 6f 62 69 6c 65 4d 65 6e 75 2d 2d 69 73 53 75 62 4d 65 6e 75 41 63 74 69 76 65 20 2e 4d 6f 62 69 6c 65 4d 65 6e 75 5f 5f 6c 6f 67 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 32 30 25 29 7d 2e 4d 6f 62 69 6c 65 4d 65 6e 75 2d 2d 69 73 53 75 62 4d 65 6e 75 41 63 74 69 76 65 20 2e 4d 6f 62 69 6c 65 4d 65 6e 75 5f 5f 6c 6f 67 6f 2c 2e 4d 6f 62 69 6c 65 4d 65 6e 75 5f 5f 62 61 63 6b 42 75 74 74 6f 6e 7b 6f 70 Data Ascii: nsform:translateX(0);transition:var(--siteMobileMenuTransitionOut);-webkit-tap-highlight-color:transparent}.MobileMenu--isSubMenuActive .MobileMenu__logo{transform:translateX(-120%)}.MobileMenu--isSubMenuActive .MobileMenu__logo,.MobileMenu__backButton{op
2024-01-16 21:33:33 UTC	16384	IN	Data Raw: 65 6e 75 54 72 61 6e 73 69 74 69 6f 6e 29 3b 7a 2d 69 6e 64 65 78 3a 32 7d 2e 53 69 74 65 48 65 61 64 65 72 2d 2d 64 72 6f 70 64 6f 77 6e 56 69 73 69 62 6c 65 20 2e 53 69 74 65 48 65 61 64 65 72 41 72 72 6f 77 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 20 74 72 61 6e 73 6c 61 74 65 58 28 76 61 72 28 2d 2d 73 69 74 65 4d 65 6e 75 41 72 72 6f 77 4f 66 66 73 65 74 29 29 20 72 6f 74 61 74 65 28 34 35 64 65 67 29 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 38 39 39 70 78 29 7b 2e 53 69 74 65 48 65 61 64 65 72 41 72 72 6f 77 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 7d 2e 53 69 74 65 48 65 61 64 65 72 41 72 72 6f 77 2e 53 69 74 65 48 65 61 64 65 72 41 72 72 6f 77 2d 2d 74 68 65 6d 65 4c 69 67 68 74 7b 2d 2d 73 69 74 65 Data Ascii: enuTransition);z-index:2}.SiteHeader--dropdownVisible .SiteHeaderArrow{transform:translateY(0) translateX(var(--siteMenuArrowOffset)) rotate(45deg)}@media (max-width:899px){.SiteHeaderArrow{display:none}}.SiteHeaderArrow.SiteHeaderArrow--themeLight{--site
2024-01-16 21:33:33 UTC	16384	IN	Data Raw: 2e 4d 6b 74 52 6f 6f 74 5b 6c 61 6e 67 2a 3d 6a 61 5d 20 2e 48 6f 6d 65 70 61 67 65 48 65 72 6f 48 65 61 64 65 72 7b 2d 2d 74 69 74 6c 65 46 6f 6e 74 53 69 7a 65 3a 36 36 70 78 7d 7d 2e 48 6f 6d 65 70 61 67 65 48 65 72 6f 48 65 61 64 65 72 5f 5f 63 61 70 74 69 6f 6e 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 76 61 72 28 2d 2d 63 61 70 74 69 6f 6e 4d 61 72 67 69 6e 54 6f 70 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 30 70 78 29 7b 2e 48 6f 6d 65 70 61 67 65 48 65 72 6f 48 65 61 64 65 72 5f 5f 63 61 70 74 69 6f 6e 7b 6d 69 6e 2d 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2b 20 31 30 30 70 78 29 7d 7d 2e 48 6f 6d 65 70 61 67 65 48 65 72 6f 48 65 61 64 65 72 5f 5f 74 69 74 6c 65 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 76 61 72 28 2d 2d 68 65 Data Ascii: .MktRoot[lang*=ja] .HomepageHeroHeader{--titleFontSize:66px}}.HomepageHeroHeader__caption{margin-top:var(--captionMarginTop)}@media (min-width:600px){.HomepageHeroHeader__caption{min-width:calc(100% + 100px)}}.HomepageHeroHeader__title{margin-top:var(--he
2024-01-16 21:33:33 UTC	16384	IN	Data Raw: 65 20 55 49 2c 52 6f 62 6f 74 6f 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 55 62 75 6e 74 75 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 38 70 78 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 6c 61 74 65 35 29 7d 40 6b 65 79 66 72 61 6d 65 73 20 70 68 6f 6e 65 2d 74 61 70 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 70 65 72 73 70 65 63 74 69 76 65 28 35 30 30 70 78 29 20 74 72 61 6e 73 6c 61 74 65 59 28 31 32 70 78 29 20 72 6f 74 61 74 65 58 28 30 64 65 67 29 7d 35 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 70 65 72 73 70 65 63 74 69 76 65 28 35 30 30 70 78 29 20 74 72 61 6e 73 6c 61 74 65 59 28 31 32 70 78 29 20 72 6f 74 61 74 65 58 28 34 38 64 65 67 29 20 73 63 61 6c 65 28 2e 39 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 70 65 72 Data Ascii: e UI,Roboto,Helvetica Neue,Ubuntu,sans-serif;font-size:28px;color:var(--slate5)}@keyframes phone-tap{0%{transform:perspective(500px) translateY(12px) rotateX(0deg)}50%{transform:perspective(500px) translateY(12px) rotateX(48deg) scale(.9)}to{transform:per
2024-01-16 21:33:33 UTC	16384	IN	Data Raw: 74 43 6f 6c 6f 72 3a 23 66 66 66 3b 2d 2d 69 6e 6c 69 6e 65 43 6f 64 65 42 61 63 6b 67 72 6f 75 6e 64 3a 23 31 63 34 31 36 31 3b 2d 2d 73 6f 63 69 61 6c 4c 6f 67 6f 43 6f 6c 6f 72 3a 23 37 30 37 66 39 38 3b 2d 2d 73 6f 63 69 61 6c 4c 6f 67 6f 48 6f 76 65 72 43 6f 6c 6f 72 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 2d 44 61 72 6b 2e 61 63 63 65 6e 74 2d 2d 53 6c 61 74 65 2c 2e 74 68 65 6d 65 2d 2d 44 61 72 6b 20 2e 61 63 63 65 6e 74 2d 2d 53 6c 61 74 65 7b 2d 2d 61 63 63 65 6e 74 43 6f 6c 6f 72 3a 23 66 66 66 7d 3c 2f 73 74 79 6c 65 3e 0a 3c 73 74 79 6c 65 3e 2e 74 68 65 6d 65 2d 2d 53 65 6d 69 44 61 72 6b 7b 2d 2d 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 23 30 64 32 65 34 66 3b 2d 2d 6c 69 6e 6b 43 6f 6c 6f 72 3a 76 61 72 28 2d 2d 61 63 63 65 6e 74 43 Data Ascii: tColor:#fff;--inlineCodeBackground:#1c4161;--socialLogoColor:#707f98;--socialLogoHoverColor:#fff}.theme--Dark.accent--Slate,.theme--Dark .accent--Slate{--accentColor:#fff}</style><style>.theme--SemiDark{--backgroundColor:#0d2e4f;--linkColor:var(--accentC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.18	49997	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:32 UTC	2020	OUT	GET /css/chunk-6f4fbc3c.890b69cf.css HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:33 UTC	2511	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 1994 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:00 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:34 GMT ETag: "8d805d83b096612eb309f1805eb9a636" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 2bd6353c0a987182c26c3a5219b81cee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: pXUfzFy46_nPNAE2GzMWbCbt1w_nb1LEtOa24tk_krYe8CD45i-TRw== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:33 UTC	1994	IN	Data Raw: 2e 6f 2d 6d 6f 64 61 6c 5f 5f 62 6f 78 5b 64 61 74 61 2d 76 2d 66 31 65 62 30 36 61 34 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 34 35 25 3b 6c 65 66 74 3a 35 30 25 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 70 78 3b 6f 70 61 63 69 74 79 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 36 35 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 Data Ascii: .o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.18	49996	34.208.216.197	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:32 UTC	391	OUT	GET /6 HTTP/1.1 Host: m.stripe.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: m=0609bac3-d68d-4920-8c06-3a23d99946c22167c7
2024-01-16 21:33:32 UTC	439	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 16 Jan 2024 21:33:32 GMT Content-Type: text/html Content-Length: 138 Connection: close Location: https://stripe.com Access-Control-Allow-Origin: https://m.stripe.network Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Content-Type: application/json;charset=utf-8
2024-01-16 21:33:32 UTC	138	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.18	49999	99.84.108.86	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:32 UTC	515	OUT	GET /static/js/vendor.cd87fe5a.js HTTP/1.1 Host: beacon-v2.helpscout.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:33 UTC	580	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 17768 Connection: close Date: Tue, 16 Jan 2024 21:33:33 GMT Last-Modified: Mon, 15 Jan 2024 13:37:42 GMT ETag: "5080ce4e019c8c43fe25a97a8560a638" x-amz-server-side-encryption: AES256 Cache-Control: max-age=315360000, s-maxage=7200, public Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 4085d0fb63bcf1447db3c47a72df12a4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD79-C2 X-Amz-Cf-Id: EyBnAxK3ft2JcVat543Om09fGlhc4ZtclFpigH0U2JdZfCObhGkgTg==
2024-01-16 21:33:33 UTC	8400	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed bd 79 7f db 46 d2 30 f8 55 28 3c 59 0e 30 6a 52 a4 2e db a0 61 be 3e 94 d8 f3 d8 96 5f 49 4e 26 61 38 7c 41 b0 29 22 02 01 0e 0e 1d 11 f9 dd b7 aa fa 40 03 04 7d 64 67 77 7f 7b fc 21 b1 d1 f7 51 5d 5d 57 57 db 19 8f e6 dd 29 f7 83 24 fe 47 96 c4 2b af 1e b1 5e 8f c6 4e 77 55 64 0b 7b 34 7a 72 74 3a 66 8f cf 4e 4f 9f b9 f3 22 0e f2 30 89 6d ce 72 16 3b 8f bc cb ef 57 49 9a 67 5e 6c 9f f4 4f 7b cf 9c 0d 3b 39 39 3e 7e ba 95 d3 2a 32 de ca f2 34 0c 72 6b 70 eb a7 ad 14 8a 9c 1e 3f 3d 7d e2 b0 04 82 47 a7 bd c3 53 87 85 10 3c 3e 7a 72 e8 b0 02 42 fd 93 a3 43 48 f7 21 f8 ec b8 f7 0c 82 01 04 9f 1e f7 a1 21 86 6d 9e 3e 79 f6 f4 c4 61 11 c6 9e f4 4e fb ce a0 ec 51 d9 03 e7 31 e5 79 91 c6 ad 98 df b5 3e a5 c9 32 cc b8 6d eb 74 ea Data Ascii: yF0U(<Y0jR.a>_IN&a8\|A)"@}dgw{!Q]]WW)$G+^NwUd{4zrt:fNO"0mr;WIg^lO{;99>~*24rkp?=}GS<>zrBCH!!m>yaNQ1y>2mt
2024-01-16 21:33:33 UTC	9368	IN	Data Raw: e6 59 af 2d 09 83 16 09 bd 87 c2 71 91 06 92 bc fb c3 0f 22 af f7 91 9c 94 20 6f 0e 14 65 fe 25 50 c8 15 1c e4 55 10 fb 51 0b 1c be 02 68 39 5d 24 fe b5 79 d1 05 1d c9 87 f8 eb 12 64 4f 2f 1c 5b 07 b8 43 b2 c3 1c 45 8f 3f 7a 8f 10 76 7f d5 fa f1 5f 59 80 a7 49 a3 26 78 68 56 21 50 a5 db db b0 24 8e 1e 1a 2e 8c 18 99 51 17 d8 37 10 ac 30 65 b3 94 0c 0f fd 50 3f 58 a5 5e b5 37 86 25 4b 84 f9 10 56 b1 61 af 14 80 72 05 a0 bc e9 72 98 70 2f ab 95 8e 29 a2 fe 41 42 7c 29 51 89 76 4a e1 80 fc 48 e0 6f 65 c2 70 51 b8 a4 c1 38 91 e1 9c a8 ad 1b 0a df 38 b4 7b c5 8d f0 c1 2b d9 aa 00 ec 77 3b d8 e7 9f 95 ef ad c9 a4 00 ce 5c 5c 64 15 a4 a2 8c 9e 0a b2 44 97 f8 b7 29 c8 86 e3 19 cf c3 f2 0a 84 ec 21 fd 54 2c ca 7e 31 0d af 53 f3 2a 45 22 3c 71 02 d1 96 23 c3 e3 34 Data Ascii: Y-q" oe%PUQh9]$ydO/[CE?zv_YI&xhV!P$.Q70eP?X^7%KVarrp/)AB\|)QvJHoepQ88{+w;\\dD)!T,~1S*E"<q#4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.18	49998	99.84.108.86	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:32 UTC	513	OUT	GET /static/js/main.c0baafe3.js HTTP/1.1 Host: beacon-v2.helpscout.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:33 UTC	580	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 12484 Connection: close Date: Tue, 16 Jan 2024 21:33:33 GMT Last-Modified: Mon, 15 Jan 2024 13:37:42 GMT ETag: "571f18badcb3fc0c22eac40a9d5a5b7d" x-amz-server-side-encryption: AES256 Cache-Control: max-age=315360000, s-maxage=7200, public Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 e9a0863c3aa85d921b20ebfa4cdea5e4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD79-C2 X-Amz-Cf-Id: iqtZ1IIV0vAsecSHRnz4tYiX50CN7Arp6qppiAkei7yBqYEoTdfaRQ==
2024-01-16 21:33:33 UTC	12484	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 7d 6d 9f 9b 46 b6 e7 fb fd 14 b4 26 b7 03 31 d0 3c 23 d4 c6 be 76 db be f6 1d 3b ce d8 4e f6 17 b7 7b 63 04 25 89 34 02 05 50 3f b8 d1 77 df ff a9 02 84 ba d5 8e 33 33 7b 5f 6d 66 4c 43 d5 a9 aa 53 e7 f9 14 45 e9 e8 87 83 ff 25 fd 20 bd 64 d9 4a 7a 1f 17 eb 5a 7a ca a2 b8 c8 25 4d fa a9 2c 12 e9 e9 3a cd 12 82 b8 b0 74 4b 37 1d 13 15 96 61 39 9a 61 6a a6 4b 15 72 ac 0c 9b 53 25 15 2f ea 7a 35 39 3a ba bc bc d4 17 a8 ad a8 52 cf 59 7d 84 ca a3 83 d9 3a 8f eb b4 c8 65 e5 e6 22 2a a5 3c bc 71 7c d7 73 27 7d 79 ae d6 2a 53 6e 46 eb 8a 49 55 5d a6 71 3d 3a 66 7a 22 d7 ea cd cb ab c9 a0 79 c9 ea 75 99 4b d1 46 fd f8 6c 4f 79 ba 51 b3 62 4f 79 bc 51 cb ff de 53 5e 6c d4 ab cb 3d e5 e5 66 a3 1c 83 2e 55 2d 15 e1 88 26 57 61 76 53 Data Ascii: }mF&1<#v;N{c%4P?w33{_mfLCSE% dJzZz%M,:tK7a9ajKrS%/z59:RY}:e"<q\|s'}ySnFIU]q=:fz"yuKFlOyQbOyQS^l=f.U-&WavS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.18	50000	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:32 UTC	2020	OUT	GET /css/chunk-6fa298f8.470369c5.css HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:33 UTC	2511	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 1919 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:00 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:34 GMT ETag: "6b34ed69a95ff2db40a2c944d3faaa0c" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 0286f8e6d2ddfae7e9a56c7cc839488c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: DP6pQSUuNcUfEtP0ixGqOe_EqiOq5an0KxOEOr4YoAp7iMNBI4Uj2A== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:33 UTC	1919	IN	Data Raw: 2e 6f 2d 6d 6f 64 61 6c 5f 5f 62 6f 78 5b 64 61 74 61 2d 76 2d 66 31 65 62 30 36 61 34 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 34 35 25 3b 6c 65 66 74 3a 35 30 25 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 70 78 3b 6f 70 61 63 69 74 79 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 36 35 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 Data Ascii: .o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.18	50003	104.19.155.83	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:32 UTC	1162	OUT	GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=4197038910&v=1.1&a=4564783&po=%2Fregister&r=https%3A%2F%2Fwww.signable.us%2F&pu=https%3A%2F%2Fsignable.app%2Fregister%3Fcountry_code%3DUS%26_gl%3D1%252a1aykcz3%252a_gcl_au%252aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%252a_ga%252aMjEzMTUwODYzOS4xNzA1NDQwNzc2%252a_ga_4XE2VYSQ35%252aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.&t=Register+-+Signable&cts=1705440810550&vi=58b81774595ab88167e6e3d83f5cd4dc&nc=true&u=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1&b=178014586.1.1705440810544&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=9vTAK6u3ikCL16cuTSO7dP6SEkSoxM2z4aD_KDunubI-1705440812569-0-604800000; __cf_bm=YZktJnuN7oByQGAPpmkmuQWva6QFR9zUeHhNf27D31c-1705440812-1-AeaUNweCIUrNqprsW1vCTano/rR3eVPVL+DivWAGHhAOAMOm8RPsCsRhcU3PzZmV//IdrqfORHMn7LNn7DvxusI=
2024-01-16 21:33:33 UTC	1207	IN	HTTP/1.1 200 OK Date: Tue, 16 Jan 2024 21:33:33 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 84697a39dfac8c3f-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin Access-Control-Allow-Credentials: false P3P: CP="NOI CUR ADM OUR NOR STA NID" X-Content-Type-Options: nosniff x-envoy-upstream-service-time: 5 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-865d96945d-k44zc x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: f0b6b55e-e6c6-4c27-bd57-93ecdde93914 x-request-id: f0b6b55e-e6c6-4c27-bd57-93ecdde93914 X-Robots-Tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yIAWhufzeJD1N2AWk8QRHDmLlc8gyP4t4j5S9ijBobM6IU%2F0I%2FzWsXVLDlT5oomZUNbLS77xAJYfD3Q2Ao8bOzgM5fuzXvkq%2Fl%2FEsl1mrh9FP4%2BvDtWV6%2FjrntxELd9Jv5YE"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-01-16 21:33:33 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.18	50002	104.19.155.83	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:32 UTC	1162	OUT	GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=4197038910&v=1.1&a=4564783&po=%2Fregister&r=https%3A%2F%2Fwww.signable.us%2F&pu=https%3A%2F%2Fsignable.app%2Fregister%3Fcountry_code%3DUS%26_gl%3D1%252a1aykcz3%252a_gcl_au%252aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%252a_ga%252aMjEzMTUwODYzOS4xNzA1NDQwNzc2%252a_ga_4XE2VYSQ35%252aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.&t=Register+-+Signable&cts=1705440810548&vi=58b81774595ab88167e6e3d83f5cd4dc&nc=true&u=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1&b=178014586.1.1705440810544&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=9vTAK6u3ikCL16cuTSO7dP6SEkSoxM2z4aD_KDunubI-1705440812569-0-604800000; __cf_bm=YZktJnuN7oByQGAPpmkmuQWva6QFR9zUeHhNf27D31c-1705440812-1-AeaUNweCIUrNqprsW1vCTano/rR3eVPVL+DivWAGHhAOAMOm8RPsCsRhcU3PzZmV//IdrqfORHMn7LNn7DvxusI=
2024-01-16 21:33:33 UTC	1204	IN	HTTP/1.1 200 OK Date: Tue, 16 Jan 2024 21:33:33 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 84697a39dfa443d3-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin Access-Control-Allow-Credentials: false P3P: CP="NOI CUR ADM OUR NOR STA NID" X-Content-Type-Options: nosniff x-envoy-upstream-service-time: 10 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-865d96945d-t7c62 x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: f473cb02-e0fc-4688-a9fa-ad9088a0e216 x-request-id: f473cb02-e0fc-4688-a9fa-ad9088a0e216 X-Robots-Tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mA5JyCNfvk5CkVYInI4aaliCzcjHtIVv3G7QmP%2Fwp5chY12ZLq%2FQTkPSy2VJ0Iq415ldTbWtmnGeCFJTkmVw%2FGR9y2pUoVOgSxizBSy3U65UPSm79hSgbt7es%2Fp0iec4rYQ3"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-01-16 21:33:33 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.18	50001	104.19.155.83	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:32 UTC	1186	OUT	GET /__ptbe.gif?n=pe4564783_test___api_key&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=4197038910&v=1.1&a=4564783&po=%2Fregister&r=https%3A%2F%2Fwww.signable.us%2F&pu=https%3A%2F%2Fsignable.app%2Fregister%3Fcountry_code%3DUS%26_gl%3D1%252a1aykcz3%252a_gcl_au%252aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%252a_ga%252aMjEzMTUwODYzOS4xNzA1NDQwNzc2%252a_ga_4XE2VYSQ35%252aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.&t=Register+-+Signable&cts=1705440810551&vi=58b81774595ab88167e6e3d83f5cd4dc&nc=true&u=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1&b=178014586.1.1705440810544&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=2b_Rc0WREXb4PDG2UsMp3j1WwGPqtAD5ejQcg4JqHA8-1705440812-1-AYaNB6RvIo0jFU2aBDY31kJk8vzFhPiwmJ6QUMm8VaAWl0fQyumtmErAMN69/oMiSz04TXK5pP6Q2D8pIjLIpe8=; _cfuvid=7T0e1yuwr9afJKJ3XWTVqSnGadfWT42NBqfYMNFSfuI-1705440812597-0-604800000
2024-01-16 21:33:33 UTC	1205	IN	HTTP/1.1 200 OK Date: Tue, 16 Jan 2024 21:33:33 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 84697a39ecea5e72-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin Access-Control-Allow-Credentials: false P3P: CP="NOI CUR ADM OUR NOR STA NID" X-Content-Type-Options: nosniff x-envoy-upstream-service-time: 9 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-865d96945d-bl56c x-evy-trace-virtual-host: all X-HubSpot-Correlation-Id: d82c71e1-ad3c-43ad-a6f6-d44fa5c1b812 x-request-id: d82c71e1-ad3c-43ad-a6f6-d44fa5c1b812 X-Robots-Tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c%2BMxmAuCNBXTZc3ieUr7FCcL04RhJfImprgO2l96RnhU23K6xf0mW08GhT3Y1sGAhtH%2F%2FycAQGICSVoUHuXv1NGD%2BhAsGt43OYyayxu4sQjnujoCPg%2Ba5TzQOOM91mgZ8m8s"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-01-16 21:33:33 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.18	50004	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:33 UTC	2020	OUT	GET /css/chunk-79dc7497.470369c5.css HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:33 UTC	2511	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 1919 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:00 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:34 GMT ETag: "6b34ed69a95ff2db40a2c944d3faaa0c" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 663f2425a3138c20ed99538fc8652f3c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: gcTw7l7_on2BWReBQWjoKrsVlkCNQ3BsdvQi3W4Jpm_sLRUdeFBIZw== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:33 UTC	1919	IN	Data Raw: 2e 6f 2d 6d 6f 64 61 6c 5f 5f 62 6f 78 5b 64 61 74 61 2d 76 2d 66 31 65 62 30 36 61 34 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 34 35 25 3b 6c 65 66 74 3a 35 30 25 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 70 78 3b 6f 70 61 63 69 74 79 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 36 35 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 Data Ascii: .o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.18	50007	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:33 UTC	2020	OUT	GET /css/chunk-7b758553.470369c5.css HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:33 UTC	2511	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 1919 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:00 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:34 GMT ETag: "6b34ed69a95ff2db40a2c944d3faaa0c" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 0cba74644cedf83bb6fb7dc90d8b0980.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: JXtYwqyeY0cK5SC5UmlRJArF9hYX2ZMBjAcq432ByHKFz2T0p53bng== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:33 UTC	1919	IN	Data Raw: 2e 6f 2d 6d 6f 64 61 6c 5f 5f 62 6f 78 5b 64 61 74 61 2d 76 2d 66 31 65 62 30 36 61 34 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 34 35 25 3b 6c 65 66 74 3a 35 30 25 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 70 78 3b 6f 70 61 63 69 74 79 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 36 35 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 Data Ascii: .o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.18	50008	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:33 UTC	2020	OUT	GET /css/chunk-85d922d4.4a74123c.css HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:33 UTC	2511	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 2076 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:00 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:34 GMT ETag: "0a31cb6c400184a90a75bbe16744afa2" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 b7f525be96cecf61bbec66a423b622b0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: st2bo3bhTNmwT9ihILHCrBZd61OtiGJCUzQ5TxMB3naB6xXlL6JiZw== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:33 UTC	2076	IN	Data Raw: 2e 6f 2d 6d 6f 64 61 6c 5f 5f 62 6f 78 5b 64 61 74 61 2d 76 2d 66 31 65 62 30 36 61 34 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 34 35 25 3b 6c 65 66 74 3a 35 30 25 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 70 78 3b 6f 70 61 63 69 74 79 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 36 35 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 Data Ascii: .o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.18	50009	13.224.208.162	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:33 UTC	567	OUT	OPTIONS /v1/e0babb59-c246-44d5-8e05-fbd03a64bd6b HTTP/1.1 Host: d3hb14vkzrxvla.cloudfront.net Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: beacon-device-id,correlationid,helpscout-origin,helpscout-release Origin: https://signable.app User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:33 UTC	1099	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Date: Tue, 16 Jan 2024 21:33:33 GMT Access-Control-Allow-Origin: https://signable.app Access-Control-Allow-Methods: GET Access-Control-Allow-Headers: beacon-device-id, correlationid, helpscout-origin, helpscout-release Access-Control-Allow-Credentials: true Allow: GET, HEAD, POST, PUT, DELETE, OPTIONS, TRACE, PATCH X-RateLimit-Limit-general-minute: 60 X-RateLimit-Remaining-general-minute: 60 X-RateLimit-Limit-conversations-hour: 10 X-RateLimit-Remaining-conversations-hour: 10 X-RateLimit-Limit-attachments-hour: 10 X-RateLimit-Remaining-attachments-hour: 10 X-RateLimit-Limit-chat-tokens-hour: 25 X-RateLimit-Remaining-chat-tokens-hour: 25 X-RateLimit-Limit-identify-hour: 25 X-RateLimit-Remaining-identify-hour: 25 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 3a9f76e15ac64134cc339fc4f9fb6a4c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: PHL50-C1 X-Amz-Cf-Id: xY7dnXXb1qVQFdXVe2IgDkOPS4UUqB7ylwv7o8JIDDE-uyj_DJhfPw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.18	50006	54.187.159.182	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:33 UTC	553	OUT	GET / HTTP/1.1 Host: stripe.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cid=e5f75074-1823-4a3c-84ba-5ca688398a5b; __Host-stripe.mkt.csrf=-kl4xLn5KDvH7fH6FifO1KecnXAJNEhw8EIDtQabof8Oq7lf6puFBzFte4N7K_G4-N7xhRy44TEodcrMHnqVCzw-AcAXe4b2pvKGXYbN_P_xsmpFiAyqEK65JhgPraWNmP2_WpiMgQ%3D%3D
2024-01-16 21:33:33 UTC	4419	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:33:33 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2209127 Connection: close Vary: Accept-Encoding x-mkt-cache: HIT content-security-policy-report-only: report-uri /csp-report?p=; block-all-mixed-content; default-src 'none'; base-uri 'none'; img-src 'self' https://b.stripecdn.com https://q.stripe.com https://images.ctfassets.net https://assets.ctfassets.net data:; style-src 'unsafe-inline' 'self' https://b.stripecdn.com; connect-src 'self' https://stripe.com blob: https://stripe-images.s3.us-west-1.amazonaws.com https://errors.stripe.com https://b.stripecdn.com https://climate.stripe.com https://ext.stripe.com https://r.stripe.com https://c.increment.com https://c.stripe.dev https://c.stripe.global https://c.stripe.partners https://sales-live-chat.stripe.com https://y4pfttj91h-dsn.algolia.net/1/indexes/mkt_partners/query https://y4pfttj91h-1.algolianet.com/1/indexes/mkt_partners/query https://y4pfttj91h-2.algolianet.com/1/indexes/mkt_partners/query https://y4pfttj91h-3.algolianet.com/1/indexes/mkt_partners/query; font-src 'self' https://b.stripecdn.com; form-action 'self' https://stripe.com https://climate.stripe.com; frame-src 'self' https://js.stripe.com https://register.stripesessions.com https://b.stripecdn.com https://crypto-js.stripe.com https://sales-live-chat.stripe.com; media-src 'self' https://b.stripecdn.com https://videos.ctfassets.net https://assets.ctfassets.net; script-src 'self' https://js.stripe.com 'sha256-qAoigsbVsoqQigwSGiMYuTbAdza9vdqvOsA4UNSB54A=' 'sha256-cCM0Z4lzGkzQnmbdVw+ouz0JRawyaKcZ4yiqzqYS7ek=' 'sha256-5LtzXhT7UFn+GqP5pKEMGL08UNZsrzANHFEBW/mQHGw=' 'sha256-3aWvb9tRBjmz1OjR3n7mwiTm94+s4iki4mMZF82asmc=' 'sha256-4HwZEt/y+k0EIqGfaNZ1MRmRCUbC03K3G03imkZ/EyA=' 'sha256-T9Iq7ZVmxSNDo0MtKOVaMklBUMHeY5FCy6zb50dqr28=' 'sha256-eNaGg+YMox6LtUAMUegc8RPYMvlgqKfr5wXhQq7t0rU=' 'sha256-T7wrECq1xn0YM2QLoh1E2M9Uqf6wfmt2noqlHUzD+xk=' 'sha256-beLzNcen8LrazzSCRjAapoIMTgJI0osPWGNSX7aK6lc=' https://b.stripecdn.com https://crypto-js.stripe.com 'report-sample'; frame-ancestors 'self' https://app.contentful.com content-security-policy: report-uri /csp-report?p=; block-all-mixed-content; default-src 'none'; base-uri 'none'; img-src 'self' https://b.stripecdn.com https://q.stripe.com https://images.ctfassets.net https://assets.ctfassets.net data:; style-src 'unsafe-inline' 'self' https://b.stripecdn.com; connect-src 'self' https://stripe.com blob: https://stripe-images.s3.us-west-1.amazonaws.com https://errors.stripe.com https://b.stripecdn.com https://climate.stripe.com https://ext.stripe.com https://r.stripe.com https://c.increment.com https://c.stripe.dev https://c.stripe.global https://c.stripe.partners https://sales-live-chat.stripe.com https://y4pfttj91h-dsn.algolia.net/1/indexes/mkt_partners/query https://y4pfttj91h-1.algolianet.com/1/indexes/mkt_partners/query https://y4pfttj91h-2.algolianet.com/1/indexes/mkt_partners/query https://y4pfttj91h-3.algolianet.com/1/indexes/mkt_partners/query; font-src 'self' https://b.stripecdn.com; form-action 'self' https://stripe.com https://climate.stripe.com; frame-src 'self' https://js.stripe.com https://register.stripesessions.com https://b.stripecdn.com https://crypto-js.stripe.com https://sales-live-chat.stripe.com; media-src 'self' https://b.stripecdn.com https://videos.ctfassets.net https://assets.ctfassets.net; script-src 'self' https://js.stripe.com 'sha256-qAoigsbVsoqQigwSGiMYuTbAdza9vdqvOsA4UNSB54A=' 'sha256-cCM0Z4lzGkzQnmbdVw+ouz0JRawyaKcZ4yiqzqYS7ek=' 'sha256-5LtzXhT7UFn+GqP5pKEMGL08UNZsrzANHFEBW/mQHGw=' 'sha256-3aWvb9tRBjmz1OjR3n7mwiTm94+s4iki4mMZF82asmc=' 'sha256-4HwZEt/y+k0EIqGfaNZ1MRmRCUbC03K3G03imkZ/EyA=' 'sha256-T9Iq7ZVmxSNDo0MtKOVaMklBUMHeY5FCy6zb50dqr28=' 'sha256-eNaGg+YMox6LtUAMUegc8RPYMvlgqKfr5wXhQq7t0rU=' 'sha256-T7wrECq1xn0YM2QLoh1E2M9Uqf6wfmt2noqlHUzD+xk=' 'sha256-beLzNcen8LrazzSCRjAapoIMTgJI0osPWGNSX7aK6lc=' https://b.stripecdn.com https://crypto-js.stripe.com 'report-sample'; frame-ancestors 'self' https://app.contentful.com x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-envoy-upstream-service-time: 42 x-stripe-server-envoy-start-time-us: 1705440813611681 x-stripe-server-envoy-upstream-service-time-ms: 40 x-stripe-bg-intended-route-color: green x-stripe-client-envoy-start-time-us: 1705440813611282 Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
2024-01-16 21:33:33 UTC	11965	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 0a 20 20 63 6c 61 73 73 3d 22 4d 6b 74 52 6f 6f 74 22 0a 20 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 0a 20 20 64 61 74 61 2d 6a 73 2d 63 6f 6e 74 72 6f 6c 6c 65 72 3d 22 50 61 67 65 22 0a 20 20 64 61 74 61 2d 70 61 67 65 2d 69 64 3d 22 48 6f 6d 65 22 0a 20 20 64 61 74 61 2d 70 61 67 65 2d 74 69 74 6c 65 3d 22 53 74 72 69 70 65 20 7c 20 46 69 6e 61 6e 63 69 61 6c 20 49 6e 66 72 61 73 74 72 75 63 74 75 72 65 20 66 6f 72 20 74 68 65 20 49 6e 74 65 72 6e 65 74 22 0a 20 20 64 61 74 61 2d 65 78 70 65 72 69 6d 65 6e 74 73 2d 6c 6f 61 64 69 6e 67 0a 20 20 64 61 74 61 2d 6c 6f 61 64 69 6e 67 0a 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 5f 5f 63 61 70 74 75 Data Ascii: <!DOCTYPE html><html class="MktRoot" lang="en-us" data-js-controller="Page" data-page-id="Home" data-page-title="Stripe \| Financial Infrastructure for the Internet" data-experiments-loading data-loading> <head> <script>window.__captu
2024-01-16 21:33:33 UTC	16384	IN	Data Raw: 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 69 74 2d 45 45 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 72 69 70 65 2e 63 6f 6d 2f 6a 61 2d 65 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 6a 61 2d 45 45 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 72 69 70 65 2e 63 6f 6d 2f 6e 6c 2d 65 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 6e 6c 2d 45 45 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 72 69 70 65 2e 63 6f 6d 2f 73 76 2d 65 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 73 76 2d 45 45 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 Data Ascii: e" hreflang="it-EE"><link rel="alternate" href="https://stripe.com/ja-ee" hreflang="ja-EE"><link rel="alternate" href="https://stripe.com/nl-ee" hreflang="nl-EE"><link rel="alternate" href="https://stripe.com/sv-ee" hreflang="sv-EE"><link rel="alterna
2024-01-16 21:33:33 UTC	25	IN	Data Raw: 74 74 70 73 3a 2f 2f 73 74 72 69 70 65 2e 63 6f 6d 2f 65 73 2d 34 31 39 2d Data Ascii: ttps://stripe.com/es-419-
2024-01-16 21:33:34 UTC	16384	IN	Data Raw: 6e 6c 22 20 68 72 65 66 6c 61 6e 67 3d 22 65 73 2d 4e 4c 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 72 69 70 65 2e 63 6f 6d 2f 66 72 2d 6e 6c 22 20 68 72 65 66 6c 61 6e 67 3d 22 66 72 2d 4e 4c 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 72 69 70 65 2e 63 6f 6d 2f 69 64 2d 6e 6c 22 20 68 72 65 66 6c 61 6e 67 3d 22 69 64 2d 4e 4c 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 72 69 70 65 2e 63 6f 6d 2f 69 74 2d 6e 6c 22 20 68 72 65 66 6c 61 6e 67 3d 22 69 74 2d 4e 4c 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e Data Ascii: nl" hreflang="es-NL"><link rel="alternate" href="https://stripe.com/fr-nl" hreflang="fr-NL"><link rel="alternate" href="https://stripe.com/id-nl" hreflang="id-NL"><link rel="alternate" href="https://stripe.com/it-nl" hreflang="it-NL"><link rel="altern
2024-01-16 21:33:34 UTC	16384	IN	Data Raw: 6c 28 22 6c 69 6e 6b 5b 64 61 74 61 2d 6a 73 2d 6c 61 7a 79 2d 73 74 79 6c 65 5d 22 29 29 22 61 6c 6c 22 21 3d 3d 65 2e 6d 65 64 69 61 26 26 28 65 2e 6d 65 64 69 61 3d 22 61 6c 6c 22 29 7d 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 62 2e 73 74 72 69 70 65 63 64 6e 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 62 2e 73 74 72 69 70 65 63 64 6e 2e 63 6f 6d 22 3e 0a 3c 73 74 79 6c 65 3e 2e 48 6f 6d 65 70 61 67 65 4c 6f 67 6f 47 72 69 64 20 2e 53 65 63 74 69 6f 6e 5f 5f 6c 61 79 6f 75 74 7b 2d 2d 73 65 63 74 69 6f 6e Data Ascii: l("link[data-js-lazy-style]"))"all"!==e.media&&(e.media="all")});</script> <link rel="preconnect" href="https://b.stripecdn.com" crossorigin><link rel="dns-prefetch" href="https://b.stripecdn.com"><style>.HomepageLogoGrid .Section__layout{--section
2024-01-16 21:33:34 UTC	271	IN	Data Raw: 74 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 38 70 78 3b 6c 65 66 74 3a 38 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 61 63 63 65 6e 74 43 6f 6c 6f 72 29 3b 66 6f 6e 74 3a 76 61 72 28 2d 2d 63 74 61 46 6f 6e 74 29 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 61 70 70 65 61 72 61 6e 63 65 Data Ascii: ton{position:absolute;top:8px;left:8px;display:inline-flex;justify-content:center;align-items:center;padding:12px;color:var(--accentColor);font:var(--ctaFont);border:none;outline:none;background:none;-webkit-appearance:none;-moz-appearance:none;appearance
2024-01-16 21:33:34 UTC	16384	IN	Data Raw: 74 72 61 6e 73 6c 61 74 65 58 28 31 30 30 25 29 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 4d 6f 62 69 6c 65 4d 65 6e 75 5f 5f 62 61 63 6b 42 75 74 74 6f 6e 20 73 70 61 6e 7b 6d 61 72 67 69 6e 3a 30 20 30 20 32 70 78 20 38 70 78 7d 2e 4d 6f 62 69 6c 65 4d 65 6e 75 2d 2d 69 73 53 75 62 4d 65 6e 75 41 63 74 69 76 65 20 2e 4d 6f 62 69 6c 65 4d 65 6e 75 5f 5f 62 61 63 6b 42 75 74 74 6f 6e 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 61 75 74 6f 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 3b 74 72 61 6e 73 69 74 69 6f Data Ascii: translateX(100%);cursor:pointer;-webkit-tap-highlight-color:transparent}.MobileMenu__backButton span{margin:0 0 2px 8px}.MobileMenu--isSubMenuActive .MobileMenu__backButton{opacity:1;transform:translateX(0);pointer-events:auto;visibility:visible;transitio
2024-01-16 21:33:34 UTC	16384	IN	Data Raw: 72 61 6e 73 69 74 69 6f 6e 29 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 74 72 61 6e 73 66 6f 72 6d 2c 77 69 64 74 68 2c 68 65 69 67 68 74 3b 77 69 6c 6c 2d 63 68 61 6e 67 65 3a 74 72 61 6e 73 66 6f 72 6d 2c 77 69 64 74 68 2c 68 65 69 67 68 74 3b 7a 2d 69 6e 64 65 78 3a 32 7d 2e 53 69 74 65 4d 65 6e 75 5b 68 69 64 64 65 6e 5d 7b 2d 2d 73 69 74 65 4d 65 6e 75 52 6f 74 61 74 65 58 3a 2d 31 35 64 65 67 7d 2e 53 69 74 65 4d 65 6e 75 5f 5f 63 61 72 64 2e 43 61 72 64 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 31 3b 2d 2d 63 61 72 64 53 68 61 64 6f 77 3a 76 61 72 28 2d 2d 63 61 72 64 53 68 61 64 6f 77 58 4c 61 72 67 65 29 3b 2d 2d 63 61 72 64 53 68 61 64 6f 77 4d 61 72 Data Ascii: ransition);transition-property:transform,width,height;will-change:transform,width,height;z-index:2}.SiteMenu[hidden]{--siteMenuRotateX:-15deg}.SiteMenu__card.Card{position:relative;height:100%;z-index:1;--cardShadow:var(--cardShadowXLarge);--cardShadowMar
2024-01-16 21:33:34 UTC	16384	IN	Data Raw: 74 6c 65 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 66 6f 6e 74 2d 76 61 72 69 61 74 69 6f 6e 2d 73 65 74 74 69 6e 67 73 3a 22 77 67 68 74 22 20 35 30 30 7d 2e 48 6f 6d 65 70 61 67 65 48 65 72 6f 48 65 61 64 65 72 5f 5f 74 69 74 6c 65 2d 2d 6f 76 65 72 6c 61 79 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 68 65 61 64 65 72 50 61 64 64 69 6e 67 29 3b 7a 2d 69 6e 64 65 78 3a 32 3b 63 6f 6c 6f 72 3a 23 33 61 33 61 33 61 3b 6f 70 61 63 69 74 79 3a 2e 33 7d 2e 48 6f 6d 65 70 61 67 65 48 65 72 6f 48 65 61 64 65 72 5f 5f 74 69 74 6c 65 2d 2d 62 75 72 6e 7b 6d 69 78 2d 62 6c 65 6e 64 2d 6d 6f 64 65 3a 63 6f 6c 6f 72 2d 62 75 72 6e 3b 6f 70 61 63 69 74 79 Data Ascii: tle{font-weight:600;font-variation-settings:"wght" 500}.HomepageHeroHeader__title--overlay{position:absolute;left:0;bottom:0;padding:var(--headerPadding);z-index:2;color:#3a3a3a;opacity:.3}.HomepageHeroHeader__title--burn{mix-blend-mode:color-burn;opacity
2024-01-16 21:33:34 UTC	16384	IN	Data Raw: 39 70 78 3b 2d 2d 70 68 6f 6e 65 57 69 64 74 68 3a 32 36 34 70 78 3b 2d 2d 70 68 6f 6e 65 48 65 69 67 68 74 3a 35 33 33 70 78 3b 2d 2d 70 68 6f 6e 65 47 72 61 70 68 69 63 53 68 61 64 6f 77 3a 30 20 35 30 70 78 20 31 30 30 70 78 20 2d 32 30 70 78 20 72 67 62 61 28 35 30 2c 35 30 2c 39 33 2c 30 2e 32 35 29 2c 30 20 33 30 70 78 20 36 30 70 78 20 2d 33 30 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 33 29 2c 69 6e 73 65 74 20 30 20 2d 32 70 78 20 36 70 78 20 30 20 72 67 62 61 28 31 30 2c 33 37 2c 36 34 2c 30 2e 33 35 29 3b 77 69 64 74 68 3a 76 61 72 28 2d 2d 70 68 6f 6e 65 57 69 64 74 68 29 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 70 68 6f 6e 65 48 65 69 67 68 74 29 3b 70 61 64 64 69 6e 67 3a 38 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 Data Ascii: 9px;--phoneWidth:264px;--phoneHeight:533px;--phoneGraphicShadow:0 50px 100px -20px rgba(50,50,93,0.25),0 30px 60px -30px rgba(0,0,0,0.3),inset 0 -2px 6px 0 rgba(10,37,64,0.35);width:var(--phoneWidth);height:var(--phoneHeight);padding:8px;border-radius:var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.18	50005	34.208.216.197	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:33 UTC	391	OUT	GET /6 HTTP/1.1 Host: m.stripe.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: m=0609bac3-d68d-4920-8c06-3a23d99946c22167c7
2024-01-16 21:33:33 UTC	439	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 16 Jan 2024 21:33:33 GMT Content-Type: text/html Content-Length: 138 Connection: close Location: https://stripe.com Access-Control-Allow-Origin: https://m.stripe.network Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Content-Type: application/json;charset=utf-8
2024-01-16 21:33:33 UTC	138	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.18	50010	54.175.64.186	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:33 UTC	586	OUT	OPTIONS /events/bulk/6239d86c177e3a150044c12d HTTP/1.1 Host: events.launchdarkly.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-launchdarkly-event-schema,x-launchdarkly-payload-id,x-launchdarkly-user-agent Origin: https://signable.app User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:33 UTC	507	IN	HTTP/1.1 204 No Content Date: Tue, 16 Jan 2024 21:33:33 GMT Content-Type: application/json Connection: close Access-Control-Allow-Headers: Accept,Content-Type,Content-Length,Accept-Encoding,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Payload-ID,X-LaunchDarkly-Wrapper,X-LaunchDarkly-Tags Access-Control-Allow-Methods: POST,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Date Access-Control-Max-Age: 300 Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.18	50011	13.224.208.162	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:33 UTC	757	OUT	GET /v1/e0babb59-c246-44d5-8e05-fbd03a64bd6b HTTP/1.1 Host: d3hb14vkzrxvla.cloudfront.net Connection: keep-alive correlationId: 27946dd2-3759-4f61-b080-4ffacc9d295c sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Helpscout-Release: 2.2.141 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: application/json, text/plain, / Beacon-Device-ID: e83eb0e6-1917-40a9-a740-d67eaf2cc0aa Helpscout-Origin: Beacon-Embed sec-ch-ua-platform: "Windows" Origin: https://signable.app Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:34 UTC	1017	IN	HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: close Date: Tue, 16 Jan 2024 21:33:33 GMT Access-Control-Allow-Origin: https://signable.app Access-Control-Expose-Headers: Resource-ID Access-Control-Allow-Credentials: true Cache-Control: max-age=300 X-RateLimit-Limit-chat-tokens-hour: 25 X-RateLimit-Remaining-chat-tokens-hour: 25 X-RateLimit-Limit-identify-hour: 25 X-RateLimit-Remaining-identify-hour: 25 X-RateLimit-Limit-general-minute: 60 X-RateLimit-Remaining-general-minute: 60 X-RateLimit-Limit-conversations-hour: 10 X-RateLimit-Remaining-conversations-hour: 10 X-RateLimit-Limit-attachments-hour: 10 X-RateLimit-Remaining-attachments-hour: 10 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 675b284655681c433b27b85b9911e050.cloudfront.net (CloudFront) X-Amz-Cf-Pop: PHL50-C1 X-Amz-Cf-Id: KljPkV-dLTfTpfP6lxOxYOiefLs11zlqEyqDG-xm4VvCL4R39oY93Q==
2024-01-16 21:33:34 UTC	6786	IN	Data Raw: 31 61 37 61 0d 0a 7b 22 69 64 22 3a 22 65 30 62 61 62 62 35 39 2d 63 32 34 36 2d 34 34 64 35 2d 38 65 30 35 2d 66 62 64 30 33 61 36 34 62 64 36 62 22 2c 22 6e 61 6d 65 22 3a 22 57 65 6c 63 6f 6d 65 20 74 6f 20 53 69 67 6e 61 62 6c 65 20 4c 69 76 65 43 68 61 74 22 2c 22 63 6f 6d 70 61 6e 79 4e 61 6d 65 22 3a 22 53 69 67 6e 61 62 6c 65 22 2c 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 45 75 72 6f 70 65 2f 4c 6f 6e 64 6f 6e 22 2c 22 64 69 73 70 6c 61 79 22 3a 7b 22 66 6f 63 75 73 4d 6f 64 65 22 3a 22 61 73 6b 46 69 72 73 74 22 2c 22 73 74 79 6c 65 22 3a 22 69 63 6f 6e 22 2c 22 74 65 78 74 22 3a 22 48 65 6c 70 22 2c 22 74 65 78 74 41 6c 69 67 6e 22 3a 22 72 69 67 68 74 22 2c 22 69 63 6f 6e 49 6d 61 67 65 22 3a 22 6d 65 73 73 61 67 65 22 2c 22 63 6f 6c 6f 72 22 3a 22 Data Ascii: 1a7a{"id":"e0babb59-c246-44d5-8e05-fbd03a64bd6b","name":"Welcome to Signable LiveChat","companyName":"Signable","timezone":"Europe/London","display":{"focusMode":"askFirst","style":"icon","text":"Help","textAlign":"right","iconImage":"message","color":"
2024-01-16 21:33:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.18	50012	54.175.64.186	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:33 UTC	743	OUT	POST /events/bulk/6239d86c177e3a150044c12d HTTP/1.1 Host: events.launchdarkly.com Connection: keep-alive Content-Length: 709 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-LaunchDarkly-Payload-ID: e5adbc40-b4b6-11ee-bf9c-611b3b5ca852 X-LaunchDarkly-Event-Schema: 4 X-LaunchDarkly-User-Agent: JSClient/3.1.4 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json sec-ch-ua-platform: "Windows" Accept: / Origin: https://signable.app Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:33 UTC	709	OUT	Data Raw: 5b 7b 22 6b 69 6e 64 22 3a 22 69 64 65 6e 74 69 66 79 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 61 6e 6f 6e 79 6d 6f 75 73 22 3a 74 72 75 65 2c 22 6b 69 6e 64 22 3a 22 75 73 65 72 22 2c 22 6b 65 79 22 3a 22 61 6e 6f 6e 79 6d 6f 75 73 2d 75 73 65 72 22 7d 2c 22 63 72 65 61 74 69 6f 6e 44 61 74 65 22 3a 31 37 30 35 34 34 30 38 30 36 38 39 37 7d 2c 7b 22 73 74 61 72 74 44 61 74 65 22 3a 31 37 30 35 34 34 30 38 30 37 37 30 35 2c 22 65 6e 64 44 61 74 65 22 3a 31 37 30 35 34 34 30 38 30 37 37 30 35 2c 22 66 65 61 74 75 72 65 73 22 3a 7b 22 64 72 6f 70 62 6f 78 2d 74 6f 2d 76 32 22 3a 7b 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 63 6f 75 6e 74 65 72 73 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 63 6f 75 6e 74 22 3a 31 2c 22 76 61 72 69 61 74 Data Ascii: [{"kind":"identify","context":{"anonymous":true,"kind":"user","key":"anonymous-user"},"creationDate":1705440806897},{"startDate":1705440807705,"endDate":1705440807705,"features":{"dropbox-to-v2":{"default":null,"counters":[{"value":false,"count":1,"variat
2024-01-16 21:33:34 UTC	524	IN	HTTP/1.1 202 Accepted Date: Tue, 16 Jan 2024 21:33:33 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Headers: Accept,Content-Type,Content-Length,Accept-Encoding,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Payload-ID,X-LaunchDarkly-Wrapper,X-LaunchDarkly-Tags Access-Control-Allow-Methods: POST,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Date Access-Control-Max-Age: 300 Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.18	50014	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:34 UTC	2020	OUT	GET /css/chunk-b047b602.470369c5.css HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:34 UTC	2511	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 1919 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:00 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:35 GMT ETag: "6b34ed69a95ff2db40a2c944d3faaa0c" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 2959f5d118b77b5c8e1e086d4a1147c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: 1o-lflANX0J64rnHRUKEay3Q0n361Gbu2yFgrJFDhcx22SUlsp78cA== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:34 UTC	1919	IN	Data Raw: 2e 6f 2d 6d 6f 64 61 6c 5f 5f 62 6f 78 5b 64 61 74 61 2d 76 2d 66 31 65 62 30 36 61 34 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 34 35 25 3b 6c 65 66 74 3a 35 30 25 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 70 78 3b 6f 70 61 63 69 74 79 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 36 35 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 Data Ascii: .o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.18	50015	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:34 UTC	2020	OUT	GET /css/chunk-c63e4446.87239537.css HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:34 UTC	2511	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 3602 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:00 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:35 GMT ETag: "36e25ee60d7406fafe933a9104066d0c" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 7f211c0cbc2233e773b715bc4f4a435c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: Q58Qw0-AGEblux8RYzL-I-cyOdTwomNyfudzp8872gO7jQMWOkLksA== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:34 UTC	3198	IN	Data Raw: 2e 6f 2d 6d 6f 64 61 6c 5f 5f 62 6f 78 5b 64 61 74 61 2d 76 2d 66 31 65 62 30 36 61 34 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 34 35 25 3b 6c 65 66 74 3a 35 30 25 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 70 78 3b 6f 70 61 63 69 74 79 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 36 35 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 Data Ascii: .o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100%
2024-01-16 21:33:34 UTC	404	IN	Data Raw: 6f 64 61 6c 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 2d 61 63 74 69 76 65 5b 64 61 74 61 2d 76 2d 62 36 33 37 65 65 65 65 5d 20 73 76 67 7b 66 6c 6f 61 74 3a 72 69 67 68 74 7d 2e 61 64 64 2d 65 64 69 74 2d 70 72 65 66 69 6c 6c 2d 74 79 70 65 73 2d 6d 6f 64 61 6c 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 2d 6e 6f 2d 72 65 73 75 6c 74 73 5b 64 61 74 61 2d 76 2d 62 36 33 37 65 65 65 65 5d 2c 2e 61 64 64 2d 65 64 69 74 2d 70 72 65 66 69 6c 6c 2d 74 79 70 65 73 2d 6d 6f 64 61 6c 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 2d 6e 6f 2d 72 65 73 75 6c 74 73 5b 64 61 74 61 2d 76 2d 62 36 33 37 65 65 65 65 5d 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 77 61 72 6e 69 6e 67 29 7d 2e 61 64 64 2d 65 64 69 74 2d 70 72 65 66 69 6c 6c 2d 74 79 Data Ascii: odal__list-item--active[data-v-b637eeee] svg{float:right}.add-edit-prefill-types-modal__list-item--no-results[data-v-b637eeee],.add-edit-prefill-types-modal__list-item--no-results[data-v-b637eeee]:hover{background:var(--color-warning)}.add-edit-prefill-ty

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.18	50016	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:34 UTC	2020	OUT	GET /css/chunk-c6e20010.e1aaddd4.css HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:34 UTC	2511	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 1985 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:00 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:35 GMT ETag: "f75a488b8f1b1c7ed616f8c6aac35bdf" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 98b2021a1a69853671ec2390cb8757f0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: _XFVmqdzaVuDRYPom9mNEoAzOsvW0Vp-1-Xcy8m8bSZ4i5vb1ndPMg== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:34 UTC	1985	IN	Data Raw: 2e 6f 2d 6d 6f 64 61 6c 5f 5f 62 6f 78 5b 64 61 74 61 2d 76 2d 66 31 65 62 30 36 61 34 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 34 35 25 3b 6c 65 66 74 3a 35 30 25 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 70 78 3b 6f 70 61 63 69 74 79 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 36 35 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 Data Ascii: .o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.18	50018	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:34 UTC	2020	OUT	GET /css/chunk-c9608798.f20ec259.css HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:34 UTC	2511	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 1766 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:00 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:35 GMT ETag: "948a22914399223b3c935f8d9d676fa3" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 f6860256b1898079de872f02c7f7a03c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: 9TPD75F_Ul1omRJxBtKdgQmP05Hgwuu1vhsVI3BqSRCNeKgxFDQg0Q== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:34 UTC	1766	IN	Data Raw: 2e 64 6f 63 75 6d 65 6e 74 2d 73 65 74 75 70 2d 70 72 6f 67 72 65 73 73 5f 5f 73 74 65 70 5b 64 61 74 61 2d 76 2d 36 61 65 39 37 61 39 64 5d 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 73 69 67 6e 61 62 6c 65 2d 70 72 69 6d 61 72 79 2d 31 29 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 30 70 78 3b 68 65 69 67 68 74 3a 34 35 70 78 3b 77 69 64 74 68 3a 34 35 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 73 70 61 63 69 6e 67 2d 62 61 73 65 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 33 35 73 20 65 61 73 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 33 35 73 20 65 61 73 65 7d 2e 64 6f Data Ascii: .document-setup-progress__step[data-v-6ae97a9d]{border:1px solid var(--signable-primary-1);float:left;border-radius:30px;height:45px;width:45px;position:relative;margin-left:var(--spacing-base);-webkit-transition:all .35s ease;transition:all .35s ease}.do

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.18	50017	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:34 UTC	2020	OUT	GET /css/chunk-e2d611fa.470369c5.css HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:34 UTC	2511	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 1919 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:00 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:35 GMT ETag: "6b34ed69a95ff2db40a2c944d3faaa0c" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 70b043d52df382dd62760368de89949e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: gugO86Et9nGzQNgLjAVui1NovJlaw0T8EmVdoIC1ALGiXhDKw-Q91g== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:34 UTC	1919	IN	Data Raw: 2e 6f 2d 6d 6f 64 61 6c 5f 5f 62 6f 78 5b 64 61 74 61 2d 76 2d 66 31 65 62 30 36 61 34 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 34 35 25 3b 6c 65 66 74 3a 35 30 25 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 2d 35 30 25 2c 30 29 20 73 63 61 6c 65 28 2e 38 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 70 78 3b 6f 70 61 63 69 74 79 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 36 35 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 Data Ascii: .o-modal__box[data-v-f1eb06a4]{background:#fff;position:fixed;top:45%;left:50%;-webkit-transform:translate3d(-50%,-50%,0) scale(.8);transform:translate3d(-50%,-50%,0) scale(.8);border-radius:9px;opacity:0;visibility:hidden;width:650px;max-width:calc(100%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.18	50019	13.32.207.198	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:34 UTC	392	OUT	GET /v1/e0babb59-c246-44d5-8e05-fbd03a64bd6b HTTP/1.1 Host: d3hb14vkzrxvla.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-16 21:33:34 UTC	882	IN	HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: close Date: Tue, 16 Jan 2024 21:33:34 GMT Cache-Control: max-age=300 X-RateLimit-Limit-identify-hour: 25 X-RateLimit-Remaining-identify-hour: 25 X-RateLimit-Limit-general-minute: 60 X-RateLimit-Remaining-general-minute: 60 X-RateLimit-Limit-conversations-hour: 10 X-RateLimit-Remaining-conversations-hour: 10 X-RateLimit-Limit-attachments-hour: 10 X-RateLimit-Remaining-attachments-hour: 10 X-RateLimit-Limit-chat-tokens-hour: 25 X-RateLimit-Remaining-chat-tokens-hour: 25 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 8d6d65c40f49b96d1f700720137be26a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD66-C1 X-Amz-Cf-Id: xltUz970L1XMVpf3FUNMSB-UyoShTtlhedYLOMyM9eaKCfAgpanCHQ==
2024-01-16 21:33:34 UTC	6786	IN	Data Raw: 31 61 37 61 0d 0a 7b 22 69 64 22 3a 22 65 30 62 61 62 62 35 39 2d 63 32 34 36 2d 34 34 64 35 2d 38 65 30 35 2d 66 62 64 30 33 61 36 34 62 64 36 62 22 2c 22 6e 61 6d 65 22 3a 22 57 65 6c 63 6f 6d 65 20 74 6f 20 53 69 67 6e 61 62 6c 65 20 4c 69 76 65 43 68 61 74 22 2c 22 63 6f 6d 70 61 6e 79 4e 61 6d 65 22 3a 22 53 69 67 6e 61 62 6c 65 22 2c 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 45 75 72 6f 70 65 2f 4c 6f 6e 64 6f 6e 22 2c 22 64 69 73 70 6c 61 79 22 3a 7b 22 66 6f 63 75 73 4d 6f 64 65 22 3a 22 61 73 6b 46 69 72 73 74 22 2c 22 73 74 79 6c 65 22 3a 22 69 63 6f 6e 22 2c 22 74 65 78 74 22 3a 22 48 65 6c 70 22 2c 22 74 65 78 74 41 6c 69 67 6e 22 3a 22 72 69 67 68 74 22 2c 22 69 63 6f 6e 49 6d 61 67 65 22 3a 22 6d 65 73 73 61 67 65 22 2c 22 63 6f 6c 6f 72 22 3a 22 Data Ascii: 1a7a{"id":"e0babb59-c246-44d5-8e05-fbd03a64bd6b","name":"Welcome to Signable LiveChat","companyName":"Signable","timezone":"Europe/London","display":{"focusMode":"askFirst","style":"icon","text":"Help","textAlign":"right","iconImage":"message","color":"
2024-01-16 21:33:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.18	50013	54.187.159.182	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:34 UTC	553	OUT	GET / HTTP/1.1 Host: stripe.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cid=e5f75074-1823-4a3c-84ba-5ca688398a5b; __Host-stripe.mkt.csrf=-kl4xLn5KDvH7fH6FifO1KecnXAJNEhw8EIDtQabof8Oq7lf6puFBzFte4N7K_G4-N7xhRy44TEodcrMHnqVCzw-AcAXe4b2pvKGXYbN_P_xsmpFiAyqEK65JhgPraWNmP2_WpiMgQ%3D%3D
2024-01-16 21:33:34 UTC	4419	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 16 Jan 2024 21:33:34 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2209127 Connection: close Vary: Accept-Encoding x-mkt-cache: HIT content-security-policy-report-only: report-uri /csp-report?p=; block-all-mixed-content; default-src 'none'; base-uri 'none'; img-src 'self' https://b.stripecdn.com https://q.stripe.com https://images.ctfassets.net https://assets.ctfassets.net data:; style-src 'unsafe-inline' 'self' https://b.stripecdn.com; connect-src 'self' https://stripe.com blob: https://stripe-images.s3.us-west-1.amazonaws.com https://errors.stripe.com https://b.stripecdn.com https://climate.stripe.com https://ext.stripe.com https://r.stripe.com https://c.increment.com https://c.stripe.dev https://c.stripe.global https://c.stripe.partners https://sales-live-chat.stripe.com https://y4pfttj91h-dsn.algolia.net/1/indexes/mkt_partners/query https://y4pfttj91h-1.algolianet.com/1/indexes/mkt_partners/query https://y4pfttj91h-2.algolianet.com/1/indexes/mkt_partners/query https://y4pfttj91h-3.algolianet.com/1/indexes/mkt_partners/query; font-src 'self' https://b.stripecdn.com; form-action 'self' https://stripe.com https://climate.stripe.com; frame-src 'self' https://js.stripe.com https://register.stripesessions.com https://b.stripecdn.com https://crypto-js.stripe.com https://sales-live-chat.stripe.com; media-src 'self' https://b.stripecdn.com https://videos.ctfassets.net https://assets.ctfassets.net; script-src 'self' https://js.stripe.com 'sha256-qAoigsbVsoqQigwSGiMYuTbAdza9vdqvOsA4UNSB54A=' 'sha256-cCM0Z4lzGkzQnmbdVw+ouz0JRawyaKcZ4yiqzqYS7ek=' 'sha256-5LtzXhT7UFn+GqP5pKEMGL08UNZsrzANHFEBW/mQHGw=' 'sha256-3aWvb9tRBjmz1OjR3n7mwiTm94+s4iki4mMZF82asmc=' 'sha256-4HwZEt/y+k0EIqGfaNZ1MRmRCUbC03K3G03imkZ/EyA=' 'sha256-T9Iq7ZVmxSNDo0MtKOVaMklBUMHeY5FCy6zb50dqr28=' 'sha256-eNaGg+YMox6LtUAMUegc8RPYMvlgqKfr5wXhQq7t0rU=' 'sha256-T7wrECq1xn0YM2QLoh1E2M9Uqf6wfmt2noqlHUzD+xk=' 'sha256-beLzNcen8LrazzSCRjAapoIMTgJI0osPWGNSX7aK6lc=' https://b.stripecdn.com https://crypto-js.stripe.com 'report-sample'; frame-ancestors 'self' https://app.contentful.com content-security-policy: report-uri /csp-report?p=; block-all-mixed-content; default-src 'none'; base-uri 'none'; img-src 'self' https://b.stripecdn.com https://q.stripe.com https://images.ctfassets.net https://assets.ctfassets.net data:; style-src 'unsafe-inline' 'self' https://b.stripecdn.com; connect-src 'self' https://stripe.com blob: https://stripe-images.s3.us-west-1.amazonaws.com https://errors.stripe.com https://b.stripecdn.com https://climate.stripe.com https://ext.stripe.com https://r.stripe.com https://c.increment.com https://c.stripe.dev https://c.stripe.global https://c.stripe.partners https://sales-live-chat.stripe.com https://y4pfttj91h-dsn.algolia.net/1/indexes/mkt_partners/query https://y4pfttj91h-1.algolianet.com/1/indexes/mkt_partners/query https://y4pfttj91h-2.algolianet.com/1/indexes/mkt_partners/query https://y4pfttj91h-3.algolianet.com/1/indexes/mkt_partners/query; font-src 'self' https://b.stripecdn.com; form-action 'self' https://stripe.com https://climate.stripe.com; frame-src 'self' https://js.stripe.com https://register.stripesessions.com https://b.stripecdn.com https://crypto-js.stripe.com https://sales-live-chat.stripe.com; media-src 'self' https://b.stripecdn.com https://videos.ctfassets.net https://assets.ctfassets.net; script-src 'self' https://js.stripe.com 'sha256-qAoigsbVsoqQigwSGiMYuTbAdza9vdqvOsA4UNSB54A=' 'sha256-cCM0Z4lzGkzQnmbdVw+ouz0JRawyaKcZ4yiqzqYS7ek=' 'sha256-5LtzXhT7UFn+GqP5pKEMGL08UNZsrzANHFEBW/mQHGw=' 'sha256-3aWvb9tRBjmz1OjR3n7mwiTm94+s4iki4mMZF82asmc=' 'sha256-4HwZEt/y+k0EIqGfaNZ1MRmRCUbC03K3G03imkZ/EyA=' 'sha256-T9Iq7ZVmxSNDo0MtKOVaMklBUMHeY5FCy6zb50dqr28=' 'sha256-eNaGg+YMox6LtUAMUegc8RPYMvlgqKfr5wXhQq7t0rU=' 'sha256-T7wrECq1xn0YM2QLoh1E2M9Uqf6wfmt2noqlHUzD+xk=' 'sha256-beLzNcen8LrazzSCRjAapoIMTgJI0osPWGNSX7aK6lc=' https://b.stripecdn.com https://crypto-js.stripe.com 'report-sample'; frame-ancestors 'self' https://app.contentful.com x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-envoy-upstream-service-time: 25 x-stripe-server-envoy-start-time-us: 1705440814418054 x-stripe-server-envoy-upstream-service-time-ms: 24 x-stripe-bg-intended-route-color: green x-stripe-client-envoy-start-time-us: 1705440814417664 Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
2024-01-16 21:33:34 UTC	11965	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 0a 20 20 63 6c 61 73 73 3d 22 4d 6b 74 52 6f 6f 74 22 0a 20 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 0a 20 20 64 61 74 61 2d 6a 73 2d 63 6f 6e 74 72 6f 6c 6c 65 72 3d 22 50 61 67 65 22 0a 20 20 64 61 74 61 2d 70 61 67 65 2d 69 64 3d 22 48 6f 6d 65 22 0a 20 20 64 61 74 61 2d 70 61 67 65 2d 74 69 74 6c 65 3d 22 53 74 72 69 70 65 20 7c 20 46 69 6e 61 6e 63 69 61 6c 20 49 6e 66 72 61 73 74 72 75 63 74 75 72 65 20 66 6f 72 20 74 68 65 20 49 6e 74 65 72 6e 65 74 22 0a 20 20 64 61 74 61 2d 65 78 70 65 72 69 6d 65 6e 74 73 2d 6c 6f 61 64 69 6e 67 0a 20 20 64 61 74 61 2d 6c 6f 61 64 69 6e 67 0a 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 5f 5f 63 61 70 74 75 Data Ascii: <!DOCTYPE html><html class="MktRoot" lang="en-us" data-js-controller="Page" data-page-id="Home" data-page-title="Stripe \| Financial Infrastructure for the Internet" data-experiments-loading data-loading> <head> <script>window.__captu
2024-01-16 21:33:34 UTC	16384	IN	Data Raw: 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 69 74 2d 45 45 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 72 69 70 65 2e 63 6f 6d 2f 6a 61 2d 65 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 6a 61 2d 45 45 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 72 69 70 65 2e 63 6f 6d 2f 6e 6c 2d 65 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 6e 6c 2d 45 45 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 72 69 70 65 2e 63 6f 6d 2f 73 76 2d 65 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 73 76 2d 45 45 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 Data Ascii: e" hreflang="it-EE"><link rel="alternate" href="https://stripe.com/ja-ee" hreflang="ja-EE"><link rel="alternate" href="https://stripe.com/nl-ee" hreflang="nl-EE"><link rel="alternate" href="https://stripe.com/sv-ee" hreflang="sv-EE"><link rel="alterna
2024-01-16 21:33:34 UTC	25	IN	Data Raw: 74 74 70 73 3a 2f 2f 73 74 72 69 70 65 2e 63 6f 6d 2f 65 73 2d 34 31 39 2d Data Ascii: ttps://stripe.com/es-419-
2024-01-16 21:33:34 UTC	16384	IN	Data Raw: 6e 6c 22 20 68 72 65 66 6c 61 6e 67 3d 22 65 73 2d 4e 4c 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 72 69 70 65 2e 63 6f 6d 2f 66 72 2d 6e 6c 22 20 68 72 65 66 6c 61 6e 67 3d 22 66 72 2d 4e 4c 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 72 69 70 65 2e 63 6f 6d 2f 69 64 2d 6e 6c 22 20 68 72 65 66 6c 61 6e 67 3d 22 69 64 2d 4e 4c 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 72 69 70 65 2e 63 6f 6d 2f 69 74 2d 6e 6c 22 20 68 72 65 66 6c 61 6e 67 3d 22 69 74 2d 4e 4c 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e Data Ascii: nl" hreflang="es-NL"><link rel="alternate" href="https://stripe.com/fr-nl" hreflang="fr-NL"><link rel="alternate" href="https://stripe.com/id-nl" hreflang="id-NL"><link rel="alternate" href="https://stripe.com/it-nl" hreflang="it-NL"><link rel="altern
2024-01-16 21:33:34 UTC	16384	IN	Data Raw: 6c 28 22 6c 69 6e 6b 5b 64 61 74 61 2d 6a 73 2d 6c 61 7a 79 2d 73 74 79 6c 65 5d 22 29 29 22 61 6c 6c 22 21 3d 3d 65 2e 6d 65 64 69 61 26 26 28 65 2e 6d 65 64 69 61 3d 22 61 6c 6c 22 29 7d 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 62 2e 73 74 72 69 70 65 63 64 6e 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 62 2e 73 74 72 69 70 65 63 64 6e 2e 63 6f 6d 22 3e 0a 3c 73 74 79 6c 65 3e 2e 48 6f 6d 65 70 61 67 65 4c 6f 67 6f 47 72 69 64 20 2e 53 65 63 74 69 6f 6e 5f 5f 6c 61 79 6f 75 74 7b 2d 2d 73 65 63 74 69 6f 6e Data Ascii: l("link[data-js-lazy-style]"))"all"!==e.media&&(e.media="all")});</script> <link rel="preconnect" href="https://b.stripecdn.com" crossorigin><link rel="dns-prefetch" href="https://b.stripecdn.com"><style>.HomepageLogoGrid .Section__layout{--section
2024-01-16 21:33:34 UTC	271	IN	Data Raw: 74 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 38 70 78 3b 6c 65 66 74 3a 38 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 61 63 63 65 6e 74 43 6f 6c 6f 72 29 3b 66 6f 6e 74 3a 76 61 72 28 2d 2d 63 74 61 46 6f 6e 74 29 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 61 70 70 65 61 72 61 6e 63 65 Data Ascii: ton{position:absolute;top:8px;left:8px;display:inline-flex;justify-content:center;align-items:center;padding:12px;color:var(--accentColor);font:var(--ctaFont);border:none;outline:none;background:none;-webkit-appearance:none;-moz-appearance:none;appearance
2024-01-16 21:33:34 UTC	16384	IN	Data Raw: 74 72 61 6e 73 6c 61 74 65 58 28 31 30 30 25 29 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 4d 6f 62 69 6c 65 4d 65 6e 75 5f 5f 62 61 63 6b 42 75 74 74 6f 6e 20 73 70 61 6e 7b 6d 61 72 67 69 6e 3a 30 20 30 20 32 70 78 20 38 70 78 7d 2e 4d 6f 62 69 6c 65 4d 65 6e 75 2d 2d 69 73 53 75 62 4d 65 6e 75 41 63 74 69 76 65 20 2e 4d 6f 62 69 6c 65 4d 65 6e 75 5f 5f 62 61 63 6b 42 75 74 74 6f 6e 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 61 75 74 6f 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 3b 74 72 61 6e 73 69 74 69 6f Data Ascii: translateX(100%);cursor:pointer;-webkit-tap-highlight-color:transparent}.MobileMenu__backButton span{margin:0 0 2px 8px}.MobileMenu--isSubMenuActive .MobileMenu__backButton{opacity:1;transform:translateX(0);pointer-events:auto;visibility:visible;transitio
2024-01-16 21:33:35 UTC	16384	IN	Data Raw: 72 61 6e 73 69 74 69 6f 6e 29 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 74 72 61 6e 73 66 6f 72 6d 2c 77 69 64 74 68 2c 68 65 69 67 68 74 3b 77 69 6c 6c 2d 63 68 61 6e 67 65 3a 74 72 61 6e 73 66 6f 72 6d 2c 77 69 64 74 68 2c 68 65 69 67 68 74 3b 7a 2d 69 6e 64 65 78 3a 32 7d 2e 53 69 74 65 4d 65 6e 75 5b 68 69 64 64 65 6e 5d 7b 2d 2d 73 69 74 65 4d 65 6e 75 52 6f 74 61 74 65 58 3a 2d 31 35 64 65 67 7d 2e 53 69 74 65 4d 65 6e 75 5f 5f 63 61 72 64 2e 43 61 72 64 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 31 3b 2d 2d 63 61 72 64 53 68 61 64 6f 77 3a 76 61 72 28 2d 2d 63 61 72 64 53 68 61 64 6f 77 58 4c 61 72 67 65 29 3b 2d 2d 63 61 72 64 53 68 61 64 6f 77 4d 61 72 Data Ascii: ransition);transition-property:transform,width,height;will-change:transform,width,height;z-index:2}.SiteMenu[hidden]{--siteMenuRotateX:-15deg}.SiteMenu__card.Card{position:relative;height:100%;z-index:1;--cardShadow:var(--cardShadowXLarge);--cardShadowMar
2024-01-16 21:33:35 UTC	16384	IN	Data Raw: 74 6c 65 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 66 6f 6e 74 2d 76 61 72 69 61 74 69 6f 6e 2d 73 65 74 74 69 6e 67 73 3a 22 77 67 68 74 22 20 35 30 30 7d 2e 48 6f 6d 65 70 61 67 65 48 65 72 6f 48 65 61 64 65 72 5f 5f 74 69 74 6c 65 2d 2d 6f 76 65 72 6c 61 79 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 68 65 61 64 65 72 50 61 64 64 69 6e 67 29 3b 7a 2d 69 6e 64 65 78 3a 32 3b 63 6f 6c 6f 72 3a 23 33 61 33 61 33 61 3b 6f 70 61 63 69 74 79 3a 2e 33 7d 2e 48 6f 6d 65 70 61 67 65 48 65 72 6f 48 65 61 64 65 72 5f 5f 74 69 74 6c 65 2d 2d 62 75 72 6e 7b 6d 69 78 2d 62 6c 65 6e 64 2d 6d 6f 64 65 3a 63 6f 6c 6f 72 2d 62 75 72 6e 3b 6f 70 61 63 69 74 79 Data Ascii: tle{font-weight:600;font-variation-settings:"wght" 500}.HomepageHeroHeader__title--overlay{position:absolute;left:0;bottom:0;padding:var(--headerPadding);z-index:2;color:#3a3a3a;opacity:.3}.HomepageHeroHeader__title--burn{mix-blend-mode:color-burn;opacity
2024-01-16 21:33:35 UTC	16384	IN	Data Raw: 39 70 78 3b 2d 2d 70 68 6f 6e 65 57 69 64 74 68 3a 32 36 34 70 78 3b 2d 2d 70 68 6f 6e 65 48 65 69 67 68 74 3a 35 33 33 70 78 3b 2d 2d 70 68 6f 6e 65 47 72 61 70 68 69 63 53 68 61 64 6f 77 3a 30 20 35 30 70 78 20 31 30 30 70 78 20 2d 32 30 70 78 20 72 67 62 61 28 35 30 2c 35 30 2c 39 33 2c 30 2e 32 35 29 2c 30 20 33 30 70 78 20 36 30 70 78 20 2d 33 30 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 33 29 2c 69 6e 73 65 74 20 30 20 2d 32 70 78 20 36 70 78 20 30 20 72 67 62 61 28 31 30 2c 33 37 2c 36 34 2c 30 2e 33 35 29 3b 77 69 64 74 68 3a 76 61 72 28 2d 2d 70 68 6f 6e 65 57 69 64 74 68 29 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 70 68 6f 6e 65 48 65 69 67 68 74 29 3b 70 61 64 64 69 6e 67 3a 38 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 Data Ascii: 9px;--phoneWidth:264px;--phoneHeight:533px;--phoneGraphicShadow:0 50px 100px -20px rgba(50,50,93,0.25),0 30px 60px -30px rgba(0,0,0,0.3),inset 0 -2px 6px 0 rgba(10,37,64,0.35);width:var(--phoneWidth);height:var(--phoneHeight);padding:8px;border-radius:var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.18	50020	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:34 UTC	2018	OUT	GET /js/chunk-00a20ec4.d702e96a.js HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:35 UTC	2525	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 7711 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:36 GMT ETag: "7f04402515500eecb675633809763cea" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 f0a9678a89ea6fb10debcb7507e49828.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: nPNkpaA8NENxWk4v1ND1Z7UkkhViCGA0g4XqpQ108i971Ik3fT3H0g== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:35 UTC	7711	IN	Data Raw: 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 30 30 61 32 30 65 63 34 22 5d 2c 7b 22 30 34 35 33 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 28 22 38 66 62 31 22 29 7d 2c 22 30 39 32 30 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 7d 2c 22 31 61 65 35 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 2e 72 28 74 29 3b 6f 28 22 37 66 37 66 22 29 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 65 2e 5f 73 65 6c 66 2e 5f 63 3b 72 65 74 75 72 6e 20 74 28 22 56 Data Ascii: (window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-00a20ec4"],{"0453":function(e,t,o){"use strict";o("8fb1")},"0920":function(e,t,o){},"1ae5":function(e,t,o){"use strict";o.r(t);o("7f7f");var a=function(){var e=this,t=e._self._c;return t("V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.18	50021	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:34 UTC	2018	OUT	GET /js/chunk-1353338a.9f80a755.js HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:35 UTC	2525	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3346 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:36 GMT ETag: "b25aa679d10616c0e5f9dea243084a84" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 7f211c0cbc2233e773b715bc4f4a435c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: AvRaB0b6GOBelO4JqobA_-J9da9VCPjIIiBXUXAhAF8wY2NXUM0Q9A== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:35 UTC	3346	IN	Data Raw: 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 31 33 35 33 33 33 38 61 22 5d 2c 7b 22 30 39 32 30 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6f 29 7b 7d 2c 35 32 36 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 2e 72 28 65 29 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 65 3d 74 2e 5f 73 65 6c 66 2e 5f 63 3b 72 65 74 75 72 6e 20 65 28 22 56 4d 6f 64 61 6c 22 2c 7b 61 74 74 72 73 3a 7b 6e 61 6d 65 3a 22 72 65 6d 6f 76 65 2d 70 61 79 6d 65 6e 74 2d 6d 65 74 68 6f 64 2d 6d 6f 64 61 6c 22 2c 6c 6f 61 64 69 6e 67 3a 74 Data Ascii: (window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-1353338a"],{"0920":function(t,e,o){},5263:function(t,e,o){"use strict";o.r(e);var a=function(){var t=this,e=t._self._c;return e("VModal",{attrs:{name:"remove-payment-method-modal",loading:t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.18	50022	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:34 UTC	2018	OUT	GET /js/chunk-1565c410.9229aed9.js HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:35 UTC	2525	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4150 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:36 GMT ETag: "66553734ad611287a310b3f97cb86807" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 f0a9678a89ea6fb10debcb7507e49828.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: fENEIfT_er8Qe9dp86nuMqfdoN0xvo_9SpaEso_aDHzzLhkKNzgGmw== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:35 UTC	4150	IN	Data Raw: 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 31 35 36 35 63 34 31 30 22 5d 2c 7b 22 30 39 32 30 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 7d 2c 22 33 36 62 66 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 7d 2c 22 33 64 36 62 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 28 22 33 36 62 66 22 29 7d 2c 22 37 62 37 61 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 65 2e 5f 73 65 6c 66 2e 5f 63 3b 72 65 74 Data Ascii: (window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-1565c410"],{"0920":function(e,t,a){},"36bf":function(e,t,a){},"3d6b":function(e,t,a){"use strict";a("36bf")},"7b7a":function(e,t,a){"use strict";var o=function(){var e=this,t=e._self._c;ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.18	50024	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:34 UTC	2018	OUT	GET /js/chunk-194b1996.454a30c3.js HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:35 UTC	2525	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4945 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:36 GMT ETag: "298daa54aaaf9876374018fa070678c5" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 98b2021a1a69853671ec2390cb8757f0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: lBfbLDjYsKjBSv6MbcRTgkJrhMV10AZUgM_fEQiC5qXvoYgDWEgejw== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:35 UTC	4945	IN	Data Raw: 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 31 39 34 62 31 39 39 36 22 5d 2c 7b 22 30 39 32 30 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 7d 2c 31 34 30 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 28 22 61 38 39 61 32 22 29 7d 2c 22 37 62 37 61 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 65 3d 74 2e 5f 73 65 6c 66 2e 5f 63 3b 72 65 74 75 72 6e 20 65 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 3a 74 2e 63 6c 61 73 73 Data Ascii: (window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-194b1996"],{"0920":function(t,e,n){},1406:function(t,e,n){"use strict";n("a89a2")},"7b7a":function(t,e,n){"use strict";var o=function(){var t=this,e=t._self._c;return e("div",{class:t.class

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.18	50023	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:34 UTC	2018	OUT	GET /js/chunk-1c2a00ac.be49cfa2.js HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:35 UTC	2526	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 10484 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:36 GMT ETag: "f8e69e4b1f59c0b98ffd7b56d13bd0bb" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 b4f7307b0bd82e33fcc14ab1b84bcd7c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: EQSZpzMjx2ZgeZ8PndbCQiOPR7k2ZtpS7OSraKnulDGw8-Z5aaiKeQ== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:35 UTC	10484	IN	Data Raw: 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 31 63 32 61 30 30 61 63 22 2c 22 63 68 75 6e 6b 2d 32 64 30 62 64 66 33 35 22 2c 22 63 68 75 6e 6b 2d 32 64 30 63 30 63 35 36 22 5d 2c 7b 22 32 64 64 31 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 2e 72 28 74 29 3b 6f 28 22 61 63 36 61 22 29 2c 6f 28 22 37 66 37 66 22 29 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 65 2e 5f 73 65 6c 66 2e 5f 63 3b 72 65 74 75 72 6e 20 74 28 22 4d 75 6c 74 69 53 65 6c 65 63 74 22 2c 7b 61 74 74 72 73 3a 7b 70 6c 61 63 65 68 6f 6c Data Ascii: (window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-1c2a00ac","chunk-2d0bdf35","chunk-2d0c0c56"],{"2dd1":function(e,t,o){"use strict";o.r(t);o("ac6a"),o("7f7f");var n=function(){var e=this,t=e._self._c;return t("MultiSelect",{attrs:{placehol

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.18	50025	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:35 UTC	2018	OUT	GET /js/chunk-1e9122a3.b481b48e.js HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:35 UTC	2525	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 5297 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:36 GMT ETag: "0cb18392f41820956d309279925607aa" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 5d4199dbed922d7847172f5631f32dbc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: Yq5T-2dqawbNcz0VuPW7zimmLSBeq9CXn6dsmh30u-ISDcYCfmRlPA== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:35 UTC	5297	IN	Data Raw: 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 31 65 39 31 32 32 61 33 22 5d 2c 7b 22 30 39 32 30 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 74 29 7b 7d 2c 36 37 31 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 72 28 61 29 3b 74 28 22 37 66 37 66 22 29 3b 76 61 72 20 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 61 3d 65 2e 5f 73 65 6c 66 2e 5f 63 3b 72 65 74 75 72 6e 20 61 28 22 56 4d 6f 64 61 6c 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 6d 6f 64 61 6c 2d 70 61 72 74 79 2d 6d 65 73 73 61 67 65 22 2c 61 74 74 72 73 3a 7b Data Ascii: (window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-1e9122a3"],{"0920":function(e,a,t){},6711:function(e,a,t){"use strict";t.r(a);t("7f7f");var s=function(){var e=this,a=e._self._c;return a("VModal",{staticClass:"modal-party-message",attrs:{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.18	50026	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:35 UTC	2018	OUT	GET /js/chunk-280daae3.6c402300.js HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:36 UTC	2526	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 34695 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:37 GMT ETag: "0c583598dfe2ab2e1a45b1cc56d006ec" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 2959f5d118b77b5c8e1e086d4a1147c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: IiW9d9bvpVPZovx5TLNs4r_vXaKa7S-fAT6LZSP1zgz77LRkjliTSg== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:36 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 32 38 30 64 61 61 65 33 22 5d 2c 7b 22 30 30 33 62 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 73 28 22 36 39 32 35 22 29 7d 2c 22 30 32 37 39 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 73 28 22 31 37 33 65 22 29 7d 2c 22 31 37 33 65 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 29 7b 7d 2c 22 32 62 61 35 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 73 28 22 37 36 61 62 22 29 7d 2c 36 39 32 35 3a 66 75 6e 63 74 69 Data Ascii: (window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-280daae3"],{"003b":function(e,t,s){"use strict";s("6925")},"0279":function(e,t,s){"use strict";s("173e")},"173e":function(e,t,s){},"2ba5":function(e,t,s){"use strict";s("76ab")},6925:functi
2024-01-16 21:33:36 UTC	16384	IN	Data Raw: 2d 65 64 69 74 22 2c 22 64 61 74 61 2d 74 65 73 74 22 3a 22 69 6e 70 75 74 2d 75 73 65 72 2d 65 6d 61 69 6c 22 2c 22 64 61 74 61 2d 68 6a 2d 73 75 70 70 72 65 73 73 22 3a 22 22 2c 22 64 61 74 61 2d 65 63 22 3a 22 65 64 69 74 5f 75 73 65 72 5f 6d 6f 64 61 6c 22 2c 22 64 61 74 61 2d 65 74 22 3a 22 65 6d 61 69 6c 5f 69 6e 70 75 74 22 7d 2c 6d 6f 64 65 6c 3a 7b 76 61 6c 75 65 3a 65 2e 75 73 65 72 2e 65 6d 61 69 6c 2c 63 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 2e 24 73 65 74 28 65 2e 75 73 65 72 2c 22 65 6d 61 69 6c 22 2c 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 74 3f 74 2e 74 72 69 6d 28 29 3a 74 29 7d 2c 65 78 70 72 65 73 73 69 6f 6e 3a 22 75 73 65 72 2e 65 6d 61 69 6c 22 7d 7d 29 2c 74 28 22 56 61 6c 69 64 61 74 69 6f 6e Data Ascii: -edit","data-test":"input-user-email","data-hj-suppress":"","data-ec":"edit_user_modal","data-et":"email_input"},model:{value:e.user.email,callback:function(t){e.$set(e.user,"email","string"===typeof t?t.trim():t)},expression:"user.email"}}),t("Validation
2024-01-16 21:33:36 UTC	1927	IN	Data Raw: 6e 53 65 61 72 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 76 61 6c 75 65 3b 4f 62 6a 65 63 74 28 6d 5b 22 61 22 5d 29 28 22 75 73 65 72 73 2d 73 65 61 72 63 68 2d 73 65 61 72 63 68 65 64 22 29 2c 74 68 69 73 2e 73 65 61 72 63 68 52 65 73 75 6c 74 73 43 75 72 72 65 6e 74 51 75 65 72 79 3d 74 2c 31 21 3d 3d 74 68 69 73 2e 63 75 72 72 65 6e 74 50 61 67 65 3f 74 68 69 73 2e 63 75 72 72 65 6e 74 50 61 67 65 3d 31 3a 74 68 69 73 2e 6c 6f 61 64 44 61 74 61 28 31 29 7d 2c 6f 6e 52 65 73 65 74 53 65 61 72 63 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 4f 62 6a 65 63 74 28 6d 5b 22 61 22 5d 29 28 22 75 73 65 72 73 2d 73 65 61 72 63 68 2d 72 65 73 65 74 22 29 2c 74 68 69 73 2e 24 72 6f 75 74 65 72 2e 72 65 70 6c 61 63 65 28 7b 71 75 65 72 79 3a Data Ascii: nSearch:function(e){var t=e.value;Object(m["a"])("users-search-searched"),this.searchResultsCurrentQuery=t,1!==this.currentPage?this.currentPage=1:this.loadData(1)},onResetSearch:function(){Object(m["a"])("users-search-reset"),this.$router.replace({query:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.18	50027	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:35 UTC	2018	OUT	GET /js/chunk-2d0a473d.3aa1d29b.js HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:36 UTC	2525	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1143 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:37 GMT ETag: "3ff3b6c9470706f2dc7ff826c932d71e" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 22ab92a35add26b3d8027870bbb6c672.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: mHZYzfn9h27Knf-rLpH16RjO_GvvXRwKOaj_t038LcFIEum3FvhP0g== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:36 UTC	1143	IN	Data Raw: 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 32 64 30 61 34 37 33 64 22 5d 2c 7b 22 30 37 30 30 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 6f 29 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 6f 3d 74 2e 5f 73 65 6c 66 2e 5f 63 3b 72 65 74 75 72 6e 20 6f 28 22 54 57 4d 6f 64 61 6c 22 2c 7b 61 74 74 72 73 3a 7b 74 69 74 6c 65 3a 74 2e 24 74 28 22 4c 65 67 61 63 79 41 6c 6c 49 74 65 6d 73 44 65 73 63 72 69 70 74 69 6f 6e 4d 6f 64 61 6c 2e 74 69 74 6c 65 22 29 2c 73 68 6f 77 3a 74 2e 76 61 6c 75 65 2c 6c 6f Data Ascii: (window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-2d0a473d"],{"0700":function(t,o,n){"use strict";n.r(o);var e=function(){var t=this,o=t._self._c;return o("TWModal",{attrs:{title:t.$t("LegacyAllItemsDescriptionModal.title"),show:t.value,lo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.18	50028	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:35 UTC	2018	OUT	GET /js/chunk-2d0aa586.d2025c63.js HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:36 UTC	2525	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3111 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:37 GMT ETag: "d5e4c93c7b524431ef2fbb784cec56e9" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 33aa60037dccf2345c8ade9dffbf1192.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: hlxh58mBT3hqMPVG-LGr4dNfLMFPZ5ZtLWjcjnW9l7GMiyXzvCMd9A== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:36 UTC	3111	IN	Data Raw: 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 32 64 30 61 61 35 38 36 22 5d 2c 7b 22 31 31 32 62 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 72 28 74 29 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 65 2e 5f 73 65 6c 66 2e 5f 63 3b 72 65 74 75 72 6e 20 65 2e 73 68 6f 77 57 69 64 67 65 74 3f 74 28 22 64 69 76 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 67 2d 73 69 64 65 62 61 72 5f 5f 63 6f 6e 74 61 69 6e 65 72 22 2c 61 74 74 72 73 3a 7b 69 64 3a 22 6c 61 6e 67 75 61 67 65 53 77 69 74 63 68 65 72 22 7d Data Ascii: (window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-2d0aa586"],{"112b":function(e,t,a){"use strict";a.r(t);var n=function(){var e=this,t=e._self._c;return e.showWidget?t("div",{staticClass:"g-sidebar__container",attrs:{id:"languageSwitcher"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.18	50029	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:35 UTC	2018	OUT	GET /js/chunk-2d0bdf35.22357f66.js HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:36 UTC	2525	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3478 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:37 GMT ETag: "6aca4a7591d22faee031810c5f6accd0" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 f6860256b1898079de872f02c7f7a03c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: ZyOZFrW-SeoXIN6lPxh1_pUeeb_c9uanIkXZ4645T6TaRJd2GPblWw== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:36 UTC	3478	IN	Data Raw: 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 32 64 30 62 64 66 33 35 22 5d 2c 7b 22 32 64 64 31 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 3b 6e 28 22 61 63 36 61 22 29 2c 6e 28 22 37 66 37 66 22 29 3b 76 61 72 20 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 65 2e 5f 73 65 6c 66 2e 5f 63 3b 72 65 74 75 72 6e 20 74 28 22 4d 75 6c 74 69 53 65 6c 65 63 74 22 2c 7b 61 74 74 72 73 3a 7b 70 6c 61 63 65 68 6f 6c 64 65 72 3a 65 2e 70 6c 61 63 65 68 6f 6c 64 65 72 2c 6c 6f 61 64 69 6e 67 3a 65 2e 69 73 4c 6f 61 64 Data Ascii: (window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-2d0bdf35"],{"2dd1":function(e,t,n){"use strict";n.r(t);n("ac6a"),n("7f7f");var s=function(){var e=this,t=e._self._c;return t("MultiSelect",{attrs:{placeholder:e.placeholder,loading:e.isLoad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.18	50030	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:36 UTC	2018	OUT	GET /js/chunk-2d0c0c56.87919c01.js HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:36 UTC	2525	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1636 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:37 GMT ETag: "fe9ab0f9135d67eb6db304c932f631cb" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 264cb12aa5043fad64b302b378b99036.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: pcreumXp_BmbYW5K_4moUdRymCiHbgkm8cIofILmA6LFcRNMpAojHA== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:36 UTC	1636	IN	Data Raw: 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 32 64 30 63 30 63 35 36 22 5d 2c 7b 22 34 32 63 65 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 2e 72 28 65 29 3b 6f 28 22 37 66 37 66 22 29 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 65 3d 74 2e 5f 73 65 6c 66 2e 5f 63 3b 72 65 74 75 72 6e 20 65 28 22 54 57 4d 6f 64 61 6c 22 2c 7b 61 74 74 72 73 3a 7b 74 69 74 6c 65 3a 74 2e 24 74 28 22 74 65 61 6d 73 2e 64 65 6c 65 74 65 54 65 61 6d 22 29 2c 6c 6f 61 64 69 6e 67 3a 74 2e 6c 6f 61 64 69 6e 67 2c 73 68 6f 77 3a 74 2e Data Ascii: (window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-2d0c0c56"],{"42ce":function(t,e,o){"use strict";o.r(e);o("7f7f");var n=function(){var t=this,e=t._self._c;return e("TWModal",{attrs:{title:t.$t("teams.deleteTeam"),loading:t.loading,show:t.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.18	50031	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:36 UTC	2018	OUT	GET /js/chunk-3fbf9bd4.8a5a0a97.js HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:36 UTC	2525	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3627 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:37 GMT ETag: "346cd57a05ced0ee97639089f5b1c6a1" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 c59b5a542015c208c95d2ed3c65cdbcc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: 0QlDUDMSnAWucqtSSJ_ZbvfEPwYnfpELRhtwsrxE7qxCNa5slEtU_Q== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:36 UTC	3627	IN	Data Raw: 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 33 66 62 66 39 62 64 34 22 5d 2c 7b 22 30 39 32 30 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 73 29 7b 7d 2c 22 37 62 37 61 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 65 3d 74 2e 5f 73 65 6c 66 2e 5f 63 3b 72 65 74 75 72 6e 20 65 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 3a 74 2e 63 6c 61 73 73 4c 69 73 74 7d 2c 5b 65 28 22 64 69 76 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 6f 2d 6d 6f 64 61 6c 5f 5f 62 6f 78 22 7d 2c 5b 74 Data Ascii: (window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-3fbf9bd4"],{"0920":function(t,e,s){},"7b7a":function(t,e,s){"use strict";var o=function(){var t=this,e=t._self._c;return e("div",{class:t.classList},[e("div",{staticClass:"o-modal__box"},[t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.18	50033	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:36 UTC	2018	OUT	GET /js/chunk-4182be59.c01703cd.js HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:36 UTC	2525	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6514 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:37 GMT ETag: "081290e461439eefeb8094eccde3da48" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 8a5a55219dfdbca831a0a40e05aaa842.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: fE-2UvLichB5aUc9zqmlAlCHeSrhS7r9sOPuSpJZvF8O5XEwr5UmoA== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:36 UTC	6514	IN	Data Raw: 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 34 31 38 32 62 65 35 39 22 5d 2c 7b 22 30 39 32 30 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 7d 2c 22 33 35 35 63 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 72 28 74 29 3b 61 28 22 37 66 37 66 22 29 3b 76 61 72 20 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 65 2e 5f 73 65 6c 66 2e 5f 63 3b 72 65 74 75 72 6e 20 65 2e 61 70 69 6b 65 79 3f 74 28 22 56 4d 6f 64 61 6c 22 2c 7b 61 74 74 72 73 3a 7b 6e 61 6d 65 3a 22 61 64 64 65 64 69 74 2d 61 70 69 6b 65 79 2d 6d 6f Data Ascii: (window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-4182be59"],{"0920":function(e,t,a){},"355c":function(e,t,a){"use strict";a.r(t);a("7f7f");var s=function(){var e=this,t=e._self._c;return e.apikey?t("VModal",{attrs:{name:"addedit-apikey-mo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.18	50032	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:36 UTC	2018	OUT	GET /js/chunk-45deaaac.3f89a712.js HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:37 UTC	2526	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 20177 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:37 GMT ETag: "d551959119a4ac4eecb98200e493bcc3" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 f0a9678a89ea6fb10debcb7507e49828.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: ofTzG6kSOiMwB6R8VdZZHaKKoG8QC9IBJy-qqR-HI27b6dF6RognVA== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:37 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 34 35 64 65 61 61 61 63 22 2c 22 63 68 75 6e 6b 2d 31 63 32 61 30 30 61 63 22 2c 22 63 68 75 6e 6b 2d 37 32 31 66 32 37 30 63 22 2c 22 63 68 75 6e 6b 2d 32 64 30 62 64 66 33 35 22 2c 22 63 68 75 6e 6b 2d 32 64 30 63 30 63 35 36 22 5d 2c 7b 22 30 64 33 33 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 72 28 65 29 3b 61 28 22 37 66 37 66 22 29 3b 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 65 3d 74 2e 5f 73 65 6c 66 2e 5f 63 3b 72 65 74 75 72 6e 20 65 28 22 54 57 4d 6f 64 Data Ascii: (window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-45deaaac","chunk-1c2a00ac","chunk-721f270c","chunk-2d0bdf35","chunk-2d0c0c56"],{"0d33":function(t,e,a){"use strict";a.r(e);a("7f7f");var o=function(){var t=this,e=t._self._c;return e("TWMod
2024-01-16 21:33:37 UTC	3793	IN	Data Raw: 6f 6c 65 61 6e 2c 64 65 66 61 75 6c 74 3a 21 31 7d 2c 67 72 6f 75 70 49 64 3a 7b 74 79 70 65 3a 4e 75 6d 62 65 72 2c 72 65 71 75 69 72 65 64 3a 21 31 7d 7d 2c 62 65 66 6f 72 65 4d 6f 75 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 67 72 6f 75 70 49 64 26 26 74 68 69 73 2e 6c 6f 61 64 47 72 6f 75 70 28 29 7d 2c 63 6f 6d 70 75 74 65 64 3a 7b 73 68 6f 77 69 6e 67 45 64 69 74 47 72 6f 75 70 4d 6f 64 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 68 69 73 2e 73 68 6f 77 26 26 21 31 3d 3d 3d 74 68 69 73 2e 73 68 6f 77 69 6e 67 44 65 6c 65 74 65 47 72 6f 75 70 4d 6f 64 61 6c 7d 2c 69 73 44 69 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 31 3d 3d 3d 4f 62 6a 65 63 74 28 70 5b 22 69 73 45 71 75 61 6c Data Ascii: olean,default:!1},groupId:{type:Number,required:!1}},beforeMount:function(){this.groupId&&this.loadGroup()},computed:{showingEditGroupModal:function(){return!0===this.show&&!1===this.showingDeleteGroupModal},isDirty:function(){return!1===Object(p["isEqual

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.18	50034	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:36 UTC	2018	OUT	GET /js/chunk-48100a7b.a4a30136.js HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:37 UTC	2525	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6803 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:37 GMT ETag: "0f4b31ca63aed2f338a35642fa08ddfb" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 b4f7307b0bd82e33fcc14ab1b84bcd7c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: C6J-7cxzA-s4EA36lkS4i-IERfaNauJGwtRDnyWzNkK5rnmpjyyGWQ== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:37 UTC	6803	IN	Data Raw: 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 34 38 31 30 30 61 37 62 22 5d 2c 7b 22 30 39 32 30 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 7d 2c 33 34 37 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 7d 2c 22 37 62 37 61 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 65 2e 5f 73 65 6c 66 2e 5f 63 3b 72 65 74 75 72 6e 20 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 3a 65 2e 63 6c 61 73 73 4c 69 73 74 7d 2c 5b 74 28 22 64 69 76 22 2c 7b 73 74 61 74 69 63 43 Data Ascii: (window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-48100a7b"],{"0920":function(e,t,i){},3479:function(e,t,i){},"7b7a":function(e,t,i){"use strict";var a=function(){var e=this,t=e._self._c;return t("div",{class:e.classList},[t("div",{staticC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.18	50035	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:36 UTC	2018	OUT	GET /js/chunk-49391346.e23bb207.js HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:37 UTC	2525	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 5706 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:38 GMT ETag: "137ae2312f5dbd09b3f011b75549a7fc" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 db50275fc6a3d1f557e22016322e2ba2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: e5k7AkpGVuv_MODWDlxVWNCI4sKMAOzq54aKRDPEKhaTeGjN2efv3Q== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:37 UTC	5706	IN	Data Raw: 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 34 39 33 39 31 33 34 36 22 5d 2c 7b 22 30 39 32 30 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 7d 2c 22 36 64 32 39 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 28 22 62 61 31 33 22 29 7d 2c 22 37 62 37 61 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 65 3d 74 2e 5f 73 65 6c 66 2e 5f 63 3b 72 65 74 75 72 6e 20 65 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 3a 74 2e 63 6c 61 73 Data Ascii: (window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-49391346"],{"0920":function(t,e,a){},"6d29":function(t,e,a){"use strict";a("ba13")},"7b7a":function(t,e,a){"use strict";var s=function(){var t=this,e=t._self._c;return e("div",{class:t.clas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.18	50037	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:37 UTC	2018	OUT	GET /js/chunk-69b2ef63.89413b65.js HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:37 UTC	2525	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3738 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:38 GMT ETag: "098634a674d2e72491673e3a3c841e13" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 22ab92a35add26b3d8027870bbb6c672.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: RM7f-PYCXxMC5jHFmA7wNrrQjVWbVzubVI5yg0OsqfmrKAgs8xNB8Q== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:37 UTC	3738	IN	Data Raw: 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 36 39 62 32 65 66 36 33 22 5d 2c 7b 22 30 39 32 30 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 7d 2c 33 39 38 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 72 28 65 29 3b 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 65 3d 74 2e 5f 73 65 6c 66 2e 5f 63 3b 72 65 74 75 72 6e 20 65 28 22 56 4d 6f 64 61 6c 22 2c 7b 61 74 74 72 73 3a 7b 6e 61 6d 65 3a 22 74 65 6d 70 6c 61 74 65 2d 72 65 6d 6f 76 65 2d 6d 6f 64 61 6c 22 2c 6c 6f 61 64 69 6e 67 3a 74 2e 6c 6f 61 64 69 Data Ascii: (window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-69b2ef63"],{"0920":function(t,e,a){},3983:function(t,e,a){"use strict";a.r(e);var o=function(){var t=this,e=t._self._c;return e("VModal",{attrs:{name:"template-remove-modal",loading:t.loadi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.18	50038	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:37 UTC	2018	OUT	GET /js/chunk-6f4fbc3c.5424774e.js HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:37 UTC	2525	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 5389 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:38 GMT ETag: "4c058d2fadbe090a08038e24b88da610" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 f0a9678a89ea6fb10debcb7507e49828.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: P49TidNEX817ioRgGuZZHLjkvabaPMZ00_VKko1omHlgOf652RIGVg== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:37 UTC	5389	IN	Data Raw: 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 36 66 34 66 62 63 33 63 22 5d 2c 7b 22 30 39 32 30 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 7d 2c 22 35 36 36 63 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 72 28 74 29 3b 76 61 72 20 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 65 2e 5f 73 65 6c 66 2e 5f 63 3b 72 65 74 75 72 6e 20 74 28 22 56 4d 6f 64 61 6c 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 74 72 61 6e 73 66 65 72 2d 6d 6f 64 61 6c 22 2c 61 74 74 72 73 3a 7b 6e 61 6d 65 3a 22 74 65 6d 70 6c 61 74 Data Ascii: (window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-6f4fbc3c"],{"0920":function(e,t,a){},"566c":function(e,t,a){"use strict";a.r(t);var s=function(){var e=this,t=e._self._c;return t("VModal",{staticClass:"transfer-modal",attrs:{name:"templat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.18	50039	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:37 UTC	2018	OUT	GET /js/chunk-6fa298f8.78122294.js HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:37 UTC	2525	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3697 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:38 GMT ETag: "e0a443bc8af074fe1153900e539802df" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 2ad6789a221bb559c9b8ce946b65a03a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: nUnoVBMwZT7YE4qU--WS4NwcJ2a5CkFWzTJSL_WRVJI68yWIcUCurg== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:37 UTC	3697	IN	Data Raw: 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 36 66 61 32 39 38 66 38 22 5d 2c 7b 22 30 39 32 30 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6f 29 7b 7d 2c 22 37 62 37 61 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 65 3d 74 2e 5f 73 65 6c 66 2e 5f 63 3b 72 65 74 75 72 6e 20 65 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 3a 74 2e 63 6c 61 73 73 4c 69 73 74 7d 2c 5b 65 28 22 64 69 76 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 6f 2d 6d 6f 64 61 6c 5f 5f 62 6f 78 22 7d 2c 5b 74 Data Ascii: (window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-6fa298f8"],{"0920":function(t,e,o){},"7b7a":function(t,e,o){"use strict";var a=function(){var t=this,e=t._self._c;return e("div",{class:t.classList},[e("div",{staticClass:"o-modal__box"},[t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.18	50040	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:37 UTC	2018	OUT	GET /js/chunk-721f270c.bd48f7b1.js HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:37 UTC	2525	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 7362 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:38 GMT ETag: "50b1732c7d1c69468f5bf81833c3a105" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 878742d0ad1850cbfc7910a5c4919ed0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: aBYs8zVYJaPdX4oT3HFgxm4pXZnZ8KWke3Nb5z3zsrMm3kTf4ACmXQ== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:37 UTC	7362	IN	Data Raw: 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 37 32 31 66 32 37 30 63 22 2c 22 63 68 75 6e 6b 2d 32 64 30 62 64 66 33 35 22 5d 2c 7b 22 30 64 33 33 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 72 28 74 29 3b 61 28 22 37 66 37 66 22 29 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 65 2e 5f 73 65 6c 66 2e 5f 63 3b 72 65 74 75 72 6e 20 74 28 22 54 57 4d 6f 64 61 6c 22 2c 7b 61 74 74 72 73 3a 7b 74 69 74 6c 65 3a 65 2e 24 74 28 22 67 72 6f 75 70 73 2e 63 72 65 61 74 65 54 65 61 6d 22 29 2c 6c 6f 61 64 69 6e 67 Data Ascii: (window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-721f270c","chunk-2d0bdf35"],{"0d33":function(e,t,a){"use strict";a.r(t);a("7f7f");var n=function(){var e=this,t=e._self._c;return t("TWModal",{attrs:{title:e.$t("groups.createTeam"),loading

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.18	50036	40.68.123.157	443

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:37 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=+Kz8tpYVXzeuwt7&MD=X5Zd6xmD HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-01-16 21:33:37 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: 975f7fef-a89b-4e61-8eb2-4efe28fe9408 MS-RequestId: 06f23356-f97d-4345-a113-03a3d8c06c43 MS-CV: mbHzEg0KykCCQoeB.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 16 Jan 2024 21:33:37 GMT Connection: close Content-Length: 25457
2024-01-16 21:33:37 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-01-16 21:33:37 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.18	50041	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:37 UTC	2018	OUT	GET /js/chunk-79dc7497.a630258b.js HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:38 UTC	2525	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4304 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:39 GMT ETag: "6e5ac7b41f45cecba5eeac0b9ba12b2d" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 e7f87e384798b4a94964cbcf8e4db94c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: CPJfXcckAZFCAcpGhhieF2Nz19534J2cH4M0Yn78lPrMqUTaQPzlog== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:38 UTC	4304	IN	Data Raw: 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 37 39 64 63 37 34 39 37 22 5d 2c 7b 22 30 39 32 30 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 73 29 7b 7d 2c 22 37 62 37 61 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 65 3d 74 2e 5f 73 65 6c 66 2e 5f 63 3b 72 65 74 75 72 6e 20 65 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 3a 74 2e 63 6c 61 73 73 4c 69 73 74 7d 2c 5b 65 28 22 64 69 76 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 6f 2d 6d 6f 64 61 6c 5f 5f 62 6f 78 22 7d 2c 5b 74 Data Ascii: (window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-79dc7497"],{"0920":function(t,e,s){},"7b7a":function(t,e,s){"use strict";var o=function(){var t=this,e=t._self._c;return e("div",{class:t.classList},[e("div",{staticClass:"o-modal__box"},[t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.18	50042	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:37 UTC	2018	OUT	GET /js/chunk-7b758553.811641ac.js HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:38 UTC	2525	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3663 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:39 GMT ETag: "e23bd72d7b68cd047a93a860c220f574" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 98b2021a1a69853671ec2390cb8757f0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: Sy4zMA2b88nka2LVhsYavYNQLXh2qC5vLK8Iatj-lAa52w-TSY0UhQ== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:38 UTC	3663	IN	Data Raw: 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 37 62 37 35 38 35 35 33 22 5d 2c 7b 22 30 39 32 30 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 7d 2c 22 31 66 37 33 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 72 28 65 29 3b 61 28 22 37 66 37 66 22 29 3b 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 65 3d 74 2e 5f 73 65 6c 66 2e 5f 63 3b 72 65 74 75 72 6e 20 65 28 22 56 4d 6f 64 61 6c 22 2c 7b 61 74 74 72 73 3a 7b 6e 61 6d 65 3a 22 64 65 6c 65 74 65 2d 61 70 69 6b 65 79 2d 6d 6f 64 61 6c 22 2c 6c 6f 61 64 69 Data Ascii: (window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-7b758553"],{"0920":function(t,e,a){},"1f73":function(t,e,a){"use strict";a.r(e);a("7f7f");var o=function(){var t=this,e=t._self._c;return e("VModal",{attrs:{name:"delete-apikey-modal",loadi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.18	50043	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:37 UTC	2018	OUT	GET /js/chunk-85d922d4.b5344bc9.js HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:38 UTC	2525	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4032 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:39 GMT ETag: "aac84e84c6fbf7028818b994931dda75" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 2ad6789a221bb559c9b8ce946b65a03a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: HYthxuAN9cmHzfrxsYDAt-WK5qFxr5qfsr1sd7DEhl3RGHeB8HQaaQ== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:38 UTC	4032	IN	Data Raw: 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 38 35 64 39 32 32 64 34 22 5d 2c 7b 22 30 39 32 30 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 7d 2c 22 31 63 64 63 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 28 22 64 35 39 33 22 29 7d 2c 22 37 31 31 38 64 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 72 28 65 29 3b 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 65 3d 74 2e 5f 73 65 6c 66 2e 5f 63 3b 72 65 74 75 72 6e 20 65 28 22 56 4d 6f 64 61 6c 22 2c 7b 61 Data Ascii: (window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-85d922d4"],{"0920":function(t,e,a){},"1cdc":function(t,e,a){"use strict";a("d593")},"7118d":function(t,e,a){"use strict";a.r(e);var o=function(){var t=this,e=t._self._c;return e("VModal",{a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.18	50044	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:37 UTC	2018	OUT	GET /js/chunk-b047b602.2652c004.js HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:38 UTC	2525	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6947 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:39 GMT ETag: "9f4604af7cca604e93fb2e50a8ca4d8b" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 55545918b0c914bb8f5282930649df4c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: Njs2LKtLhtiAy9vSOAys4ttCm23dZ0B_kIAvMxoMnFdxBNPAFCKImw== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:38 UTC	6947	IN	Data Raw: 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 62 30 34 37 62 36 30 32 22 5d 2c 7b 22 30 39 32 30 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 7d 2c 22 32 66 31 62 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 2e 72 28 74 29 3b 76 61 72 20 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 65 2e 5f 73 65 6c 66 2e 5f 63 3b 72 65 74 75 72 6e 20 65 2e 77 65 62 68 6f 6f 6b 3f 74 28 22 56 4d 6f 64 61 6c 22 2c 7b 61 74 74 72 73 3a 7b 6e 61 6d 65 3a 22 61 64 64 65 64 69 74 2d 77 65 62 68 6f 6f 6b 2d 6d 6f 64 61 6c 22 2c 6c 6f 61 Data Ascii: (window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-b047b602"],{"0920":function(e,t,o){},"2f1b":function(e,t,o){"use strict";o.r(t);var s=function(){var e=this,t=e._self._c;return e.webhook?t("VModal",{attrs:{name:"addedit-webhook-modal",loa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.18	50045	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:37 UTC	2018	OUT	GET /js/chunk-c63e4446.78767edf.js HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:38 UTC	2525	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6800 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:39 GMT ETag: "afd08d33b6fdb8733f7e2160b3616036" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 7f211c0cbc2233e773b715bc4f4a435c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: TlZnubw8PHBKoSl5qE5nFq2gsqiKB4qPCniiiRzF0NgVBu2_prYFJQ== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:38 UTC	6800	IN	Data Raw: 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 63 36 33 65 34 34 34 36 22 5d 2c 7b 22 30 35 33 35 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 72 28 74 29 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 65 2e 5f 73 65 6c 66 2e 5f 63 3b 72 65 74 75 72 6e 20 74 28 22 56 4d 6f 64 61 6c 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 61 64 64 2d 65 64 69 74 2d 70 72 65 66 69 6c 6c 2d 74 79 70 65 73 2d 6d 6f 64 61 6c 22 2c 61 74 74 72 73 3a 7b 6e 61 6d 65 3a 22 61 64 64 2d 65 64 69 74 2d 70 72 65 66 69 6c 6c 2d 74 Data Ascii: (window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-c63e4446"],{"0535":function(e,t,i){"use strict";i.r(t);var a=function(){var e=this,t=e._self._c;return t("VModal",{staticClass:"add-edit-prefill-types-modal",attrs:{name:"add-edit-prefill-t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.18	50046	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:38 UTC	2018	OUT	GET /js/chunk-c6e20010.3ce3091a.js HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:38 UTC	2526	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 11117 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:39 GMT ETag: "e03d9ad385b71f492549f85cd3d8c362" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 7e2fab32e11703f7384de4d8fef36848.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: QELO2Qo_JYGFXYz19SDZ_sSWQwY-hiWiu43K_T3YuNQp-oCdvWd0Ng== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:38 UTC	11117	IN	Data Raw: 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 63 36 65 32 30 30 31 30 22 5d 2c 7b 22 30 39 32 30 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 7d 2c 22 30 65 61 62 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 28 22 61 39 31 37 22 29 7d 2c 33 35 35 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 65 2e 5f 73 65 6c 66 2e 5f 63 3b 72 65 74 75 72 6e 20 74 28 22 56 4d 6f 64 61 6c 22 2c 7b 61 74 74 72 Data Ascii: (window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-c6e20010"],{"0920":function(e,t,n){},"0eab":function(e,t,n){"use strict";n("a917")},3558:function(e,t,n){"use strict";n.r(t);var a=function(){var e=this,t=e._self._c;return t("VModal",{attr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.18	50047	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:38 UTC	2018	OUT	GET /js/chunk-c9608798.4896751f.js HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:39 UTC	2525	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1234 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:40 GMT ETag: "679a91bdbb25ef3441a0590ea2480734" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 55545918b0c914bb8f5282930649df4c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: rmJ84x148CMnJ5UpMpWwXB0QVBTvYxsI2QoPAce51sMBqEx43yR-kQ== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:39 UTC	1234	IN	Data Raw: 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 63 39 36 30 38 37 39 38 22 5d 2c 7b 22 33 30 30 62 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 73 2e 72 28 74 29 3b 73 28 22 37 66 37 66 22 29 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 65 2e 5f 73 65 6c 66 2e 5f 63 3b 72 65 74 75 72 6e 20 74 28 22 64 69 76 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 64 6f 63 75 6d 65 6e 74 2d 73 65 74 75 70 2d 70 72 6f 67 72 65 73 73 22 7d 2c 65 2e 5f 6c 28 65 2e 69 63 6f 6e 73 2c 28 66 75 6e 63 74 69 6f 6e 28 73 2c 6e 29 7b Data Ascii: (window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-c9608798"],{"300b":function(e,t,s){"use strict";s.r(t);s("7f7f");var n=function(){var e=this,t=e._self._c;return t("div",{staticClass:"document-setup-progress"},e._l(e.icons,(function(s,n){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.18	50048	108.138.85.3	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:38 UTC	2018	OUT	GET /js/chunk-e2d611fa.80afcc3a.js HTTP/1.1 Host: signable.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signable.app/register?country_code=US&_gl=11aykcz3_gcl_auMTY0OTUyMDYxLjE3MDU0NDA3NzU._gaMjEzMTUwODYzOS4xNzA1NDQwNzc2_ga_4XE2VYSQ35*MTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.164952061.1705440775; _uetsid=e3454890b4b611ee9ac2e5aaee35e611; _uetvid=e34582a0b4b611ee98b69b68cdebf4a1; _ga=GA1.1.2131508639.1705440776; _ga_4XE2VYSQ35=GS1.1.1705440775.1.1.1705440808.27.0.0; amplitude_id_f5cf50be9c62aa4c6f961cb41170213bsignable.app=eyJkZXZpY2VJZCI6Ijc2N2FlZTMxLTllNTAtNDJiZC05OTBhLTYyMTYyNzBjNWFlMFIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcwNTQ0MDgwODcyNCwibGFzdEV2ZW50VGltZSI6MTcwNTQ0MDgwODcyNCwiZXZlbnRJZCI6MCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjB9; _hjSessionUser_983768=eyJpZCI6IjgwZDYyMTUxLWE1ZWItNTJiNC05MDY5LWI2ZjliNmJkZGE3NiIsImNyZWF0ZWQiOjE3MDU0NDA4MDk4NTksImV4aXN0aW5nIjpmYWxzZX0=; _hjIncludedInSessionSample_983768=0; _hjSession_983768=eyJpZCI6IjBkMDM5MDFlLTQwNWUtNGM2YS1iNjgzLTIzMzgzMGZjODA3YyIsImMiOjE3MDU0NDA4MDk4NjAsInMiOjAsInIiOjAsInNiIjoxLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __hstc=178014586.58b81774595ab88167e6e3d83f5cd4dc.1705440810544.1705440810544.1705440810544.1; hubspotutk=58b81774595ab88167e6e3d83f5cd4dc; __hssrc=1; __hssc=178014586.1.1705440810544; __stripe_mid=7304e56a-fbd1-41d1-a6a0-67b4cd68952839841f; __stripe_sid=2f2ed3ee-76f7-4d93-8ca6-f75806a9de96b00106
2024-01-16 21:33:39 UTC	2525	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 5617 Connection: close Last-Modified: Mon, 08 Jan 2024 10:09:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Jan 2024 21:33:40 GMT ETag: "630db75a8a48b15da0ffb0d573f47923" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 5d4199dbed922d7847172f5631f32dbc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: vKT5N0RZSlijLhoTUlmE774M1YNMBq0Er2pTtixOLPoYe8XggjhC7Q== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' .api.signableapi.com api.qa.signableapi.com .analytics.google.com .clarity.ms .hotjar.com .hotjar.io .google-analytics.com .analytics.google.com wss://.hotjar.com wss://.hotjar.io adservice.google.com analytics.google.com api.amplitude.com api.hubapi.com api.segment.io api.signableapi.com app.launchdarkly.com bat.bing.com beaconapi.helpscout.net beacon-v2.helpscout.net cdn.segment.com chatapi.helpscout.net clientstream.launchdarkly.com d3hb14vkzrxvla.cloudfront.net events.launchdarkly.com fast.trychameleon.com forms.hubspot.com sentry.io signable.help stats.g.doubleclick.net www.google.com www.google.co.uk www.google-analytics.com www2.profitwell.com .productfruits.com wss://.productfruits.com https://productfruits.help; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com data:; frame-src 'self' accounts.google.com bid.g.doubleclick.net fast.trychameleon.com googleads.g.doubleclick.net js.stripe.com vars.hotjar.com docs.google.com .productfruits.com; img-src * data:; manifest-src 'self'; media-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com bat.bing.com beacon-v2.helpscout.net cdn.amplitude.com cdn.firstpromoter.com cdn.segment.com connect.facebook.net fast.trychameleon.com googleads.g.doubleclick.net h.clarity.ms js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.stripe.com script.hotjar.com static.hotjar.com www.clarity.ms www.dropbox.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com accounts.google.com public.profitwell.com .productfruits.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com .productfruits.com data:; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000
2024-01-16 21:33:39 UTC	5617	IN	Data Raw: 28 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 3d 77 69 6e 64 6f 77 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 75 6e 6b 2d 65 32 64 36 31 31 66 61 22 5d 2c 7b 22 30 39 32 30 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 7d 2c 22 37 62 37 61 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 65 3d 74 2e 5f 73 65 6c 66 2e 5f 63 3b 72 65 74 75 72 6e 20 65 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 3a 74 2e 63 6c 61 73 73 4c 69 73 74 7d 2c 5b 65 28 22 64 69 76 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 6f 2d 6d 6f 64 61 6c 5f 5f 62 6f 78 22 7d 2c 5b 74 Data Ascii: (window["webpackJsonp"]=window["webpackJsonp"]\|\|[]).push([["chunk-e2d611fa"],{"0920":function(t,e,a){},"7b7a":function(t,e,a){"use strict";var s=function(){var t=this,e=t._self._c;return e("div",{class:t.classList},[e("div",{staticClass:"o-modal__box"},[t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.18	50050	142.250.81.238	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:38 UTC	1504	OUT	POST /g/collect?v=2&tid=G-4XE2VYSQ35&gtm=45je41a0v875209417z879689912&_p=1705440806590&gcd=11l1l1l1l1&dma=0&cid=2131508639.1705440776&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&_eu=EA&_s=1&sid=1705440775&sct=1&seg=1&dl=https%3A%2F%2Fsignable.app%2Fregister%3Fcountry_code%3DUS%26_gl%3D1%252a1aykcz3%252a_gcl_au%252aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%252a_ga%252aMjEzMTUwODYzOS4xNzA1NDQwNzc2%252a_ga_4XE2VYSQ35%252aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.&dr=https%3A%2F%2Fwww.signable.us%2F&dt=Register%20-%20Signable&en=page_view&tfd=5293 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://signable.app X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiTocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=BbHGp70uz66EZ7t8DrcLv9xxfcVljF6d19xSvROL7L8s_kahmrUkGGrzfI7BL5pg1a3XJnFf86rmNUVa2u3nk6kmb5VZimgBNCTkKSuYiNnaMk9c0LDBv3iqBpe7RSG5Qs2LVpVz9UzGN0Pyt1JXMcxIRKWB-Rje1Ftofm22_hQ
2024-01-16 21:33:39 UTC	446	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://signable.app Date: Tue, 16 Jan 2024 21:33:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.18	50049	142.250.81.238	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:33:38 UTC	1523	OUT	POST /g/collect?v=2&tid=G-4XE2VYSQ35&gtm=45je41a0v875209417&_p=1705440806590&gcd=11l1l1l1l1&dma=0&cid=2131508639.1705440776&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&_eu=EEA&_s=2&sid=1705440775&sct=1&seg=1&dl=https%3A%2F%2Fsignable.app%2Fregister%3Fcountry_code%3DUS%26_gl%3D1%252a1aykcz3%252a_gcl_au%252aMTY0OTUyMDYxLjE3MDU0NDA3NzU.%252a_ga%252aMjEzMTUwODYzOS4xNzA1NDQwNzc2%252a_ga_4XE2VYSQ35%252aMTcwNTQ0MDc3NS4xLjAuMTcwNTQ0MDc3NS42MC4wLjA.&dr=https%3A%2F%2Fwww.signable.us%2F&dt=Register%20-%20Signable&en=scroll&epn.percent_scrolled=90&_et=5&tfd=10296 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://signable.app X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiTocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=BbHGp70uz66EZ7t8DrcLv9xxfcVljF6d19xSvROL7L8s_kahmrUkGGrzfI7BL5pg1a3XJnFf86rmNUVa2u3nk6kmb5VZimgBNCTkKSuYiNnaMk9c0LDBv3iqBpe7RSG5Qs2LVpVz9UzGN0Pyt1JXMcxIRKWB-Rje1Ftofm22_hQ
2024-01-16 21:33:39 UTC	446	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://signable.app Date: Tue, 16 Jan 2024 21:33:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.18	50053	142.250.65.206	443	4904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-16 21:34:14 UTC	449	OUT	GET /tools/pso/ping?as=chrome&brand=ONGR&pid=&hl=en&events=C1I,C2I,C7I,C1S,C7S&rep=2&rlz=C1:,C2:,C7:&id=00000000000000000000000000000000000000004918395266 HTTP/1.1 Host: clients1.google.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br
2024-01-16 21:34:14 UTC	817	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-e924n1BQFgg30whB82XAug' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/download-dt/1 Content-Security-Policy: script-src 'report-sample' 'nonce-cAZ3KotTX5TLhv5VrgUsgg' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/download-dt/1 Content-Type: text/plain; charset=utf-8 Content-Length: 220 Date: Tue, 16 Jan 2024 21:34:14 GMT Expires: Tue, 16 Jan 2024 21:34:14 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-16 21:34:14 UTC	220	IN	Data Raw: 72 6c 7a 43 31 3a 20 31 43 31 4f 4e 47 52 5f 65 6e 43 41 31 30 39 33 0a 72 6c 7a 43 32 3a 20 31 43 32 4f 4e 47 52 5f 65 6e 43 41 31 30 39 33 0a 72 6c 7a 43 37 3a 20 31 43 37 4f 4e 47 52 5f 65 6e 43 41 31 30 39 33 0a 64 63 63 3a 20 0a 73 65 74 5f 64 63 63 3a 20 43 31 3a 31 43 31 4f 4e 47 52 5f 65 6e 43 41 31 30 39 33 2c 43 32 3a 31 43 32 4f 4e 47 52 5f 65 6e 43 41 31 30 39 33 2c 43 37 3a 31 43 37 4f 4e 47 52 5f 65 6e 43 41 31 30 39 33 0a 65 76 65 6e 74 73 3a 20 43 31 49 2c 43 32 49 2c 43 37 49 2c 43 31 53 2c 43 37 53 0a 73 74 61 74 65 66 75 6c 2d 65 76 65 6e 74 73 3a 20 43 31 49 2c 43 32 49 2c 43 37 49 0a 63 72 63 33 32 3a 20 38 33 34 66 32 62 61 30 0a Data Ascii: rlzC1: 1C1ONGR_enCA1093rlzC2: 1C2ONGR_enCA1093rlzC7: 1C7ONGR_enCA1093dcc: set_dcc: C1:1C1ONGR_enCA1093,C2:1C2ONGR_enCA1093,C7:1C7ONGR_enCA1093events: C1I,C2I,C7I,C1S,C7Sstateful-events: C1I,C2I,C7Icrc32: 834f2ba0

Target ID:	0
Start time:	22:32:43
Start date:	16/01/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://trk.klclick3.com/ls/click?upn=bBwYdIep1AJAhlueKA-2FYA-2FiZB25bBJh74wxcvz7MbGRPW8Sumng75RGT1g5XS8cjbfmY-2B36p0K05EHzrwgenVucrqr4wcbtuSTwUvsCLkp7yNipUK-2B-2FNaDgkKPZvGU-2FeFk2oNL8Cwbk73-2FgVgciDWKs7EH5RHkh4JQ7UzYtmcj0T2v97DZCXopI01GYDKBnCGDu5JGSJeb2B-2BC-2BiwvHpQcN7uwZDtFJLVNCcASk2ytPbSbN6DXY3zGy2QIb4zfVuOOrvJvX4AYss6-2FMGf-2FLtoJ7EVDcQUFASKPodO4SDGaqD6Bmc8P77aL-2FkVxJju4Dgwb1F_PoPSv5Gw7kvm-2FaTPf5isV0F8OzVemx3-2BMda5lKttFwV5hYNASaBIOvhduvo23ZgNxryqZbnFqmZgF2SN317Jd5JsAvLWLiTx01vINjL-2F5lNDaOUHPgjGlCX5KJOQWKvYIEsyEtGsWDE-2FWVvyeRrrk4vCfS2JQMJn5yy-2FO8x3j7XGuUdh-2F6jheAyXeY-2FcbZn5oa9YDlMndYX-2FMs9037sfq0RD4LSVjBHfZJ41mqRz3cMyiWVWiBP-2Fepkutp7Xi6fORoNqe0OXl4XSRoLzjS-2F-2B2BwqUOD8bdrQqvj-2BGxMHjy87MVEE7U79i0WQowFwSCFN
Imagebase:	0x7ff780350000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	22:32:43
Start date:	16/01/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=2072,i,11186840568436156353,11485786068315141287,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff780350000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	22:33:01
Start date:	16/01/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4212 --field-trial-handle=2072,i,11186840568436156353,11485786068315141287,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff780350000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206